ofs | hex dump | ascii |
---|
0000 | 21 3c 61 72 63 68 3e 0a 2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 31 35 31 36 31 36 31 30 | !<arch>./...............15161610 |
0020 | 35 35 20 20 30 20 20 20 20 20 30 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38 34 20 20 20 20 20 | 55..0.....0.....0.......484..... |
0040 | 20 20 60 0a 00 00 00 0a 00 00 02 28 00 00 05 0a 00 00 08 68 00 00 08 68 00 00 0b 7a 00 00 0b 7a | ..`........(.......h...h...z...z |
0060 | 00 00 0e 88 00 00 0e 88 00 00 11 ac 00 00 11 ac 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 | ................__C__Users_Peter |
0080 | 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 | _Code_winapi_rs_i686_lib_libwina |
00a0 | 70 69 5f 77 69 6e 64 6f 77 73 61 70 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 63 6f 72 65 5f 6d 65 | pi_windowsapp_api_ms_win_core_me |
00c0 | 6d 6f 72 79 5f 6c 31 5f 31 5f 33 5f 61 5f 69 6e 61 6d 65 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 | mory_l1_1_3_a_iname.__head_C__Us |
00e0 | 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 | ers_Peter_Code_winapi_rs_i686_li |
0100 | 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 6f 77 73 61 70 70 5f 61 70 69 5f 6d 73 5f 77 69 | b_libwinapi_windowsapp_api_ms_wi |
0120 | 6e 5f 63 6f 72 65 5f 6d 65 6d 6f 72 79 5f 6c 31 5f 31 5f 33 5f 61 00 5f 56 69 72 74 75 61 6c 50 | n_core_memory_l1_1_3_a._VirtualP |
0140 | 72 6f 74 65 63 74 46 72 6f 6d 41 70 70 40 31 36 00 5f 5f 69 6d 70 5f 5f 56 69 72 74 75 61 6c 50 | rotectFromApp@16.__imp__VirtualP |
0160 | 72 6f 74 65 63 74 46 72 6f 6d 41 70 70 40 31 36 00 5f 56 69 72 74 75 61 6c 41 6c 6c 6f 63 46 72 | rotectFromApp@16._VirtualAllocFr |
0180 | 6f 6d 41 70 70 40 31 36 00 5f 5f 69 6d 70 5f 5f 56 69 72 74 75 61 6c 41 6c 6c 6f 63 46 72 6f 6d | omApp@16.__imp__VirtualAllocFrom |
01a0 | 41 70 70 40 31 36 00 5f 53 65 74 50 72 6f 63 65 73 73 56 61 6c 69 64 43 61 6c 6c 54 61 72 67 65 | App@16._SetProcessValidCallTarge |
01c0 | 74 73 40 32 30 00 5f 5f 69 6d 70 5f 5f 53 65 74 50 72 6f 63 65 73 73 56 61 6c 69 64 43 61 6c 6c | ts@20.__imp__SetProcessValidCall |
01e0 | 54 61 72 67 65 74 73 40 32 30 00 5f 4f 70 65 6e 46 69 6c 65 4d 61 70 70 69 6e 67 46 72 6f 6d 41 | Targets@20._OpenFileMappingFromA |
0200 | 70 70 40 31 32 00 5f 5f 69 6d 70 5f 5f 4f 70 65 6e 46 69 6c 65 4d 61 70 70 69 6e 67 46 72 6f 6d | pp@12.__imp__OpenFileMappingFrom |
0220 | 41 70 70 40 31 32 00 00 64 61 77 70 74 2e 6f 2f 20 20 20 20 20 20 20 20 31 35 31 36 31 36 31 30 | App@12..dawpt.o/........15161610 |
0240 | 35 35 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 36 37 38 20 20 20 20 20 | 55..0.....0.....100666..678..... |
0260 | 20 20 60 0a 4c 01 06 00 00 00 00 00 30 01 00 00 0f 00 00 00 00 00 05 01 2e 74 65 78 74 00 00 00 | ..`.L.......0............text... |
0280 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 30 60 | ..............................0` |
02a0 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
02c0 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
02e0 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 | ..............0..idata$4........ |
0300 | 04 00 00 00 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 35 | ....................@.0..idata$5 |
0320 | 00 00 00 00 00 00 00 00 04 00 00 00 08 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 | ............................@.0. |
0340 | 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 24 00 00 00 0c 01 00 00 00 00 00 00 00 00 00 00 | .idata$7........$............... |
0360 | 00 00 00 00 40 00 30 c0 00 00 00 00 00 00 00 00 61 70 69 2d 6d 73 2d 77 69 6e 2d 63 6f 72 65 2d | ....@.0.........api-ms-win-core- |
0380 | 6d 65 6d 6f 72 79 2d 6c 31 2d 31 2d 33 2e 64 6c 6c 00 00 00 2e 66 69 6c 65 00 00 00 00 00 00 00 | memory-l1-1-3.dll....file....... |
03a0 | fe ff 00 00 67 01 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00 | ....g.fake...............text... |
03c0 | 00 00 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64 61 74 | .............................dat |
03e0 | 61 00 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | a............................... |
0400 | 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .bss............................ |
0420 | 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 04 00 00 00 03 01 04 00 00 00 00 00 00 00 00 00 | .....idata$4.................... |
0440 | 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 01 04 00 00 00 00 00 | .........idata$5................ |
0460 | 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 37 00 00 00 00 06 00 00 00 03 01 22 00 | .............idata$7..........". |
0480 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 06 00 00 00 | ................................ |
04a0 | 02 00 68 00 00 00 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 | ..h...__C__Users_Peter_Code_wina |
04c0 | 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 6f 77 73 | pi_rs_i686_lib_libwinapi_windows |
04e0 | 61 70 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 63 6f 72 65 5f 6d 65 6d 6f 72 79 5f 6c 31 5f 31 5f | app_api_ms_win_core_memory_l1_1_ |
0500 | 33 5f 61 5f 69 6e 61 6d 65 00 64 61 77 70 68 2e 6f 2f 20 20 20 20 20 20 20 20 31 35 31 36 31 36 | 3_a_iname.dawph.o/........151616 |
0520 | 31 30 35 35 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 38 30 31 20 20 20 | 1055..0.....0.....100666..801... |
0540 | 20 20 20 20 60 0a 4c 01 06 00 00 00 00 00 36 01 00 00 10 00 00 00 00 00 04 01 2e 74 65 78 74 00 | ....`.L.......6............text. |
0560 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 00 | ................................ |
0580 | 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0`.data......................... |
05a0 | 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0..bss.................. |
05c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 32 00 00 00 00 00 00 | ................0..idata$2...... |
05e0 | 00 00 14 00 00 00 04 01 00 00 18 01 00 00 00 00 00 00 03 00 00 00 40 00 30 c0 2e 69 64 61 74 61 | ......................@.0..idata |
0600 | 24 35 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 | $5............................@. |
0620 | 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | 0..idata$4...................... |
0640 | 00 00 00 00 00 00 40 00 30 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ......@.0....................... |
0660 | 00 00 0c 00 00 00 07 00 0c 00 00 00 0f 00 00 00 07 00 10 00 00 00 0d 00 00 00 07 00 2e 66 69 6c | .............................fil |
0680 | 65 00 00 00 00 00 00 00 fe ff 00 00 67 01 66 61 6b 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | e...........g.fake.............. |
06a0 | 68 6e 61 6d 65 00 00 00 00 00 00 00 06 00 00 00 03 00 66 74 68 75 6e 6b 00 00 00 00 00 00 05 00 | hname.............fthunk........ |
06c0 | 00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00 | .....text....................... |
06e0 | 00 00 00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00 | .........data................... |
0700 | 00 00 00 00 00 00 00 00 00 00 00 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 01 00 00 | .............bss................ |
0720 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 32 00 00 00 00 04 00 00 00 | .................idata$2........ |
0740 | 03 01 14 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 69 64 61 74 61 24 34 00 00 00 00 | .....................idata$4.... |
0760 | 06 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 00 00 00 00 04 00 00 00 | .......idata$5.................. |
0780 | 00 00 00 00 04 00 00 00 02 00 00 00 00 00 67 00 00 00 00 00 00 00 00 00 00 00 02 00 cb 00 00 00 | ..............g................. |
07a0 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
07c0 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 6f 77 73 61 | i_rs_i686_lib_libwinapi_windowsa |
07e0 | 70 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 63 6f 72 65 5f 6d 65 6d 6f 72 79 5f 6c 31 5f 31 5f 33 | pp_api_ms_win_core_memory_l1_1_3 |
0800 | 5f 61 00 5f 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f | _a.__C__Users_Peter_Code_winapi_ |
0820 | 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 6f 77 73 61 70 70 | rs_i686_lib_libwinapi_windowsapp |
0840 | 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 63 6f 72 65 5f 6d 65 6d 6f 72 79 5f 6c 31 5f 31 5f 33 5f 61 | _api_ms_win_core_memory_l1_1_3_a |
0860 | 5f 69 6e 61 6d 65 00 0a 64 61 77 70 73 30 30 30 30 33 2e 6f 2f 20 20 20 31 35 31 36 31 36 31 30 | _iname..dawps00003.o/...15161610 |
0880 | 35 35 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 32 35 20 20 20 20 20 | 55..0.....0.....100666..725..... |
08a0 | 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L....................text... |
08c0 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...X.............0` |
08e0 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
0900 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
0920 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
0940 | 04 00 00 00 34 01 00 00 62 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...b.............0..idata$5 |
0960 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...l.............0. |
0980 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 | .idata$4............<...v....... |
09a0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 18 00 00 00 40 01 00 00 | ......0..idata$6............@... |
09c0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
09e0 | 00 00 00 00 03 00 56 69 72 74 75 61 6c 50 72 6f 74 65 63 74 46 72 6f 6d 41 70 70 00 02 00 00 00 | ......VirtualProtectFromApp..... |
0a00 | 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 | ................................ |
0a20 | 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 | .....text..............data..... |
0a40 | 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 | .........bss...............idata |
0a60 | 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 | $7...........idata$5...........i |
0a80 | 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 | data$4...........idata$6........ |
0aa0 | 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 1e 00 00 00 00 00 00 00 | ................................ |
0ac0 | 05 00 00 00 02 00 00 00 00 00 3e 00 00 00 00 00 00 00 00 00 00 00 02 00 a1 00 00 00 5f 56 69 72 | ..........>................._Vir |
0ae0 | 74 75 61 6c 50 72 6f 74 65 63 74 46 72 6f 6d 41 70 70 40 31 36 00 5f 5f 69 6d 70 5f 5f 56 69 72 | tualProtectFromApp@16.__imp__Vir |
0b00 | 74 75 61 6c 50 72 6f 74 65 63 74 46 72 6f 6d 41 70 70 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f | tualProtectFromApp@16.__head_C__ |
0b20 | 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f | Users_Peter_Code_winapi_rs_i686_ |
0b40 | 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 6f 77 73 61 70 70 5f 61 70 69 5f 6d 73 5f | lib_libwinapi_windowsapp_api_ms_ |
0b60 | 77 69 6e 5f 63 6f 72 65 5f 6d 65 6d 6f 72 79 5f 6c 31 5f 31 5f 33 5f 61 00 0a 64 61 77 70 73 30 | win_core_memory_l1_1_3_a..dawps0 |
0b80 | 30 30 30 32 2e 6f 2f 20 20 20 31 35 31 36 31 36 31 30 35 35 20 20 30 20 20 20 20 20 30 20 20 20 | 0002.o/...1516161055..0.....0... |
0ba0 | 20 20 31 30 30 36 36 36 20 20 37 32 31 20 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 80 01 | ..100666..721.......`.L......... |
0bc0 | 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 | ...........text...............,. |
0be0 | 00 00 58 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 | ..X.............0`.data......... |
0c00 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 | ......................@.0..bss.. |
0c20 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 | ................................ |
0c40 | 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 04 00 00 00 34 01 00 00 62 01 00 00 00 00 | 0..idata$7............4...b..... |
0c60 | 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 | ........0..idata$5............8. |
0c80 | 00 00 6c 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 | ..l.............0..idata$4...... |
0ca0 | 00 00 04 00 00 00 3c 01 00 00 76 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 | ......<...v.............0..idata |
0cc0 | 24 36 00 00 00 00 00 00 00 00 16 00 00 00 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | $6............@................. |
0ce0 | 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 00 00 00 00 02 00 56 69 72 74 75 61 6c 41 | ...%....................VirtualA |
0d00 | 6c 6c 6f 63 46 72 6f 6d 41 70 70 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 | llocFromApp..................... |
0d20 | 07 00 00 00 00 00 06 00 00 00 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 | .......................text..... |
0d40 | 00 00 01 00 00 00 03 00 2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 | .........data..............bss.. |
0d60 | 00 00 00 00 00 00 03 00 00 00 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 | .............idata$7...........i |
0d80 | 64 61 74 61 24 35 00 00 00 00 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 | data$5...........idata$4........ |
0da0 | 03 00 2e 69 64 61 74 61 24 36 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 | ...idata$6...................... |
0dc0 | 01 00 00 00 02 00 00 00 00 00 1c 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 3a 00 00 00 | ............................:... |
0de0 | 00 00 00 00 00 00 00 00 02 00 9d 00 00 00 5f 56 69 72 74 75 61 6c 41 6c 6c 6f 63 46 72 6f 6d 41 | .............._VirtualAllocFromA |
0e00 | 70 70 40 31 36 00 5f 5f 69 6d 70 5f 5f 56 69 72 74 75 61 6c 41 6c 6c 6f 63 46 72 6f 6d 41 70 70 | pp@16.__imp__VirtualAllocFromApp |
0e20 | 40 31 36 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 | @16.__head_C__Users_Peter_Code_w |
0e40 | 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 | inapi_rs_i686_lib_libwinapi_wind |
0e60 | 6f 77 73 61 70 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 63 6f 72 65 5f 6d 65 6d 6f 72 79 5f 6c 31 | owsapp_api_ms_win_core_memory_l1 |
0e80 | 5f 31 5f 33 5f 61 00 0a 64 61 77 70 73 30 30 30 30 31 2e 6f 2f 20 20 20 31 35 31 36 31 36 31 30 | _1_3_a..dawps00001.o/...15161610 |
0ea0 | 35 35 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 34 33 20 20 20 20 20 | 55..0.....0.....100666..743..... |
0ec0 | 20 20 60 0a 4c 01 07 00 00 00 00 00 88 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 74 00 00 00 | ..`.L....................text... |
0ee0 | 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 60 01 00 00 00 00 00 00 01 00 00 00 20 00 30 60 | ............,...`.............0` |
0f00 | 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | .data........................... |
0f20 | 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ....@.0..bss.................... |
0f40 | 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 00 00 00 00 | ..............0..idata$7........ |
0f60 | 04 00 00 00 34 01 00 00 6a 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 35 | ....4...j.............0..idata$5 |
0f80 | 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 74 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 | ............8...t.............0. |
0fa0 | 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7e 01 00 00 00 00 00 00 | .idata$4............<...~....... |
0fc0 | 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1e 00 00 00 40 01 00 00 | ......0..idata$6............@... |
0fe0 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 00 00 00 00 | .................%.............. |
1000 | 00 00 00 00 01 00 53 65 74 50 72 6f 63 65 73 73 56 61 6c 69 64 43 61 6c 6c 54 61 72 67 65 74 73 | ......SetProcessValidCallTargets |
1020 | 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
1040 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
1060 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
1080 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
10a0 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
10c0 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
10e0 | 23 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 48 00 00 00 00 00 00 00 00 00 00 00 02 00 | #.................H............. |
1100 | ab 00 00 00 5f 53 65 74 50 72 6f 63 65 73 73 56 61 6c 69 64 43 61 6c 6c 54 61 72 67 65 74 73 40 | ...._SetProcessValidCallTargets@ |
1120 | 32 30 00 5f 5f 69 6d 70 5f 5f 53 65 74 50 72 6f 63 65 73 73 56 61 6c 69 64 43 61 6c 6c 54 61 72 | 20.__imp__SetProcessValidCallTar |
1140 | 67 65 74 73 40 32 30 00 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f | gets@20.__head_C__Users_Peter_Co |
1160 | 64 65 5f 77 69 6e 61 70 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f | de_winapi_rs_i686_lib_libwinapi_ |
1180 | 77 69 6e 64 6f 77 73 61 70 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 63 6f 72 65 5f 6d 65 6d 6f 72 | windowsapp_api_ms_win_core_memor |
11a0 | 79 5f 6c 31 5f 31 5f 33 5f 61 00 0a 64 61 77 70 73 30 30 30 30 30 2e 6f 2f 20 20 20 31 35 31 36 | y_l1_1_3_a..dawps00000.o/...1516 |
11c0 | 31 36 31 30 35 35 20 20 30 20 20 20 20 20 30 20 20 20 20 20 31 30 30 36 36 36 20 20 37 33 31 20 | 161055..0.....0.....100666..731. |
11e0 | 20 20 20 20 20 20 60 0a 4c 01 07 00 00 00 00 00 84 01 00 00 0a 00 00 00 00 00 04 01 2e 74 65 78 | ......`.L....................tex |
1200 | 74 00 00 00 00 00 00 00 00 00 00 00 08 00 00 00 2c 01 00 00 5c 01 00 00 00 00 00 00 01 00 00 00 | t...............,...\........... |
1220 | 20 00 30 60 2e 64 61 74 61 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ..0`.data....................... |
1240 | 00 00 00 00 00 00 00 00 40 00 30 c0 2e 62 73 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | ........@.0..bss................ |
1260 | 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 30 c0 2e 69 64 61 74 61 24 37 00 00 00 00 | ..................0..idata$7.... |
1280 | 00 00 00 00 04 00 00 00 34 01 00 00 66 01 00 00 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 | ........4...f.............0..ida |
12a0 | 74 61 24 35 00 00 00 00 00 00 00 00 04 00 00 00 38 01 00 00 70 01 00 00 00 00 00 00 01 00 00 00 | ta$5............8...p........... |
12c0 | 00 00 30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00 00 00 04 00 00 00 3c 01 00 00 7a 01 00 00 | ..0..idata$4............<...z... |
12e0 | 00 00 00 00 01 00 00 00 00 00 30 c0 2e 69 64 61 74 61 24 36 00 00 00 00 00 00 00 00 1a 00 00 00 | ..........0..idata$6............ |
1300 | 40 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 c0 ff 25 00 00 00 00 90 90 00 00 00 00 | @....................%.......... |
1320 | 00 00 00 00 00 00 00 00 00 00 4f 70 65 6e 46 69 6c 65 4d 61 70 70 69 6e 67 46 72 6f 6d 41 70 70 | ..........OpenFileMappingFromApp |
1340 | 00 00 00 00 02 00 00 00 04 00 00 00 06 00 00 00 00 00 09 00 00 00 07 00 00 00 00 00 06 00 00 00 | ................................ |
1360 | 07 00 00 00 00 00 06 00 00 00 07 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00 03 00 2e 64 | .............text..............d |
1380 | 61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 00 2e 62 73 73 00 00 00 00 00 00 00 00 03 00 00 00 | ata..............bss............ |
13a0 | 03 00 2e 69 64 61 74 61 24 37 00 00 00 00 04 00 00 00 03 00 2e 69 64 61 74 61 24 35 00 00 00 00 | ...idata$7...........idata$5.... |
13c0 | 05 00 00 00 03 00 2e 69 64 61 74 61 24 34 00 00 00 00 06 00 00 00 03 00 2e 69 64 61 74 61 24 36 | .......idata$4...........idata$6 |
13e0 | 00 00 00 00 07 00 00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00 01 00 00 00 02 00 00 00 00 00 | ................................ |
1400 | 1f 00 00 00 00 00 00 00 05 00 00 00 02 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 02 00 | ..................@............. |
1420 | a3 00 00 00 5f 4f 70 65 6e 46 69 6c 65 4d 61 70 70 69 6e 67 46 72 6f 6d 41 70 70 40 31 32 00 5f | ...._OpenFileMappingFromApp@12._ |
1440 | 5f 69 6d 70 5f 5f 4f 70 65 6e 46 69 6c 65 4d 61 70 70 69 6e 67 46 72 6f 6d 41 70 70 40 31 32 00 | _imp__OpenFileMappingFromApp@12. |
1460 | 5f 5f 68 65 61 64 5f 43 5f 5f 55 73 65 72 73 5f 50 65 74 65 72 5f 43 6f 64 65 5f 77 69 6e 61 70 | __head_C__Users_Peter_Code_winap |
1480 | 69 5f 72 73 5f 69 36 38 36 5f 6c 69 62 5f 6c 69 62 77 69 6e 61 70 69 5f 77 69 6e 64 6f 77 73 61 | i_rs_i686_lib_libwinapi_windowsa |
14a0 | 70 70 5f 61 70 69 5f 6d 73 5f 77 69 6e 5f 63 6f 72 65 5f 6d 65 6d 6f 72 79 5f 6c 31 5f 31 5f 33 | pp_api_ms_win_core_memory_l1_1_3 |
14c0 | 5f 61 00 0a | _a.. |