CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutSign UpSign In
rapid7

Real-time collaboration for Jupyter Notebooks, Linux Terminals, LaTeX, VS Code, R IDE, and more,
all in one place.

GitHub Repository: rapid7/metasploit-framework
Path: blob/master/external/source/byakugan/injectsu/lib/detours.lib
Views: 11784
!<arch>
/               1172497013              0       4946      `
|&D&D&D&D&D&D&Dybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybybyb~�~�~�~�~�~�~�~�~�~�~�~�~�~�~�~�~�~�~�����������������������������������������������BBBBBBBBBBBBBBB??_C@_07HBMFLGHI@?4detour?$AA@?FindExe@@YAPAXPAX@Z?StringCchCopyA@@YGJPADIPBD@Z?StringCopyWorkerA@@YGJPADIPBD@Z_DetourCopyPayloadToProcess@16_DetourCreateProcessWithDllA@52_DetourCreateProcessWithDllW@52??0CImage@Detour@@QAE@XZ??0CImageChars@Detour@@QAE@PAVCImage@1@KPAK@Z??0CImageData@Detour@@QAE@PAEK@Z??0CImageImportFile@Detour@@QAE@XZ??0CImageImportName@Detour@@QAE@XZ??0CImageThunks@Detour@@QAE@PAVCImage@1@KPAK@Z??1CImage@Detour@@QAE@XZ??1CImageData@Detour@@QAE@XZ??1CImageImportFile@Detour@@QAE@XZ??1CImageImportName@Detour@@QAE@XZ??_ECImageImportName@Detour@@QAEPAXI@Z??_GCImage@Detour@@QAEPAXI@Z??_GCImageData@Detour@@QAEPAXI@Z??_GCImageImportFile@Detour@@QAEPAXI@Z??_H@YGXPAXIHP6EPAX0@Z@Z??_I@YGXPAXIHP6EX0@Z@Z?AlignFileData@CImage@Detour@@IAEHPAX@Z?Allocate@CImageChars@Detour@@QAEPADPADKPAK@Z?Allocate@CImageChars@Detour@@QAEPADPADPAK@Z?Allocate@CImageThunks@Detour@@QAEPAU_IMAGE_THUNK_DATA32@@KPAK@Z?AllocateOutput@CImage@Detour@@IAEPAEKPAK@Z?CheckImportsNeeded@CImage@Detour@@IAEHPAK00@Z?Close@CImage@Detour@@QAEHXZ?CopyFileData@CImage@Detour@@IAEHPAXKK@Z?Current@CImageThunks@Detour@@QAEPAU_IMAGE_THUNK_DATA32@@PAK@Z?DataDelete@CImage@Detour@@QAEHABU_GUID@@@Z?DataEnum@CImage@Detour@@QAEPAEPAU_GUID@@PAK1@Z?DataFind@CImage@Detour@@QAEPAEABU_GUID@@PAK@Z?DataPurge@CImage@Detour@@QAEHXZ?DataSet@CImage@Detour@@QAEPAEABU_GUID@@PAEK@Z?Delete@CImageData@Detour@@QAEHABU_GUID@@@Z?EditImports@CImage@Detour@@QAEHPAXP6GH0PADPAPAD@ZP6GH0112@ZP6GH0KKPAK112@ZP6GH0@Z@Z?Enumerate@CImageData@Detour@@QAEPAEPAU_GUID@@PAK1@Z?FileAlign@CImage@Detour@@IAEKK@Z?Find@CImageData@Detour@@QAEPAEABU_GUID@@PAK@Z?IsEmpty@CImageData@Detour@@QAEHXZ?IsValid@CImage@Detour@@SAPAV12@PAX@Z?IsValid@CImageData@Detour@@QAEHXZ?NewByway@CImage@Detour@@IAEPAVCImageImportFile@2@PAD@Z?Purge@CImageData@Detour@@QAEHXZ?Read@CImage@Detour@@QAEHPAX@Z?RvaToFileOffset@CImage@Detour@@IAEKK@Z?RvaToVa@CImage@Detour@@IAEPAXK@Z?SectionAlign@CImage@Detour@@IAEKK@Z?Set@CImageData@Detour@@QAEPAEABU_GUID@@PAEK@Z?SizeOutputBuffer@CImage@Detour@@IAEHK@Z?SizeTo@CImageData@Detour@@IAEHK@Z?Write@CImage@Detour@@QAEHPAX@Z?WriteFile@CImage@Detour@@IAEHPAXPBXKPAK@Z?ZeroFileData@CImage@Detour@@IAEHPAXK@Z_DetourBinaryClose@4_DetourBinaryDeletePayload@8_DetourBinaryEditImports@24_DetourBinaryEnumeratePayloads@16_DetourBinaryFindPayload@12_DetourBinaryOpen@4_DetourBinaryPurgePayloads@4_DetourBinaryResetImports@4_DetourBinarySetPayload@16_DetourBinaryWrite@8??0CDetourDis@@QAE@PAPAEPAJ@Z?AdjustTarget@CDetourDis@@IAEPAEPAE0JJJ@Z?Copy0F@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?Copy66@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?Copy67@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyBytes@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyBytesPrefix@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyBytesRax@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyF6@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyF7@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyFF@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyInstruction@CDetourDis@@QAEPAEPAE0@Z?Invalid@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?SanityCheckSystem@CDetourDis@@SAHXZ?s_rbModRm@CDetourDis@@1QBEB?s_rceCopyTable0F@CDetourDis@@1QBUCOPYENTRY@1@B?s_rceCopyTable@CDetourDis@@1QBUCOPYENTRY@1@B_DetourCopyInstruction@12_DetourCopyInstructionEx@16??_C@_01DCLJPIOD@?$CB?$AA@??_C@_0BA@EEINJJDN@SymLoadModule64?$AA@??_C@_0BD@KGOGPCFD@SymGetModuleInfo64?$AA@??_C@_0BF@HDEFKILG@ImagehlpApiVersionEx?$AA@??_C@_0M@NIAMCPON@SymFromName?$AA@??_C@_0M@OOEJBPPK@dbghelp?4dll?$AA@??_C@_0O@KGBKFDLO@SymGetOptions?$AA@??_C@_0O@LIDFOEPH@SymSetOptions?$AA@??_C@_0O@MCMFENKA@SymInitialize?$AA@?DetourLoadImageHlp@@YAPAU_DETOUR_SYM_INFO@@XZ?StringCatWorkerA@@YGJPADIPBD@Z?StringCchCatA@@YGJPADIPBD@Z?StringLengthWorkerA@@YGJPBDIPAI@Z_DETOUR_EXE_RESTORE_GUID_DetourEnumerateExports@12_DetourEnumerateModules@4_DetourFindFunction@8_DetourFindPayload@12_DetourGetEntryPoint@4_DetourGetModuleSize@4_DetourGetSizeOfPayloads@4_DetourRestoreAfterWith@0_DetourRestoreAfterWithEx@8?detour_does_code_end_function@@YAHPAE@Z?detour_gen_brk@@YAPAEPAE0@Z?detour_gen_jmp_immediate@@YAPAEPAE0@Z?detour_skip_jmp@@YAPAEPAEPAPAX@Z_DetourAttach@8_DetourAttachEx@20_DetourCodeFromPointer@8_DetourDetach@8_DetourGetDetouredMarker@0_DetourSetIgnoreTooSmall@4_DetourTransactionAbort@0_DetourTransactionBegin@0_DetourTransactionCommit@0_DetourTransactionCommitEx@4_DetourUpdateThread@4/               1172497013              0       4722      `
D&by�~��B|??0CDetourDis@@QAE@PAPAEPAJ@Z??0CImage@Detour@@QAE@XZ??0CImageChars@Detour@@QAE@PAVCImage@1@KPAK@Z??0CImageData@Detour@@QAE@PAEK@Z??0CImageImportFile@Detour@@QAE@XZ??0CImageImportName@Detour@@QAE@XZ??0CImageThunks@Detour@@QAE@PAVCImage@1@KPAK@Z??1CImage@Detour@@QAE@XZ??1CImageData@Detour@@QAE@XZ??1CImageImportFile@Detour@@QAE@XZ??1CImageImportName@Detour@@QAE@XZ??_C@_01DCLJPIOD@?$CB?$AA@??_C@_07HBMFLGHI@?4detour?$AA@??_C@_0BA@EEINJJDN@SymLoadModule64?$AA@??_C@_0BD@KGOGPCFD@SymGetModuleInfo64?$AA@??_C@_0BF@HDEFKILG@ImagehlpApiVersionEx?$AA@??_C@_0M@NIAMCPON@SymFromName?$AA@??_C@_0M@OOEJBPPK@dbghelp?4dll?$AA@??_C@_0O@KGBKFDLO@SymGetOptions?$AA@??_C@_0O@LIDFOEPH@SymSetOptions?$AA@??_C@_0O@MCMFENKA@SymInitialize?$AA@??_ECImageImportName@Detour@@QAEPAXI@Z??_GCImage@Detour@@QAEPAXI@Z??_GCImageData@Detour@@QAEPAXI@Z??_GCImageImportFile@Detour@@QAEPAXI@Z??_H@YGXPAXIHP6EPAX0@Z@Z??_I@YGXPAXIHP6EX0@Z@Z?AdjustTarget@CDetourDis@@IAEPAEPAE0JJJ@Z?AlignFileData@CImage@Detour@@IAEHPAX@Z?Allocate@CImageChars@Detour@@QAEPADPADKPAK@Z?Allocate@CImageChars@Detour@@QAEPADPADPAK@Z?Allocate@CImageThunks@Detour@@QAEPAU_IMAGE_THUNK_DATA32@@KPAK@Z?AllocateOutput@CImage@Detour@@IAEPAEKPAK@Z?CheckImportsNeeded@CImage@Detour@@IAEHPAK00@Z?Close@CImage@Detour@@QAEHXZ?Copy0F@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?Copy66@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?Copy67@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyBytes@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyBytesPrefix@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyBytesRax@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyF6@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyF7@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyFF@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyFileData@CImage@Detour@@IAEHPAXKK@Z?CopyInstruction@CDetourDis@@QAEPAEPAE0@Z?Current@CImageThunks@Detour@@QAEPAU_IMAGE_THUNK_DATA32@@PAK@Z?DataDelete@CImage@Detour@@QAEHABU_GUID@@@Z?DataEnum@CImage@Detour@@QAEPAEPAU_GUID@@PAK1@Z?DataFind@CImage@Detour@@QAEPAEABU_GUID@@PAK@Z?DataPurge@CImage@Detour@@QAEHXZ?DataSet@CImage@Detour@@QAEPAEABU_GUID@@PAEK@Z?Delete@CImageData@Detour@@QAEHABU_GUID@@@Z?DetourLoadImageHlp@@YAPAU_DETOUR_SYM_INFO@@XZ?EditImports@CImage@Detour@@QAEHPAXP6GH0PADPAPAD@ZP6GH0112@ZP6GH0KKPAK112@ZP6GH0@Z@Z?Enumerate@CImageData@Detour@@QAEPAEPAU_GUID@@PAK1@Z?FileAlign@CImage@Detour@@IAEKK@Z?Find@CImageData@Detour@@QAEPAEABU_GUID@@PAK@Z?FindExe@@YAPAXPAX@Z?Invalid@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?IsEmpty@CImageData@Detour@@QAEHXZ?IsValid@CImage@Detour@@SAPAV12@PAX@Z?IsValid@CImageData@Detour@@QAEHXZ?NewByway@CImage@Detour@@IAEPAVCImageImportFile@2@PAD@Z?Purge@CImageData@Detour@@QAEHXZ?Read@CImage@Detour@@QAEHPAX@Z?RvaToFileOffset@CImage@Detour@@IAEKK@Z?RvaToVa@CImage@Detour@@IAEPAXK@Z?SanityCheckSystem@CDetourDis@@SAHXZ?SectionAlign@CImage@Detour@@IAEKK@Z?Set@CImageData@Detour@@QAEPAEABU_GUID@@PAEK@Z?SizeOutputBuffer@CImage@Detour@@IAEHK@Z?SizeTo@CImageData@Detour@@IAEHK@Z?StringCatWorkerA@@YGJPADIPBD@Z?StringCchCatA@@YGJPADIPBD@Z?StringCchCopyA@@YGJPADIPBD@Z?StringCopyWorkerA@@YGJPADIPBD@Z?StringLengthWorkerA@@YGJPBDIPAI@Z?Write@CImage@Detour@@QAEHPAX@Z?WriteFile@CImage@Detour@@IAEHPAXPBXKPAK@Z?ZeroFileData@CImage@Detour@@IAEHPAXK@Z?detour_does_code_end_function@@YAHPAE@Z?detour_gen_brk@@YAPAEPAE0@Z?detour_gen_jmp_immediate@@YAPAEPAE0@Z?detour_skip_jmp@@YAPAEPAEPAPAX@Z?s_rbModRm@CDetourDis@@1QBEB?s_rceCopyTable0F@CDetourDis@@1QBUCOPYENTRY@1@B?s_rceCopyTable@CDetourDis@@1QBUCOPYENTRY@1@B_DETOUR_EXE_RESTORE_GUID_DetourAttach@8_DetourAttachEx@20_DetourBinaryClose@4_DetourBinaryDeletePayload@8_DetourBinaryEditImports@24_DetourBinaryEnumeratePayloads@16_DetourBinaryFindPayload@12_DetourBinaryOpen@4_DetourBinaryPurgePayloads@4_DetourBinaryResetImports@4_DetourBinarySetPayload@16_DetourBinaryWrite@8_DetourCodeFromPointer@8_DetourCopyInstruction@12_DetourCopyInstructionEx@16_DetourCopyPayloadToProcess@16_DetourCreateProcessWithDllA@52_DetourCreateProcessWithDllW@52_DetourDetach@8_DetourEnumerateExports@12_DetourEnumerateModules@4_DetourFindFunction@8_DetourFindPayload@12_DetourGetDetouredMarker@0_DetourGetEntryPoint@4_DetourGetModuleSize@4_DetourGetSizeOfPayloads@4_DetourRestoreAfterWith@0_DetourRestoreAfterWithEx@8_DetourSetIgnoreTooSmall@4_DetourTransactionAbort@0_DetourTransactionBegin@0_DetourTransactionCommit@0_DetourTransactionCommitEx@4_DetourUpdateThread@4creatwth.obj/   1172497013              100666  21218     `
L.u��E7=.debug$SDL@B.text;`�
 `.debug$S���@B.text�� `.debug$S���@B.debug$F��@B.text�� `.debug$S��u@B.debug$F��@B.text)�� `.debug$S���@B.debug$F��@B.text#� `.debug$S�8�@B.debug$F@B.textn"�� `.debug$S(��@B.text��� `.debug$S���@B.text��� `.debug$S'Fm@B.text�� `.debug$S{� @B.debug$F= M @B.textW ^  `.debug$S~p � @B.debug$F!!@B.text�&!�!�!
 `.debug$S�$"#@B.texts3#�#�# `.debug$S�$�$@B.text��$�&I'	 `.debug$S��'�)@B.rdata�)@[email protected]$F�)�)@B.text**&* `.debug$S�D*�*@B.debug$F++@B.textI)+r0�1L `.debug$SiR3�5@B.debug$F�5�5@B.text�6�6�6 `.debug$S57O9@B.text�m9:/: `.debug$S�:�<@B.debug$Td�<@B��PC:\Program Files\Microsoft Research\Detours Express 2.1\src\creatwth.obj8

�

�Microsoft (R) Optimizing Compiler�x$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + =$T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + = $ebx $T0 4104 - ^ =$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + = $ebx $T0 36 - ^ =$T0 $ebp 104 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + =$T0 $ebp 104 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + =$T0 $ebp 108 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + =$T0 $ebp 108 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + =�$
DETOUR_EXE_RESTORE_GUIDzCOR_VERSION_MAJOR_V21IMAGE_NT_HEADERS32-PIMAGE_NT_HEADERS32�FILE"ULONGLPADDRESS64LONGLONG�_DETOUR_SECTION_HEADER
LPVOID
"SIZE_T1IMAGE_NT_HEADERS�_SECURITY_ATTRIBUTESPKDHELP %_MEMORY_BASIC_INFORMATION
~LPCSTR#ULONGLONGpLPSTR�LPSTARTUPINFOWx_IMAGE_OPTIONAL_HEADERLPCWSTR
"PULONG�_DETOUR_EXE_RESTORE-PIMAGE_NT_HEADERS%MEMORY_BASIC_INFORMATIONtBOOLo_IMAGE_FILE_HEADER"_KDHELP�DETOUR_SECTION_RECORD!wchar_tqSTRSAFE_LPWSTR�STRSAFE_LPCWSTR#zReplacesCorHdrNumericDefines�LPSECURITY_ATTRIBUTES�_STARTUPINFOW+IMAGE_DOS_HEADERPCUWSTR�_PROCESS_INFORMATION�PROCESS_INFORMATION
!USHORT&�PDETOUR_CREATE_PROCESS_ROUTINEAPVOID�LPSTARTUPINFOA�_IMAGE_SECTION_HEADER�_STARTUPINFOA�DETOUR_EXE_RESTORE"DWORD_PTR
�_iobufxIMAGE_OPTIONAL_HEADER32PKDHELP64pSTRSAFE_LPSTR"DWORDpva_list�DETOUR_SECTION_HEADER
HANDLE+_IMAGE_DOS_HEADER!WORD�PIMAGE_IMPORT_DESCRIPTORADDRESS_MODE BYTELPADDRESS#DWORD64qWCHAR
 LPBYTE PBYTELONG~STRSAFE_LPCSTR|IMAGE_DATA_DIRECTORY
!PUWSTR
!LPWSTR
usize_t&�PDETOUR_CREATE_PROCESS_ROUTINEW|_IMAGE_DATA_DIRECTORY�_DETOUR_SECTION_RECORD1_IMAGE_NT_HEADERS_GUID_tagADDRESS64�LPPROCESS_INFORMATION_tagADDRESSoIMAGE_FILE_HEADER_KDHELP64GUIDpCHAR�IMAGE_IMPORT_DESCRIPTOR�DETOUR_CLR_HEADER�_IMAGE_IMPORT_DESCRIPTORHRESULT'PIMAGE_DOS_HEADER�IMAGE_SECTION_HEADER�_DETOUR_CLR_HEADER(�,�
U��3�9Eu�W��&�UV�u���t	�
BF�Mu�}^uJ�z��]�

"
'./47�D;�7;7�StringCopyWorkerAppszDestucchDest~pszSrcx|
f;D$���+�+D$�%	�$i�6�detour_sum_minus
!
wSum!wMinus%X%\%
%�D$��D$�2�$i�5�detour_sum_done"PartialSum2X2\2
2��vH��@V�2΋�B������B�Hu�^������?	!(�D)i	i�5)(�detour_sum_data"dwSum pbData"cbData?x?|?
)?3�f�QXf�IZf;�V���+�+�f;����+�+�^�L"�D#ii�6#"�detour_sum_final
!
wSum
-pinhLxL|L
#LU���S��;]W��sOV�jV�����PS�u���t0�֍�������9Nj�A��%��A�JJu������;]r�^f��_[��	\.[Y6]	gl��n^�W�N��1nl�ChkSumRange
!wSumhProcess pbBeg pbEnd����rbPageY�Y�Y
U���VWj3��E�VP��=��j�E�P�u�.�E9E�u5�M�E��P�u���YY�M�j���E���M�QP�u�ׅ�w��f�KZ3�f�CXf;����+�_+���f;����+�+�^��jiAYchf
*2ag"�#�d��s�3���ComputeChkSumhProcess pbModule
-pinh����%mbif�f�f
U���SVWj�E�jP����j�E�P�u�u�Ӆ�vo�=�}��E�uH���������1jh �uV�u�ׅ�tjh�uV�u�ׅ�u/�E���M��;�rƋM��j�M�QP�u�Ӆ�w��3�_^[��ji3v�ht	7>OQae$u%y����.�/���	�=�=	�=�=�	��FindAndAllocateNearBasehProcess pbBase"cbAlloc����%mbit�t�t
�����À�$i�0�PadToDword"dw�X�\�
�������$i�3�PadToDwordPtr"dw�X�\�
�U���8Wj@�E�jP��=��jj@�E�PS�u�ׅ�u3��Yf�}�MZu�V��V������jP���jV������P�E��P�u�ׅ�^t�����PEu�f������f������
��_��j[Oj�
26	<?Vnpz|�!�d�8

�8?/8�+�
��IsExehProcess pbModule����+idh����1inh�����
U���SVj�E�jP��5��j�M�Q��P�,�}�u�E�u
�u���Yu#�E�M��j�E�PS�u�օ�w��3����^[��jiA�eh�	.=JS	c
i;m8q<�dsj=h=�-sq�FindExehProcess����%mbi�����
U�l$�����E|SVjh�P3�S�up���;�u\u3��Wj@_W�E�SP�]d�����EdPW�E�PV�upf�E�MZ�}��Ӆ��q9}d�h��u`��V������jP����EdPV������P�u`Dž����PE�upfDž�����fDž���� fDž�����Ӆ��9ud�u`j(�EjP�j�EhP��E`+E\�u|��(���E(�EdPj(�EP�u`��X�up�u,�Ӆ����}d(���E`(W�E�jP����EdPW�E�P�u`�}��up�E�Dtr�}�u��Ӆ�tn9}dui}`j�EDjP��E|�eH�ut���ED�}L������EdPj�ED��u`PV�up�Ӆ�t(�}du"�}|�EdPW�ux��V�up�Ӆ�t
9}du3�@�3�_^[��h��%vGjM��j�j����Kj�j�	+
2:K}�!�'�*�,�-.	13?6C8R@|CE�F�G�H�J�P�W��X�������(��(:��(�@���DetourCopyPayloadToProcessphProcesstrguidxpData|"cbData�ish����+idhd"cbWroteD�dsr\ pbBase�����dsh` pbTarget����1inh�����
.detour�q��|$���v�W����

	�$i�4�StringCchCopyAppszDestucchDest~pszSrc�X�\�
�U�l$����SVW�P3�V������SP�]D��ut���������j@�E�SP�uh��=��Sj@�E�PV�ut�ׅ���j@�E�P������P���f�}�MZ����������V������SP��Mh��SV������P�E�P�ut�ׅ��V������P������P��E�Mh��������PE��������I9�`����=f9������������]��]��]T�D�]dvm�4j(�ESP���Sj(�EPV�ut�ׅ���9]��E(u�M$9�`���r�9�`���s�M��E��M,�9ETs�ET�������Ed��(9Edr��MhQ�ut��������e`YY��d����ET�E|�4����\1�����������}Xv#�Ex�M`�4�������EX�E`�E`;E|Yr��uX���Y�Ed�=�uXjP������������Mh�������������;�s���uXQ�ut������EH���Mh�e\�������E\P��`���j@��d����P�ut������E\�Mh�������EH+��EL�Edj��d������`���V�P�ut����w�e`�}|���ML�Edˍp�MP�\�M`�Ex���0�E@�EX+�P�Ed�P����0�EP�F�3҉�����K��F�EL�K�SljF�E@��V�0��EP�������E`�E`����;E|Yr���d���j3�Y��M|3�3��;�v�Ed9u9XtF��;�r�SW�ud�=�uH�ut�ׅ����EL��`����EX��d����E�;���9]����uhj�0j�E,PS�ut����N�C�������E<�e<��������E\PjjS�ut����jj�E,PS�ut�ׅ���E\P�u\jS�ut�������uh�E\Pj@��4���V�ut�����3�Sj@�E�PV�utf�]��ׅ���Sh�������P�E�P�ut�ׅ���V�ut�������f;ETY�utY���MTj+�f9E�j@����f)M�E�P�uhV�ׅ�tN�E\P�u\��4����uhV���t3�uhV�f9ETYYu"hP������PhV���t�ED�ud�Y�ED_^[��l��"j0�AjG[q��j��,j�f����j<tv��[��6����[�<�_��f��f �&�9��&	6Ecx� �"�&�'�)�-<!3$>3AHKfMiNlRvSy<�Y�g�h�k�lpw.x2y4}C~N�����������������+�X�u�~����������������������-�M�k�m�����
�.#5>D%��I��8�
6�4��3ID�UpdateImportsfinishthProcessx�plpDlls|"nDllsL"obBase����+idh�����derd pbNewh pbModuleH pbNewIidDtfSucceeded\"dwProtectd"iT"dwFileSize`"n����1inhT!wBeforeX"cbNew�ish,�clr�����
����
I��U����E�M8����u�
�U�R�u(�u$�u P�u�u�u�u�u�х�t-�M03���t�M�@�M4��t�L��@P�E�P�u������u3��)�},tj�E�P�u,����Eu	�u��3�@��4�^�}����	:<EIPUim"s#�&�'�)�*�$�4�A���DetourCreateProcessWithDllA~lpApplicationNameplpCommandLine�lpProcessAttributes�lpThreadAttributestbInheritHandles"dwCreationFlags lpEnvironment$~lpCurrentDirectory(�lpStartupInfo,�lpProcessInformation 0~lpDetouredDllFullName4~lpDllName8�pfCreateProcessA
�����pi�����rlpDlls�X�\�
U����E�M8����u�
�U�R�u(�u$�u P�u�u�u�u�u�х�t-�M03���t�M�@�M4��t�L��@P�E�P�u������u3��)�},tj�E�P�u,����Eu	�u��3�@��4�^�}����	:<EIPUim"s#�&�'�)�*�$�4�A���DetourCreateProcessWithDllWlpApplicationName!lpCommandLine�lpProcessAttributes�lpThreadAttributestbInheritHandles"dwCreationFlags lpEnvironment$lpCurrentDirectory(�lpStartupInfo,�lpProcessInformation 0~lpDetouredDllFullName4~lpDllName8�pfCreateProcessW
�����pi�����rlpDlls�X�\�
^��^o(YC�]�z�|e8c:\program files\microsoft research\detours express 2.1\lib\detours.pdb.file��gC:\Program Files\Microsoft Research\Detours Express 2.1\src\creatwth.cpp@comp.id�`��@feat.00��.debug$S.text;
0gl_.debug$S�.file��gc:\program files\microsoft platform sdk for windows server 2003 r2\include\strsafe.h ;�.bfeq.lf
e.ef;e�.text��^.debug$S�.file���gc:\program files\microsoft research\detours express 2.1\src\creatwth.cpp% '�.bfey.lfe.efe}.debug$F.text���.debug$S�@ 4�.bfe�.lfe.efe�.debug$F	.text
)�hn.debug$S�
Y
 A)�.bf
e�.lf
e.ef)
e�.debug$F
.text
#��ǀ.debug$S�
v
 N#.bf
e�.lf
e.ef#
e�.debug$F
.textn��^c.debug$S(� ]n��__chkstk .bfe�.lfe.efne�.text�����.debug$S�� k��&_memset .bfe�.lfe.ef�e�.text��dL.debug$S'? w��h.bfe�.lfe.ef�e.text�`�.debug$S{� ��.bfe.lfe.efe.debug$F.text0�.debug$S~� �^ .bfe.lfe.efe
.debug$F.text�
ד�.debug$S�� ���!.bfe.lf
e.ef�e1.texts��_.debug$S�� �s�#.bfe4.lfe.efsep.text �	�3�.debug$S!� �  ��I'_memcpy .rdata"���".bf e.lf e.ef� ek.debug$F# .text$\��.debug$S%�$.file���gc:\program files\microsoft platform sdk for windows server 2003 r2\include\strsafe.h0$ �&*.bf$e�.lf$e.ef$e�.debug$F&$.text'ILe.debug$S(i'.file��gc:\program files\microsoft research\detours express 2.1\src\creatwth.cppN' �I�1m z5'��� _strlen .bf'es.lfL'e.efI'e�.debug$F)'.text*�Y4��.debug$S+*�* ���6��.bf*e�.lf*e.ef�*e�.text,�Y4��.debug$S-,, ��/:8.bf,e�.lf,e.ef�,e
.debug$T.dQ?StringCopyWorkerA@@YGJPADIPBD@Z?detour_sum_minus@@YAGGG@Z?detour_sum_done@@YAGK@Z?detour_sum_data@@YAGKPAEK@Z?detour_sum_final@@YAGGPAU_IMAGE_NT_HEADERS@@@Z?ChkSumRange@@YAGGPAXPAE1@Z__imp__ReadProcessMemory@20?ComputeChkSum@@YAGPAXPAEPAU_IMAGE_NT_HEADERS@@@Z__imp__GetLastError@0__imp__VirtualQueryEx@16?FindAndAllocateNearBase@@YAPAEPAXPAEK@Z__imp__VirtualAllocEx@20?PadToDword@@YAKK@Z?PadToDwordPtr@@YAKK@Z?IsExe@@YAHPAXPAE@Z?FindExe@@YAPAXPAX@Z_DetourCopyPayloadToProcess@16??_C@_07HBMFLGHI@?4detour?$AA@__imp__WriteProcessMemory@20?StringCchCopyA@@YGJPADIPBD@Z?UpdateImports@@YAHPAXPAPBDK@Z??3@YAXPAX@Z$finish$24133_DETOUR_EXE_RESTORE_GUID__imp__VirtualProtectEx@20??2@YAPAXI@Z_DetourCreateProcessWithDllA@52__imp__ResumeThread@4__imp__CreateProcessA@40_DetourCreateProcessWithDllW@52__imp__CreateProcessW@40image.obj/      1172497012              100666  66835     `
L�t��E��.debug$S@�4.@B.dataH.@0�.text;X.�.
 `.debug$S��.�/@B.text	�/�/ `.debug$S��/l0@B.debug$F�0�0@B.text�0�0 `.debug$S��0J1@B.debug$Fh1x1@B.text�1�1 `.debug$S��1.2@B.debug$FL2\2@B.textf2m2 `.debug$S�23@B.debug$F3.3@B.text:83r3�3 `.debug$S��3�4@B.debug$F�4�4@B.textr�4W5�5 `.debug$S�+6�6@B.debug$F77@B.text7:7 `.debug$S�|78@B.debug$F78G8@B.textQ8e8 `.debug$S��8,9@B.debug$FJ9Z9@B.text)d9�9�9 `.debug$S��9�:@B.debug$F�:�:@B.text�:�: `.debug$S��:�;@B.debug$F�;�;@B.text)�;
< `.debug$S�U<�<@B.debug$F==@B.textr=�=�= `.debug$S->.?@B.text�L?�?@ `.debug$S`@qA@B.textb�A�A#B `.debug$S�wBjC@B.text �C�C `.debug$S��CyD@B.debug$F�D�D@B.text8�D�D `.debug$S�E�E@B.debug$F�EF@B.textF&F0F `.debug$S�ZF�F@B.debug$FGG@B.text>!G_G `.debug$S��G0H@B.debug$FNH^H@B.texthHyH�H `.debug$S��HiI@B.debug$F�I�I@B.text�I�I�I `.debug$S��I�J@B.debug$F�J�J@B.text�J�J�J `.debug$S��J�K@B.debug$F�K�K@B.textW�K*L>L
 `.debug$SzL�M@B.debug$F�M�M@B.text�M�M `.debug$S��M�N@B.debug$F�N�N@B.text�N�N `.debug$S��N�O@B.debug$F�O�O@B.textU�OP	 `.debug$SSPnQ@B.debug$F�Q�Q@B.textN�Q�Q `.debug$S#RAS@B.debug$F_SoS@B.textyS�S�S `.debug$S��S�T@B.debug$F�T�T@B.text"�TUU `.debug$S�$U�U@B.text+VHVRV	 `.debug$S��VW@B.debug$F<WLW@B.text�VW@XhX `.debug$S�
Y�Z@B.text*�Z `.debug$S�Z�[@B.text"�[ `.debug$S\]@B.debug$F9]I]@B.text-S]�]�] `.debug$S��]�^@B.debug$F�^�^@B.text �^�^�^ `.debug$S�_�_@B.debug$F�_�_@B.text�_`)` `.debug$S�G`�`@B.debug$Faa@B.text
a+a `.debug$S�Ca�a@B.debug$Fb(b@B.text2bBb `.debug$S�Zb(c@B.debug$FFcVc@B.text`czc `.debug$S�c�d@B.debug$F�d�d@B.text�dee `.debug$S�,e�e@B.debug$F�ef@B.textKf\f `.debug$S	�f�g@B.debug$F�g�g@B.text*�g�g
h
 `.debug$S�Ihi@B.debug$F9iIi@B.textjSi�i�i `.debug$SYjYk@B.debug$Fwk�k@B.text
�k�k�k `.debug$S��kRl@B.debug$Fpl�l@B.text��l)mem `.debug$S"�m�n@B.text4oEoOo `.debug$Smop@B.debug$F�p�p@B.text1�p�p�p `.debug$Sqr@B.debug$F=rMr@B.text_Wr�r�r
 `.debug$S�st@B.debug$F3tCt@B.textpMt�t�t `.debug$S%u4v@B.textRvnv `.debug$S��vEw@B.debug$Fcwsw@B.text}w�w�w `.debug$S��wxx@B.debug$F�x�x@B.text�x�x�x `.debug$S��xty@B.debug$F�y�y@B.text��yLz~z `.debug$S�z�{@B.debug$F||@B.textl"|�|�| `.debug$S}~@B.texth%~�~�~ `.debug$S�~�@B.debug$F��@B.textE�P���!� `.debug$SN���@B.rdata�@[email protected]�"���Ζ5� `.debug$S�����@B.debug$FĞԞ@B.textޞ��� `.debug$S�,�ß@B.debug$F��@B.text-��(�<� `.debug$S�`�"�@B.debug$F@�P�@B.textZ�r��� `.debug$S���1�@B.debug$FO�_�@B.textWi���� `.debug$S�L�J�@B.debug$Fh�x�@B.text���� `.debug$S���{�@B.debug$F����@B.text���:��� `.debug$S���@B.debug$F�.�@B.textx8���� `.debug$SR�a�@B.debug$F����@B.text�������
8 `.debug$SL�W�@B.text+����� `.debug$S����@B.debug$F����@B.text*ȱ�� `.debug$S$�5�@B.text
S�`�j� `.debug$S���,�@B.debug$FJ�Z�@B.textd��� `.debug$S���S�@B.debug$Fq���@B.text0����� `.debug$S�
�Ҷ@B.debug$F��@B.textR
�\���
 `.debug$S�Էz�@B.debug$F����@B.debug$Td��@B��MC:\Program Files\Microsoft Research\Detours Express 2.1\src\image.obj8

�

�Microsoft (R) Optimizing Compiler�P$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + =$T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + = $ebx $T0 8 - ^ =$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + = $ebx $T0 12 - ^ =$T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ =$T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 8 - ^ = $ebx $T0 4 - ^ =$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + = $ebx $T0 28 - ^ =$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + = $ebx $T0 120 - ^ =$T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + =$T0 $ebp 116 + = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + =$T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebp $T0 4 - ^ =$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + = $ebx $T0 32 - ^ =��s_rbDosCodezCOR_VERSION_MAJOR_V21IMAGE_NT_HEADERS32�FILEoIMAGE_FILE_HEADER"ULONGLPADDRESS64LONGLONG�_DETOUR_SECTION_HEADER�Detour::CImageCharsCDetour::CImageImportNamepDetour::CImage>Detour::CImageImportFile|Detour::CImageThunks5Detour::CImageData
"SIZE_T1IMAGE_NT_HEADERSPKDHELP#ULONGLONG�IMAGE_DEBUG_DIRECTORYtPIMAGE_THUNK_DATA32x_IMAGE_OPTIONAL_HEADER"LPDWORD�PIMAGE_DEBUG_DIRECTORY�_IMAGE_THUNK_DATA32tBOOLo_IMAGE_FILE_HEADER"_KDHELP!wchar_tqSTRSAFE_LPWSTRpPCHAR�STRSAFE_LPCWSTR#zReplacesCorHdrNumericDefines+IMAGE_DOS_HEADERPCUWSTR�IMAGE_THUNK_DATA32�PDETOUR_CLR_HEADER&QPF_DETOUR_BINARY_BYWAY_CALLBACK
!USHORTPVOID�_IMAGE_SECTION_HEADER%TPF_DETOUR_BINARY_FILE_CALLBACK
�_iobuftPIMAGE_THUNK_DATAxIMAGE_OPTIONAL_HEADER32PKDHELP64pSTRSAFE_LPSTR"DWORDpva_list�DETOUR_SECTION_HEADER
HANDLE+_IMAGE_DOS_HEADER!WORD�PIMAGE_IMPORT_DESCRIPTORADDRESS_MODE BYTELPCVOIDPDETOUR_BINARYLPADDRESS#DWORD64qWCHAR PBYTELONG�_IMAGE_DEBUG_DIRECTORY~STRSAFE_LPCSTR'WPF_DETOUR_BINARY_SYMBOL_CALLBACK|IMAGE_DATA_DIRECTORY
!PUWSTR
usize_t�PIMAGE_IMPORT_BY_NAME|_IMAGE_DATA_DIRECTORY�_DETOUR_SECTION_RECORD1_IMAGE_NT_HEADERS_GUID_tagADDRESS64_tagADDRESS�_IMAGE_IMPORT_BY_NAME_KDHELP64GUID�PDETOUR_SECTION_RECORDpCHAR�IMAGE_IMPORT_DESCRIPTOR"ULONG_PTR�DETOUR_CLR_HEADER�_IMAGE_IMPORT_DESCRIPTOR'YPF_DETOUR_BINARY_COMMIT_CALLBACKHRESULTuUINT'PIMAGE_DOS_HEADER�IMAGE_SECTION_HEADER�_DETOUR_CLR_HEADER
��	�!�L�!**U��3�9Eu�W��&�UV�u���t	�
BF�Mu�}^uJ�z��]�

"
'./47�D;�7;7�StringCopyWorkerAppszDestucchDest~pszSrcx|
3�9A���&�$	i�A	0Detour::CImageData::IsEmpty
#this&X&\&
	&9D$v�D$�3
�$i�1
�Detour::Max"a
"b3X3\3
3I���#��@�$i�3�Detour::Align
"a
"size@X@\@
@������M�$i�7�Detour::QuadAlign
"aMXM\M
M��t3VWS��pV�����YYu
j��VSW�����_^�3��_^!]+\Z%'2
6
79
�d:i1i/i�=:9�Detour::DuplicateStringppszInZ�Z�Z
:Z��u3���WSt4P���YYtSS��6���;�YYuGWS�6�/�6��&����YGW���Y�u
j��WSP����_�n_&_:mD_N^]]g\k!
!0
57>ACKRYacn q!�Driei�;rq�Detour::ReplaceString
�ppszppszInkxk|k
rk��3ɉ�H�H�H�H�H�H�H �H�z	

�$i�P8Detour::CImageImportFile::CImageImportFile
7thiszXz\z
z��3ɉH�Hf��H�HÇ

�$i�P@Detour::CImageImportName::CImageImportName
?this�X�\�
�V��F��tP��fY�F��tP��fY^�mm�
"(	�D)i'i�Q)(@Detour::CImageImportName::~CImageImportName
?this�x�|�
)����L$�`��L$�H���$i�D%Detour::CImageData::CImageData
#this pbData"cbData�X�\�
������t�@�����r�yu
�;�r�3�@�3�î"%&(�$)i�A)(0Detour::CImageData::IsValid
#this�X�\�
)�U��SV����U3�;�t9�
�A9Cr/�W�}�;�t�p�����M��_t�0���1�+ȉ
����E;�t�09utjV�u���3�^[]��c��"+2:AINUW	\
jn��rj�h�"��Crn)Detour::CImageData::Enumerate
#this'pGuid"pcbData"pnIterator�����
U��QSVW����F3҅��E�vv�6�M��8;}�wg��r[�X;uTf�Xf;YuJf�Xf;Yu@�X:Yu8�X:Y	u0�X:Y
u(�X:Yu �X:Yu�X:Y
u�X:Yu�X:Yt�;U�r��E��t� 3�_^[���M���9����
��	"$).�� �!�#�$�����	�:�:�:�>�	�+Detour::CImageData::Find
#thisrguid"pcbData�����
U��QV����e��E�P�u�����uj~�3��/�W�}������+�NtQRP���)~���3�@_^����&]H�U��"*	.BDORY^�dbY1,�@b^/Detour::CImageData::Delete
#thisrguid����"cbFound�����
�yv�A�T$��A�	�D$� 3����$ i�C xDetour::CImageThunks::Current
rthis"pnVirtAddr�X�\�
 ��A;As$�A�T$��A�A�T$�A��A�P�Q�	�D$� 3���!,	3
5�$8i�D85yDetour::CImageThunks::Allocate
rthis"nData"pnVirtAddr�X�\�
8��D$��t�8���t
j�3��]�	
�$i�=HDetour::CImage::IsValidpBinary�X�\�
���3������H�H�������������H�������
	"
(+17=�$>i�<>=GDetour::CImage::CImage
FthisX\
>�I��u3���
�	�$i�>KDetour::CImage::DataEnum
Fthis'pGuid"pcbData"pnIteratorX\
�I��u3���
�	�$i�>LDetour::CImage::DataFind
Fthisrguid"pcbDataX\
�I��u3���
�,	�$i�@NDetour::CImage::DataDelete
Fthisrguid,X,\,
,�T$S���V������W�8߃���|$�����;��vj�3��RjV�����_^[�;]H�9+/7	?
C
OT��WiO�G�
9��DWTcDetour::CImage::AllocateOutput
Fthis"cbData"pnVirtAddr9�9�9
W9����D$I���#��F�$i�?eDetour::CImage::FileAlign
Fthis"nAddrFXF\F
F����D$I���#��S�$i�BeDetour::CImage::SectionAlign
Fthis"nAddrSXS\S
SS�\$3���t-UVW�y^��v��`�r�;�r�*�;�r@��(;�r�3�_^][�������d+�\A���`	+39��Ui8�,
*(�=U9dDetour::CImage::RvaToVa
Fthis"nRva`�`�`
U`SUVW�y^3���v!�\$��`�r�;�r�*�;�r@��(;�r�3�_^][�������d+�\���m'/5��Ni4�20.�EN5eDetour::CImage::RvaToFileOffset
Fthis"nRvam�m�m
Nmj�t$�t$�t$�t$��|z�$i�?]Detour::CImage::WriteFile
FthishFilelpBuffer "nNumberOfBytesToWrite!"lpNumberOfBytesWrittenzXz\z
zU��Q�e��E�P�A�uEP�u���z��$"�B"_Detour::CImage::CopyFileData
FthishFile"nOldPos"cbData����"cbDone�X�\�
9D$u3�Ã|$t��tP�t$���Y�Y���3�@�n�	&'*�$+i�4+*�Detour::strneqppszOneppszTwo�X�\�
+�U���S3�V��;�]�]��]���W�v ��\3���G#�؃~Yt�E��}��t�}�u�v �F���Yt�}�3�9F�E�vQ�E�~}�}�u�w�G���Yt�E����tW��\�Ã�Y��E��E��E��E�;Fr��E��6�E���X���_�E�M@��E�M���E��E�^[��&_S���_�
"	.
7>DF\_lr���!�"�$�'�(�*�,�-�.�0�1���
��
��"���H�
�gDetour::CImage::CheckImportsNeeded
Fthis"pnTables"pnThunks"pnChars����tfNeedDetourSection����"nTables����"nThunks����"n�����
U��E�M��W�}�HxV�p+}���UNu�^_]��d*

�B*
&�`vector destructor iterator'__tu__st__n�__f�����
�D$HxV�t$W�x���T$t$Ou�_^��d"ii
i�C"�`vector constructor iterator'__tu__st__n�__f�����
"��t$���Yt�H��u3���t$�t$�t$���&��	*�$-i�C-*�DetourBinaryEnumeratePayloadspdi'pGuid"pcbData"pnIterator�X�\�
-��t$���Yt�t$���t$����	�$ i�= �DetourBinaryFindPayloadpdirguid"pcbData�X�\�
 ��t$���Yt�t$�����,�	�$i�?�DetourBinaryDeletePayloadpdirguid�X�\�
��D$� 3�@��
�$
i�8

PResetBywayCallbackpContextppszFile�ppszOutFile�X�\�

��D$�L$�3�@��

�$i�7
SResetFileCallbackpContextppszOrigFileppszFile�ppszOutFile�X�\�
��D$�L$��D$�L$�3�@��
�$i�9VResetSymbolCallbackpContext"nOrigOrdinal"nOrdinal"pnOutOrdinalppszOrigSymbolppszSymbol�ppszOutSymbol�X�\�
��|$���v�W���

	�$i�4�StringCchCopyAppszDestucchDest~pszSrcX\
S�\$��V��t$Wh�~��7jV���tW�Y��_������tV�Y��^[���'m4�?m��KiG�
	>�!��\KHADetour::CImageImportName::`vector deleting destructor'
?this��
KVW���3�9~u�>�;�t	P�Y�>�~�~_^��m$	!
$)�d*i(i&i�E*)&Detour::CImageData::~CImageData
#this$�$�$
*$SV����\$;^w3�@�NWS�����Yuj�3��3���t�vPW����~v�6�Y�&�Ή>�^�3�@_^[��^)]=\Mm]�1	 %	-
1
7DJRUag��jif�d�M��@jg1Detour::CImageData::SizeTo
#this"cbData1�1�1
j1�a�3�@��>	�$
i�?
0Detour::CImageData::Purge
#this>X>\>

>U��QSV��u���u����]�F������DP�����tc�F�uW�K�3�9M�H�x�����pt!�}W�uV���;�s��+�Pj�>P�;�vSQV����M���Y���_^[����.1a\����K6
;
FXhlwy}���� ����:�:?Z:�=��-Detour::CImageData::Set
#thisrguid pbData"cbDataK�K�K
�D$V��L$�fW�F�~W��P���L$�F��_��^�9V".	�d4i,ii�H41vDetour::CImageThunks::CImageThunks
rthisEpImage"nThunksMax"pnAddrV�V�V
4V�D$V��L$�fW�~WP��F��L$�F��_��^�9c+�d1i)ii�F1.Detour::CImageChars::CImageChars
~thisEpImage"nCharsMax"pnAddrc�c�c
1cVW�t$�����G�ǃ���F�;FYv	�D$� ��t$�F�L$��v�v���}3���F~~�8�N_^�	_?p")+
CG
KNQ\�d_i[iYi�C_\�Detour::CImageChars::Allocate
~thisppszString"pnVirtAddrp�p�p
_pU��VW�u��������ǃ���F�;FYv�E� �'�F�M�u��Ff�Mf��F�v@@P���}3���N~�A�~�N_^]�_M}&,.	4Q
UY\dl�dp
hf�Cp
l�Detour::CImageChars::Allocate
~thisppszString"nHint"pnVirtAddr}�}�}
V����D$tV�Y��^�$m�Dii�V3Detour::CImageData::`scalar deleting destructor'
#this�x�|�
��I��u3���
K�	�$i�=MDetour::CImage::DataSet
Fthisrguid pbData"cbData�X�\�
��I��u3�@��>�
�$i�?JDetour::CImage::DataPurge
Fthis�X�\�
�SV��L$9��W���;�s�ȋ��H�<��#�W��؅�Yuj�3��S�����t"���PS���������������+�Q�jP���������3�@_^[�0^?]Z\em��� .6;	C
G
Q^ls������i�������F��aDetour::CImage::SizeOutputBuffer
Fthis"cbData�����
��U��VW�V�����tRVj�����u����v1jX;�w�ƃe�MQP������u���t�}t+uu�3�@_^]�3���� �Lz�$.	7
;TZ]_dh
�dl
`	^�Bl
d`Detour::CImage::ZeroFileData
FthishFile"cbData"cbDone�����
S�\$V�񋆔�VHW�~�����#ȋ��H���#Ѓ���N�Vt);�v%jjWS����u3���F+�PS����3�@_^[�B�Y��6:K	O_e��hid�^�P��CheIDetour::CImage::AlignFileData
FthishFile�����
h�U���pS3ۃ}�V��]؉]�uj�JS�u�������t;SSSjS�u�;ÉFt%SSSjP�;ÉFtf�8MZth��3����H<W�������H<j@P���F���P�������Fh�P�~XW����?PEt
h��kf�Flf;��Y������Lf�F^f=����8������P�F�P��PP���f9^^�]�]��]܉]vi��d�G�hP���YYu@�Fj@P�E�P��E��E�E���;�t���@�������O��G���M��E��F^�E��(9Er��������u���}��;ÉE�u�ljE�;��p;��h�]���E��9u�9]썆�E��]��E��p����؅��+j$���Yt������3������E�8���}�����G ���E��O�H�O�H3ۉO�M��_�_�_9Hr�M�9Hs�_�G�g�E��p���;���������G���E��0����؋E��0�]���e��ۉE���;��E��E��<�u�����؍���P�_���YthS���jP�E���E��3����G��3�9]����]����M��E�+��M��E���EЋM��_�_f��_�_���y
%���G�G�QP���;�tf��Xf�����G��3ۋE����x�P���;�t�X����G�q3��E�E�E���;E��p����E��E��E���E�E;E������3�f9^^����]����d�G����;�w������G�hP���YY���Fj@P�E�P���9]�u�E��E��E�+E������EԋF�E��E؋G��;�w��f�N^����E�����E�����E���(�E���,�E���0�E���4�E�������dž�F^�E��(9E����j�;�Yt�M؉�MԉH�X�j�3�;ÉFuj�3�@�
h��3�_^[��"�<�O�h]�\�\\4�:nQ\�`�`�`	^z6Z�`�Z�`�`^���`�Z�`�Z5�;nV\�^(]8]�	&
/1@EGSXZal s"}#�$�&�*�+�,�-�/�1�6�;�=�AI*A0JDNUP[QeRpSvUyV�_�a�c�d�f�k�l�r�t�uz{'�,�5�:�E�M�S�V�[�t�w�~�������������������������(�3�V�k�o�w�z�|��������������������������������1�I�]�b�h�n�p������
�
������%$ ,"1g<hA&��Ep:p	2pw�p�:EAIDetour::CImage::Readfail
FthishFile����"cbData����"nFiles�����oidp����"rvaDetourEnd����"rvaDetourBeg$����"rvaOriginalImageDirectory���� pbData"n�����ppLastFile�����iidp
�����dh����tpAddrThunk����tpLookThunk����"nNames����"f
�����dh�����
����
.detourU�l$����}|�S��uj�3��oVW�EhP�Ep3�P�EdP�ˉ{�{�}d�}p�}h��5WWW�u|�EL�փ��������W�u|����9}L�|�C9x�p9��tL����KlWWW�u|�L�������CT�փ�������������u|���������u|�ˉC�{����|f9{^�}l����`9>t.WW�v�u|�����N�6���v�u|����7�F�S;�v�ЋK�S�F�F�;�w���C����;�v���u|���������C^�El��(9El�v���9}Lu�C9x�}3�f�C^��j@W@f�C^�E�P����4�j(��PWP�u`�����E苃��E싃(�E���,�E�0�E���4�E�����E��@��;��E�@�E�Dtrt)9�Dt!P���;�tj��Y�} �E0�u`�E3�hj��PP������Updžt@��C�K����C�������}��A�E䋃��E�I�Ed�������E`�����������LQ@�Uh������������R�ˉ}P����u�ElPj@�ˉ}l�}d�;ljE\�W�ETP������;ljET�;�EHP�up�M4S��EHP�up�M�S��EHP�uh�M S��EdP�C�p���;ljEp���Ed+El�K�E��I�j@�E�P�u\�M��������CP�uT��C�p�0�up���$�EPP�u`���;ljEh�����R�KljPXWWW�u|��h�������CT�փ���T�EXPj@�CP�u|������8W�EXPjh�u|��|�����Eh����P�Ep�p �M ��Eh�Mp�x�Q�P9yt4Ph��M4��Eh��Ph��M���E\PW�M4��M��z�Ep�H�Eh�HP�M4��Ep9x�}lvW�}d�Ep�@Ed�H;�t��UTRPQ�M �}T��E\P�uT�
�@�M\Q-�P�M4��El�Ep�Ml�Ed;Hr��M4�E\PW��Ep�Eh�;�jW�uh�Ep���������K������u|H���#�K������������\�����X�����d������H���#ȋEP��`W����E`W�����(��,��d�u|�����s�EXP��`������u|����Q�K+��3�f9{^�MPv@��h�P�;��vщP��;��vщ�P;��vщP�S^F��(;�rƋCd;��v��Cd�C��;����������E`��;���V���WWP�u|������V�����;����E`j3�^���}l;ljE`vM�Md�udjY�}�E0;��v�EPE0j�EXPj�EP�u|����@�El�El�Ed;E`r�3���@;�tg9�Dt_9}LtZV���WWP�u|������V���;���jY��j�EXPj�E4P�u|�}4�eD������3����;���5v1WW�s�u|�փ����������+�QP�u|�����tyWW����u|�փ��tg�EXPh��CXP�u|�����tLWW����u|�փ��t:�EXP�C^����P��PP�u|�����tjWW�u|�փ������u3��
���+�3��@_^[��t��]E�K�p�����$�<�������I`g�u��959PV`Vpc�9�\�\�\�9;zOX|b�zp��������	}'�F�e�����"z�m���`3|kmw��`�|����+zaz�%I]cv|�.�/�3�7�8�:�@�B�CIHJM1RHXV[k\y^�c�f�i�j�p�r�v�x{}"�+�E�M�Q�[�f�y�{����
�"�(�>�D�T�d�t���������������������"%#+%A&G(a�o�~�����������������������������
���=�MUir{
�������$%(()./70B/H1S2X4b5f7q8�;�<�@�E�H�I�J�K�N�O�P�S�TSUWX"ZPcVfggoh~i�l�m�n�r�u�v�u�|�}�~������1�3�C�E�g�i�r����������������$n��%l���;��IDetour::CImage::Write
Fthis|hFileLtfNeedDetourSectionh"nCharsPnExtraAdjust`"debugSized"nTablesp"nThunksl"nX"cbDoneP"rvaImportTableH"rvaBoundTable4|lookupTable �nameTableH"rvaNameTable`"nImportTableSizeT"vaPrePE\ pbHead����|boundTablep pbDatah�piidDstd"vaData�����dhH"rvaLookupTablel"vaHeadT pbPrePE �hdrp9pImportFile\"rvaIgnored\"rvaIgnoredT"nDstName`"nEntries�dir4�hdr�����
�,��t$���Yt�t$�������	�$i�7�DetourBinaryWritepdihFile�X�\�
��t$���Yt�H��u3���t$�t$�t$���&K�	*�$-i�<-*�DetourBinarySetPayloadpdirguidpvData"cbData�X�\�
-��t$���Yt������	�$i�?XDetourBinaryPurgePayloadspdiX\
SV��W�>3�;�t���W�Y��N;�t
j��^�^�F ;�t
P�Y�^ �F;�t
P�Y�^_^[�m':mKm
$+.1
8?BIPV��WiU�S�O��QWV8Detour::CImageImportFile::~CImageImportFile
7this��
WV����D$tV�Y��^�m�Dii�\<Detour::CImageImportFile::`scalar deleting destructor'
7this"x"|"
"SUV��W���3�;�t���S�Y�/���~;�t���W�Y�n�F;�t
P��n�F;�t
P��n����;�tP�Y�/���_^3�]@[�m4$:mL,]+rm)"$*1?	BI
PSZadpwy�����i���~z�;��JDetour::CImage::Close
Fthis)�)�)
�)UVWj$���3�;�Yt������3�;�u
j��)S�\$�.�F�;ʼnF [u���V�Y3���n�n�n�n�n����_^]�^z(]=ZLRm8 $,/
AIW[^adgjpu��xitmrmpm�>xuiDetour::CImage::NewBywayfail
FthisppszName8�8�8
�:�:
x8U���SVWjx�M썙�3��i9ut9�E�PV�u�u��U����9u�t�u��M��;����8����+9wtb9u��M��w �QP�u�E��U���N�}�t�]�����8�����'���W��E���Y�T���9ut4�M�Q�w �P�w�E��u�U�����]���t
�����3�9u��9w�u�vx�u��_]��U�R�s��E�KP�M��s�E�PQ�s�u�U�����}�t�c�]����t{��E��t�C���t
P��&Y�E��E��E�;Gr�3��ߋ;;������9ut.�EPV�u�u�U��t+9ut�u�M��;�t�8�����9ut�u�U��u3��
V�3�@_^[��]H8�k��m�kSkom�8�]F	!&
<ALTVXZ_dm �$�%�)�*�+�,�.�/�4�8�<�=�CDEOESKTOU[YdZg\m]s^�D�e��j�l�o�q�r�v�w�x������������������	���A��[Detour::CImage::EditImportsfail
FthispContextQpfBywayCallbackTpfFileCallbackWpfSymbolCallbackYpfCommitCallback����ppszFile����ppszFile����ppszFile����"n����"nOrdinal����ppszNameppszFileF�F�F
�H�H
�t$���Ytjhhhj��������$FR	
(�$+i�>+(XDetourBinaryResetImportspdiRXR\R
+RU���u���Yt�u���u�u�u�u�]��"F_
&�$*�=*&�DetourBinaryEditImportspdipContextQpfBywayCallbackTpfFileCallbackWpfSymbolCallbackYpfCommitCallback_X_\_
V����&^�)j�D
ii�=
GDetour::CImage::~CImage
Fthisjxj|j

jV����D$tV�Y��^�jm�Dii�RnDetour::CImage::`scalar deleting destructor'
Fthiswxw|w
wV�t$�����YtW����΋��V�Y��_^��)j$m~)
-�d0i,ii�70-XDetourBinaryClosepdi~�~�~
0~Vh���Yt������3���u
j���t$�����u���V�Y3����^�^%]2�=jCm�!)+:H	LO
�DRiNi�6RO�DetourBinaryOpenhFile�x�|�
R�^��^o(YC�]�z�|e8c:\program files\microsoft research\detours express 2.1\lib\detours.pdb.file��gC:\Program Files\Microsoft Research\Detours Express 2.1\src\image.cpp@comp.id�`��@feat.00��.debug$S@.data��.text;
0gl_.debug$S�.file!��gc:\program files\microsoft platform sdk for windows server 2003 r2\include\strsafe.h ;�..bfeq.lf
e.ef;e�.text	�`�
.debug$S�.file��gc:\program files\microsoft research\detours express 2.1\src\image.cpp2 (	�/.bfe�.lfe.ef	e�.debug$F.text�^
.debug$S	�U 5�0.bfe$.lfe.efe&.debug$F
.textG��S.debug$S�j B�1.bfe).lfe.efe,.debug$F
.text0�.debug$S�� Om2.bfe/.lfe.efe1.debug$F.text:�^a�.debug$S�� `:�3_memcpy �� _strlen .bfe4.lfe.ef:eA.debug$F.textr<8�P.debug$S�� or�5	 _strcmp .bfeD.lfe.efree.debug$F.textK-+O.debug$S� |:7.bfej.lfe.efew.debug$F.text{8�k.debug$S�9 �e8.bfe�.lfe.efe�.debug$F.text)j�V%.debug$S�\ �)�9.bfe�.lfe.ef)e�.debug$F.text �i9�.debug$S!�   ��:.bf e�.lf e.ef e�.debug$F" .text#)�A�.debug$S$�#�# �)
<.bf#e�.lf#e.ef)#e�.debug$F%#.text&r*���.debug$S'-&�& �r�=_memset .bf&e�.lf&e.efr&e.text(�h�D5.debug$S)(�( ��@.bf(e.lf(e.ef�(e3.text*b%��.debug$S+�*'* �b#B_memmove .bf*e>.lf*e.efb*eW.text, �fc�.debug$S-�,S, � �C.bf,e�.lf,e.ef ,e�.debug$F.,.text/8��".debug$S0�/�/ �8�D.bf/e�.lf/e.ef8/e�.debug$F1/.text2[`f�.debug$S3�2�2 �0F.bf2e.lf2e.ef2e.debug$F42.text5>�*
.debug$S6�5�5 >_G.bf5e.lf5e.ef>5e#.debug$F75.text8+���.debug$S9�88 �H.bf8eM.lf8e.ef8eQ.debug$F:8.text;8��3.debug$S<�;B; !�I.bf;eU.lf;e.ef;eY.debug$F=;.text>L�h�.debug$S?�>q> .�J.bf>ee.lf>e.ef>ei.debug$F@>.textAW
M��.debug$SBA�A ;W>L.bfAe�.lf
Ae.efWAe�.debug$FCA.textD7�b�.debug$SE�D�D H�M.bfDe�.lfDe.efDe�.debug$FFD.textG1_ʬ.debug$SH�G�G U�N.bfGe�.lfGe.efGe�.debug$FIG.textJU	��v�.debug$SKJJ bUP.bfJe�.lf	Je.efUJe�.debug$FLJ.textMN�+N7.debug$SN#M2M oN�Q.bfMe�.lfMe.efNMe�.debug$FOM.textP����.debug$SQ�PZP }�S�.bfPe�.lfPe.efPe�.debug$FRP.textS"���.debug$ST�S�S �"U.bfSe�.lfSe.ef"Se�.textU+	��F�.debug$SV�U�U �+RV.bfUe>.lf	Ue.ef+UeF.debug$FWU.textX��<�.debug$SY�X�X ��hX.bfXeI.lfXe.ef�Xez.textZ*�D�.debug$S[ZZ .text\"�7<�.debug$S]\"\ .debug$F^\.text_-��^.debug$S`�_;_ �-�].bf_e�.lf_e.ef-_e�.debug$Fa_.textb h��.debug$Sc�b]b � �^.bfbe.lfbe.ef be
.debug$Fdb.texte���.debug$Sf�eye �)`.bfee.lfee.efee".debug$Fge.texth
��`0.debug$Si�h�h �
+a.bfhe3.lfhe.ef
he9.debug$Fjh.textk6��A.debug$Sl�k�k �Bb.bfke?.lfke.efkeE.debug$Fmk.textnh�.debug$Son�n �zc.bfneN.lfne.efneV.debug$Fpn.textq\��.debug$Sr�q.file��gc:\program files\microsoft platform sdk for windows server 2003 r2\include\strsafe.hq 
e.bfqe�.lfqe.efqe�.debug$Fsq.texttKZ�3*.debug$Su	t-t .debug$Fvt.textw*
�:H�.debug$Sx�w.file��gc:\program files\microsoft research\detours express 2.1\src\image.cppTw &*
h.bfwe�.lf
we.ef*we�.debug$Fyw.textzj���.debug$S{zqz 3j�i.bfze�.lfze.efjze�.debug$F|z.text}
�$E.debug$S~�}�} @
�k.bf}e�.lf}e.ef
}e�.debug$F}.text����،.debug$S�"��� M�em.bf�eZ.lf�e.ef��ez.text�4xb�.debug$S���� X4Oo.bf�e�.lf�e.ef4�e�.debug$F��.text�10d�z.debug$S��� e1�p.bf�e�.lf�e.ef1�e�.debug$F��.text�_
�9.debug$S���A� r_�r.bf�e�.lf
�e.ef_�e�.debug$F��.text�p�Rx.debug$S��n� p�t.bf�e�.lf�e.efp�e�.text��R�.debug$S����� .debug$F��.text�+���.debug$S����� ��w.bf�e].lf�e.ef�ea.debug$F��.text��|�.debug$S����� ��x.bf�em.lf�e.ef�eq.debug$F��.text���<�.debug$S��
� ��~z.bf�ew.lf�e.ef��e�.debug$F��.text�l��XO.debug$S��6� �l�|.bf�e�.lf�e.efl�e�.text�h=6U?.debug$S��^� �h�~�.bf�e.lf�e.efh�e.debug$F��.text�E!��F�`.debug$S�N��� �E���<�.rdata������		.bf�e.lf��e.efE�e;.text��5�80�;.debug$S���3	� ��Ζ.bf�e1.lf��e.ef��e�.debug$F��.text����.debug$S���S	� ��.bf�e�.lf�e.ef�e�.debug$F��.text�-��^.debug$S���h	� �-<�.bf�e.lf�e.ef-�e.debug$F��.text�7��.debug$S����	� 
��.bf�e%.lf�e.ef�e,.debug$F��.text�Wr�t\.debug$S����	� W�.bf�ez.lf�e.efW�e�.debug$F��.text��R�.debug$S����	� .debug$F��.text��~p
z.debug$S���	� -���

.bf�e,.lf�e.ef��eH.debug$F��.text�x��.debug$S��5
� ;x�m
K�.bf�e.lf�e.efx�e�.debug$F��.text��
8���H.debug$S��y
� I����
��.bf�e�.lf8�e.ef��e..text�+�)ƒ.debug$S����
� T+�.bf�eY.lf�e.ef+�ed.debug$F��.text�*<a�Q.debug$S���
� a*�.bf�en.lf�e.ef*�ey.text�
�.debug$S���� l
j�.bf�e&.lf�e.ef
�e).debug$F��.text��R�.debug$S���+� .debug$F��.text�0����.debug$S���H� �0�.bf�e|.lf�e.ef0�e�.debug$F��.text�R
��M.debug$S���]� �R��.bf�e�.lf
�e.efR�e�.debug$F��.debug$T�dq_s_rbDosCode?StringCopyWorkerA@@YGJPADIPBD@Z?IsEmpty@CImageData@Detour@@QAEHXZ?Max@Detour@@YAKKK@Z?Align@Detour@@YAKKK@Z?QuadAlign@Detour@@YAKK@Z?DuplicateString@Detour@@YAPADPAD@Z__imp__SetLastError@4??2@YAPAXI@Z?ReplaceString@Detour@@YAPADPAPADPAD@Z??3@YAXPAX@Z??0CImageImportFile@Detour@@QAE@XZ??0CImageImportName@Detour@@QAE@XZ??1CImageImportName@Detour@@QAE@XZ??0CImageData@Detour@@QAE@PAEK@Z?IsValid@CImageData@Detour@@QAEHXZ?Enumerate@CImageData@Detour@@QAEPAEPAU_GUID@@PAK1@Z?Find@CImageData@Detour@@QAEPAEABU_GUID@@PAK@Z?Delete@CImageData@Detour@@QAEHABU_GUID@@@Z?Current@CImageThunks@Detour@@QAEPAU_IMAGE_THUNK_DATA32@@PAK@Z?Allocate@CImageThunks@Detour@@QAEPAU_IMAGE_THUNK_DATA32@@KPAK@Z?IsValid@CImage@Detour@@SAPAV12@PAX@Z??0CImage@Detour@@QAE@XZ?DataEnum@CImage@Detour@@QAEPAEPAU_GUID@@PAK1@Z?DataFind@CImage@Detour@@QAEPAEABU_GUID@@PAK@Z?DataDelete@CImage@Detour@@QAEHABU_GUID@@@Z?AllocateOutput@CImage@Detour@@IAEPAEKPAK@Z?FileAlign@CImage@Detour@@IAEKK@Z?SectionAlign@CImage@Detour@@IAEKK@Z?RvaToVa@CImage@Detour@@IAEPAXK@Z?RvaToFileOffset@CImage@Detour@@IAEKK@Z?WriteFile@CImage@Detour@@IAEHPAXPBXKPAK@Z__imp__WriteFile@20?CopyFileData@CImage@Detour@@IAEHPAXKK@Z?strneq@Detour@@YAHPAD0@Z?CheckImportsNeeded@CImage@Detour@@IAEHPAK00@Z??_I@YGXPAXIHP6EX0@Z@Z??_H@YGXPAXIHP6EPAX0@Z@Z_DetourBinaryEnumeratePayloads@16_DetourBinaryFindPayload@12_DetourBinaryDeletePayload@8?ResetBywayCallback@@YGHPAXPADPAPAD@Z?ResetFileCallback@@YGHPAXPAD1PAPAD@Z?ResetSymbolCallback@@YGHPAXKKPAKPAD2PAPAD@Z?StringCchCopyA@@YGJPADIPBD@Z??_ECImageImportName@Detour@@QAEPAXI@Z??1CImageData@Detour@@QAE@XZ?SizeTo@CImageData@Detour@@IAEHK@Z?Purge@CImageData@Detour@@QAEHXZ?Set@CImageData@Detour@@QAEPAEABU_GUID@@PAEK@Z??0CImageThunks@Detour@@QAE@PAVCImage@1@KPAK@Z??0CImageChars@Detour@@QAE@PAVCImage@1@KPAK@Z?Allocate@CImageChars@Detour@@QAEPADPADPAK@Z?Allocate@CImageChars@Detour@@QAEPADPADKPAK@Z??_GCImageData@Detour@@QAEPAXI@Z?DataSet@CImage@Detour@@QAEPAEABU_GUID@@PAEK@Z?DataPurge@CImage@Detour@@QAEHXZ?SizeOutputBuffer@CImage@Detour@@IAEHK@Z?ZeroFileData@CImage@Detour@@IAEHPAXK@Z?AlignFileData@CImage@Detour@@IAEHPAX@Z__imp__SetFilePointer@16?Read@CImage@Detour@@QAEHPAX@Z$fail$24644??_C@_07HBMFLGHI@?4detour?$AA@__imp__MapViewOfFile@20__imp__CreateFileMappingA@24__imp__GetFileSize@8?Write@CImage@Detour@@QAEHPAX@Z_DetourBinaryWrite@8_DetourBinarySetPayload@16_DetourBinaryPurgePayloads@4??1CImageImportFile@Detour@@QAE@XZ??_GCImageImportFile@Detour@@QAEPAXI@Z?Close@CImage@Detour@@QAEHXZ__imp__CloseHandle@4__imp__UnmapViewOfFile@4?NewByway@CImage@Detour@@IAEPAVCImageImportFile@2@PAD@Z$fail$24757?EditImports@CImage@Detour@@QAEHPAXP6GH0PADPAPAD@ZP6GH0112@ZP6GH0KKPAK112@ZP6GH0@Z@Z$fail$24781_DetourBinaryResetImports@4_DetourBinaryEditImports@24??1CImage@Detour@@QAE@XZ??_GCImage@Detour@@QAEPAXI@Z_DetourBinaryClose@4_DetourBinaryOpen@4
disasm.obj/     1172497011              100666  24041     `
L-s��E.K�.debug$S�@B.rdataQa@@@.text4a1�1 `.debug$S��1�2@B.debug$F�2�2@B.text4�2�23	 `.debug$S�B34@B.debug$F24B4@B.text�L4�4 `.debug$STv5�6@B.text�6�6 `.debug$S�7�7@B.debug$F�7�7@B.text<�738G8	 `.debug$S�}89@B.debug$F<9L9@B.text&V9|9�9 `.debug$S��9�:@B.text��:�;�; `.debug$S%F<k=@B.text4�=�=�= `.debug$S%�=?@B.debug$F2?B?@B.text@L?�?�? `.debug$S"�?�@@B.debug$F
AA@B.text4$AXAlA `.debug$S�A�B@B.debug$F�B�B@B.text�B�B�B `.debug$S�C�C@B.debug$F�C�C@B.text�CDD `.debug$S�!D�D@B.debug$F�DE@B.textAEVEtE `.debug$S��ErF@B.textA�F�F�F `.debug$S�G�G@B.textXHcHwH `.debug$S��H�I@B.text�I�I�I `.debug$S��I�J@B.debug$F�J�J@B.debug$Td�J@B��NC:\Program Files\Microsoft Research\Detours Express 2.1\src\disasm.obj8

�

�Microsoft (R) Optimizing Compiler��$T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + =$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + = $ebx $T0 8 - ^ =$T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + = $ebx $T0 4 - ^ =�zCOR_VERSION_MAJOR_V2'
CDetourDis::s_rceCopyTable)
CDetourDis::s_rceCopyTable0F"
CDetourDis::s_rbModRm"ULONGLPADDRESS64LONGLONGLONG_PTR
"SIZE_TPKDHELP#ULONGLONGtBOOL"_KDHELP!wchar_t#zReplacesCorHdrNumericDefinesPCUWSTRPVOIDPKDHELP64"DWORD!WORDADDRESS_MODE BYTELPADDRESS#DWORD64qWCHAR PBYTELONG
!PUWSTR_GUID_tagADDRESS64_tagADDRESSCDetourDisCDetourDis::COPYENTRY_KDHELP64GUIDsw
��
�
�

$$$$$$$$"""""5"	"
"""
5"""""5"""""5 "!"""#"$"%5&'(")"*"+","-5./0"1"2"3"4"55678"9":";"<"=5>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ab"c"defgh5iFj"k3lmnop"q"r"s"t"u"v"w"x"y"z"{"|"}"~""�3�F�"�3�"�"�"�"�"�"�"�"�"�"�"�"�����������W������5 �5 �5 �5 �����"�5�������"�"�"�"�"�"�"�"�5��5�5�5�5�5�5�5�3�3�3��"�"�3�F�D��3���"���"�"�"�"�"�"���"�"�"�"�"�"�"�"�"@�"@�"@�"�"�"�"�"�5�5�W�"�������������������"�""""""	"
"
""3""""""""" "!"""#"$%&'(")"*"+","-"."/"0"1"2"3"4"5"6789:;<=>?@"A"B"C"D"E"F"G"H"I"J"K"L"M"N"O"P"Q"R"S"T"U"V"W"X"Y"Z"["\"]"^"_"`"a"b"c"d"e"f"g"h"i"j"k"l"m"n"o"p3q3r3s3t"u"v"w"xyz{|}~""�5�5�5�5�5�5�5�5�5�5�5�5�5�5�5�5�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�3�"���"�"�"�"�3�"�"�"�"�"�"�"�"�"�"�"���3�"�"�"�"�"�"�"�"�"�3�3�3�"�"�"�"�"�"�"�"�"��"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"�"��"�"�"�"�"�"�"�"�"�"�"�"�"�"�bbbb$b,b4b<bDbLbTb\bdblbtb|��b�b�b�b�b�b�b�b�b�b�b�b�b�b�b�bbbbb$b,b4n<bDbLbTb\bdblbtn|b�b�b�b�b�b�b�n�b�b�b�b�b�b�b�n�bbbbb$b,b4b<bDbLbTb\bdblbtb|b�b�b�b�b�b�b�b�b�b�b�b�b�b�b�b�bbbbb$n,n4�<�DbLbTb\bdblbtb|b�b�b�b�b�b�b�b�b�b�b�b�b�b�b�b�bbbbb$b,b4b<bDbLbTb\bdblbtb|b�b�b�b�b�b�b�b�b�b�b�b�b�b�b�b�bbbbb$b,b4b<bDbLbTb\bdblbtb|b�b�b�b�b�b�b�b�b�b�b�b�b�b�b�b�bbbbb$b,b4b<bDbLbTb\bdblbtb|b�b�b�b�b�b�b�=�b�b�b�b�b�b�b�b�bbbbb$b,b4b<bDbLbTb\bdblbtb|b�n�=�n�n�b�b�����b�b�b�b�b�b�b��	b	b	b$	b,	=4	=<	bD	=L	bT	b\	=d	bl	=t	b|	b�	b�	b�	b�	b�	b�	b�	b�	b�	b�	b�	=�	=�	=�	=�	=�	=
=
b
b
b$
b,
=4
=<
=D
=L
bT
b\
bd
bl
bt
b|
b�
b�
b�
b�
b�
b�
b�
b�
=�
=�
=�
=�
=�
=�
=�
=�
==bbb$b,b4b<bDbLbTb\bdblbtb|b�b�b�b�b�b�b�b�b�b�b�b�b�b�b�b�bbbbb$b,b4b<bDbLbTb\bdblbtb|b�b�b�b�b�b�b�b�b�b�=�=�=�=�=�=�b
b
b
b
b$
b,
b4
b<
bD
bL
bT
b\
bd
bl
bt
b|
b�
b�
b�
b�
b�
b�
b�
b�
b�
b�
b�
b�
b�
b�
b�
b�
bbbbb$b,b4b<=D=LbTb\bdblbtb|b�b�b�b�b�b�b�b�b�b�=�=�b�b�b�b�bbbbb$b,b4b<bDbLbTb\bdblbtb|b�b�=�b�b�b�b�b�b�b�b�b�b�b�b�b�bbbbb$b,b4b<bDbLbTb\bdblbtb|b�b�=�b�b�b�b�b�b�b�b�b�b�b�b�b�b=���L$V3�;Ή0�p�pu�H�T$;։Hu�P�P�1�H�1^�)+	1
�D4*�<41CDetourDis::CDetourDis
this2ppbTargetplExtrax|
4V�t$��u�q�T$��uj
�3���R��VP�P^�&'$	 #1�D40�A41CDetourDis::CopyInstruction
this pbDst pbSrc$x$|$
4$U��ES�]V�4�E3�HWtHt
HHt��u������}�:E+�׋}OtHOt'OOt	��uQ��M����|�����~;�I�!�3�����f�|���~ �I������|��~	�I�_^[]�2#%'
*,/8<N.P/R)d*j,l#$�&���3���W����
���>��CDetourDis::AdjustTarget
this pbDst pbSrccbOpcbTargetOffsetcbTargetSize2�2�2
�D$@�=�$�9	CDetourDis::Invalid
thispEntry pbDst pbSrc=X=\=
=3����V�4�#�;�u@;�r�3��4�#�;�u
@;�r�3�@^�3�^�$J
!378;�D<
.�C<;CDetourDis::SanityCheckSystemJxJ|J
<JU���\�u�M��u��u�M��u���$W"�$&\W�=&"!DetourCopyInstructionExpDstpSrc3ppTargetplExtra����oDetourDisasmWXW\W
U����E�� V�M��t�y��9t�����S�؃���W������+����u�vJ�M���M��Ɋ�3Ҋу�����U�t&�@$<u�E�$�t
<@u�E��<�u�E��}�+��u��u�u�����tWSV�u�u��u����N���u�M�A@_[t�F��At�F���E��M�^��V
�d�2b
,8:GQZckty� �!�$�.�0�1�9�:�<�=�?�@�d�W�W5�W�;��	CDetourDis::CopyBytes
thispEntry pbDst pbSrc����nBytes���� bModRmb�b�b
SV�t$W�|$VW�t$����F�PG��WR���R_^[�b#n1��40:.:(:�A41	CDetourDis::CopyBytesPrefix
thispEntry pbDst pbSrcn�n�n
4nSV�t$W�|$VW�t$����t�C�F�PG��WR���R_^[�b/{$*=	��@<:::4:�>@=	CDetourDis::CopyBytesRax
thispEntry pbDst pbSrc{�{�{
@{SV�t$W�|$VW�t$����F�PG��WR���R_^[�b#�1��40:.:(:�841	CDetourDis::Copy0F
thispEntry pbDst pbSrc�����
4���n��$�8	CDetourDis::Copy66
thispEntry pbDst pbSrc�X�\�
��A�n��$�8	CDetourDis::Copy67
thispEntry pbDst pbSrc�X�\�
�U����E�@8P�uu�E��3�E��E���E��"�E��E�P���b0b9b�
&4=�$AW�8A=	CDetourDis::CopyF6
thispEntry pbDst pbSrc
����ce
����ce�X�\�
U����E�@8P�uu�E��F�E��E���E��"�E��E�P���b0b9b�
&4=�$AW�8A=	CDetourDis::CopyF7
thispEntry pbDst pbSrc
����ce
����ce�X�\�
U��QQ�U�B<t<%t$8<t<t< t<(u�A����B�V�q�^R�u�E�P�E��"�E����KbPb�%-09T�DXW3W�8XT	CDetourDis::CopyFF
thispEntry pbDst pbSrc
����ce�x�|�
j�t$�t$�t$��W��$�;DetourCopyInstructionpDstpSrc3ppTarget�X�\�
�^��^o(YC�]�z�|e8c:\program files\microsoft research\detours express 2.1\lib\detours.pdb.file��gC:\Program Files\Microsoft Research\Detours Express 2.1\src\disasm.cpp@comp.id�`��@feat.00��.debug$S�.rdata��q	4b.text4YX.debug$S�.file��gc:\program files\microsoft research\detours express 2.1\src\disasm.cpp 4�1.bfe�.lfe.ef4e�.debug$F.text4	�l�).debug$S�� '43�.bfe�.lf	e.ef4e�.debug$F.text	��ޅ.debug$S
T	�	 4��4.bf	eF.lf	e.ef�	ey.text�7RB.debug$S� ?�6.bfe|.lfe.efe�.debug$F
.text<	�TG�.debug$S�8 L<G8.bfe.lf	e.ef<e/.debug$F.text&/���.debug$S�] Y&�9.bfe�.lfe.ef&e�.text�Ԛ�.debug$S%y e��;_memcpy .bfe�.lfe.ef�e..text4C�.debug$S%� p4�=.bfe1.lfe.ef4e6.debug$F.text@�ؒR.debug$S"� }@�?.bfe9.lfe.ef@eB.debug$F.text4C�.debug$S �4lA.bfe�.lfe.ef4e�.debug$F.text ��U.debug$S�K ��B.bfe�.lfe.efe�.debug$F .text!'�.debug$S"�!{! �D.bf!e�.lf!e.ef!e�.debug$F#!.text$A/e.debug$S%�$�$ �AtE.bf$e�.lf$e.efA$e�.text&A��Y�.debug$S'�&�& �A�F.bf&e�.lf&e.efA&e�.text(XX��Y.debug$S)�(( �XwH.bf(e�.lf(e.efX(e�.text*:��.debug$S+�*;* ��I.bf*eP.lf*e.ef*eR.debug$F,*.debug$T-dU?s_rceCopyTable0F@CDetourDis@@1QBUCOPYENTRY@1@B?s_rceCopyTable@CDetourDis@@1QBUCOPYENTRY@1@B?s_rbModRm@CDetourDis@@1QBEB??0CDetourDis@@QAE@PAPAEPAJ@Z?CopyInstruction@CDetourDis@@QAEPAEPAE0@Z__imp__SetLastError@4?AdjustTarget@CDetourDis@@IAEPAEPAE0JJJ@Z?Invalid@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?SanityCheckSystem@CDetourDis@@SAHXZ_DetourCopyInstructionEx@16?CopyBytes@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyBytesPrefix@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyBytesRax@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?Copy0F@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?Copy66@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?Copy67@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyF6@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyF7@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z?CopyFF@CDetourDis@@IAEPAEPBUCOPYENTRY@1@PAE1@Z_DetourCopyInstruction@12
modules.obj/    1172497011              100666  25862     `
LEs��E�Fa.debug$S�
�@B.rdata�@[email protected];?
 `.debug$S��]@B.text<{�
 `.debug$S��@B.debug$F�@B.text���4' `.debug$S��@B.rdata3@[email protected]?@[email protected]R@[email protected]b@[email protected]p@[email protected]~@[email protected]�@[email protected]�@[email protected]$�0�.bss�0�.bss�0�.text��E w  `.debug$S;� 6"@B.rdata�"�"@@@.sxdata�"0.debug$F�"�"@B.text��"o#�# `.debug$S
3$@%@B.rdata�%�%@@@.debug$F�%�%@B.text��%q&�& `.debug$S
/'<(@B.rdata�(�(@@@.debug$F�(�(@B.text
�(�( `.debug$S�)�)@B.debug$F�)�)@B.textd�)@+�+$ `.debug$S�^,P.@B.rdata�.�.@@@.debug$F�.�.@B.text��.�/A0 `.debug$S}�0r2@B.rdata�2@[email protected]�2�2@@@.debug$F33@B.texti"3�3�3 `.debug$S%445@B.rdata�5�5@@@.debug$F�5�5@B.text
�5�6,7 `.debug$S{�7I9@B.rdata�9�9@@@.debug$F�9�9@B.text��9�:; `.debug$S}�;=	@B.textF]=�=�=	 `.debug$S�>�>@B.text�>�>�> `.debug$S�?�?@B.debug$F�?�?@B.text1�?+@?@ `.debug$S	]@fA@B.text�A�A�A `.debug$S��AoB@B.debug$F�B�B@B.text(�B�C)D	 `.debug$Sq�D6F@B.rdataTF@[email protected]$TdVF@B��OC:\Program Files\Microsoft Research\Detours Express 2.1\src\modules.obj8

�

�Microsoft (R) Optimizing Compiler��$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + =$T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =$T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $ebp = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + =$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + = $ebx $T0 2792 - ^ =�$
DETOUR_EXE_RESTORE_GUIDzCOR_VERSION_MAJOR_V21IMAGE_NT_HEADERS32iHINSTANCE-PIMAGE_NT_HEADERS32|IMAGE_DATA_DIRECTORY|_IMAGE_DATA_DIRECTORY�FILE"ULONGLPADDRESS64LONGLONG�PIMAGEHLP_MODULE64�_DETOUR_SECTION_HEADER
"SIZE_T1IMAGE_NT_HEADERS�_SYMBOL_INFO�PF_SymGetOptionsPKDHELP %_MEMORY_BASIC_INFORMATION�PF_SymGetModuleInfo64
~LPCSTR#ULONGLONG!PWORDpLPSTR�DETOUR_SYM_INFOx_IMAGE_OPTIONAL_HEADER
"PULONG�_DETOUR_EXE_RESTORE-PIMAGE_NT_HEADERS%MEMORY_BASIC_INFORMATION�PIMAGE_SECTION_HEADERtBOOL�PDETOUR_EXE_RESTOREo_IMAGE_FILE_HEADER�LPAPI_VERSION"_KDHELP�PF_ImagehlpApiVersionEx�DETOUR_SECTION_RECORD�PDETOUR_SYM_INFO!wchar_tPDETOUR_LOADED_BINARYqSTRSAFE_LPWSTRpPCHAR�STRSAFE_LPCWSTR#zReplacesCorHdrNumericDefines+IMAGE_DOS_HEADER�SYM_TYPE�PF_SymFromNamePCUWSTRpPSTR
!USHORT#ULONG64�PF_SymInitializePVOIDiHMODULE�_IMAGE_SECTION_HEADER
�_iobufxIMAGE_OPTIONAL_HEADER32PKDHELP64pSTRSAFE_LPSTR"DWORDpva_list�DETOUR_SECTION_HEADER
HANDLE+_IMAGE_DOS_HEADER!WORDADDRESS_MODE BYTELPADDRESS#DWORD64qWCHAR PBYTELONG�PIMAGE_EXPORT_DIRECTORY~STRSAFE_LPCSTR�_DETOUR_SYM_INFO
!PUWSTR�PF_SymLoadModule64�IMAGEHLP_MODULE64
usize_t
"PDWORD�PSYMBOL_INFO�_DETOUR_SECTION_RECORD1_IMAGE_NT_HEADERS_GUID_tagADDRESS64_tagADDRESS�API_VERSION*�PF_DETOUR_ENUMERATE_EXPORT_CALLBACK�_IMAGE_EXPORT_DIRECTORYoIMAGE_FILE_HEADER_KDHELP64~PCSTRGUIDpCHAR�PF_SymSetOptionslHINSTANCE__HRESULT�_IMAGEHLP_MODULE64'PIMAGE_DOS_HEADERtx
���.93�J�\Ԙ?U��3�9Eu�W��&�UV�u���t	�
BF�Mu�}^uJ�z��]�

"
'./47�D;�7;7�StringCopyWorkerAppszDestucchDest~pszSrcx|
V�t$3�����t�T$�:tBNu���u�W��T$��t
��|+Ή
��"^�!

#+/359�D<i8i�9<9�StringLengthWorkerA~pszucchMaxupcchLength!x!|!
<!U��QQW3�9=t3���;���Sj$W�S����h��;ǣ�V�5hP��h�5���h�5���h�5���h�5���h�5���h�5���j� �E�WP����;�f�E�	^tk9=tc9=t[9=tS9= tK�M�Q��f�}�	r>WW�5���t,�;�t9=t�Ѓ��
'P�����F�;��tP��=�=�=�=�=�=�= 3�[_��
[X)U/R8Q=PBUHMOU\LaKiHoUtU{E�U�U�B�U�U�?�U�U�<�U�U�9�U�U�U�R�U�UU
UU)U/U8UBUUU[XdUl[y5U�U�U�U�U�U�U3	%6<LZ-h/z1�3�5�7�9�<�CGH%L7QHRJWMfRgYj_khv}!�"�#�$�%�&�'�(�l�d��Z��8���DetourLoadImageHlpabort
�����av�pSymInfotfailed�symInfo3�3�3
�6�6
�X�X
�[�[
U
U
SymFromNameSymGetModuleInfo64SymLoadModule64SymGetOptionsSymSetOptionsSymInitializeImagehlpApiVersionExdbghelp.dllj,h��E���t��jj�E�P���j�E�PV���vU�}�u(�E�u"�e��u�f�>MZu�F<ƉE��8PEt�M���EЋMč4볃M������3�@Ëe�M��3���qn'R7k�le.=,?NRUZ\!d"p{#&�-�(�)��D�<�<��<���DetourEnumerateModules$L24376$L24386$L24389$L24375ihModuleLast����%mbi����-pNtHeader����'pDosHeaderexe|e
�g�g
�h�h
�i�i
�j�j
����jgm�ejh��}3�;�u	S����]�f�?MZth��J�w<��u�>PEth��3f9^uh��3��M���&S��F(���3�@Ëe�h���M��3����n�S�b�{��l!(-	/
7?DFL]_fmt���D�m��9���DetourGetEntryPoint$L24396$L24402$L24404$L24395ihModule����-pNtHeaderx|
����
����
����
����
������mjh��E3�;�uW��}�f�8MZth��H�p<��u�>PEth��1f9~uh��3��M���$W��FP��3�@Ëe�h���M��3����n�Q�`�w��l�&+	-
5=BDJ[]ip��D�i��9���DetourGetModuleSize$L24411$L24417$L24419$L24410ihModule����-pNtHeader�x�|�
����
����
����
����
������i���t��3�é	�$
i�/
	�RvaAdjust'pDosHeader"raddr�X�\�

�jHh��]3�;�u	W��؉}�f�;MZt
h���C<ÉEā8PEt
h��f9x���@x�E�;�t�4�3��u�;�uh��3��M�����F�E�;�tÉE���}�F �E�;�tÉE���}܋F$�E�;�tÉE���}��}�;~sl�E��t���E���t��3��Ẽe�3��E�;Fs%�M��A;�u6�M܅�t���E���t��3��E؋FljE��u��u�P�u�U��tG�@�j�3�@�7���3�@Ëe�h���M��3����n�u�8�R�]l�!(-	2
:BGLPVjn�"�#�$�&�(�)�*�+�-13.&1*47D:K;Z<\>�DdXDX��<d\�DetourEnumerateExports$L24433$L24473$L24478$L24432ihModulepContext�pfExport����-pNtHeader�����pExportDir����"pdwNames����"pdwFunctions����!pwOrdinals����"nFunc���� pbCode����"nOrdinal����ppszName����"n�x�|�
����
����
����
����
������D�j h��E�E�3�;�u
S��E�]�f�8MZt
h���p<��u؁>PEt
h��f�Ff;�u3�h���M��������D0�E��]��F;�sӍ��M��<�hW�YY��u6�G��t��t��M�4�uԉuЋ��@r��~Dtru��~u�Fj�C�3�@Ëe�h���M��3����n�b��������l�"%,1	6
>FKP[jq{�� �%�&�(�-�.�0��7�8�9�;�D�0�0��A���GetPayloadSectionFromModule$L24485$L24494$L24498$L24484ihModule����'pDosHeader����-pNtHeader�����pSectionHeaders����"n���� pbData�����pHeader�x�|�
����
����
����
����
.detour��������jh��u�����tE�e��u�>@r�~Dtru
j��F�
j�3��M���3�@Ëe�j��M��3����n�3�@�W�bl�!
/<J
LS_a�DiL��=ia�DetourGetSizeOfPayloads$L24505$L24511$L24513$L24504ihModule�����pHeader�x�|�
����
����
����
����
������L�jh��}3�;�t��u�;����]��E��8@���xDtr���p��u܋HȉM؋E�u�;�sy�uԋV;ukf�Vf;Puaf�Vf;PuW�V:PuO�V:P	uG�V:P
u?�V:Pu7�V:Pu/�V:P
u'�V:Pu�V:Pu;�t����S��F�6�j�h��3��M���3�@Ëe�j��M��3����n�������l�!	'*
-CKS]`%�'�(�)�*�.�/�0���3�457�D
,�,��7
�DetourFindPayload$L24520$L24527$L24531$L24519ihModulerguid"pcbData���� pbData���� pbEnd���� pbBeg�����pHeader�����pSection�x�|�
����
����
����
����
��������U���V�u�P9��9E���e�W�=�EPj@j@�v�ׅ���S�E�Pj@��S�v�ׅ�tt�F��t�M�Qj@jP�ׅ�tQj@�FP�v�S�FTP�v��F����tj��LQP����F���E�t�MQ�ujP�׍EP�u�S�v�׍EP�uj@�v��[�E�_�
h��3�^��'v����
 %AV]lz� �!�%�&�)�+�-���.�d��%��>���DetourRestoreAfterWithExend0end1end2pvData"cbData"dwOld"dwPermIdh����"dwPermClr����tfSucceeded����"dwPermInh
�
�

��
�
�

��
U��QVj��E�PhV���t�}�uV�����u�j~�3�^���u�P����$e2�@
	".
69;�DF4�<F9�DetourRestoreAfterWith����"cbDatax|
�|$���v�W���+

	�$i�4�StringCchCopyAppszDestucchDest~pszSrc+X+\+
+U��V�uW�}�EPVW���|�u�E+�V�P�_^]�!'8
-�d1)$�61-�StringCatWorkerAppszDestucchDest~pszSrcucchDestLength8�8�8
�|$���v�W���8C

	�$i�3�StringCchCatAppszDestucchDest~pszSrcCXC\C
CU����
SW�u���3�;�u3����uW�;���V���;�u3���S�ǙRPS�u�E�S�6�U��V��W�� ���SP����� ���P�u��� ����u��6�V��t���D���P�W������P���|�hW������P����z����u������WP����b���hX������SP���������P������PDž����X�������6�V ���#�����^_[��M)L73mR��Y�8�8�RU#-	/
6=AH^#t%�(�+�,�.�0�1�3�5�6�8�>�G$Y��(�

�
D�
D6��
D�8($�DetourFindFunction~pszModule~pszFunction�����szFullName ����modinfo-�DetourFindFunction::__l26::CFullSymbol�����symbolU�U�U
!^��^o(YC�]�z�|e8c:\program files\microsoft research\detours express 2.1\lib\detours.pdb.file��gC:\Program Files\Microsoft Research\Detours Express 2.1\src\modules.cpp@comp.id�`��@feat.00��.debug$S.rdata]d�!.text;
0gl_.debug$S�.file.��gc:\program files\microsoft platform sdk for windows server 2003 r2\include\strsafe.h ;?.bfeq.lf
e.ef;e�.text<
�#�.debug$S�> #<�.bfe�.lf
e.ef<e�.debug$F.text�4'�Q�.debug$S	.file%��gc:\program files\microsoft research\detours express 2.1\src\modules.cppa \����h.rdata
}&\�
.rdata����.rdata�-�W.rdata
��^�(
.rdata�bq�M.rdata�ˁ�r.rdata’�����.rdataj&cj�_memset .bss$1.bssr.bss�.bfew.lf'e.ef�e�.text�9�a7.debug$S;� r�w $L24376�$L24386�$L24389�$L24375�% 2 D .rdata�9*�$T24381.bfeD.lfe.ef�eZ.sxdata�/L�.debug$F.text����.debug$S
Q ���#$L24396q$L24402p$L24404m$L24395mh~.rdata�9*�$T24399.bfet.lfe.ef�e�.debug$F.text����^.debug$S
� ���&$L24411m$L24417l$L24419i$L24410i.rdata �9*�$T24414 .bfe�.lfe.ef�e�.debug$F!.text"
Z��x.debug$S#�"�" �
�(.bf"e�.lf"e.ef
"e�.debug$F$".text%d$�k<.debug$S&�%�% �d�+$L24433H%$L24473G%$L24478D%$L24432D%.rdata'�9*�%$T24470'.bf%e�.lf$%e.efd%e�.debug$F(%.text)�n=.debug$S*})�) ��A0$L24485�)$L24494�)$L24498�)$L24484�)_strcmp .rdata+��++.rdata,�9*�)$T24489,.bf)e.lf)e.ef�)e<.debug$F-).text.i����.debug$S/.J. �i�3$L24505P.$L24511O.$L24513L.$L24504L..rdata0�9*�.$T245080.bf.e?.lf.e.efi.eU.debug$F1..text2
��>.debug$S3{2e2 �
,7$L24520�2$L24527�2$L24531�2$L24519�2.rdata4�9*�2$T245244.bf2eX.lf2e.ef
2e�.debug$F52.text6�|I��.debug$S7}	6{6 �;��6��6��6_memcpy �.bf6e�.lf6e.ef�6e�.text8F	H��.debug$S9�8�8 F�=.bf8e�.lf	8e.efF8e�.text:\��.debug$S;�:.fileP��gc:\program files\microsoft platform sdk for windows server 2003 r2\include\strsafe.h�: -�>.bf:e�.lf:e.ef:e�.debug$F<:.text=1
>��.debug$S>	== :1?@.bf=eQ.lf=e.ef1=e_.text?\��.debug$S@�?,? E�A.bf?e�.lf?e.ef?e�.debug$FA?.textB(	����.debug$SCqB.file��gc:\program files\microsoft research\detours express 2.1\src\modules.cppIB Z()D.rdataD���_D.bfBe�.lfBe.ef(Be?.debug$TEdz_DETOUR_EXE_RESTORE_GUID?StringCopyWorkerA@@YGJPADIPBD@Z?StringLengthWorkerA@@YGJPBDIPAI@Z?DetourLoadImageHlp@@YAPAU_DETOUR_SYM_INFO@@XZ__imp__FreeLibrary@4$abort$24008??_C@_0M@NIAMCPON@SymFromName?$AA@??_C@_0BD@KGOGPCFD@SymGetModuleInfo64?$AA@??_C@_0BA@EEINJJDN@SymLoadModule64?$AA@??_C@_0O@KGBKFDLO@SymGetOptions?$AA@??_C@_0O@LIDFOEPH@SymSetOptions?$AA@??_C@_0O@MCMFENKA@SymInitialize?$AA@??_C@_0BF@HDEFKILG@ImagehlpApiVersionEx?$AA@__imp__GetProcAddress@8__imp__LoadLibraryA@4??_C@_0M@OOEJBPPK@dbghelp?4dll?$AA@__imp__GetCurrentProcess@0?symInfo@?1??DetourLoadImageHlp@@YAPAU_DETOUR_SYM_INFO@@XZ@4U2@A?pSymInfo@?1??DetourLoadImageHlp@@YAPAU_DETOUR_SYM_INFO@@XZ@4PAU2@A?failed@?1??DetourLoadImageHlp@@YAPAU_DETOUR_SYM_INFO@@XZ@4HA_DetourEnumerateModules@4__imp__VirtualQuery@12__SEH_epilog__except_handler3__SEH_prolog_DetourGetEntryPoint@4__imp__SetLastError@4__imp__GetModuleHandleA@4_DetourGetModuleSize@4?RvaAdjust@@YAPAEPAU_IMAGE_DOS_HEADER@@K@Z_DetourEnumerateExports@12?GetPayloadSectionFromModule@@YGPAXPAUHINSTANCE__@@@Z??_C@_07HBMFLGHI@?4detour?$AA@_DetourGetSizeOfPayloads@4_DetourFindPayload@12_DetourRestoreAfterWithEx@8$end0$24261$end1$24264$end2$24268__imp__VirtualProtect@16_DetourRestoreAfterWith@0?StringCchCopyA@@YGJPADIPBD@Z?StringCatWorkerA@@YGJPADIPBD@Z?StringCchCatA@@YGJPADIPBD@Z_DetourFindFunction@8??_C@_01DCLJPIOD@?$CB?$AA@detours.obj/    1172497010              100666  25222     `
LAr��E�EO.debug$S�	<
�@B.bss �0�.textxu�
 `.debug$SHc�@B.rdata%@@@.sxdata90.debug$F=M@B.textWn `.debug$S��*@B.debug$FHX@B.text2b� `.debug$S���@B.debug$F��@B.textT� `.debug$S��]@B.debug$F{�@B.textO��
 `.debug$S� �@B.debug$F��@B.text'�' `.debug$S�E�@B.debug$F+@B.text'5\p `.debug$S��F@B.debug$Fdt@B.text�~h!�!
- `.debug$S`�"X$@B.text!�$�$�$ `.debug$S��$�%@B.debug$F�%�%@B.textc�%2&Z& `.debug$S�&�'@B.rdata9(E(@@@.debug$FY(i(@B.texts(�(�( `.debug$S��(E)@B.debug$Fc)s)@B.text})�)�) `.debug$S��)4*@B.debug$FR*b*@B.textql*�*K+ `.debug$S�{+5,@B.debug$FS,c,@B.text�m,-�-
 `.debug$S� .�.@B.debug$F
//@B.text@$/d1�2; `.debug$SD�3,5@B.textsJ5�5!6
 `.debug$S�u6O7@B.debug$F�7�7@B.textB�7�9�:M `.debug$S��<�>@B.text��>�?Y@" `.debug$S%A1B@B.textwB|B�B `.debug$S{�B
C@B.debug$F+C;C@B.textECMCWC `.debug$S{iC�C@B.debug$FDD@B.textD1D;D `.debug$S�MD�D@B.debug$FEE@B.debug$TdE@B��OC:\Program Files\Microsoft Research\Detours Express 2.1\src\detours.obj8

�

�Microsoft (R) Optimizing Compiler��$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + =$T0 $ebp = $T2 $esp = $T1 .raSearchStart = $eip $T1 ^ = $ebp $ebp = $esp $T1 4 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + =$T2 $esp .cbLocals + .cbSavedRegs + = $T0 .raSearchStart = $eip $T0 ^ = $esp $T0 4 + =$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + = $ebx $T0 72 - ^ =$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + = $ebx $T0 732 - ^ =$T0 $ebp = $eip $T0 4 + ^ = $ebp $T0 ^ = $esp $T0 8 + = $L $T0 .cbSavedRegs - = $P $T0 4 + .cbParams + = $ebx $T0 20 - ^ =�ts_fIgnoreTooSmalls_nPendingThreadIds_nPendingError3s_ppPendingErrorBs_pPendingThreads!>s_pPendingOperationszCOR_VERSION_MAJOR_V2qSIZE_OF_JMP$m�dtrRDETOUR_REGION_SIGNATUREm�DETOUR_REGION_SIZE&m�DETOUR_TRAMPOLINES_PER_REGION5s_pRegions5s_pRegioniHINSTANCE-PIMAGE_NT_HEADERS32|IMAGE_DATA_DIRECTORY|_IMAGE_DATA_DIRECTORY"ULONGLPADDRESS64LONGLONG
"SIZE_TJCONTEXTPKDHELP %_MEMORY_BASIC_INFORMATION#ULONGLONGx_IMAGE_OPTIONAL_HEADER-PIMAGE_NT_HEADERS%MEMORY_BASIC_INFORMATIONtBOOLo_IMAGE_FILE_HEADER"_KDHELPt_FLOATING_SAVE_AREA!wchar_t#zReplacesCorHdrNumericDefines@DetourOperationPCUWSTRPVOIDiHMODULEDDetourThreadxIMAGE_OPTIONAL_HEADER32PKDHELP64J_CONTEXT<_DETOUR_TRAMPOLINE"DWORD
HANDLE+_IMAGE_DOS_HEADER!WORDADDRESS_MODE BYTELPADDRESS#DWORD64qWCHARtFLOATING_SAVE_AREA PBYTELONG<DETOUR_TRAMPOLINE9DETOUR_REGION
!PUWSTR1_IMAGE_NT_HEADERS_GUID_tagADDRESS64_tagADDRESSoIMAGE_FILE_HEADER_KDHELP64GUID"ULONG_PTRlHINSTANCE__7PDETOUR_TRAMPOLINE5PDETOUR_REGION'PIMAGE_DOS_HEADERhl
��
��
�
�

��


��
��
j,h�j�E�P�u��e��MȉM�f�9MZu@�A<��E��8PEt2��M���.����4
9urꋀ���9Es۰��3�@Ëe�M��2���(%"s#%*,
4BDepr�Dx<e<i�8xrOdetour_is_imported$L21845$L21857$L21859$L21844 pbCode pbAddress����%mbi����-pNtHeader����'pDosHeaderx|
��
��
� � 
�!�!
����!$e�D$�T$�H��@+щ���6�$��>Pdetour_gen_jmp_immediate pbCode pbJmpVal6X6\6
6�T$�D$;�s#SV+‹�W�΋�����������˃��_�^[���C/1�d2� ���421Pdetour_gen_brk pbCode pbLimitC�C�C
2CV�t$��u3�^ËD$��t� �<�Wu�~%u�~WV���YYt��<�u�F�D0�8�u@���_^�+P	
%	(
5
9=EJMOS�dT�R�5��5TSRdetour_skip_jmp pbCode3ppGlobalsP�P�P
TP�L$�<�tA<�t=<�t9<�t5<�t1<�u�y%t'<&t<.t<6t<�t<dt<eu�y�u�y%t3��3�@�]"	$FHJKN�$O��CONTdetour_does_code_end_function pbCode]X]\]
O]QV�5��D$Pj@hV��v��u�^Y�lj
 %�D'�#��H'%Vdetour_writable_trampoline_regions����"dwOldjxj|j
'jQV�5��D$Pj hV��v��u�^Y�lx
 %�D'�#��H'%Vdetour_runnable_trampoline_regions����"dwOldxxx|x
'xU���@SV�����W�v����E���]����s����E���E�������
u��t����P��t;U�r	;U����������t�H��t;M�r	;M����@���uۋ�%��+�;u����0��pr
���w��oj�E�PW����9]�u9]�s�}ā���;}�w���j@h0SW�������
3҉H�dtrR�P��������Q�у� Nu��P�p;u���;u����Nj h�V�H������s��pr
���w��j�E�PV���tK9]�u89]�r3�΁���t
��+�)E�E܋u�j@h0SV�����<����E܋M�4;u�r�3�_^[��AIV��"�&g��"����
&	@SZo#u%�#�-�4�9�;�=�G�d���KLP%Q5Y8Z@\CFX[nrm�o�q�{�|�}���������������i�������@
�@D�@D�@D�=�
�Wdetour_alloc_trampolinefound_regionalloced_region pbTarget����7pHi����7pLo����%mbi����%mbi�����
����
����
Vj j��W������F���G�~^��� �D!���<! Ydetour_free_trampoline7pTrampoline�x�|�
!�j(h�j�E�P�u���t<�e��M�f�9MZu*�A<��E�8PEuf�xu3��M�������3�@Ëe�M��3����%"^#�#	+
-5;=JP[]�Dc8P8i�8c]Zdetour_find_header$L21927$L21933$L21936$L21926 pbTarget����%mbi����-pNtHeader�x�|�
����
����
����
����
������P��t$�t$�YY�	P��$��;\DetourCodeFromPointerpPointer3ppGlobals�X�\�
��D$���	�$��=	^DetourSetIgnoreTooSmalltfIgnore�X�\�
�QW3�9=uW�Ph���t���DV�5�=�=�=�=�=��D$Pj@hV��v;�u�3�^_Y���-39?EK
`l�
#+ko�dq�m�+C��<qo_DetourTransactionBegin�����
q�Q�9t��Y�SV�53�;�Wt<�D$P�F�v�@P�v�9^u�~;�t��^�>V�;�Y��uĉ��5;�t�v��>V�;�Y��u�_^��3�[Y��	:lK�V�chxn{������)%
>C
JORT]aglv!�"�#�%�&�(�)�d��x�#l��<��_DetourTransactionAbort����"dwOld�����
��U�����ES3�;�t�
��9t
���9t
���V�5W�9^�FtR3��xv(�M�QSP�F�P�]��9]�u�N��+��I;�|؋F�@;�t�F�
��N�%�H�F��P@+ʉ�N�q��P�YY�N�F��6;��r����=;������,���P�wDž,������tl�5�`�~t!�F9�����rM�H9�����sB)������F�%�F9�����r,�N�I�9�����s)������F�������,���P�w�Ӌ6��u��?���l���3���5;�E�tO�E�P�F�v�@P�v��F�@P�v�u��9^t�~;�t��^�>V�;�Y��u����5;�t�v��>V�;�Y��u�E;�_��^t�
��[��
�#5<�Hr���
�C���
�����l��������x���!'0
7�	)3
;@
FRUZ\bv{ �"�%�+�.�L�M�N������� �6�<�?�A�]�c�l�x�~����������������������������
����.�6�<���@�

/��F���M����?@
<aDetourTransactionCommitExEpppFailedPointer����hProcess����lExtra,���Jcxt����"dwOld�����
���ugW��|$;�u3��SVj�����Yuj_�W����u �V���Y�%�=������~�53�^_� 3>F�M
T]h�
	

&+0<\"f#l%p&�ds�
f�R��8spcDetourUpdateThreadfailhThread�����
����
s�U����ESW3�;lj}�t�8�E;�t�8�];�t�;�9t
�����;����M;�ujX���;�Vu
jX��WP�}�j�u���u��;ƉEu�=�M�(�M��t�1��t�j���Y�Et��������u�E����E��t�8��3���E�e�MQjP�E��;P��}�Eu�u���+����Yu��|ǃ�}�=�E�	�����v	�E��x�E�G�3�W�;�O�p���@+ΉR��P��e�YY�E�Pj@S�u���Ӆ�t*�u������Ytjf�~Detb�e�EPj@j@V�Ӆ�u7��E��E����t��}t	�u�Y�E��M�
�Cf�FDef�Ftof�F urf�F"s!�E�M�`�H�M��H�x�M�H�
��3�^_[��*�0Agv���������]-wC�l���������
.5	&
(
6@GMT\cp6z7�<�=�B�F�G�I�J�M�N�P�e�h�i�j�l�o�p�v�w�z���!x&�+�?�D�I�P�R�[�^�q�{����������������T�U�X�Y�\�]���
&	,
49
>��B
4;2;a�;�4B>gDetourAttachExstopfail3ppPointerpDetourKppRealTrampoline3ppRealTarget3ppRealDetour>o����"dwOld����error���� pbTarget pbSrc���� pbOplExtra"dwDos��
��
��
U��Q�9t
���������W�}��ujX��?SVu
jX��j�����Yuj_�y�?j�u��O�_3�+�;�tS��wN9GuI�E�Pj@QS�U����u
����5�E�F�F�~�^�E��F���53��'9j	_u�=��tV�Y�Nj}�=^[_���DPh��l��������
#	*1
9@MV[`&b'l+s-�8�?�E�F�H�L�M�N�O�P�Q�S�/����"�T�d�*�>��2��eDetourDetachfailstop3ppPointerpDetour����"dwOld��
� � 
��
�*�$��=jDetourGetDetouredMarker*X*\*
*j���7�$��=_DetourTransactionCommit7X7\7
73�PPP�t$�t$��D�$��2eDetourAttach3ppPointerpDetourDXD\D
D^��^o(YC�]�z�|e8c:\program files\microsoft research\detours express 2.1\lib\detours.pdb.file��gC:\Program Files\Microsoft Research\Detours Express 2.1\src\detours.cpp@comp.id�`��@feat.00��.debug$S�	.bss -?Pdw�.textx
�;
-.debug$SH.file��gc:\program files\microsoft research\detours express 2.1\src\detours.cpp� )x$L21845i$L21857h$L21859e$L21844e�� � � .rdata�9*�$T21850.bfe.lf
e.efxe:.sxdatai8P/.debug$F.text)�,..debug$S	�� 8n.bfeM.lfe.efeR.debug$F
.text24�g�.debug$S� E2�.bfe^.lfe.ef2ec.debug$F
.textT��.debug$S�5 RT.bfef.lfe.efTe�.debug$F.textO
{;�.debug$S�W _O�.bfe�.lf
e.efOe�.debug$F.text'W<q.debug$S�� m''�.bfe�.lfe.ef'e�.debug$F.text'�Bv.debug$S�� z'p.bfe�.lfe.ef'e�.debug$F.text�
-�ղ.debug$S`� ���!_memset (C<R.bfe�.lf-e.ef�eV.text!3N�3.debug$S�i �!�$.bfeY.lfe.ef!e`.debug$F.textcn�z_.debug$S � �cZ&$L21927T$L21933S$L21936P$L21926P.rdata!�9*�$T21930!.bfee.lfe.efce~.debug$F".text#�S��.debug$S$�#�# ��(.bf#e�.lf#e.ef#e�.debug$F%#.text&`4�.debug$S'�&�& ��).bf&e�.lf&e.ef&e�.debug$F(&.text)q��Uq.debug$S*�)) �qK+ E.bf)e�.lf)e.efq)e�.debug$F+).text,�
+Y�.debug$S-�,a, ���-{� .bf,e�.lf,e.ef�,e�.debug$F.,.text/@;e���.debug$S0D/�/ �@�2���* .bf/e�.lf;/e.ef@/e�.text1s
�).debug$S2�1F1 s!6\E1h~� �.bf1e�.lf1e.efs1e�.debug$F31.text4BM��@w.debug$S5�4�4 B�:��4��4� .bf4e.lfM4e.efB4e.text6�"ª�].debug$S766 !�Y@�6#�6.bf6e.lf"6e.ef�6eq.text8���%.debug$S9{8/8 ,�B.bf8et.lf8e.ef8ez.debug$F:8.text;��Q�.debug$S<{;J; 9WC.bf;e�.lf;e.ef;e�.debug$F=;.text>��Н.debug$S?�>e> F;D.bf>e.lf>e.ef>e.debug$F@>.debug$TAdu_s_pPendingOperations_s_pPendingThreads_s_ppPendingError_s_nPendingError_s_nPendingThreadId_s_fIgnoreTooSmall_s_pRegion_s_pRegions?detour_is_imported@@YA_NPAE0@Z__imp__VirtualQuery@12__SEH_epilog__except_handler3__SEH_prolog?detour_gen_jmp_immediate@@YAPAEPAE0@Z?detour_gen_brk@@YAPAEPAE0@Z?detour_skip_jmp@@YAPAEPAEPAPAX@Z?detour_does_code_end_function@@YAHPAE@Z?detour_writable_trampoline_regions@@YAXXZ__imp__VirtualProtect@16?detour_runnable_trampoline_regions@@YAXXZ?detour_alloc_trampoline@@YAPAU_DETOUR_TRAMPOLINE@@PAE@Z$found_region$21467$alloced_region$21494__imp__VirtualAlloc@16?detour_free_trampoline@@YAXPAU_DETOUR_TRAMPOLINE@@@Z?detour_find_header@@YAPAU_IMAGE_DOS_HEADER@@PAE@Z_DetourCodeFromPointer@8_DetourSetIgnoreTooSmall@4_DetourTransactionBegin@0__imp__InterlockedCompareExchange@12__imp__GetCurrentThreadId@0_DetourTransactionAbort@0__imp__ResumeThread@4??3@YAXPAX@Z_DetourTransactionCommitEx@4__imp__FlushInstructionCache@12__imp__GetCurrentProcess@0__imp__GetThreadContext@8__imp__SetThreadContext@8_DetourCopyInstructionEx@16_DetourUpdateThread@4$fail$21693__imp__GetLastError@0__imp__SuspendThread@4??2@YAPAXI@Z__imp__GetCurrentThread@0_DetourAttachEx@20$stop$21726$fail$21729?Detoured@@YGPAUHINSTANCE__@@XZ_DetourDetach@8$stop$21782$fail$21781_DetourGetDetouredMarker@0_DetourTransactionCommit@0_DetourAttach@8