home *** CD-ROM | disk | FTP | other *** search
/ PC World 2005 January / PCWorld_2005-01_cd.bin / software / komercni / sodat / oadial.exe / {app} / oaDReg.sys / COFF_SYMBOLS < prev    next >
Unknown  |  2004-06-29  |  10.1 KB
open in: MacOS 8.1     |     Win98     |     DOS

view JSON data     |     view as text

This file was not able to be converted.
This format is not currently supported by dexvert.

ConfidenceProgramDetectionMatch TypeSupport
100% file data default


hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00000010| 03 00 24 52 30 30 30 30 | 30 30 60 55 00 00 05 00 |..$R0000|00`U....|
|00000020| 00 00 03 00 40 63 6f 6d | 70 2e 69 64 00 00 00 00 |....@com|p.id....|
|00000030| ff ff 00 00 03 00 24 53 | 47 39 35 32 30 00 3e 18 |......$S|G9520.>.|
|00000040| 00 00 01 00 00 00 03 00 | 24 53 47 39 35 31 36 00 |........|$SG9516.|
|00000050| 1e 18 00 00 01 00 00 00 | 03 00 24 53 47 39 35 36 |........|..$SG956|
|00000060| 33 00 66 1a 00 00 01 00 | 00 00 03 00 24 53 47 39 |3.f.....|....$SG9|
|00000070| 37 34 31 00 14 21 00 00 | 01 00 00 00 03 00 24 53 |741..!..|......$S|
|00000080| 47 39 37 34 30 00 04 21 | 00 00 01 00 00 00 03 00 |G9740..!|........|
|00000090| 24 53 47 39 37 33 39 00 | c8 20 00 00 01 00 00 00 |$SG9739.|. ......|
|000000a0| 03 00 24 53 47 39 37 33 | 38 00 b8 20 00 00 01 00 |..$SG973|8.. ....|
|000000b0| 00 00 03 00 24 53 47 39 | 37 33 37 00 7c 20 00 00 |....$SG9|737.| ..|
|000000c0| 01 00 00 00 03 00 24 53 | 47 39 37 33 36 00 70 20 |......$S|G9736.p |
|000000d0| 00 00 01 00 00 00 03 00 | 24 53 47 39 37 33 35 00 |........|$SG9735.|
|000000e0| 34 20 00 00 01 00 00 00 | 03 00 24 53 47 39 37 33 |4 ......|..$SG973|
|000000f0| 34 00 28 20 00 00 01 00 | 00 00 03 00 24 53 47 39 |4.( ....|....$SG9|
|00000100| 37 33 33 00 ec 1f 00 00 | 01 00 00 00 03 00 24 53 |733.....|......$S|
|00000110| 47 39 37 33 32 00 dc 1f | 00 00 01 00 00 00 03 00 |G9732...|........|
|00000120| 24 53 47 39 37 33 31 00 | a0 1f 00 00 01 00 00 00 |$SG9731.|........|
|00000130| 03 00 24 53 47 39 37 33 | 30 00 8c 1f 00 00 01 00 |..$SG973|0.......|
|00000140| 00 00 03 00 24 53 47 39 | 37 32 39 00 50 1f 00 00 |....$SG9|729.P...|
|00000150| 01 00 00 00 03 00 24 53 | 47 39 37 32 38 00 40 1f |......$S|G9728.@.|
|00000160| 00 00 01 00 00 00 03 00 | 24 53 47 39 37 32 37 00 |........|$SG9727.|
|00000170| 04 1f 00 00 01 00 00 00 | 03 00 24 53 47 39 37 32 |........|..$SG972|
|00000180| 36 00 f4 1e 00 00 01 00 | 00 00 03 00 24 53 47 39 |6.......|....$SG9|
|00000190| 37 32 35 00 b8 1e 00 00 | 01 00 00 00 03 00 24 53 |725.....|......$S|
|000001a0| 47 39 37 32 34 00 a8 1e | 00 00 01 00 00 00 03 00 |G9724...|........|
|000001b0| 24 53 47 39 37 32 33 00 | 6c 1e 00 00 01 00 00 00 |$SG9723.|l.......|
|000001c0| 03 00 24 53 47 39 37 32 | 32 00 5c 1e 00 00 01 00 |..$SG972|2.\.....|
|000001d0| 00 00 03 00 24 53 47 39 | 37 32 31 00 20 1e 00 00 |....$SG9|721. ...|
|000001e0| 01 00 00 00 03 00 24 53 | 47 39 37 32 30 00 14 1e |......$S|G9720...|
|000001f0| 00 00 01 00 00 00 03 00 | 24 53 47 39 37 31 39 00 |........|$SG9719.|
|00000200| d8 1d 00 00 01 00 00 00 | 03 00 24 53 47 39 37 31 |........|..$SG971|
|00000210| 38 00 cc 1d 00 00 01 00 | 00 00 03 00 24 53 47 39 |8.......|....$SG9|
|00000220| 37 31 37 00 90 1d 00 00 | 01 00 00 00 03 00 24 53 |717.....|......$S|
|00000230| 47 39 37 31 36 00 80 1d | 00 00 01 00 00 00 03 00 |G9716...|........|
|00000240| 24 53 47 39 37 31 35 00 | 44 1d 00 00 01 00 00 00 |$SG9715.|D.......|
|00000250| 03 00 24 53 47 39 37 31 | 34 00 30 1d 00 00 01 00 |..$SG971|4.0.....|
|00000260| 00 00 03 00 24 53 47 39 | 37 31 33 00 f4 1c 00 00 |....$SG9|713.....|
|00000270| 01 00 00 00 03 00 24 53 | 47 39 37 31 32 00 e4 1c |......$S|G9712...|
|00000280| 00 00 01 00 00 00 03 00 | 24 53 47 39 37 31 31 00 |........|$SG9711.|
|00000290| a8 1c 00 00 01 00 00 00 | 03 00 24 53 47 39 37 31 |........|..$SG971|
|000002a0| 30 00 98 1c 00 00 01 00 | 00 00 03 00 24 53 47 39 |0.......|....$SG9|
|000002b0| 37 30 39 00 68 1c 00 00 | 01 00 00 00 03 00 24 53 |709.h...|......$S|
|000002c0| 47 39 37 30 38 00 60 1c | 00 00 01 00 00 00 03 00 |G9708.`.|........|
|000002d0| 24 53 47 39 37 39 33 00 | 1a 24 00 00 01 00 00 00 |$SG9793.|.$......|
|000002e0| 03 00 24 53 47 39 37 39 | 31 00 f6 23 00 00 01 00 |..$SG979|1..#....|
|000002f0| 00 00 03 00 24 53 47 39 | 37 38 39 00 b6 23 00 00 |....$SG9|789..#..|
|00000300| 01 00 00 00 03 00 24 53 | 47 39 37 38 37 00 a6 23 |......$S|G9787..#|
|00000310| 00 00 01 00 00 00 03 00 | 24 53 47 39 37 38 35 00 |........|$SG9785.|
|00000320| 36 23 00 00 01 00 00 00 | 03 00 24 53 47 39 37 38 |6#......|..$SG978|
|00000330| 33 00 fe 22 00 00 01 00 | 00 00 03 00 24 53 47 39 |3.."....|....$SG9|
|00000340| 38 33 39 00 e8 24 00 00 | 01 00 00 00 03 00 24 53 |839..$..|......$S|
|00000350| 47 39 38 34 39 00 26 25 | 00 00 01 00 00 00 03 00 |G9849.&%|........|
|00000360| 24 53 47 39 38 36 30 00 | 72 25 00 00 01 00 00 00 |$SG9860.|r%......|
|00000370| 03 00 24 53 47 39 38 37 | 38 00 16 26 00 00 01 00 |..$SG987|8..&....|
|00000380| 00 00 03 00 24 53 47 39 | 38 37 37 00 fe 25 00 00 |....$SG9|877..%..|
|00000390| 01 00 00 00 03 00 40 63 | 6f 6d 70 2e 69 64 00 00 |......@c|omp.id..|
|000003a0| 00 00 ff ff 00 00 03 00 | 24 53 47 39 34 36 38 00 |........|$SG9468.|
|000003b0| 66 0b 00 00 01 00 00 00 | 03 00 24 53 47 39 35 36 |f.......|..$SG956|
|000003c0| 36 00 e6 10 00 00 01 00 | 00 00 03 00 24 53 47 39 |6.......|....$SG9|
|000003d0| 36 34 39 00 d2 13 00 00 | 01 00 00 00 03 00 24 53 |649.....|......$S|
|000003e0| 47 39 36 34 38 00 7e 13 | 00 00 01 00 00 00 03 00 |G9648.~.|........|
|000003f0| 24 53 47 39 36 33 37 00 | 6a 13 00 00 01 00 00 00 |$SG9637.|j.......|
|00000400| 03 00 24 53 47 39 36 39 | 30 00 8a 16 00 00 01 00 |..$SG969|0.......|
|00000410| 00 00 03 00 24 53 47 39 | 36 38 38 00 76 16 00 00 |....$SG9|688.v...|
|00000420| 01 00 00 00 03 00 24 53 | 47 39 36 37 39 00 22 16 |......$S|G9679.".|
|00000430| 00 00 01 00 00 00 03 00 | 24 53 47 39 36 37 35 00 |........|$SG9675.|
|00000440| 1e 16 00 00 01 00 00 00 | 03 00 24 53 47 39 36 37 |........|..$SG967|
|00000450| 32 00 1a 16 00 00 01 00 | 00 00 03 00 24 53 47 39 |2.......|....$SG9|
|00000460| 36 36 34 00 c6 15 00 00 | 01 00 00 00 03 00 40 63 |664.....|......@c|
|00000470| 6f 6d 70 2e 69 64 00 00 | 00 00 ff ff 00 00 03 00 |omp.id..|........|
|00000480| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00000490| 03 00 40 63 6f 6d 70 2e | 69 64 00 00 00 00 ff ff |..@comp.|id......|
|000004a0| 00 00 03 00 24 53 47 31 | 34 39 32 33 a4 05 00 00 |....$SG1|4923....|
|000004b0| 01 00 00 00 03 00 40 63 | 6f 6d 70 2e 69 64 00 00 |......@c|omp.id..|
|000004c0| 00 00 ff ff 00 00 03 00 | 24 53 47 38 38 38 38 00 |........|$SG8888.|
|000004d0| 74 48 00 00 03 00 00 00 | 03 00 24 53 47 38 39 37 |tH......|..$SG897|
|000004e0| 36 00 68 4b 00 00 03 00 | 00 00 03 00 24 53 47 38 |6.hK....|....$SG8|
|000004f0| 39 36 35 00 64 4b 00 00 | 03 00 00 00 03 00 24 53 |965.dK..|......$S|
|00000500| 47 38 39 35 37 00 60 4b | 00 00 03 00 00 00 03 00 |G8957.`K|........|
|00000510| 24 53 47 38 39 35 36 00 | 0c 4b 00 00 03 00 00 00 |$SG8956.|.K......|
|00000520| 03 00 24 53 47 38 39 34 | 38 00 b8 4a 00 00 03 00 |..$SG894|8..J....|
|00000530| 00 00 03 00 24 53 47 38 | 39 34 32 00 b4 4a 00 00 |....$SG8|942..J..|
|00000540| 03 00 00 00 03 00 24 53 | 47 38 39 39 39 00 3c 4e |......$S|G8999.<N|
|00000550| 00 00 03 00 00 00 03 00 | 24 53 47 38 39 39 37 00 |........|$SG8997.|
|00000560| 38 4e 00 00 03 00 00 00 | 03 00 24 53 47 38 39 39 |8N......|..$SG899|
|00000570| 34 00 e4 4d 00 00 03 00 | 00 00 03 00 24 53 47 38 |4..M....|....$SG8|
|00000580| 39 39 32 00 90 4d 00 00 | 03 00 00 00 03 00 24 53 |992..M..|......$S|
|00000590| 47 38 39 38 37 00 3c 4d | 00 00 03 00 00 00 03 00 |G8987.<M|........|
|000005a0| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|000005b0| 03 00 24 53 47 38 38 37 | 32 00 86 41 00 00 03 00 |..$SG887|2..A....|
|000005c0| 00 00 03 00 24 53 47 38 | 38 39 36 00 de 42 00 00 |....$SG8|896..B..|
|000005d0| 03 00 00 00 03 00 24 53 | 47 38 38 39 34 00 8a 42 |......$S|G8894..B|
|000005e0| 00 00 03 00 00 00 03 00 | 24 53 47 38 39 32 34 00 |........|$SG8924.|
|000005f0| 22 44 00 00 03 00 00 00 | 03 00 24 53 47 38 39 30 |"D......|..$SG890|
|00000600| 38 00 ce 43 00 00 03 00 | 00 00 03 00 24 53 47 38 |8..C....|....$SG8|
|00000610| 39 35 36 00 6e 46 00 00 | 03 00 00 00 03 00 24 53 |956.nF..|......$S|
|00000620| 47 38 39 33 38 00 1a 46 | 00 00 03 00 00 00 03 00 |G8938..F|........|
|00000630| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00000640| 03 00 24 53 47 38 39 31 | 30 00 ea 39 00 00 03 00 |..$SG891|0..9....|
|00000650| 00 00 03 00 24 53 47 38 | 39 32 33 00 ba 3a 00 00 |....$SG8|923..:..|
|00000660| 03 00 00 00 03 00 24 53 | 47 38 39 35 36 00 14 3c |......$S|G8956..<|
|00000670| 00 00 03 00 00 00 03 00 | 24 53 47 39 30 30 38 00 |........|$SG9008.|
|00000680| f0 3d 00 00 03 00 00 00 | 03 00 24 53 47 39 30 30 |.=......|..$SG900|
|00000690| 31 00 98 3d 00 00 03 00 | 00 00 03 00 24 53 47 39 |1..=....|....$SG9|
|000006a0| 30 34 35 00 92 3f 00 00 | 03 00 00 00 03 00 24 53 |045..?..|......$S|
|000006b0| 47 39 30 33 38 00 3a 3f | 00 00 03 00 00 00 03 00 |G9038.:?|........|
|000006c0| 24 53 47 39 30 37 36 00 | c4 03 00 00 01 00 00 00 |$SG9076.|........|
|000006d0| 03 00 40 63 6f 6d 70 2e | 69 64 00 00 00 00 ff ff |..@comp.|id......|
|000006e0| 00 00 03 00 24 53 47 31 | 31 34 35 38 f0 37 00 00 |....$SG1|1458.7..|
|000006f0| 03 00 00 00 03 00 24 53 | 47 31 31 34 36 39 58 38 |......$S|G11469X8|
|00000700| 00 00 03 00 00 00 03 00 | 40 63 6f 6d 70 2e 69 64 |........|@comp.id|
|00000710| 00 00 00 00 ff ff 00 00 | 03 00 24 53 47 38 38 37 |........|..$SG887|
|00000720| 34 00 e0 36 00 00 03 00 | 00 00 03 00 2e 69 64 61 |4..6....|.....ida|
|00000730| 74 61 24 36 e8 54 00 00 | 04 00 00 00 03 00 68 65 |ta$6.T..|......he|
|00000740| 61 64 65 72 00 00 00 00 | 00 00 fe ff 00 00 02 00 |ader....|........|
|00000750| 00 00 00 00 6a 0a 00 00 | c0 02 00 00 01 00 00 00 |....j...|........|
|00000760| 02 00 00 00 00 00 e2 00 | 00 00 c4 02 00 00 01 00 |........|........|
|00000770| 00 00 02 00 00 00 00 00 | f6 00 00 00 c8 02 00 00 |........|........|
|00000780| 01 00 00 00 02 00 00 00 | 00 00 50 01 00 00 cc 02 |........|..P.....|
|00000790| 00 00 01 00 00 00 02 00 | 00 00 00 00 c8 01 00 00 |........|........|
|000007a0| d0 02 00 00 01 00 00 00 | 02 00 00 00 00 00 e8 01 |........|........|
|000007b0| 00 00 d4 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|000007c0| fc 01 00 00 d8 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|000007d0| 00 00 17 02 00 00 dc 02 | 00 00 01 00 00 00 02 00 |........|........|
|000007e0| 00 00 00 00 37 02 00 00 | e0 02 00 00 01 00 00 00 |....7...|........|
|000007f0| 02 00 00 00 00 00 87 03 | 00 00 e4 02 00 00 01 00 |........|........|
|00000800| 00 00 02 00 00 00 00 00 | f6 04 00 00 e8 02 00 00 |........|........|
|00000810| 01 00 00 00 02 00 00 00 | 00 00 05 05 00 00 ec 02 |........|........|
|00000820| 00 00 01 00 00 00 02 00 | 00 00 00 00 29 05 00 00 |........|....)...|
|00000830| f0 02 00 00 01 00 00 00 | 02 00 00 00 00 00 47 05 |........|......G.|
|00000840| 00 00 f4 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000850| 62 05 00 00 f8 02 00 00 | 01 00 00 00 02 00 00 00 |b.......|........|
|00000860| 00 00 71 05 00 00 fc 02 | 00 00 01 00 00 00 02 00 |..q.....|........|
|00000870| 00 00 00 00 98 05 00 00 | 00 03 00 00 01 00 00 00 |........|........|
|00000880| 02 00 00 00 00 00 51 06 | 00 00 04 03 00 00 01 00 |......Q.|........|
|00000890| 00 00 02 00 00 00 00 00 | 69 06 00 00 08 03 00 00 |........|i.......|
|000008a0| 01 00 00 00 02 00 00 00 | 00 00 87 06 00 00 0c 03 |........|........|
|000008b0| 00 00 01 00 00 00 02 00 | 00 00 00 00 98 06 00 00 |........|........|
|000008c0| 10 03 00 00 01 00 00 00 | 02 00 00 00 00 00 c4 00 |........|........|
|000008d0| 00 00 14 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|000008e0| 8c 0a 00 00 18 03 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|000008f0| 00 00 aa 0a 00 00 1c 03 | 00 00 01 00 00 00 02 00 |........|........|
|00000900| 00 00 00 00 b8 0a 00 00 | 20 03 00 00 01 00 00 00 |........| .......|
|00000910| 02 00 00 00 00 00 f3 0b | 00 00 24 03 00 00 01 00 |........|..$.....|
|00000920| 00 00 02 00 00 00 00 00 | 62 13 00 00 28 03 00 00 |........|b...(...|
|00000930| 01 00 00 00 02 00 00 00 | 00 00 bf 0f 00 00 2c 03 |........|......,.|
|00000940| 00 00 01 00 00 00 02 00 | 00 00 00 00 d7 0f 00 00 |........|........|
|00000950| 30 03 00 00 01 00 00 00 | 02 00 00 00 00 00 f1 0f |0.......|........|
|00000960| 00 00 34 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..4.....|........|
|00000970| 14 10 00 00 38 03 00 00 | 01 00 00 00 02 00 00 00 |....8...|........|
|00000980| 00 00 2a 10 00 00 3c 03 | 00 00 01 00 00 00 02 00 |..*...<.|........|
|00000990| 00 00 00 00 c5 13 00 00 | 3c 03 00 00 01 00 00 00 |........|<.......|
|000009a0| 02 00 00 00 00 00 44 10 | 00 00 40 03 00 00 01 00 |......D.|..@.....|
|000009b0| 00 00 02 00 00 00 00 00 | 62 10 00 00 44 03 00 00 |........|b...D...|
|000009c0| 01 00 00 00 02 00 00 00 | 00 00 7b 10 00 00 48 03 |........|..{...H.|
|000009d0| 00 00 01 00 00 00 02 00 | 00 00 00 00 97 10 00 00 |........|........|
|000009e0| 4c 03 00 00 01 00 00 00 | 02 00 00 00 00 00 b5 10 |L.......|........|
|000009f0| 00 00 50 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..P.....|........|
|00000a00| cb 10 00 00 54 03 00 00 | 01 00 00 00 02 00 00 00 |....T...|........|
|00000a10| 00 00 e0 10 00 00 58 03 | 00 00 01 00 00 00 02 00 |......X.|........|
|00000a20| 00 00 00 00 fa 10 00 00 | 5c 03 00 00 01 00 00 00 |........|\.......|
|00000a30| 02 00 00 00 00 00 17 11 | 00 00 60 03 00 00 01 00 |........|..`.....|
|00000a40| 00 00 02 00 00 00 00 00 | 26 11 00 00 64 03 00 00 |........|&...d...|
|00000a50| 01 00 00 00 02 00 00 00 | 00 00 35 11 00 00 68 03 |........|..5...h.|
|00000a60| 00 00 01 00 00 00 02 00 | 00 00 00 00 a1 14 00 00 |........|........|
|00000a70| 6c 03 00 00 01 00 00 00 | 02 00 00 00 00 00 67 03 |l.......|......g.|
|00000a80| 00 00 1c 04 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000a90| b4 05 00 00 14 05 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000aa0| 00 00 bf 05 00 00 92 05 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000ab0| 00 00 00 00 cb 05 00 00 | a9 05 00 00 01 00 20 00 |........|...... .|
|00000ac0| 02 00 00 00 00 00 b9 06 | 00 00 06 07 00 00 01 00 |........|........|
|00000ad0| 20 00 02 00 00 00 00 00 | f2 06 00 00 14 07 00 00 | .......|........|
|00000ae0| 01 00 20 00 02 00 00 00 | 00 00 07 07 00 00 50 07 |.. .....|......P.|
|00000af0| 00 00 01 00 20 00 02 00 | 00 00 00 00 1c 07 00 00 |.... ...|........|
|00000b00| 80 07 00 00 01 00 20 00 | 02 00 00 00 00 00 86 07 |...... .|........|
|00000b10| 00 00 04 08 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000b20| 9c 07 00 00 76 08 00 00 | 01 00 20 00 02 00 00 00 |....v...|.. .....|
|00000b30| 00 00 b2 07 00 00 8c 08 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000b40| 00 00 00 00 c7 07 00 00 | ee 08 00 00 01 00 20 00 |........|...... .|
|00000b50| 02 00 00 00 00 00 db 07 | 00 00 9e 09 00 00 01 00 |........|........|
|00000b60| 20 00 02 00 00 00 00 00 | f6 07 00 00 d4 09 00 00 | .......|........|
|00000b70| 01 00 20 00 02 00 00 00 | 00 00 0d 08 00 00 f4 09 |.. .....|........|
|00000b80| 00 00 01 00 20 00 02 00 | 00 00 00 00 24 08 00 00 |.... ...|....$...|
|00000b90| 56 0a 00 00 01 00 20 00 | 02 00 00 00 00 00 3b 08 |V..... .|......;.|
|00000ba0| 00 00 d4 0a 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000bb0| 5b 08 00 00 b8 0b 00 00 | 01 00 20 00 02 00 00 00 |[.......|.. .....|
|00000bc0| 00 00 7c 08 00 00 04 0e | 00 00 01 00 20 00 02 00 |..|.....|.... ...|
|00000bd0| 00 00 00 00 91 08 00 00 | 4e 0f 00 00 01 00 20 00 |........|N..... .|
|00000be0| 02 00 00 00 00 00 a8 08 | 00 00 e7 10 00 00 01 00 |........|........|
|00000bf0| 20 00 02 00 00 00 00 00 | be 08 00 00 6a 11 00 00 | .......|....j...|
|00000c00| 01 00 20 00 02 00 00 00 | 00 00 d9 08 00 00 3a 12 |.. .....|......:.|
|00000c10| 00 00 01 00 20 00 02 00 | 00 00 00 00 f2 08 00 00 |.... ...|........|
|00000c20| 30 13 00 00 01 00 20 00 | 02 00 00 00 00 00 07 09 |0..... .|........|
|00000c30| 00 00 24 14 00 00 01 00 | 20 00 02 00 00 00 00 00 |..$.....| .......|
|00000c40| 1b 09 00 00 a8 16 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000c50| 00 00 2c 0c 00 00 64 18 | 00 00 01 00 20 00 02 00 |..,...d.|.... ...|
|00000c60| 00 00 00 00 3b 0c 00 00 | f0 19 00 00 01 00 20 00 |....;...|...... .|
|00000c70| 02 00 00 00 00 00 4f 0c | 00 00 90 1a 00 00 01 00 |......O.|........|
|00000c80| 20 00 02 00 00 00 00 00 | 61 0c 00 00 dc 1a 00 00 | .......|a.......|
|00000c90| 01 00 20 00 02 00 00 00 | 00 00 83 0c 00 00 c0 1b |.. .....|........|
|00000ca0| 00 00 01 00 20 00 02 00 | 00 00 00 00 bc 0c 00 00 |.... ...|........|
|00000cb0| e0 1b 00 00 01 00 20 00 | 02 00 00 00 00 00 db 0c |...... .|........|
|00000cc0| 00 00 00 1c 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000cd0| 23 0d 00 00 02 1c 00 00 | 01 00 20 00 02 00 00 00 |#.......|.. .....|
|00000ce0| 00 00 40 0d 00 00 3c 1c | 00 00 01 00 20 00 02 00 |..@...<.|.... ...|
|00000cf0| 00 00 00 00 5b 0d 00 00 | 50 21 00 00 01 00 20 00 |....[...|P!.... .|
|00000d00| 02 00 00 00 00 00 80 0d | 00 00 88 22 00 00 01 00 |........|..."....|
|00000d10| 20 00 02 00 00 00 00 00 | 95 0d 00 00 94 22 00 00 | .......|....."..|
|00000d20| 01 00 20 00 02 00 00 00 | 00 00 c4 0d 00 00 a0 22 |.. .....|......."|
|00000d30| 00 00 01 00 20 00 02 00 | 00 00 00 00 de 0d 00 00 |.... ...|........|
|00000d40| ac 22 00 00 01 00 20 00 | 02 00 00 00 00 00 09 0e |.".... .|........|
|00000d50| 00 00 b4 22 00 00 01 00 | 20 00 02 00 00 00 00 00 |..."....| .......|
|00000d60| 3c 0e 00 00 37 24 00 00 | 01 00 20 00 02 00 00 00 |<...7$..|.. .....|
|00000d70| 00 00 6d 0e 00 00 ac 24 | 00 00 01 00 20 00 02 00 |..m....$|.... ...|
|00000d80| 00 00 00 00 88 0e 00 00 | b8 24 00 00 01 00 20 00 |........|.$.... .|
|00000d90| 02 00 00 00 00 00 c3 0e | 00 00 c4 24 00 00 01 00 |........|...$....|
|00000da0| 20 00 02 00 00 00 00 00 | e3 0e 00 00 d0 24 00 00 | .......|.....$..|
|00000db0| 01 00 20 00 02 00 00 00 | 00 00 1a 0f 00 00 dc 24 |.. .....|.......$|
|00000dc0| 00 00 01 00 20 00 02 00 | 00 00 00 00 51 0f 00 00 |.... ...|....Q...|
|00000dd0| ef 24 00 00 01 00 20 00 | 02 00 00 00 00 00 15 0c |.$.... .|........|
|00000de0| 00 00 2a 25 00 00 01 00 | 20 00 02 00 00 00 00 00 |..*%....| .......|
|00000df0| 69 0f 00 00 76 25 00 00 | 01 00 20 00 02 00 00 00 |i...v%..|.. .....|
|00000e00| 00 00 7b 0f 00 00 ce 25 | 00 00 01 00 20 00 02 00 |..{....%|.... ...|
|00000e10| 00 00 00 00 81 0b 00 00 | 30 26 00 00 01 00 20 00 |........|0&.... .|
|00000e20| 02 00 00 00 00 00 0b 0c | 00 00 7e 26 00 00 01 00 |........|..~&....|
|00000e30| 20 00 02 00 00 00 00 00 | af 04 00 00 a0 26 00 00 | .......|.....&..|
|00000e40| 02 00 00 00 02 00 00 00 | 00 00 c1 09 00 00 c0 2a |........|.......*|
|00000e50| 00 00 02 00 00 00 02 00 | 00 00 00 00 6c 09 00 00 |........|....l...|
|00000e60| c4 2a 00 00 02 00 00 00 | 02 00 00 00 00 00 34 09 |.*......|......4.|
|00000e70| 00 00 c8 2a 00 00 02 00 | 00 00 02 00 00 00 00 00 |...*....|........|
|00000e80| 95 00 00 00 cc 2a 00 00 | 02 00 00 00 02 00 00 00 |.....*..|........|
|00000e90| 00 00 be 04 00 00 d0 2a | 00 00 02 00 00 00 02 00 |.......*|........|
|00000ea0| 00 00 00 00 4c 07 00 00 | d4 2a 00 00 02 00 00 00 |....L...|.*......|
|00000eb0| 02 00 00 00 00 00 31 07 | 00 00 d8 2a 00 00 02 00 |......1.|...*....|
|00000ec0| 00 00 02 00 00 00 00 00 | d1 09 00 00 dc 2a 00 00 |........|.....*..|
|00000ed0| 02 00 00 00 02 00 00 00 | 00 00 b6 09 00 00 e0 2a |........|.......*|
|00000ee0| 00 00 02 00 00 00 02 00 | 00 00 00 00 9e 09 00 00 |........|........|
|00000ef0| e4 2a 00 00 02 00 00 00 | 02 00 00 00 00 00 92 09 |.*......|........|
|00000f00| 00 00 e8 2a 00 00 02 00 | 00 00 02 00 00 00 00 00 |...*....|........|
|00000f10| 87 09 00 00 ec 2a 00 00 | 02 00 00 00 02 00 00 00 |.....*..|........|
|00000f20| 00 00 78 09 00 00 f0 2a | 00 00 02 00 00 00 02 00 |..x....*|........|
|00000f30| 00 00 00 00 4f 09 00 00 | f4 2a 00 00 02 00 00 00 |....O...|.*......|
|00000f40| 02 00 5f 73 50 74 72 00 | 00 00 f8 2a 00 00 02 00 |.._sPtr.|...*....|
|00000f50| 00 00 02 00 00 00 00 00 | 68 0b 00 00 fc 2a 00 00 |........|h....*..|
|00000f60| 02 00 00 00 02 00 00 00 | 00 00 47 0b 00 00 fd 2a |........|..G....*|
|00000f70| 00 00 02 00 00 00 02 00 | 00 00 00 00 24 0b 00 00 |........|....$...|
|00000f80| fe 2a 00 00 02 00 00 00 | 02 00 00 00 00 00 8c 0f |.*......|........|
|00000f90| 00 00 ff 2a 00 00 02 00 | 00 00 02 00 00 00 00 00 |...*....|........|
|00000fa0| 97 0b 00 00 00 2b 00 00 | 02 00 00 00 02 00 00 00 |.....+..|........|
|00000fb0| 00 00 ac 0f 00 00 04 2b | 00 00 02 00 00 00 02 00 |.......+|........|
|00000fc0| 00 00 00 00 ab 0b 00 00 | 20 2b 00 00 02 00 00 00 |........| +......|
|00000fd0| 02 00 00 00 00 00 f1 0a | 00 00 a0 2b 00 00 02 00 |........|...+....|
|00000fe0| 00 00 02 00 00 00 00 00 | cd 0b 00 00 20 2c 00 00 |........|.... ,..|
|00000ff0| 02 00 00 00 02 00 00 00 | 00 00 07 0b 00 00 a0 2c |........|.......,|
|00001000| 00 00 02 00 00 00 02 00 | 00 00 00 00 d9 0a 00 00 |........|........|
|00001010| 20 2d 00 00 02 00 00 00 | 02 00 5f 73 79 73 4d 64 | -......|.._sysMd|
|00001020| 6c 00 98 2d 00 00 02 00 | 00 00 02 00 00 00 00 00 |l..-....|........|
|00001030| e9 0b 00 00 a0 2d 00 00 | 02 00 00 00 02 00 00 00 |.....-..|........|
|00001040| 00 00 da 0b 00 00 20 2e | 00 00 02 00 00 00 02 00 |...... .|........|
|00001050| 00 00 00 00 9e 0f 00 00 | 84 2e 00 00 02 00 00 00 |........|........|
|00001060| 02 00 00 00 00 00 bd 0b | 00 00 a0 2e 00 00 02 00 |........|........|
|00001070| 00 00 02 00 00 00 00 00 | 5a 0a 00 00 18 2f 00 00 |........|Z..../..|
|00001080| 02 00 00 00 02 00 00 00 | 00 00 46 0a 00 00 1c 2f |........|..F..../|
|00001090| 00 00 02 00 00 00 02 00 | 00 00 00 00 34 0a 00 00 |........|....4...|
|000010a0| 20 2f 00 00 02 00 00 00 | 02 00 00 00 00 00 26 0a | /......|......&.|
|000010b0| 00 00 24 2f 00 00 02 00 | 00 00 02 00 00 00 00 00 |..$/....|........|
|000010c0| 15 0a 00 00 28 2f 00 00 | 02 00 00 00 02 00 00 00 |....(/..|........|
|000010d0| 00 00 fe 09 00 00 2c 2f | 00 00 02 00 00 00 02 00 |......,/|........|
|000010e0| 00 00 00 00 f3 09 00 00 | 40 2f 00 00 02 00 00 00 |........|@/......|
|000010f0| 02 00 00 00 00 00 e1 09 | 00 00 7c 34 00 00 02 00 |........|..|4....|
|00001100| 00 00 02 00 00 00 00 00 | 5d 07 00 00 80 34 00 00 |........|]....4..|
|00001110| 02 00 00 00 02 00 00 00 | 00 00 d9 04 00 00 a0 34 |........|.......4|
|00001120| 00 00 02 00 00 00 02 00 | 00 00 00 00 c9 04 00 00 |........|........|
|00001130| c0 36 00 00 02 00 00 00 | 02 00 00 00 00 00 39 00 |.6......|......9.|
|00001140| 00 00 35 37 00 00 03 00 | 20 00 02 00 00 00 00 00 |..57....| .......|
|00001150| 61 01 00 00 ee 37 00 00 | 03 00 20 00 02 00 00 00 |a....7..|.. .....|
|00001160| 00 00 1d 01 00 00 f5 37 | 00 00 03 00 20 00 02 00 |.......7|.... ...|
|00001170| 00 00 00 00 ad 00 00 00 | 5d 38 00 00 03 00 20 00 |........|]8.... .|
|00001180| 02 00 00 00 00 00 78 01 | 00 00 a6 38 00 00 03 00 |......x.|...8....|
|00001190| 20 00 02 00 00 00 00 00 | 8c 01 00 00 d0 38 00 00 | .......|.....8..|
|000011a0| 03 00 20 00 02 00 00 00 | 00 00 a1 01 00 00 ec 38 |.. .....|.......8|
|000011b0| 00 00 03 00 20 00 02 00 | 00 00 00 00 4f 02 00 00 |.... ...|....O...|
|000011c0| 04 39 00 00 03 00 20 00 | 02 00 00 00 00 00 5c 02 |.9.... .|......\.|
|000011d0| 00 00 3e 39 00 00 03 00 | 20 00 02 00 00 00 00 00 |..>9....| .......|
|000011e0| 75 02 00 00 88 39 00 00 | 03 00 20 00 02 00 00 00 |u....9..|.. .....|
|000011f0| 00 00 91 02 00 00 42 3a | 00 00 03 00 20 00 02 00 |......B:|.... ...|
|00001200| 00 00 00 00 ac 02 00 00 | 12 3b 00 00 03 00 20 00 |........|.;.... .|
|00001210| 02 00 00 00 00 00 cc 02 | 00 00 6c 3b 00 00 03 00 |........|..l;....|
|00001220| 20 00 02 00 00 00 00 00 | ea 02 00 00 6c 3c 00 00 | .......|....l<..|
|00001230| 03 00 20 00 02 00 00 00 | 00 00 08 03 00 00 66 3d |.. .....|......f=|
|00001240| 00 00 03 00 20 00 02 00 | 00 00 00 00 2c 03 00 00 |.... ...|....,...|
|00001250| f2 3d 00 00 03 00 20 00 | 02 00 00 00 00 00 46 03 |.=.... .|......F.|
|00001260| 00 00 94 3f 00 00 03 00 | 20 00 02 00 00 00 00 00 |...?....| .......|
|00001270| a9 03 00 00 e6 40 00 00 | 03 00 20 00 02 00 00 00 |.....@..|.. .....|
|00001280| 00 00 bc 03 00 00 26 41 | 00 00 03 00 20 00 02 00 |......&A|.... ...|
|00001290| 00 00 00 00 d2 03 00 00 | d8 41 00 00 03 00 20 00 |........|.A.... .|
|000012a0| 02 00 00 00 00 00 e7 03 | 00 00 30 43 00 00 03 00 |........|..0C....|
|000012b0| 20 00 02 00 00 00 00 00 | 01 04 00 00 74 44 00 00 | .......|....tD..|
|000012c0| 03 00 20 00 02 00 00 00 | 00 00 15 04 00 00 c0 46 |.. .....|.......F|
|000012d0| 00 00 03 00 20 00 02 00 | 00 00 00 00 2e 04 00 00 |.... ...|........|
|000012e0| c5 48 00 00 03 00 20 00 | 02 00 00 00 00 00 3f 04 |.H.... .|......?.|
|000012f0| 00 00 24 4a 00 00 03 00 | 20 00 02 00 00 00 00 00 |..$J....| .......|
|00001300| 4d 04 00 00 54 4a 00 00 | 03 00 20 00 02 00 00 00 |M...TJ..|.. .....|
|00001310| 00 00 5f 04 00 00 66 4a | 00 00 03 00 20 00 02 00 |.._...fJ|.... ...|
|00001320| 00 00 00 00 71 04 00 00 | 74 4a 00 00 03 00 20 00 |....q...|tJ.... .|
|00001330| 02 00 00 00 00 00 96 03 | 00 00 8e 4b 00 00 03 00 |........|...K....|
|00001340| 20 00 02 00 00 00 00 00 | 86 04 00 00 8d 4e 00 00 | .......|.....N..|
|00001350| 03 00 20 00 02 00 00 00 | 00 00 9b 04 00 00 46 50 |.. .....|......FP|
|00001360| 00 00 03 00 20 00 02 00 | 00 00 00 00 5b 11 00 00 |.... ...|....[...|
|00001370| e0 50 00 00 04 00 00 00 | 02 00 00 00 00 00 88 14 |.P......|........|
|00001380| 00 00 f4 50 00 00 04 00 | 00 00 02 00 65 6e 64 00 |...P....|....end.|
|00001390| 00 00 00 00 00 5d 00 00 | fe ff 00 00 02 00 bb 14 |.....]..|........|
|000013a0| 00 00 5f 44 72 69 76 65 | 72 45 6e 74 72 79 00 5f |.._Drive|rEntry._|
|000013b0| 48 4b 45 59 32 52 65 67 | 69 73 74 65 72 4b 65 79 |HKEY2Reg|isterKey|
|000013c0| 40 34 00 5f 52 65 67 69 | 73 74 65 72 4b 65 79 32 |@4._Regi|sterKey2|
|000013d0| 48 4b 45 59 40 34 00 5f | 52 65 67 4f 70 65 6e 4b |HKEY@4._|RegOpenK|
|000013e0| 65 79 40 31 32 00 5f 52 | 65 67 51 75 65 72 79 56 |ey@12._R|egQueryV|
|000013f0| 61 6c 75 65 40 31 36 00 | 5f 77 63 73 32 73 74 72 |alue@16.|_wcs2str|
|00001400| 40 31 32 00 5f 44 72 69 | 76 65 72 53 65 74 74 69 |@12._Dri|verSetti|
|00001410| 6e 67 43 72 65 61 74 65 | 40 34 00 5f 44 72 69 76 |ngCreate|@4._Driv|
|00001420| 65 72 53 65 74 74 69 6e | 67 44 65 73 74 72 6f 79 |erSettin|gDestroy|
|00001430| 40 30 00 5f 61 63 74 44 | 72 69 76 65 72 00 5f 68 |@0._actD|river._h|
|00001440| 4b 65 79 43 72 65 61 74 | 65 64 00 5f 6f 61 44 72 |KeyCreat|ed._oaDr|
|00001450| 76 46 72 65 65 53 61 66 | 65 4d 65 6d 55 6e 69 40 |vFreeSaf|eMemUni@|
|00001460| 34 00 5f 5f 69 6d 70 5f | 5f 52 74 6c 46 72 65 65 |4.__imp_|_RtlFree|
|00001470| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 40 34 00 |UnicodeS|tring@4.|
|00001480| 5f 5f 69 6d 70 5f 5f 5a | 77 4f 70 65 6e 4b 65 79 |__imp__Z|wOpenKey|
|00001490| 40 31 32 00 5f 5f 69 6d | 70 5f 5f 52 74 6c 41 6e |@12.__im|p__RtlAn|
|000014a0| 73 69 53 74 72 69 6e 67 | 54 6f 55 6e 69 63 6f 64 |siString|ToUnicod|
|000014b0| 65 53 74 72 69 6e 67 40 | 31 32 00 5f 6f 61 44 72 |eString@|12._oaDr|
|000014c0| 76 41 6c 6c 6f 63 53 61 | 66 65 4d 65 6d 55 6e 69 |vAllocSa|feMemUni|
|000014d0| 40 31 36 00 5f 5f 69 6d | 70 5f 5f 5a 77 51 75 65 |@16.__im|p__ZwQue|
|000014e0| 72 79 56 61 6c 75 65 4b | 65 79 40 32 34 00 5f 5f |ryValueK|ey@24.__|
|000014f0| 69 6d 70 5f 5f 5a 77 43 | 6c 6f 73 65 40 34 00 5f |imp__ZwC|lose@4._|
|00001500| 6f 61 44 72 76 49 6e 69 | 74 53 61 66 65 4d 65 6d |oaDrvIni|tSafeMem|
|00001510| 55 6e 69 40 30 00 5f 6f | 61 44 72 76 43 72 65 61 |Uni@0._o|aDrvCrea|
|00001520| 74 65 4d 75 74 65 78 40 | 34 00 5f 6f 61 44 72 76 |teMutex@|4._oaDrv|
|00001530| 57 61 69 74 46 6f 72 4d | 75 74 65 78 40 34 00 5f |WaitForM|utex@4._|
|00001540| 6f 61 44 72 76 52 65 6c | 65 61 73 65 4d 75 74 65 |oaDrvRel|easeMute|
|00001550| 78 40 34 00 5f 6f 61 44 | 72 76 46 72 65 65 4d 75 |x@4._oaD|rvFreeMu|
|00001560| 74 65 78 40 34 00 5f 5f | 69 6d 70 5f 5f 45 78 41 |tex@4.__|imp__ExA|
|00001570| 6c 6c 6f 63 61 74 65 50 | 6f 6f 6c 57 69 74 68 54 |llocateP|oolWithT|
|00001580| 61 67 40 31 32 00 5f 5f | 69 6d 70 5f 5f 45 78 46 |ag@12.__|imp__ExF|
|00001590| 72 65 65 50 6f 6f 6c 40 | 34 00 5f 5f 69 6d 70 5f |reePool@|4.__imp_|
|000015a0| 5f 4b 65 49 6e 69 74 69 | 61 6c 69 7a 65 4d 75 74 |_KeIniti|alizeMut|
|000015b0| 65 78 40 38 00 5f 5f 69 | 6d 70 5f 5f 4b 65 57 61 |ex@8.__i|mp__KeWa|
|000015c0| 69 74 46 6f 72 53 69 6e | 67 6c 65 4f 62 6a 65 63 |itForSin|gleObjec|
|000015d0| 74 40 32 30 00 5f 5f 69 | 6d 70 5f 5f 4b 65 52 65 |t@20.__i|mp__KeRe|
|000015e0| 6c 65 61 73 65 4d 75 74 | 65 78 40 38 00 5f 46 69 |leaseMut|ex@8._Fi|
|000015f0| 6e 64 43 68 61 72 50 40 | 38 00 5f 46 6f 6c 64 65 |ndCharP@|8._Folde|
|00001600| 72 47 75 61 72 64 53 74 | 6f 72 65 5f 49 6e 69 74 |rGuardSt|ore_Init|
|00001610| 40 34 00 5f 46 6f 6c 64 | 65 72 47 75 61 72 64 53 |@4._Fold|erGuardS|
|00001620| 74 6f 72 65 5f 52 65 6c | 65 61 73 65 40 34 00 5f |tore_Rel|ease@4._|
|00001630| 46 6f 6c 64 65 72 47 75 | 61 72 64 53 74 6f 72 65 |FolderGu|ardStore|
|00001640| 5f 53 74 6f 72 65 40 31 | 36 00 5f 46 6f 6c 64 65 |_Store@1|6._Folde|
|00001650| 72 47 75 61 72 64 53 74 | 6f 72 65 5f 53 74 6f 72 |rGuardSt|ore_Stor|
|00001660| 65 43 6f 6e 73 74 40 31 | 36 00 5f 46 6f 6c 64 65 |eConst@1|6._Folde|
|00001670| 72 47 75 61 72 64 53 74 | 6f 72 65 5f 4d 61 6e 61 |rGuardSt|ore_Mana|
|00001680| 67 65 41 6c 6c 40 34 00 | 5f 46 6f 6c 64 65 72 47 |geAll@4.|_FolderG|
|00001690| 75 61 72 64 53 74 6f 72 | 65 5f 4c 6f 77 65 72 46 |uardStor|e_LowerF|
|000016a0| 69 6e 64 40 38 00 5f 46 | 6f 6c 64 65 72 47 75 61 |ind@8._F|olderGua|
|000016b0| 72 64 53 74 6f 72 65 5f | 43 61 74 63 68 50 6f 69 |rdStore_|CatchPoi|
|000016c0| 6e 74 54 65 73 74 40 31 | 32 00 5f 46 6f 6c 64 65 |ntTest@1|2._Folde|
|000016d0| 72 47 75 61 72 64 53 74 | 6f 72 65 5f 46 69 6e 64 |rGuardSt|ore_Find|
|000016e0| 40 31 36 00 5f 46 6f 6c | 64 65 72 47 75 61 72 64 |@16._Fol|derGuard|
|000016f0| 53 74 6f 72 65 5f 46 69 | 6e 64 5f 53 75 62 4b 65 |Store_Fi|nd_SubKe|
|00001700| 79 40 31 32 00 5f 46 6f | 6c 64 65 72 47 75 61 72 |y@12._Fo|lderGuar|
|00001710| 64 53 74 6f 72 65 5f 46 | 69 6e 64 5f 55 70 70 65 |dStore_F|ind_Uppe|
|00001720| 72 40 31 32 00 5f 5f 69 | 6d 70 5f 5f 5f 73 74 72 |r@12.__i|mp___str|
|00001730| 75 70 72 00 5f 48 4b 65 | 79 53 74 6f 72 65 5f 46 |upr._HKe|yStore_F|
|00001740| 69 6e 64 40 31 36 00 5f | 47 75 61 72 64 53 74 6f |ind@16._|GuardSto|
|00001750| 72 65 5f 49 6e 69 74 40 | 34 00 5f 47 75 61 72 64 |re_Init@|4._Guard|
|00001760| 53 74 6f 72 65 5f 52 65 | 6c 65 61 73 65 40 34 00 |Store_Re|lease@4.|
|00001770| 5f 47 75 61 72 64 53 74 | 6f 72 65 5f 53 74 6f 72 |_GuardSt|ore_Stor|
|00001780| 65 40 31 36 00 5f 47 75 | 61 72 64 53 74 6f 72 65 |e@16._Gu|ardStore|
|00001790| 5f 53 74 6f 72 65 43 6f | 6e 73 74 40 31 36 00 5f |_StoreCo|nst@16._|
|000017a0| 47 75 61 72 64 53 74 6f | 72 65 5f 46 69 6e 64 40 |GuardSto|re_Find@|
|000017b0| 31 32 00 5f 47 75 61 72 | 64 53 74 6f 72 65 5f 55 |12._Guar|dStore_U|
|000017c0| 70 70 65 72 46 69 6e 64 | 40 31 32 00 5f 47 65 74 |pperFind|@12._Get|
|000017d0| 52 6f 6f 74 48 61 6e 64 | 6c 65 40 38 00 5f 47 65 |RootHand|le@8._Ge|
|000017e0| 74 50 6f 69 6e 74 65 72 | 40 34 00 5f 52 65 6c 65 |tPointer|@4._Rele|
|000017f0| 61 73 65 50 6f 69 6e 74 | 65 72 40 34 00 5f 48 4b |asePoint|er@4._HK|
|00001800| 65 79 53 74 6f 72 65 5f | 49 6e 69 74 40 30 00 5f |eyStore_|Init@0._|
|00001810| 48 4b 65 79 53 74 6f 72 | 65 5f 52 65 6c 65 61 73 |HKeyStor|e_Releas|
|00001820| 65 40 30 00 5f 48 4b 65 | 79 53 74 6f 72 65 5f 49 |e@0._HKe|yStore_I|
|00001830| 6e 73 65 72 74 40 31 36 | 00 5f 48 4b 65 79 53 74 |nsert@16|._HKeySt|
|00001840| 6f 72 65 5f 52 65 6d 6f | 76 65 40 34 00 5f 6b 6e |ore_Remo|ve@4._kn|
|00001850| 6f 77 6e 52 6f 6f 74 4b | 65 79 73 00 5f 68 4b 65 |ownRootK|eys._hKe|
|00001860| 79 53 74 6f 72 65 00 5f | 68 4b 65 79 53 74 6f 72 |yStore._|hKeyStor|
|00001870| 65 4d 75 74 65 78 00 5f | 6c 61 73 74 4b 6e 6f 77 |eMutex._|lastKnow|
|00001880| 6e 4b 5f 43 55 52 52 45 | 4e 54 5f 55 53 45 52 4e |nK_CURRE|NT_USERN|
|00001890| 61 6d 65 00 5f 5f 69 6d | 70 5f 5f 73 74 72 6e 63 |ame.__im|p__strnc|
|000018a0| 6d 70 00 5f 5f 69 6d 70 | 5f 5f 4f 62 52 65 66 65 |mp.__imp|__ObRefe|
|000018b0| 72 65 6e 63 65 4f 62 6a | 65 63 74 42 79 48 61 6e |renceObj|ectByHan|
|000018c0| 64 6c 65 40 32 34 00 5f | 5f 69 6d 70 5f 40 4f 62 |dle@24._|_imp_@Ob|
|000018d0| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|000018e0| 63 74 40 34 00 5f 5f 69 | 6d 70 5f 5f 52 74 6c 46 |ct@4.__i|mp__RtlF|
|000018f0| 72 65 65 41 6e 73 69 53 | 74 72 69 6e 67 40 34 00 |reeAnsiS|tring@4.|
|00001900| 5f 5f 69 6d 70 5f 5f 73 | 74 72 6e 63 61 74 00 5f |__imp__s|trncat._|
|00001910| 5f 69 6d 70 5f 5f 52 74 | 6c 55 6e 69 63 6f 64 65 |_imp__Rt|lUnicode|
|00001920| 53 74 72 69 6e 67 54 6f | 41 6e 73 69 53 74 72 69 |StringTo|AnsiStri|
|00001930| 6e 67 40 31 32 00 5f 5f | 69 6d 70 5f 5f 4f 62 51 |ng@12.__|imp__ObQ|
|00001940| 75 65 72 79 4e 61 6d 65 | 53 74 72 69 6e 67 40 31 |ueryName|String@1|
|00001950| 36 00 5f 6c 70 63 4f 70 | 65 6e 40 38 00 5f 6c 70 |6._lpcOp|en@8._lp|
|00001960| 63 43 6c 6f 73 65 40 34 | 00 5f 6c 70 63 53 65 6e |cClose@4|._lpcSen|
|00001970| 64 4d 65 73 73 61 67 65 | 40 32 38 00 5f 4d 4d 50 |dMessage|@28._MMP|
|00001980| 54 45 5f 4c 49 53 54 00 | 5f 4d 4d 50 54 45 5f 50 |TE_LIST.|_MMPTE_P|
|00001990| 52 4f 54 4f 54 59 50 45 | 00 5f 48 41 52 44 57 41 |ROTOTYPE|._HARDWA|
|000019a0| 52 45 5f 50 54 45 5f 58 | 38 36 00 5f 4d 4d 50 54 |RE_PTE_X|86._MMPT|
|000019b0| 45 5f 48 41 52 44 57 41 | 52 45 00 5f 4d 4d 50 54 |E_HARDWA|RE._MMPT|
|000019c0| 45 5f 54 52 41 4e 53 49 | 54 49 4f 4e 00 5f 4d 4d |E_TRANSI|TION._MM|
|000019d0| 50 54 45 5f 53 55 42 53 | 45 43 54 49 4f 4e 00 5f |PTE_SUBS|ECTION._|
|000019e0| 4d 4d 50 54 45 5f 53 4f | 46 54 57 41 52 45 00 5f |MMPTE_SO|FTWARE._|
|000019f0| 5f 69 6d 70 5f 5f 5a 77 | 43 6f 6e 6e 65 63 74 50 |_imp__Zw|ConnectP|
|00001a00| 6f 72 74 40 33 32 00 5f | 5f 69 6d 70 5f 5f 52 74 |ort@32._|_imp__Rt|
|00001a10| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|00001a20| 6e 67 40 38 00 5f 5f 69 | 6d 70 5f 5f 4e 74 43 6c |ng@8.__i|mp__NtCl|
|00001a30| 6f 73 65 40 34 00 5f 5f | 69 6d 70 5f 5f 5a 77 52 |ose@4.__|imp__ZwR|
|00001a40| 65 71 75 65 73 74 57 61 | 69 74 52 65 70 6c 79 50 |equestWa|itReplyP|
|00001a50| 6f 72 74 40 31 32 00 5f | 49 6e 69 74 4f 61 53 65 |ort@12._|InitOaSe|
|00001a60| 72 76 65 72 43 6f 6d 75 | 6e 69 63 61 74 69 6f 6e |rverComu|nication|
|00001a70| 40 30 00 5f 43 6c 6f 73 | 65 4f 61 53 65 72 76 65 |@0._Clos|eOaServe|
|00001a80| 72 43 6f 6d 75 6e 69 63 | 61 74 69 6f 6e 40 30 00 |rComunic|ation@0.|
|00001a90| 5f 57 61 69 74 46 6f 72 | 4f 61 53 65 72 76 65 72 |_WaitFor|OaServer|
|00001aa0| 4e 74 40 34 00 5f 52 65 | 6c 65 61 73 65 4f 61 53 |Nt@4._Re|leaseOaS|
|00001ab0| 65 72 76 65 72 4e 74 40 | 30 00 5f 53 65 6e 64 54 |erverNt@|0._SendT|
|00001ac0| 6f 4f 61 53 65 72 76 65 | 72 4e 74 40 32 30 00 5f |oOaServe|rNt@20._|
|00001ad0| 4f 61 53 65 72 76 65 72 | 43 6f 6d 75 6e 69 63 61 |OaServer|Comunica|
|00001ae0| 74 69 6f 6e 4d 75 74 65 | 78 00 5f 4f 61 53 65 72 |tionMute|x._OaSer|
|00001af0| 76 65 72 4e 74 43 6f 75 | 6e 74 00 5f 4f 61 53 65 |verNtCou|nt._OaSe|
|00001b00| 72 76 65 72 50 6f 72 74 | 49 6e 66 6f 00 5f 43 72 |rverPort|Info._Cr|
|00001b10| 65 61 74 65 4f 61 4c 6f | 67 41 63 74 69 6f 6e 32 |eateOaLo|gAction2|
|00001b20| 40 32 34 00 5f 43 72 65 | 61 74 65 4f 61 4c 6f 67 |@24._Cre|ateOaLog|
|00001b30| 41 63 74 69 6f 6e 40 31 | 36 00 5f 52 65 6c 65 61 |Action@1|6._Relea|
|00001b40| 73 65 4f 61 4c 6f 67 41 | 63 74 69 6f 6e 40 34 00 |seOaLogA|ction@4.|
|00001b50| 5f 47 65 74 50 61 74 68 | 41 6e 64 48 61 6e 64 6c |_GetPath|AndHandl|
|00001b60| 65 40 31 36 00 5f 53 61 | 76 65 54 6f 44 62 67 41 |e@16._Sa|veToDbgA|
|00001b70| 63 63 65 73 73 40 31 32 | 00 5f 6f 61 41 6c 6c 6f |ccess@12|._oaAllo|
|00001b80| 63 61 74 65 56 69 72 74 | 75 61 6c 4d 65 6d 6f 72 |cateVirt|ualMemor|
|00001b90| 79 40 34 00 5f 6f 61 46 | 72 65 65 56 69 72 74 75 |y@4._oaF|reeVirtu|
|00001ba0| 61 6c 4d 65 6d 6f 72 79 | 40 34 00 5f 46 69 6e 64 |alMemory|@4._Find|
|00001bb0| 49 6e 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 40 |InUnicod|eString@|
|00001bc0| 38 00 5f 43 72 65 61 74 | 65 55 6e 69 63 6f 64 65 |8._Creat|eUnicode|
|00001bd0| 53 74 72 69 6e 67 40 34 | 00 5f 43 72 65 61 74 65 |String@4|._Create|
|00001be0| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 46 72 6f |UnicodeS|tringFro|
|00001bf0| 6d 57 43 48 41 52 40 34 | 00 5f 43 72 65 61 74 65 |mWCHAR@4|._Create|
|00001c00| 52 65 67 69 73 74 72 79 | 50 72 6f 74 65 63 74 69 |Registry|Protecti|
|00001c10| 6f 6e 50 61 74 68 40 31 | 32 00 5f 6f 61 48 6f 6f |onPath@1|2._oaHoo|
|00001c20| 6b 52 65 67 4f 70 65 6e | 4b 65 79 40 31 32 00 5f |kRegOpen|Key@12._|
|00001c30| 6f 61 48 6f 6f 6b 52 65 | 67 43 72 65 61 74 65 4b |oaHookRe|gCreateK|
|00001c40| 65 79 40 32 38 00 5f 6f | 61 48 6f 6f 6b 52 65 67 |ey@28._o|aHookReg|
|00001c50| 44 65 6c 65 74 65 4b 65 | 79 40 34 00 5f 6f 61 48 |DeleteKe|y@4._oaH|
|00001c60| 6f 6f 6b 52 65 67 44 65 | 6c 65 74 65 56 61 6c 75 |ookRegDe|leteValu|
|00001c70| 65 4b 65 79 40 38 00 5f | 6f 61 48 6f 6f 6b 52 65 |eKey@8._|oaHookRe|
|00001c80| 67 53 65 74 56 61 6c 75 | 65 4b 65 79 40 32 34 00 |gSetValu|eKey@24.|
|00001c90| 5f 6f 61 48 6f 6f 6b 52 | 65 67 43 6c 6f 73 65 4b |_oaHookR|egCloseK|
|00001ca0| 65 79 40 34 00 5f 73 65 | 74 4b 65 65 70 65 72 53 |ey@4._se|tKeeperS|
|00001cb0| 65 74 74 69 6e 67 40 30 | 00 5f 53 61 76 65 41 6e |etting@0|._SaveAn|
|00001cc0| 64 53 65 6e 64 4d 6f 6e | 41 63 74 69 6f 6e 40 32 |dSendMon|Action@2|
|00001cd0| 30 00 5f 73 70 65 63 69 | 61 6c 50 72 6f 74 65 63 |0._speci|alProtec|
|00001ce0| 74 53 74 6f 72 65 4c 61 | 75 6e 63 68 00 5f 69 73 |tStoreLa|unch._is|
|00001cf0| 53 70 65 63 69 61 6c 50 | 72 6f 74 65 63 74 53 74 |SpecialP|rotectSt|
|00001d00| 6f 72 65 41 63 74 69 76 | 65 00 5f 64 62 67 52 65 |oreActiv|e._dbgRe|
|00001d10| 67 50 72 6f 74 00 5f 6b | 65 65 70 65 72 43 6f 6e |gProt._k|eeperCon|
|00001d20| 74 65 6e 74 00 5f 6b 65 | 65 70 65 72 4b 65 79 00 |tent._ke|eperKey.|
|00001d30| 5f 6b 65 65 70 65 72 50 | 61 74 68 00 5f 61 63 63 |_keeperP|ath._acc|
|00001d40| 65 73 73 44 65 6e 69 65 | 64 4f 63 63 75 72 65 6e |essDenie|dOccuren|
|00001d50| 63 65 64 00 5f 6b 65 65 | 70 65 72 53 65 74 00 5f |ced._kee|perSet._|
|00001d60| 6f 61 52 65 67 4d 67 72 | 41 63 74 69 76 65 00 5f |oaRegMgr|Active._|
|00001d70| 64 62 67 41 63 63 65 73 | 73 53 74 61 74 65 00 5f |dbgAcces|sState._|
|00001d80| 72 65 61 6c 52 65 67 44 | 65 6c 65 74 65 4b 65 79 |realRegD|eleteKey|
|00001d90| 00 5f 64 62 67 41 63 63 | 65 73 73 00 5f 72 65 61 |._dbgAcc|ess._rea|
|00001da0| 6c 52 65 67 44 65 6c 65 | 74 65 56 61 6c 75 65 4b |lRegDele|teValueK|
|00001db0| 65 79 00 5f 72 65 61 6c | 52 65 67 43 6c 6f 73 65 |ey._real|RegClose|
|00001dc0| 4b 65 79 00 5f 6b 65 65 | 70 65 72 48 61 6e 64 6c |Key._kee|perHandl|
|00001dd0| 65 00 5f 72 65 61 6c 52 | 65 67 43 72 65 61 74 65 |e._realR|egCreate|
|00001de0| 4b 65 79 00 5f 72 65 61 | 6c 52 65 67 53 65 74 56 |Key._rea|lRegSetV|
|00001df0| 61 6c 75 65 4b 65 79 00 | 5f 72 65 61 6c 52 65 67 |alueKey.|_realReg|
|00001e00| 4f 70 65 6e 4b 65 79 00 | 5f 5f 69 6d 70 5f 5f 5a |OpenKey.|__imp__Z|
|00001e10| 77 41 6c 6c 6f 63 61 74 | 65 56 69 72 74 75 61 6c |wAllocat|eVirtual|
|00001e20| 4d 65 6d 6f 72 79 40 32 | 34 00 5f 5f 69 6d 70 5f |Memory@2|4.__imp_|
|00001e30| 5f 5a 77 46 72 65 65 56 | 69 72 74 75 61 6c 4d 65 |_ZwFreeV|irtualMe|
|00001e40| 6d 6f 72 79 40 31 36 00 | 5f 5f 69 6d 70 5f 5f 77 |mory@16.|__imp__w|
|00001e50| 63 73 6c 65 6e 00 5f 5f | 69 6d 70 5f 5f 52 74 6c |cslen.__|imp__Rtl|
|00001e60| 55 70 63 61 73 65 55 6e | 69 63 6f 64 65 53 74 72 |UpcaseUn|icodeStr|
|00001e70| 69 6e 67 40 31 32 00 5f | 72 65 67 69 73 74 72 79 |ing@12._|registry|
|00001e80| 4e 6f 50 72 6f 74 65 63 | 74 53 74 6f 72 65 00 5f |NoProtec|tStore._|
|00001e90| 72 65 67 69 73 74 72 79 | 50 72 6f 74 65 63 74 53 |registry|ProtectS|
|00001ea0| 74 6f 72 65 00 5f 72 65 | 67 69 73 74 72 79 53 70 |tore._re|gistrySp|
|00001eb0| 65 63 69 61 6c 50 72 6f | 74 65 63 74 53 74 6f 72 |ecialPro|tectStor|
|00001ec0| 65 00 5f 69 73 52 65 67 | 69 73 74 72 79 50 72 6f |e._isReg|istryPro|
|00001ed0| 74 65 63 74 56 61 6c 69 | 64 46 6f 72 77 61 72 64 |tectVali|dForward|
|00001ee0| 50 61 74 68 00 5f 72 65 | 67 69 73 74 72 79 50 72 |Path._re|gistryPr|
|00001ef0| 6f 74 65 63 74 69 6f 6e | 46 6f 72 63 65 49 6e 61 |otection|ForceIna|
|00001f00| 63 74 69 76 65 00 5f 69 | 73 52 65 67 69 73 74 72 |ctive._i|sRegistr|
|00001f10| 79 50 72 6f 74 65 63 74 | 41 63 74 69 76 65 00 5f |yProtect|Active._|
|00001f20| 49 73 4d 6f 6e 69 74 6f | 72 65 64 50 72 6f 63 65 |IsMonito|redProce|
|00001f30| 73 73 40 30 00 5f 69 73 | 4d 6f 6e 69 74 6f 72 69 |ss@0._is|Monitori|
|00001f40| 6e 67 41 63 74 69 76 65 | 00 5f 75 70 70 65 72 46 |ngActive|._upperF|
|00001f50| 6f 6c 64 65 72 53 74 6f | 72 65 00 5f 73 75 62 46 |olderSto|re._subF|
|00001f60| 6f 6c 64 65 72 53 74 6f | 72 65 00 5f 66 6f 6c 64 |olderSto|re._fold|
|00001f70| 65 72 53 74 6f 72 65 00 | 5f 6b 65 79 55 70 70 65 |erStore.|_keyUppe|
|00001f80| 72 53 74 6f 72 65 00 5f | 6b 65 79 53 74 6f 72 65 |rStore._|keyStore|
|00001f90| 00 5f 5f 69 6d 70 5f 5f | 5a 77 53 65 74 56 61 6c |.__imp__|ZwSetVal|
|00001fa0| 75 65 4b 65 79 40 32 34 | 00 5f 44 62 67 50 72 69 |ueKey@24|._DbgPri|
|00001fb0| 6e 74 00 5f 47 65 74 50 | 72 6f 63 65 73 73 4e 61 |nt._GetP|rocessNa|
|00001fc0| 6d 65 50 43 68 61 72 40 | 34 00 5f 44 72 69 76 65 |mePChar@|4._Drive|
|00001fd0| 72 45 6e 74 72 79 40 38 | 00 5f 6f 61 52 65 67 44 |rEntry@8|._oaRegD|
|00001fe0| 4e 74 44 69 73 70 61 74 | 63 68 40 38 00 5f 6f 61 |NtDispat|ch@8._oa|
|00001ff0| 52 65 67 4d 67 72 55 6e | 6c 6f 61 64 40 34 00 5f |RegMgrUn|load@4._|
|00002000| 48 6f 6f 6b 52 65 67 69 | 73 74 72 79 40 30 00 5f |HookRegi|stry@0._|
|00002010| 55 6e 68 6f 6f 6b 52 65 | 67 69 73 74 72 79 40 30 |UnhookRe|gistry@0|
|00002020| 00 5f 49 6e 69 74 52 65 | 67 69 73 74 72 79 50 72 |._InitRe|gistryPr|
|00002030| 6f 74 65 63 74 53 74 6f | 72 65 40 30 00 5f 41 70 |otectSto|re@0._Ap|
|00002040| 70 6c 79 52 65 67 69 73 | 74 72 79 50 72 6f 74 65 |plyRegis|tryProte|
|00002050| 63 74 53 74 6f 72 65 40 | 30 00 5f 44 65 73 74 72 |ctStore@|0._Destr|
|00002060| 6f 79 52 65 67 69 73 74 | 72 79 50 72 6f 74 65 63 |oyRegist|ryProtec|
|00002070| 74 53 74 6f 72 65 40 30 | 00 5f 49 6e 69 74 52 65 |tStore@0|._InitRe|
|00002080| 67 69 73 74 72 79 50 72 | 6f 74 65 63 74 40 30 00 |gistryPr|otect@0.|
|00002090| 5f 49 73 4f 61 53 65 74 | 74 69 6e 67 41 63 74 69 |_IsOaSet|tingActi|
|000020a0| 76 65 5f 52 65 67 40 38 | 00 5f 41 70 70 6c 79 52 |ve_Reg@8|._ApplyR|
|000020b0| 65 67 69 73 74 72 79 50 | 72 6f 74 65 63 74 40 30 |egistryP|rotect@0|
|000020c0| 00 5f 49 6e 69 74 47 75 | 61 72 64 73 40 30 00 5f |._InitGu|ards@0._|
|000020d0| 41 70 70 6c 79 47 75 61 | 72 64 73 40 30 00 5f 52 |ApplyGua|rds@0._R|
|000020e0| 65 6c 65 61 73 65 41 6e | 64 44 65 73 74 72 6f 79 |eleaseAn|dDestroy|
|000020f0| 47 75 61 72 64 73 40 30 | 00 5f 49 6e 69 74 47 75 |Guards@0|._InitGu|
|00002100| 61 72 64 53 74 6f 72 65 | 40 30 00 5f 41 70 70 6c |ardStore|@0._Appl|
|00002110| 79 47 75 61 72 64 53 74 | 6f 72 65 40 30 00 5f 44 |yGuardSt|ore@0._D|
|00002120| 65 73 74 72 6f 79 47 75 | 61 72 64 53 74 6f 72 65 |estroyGu|ardStore|
|00002130| 40 30 00 5f 49 6e 69 74 | 55 70 70 65 72 47 75 61 |@0._Init|UpperGua|
|00002140| 72 64 53 74 6f 72 65 40 | 30 00 5f 41 70 70 6c 79 |rdStore@|0._Apply|
|00002150| 55 70 70 65 72 47 75 61 | 72 64 53 74 6f 72 65 40 |UpperGua|rdStore@|
|00002160| 30 00 5f 44 65 73 74 72 | 6f 79 55 70 70 65 72 47 |0._Destr|oyUpperG|
|00002170| 75 61 72 64 53 74 6f 72 | 65 40 30 00 5f 49 6e 69 |uardStor|e@0._Ini|
|00002180| 74 4b 65 65 70 65 72 53 | 65 74 74 69 6e 67 40 30 |tKeeperS|etting@0|
|00002190| 00 5f 41 70 70 6c 79 4b | 65 65 70 65 72 53 65 74 |._ApplyK|eeperSet|
|000021a0| 74 69 6e 67 40 30 00 5f | 44 65 73 74 72 6f 79 4b |ting@0._|DestroyK|
|000021b0| 65 65 70 65 72 53 65 74 | 74 69 6e 67 40 30 00 5f |eeperSet|ting@0._|
|000021c0| 53 65 74 4b 65 65 70 65 | 72 53 65 74 74 69 6e 67 |SetKeepe|rSetting|
|000021d0| 56 61 6c 75 65 73 40 31 | 36 00 5f 49 6e 69 74 46 |Values@1|6._InitF|
|000021e0| 6f 6c 64 65 72 47 75 61 | 72 64 53 74 6f 72 65 40 |olderGua|rdStore@|
|000021f0| 30 00 5f 41 70 70 6c 79 | 46 6f 6c 64 65 72 47 75 |0._Apply|FolderGu|
|00002200| 61 72 64 53 74 6f 72 65 | 40 30 00 5f 44 65 73 74 |ardStore|@0._Dest|
|00002210| 72 6f 79 46 6f 6c 64 65 | 72 47 75 61 72 64 53 74 |royFolde|rGuardSt|
|00002220| 6f 72 65 40 30 00 5f 49 | 6e 69 74 55 70 70 65 72 |ore@0._I|nitUpper|
|00002230| 46 6f 6c 64 65 72 47 75 | 61 72 64 53 74 6f 72 65 |FolderGu|ardStore|
|00002240| 40 30 00 5f 41 70 70 6c | 79 55 70 70 65 72 46 6f |@0._Appl|yUpperFo|
|00002250| 6c 64 65 72 47 75 61 72 | 64 53 74 6f 72 65 40 30 |lderGuar|dStore@0|
|00002260| 00 5f 44 65 73 74 72 6f | 79 55 70 70 65 72 46 6f |._Destro|yUpperFo|
|00002270| 6c 64 65 72 47 75 61 72 | 64 53 74 6f 72 65 40 30 |lderGuar|dStore@0|
|00002280| 00 5f 49 6e 69 74 53 75 | 62 46 6f 6c 64 65 72 47 |._InitSu|bFolderG|
|00002290| 75 61 72 64 53 74 6f 72 | 65 40 30 00 5f 41 70 70 |uardStor|e@0._App|
|000022a0| 6c 79 53 75 62 46 6f 6c | 64 65 72 47 75 61 72 64 |lySubFol|derGuard|
|000022b0| 53 74 6f 72 65 40 30 00 | 5f 44 65 73 74 72 6f 79 |Store@0.|_Destroy|
|000022c0| 53 75 62 46 6f 6c 64 65 | 72 47 75 61 72 64 53 74 |SubFolde|rGuardSt|
|000022d0| 6f 72 65 40 30 00 5f 53 | 65 74 52 65 67 69 73 74 |ore@0._S|etRegist|
|000022e0| 72 79 50 72 6f 74 65 63 | 74 69 6f 6e 40 34 00 5f |ryProtec|tion@4._|
|000022f0| 47 65 74 50 72 6f 63 65 | 73 73 4e 61 6d 65 4f 66 |GetProce|ssNameOf|
|00002300| 66 73 65 74 40 30 00 5f | 47 65 74 50 72 6f 63 65 |fset@0._|GetProce|
|00002310| 73 73 4e 61 6d 65 40 34 | 00 5f 4c 70 73 74 72 54 |ssName@4|._LpstrT|
|00002320| 6f 4c 70 77 73 74 72 40 | 38 00 5f 69 73 52 65 67 |oLpwstr@|8._isReg|
|00002330| 69 73 74 72 79 48 6f 6f | 6b 65 64 00 5f 73 65 72 |istryHoo|ked._ser|
|00002340| 76 69 63 65 54 61 62 6c | 65 00 5f 50 72 6f 63 65 |viceTabl|e._Proce|
|00002350| 73 73 4e 61 6d 65 4f 66 | 66 73 65 74 00 5f 5f 69 |ssNameOf|fset.__i|
|00002360| 6d 70 5f 5f 49 6f 44 65 | 6c 65 74 65 44 65 76 69 |mp__IoDe|leteDevi|
|00002370| 63 65 40 34 00 5f 5f 69 | 6d 70 5f 5f 4d 6d 4d 61 |ce@4.__i|mp__MmMa|
|00002380| 70 4c 6f 63 6b 65 64 50 | 61 67 65 73 40 38 00 5f |pLockedP|ages@8._|
|00002390| 5f 69 6d 70 5f 5f 4d 6d | 42 75 69 6c 64 4d 64 6c |_imp__Mm|BuildMdl|
|000023a0| 46 6f 72 4e 6f 6e 50 61 | 67 65 64 50 6f 6f 6c 40 |ForNonPa|gedPool@|
|000023b0| 34 00 5f 5f 69 6d 70 5f | 5f 4d 6d 43 72 65 61 74 |4.__imp_|_MmCreat|
|000023c0| 65 4d 64 6c 40 31 32 00 | 5f 4b 65 53 65 72 76 69 |eMdl@12.|_KeServi|
|000023d0| 63 65 44 65 73 63 72 69 | 70 74 6f 72 54 61 62 6c |ceDescri|ptorTabl|
|000023e0| 65 00 5f 5f 69 6d 70 5f | 5f 49 6f 43 72 65 61 74 |e.__imp_|_IoCreat|
|000023f0| 65 53 79 6d 62 6f 6c 69 | 63 4c 69 6e 6b 40 38 00 |eSymboli|cLink@8.|
|00002400| 5f 5f 69 6d 70 5f 5f 49 | 6f 43 72 65 61 74 65 44 |__imp__I|oCreateD|
|00002410| 65 76 69 63 65 40 32 38 | 00 5f 5f 69 6d 70 5f 40 |evice@28|.__imp_@|
|00002420| 49 6f 66 43 6f 6d 70 6c | 65 74 65 52 65 71 75 65 |IofCompl|eteReque|
|00002430| 73 74 40 38 00 5f 5f 69 | 6d 70 5f 5f 49 6f 44 65 |st@8.__i|mp__IoDe|
|00002440| 6c 65 74 65 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |leteSymb|olicLink|
|00002450| 40 34 00 5f 5f 69 6d 70 | 5f 5f 5a 77 43 72 65 61 |@4.__imp|__ZwCrea|
|00002460| 74 65 4b 65 79 40 32 38 | 00 5f 5f 69 6d 70 5f 5f |teKey@28|.__imp__|
|00002470| 5a 77 44 65 6c 65 74 65 | 4b 65 79 40 34 00 5f 5f |ZwDelete|Key@4.__|
|00002480| 69 6d 70 5f 5f 5a 77 44 | 65 6c 65 74 65 56 61 6c |imp__ZwD|eleteVal|
|00002490| 75 65 4b 65 79 40 38 00 | 5f 5f 69 6d 70 5f 5f 49 |ueKey@8.|__imp__I|
|000024a0| 6f 47 65 74 43 75 72 72 | 65 6e 74 50 72 6f 63 65 |oGetCurr|entProce|
|000024b0| 73 73 40 30 00 5f 5f 69 | 6d 70 5f 5f 73 74 72 6e |ss@0.__i|mp__strn|
|000024c0| 63 70 79 00 5f 5f 69 6d | 70 5f 5f 5f 77 63 73 75 |cpy.__im|p___wcsu|
|000024d0| 70 72 00 5f 5f 69 6d 70 | 5f 5f 77 63 73 63 6d 70 |pr.__imp|__wcscmp|
|000024e0| 00 5f 52 74 6c 46 72 65 | 65 55 6e 69 63 6f 64 65 |._RtlFre|eUnicode|
|000024f0| 53 74 72 69 6e 67 40 34 | 00 5f 5f 49 4d 50 4f 52 |String@4|.__IMPOR|
|00002500| 54 5f 44 45 53 43 52 49 | 50 54 4f 52 5f 6e 74 6f |T_DESCRI|PTOR_nto|
|00002510| 73 6b 72 6e 6c 00 5f 5a | 77 4f 70 65 6e 4b 65 79 |skrnl._Z|wOpenKey|
|00002520| 40 31 32 00 5f 52 74 6c | 41 6e 73 69 53 74 72 69 |@12._Rtl|AnsiStri|
|00002530| 6e 67 54 6f 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |ngToUnic|odeStrin|
|00002540| 67 40 31 32 00 5f 5a 77 | 51 75 65 72 79 56 61 6c |g@12._Zw|QueryVal|
|00002550| 75 65 4b 65 79 40 32 34 | 00 5f 5a 77 43 6c 6f 73 |ueKey@24|._ZwClos|
|00002560| 65 40 34 00 5f 45 78 41 | 6c 6c 6f 63 61 74 65 50 |e@4._ExA|llocateP|
|00002570| 6f 6f 6c 57 69 74 68 54 | 61 67 40 31 32 00 5f 45 |oolWithT|ag@12._E|
|00002580| 78 46 72 65 65 50 6f 6f | 6c 40 34 00 5f 4b 65 49 |xFreePoo|l@4._KeI|
|00002590| 6e 69 74 69 61 6c 69 7a | 65 4d 75 74 65 78 40 38 |nitializ|eMutex@8|
|000025a0| 00 5f 4b 65 57 61 69 74 | 46 6f 72 53 69 6e 67 6c |._KeWait|ForSingl|
|000025b0| 65 4f 62 6a 65 63 74 40 | 32 30 00 5f 4b 65 52 65 |eObject@|20._KeRe|
|000025c0| 6c 65 61 73 65 4d 75 74 | 65 78 40 38 00 5f 4f 62 |leaseMut|ex@8._Ob|
|000025d0| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|000025e0| 79 48 61 6e 64 6c 65 40 | 32 34 00 40 4f 62 66 44 |yHandle@|24.@ObfD|
|000025f0| 65 72 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |ereferen|ceObject|
|00002600| 40 34 00 5f 52 74 6c 46 | 72 65 65 41 6e 73 69 53 |@4._RtlF|reeAnsiS|
|00002610| 74 72 69 6e 67 40 34 00 | 5f 52 74 6c 55 6e 69 63 |tring@4.|_RtlUnic|
|00002620| 6f 64 65 53 74 72 69 6e | 67 54 6f 41 6e 73 69 53 |odeStrin|gToAnsiS|
|00002630| 74 72 69 6e 67 40 31 32 | 00 5f 4f 62 51 75 65 72 |tring@12|._ObQuer|
|00002640| 79 4e 61 6d 65 53 74 72 | 69 6e 67 40 31 36 00 5f |yNameStr|ing@16._|
|00002650| 5a 77 43 6f 6e 6e 65 63 | 74 50 6f 72 74 40 33 32 |ZwConnec|tPort@32|
|00002660| 00 5f 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |._RtlIni|tUnicode|
|00002670| 53 74 72 69 6e 67 40 38 | 00 5f 4e 74 43 6c 6f 73 |String@8|._NtClos|
|00002680| 65 40 34 00 5f 5a 77 52 | 65 71 75 65 73 74 57 61 |e@4._ZwR|equestWa|
|00002690| 69 74 52 65 70 6c 79 50 | 6f 72 74 40 31 32 00 5f |itReplyP|ort@12._|
|000026a0| 5a 77 41 6c 6c 6f 63 61 | 74 65 56 69 72 74 75 61 |ZwAlloca|teVirtua|
|000026b0| 6c 4d 65 6d 6f 72 79 40 | 32 34 00 5f 5a 77 46 72 |lMemory@|24._ZwFr|
|000026c0| 65 65 56 69 72 74 75 61 | 6c 4d 65 6d 6f 72 79 40 |eeVirtua|lMemory@|
|000026d0| 31 36 00 5f 52 74 6c 55 | 70 63 61 73 65 55 6e 69 |16._RtlU|pcaseUni|
|000026e0| 63 6f 64 65 53 74 72 69 | 6e 67 40 31 32 00 5f 5a |codeStri|ng@12._Z|
|000026f0| 77 53 65 74 56 61 6c 75 | 65 4b 65 79 40 32 34 00 |wSetValu|eKey@24.|
|00002700| 5f 5f 69 6d 70 5f 5f 44 | 62 67 50 72 69 6e 74 00 |__imp__D|bgPrint.|
|00002710| 5f 49 6f 44 65 6c 65 74 | 65 44 65 76 69 63 65 40 |_IoDelet|eDevice@|
|00002720| 34 00 5f 4d 6d 4d 61 70 | 4c 6f 63 6b 65 64 50 61 |4._MmMap|LockedPa|
|00002730| 67 65 73 40 38 00 5f 4d | 6d 42 75 69 6c 64 4d 64 |ges@8._M|mBuildMd|
|00002740| 6c 46 6f 72 4e 6f 6e 50 | 61 67 65 64 50 6f 6f 6c |lForNonP|agedPool|
|00002750| 40 34 00 5f 4d 6d 43 72 | 65 61 74 65 4d 64 6c 40 |@4._MmCr|eateMdl@|
|00002760| 31 32 00 5f 5f 69 6d 70 | 5f 5f 4b 65 53 65 72 76 |12.__imp|__KeServ|
|00002770| 69 63 65 44 65 73 63 72 | 69 70 74 6f 72 54 61 62 |iceDescr|iptorTab|
|00002780| 6c 65 00 5f 49 6f 43 72 | 65 61 74 65 53 79 6d 62 |le._IoCr|eateSymb|
|00002790| 6f 6c 69 63 4c 69 6e 6b | 40 38 00 5f 49 6f 43 72 |olicLink|@8._IoCr|
|000027a0| 65 61 74 65 44 65 76 69 | 63 65 40 32 38 00 40 49 |eateDevi|ce@28.@I|
|000027b0| 6f 66 43 6f 6d 70 6c 65 | 74 65 52 65 71 75 65 73 |ofComple|teReques|
|000027c0| 74 40 38 00 5f 49 6f 44 | 65 6c 65 74 65 53 79 6d |t@8._IoD|eleteSym|
|000027d0| 62 6f 6c 69 63 4c 69 6e | 6b 40 34 00 5f 5a 77 43 |bolicLin|k@4._ZwC|
|000027e0| 72 65 61 74 65 4b 65 79 | 40 32 38 00 5f 5a 77 44 |reateKey|@28._ZwD|
|000027f0| 65 6c 65 74 65 4b 65 79 | 40 34 00 5f 5a 77 44 65 |eleteKey|@4._ZwDe|
|00002800| 6c 65 74 65 56 61 6c 75 | 65 4b 65 79 40 38 00 5f |leteValu|eKey@8._|
|00002810| 49 6f 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |IoGetCur|rentProc|
|00002820| 65 73 73 40 30 00 5f 5f | 4e 55 4c 4c 5f 49 4d 50 |ess@0.__|NULL_IMP|
|00002830| 4f 52 54 5f 44 45 53 43 | 52 49 50 54 4f 52 00 7f |ORT_DESC|RIPTOR..|
|00002840| 6e 74 6f 73 6b 72 6e 6c | 5f 4e 55 4c 4c 5f 54 48 |ntoskrnl|_NULL_TH|
|00002850| 55 4e 4b 5f 44 41 54 41 | 00                      |UNK_DATA|.       |
+--------+-------------------------+-------------------------+--------+--------+