/ Reverse Code Engineering RCE CD +sandman 2000 / ReverseCodeEngineeringRceCdsandman2000.iso / RCE / Tools / Regmon / REGSYS.SYS / COFF_SYMBOLS

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00000010| 03 00 00 00 00 00 a3 0e | 00 00 84 35 00 00 02 00 |........|...5....|
|00000020| 00 00 03 00 24 53 47 38 | 34 31 30 00 60 04 00 00 |....$SG8|410.`...|
|00000030| 01 00 00 00 03 00 24 53 | 47 38 34 36 32 00 2a 05 |......$S|G8462.*.|
|00000040| 00 00 01 00 00 00 03 00 | 24 53 47 38 34 34 36 00 |........|$SG8446.|
|00000050| 22 05 00 00 01 00 00 00 | 03 00 00 00 00 00 ce 0e |".......|........|
|00000060| 00 00 a8 35 00 00 02 00 | 00 00 03 00 24 53 47 38 |...5....|....$SG8|
|00000070| 36 35 35 00 84 0a 00 00 | 01 00 00 00 03 00 24 53 |655.....|......$S|
|00000080| 47 38 36 36 33 00 a0 0a | 00 00 01 00 00 00 03 00 |G8663...|........|
|00000090| 24 53 47 38 36 35 38 00 | 90 0a 00 00 01 00 00 00 |$SG8658.|........|
|000000a0| 03 00 24 53 47 38 36 36 | 35 00 ac 0a 00 00 01 00 |..$SG866|5.......|
|000000b0| 00 00 03 00 24 53 47 38 | 37 30 30 00 f8 0b 00 00 |....$SG8|700.....|
|000000c0| 01 00 00 00 03 00 24 53 | 47 38 36 39 38 00 ec 0b |......$S|G8698...|
|000000d0| 00 00 01 00 00 00 03 00 | 24 53 47 38 36 39 36 00 |........|$SG8696.|
|000000e0| e0 0b 00 00 01 00 00 00 | 03 00 24 53 47 38 36 39 |........|..$SG869|
|000000f0| 34 00 d0 0b 00 00 01 00 | 00 00 03 00 24 53 47 38 |4.......|....$SG8|
|00000100| 36 39 32 00 cc 0b 00 00 | 01 00 00 00 03 00 24 53 |692.....|......$S|
|00000110| 47 38 36 39 30 00 c4 0b | 00 00 01 00 00 00 03 00 |G8690...|........|
|00000120| 24 53 47 38 36 38 38 00 | b8 0b 00 00 01 00 00 00 |$SG8688.|........|
|00000130| 03 00 24 53 47 38 36 38 | 36 00 b0 0b 00 00 01 00 |..$SG868|6.......|
|00000140| 00 00 03 00 24 53 47 38 | 36 38 34 00 a4 0b 00 00 |....$SG8|684.....|
|00000150| 01 00 00 00 03 00 24 53 | 47 38 36 38 32 00 94 0b |......$S|G8682...|
|00000160| 00 00 01 00 00 00 03 00 | 24 53 47 38 36 38 30 00 |........|$SG8680.|
|00000170| 80 0b 00 00 01 00 00 00 | 03 00 24 53 47 38 36 37 |........|..$SG867|
|00000180| 38 00 78 0b 00 00 01 00 | 00 00 03 00 24 53 47 38 |8.x.....|....$SG8|
|00000190| 37 33 30 00 78 0d 00 00 | 01 00 00 00 03 00 24 53 |730.x...|......$S|
|000001a0| 47 38 37 32 39 00 74 0d | 00 00 01 00 00 00 03 00 |G8729.t.|........|
|000001b0| 24 53 47 38 37 32 37 00 | 70 0d 00 00 01 00 00 00 |$SG8727.|p.......|
|000001c0| 03 00 24 53 47 38 37 34 | 34 00 8c 0d 00 00 01 00 |..$SG874|4.......|
|000001d0| 00 00 03 00 24 53 47 38 | 37 34 32 00 84 0d 00 00 |....$SG8|742.....|
|000001e0| 01 00 00 00 03 00 24 53 | 47 38 37 33 33 00 7c 0d |......$S|G8733.|.|
|000001f0| 00 00 01 00 00 00 03 00 | 24 53 47 38 37 36 38 00 |........|$SG8768.|
|00000200| 1a 0f 00 00 01 00 00 00 | 03 00 24 53 47 38 37 36 |........|..$SG876|
|00000210| 37 00 12 0f 00 00 01 00 | 00 00 03 00 24 53 47 38 |7.......|....$SG8|
|00000220| 37 38 33 00 22 0f 00 00 | 01 00 00 00 03 00 24 53 |783."...|......$S|
|00000230| 47 38 38 33 30 00 f4 10 | 00 00 01 00 00 00 03 00 |G8830...|........|
|00000240| 24 53 47 38 38 31 32 00 | b4 10 00 00 01 00 00 00 |$SG8812.|........|
|00000250| 03 00 24 53 47 38 38 30 | 39 00 a8 10 00 00 01 00 |..$SG880|9.......|
|00000260| 00 00 03 00 24 53 47 38 | 38 30 36 00 9c 10 00 00 |....$SG8|806.....|
|00000270| 01 00 00 00 03 00 24 53 | 47 38 38 30 33 00 94 10 |......$S|G8803...|
|00000280| 00 00 01 00 00 00 03 00 | 24 53 47 38 38 33 32 00 |........|$SG8832.|
|00000290| 00 11 00 00 01 00 00 00 | 03 00 24 53 47 38 38 32 |........|..$SG882|
|000002a0| 34 00 dc 10 00 00 01 00 | 00 00 03 00 24 53 47 38 |4.......|....$SG8|
|000002b0| 38 32 37 00 e8 10 00 00 | 01 00 00 00 03 00 24 53 |827.....|......$S|
|000002c0| 47 38 38 32 31 00 d4 10 | 00 00 01 00 00 00 03 00 |G8821...|........|
|000002d0| 24 53 47 38 38 31 35 00 | bc 10 00 00 01 00 00 00 |$SG8815.|........|
|000002e0| 03 00 24 53 47 38 38 31 | 38 00 c8 10 00 00 01 00 |..$SG881|8.......|
|000002f0| 00 00 03 00 24 53 47 38 | 38 30 30 00 88 10 00 00 |....$SG8|800.....|
|00000300| 01 00 00 00 03 00 24 53 | 47 38 39 31 38 00 f4 13 |......$S|G8918...|
|00000310| 00 00 01 00 00 00 03 00 | 24 53 47 38 39 31 35 00 |........|$SG8915.|
|00000320| f0 13 00 00 01 00 00 00 | 03 00 24 53 47 38 39 33 |........|..$SG893|
|00000330| 39 00 ae 16 00 00 01 00 | 00 00 03 00 24 53 47 38 |9.......|....$SG8|
|00000340| 39 35 30 00 ec 16 00 00 | 01 00 00 00 03 00 24 53 |950.....|......$S|
|00000350| 47 38 39 37 39 00 aa 17 | 00 00 01 00 00 00 03 00 |G8979...|........|
|00000360| 24 53 47 38 39 37 37 00 | 9e 17 00 00 01 00 00 00 |$SG8977.|........|
|00000370| 03 00 24 53 47 39 30 30 | 39 00 92 18 00 00 01 00 |..$SG900|9.......|
|00000380| 00 00 03 00 24 53 47 39 | 30 30 33 00 86 18 00 00 |....$SG9|003.....|
|00000390| 01 00 00 00 03 00 24 53 | 47 39 30 33 31 00 9e 19 |......$S|G9031...|
|000003a0| 00 00 01 00 00 00 03 00 | 24 53 47 39 30 32 39 00 |........|$SG9029.|
|000003b0| 92 19 00 00 01 00 00 00 | 03 00 24 53 47 39 30 34 |........|..$SG904|
|000003c0| 32 00 ba 1a 00 00 01 00 | 00 00 03 00 24 53 47 39 |2.......|....$SG9|
|000003d0| 30 35 33 00 66 1b 00 00 | 01 00 00 00 03 00 24 53 |053.f...|......$S|
|000003e0| 47 39 30 36 34 00 12 1c | 00 00 01 00 00 00 03 00 |G9064...|........|
|000003f0| 24 53 47 39 30 39 30 00 | ac 1c 00 00 01 00 00 00 |$SG9090.|........|
|00000400| 03 00 24 53 47 39 31 31 | 33 00 84 1d 00 00 01 00 |..$SG911|3.......|
|00000410| 00 00 03 00 24 53 47 39 | 31 33 34 00 4c 1e 00 00 |....$SG9|134.L...|
|00000420| 01 00 00 00 03 00 24 53 | 47 39 31 35 39 00 24 1f |......$S|G9159.$.|
|00000430| 00 00 01 00 00 00 03 00 | 24 53 47 39 31 35 37 00 |........|$SG9157.|
|00000440| 20 1f 00 00 01 00 00 00 | 03 00 24 53 47 39 31 38 | .......|..$SG918|
|00000450| 35 00 38 20 00 00 01 00 | 00 00 03 00 24 53 47 39 |5.8 ....|....$SG9|
|00000460| 34 31 32 00 56 27 00 00 | 01 00 00 00 03 00 24 53 |412.V'..|......$S|
|00000470| 47 39 33 39 38 00 d2 26 | 00 00 01 00 00 00 03 00 |G9398..&|........|
|00000480| 24 53 47 39 33 39 35 00 | c6 26 00 00 01 00 00 00 |$SG9395.|.&......|
|00000490| 03 00 24 53 47 39 33 39 | 32 00 9e 26 00 00 01 00 |..$SG939|2..&....|
|000004a0| 00 00 03 00 24 53 47 39 | 33 38 39 00 7e 26 00 00 |....$SG9|389.~&..|
|000004b0| 01 00 00 00 03 00 40 63 | 6f 6d 70 2e 69 64 00 00 |......@c|omp.id..|
|000004c0| 00 00 ff ff 00 00 03 00 | 24 52 30 30 30 30 30 30 |........|$R000000|
|000004d0| 00 51 00 00 04 00 00 00 | 03 00 40 63 6f 6d 70 2e |.Q......|..@comp.|
|000004e0| 69 64 00 00 00 00 ff ff | 00 00 03 00 40 63 6f 6d |id......|....@com|
|000004f0| 70 2e 69 64 00 00 00 00 | ff ff 00 00 03 00 40 63 |p.id....|......@c|
|00000500| 6f 6d 70 2e 69 64 00 00 | 00 00 ff ff 00 00 03 00 |omp.id..|........|
|00000510| 2e 69 64 61 74 61 24 36 | 88 50 00 00 03 00 00 00 |.idata$6|.P......|
|00000520| 03 00 40 69 64 2e 63 6f | 6d 70 00 00 00 00 ff ff |..@id.co|mp......|
|00000530| 00 00 03 00 40 69 64 2e | 63 6f 6d 70 00 00 00 00 |....@id.|comp....|
|00000540| ff ff 00 00 03 00 40 69 | 64 2e 63 6f 6d 70 00 00 |......@i|d.comp..|
|00000550| 00 00 ff ff 00 00 03 00 | 40 69 64 2e 63 6f 6d 70 |........|@id.comp|
|00000560| 00 00 00 00 ff ff 00 00 | 03 00 40 69 64 2e 63 6f |........|..@id.co|
|00000570| 6d 70 00 00 00 00 ff ff | 00 00 03 00 40 69 64 2e |mp......|....@id.|
|00000580| 63 6f 6d 70 00 00 00 00 | ff ff 00 00 03 00 40 69 |comp....|......@i|
|00000590| 64 2e 63 6f 6d 70 00 00 | 00 00 ff ff 00 00 03 00 |d.comp..|........|
|000005a0| 40 69 64 2e 63 6f 6d 70 | 00 00 00 00 ff ff 00 00 |@id.comp|........|
|000005b0| 03 00 40 69 64 2e 63 6f | 6d 70 00 00 00 00 ff ff |..@id.co|mp......|
|000005c0| 00 00 03 00 40 69 64 2e | 63 6f 6d 70 00 00 00 00 |....@id.|comp....|
|000005d0| ff ff 00 00 03 00 40 69 | 64 2e 63 6f 6d 70 00 00 |......@i|d.comp..|
|000005e0| 00 00 ff ff 00 00 03 00 | 40 69 64 2e 63 6f 6d 70 |........|@id.comp|
|000005f0| 00 00 00 00 ff ff 00 00 | 03 00 40 69 64 2e 63 6f |........|..@id.co|
|00000600| 6d 70 00 00 00 00 ff ff | 00 00 03 00 40 69 64 2e |mp......|....@id.|
|00000610| 63 6f 6d 70 00 00 00 00 | ff ff 00 00 03 00 40 69 |comp....|......@i|
|00000620| 64 2e 63 6f 6d 70 00 00 | 00 00 ff ff 00 00 03 00 |d.comp..|........|
|00000630| 40 69 64 2e 63 6f 6d 70 | 00 00 00 00 ff ff 00 00 |@id.comp|........|
|00000640| 03 00 40 69 64 2e 63 6f | 6d 70 00 00 00 00 ff ff |..@id.co|mp......|
|00000650| 00 00 03 00 40 69 64 2e | 63 6f 6d 70 00 00 00 00 |....@id.|comp....|
|00000660| ff ff 00 00 03 00 40 69 | 64 2e 63 6f 6d 70 00 00 |......@i|d.comp..|
|00000670| 00 00 ff ff 00 00 03 00 | 40 69 64 2e 63 6f 6d 70 |........|@id.comp|
|00000680| 00 00 00 00 ff ff 00 00 | 03 00 40 69 64 2e 63 6f |........|..@id.co|
|00000690| 6d 70 00 00 00 00 ff ff | 00 00 03 00 40 69 64 2e |mp......|....@id.|
|000006a0| 63 6f 6d 70 00 00 00 00 | ff ff 00 00 03 00 40 69 |comp....|......@i|
|000006b0| 64 2e 63 6f 6d 70 00 00 | 00 00 ff ff 00 00 03 00 |d.comp..|........|
|000006c0| 40 69 64 2e 63 6f 6d 70 | 00 00 00 00 ff ff 00 00 |@id.comp|........|
|000006d0| 03 00 40 69 64 2e 63 6f | 6d 70 00 00 00 00 ff ff |..@id.co|mp......|
|000006e0| 00 00 03 00 40 69 64 2e | 63 6f 6d 70 00 00 00 00 |....@id.|comp....|
|000006f0| ff ff 00 00 03 00 40 69 | 64 2e 63 6f 6d 70 00 00 |......@i|d.comp..|
|00000700| 00 00 ff ff 00 00 03 00 | 40 69 64 2e 63 6f 6d 70 |........|@id.comp|
|00000710| 00 00 00 00 ff ff 00 00 | 03 00 40 69 64 2e 63 6f |........|..@id.co|
|00000720| 6d 70 00 00 00 00 ff ff | 00 00 03 00 40 69 64 2e |mp......|....@id.|
|00000730| 63 6f 6d 70 00 00 00 00 | ff ff 00 00 03 00 40 69 |comp....|......@i|
|00000740| 64 2e 63 6f 6d 70 00 00 | 00 00 ff ff 00 00 03 00 |d.comp..|........|
|00000750| 40 69 64 2e 63 6f 6d 70 | 00 00 00 00 ff ff 00 00 |@id.comp|........|
|00000760| 03 00 40 69 64 2e 63 6f | 6d 70 00 00 00 00 ff ff |..@id.co|mp......|
|00000770| 00 00 03 00 40 69 64 2e | 63 6f 6d 70 00 00 00 00 |....@id.|comp....|
|00000780| ff ff 00 00 03 00 40 69 | 64 2e 63 6f 6d 70 00 00 |......@i|d.comp..|
|00000790| 00 00 ff ff 00 00 03 00 | 40 69 64 2e 63 6f 6d 70 |........|@id.comp|
|000007a0| 00 00 00 00 ff ff 00 00 | 03 00 40 69 64 2e 63 6f |........|..@id.co|
|000007b0| 6d 70 00 00 00 00 ff ff | 00 00 03 00 40 69 64 2e |mp......|....@id.|
|000007c0| 63 6f 6d 70 00 00 00 00 | ff ff 00 00 03 00 40 69 |comp....|......@i|
|000007d0| 64 2e 63 6f 6d 70 00 00 | 00 00 ff ff 00 00 03 00 |d.comp..|........|
|000007e0| 40 69 64 2e 63 6f 6d 70 | 00 00 00 00 ff ff 00 00 |@id.comp|........|
|000007f0| 03 00 40 69 64 2e 63 6f | 6d 70 00 00 00 00 ff ff |..@id.co|mp......|
|00000800| 00 00 03 00 40 69 64 2e | 63 6f 6d 70 00 00 00 00 |....@id.|comp....|
|00000810| ff ff 00 00 03 00 40 69 | 64 2e 63 6f 6d 70 00 00 |......@i|d.comp..|
|00000820| 00 00 ff ff 00 00 03 00 | 40 69 64 2e 63 6f 6d 70 |........|@id.comp|
|00000830| 00 00 00 00 ff ff 00 00 | 03 00 40 69 64 2e 63 6f |........|..@id.co|
|00000840| 6d 70 00 00 00 00 ff ff | 00 00 03 00 68 65 61 64 |mp......|....head|
|00000850| 65 72 00 00 00 00 00 00 | fe ff 00 00 02 00 00 00 |er......|........|
|00000860| 00 00 a6 08 00 00 a0 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000870| 00 00 00 00 76 06 00 00 | a4 02 00 00 01 00 00 00 |....v...|........|
|00000880| 02 00 00 00 00 00 94 06 | 00 00 a8 02 00 00 01 00 |........|........|
|00000890| 00 00 02 00 00 00 00 00 | a9 06 00 00 ac 02 00 00 |........|........|
|000008a0| 01 00 00 00 02 00 00 00 | 00 00 ba 06 00 00 b0 02 |........|........|
|000008b0| 00 00 01 00 00 00 02 00 | 00 00 00 00 d9 06 00 00 |........|........|
|000008c0| b4 02 00 00 01 00 00 00 | 02 00 00 00 00 00 e8 06 |........|........|
|000008d0| 00 00 b8 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|000008e0| fe 06 00 00 bc 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|000008f0| 00 00 1e 07 00 00 c0 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000900| 00 00 00 00 32 07 00 00 | c4 02 00 00 01 00 00 00 |....2...|........|
|00000910| 02 00 00 00 00 00 52 07 | 00 00 c8 02 00 00 01 00 |......R.|........|
|00000920| 00 00 02 00 00 00 00 00 | 6b 07 00 00 cc 02 00 00 |........|k.......|
|00000930| 01 00 00 00 02 00 00 00 | 00 00 83 07 00 00 d0 02 |........|........|
|00000940| 00 00 01 00 00 00 02 00 | 00 00 00 00 93 07 00 00 |........|........|
|00000950| d4 02 00 00 01 00 00 00 | 02 00 00 00 00 00 b1 07 |........|........|
|00000960| 00 00 d8 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000970| c0 07 00 00 dc 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000980| 00 00 e4 07 00 00 e0 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000990| 00 00 00 00 02 08 00 00 | e4 02 00 00 01 00 00 00 |........|........|
|000009a0| 02 00 00 00 00 00 1d 08 | 00 00 e8 02 00 00 01 00 |........|........|
|000009b0| 00 00 02 00 00 00 00 00 | 44 08 00 00 ec 02 00 00 |........|D.......|
|000009c0| 01 00 00 00 02 00 00 00 | 00 00 53 08 00 00 f0 02 |........|..S.....|
|000009d0| 00 00 01 00 00 00 02 00 | 00 00 00 00 6f 08 00 00 |........|....o...|
|000009e0| f4 02 00 00 01 00 00 00 | 02 00 00 00 00 00 8c 08 |........|........|
|000009f0| 00 00 f8 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000a00| 5f 06 00 00 fc 02 00 00 | 01 00 00 00 02 00 00 00 |_.......|........|
|00000a10| 00 00 bc 08 00 00 00 03 | 00 00 01 00 00 00 02 00 |........|........|
|00000a20| 00 00 00 00 d4 08 00 00 | 04 03 00 00 01 00 00 00 |........|........|
|00000a30| 02 00 00 00 00 00 e8 08 | 00 00 08 03 00 00 01 00 |........|........|
|00000a40| 00 00 02 00 00 00 00 00 | fd 08 00 00 0c 03 00 00 |........|........|
|00000a50| 01 00 00 00 02 00 00 00 | 00 00 16 09 00 00 10 03 |........|........|
|00000a60| 00 00 01 00 00 00 02 00 | 00 00 00 00 34 09 00 00 |........|....4...|
|00000a70| 14 03 00 00 01 00 00 00 | 02 00 00 00 00 00 4e 09 |........|......N.|
|00000a80| 00 00 18 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000a90| 63 09 00 00 1c 03 00 00 | 01 00 00 00 02 00 00 00 |c.......|........|
|00000aa0| 00 00 77 09 00 00 20 03 | 00 00 01 00 00 00 02 00 |..w... .|........|
|00000ab0| 00 00 00 00 93 09 00 00 | 24 03 00 00 01 00 00 00 |........|$.......|
|00000ac0| 02 00 00 00 00 00 bd 09 | 00 00 28 03 00 00 01 00 |........|..(.....|
|00000ad0| 00 00 02 00 00 00 00 00 | d5 09 00 00 2c 03 00 00 |........|....,...|
|00000ae0| 01 00 00 00 02 00 00 00 | 00 00 f3 09 00 00 30 03 |........|......0.|
|00000af0| 00 00 01 00 00 00 02 00 | 00 00 00 00 1b 0a 00 00 |........|........|
|00000b00| 34 03 00 00 01 00 00 00 | 02 00 00 00 00 00 34 0a |4.......|......4.|
|00000b10| 00 00 38 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..8.....|........|
|00000b20| f5 0d 00 00 3c 03 00 00 | 01 00 00 00 02 00 00 00 |....<...|........|
|00000b30| 00 00 50 0a 00 00 3c 03 | 00 00 01 00 00 00 02 00 |..P...<.|........|
|00000b40| 00 00 00 00 6a 0a 00 00 | 40 03 00 00 01 00 00 00 |....j...|@.......|
|00000b50| 02 00 00 00 00 00 85 0a | 00 00 44 03 00 00 01 00 |........|..D.....|
|00000b60| 00 00 02 00 00 00 00 00 | a3 0a 00 00 48 03 00 00 |........|....H...|
|00000b70| 01 00 00 00 02 00 00 00 | 00 00 bc 0a 00 00 4c 03 |........|......L.|
|00000b80| 00 00 01 00 00 00 02 00 | 00 00 00 00 dd 0a 00 00 |........|........|
|00000b90| 50 03 00 00 01 00 00 00 | 02 00 00 00 00 00 89 0e |P.......|........|
|00000ba0| 00 00 54 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..T.....|........|
|00000bb0| 13 00 00 00 b4 03 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000bc0| 00 00 20 00 00 00 cc 03 | 00 00 01 00 20 00 02 00 |.. .....|.... ...|
|00000bd0| 00 00 00 00 34 00 00 00 | 8e 04 00 00 01 00 20 00 |....4...|...... .|
|00000be0| 02 00 00 00 00 00 49 00 | 00 00 fc 04 00 00 01 00 |......I.|........|
|00000bf0| 20 00 02 00 00 00 00 00 | 5f 00 00 00 2d 05 00 00 | .......|_...-...|
|00000c00| 01 00 20 00 02 00 00 00 | 00 00 74 00 00 00 6a 06 |.. .....|..t...j.|
|00000c10| 00 00 01 00 20 00 02 00 | 00 00 00 00 9d 00 00 00 |.... ...|........|
|00000c20| 10 07 00 00 01 00 20 00 | 02 00 00 00 00 00 af 00 |...... .|........|
|00000c30| 00 00 a0 07 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000c40| c4 00 00 00 c6 07 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000c50| 00 00 d8 00 00 00 12 08 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000c60| 00 00 00 00 e5 00 00 00 | b8 08 00 00 01 00 20 00 |........|...... .|
|00000c70| 02 00 00 00 00 00 07 01 | 00 00 ee 08 00 00 01 00 |........|........|
|00000c80| 20 00 02 00 00 00 00 00 | 1a 01 00 00 9a 09 00 00 | .......|........|
|00000c90| 01 00 20 00 02 00 00 00 | 00 00 31 01 00 00 18 0a |.. .....|..1.....|
|00000ca0| 00 00 01 00 20 00 02 00 | 00 00 00 00 44 01 00 00 |.... ...|....D...|
|00000cb0| 42 0a 00 00 01 00 20 00 | 02 00 00 00 00 00 52 01 |B..... .|......R.|
|00000cc0| 00 00 72 0a 00 00 01 00 | 20 00 02 00 00 00 00 00 |..r.....| .......|
|00000cd0| 64 01 00 00 bf 0a 00 00 | 01 00 20 00 02 00 00 00 |d.......|.. .....|
|00000ce0| 00 00 7d 01 00 00 09 0c | 00 00 01 00 20 00 02 00 |..}.....|.... ...|
|00000cf0| 00 00 00 00 93 01 00 00 | 90 0d 00 00 01 00 20 00 |........|...... .|
|00000d00| 02 00 00 00 00 00 aa 01 | 00 00 35 0f 00 00 01 00 |........|..5.....|
|00000d10| 20 00 02 00 00 00 00 00 | c5 01 00 00 03 11 00 00 | .......|........|
|00000d20| 01 00 20 00 02 00 00 00 | 00 00 d4 01 00 00 da 11 |.. .....|........|
|00000d30| 00 00 01 00 20 00 02 00 | 00 00 00 00 e9 01 00 00 |.... ...|........|
|00000d40| 7a 12 00 00 01 00 20 00 | 02 00 00 00 00 00 fd 01 |z..... .|........|
|00000d50| 00 00 f4 12 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000d60| 14 02 00 00 68 13 00 00 | 01 00 20 00 02 00 00 00 |....h...|.. .....|
|00000d70| 00 00 27 02 00 00 f6 13 | 00 00 01 00 20 00 02 00 |..'.....|.... ...|
|00000d80| 00 00 00 00 37 02 00 00 | b5 16 00 00 01 00 20 00 |....7...|...... .|
|00000d90| 02 00 00 00 00 00 4f 02 | 00 00 f0 16 00 00 01 00 |......O.|........|
|00000da0| 20 00 02 00 00 00 00 00 | 5d 02 00 00 be 17 00 00 | .......|].......|
|00000db0| 01 00 20 00 02 00 00 00 | 00 00 70 02 00 00 a8 18 |.. .....|..p.....|
|00000dc0| 00 00 01 00 20 00 02 00 | 00 00 00 00 85 02 00 00 |.... ...|........|
|00000dd0| b3 19 00 00 01 00 20 00 | 02 00 00 00 00 00 98 02 |...... .|........|
|00000de0| 00 00 d6 1a 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000df0| ab 02 00 00 83 1b 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000e00| 00 00 bf 02 00 00 2b 1c | 00 00 01 00 20 00 02 00 |......+.|.... ...|
|00000e10| 00 00 00 00 d8 02 00 00 | c1 1c 00 00 01 00 20 00 |........|...... .|
|00000e20| 02 00 00 00 00 00 ef 02 | 00 00 9d 1d 00 00 01 00 |........|........|
|00000e30| 20 00 02 00 00 00 00 00 | 07 03 00 00 61 1e 00 00 | .......|....a...|
|00000e40| 01 00 20 00 02 00 00 00 | 00 00 1b 03 00 00 3f 1f |.. .....|......?.|
|00000e50| 00 00 01 00 20 00 02 00 | 00 00 00 00 38 03 00 00 |.... ...|....8...|
|00000e60| 4f 20 00 00 01 00 20 00 | 02 00 00 00 00 00 51 03 |O .... .|......Q.|
|00000e70| 00 00 12 21 00 00 01 00 | 20 00 02 00 00 00 00 00 |...!....| .......|
|00000e80| 61 03 00 00 c0 22 00 00 | 01 00 20 00 02 00 00 00 |a...."..|.. .....|
|00000e90| 00 00 73 03 00 00 e8 23 | 00 00 01 00 20 00 02 00 |..s....#|.... ...|
|00000ea0| 00 00 00 00 8b 03 00 00 | 70 25 00 00 01 00 20 00 |........|p%.... .|
|00000eb0| 02 00 00 00 00 00 04 00 | 00 00 62 27 00 00 01 00 |........|..b'....|
|00000ec0| 20 00 02 00 00 00 00 00 | 92 04 00 00 80 2a 00 00 | .......|.....*..|
|00000ed0| 02 00 00 00 02 00 00 00 | 00 00 84 04 00 00 98 2a |........|.......*|
|00000ee0| 00 00 02 00 00 00 02 00 | 00 00 00 00 78 04 00 00 |........|....x...|
|00000ef0| a0 2a 00 00 02 00 00 00 | 02 00 5f 4c 6f 67 46 69 |.*......|.._LogFi|
|00000f00| 6c 65 a4 2e 00 00 02 00 | 00 00 02 00 00 00 00 00 |le......|........|
|00000f10| d9 03 00 00 a8 2e 00 00 | 02 00 00 00 02 00 5f 52 |........|......_R|
|00000f20| 6f 6f 74 4b 65 79 f0 30 | 00 00 02 00 00 00 02 00 |ootKey.0|........|
|00000f30| 00 00 00 00 bb 03 00 00 | 80 35 00 00 02 00 00 00 |........|.5......|
|00000f40| 02 00 00 00 00 00 6d 04 | 00 00 a8 3d 00 00 02 00 |......m.|...=....|
|00000f50| 00 00 02 00 00 00 00 00 | 60 04 00 00 a9 3d 00 00 |........|`....=..|
|00000f60| 02 00 00 00 02 00 00 00 | 00 00 4c 04 00 00 ac 3d |........|..L....=|
|00000f70| 00 00 02 00 00 00 02 00 | 00 00 00 00 41 04 00 00 |........|....A...|
|00000f80| b0 3d 00 00 02 00 00 00 | 02 00 00 00 00 00 2e 04 |.=......|........|
|00000f90| 00 00 b4 3d 00 00 02 00 | 00 00 02 00 00 00 00 00 |...=....|........|
|00000fa0| 14 04 00 00 b8 3d 00 00 | 02 00 00 00 02 00 00 00 |.....=..|........|
|00000fb0| 00 00 fd 03 00 00 bc 3d | 00 00 02 00 00 00 02 00 |.......=|........|
|00000fc0| 00 00 00 00 e6 03 00 00 | c0 3d 00 00 02 00 00 00 |........|.=......|
|00000fd0| 02 00 5f 53 74 6f 72 65 | 00 00 c4 3d 00 00 02 00 |.._Store|...=....|
|00000fe0| 00 00 02 00 00 00 00 00 | cf 03 00 00 c8 3d 00 00 |........|.....=..|
|00000ff0| 02 00 00 00 02 00 00 00 | 00 00 c5 03 00 00 cc 3d |........|.......=|
|00001000| 00 00 02 00 00 00 02 00 | 00 00 00 00 ad 03 00 00 |........|........|
|00001010| d0 3d 00 00 02 00 00 00 | 02 00 00 00 00 00 4c 06 |.=......|......L.|
|00001020| 00 00 d4 3d 00 00 02 00 | 00 00 02 00 00 00 00 00 |...=....|........|
|00001030| 3e 06 00 00 d8 3d 00 00 | 02 00 00 00 02 00 00 00 |>....=..|........|
|00001040| 00 00 33 06 00 00 dc 3d | 00 00 02 00 00 00 02 00 |..3....=|........|
|00001050| 00 00 00 00 22 06 00 00 | e0 3d 00 00 02 00 00 00 |...."...|.=......|
|00001060| 02 00 00 00 00 00 0e 06 | 00 00 00 3e 00 00 02 00 |........|...>....|
|00001070| 00 00 02 00 00 00 00 00 | fc 05 00 00 00 3f 00 00 |........|.....?..|
|00001080| 02 00 00 00 02 00 00 00 | 00 00 ee 05 00 00 10 3f |........|.......?|
|00001090| 00 00 02 00 00 00 02 00 | 00 00 00 00 e1 05 00 00 |........|........|
|000010a0| 20 3f 00 00 02 00 00 00 | 02 00 00 00 00 00 d0 05 | ?......|........|
|000010b0| 00 00 40 3f 00 00 02 00 | 00 00 02 00 00 00 00 00 |..@?....|........|
|000010c0| c4 05 00 00 60 3f 00 00 | 02 00 00 00 02 00 00 00 |....`?..|........|
|000010d0| 00 00 ae 05 00 00 80 3f | 00 00 02 00 00 00 02 00 |.......?|........|
|000010e0| 00 00 00 00 97 05 00 00 | a0 3f 00 00 02 00 00 00 |........|.?......|
|000010f0| 02 00 00 00 00 00 87 05 | 00 00 a0 40 00 00 02 00 |........|...@....|
|00001100| 00 00 02 00 00 00 00 00 | 6d 05 00 00 a0 41 00 00 |........|m....A..|
|00001110| 02 00 00 00 02 00 00 00 | 00 00 62 05 00 00 c0 41 |........|..b....A|
|00001120| 00 00 02 00 00 00 02 00 | 00 00 00 00 57 05 00 00 |........|....W...|
|00001130| e0 45 00 00 02 00 00 00 | 02 00 00 00 00 00 43 05 |.E......|......C.|
|00001140| 00 00 00 46 00 00 02 00 | 00 00 02 00 00 00 00 00 |...F....|........|
|00001150| 2f 05 00 00 04 46 00 00 | 02 00 00 00 02 00 00 00 |/....F..|........|
|00001160| 00 00 1e 05 00 00 08 46 | 00 00 02 00 00 00 02 00 |.......F|........|
|00001170| 00 00 00 00 13 05 00 00 | 20 46 00 00 02 00 00 00 |........| F......|
|00001180| 02 00 00 00 00 00 01 05 | 00 00 20 47 00 00 02 00 |........|.. G....|
|00001190| 00 00 02 00 00 00 00 00 | f1 04 00 00 24 47 00 00 |........|....$G..|
|000011a0| 02 00 00 00 02 00 00 00 | 00 00 dc 04 00 00 28 47 |........|......(G|
|000011b0| 00 00 02 00 00 00 02 00 | 00 00 00 00 c5 04 00 00 |........|........|
|000011c0| 2c 47 00 00 02 00 00 00 | 02 00 00 00 00 00 b1 04 |,G......|........|
|000011d0| 00 00 40 47 00 00 02 00 | 00 00 02 00 00 00 00 00 |..@G....|........|
|000011e0| a6 04 00 00 40 48 00 00 | 02 00 00 00 02 00 00 00 |....@H..|........|
|000011f0| 00 00 fd 0a 00 00 40 4c | 00 00 03 00 00 00 02 00 |......@L|........|
|00001200| 00 00 00 00 70 0e 00 00 | 54 4c 00 00 03 00 00 00 |....p...|TL......|
|00001210| 02 00 65 6e 64 00 00 00 | 00 00 a0 58 00 00 fe ff |..end...|...X....|
|00001220| 00 00 02 00 ea 0e 00 00 | 5f 44 72 69 76 65 72 45 |........|_DriverE|
|00001230| 6e 74 72 79 40 38 00 5f | 4d 61 74 63 68 4f 6b 61 |ntry@8._|MatchOka|
|00001240| 79 40 34 00 5f 4d 61 74 | 63 68 57 69 74 68 50 61 |y@4._Mat|chWithPa|
|00001250| 74 74 65 72 6e 40 38 00 | 5f 52 65 67 6d 6f 6e 4f |ttern@8.|_RegmonO|
|00001260| 70 65 6e 42 6f 6f 74 4c | 6f 67 40 30 00 5f 52 65 |penBootL|og@0._Re|
|00001270| 67 6d 6f 6e 43 6c 6f 73 | 65 42 6f 6f 74 4c 6f 67 |gmonClos|eBootLog|
|00001280| 40 34 00 5f 52 65 67 6d | 6f 6e 57 72 69 74 65 42 |@4._Regm|onWriteB|
|00001290| 75 66 66 65 72 40 34 00 | 5f 52 65 67 6d 6f 6e 57 |uffer@4.|_RegmonW|
|000012a0| 72 69 74 65 42 6f 6f 74 | 4c 6f 67 40 34 00 5f 52 |riteBoot|Log@4._R|
|000012b0| 65 67 6d 6f 6e 46 72 65 | 65 53 74 6f 72 65 40 30 |egmonFre|eStore@0|
|000012c0| 00 5f 52 65 67 6d 6f 6e | 4e 65 77 53 74 6f 72 65 |._Regmon|NewStore|
|000012d0| 40 30 00 5f 52 65 67 6d | 6f 6e 4f 6c 64 65 73 74 |@0._Regm|onOldest|
|000012e0| 53 74 6f 72 65 40 30 00 | 5f 52 65 67 6d 6f 6e 52 |Store@0.|_RegmonR|
|000012f0| 65 73 65 74 53 74 6f 72 | 65 40 30 00 5f 55 70 64 |esetStor|e@0._Upd|
|00001300| 61 74 65 53 74 6f 72 65 | 00 5f 73 74 72 6e 63 61 |ateStore|._strnca|
|00001310| 74 5a 40 31 32 00 5f 52 | 65 67 6d 6f 6e 48 61 73 |tZ@12._R|egmonHas|
|00001320| 68 43 6c 65 61 6e 75 70 | 40 30 00 5f 52 65 67 6d |hCleanup|@0._Regm|
|00001330| 6f 6e 53 74 6f 72 65 48 | 61 73 68 40 38 00 5f 52 |onStoreH|ash@8._R|
|00001340| 65 67 6d 6f 6e 46 72 65 | 65 48 61 73 68 45 6e 74 |egmonFre|eHashEnt|
|00001350| 72 79 40 34 00 5f 43 6f | 6e 76 65 72 74 54 6f 55 |ry@4._Co|nvertToU|
|00001360| 70 70 65 72 40 31 32 00 | 5f 47 65 74 50 6f 69 6e |pper@12.|_GetPoin|
|00001370| 74 65 72 40 34 00 5f 52 | 65 6c 65 61 73 65 50 6f |ter@4._R|eleasePo|
|00001380| 69 6e 74 65 72 40 34 00 | 5f 41 70 70 65 6e 64 4b |inter@4.|_AppendK|
|00001390| 65 79 49 6e 66 6f 72 6d | 61 74 69 6f 6e 40 31 32 |eyInform|ation@12|
|000013a0| 00 5f 41 70 70 65 6e 64 | 52 65 67 56 61 6c 75 65 |._Append|RegValue|
|000013b0| 54 79 70 65 40 38 00 5f | 41 70 70 65 6e 64 52 65 |Type@8._|AppendRe|
|000013c0| 67 56 61 6c 75 65 44 61 | 74 61 40 31 36 00 5f 41 |gValueDa|ta@16._A|
|000013d0| 70 70 65 6e 64 56 61 6c | 75 65 49 6e 66 6f 72 6d |ppendVal|ueInform|
|000013e0| 61 74 69 6f 6e 40 31 36 | 00 5f 45 72 72 6f 72 53 |ation@16|._ErrorS|
|000013f0| 74 72 69 6e 67 40 34 00 | 5f 52 65 67 6d 6f 6e 46 |tring@4.|_RegmonF|
|00001400| 72 65 65 46 69 6c 74 65 | 72 73 40 30 00 5f 4d 61 |reeFilte|rs@0._Ma|
|00001410| 6b 65 46 69 6c 74 65 72 | 41 72 72 61 79 40 31 32 |keFilter|Array@12|
|00001420| 00 5f 52 65 67 6d 6f 6e | 55 70 64 61 74 65 46 69 |._Regmon|UpdateFi|
|00001430| 6c 74 65 72 73 40 30 00 | 5f 41 70 70 6c 79 4e 61 |lters@0.|_ApplyNa|
|00001440| 6d 65 46 69 6c 74 65 72 | 40 34 00 5f 47 65 74 46 |meFilter|@4._GetF|
|00001450| 75 6c 6c 4e 61 6d 65 40 | 31 32 00 5f 47 65 74 50 |ullName@|12._GetP|
|00001460| 72 6f 63 65 73 73 4e 61 | 6d 65 4f 66 66 73 65 74 |rocessNa|meOffset|
|00001470| 40 30 00 5f 47 65 74 50 | 72 6f 63 65 73 73 40 34 |@0._GetP|rocess@4|
|00001480| 00 5f 48 6f 6f 6b 52 65 | 67 4f 70 65 6e 4b 65 79 |._HookRe|gOpenKey|
|00001490| 40 31 32 00 5f 48 6f 6f | 6b 52 65 67 43 72 65 61 |@12._Hoo|kRegCrea|
|000014a0| 74 65 4b 65 79 40 32 38 | 00 5f 48 6f 6f 6b 52 65 |teKey@28|._HookRe|
|000014b0| 67 43 6c 6f 73 65 4b 65 | 79 40 34 00 5f 48 6f 6f |gCloseKe|y@4._Hoo|
|000014c0| 6b 52 65 67 46 6c 75 73 | 68 4b 65 79 40 34 00 5f |kRegFlus|hKey@4._|
|000014d0| 48 6f 6f 6b 52 65 67 44 | 65 6c 65 74 65 4b 65 79 |HookRegD|eleteKey|
|000014e0| 40 34 00 5f 48 6f 6f 6b | 52 65 67 44 65 6c 65 74 |@4._Hook|RegDelet|
|000014f0| 65 56 61 6c 75 65 4b 65 | 79 40 38 00 5f 48 6f 6f |eValueKe|y@8._Hoo|
|00001500| 6b 52 65 67 53 65 74 56 | 61 6c 75 65 4b 65 79 40 |kRegSetV|alueKey@|
|00001510| 32 34 00 5f 48 6f 6f 6b | 52 65 67 45 6e 75 6d 65 |24._Hook|RegEnume|
|00001520| 72 61 74 65 4b 65 79 40 | 32 34 00 5f 48 6f 6f 6b |rateKey@|24._Hook|
|00001530| 52 65 67 51 75 65 72 79 | 4b 65 79 40 32 30 00 5f |RegQuery|Key@20._|
|00001540| 48 6f 6f 6b 52 65 67 45 | 6e 75 6d 65 72 61 74 65 |HookRegE|numerate|
|00001550| 56 61 6c 75 65 4b 65 79 | 40 32 34 00 5f 48 6f 6f |ValueKey|@24._Hoo|
|00001560| 6b 52 65 67 51 75 65 72 | 79 56 61 6c 75 65 4b 65 |kRegQuer|yValueKe|
|00001570| 79 40 32 34 00 5f 48 6f | 6f 6b 52 65 67 69 73 74 |y@24._Ho|okRegist|
|00001580| 72 79 40 30 00 5f 55 6e | 68 6f 6f 6b 52 65 67 69 |ry@0._Un|hookRegi|
|00001590| 73 74 72 79 40 30 00 5f | 52 65 67 6d 6f 6e 44 65 |stry@0._|RegmonDe|
|000015a0| 76 69 63 65 43 6f 6e 74 | 72 6f 6c 40 33 36 00 5f |viceCont|rol@36._|
|000015b0| 52 65 67 6d 6f 6e 44 69 | 73 70 61 74 63 68 40 38 |RegmonDi|spatch@8|
|000015c0| 00 5f 52 65 67 6d 6f 6e | 55 6e 6c 6f 61 64 40 34 |._Regmon|Unload@4|
|000015d0| 00 5f 46 72 65 65 48 61 | 73 68 4c 69 73 74 00 5f |._FreeHa|shList._|
|000015e0| 4d 61 78 53 74 6f 72 65 | 00 5f 4e 75 6d 53 74 6f |MaxStore|._NumSto|
|000015f0| 72 65 00 5f 53 65 71 75 | 65 6e 63 65 00 5f 43 75 |re._Sequ|ence._Cu|
|00001600| 72 72 65 6e 74 55 73 65 | 72 00 5f 4e 75 6d 50 61 |rrentUse|r._NumPa|
|00001610| 74 68 45 78 63 6c 75 64 | 65 46 69 6c 74 65 72 73 |thExclud|eFilters|
|00001620| 00 5f 4e 75 6d 50 61 74 | 68 49 6e 63 6c 75 64 65 |._NumPat|hInclude|
|00001630| 46 69 6c 74 65 72 73 00 | 5f 4e 75 6d 50 72 6f 63 |Filters.|_NumProc|
|00001640| 65 73 73 45 78 63 6c 75 | 64 65 46 69 6c 74 65 72 |essExclu|deFilter|
|00001650| 73 00 5f 4e 75 6d 50 72 | 6f 63 65 73 73 46 69 6c |s._NumPr|ocessFil|
|00001660| 74 65 72 73 00 5f 52 65 | 67 48 6f 6f 6b 65 64 00 |ters._Re|gHooked.|
|00001670| 5f 42 6f 6f 74 53 61 76 | 65 64 53 74 6f 72 65 4c |_BootSav|edStoreL|
|00001680| 69 73 74 00 5f 42 6f 6f | 74 4c 6f 67 67 69 6e 67 |ist._Boo|tLogging|
|00001690| 00 5f 47 55 49 41 63 74 | 69 76 65 00 5f 42 6f 6f |._GUIAct|ive._Boo|
|000016a0| 74 46 69 6c 74 65 72 00 | 5f 44 65 66 61 75 6c 74 |tFilter.|_Default|
|000016b0| 56 61 6c 75 65 00 5f 44 | 65 66 61 75 6c 74 56 61 |Value._D|efaultVa|
|000016c0| 6c 75 65 53 74 72 69 6e | 67 00 5f 48 61 73 68 54 |lueStrin|g._HashT|
|000016d0| 61 62 6c 65 00 5f 50 61 | 74 68 49 6e 63 6c 75 64 |able._Pa|thInclud|
|000016e0| 65 46 69 6c 74 65 72 73 | 00 5f 52 65 61 6c 52 65 |eFilters|._RealRe|
|000016f0| 67 44 65 6c 65 74 65 56 | 61 6c 75 65 4b 65 79 00 |gDeleteV|alueKey.|
|00001700| 5f 52 65 61 6c 52 65 67 | 45 6e 75 6d 65 72 61 74 |_RealReg|Enumerat|
|00001710| 65 4b 65 79 00 5f 52 65 | 61 6c 52 65 67 4f 70 65 |eKey._Re|alRegOpe|
|00001720| 6e 4b 65 79 00 5f 52 65 | 61 6c 52 65 67 43 72 65 |nKey._Re|alRegCre|
|00001730| 61 74 65 4b 65 79 00 5f | 65 72 72 73 74 72 69 6e |ateKey._|errstrin|
|00001740| 67 00 5f 52 65 61 6c 52 | 65 67 46 6c 75 73 68 4b |g._RealR|egFlushK|
|00001750| 65 79 00 5f 42 6f 6f 74 | 53 61 76 65 64 53 74 6f |ey._Boot|SavedSto|
|00001760| 72 65 54 61 69 6c 00 5f | 52 65 61 6c 52 65 67 53 |reTail._|RealRegS|
|00001770| 65 74 56 61 6c 75 65 4b | 65 79 00 5f 48 61 73 68 |etValueK|ey._Hash|
|00001780| 4d 75 74 65 78 00 5f 46 | 69 6c 74 65 72 44 65 66 |Mutex._F|ilterDef|
|00001790| 00 5f 52 65 61 6c 52 65 | 67 45 6e 75 6d 65 72 61 |._RealRe|gEnumera|
|000017a0| 74 65 56 61 6c 75 65 4b | 65 79 00 5f 50 72 6f 63 |teValueK|ey._Proc|
|000017b0| 65 73 73 46 69 6c 74 65 | 72 73 00 5f 50 72 6f 63 |essFilte|rs._Proc|
|000017c0| 65 73 73 45 78 63 6c 75 | 64 65 46 69 6c 74 65 72 |essExclu|deFilter|
|000017d0| 73 00 5f 52 65 61 6c 52 | 65 67 51 75 65 72 79 56 |s._RealR|egQueryV|
|000017e0| 61 6c 75 65 4b 65 79 00 | 5f 53 74 6f 72 65 4d 75 |alueKey.|_StoreMu|
|000017f0| 74 65 78 00 5f 52 65 61 | 6c 52 65 67 43 6c 6f 73 |tex._Rea|lRegClos|
|00001800| 65 4b 65 79 00 5f 46 69 | 6c 74 65 72 4d 75 74 65 |eKey._Fi|lterMute|
|00001810| 78 00 5f 4c 6f 67 67 69 | 6e 67 45 76 65 6e 74 00 |x._Loggi|ngEvent.|
|00001820| 5f 52 65 61 6c 52 65 67 | 44 65 6c 65 74 65 4b 65 |_RealReg|DeleteKe|
|00001830| 79 00 5f 50 61 74 68 45 | 78 63 6c 75 64 65 46 69 |y._PathE|xcludeFi|
|00001840| 6c 74 65 72 73 00 5f 52 | 65 61 6c 52 65 67 51 75 |lters._R|ealRegQu|
|00001850| 65 72 79 4b 65 79 00 5f | 47 55 49 44 65 76 69 63 |eryKey._|GUIDevic|
|00001860| 65 00 5f 53 65 72 76 69 | 63 65 54 61 62 6c 65 00 |e._Servi|ceTable.|
|00001870| 5f 50 72 6f 63 65 73 73 | 4e 61 6d 65 4f 66 66 73 |_Process|NameOffs|
|00001880| 65 74 00 5f 5f 69 6d 70 | 5f 5f 5a 77 43 72 65 61 |et.__imp|__ZwCrea|
|00001890| 74 65 46 69 6c 65 40 34 | 34 00 5f 5f 69 6d 70 5f |teFile@4|4.__imp_|
|000018a0| 5f 52 74 6c 49 6e 69 74 | 55 6e 69 63 6f 64 65 53 |_RtlInit|UnicodeS|
|000018b0| 74 72 69 6e 67 40 38 00 | 5f 5f 69 6d 70 5f 5f 4b |tring@8.|__imp__K|
|000018c0| 65 53 65 74 45 76 65 6e | 74 40 31 32 00 5f 5f 69 |eSetEven|t@12.__i|
|000018d0| 6d 70 5f 5f 5a 77 43 6c | 6f 73 65 40 34 00 5f 5f |mp__ZwCl|ose@4.__|
|000018e0| 69 6d 70 5f 5f 5a 77 53 | 65 74 49 6e 66 6f 72 6d |imp__ZwS|etInform|
|000018f0| 61 74 69 6f 6e 46 69 6c | 65 40 32 30 00 5f 5f 69 |ationFil|e@20.__i|
|00001900| 6d 70 5f 5f 73 70 72 69 | 6e 74 66 00 5f 5f 69 6d |mp__spri|ntf.__im|
|00001910| 70 5f 5f 5a 77 57 72 69 | 74 65 46 69 6c 65 40 33 |p__ZwWri|teFile@3|
|00001920| 36 00 5f 5f 69 6d 70 5f | 5f 45 78 41 6c 6c 6f 63 |6.__imp_|_ExAlloc|
|00001930| 61 74 65 50 6f 6f 6c 57 | 69 74 68 54 61 67 40 31 |atePoolW|ithTag@1|
|00001940| 32 00 5f 5f 69 6d 70 5f | 5f 45 78 46 72 65 65 50 |2.__imp_|_ExFreeP|
|00001950| 6f 6f 6c 40 34 00 5f 5f | 69 6d 70 5f 5f 4b 65 57 |ool@4.__|imp__KeW|
|00001960| 61 69 74 46 6f 72 53 69 | 6e 67 6c 65 4f 62 6a 65 |aitForSi|ngleObje|
|00001970| 63 74 40 32 30 00 5f 5f | 69 6d 70 5f 5f 45 78 51 |ct@20.__|imp__ExQ|
|00001980| 75 65 75 65 57 6f 72 6b | 49 74 65 6d 40 38 00 5f |ueueWork|Item@8._|
|00001990| 5f 69 6d 70 5f 5f 4b 65 | 52 65 6c 65 61 73 65 4d |_imp__Ke|ReleaseM|
|000019a0| 75 74 65 78 40 38 00 5f | 5f 69 6d 70 5f 5f 76 73 |utex@8._|_imp__vs|
|000019b0| 70 72 69 6e 74 66 00 5f | 5f 69 6d 70 5f 40 49 6e |printf._|_imp_@In|
|000019c0| 74 65 72 6c 6f 63 6b 65 | 64 49 6e 63 72 65 6d 65 |terlocke|dIncreme|
|000019d0| 6e 74 40 34 00 5f 5f 69 | 6d 70 5f 5f 73 74 72 6e |nt@4.__i|mp__strn|
|000019e0| 63 70 79 00 5f 5f 69 6d | 70 5f 5f 4f 62 52 65 66 |cpy.__im|p__ObRef|
|000019f0| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 42 79 48 61 |erenceOb|jectByHa|
|00001a00| 6e 64 6c 65 40 32 34 00 | 5f 5f 69 6d 70 5f 40 4f |ndle@24.|__imp_@O|
|00001a10| 62 66 44 65 72 65 66 65 | 72 65 6e 63 65 4f 62 6a |bfDerefe|renceObj|
|00001a20| 65 63 74 40 34 00 5f 5f | 69 6d 70 5f 5f 52 74 6c |ect@4.__|imp__Rtl|
|00001a30| 46 72 65 65 41 6e 73 69 | 53 74 72 69 6e 67 40 34 |FreeAnsi|String@4|
|00001a40| 00 5f 5f 69 6d 70 5f 5f | 52 74 6c 55 6e 69 63 6f |.__imp__|RtlUnico|
|00001a50| 64 65 53 74 72 69 6e 67 | 54 6f 41 6e 73 69 53 74 |deString|ToAnsiSt|
|00001a60| 72 69 6e 67 40 31 32 00 | 5f 5f 69 6d 70 5f 5f 73 |ring@12.|__imp__s|
|00001a70| 74 72 6e 63 6d 70 00 5f | 5f 69 6d 70 5f 5f 4f 62 |trncmp._|_imp__Ob|
|00001a80| 51 75 65 72 79 4e 61 6d | 65 53 74 72 69 6e 67 40 |QueryNam|eString@|
|00001a90| 31 36 00 5f 5f 69 6d 70 | 5f 5f 49 6f 47 65 74 43 |16.__imp|__IoGetC|
|00001aa0| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 40 30 00 |urrentPr|ocess@0.|
|00001ab0| 5f 5f 69 6d 70 5f 5f 5a | 77 44 65 6c 65 74 65 56 |__imp__Z|wDeleteV|
|00001ac0| 61 6c 75 65 4b 65 79 40 | 38 00 5f 5f 69 6d 70 5f |alueKey@|8.__imp_|
|00001ad0| 5f 5a 77 43 72 65 61 74 | 65 4b 65 79 40 32 38 00 |_ZwCreat|eKey@28.|
|00001ae0| 5f 5f 69 6d 70 5f 5f 5a | 77 53 65 74 56 61 6c 75 |__imp__Z|wSetValu|
|00001af0| 65 4b 65 79 40 32 34 00 | 5f 5f 69 6d 70 5f 5f 5a |eKey@24.|__imp__Z|
|00001b00| 77 46 6c 75 73 68 4b 65 | 79 40 34 00 5f 5f 69 6d |wFlushKe|y@4.__im|
|00001b10| 70 5f 5f 5a 77 44 65 6c | 65 74 65 4b 65 79 40 34 |p__ZwDel|eteKey@4|
|00001b20| 00 5f 5f 69 6d 70 5f 5f | 5a 77 45 6e 75 6d 65 72 |.__imp__|ZwEnumer|
|00001b30| 61 74 65 4b 65 79 40 32 | 34 00 5f 5f 69 6d 70 5f |ateKey@2|4.__imp_|
|00001b40| 5f 5a 77 45 6e 75 6d 65 | 72 61 74 65 56 61 6c 75 |_ZwEnume|rateValu|
|00001b50| 65 4b 65 79 40 32 34 00 | 5f 5f 69 6d 70 5f 5f 5a |eKey@24.|__imp__Z|
|00001b60| 77 51 75 65 72 79 56 61 | 6c 75 65 4b 65 79 40 32 |wQueryVa|lueKey@2|
|00001b70| 34 00 5f 5f 69 6d 70 5f | 5f 5a 77 51 75 65 72 79 |4.__imp_|_ZwQuery|
|00001b80| 4b 65 79 40 32 30 00 5f | 5f 69 6d 70 5f 5f 5a 77 |Key@20._|_imp__Zw|
|00001b90| 4f 70 65 6e 4b 65 79 40 | 31 32 00 5f 5f 69 6d 70 |OpenKey@|12.__imp|
|00001ba0| 5f 40 49 6f 66 43 6f 6d | 70 6c 65 74 65 52 65 71 |_@IofCom|pleteReq|
|00001bb0| 75 65 73 74 40 38 00 5f | 5f 69 6d 70 5f 5f 49 6f |uest@8._|_imp__Io|
|00001bc0| 55 6e 72 65 67 69 73 74 | 65 72 53 68 75 74 64 6f |Unregist|erShutdo|
|00001bd0| 77 6e 4e 6f 74 69 66 69 | 63 61 74 69 6f 6e 40 34 |wnNotifi|cation@4|
|00001be0| 00 5f 5f 69 6d 70 5f 5f | 49 6f 44 65 6c 65 74 65 |.__imp__|IoDelete|
|00001bf0| 44 65 76 69 63 65 40 34 | 00 5f 5f 69 6d 70 5f 5f |Device@4|.__imp__|
|00001c00| 49 6f 44 65 6c 65 74 65 | 53 79 6d 62 6f 6c 69 63 |IoDelete|Symbolic|
|00001c10| 4c 69 6e 6b 40 34 00 5f | 5f 69 6d 70 5f 5f 49 6f |Link@4._|_imp__Io|
|00001c20| 52 65 67 69 73 74 65 72 | 53 68 75 74 64 6f 77 6e |Register|Shutdown|
|00001c30| 4e 6f 74 69 66 69 63 61 | 74 69 6f 6e 40 34 00 5f |Notifica|tion@4._|
|00001c40| 5f 69 6d 70 5f 5f 5a 77 | 44 69 73 70 6c 61 79 53 |_imp__Zw|DisplayS|
|00001c50| 74 72 69 6e 67 40 34 00 | 5f 5f 69 6d 70 5f 5f 4b |tring@4.|__imp__K|
|00001c60| 65 49 6e 69 74 69 61 6c | 69 7a 65 45 76 65 6e 74 |eInitial|izeEvent|
|00001c70| 40 31 32 00 5f 4b 65 53 | 65 72 76 69 63 65 44 65 |@12._KeS|erviceDe|
|00001c80| 73 63 72 69 70 74 6f 72 | 54 61 62 6c 65 00 5f 5f |scriptor|Table.__|
|00001c90| 69 6d 70 5f 5f 4b 65 49 | 6e 69 74 69 61 6c 69 7a |imp__KeI|nitializ|
|00001ca0| 65 4d 75 74 65 78 40 38 | 00 5f 5f 69 6d 70 5f 5f |eMutex@8|.__imp__|
|00001cb0| 49 6f 43 72 65 61 74 65 | 53 79 6d 62 6f 6c 69 63 |IoCreate|Symbolic|
|00001cc0| 4c 69 6e 6b 40 38 00 5f | 5f 69 6d 70 5f 5f 49 6f |Link@8._|_imp__Io|
|00001cd0| 43 72 65 61 74 65 44 65 | 76 69 63 65 40 32 38 00 |CreateDe|vice@28.|
|00001ce0| 5f 5f 69 6d 70 5f 5f 52 | 74 6c 51 75 65 72 79 52 |__imp__R|tlQueryR|
|00001cf0| 65 67 69 73 74 72 79 56 | 61 6c 75 65 73 40 32 30 |egistryV|alues@20|
|00001d00| 00 5f 5f 69 6d 70 5f 5f | 6d 65 6d 6d 6f 76 65 00 |.__imp__|memmove.|
|00001d10| 5f 5a 77 43 72 65 61 74 | 65 46 69 6c 65 40 34 34 |_ZwCreat|eFile@44|
|00001d20| 00 5f 5f 49 4d 50 4f 52 | 54 5f 44 45 53 43 52 49 |.__IMPOR|T_DESCRI|
|00001d30| 50 54 4f 52 5f 6e 74 6f | 73 6b 72 6e 6c 00 5f 52 |PTOR_nto|skrnl._R|
|00001d40| 74 6c 49 6e 69 74 55 6e | 69 63 6f 64 65 53 74 72 |tlInitUn|icodeStr|
|00001d50| 69 6e 67 40 38 00 5f 4b | 65 53 65 74 45 76 65 6e |ing@8._K|eSetEven|
|00001d60| 74 40 31 32 00 5f 5a 77 | 43 6c 6f 73 65 40 34 00 |t@12._Zw|Close@4.|
|00001d70| 5f 5a 77 53 65 74 49 6e | 66 6f 72 6d 61 74 69 6f |_ZwSetIn|formatio|
|00001d80| 6e 46 69 6c 65 40 32 30 | 00 5f 5a 77 57 72 69 74 |nFile@20|._ZwWrit|
|00001d90| 65 46 69 6c 65 40 33 36 | 00 5f 45 78 41 6c 6c 6f |eFile@36|._ExAllo|
|00001da0| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 40 |catePool|WithTag@|
|00001db0| 31 32 00 5f 45 78 46 72 | 65 65 50 6f 6f 6c 40 34 |12._ExFr|eePool@4|
|00001dc0| 00 5f 4b 65 57 61 69 74 | 46 6f 72 53 69 6e 67 6c |._KeWait|ForSingl|
|00001dd0| 65 4f 62 6a 65 63 74 40 | 32 30 00 5f 45 78 51 75 |eObject@|20._ExQu|
|00001de0| 65 75 65 57 6f 72 6b 49 | 74 65 6d 40 38 00 5f 4b |eueWorkI|tem@8._K|
|00001df0| 65 52 65 6c 65 61 73 65 | 4d 75 74 65 78 40 38 00 |eRelease|Mutex@8.|
|00001e00| 5f 76 73 70 72 69 6e 74 | 66 00 40 49 6e 74 65 72 |_vsprint|f.@Inter|
|00001e10| 6c 6f 63 6b 65 64 49 6e | 63 72 65 6d 65 6e 74 40 |lockedIn|crement@|
|00001e20| 34 00 5f 4f 62 52 65 66 | 65 72 65 6e 63 65 4f 62 |4._ObRef|erenceOb|
|00001e30| 6a 65 63 74 42 79 48 61 | 6e 64 6c 65 40 32 34 00 |jectByHa|ndle@24.|
|00001e40| 40 4f 62 66 44 65 72 65 | 66 65 72 65 6e 63 65 4f |@ObfDere|ferenceO|
|00001e50| 62 6a 65 63 74 40 34 00 | 5f 52 74 6c 46 72 65 65 |bject@4.|_RtlFree|
|00001e60| 41 6e 73 69 53 74 72 69 | 6e 67 40 34 00 5f 52 74 |AnsiStri|ng@4._Rt|
|00001e70| 6c 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |lUnicode|StringTo|
|00001e80| 41 6e 73 69 53 74 72 69 | 6e 67 40 31 32 00 5f 4f |AnsiStri|ng@12._O|
|00001e90| 62 51 75 65 72 79 4e 61 | 6d 65 53 74 72 69 6e 67 |bQueryNa|meString|
|00001ea0| 40 31 36 00 5f 49 6f 47 | 65 74 43 75 72 72 65 6e |@16._IoG|etCurren|
|00001eb0| 74 50 72 6f 63 65 73 73 | 40 30 00 5f 5a 77 44 65 |tProcess|@0._ZwDe|
|00001ec0| 6c 65 74 65 56 61 6c 75 | 65 4b 65 79 40 38 00 5f |leteValu|eKey@8._|
|00001ed0| 5a 77 43 72 65 61 74 65 | 4b 65 79 40 32 38 00 5f |ZwCreate|Key@28._|
|00001ee0| 5a 77 53 65 74 56 61 6c | 75 65 4b 65 79 40 32 34 |ZwSetVal|ueKey@24|
|00001ef0| 00 5f 5a 77 46 6c 75 73 | 68 4b 65 79 40 34 00 5f |._ZwFlus|hKey@4._|
|00001f00| 5a 77 44 65 6c 65 74 65 | 4b 65 79 40 34 00 5f 5a |ZwDelete|Key@4._Z|
|00001f10| 77 45 6e 75 6d 65 72 61 | 74 65 4b 65 79 40 32 34 |wEnumera|teKey@24|
|00001f20| 00 5f 5a 77 45 6e 75 6d | 65 72 61 74 65 56 61 6c |._ZwEnum|erateVal|
|00001f30| 75 65 4b 65 79 40 32 34 | 00 5f 5a 77 51 75 65 72 |ueKey@24|._ZwQuer|
|00001f40| 79 56 61 6c 75 65 4b 65 | 79 40 32 34 00 5f 5a 77 |yValueKe|y@24._Zw|
|00001f50| 51 75 65 72 79 4b 65 79 | 40 32 30 00 5f 5a 77 4f |QueryKey|@20._ZwO|
|00001f60| 70 65 6e 4b 65 79 40 31 | 32 00 40 49 6f 66 43 6f |penKey@1|2.@IofCo|
|00001f70| 6d 70 6c 65 74 65 52 65 | 71 75 65 73 74 40 38 00 |mpleteRe|quest@8.|
|00001f80| 5f 49 6f 55 6e 72 65 67 | 69 73 74 65 72 53 68 75 |_IoUnreg|isterShu|
|00001f90| 74 64 6f 77 6e 4e 6f 74 | 69 66 69 63 61 74 69 6f |tdownNot|ificatio|
|00001fa0| 6e 40 34 00 5f 49 6f 44 | 65 6c 65 74 65 44 65 76 |n@4._IoD|eleteDev|
|00001fb0| 69 63 65 40 34 00 5f 49 | 6f 44 65 6c 65 74 65 53 |ice@4._I|oDeleteS|
|00001fc0| 79 6d 62 6f 6c 69 63 4c | 69 6e 6b 40 34 00 5f 49 |ymbolicL|ink@4._I|
|00001fd0| 6f 52 65 67 69 73 74 65 | 72 53 68 75 74 64 6f 77 |oRegiste|rShutdow|
|00001fe0| 6e 4e 6f 74 69 66 69 63 | 61 74 69 6f 6e 40 34 00 |nNotific|ation@4.|
|00001ff0| 5f 5a 77 44 69 73 70 6c | 61 79 53 74 72 69 6e 67 |_ZwDispl|ayString|
|00002000| 40 34 00 5f 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |@4._KeIn|itialize|
|00002010| 45 76 65 6e 74 40 31 32 | 00 5f 5f 69 6d 70 5f 5f |Event@12|.__imp__|
|00002020| 4b 65 53 65 72 76 69 63 | 65 44 65 73 63 72 69 70 |KeServic|eDescrip|
|00002030| 74 6f 72 54 61 62 6c 65 | 00 5f 4b 65 49 6e 69 74 |torTable|._KeInit|
|00002040| 69 61 6c 69 7a 65 4d 75 | 74 65 78 40 38 00 5f 49 |ializeMu|tex@8._I|
|00002050| 6f 43 72 65 61 74 65 53 | 79 6d 62 6f 6c 69 63 4c |oCreateS|ymbolicL|
|00002060| 69 6e 6b 40 38 00 5f 49 | 6f 43 72 65 61 74 65 44 |ink@8._I|oCreateD|
|00002070| 65 76 69 63 65 40 32 38 | 00 5f 52 74 6c 51 75 65 |evice@28|._RtlQue|
|00002080| 72 79 52 65 67 69 73 74 | 72 79 56 61 6c 75 65 73 |ryRegist|ryValues|
|00002090| 40 32 30 00 5f 5f 4e 55 | 4c 4c 5f 49 4d 50 4f 52 |@20.__NU|LL_IMPOR|
|000020a0| 54 5f 44 45 53 43 52 49 | 50 54 4f 52 00 7f 6e 74 |T_DESCRI|PTOR..nt|
|000020b0| 6f 73 6b 72 6e 6c 5f 4e | 55 4c 4c 5f 54 48 55 4e |oskrnl_N|ULL_THUN|
|000020c0| 4b 5f 44 41 54 41 00 5f | 3f 64 69 73 6b 46 75 6c |K_DATA._|?diskFul|
|000020d0| 6c 45 72 72 6f 72 40 3f | 31 3f 3f 52 65 67 6d 6f |lError@?|1??Regmo|
|000020e0| 6e 57 72 69 74 65 42 75 | 66 66 65 72 40 40 39 40 |nWriteBu|ffer@@9@|
|000020f0| 39 00 5f 3f 74 65 78 74 | 40 3f 31 3f 3f 55 70 64 |9._?text|@?1??Upd|
|00002100| 61 74 65 53 74 6f 72 65 | 40 40 39 40 39 00       |ateStore|@@9@9.  |
+--------+-------------------------+-------------------------+--------+--------+