home *** CD-ROM | disk | FTP | other *** search
Unknown | 1997-04-25 | 6.3 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 60 e0 12 00 00 00 00 00 | 00 00 00 00 f8 e3 12 00 |`.......|........|
|00000010| 20 c0 11 00 e4 e3 12 00 | 00 00 00 00 00 00 00 00 | .......|........|
|00000020| a8 f8 12 00 a4 c3 11 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 cc cc cc cc |........|........|
|00000040| 06 e4 12 00 10 e4 12 00 | 20 e4 12 00 38 e4 12 00 |........| ...8...|
|00000050| 50 e4 12 00 70 e4 12 00 | 88 e4 12 00 a8 e4 12 00 |P...p...|........|
|00000060| c0 e4 12 00 d8 e4 12 00 | f0 e4 12 00 08 e5 12 00 |........|........|
|00000070| 20 e5 12 00 34 e5 12 00 | 46 e5 12 00 58 e5 12 00 | ...4...|F...X...|
|00000080| 70 e5 12 00 84 e5 12 00 | a0 e5 12 00 c0 e5 12 00 |p.......|........|
|00000090| dc e5 12 00 fc e5 12 00 | 20 e6 12 00 34 e6 12 00 |........| ...4...|
|000000a0| 4c e6 12 00 64 e6 12 00 | 7c e6 12 00 94 e6 12 00 |L...d...||.......|
|000000b0| ac e6 12 00 be e6 12 00 | d8 e6 12 00 f6 e6 12 00 |........|........|
|000000c0| 0c e7 12 00 24 e7 12 00 | 38 e7 12 00 58 e7 12 00 |....$...|8...X...|
|000000d0| 6c e7 12 00 84 e7 12 00 | 94 e7 12 00 ae e7 12 00 |l.......|........|
|000000e0| c6 e7 12 00 e0 e7 12 00 | fe e7 12 00 18 e8 12 00 |........|........|
|000000f0| 32 e8 12 00 48 e8 12 00 | 5e e8 12 00 78 e8 12 00 |2...H...|^...x...|
|00000100| 94 e8 12 00 a0 e8 12 00 | be e8 12 00 ce e8 12 00 |........|........|
|00000110| da e8 12 00 fa e8 12 00 | 1a e9 12 00 3a e9 12 00 |........|....:...|
|00000120| 5a e9 12 00 6c e9 12 00 | 7c e9 12 00 a0 e9 12 00 |Z...l...||.......|
|00000130| b4 e9 12 00 d2 e9 12 00 | e8 e9 12 00 10 ea 12 00 |........|........|
|00000140| 28 ea 12 00 40 ea 12 00 | 60 ea 12 00 7a ea 12 00 |(...@...|`...z...|
|00000150| 9a ea 12 00 b0 ea 12 00 | c6 ea 12 00 d8 ea 12 00 |........|........|
|00000160| f8 ea 12 00 10 eb 12 00 | 28 eb 12 00 38 eb 12 00 |........|(...8...|
|00000170| 46 eb 12 00 5e eb 12 00 | 80 eb 12 00 96 eb 12 00 |F...^...|........|
|00000180| b8 eb 12 00 d0 eb 12 00 | e6 eb 12 00 f4 eb 12 00 |........|........|
|00000190| 04 ec 12 00 20 ec 12 00 | 44 ec 12 00 60 ec 12 00 |.... ...|D...`...|
|000001a0| 80 ec 12 00 98 ec 12 00 | ae ec 12 00 cc ec 12 00 |........|........|
|000001b0| e0 ec 12 00 f4 ec 12 00 | 06 ed 12 00 20 ed 12 00 |........|.... ...|
|000001c0| 3c ed 12 00 50 ed 12 00 | 70 ed 12 00 8a ed 12 00 |<...P...|p.......|
|000001d0| a0 ed 12 00 c0 ed 12 00 | d8 ed 12 00 e8 ed 12 00 |........|........|
|000001e0| 0c ee 12 00 22 ee 12 00 | 40 ee 12 00 56 ee 12 00 |...."...|@...V...|
|000001f0| 70 ee 12 00 84 ee 12 00 | a0 ee 12 00 bc ee 12 00 |p.......|........|
|00000200| d8 ee 12 00 00 ef 12 00 | 22 ef 12 00 40 ef 12 00 |........|"...@...|
|00000210| 4a ef 12 00 58 ef 12 00 | 64 ef 12 00 72 ef 12 00 |J...X...|d...r...|
|00000220| 8c ef 12 00 b0 ef 12 00 | cc ef 12 00 e0 ef 12 00 |........|........|
|00000230| fa ef 12 00 0c f0 12 00 | 22 f0 12 00 40 f0 12 00 |........|"...@...|
|00000240| 5e f0 12 00 7c f0 12 00 | 92 f0 12 00 ac f0 12 00 |^...|...|........|
|00000250| d0 f0 12 00 e6 f0 12 00 | f0 f0 12 00 fa f0 12 00 |........|........|
|00000260| 08 f1 12 00 12 f1 12 00 | 1c f1 12 00 38 f1 12 00 |........|....8...|
|00000270| 56 f1 12 00 6c f1 12 00 | 88 f1 12 00 a8 f1 12 00 |V...l...|........|
|00000280| b4 f1 12 00 ce f1 12 00 | e8 f1 12 00 00 f2 12 00 |........|........|
|00000290| 20 f2 12 00 38 f2 12 00 | 42 f2 12 00 54 f2 12 00 | ...8...|B...T...|
|000002a0| 68 f2 12 00 78 f2 12 00 | 90 f2 12 00 a8 f2 12 00 |h...x...|........|
|000002b0| b8 f2 12 00 d8 f2 12 00 | f0 f2 12 00 08 f3 12 00 |........|........|
|000002c0| 1e f3 12 00 40 f3 12 00 | 5a f3 12 00 80 f3 12 00 |....@...|Z.......|
|000002d0| 96 f3 12 00 a8 f3 12 00 | b8 f3 12 00 d0 f3 12 00 |........|........|
|000002e0| de f3 12 00 f6 f3 12 00 | 12 f4 12 00 24 f4 12 00 |........|....$...|
|000002f0| 40 f4 12 00 54 f4 12 00 | 62 f4 12 00 7a f4 12 00 |@...T...|b...z...|
|00000300| 84 f4 12 00 a0 f4 12 00 | b4 f4 12 00 c0 f4 12 00 |........|........|
|00000310| dc f4 12 00 f0 f4 12 00 | 04 f5 12 00 10 f5 12 00 |........|........|
|00000320| 2c f5 12 00 4a f5 12 00 | 62 f5 12 00 7e f5 12 00 |,...J...|b...~...|
|00000330| 90 f5 12 00 9e f5 12 00 | b8 f5 12 00 d0 f5 12 00 |........|........|
|00000340| e2 f5 12 00 fc f5 12 00 | 14 f6 12 00 28 f6 12 00 |........|....(...|
|00000350| 42 f6 12 00 58 f6 12 00 | 70 f6 12 00 7c f6 12 00 |B...X...|p...|...|
|00000360| 8a f6 12 00 a0 f6 12 00 | aa f6 12 00 ba f6 12 00 |........|........|
|00000370| d8 f6 12 00 e2 f6 12 00 | ec f6 12 00 00 f7 12 00 |........|........|
|00000380| 20 f7 12 00 3c f7 12 00 | 60 f7 12 00 7a f7 12 00 | ...<...|`...z...|
|00000390| 94 f7 12 00 b4 f7 12 00 | c4 f7 12 00 de f7 12 00 |........|........|
|000003a0| f8 f7 12 00 0e f8 12 00 | 1a f8 12 00 38 f8 12 00 |........|....8...|
|000003b0| 4e f8 12 00 68 f8 12 00 | 74 f8 12 00 90 f8 12 00 |N...h...|t.......|
|000003c0| 00 00 00 00 b0 f8 12 00 | c6 f8 12 00 dc f8 12 00 |........|........|
|000003d0| f8 f8 12 00 00 00 00 00 | 6e 74 6f 73 6b 72 6e 6c |........|ntoskrnl|
|000003e0| 2e 65 78 65 00 00 f3 03 | 77 63 73 73 74 72 00 00 |.exe....|wcsstr..|
|000003f0| 9e 03 5a 77 53 65 74 56 | 61 6c 75 65 4b 65 79 00 |..ZwSetV|alueKey.|
|00000400| 5b 01 4b 65 45 6e 74 65 | 72 43 72 69 74 69 63 61 |[.KeEnte|rCritica|
|00000410| 6c 52 65 67 69 6f 6e 00 | d6 00 49 6e 74 65 72 6c |lRegion.|..Interl|
|00000420| 6f 63 6b 65 64 44 65 63 | 72 65 6d 65 6e 74 00 00 |ockedDec|rement..|
|00000430| 0b 01 49 6f 47 65 74 43 | 6f 6e 66 69 67 75 72 61 |..IoGetC|onfigura|
|00000440| 74 69 6f 6e 49 6e 66 6f | 72 6d 61 74 69 6f 6e 00 |tionInfo|rmation.|
|00000450| 36 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |6.ExAllo|catePool|
|00000460| 57 69 74 68 54 61 67 00 | f8 00 49 6f 43 72 65 61 |WithTag.|..IoCrea|
|00000470| 74 65 53 79 6e 63 68 72 | 6f 6e 69 7a 61 74 69 6f |teSynchr|onizatio|
|00000480| 6e 45 76 65 6e 74 00 00 | d7 00 49 6e 74 65 72 6c |nEvent..|..Interl|
|00000490| 6f 63 6b 65 64 45 78 63 | 68 61 6e 67 65 00 cc cc |ockedExc|hange...|
|000004a0| 80 01 4b 65 4c 65 61 76 | 65 43 72 69 74 69 63 61 |..KeLeav|eCritica|
|000004b0| 6c 52 65 67 69 6f 6e 00 | 1b 03 52 74 6c 55 6e 77 |lRegion.|..RtlUnw|
|000004c0| 69 6e 64 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ind.....|........|
|000004d0| 00 02 4e 6c 73 41 6e 73 | 69 43 6f 64 65 50 61 67 |..NlsAns|iCodePag|
|000004e0| 65 00 cc cc cc cc cc cc | ee 02 52 74 6c 4e 74 53 |e.......|..RtlNtS|
|000004f0| 74 61 74 75 73 54 6f 44 | 6f 73 45 72 72 6f 72 00 |tatusToD|osError.|
|00000500| cf 02 52 74 6c 49 6d 61 | 67 65 4e 74 48 65 61 64 |..RtlIma|geNtHead|
|00000510| 65 72 00 00 c9 01 4c 70 | 63 52 65 71 75 65 73 74 |er....Lp|cRequest|
|00000520| 50 6f 72 74 00 00 98 02 | 52 74 6c 43 72 65 61 74 |Port....|RtlCreat|
|00000530| 65 48 65 61 70 00 cc cc | 29 03 52 74 6c 5a 65 72 |eHeap...|).RtlZer|
|00000540| 6f 48 65 61 70 00 cc cc | cc cc cc cc cc cc cc cc |oHeap...|........|
|00000550| a9 02 52 74 6c 45 6d 70 | 74 79 41 74 6f 6d 54 61 |..RtlEmp|tyAtomTa|
|00000560| 62 6c 65 00 fa 02 52 74 | 6c 51 75 65 72 79 41 74 |ble...Rt|lQueryAt|
|00000570| 6f 6d 49 6e 41 74 6f 6d | 54 61 62 6c 65 00 cc cc |omInAtom|Table...|
|00000580| a1 02 52 74 6c 44 65 6c | 65 74 65 41 74 6f 6d 46 |..RtlDel|eteAtomF|
|00000590| 72 6f 6d 41 74 6f 6d 54 | 61 62 6c 65 00 00 cc cc |romAtomT|able....|
|000005a0| e7 02 52 74 6c 4c 6f 6f | 6b 75 70 41 74 6f 6d 49 |..RtlLoo|kupAtomI|
|000005b0| 6e 41 74 6f 6d 54 61 62 | 6c 65 00 00 69 02 50 73 |nAtomTab|le..i.Ps|
|000005c0| 53 65 74 50 72 6f 63 65 | 73 73 50 72 69 6f 72 69 |SetProce|ssPriori|
|000005d0| 74 79 42 79 43 6c 61 73 | 73 00 cc cc d0 01 4d 6d |tyByClas|s.....Mm|
|000005e0| 41 64 6a 75 73 74 57 6f | 72 6b 69 6e 67 53 65 74 |AdjustWo|rkingSet|
|000005f0| 53 69 7a 65 00 00 cc cc | cc cc cc cc cc cc cc cc |Size....|........|
|00000600| a6 03 5a 77 59 69 65 6c | 64 45 78 65 63 75 74 69 |..ZwYiel|dExecuti|
|00000610| 6f 6e 00 00 a6 02 52 74 | 6c 44 65 73 74 72 6f 79 |on....Rt|lDestroy|
|00000620| 41 74 6f 6d 54 61 62 6c | 65 00 cc cc 97 02 52 74 |AtomTabl|e.....Rt|
|00000630| 6c 43 72 65 61 74 65 41 | 74 6f 6d 54 61 62 6c 65 |lCreateA|tomTable|
|00000640| 00 00 cc cc 75 02 52 74 | 6c 41 64 64 41 74 6f 6d |....u.Rt|lAddAtom|
|00000650| 54 6f 41 74 6f 6d 54 61 | 62 6c 65 00 f7 02 52 74 |ToAtomTa|ble...Rt|
|00000660| 6c 50 69 6e 41 74 6f 6d | 49 6e 41 74 6f 6d 54 61 |lPinAtom|InAtomTa|
|00000670| 62 6c 65 00 79 03 5a 77 | 4f 70 65 6e 44 69 72 65 |ble.y.Zw|OpenDire|
|00000680| 63 74 6f 72 79 4f 62 6a | 65 63 74 00 3c 02 4f 62 |ctoryObj|ect.<.Ob|
|00000690| 49 6e 73 65 72 74 4f 62 | 6a 65 63 74 00 00 31 03 |InsertOb|ject..1.|
|000006a0| 53 65 41 73 73 69 67 6e | 53 65 63 75 72 69 74 79 |SeAssign|Security|
|000006b0| 00 00 cc cc cc cc cc cc | 46 02 4f 62 53 65 74 53 |........|F.ObSetS|
|000006c0| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|000006d0| 72 49 6e 66 6f 00 39 03 | 53 65 44 65 61 73 73 69 |rInfo.9.|SeDeassi|
|000006e0| 67 6e 53 65 63 75 72 69 | 74 79 00 00 84 03 5a 77 |gnSecuri|ty....Zw|
|000006f0| 51 75 65 72 79 44 65 66 | 61 75 6c 74 4c 6f 63 61 |QueryDef|aultLoca|
|00000700| 6c 65 00 00 d0 02 52 74 | 6c 49 6e 69 74 41 6e 73 |le....Rt|lInitAns|
|00000710| 69 53 74 72 69 6e 67 00 | 7a 02 52 74 6c 41 6e 73 |iString.|z.RtlAns|
|00000720| 69 53 74 72 69 6e 67 54 | 6f 55 6e 69 63 6f 64 65 |iStringT|oUnicode|
|00000730| 53 74 72 69 6e 67 00 00 | 4b 00 45 78 49 6e 69 74 |String..|K.ExInit|
|00000740| 69 61 6c 69 7a 65 5a 6f | 6e 65 00 00 9f 03 5a 77 |ializeZo|ne....Zw|
|00000750| 54 65 72 6d 69 6e 61 74 | 65 50 72 6f 63 65 73 73 |Terminat|eProcess|
|00000760| 00 00 cc cc 54 01 4b 65 | 43 6c 65 61 72 45 76 65 |....T.Ke|ClearEve|
|00000770| 6e 74 00 00 35 03 53 65 | 43 61 70 74 75 72 65 53 |nt..5.Se|CaptureS|
|00000780| 75 62 6a 65 63 74 43 6f | 6e 74 65 78 74 00 3f 03 |ubjectCo|ntext.?.|
|00000790| 53 65 4c 6f 63 6b 53 75 | 62 6a 65 63 74 43 6f 6e |SeLockSu|bjectCon|
|000007a0| 74 65 78 74 00 00 43 03 | 53 65 50 72 69 76 69 6c |text..C.|SePrivil|
|000007b0| 65 67 65 43 68 65 63 6b | 00 00 cc cc cc cc cc cc |egeCheck|........|
|000007c0| 44 03 53 65 50 72 69 76 | 69 6c 65 67 65 4f 62 6a |D.SePriv|ilegeObj|
|000007d0| 65 63 74 41 75 64 69 74 | 41 6c 61 72 6d 00 51 03 |ectAudit|Alarm.Q.|
|000007e0| 53 65 55 6e 6c 6f 63 6b | 53 75 62 6a 65 63 74 43 |SeUnlock|SubjectC|
|000007f0| 6f 6e 74 65 78 74 00 00 | 4a 03 53 65 52 65 6c 65 |ontext..|J.SeRele|
|00000800| 61 73 65 53 75 62 6a 65 | 63 74 43 6f 6e 74 65 78 |aseSubje|ctContex|
|00000810| 74 00 37 03 53 65 43 72 | 65 61 74 65 41 63 63 65 |t.7.SeCr|eateAcce|
|00000820| 73 73 53 74 61 74 65 00 | 36 02 4f 62 43 68 65 63 |ssState.|6.ObChec|
|00000830| 6b 4f 62 6a 65 63 74 41 | 63 63 65 73 73 00 3a 03 |kObjectA|ccess.:.|
|00000840| 53 65 44 65 6c 65 74 65 | 41 63 63 65 73 73 53 74 |SeDelete|AccessSt|
|00000850| 61 74 65 00 cc cc cc cc | 88 03 5a 77 51 75 65 72 |ate.....|..ZwQuer|
|00000860| 79 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 54 6f 6b 65 |yInforma|tionToke|
|00000870| 6e 00 cc cc 3c 03 53 65 | 45 78 70 6f 72 74 73 00 |n...<.Se|Exports.|
|00000880| 9a 02 52 74 6c 43 72 65 | 61 74 65 53 65 63 75 72 |..RtlCre|ateSecur|
|00000890| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 96 02 |ityDescr|iptor...|
|000008a0| 52 74 6c 43 72 65 61 74 | 65 41 63 6c 00 00 74 02 |RtlCreat|eAcl..t.|
|000008b0| 52 74 6c 41 64 64 41 63 | 65 00 05 03 52 74 6c 53 |RtlAddAc|e...RtlS|
|000008c0| 65 74 44 61 63 6c 53 65 | 63 75 72 69 74 79 44 65 |etDaclSe|curityDe|
|000008d0| 73 63 72 69 70 74 6f 72 | 00 00 08 03 52 74 6c 53 |scriptor|....RtlS|
|000008e0| 65 74 53 61 63 6c 53 65 | 63 75 72 69 74 79 44 65 |etSaclSe|curityDe|
|000008f0| 73 63 72 69 70 74 6f 72 | 00 00 07 03 52 74 6c 53 |scriptor|....RtlS|
|00000900| 65 74 4f 77 6e 65 72 53 | 65 63 75 72 69 74 79 44 |etOwnerS|ecurityD|
|00000910| 65 73 63 72 69 70 74 6f | 72 00 06 03 52 74 6c 53 |escripto|r...RtlS|
|00000920| 65 74 47 72 6f 75 70 53 | 65 63 75 72 69 74 79 44 |etGroupS|ecurityD|
|00000930| 65 73 63 72 69 70 74 6f | 72 00 e6 02 52 74 6c 4c |escripto|r...RtlL|
|00000940| 65 6e 67 74 68 53 69 64 | 00 00 cc cc 93 02 52 74 |engthSid|......Rt|
|00000950| 6c 43 6f 70 79 53 69 64 | 00 00 cc cc 12 03 52 74 |lCopySid|......Rt|
|00000960| 6c 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |lUnicode|StringTo|
|00000970| 41 6e 73 69 53 74 72 69 | 6e 67 00 00 cc cc cc cc |AnsiStri|ng......|
|00000980| da 02 52 74 6c 49 6e 74 | 65 67 65 72 54 6f 43 68 |..RtlInt|egerToCh|
|00000990| 61 72 00 00 5e 02 50 73 | 4c 6f 6f 6b 75 70 50 72 |ar..^.Ps|LookupPr|
|000009a0| 6f 63 65 73 73 42 79 50 | 72 6f 63 65 73 73 49 64 |ocessByP|rocessId|
|000009b0| 00 00 8a 03 5a 77 51 75 | 65 72 79 4f 62 6a 65 63 |....ZwQu|eryObjec|
|000009c0| 74 00 cc cc cc cc cc cc | 99 03 5a 77 53 65 74 49 |t.......|..ZwSetI|
|000009d0| 6e 66 6f 72 6d 61 74 69 | 6f 6e 4f 62 6a 65 63 74 |nformati|onObject|
|000009e0| 00 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|000009f0| 55 02 50 73 43 72 65 61 | 74 65 57 69 6e 33 32 50 |U.PsCrea|teWin32P|
|00000a00| 72 6f 63 65 73 73 00 00 | 54 02 50 73 43 72 65 61 |rocess..|T.PsCrea|
|00000a10| 74 65 53 79 73 74 65 6d | 54 68 72 65 61 64 00 00 |teSystem|Thread..|
|00000a20| 62 02 50 73 52 65 66 65 | 72 65 6e 63 65 49 6d 70 |b.PsRefe|renceImp|
|00000a30| 65 72 73 6f 6e 61 74 69 | 6f 6e 54 6f 6b 65 6e 00 |ersonati|onToken.|
|00000a40| 63 02 50 73 52 65 66 65 | 72 65 6e 63 65 50 72 69 |c.PsRefe|rencePri|
|00000a50| 6d 61 72 79 54 6f 6b 65 | 6e 00 46 03 53 65 51 75 |maryToke|n.F.SeQu|
|00000a60| 65 72 79 41 75 74 68 65 | 6e 74 69 63 61 74 69 6f |eryAuthe|nticatio|
|00000a70| 6e 49 64 54 6f 6b 65 6e | 00 00 82 03 5a 77 4f 70 |nIdToken|....ZwOp|
|00000a80| 65 6e 54 68 72 65 61 64 | 54 6f 6b 65 6e 00 cc cc |enThread|Token...|
|00000a90| 7e 03 5a 77 4f 70 65 6e | 50 72 6f 63 65 73 73 54 |~.ZwOpen|ProcessT|
|00000aa0| 6f 6b 65 6e 00 00 be 02 | 52 74 6c 46 69 6e 64 4d |oken....|RtlFindM|
|00000ab0| 65 73 73 61 67 65 00 00 | c2 02 52 74 6c 46 6f 72 |essage..|..RtlFor|
|00000ac0| 6d 61 74 43 75 72 72 65 | 6e 74 55 73 65 72 4b 65 |matCurre|ntUserKe|
|00000ad0| 79 50 61 74 68 00 cc cc | c6 02 52 74 6c 46 72 65 |yPath...|..RtlFre|
|00000ae0| 65 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |eUnicode|String..|
|00000af0| 77 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 54 69 |w.KeInit|ializeTi|
|00000b00| 6d 65 72 00 cc cc cc cc | 62 03 5a 77 43 72 65 61 |mer.....|b.ZwCrea|
|00000b10| 74 65 45 76 65 6e 74 00 | ae 01 4b 65 53 65 74 54 |teEvent.|..KeSetT|
|00000b20| 69 6d 65 72 00 00 6a 03 | 5a 77 44 65 76 69 63 65 |imer..j.|ZwDevice|
|00000b30| 49 6f 43 6f 6e 74 72 6f | 6c 46 69 6c 65 00 7f 02 |IoContro|lFile...|
|00000b40| 52 74 6c 41 72 65 41 6c | 6c 41 63 63 65 73 73 65 |RtlAreAl|lAccesse|
|00000b50| 73 47 72 61 6e 74 65 64 | 00 00 cc cc cc cc cc cc |sGranted|........|
|00000b60| b5 01 4b 65 55 73 65 72 | 4d 6f 64 65 43 61 6c 6c |..KeUser|ModeCall|
|00000b70| 62 61 63 6b 00 00 7d 02 | 52 74 6c 41 70 70 65 6e |back..}.|RtlAppen|
|00000b80| 64 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |dUnicode|StringTo|
|00000b90| 53 74 72 69 6e 67 00 00 | 95 02 52 74 6c 43 6f 70 |String..|..RtlCop|
|00000ba0| 79 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |yUnicode|String..|
|00000bb0| d4 02 52 74 6c 49 6e 69 | 74 69 61 6c 69 7a 65 42 |..RtlIni|tializeB|
|00000bc0| 69 74 4d 61 70 00 04 03 | 52 74 6c 53 65 74 42 69 |itMap...|RtlSetBi|
|00000bd0| 74 73 00 00 88 02 52 74 | 6c 43 6c 65 61 72 42 69 |ts....Rt|lClearBi|
|00000be0| 74 73 00 00 60 02 50 73 | 4c 6f 6f 6b 75 70 54 68 |ts..`.Ps|LookupTh|
|00000bf0| 72 65 61 64 42 79 54 68 | 72 65 61 64 49 64 00 00 |readByTh|readId..|
|00000c00| 5d 00 45 78 49 73 52 65 | 73 6f 75 72 63 65 41 63 |].ExIsRe|sourceAc|
|00000c10| 71 75 69 72 65 64 53 68 | 61 72 65 64 4c 69 74 65 |quiredSh|aredLite|
|00000c20| 00 00 cc cc 39 02 4f 62 | 46 69 6e 64 48 61 6e 64 |....9.Ob|FindHand|
|00000c30| 6c 65 46 6f 72 4f 62 6a | 65 63 74 00 cc cc cc cc |leForObj|ect.....|
|00000c40| 6c 03 5a 77 44 75 70 6c | 69 63 61 74 65 4f 62 6a |l.ZwDupl|icateObj|
|00000c50| 65 63 74 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ect.....|........|
|00000c60| fd 01 4d 6d 55 6e 6d 61 | 70 56 69 65 77 4f 66 53 |..MmUnma|pViewOfS|
|00000c70| 65 63 74 69 6f 6e 00 00 | 3e 02 4f 62 4f 70 65 6e |ection..|>.ObOpen|
|00000c80| 4f 62 6a 65 63 74 42 79 | 4e 61 6d 65 00 00 35 02 |ObjectBy|Name..5.|
|00000c90| 4f 62 43 68 65 63 6b 43 | 72 65 61 74 65 4f 62 6a |ObCheckC|reateObj|
|00000ca0| 65 63 74 41 63 63 65 73 | 73 00 cc cc 37 02 4f 62 |ectAcces|s...7.Ob|
|00000cb0| 43 72 65 61 74 65 4f 62 | 6a 65 63 74 00 00 cc cc |CreateOb|ject....|
|00000cc0| 34 02 4f 62 41 73 73 69 | 67 6e 53 65 63 75 72 69 |4.ObAssi|gnSecuri|
|00000cd0| 74 79 00 00 77 02 52 74 | 6c 41 6c 6c 6f 63 61 74 |ty..w.Rt|lAllocat|
|00000ce0| 65 48 65 61 70 00 e9 02 | 52 74 6c 4d 61 70 47 65 |eHeap...|RtlMapGe|
|00000cf0| 6e 65 72 69 63 4d 61 73 | 6b 00 cc cc cc cc cc cc |nericMas|k.......|
|00000d00| 9b 03 5a 77 53 65 74 49 | 6e 66 6f 72 6d 61 74 69 |..ZwSetI|nformati|
|00000d10| 6f 6e 54 68 72 65 61 64 | 00 00 cc cc 40 00 45 78 |onThread|....@.Ex|
|00000d20| 45 76 65 6e 74 4f 62 6a | 65 63 74 54 79 70 65 00 |EventObj|ectType.|
|00000d30| 44 02 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |D.ObRefe|renceObj|
|00000d40| 65 63 74 42 79 50 6f 69 | 6e 74 65 72 00 00 cc cc |ectByPoi|nter....|
|00000d50| 6a 02 50 73 54 65 72 6d | 69 6e 61 74 65 53 79 73 |j.PsTerm|inateSys|
|00000d60| 74 65 6d 54 68 72 65 61 | 64 00 c4 02 52 74 6c 46 |temThrea|d...RtlF|
|00000d70| 72 65 65 48 65 61 70 00 | cc cc cc cc cc cc cc cc |reeHeap.|........|
|00000d80| 2f 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |/.ExAcqu|ireResou|
|00000d90| 72 63 65 53 68 61 72 65 | 64 4c 69 74 65 00 cc cc |rceShare|dLite...|
|00000da0| 50 01 4b 65 42 6f 6f 73 | 74 43 75 72 72 65 6e 74 |P.KeBoos|tCurrent|
|00000db0| 54 68 72 65 61 64 00 00 | 52 01 4b 65 42 75 67 43 |Thread..|R.KeBugC|
|00000dc0| 68 65 63 6b 45 78 00 00 | 5c 00 45 78 49 73 52 65 |heckEx..|\.ExIsRe|
|00000dd0| 73 6f 75 72 63 65 41 63 | 71 75 69 72 65 64 45 78 |sourceAc|quiredEx|
|00000de0| 63 6c 75 73 69 76 65 4c | 69 74 65 00 f6 01 4d 6d |clusiveL|ite...Mm|
|00000df0| 53 79 73 74 65 6d 52 61 | 6e 67 65 53 74 61 72 74 |SystemRa|ngeStart|
|00000e00| 00 00 72 00 45 78 57 69 | 6e 64 6f 77 53 74 61 74 |..r.ExWi|ndowStat|
|00000e10| 69 6f 6e 4f 62 6a 65 63 | 74 54 79 70 65 00 cc cc |ionObjec|tType...|
|00000e20| ec 01 4d 6d 4d 61 70 56 | 69 65 77 4f 66 53 65 63 |..MmMapV|iewOfSec|
|00000e30| 74 69 6f 6e 00 00 61 03 | 5a 77 43 72 65 61 74 65 |tion..a.|ZwCreate|
|00000e40| 44 69 72 65 63 74 6f 72 | 79 4f 62 6a 65 63 74 00 |Director|yObject.|
|00000e50| 66 00 45 78 52 61 69 73 | 65 48 61 72 64 45 72 72 |f.ExRais|eHardErr|
|00000e60| 6f 72 00 00 db 02 52 74 | 6c 49 6e 74 65 67 65 72 |or....Rt|lInteger|
|00000e70| 54 6f 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |ToUnicod|eString.|
|00000e80| 0d 01 49 6f 47 65 74 44 | 65 76 69 63 65 4f 62 6a |..IoGetD|eviceObj|
|00000e90| 65 63 74 50 6f 69 6e 74 | 65 72 00 00 9b 02 52 74 |ectPoint|er....Rt|
|00000ea0| 6c 43 72 65 61 74 65 55 | 6e 69 63 6f 64 65 53 74 |lCreateU|nicodeSt|
|00000eb0| 72 69 6e 67 00 00 cc cc | 28 03 52 74 6c 57 72 69 |ring....|(.RtlWri|
|00000ec0| 74 65 52 65 67 69 73 74 | 72 79 56 61 6c 75 65 00 |teRegist|ryValue.|
|00000ed0| cc cc cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000ee0| 2e 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |..ExAcqu|ireResou|
|00000ef0| 72 63 65 45 78 63 6c 75 | 73 69 76 65 4c 69 74 65 |rceExclu|siveLite|
|00000f00| 00 00 4a 00 45 78 49 6e | 69 74 69 61 6c 69 7a 65 |..J.ExIn|itialize|
|00000f10| 52 65 73 6f 75 72 63 65 | 4c 69 74 65 00 00 cc cc |Resource|Lite....|
|00000f20| e9 03 77 63 73 63 68 72 | 00 00 64 03 5a 77 43 72 |..wcschr|..d.ZwCr|
|00000f30| 65 61 74 65 4b 65 79 00 | ef 03 77 63 73 6e 63 6d |eateKey.|..wcsncm|
|00000f40| 70 00 cc cc 42 00 45 78 | 46 72 65 65 50 6f 6f 6c |p...B.Ex|FreePool|
|00000f50| 00 00 d1 02 52 74 6c 49 | 6e 69 74 43 6f 64 65 50 |....RtlI|nitCodeP|
|00000f60| 61 67 65 54 61 62 6c 65 | 00 00 cc cc 80 03 5a 77 |ageTable|......Zw|
|00000f70| 4f 70 65 6e 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |OpenSymb|olicLink|
|00000f80| 4f 62 6a 65 63 74 00 00 | cc cc cc cc cc cc cc cc |Object..|........|
|00000f90| 80 02 52 74 6c 41 72 65 | 41 6e 79 41 63 63 65 73 |..RtlAre|AnyAcces|
|00000fa0| 73 65 73 47 72 61 6e 74 | 65 64 00 00 46 01 4b 64 |sesGrant|ed..F.Kd|
|00000fb0| 44 65 62 75 67 67 65 72 | 45 6e 61 62 6c 65 64 00 |Debugger|Enabled.|
|00000fc0| 28 00 44 62 67 42 72 65 | 61 6b 50 6f 69 6e 74 57 |(.DbgBre|akPointW|
|00000fd0| 69 74 68 53 74 61 74 75 | 73 00 67 00 45 78 52 61 |ithStatu|s.g.ExRa|
|00000fe0| 69 73 65 53 74 61 74 75 | 73 00 cc cc 3d 00 45 78 |iseStatu|s...=.Ex|
|00000ff0| 44 65 73 6b 74 6f 70 4f | 62 6a 65 63 74 54 79 70 |DesktopO|bjectTyp|
|00001000| 65 00 34 03 53 65 43 61 | 70 74 75 72 65 53 65 63 |e.4.SeCa|ptureSec|
|00001010| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 00 |urityDes|criptor.|
|00001020| 49 03 53 65 52 65 6c 65 | 61 73 65 53 65 63 75 72 |I.SeRele|aseSecur|
|00001030| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 35 00 |ityDescr|iptor.5.|
|00001040| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|00001050| 74 68 51 75 6f 74 61 54 | 61 67 00 00 96 03 5a 77 |thQuotaT|ag....Zw|
|00001060| 53 65 74 44 65 66 61 75 | 6c 74 4c 6f 63 61 6c 65 |SetDefau|ltLocale|
|00001070| 00 00 4e 01 4b 65 41 64 | 64 53 79 73 74 65 6d 53 |..N.KeAd|dSystemS|
|00001080| 65 72 76 69 63 65 54 61 | 62 6c 65 00 56 02 50 73 |erviceTa|ble.V.Ps|
|00001090| 45 73 74 61 62 6c 69 73 | 68 57 69 6e 33 32 43 61 |Establis|hWin32Ca|
|000010a0| 6c 6c 6f 75 74 73 00 00 | cc cc cc cc cc cc cc cc |llouts..|........|
|000010b0| ed 01 4d 6d 50 61 67 65 | 45 6e 74 69 72 65 44 72 |..MmPage|EntireDr|
|000010c0| 69 76 65 72 00 00 d8 03 | 73 74 72 63 68 72 00 00 |iver....|strchr..|
|000010d0| de 03 73 74 72 6e 63 70 | 79 00 dd 03 73 74 72 6e |..strncp|y...strn|
|000010e0| 63 6d 70 00 cc cc cc cc | e8 03 77 63 73 63 61 74 |cmp.....|..wcscat|
|000010f0| 00 00 ea 03 77 63 73 63 | 6d 70 00 00 19 03 52 74 |....wcsc|mp....Rt|
|00001100| 6c 55 6e 69 63 6f 64 65 | 54 6f 4d 75 6c 74 69 42 |lUnicode|ToMultiB|
|00001110| 79 74 65 53 69 7a 65 00 | ac 02 52 74 6c 45 6e 6c |yteSize.|..RtlEnl|
|00001120| 61 72 67 65 64 55 6e 73 | 69 67 6e 65 64 4d 75 6c |argedUns|ignedMul|
|00001130| 74 69 70 6c 79 00 dd 02 | 52 74 6c 4c 61 72 67 65 |tiply...|RtlLarge|
|00001140| 49 6e 74 65 67 65 72 41 | 64 64 00 00 ab 02 52 74 |IntegerA|dd....Rt|
|00001150| 6c 45 6e 6c 61 72 67 65 | 64 55 6e 73 69 67 6e 65 |lEnlarge|dUnsigne|
|00001160| 64 44 69 76 69 64 65 00 | b4 02 52 74 6c 45 78 74 |dDivide.|..RtlExt|
|00001170| 65 6e 64 65 64 4c 61 72 | 67 65 49 6e 74 65 67 65 |endedLar|geIntege|
|00001180| 72 44 69 76 69 64 65 00 | bf 03 5f 77 63 73 69 63 |rDivide.|.._wcsic|
|00001190| 6d 70 00 00 1d 03 52 74 | 6c 55 70 63 61 73 65 55 |mp....Rt|lUpcaseU|
|000011a0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 fb 02 |nicodeSt|ring....|
|000011b0| 52 74 6c 51 75 65 72 79 | 52 65 67 69 73 74 72 79 |RtlQuery|Registry|
|000011c0| 56 61 6c 75 65 73 00 00 | b2 02 52 74 6c 45 71 75 |Values..|..RtlEqu|
|000011d0| 61 6c 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |alUnicod|eString.|
|000011e0| 9c 03 5a 77 53 65 74 53 | 79 73 74 65 6d 49 6e 66 |..ZwSetS|ystemInf|
|000011f0| 6f 72 6d 61 74 69 6f 6e | 00 00 cc cc cc cc cc cc |ormation|........|
|00001200| 3f 02 4f 62 4f 70 65 6e | 4f 62 6a 65 63 74 42 79 |?.ObOpen|ObjectBy|
|00001210| 50 6f 69 6e 74 65 72 00 | f0 03 77 63 73 6e 63 70 |Pointer.|..wcsncp|
|00001220| 79 00 18 02 4e 74 47 6c | 6f 62 61 6c 46 6c 61 67 |y...NtGl|obalFlag|
|00001230| 00 00 cc cc 65 03 5a 77 | 43 72 65 61 74 65 53 65 |....e.Zw|CreateSe|
|00001240| 63 74 69 6f 6e 00 cc cc | 9a 01 4b 65 52 65 73 65 |ction...|..KeRese|
|00001250| 74 45 76 65 6e 74 00 00 | 4f 01 4b 65 41 74 74 61 |tEvent..|O.KeAtta|
|00001260| 63 68 50 72 6f 63 65 73 | 73 00 cc cc cc cc cc cc |chProces|s.......|
|00001270| 59 01 4b 65 44 65 74 61 | 63 68 50 72 6f 63 65 73 |Y.KeDeta|chProces|
|00001280| 73 00 cc cc cc cc cc cc | 7d 03 5a 77 4f 70 65 6e |s.......|}.ZwOpen|
|00001290| 50 72 6f 63 65 73 73 00 | d5 00 49 6e 74 65 72 6c |Process.|..Interl|
|000012a0| 6f 63 6b 65 64 43 6f 6d | 70 61 72 65 45 78 63 68 |ockedCom|pareExch|
|000012b0| 61 6e 67 65 00 00 cc cc | 77 03 5a 77 4d 61 70 56 |ange....|w.ZwMapV|
|000012c0| 69 65 77 4f 66 53 65 63 | 74 69 6f 6e 00 00 cc cc |iewOfSec|tion....|
|000012d0| a2 03 5a 77 55 6e 6d 61 | 70 56 69 65 77 4f 66 53 |..ZwUnma|pViewOfS|
|000012e0| 65 63 74 69 6f 6e 00 00 | b7 02 52 74 6c 46 69 6c |ection..|..RtlFil|
|000012f0| 6c 4d 65 6d 6f 72 79 55 | 6c 6f 6e 67 00 00 b6 01 |lMemoryU|long....|
|00001300| 4b 65 57 61 69 74 46 6f | 72 4d 75 6c 74 69 70 6c |KeWaitFo|rMultipl|
|00001310| 65 4f 62 6a 65 63 74 73 | 00 00 cc cc cc cc cc cc |eObjects|........|
|00001320| 57 01 4b 65 44 65 6c 61 | 79 45 78 65 63 75 74 69 |W.KeDela|yExecuti|
|00001330| 6f 6e 54 68 72 65 61 64 | 00 00 38 03 53 65 43 72 |onThread|..8.SeCr|
|00001340| 65 61 74 65 43 6c 69 65 | 6e 74 53 65 63 75 72 69 |eateClie|ntSecuri|
|00001350| 74 79 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ty......|........|
|00001360| 3e 03 53 65 49 6d 70 65 | 72 73 6f 6e 61 74 65 43 |>.SeImpe|rsonateC|
|00001370| 6c 69 65 6e 74 00 65 02 | 50 73 52 65 76 65 72 74 |lient.e.|PsRevert|
|00001380| 54 6f 53 65 6c 66 00 00 | 50 03 53 65 54 6f 6b 65 |ToSelf..|P.SeToke|
|00001390| 6e 54 79 70 65 00 cc cc | d9 00 49 6e 74 65 72 6c |nType...|..Interl|
|000013a0| 6f 63 6b 65 64 49 6e 63 | 72 65 6d 65 6e 74 00 00 |ockedInc|rement..|
|000013b0| a2 01 4b 65 53 65 74 45 | 76 65 6e 74 00 00 b8 01 |..KeSetE|vent....|
|000013c0| 4b 65 57 61 69 74 46 6f | 72 53 69 6e 67 6c 65 4f |KeWaitFo|rSingleO|
|000013d0| 62 6a 65 63 74 00 42 02 | 4f 62 52 65 66 65 72 65 |bject.B.|ObRefere|
|000013e0| 6e 63 65 4f 62 6a 65 63 | 74 42 79 48 61 6e 64 6c |nceObjec|tByHandl|
|000013f0| 65 00 85 01 4b 65 50 75 | 6c 73 65 45 76 65 6e 74 |e...KePu|lseEvent|
|00001400| 00 00 cc cc 6f 00 45 78 | 53 79 73 74 65 6d 45 78 |....o.Ex|SystemEx|
|00001410| 63 65 70 74 69 6f 6e 46 | 69 6c 74 65 72 00 cc cc |ceptionF|ilter...|
|00001420| 70 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 45 76 |p.KeInit|ializeEv|
|00001430| 65 6e 74 00 91 03 5a 77 | 52 65 61 64 46 69 6c 65 |ent...Zw|ReadFile|
|00001440| 00 00 9c 02 52 74 6c 43 | 75 73 74 6f 6d 43 50 54 |....RtlC|ustomCPT|
|00001450| 6f 55 6e 69 63 6f 64 65 | 4e 00 5e 03 5a 77 43 6c |oUnicode|N.^.ZwCl|
|00001460| 6f 73 65 00 17 03 52 74 | 6c 55 6e 69 63 6f 64 65 |ose...Rt|lUnicode|
|00001470| 54 6f 43 75 73 74 6f 6d | 43 50 4e 00 cc cc cc cc |ToCustom|CPN.....|
|00001480| 8f 03 5a 77 51 75 65 72 | 79 56 61 6c 75 65 4b 65 |..ZwQuer|yValueKe|
|00001490| 79 00 cc cc e2 03 73 77 | 70 72 69 6e 74 66 00 00 |y.....sw|printf..|
|000014a0| 14 03 52 74 6c 55 6e 69 | 63 6f 64 65 53 74 72 69 |..RtlUni|codeStri|
|000014b0| 6e 67 54 6f 49 6e 74 65 | 67 65 72 00 c8 01 4c 64 |ngToInte|ger...Ld|
|000014c0| 72 46 69 6e 64 52 65 73 | 6f 75 72 63 65 5f 55 00 |rFindRes|ource_U.|
|000014d0| c5 01 4c 64 72 41 63 63 | 65 73 73 52 65 73 6f 75 |..LdrAcc|essResou|
|000014e0| 72 63 65 00 c1 03 5f 77 | 63 73 6e 69 63 6d 70 00 |rce..._w|csnicmp.|
|000014f0| 7e 02 52 74 6c 41 70 70 | 65 6e 64 55 6e 69 63 6f |~.RtlApp|endUnico|
|00001500| 64 65 54 6f 53 74 72 69 | 6e 67 00 00 c7 01 4c 64 |deToStri|ng....Ld|
|00001510| 72 46 69 6e 64 52 65 73 | 6f 75 72 63 65 44 69 72 |rFindRes|ourceDir|
|00001520| 65 63 74 6f 72 79 5f 55 | 00 00 cb 02 52 74 6c 47 |ectory_U|....RtlG|
|00001530| 65 74 44 65 66 61 75 6c | 74 43 6f 64 65 50 61 67 |etDefaul|tCodePag|
|00001540| 65 00 fc 01 4d 6d 55 6e | 6d 61 70 56 69 65 77 49 |e...MmUn|mapViewI|
|00001550| 6e 53 79 73 74 65 6d 53 | 70 61 63 65 00 00 63 03 |nSystemS|pace..c.|
|00001560| 5a 77 43 72 65 61 74 65 | 46 69 6c 65 00 00 cc cc |ZwCreate|File....|
|00001570| 7b 03 5a 77 4f 70 65 6e | 46 69 6c 65 00 00 86 03 |{.ZwOpen|File....|
|00001580| 5a 77 51 75 65 72 79 49 | 6e 66 6f 72 6d 61 74 69 |ZwQueryI|nformati|
|00001590| 6f 6e 46 69 6c 65 00 00 | 98 03 5a 77 53 65 74 49 |onFile..|..ZwSetI|
|000015a0| 6e 66 6f 72 6d 61 74 69 | 6f 6e 46 69 6c 65 00 00 |nformati|onFile..|
|000015b0| d6 01 4d 6d 43 72 65 61 | 74 65 53 65 63 74 69 6f |..MmCrea|teSectio|
|000015c0| 6e 00 eb 01 4d 6d 4d 61 | 70 56 69 65 77 49 6e 53 |n...MmMa|pViewInS|
|000015d0| 79 73 74 65 6d 53 70 61 | 63 65 00 00 47 02 4f 62 |ystemSpa|ce..G.Ob|
|000015e0| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|000015f0| 63 74 00 00 86 01 4b 65 | 51 75 65 72 79 53 79 73 |ct....Ke|QuerySys|
|00001600| 74 65 6d 54 69 6d 65 00 | 70 00 45 78 53 79 73 74 |temTime.|p.ExSyst|
|00001610| 65 6d 54 69 6d 65 54 6f | 4c 6f 63 61 6c 54 69 6d |emTimeTo|LocalTim|
|00001620| 65 00 10 03 52 74 6c 54 | 69 6d 65 54 6f 54 69 6d |e...RtlT|imeToTim|
|00001630| 65 46 69 65 6c 64 73 00 | d3 02 52 74 6c 49 6e 69 |eFields.|..RtlIni|
|00001640| 74 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |tUnicode|String..|
|00001650| 7c 03 5a 77 4f 70 65 6e | 4b 65 79 00 89 03 5a 77 ||.ZwOpen|Key...Zw|
|00001660| 51 75 65 72 79 4b 65 79 | 00 00 6f 03 5a 77 45 6e |QueryKey|..o.ZwEn|
|00001670| 75 6d 65 72 61 74 65 56 | 61 6c 75 65 4b 65 79 00 |umerateV|alueKey.|
|00001680| eb 03 77 63 73 63 70 79 | 00 00 50 02 50 72 6f 62 |..wcscpy|..P.Prob|
|00001690| 65 46 6f 72 57 72 69 74 | 65 00 f2 01 4d 6d 53 65 |eForWrit|e...MmSe|
|000016a0| 63 75 72 65 56 69 72 74 | 75 61 6c 4d 65 6d 6f 72 |cureVirt|ualMemor|
|000016b0| 79 00 cc cc cc cc cc cc | ed 03 77 63 73 6c 65 6e |y.......|..wcslen|
|000016c0| 00 00 d1 03 6d 65 6d 6d | 6f 76 65 00 de 01 4d 6d |....memm|ove...Mm|
|000016d0| 47 72 6f 77 4b 65 72 6e | 65 6c 53 74 61 63 6b 00 |GrowKern|elStack.|
|000016e0| a6 01 4b 65 53 65 74 4b | 65 72 6e 65 6c 53 74 61 |..KeSetK|ernelSta|
|000016f0| 63 6b 53 77 61 70 45 6e | 61 62 6c 65 00 00 cc cc |ckSwapEn|able....|
|00001700| 9d 01 4b 65 53 61 76 65 | 46 6c 6f 61 74 69 6e 67 |..KeSave|Floating|
|00001710| 50 6f 69 6e 74 53 74 61 | 74 65 00 00 9b 01 4b 65 |PointSta|te....Ke|
|00001720| 52 65 73 74 6f 72 65 46 | 6c 6f 61 74 69 6e 67 50 |RestoreF|loatingP|
|00001730| 6f 69 6e 74 53 74 61 74 | 65 00 cc cc cc cc cc cc |ointStat|e.......|
|00001740| 18 03 52 74 6c 55 6e 69 | 63 6f 64 65 54 6f 4d 75 |..RtlUni|codeToMu|
|00001750| 6c 74 69 42 79 74 65 4e | 00 00 eb 02 52 74 6c 4d |ltiByteN|....RtlM|
|00001760| 75 6c 74 69 42 79 74 65 | 54 6f 55 6e 69 63 6f 64 |ultiByte|ToUnicod|
|00001770| 65 4e 00 00 e7 00 49 6f | 42 75 69 6c 64 44 65 76 |eN....Io|BuildDev|
|00001780| 69 63 65 49 6f 43 6f 6e | 74 72 6f 6c 52 65 71 75 |iceIoCon|trolRequ|
|00001790| 65 73 74 00 44 01 49 6f | 66 43 61 6c 6c 44 72 69 |est.D.Io|fCallDri|
|000017a0| 76 65 72 00 fe 01 4d 6d | 55 6e 73 65 63 75 72 65 |ver...Mm|Unsecure|
|000017b0| 56 69 72 74 75 61 6c 4d | 65 6d 6f 72 79 00 5c 03 |VirtualM|emory.\.|
|000017c0| 5a 77 41 6c 6c 6f 63 61 | 74 65 56 69 72 74 75 61 |ZwAlloca|teVirtua|
|000017d0| 6c 4d 65 6d 6f 72 79 00 | 72 03 5a 77 46 72 65 65 |lMemory.|r.ZwFree|
|000017e0| 56 69 72 74 75 61 6c 4d | 65 6d 6f 72 79 00 2a 00 |VirtualM|emory.*.|
|000017f0| 44 62 67 50 72 69 6e 74 | 00 00 64 00 45 78 52 61 |DbgPrint|..d.ExRa|
|00001800| 69 73 65 44 61 74 61 74 | 79 70 65 4d 69 73 61 6c |iseDatat|ypeMisal|
|00001810| 69 67 6e 6d 65 6e 74 00 | ff 01 4d 6d 55 73 65 72 |ignment.|..MmUser|
|00001820| 50 72 6f 62 65 41 64 64 | 72 65 73 73 00 00 63 00 |ProbeAdd|ress..c.|
|00001830| 45 78 52 61 69 73 65 41 | 63 63 65 73 73 56 69 6f |ExRaiseA|ccessVio|
|00001840| 6c 61 74 69 6f 6e 00 00 | e7 03 76 73 70 72 69 6e |lation..|..vsprin|
|00001850| 74 66 00 00 3c 00 45 78 | 44 65 6c 65 74 65 52 65 |tf..<.Ex|DeleteRe|
|00001860| 73 6f 75 72 63 65 4c 69 | 74 65 00 00 cc cc cc cc |sourceLi|te......|
|00001870| 6d 00 45 78 52 65 6c 65 | 61 73 65 52 65 73 6f 75 |m.ExRele|aseResou|
|00001880| 72 63 65 4c 69 74 65 00 | 48 41 4c 2e 64 6c 6c 00 |rceLite.|HAL.dll.|
|00001890| 01 00 45 78 52 65 6c 65 | 61 73 65 46 61 73 74 4d |..ExRele|aseFastM|
|000018a0| 75 74 65 78 00 00 00 00 | 45 78 41 63 71 75 69 72 |utex....|ExAcquir|
|000018b0| 65 46 61 73 74 4d 75 74 | 65 78 00 00 44 00 4b 65 |eFastMut|ex..D.Ke|
|000018c0| 51 75 65 72 79 50 65 72 | 66 6f 72 6d 61 6e 63 65 |QueryPer|formance|
|000018d0| 43 6f 75 6e 74 65 72 00 | 22 00 48 61 6c 52 65 71 |Counter.|".HalReq|
|000018e0| 75 65 73 74 53 6f 66 74 | 77 61 72 65 49 6e 74 65 |uestSoft|wareInte|
|000018f0| 72 72 75 70 74 00 00 00 | 00 00 00 00 00 00 00 00 |rrupt...|........|
+--------+-------------------------+-------------------------+--------+--------+