home *** CD-ROM | disk | FTP | other *** search
/ PC World Komputer 1998 July & August / Pcwk78a98.iso / Wtestowe / WDTRIAL / PROGRAM / WDSAGENT.SY_ / WDSAGENT.SY / COFF_SYMBOLS < prev    next >
Unknown  |  1997-07-02  |  8.0 KB
view JSON data     |     view as text     |     open on a Mac     |     open on a PC

This file was not able to be converted.
This format is not currently supported by dexvert.

ConfidenceProgramDetectionMatch TypeSupport
100% file data default
100% TrID Silicon Graphics Object default (weak)


hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 24 54 34 36 33 36 00 00 | 28 03 00 00 01 00 00 00 |$T4636..|(.......|
|00000010| 03 00 24 53 47 33 38 33 | 30 00 44 0c 00 00 01 00 |..$SG383|0.D.....|
|00000020| 00 00 03 00 24 53 47 33 | 38 32 33 00 40 0c 00 00 |....$SG3|823.@...|
|00000030| 01 00 00 00 03 00 24 53 | 47 33 38 31 37 00 34 0c |......$S|G3817.4.|
|00000040| 00 00 01 00 00 00 03 00 | 24 53 47 33 38 35 36 00 |........|$SG3856.|
|00000050| 72 0f 00 00 01 00 00 00 | 03 00 24 53 47 33 38 35 |r.......|..$SG385|
|00000060| 33 00 6a 0f 00 00 01 00 | 00 00 03 00 24 53 47 33 |3.j.....|....$SG3|
|00000070| 38 37 36 00 52 12 00 00 | 01 00 00 00 03 00 24 53 |876.R...|......$S|
|00000080| 47 33 38 38 34 00 90 12 | 00 00 01 00 00 00 03 00 |G3884...|........|
|00000090| 24 53 47 33 39 30 34 00 | cc 12 00 00 01 00 00 00 |$SG3904.|........|
|000000a0| 03 00 24 53 47 34 32 31 | 36 00 32 1b 00 00 01 00 |..$SG421|6.2.....|
|000000b0| 00 00 03 00 24 53 47 34 | 32 33 34 00 d2 1b 00 00 |....$SG4|234.....|
|000000c0| 01 00 00 00 03 00 24 53 | 47 34 33 39 37 00 88 26 |......$S|G4397..&|
|000000d0| 00 00 01 00 00 00 03 00 | 24 53 47 34 34 31 32 00 |........|$SG4412.|
|000000e0| 44 27 00 00 01 00 00 00 | 03 00 24 53 47 34 34 30 |D'......|..$SG440|
|000000f0| 39 00 20 27 00 00 01 00 | 00 00 03 00 2e 69 64 61 |9. '....|.....ida|
|00000100| 74 61 24 36 c0 44 00 00 | 03 00 00 00 03 00 2e 74 |ta$6.D..|.......t|
|00000110| 65 78 74 00 00 00 64 2a | 00 00 01 00 00 00 03 01 |ext...d*|........|
|00000120| d1 00 00 00 04 00 47 00 | 00 00 00 00 00 00 00 00 |......G.|........|
|00000130| 00 00 24 24 24 30 30 30 | 30 31 6c 2a 00 00 01 00 |..$$$000|01l*....|
|00000140| 20 00 03 01 0e 00 00 00 | 00 00 00 00 ae 01 00 00 | .......|........|
|00000150| 13 00 00 00 00 00 24 24 | 24 30 30 30 30 34 35 2b |......$$|$000045+|
|00000160| 00 00 01 00 20 00 03 01 | 23 00 00 00 00 00 00 00 |.... ...|#.......|
|00000170| 52 03 00 00 00 00 00 00 | 00 00 00 00 00 00 01 11 |R.......|........|
|00000180| 00 00 e4 2a 00 00 01 00 | 00 00 03 00 00 00 00 00 |...*....|........|
|00000190| 0e 11 00 00 ef 2a 00 00 | 01 00 00 00 03 00 00 00 |.....*..|........|
|000001a0| 00 00 1a 11 00 00 12 2b | 00 00 01 00 00 00 03 00 |.......+|........|
|000001b0| 5f 6c 68 5f 74 6f 70 00 | 9b 2a 00 00 01 00 00 00 |_lh_top.|.*......|
|000001c0| 03 00 00 00 00 00 25 11 | 00 00 f6 2a 00 00 01 00 |......%.|...*....|
|000001d0| 00 00 03 00 00 00 00 00 | 2f 11 00 00 fd 2a 00 00 |........|/....*..|
|000001e0| 01 00 00 00 03 00 2e 74 | 65 78 74 00 00 00 a4 29 |.......t|ext....)|
|000001f0| 00 00 01 00 00 00 03 01 | bf 00 00 00 04 00 3d 00 |........|......=.|
|00000200| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 3d 11 |........|......=.|
|00000210| 00 00 bc 29 00 00 01 00 | 00 00 03 00 24 24 24 30 |...)....|....$$$0|
|00000220| 30 30 30 31 a4 29 00 00 | 01 00 20 00 03 01 0f 00 |0001.)..|.. .....|
|00000230| 00 00 00 00 00 00 9c 01 | 00 00 14 00 00 00 00 00 |........|........|
|00000240| 24 24 24 30 30 30 30 33 | c4 29 00 00 01 00 20 00 |$$$00003|.).... .|
|00000250| 03 01 1d 00 00 00 00 00 | 00 00 cc 01 00 00 22 00 |........|......".|
|00000260| 00 00 00 00 00 00 00 00 | 48 11 00 00 c4 29 00 00 |........|H....)..|
|00000270| 01 00 20 00 03 01 24 00 | 00 00 22 00 00 00 d2 01 |.. ...$.|..".....|
|00000280| 00 00 29 00 00 00 00 00 | 24 24 24 30 30 30 30 35 |..).....|$$$00005|
|00000290| e6 29 00 00 01 00 20 00 | 03 01 2b 00 00 00 00 00 |.).... .|..+.....|
|000002a0| 00 00 08 02 00 00 30 00 | 00 00 00 00 24 24 24 30 |......0.|....$$$0|
|000002b0| 30 30 30 37 40 2a 00 00 | 01 00 20 00 03 01 39 00 |0007@*..|.. ...9.|
|000002c0| 00 00 00 00 00 00 c2 02 | 00 00 3e 00 00 00 00 00 |........|..>.....|
|000002d0| 24 24 24 30 30 30 30 39 | 63 2a 00 00 01 00 20 00 |$$$00009|c*.... .|
|000002e0| 03 01 47 00 00 00 00 00 | 00 00 04 03 00 00 00 00 |..G.....|........|
|000002f0| 00 00 00 00 5f 6c 75 5f | 64 6f 6e 65 32 2a 00 00 |...._lu_|done2*..|
|00000300| 01 00 00 00 03 00 00 00 | 00 00 59 11 00 00 e5 29 |........|..Y....)|
|00000310| 00 00 01 00 00 00 03 00 | 00 00 00 00 64 11 00 00 |........|....d...|
|00000320| 30 2a 00 00 01 00 00 00 | 03 00 5f 6c 75 5f 74 6f |0*......|.._lu_to|
|00000330| 70 00 03 2a 00 00 01 00 | 00 00 03 00 5f 61 74 5f |p..*....|...._at_|
|00000340| 64 6f 6e 65 62 2a 00 00 | 01 00 00 00 03 00 2e 69 |doneb*..|.......i|
|00000350| 64 61 74 61 24 36 02 45 | 00 00 03 00 00 00 03 00 |data$6.E|........|
|00000360| 68 65 61 64 65 72 00 00 | 00 00 00 00 fe ff 00 00 |header..|........|
|00000370| 02 00 00 00 00 00 05 0a | 00 00 00 00 00 00 ff ff |........|........|
|00000380| 00 00 02 00 00 00 00 00 | 57 09 00 00 20 02 00 00 |........|W... ...|
|00000390| 01 00 00 00 02 00 00 00 | 00 00 1e 09 00 00 24 02 |........|......$.|
|000003a0| 00 00 01 00 00 00 02 00 | 00 00 00 00 ec 10 00 00 |........|........|
|000003b0| 28 02 00 00 01 00 00 00 | 02 00 00 00 00 00 2c 0d |(.......|......,.|
|000003c0| 00 00 2c 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |..,.....|........|
|000003d0| ef 08 00 00 30 02 00 00 | 01 00 00 00 02 00 00 00 |....0...|........|
|000003e0| 00 00 be 08 00 00 34 02 | 00 00 01 00 00 00 02 00 |......4.|........|
|000003f0| 00 00 00 00 0f 09 00 00 | 38 02 00 00 01 00 00 00 |........|8.......|
|00000400| 02 00 00 00 00 00 65 0d | 00 00 3c 02 00 00 01 00 |......e.|..<.....|
|00000410| 00 00 02 00 00 00 00 00 | 72 09 00 00 40 02 00 00 |........|r...@...|
|00000420| 01 00 00 00 02 00 00 00 | 00 00 96 09 00 00 44 02 |........|......D.|
|00000430| 00 00 01 00 00 00 02 00 | 00 00 00 00 b4 09 00 00 |........|........|
|00000440| 48 02 00 00 01 00 00 00 | 02 00 00 00 00 00 c3 09 |H.......|........|
|00000450| 00 00 4c 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |..L.....|........|
|00000460| de 09 00 00 50 02 00 00 | 01 00 00 00 02 00 00 00 |....P...|........|
|00000470| 00 00 25 0a 00 00 54 02 | 00 00 01 00 00 00 02 00 |..%...T.|........|
|00000480| 00 00 00 00 34 0a 00 00 | 58 02 00 00 01 00 00 00 |....4...|X.......|
|00000490| 02 00 00 00 00 00 51 0a | 00 00 5c 02 00 00 01 00 |......Q.|..\.....|
|000004a0| 00 00 02 00 00 00 00 00 | 62 0a 00 00 60 02 00 00 |........|b...`...|
|000004b0| 01 00 00 00 02 00 00 00 | 00 00 83 0a 00 00 64 02 |........|......d.|
|000004c0| 00 00 01 00 00 00 02 00 | 00 00 00 00 9c 0a 00 00 |........|........|
|000004d0| 68 02 00 00 01 00 00 00 | 02 00 00 00 00 00 be 0a |h.......|........|
|000004e0| 00 00 6c 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |..l.....|........|
|000004f0| d5 0a 00 00 70 02 00 00 | 01 00 00 00 02 00 00 00 |....p...|........|
|00000500| 00 00 8a 08 00 00 74 02 | 00 00 01 00 00 00 02 00 |......t.|........|
|00000510| 00 00 00 00 9e 08 00 00 | 78 02 00 00 01 00 00 00 |........|x.......|
|00000520| 02 00 00 00 00 00 23 0b | 00 00 7c 02 00 00 01 00 |......#.|..|.....|
|00000530| 00 00 02 00 00 00 00 00 | 38 0b 00 00 80 02 00 00 |........|8.......|
|00000540| 01 00 00 00 02 00 00 00 | 00 00 52 0b 00 00 84 02 |........|..R.....|
|00000550| 00 00 01 00 00 00 02 00 | 00 00 00 00 6c 0b 00 00 |........|....l...|
|00000560| 88 02 00 00 01 00 00 00 | 02 00 00 00 00 00 82 0b |........|........|
|00000570| 00 00 8c 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000580| 9a 0b 00 00 90 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000590| 00 00 af 0b 00 00 94 02 | 00 00 01 00 00 00 02 00 |........|........|
|000005a0| 00 00 00 00 c3 0b 00 00 | 98 02 00 00 01 00 00 00 |........|........|
|000005b0| 02 00 00 00 00 00 da 0b | 00 00 9c 02 00 00 01 00 |........|........|
|000005c0| 00 00 02 00 00 00 00 00 | f6 0b 00 00 a0 02 00 00 |........|........|
|000005d0| 01 00 00 00 02 00 00 00 | 00 00 c0 0f 00 00 a4 02 |........|........|
|000005e0| 00 00 01 00 00 00 02 00 | 00 00 00 00 e9 0f 00 00 |........|........|
|000005f0| a8 02 00 00 01 00 00 00 | 02 00 00 00 00 00 37 0c |........|......7.|
|00000600| 00 00 a8 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000610| 51 0c 00 00 ac 02 00 00 | 01 00 00 00 02 00 00 00 |Q.......|........|
|00000620| 00 00 6c 0c 00 00 b0 02 | 00 00 01 00 00 00 02 00 |..l.....|........|
|00000630| 00 00 00 00 8a 0c 00 00 | b4 02 00 00 01 00 00 00 |........|........|
|00000640| 02 00 00 00 00 00 4e 10 | 00 00 b8 02 00 00 01 00 |......N.|........|
|00000650| 00 00 02 00 00 00 00 00 | a8 0c 00 00 b8 02 00 00 |........|........|
|00000660| 01 00 00 00 02 00 00 00 | 00 00 96 10 00 00 bc 02 |........|........|
|00000670| 00 00 01 00 00 00 02 00 | 00 00 00 00 b7 0c 00 00 |........|........|
|00000680| c0 02 00 00 01 00 00 00 | 02 00 00 00 00 00 f3 0a |........|........|
|00000690| 00 00 c4 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|000006a0| 0b 0b 00 00 c8 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|000006b0| 00 00 7c 10 00 00 cc 02 | 00 00 01 00 00 00 02 00 |..|.....|........|
|000006c0| 00 00 00 00 13 00 00 00 | 34 03 00 00 01 00 20 00 |........|4..... .|
|000006d0| 02 00 00 00 00 00 25 00 | 00 00 46 03 00 00 01 00 |......%.|..F.....|
|000006e0| 20 00 02 00 00 00 00 00 | 3a 00 00 00 6c 03 00 00 | .......|:...l...|
|000006f0| 01 00 20 00 02 00 00 00 | 00 00 4e 00 00 00 d0 03 |.. .....|..N.....|
|00000700| 00 00 01 00 20 00 02 00 | 00 00 00 00 65 00 00 00 |.... ...|....e...|
|00000710| f8 03 00 00 01 00 20 00 | 02 00 00 00 00 00 7b 00 |...... .|......{.|
|00000720| 00 00 28 04 00 00 01 00 | 20 00 02 00 00 00 00 00 |..(.....| .......|
|00000730| 88 00 00 00 b6 08 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000740| 00 00 b5 00 00 00 ee 08 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000750| 00 00 00 00 d6 00 00 00 | 74 09 00 00 01 00 20 00 |........|t..... .|
|00000760| 02 00 00 00 00 00 ed 00 | 00 00 c8 09 00 00 01 00 |........|........|
|00000770| 20 00 02 00 00 00 00 00 | 01 01 00 00 1e 0a 00 00 | .......|........|
|00000780| 01 00 20 00 02 00 00 00 | 00 00 16 01 00 00 ce 0a |.. .....|........|
|00000790| 00 00 01 00 20 00 02 00 | 00 00 00 00 2f 01 00 00 |.... ...|..../...|
|000007a0| 44 0b 00 00 01 00 20 00 | 02 00 00 00 00 00 45 01 |D..... .|......E.|
|000007b0| 00 00 ba 0b 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|000007c0| 58 01 00 00 ec 0b 00 00 | 01 00 20 00 02 00 00 00 |X.......|.. .....|
|000007d0| 00 00 66 01 00 00 22 0c | 00 00 01 00 20 00 02 00 |..f...".|.... ...|
|000007e0| 00 00 00 00 e8 01 00 00 | 4c 0c 00 00 01 00 20 00 |........|L..... .|
|000007f0| 02 00 00 00 00 00 fd 01 | 00 00 74 0f 00 00 01 00 |........|..t.....|
|00000800| 20 00 02 00 00 00 00 00 | 0d 02 00 00 59 12 00 00 | .......|....Y...|
|00000810| 01 00 20 00 02 00 00 00 | 00 00 25 02 00 00 94 12 |.. .....|..%.....|
|00000820| 00 00 01 00 20 00 02 00 | 00 00 00 00 48 02 00 00 |.... ...|....H...|
|00000830| ec 12 00 00 01 00 20 00 | 02 00 00 00 00 00 55 02 |...... .|......U.|
|00000840| 00 00 bc 14 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000850| 64 02 00 00 fe 14 00 00 | 01 00 20 00 02 00 00 00 |d.......|.. .....|
|00000860| 00 00 74 02 00 00 e2 15 | 00 00 01 00 20 00 02 00 |..t.....|.... ...|
|00000870| 00 00 00 00 93 02 00 00 | 1a 16 00 00 01 00 20 00 |........|...... .|
|00000880| 02 00 00 00 00 00 a7 02 | 00 00 52 16 00 00 01 00 |........|..R.....|
|00000890| 20 00 02 00 00 00 00 00 | bc 02 00 00 8a 16 00 00 | .......|........|
|000008a0| 01 00 20 00 02 00 00 00 | 00 00 da 02 00 00 b8 16 |.. .....|........|
|000008b0| 00 00 01 00 20 00 02 00 | 00 00 00 00 fb 02 00 00 |.... ...|........|
|000008c0| e6 16 00 00 01 00 20 00 | 02 00 00 00 00 00 0f 03 |...... .|........|
|000008d0| 00 00 20 17 00 00 01 00 | 20 00 02 00 00 00 00 00 |.. .....| .......|
|000008e0| 2b 03 00 00 54 17 00 00 | 01 00 20 00 02 00 00 00 |+...T...|.. .....|
|000008f0| 00 00 44 03 00 00 80 17 | 00 00 01 00 20 00 02 00 |..D.....|.... ...|
|00000900| 00 00 00 00 62 03 00 00 | ae 17 00 00 01 00 20 00 |....b...|...... .|
|00000910| 02 00 00 00 00 00 86 03 | 00 00 dc 17 00 00 01 00 |........|........|
|00000920| 20 00 02 00 00 00 00 00 | a8 03 00 00 0a 18 00 00 | .......|........|
|00000930| 01 00 20 00 02 00 00 00 | 00 00 bf 03 00 00 3e 18 |.. .....|......>.|
|00000940| 00 00 01 00 20 00 02 00 | 00 00 00 00 de 03 00 00 |.... ...|........|
|00000950| 64 18 00 00 01 00 20 00 | 02 00 00 00 00 00 fd 03 |d..... .|........|
|00000960| 00 00 a4 18 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000970| 1d 04 00 00 d0 18 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000980| 00 00 3b 04 00 00 0e 19 | 00 00 01 00 20 00 02 00 |..;.....|.... ...|
|00000990| 00 00 00 00 5a 04 00 00 | 4c 19 00 00 01 00 20 00 |....Z...|L..... .|
|000009a0| 02 00 00 00 00 00 83 04 | 00 00 72 19 00 00 01 00 |........|..r.....|
|000009b0| 20 00 02 00 00 00 00 00 | ad 04 00 00 9e 19 00 00 | .......|........|
|000009c0| 01 00 20 00 02 00 00 00 | 00 00 c6 04 00 00 12 1a |.. .....|........|
|000009d0| 00 00 01 00 20 00 02 00 | 00 00 00 00 e8 04 00 00 |.... ...|........|
|000009e0| 3c 1a 00 00 01 00 20 00 | 02 00 00 00 00 00 08 05 |<..... .|........|
|000009f0| 00 00 62 1a 00 00 01 00 | 20 00 02 00 00 00 00 00 |..b.....| .......|
|00000a00| 28 05 00 00 88 1a 00 00 | 01 00 20 00 02 00 00 00 |(.......|.. .....|
|00000a10| 00 00 42 05 00 00 ae 1a | 00 00 01 00 20 00 02 00 |..B.....|.... ...|
|00000a20| 00 00 00 00 5c 05 00 00 | d4 1a 00 00 01 00 20 00 |....\...|...... .|
|00000a30| 02 00 00 00 00 00 89 05 | 00 00 3c 1b 00 00 01 00 |........|..<.....|
|00000a40| 20 00 02 00 00 00 00 00 | 9c 05 00 00 dc 1b 00 00 | .......|........|
|00000a50| 01 00 20 00 02 00 00 00 | 00 00 b1 05 00 00 ac 1c |.. .....|........|
|00000a60| 00 00 01 00 20 00 02 00 | 00 00 00 00 c4 05 00 00 |.... ...|........|
|00000a70| 4a 1d 00 00 01 00 20 00 | 02 00 00 00 00 00 d8 05 |J..... .|........|
|00000a80| 00 00 ca 1d 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000a90| f1 05 00 00 8c 1e 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000aa0| 00 00 07 06 00 00 fe 1e | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000ab0| 00 00 00 00 1e 06 00 00 | ac 20 00 00 01 00 20 00 |........|. .... .|
|00000ac0| 02 00 00 00 00 00 2e 06 | 00 00 ce 21 00 00 01 00 |........|...!....|
|00000ad0| 20 00 02 00 00 00 00 00 | 40 06 00 00 b8 22 00 00 | .......|@...."..|
|00000ae0| 01 00 20 00 02 00 00 00 | 00 00 5a 06 00 00 18 25 |.. .....|..Z....%|
|00000af0| 00 00 01 00 20 00 02 00 | 00 00 00 00 6e 06 00 00 |.... ...|....n...|
|00000b00| d0 25 00 00 01 00 20 00 | 02 00 00 00 00 00 82 06 |.%.... .|........|
|00000b10| 00 00 b2 26 00 00 01 00 | 20 00 02 00 00 00 00 00 |...&....| .......|
|00000b20| 04 00 00 00 6e 27 00 00 | 01 00 20 00 02 00 00 00 |....n'..|.. .....|
|00000b30| 00 00 72 08 00 00 90 29 | 00 00 01 00 20 00 02 00 |..r....)|.... ...|
|00000b40| 00 00 00 00 d6 08 00 00 | 96 29 00 00 01 00 20 00 |........|.).... .|
|00000b50| 02 00 00 00 00 00 39 09 | 00 00 9c 29 00 00 01 00 |......9.|...)....|
|00000b60| 20 00 02 00 00 00 00 00 | 03 0e 00 00 a4 29 00 00 | .......|.....)..|
|00000b70| 01 00 20 00 02 00 00 00 | 00 00 14 0e 00 00 e6 29 |.. .....|.......)|
|00000b80| 00 00 01 00 20 00 02 00 | 00 00 00 00 24 0e 00 00 |.... ...|....$...|
|00000b90| 40 2a 00 00 01 00 20 00 | 02 00 00 00 00 00 13 0a |@*.... .|........|
|00000ba0| 00 00 6c 2a 00 00 01 00 | 20 00 02 00 00 00 00 00 |..l*....| .......|
|00000bb0| 3b 0e 00 00 1a 2b 00 00 | 01 00 20 00 02 00 00 00 |;....+..|.. .....|
|00000bc0| 00 00 14 0c 00 00 36 2b | 00 00 01 00 20 00 02 00 |......6+|.... ...|
|00000bd0| 00 00 00 00 f5 0d 00 00 | 3c 2b 00 00 01 00 20 00 |........|<+.... .|
|00000be0| 02 00 00 00 00 00 45 07 | 00 00 60 2b 00 00 02 00 |......E.|..`+....|
|00000bf0| 00 00 02 00 00 00 00 00 | 33 07 00 00 d0 2b 00 00 |........|3....+..|
|00000c00| 02 00 00 00 02 00 00 00 | 00 00 1e 07 00 00 d4 2b |........|.......+|
|00000c10| 00 00 02 00 00 00 02 00 | 00 00 00 00 13 07 00 00 |........|........|
|00000c20| d8 2b 00 00 02 00 00 00 | 02 00 00 00 00 00 08 07 |.+......|........|
|00000c30| 00 00 dc 2b 00 00 02 00 | 00 00 02 00 00 00 00 00 |...+....|........|
|00000c40| fc 06 00 00 e0 2b 00 00 | 02 00 00 00 02 00 00 00 |.....+..|........|
|00000c50| 00 00 e9 06 00 00 e4 2b | 00 00 02 00 00 00 02 00 |.......+|........|
|00000c60| 00 00 00 00 dc 06 00 00 | e8 2b 00 00 02 00 00 00 |........|.+......|
|00000c70| 02 00 5f 52 6f 6f 74 4b | 65 79 30 2e 00 00 02 00 |.._RootK|ey0.....|
|00000c80| 00 00 02 00 00 00 00 00 | cf 06 00 00 c0 32 00 00 |........|.....2..|
|00000c90| 02 00 00 00 02 00 00 00 | 00 00 c2 06 00 00 c4 32 |........|.......2|
|00000ca0| 00 00 02 00 00 00 02 00 | 00 00 00 00 b2 06 00 00 |........|........|
|00000cb0| c8 32 00 00 02 00 00 00 | 02 00 5f 53 74 6f 72 65 |.2......|.._Store|
|00000cc0| 00 00 cc 32 00 00 02 00 | 00 00 02 00 00 00 00 00 |...2....|........|
|00000cd0| a8 06 00 00 d0 32 00 00 | 02 00 00 00 02 00 00 00 |.....2..|........|
|00000ce0| 00 00 9e 06 00 00 d4 32 | 00 00 02 00 00 00 02 00 |.......2|........|
|00000cf0| 00 00 00 00 94 06 00 00 | d8 32 00 00 02 00 00 00 |........|.2......|
|00000d00| 02 00 00 00 00 00 64 08 | 00 00 dc 32 00 00 02 00 |......d.|...2....|
|00000d10| 00 00 02 00 00 00 00 00 | 59 08 00 00 e0 32 00 00 |........|Y....2..|
|00000d20| 02 00 00 00 02 00 00 00 | 00 00 4a 08 00 00 f0 32 |........|..J....2|
|00000d30| 00 00 02 00 00 00 02 00 | 00 00 00 00 38 08 00 00 |........|....8...|
|00000d40| 58 33 00 00 02 00 00 00 | 02 00 00 00 00 00 27 08 |X3......|......'.|
|00000d50| 00 00 5c 33 00 00 02 00 | 00 00 02 00 00 00 00 00 |..\3....|........|
|00000d60| 1b 08 00 00 60 33 00 00 | 02 00 00 00 02 00 00 00 |....`3..|........|
|00000d70| 00 00 0d 08 00 00 80 33 | 00 00 02 00 00 00 02 00 |.......3|........|
|00000d80| 00 00 00 00 02 08 00 00 | 80 37 00 00 02 00 00 00 |........|.7......|
|00000d90| 02 00 00 00 00 00 f4 07 | 00 00 f0 37 00 00 02 00 |........|...7....|
|00000da0| 00 00 02 00 00 00 00 00 | e3 07 00 00 10 38 00 00 |........|.....8..|
|00000db0| 02 00 00 00 02 00 00 00 | 00 00 d8 07 00 00 30 38 |........|......08|
|00000dc0| 00 00 02 00 00 00 02 00 | 00 00 00 00 ce 07 00 00 |........|........|
|00000dd0| 50 38 00 00 02 00 00 00 | 02 00 00 00 00 00 c2 07 |P8......|........|
|00000de0| 00 00 70 38 00 00 02 00 | 00 00 02 00 00 00 00 00 |..p8....|........|
|00000df0| ae 07 00 00 90 38 00 00 | 02 00 00 00 02 00 00 00 |.....8..|........|
|00000e00| 00 00 a0 07 00 00 a0 38 | 00 00 02 00 00 00 02 00 |.......8|........|
|00000e10| 00 00 00 00 83 07 00 00 | a0 3c 00 00 02 00 00 00 |........|.<......|
|00000e20| 02 00 00 00 00 00 73 07 | 00 00 a4 3c 00 00 02 00 |......s.|...<....|
|00000e30| 00 00 02 00 00 00 00 00 | 5c 07 00 00 a8 3c 00 00 |........|\....<..|
|00000e40| 02 00 00 00 02 00 00 00 | 00 00 51 07 00 00 b0 3c |........|..Q....<|
|00000e50| 00 00 02 00 00 00 02 00 | 00 00 00 00 d5 0c 00 00 |........|........|
|00000e60| c0 40 00 00 03 00 00 00 | 02 00 00 00 00 00 bf 10 |.@......|........|
|00000e70| 00 00 d4 40 00 00 03 00 | 00 00 02 00 00 00 00 00 |...@....|........|
|00000e80| 63 10 00 00 e8 40 00 00 | 03 00 00 00 02 00 65 6e |c....@..|......en|
|00000e90| 64 00 00 00 00 00 80 49 | 00 00 fe ff 00 00 02 00 |d......I|........|
|00000ea0| 71 11 00 00 5f 44 72 69 | 76 65 72 45 6e 74 72 79 |q..._Dri|verEntry|
|00000eb0| 40 38 00 5f 57 64 46 53 | 5f 49 6e 63 72 65 6d 65 |@8._WdFS|_Increme|
|00000ec0| 6e 74 40 34 00 5f 57 44 | 53 41 67 65 4e 54 46 72 |nt@4._WD|SAgeNTFr|
|00000ed0| 65 65 53 74 6f 72 65 40 | 30 00 5f 57 44 53 41 67 |eeStore@|0._WDSAg|
|00000ee0| 65 4e 54 4e 65 77 53 74 | 6f 72 65 40 30 00 5f 57 |eNTNewSt|ore@0._W|
|00000ef0| 44 53 41 67 65 4e 54 4f | 6c 64 65 73 74 53 74 6f |DSAgeNTO|ldestSto|
|00000f00| 72 65 40 30 00 5f 57 44 | 53 41 67 65 4e 54 52 65 |re@0._WD|SAgeNTRe|
|00000f10| 73 65 74 53 74 6f 72 65 | 40 30 00 5f 55 70 64 61 |setStore|@0._Upda|
|00000f20| 74 65 53 74 6f 72 65 00 | 5f 73 74 72 6e 63 61 74 |teStore.|_strncat|
|00000f30| 5a 40 31 32 00 5f 4d 79 | 43 72 65 61 74 65 54 68 |Z@12._My|CreateTh|
|00000f40| 72 65 61 64 4e 6f 74 69 | 66 79 52 6f 75 74 69 6e |readNoti|fyRoutin|
|00000f50| 65 40 31 32 00 5f 4d 79 | 43 72 65 61 74 65 50 72 |e@12._My|CreatePr|
|00000f60| 6f 63 65 73 73 4e 6f 74 | 69 66 79 52 6f 75 74 69 |ocessNot|ifyRouti|
|00000f70| 6e 65 40 31 32 00 5f 57 | 44 53 41 67 65 4e 54 48 |ne@12._W|DSAgeNTH|
|00000f80| 61 73 68 43 6c 65 61 6e | 75 70 40 30 00 5f 57 64 |ashClean|up@0._Wd|
|00000f90| 46 53 5f 48 61 73 68 43 | 6c 65 61 6e 75 70 40 30 |FS_HashC|leanup@0|
|00000fa0| 00 5f 57 44 53 41 67 65 | 4e 54 53 74 6f 72 65 48 |._WDSAge|NTStoreH|
|00000fb0| 61 73 68 40 38 00 5f 57 | 44 53 41 67 65 4e 54 46 |ash@8._W|DSAgeNTF|
|00000fc0| 72 65 65 48 61 73 68 45 | 6e 74 72 79 40 34 00 5f |reeHashE|ntry@4._|
|00000fd0| 57 64 46 53 5f 46 72 65 | 65 48 61 73 68 45 6e 74 |WdFS_Fre|eHashEnt|
|00000fe0| 72 79 40 34 00 5f 43 6f | 6e 76 65 72 74 54 6f 55 |ry@4._Co|nvertToU|
|00000ff0| 70 70 65 72 40 31 32 00 | 5f 47 65 74 50 6f 69 6e |pper@12.|_GetPoin|
|00001000| 74 65 72 40 34 00 5f 52 | 65 6c 65 61 73 65 50 6f |ter@4._R|eleasePo|
|00001010| 69 6e 74 65 72 40 34 00 | 5f 41 70 70 65 6e 64 4b |inter@4.|_AppendK|
|00001020| 65 79 49 6e 66 6f 72 6d | 61 74 69 6f 6e 40 31 32 |eyInform|ation@12|
|00001030| 00 5f 41 70 70 65 6e 64 | 52 65 67 56 61 6c 75 65 |._Append|RegValue|
|00001040| 54 79 70 65 40 38 00 5f | 41 70 70 65 6e 64 52 65 |Type@8._|AppendRe|
|00001050| 67 56 61 6c 75 65 44 61 | 74 61 40 31 36 00 5f 41 |gValueDa|ta@16._A|
|00001060| 70 70 65 6e 64 56 61 6c | 75 65 49 6e 66 6f 72 6d |ppendVal|ueInform|
|00001070| 61 74 69 6f 6e 40 31 36 | 00 5f 45 72 72 6f 72 53 |ation@16|._ErrorS|
|00001080| 74 72 69 6e 67 40 34 00 | 5f 57 64 46 53 5f 47 65 |tring@4.|_WdFS_Ge|
|00001090| 74 46 75 6c 6c 50 61 74 | 68 40 31 32 00 5f 47 65 |tFullPat|h@12._Ge|
|000010a0| 74 46 75 6c 6c 4e 61 6d | 65 40 31 32 00 5f 47 65 |tFullNam|e@12._Ge|
|000010b0| 74 50 72 6f 63 65 73 73 | 4e 61 6d 65 4f 66 66 73 |tProcess|NameOffs|
|000010c0| 65 74 40 30 00 5f 47 65 | 74 4e 65 77 50 72 6f 63 |et@0._Ge|tNewProc|
|000010d0| 65 73 73 4e 61 6d 65 40 | 38 00 5f 47 65 74 50 72 |essName@|8._GetPr|
|000010e0| 6f 63 65 73 73 40 34 00 | 5f 48 6f 6f 6b 44 72 69 |ocess@4.|_HookDri|
|000010f0| 76 65 40 38 00 5f 55 6e | 68 6f 6f 6b 44 72 69 76 |ve@8._Un|hookDriv|
|00001100| 65 40 34 00 5f 48 6f 6f | 6b 44 72 69 76 65 53 65 |e@4._Hoo|kDriveSe|
|00001110| 74 40 38 00 5f 57 64 46 | 53 5f 46 61 73 74 49 6f |t@8._WdF|S_FastIo|
|00001120| 43 68 65 63 6b 69 66 50 | 6f 73 73 69 62 6c 65 40 |CheckifP|ossible@|
|00001130| 33 32 00 5f 57 64 46 53 | 5f 46 61 73 74 49 6f 52 |32._WdFS|_FastIoR|
|00001140| 65 61 64 40 33 32 00 5f | 57 64 46 53 5f 46 61 73 |ead@32._|WdFS_Fas|
|00001150| 74 49 6f 57 72 69 74 65 | 40 33 32 00 5f 57 64 46 |tIoWrite|@32._WdF|
|00001160| 53 5f 46 61 73 74 49 6f | 51 75 65 72 79 42 61 73 |S_FastIo|QueryBas|
|00001170| 69 63 49 6e 66 6f 40 32 | 30 00 5f 57 64 46 53 5f |icInfo@2|0._WdFS_|
|00001180| 46 61 73 74 49 6f 51 75 | 65 72 79 53 74 61 6e 64 |FastIoQu|eryStand|
|00001190| 61 72 64 49 6e 66 6f 40 | 32 30 00 5f 57 64 46 53 |ardInfo@|20._WdFS|
|000011a0| 5f 46 61 73 74 49 6f 4c | 6f 63 6b 40 33 36 00 5f |_FastIoL|ock@36._|
|000011b0| 57 64 46 53 5f 46 61 73 | 74 49 6f 55 6e 6c 6f 63 |WdFS_Fas|tIoUnloc|
|000011c0| 6b 53 69 6e 67 6c 65 40 | 32 38 00 5f 57 64 46 53 |kSingle@|28._WdFS|
|000011d0| 5f 46 61 73 74 49 6f 55 | 6e 6c 6f 63 6b 41 6c 6c |_FastIoU|nlockAll|
|000011e0| 40 31 36 00 5f 57 64 46 | 53 5f 46 61 73 74 49 6f |@16._WdF|S_FastIo|
|000011f0| 55 6e 6c 6f 63 6b 41 6c | 6c 42 79 4b 65 79 40 32 |UnlockAl|lByKey@2|
|00001200| 30 00 5f 57 64 46 53 5f | 46 61 73 74 49 6f 51 75 |0._WdFS_|FastIoQu|
|00001210| 65 72 79 4e 65 74 77 6f | 72 6b 4f 70 65 6e 49 6e |eryNetwo|rkOpenIn|
|00001220| 66 6f 40 32 30 00 5f 57 | 64 46 53 5f 46 61 73 74 |fo@20._W|dFS_Fast|
|00001230| 49 6f 41 63 71 75 69 72 | 65 46 6f 72 4d 6f 64 57 |IoAcquir|eForModW|
|00001240| 72 69 74 65 40 31 36 00 | 5f 57 64 46 53 5f 46 61 |rite@16.|_WdFS_Fa|
|00001250| 73 74 49 6f 4d 64 6c 52 | 65 61 64 40 32 38 00 5f |stIoMdlR|ead@28._|
|00001260| 57 64 46 53 5f 46 61 73 | 74 49 6f 4d 64 6c 52 65 |WdFS_Fas|tIoMdlRe|
|00001270| 61 64 43 6f 6d 70 6c 65 | 74 65 40 31 32 00 5f 57 |adComple|te@12._W|
|00001280| 64 46 53 5f 46 61 73 74 | 49 6f 50 72 65 70 61 72 |dFS_Fast|IoPrepar|
|00001290| 65 4d 64 6c 57 72 69 74 | 65 40 32 38 00 5f 57 64 |eMdlWrit|e@28._Wd|
|000012a0| 46 53 5f 46 61 73 74 49 | 6f 4d 64 6c 57 72 69 74 |FS_FastI|oMdlWrit|
|000012b0| 65 43 6f 6d 70 6c 65 74 | 65 40 31 36 00 5f 57 64 |eComplet|e@16._Wd|
|000012c0| 46 53 5f 46 61 73 74 49 | 6f 52 65 61 64 43 6f 6d |FS_FastI|oReadCom|
|000012d0| 70 72 65 73 73 65 64 40 | 34 30 00 5f 57 64 46 53 |pressed@|40._WdFS|
|000012e0| 5f 46 61 73 74 49 6f 57 | 72 69 74 65 43 6f 6d 70 |_FastIoW|riteComp|
|000012f0| 72 65 73 73 65 64 40 34 | 30 00 5f 57 64 46 53 5f |ressed@4|0._WdFS_|
|00001300| 46 61 73 74 49 6f 4d 64 | 6c 52 65 61 64 43 6f 6d |FastIoMd|lReadCom|
|00001310| 70 6c 65 74 65 43 6f 6d | 70 72 65 73 73 65 64 40 |pleteCom|pressed@|
|00001320| 31 32 00 5f 57 64 46 53 | 5f 46 61 73 74 49 6f 4d |12._WdFS|_FastIoM|
|00001330| 64 6c 57 72 69 74 65 43 | 6f 6d 70 6c 65 74 65 43 |dlWriteC|ompleteC|
|00001340| 6f 6d 70 72 65 73 73 65 | 64 40 31 36 00 5f 57 64 |ompresse|d@16._Wd|
|00001350| 46 53 5f 46 61 73 74 49 | 6f 51 75 65 72 79 4f 70 |FS_FastI|oQueryOp|
|00001360| 65 6e 40 31 32 00 5f 57 | 64 46 53 5f 46 61 73 74 |en@12._W|dFS_Fast|
|00001370| 49 6f 52 65 6c 65 61 73 | 65 46 6f 72 4d 6f 64 57 |IoReleas|eForModW|
|00001380| 72 69 74 65 40 31 32 00 | 5f 57 64 46 53 5f 46 61 |rite@12.|_WdFS_Fa|
|00001390| 73 74 49 6f 41 63 71 75 | 69 72 65 46 6f 72 43 63 |stIoAcqu|ireForCc|
|000013a0| 46 6c 75 73 68 40 38 00 | 5f 57 64 46 53 5f 46 61 |Flush@8.|_WdFS_Fa|
|000013b0| 73 74 49 6f 52 65 6c 65 | 61 73 65 46 6f 72 43 63 |stIoRele|aseForCc|
|000013c0| 46 6c 75 73 68 40 38 00 | 5f 57 64 46 53 5f 46 61 |Flush@8.|_WdFS_Fa|
|000013d0| 73 74 49 6f 41 63 71 75 | 69 72 65 46 69 6c 65 40 |stIoAcqu|ireFile@|
|000013e0| 34 00 5f 57 64 46 53 5f | 46 61 73 74 49 6f 52 65 |4._WdFS_|FastIoRe|
|000013f0| 6c 65 61 73 65 46 69 6c | 65 40 34 00 5f 57 64 46 |leaseFil|e@4._WdF|
|00001400| 53 5f 46 61 73 74 49 6f | 44 65 74 61 63 68 44 65 |S_FastIo|DetachDe|
|00001410| 76 69 63 65 40 38 00 5f | 57 64 46 53 5f 48 6f 6f |vice@8._|WdFS_Hoo|
|00001420| 6b 44 6f 6e 65 40 31 32 | 00 5f 48 6f 6f 6b 52 65 |kDone@12|._HookRe|
|00001430| 67 4f 70 65 6e 4b 65 79 | 40 31 32 00 5f 48 6f 6f |gOpenKey|@12._Hoo|
|00001440| 6b 52 65 67 43 72 65 61 | 74 65 4b 65 79 40 32 38 |kRegCrea|teKey@28|
|00001450| 00 5f 48 6f 6f 6b 52 65 | 67 43 6c 6f 73 65 4b 65 |._HookRe|gCloseKe|
|00001460| 79 40 34 00 5f 48 6f 6f | 6b 52 65 67 44 65 6c 65 |y@4._Hoo|kRegDele|
|00001470| 74 65 4b 65 79 40 34 00 | 5f 48 6f 6f 6b 52 65 67 |teKey@4.|_HookReg|
|00001480| 44 65 6c 65 74 65 56 61 | 6c 75 65 4b 65 79 40 38 |DeleteVa|lueKey@8|
|00001490| 00 5f 43 6f 6e 76 65 72 | 74 53 74 72 69 6e 67 44 |._Conver|tStringD|
|000014a0| 61 74 61 40 31 32 00 5f | 48 6f 6f 6b 52 65 67 53 |ata@12._|HookRegS|
|000014b0| 65 74 56 61 6c 75 65 4b | 65 79 40 32 34 00 5f 48 |etValueK|ey@24._H|
|000014c0| 6f 6f 6b 52 65 67 69 73 | 74 72 79 40 30 00 5f 55 |ookRegis|try@0._U|
|000014d0| 6e 68 6f 6f 6b 52 65 67 | 69 73 74 72 79 40 30 00 |nhookReg|istry@0.|
|000014e0| 5f 57 44 53 41 67 65 4e | 54 44 65 76 69 63 65 43 |_WDSAgeN|TDeviceC|
|000014f0| 6f 6e 74 72 6f 6c 40 33 | 36 00 5f 57 64 46 53 5f |ontrol@3|6._WdFS_|
|00001500| 48 6f 6f 6b 52 6f 75 74 | 69 6e 65 40 38 00 5f 57 |HookRout|ine@8._W|
|00001510| 44 53 41 67 65 4e 54 44 | 69 73 70 61 74 63 68 40 |DSAgeNTD|ispatch@|
|00001520| 38 00 5f 57 44 53 41 67 | 65 4e 54 55 6e 6c 6f 61 |8._WDSAg|eNTUnloa|
|00001530| 64 40 34 00 5f 4d 61 78 | 53 74 6f 72 65 00 5f 4e |d@4._Max|Store._N|
|00001540| 75 6d 53 74 6f 72 65 00 | 5f 53 65 71 75 65 6e 63 |umStore.|_Sequenc|
|00001550| 65 00 5f 46 53 5f 46 72 | 65 65 45 6e 74 72 69 65 |e._FS_Fr|eeEntrie|
|00001560| 73 00 5f 46 72 65 65 45 | 6e 74 72 69 65 73 00 5f |s._FreeE|ntries._|
|00001570| 4c 44 72 69 76 65 47 72 | 6f 75 70 00 5f 43 75 72 |LDriveGr|oup._Cur|
|00001580| 72 65 6e 74 55 73 65 72 | 00 5f 50 72 6f 63 65 73 |rentUser|._Proces|
|00001590| 73 4e 61 6d 65 4f 66 66 | 73 65 74 00 5f 50 72 6f |sNameOff|set._Pro|
|000015a0| 63 48 6f 6f 6b 65 64 00 | 5f 52 65 67 48 6f 6f 6b |cHooked.|_RegHook|
|000015b0| 65 64 00 5f 47 55 49 41 | 63 74 69 76 65 00 5f 4f |ed._GUIA|ctive._O|
|000015c0| 75 74 73 74 61 6e 64 69 | 6e 67 49 52 50 43 6f 75 |utstandi|ngIRPCou|
|000015d0| 6e 74 00 5f 55 6e 6c 6f | 61 64 49 6e 50 72 6f 67 |nt._Unlo|adInProg|
|000015e0| 72 65 73 73 00 5f 46 61 | 73 74 49 4f 48 6f 6f 6b |ress._Fa|stIOHook|
|000015f0| 00 5f 48 61 73 68 54 61 | 62 6c 65 00 5f 52 65 61 |._HashTa|ble._Rea|
|00001600| 6c 52 65 67 44 65 6c 65 | 74 65 56 61 6c 75 65 4b |lRegDele|teValueK|
|00001610| 65 79 00 5f 52 65 61 6c | 52 65 67 4f 70 65 6e 4b |ey._Real|RegOpenK|
|00001620| 65 79 00 5f 52 65 61 6c | 52 65 67 43 72 65 61 74 |ey._Real|RegCreat|
|00001630| 65 4b 65 79 00 5f 65 72 | 72 73 74 72 69 6e 67 00 |eKey._er|rstring.|
|00001640| 5f 46 53 5f 48 61 73 68 | 54 61 62 6c 65 00 5f 52 |_FS_Hash|Table._R|
|00001650| 65 61 6c 52 65 67 53 65 | 74 56 61 6c 75 65 4b 65 |ealRegSe|tValueKe|
|00001660| 79 00 5f 43 6f 75 6e 74 | 4d 75 74 65 78 00 5f 52 |y._Count|Mutex._R|
|00001670| 65 67 4d 75 74 65 78 00 | 5f 48 61 73 68 4d 75 74 |egMutex.|_HashMut|
|00001680| 65 78 00 5f 47 6c 6f 62 | 61 6c 42 61 73 69 63 49 |ex._Glob|alBasicI|
|00001690| 6e 66 6f 00 5f 46 53 5f | 48 61 73 68 4d 75 74 65 |nfo._FS_|HashMute|
|000016a0| 78 00 5f 4c 44 72 69 76 | 65 4d 61 70 00 5f 73 7a |x._LDriv|eMap._sz|
|000016b0| 4f 6c 64 56 61 6c 44 61 | 74 61 00 5f 53 74 6f 72 |OldValDa|ta._Stor|
|000016c0| 65 4d 75 74 65 78 00 5f | 52 65 61 6c 52 65 67 43 |eMutex._|RealRegC|
|000016d0| 6c 6f 73 65 4b 65 79 00 | 5f 52 65 61 6c 52 65 67 |loseKey.|_RealReg|
|000016e0| 44 65 6c 65 74 65 4b 65 | 79 00 5f 4c 44 72 69 76 |DeleteKe|y._LDriv|
|000016f0| 65 44 65 76 69 63 65 73 | 00 5f 47 55 49 44 65 76 |eDevices|._GUIDev|
|00001700| 69 63 65 00 5f 53 65 72 | 76 69 63 65 54 61 62 6c |ice._Ser|viceTabl|
|00001710| 65 00 40 49 6e 74 65 72 | 6c 6f 63 6b 65 64 49 6e |e.@Inter|lockedIn|
|00001720| 63 72 65 6d 65 6e 74 40 | 34 00 5f 5f 69 6d 70 5f |crement@|4.__imp_|
|00001730| 5f 45 78 46 72 65 65 50 | 6f 6f 6c 40 34 00 5f 5f |_ExFreeP|ool@4.__|
|00001740| 69 6d 70 5f 5f 45 78 41 | 6c 6c 6f 63 61 74 65 50 |imp__ExA|llocateP|
|00001750| 6f 6f 6c 57 69 74 68 54 | 61 67 40 31 32 00 5f 5f |oolWithT|ag@12.__|
|00001760| 69 6d 70 5f 5f 4b 65 52 | 65 6c 65 61 73 65 4d 75 |imp__KeR|eleaseMu|
|00001770| 74 65 78 40 38 00 5f 50 | 73 47 65 74 43 75 72 72 |tex@8._P|sGetCurr|
|00001780| 65 6e 74 50 72 6f 63 65 | 73 73 49 64 40 30 00 5f |entProce|ssId@0._|
|00001790| 5f 69 6d 70 5f 5f 4b 65 | 57 61 69 74 46 6f 72 53 |_imp__Ke|WaitForS|
|000017a0| 69 6e 67 6c 65 4f 62 6a | 65 63 74 40 32 30 00 5f |ingleObj|ect@20._|
|000017b0| 5f 69 6d 70 5f 5f 73 74 | 72 6e 63 70 79 00 5f 5f |_imp__st|rncpy.__|
|000017c0| 69 6d 70 5f 40 4b 66 52 | 65 6c 65 61 73 65 53 70 |imp_@KfR|eleaseSp|
|000017d0| 69 6e 4c 6f 63 6b 40 38 | 00 5f 50 73 4c 6f 6f 6b |inLock@8|._PsLook|
|000017e0| 75 70 50 72 6f 63 65 73 | 73 42 79 50 72 6f 63 65 |upProces|sByProce|
|000017f0| 73 73 49 64 40 38 00 5f | 5f 69 6d 70 5f 40 4b 66 |ssId@8._|_imp_@Kf|
|00001800| 41 63 71 75 69 72 65 53 | 70 69 6e 4c 6f 63 6b 40 |AcquireS|pinLock@|
|00001810| 34 00 5f 5f 69 6d 70 5f | 5f 4f 62 52 65 66 65 72 |4.__imp_|_ObRefer|
|00001820| 65 6e 63 65 4f 62 6a 65 | 63 74 42 79 48 61 6e 64 |enceObje|ctByHand|
|00001830| 6c 65 40 32 34 00 5f 5f | 69 6d 70 5f 40 4f 62 66 |le@24.__|imp_@Obf|
|00001840| 44 65 72 65 66 65 72 65 | 6e 63 65 4f 62 6a 65 63 |Derefere|nceObjec|
|00001850| 74 40 34 00 5f 5f 69 6d | 70 5f 5f 73 70 72 69 6e |t@4.__im|p__sprin|
|00001860| 74 66 00 5f 5f 69 6d 70 | 5f 5f 52 74 6c 46 72 65 |tf.__imp|__RtlFre|
|00001870| 65 41 6e 73 69 53 74 72 | 69 6e 67 40 34 00 5f 5f |eAnsiStr|ing@4.__|
|00001880| 69 6d 70 5f 5f 52 74 6c | 55 6e 69 63 6f 64 65 53 |imp__Rtl|UnicodeS|
|00001890| 74 72 69 6e 67 54 6f 41 | 6e 73 69 53 74 72 69 6e |tringToA|nsiStrin|
|000018a0| 67 40 31 32 00 5f 5f 65 | 78 63 65 70 74 5f 6c 69 |g@12.__e|xcept_li|
|000018b0| 73 74 00 5f 5f 65 78 63 | 65 70 74 5f 68 61 6e 64 |st.__exc|ept_hand|
|000018c0| 6c 65 72 33 00 5f 5f 69 | 6d 70 5f 5f 73 74 72 6e |ler3.__i|mp__strn|
|000018d0| 63 6d 70 00 5f 5f 69 6d | 70 5f 5f 49 6f 47 65 74 |cmp.__im|p__IoGet|
|000018e0| 43 75 72 72 65 6e 74 50 | 72 6f 63 65 73 73 40 30 |CurrentP|rocess@0|
|000018f0| 00 5f 5f 69 6d 70 5f 5f | 5a 77 43 6c 6f 73 65 40 |.__imp__|ZwClose@|
|00001900| 34 00 5f 5f 69 6d 70 5f | 5f 49 6f 41 74 74 61 63 |4.__imp_|_IoAttac|
|00001910| 68 44 65 76 69 63 65 42 | 79 50 6f 69 6e 74 65 72 |hDeviceB|yPointer|
|00001920| 40 38 00 5f 5f 69 6d 70 | 5f 5f 49 6f 43 72 65 61 |@8.__imp|__IoCrea|
|00001930| 74 65 44 65 76 69 63 65 | 40 32 38 00 5f 5f 69 6d |teDevice|@28.__im|
|00001940| 70 5f 5f 49 6f 47 65 74 | 52 65 6c 61 74 65 64 44 |p__IoGet|RelatedD|
|00001950| 65 76 69 63 65 4f 62 6a | 65 63 74 40 34 00 5f 5f |eviceObj|ect@4.__|
|00001960| 69 6d 70 5f 5f 5a 77 43 | 72 65 61 74 65 46 69 6c |imp__ZwC|reateFil|
|00001970| 65 40 34 34 00 5f 5f 69 | 6d 70 5f 5f 52 74 6c 49 |e@44.__i|mp__RtlI|
|00001980| 6e 69 74 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |nitUnico|deString|
|00001990| 40 38 00 5f 5f 69 6d 70 | 5f 5f 49 6f 44 65 6c 65 |@8.__imp|__IoDele|
|000019a0| 74 65 44 65 76 69 63 65 | 40 34 00 5f 5f 69 6d 70 |teDevice|@4.__imp|
|000019b0| 5f 5f 49 6f 44 65 74 61 | 63 68 44 65 76 69 63 65 |__IoDeta|chDevice|
|000019c0| 40 34 00 5f 5f 69 6d 70 | 5f 5f 5a 77 51 75 65 72 |@4.__imp|__ZwQuer|
|000019d0| 79 4b 65 79 40 32 30 00 | 5f 5f 69 6d 70 5f 5f 5a |yKey@20.|__imp__Z|
|000019e0| 77 51 75 65 72 79 56 61 | 6c 75 65 4b 65 79 40 32 |wQueryVa|lueKey@2|
|000019f0| 34 00 5f 5f 69 6d 70 5f | 5f 5a 77 44 65 6c 65 74 |4.__imp_|_ZwDelet|
|00001a00| 65 56 61 6c 75 65 4b 65 | 79 40 38 00 5f 5f 69 6d |eValueKe|y@8.__im|
|00001a10| 70 5f 5f 5a 77 43 72 65 | 61 74 65 4b 65 79 40 32 |p__ZwCre|ateKey@2|
|00001a20| 38 00 5f 5f 69 6d 70 5f | 5f 5a 77 53 65 74 56 61 |8.__imp_|_ZwSetVa|
|00001a30| 6c 75 65 4b 65 79 40 32 | 34 00 5f 5f 69 6d 70 5f |lueKey@2|4.__imp_|
|00001a40| 5f 5a 77 44 65 6c 65 74 | 65 4b 65 79 40 34 00 5f |_ZwDelet|eKey@4._|
|00001a50| 5f 69 6d 70 5f 5f 5a 77 | 4f 70 65 6e 4b 65 79 40 |_imp__Zw|OpenKey@|
|00001a60| 31 32 00 5f 5f 69 6d 70 | 5f 40 49 6f 66 43 61 6c |12.__imp|_@IofCal|
|00001a70| 6c 44 72 69 76 65 72 40 | 38 00 5f 5f 69 6d 70 5f |lDriver@|8.__imp_|
|00001a80| 40 49 6f 66 43 6f 6d 70 | 6c 65 74 65 52 65 71 75 |@IofComp|leteRequ|
|00001a90| 65 73 74 40 38 00 5f 5f | 69 6d 70 5f 5f 49 6f 44 |est@8.__|imp__IoD|
|00001aa0| 65 6c 65 74 65 53 79 6d | 62 6f 6c 69 63 4c 69 6e |eleteSym|bolicLin|
|00001ab0| 6b 40 34 00 5f 50 73 53 | 65 74 43 72 65 61 74 65 |k@4._PsS|etCreate|
|00001ac0| 50 72 6f 63 65 73 73 4e | 6f 74 69 66 79 52 6f 75 |ProcessN|otifyRou|
|00001ad0| 74 69 6e 65 40 38 00 5f | 4b 65 53 65 72 76 69 63 |tine@8._|KeServic|
|00001ae0| 65 44 65 73 63 72 69 70 | 74 6f 72 54 61 62 6c 65 |eDescrip|torTable|
|00001af0| 00 5f 5f 69 6d 70 5f 5f | 4b 65 49 6e 69 74 69 61 |.__imp__|KeInitia|
|00001b00| 6c 69 7a 65 4d 75 74 65 | 78 40 38 00 5f 5f 69 6d |lizeMute|x@8.__im|
|00001b10| 70 5f 5f 4b 65 49 6e 69 | 74 69 61 6c 69 7a 65 53 |p__KeIni|tializeS|
|00001b20| 70 69 6e 4c 6f 63 6b 40 | 34 00 5f 5f 69 6d 70 5f |pinLock@|4.__imp_|
|00001b30| 5f 49 6f 43 72 65 61 74 | 65 53 79 6d 62 6f 6c 69 |_IoCreat|eSymboli|
|00001b40| 63 4c 69 6e 6b 40 38 00 | 5f 4e 74 42 75 69 6c 64 |cLink@8.|_NtBuild|
|00001b50| 4e 75 6d 62 65 72 00 5f | 5f 69 6d 70 5f 40 49 6e |Number._|_imp_@In|
|00001b60| 74 65 72 6c 6f 63 6b 65 | 64 49 6e 63 72 65 6d 65 |terlocke|dIncreme|
|00001b70| 6e 74 40 34 00 5f 5f 49 | 4d 50 4f 52 54 5f 44 45 |nt@4.__I|MPORT_DE|
|00001b80| 53 43 52 49 50 54 4f 52 | 5f 6e 74 6f 73 6b 72 6e |SCRIPTOR|_ntoskrn|
|00001b90| 6c 00 5f 45 78 46 72 65 | 65 50 6f 6f 6c 40 34 00 |l._ExFre|ePool@4.|
|00001ba0| 5f 45 78 41 6c 6c 6f 63 | 61 74 65 50 6f 6f 6c 57 |_ExAlloc|atePoolW|
|00001bb0| 69 74 68 54 61 67 40 31 | 32 00 5f 4b 65 52 65 6c |ithTag@1|2._KeRel|
|00001bc0| 65 61 73 65 4d 75 74 65 | 78 40 38 00 5f 5f 69 6d |easeMute|x@8.__im|
|00001bd0| 70 5f 5f 50 73 47 65 74 | 43 75 72 72 65 6e 74 50 |p__PsGet|CurrentP|
|00001be0| 72 6f 63 65 73 73 49 64 | 40 30 00 5f 4b 65 57 61 |rocessId|@0._KeWa|
|00001bf0| 69 74 46 6f 72 53 69 6e | 67 6c 65 4f 62 6a 65 63 |itForSin|gleObjec|
|00001c00| 74 40 32 30 00 5f 5f 69 | 6d 70 5f 5f 50 73 4c 6f |t@20.__i|mp__PsLo|
|00001c10| 6f 6b 75 70 50 72 6f 63 | 65 73 73 42 79 50 72 6f |okupProc|essByPro|
|00001c20| 63 65 73 73 49 64 40 38 | 00 5f 4f 62 52 65 66 65 |cessId@8|._ObRefe|
|00001c30| 72 65 6e 63 65 4f 62 6a | 65 63 74 42 79 48 61 6e |renceObj|ectByHan|
|00001c40| 64 6c 65 40 32 34 00 40 | 4f 62 66 44 65 72 65 66 |dle@24.@|ObfDeref|
|00001c50| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 40 34 00 5f |erenceOb|ject@4._|
|00001c60| 52 74 6c 46 72 65 65 41 | 6e 73 69 53 74 72 69 6e |RtlFreeA|nsiStrin|
|00001c70| 67 40 34 00 5f 52 74 6c | 55 6e 69 63 6f 64 65 53 |g@4._Rtl|UnicodeS|
|00001c80| 74 72 69 6e 67 54 6f 41 | 6e 73 69 53 74 72 69 6e |tringToA|nsiStrin|
|00001c90| 67 40 31 32 00 5f 52 74 | 6c 55 6e 77 69 6e 64 40 |g@12._Rt|lUnwind@|
|00001ca0| 31 36 00 5f 5f 67 6c 6f | 62 61 6c 5f 75 6e 77 69 |16.__glo|bal_unwi|
|00001cb0| 6e 64 32 00 5f 5f 6c 6f | 63 61 6c 5f 75 6e 77 69 |nd2.__lo|cal_unwi|
|00001cc0| 6e 64 32 00 5f 5f 61 62 | 6e 6f 72 6d 61 6c 5f 74 |nd2.__ab|normal_t|
|00001cd0| 65 72 6d 69 6e 61 74 69 | 6f 6e 00 5f 5f 73 65 68 |erminati|on.__seh|
|00001ce0| 5f 6c 6f 6e 67 6a 6d 70 | 5f 75 6e 77 69 6e 64 40 |_longjmp|_unwind@|
|00001cf0| 34 00 5f 49 6f 47 65 74 | 43 75 72 72 65 6e 74 50 |4._IoGet|CurrentP|
|00001d00| 72 6f 63 65 73 73 40 30 | 00 5f 5a 77 43 6c 6f 73 |rocess@0|._ZwClos|
|00001d10| 65 40 34 00 5f 49 6f 41 | 74 74 61 63 68 44 65 76 |e@4._IoA|ttachDev|
|00001d20| 69 63 65 42 79 50 6f 69 | 6e 74 65 72 40 38 00 5f |iceByPoi|nter@8._|
|00001d30| 49 6f 43 72 65 61 74 65 | 44 65 76 69 63 65 40 32 |IoCreate|Device@2|
|00001d40| 38 00 5f 49 6f 47 65 74 | 52 65 6c 61 74 65 64 44 |8._IoGet|RelatedD|
|00001d50| 65 76 69 63 65 4f 62 6a | 65 63 74 40 34 00 5f 5a |eviceObj|ect@4._Z|
|00001d60| 77 43 72 65 61 74 65 46 | 69 6c 65 40 34 34 00 5f |wCreateF|ile@44._|
|00001d70| 52 74 6c 49 6e 69 74 55 | 6e 69 63 6f 64 65 53 74 |RtlInitU|nicodeSt|
|00001d80| 72 69 6e 67 40 38 00 5f | 49 6f 44 65 6c 65 74 65 |ring@8._|IoDelete|
|00001d90| 44 65 76 69 63 65 40 34 | 00 5f 49 6f 44 65 74 61 |Device@4|._IoDeta|
|00001da0| 63 68 44 65 76 69 63 65 | 40 34 00 5f 5a 77 51 75 |chDevice|@4._ZwQu|
|00001db0| 65 72 79 4b 65 79 40 32 | 30 00 5f 5a 77 51 75 65 |eryKey@2|0._ZwQue|
|00001dc0| 72 79 56 61 6c 75 65 4b | 65 79 40 32 34 00 5f 5a |ryValueK|ey@24._Z|
|00001dd0| 77 44 65 6c 65 74 65 56 | 61 6c 75 65 4b 65 79 40 |wDeleteV|alueKey@|
|00001de0| 38 00 5f 5a 77 43 72 65 | 61 74 65 4b 65 79 40 32 |8._ZwCre|ateKey@2|
|00001df0| 38 00 5f 5a 77 53 65 74 | 56 61 6c 75 65 4b 65 79 |8._ZwSet|ValueKey|
|00001e00| 40 32 34 00 5f 5a 77 44 | 65 6c 65 74 65 4b 65 79 |@24._ZwD|eleteKey|
|00001e10| 40 34 00 5f 5a 77 4f 70 | 65 6e 4b 65 79 40 31 32 |@4._ZwOp|enKey@12|
|00001e20| 00 40 49 6f 66 43 61 6c | 6c 44 72 69 76 65 72 40 |.@IofCal|lDriver@|
|00001e30| 38 00 40 49 6f 66 43 6f | 6d 70 6c 65 74 65 52 65 |8.@IofCo|mpleteRe|
|00001e40| 71 75 65 73 74 40 38 00 | 5f 49 6f 44 65 6c 65 74 |quest@8.|_IoDelet|
|00001e50| 65 53 79 6d 62 6f 6c 69 | 63 4c 69 6e 6b 40 34 00 |eSymboli|cLink@4.|
|00001e60| 5f 5f 69 6d 70 5f 5f 50 | 73 53 65 74 43 72 65 61 |__imp__P|sSetCrea|
|00001e70| 74 65 50 72 6f 63 65 73 | 73 4e 6f 74 69 66 79 52 |teProces|sNotifyR|
|00001e80| 6f 75 74 69 6e 65 40 38 | 00 5f 5f 69 6d 70 5f 5f |outine@8|.__imp__|
|00001e90| 4b 65 53 65 72 76 69 63 | 65 44 65 73 63 72 69 70 |KeServic|eDescrip|
|00001ea0| 74 6f 72 54 61 62 6c 65 | 00 5f 4b 65 49 6e 69 74 |torTable|._KeInit|
|00001eb0| 69 61 6c 69 7a 65 4d 75 | 74 65 78 40 38 00 5f 4b |ializeMu|tex@8._K|
|00001ec0| 65 49 6e 69 74 69 61 6c | 69 7a 65 53 70 69 6e 4c |eInitial|izeSpinL|
|00001ed0| 6f 63 6b 40 34 00 5f 49 | 6f 43 72 65 61 74 65 53 |ock@4._I|oCreateS|
|00001ee0| 79 6d 62 6f 6c 69 63 4c | 69 6e 6b 40 38 00 5f 5f |ymbolicL|ink@8.__|
|00001ef0| 69 6d 70 5f 5f 4e 74 42 | 75 69 6c 64 4e 75 6d 62 |imp__NtB|uildNumb|
|00001f00| 65 72 00 5f 5f 4e 55 4c | 4c 5f 49 4d 50 4f 52 54 |er.__NUL|L_IMPORT|
|00001f10| 5f 44 45 53 43 52 49 50 | 54 4f 52 00 7f 6e 74 6f |_DESCRIP|TOR..nto|
|00001f20| 73 6b 72 6e 6c 5f 4e 55 | 4c 4c 5f 54 48 55 4e 4b |skrnl_NU|LL_THUNK|
|00001f30| 5f 44 41 54 41 00 5f 5f | 69 6d 70 5f 5f 52 74 6c |_DATA.__|imp__Rtl|
|00001f40| 55 6e 77 69 6e 64 40 31 | 36 00 40 4b 66 52 65 6c |Unwind@1|6.@KfRel|
|00001f50| 65 61 73 65 53 70 69 6e | 4c 6f 63 6b 40 38 00 5f |easeSpin|Lock@8._|
|00001f60| 5f 49 4d 50 4f 52 54 5f | 44 45 53 43 52 49 50 54 |_IMPORT_|DESCRIPT|
|00001f70| 4f 52 5f 48 41 4c 00 40 | 4b 66 41 63 71 75 69 72 |OR_HAL.@|KfAcquir|
|00001f80| 65 53 70 69 6e 4c 6f 63 | 6b 40 34 00 7f 48 41 4c |eSpinLoc|k@4..HAL|
|00001f90| 5f 4e 55 4c 4c 5f 54 48 | 55 4e 4b 5f 44 41 54 41 |_NULL_TH|UNK_DATA|
|00001fa0| 00 5f 6c 68 5f 63 6f 6e | 74 69 6e 75 65 00 5f 6c |._lh_con|tinue._l|
|00001fb0| 68 5f 64 69 73 6d 69 73 | 73 00 5f 6c 68 5f 72 65 |h_dismis|s._lh_re|
|00001fc0| 74 75 72 6e 00 5f 6c 68 | 5f 62 61 67 69 74 00 5f |turn._lh|_bagit._|
|00001fd0| 6c 68 5f 75 6e 77 69 6e | 64 69 6e 67 00 5f 67 75 |lh_unwin|ding._gu|
|00001fe0| 5f 72 65 74 75 72 6e 00 | 5f 5f 75 6e 77 69 6e 64 |_return.|__unwind|
|00001ff0| 5f 68 61 6e 64 6c 65 72 | 00 5f 75 68 5f 72 65 74 |_handler|._uh_ret|
|00002000| 75 72 6e 00 5f 6c 75 5f | 63 6f 6e 74 69 6e 75 65 |urn._lu_|continue|
|00002010| 00                      |                         |.       |        |
+--------+-------------------------+-------------------------+--------+--------+