============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 56 68 00 00 10 10 68 B8 31 01 00 FF 15 BC 04 01 00 68 2C 32 01 00 8B 35 A4 06 01 00 FF D6 68 20 Vh..►►h╕1☺. §╝♦☺.h,2☺.ï5ñ♠☺. ╓h 00000020 32 01 00 FF D6 68 C4 2F 01 00 FF D6 68 24 32 01 00 FF D6 C7 05 EC 6E 04 00 01 00 00 00 C7 05 00 2☺. ╓h─/☺. ╓h$2☺. ╓╟♣∞n♦.☺...╟♣. 00000040 6F 04 00 00 C0 69 2A C7 05 04 6F 04 00 C9 00 00 00 B8 90 6E 04 00 5E A3 94 6E 04 00 A3 90 6E 04 o♦..└i*╟♣♦o♦.╔...╕Én♦.^úön♦.úÉn♦ 00000060 00 B8 F8 6E 04 00 A3 FC 6E 04 00 A3 F8 6E 04 00 C3 CC 53 56 57 BB 18 30 01 00 BF 05 00 00 00 8B .╕°n♦.úⁿn♦.ú°n♦.├╠SVW╗↑0☺.┐♣...ï 00000080 35 5C 04 01 00 8D 43 0C 6A 01 6A 00 83 C3 2C 50 FF D6 4F 75 F0 C7 05 34 30 01 00 20 F5 03 00 C7 5\♦☺.ìC♀j☺j.â├,P ╓Ou≡╟♣40☺. ⌡♥.╟ 000000A0 05 60 30 01 00 B4 42 04 00 C7 05 68 30 01 00 A8 65 04 00 C7 05 8C 30 01 00 40 24 04 00 C7 05 B8 ♣`0☺.┤B♦.╟♣h0☺.¿e♦.╟♣î0☺.@$♦.╟♣╕ 000000C0 30 01 00 B4 58 04 00 33 C0 68 D8 2F 01 00 A3 3C 30 01 00 A3 94 30 01 00 A3 C0 30 01 00 A3 EC 30 0☺.┤X♦.3└h╪/☺.ú<0☺.úö0☺.ú└0☺.ú∞0 000000E0 01 00 C7 05 E4 30 01 00 04 51 04 00 FF 15 F0 03 01 00 C6 05 D0 2F 01 00 01 5F 5E 5B C3 CC 56 B8 ☺.╟♣Σ0☺.♦Q♦. §≡♥☺.╞♣╨/☺.☺_^[├╠V╕ 00000100 98 6E 04 00 68 00 31 01 00 8B 35 F0 03 01 00 A3 9C 6E 04 00 A3 98 6E 04 00 FF D6 68 38 31 01 00 ÿn♦.h.1☺.ï5≡♥☺.ú£n♦.úÿn♦. ╓h81☺. 00000120 FF D6 68 F8 30 01 00 8B 35 A4 06 01 00 FF D6 68 FC 30 01 00 FF D6 5E C3 53 56 57 8B 35 A4 06 01 ╓h°0☺.ï5ñ♠☺. ╓hⁿ0☺. ╓^├SVWï5ñ♠☺ 00000140 00 68 14 32 01 00 FF D6 A1 68 6E 04 00 C7 40 38 C0 7A 01 00 A1 68 6E 04 00 C7 40 40 BE 50 01 00 .h¶2☺. ╓íhn♦.╟@8└z☺.íhn♦.╟@@╛P☺. 00000160 A1 68 6E 04 00 C7 40 44 84 99 02 00 A1 68 6E 04 00 C7 40 48 82 43 03 00 A1 68 6E 04 00 C7 40 4C íhn♦.╟@DäÖ☻.íhn♦.╟@HéC♥.íhn♦.╟@L 00000180 A2 0C 02 00 A1 68 6E 04 00 C7 40 50 88 10 02 00 A1 68 6E 04 00 C7 40 54 C4 F3 01 00 A1 68 6E 04 ó♀☻.íhn♦.╟@Pê►☻.íhn♦.╟@T─≤☺.íhn♦ 000001A0 00 C7 40 58 94 FA 01 00 A1 68 6E 04 00 C7 40 5C 64 46 01 00 A1 68 6E 04 00 C7 40 60 F0 35 03 00 .╟@Xö·☺.íhn♦.╟@\dF☺.íhn♦.╟@`≡5♥. 000001C0 A1 68 6E 04 00 C7 40 68 F8 B8 01 00 A1 68 6E 04 00 C7 40 6C CA 30 02 00 A1 68 6E 04 00 C7 40 70 íhn♦.╟@h°╕☺.íhn♦.╟@l╩0☻.íhn♦.╟@p 000001E0 CE 52 02 00 A1 68 6E 04 00 C7 40 7C 58 57 02 00 A1 68 6E 04 00 C7 80 80 00 00 00 16 4D 01 00 A1 ╬R☻.íhn♦.╟@|XW☻.íhn♦.╟ÇÇ...▬M☺.í 00000200 68 6E 04 00 C7 80 88 00 00 00 24 BE 02 00 A1 68 6E 04 00 8B 0D 78 05 01 00 C7 80 8C 00 00 00 1C hn♦.╟Çê...$╛☻.íhn♦.ï♪x♣☺.╟Çî...∟ 00000220 BC 02 00 A1 68 6E 04 00 8B 15 74 05 01 00 C7 40 28 30 6E 04 00 89 0D 38 6E 04 00 89 15 3C 6E 04 ╝☻.íhn♦.ï§t♣☺.╟@(0n♦.ë♪8n♦.ë§<n♦ 00000240 00 C7 05 30 6E 04 00 38 00 00 00 C7 05 34 6E 04 00 9A 06 02 00 C7 05 40 6E 04 00 A8 13 02 00 C7 .╟♣0n♦.8...╟♣4n♦.Ü♠☻.╟♣@n♦.¿‼☻.╟ 00000260 05 44 6E 04 00 78 16 02 00 33 FF A1 48 33 01 00 89 3D 48 6E 04 00 89 3D 4C 6E 04 00 89 3D 50 6E ♣Dn♦.x▬☻.3 íH3☺.ë=Hn♦.ë=Ln♦.ë=Pn 00000280 04 00 89 3D 54 6E 04 00 89 3D 58 6E 04 00 C7 80 F8 00 00 00 4E 49 01 00 A1 48 33 01 00 C7 80 FC ♦.ë=Tn♦.ë=Xn♦.╟ǰ...NI☺.íH3☺.╟Çⁿ 000002A0 00 00 00 7A 49 01 00 A1 48 33 01 00 C7 80 00 01 00 00 94 49 01 00 A1 48 33 01 00 C7 80 04 01 00 ...zI☺.íH3☺.╟Ç.☺..öI☺.íH3☺.╟Ç♦☺. 000002C0 00 A6 49 01 00 A1 48 33 01 00 05 B8 00 00 00 50 68 3A 57 02 00 68 58 02 00 00 6A 01 50 E8 32 CC .ªI☺.íH3☺.♣╕...Ph:W☻.hX☻..j☺PΦ2╠ 000002E0 FE FF 8B D8 85 DB 7D 17 57 57 53 68 BB 0B 00 80 68 02 00 04 C0 57 E8 63 B9 FF FF 8B C3 EB 1D 68 ■ ï╪à█}↨WWSh╗♂.Çh☻.♦└WΦc╣ ï├δ↔h 00000300 3C 34 01 00 FF D6 B8 40 34 01 00 A3 44 34 01 00 A3 40 34 01 00 E8 96 9F FC FF 33 C0 5F 5E 5B C3 <4☺. ╓╕@4☺.úD4☺.ú@4☺.Φûƒⁿ 3└_^[├ 00000320 A1 CC 6E 04 00 6A FF 99 C7 05 E8 33 01 00 00 D3 CE FE C7 05 EC 33 01 00 FF FF FF FF 68 80 69 67 í╠n♦.j Ö╟♣Φ3☺..╙╬■╟♣∞3☺. hÇig 00000340 FF 52 50 E8 B4 B7 FC FF 6A FF A3 F0 33 01 00 A1 D0 6E 04 00 68 80 69 67 FF 89 15 F4 33 01 00 99 RPΦ┤╖ⁿ j ú≡3☺.í╨n♦.hÇig ë§⌠3☺.Ö 00000360 52 50 E8 95 B7 FC FF 68 00 34 01 00 A3 F8 33 01 00 89 15 FC 33 01 00 FF 15 F0 03 01 00 C7 05 48 RPΦò╖ⁿ h.4☺.ú°3☺.ë§ⁿ3☺. §≡♥☺.╟♣H 00000380 6F 04 00 00 00 00 00 B8 38 6F 04 00 68 28 32 01 00 A3 3C 6F 04 00 A3 38 6F 04 00 B8 40 6F 04 00 o♦.....╕8o♦.h(2☺.ú<o♦.ú8o♦.╕@o♦. 000003A0 A3 44 6F 04 00 A3 40 6F 04 00 FF 15 A4 06 01 00 C3 CC 56 68 4C 34 01 00 BE 98 19 01 00 FF 15 A4 úDo♦.ú@o♦. §ñ♠☺.├╠VhL4☺.╛ÿ↓☺. §ñ 000003C0 06 01 00 BA 58 34 01 00 8D 42 FC 8D 4A F8 89 02 83 C2 1C 89 00 81 FA AC 34 01 00 8D 42 E8 89 72 ♠☺.║X4☺.ìBⁿìJ°ë☻â┬∟ë.ü·¼4☺.ìBΦër 000003E0 F0 89 4A F4 C7 00 00 00 00 00 89 01 72 DA 5E C3 5C 00 44 00 65 00 76 00 69 00 63 00 65 00 5C 00 ≡ëJ⌠╟.....ë☺r┌^├\.D.e.v.i.c.e.\. 00000400 4C 00 61 00 6E 00 6D 00 61 00 6E 00 44 00 61 00 74 00 61 00 67 00 72 00 61 00 6D 00 52 00 65 00 L.a.n.m.a.n.D.a.t.a.g.r.a.m.R.e. 00000420 63 00 65 00 69 00 76 00 65 00 72 00 00 00 00 00 5C 00 4C 00 61 00 6E 00 6D 00 61 00 6E 00 53 00 c.e.i.v.e.r.....\.L.a.n.m.a.n.S. 00000440 65 00 72 00 76 00 65 00 72 00 41 00 6E 00 6E 00 6F 00 75 00 6E 00 63 00 65 00 45 00 76 00 65 00 e.r.v.e.r.A.n.n.o.u.n.c.e.E.v.e. 00000460 6E 00 74 00 00 00 55 8B EC 83 EC 24 56 57 68 50 77 04 00 8B 35 4C 05 01 00 68 48 7F 04 00 FF D6 n.t...Uï∞â∞$VWhPw♦.ï5L♣☺.hH⌂♦. ╓ 00000480 8D 45 FC 8B 7D 08 50 6A 00 6A 00 6A 13 68 48 7F 04 00 6A 00 57 FF 15 48 05 01 00 68 B0 34 01 00 ìEⁿï}◘Pj.j.j‼hH⌂♦.j.W §H♣☺.h░4☺. 000004A0 FF 15 F0 03 01 00 FF 75 0C 8B 45 FC A3 78 70 04 00 E8 C8 00 00 00 8A 0D 40 7F 04 00 8B 55 FC 88 §≡♥☺. u♀ïEⁿúxp♦.Φ╚...è♪@⌂♦.ïUⁿê 000004C0 4A 30 E8 0F 03 00 00 E8 70 02 00 00 E8 69 02 00 00 E8 E4 02 00 00 E8 BF 02 00 00 57 E8 8F 02 00 J0Φ☼♥..Φp☻..Φi☻..ΦΣ☻..Φ┐☻..WΦÅ☻. 000004E0 00 85 C0 7C 7B E8 9E 02 00 00 85 C0 7C 72 33 FF E8 91 02 00 00 57 A1 78 70 04 00 68 54 1D 01 00 .à└|{Φ₧☻..à└|r3 Φæ☻..Wíxp♦.hT↔☺. 00000500 50 FF 15 D8 05 01 00 68 90 77 04 00 8D 4D F4 51 FF D6 8D 4D F4 89 7D E0 89 4D E4 89 7D EC 57 8D P §╪♣☺.hÉw♦.ìM⌠Q ╓ìM⌠ë}αëMΣë}∞Wì 00000520 55 DC 6A 01 89 7D F0 C7 45 DC 18 00 00 00 C7 45 E8 80 00 00 00 52 68 03 00 10 00 68 A4 34 01 00 U▄j☺ë}≡╟E▄↑...╟EΦÇ...Rh♥.►.hñ4☺. 00000540 FF 15 B4 06 01 00 85 C0 7C 16 57 A1 A4 34 01 00 68 A8 34 01 00 57 57 6A 02 50 FF 15 2C 06 01 00 §┤♠☺.à└|▬Wíñ4☺.h¿4☺.WWj☻P §,♠☺. 00000560 5F 5E 8B E5 5D C2 08 00 50 00 61 00 72 00 61 00 6D 00 65 00 74 00 65 00 72 00 73 00 00 00 55 8B _^ïσ]┬◘.P.a.r.a.m.e.t.e.r.s...Uï 00000580 EC 81 EC 2C 04 00 00 C7 45 D4 18 00 00 00 53 8B 45 08 56 89 45 DC 57 33 F6 8D 4D D4 89 75 D8 51 ∞ü∞,♦..╟E╘↑...SïE◘VëE▄W3÷ìM╘ëu╪Q 000005A0 8D 55 F8 68 19 00 02 00 8B 3D 14 04 01 00 52 89 75 E4 C7 45 E0 40 00 00 00 89 75 E8 FF D7 85 C0 ìU°h↓.☻.ï=¶♦☺.RëuΣ╟Eα@...ëuΦ ╫à└ 000005C0 7D 16 56 56 56 50 68 5D 1F 00 40 E8 DE 56 FF FF 83 C4 14 E9 59 01 00 00 68 C8 78 04 00 8D 45 EC }▬VVVPh]▼.@Φ▐V â─¶ΘY☺..h╚x♦.ìE∞ 000005E0 50 FF 15 4C 05 01 00 8B 45 F8 8D 4D EC 33 F6 89 45 D8 89 4D DC 89 75 E4 8D 45 D4 8D 4D FC 50 89 P §L♣☺.ïE°ìM∞3÷ëE╪ëM▄ëuΣìE╘ìMⁿPë 00000600 75 E8 C7 45 D4 18 00 00 00 C7 45 E0 40 00 00 00 68 19 00 02 00 51 FF D7 85 C0 7D 1F 56 56 56 50 uΦ╟E╘↑...╟Eα@...h↓.☻.Q ╫à└}▼VVVP 00000620 68 5D 1F 00 40 E8 84 56 FF FF 83 C4 14 FF 75 F8 FF 15 04 04 01 00 E9 F6 00 00 00 83 3D C0 7E 04 h]▼.@ΦäV â─¶ u° §♦♦☺.Θ÷...â=└~♦ 00000640 00 00 BB C0 7E 04 00 0F 84 D4 00 00 00 FF 33 8D 4D EC 51 FF 15 4C 05 01 00 8D 4D F4 8D 95 D4 FB ..╗└~♦.☼ä╘... 3ìM∞Q §L♣☺.ìM⌠ìò╘√ 00000660 FF FF 51 8D 45 EC 68 00 04 00 00 52 6A 01 50 FF 75 FC FF 15 10 04 01 00 85 C0 0F 8C 95 00 00 00 QìE∞h.♦..Rj☺P uⁿ §►♦☺.à└☼îò... 00000680 83 BD E0 FB FF FF 00 74 68 8B 43 08 83 F8 FF 75 2B 83 BD D8 FB FF FF 04 75 57 83 BD E0 FB FF FF â╜α√ .thïC◘â° u+â╜╪√ ♦uWâ╜α√ 000006A0 04 75 4E 8B 85 DC FB FF FF 83 BC 05 D4 FB FF FF 01 1A C9 8B 43 04 FE C1 88 08 EB 59 39 85 D8 FB ♦uNïà▄√ â╝♣╘√ ☺→╔ïC♦■┴ê◘δY9à╪√ 000006C0 FF FF 75 2D 8B 85 E0 FB FF FF 39 43 0C 75 22 8B C8 8B D0 C1 E9 02 8B 85 DC FB FF FF 8B 7B 04 8D u-ïàα√ 9C♀u"ï╚ï╨┴Θ☻ïà▄√ ï{♦ì 000006E0 B4 05 D4 FB FF FF F3 A5 8B CA 83 E1 03 F3 A4 EB 24 8B 33 6A 00 56 E8 A5 9F FC FF 66 03 C0 83 C4 ┤♣╘√ ≤Ñï╩âß♥≤ñδ$ï3j.VΦуⁿ f♥└â─ 00000700 04 50 56 68 0D 00 00 C0 68 5D 1F 00 40 E8 9C 55 FF FF 83 C4 14 83 C3 10 83 3B 00 0F 85 2C FF FF ♦PVh♪..└h]▼.@Φ£U â─¶â├►â;.☼à, 00000720 FF FF 75 FC 8B 35 04 04 01 00 FF D6 FF 75 F8 FF D6 5F 5E 5B 8B E5 5D C2 04 00 C3 CC 68 80 35 01 uⁿï5♦♦☺. ╓ u° ╓_^[ïσ]┬♦.├╠hÇ5☺ 00000740 00 FF 15 A4 06 01 00 B8 78 35 01 00 68 A0 35 01 00 A3 7C 35 01 00 A3 78 35 01 00 B8 90 35 01 00 . §ñ♠☺.╕x5☺.há5☺.ú|5☺.úx5☺.╕É5☺. 00000760 A3 94 35 01 00 A3 90 35 01 00 E8 F7 35 FF FF C3 E8 A1 35 FF FF 68 BC 35 01 00 FF 15 A4 06 01 00 úö5☺.úÉ5☺.Φ≈5 ├Φí5 h╝5☺. §ñ♠☺. 00000780 33 C0 C2 04 00 CC C3 CC B8 38 70 04 00 A3 3C 70 04 00 A3 38 70 04 00 33 C0 C3 C7 05 C8 35 01 00 3└┬♦.╠├╠╕8p♦.ú<p♦.ú8p♦.3└├╟♣╚5☺. 000007A0 80 69 67 FF C7 05 CC 35 01 00 FF FF FF FF 68 D0 35 01 00 FF 15 A4 06 01 00 C3 68 E8 35 01 00 FF Çig ╟♣╠5☺. h╨5☺. §ñ♠☺.├hΦ5☺. 000007C0 15 A4 06 01 00 B8 80 36 01 00 A3 84 36 01 00 A3 80 36 01 00 C3 CC B8 40 70 04 00 68 F0 35 01 00 §ñ♠☺.╕Ç6☺.úä6☺.úÇ6☺.├╠╕@p♦.h≡5☺. 000007E0 A3 44 70 04 00 A3 40 70 04 00 FF 15 F0 03 01 00 68 08 35 01 00 FF 15 A4 06 01 00 C3 CC CC CC CC úDp♦.ú@p♦. §≡♥☺.h◘5☺. §ñ♠☺.├╠╠╠╠ 00000800 55 00 73 00 65 00 57 00 72 00 69 00 74 00 65 00 42 00 65 00 68 00 69 00 6E 00 64 00 00 00 00 00 U.s.e.W.r.i.t.e.B.e.h.i.n.d..... 00000820 55 00 73 00 65 00 41 00 73 00 79 00 6E 00 63 00 57 00 72 00 69 00 74 00 65 00 42 00 65 00 68 00 U.s.e.A.s.y.n.c.W.r.i.t.e.B.e.h. 00000840 69 00 6E 00 64 00 00 00 4C 00 6F 00 77 00 65 00 72 00 53 00 65 00 61 00 72 00 63 00 68 00 54 00 i.n.d...L.o.w.e.r.S.e.a.r.c.h.T. 00000860 68 00 72 00 65 00 73 00 68 00 6F 00 6C 00 64 00 00 00 00 00 4C 00 6F 00 77 00 65 00 72 00 53 00 h.r.e.s.h.o.l.d.....L.o.w.e.r.S. 00000880 65 00 61 00 72 00 63 00 68 00 42 00 75 00 66 00 66 00 65 00 72 00 53 00 69 00 7A 00 65 00 00 00 e.a.r.c.h.B.u.f.f.e.r.S.i.z.e... 000008A0 55 00 70 00 70 00 65 00 72 00 53 00 65 00 61 00 72 00 63 00 68 00 42 00 75 00 66 00 66 00 65 00 U.p.p.e.r.S.e.a.r.c.h.B.u.f.f.e. 000008C0 72 00 53 00 69 00 7A 00 65 00 00 00 53 00 74 00 61 00 63 00 6B 00 53 00 69 00 7A 00 65 00 00 00 r.S.i.z.e...S.t.a.c.k.S.i.z.e... 000008E0 43 00 6F 00 6E 00 6E 00 65 00 63 00 74 00 4D 00 61 00 78 00 54 00 69 00 6D 00 65 00 6F 00 75 00 C.o.n.n.e.c.t.M.a.x.T.i.m.e.o.u. 00000900 74 00 00 00 52 00 61 00 77 00 49 00 6F 00 54 00 69 00 6D 00 65 00 4C 00 69 00 6D 00 69 00 74 00 t...R.a.w.I.o.T.i.m.e.L.i.m.i.t. 00000920 00 00 00 00 4F 00 73 00 32 00 53 00 65 00 73 00 73 00 69 00 6F 00 6E 00 4C 00 69 00 6D 00 69 00 ....O.s.2.S.e.s.s.i.o.n.L.i.m.i. 00000940 74 00 00 00 00 00 00 00 60 7B 04 00 88 6E 04 00 FF FF FF FF 04 00 00 00 80 7B 04 00 8C 6E 04 00 t.......`{♦.ên♦. ♦...Ç{♦.în♦. 00000960 FF FF FF FF 04 00 00 00 A8 7B 04 00 C0 6E 04 00 04 00 00 00 04 00 00 00 D4 7B 04 00 C4 6E 04 00 ♦...¿{♦.└n♦.♦...♦...╘{♦.─n♦. 00000980 04 00 00 00 04 00 00 00 00 7C 04 00 C8 6E 04 00 04 00 00 00 04 00 00 00 2C 7C 04 00 D4 6E 04 00 ♦...♦....|♦.╚n♦.♦...♦...,|♦.╘n♦. 000009A0 04 00 00 00 04 00 00 00 40 7C 04 00 CC 6E 04 00 04 00 00 00 04 00 00 00 64 7C 04 00 E4 6E 04 00 ♦...♦...@|♦.╠n♦.♦...♦...d|♦.Σn♦. 000009C0 04 00 00 00 04 00 00 00 84 7C 04 00 D8 6E 04 00 04 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 ♦...♦...ä|♦.╪n♦.♦...♦........... 000009E0 00 00 00 00 00 00 00 00 49 00 72 00 70 00 53 00 74 00 61 00 63 00 6B 00 53 00 69 00 7A 00 65 00 ........I.r.p.S.t.a.c.k.S.i.z.e. 00000A00 00 00 00 00 4D 00 61 00 69 00 6C 00 73 00 6C 00 6F 00 74 00 44 00 61 00 74 00 61 00 67 00 72 00 ....M.a.i.l.s.l.o.t.D.a.t.a.g.r. 00000A20 61 00 6D 00 54 00 68 00 72 00 65 00 73 00 68 00 6F 00 6C 00 64 00 00 00 47 00 65 00 74 00 42 00 a.m.T.h.r.e.s.h.o.l.d...G.e.t.B. 00000A40 72 00 6F 00 77 00 73 00 65 00 72 00 4C 00 69 00 73 00 74 00 54 00 68 00 72 00 65 00 73 00 68 00 r.o.w.s.e.r.L.i.s.t.T.h.r.e.s.h. 00000A60 6F 00 6C 00 64 00 00 00 42 00 72 00 6F 00 77 00 73 00 65 00 72 00 53 00 65 00 72 00 76 00 65 00 o.l.d...B.r.o.w.s.e.r.S.e.r.v.e. 00000A80 72 00 44 00 65 00 6C 00 65 00 74 00 69 00 6F 00 6E 00 54 00 68 00 72 00 65 00 73 00 68 00 6F 00 r.D.e.l.e.t.i.o.n.T.h.r.e.s.h.o. 00000AA0 6C 00 64 00 00 00 00 00 42 00 72 00 6F 00 77 00 73 00 65 00 72 00 44 00 6F 00 6D 00 61 00 69 00 l.d.....B.r.o.w.s.e.r.D.o.m.a.i. 00000AC0 6E 00 44 00 65 00 6C 00 65 00 74 00 69 00 6F 00 6E 00 54 00 68 00 72 00 65 00 73 00 68 00 6F 00 n.D.e.l.e.t.i.o.n.T.h.r.e.s.h.o. 00000AE0 6C 00 64 00 00 00 00 00 42 00 72 00 6F 00 77 00 73 00 65 00 72 00 46 00 69 00 6E 00 64 00 4D 00 l.d.....B.r.o.w.s.e.r.F.i.n.d.M. 00000B00 61 00 73 00 74 00 65 00 72 00 54 00 69 00 6D 00 65 00 6F 00 75 00 74 00 00 00 00 00 42 00 72 00 a.s.t.e.r.T.i.m.e.o.u.t.....B.r. 00000B20 6F 00 77 00 73 00 65 00 72 00 4D 00 69 00 6E 00 69 00 6D 00 75 00 6D 00 43 00 6F 00 6E 00 66 00 o.w.s.e.r.M.i.n.i.m.u.m.C.o.n.f. 00000B40 69 00 67 00 75 00 72 00 65 00 64 00 42 00 72 00 6F 00 77 00 73 00 65 00 72 00 73 00 00 00 00 00 i.g.u.r.e.d.B.r.o.w.s.e.r.s..... 00000B60 48 7D 04 00 40 7F 04 00 04 00 00 00 04 00 00 00 64 7D 04 00 60 70 04 00 04 00 00 00 04 00 00 00 H}♦.@⌂♦.♦...♦...d}♦.`p♦.♦...♦... 00000B80 98 7D 04 00 64 70 04 00 04 00 00 00 04 00 00 00 C8 7D 04 00 68 70 04 00 04 00 00 00 04 00 00 00 ÿ}♦.dp♦.♦...♦...╚}♦.hp♦.♦...♦... 00000BA0 08 7E 04 00 6C 70 04 00 04 00 00 00 04 00 00 00 48 7E 04 00 58 70 04 00 04 00 00 00 04 00 00 00 ◘~♦.lp♦.♦...♦...H~♦.Xp♦.♦...♦... 00000BC0 7C 7E 04 00 5C 70 04 00 04 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |~♦.\p♦.♦...♦................... 00000BE0 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9C 7F 03 00 00 00 00 00 00 00 00 00 94 92 03 00 ♦...............£⌂♥.........öÆ♥. 00000C00 F0 03 00 00 8C 7F 03 00 00 00 00 00 00 00 00 00 EA 92 03 00 E0 03 00 00 00 00 00 00 00 00 00 00 ≡♥..î⌂♥.........ΩÆ♥.α♥.......... 00000C20 00 00 00 00 00 00 00 00 00 00 00 00 D6 92 03 00 C2 92 03 00 AE 92 03 00 00 00 00 00 04 83 03 00 ............╓Æ♥.┬Æ♥.«Æ♥.....♦â♥. 00000C40 4A 83 03 00 5C 83 03 00 6A 83 03 00 82 83 03 00 9A 83 03 00 A4 83 03 00 AE 83 03 00 C6 83 03 00 Jâ♥.\â♥.jâ♥.éâ♥.Üâ♥.ñâ♥.«â♥.╞â♥. 00000C60 D8 83 03 00 E4 83 03 00 F8 83 03 00 10 84 03 00 2C 84 03 00 44 84 03 00 5A 84 03 00 72 84 03 00 ╪â♥.Σâ♥.°â♥.►ä♥.,ä♥.Dä♥.Zä♥.rä♥. 00000C80 94 84 03 00 A4 84 03 00 BA 84 03 00 D8 84 03 00 F0 84 03 00 06 85 03 00 1E 85 03 00 40 85 03 00 öä♥.ñä♥.║ä♥.╪ä♥.≡ä♥.♠à♥.▲à♥.@à♥. 00000CA0 56 85 03 00 64 85 03 00 7E 85 03 00 92 85 03 00 A2 85 03 00 B8 85 03 00 D8 85 03 00 EE 85 03 00 Và♥.dà♥.~à♥.Æà♥.óà♥.╕à♥.╪à♥.εà♥. 00000CC0 06 86 03 00 18 86 03 00 28 86 03 00 40 86 03 00 58 86 03 00 72 86 03 00 7E 86 03 00 8E 86 03 00 ♠å♥.↑å♥.(å♥.@å♥.Xå♥.rå♥.~å♥.Äå♥. 00000CE0 9A 86 03 00 B8 86 03 00 CC 86 03 00 D6 86 03 00 EC 86 03 00 FC 86 03 00 1A 87 03 00 32 87 03 00 Üå♥.╕å♥.╠å♥.╓å♥.∞å♥.ⁿå♥.→ç♥.2ç♥. 00000D00 4C 87 03 00 56 87 03 00 6E 87 03 00 82 87 03 00 94 87 03 00 AA 87 03 00 C0 87 03 00 D8 87 03 00 Lç♥.Vç♥.nç♥.éç♥.öç♥.¬ç♥.└ç♥.╪ç♥. 00000D20 EA 87 03 00 FE 87 03 00 1C 88 03 00 3E 88 03 00 5A 88 03 00 7A 88 03 00 9C 88 03 00 B6 88 03 00 Ωç♥.■ç♥.∟ê♥.>ê♥.Zê♥.zê♥.£ê♥.╢ê♥. 00000D40 CC 88 03 00 E4 88 03 00 02 89 03 00 14 89 03 00 28 89 03 00 44 89 03 00 54 89 03 00 72 89 03 00 ╠ê♥.Σê♥.☻ë♥.¶ë♥.(ë♥.Dë♥.Të♥.rë♥. 00000D60 80 89 03 00 90 89 03 00 AA 89 03 00 C2 89 03 00 DC 89 03 00 F0 89 03 00 0A 8A 03 00 2C 8A 03 00 Çë♥.Éë♥.¬ë♥.┬ë♥.▄ë♥.≡ë♥.◙è♥.,è♥. 00000D80 48 8A 03 00 66 8A 03 00 7C 8A 03 00 98 8A 03 00 AC 8A 03 00 20 83 03 00 32 83 03 00 EC 8A 03 00 Hè♥.fè♥.|è♥.ÿè♥.¼è♥. â♥.2â♥.∞è♥. 00000DA0 FE 8A 03 00 0C 8B 03 00 2A 8B 03 00 46 8B 03 00 56 8B 03 00 64 8B 03 00 82 8B 03 00 92 8B 03 00 ■è♥.♀ï♥.*ï♥.Fï♥.Vï♥.dï♥.éï♥.Æï♥. 00000DC0 B2 8B 03 00 C4 8B 03 00 D4 8B 03 00 E4 8B 03 00 00 8C 03 00 E0 82 03 00 28 8C 03 00 40 8C 03 00 ▓ï♥.─ï♥.╘ï♥.Σï♥..î♥.αé♥.(î♥.@î♥. 00000DE0 4E 8C 03 00 62 8C 03 00 70 8C 03 00 88 8C 03 00 A4 8C 03 00 BE 8C 03 00 D8 8C 03 00 F4 8C 03 00 Nî♥.bî♥.pî♥.êî♥.ñî♥.╛î♥.╪î♥.⌠î♥. 00000E00 0E 8D 03 00 22 8D 03 00 2C 8D 03 00 40 8D 03 00 4E 8D 03 00 70 8D 03 00 8C 8D 03 00 A4 8D 03 00 ♫ì♥."ì♥.,ì♥.@ì♥.Nì♥.pì♥.îì♥.ñì♥. 00000E20 C2 8D 03 00 DA 8D 03 00 EE 8D 03 00 08 8E 03 00 18 8E 03 00 32 8E 03 00 52 8E 03 00 68 8E 03 00 ┬ì♥.┌ì♥.εì♥.◘Ä♥.↑Ä♥.2Ä♥.RÄ♥.hÄ♥. 00000E40 7E 8E 03 00 9E 8E 03 00 B8 8E 03 00 C8 8E 03 00 E8 8E 03 00 08 8F 03 00 26 8F 03 00 40 8F 03 00 ~Ä♥.₧Ä♥.╕Ä♥.╚Ä♥.ΦÄ♥.◘Å♥.&Å♥.@Å♥. 00000E60 50 8F 03 00 72 8F 03 00 8C 8F 03 00 A8 8F 03 00 B8 8F 03 00 D2 8F 03 00 F0 8F 03 00 0C 90 03 00 PÅ♥.rÅ♥.îÅ♥.¿Å♥.╕Å♥.╥Å♥.≡Å♥.♀É♥. 00000E80 20 90 03 00 30 90 03 00 54 90 03 00 6A 90 03 00 88 90 03 00 9E 90 03 00 AE 90 03 00 C8 90 03 00 É♥.0É♥.TÉ♥.jÉ♥.êÉ♥.₧É♥.«É♥.╚É♥. 00000EA0 E8 90 03 00 00 91 03 00 16 91 03 00 2C 91 03 00 46 91 03 00 62 91 03 00 7E 91 03 00 98 91 03 00 ΦÉ♥..æ♥.▬æ♥.,æ♥.Fæ♥.bæ♥.~æ♥.ÿæ♥. 00000EC0 A4 91 03 00 AE 91 03 00 C8 91 03 00 E2 91 03 00 FA 91 03 00 1A 92 03 00 28 92 03 00 48 92 03 00 ñæ♥.«æ♥.╚æ♥.Γæ♥.·æ♥.→Æ♥.(Æ♥.HÆ♥. 00000EE0 62 92 03 00 76 92 03 00 86 92 03 00 A2 92 03 00 EC 82 03 00 DA 8A 03 00 C2 8A 03 00 18 8C 03 00 bÆ♥.vÆ♥.åÆ♥.óÆ♥.∞é♥.┌è♥.┬è♥.↑î♥. 00000F00 F2 92 03 00 02 93 03 00 0E 93 03 00 1C 93 03 00 2C 93 03 00 36 93 03 00 50 93 03 00 70 93 03 00 ≥Æ♥.☻ô♥.♫ô♥.∟ô♥.,ô♥.6ô♥.Pô♥.pô♥. 00000F20 90 93 03 00 B0 93 03 00 DA 93 03 00 E6 93 03 00 06 94 03 00 22 94 03 00 3C 94 03 00 48 94 03 00 Éô♥.░ô♥.┌ô♥.µô♥.♠ö♥."ö♥.<ö♥.Hö♥. 00000F40 60 94 03 00 70 94 03 00 7E 94 03 00 96 94 03 00 B2 94 03 00 D0 94 03 00 E8 94 03 00 F4 94 03 00 `ö♥.pö♥.~ö♥.ûö♥.▓ö♥.╨ö♥.Φö♥.⌠ö♥. 00000F60 08 95 03 00 1A 95 03 00 2A 95 03 00 40 95 03 00 52 95 03 00 60 95 03 00 72 95 03 00 00 00 00 00 ◘ò♥.→ò♥.*ò♥.@ò♥.Rò♥.`ò♥.rò♥..... 00000F80 C9 02 53 65 45 78 70 6F 72 74 73 00 45 01 4B 65 49 6E 69 74 69 61 6C 69 7A 65 53 70 69 6E 4C 6F ╔☻SeExports.E☺KeInitializeSpinLo 00000FA0 63 6B 00 00 3A 00 45 78 49 6E 69 74 69 61 6C 69 7A 65 52 65 73 6F 75 72 63 65 4C 69 74 65 00 00 ck..:.ExInitializeResourceLite.. 00000FC0 CE 00 49 6F 43 72 65 61 74 65 44 65 76 69 63 65 00 00 68 02 52 74 6C 49 6E 69 74 55 6E 69 63 6F ╬.IoCreateDevice..h☻RtlInitUnico 00000FE0 64 65 53 74 72 69 6E 67 00 00 D5 00 49 6F 44 65 6C 65 74 65 44 65 76 69 63 65 00 00 36 00 45 78 deString..╒.IoDeleteDevice..6.Ex 00001000 46 72 65 65 50 6F 6F 6C 00 00 32 00 45 78 44 65 6C 65 74 65 52 65 73 6F 75 72 63 65 4C 69 74 65 FreePool..2.ExDeleteResourceLite 00001020 00 00 5C 02 52 74 6C 46 72 65 65 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 00 E5 02 5A 77 43 6C ..\☻RtlFreeUnicodeString..σ☻ZwCl 00001040 6F 73 65 00 52 03 77 63 73 6C 65 6E 00 00 2E 00 45 78 41 6C 6C 6F 63 61 74 65 50 6F 6F 6C 57 69 ose.R♥wcslen....ExAllocatePoolWi 00001060 74 68 54 61 67 00 13 03 5A 77 51 75 65 72 79 56 61 6C 75 65 4B 65 79 00 03 03 5A 77 4F 70 65 6E thTag.‼♥ZwQueryValueKey.♥♥ZwOpen 00001080 4B 65 79 00 54 01 4B 65 51 75 65 72 79 53 79 73 74 65 6D 54 69 6D 65 00 4E 01 4B 65 4C 65 61 76 Key.T☺KeQuerySystemTime.N☺KeLeav 000010A0 65 43 72 69 74 69 63 61 6C 52 65 67 69 6F 6E 00 EC 00 49 6F 49 73 4F 70 65 72 61 74 69 6F 6E 53 eCriticalRegion.∞.IoIsOperationS 000010C0 79 6E 63 68 72 6F 6E 6F 75 73 00 00 2B 01 4B 65 45 6E 74 65 72 43 72 69 74 69 63 61 6C 52 65 67 ynchronous..+☺KeEnterCriticalReg 000010E0 69 6F 6E 00 16 01 49 6F 66 43 6F 6D 70 6C 65 74 65 52 65 71 75 65 73 74 00 00 59 00 45 78 52 65 ion.▬☺IofCompleteRequest..Y.ExRe 00001100 6C 65 61 73 65 52 65 73 6F 75 72 63 65 4C 69 74 65 00 27 00 45 78 41 63 71 75 69 72 65 52 65 73 leaseResourceLite.'.ExAcquireRes 00001120 6F 75 72 63 65 45 78 63 6C 75 73 69 76 65 4C 69 74 65 00 00 04 00 43 63 46 6C 75 73 68 43 61 63 ourceExclusiveLite..♦.CcFlushCac 00001140 68 65 00 00 30 01 4B 65 47 65 74 43 75 72 72 65 6E 74 54 68 72 65 61 64 00 00 28 00 45 78 41 63 he..0☺KeGetCurrentThread..(.ExAc 00001160 71 75 69 72 65 52 65 73 6F 75 72 63 65 53 68 61 72 65 64 4C 69 74 65 00 9B 01 4D 6D 46 6F 72 63 quireResourceSharedLite.¢☺MmForc 00001180 65 53 65 63 74 69 6F 6E 43 6C 6F 73 65 64 00 00 9A 01 4D 6D 46 6C 75 73 68 49 6D 61 67 65 53 65 eSectionClosed..Ü☺MmFlushImageSe 000011A0 63 74 69 6F 6E 00 7A 01 4B 65 57 61 69 74 46 6F 72 53 69 6E 67 6C 65 4F 62 6A 65 63 74 00 07 00 ction.z☺KeWaitForSingleObject.•. 000011C0 43 63 47 65 74 46 69 6C 65 4F 62 6A 65 63 74 46 72 6F 6D 53 65 63 74 69 6F 6E 50 74 72 73 00 00 CcGetFileObjectFromSectionPtrs.. 000011E0 13 00 43 63 50 75 72 67 65 43 61 63 68 65 53 65 63 74 69 6F 6E 00 6B 01 4B 65 53 65 74 45 76 65 ‼.CcPurgeCacheSection.k☺KeSetEve 00001200 6E 74 00 00 1C 00 43 63 55 6E 69 6E 69 74 69 61 6C 69 7A 65 43 61 63 68 65 4D 61 70 00 00 3F 01 nt..∟.CcUninitializeCacheMap..?☺ 00001220 4B 65 49 6E 69 74 69 61 6C 69 7A 65 45 76 65 6E 74 00 24 01 4B 65 43 6C 65 61 72 45 76 65 6E 74 KeInitializeEvent.$☺KeClearEvent 00001240 00 00 60 01 4B 65 52 65 6C 65 61 73 65 53 65 6D 61 70 68 6F 72 65 00 00 F4 00 49 6F 52 61 69 73 ..`☺KeReleaseSemaphore..⌠.IoRais 00001260 65 49 6E 66 6F 72 6D 61 74 69 6F 6E 61 6C 48 61 72 64 45 72 72 6F 72 00 7F 00 46 73 52 74 6C 46 eInformationalHardError.⌂.FsRtlF 00001280 61 73 74 55 6E 6C 6F 63 6B 41 6C 6C 00 00 E8 00 49 6F 47 65 74 52 65 71 75 65 73 74 6F 72 50 72 astUnlockAll..Φ.IoGetRequestorPr 000012A0 6F 63 65 73 73 00 5F 01 4B 65 52 65 6C 65 61 73 65 4D 75 74 65 78 00 00 45 02 52 74 6C 45 71 75 ocess._☺KeReleaseMutex..E☻RtlEqu 000012C0 61 6C 4C 75 69 64 00 00 48 02 52 74 6C 45 71 75 61 6C 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 alLuid..H☻RtlEqualUnicodeString. 000012E0 B5 00 49 6E 74 65 72 6C 6F 63 6B 65 64 49 6E 63 72 65 6D 65 6E 74 00 00 4A 00 45 78 4C 6F 63 61 ╡.InterlockedIncrement..J.ExLoca 00001300 6C 54 69 6D 65 54 6F 53 79 73 74 65 6D 54 69 6D 65 00 DF 00 49 6F 46 72 65 65 4D 64 6C 00 B5 01 lTimeToSystemTime.▀.IoFreeMdl.╡☺ 00001320 4D 6D 55 6E 6C 6F 63 6B 50 61 67 65 73 00 DE 00 49 6F 46 72 65 65 49 72 70 00 88 02 52 74 6C 4F MmUnlockPages.▐.IoFreeIrp.ê☻RtlO 00001340 65 6D 53 74 72 69 6E 67 54 6F 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 65 02 52 74 6C 49 6E 69 emStringToUnicodeString.e☻RtlIni 00001360 74 41 6E 73 69 53 74 72 69 6E 67 00 54 03 77 63 73 6E 63 70 79 00 AC 01 4D 6D 50 72 6F 62 65 41 tAnsiString.T♥wcsncpy.¼☺MmProbeA 00001380 6E 64 4C 6F 63 6B 50 61 67 65 73 00 BD 00 49 6F 41 6C 6C 6F 63 61 74 65 4D 64 6C 00 A5 02 52 74 ndLockPages.╜.IoAllocateMdl.Ñ☻Rt 000013A0 6C 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 54 6F 4F 65 6D 53 74 72 69 6E 67 00 32 02 52 74 6C 43 lUnicodeStringToOemString.2☻RtlC 000013C0 6F 70 79 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 00 AC 02 52 74 6C 55 70 63 61 73 65 55 6E 69 opyUnicodeString..¼☻RtlUpcaseUni 000013E0 63 6F 64 65 53 74 72 69 6E 67 00 00 45 03 73 74 72 6E 63 6D 70 00 B3 00 49 6E 74 65 72 6C 6F 63 codeString..E♥strncmp.│.Interloc 00001400 6B 65 64 44 65 63 72 65 6D 65 6E 74 00 00 42 01 4B 65 49 6E 69 74 69 61 6C 69 7A 65 4D 75 74 65 kedDecrement..B☺KeInitializeMute 00001420 78 00 19 00 43 63 53 65 74 46 69 6C 65 53 69 7A 65 73 00 00 FD 00 49 6F 52 65 6D 6F 76 65 53 68 x.↓.CcSetFileSizes..².IoRemoveSh 00001440 61 72 65 41 63 63 65 73 73 00 CA 00 49 6F 43 68 65 63 6B 53 68 61 72 65 41 63 63 65 73 73 00 00 areAccess.╩.IoCheckShareAccess.. 00001460 44 01 4B 65 49 6E 69 74 69 61 6C 69 7A 65 53 65 6D 61 70 68 6F 72 65 00 3E 01 4B 65 49 6E 69 74 D☺KeInitializeSemaphore.>☺KeInit 00001480 69 61 6C 69 7A 65 44 70 63 00 46 01 4B 65 49 6E 69 74 69 61 6C 69 7A 65 54 69 6D 65 72 00 7A 02 ializeDpc.F☺KeInitializeTimer.z☻ 000014A0 52 74 6C 4C 65 6E 67 74 68 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6F 72 00 1C 02 52 74 RtlLengthSecurityDescriptor.∟☻Rt 000014C0 6C 41 70 70 65 6E 64 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 54 6F 53 74 72 69 6E 67 00 00 1D 02 lAppendUnicodeStringToString..↔☻ 000014E0 52 74 6C 41 70 70 65 6E 64 55 6E 69 63 6F 64 65 54 6F 53 74 72 69 6E 67 00 00 7C 00 46 73 52 74 RtlAppendUnicodeToString..|.FsRt 00001500 6C 44 6F 65 73 4E 61 6D 65 43 6F 6E 74 61 69 6E 57 69 6C 64 43 61 72 64 73 00 3D 00 45 78 49 6E lDoesNameContainWildCards.=.ExIn 00001520 74 65 72 6C 6F 63 6B 65 64 41 64 64 4C 61 72 67 65 53 74 61 74 69 73 74 69 63 00 00 8C 00 46 73 terlockedAddLargeStatistic..î.Fs 00001540 52 74 6C 49 73 4E 61 6D 65 49 6E 45 78 70 72 65 73 73 69 6F 6E 00 70 00 46 73 52 74 6C 41 72 65 RtlIsNameInExpression.p.FsRtlAre 00001560 4E 61 6D 65 73 45 71 75 61 6C 00 00 F2 01 4F 62 66 44 65 72 65 66 65 72 65 6E 63 65 4F 62 6A 65 NamesEqual..≥☺ObfDereferenceObje 00001580 63 74 00 00 F1 01 4F 62 52 65 66 65 72 65 6E 63 65 4F 62 6A 65 63 74 42 79 50 6F 69 6E 74 65 72 ct..±☺ObReferenceObjectByPointer 000015A0 00 00 4E 00 45 78 51 75 65 75 65 57 6F 72 6B 49 74 65 6D 00 A7 01 4D 6D 4D 61 70 4C 6F 63 6B 65 ..N.ExQueueWorkItem.º☺MmMapLocke 000015C0 64 50 61 67 65 73 00 00 A3 01 4D 6D 4C 6F 63 6B 50 61 67 61 62 6C 65 44 61 74 61 53 65 63 74 69 dPages..ú☺MmLockPagableDataSecti 000015E0 6F 6E 00 00 23 01 4B 65 43 61 6E 63 65 6C 54 69 6D 65 72 00 B4 01 4D 6D 55 6E 6C 6F 63 6B 50 61 on..#☺KeCancelTimer.┤☺MmUnlockPa 00001600 67 61 62 6C 65 49 6D 61 67 65 53 65 63 74 69 6F 6E 00 71 01 4B 65 53 65 74 54 69 6D 65 72 00 00 gableImageSection.q☺KeSetTimer.. 00001620 53 00 45 78 52 61 69 73 65 53 74 61 74 75 73 00 C8 00 49 6F 43 68 65 63 6B 45 61 42 75 66 66 65 S.ExRaiseStatus.╚.IoCheckEaBuffe 00001640 72 56 61 6C 69 64 69 74 79 00 12 01 49 6F 57 72 69 74 65 45 72 72 6F 72 4C 6F 67 45 6E 74 72 79 rValidity.↕☺IoWriteErrorLogEntry 00001660 00 00 BB 00 49 6F 41 6C 6C 6F 63 61 74 65 45 72 72 6F 72 4C 6F 67 45 6E 74 72 79 00 03 01 49 6F ..╗.IoAllocateErrorLogEntry.♥☺Io 00001680 53 65 74 53 68 61 72 65 41 63 63 65 73 73 00 00 85 00 46 73 52 74 6C 49 6E 69 74 69 61 6C 69 7A SetShareAccess..à.FsRtlInitializ 000016A0 65 46 69 6C 65 4C 6F 63 6B 00 58 00 45 78 52 65 6C 65 61 73 65 52 65 73 6F 75 72 63 65 46 6F 72 eFileLock.X.ExReleaseResourceFor 000016C0 54 68 72 65 61 64 4C 69 74 65 00 00 AD 00 46 73 52 74 6C 55 6E 69 6E 69 74 69 61 6C 69 7A 65 46 ThreadLite..¡.FsRtlUninitializeF 000016E0 69 6C 65 4C 6F 63 6B 00 7E 00 46 73 52 74 6C 46 61 73 74 43 68 65 63 6B 4C 6F 63 6B 46 6F 72 57 ileLock.~.FsRtlFastCheckLockForW 00001700 72 69 74 65 00 00 E2 00 49 6F 47 65 74 43 75 72 72 65 6E 74 50 72 6F 63 65 73 73 00 7D 00 46 73 rite..Γ.IoGetCurrentProcess.}.Fs 00001720 52 74 6C 46 61 73 74 43 68 65 63 6B 4C 6F 63 6B 46 6F 72 52 65 61 64 00 5B 02 52 74 6C 46 72 65 RtlFastCheckLockForRead.[☻RtlFre 00001740 65 4F 65 6D 53 74 72 69 6E 67 00 00 8A 00 46 73 52 74 6C 49 73 46 61 74 44 62 63 73 4C 65 67 61 eOemString..è.FsRtlIsFatDbcsLega 00001760 6C 00 8B 00 46 73 52 74 6C 49 73 48 70 66 73 44 62 63 73 4C 65 67 61 6C 00 00 29 01 4B 65 44 65 l.ï.FsRtlIsHpfsDbcsLegal..)☺KeDe 00001780 74 61 63 68 50 72 6F 63 65 73 73 00 20 01 4B 65 41 74 74 61 63 68 50 72 6F 63 65 73 73 00 0A 01 tachProcess. ☺KeAttachProcess.◙☺ 000017A0 49 6F 53 74 6F 70 54 69 6D 65 72 00 78 00 46 73 52 74 6C 44 65 72 65 67 69 73 74 65 72 55 6E 63 IoStopTimer.x.FsRtlDeregisterUnc 000017C0 50 72 6F 76 69 64 65 72 00 00 A6 00 46 73 52 74 6C 52 65 67 69 73 74 65 72 55 6E 63 50 72 6F 76 Provider..ª.FsRtlRegisterUncProv 000017E0 69 64 65 72 00 00 08 01 49 6F 53 74 61 72 74 54 69 6D 65 72 00 00 2F 02 52 74 6C 43 6F 70 79 4C ider..◘☺IoStartTimer../☻RtlCopyL 00001800 75 69 64 00 2D 00 45 78 41 6C 6C 6F 63 61 74 65 50 6F 6F 6C 57 69 74 68 51 75 6F 74 61 54 61 67 uid.-.ExAllocatePoolWithQuotaTag 00001820 00 00 21 00 44 62 67 42 72 65 61 6B 50 6F 69 6E 74 00 5F 00 45 78 66 49 6E 74 65 72 6C 6F 63 6B ..!.DbgBreakPoint._.ExfInterlock 00001840 65 64 49 6E 73 65 72 74 54 61 69 6C 4C 69 73 74 00 00 76 00 46 73 52 74 6C 43 6F 70 79 57 72 69 edInsertTailList..v.FsRtlCopyWri 00001860 74 65 00 00 75 00 46 73 52 74 6C 43 6F 70 79 52 65 61 64 00 BC 00 49 6F 41 6C 6C 6F 63 61 74 65 te..u.FsRtlCopyRead.╝.IoAllocate 00001880 49 72 70 00 E7 00 49 6F 47 65 74 52 65 6C 61 74 65 64 44 65 76 69 63 65 4F 62 6A 65 63 74 00 00 Irp.τ.IoGetRelatedDeviceObject.. 000018A0 A5 00 46 73 52 74 6C 50 72 6F 63 65 73 73 46 69 6C 65 4C 6F 63 6B 00 00 15 01 49 6F 66 43 61 6C Ñ.FsRtlProcessFileLock..§☺IofCal 000018C0 6C 44 72 69 76 65 72 00 82 00 46 73 52 74 6C 47 65 74 4E 65 78 74 46 69 6C 65 4C 6F 63 6B 00 00 lDriver.é.FsRtlGetNextFileLock.. 000018E0 21 01 4B 65 42 75 67 43 68 65 63 6B 00 00 DC 00 49 6F 46 69 6C 65 4F 62 6A 65 63 74 54 79 70 65 !☺KeBugCheck..▄.IoFileObjectType 00001900 00 00 C6 00 49 6F 43 61 6E 63 65 6C 49 72 70 00 01 02 50 73 49 73 54 68 72 65 61 64 54 65 72 6D ..╞.IoCancelIrp.☺☻PsIsThreadTerm 00001920 69 6E 61 74 69 6E 67 00 78 01 4B 65 57 61 69 74 46 6F 72 4D 75 6C 74 69 70 6C 65 4F 62 6A 65 63 inating.x☺KeWaitForMultipleObjec 00001940 74 73 00 00 FB 00 49 6F 52 65 6C 65 61 73 65 43 61 6E 63 65 6C 53 70 69 6E 4C 6F 63 6B 00 B6 00 ts..√.IoReleaseCancelSpinLock.╢. 00001960 49 6F 41 63 71 75 69 72 65 43 61 6E 63 65 6C 53 70 69 6E 4C 6F 63 6B 00 94 01 4D 6D 42 75 69 6C IoAcquireCancelSpinLock.ö☺MmBuil 00001980 64 4D 64 6C 46 6F 72 4E 6F 6E 50 61 67 65 64 50 6F 6F 6C 00 5D 00 45 78 66 49 6E 74 65 72 6C 6F dMdlForNonPagedPool.].ExfInterlo 000019A0 63 6B 65 64 41 64 64 55 6C 6F 6E 67 00 00 ED 00 49 6F 49 73 53 79 73 74 65 6D 54 68 72 65 61 64 ckedAddUlong..φ.IoIsSystemThread 000019C0 00 00 50 03 77 63 73 63 70 79 00 00 C3 00 49 6F 42 75 69 6C 64 50 61 72 74 69 61 6C 4D 64 6C 00 ..P♥wcscpy..├.IoBuildPartialMdl. 000019E0 01 00 43 63 43 6F 70 79 52 65 61 64 00 00 16 00 43 63 53 65 74 41 64 64 69 74 69 6F 6E 61 6C 43 ☺.CcCopyRead..▬.CcSetAdditionalC 00001A00 61 63 68 65 41 74 74 72 69 62 75 74 65 73 00 00 1B 00 43 63 53 65 74 52 65 61 64 41 68 65 61 64 acheAttributes..←.CcSetReadAhead 00001A20 47 72 61 6E 75 6C 61 72 69 74 79 00 09 00 43 63 49 6E 69 74 69 61 6C 69 7A 65 43 61 63 68 65 4D Granularity.○.CcInitializeCacheM 00001A40 61 70 00 00 72 00 46 73 52 74 6C 43 68 65 63 6B 4C 6F 63 6B 46 6F 72 52 65 61 64 41 63 63 65 73 ap..r.FsRtlCheckLockForReadAcces 00001A60 73 00 A1 01 4D 6D 49 73 52 65 63 75 72 73 69 76 65 49 6F 46 61 75 6C 74 00 00 EB 00 49 6F 49 6E s.í☺MmIsRecursiveIoFault..δ.IoIn 00001A80 69 74 69 61 6C 69 7A 65 54 69 6D 65 72 00 D4 02 53 65 52 65 6C 65 61 73 65 53 75 62 6A 65 63 74 itializeTimer.╘☻SeReleaseSubject 00001AA0 43 6F 6E 74 65 78 74 00 BE 02 53 65 41 63 63 65 73 73 43 68 65 63 6B 00 C3 02 53 65 43 61 70 74 Context.╛☻SeAccessCheck.├☻SeCapt 00001AC0 75 72 65 53 75 62 6A 65 63 74 43 6F 6E 74 65 78 74 00 D1 02 53 65 51 75 65 72 79 41 75 74 68 65 ureSubjectContext.╤☻SeQueryAuthe 00001AE0 6E 74 69 63 61 74 69 6F 6E 49 64 54 6F 6B 65 6E 00 00 FA 02 5A 77 46 72 65 65 56 69 72 74 75 61 nticationIdToken..·☻ZwFreeVirtua 00001B00 6C 4D 65 6D 6F 72 79 00 8D 01 4C 73 61 46 72 65 65 52 65 74 75 72 6E 42 75 66 66 65 72 00 8B 01 lMemory.ì☺LsaFreeReturnBuffer.ï☺ 00001B20 4C 73 61 43 61 6C 6C 41 75 74 68 65 6E 74 69 63 61 74 69 6F 6E 50 61 63 6B 61 67 65 00 00 E3 02 LsaCallAuthenticationPackage..π☻ 00001B40 5A 77 41 6C 6C 6F 63 61 74 65 56 69 72 74 75 61 6C 4D 65 6D 6F 72 79 00 67 02 52 74 6C 49 6E 69 ZwAllocateVirtualMemory.g☻RtlIni 00001B60 74 53 74 72 69 6E 67 00 96 02 52 74 6C 53 65 74 4F 77 6E 65 72 53 65 63 75 72 69 74 79 44 65 73 tString.û☻RtlSetOwnerSecurityDes 00001B80 63 72 69 70 74 6F 72 00 94 02 52 74 6C 53 65 74 44 61 63 6C 53 65 63 75 72 69 74 79 44 65 73 63 criptor.ö☻RtlSetDaclSecurityDesc 00001BA0 72 69 70 74 6F 72 00 00 36 02 52 74 6C 43 72 65 61 74 65 53 65 63 75 72 69 74 79 44 65 73 63 72 riptor..6☻RtlCreateSecurityDescr 00001BC0 69 70 74 6F 72 00 14 02 52 74 6C 41 64 64 41 63 63 65 73 73 41 6C 6C 6F 77 65 64 41 63 65 00 00 iptor.¶☻RtlAddAccessAllowedAce.. 00001BE0 33 02 52 74 6C 43 72 65 61 74 65 41 63 6C 00 00 8F 01 4C 73 61 4C 6F 6F 6B 75 70 41 75 74 68 65 3☻RtlCreateAcl..Å☺LsaLookupAuthe 00001C00 6E 74 69 63 61 74 69 6F 6E 50 61 63 6B 61 67 65 00 00 90 01 4C 73 61 52 65 67 69 73 74 65 72 4C nticationPackage..É☺LsaRegisterL 00001C20 6F 67 6F 6E 50 72 6F 63 65 73 73 00 8C 01 4C 73 61 44 65 72 65 67 69 73 74 65 72 4C 6F 67 6F 6E ogonProcess.î☺LsaDeregisterLogon 00001C40 50 72 6F 63 65 73 73 00 31 02 52 74 6C 43 6F 70 79 53 74 72 69 6E 67 00 27 01 4B 65 44 65 6C 61 Process.1☻RtlCopyString.'☺KeDela 00001C60 79 45 78 65 63 75 74 69 6F 6E 54 68 72 65 61 64 00 00 33 00 45 78 44 69 73 61 62 6C 65 52 65 73 yExecutionThread..3.ExDisableRes 00001C80 6F 75 72 63 65 42 6F 6F 73 74 4C 69 74 65 00 00 F0 01 4F 62 52 65 66 65 72 65 6E 63 65 4F 62 6A ourceBoostLite..≡☺ObReferenceObj 00001CA0 65 63 74 42 79 48 61 6E 64 6C 65 00 27 02 52 74 6C 43 6F 6D 70 61 72 65 4D 65 6D 6F 72 79 00 00 ectByHandle.'☻RtlCompareMemory.. 00001CC0 EA 02 5A 77 43 72 65 61 74 65 46 69 6C 65 00 00 AF 02 52 74 6C 55 70 63 61 73 65 55 6E 69 63 6F Ω☻ZwCreateFile..»☻RtlUpcaseUnico 00001CE0 64 65 53 74 72 69 6E 67 54 6F 4F 65 6D 53 74 72 69 6E 67 00 B7 01 4D 6D 55 6E 6D 61 70 4C 6F 63 deStringToOemString.╖☺MmUnmapLoc 00001D00 6B 65 64 50 61 67 65 73 00 00 BC 02 52 74 6C 78 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 54 6F 41 kedPages..╝☻RtlxUnicodeStringToA 00001D20 6E 73 69 53 69 7A 65 00 BD 01 4E 6C 73 4D 62 4F 65 6D 43 6F 64 65 50 61 67 65 54 61 67 00 FA 01 nsiSize.╜☺NlsMbOemCodePageTag.·☺ 00001D40 50 72 6F 62 65 46 6F 72 57 72 69 74 65 00 4F 00 45 78 52 61 69 73 65 41 63 63 65 73 73 56 69 6F ProbeForWrite.O.ExRaiseAccessVio 00001D60 6C 61 74 69 6F 6E 00 00 8F 00 46 73 52 74 6C 4C 65 67 61 6C 41 6E 73 69 43 68 61 72 61 63 74 65 lation..Å.FsRtlLegalAnsiCharacte 00001D80 72 41 72 72 61 79 00 00 AB 02 52 74 6C 55 70 63 61 73 65 55 6E 69 63 6F 64 65 43 68 61 72 00 00 rArray..½☻RtlUpcaseUnicodeChar.. 00001DA0 9C 02 52 74 6C 54 69 6D 65 46 69 65 6C 64 73 54 6F 54 69 6D 65 00 9F 02 52 74 6C 54 69 6D 65 54 £☻RtlTimeFieldsToTime.ƒ☻RtlTimeT 00001DC0 6F 54 69 6D 65 46 69 65 6C 64 73 00 5B 00 45 78 53 79 73 74 65 6D 54 69 6D 65 54 6F 4C 6F 63 61 oTimeFields.[.ExSystemTimeToLoca 00001DE0 6C 54 69 6D 65 00 9D 02 52 74 6C 54 69 6D 65 54 6F 53 65 63 6F 6E 64 73 53 69 6E 63 65 31 39 37 lTime.¥☻RtlTimeToSecondsSince197 00001E00 30 00 90 02 52 74 6C 53 65 63 6F 6E 64 73 53 69 6E 63 65 31 39 37 30 54 6F 54 69 6D 65 00 8D 00 0.É☻RtlSecondsSince1970ToTime.ì. 00001E20 46 73 52 74 6C 49 73 4E 74 73 74 61 74 75 73 45 78 70 65 63 74 65 64 00 32 03 5F 77 63 73 6E 69 FsRtlIsNtstatusExpected.2♥_wcsni 00001E40 63 6D 70 00 53 03 77 63 73 6E 63 6D 70 00 0B 02 50 73 54 65 72 6D 69 6E 61 74 65 53 79 73 74 65 cmp.S♥wcsncmp.♂☻PsTerminateSyste 00001E60 6D 54 68 72 65 61 64 00 1C 03 5A 77 53 65 74 49 6E 66 6F 72 6D 61 74 69 6F 6E 54 68 72 65 61 64 mThread.∟♥ZwSetInformationThread 00001E80 00 00 FD 01 50 73 43 72 65 61 74 65 53 79 73 74 65 6D 54 68 72 65 61 64 00 00 62 00 45 78 66 49 ..²☺PsCreateSystemThread..b.ExfI 00001EA0 6E 74 65 72 6C 6F 63 6B 65 64 52 65 6D 6F 76 65 48 65 61 64 4C 69 73 74 00 00 02 00 43 63 43 6F nterlockedRemoveHeadList..☻.CcCo 00001EC0 70 79 57 72 69 74 65 00 73 00 46 73 52 74 6C 43 68 65 63 6B 4C 6F 63 6B 46 6F 72 57 72 69 74 65 pyWrite.s.FsRtlCheckLockForWrite 00001EE0 41 63 63 65 73 73 00 00 17 00 43 63 53 65 74 44 69 72 74 79 50 61 67 65 54 68 72 65 73 68 6F 6C Access..↨.CcSetDirtyPageThreshol 00001F00 64 00 E9 00 49 6F 47 65 74 54 6F 70 4C 65 76 65 6C 49 72 70 00 00 03 00 43 63 44 65 66 65 72 57 d.Θ.IoGetTopLevelIrp..♥.CcDeferW 00001F20 72 69 74 65 00 00 00 00 43 63 43 61 6E 49 57 72 69 74 65 00 6E 74 6F 73 6B 72 6E 6C 2E 65 78 65 rite....CcCanIWrite.ntoskrnl.exe 00001F40 00 00 AA 02 52 74 6C 55 6E 77 69 6E 64 00 49 00 4B 66 52 65 6C 65 61 73 65 53 70 69 6E 4C 6F 63 ..¬☻RtlUnwind.I.KfReleaseSpinLoc 00001F60 6B 00 46 00 4B 66 41 63 71 75 69 72 65 53 70 69 6E 4C 6F 63 6B 00 40 00 4B 65 47 65 74 43 75 72 k.F.KfAcquireSpinLock.@.KeGetCur 00001F80 72 65 6E 74 49 72 71 6C 00 00 48 41 4C 2E 64 6C 6C 00 E9 02 5A 77 43 72 65 61 74 65 45 76 65 6E rentIrql..HAL.dll.Θ☻ZwCreateEven 00001FA0 74 00 2C 03 5F 73 74 72 69 63 6D 70 00 00 E8 01 4E 74 57 72 69 74 65 46 69 6C 65 00 C7 01 4E 74 t.,♥_stricmp..Φ☺NtWriteFile.╟☺Nt 00001FC0 43 72 65 61 74 65 46 69 6C 65 00 00 46 03 73 74 72 6E 63 70 79 00 2A 02 52 74 6C 43 6F 6D 70 61 CreateFile..F♥strncpy.*☻RtlCompa 00001FE0 72 65 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 3C 02 52 74 6C 44 65 6C 65 74 65 45 6C 65 6D 65 reUnicodeString.<☻RtlDeleteEleme 00002000 6E 74 47 65 6E 65 72 69 63 54 61 62 6C 65 00 00 6D 02 52 74 6C 49 6E 73 65 72 74 45 6C 65 6D 65 ntGenericTable..m☻RtlInsertEleme 00002020 6E 74 47 65 6E 65 72 69 63 54 61 62 6C 65 00 00 7C 02 52 74 6C 4C 6F 6F 6B 75 70 45 6C 65 6D 65 ntGenericTable..|☻RtlLookupEleme 00002040 6E 74 47 65 6E 65 72 69 63 54 61 62 6C 65 00 00 44 02 52 74 6C 45 6E 75 6D 65 72 61 74 65 47 65 ntGenericTable..D☻RtlEnumerateGe 00002060 6E 65 72 69 63 54 61 62 6C 65 57 69 74 68 6F 75 74 53 70 6C 61 79 69 6E 67 00 31 03 5F 77 63 73 nericTableWithoutSplaying.1♥_wcs 00002080 69 63 6D 70 00 00 83 02 52 74 6C 4E 75 6D 62 65 72 47 65 6E 65 72 69 63 54 61 62 6C 65 45 6C 65 icmp..â☻RtlNumberGenericTableEle 000020A0 6D 65 6E 74 73 00 43 02 52 74 6C 45 6E 75 6D 65 72 61 74 65 47 65 6E 65 72 69 63 54 61 62 6C 65 ments.C☻RtlEnumerateGenericTable 000020C0 00 00 4B 02 52 74 6C 45 78 74 65 6E 64 65 64 4D 61 67 69 63 44 69 76 69 64 65 00 00 8E 02 52 74 ..K☻RtlExtendedMagicDivide..Ä☻Rt 000020E0 6C 52 61 6E 64 6F 6D 00 22 03 5A 77 57 61 69 74 46 6F 72 53 69 6E 67 6C 65 4F 62 6A 65 63 74 00 lRandom."♥ZwWaitForSingleObject. 00002100 67 01 4B 65 52 65 73 65 74 45 76 65 6E 74 00 00 74 01 4B 65 54 69 63 6B 43 6F 75 6E 74 00 56 01 g☺KeResetEvent..t☺KeTickCount.V☺ 00002120 4B 65 51 75 65 72 79 54 69 6D 65 49 6E 63 72 65 6D 65 6E 74 00 00 6A 02 52 74 6C 49 6E 69 74 69 KeQueryTimeIncrement..j☻RtlIniti 00002140 61 6C 69 7A 65 47 65 6E 65 72 69 63 54 61 62 6C 65 00 BD 02 52 74 6C 78 55 6E 69 63 6F 64 65 53 alizeGenericTable.╜☻RtlxUnicodeS 00002160 74 72 69 6E 67 54 6F 4F 65 6D 53 69 7A 65 00 00 F2 02 5A 77 44 65 76 69 63 65 49 6F 43 6F 6E 74 tringToOemSize..≥☻ZwDeviceIoCont 00002180 72 6F 6C 46 69 6C 65 00 2E 03 5F 73 74 72 6E 69 63 6D 70 00 59 02 52 74 6C 46 72 65 65 41 6E 73 rolFile..♥_strnicmp.Y☻RtlFreeAns 000021A0 69 53 74 72 69 6E 67 00 17 02 52 74 6C 41 6C 6C 6F 63 61 74 65 48 65 61 70 00 34 02 52 74 6C 43 iString.↨☻RtlAllocateHeap.4☻RtlC 000021C0 72 65 61 74 65 48 65 61 70 00 FE 02 5A 77 4D 61 70 56 69 65 77 4F 66 53 65 63 74 69 6F 6E 00 00 reateHeap.■☻ZwMapViewOfSection.. 000021E0 EC 02 5A 77 43 72 65 61 74 65 53 65 63 74 69 6F 6E 00 19 03 5A 77 53 65 74 45 76 65 6E 74 00 00 ∞☻ZwCreateSection.↓♥ZwSetEvent.. 00002200 3E 02 52 74 6C 44 65 73 74 72 6F 79 48 65 61 70 00 00 5A 02 52 74 6C 46 72 65 65 48 65 61 70 00 >☻RtlDestroyHeap..Z☻RtlFreeHeap.