home *** CD-ROM | disk | FTP | other *** search
/ PC World 2001 February / PCWorld_2001-02_cd.bin / Software / Vyzkuste / Regmon / REGSYS.SYS / COFF_SYMBOLS < prev    next >
Unknown  |  2000-11-20  |  10.1 KB
open in: MacOS 8.1     |     Win98     |     DOS

view JSON data     |     view as text

This file was not able to be converted.
This format is not currently supported by dexvert.

ConfidenceProgramDetectionMatch TypeSupport
100% file data default


hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00000010| 03 00 00 00 00 00 14 13 | 00 00 cc 3b 00 00 02 00 |........|...;....|
|00000020| 00 00 03 00 24 53 47 36 | 31 34 38 00 94 04 00 00 |....$SG6|148.....|
|00000030| 01 00 00 00 03 00 24 53 | 47 36 32 30 30 00 5e 05 |......$S|G6200.^.|
|00000040| 00 00 01 00 00 00 03 00 | 24 53 47 36 31 38 34 00 |........|$SG6184.|
|00000050| 56 05 00 00 01 00 00 00 | 03 00 00 00 00 00 3f 13 |V.......|......?.|
|00000060| 00 00 00 3c 00 00 02 00 | 00 00 03 00 24 53 47 36 |...<....|....$SG6|
|00000070| 34 30 33 00 a6 0a 00 00 | 01 00 00 00 03 00 24 53 |403.....|......$S|
|00000080| 47 36 34 31 34 00 c2 0a | 00 00 01 00 00 00 03 00 |G6414...|........|
|00000090| 24 53 47 36 34 30 36 00 | b2 0a 00 00 01 00 00 00 |$SG6406.|........|
|000000a0| 03 00 24 53 47 36 34 32 | 32 00 ce 0a 00 00 01 00 |..$SG642|2.......|
|000000b0| 00 00 03 00 24 53 47 36 | 34 32 34 00 da 0a 00 00 |....$SG6|424.....|
|000000c0| 01 00 00 00 03 00 24 53 | 47 36 34 35 39 00 a6 0c |......$S|G6459...|
|000000d0| 00 00 01 00 00 00 03 00 | 24 53 47 36 34 35 37 00 |........|$SG6457.|
|000000e0| 9a 0c 00 00 01 00 00 00 | 03 00 24 53 47 36 34 35 |........|..$SG645|
|000000f0| 35 00 8e 0c 00 00 01 00 | 00 00 03 00 24 53 47 36 |5.......|....$SG6|
|00000100| 34 35 33 00 7e 0c 00 00 | 01 00 00 00 03 00 24 53 |453.~...|......$S|
|00000110| 47 36 34 35 31 00 7a 0c | 00 00 01 00 00 00 03 00 |G6451.z.|........|
|00000120| 24 53 47 36 34 34 39 00 | 72 0c 00 00 01 00 00 00 |$SG6449.|r.......|
|00000130| 03 00 24 53 47 36 34 34 | 37 00 66 0c 00 00 01 00 |..$SG644|7.f.....|
|00000140| 00 00 03 00 24 53 47 36 | 34 34 35 00 5e 0c 00 00 |....$SG6|445.^...|
|00000150| 01 00 00 00 03 00 24 53 | 47 36 34 34 33 00 52 0c |......$S|G6443.R.|
|00000160| 00 00 01 00 00 00 03 00 | 24 53 47 36 34 34 31 00 |........|$SG6441.|
|00000170| 42 0c 00 00 01 00 00 00 | 03 00 24 53 47 36 34 33 |B.......|..$SG643|
|00000180| 39 00 2e 0c 00 00 01 00 | 00 00 03 00 24 53 47 36 |9.......|....$SG6|
|00000190| 34 33 37 00 26 0c 00 00 | 01 00 00 00 03 00 24 53 |437.&...|......$S|
|000001a0| 47 36 34 39 31 00 26 0e | 00 00 01 00 00 00 03 00 |G6491.&.|........|
|000001b0| 24 53 47 36 34 39 30 00 | 22 0e 00 00 01 00 00 00 |$SG6490.|".......|
|000001c0| 03 00 24 53 47 36 34 38 | 38 00 1e 0e 00 00 01 00 |..$SG648|8.......|
|000001d0| 00 00 03 00 24 53 47 36 | 35 30 35 00 3a 0e 00 00 |....$SG6|505.:...|
|000001e0| 01 00 00 00 03 00 24 53 | 47 36 35 30 33 00 32 0e |......$S|G6503.2.|
|000001f0| 00 00 01 00 00 00 03 00 | 24 53 47 36 34 39 34 00 |........|$SG6494.|
|00000200| 2a 0e 00 00 01 00 00 00 | 03 00 24 53 47 36 35 32 |*.......|..$SG652|
|00000210| 39 00 e0 0f 00 00 01 00 | 00 00 03 00 24 53 47 36 |9.......|....$SG6|
|00000220| 35 32 38 00 d8 0f 00 00 | 01 00 00 00 03 00 24 53 |528.....|......$S|
|00000230| 47 36 35 34 38 00 e8 0f | 00 00 01 00 00 00 03 00 |G6548...|........|
|00000240| 24 53 47 36 35 39 35 00 | c2 11 00 00 01 00 00 00 |$SG6595.|........|
|00000250| 03 00 24 53 47 36 35 37 | 37 00 82 11 00 00 01 00 |..$SG657|7.......|
|00000260| 00 00 03 00 24 53 47 36 | 35 37 34 00 76 11 00 00 |....$SG6|574.v...|
|00000270| 01 00 00 00 03 00 24 53 | 47 36 35 37 31 00 6a 11 |......$S|G6571.j.|
|00000280| 00 00 01 00 00 00 03 00 | 24 53 47 36 35 36 38 00 |........|$SG6568.|
|00000290| 62 11 00 00 01 00 00 00 | 03 00 24 53 47 36 35 39 |b.......|..$SG659|
|000002a0| 37 00 ce 11 00 00 01 00 | 00 00 03 00 24 53 47 36 |7.......|....$SG6|
|000002b0| 35 38 39 00 aa 11 00 00 | 01 00 00 00 03 00 24 53 |589.....|......$S|
|000002c0| 47 36 35 39 32 00 b6 11 | 00 00 01 00 00 00 03 00 |G6592...|........|
|000002d0| 24 53 47 36 35 38 36 00 | a2 11 00 00 01 00 00 00 |$SG6586.|........|
|000002e0| 03 00 24 53 47 36 35 38 | 30 00 8a 11 00 00 01 00 |..$SG658|0.......|
|000002f0| 00 00 03 00 24 53 47 36 | 35 38 33 00 96 11 00 00 |....$SG6|583.....|
|00000300| 01 00 00 00 03 00 24 53 | 47 36 35 36 35 00 56 11 |......$S|G6565.V.|
|00000310| 00 00 01 00 00 00 03 00 | 24 53 47 36 36 33 31 00 |........|$SG6631.|
|00000320| 12 13 00 00 01 00 00 00 | 03 00 24 53 47 36 36 33 |........|..$SG663|
|00000330| 30 00 0e 13 00 00 01 00 | 00 00 03 00 24 53 47 36 |0.......|....$SG6|
|00000340| 36 32 39 00 0a 13 00 00 | 01 00 00 00 03 00 24 53 |629.....|......$S|
|00000350| 47 36 36 32 38 00 06 13 | 00 00 01 00 00 00 03 00 |G6628...|........|
|00000360| 24 53 47 36 36 32 37 00 | 02 13 00 00 01 00 00 00 |$SG6627.|........|
|00000370| 03 00 24 53 47 36 36 37 | 34 00 aa 14 00 00 01 00 |..$SG667|4.......|
|00000380| 00 00 03 00 24 53 47 36 | 37 30 31 00 e2 14 00 00 |....$SG6|701.....|
|00000390| 01 00 00 00 03 00 24 53 | 47 36 36 39 39 00 de 14 |......$S|G6699...|
|000003a0| 00 00 01 00 00 00 03 00 | 24 53 47 36 36 39 32 00 |........|$SG6692.|
|000003b0| da 14 00 00 01 00 00 00 | 03 00 24 53 47 36 36 38 |........|..$SG668|
|000003c0| 36 00 c2 14 00 00 01 00 | 00 00 03 00 24 54 37 37 |6.......|....$T77|
|000003d0| 33 31 00 00 d8 03 00 00 | 01 00 00 00 03 00 24 53 |31......|......$S|
|000003e0| 47 36 37 32 34 00 1e 19 | 00 00 01 00 00 00 03 00 |G6724...|........|
|000003f0| 24 53 47 36 37 33 36 00 | 60 19 00 00 01 00 00 00 |$SG6736.|`.......|
|00000400| 03 00 24 53 47 36 37 33 | 34 00 5c 19 00 00 01 00 |..$SG673|4.\.....|
|00000410| 00 00 03 00 24 53 47 36 | 37 35 37 00 d6 19 00 00 |....$SG6|757.....|
|00000420| 01 00 00 00 03 00 24 53 | 47 36 37 35 35 00 ca 19 |......$S|G6755...|
|00000430| 00 00 01 00 00 00 03 00 | 24 53 47 36 37 39 30 00 |........|$SG6790.|
|00000440| be 1a 00 00 01 00 00 00 | 03 00 24 53 47 36 37 38 |........|..$SG678|
|00000450| 34 00 b2 1a 00 00 01 00 | 00 00 03 00 24 53 47 36 |4.......|....$SG6|
|00000460| 38 31 31 00 c8 1b 00 00 | 01 00 00 00 03 00 24 53 |811.....|......$S|
|00000470| 47 36 38 31 30 00 bc 1b | 00 00 01 00 00 00 03 00 |G6810...|........|
|00000480| 24 53 47 36 38 32 35 00 | d6 1c 00 00 01 00 00 00 |$SG6825.|........|
|00000490| 03 00 24 53 47 36 38 33 | 37 00 7c 1d 00 00 01 00 |..$SG683|7.|.....|
|000004a0| 00 00 03 00 24 53 47 36 | 38 34 39 00 20 1e 00 00 |....$SG6|849. ...|
|000004b0| 01 00 00 00 03 00 24 53 | 47 36 38 37 36 00 b0 1e |......$S|G6876...|
|000004c0| 00 00 01 00 00 00 03 00 | 24 53 47 36 39 30 30 00 |........|$SG6900.|
|000004d0| 82 1f 00 00 01 00 00 00 | 03 00 24 53 47 36 39 32 |........|..$SG692|
|000004e0| 32 00 4c 20 00 00 01 00 | 00 00 03 00 24 53 47 36 |2.L ....|....$SG6|
|000004f0| 39 35 30 00 2c 21 00 00 | 01 00 00 00 03 00 24 53 |950.,!..|......$S|
|00000500| 47 36 39 34 38 00 28 21 | 00 00 01 00 00 00 03 00 |G6948.(!|........|
|00000510| 24 53 47 36 39 37 37 00 | 38 22 00 00 01 00 00 00 |$SG6977.|8"......|
|00000520| 03 00 24 53 47 36 39 38 | 39 00 0c 23 00 00 01 00 |..$SG698|9..#....|
|00000530| 00 00 03 00 24 53 47 36 | 39 39 38 00 a6 23 00 00 |....$SG6|998..#..|
|00000540| 01 00 00 00 03 00 24 54 | 37 38 33 30 00 00 e8 03 |......$T|7830....|
|00000550| 00 00 01 00 00 00 03 00 | 24 53 47 37 34 33 38 00 |........|$SG7438.|
|00000560| 46 2e 00 00 01 00 00 00 | 03 00 24 53 47 37 34 32 |F.......|..$SG742|
|00000570| 34 00 c2 2d 00 00 01 00 | 00 00 03 00 24 53 47 37 |4..-....|....$SG7|
|00000580| 34 32 31 00 b6 2d 00 00 | 01 00 00 00 03 00 24 53 |421..-..|......$S|
|00000590| 47 37 34 31 38 00 8e 2d | 00 00 01 00 00 00 03 00 |G7418..-|........|
|000005a0| 24 53 47 37 34 31 35 00 | 6e 2d 00 00 01 00 00 00 |$SG7415.|n-......|
|000005b0| 03 00 40 63 6f 6d 70 2e | 69 64 00 00 00 00 ff ff |..@comp.|id......|
|000005c0| 00 00 03 00 24 52 30 30 | 30 30 30 30 20 54 00 00 |....$R00|0000 T..|
|000005d0| 04 00 00 00 03 00 2e 69 | 64 61 74 61 24 36 14 53 |.......i|data$6.S|
|000005e0| 00 00 03 00 00 00 03 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|000005f0| 5c 32 00 00 01 00 00 00 | 03 01 d1 00 00 00 04 00 |\2......|........|
|00000600| 47 00 00 00 00 00 00 00 | 00 00 00 00 24 24 24 30 |G.......|....$$$0|
|00000610| 30 30 30 31 64 32 00 00 | 01 00 20 00 03 01 0e 00 |0001d2..|.. .....|
|00000620| 00 00 00 00 00 00 ae 01 | 00 00 13 00 00 00 00 00 |........|........|
|00000630| 24 24 24 30 30 30 30 34 | 2d 33 00 00 01 00 20 00 |$$$00004|-3.... .|
|00000640| 03 01 23 00 00 00 00 00 | 00 00 52 03 00 00 00 00 |..#.....|..R.....|
|00000650| 00 00 00 00 00 00 00 00 | 59 13 00 00 dc 32 00 00 |........|Y....2..|
|00000660| 01 00 00 00 03 00 00 00 | 00 00 66 13 00 00 e7 32 |........|..f....2|
|00000670| 00 00 01 00 00 00 03 00 | 00 00 00 00 72 13 00 00 |........|....r...|
|00000680| 0a 33 00 00 01 00 00 00 | 03 00 5f 6c 68 5f 74 6f |.3......|.._lh_to|
|00000690| 70 00 93 32 00 00 01 00 | 00 00 03 00 00 00 00 00 |p..2....|........|
|000006a0| 7d 13 00 00 ee 32 00 00 | 01 00 00 00 03 00 00 00 |}....2..|........|
|000006b0| 00 00 87 13 00 00 f5 32 | 00 00 01 00 00 00 03 00 |.......2|........|
|000006c0| 2e 74 65 78 74 00 00 00 | 9c 31 00 00 01 00 00 00 |.text...|.1......|
|000006d0| 03 01 bf 00 00 00 04 00 | 3d 00 00 00 00 00 00 00 |........|=.......|
|000006e0| 00 00 00 00 00 00 00 00 | 95 13 00 00 b4 31 00 00 |........|.....1..|
|000006f0| 01 00 00 00 03 00 24 24 | 24 30 30 30 30 31 9c 31 |......$$|$00001.1|
|00000700| 00 00 01 00 20 00 03 01 | 0f 00 00 00 00 00 00 00 |.... ...|........|
|00000710| 9c 01 00 00 14 00 00 00 | 00 00 24 24 24 30 30 30 |........|..$$$000|
|00000720| 30 33 bc 31 00 00 01 00 | 20 00 03 01 1d 00 00 00 |03.1....| .......|
|00000730| 00 00 00 00 cc 01 00 00 | 22 00 00 00 00 00 00 00 |........|".......|
|00000740| 00 00 a0 13 00 00 bc 31 | 00 00 01 00 20 00 03 01 |.......1|.... ...|
|00000750| 24 00 00 00 22 00 00 00 | d2 01 00 00 29 00 00 00 |$..."...|....)...|
|00000760| 00 00 24 24 24 30 30 30 | 30 35 de 31 00 00 01 00 |..$$$000|05.1....|
|00000770| 20 00 03 01 2b 00 00 00 | 00 00 00 00 08 02 00 00 | ...+...|........|
|00000780| 30 00 00 00 00 00 24 24 | 24 30 30 30 30 37 38 32 |0.....$$|$0000782|
|00000790| 00 00 01 00 20 00 03 01 | 39 00 00 00 00 00 00 00 |.... ...|9.......|
|000007a0| c2 02 00 00 3e 00 00 00 | 00 00 24 24 24 30 30 30 |....>...|..$$$000|
|000007b0| 30 39 5b 32 00 00 01 00 | 20 00 03 01 47 00 00 00 |09[2....| ...G...|
|000007c0| 00 00 00 00 04 03 00 00 | 00 00 00 00 00 00 5f 6c |........|......_l|
|000007d0| 75 5f 64 6f 6e 65 2a 32 | 00 00 01 00 00 00 03 00 |u_done*2|........|
|000007e0| 00 00 00 00 b1 13 00 00 | dd 31 00 00 01 00 00 00 |........|.1......|
|000007f0| 03 00 00 00 00 00 bc 13 | 00 00 28 32 00 00 01 00 |........|..(2....|
|00000800| 00 00 03 00 5f 6c 75 5f | 74 6f 70 00 fb 31 00 00 |...._lu_|top..1..|
|00000810| 01 00 00 00 03 00 5f 61 | 74 5f 64 6f 6e 65 5a 32 |......_a|t_doneZ2|
|00000820| 00 00 01 00 00 00 03 00 | 2e 69 64 61 74 61 24 36 |........|.idata$6|
|00000830| 4a 53 00 00 03 00 00 00 | 03 00 40 63 6f 6d 70 2e |JS......|..@comp.|
|00000840| 69 64 00 00 00 00 ff ff | 00 00 03 00 68 65 61 64 |id......|....head|
|00000850| 65 72 00 00 00 00 00 00 | fe ff 00 00 02 00 00 00 |er......|........|
|00000860| 00 00 de 08 00 00 00 00 | 00 00 ff ff 00 00 02 00 |........|........|
|00000870| 00 00 00 00 ab 07 00 00 | 80 02 00 00 01 00 00 00 |........|........|
|00000880| 02 00 00 00 00 00 e1 11 | 00 00 84 02 00 00 01 00 |........|........|
|00000890| 00 00 02 00 00 00 00 00 | 11 08 00 00 88 02 00 00 |........|........|
|000008a0| 01 00 00 00 02 00 00 00 | 00 00 d1 06 00 00 8c 02 |........|........|
|000008b0| 00 00 01 00 00 00 02 00 | 00 00 00 00 e2 06 00 00 |........|........|
|000008c0| 90 02 00 00 01 00 00 00 | 02 00 00 00 00 00 01 07 |........|........|
|000008d0| 00 00 94 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|000008e0| 10 07 00 00 98 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|000008f0| 00 00 26 07 00 00 9c 02 | 00 00 01 00 00 00 02 00 |..&.....|........|
|00000900| 00 00 00 00 46 07 00 00 | a0 02 00 00 01 00 00 00 |....F...|........|
|00000910| 02 00 00 00 00 00 5a 07 | 00 00 a4 02 00 00 01 00 |......Z.|........|
|00000920| 00 00 02 00 00 00 00 00 | 7a 07 00 00 a8 02 00 00 |........|z.......|
|00000930| 01 00 00 00 02 00 00 00 | 00 00 93 07 00 00 ac 02 |........|........|
|00000940| 00 00 01 00 00 00 02 00 | 00 00 00 00 ce 07 00 00 |........|........|
|00000950| b0 02 00 00 01 00 00 00 | 02 00 00 00 00 00 9d 0d |........|........|
|00000960| 00 00 b4 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000970| 9e 06 00 00 b8 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000980| 00 00 bc 06 00 00 bc 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000990| 00 00 00 00 35 08 00 00 | c0 02 00 00 01 00 00 00 |....5...|........|
|000009a0| 02 00 00 00 00 00 53 08 | 00 00 c4 02 00 00 01 00 |......S.|........|
|000009b0| 00 00 02 00 00 00 00 00 | 6e 08 00 00 c8 02 00 00 |........|n.......|
|000009c0| 01 00 00 00 02 00 00 00 | 00 00 95 08 00 00 cc 02 |........|........|
|000009d0| 00 00 01 00 00 00 02 00 | 00 00 00 00 a4 08 00 00 |........|........|
|000009e0| d0 02 00 00 01 00 00 00 | 02 00 00 00 00 00 b3 08 |........|........|
|000009f0| 00 00 d4 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000a00| c2 08 00 00 d8 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000a10| 00 00 fe 08 00 00 dc 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000a20| 00 00 00 00 22 09 00 00 | e0 02 00 00 01 00 00 00 |...."...|........|
|00000a30| 02 00 00 00 00 00 48 09 | 00 00 e4 02 00 00 01 00 |......H.|........|
|00000a40| 00 00 02 00 00 00 00 00 | f9 0e 00 00 e8 02 00 00 |........|........|
|00000a50| 01 00 00 00 02 00 00 00 | 00 00 7e 09 00 00 ec 02 |........|..~.....|
|00000a60| 00 00 01 00 00 00 02 00 | 00 00 00 00 01 08 00 00 |........|........|
|00000a70| f0 02 00 00 01 00 00 00 | 02 00 00 00 00 00 93 09 |........|........|
|00000a80| 00 00 f4 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000a90| c0 09 00 00 f8 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000aa0| 00 00 d6 09 00 00 fc 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000ab0| 00 00 00 00 87 06 00 00 | 00 03 00 00 01 00 00 00 |........|........|
|00000ac0| 02 00 00 00 00 00 03 0a | 00 00 04 03 00 00 01 00 |........|........|
|00000ad0| 00 00 02 00 00 00 00 00 | 17 0a 00 00 08 03 00 00 |........|........|
|00000ae0| 01 00 00 00 02 00 00 00 | 00 00 30 0a 00 00 0c 03 |........|..0.....|
|00000af0| 00 00 01 00 00 00 02 00 | 00 00 00 00 4e 0a 00 00 |........|....N...|
|00000b00| 10 03 00 00 01 00 00 00 | 02 00 00 00 00 00 68 0a |........|......h.|
|00000b10| 00 00 14 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000b20| d5 0f 00 00 18 03 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000b30| 00 00 94 0a 00 00 1c 03 | 00 00 01 00 00 00 02 00 |........|........|
|00000b40| 00 00 00 00 00 10 00 00 | 20 03 00 00 01 00 00 00 |........| .......|
|00000b50| 02 00 00 00 00 00 ba 0a | 00 00 24 03 00 00 01 00 |........|..$.....|
|00000b60| 00 00 02 00 00 00 00 00 | d6 0a 00 00 28 03 00 00 |........|....(...|
|00000b70| 01 00 00 00 02 00 00 00 | 00 00 40 0b 00 00 2c 03 |........|..@...,.|
|00000b80| 00 00 01 00 00 00 02 00 | 00 00 00 00 58 0b 00 00 |........|....X...|
|00000b90| 30 03 00 00 01 00 00 00 | 02 00 00 00 00 00 76 0b |0.......|......v.|
|00000ba0| 00 00 34 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..4.....|........|
|00000bb0| 9e 0b 00 00 38 03 00 00 | 01 00 00 00 02 00 00 00 |....8...|........|
|00000bc0| 00 00 b7 0b 00 00 3c 03 | 00 00 01 00 00 00 02 00 |......<.|........|
|00000bd0| 00 00 00 00 d3 0b 00 00 | 40 03 00 00 01 00 00 00 |........|@.......|
|00000be0| 02 00 00 00 00 00 16 0c | 00 00 44 03 00 00 01 00 |........|..D.....|
|00000bf0| 00 00 02 00 00 00 00 00 | 31 0c 00 00 48 03 00 00 |........|1...H...|
|00000c00| 01 00 00 00 02 00 00 00 | 00 00 4f 0c 00 00 4c 03 |........|..O...L.|
|00000c10| 00 00 01 00 00 00 02 00 | 00 00 00 00 68 0c 00 00 |........|....h...|
|00000c20| 50 03 00 00 01 00 00 00 | 02 00 00 00 00 00 89 0c |P.......|........|
|00000c30| 00 00 54 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..T.....|........|
|00000c40| 98 11 00 00 58 03 00 00 | 01 00 00 00 02 00 00 00 |....X...|........|
|00000c50| 00 00 a6 09 00 00 5c 03 | 00 00 01 00 00 00 02 00 |......\.|........|
|00000c60| 00 00 00 00 ee 09 00 00 | 60 03 00 00 01 00 00 00 |........|`.......|
|00000c70| 02 00 00 00 00 00 30 12 | 00 00 64 03 00 00 01 00 |......0.|..d.....|
|00000c80| 00 00 02 00 00 00 00 00 | 4a 12 00 00 68 03 00 00 |........|J...h...|
|00000c90| 01 00 00 00 02 00 00 00 | 00 00 6d 12 00 00 6c 03 |........|..m...l.|
|00000ca0| 00 00 01 00 00 00 02 00 | 00 00 00 00 f4 12 00 00 |........|........|
|00000cb0| 70 03 00 00 01 00 00 00 | 02 00 00 00 00 00 83 12 |p.......|........|
|00000cc0| 00 00 70 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..p.....|........|
|00000cd0| 7e 11 00 00 74 03 00 00 | 01 00 00 00 02 00 00 00 |~...t...|........|
|00000ce0| 00 00 13 00 00 00 f4 03 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000cf0| 00 00 00 00 20 00 00 00 | 0c 04 00 00 01 00 20 00 |.... ...|...... .|
|00000d00| 02 00 00 00 00 00 34 00 | 00 00 c2 04 00 00 01 00 |......4.|........|
|00000d10| 20 00 02 00 00 00 00 00 | 49 00 00 00 30 05 00 00 | .......|I...0...|
|00000d20| 01 00 20 00 02 00 00 00 | 00 00 5f 00 00 00 61 05 |.. .....|.._...a.|
|00000d30| 00 00 01 00 20 00 02 00 | 00 00 00 00 74 00 00 00 |.... ...|....t...|
|00000d40| 9e 06 00 00 01 00 20 00 | 02 00 00 00 00 00 9b 00 |...... .|........|
|00000d50| 00 00 48 07 00 00 01 00 | 20 00 02 00 00 00 00 00 |..H.....| .......|
|00000d60| ab 00 00 00 d8 07 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000d70| 00 00 be 00 00 00 fe 07 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000d80| 00 00 00 00 d0 00 00 00 | 54 08 00 00 01 00 20 00 |........|T..... .|
|00000d90| 02 00 00 00 00 00 db 00 | 00 00 2c 09 00 00 01 00 |........|..,.....|
|00000da0| 20 00 02 00 00 00 00 00 | fb 00 00 00 3e 09 00 00 | .......|....>...|
|00000db0| 01 00 20 00 02 00 00 00 | 00 00 0c 01 00 00 cc 09 |.. .....|........|
|00000dc0| 00 00 01 00 20 00 02 00 | 00 00 00 00 23 01 00 00 |.... ...|....#...|
|00000dd0| 3a 0a 00 00 01 00 20 00 | 02 00 00 00 00 00 36 01 |:..... .|......6.|
|00000de0| 00 00 64 0a 00 00 01 00 | 20 00 02 00 00 00 00 00 |..d.....| .......|
|00000df0| 44 01 00 00 94 0a 00 00 | 01 00 20 00 02 00 00 00 |D.......|.. .....|
|00000e00| 00 00 56 01 00 00 ed 0a | 00 00 01 00 20 00 02 00 |..V.....|.... ...|
|00000e10| 00 00 00 00 6f 01 00 00 | b7 0c 00 00 01 00 20 00 |....o...|...... .|
|00000e20| 02 00 00 00 00 00 85 01 | 00 00 3e 0e 00 00 01 00 |........|..>.....|
|00000e30| 20 00 02 00 00 00 00 00 | 9c 01 00 00 fb 0f 00 00 | .......|........|
|00000e40| 01 00 20 00 02 00 00 00 | 00 00 b7 01 00 00 d1 11 |.. .....|........|
|00000e50| 00 00 01 00 20 00 02 00 | 00 00 00 00 c6 01 00 00 |.... ...|........|
|00000e60| a8 12 00 00 01 00 20 00 | 02 00 00 00 00 00 db 01 |...... .|........|
|00000e70| 00 00 19 13 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000e80| ef 01 00 00 d6 13 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000e90| 00 00 06 02 00 00 22 14 | 00 00 01 00 20 00 02 00 |......".|.... ...|
|00000ea0| 00 00 00 00 16 02 00 00 | f8 14 00 00 01 00 20 00 |........|...... .|
|00000eb0| 02 00 00 00 00 00 26 02 | 00 00 c6 18 00 00 01 00 |......&.|........|
|00000ec0| 20 00 02 00 00 00 00 00 | 4b 02 00 00 f0 18 00 00 | .......|K.......|
|00000ed0| 01 00 20 00 02 00 00 00 | 00 00 6a 02 00 00 25 19 |.. .....|..j...%.|
|00000ee0| 00 00 01 00 20 00 02 00 | 00 00 00 00 82 02 00 00 |.... ...|........|
|00000ef0| 64 19 00 00 01 00 20 00 | 02 00 00 00 00 00 90 02 |d..... .|........|
|00000f00| 00 00 ea 19 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000f10| a3 02 00 00 d4 1a 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000f20| 00 00 b8 02 00 00 dd 1b | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000f30| 00 00 00 00 cb 02 00 00 | f2 1c 00 00 01 00 20 00 |........|...... .|
|00000f40| 02 00 00 00 00 00 de 02 | 00 00 99 1d 00 00 01 00 |........|........|
|00000f50| 20 00 02 00 00 00 00 00 | f2 02 00 00 39 1e 00 00 | .......|....9...|
|00000f60| 01 00 20 00 02 00 00 00 | 00 00 0b 03 00 00 c5 1e |.. .....|........|
|00000f70| 00 00 01 00 20 00 02 00 | 00 00 00 00 22 03 00 00 |.... ...|...."...|
|00000f80| 9b 1f 00 00 01 00 20 00 | 02 00 00 00 00 00 3a 03 |...... .|......:.|
|00000f90| 00 00 61 20 00 00 01 00 | 20 00 02 00 00 00 00 00 |..a ....| .......|
|00000fa0| 4e 03 00 00 47 21 00 00 | 01 00 20 00 02 00 00 00 |N...G!..|.. .....|
|00000fb0| 00 00 6b 03 00 00 4f 22 | 00 00 01 00 20 00 02 00 |..k...O"|.... ...|
|00000fc0| 00 00 00 00 84 03 00 00 | 20 23 00 00 01 00 20 00 |........| #.... .|
|00000fd0| 02 00 00 00 00 00 96 03 | 00 00 b9 23 00 00 01 00 |........|...#....|
|00000fe0| 20 00 02 00 00 00 00 00 | aa 03 00 00 20 24 00 00 | .......|.... $..|
|00000ff0| 01 00 20 00 02 00 00 00 | 00 00 ba 03 00 00 20 27 |.. .....|...... '|
|00001000| 00 00 01 00 20 00 02 00 | 00 00 00 00 cc 03 00 00 |.... ...|........|
|00001010| 52 2a 00 00 01 00 20 00 | 02 00 00 00 00 00 e4 03 |R*.... .|........|
|00001020| 00 00 5e 2c 00 00 01 00 | 20 00 02 00 00 00 00 00 |..^,....| .......|
|00001030| 04 00 00 00 52 2e 00 00 | 01 00 20 00 02 00 00 00 |....R...|.. .....|
|00001040| 00 00 e9 07 00 00 94 31 | 00 00 01 00 20 00 02 00 |.......1|.... ...|
|00001050| 00 00 00 00 55 0e 00 00 | 9c 31 00 00 01 00 20 00 |....U...|.1.... .|
|00001060| 02 00 00 00 00 00 66 0e | 00 00 de 31 00 00 01 00 |......f.|...1....|
|00001070| 20 00 02 00 00 00 00 00 | 76 0e 00 00 38 32 00 00 | .......|v...82..|
|00001080| 01 00 20 00 02 00 00 00 | 00 00 ec 08 00 00 64 32 |.. .....|......d2|
|00001090| 00 00 01 00 20 00 02 00 | 00 00 00 00 8d 0e 00 00 |.... ...|........|
|000010a0| 12 33 00 00 01 00 20 00 | 02 00 00 00 00 00 65 09 |.3.... .|......e.|
|000010b0| 00 00 2e 33 00 00 01 00 | 20 00 02 00 00 00 00 00 |...3....| .......|
|000010c0| 7d 0a 00 00 34 33 00 00 | 01 00 20 00 02 00 00 00 |}...43..|.. .....|
|000010d0| 00 00 a8 0a 00 00 3a 33 | 00 00 01 00 20 00 02 00 |......:3|.... ...|
|000010e0| 00 00 00 00 47 0e 00 00 | 40 33 00 00 01 00 20 00 |....G...|@3.... .|
|000010f0| 02 00 00 00 00 00 fd 0b | 00 00 46 33 00 00 01 00 |........|..F3....|
|00001100| 20 00 02 00 00 00 00 00 | 92 04 00 00 c0 33 00 00 | .......|.....3..|
|00001110| 02 00 00 00 02 00 00 00 | 00 00 84 04 00 00 d8 33 |........|.......3|
|00001120| 00 00 02 00 00 00 02 00 | 00 00 00 00 78 04 00 00 |........|....x...|
|00001130| e0 33 00 00 02 00 00 00 | 02 00 5f 4c 6f 67 46 69 |.3......|.._LogFi|
|00001140| 6c 65 e8 34 00 00 02 00 | 00 00 02 00 00 00 00 00 |le.4....|........|
|00001150| 10 04 00 00 f0 34 00 00 | 02 00 00 00 02 00 5f 52 |.....4..|......_R|
|00001160| 6f 6f 74 4b 65 79 38 37 | 00 00 02 00 00 00 02 00 |ootKey87|........|
|00001170| 5f 4d 61 78 4c 6f 67 00 | c8 3b 00 00 02 00 00 00 |_MaxLog.|.;......|
|00001180| 02 00 00 00 00 00 09 12 | 00 00 f0 3b 00 00 02 00 |........|...;....|
|00001190| 00 00 02 00 00 00 00 00 | 6d 04 00 00 00 44 00 00 |........|m....D..|
|000011a0| 02 00 00 00 02 00 00 00 | 00 00 60 04 00 00 01 44 |........|..`....D|
|000011b0| 00 00 02 00 00 00 02 00 | 00 00 00 00 4e 04 00 00 |........|....N...|
|000011c0| 04 44 00 00 02 00 00 00 | 02 00 00 00 00 00 43 04 |.D......|......C.|
|000011d0| 00 00 08 44 00 00 02 00 | 00 00 02 00 00 00 00 00 |...D....|........|
|000011e0| 30 04 00 00 0c 44 00 00 | 02 00 00 00 02 00 00 00 |0....D..|........|
|000011f0| 00 00 1d 04 00 00 10 44 | 00 00 02 00 00 00 02 00 |.......D|........|
|00001200| 5f 4c 6f 67 00 00 00 00 | 14 44 00 00 02 00 00 00 |_Log....|.D......|
|00001210| 02 00 00 00 00 00 06 04 | 00 00 18 44 00 00 02 00 |........|...D....|
|00001220| 00 00 02 00 5f 4e 75 6d | 4c 6f 67 00 1c 44 00 00 |...._Num|Log..D..|
|00001230| 02 00 00 00 02 00 00 00 | 00 00 f6 11 00 00 20 44 |........|...... D|
|00001240| 00 00 02 00 00 00 02 00 | 00 00 00 00 74 06 00 00 |........|....t...|
|00001250| 24 44 00 00 02 00 00 00 | 02 00 00 00 00 00 69 06 |$D......|......i.|
|00001260| 00 00 28 44 00 00 02 00 | 00 00 02 00 00 00 00 00 |..(D....|........|
|00001270| 59 06 00 00 40 44 00 00 | 02 00 00 00 02 00 00 00 |Y...@D..|........|
|00001280| 00 00 48 06 00 00 40 45 | 00 00 02 00 00 00 02 00 |..H...@E|........|
|00001290| 00 00 00 00 36 06 00 00 | 44 45 00 00 02 00 00 00 |....6...|DE......|
|000012a0| 02 00 00 00 00 00 28 06 | 00 00 50 45 00 00 02 00 |......(.|..PE....|
|000012b0| 00 00 02 00 00 00 00 00 | 1b 06 00 00 60 45 00 00 |........|....`E..|
|000012c0| 02 00 00 00 02 00 00 00 | 00 00 0a 06 00 00 80 45 |........|.......E|
|000012d0| 00 00 02 00 00 00 02 00 | 00 00 00 00 f7 05 00 00 |........|........|
|000012e0| a0 45 00 00 02 00 00 00 | 02 00 00 00 00 00 e7 05 |.E......|........|
|000012f0| 00 00 00 46 00 00 02 00 | 00 00 02 00 00 00 00 00 |...F....|........|
|00001300| d1 05 00 00 00 47 00 00 | 02 00 00 00 02 00 00 00 |.....G..|........|
|00001310| 00 00 c1 05 00 00 04 47 | 00 00 02 00 00 00 02 00 |.......G|........|
|00001320| 00 00 00 00 af 05 00 00 | 08 47 00 00 02 00 00 00 |........|.G......|
|00001330| 02 00 00 00 00 00 9e 05 | 00 00 0c 47 00 00 02 00 |........|...G....|
|00001340| 00 00 02 00 00 00 00 00 | 8c 05 00 00 10 47 00 00 |........|.....G..|
|00001350| 02 00 00 00 02 00 00 00 | 00 00 72 05 00 00 14 47 |........|..r....G|
|00001360| 00 00 02 00 00 00 02 00 | 00 00 00 00 67 05 00 00 |........|....g...|
|00001370| 20 47 00 00 02 00 00 00 | 02 00 00 00 00 00 4f 05 | G......|......O.|
|00001380| 00 00 28 48 00 00 02 00 | 00 00 02 00 00 00 00 00 |..(H....|........|
|00001390| 44 05 00 00 40 48 00 00 | 02 00 00 00 02 00 00 00 |D...@H..|........|
|000013a0| 00 00 3a 05 00 00 60 48 | 00 00 02 00 00 00 02 00 |..:...`H|........|
|000013b0| 00 00 00 00 26 05 00 00 | 80 48 00 00 02 00 00 00 |....&...|.H......|
|000013c0| 02 00 00 00 00 00 1b 05 | 00 00 88 48 00 00 02 00 |........|...H....|
|000013d0| 00 00 02 00 00 00 00 00 | 0a 05 00 00 90 48 00 00 |........|.....H..|
|000013e0| 02 00 00 00 02 00 00 00 | 00 00 ff 04 00 00 a0 48 |........|.......H|
|000013f0| 00 00 02 00 00 00 02 00 | 00 00 00 00 ed 04 00 00 |........|........|
|00001400| a0 49 00 00 02 00 00 00 | 02 00 00 00 00 00 dd 04 |.I......|........|
|00001410| 00 00 a4 49 00 00 02 00 | 00 00 02 00 00 00 00 00 |...I....|........|
|00001420| c8 04 00 00 a8 49 00 00 | 02 00 00 00 02 00 00 00 |.....I..|........|
|00001430| 00 00 b1 04 00 00 ac 49 | 00 00 02 00 00 00 02 00 |.......I|........|
|00001440| 00 00 00 00 a6 04 00 00 | c0 49 00 00 02 00 00 00 |........|.I......|
|00001450| 02 00 00 00 00 00 a9 0c | 00 00 c0 4d 00 00 03 00 |........|...M....|
|00001460| 00 00 02 00 00 00 00 00 | c9 11 00 00 d4 4d 00 00 |........|.....M..|
|00001470| 03 00 00 00 02 00 00 00 | 00 00 65 11 00 00 e8 4d |........|..e....M|
|00001480| 00 00 03 00 00 00 02 00 | 65 6e 64 00 00 00 00 00 |........|end.....|
|00001490| e0 5c 00 00 fe ff 00 00 | 02 00 c9 13 00 00 5f 44 |.\......|......_D|
|000014a0| 72 69 76 65 72 45 6e 74 | 72 79 40 38 00 5f 4d 61 |riverEnt|ry@8._Ma|
|000014b0| 74 63 68 4f 6b 61 79 40 | 34 00 5f 4d 61 74 63 68 |tchOkay@|4._Match|
|000014c0| 57 69 74 68 50 61 74 74 | 65 72 6e 40 38 00 5f 52 |WithPatt|ern@8._R|
|000014d0| 65 67 6d 6f 6e 4f 70 65 | 6e 42 6f 6f 74 4c 6f 67 |egmonOpe|nBootLog|
|000014e0| 40 30 00 5f 52 65 67 6d | 6f 6e 43 6c 6f 73 65 42 |@0._Regm|onCloseB|
|000014f0| 6f 6f 74 4c 6f 67 40 34 | 00 5f 52 65 67 6d 6f 6e |ootLog@4|._Regmon|
|00001500| 57 72 69 74 65 42 75 66 | 66 65 72 40 34 00 5f 52 |WriteBuf|fer@4._R|
|00001510| 65 67 6d 6f 6e 57 72 69 | 74 65 42 6f 6f 74 4c 6f |egmonWri|teBootLo|
|00001520| 67 40 34 00 5f 52 65 67 | 6d 6f 6e 46 72 65 65 4c |g@4._Reg|monFreeL|
|00001530| 6f 67 40 30 00 5f 52 65 | 67 6d 6f 6e 4e 65 77 4c |og@0._Re|gmonNewL|
|00001540| 6f 67 40 30 00 5f 52 65 | 67 6d 6f 6e 4f 6c 64 65 |og@0._Re|gmonOlde|
|00001550| 73 74 4c 6f 67 40 30 00 | 5f 52 65 67 6d 6f 6e 52 |stLog@0.|_RegmonR|
|00001560| 65 73 65 74 4c 6f 67 40 | 30 00 5f 4c 6f 67 52 65 |esetLog@|0._LogRe|
|00001570| 63 6f 72 64 00 5f 4d 69 | 6e 69 6d 75 6d 40 38 00 |cord._Mi|nimum@8.|
|00001580| 5f 52 65 67 6d 6f 6e 48 | 61 73 68 43 6c 65 61 6e |_RegmonH|ashClean|
|00001590| 75 70 40 30 00 5f 52 65 | 67 6d 6f 6e 4c 6f 67 48 |up@0._Re|gmonLogH|
|000015a0| 61 73 68 40 38 00 5f 52 | 65 67 6d 6f 6e 46 72 65 |ash@8._R|egmonFre|
|000015b0| 65 48 61 73 68 45 6e 74 | 72 79 40 34 00 5f 43 6f |eHashEnt|ry@4._Co|
|000015c0| 6e 76 65 72 74 54 6f 55 | 70 70 65 72 40 31 32 00 |nvertToU|pper@12.|
|000015d0| 5f 47 65 74 50 6f 69 6e | 74 65 72 40 34 00 5f 52 |_GetPoin|ter@4._R|
|000015e0| 65 6c 65 61 73 65 50 6f | 69 6e 74 65 72 40 34 00 |eleasePo|inter@4.|
|000015f0| 5f 41 70 70 65 6e 64 4b | 65 79 49 6e 66 6f 72 6d |_AppendK|eyInform|
|00001600| 61 74 69 6f 6e 40 31 36 | 00 5f 41 70 70 65 6e 64 |ation@16|._Append|
|00001610| 52 65 67 56 61 6c 75 65 | 54 79 70 65 40 38 00 5f |RegValue|Type@8._|
|00001620| 41 70 70 65 6e 64 52 65 | 67 56 61 6c 75 65 44 61 |AppendRe|gValueDa|
|00001630| 74 61 40 31 36 00 5f 41 | 70 70 65 6e 64 56 61 6c |ta@16._A|ppendVal|
|00001640| 75 65 49 6e 66 6f 72 6d | 61 74 69 6f 6e 40 31 36 |ueInform|ation@16|
|00001650| 00 5f 45 72 72 6f 72 53 | 74 72 69 6e 67 40 34 00 |._ErrorS|tring@4.|
|00001660| 5f 52 65 67 6d 6f 6e 46 | 72 65 65 46 69 6c 74 65 |_RegmonF|reeFilte|
|00001670| 72 73 40 30 00 5f 4d 61 | 6b 65 46 69 6c 74 65 72 |rs@0._Ma|keFilter|
|00001680| 41 72 72 61 79 40 31 32 | 00 5f 52 65 67 6d 6f 6e |Array@12|._Regmon|
|00001690| 55 70 64 61 74 65 46 69 | 6c 74 65 72 73 40 30 00 |UpdateFi|lters@0.|
|000016a0| 5f 41 70 70 6c 79 46 69 | 6c 74 65 72 73 40 34 00 |_ApplyFi|lters@4.|
|000016b0| 5f 47 65 74 46 75 6c 6c | 4e 61 6d 65 40 31 32 00 |_GetFull|Name@12.|
|000016c0| 5f 45 78 41 6c 6c 6f 63 | 61 74 65 46 72 6f 6d 4e |_ExAlloc|ateFromN|
|000016d0| 50 61 67 65 64 4c 6f 6f | 6b 61 73 69 64 65 4c 69 |PagedLoo|kasideLi|
|000016e0| 73 74 40 34 00 5f 45 78 | 46 72 65 65 54 6f 4e 50 |st@4._Ex|FreeToNP|
|000016f0| 61 67 65 64 4c 6f 6f 6b | 61 73 69 64 65 4c 69 73 |agedLook|asideLis|
|00001700| 74 40 38 00 5f 47 65 74 | 50 72 6f 63 65 73 73 4e |t@8._Get|ProcessN|
|00001710| 61 6d 65 4f 66 66 73 65 | 74 40 30 00 5f 47 65 74 |ameOffse|t@0._Get|
|00001720| 50 72 6f 63 65 73 73 40 | 34 00 5f 48 6f 6f 6b 52 |Process@|4._HookR|
|00001730| 65 67 4f 70 65 6e 4b 65 | 79 40 31 32 00 5f 48 6f |egOpenKe|y@12._Ho|
|00001740| 6f 6b 52 65 67 43 72 65 | 61 74 65 4b 65 79 40 32 |okRegCre|ateKey@2|
|00001750| 38 00 5f 48 6f 6f 6b 52 | 65 67 43 6c 6f 73 65 4b |8._HookR|egCloseK|
|00001760| 65 79 40 34 00 5f 48 6f | 6f 6b 52 65 67 46 6c 75 |ey@4._Ho|okRegFlu|
|00001770| 73 68 4b 65 79 40 34 00 | 5f 48 6f 6f 6b 52 65 67 |shKey@4.|_HookReg|
|00001780| 44 65 6c 65 74 65 4b 65 | 79 40 34 00 5f 48 6f 6f |DeleteKe|y@4._Hoo|
|00001790| 6b 52 65 67 44 65 6c 65 | 74 65 56 61 6c 75 65 4b |kRegDele|teValueK|
|000017a0| 65 79 40 38 00 5f 48 6f | 6f 6b 52 65 67 53 65 74 |ey@8._Ho|okRegSet|
|000017b0| 56 61 6c 75 65 4b 65 79 | 40 32 34 00 5f 48 6f 6f |ValueKey|@24._Hoo|
|000017c0| 6b 52 65 67 45 6e 75 6d | 65 72 61 74 65 4b 65 79 |kRegEnum|erateKey|
|000017d0| 40 32 34 00 5f 48 6f 6f | 6b 52 65 67 51 75 65 72 |@24._Hoo|kRegQuer|
|000017e0| 79 4b 65 79 40 32 30 00 | 5f 48 6f 6f 6b 52 65 67 |yKey@20.|_HookReg|
|000017f0| 45 6e 75 6d 65 72 61 74 | 65 56 61 6c 75 65 4b 65 |Enumerat|eValueKe|
|00001800| 79 40 32 34 00 5f 48 6f | 6f 6b 52 65 67 51 75 65 |y@24._Ho|okRegQue|
|00001810| 72 79 56 61 6c 75 65 4b | 65 79 40 32 34 00 5f 48 |ryValueK|ey@24._H|
|00001820| 6f 6f 6b 52 65 67 4c 6f | 61 64 4b 65 79 40 38 00 |ookRegLo|adKey@8.|
|00001830| 5f 48 6f 6f 6b 52 65 67 | 55 6e 6c 6f 61 64 4b 65 |_HookReg|UnloadKe|
|00001840| 79 40 34 00 5f 48 6f 6f | 6b 52 65 67 69 73 74 72 |y@4._Hoo|kRegistr|
|00001850| 79 40 30 00 5f 55 6e 68 | 6f 6f 6b 52 65 67 69 73 |y@0._Unh|ookRegis|
|00001860| 74 72 79 40 30 00 5f 52 | 65 67 6d 6f 6e 44 65 76 |try@0._R|egmonDev|
|00001870| 69 63 65 43 6f 6e 74 72 | 6f 6c 40 33 36 00 5f 52 |iceContr|ol@36._R|
|00001880| 65 67 6d 6f 6e 44 69 73 | 70 61 74 63 68 40 38 00 |egmonDis|patch@8.|
|00001890| 5f 52 65 67 6d 6f 6e 55 | 6e 6c 6f 61 64 40 34 00 |_RegmonU|nload@4.|
|000018a0| 5f 53 65 71 75 65 6e 63 | 65 00 5f 43 75 72 72 65 |_Sequenc|e._Curre|
|000018b0| 6e 74 55 73 65 72 00 5f | 4e 75 6d 45 78 63 6c 75 |ntUser._|NumExclu|
|000018c0| 64 65 46 69 6c 74 65 72 | 73 00 5f 4e 75 6d 49 6e |deFilter|s._NumIn|
|000018d0| 63 6c 75 64 65 46 69 6c | 74 65 72 73 00 5f 52 65 |cludeFil|ters._Re|
|000018e0| 67 48 6f 6f 6b 65 64 00 | 5f 42 6f 6f 74 53 61 76 |gHooked.|_BootSav|
|000018f0| 65 64 4c 6f 67 4c 69 73 | 74 00 5f 42 6f 6f 74 4c |edLogLis|t._BootL|
|00001900| 6f 67 67 69 6e 67 00 5f | 47 55 49 41 63 74 69 76 |ogging._|GUIActiv|
|00001910| 65 00 5f 42 6f 6f 74 46 | 69 6c 74 65 72 00 5f 44 |e._BootF|ilter._D|
|00001920| 65 66 61 75 6c 74 56 61 | 6c 75 65 00 5f 44 65 66 |efaultVa|lue._Def|
|00001930| 61 75 6c 74 56 61 6c 75 | 65 53 74 72 69 6e 67 00 |aultValu|eString.|
|00001940| 5f 48 61 73 68 54 61 62 | 6c 65 00 5f 52 65 61 6c |_HashTab|le._Real|
|00001950| 52 65 67 44 65 6c 65 74 | 65 56 61 6c 75 65 4b 65 |RegDelet|eValueKe|
|00001960| 79 00 5f 52 65 61 6c 52 | 65 67 45 6e 75 6d 65 72 |y._RealR|egEnumer|
|00001970| 61 74 65 4b 65 79 00 5f | 52 65 61 6c 52 65 67 4f |ateKey._|RealRegO|
|00001980| 70 65 6e 4b 65 79 00 5f | 52 65 61 6c 52 65 67 43 |penKey._|RealRegC|
|00001990| 72 65 61 74 65 4b 65 79 | 00 5f 65 72 72 73 74 72 |reateKey|._errstr|
|000019a0| 69 6e 67 00 5f 52 65 61 | 6c 52 65 67 46 6c 75 73 |ing._Rea|lRegFlus|
|000019b0| 68 4b 65 79 00 5f 53 74 | 61 72 74 54 69 6d 65 00 |hKey._St|artTime.|
|000019c0| 5f 52 65 61 6c 52 65 67 | 53 65 74 56 61 6c 75 65 |_RealReg|SetValue|
|000019d0| 4b 65 79 00 5f 4c 6f 67 | 4d 75 74 65 78 00 5f 48 |Key._Log|Mutex._H|
|000019e0| 61 73 68 4d 75 74 65 78 | 00 5f 4b 65 53 65 72 76 |ashMutex|._KeServ|
|000019f0| 69 63 65 54 61 62 6c 65 | 50 6f 69 6e 74 65 72 73 |iceTable|Pointers|
|00001a00| 00 5f 46 69 6c 74 65 72 | 44 65 66 00 5f 52 65 61 |._Filter|Def._Rea|
|00001a10| 6c 52 65 67 45 6e 75 6d | 65 72 61 74 65 56 61 6c |lRegEnum|erateVal|
|00001a20| 75 65 4b 65 79 00 5f 42 | 6f 6f 74 53 61 76 65 64 |ueKey._B|ootSaved|
|00001a30| 4c 6f 67 54 61 69 6c 00 | 5f 53 65 72 76 69 63 65 |LogTail.|_Service|
|00001a40| 49 73 48 6f 6f 6b 65 64 | 00 5f 52 65 61 6c 52 65 |IsHooked|._RealRe|
|00001a50| 67 55 6e 6c 6f 61 64 4b | 65 79 00 5f 52 65 61 6c |gUnloadK|ey._Real|
|00001a60| 52 65 67 4c 6f 61 64 4b | 65 79 00 5f 52 65 61 6c |RegLoadK|ey._Real|
|00001a70| 52 65 67 51 75 65 72 79 | 56 61 6c 75 65 4b 65 79 |RegQuery|ValueKey|
|00001a80| 00 5f 49 6e 63 6c 75 64 | 65 46 69 6c 74 65 72 73 |._Includ|eFilters|
|00001a90| 00 5f 46 75 6c 6c 50 61 | 74 68 4c 6f 6f 6b 61 73 |._FullPa|thLookas|
|00001aa0| 69 64 65 00 5f 52 65 61 | 6c 52 65 67 43 6c 6f 73 |ide._Rea|lRegClos|
|00001ab0| 65 4b 65 79 00 5f 46 69 | 6c 74 65 72 4d 75 74 65 |eKey._Fi|lterMute|
|00001ac0| 78 00 5f 4c 6f 67 67 69 | 6e 67 45 76 65 6e 74 00 |x._Loggi|ngEvent.|
|00001ad0| 5f 52 65 61 6c 52 65 67 | 44 65 6c 65 74 65 4b 65 |_RealReg|DeleteKe|
|00001ae0| 79 00 5f 52 65 61 6c 52 | 65 67 51 75 65 72 79 4b |y._RealR|egQueryK|
|00001af0| 65 79 00 5f 45 78 63 6c | 75 64 65 46 69 6c 74 65 |ey._Excl|udeFilte|
|00001b00| 72 73 00 5f 47 55 49 44 | 65 76 69 63 65 00 5f 50 |rs._GUID|evice._P|
|00001b10| 72 6f 63 65 73 73 4e 61 | 6d 65 4f 66 66 73 65 74 |rocessNa|meOffset|
|00001b20| 00 5f 5f 69 6d 70 5f 5f | 5a 77 43 72 65 61 74 65 |.__imp__|ZwCreate|
|00001b30| 46 69 6c 65 40 34 34 00 | 5f 5f 69 6d 70 5f 5f 52 |File@44.|__imp__R|
|00001b40| 74 6c 49 6e 69 74 55 6e | 69 63 6f 64 65 53 74 72 |tlInitUn|icodeStr|
|00001b50| 69 6e 67 40 38 00 5f 5f | 69 6d 70 5f 5f 4b 65 53 |ing@8.__|imp__KeS|
|00001b60| 65 74 45 76 65 6e 74 40 | 31 32 00 5f 5f 69 6d 70 |etEvent@|12.__imp|
|00001b70| 5f 5f 5a 77 43 6c 6f 73 | 65 40 34 00 5f 5f 69 6d |__ZwClos|e@4.__im|
|00001b80| 70 5f 5f 5a 77 53 65 74 | 49 6e 66 6f 72 6d 61 74 |p__ZwSet|Informat|
|00001b90| 69 6f 6e 46 69 6c 65 40 | 32 30 00 5f 5f 69 6d 70 |ionFile@|20.__imp|
|00001ba0| 5f 5f 73 70 72 69 6e 74 | 66 00 5f 5f 69 6d 70 5f |__sprint|f.__imp_|
|00001bb0| 5f 5a 77 57 72 69 74 65 | 46 69 6c 65 40 33 36 00 |_ZwWrite|File@36.|
|00001bc0| 5f 5f 69 6d 70 5f 5f 45 | 78 41 6c 6c 6f 63 61 74 |__imp__E|xAllocat|
|00001bd0| 65 50 6f 6f 6c 57 69 74 | 68 54 61 67 40 31 32 00 |ePoolWit|hTag@12.|
|00001be0| 5f 5f 69 6d 70 5f 5f 45 | 78 46 72 65 65 50 6f 6f |__imp__E|xFreePoo|
|00001bf0| 6c 40 34 00 5f 5f 69 6d | 70 5f 5f 4b 65 57 61 69 |l@4.__im|p__KeWai|
|00001c00| 74 46 6f 72 53 69 6e 67 | 6c 65 4f 62 6a 65 63 74 |tForSing|leObject|
|00001c10| 40 32 30 00 5f 5f 69 6d | 70 5f 5f 45 78 51 75 65 |@20.__im|p__ExQue|
|00001c20| 75 65 57 6f 72 6b 49 74 | 65 6d 40 38 00 5f 5f 69 |ueWorkIt|em@8.__i|
|00001c30| 6d 70 5f 5f 4b 65 52 65 | 6c 65 61 73 65 4d 75 74 |mp__KeRe|leaseMut|
|00001c40| 65 78 40 38 00 5f 5f 69 | 6d 70 5f 5f 4b 65 51 75 |ex@8.__i|mp__KeQu|
|00001c50| 65 72 79 50 65 72 66 6f | 72 6d 61 6e 63 65 43 6f |eryPerfo|rmanceCo|
|00001c60| 75 6e 74 65 72 40 34 00 | 5f 5f 69 6d 70 5f 5f 4b |unter@4.|__imp__K|
|00001c70| 65 51 75 65 72 79 53 79 | 73 74 65 6d 54 69 6d 65 |eQuerySy|stemTime|
|00001c80| 40 34 00 40 49 6e 74 65 | 72 6c 6f 63 6b 65 64 49 |@4.@Inte|rlockedI|
|00001c90| 6e 63 72 65 6d 65 6e 74 | 40 34 00 5f 5f 69 6d 70 |ncrement|@4.__imp|
|00001ca0| 5f 5f 76 73 70 72 69 6e | 74 66 00 5f 5f 69 6d 70 |__vsprin|tf.__imp|
|00001cb0| 5f 5f 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |__ObRefe|renceObj|
|00001cc0| 65 63 74 42 79 48 61 6e | 64 6c 65 40 32 34 00 5f |ectByHan|dle@24._|
|00001cd0| 5f 69 6d 70 5f 40 4f 62 | 66 44 65 72 65 66 65 72 |_imp_@Ob|fDerefer|
|00001ce0| 65 6e 63 65 4f 62 6a 65 | 63 74 40 34 00 5f 5f 69 |enceObje|ct@4.__i|
|00001cf0| 6d 70 5f 5f 52 74 6c 46 | 72 65 65 41 6e 73 69 53 |mp__RtlF|reeAnsiS|
|00001d00| 74 72 69 6e 67 40 34 00 | 5f 5f 69 6d 70 5f 5f 52 |tring@4.|__imp__R|
|00001d10| 74 6c 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 54 |tlUnicod|eStringT|
|00001d20| 6f 41 6e 73 69 53 74 72 | 69 6e 67 40 31 32 00 5f |oAnsiStr|ing@12._|
|00001d30| 5f 69 6d 70 5f 5f 73 74 | 72 6e 63 61 74 00 5f 5f |_imp__st|rncat.__|
|00001d40| 69 6d 70 5f 5f 73 74 72 | 6e 63 70 79 00 5f 5f 69 |imp__str|ncpy.__i|
|00001d50| 6d 70 5f 5f 73 74 72 6e | 63 6d 70 00 5f 5f 69 6d |mp__strn|cmp.__im|
|00001d60| 70 5f 5f 4f 62 51 75 65 | 72 79 4e 61 6d 65 53 74 |p__ObQue|ryNameSt|
|00001d70| 72 69 6e 67 40 31 36 00 | 5f 5f 65 78 63 65 70 74 |ring@16.|__except|
|00001d80| 5f 6c 69 73 74 00 5f 5f | 65 78 63 65 70 74 5f 68 |_list.__|except_h|
|00001d90| 61 6e 64 6c 65 72 33 00 | 5f 5f 69 6d 70 5f 40 45 |andler3.|__imp_@E|
|00001da0| 78 49 6e 74 65 72 6c 6f | 63 6b 65 64 50 6f 70 45 |xInterlo|ckedPopE|
|00001db0| 6e 74 72 79 53 4c 69 73 | 74 40 38 00 5f 5f 69 6d |ntrySLis|t@8.__im|
|00001dc0| 70 5f 40 45 78 49 6e 74 | 65 72 6c 6f 63 6b 65 64 |p_@ExInt|erlocked|
|00001dd0| 50 75 73 68 45 6e 74 72 | 79 53 4c 69 73 74 40 31 |PushEntr|ySList@1|
|00001de0| 32 00 5f 5f 69 6d 70 5f | 5f 49 6f 47 65 74 43 75 |2.__imp_|_IoGetCu|
|00001df0| 72 72 65 6e 74 50 72 6f | 63 65 73 73 40 30 00 5f |rrentPro|cess@0._|
|00001e00| 50 73 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |PsGetCur|rentProc|
|00001e10| 65 73 73 49 64 40 30 00 | 5f 5f 69 6d 70 5f 5f 5a |essId@0.|__imp__Z|
|00001e20| 77 55 6e 6c 6f 61 64 4b | 65 79 40 34 00 5f 5f 69 |wUnloadK|ey@4.__i|
|00001e30| 6d 70 5f 5f 5a 77 4c 6f | 61 64 4b 65 79 40 38 00 |mp__ZwLo|adKey@8.|
|00001e40| 5f 5f 69 6d 70 5f 5f 5a | 77 44 65 6c 65 74 65 56 |__imp__Z|wDeleteV|
|00001e50| 61 6c 75 65 4b 65 79 40 | 38 00 5f 5f 69 6d 70 5f |alueKey@|8.__imp_|
|00001e60| 5f 5a 77 43 72 65 61 74 | 65 4b 65 79 40 32 38 00 |_ZwCreat|eKey@28.|
|00001e70| 5f 5f 69 6d 70 5f 5f 5a | 77 53 65 74 56 61 6c 75 |__imp__Z|wSetValu|
|00001e80| 65 4b 65 79 40 32 34 00 | 5f 5f 69 6d 70 5f 5f 5a |eKey@24.|__imp__Z|
|00001e90| 77 44 65 6c 65 74 65 4b | 65 79 40 34 00 5f 5f 69 |wDeleteK|ey@4.__i|
|00001ea0| 6d 70 5f 5f 5a 77 46 6c | 75 73 68 4b 65 79 40 34 |mp__ZwFl|ushKey@4|
|00001eb0| 00 5f 5f 69 6d 70 5f 5f | 5a 77 45 6e 75 6d 65 72 |.__imp__|ZwEnumer|
|00001ec0| 61 74 65 4b 65 79 40 32 | 34 00 5f 5f 69 6d 70 5f |ateKey@2|4.__imp_|
|00001ed0| 5f 5a 77 45 6e 75 6d 65 | 72 61 74 65 56 61 6c 75 |_ZwEnume|rateValu|
|00001ee0| 65 4b 65 79 40 32 34 00 | 5f 5f 69 6d 70 5f 5f 5a |eKey@24.|__imp__Z|
|00001ef0| 77 51 75 65 72 79 56 61 | 6c 75 65 4b 65 79 40 32 |wQueryVa|lueKey@2|
|00001f00| 34 00 5f 5f 69 6d 70 5f | 5f 5a 77 51 75 65 72 79 |4.__imp_|_ZwQuery|
|00001f10| 4b 65 79 40 32 30 00 40 | 49 6e 74 65 72 6c 6f 63 |Key@20.@|Interloc|
|00001f20| 6b 65 64 45 78 63 68 61 | 6e 67 65 40 38 00 5f 5f |kedExcha|nge@8.__|
|00001f30| 69 6d 70 5f 5f 5a 77 4f | 70 65 6e 4b 65 79 40 31 |imp__ZwO|penKey@1|
|00001f40| 32 00 5f 50 72 6f 62 65 | 46 6f 72 57 72 69 74 65 |2._Probe|ForWrite|
|00001f50| 40 31 32 00 5f 5f 69 6d | 70 5f 40 49 6f 66 43 6f |@12.__im|p_@IofCo|
|00001f60| 6d 70 6c 65 74 65 52 65 | 71 75 65 73 74 40 38 00 |mpleteRe|quest@8.|
|00001f70| 5f 5f 69 6d 70 5f 5f 49 | 6f 55 6e 72 65 67 69 73 |__imp__I|oUnregis|
|00001f80| 74 65 72 53 68 75 74 64 | 6f 77 6e 4e 6f 74 69 66 |terShutd|ownNotif|
|00001f90| 69 63 61 74 69 6f 6e 40 | 34 00 5f 5f 69 6d 70 5f |ication@|4.__imp_|
|00001fa0| 5f 45 78 44 65 6c 65 74 | 65 4e 50 61 67 65 64 4c |_ExDelet|eNPagedL|
|00001fb0| 6f 6f 6b 61 73 69 64 65 | 4c 69 73 74 40 34 00 5f |ookaside|List@4._|
|00001fc0| 52 65 67 6d 6f 6e 55 6e | 6d 61 70 53 65 72 76 69 |RegmonUn|mapServi|
|00001fd0| 63 65 54 61 62 6c 65 40 | 34 00 5f 5f 69 6d 70 5f |ceTable@|4.__imp_|
|00001fe0| 5f 49 6f 44 65 6c 65 74 | 65 44 65 76 69 63 65 40 |_IoDelet|eDevice@|
|00001ff0| 34 00 5f 5f 69 6d 70 5f | 5f 49 6f 44 65 6c 65 74 |4.__imp_|_IoDelet|
|00002000| 65 53 79 6d 62 6f 6c 69 | 63 4c 69 6e 6b 40 34 00 |eSymboli|cLink@4.|
|00002010| 5f 5f 69 6d 70 5f 5f 49 | 6f 52 65 67 69 73 74 65 |__imp__I|oRegiste|
|00002020| 72 53 68 75 74 64 6f 77 | 6e 4e 6f 74 69 66 69 63 |rShutdow|nNotific|
|00002030| 61 74 69 6f 6e 40 34 00 | 5f 5f 69 6d 70 5f 5f 5a |ation@4.|__imp__Z|
|00002040| 77 44 69 73 70 6c 61 79 | 53 74 72 69 6e 67 40 34 |wDisplay|String@4|
|00002050| 00 5f 5f 69 6d 70 5f 5f | 4b 65 49 6e 69 74 69 61 |.__imp__|KeInitia|
|00002060| 6c 69 7a 65 45 76 65 6e | 74 40 31 32 00 5f 5f 69 |lizeEven|t@12.__i|
|00002070| 6d 70 5f 5f 45 78 49 6e | 69 74 69 61 6c 69 7a 65 |mp__ExIn|itialize|
|00002080| 4e 50 61 67 65 64 4c 6f | 6f 6b 61 73 69 64 65 4c |NPagedLo|okasideL|
|00002090| 69 73 74 40 32 38 00 5f | 52 65 67 6d 6f 6e 4d 61 |ist@28._|RegmonMa|
|000020a0| 70 53 65 72 76 69 63 65 | 54 61 62 6c 65 40 34 00 |pService|Table@4.|
|000020b0| 5f 5f 69 6d 70 5f 5f 4b | 65 49 6e 69 74 69 61 6c |__imp__K|eInitial|
|000020c0| 69 7a 65 4d 75 74 65 78 | 40 38 00 5f 5f 69 6d 70 |izeMutex|@8.__imp|
|000020d0| 5f 5f 49 6f 43 72 65 61 | 74 65 53 79 6d 62 6f 6c |__IoCrea|teSymbol|
|000020e0| 69 63 4c 69 6e 6b 40 38 | 00 5f 5f 69 6d 70 5f 5f |icLink@8|.__imp__|
|000020f0| 49 6f 43 72 65 61 74 65 | 44 65 76 69 63 65 40 32 |IoCreate|Device@2|
|00002100| 38 00 5f 5f 69 6d 70 5f | 5f 52 74 6c 51 75 65 72 |8.__imp_|_RtlQuer|
|00002110| 79 52 65 67 69 73 74 72 | 79 56 61 6c 75 65 73 40 |yRegistr|yValues@|
|00002120| 32 30 00 5f 5f 69 6d 70 | 5f 5f 6d 65 6d 6d 6f 76 |20.__imp|__memmov|
|00002130| 65 00 5f 5a 77 43 72 65 | 61 74 65 46 69 6c 65 40 |e._ZwCre|ateFile@|
|00002140| 34 34 00 5f 5f 49 4d 50 | 4f 52 54 5f 44 45 53 43 |44.__IMP|ORT_DESC|
|00002150| 52 49 50 54 4f 52 5f 6e | 74 6f 73 6b 72 6e 6c 00 |RIPTOR_n|toskrnl.|
|00002160| 5f 52 74 6c 49 6e 69 74 | 55 6e 69 63 6f 64 65 53 |_RtlInit|UnicodeS|
|00002170| 74 72 69 6e 67 40 38 00 | 5f 4b 65 53 65 74 45 76 |tring@8.|_KeSetEv|
|00002180| 65 6e 74 40 31 32 00 5f | 5a 77 43 6c 6f 73 65 40 |ent@12._|ZwClose@|
|00002190| 34 00 5f 5a 77 53 65 74 | 49 6e 66 6f 72 6d 61 74 |4._ZwSet|Informat|
|000021a0| 69 6f 6e 46 69 6c 65 40 | 32 30 00 5f 5a 77 57 72 |ionFile@|20._ZwWr|
|000021b0| 69 74 65 46 69 6c 65 40 | 33 36 00 5f 45 78 41 6c |iteFile@|36._ExAl|
|000021c0| 6c 6f 63 61 74 65 50 6f | 6f 6c 57 69 74 68 54 61 |locatePo|olWithTa|
|000021d0| 67 40 31 32 00 5f 45 78 | 46 72 65 65 50 6f 6f 6c |g@12._Ex|FreePool|
|000021e0| 40 34 00 5f 4b 65 57 61 | 69 74 46 6f 72 53 69 6e |@4._KeWa|itForSin|
|000021f0| 67 6c 65 4f 62 6a 65 63 | 74 40 32 30 00 5f 45 78 |gleObjec|t@20._Ex|
|00002200| 51 75 65 75 65 57 6f 72 | 6b 49 74 65 6d 40 38 00 |QueueWor|kItem@8.|
|00002210| 5f 4b 65 52 65 6c 65 61 | 73 65 4d 75 74 65 78 40 |_KeRelea|seMutex@|
|00002220| 38 00 5f 4b 65 51 75 65 | 72 79 53 79 73 74 65 6d |8._KeQue|rySystem|
|00002230| 54 69 6d 65 40 34 00 5f | 5f 69 6d 70 5f 40 49 6e |Time@4._|_imp_@In|
|00002240| 74 65 72 6c 6f 63 6b 65 | 64 49 6e 63 72 65 6d 65 |terlocke|dIncreme|
|00002250| 6e 74 40 34 00 5f 76 73 | 70 72 69 6e 74 66 00 5f |nt@4._vs|printf._|
|00002260| 4f 62 52 65 66 65 72 65 | 6e 63 65 4f 62 6a 65 63 |ObRefere|nceObjec|
|00002270| 74 42 79 48 61 6e 64 6c | 65 40 32 34 00 40 4f 62 |tByHandl|e@24.@Ob|
|00002280| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|00002290| 63 74 40 34 00 5f 52 74 | 6c 46 72 65 65 41 6e 73 |ct@4._Rt|lFreeAns|
|000022a0| 69 53 74 72 69 6e 67 40 | 34 00 5f 52 74 6c 55 6e |iString@|4._RtlUn|
|000022b0| 69 63 6f 64 65 53 74 72 | 69 6e 67 54 6f 41 6e 73 |icodeStr|ingToAns|
|000022c0| 69 53 74 72 69 6e 67 40 | 31 32 00 5f 4f 62 51 75 |iString@|12._ObQu|
|000022d0| 65 72 79 4e 61 6d 65 53 | 74 72 69 6e 67 40 31 36 |eryNameS|tring@16|
|000022e0| 00 5f 52 74 6c 55 6e 77 | 69 6e 64 40 31 36 00 5f |._RtlUnw|ind@16._|
|000022f0| 5f 67 6c 6f 62 61 6c 5f | 75 6e 77 69 6e 64 32 00 |_global_|unwind2.|
|00002300| 5f 5f 6c 6f 63 61 6c 5f | 75 6e 77 69 6e 64 32 00 |__local_|unwind2.|
|00002310| 5f 5f 61 62 6e 6f 72 6d | 61 6c 5f 74 65 72 6d 69 |__abnorm|al_termi|
|00002320| 6e 61 74 69 6f 6e 00 5f | 5f 73 65 68 5f 6c 6f 6e |nation._|_seh_lon|
|00002330| 67 6a 6d 70 5f 75 6e 77 | 69 6e 64 40 34 00 40 45 |gjmp_unw|ind@4.@E|
|00002340| 78 49 6e 74 65 72 6c 6f | 63 6b 65 64 50 6f 70 45 |xInterlo|ckedPopE|
|00002350| 6e 74 72 79 53 4c 69 73 | 74 40 38 00 40 45 78 49 |ntrySLis|t@8.@ExI|
|00002360| 6e 74 65 72 6c 6f 63 6b | 65 64 50 75 73 68 45 6e |nterlock|edPushEn|
|00002370| 74 72 79 53 4c 69 73 74 | 40 31 32 00 5f 49 6f 47 |trySList|@12._IoG|
|00002380| 65 74 43 75 72 72 65 6e | 74 50 72 6f 63 65 73 73 |etCurren|tProcess|
|00002390| 40 30 00 5f 5f 69 6d 70 | 5f 5f 50 73 47 65 74 43 |@0.__imp|__PsGetC|
|000023a0| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 49 64 40 |urrentPr|ocessId@|
|000023b0| 30 00 5f 5a 77 55 6e 6c | 6f 61 64 4b 65 79 40 34 |0._ZwUnl|oadKey@4|
|000023c0| 00 5f 5a 77 4c 6f 61 64 | 4b 65 79 40 38 00 5f 5a |._ZwLoad|Key@8._Z|
|000023d0| 77 44 65 6c 65 74 65 56 | 61 6c 75 65 4b 65 79 40 |wDeleteV|alueKey@|
|000023e0| 38 00 5f 5a 77 43 72 65 | 61 74 65 4b 65 79 40 32 |8._ZwCre|ateKey@2|
|000023f0| 38 00 5f 5a 77 53 65 74 | 56 61 6c 75 65 4b 65 79 |8._ZwSet|ValueKey|
|00002400| 40 32 34 00 5f 5a 77 44 | 65 6c 65 74 65 4b 65 79 |@24._ZwD|eleteKey|
|00002410| 40 34 00 5f 5a 77 46 6c | 75 73 68 4b 65 79 40 34 |@4._ZwFl|ushKey@4|
|00002420| 00 5f 5a 77 45 6e 75 6d | 65 72 61 74 65 4b 65 79 |._ZwEnum|erateKey|
|00002430| 40 32 34 00 5f 5a 77 45 | 6e 75 6d 65 72 61 74 65 |@24._ZwE|numerate|
|00002440| 56 61 6c 75 65 4b 65 79 | 40 32 34 00 5f 5a 77 51 |ValueKey|@24._ZwQ|
|00002450| 75 65 72 79 56 61 6c 75 | 65 4b 65 79 40 32 34 00 |ueryValu|eKey@24.|
|00002460| 5f 5a 77 51 75 65 72 79 | 4b 65 79 40 32 30 00 5f |_ZwQuery|Key@20._|
|00002470| 5f 69 6d 70 5f 40 49 6e | 74 65 72 6c 6f 63 6b 65 |_imp_@In|terlocke|
|00002480| 64 45 78 63 68 61 6e 67 | 65 40 38 00 5f 5a 77 4f |dExchang|e@8._ZwO|
|00002490| 70 65 6e 4b 65 79 40 31 | 32 00 5f 5f 69 6d 70 5f |penKey@1|2.__imp_|
|000024a0| 5f 50 72 6f 62 65 46 6f | 72 57 72 69 74 65 40 31 |_ProbeFo|rWrite@1|
|000024b0| 32 00 40 49 6f 66 43 6f | 6d 70 6c 65 74 65 52 65 |2.@IofCo|mpleteRe|
|000024c0| 71 75 65 73 74 40 38 00 | 5f 49 6f 55 6e 72 65 67 |quest@8.|_IoUnreg|
|000024d0| 69 73 74 65 72 53 68 75 | 74 64 6f 77 6e 4e 6f 74 |isterShu|tdownNot|
|000024e0| 69 66 69 63 61 74 69 6f | 6e 40 34 00 5f 45 78 44 |ificatio|n@4._ExD|
|000024f0| 65 6c 65 74 65 4e 50 61 | 67 65 64 4c 6f 6f 6b 61 |eleteNPa|gedLooka|
|00002500| 73 69 64 65 4c 69 73 74 | 40 34 00 5f 49 6f 44 65 |sideList|@4._IoDe|
|00002510| 6c 65 74 65 44 65 76 69 | 63 65 40 34 00 5f 49 6f |leteDevi|ce@4._Io|
|00002520| 44 65 6c 65 74 65 53 79 | 6d 62 6f 6c 69 63 4c 69 |DeleteSy|mbolicLi|
|00002530| 6e 6b 40 34 00 5f 49 6f | 52 65 67 69 73 74 65 72 |nk@4._Io|Register|
|00002540| 53 68 75 74 64 6f 77 6e | 4e 6f 74 69 66 69 63 61 |Shutdown|Notifica|
|00002550| 74 69 6f 6e 40 34 00 5f | 5a 77 44 69 73 70 6c 61 |tion@4._|ZwDispla|
|00002560| 79 53 74 72 69 6e 67 40 | 34 00 5f 4b 65 49 6e 69 |yString@|4._KeIni|
|00002570| 74 69 61 6c 69 7a 65 45 | 76 65 6e 74 40 31 32 00 |tializeE|vent@12.|
|00002580| 5f 45 78 49 6e 69 74 69 | 61 6c 69 7a 65 4e 50 61 |_ExIniti|alizeNPa|
|00002590| 67 65 64 4c 6f 6f 6b 61 | 73 69 64 65 4c 69 73 74 |gedLooka|sideList|
|000025a0| 40 32 38 00 5f 4b 65 49 | 6e 69 74 69 61 6c 69 7a |@28._KeI|nitializ|
|000025b0| 65 4d 75 74 65 78 40 38 | 00 5f 49 6f 43 72 65 61 |eMutex@8|._IoCrea|
|000025c0| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 40 38 |teSymbol|icLink@8|
|000025d0| 00 5f 49 6f 43 72 65 61 | 74 65 44 65 76 69 63 65 |._IoCrea|teDevice|
|000025e0| 40 32 38 00 5f 52 74 6c | 51 75 65 72 79 52 65 67 |@28._Rtl|QueryReg|
|000025f0| 69 73 74 72 79 56 61 6c | 75 65 73 40 32 30 00 5f |istryVal|ues@20._|
|00002600| 5f 4e 55 4c 4c 5f 49 4d | 50 4f 52 54 5f 44 45 53 |_NULL_IM|PORT_DES|
|00002610| 43 52 49 50 54 4f 52 00 | 7f 6e 74 6f 73 6b 72 6e |CRIPTOR.|.ntoskrn|
|00002620| 6c 5f 4e 55 4c 4c 5f 54 | 48 55 4e 4b 5f 44 41 54 |l_NULL_T|HUNK_DAT|
|00002630| 41 00 5f 5f 69 6d 70 5f | 5f 52 74 6c 55 6e 77 69 |A.__imp_|_RtlUnwi|
|00002640| 6e 64 40 31 36 00 5f 4b | 65 51 75 65 72 79 50 65 |nd@16._K|eQueryPe|
|00002650| 72 66 6f 72 6d 61 6e 63 | 65 43 6f 75 6e 74 65 72 |rformanc|eCounter|
|00002660| 40 34 00 5f 5f 49 4d 50 | 4f 52 54 5f 44 45 53 43 |@4.__IMP|ORT_DESC|
|00002670| 52 49 50 54 4f 52 5f 48 | 41 4c 00 7f 48 41 4c 5f |RIPTOR_H|AL..HAL_|
|00002680| 4e 55 4c 4c 5f 54 48 55 | 4e 4b 5f 44 41 54 41 00 |NULL_THU|NK_DATA.|
|00002690| 5f 4b 65 53 65 72 76 69 | 63 65 54 61 62 6c 65 4d |_KeServi|ceTableM|
|000026a0| 64 6c 00 5f 53 69 67 6e | 61 74 75 72 65 00 5f 5f |dl._Sign|ature.__|
|000026b0| 69 6d 70 5f 5f 4d 6d 55 | 6e 6d 61 70 4c 6f 63 6b |imp__MmU|nmapLock|
|000026c0| 65 64 50 61 67 65 73 40 | 38 00 5f 5f 69 6d 70 5f |edPages@|8.__imp_|
|000026d0| 5f 4d 6d 4d 61 70 4c 6f | 63 6b 65 64 50 61 67 65 |_MmMapLo|ckedPage|
|000026e0| 73 40 38 00 5f 5f 69 6d | 70 5f 5f 4d 6d 42 75 69 |s@8.__im|p__MmBui|
|000026f0| 6c 64 4d 64 6c 46 6f 72 | 4e 6f 6e 50 61 67 65 64 |ldMdlFor|NonPaged|
|00002700| 50 6f 6f 6c 40 34 00 5f | 5f 69 6d 70 5f 5f 4d 6d |Pool@4._|_imp__Mm|
|00002710| 43 72 65 61 74 65 4d 64 | 6c 40 31 32 00 5f 4b 65 |CreateMd|l@12._Ke|
|00002720| 53 65 72 76 69 63 65 44 | 65 73 63 72 69 70 74 6f |ServiceD|escripto|
|00002730| 72 54 61 62 6c 65 00 5f | 4d 6d 55 6e 6d 61 70 4c |rTable._|MmUnmapL|
|00002740| 6f 63 6b 65 64 50 61 67 | 65 73 40 38 00 5f 4d 6d |ockedPag|es@8._Mm|
|00002750| 4d 61 70 4c 6f 63 6b 65 | 64 50 61 67 65 73 40 38 |MapLocke|dPages@8|
|00002760| 00 5f 4d 6d 42 75 69 6c | 64 4d 64 6c 46 6f 72 4e |._MmBuil|dMdlForN|
|00002770| 6f 6e 50 61 67 65 64 50 | 6f 6f 6c 40 34 00 5f 4d |onPagedP|ool@4._M|
|00002780| 6d 43 72 65 61 74 65 4d | 64 6c 40 31 32 00 5f 5f |mCreateM|dl@12.__|
|00002790| 69 6d 70 5f 5f 4b 65 53 | 65 72 76 69 63 65 44 65 |imp__KeS|erviceDe|
|000027a0| 73 63 72 69 70 74 6f 72 | 54 61 62 6c 65 00 5f 3f |scriptor|Table._?|
|000027b0| 64 69 73 6b 46 75 6c 6c | 45 72 72 6f 72 40 3f 31 |diskFull|Error@?1|
|000027c0| 3f 3f 52 65 67 6d 6f 6e | 57 72 69 74 65 42 75 66 |??Regmon|WriteBuf|
|000027d0| 66 65 72 40 40 39 40 39 | 00 5f 3f 74 65 78 74 40 |fer@@9@9|._?text@|
|000027e0| 3f 31 3f 3f 4c 6f 67 52 | 65 63 6f 72 64 40 40 39 |?1??LogR|ecord@@9|
|000027f0| 40 39 00 5f 6c 68 5f 63 | 6f 6e 74 69 6e 75 65 00 |@9._lh_c|ontinue.|
|00002800| 5f 6c 68 5f 64 69 73 6d | 69 73 73 00 5f 6c 68 5f |_lh_dism|iss._lh_|
|00002810| 72 65 74 75 72 6e 00 5f | 6c 68 5f 62 61 67 69 74 |return._|lh_bagit|
|00002820| 00 5f 6c 68 5f 75 6e 77 | 69 6e 64 69 6e 67 00 5f |._lh_unw|inding._|
|00002830| 67 75 5f 72 65 74 75 72 | 6e 00 5f 5f 75 6e 77 69 |gu_retur|n.__unwi|
|00002840| 6e 64 5f 68 61 6e 64 6c | 65 72 00 5f 75 68 5f 72 |nd_handl|er._uh_r|
|00002850| 65 74 75 72 6e 00 5f 6c | 75 5f 63 6f 6e 74 69 6e |eturn._l|u_contin|
|00002860| 75 65 00                |                         |ue.     |        |
+--------+-------------------------+-------------------------+--------+--------+