aboutsummaryrefslogtreecommitdiff
path: root/volatility/dlldump/module.584.24a0598.4a680000.dll
blob: ff3c9dcd5e956bf0e60f89466fbb5f03dab33959 (plain)
ofshex dumpascii
0000 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 MZ......................@.......
0020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e0 00 00 00 ................................
0040 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f ........!..L.!This.program.canno
0060 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 t.be.run.in.DOS.mode....$.......
0080 21 bb f3 9e 65 da 9d cd 65 da 9d cd 65 da 9d cd 65 da 9c cd 68 da 9d cd a6 d5 c0 cd 60 da 9d cd !...e...e...e...e...h.......`...
00a0 a6 d5 92 cd 66 da 9d cd a6 d5 c3 cd 64 da 9d cd a6 d5 c2 cd 63 da 9d cd a6 d5 c7 cd 64 da 9d cd ....f.......d.......c.......d...
00c0 52 69 63 68 65 da 9d cd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Riche...........................
00e0 50 45 00 00 4c 01 04 00 21 52 02 48 00 00 00 00 00 00 00 00 e0 00 0e 01 0b 01 07 0a 00 0c 00 00 PE..L...!R.H....................
0100 00 08 00 00 00 00 00 00 a3 11 00 00 00 10 00 00 00 20 00 00 00 00 68 4a 00 10 00 00 00 02 00 00 ......................hJ........
0120 05 00 01 00 05 00 01 00 05 00 01 00 00 00 00 00 00 50 00 00 00 04 00 00 2a 0e 01 00 01 00 00 00 .................P......*.......
0140 00 00 04 00 00 30 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 .....0..........................
0160 08 19 00 00 3c 00 00 00 00 30 00 00 f0 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ....<....0......................
0180 00 40 00 00 60 00 00 00 40 10 00 00 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .@..`...@.......................
01a0 00 00 00 00 00 00 00 00 70 10 00 00 40 00 00 00 78 02 00 00 30 00 00 00 00 10 00 00 38 00 00 00 ........p...@...x...0.......8...
01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 .........................text...
01e0 a0 0a 00 00 00 10 00 00 00 0c 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 00 60 ...............................`
0200 2e 64 61 74 61 00 00 00 6c 00 00 00 00 20 00 00 00 02 00 00 00 10 00 00 00 00 00 00 00 00 00 00 .data...l.......................
0220 00 00 00 00 40 00 00 c0 2e 72 73 72 63 00 00 00 f0 03 00 00 00 30 00 00 00 04 00 00 00 12 00 00 ....@....rsrc........0..........
0240 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2e 72 65 6c 6f 63 00 00 94 00 00 00 00 40 00 00 ............@..B.reloc.......@..
0260 00 02 00 00 00 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 42 2c a1 02 48 18 00 00 00 ....................@..B,..H....
0280 e1 a0 02 48 22 00 00 00 00 00 00 00 00 00 00 00 6e 74 64 6c 6c 2e 64 6c 6c 00 43 53 52 53 52 56 ...H"...........ntdll.dll.CSRSRV
02a0 2e 64 6c 6c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .dll............................
02c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
02e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
03a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
03c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
03e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0400 5e 30 b4 75 00 00 00 00 50 de 90 7c a0 d9 90 7c 60 de 90 7c a5 ab 92 7c 60 d9 90 7c 6c eb 92 7c ^0.u....P..|...|`..|...|`..|l..|
0420 80 dc 90 7c 0e 12 90 7c a4 00 91 7c 98 2b 91 7c 16 23 92 7c 00 00 00 00 00 00 00 00 00 00 00 00 ...|...|...|.+.|.#.|............
0440 00 00 00 00 21 52 02 48 00 00 00 00 02 00 00 00 22 00 00 00 b8 10 00 00 b8 04 00 00 00 00 00 00 ....!R.H........"...............
0460 ff ff ff ff ed 11 68 4a f1 11 68 4a 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ......hJ..hJ....H...............
0480 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
04a0 00 00 00 00 00 00 00 00 00 00 00 00 04 20 68 4a e0 10 68 4a 02 00 00 00 52 53 44 53 25 dd 55 88 ..............hJ..hJ....RSDS%.U.
04c0 2a 1e af 4c b7 24 f7 c4 75 79 f1 5c 01 00 00 00 63 73 72 73 73 2e 70 64 62 00 00 00 00 00 00 00 *..L.$..uy.\....csrss.pdb.......
04e0 a4 12 00 00 cc 13 00 00 00 00 00 00 00 8b ff 55 8b ec 51 83 65 fc 00 6a 04 8d 45 fc 50 6a 0c 6a ...............U..Q.e..j..E.Pj.j
0500 ff ff 15 20 10 68 4a c9 c3 cc cc cc cc cc 8b ff 55 8b ec 51 51 56 8b 35 20 10 68 4a 57 6a 04 8d .....hJ.........U..QQV.5..hJWj..
0520 45 fc 50 6a 05 6a ff c7 45 fc 0d 00 00 00 ff d6 33 ff 57 57 6a 10 6a ff ff d6 85 c0 7d 14 8d 45 E.Pj.j..E.......3.WWj.j.....}..E
0540 f8 50 6a 01 57 57 57 68 37 01 00 c0 ff 15 0c 10 68 4a ff 75 0c ff 75 08 e8 97 07 00 00 8b f0 3b .Pj.WWWh7.......hJ.u..u........;
0560 f7 7d 09 56 6a ff ff 15 08 10 68 4a e8 7c ff ff ff 64 a1 18 00 00 00 8b 40 30 39 b8 d4 01 00 00 .}.Vj.....hJ.|...d......@09.....
0580 75 0d 57 57 6a 01 ff 15 1c 10 68 4a 83 c4 0c 56 6a fe ff 15 10 10 68 4a 5f 33 c0 5e c9 c3 cc cc u.WWj.....hJ...Vj.....hJ_3.^....
05a0 cc cc cc 8b ff 55 8b ec e8 76 00 00 00 5d e9 52 05 00 00 cc cc cc cc cc 6a 0c 68 60 10 68 4a e8 .....U...v...].R........j.h`.hJ.
05c0 8c 00 00 00 83 65 fc 00 ba 00 00 fe 7f 8b 02 f7 62 04 0f ac d0 18 89 45 e4 8b 4d 08 8b d1 c1 ea .....e..........b......E..M.....
05e0 08 33 d0 81 e2 ff ff 00 00 89 11 eb 14 33 c0 40 c3 8b 65 e8 64 a1 18 00 00 00 8b 4d 08 33 c1 89 .3...........3.@..e.d......M.3..
0600 01 83 4d fc ff 8b 01 85 c0 74 07 3d 40 bb 00 00 75 06 c7 01 41 bb 00 00 e8 6e 00 00 00 c3 cc cc ..M......t.=@...u...A....n......
0620 cc cc cc a1 04 20 68 4a 85 c0 74 07 3d 40 bb 00 00 75 10 68 04 20 68 4a e8 7b ff ff ff a1 04 20 ......hJ..t.=@...u.h..hJ.{......
0640 68 4a 59 f7 d0 a3 00 20 68 4a c3 cc cc cc cc cc 68 a4 12 68 4a 64 a1 00 00 00 00 50 8b 44 24 10 hJY.....hJ......h..hJd.....P.D$.
0660 89 6c 24 10 8d 6c 24 10 2b e0 53 56 57 8b 45 f8 89 65 e8 50 8b 45 fc c7 45 fc ff ff ff ff 89 45 .l$..l$.+.SVW.E..e.P.E..E......E
0680 f8 8d 45 f0 64 a3 00 00 00 00 c3 8b 4d f0 64 89 0d 00 00 00 00 59 5f 5e 5b c9 51 c3 56 43 32 30 ..E.d.......M.d......Y_^[.Q.VC20
06a0 58 43 30 30 55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45 08 f7 40 04 06 00 00 00 0f 85 ab 00 XC00U.....SVWU..]..E..@.........
06c0 00 00 89 45 f8 8b 45 10 89 45 fc 8d 45 f8 89 43 fc 8b 73 0c 8b 7b 08 53 e8 e9 01 00 00 83 c4 04 ...E..E..E..E..C..s..{.S........
06e0 0b c0 74 7b 83 fe ff 74 7d 8d 0c 76 8b 44 8f 04 0b c0 74 59 56 55 8d 6b 10 33 db 33 c9 33 d2 33 ..t{...t}..v.D....tYVU.k.3.3.3.3
0700 f6 33 ff ff d0 5d 5e 8b 5d 0c 0b c0 74 3f 78 48 8b 7b 08 53 e8 93 00 00 00 83 c4 04 8d 6b 10 56 .3...]^.]...t?xH.{.S.........k.V
0720 53 e8 e1 00 00 00 83 c4 08 8d 0c 76 6a 01 8b 44 8f 08 e8 6c 01 00 00 8b 04 8f 89 43 0c 8b 44 8f S..........vj..D...l.......C..D.
0740 08 33 db 33 c9 33 d2 33 f6 33 ff ff d0 8b 7b 08 8d 0c 76 8b 34 8f eb 8c b8 00 00 00 00 eb 23 8b .3.3.3.3.3....{...v.4.........#.
0760 45 08 83 48 04 08 b8 01 00 00 00 eb 15 55 8d 6b 10 6a ff 53 e8 8e 00 00 00 83 c4 08 5d b8 01 00 E..H.........U.k.j.S........]...
0780 00 00 5d 5f 5e 5b 8b e5 5d c3 55 8b 4c 24 08 8b 29 8b 41 1c 50 8b 41 18 50 e8 69 00 00 00 83 c4 ..]_^[..].U.L$..).A.P.A.P.i.....
07a0 08 5d c2 04 00 cc cc cc cc cc cc cc 55 8b ec 53 56 57 55 6a 00 6a 00 68 c4 13 68 4a ff 75 08 e8 .]..........U..SVWUj.j.h..hJ.u..
07c0 2a 03 00 00 5d 5f 5e 5b 8b e5 5d c3 8b 4c 24 04 f7 41 04 06 00 00 00 b8 01 00 00 00 74 28 8b 44 *...]_^[..]..L$..A..........t(.D
07e0 24 14 55 8b 68 10 8b 50 28 52 8b 50 24 52 e8 14 00 00 00 83 c4 08 5d 8b 44 24 08 8b 54 24 10 89 $.U.h..P(R.P$R........].D$..T$..
0800 02 b8 03 00 00 00 c3 53 56 57 8b 44 24 10 55 50 6a fe 68 cc 13 68 4a 64 ff 35 00 00 00 00 64 89 .......SVW.D$.UPj.h..hJd.5....d.
0820 25 00 00 00 00 8b 44 24 24 8b 58 08 8b 70 0c 83 fe ff 74 35 83 7c 24 28 ff 74 06 3b 74 24 28 76 %.....D$$.X..p....t5.|$(.t.;t$(v
0840 28 8d 34 76 8b 0c b3 89 4c 24 08 89 48 0c 83 7c b3 04 00 75 12 68 01 01 00 00 8b 44 b3 08 e8 40 (.4v....L$..H..|...u.h.....D...@
0860 00 00 00 ff 54 b3 08 eb bc 64 8f 05 00 00 00 00 83 c4 10 5f 5e 5b c3 33 c0 64 8b 0d 00 00 00 00 ....T....d........._^[.3.d......
0880 81 79 04 cc 13 68 4a 75 10 8b 51 0c 8b 52 0c 39 51 08 75 05 b8 01 00 00 00 c3 53 51 bb 08 20 68 .y...hJu..Q..R.9Q.u.......SQ...h
08a0 4a eb 0a 53 51 bb 08 20 68 4a 8b 4d 08 89 4b 08 89 43 04 89 6b 0c 55 51 50 58 59 5d 59 5b c2 04 J..SQ...hJ.M..K..C..k.UQPXY]Y[..
08c0 00 cc cc cc cc cc 8b ff 55 8b ec 83 ec 20 53 56 8b 75 08 8b 5e 08 f6 c3 03 75 1c 64 a1 04 00 00 ........U.....SV.u..^....u.d....
08e0 00 89 45 08 64 a1 08 00 00 00 89 45 fc 3b 5d fc 72 0c 3b 5d 08 73 07 33 c0 e9 e6 01 00 00 57 8b ..E.d......E.;].r.;].s.3......W.
0900 7e 0c 83 ff ff 75 08 33 c0 40 e9 d4 01 00 00 33 d2 89 55 08 8b c3 8b 08 83 f9 ff 74 04 3b ca 73 ~....u.3.@.....3..U........t.;.s
0920 64 83 78 04 00 74 03 ff 45 08 42 83 c0 0c 3b d7 76 e4 83 7d 08 00 74 0c 8b 46 f8 3b 45 fc 72 45 d.x..t..E.B...;.v..}..t..F.;E.rE
0940 3b c6 73 41 8b 0d 20 20 68 4a 8b f3 81 e6 00 f0 ff ff 33 c0 85 c9 7e 0e 39 34 85 28 20 68 4a 74 ;.sA....hJ........3...~.94.(.hJt
0960 2b 40 3b c1 7c f2 8d 45 08 50 6a 1c 8d 45 e0 50 6a 00 53 83 cf ff 57 e8 7e 01 00 00 85 c0 7c 7c +@;.|..E.Pj..E.Pj.S...W.~.....||
0980 8b 45 08 eb 79 33 c0 e9 57 01 00 00 85 c0 0f 8e 73 ff ff ff 33 d2 bb 68 20 68 4a 42 8b fb 87 17 .E..y3..W.......s...3..h.hJB....
09a0 85 d2 0f 85 5f ff ff ff 39 34 85 28 20 68 4a 74 2a 8d 41 ff 85 c0 7c 10 39 34 85 28 20 68 4a 74 ...._...94.(.hJt*.A...|.94.(.hJt
09c0 03 48 79 f4 85 c0 7d 11 83 f9 10 7d 07 41 89 0d 20 20 68 4a 8d 41 ff eb 02 74 18 33 d2 85 c0 7c .Hy...}....}.A....hJ.A...t.3...|
09e0 12 8d 0c 95 28 20 68 4a 8b 39 42 3b d0 89 31 8b f7 7e ee 33 c0 87 03 e9 0b ff ff ff 33 c0 85 c0 ....(.hJ.9B;..1..~.3........3...
0a00 0f 84 db 00 00 00 81 7d f8 00 00 00 01 0f 85 ce 00 00 00 f6 45 f4 cc 74 5a 8b 4d e4 66 81 39 4d .......}............E..tZ.M.f.9M
0a20 5a 0f 85 ba 00 00 00 8b 41 3c 03 c1 81 38 50 45 00 00 0f 85 a9 00 00 00 66 81 78 18 0b 01 0f 85 Z.......A<...8PE........f.x.....
0a40 9d 00 00 00 2b d9 66 83 78 06 00 0f b7 48 14 8d 4c 01 18 0f 86 88 00 00 00 8b 41 0c 3b d8 72 13 ....+.f.x....H..L.........A.;.r.
0a60 8b 51 08 03 d0 3b da 73 0a f6 41 27 80 0f 85 12 ff ff ff 33 c0 40 8b c8 ba 68 20 68 4a 87 0a 85 .Q...;.s..A'.......3.@...h.hJ...
0a80 c9 75 60 8b 0d 20 20 68 4a 85 c9 8b d1 7e 13 8d 04 8d 24 20 68 4a 39 30 74 08 4a 83 e8 04 85 d2 .u`....hJ....~....$.hJ90t.J.....
0aa0 7f f4 85 d2 75 2d 6a 0f 5b 3b cb 7f 02 8b d9 33 d2 85 db 7c 12 8d 04 95 28 20 68 4a 8b 38 42 3b ....u-j.[;.....3...|....(.hJ.8B;
0ac0 d3 89 30 8b f7 7e ee 83 f9 10 7d 07 41 89 0d 20 20 68 4a 33 c0 b9 68 20 68 4a 87 01 e9 26 fe ff ..0..~....}.A....hJ3..h.hJ...&..
0ae0 ff 8b c7 5f 5e 5b c9 c3 cc cc cc cc cc cc ff 25 14 10 68 4a cc cc cc cc cc cc ff 25 18 10 68 4a ..._^[.........%..hJ.......%..hJ
0b00 cc cc cc cc cc 8b ff 55 8b ec 83 ec 2c 8b 45 08 53 56 ff 70 10 33 db 89 5d fc ff 15 30 10 68 4a .......U....,.E.SV.p.3..]...0.hJ
0b20 8b f0 33 c9 41 3b f3 8d 45 fc 89 75 dc 89 5d ec 89 5d e8 89 45 e0 89 45 e4 89 4d f0 89 4d f4 89 ..3.A;..E..u..]..]..E..E..M..M..
0b40 5d f8 0f 84 7e 01 00 00 8d 46 40 39 58 04 74 05 66 39 18 75 03 8d 46 38 57 51 50 8d 45 d4 50 ff ]...~....F@9X.t.f9.u..F8WQP.E.P.
0b60 15 2c 10 68 4a 8b 7d d8 3b fb 8b c7 74 2a 8a 0f 3a cb 74 24 80 f9 20 7f 07 40 8a 08 3a cb 75 f4 .,.hJ.}.;...t*..:.t$.....@..:.u.
0b80 8a 08 3a cb 74 12 ff 45 f4 80 f9 20 7e 06 40 80 38 20 7f fa 8a 08 eb d8 8b 4d f4 8b 46 48 41 3b ..:.t..E....~.@.8........M..FHA;
0ba0 c3 74 14 eb 0d ff 45 f0 66 8b 10 40 40 66 85 d2 75 f6 66 39 18 75 ee 8b 55 f0 8b 46 0c 42 89 45 .t....E.f..@@f..u.f9.u..U..F.B.E
0bc0 ec 64 a1 18 00 00 00 89 98 f4 0b 00 00 03 ca 8d 04 8d 10 00 00 00 50 8b 45 08 53 ff 70 18 ff 15 .d....................P.E.S.p...
0be0 28 10 68 4a 8b f8 3b fb 75 08 64 a1 18 00 00 00 eb 54 8d 46 40 89 1f 39 58 04 89 7d e0 74 05 66 (.hJ..;.u.d......T.F@..9X..}.t.f
0c00 39 18 75 03 8d 46 38 6a 01 50 8d 45 d4 50 ff 15 2c 10 68 4a 8b 75 d8 3b f3 0f b7 4d d4 74 6d 64 9.u..F8j.P.E.P..,.hJ.u.;...M.tmd
0c20 a1 18 00 00 00 83 c1 02 51 89 98 f4 0b 00 00 8b 45 08 53 ff 70 18 ff 15 28 10 68 4a 3b c3 75 48 ........Q.......E.S.p...(.hJ;.uH
0c40 64 a1 18 00 00 00 8b 80 f4 0b 00 00 3b c3 89 45 f8 7c 63 c7 45 f8 17 00 00 c0 eb 5a 3a cb 74 2c d...........;..E.|c.E......Z:.t,
0c60 80 f9 20 7f 07 46 8a 0e 3a cb 75 f4 38 1e 74 1c 89 07 83 c7 04 ff 45 e8 eb 04 88 08 40 46 8a 0e .....F..:.u.8.t.......E.....@F..
0c80 80 f9 20 7f f5 88 18 40 8a 0e eb d0 8b 45 dc 89 1f 8b 40 48 83 c7 04 3b c3 89 7d e4 74 16 eb 0f .......@.....E....@H...;..}.t...
0ca0 89 07 83 c7 04 66 8b 08 40 40 66 85 c9 75 f6 66 39 18 75 ec 89 1f 39 5d ec 5f 74 05 e8 3f 00 00 .....f..@@f..u.f9.u...9]._t..?..
0cc0 00 39 5d f8 7c 17 ff 75 ec ff 75 e4 ff 75 e0 ff 75 e8 e8 37 f8 ff ff 83 c4 10 89 45 f8 ff 75 f8 .9].|..u..u..u..u..7.......E..u.
0ce0 6a ff ff 15 08 10 68 4a 5e 5b c9 c2 04 00 cc cc cc cc cc cc ff 25 00 10 68 4a cc cc cc cc cc cc j.....hJ^[...........%..hJ......
0d00 ff 25 24 10 68 4a cc cc 4c 19 00 00 ff ff ff ff ff ff ff ff ee 19 00 00 08 10 00 00 44 19 00 00 .%$.hJ..L...................D...
0d20 ff ff ff ff ff ff ff ff 36 1a 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ........6.......................
0d40 00 00 00 00 1c 1a 00 00 00 00 00 00 c4 19 00 00 da 19 00 00 96 19 00 00 f8 19 00 00 04 1a 00 00 ................................
0d60 aa 19 00 00 7c 19 00 00 42 1a 00 00 52 1a 00 00 64 1a 00 00 84 1a 00 00 00 00 00 00 37 01 4e 74 ....|...B...R...d...........7.Nt
0d80 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 00 55 01 4e 74 54 65 72 6d 69 6e SetInformationProcess.U.NtTermin
0da0 61 74 65 54 68 72 65 61 64 00 1c 03 52 74 6c 53 65 74 50 72 6f 63 65 73 73 49 73 43 72 69 74 69 ateThread...RtlSetProcessIsCriti
0dc0 63 61 6c 00 54 01 4e 74 54 65 72 6d 69 6e 61 74 65 50 72 6f 63 65 73 73 00 00 08 01 4e 74 52 61 cal.T.NtTerminateProcess....NtRa
0de0 69 73 65 48 61 72 64 45 72 72 6f 72 00 00 6e 74 64 6c 6c 2e 64 6c 6c 00 52 03 52 74 6c 55 6e 77 iseHardError..ntdll.dll.R.RtlUnw
0e00 69 6e 64 00 04 01 4e 74 51 75 65 72 79 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 00 00 19 00 43 73 ind...NtQueryVirtualMemory....Cs
0e20 72 53 65 72 76 65 72 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 00 43 53 52 53 52 56 2e 64 6c 6c rServerInitialization.CSRSRV.dll
0e40 00 00 0f 00 44 62 67 42 72 65 61 6b 50 6f 69 6e 74 00 8e 01 52 74 6c 41 6c 6c 6f 63 61 74 65 48 ....DbgBreakPoint...RtlAllocateH
0e60 65 61 70 00 45 03 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 74 72 69 eap.E.RtlUnicodeStringToAnsiStri
0e80 6e 67 00 00 cb 02 52 74 6c 4e 6f 72 6d 61 6c 69 7a 65 50 72 6f 63 65 73 73 50 61 72 61 6d 73 00 ng....RtlNormalizeProcessParams.
0ea0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0ec0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0ee0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0f00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0f20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0f40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0f60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0f80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0fa0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0fc0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
0fe0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1000 4e b6 ff ff b1 49 00 00 20 05 93 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 N....I..........................
1020 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
10a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
10c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
10e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1100 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1120 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1140 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
11a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
11c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
11e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1240 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1260 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1280 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
12a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
12c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
12e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
13a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
13c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
13e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1420 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1440 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1460 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1480 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
14a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
14c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
14e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1520 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1540 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1560 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1580 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
15a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
15c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
15e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1600 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1620 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1640 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1660 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1680 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
16a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
16c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
16e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1700 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1720 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1740 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1760 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
1780 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
17a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
17c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
17e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................
generated by cgit v1.2.3 (git 2.25.1) at 2025-10-28 19:11:53 +0000