home *** CD-ROM | disk | FTP | other *** search
| Unknown | 1997-05-23 | 6.0 KB |
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 90 f5 11 00 00 00 00 00 | 00 00 00 00 92 0c 12 00 |........|........|
|00000010| 94 d2 10 00 7c f5 11 00 | 00 00 00 00 00 00 00 00 |....|...|........|
|00000020| 12 0d 12 00 80 d2 10 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 fc 0c 12 00 |........|........|
|00000040| e6 0c 12 00 ac 0c 12 00 | c8 0c 12 00 00 00 00 00 |........|........|
|00000050| a2 f9 11 00 ba f9 11 00 | d2 f9 11 00 80 f9 11 00 |........|........|
|00000060| 68 f9 11 00 ee f9 11 00 | 12 fa 11 00 1e fa 11 00 |h.......|........|
|00000070| 38 fa 11 00 4e fa 11 00 | 06 fa 11 00 6c fa 11 00 |8...N...|....l...|
|00000080| 9a fa 11 00 b4 fa 11 00 | ce fa 11 00 de fa 11 00 |........|........|
|00000090| fe fa 11 00 18 fb 11 00 | 32 fb 11 00 50 fb 11 00 |........|2...P...|
|000000a0| 6c fb 11 00 8a fb 11 00 | 9e fb 11 00 a8 fb 11 00 |l.......|........|
|000000b0| 82 fa 11 00 b2 fb 11 00 | cc fb 11 00 d6 fb 11 00 |........|........|
|000000c0| ec fb 11 00 fa fb 11 00 | 06 fc 11 00 1e fc 11 00 |........|........|
|000000d0| 34 fc 11 00 4e fc 11 00 | 62 fc 11 00 7a fc 11 00 |4...N...|b...z...|
|000000e0| 94 fc 11 00 a6 fc 11 00 | be fc 11 00 d8 fc 11 00 |........|........|
|000000f0| e6 fc 11 00 f6 fc 11 00 | 12 fd 11 00 2a fd 11 00 |........|....*...|
|00000100| 48 fd 11 00 64 fd 11 00 | 70 fd 11 00 84 fd 11 00 |H...d...|p.......|
|00000110| 98 fd 11 00 b4 fd 11 00 | c0 fd 11 00 d2 fd 11 00 |........|........|
|00000120| c2 fb 11 00 ea fd 11 00 | 1a fe 11 00 28 fe 11 00 |........|....(...|
|00000130| 3c fe 11 00 56 fe 11 00 | 66 fe 11 00 82 fe 11 00 |<...V...|f.......|
|00000140| 9a fe 11 00 a8 fe 11 00 | c0 fe 11 00 ce fe 11 00 |........|........|
|00000150| e0 fe 11 00 f6 fe 11 00 | 10 ff 11 00 2a ff 11 00 |........|....*...|
|00000160| 46 ff 11 00 5c ff 11 00 | 74 ff 11 00 8a ff 11 00 |F...\...|t.......|
|00000170| a8 ff 11 00 b8 ff 11 00 | ca ff 11 00 dc ff 11 00 |........|........|
|00000180| ec ff 11 00 fe ff 11 00 | 0e 00 12 00 18 00 12 00 |........|........|
|00000190| 30 00 12 00 4a 00 12 00 | 62 00 12 00 7c 00 12 00 |0...J...|b...|...|
|000001a0| 96 00 12 00 a2 00 12 00 | c2 00 12 00 de 00 12 00 |........|........|
|000001b0| f4 00 12 00 12 01 12 00 | 2e 01 12 00 38 01 12 00 |........|....8...|
|000001c0| 42 01 12 00 4c 01 12 00 | 56 01 12 00 60 01 12 00 |B...L...|V...`...|
|000001d0| 76 01 12 00 92 01 12 00 | ac 01 12 00 c2 01 12 00 |v.......|........|
|000001e0| e0 01 12 00 fe 01 12 00 | 1c 02 12 00 32 02 12 00 |........|....2...|
|000001f0| 42 02 12 00 5c 02 12 00 | 70 02 12 00 8c 02 12 00 |B...\...|p.......|
|00000200| 02 fe 11 00 2c f9 11 00 | e8 02 12 00 f2 02 12 00 |....,...|........|
|00000210| 00 03 12 00 0a 03 12 00 | 14 03 12 00 24 03 12 00 |........|....$...|
|00000220| 3c 03 12 00 56 03 12 00 | 72 03 12 00 8e 03 12 00 |<...V...|r.......|
|00000230| a2 03 12 00 bc 03 12 00 | d2 03 12 00 ee 03 12 00 |........|........|
|00000240| 04 04 12 00 28 04 12 00 | 38 04 12 00 50 04 12 00 |....(...|8...P...|
|00000250| 6e 04 12 00 7c 04 12 00 | 96 04 12 00 b4 04 12 00 |n...|...|........|
|00000260| c8 04 12 00 e2 04 12 00 | f6 04 12 00 08 05 12 00 |........|........|
|00000270| 1c 05 12 00 2e 05 12 00 | 4a 05 12 00 60 05 12 00 |........|J...`...|
|00000280| 78 05 12 00 8c 05 12 00 | a4 05 12 00 c6 05 12 00 |x.......|........|
|00000290| e2 05 12 00 f2 05 12 00 | 00 06 12 00 16 06 12 00 |........|........|
|000002a0| 2e 06 12 00 50 06 12 00 | 66 06 12 00 82 06 12 00 |....P...|f.......|
|000002b0| 9a 06 12 00 a8 06 12 00 | b8 06 12 00 cc 06 12 00 |........|........|
|000002c0| e4 06 12 00 02 07 12 00 | 14 07 12 00 2a 07 12 00 |........|....*...|
|000002d0| 3e 07 12 00 5e 07 12 00 | 78 07 12 00 98 07 12 00 |>...^...|x.......|
|000002e0| b0 07 12 00 c8 07 12 00 | e2 07 12 00 f2 07 12 00 |........|........|
|000002f0| 10 08 12 00 24 08 12 00 | 44 08 12 00 52 08 12 00 |....$...|D...R...|
|00000300| 62 08 12 00 82 08 12 00 | a2 08 12 00 c2 08 12 00 |b.......|........|
|00000310| e2 08 12 00 ee 08 12 00 | fe 08 12 00 1c 09 12 00 |........|........|
|00000320| 28 09 12 00 42 09 12 00 | 58 09 12 00 6e 09 12 00 |(...B...|X...n...|
|00000330| 84 09 12 00 9e 09 12 00 | b8 09 12 00 d6 09 12 00 |........|........|
|00000340| ea 09 12 00 02 0a 12 00 | 1c 0a 12 00 2c 0a 12 00 |........|....,...|
|00000350| 42 0a 12 00 56 0a 12 00 | 76 0a 12 00 8a 0a 12 00 |B...V...|v.......|
|00000360| a2 0a 12 00 b8 0a 12 00 | d6 0a 12 00 ea 0a 12 00 |........|........|
|00000370| fc 0a 12 00 14 0b 12 00 | 2c 0b 12 00 44 0b 12 00 |........|,...D...|
|00000380| 5a 0b 12 00 70 0b 12 00 | 84 0b 12 00 9e 0b 12 00 |Z...p...|........|
|00000390| bc 0b 12 00 d8 0b 12 00 | f6 0b 12 00 10 0c 12 00 |........|........|
|000003a0| 24 0c 12 00 32 0c 12 00 | 42 0c 12 00 54 0c 12 00 |$...2...|B...T...|
|000003b0| 68 0c 12 00 80 0c 12 00 | a0 0c 12 00 50 f9 11 00 |h.......|....P...|
|000003c0| 3a f9 11 00 a8 02 12 00 | 14 f9 11 00 c8 02 12 00 |:.......|........|
|000003d0| 00 00 00 00 36 00 45 78 | 41 6c 6c 6f 63 61 74 65 |....6.Ex|Allocate|
|000003e0| 50 6f 6f 6c 57 69 74 68 | 54 61 67 00 42 00 45 78 |PoolWith|Tag.B.Ex|
|000003f0| 46 72 65 65 50 6f 6f 6c | 00 00 d7 00 49 6e 74 65 |FreePool|....Inte|
|00000400| 72 6c 6f 63 6b 65 64 45 | 78 63 68 61 6e 67 65 00 |rlockedE|xchange.|
|00000410| 80 01 4b 65 4c 65 61 76 | 65 43 72 69 74 69 63 61 |..KeLeav|eCritica|
|00000420| 6c 52 65 67 69 6f 6e 00 | 6d 00 45 78 52 65 6c 65 |lRegion.|m.ExRele|
|00000430| 61 73 65 52 65 73 6f 75 | 72 63 65 4c 69 74 65 00 |aseResou|rceLite.|
|00000440| 2e 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |..ExAcqu|ireResou|
|00000450| 72 63 65 45 78 63 6c 75 | 73 69 76 65 4c 69 74 65 |rceExclu|siveLite|
|00000460| 00 00 5b 01 4b 65 45 6e | 74 65 72 43 72 69 74 69 |..[.KeEn|terCriti|
|00000470| 63 61 6c 52 65 67 69 6f | 6e 00 d6 00 49 6e 74 65 |calRegio|n...Inte|
|00000480| 72 6c 6f 63 6b 65 64 44 | 65 63 72 65 6d 65 6e 74 |rlockedD|ecrement|
|00000490| 00 00 4a 00 45 78 49 6e | 69 74 69 61 6c 69 7a 65 |..J.ExIn|itialize|
|000004a0| 52 65 73 6f 75 72 63 65 | 4c 69 74 65 00 00 3c 00 |Resource|Lite..<.|
|000004b0| 45 78 44 65 6c 65 74 65 | 52 65 73 6f 75 72 63 65 |ExDelete|Resource|
|000004c0| 4c 69 74 65 00 00 2a 00 | 44 62 67 50 72 69 6e 74 |Lite..*.|DbgPrint|
|000004d0| 00 00 e7 03 76 73 70 72 | 69 6e 74 66 00 00 63 00 |....vspr|intf..c.|
|000004e0| 45 78 52 61 69 73 65 41 | 63 63 65 73 73 56 69 6f |ExRaiseA|ccessVio|
|000004f0| 6c 61 74 69 6f 6e 00 00 | ff 01 4d 6d 55 73 65 72 |lation..|..MmUser|
|00000500| 50 72 6f 62 65 41 64 64 | 72 65 73 73 00 00 64 00 |ProbeAdd|ress..d.|
|00000510| 45 78 52 61 69 73 65 44 | 61 74 61 74 79 70 65 4d |ExRaiseD|atatypeM|
|00000520| 69 73 61 6c 69 67 6e 6d | 65 6e 74 00 72 03 5a 77 |isalignm|ent.r.Zw|
|00000530| 46 72 65 65 56 69 72 74 | 75 61 6c 4d 65 6d 6f 72 |FreeVirt|ualMemor|
|00000540| 79 00 f2 01 4d 6d 53 65 | 63 75 72 65 56 69 72 74 |y...MmSe|cureVirt|
|00000550| 75 61 6c 4d 65 6d 6f 72 | 79 00 5c 03 5a 77 41 6c |ualMemor|y.\.ZwAl|
|00000560| 6c 6f 63 61 74 65 56 69 | 72 74 75 61 6c 4d 65 6d |locateVi|rtualMem|
|00000570| 6f 72 79 00 fe 01 4d 6d | 55 6e 73 65 63 75 72 65 |ory...Mm|Unsecure|
|00000580| 56 69 72 74 75 61 6c 4d | 65 6d 6f 72 79 00 44 01 |VirtualM|emory.D.|
|00000590| 49 6f 66 43 61 6c 6c 44 | 72 69 76 65 72 00 e7 00 |IofCallD|river...|
|000005a0| 49 6f 42 75 69 6c 64 44 | 65 76 69 63 65 49 6f 43 |IoBuildD|eviceIoC|
|000005b0| 6f 6e 74 72 6f 6c 52 65 | 71 75 65 73 74 00 eb 02 |ontrolRe|quest...|
|000005c0| 52 74 6c 4d 75 6c 74 69 | 42 79 74 65 54 6f 55 6e |RtlMulti|ByteToUn|
|000005d0| 69 63 6f 64 65 4e 00 00 | 18 03 52 74 6c 55 6e 69 |icodeN..|..RtlUni|
|000005e0| 63 6f 64 65 54 6f 4d 75 | 6c 74 69 42 79 74 65 4e |codeToMu|ltiByteN|
|000005f0| 00 00 9b 01 4b 65 52 65 | 73 74 6f 72 65 46 6c 6f |....KeRe|storeFlo|
|00000600| 61 74 69 6e 67 50 6f 69 | 6e 74 53 74 61 74 65 00 |atingPoi|ntState.|
|00000610| 9d 01 4b 65 53 61 76 65 | 46 6c 6f 61 74 69 6e 67 |..KeSave|Floating|
|00000620| 50 6f 69 6e 74 53 74 61 | 74 65 00 00 a6 01 4b 65 |PointSta|te....Ke|
|00000630| 53 65 74 4b 65 72 6e 65 | 6c 53 74 61 63 6b 53 77 |SetKerne|lStackSw|
|00000640| 61 70 45 6e 61 62 6c 65 | 00 00 de 01 4d 6d 47 72 |apEnable|....MmGr|
|00000650| 6f 77 4b 65 72 6e 65 6c | 53 74 61 63 6b 00 d1 03 |owKernel|Stack...|
|00000660| 6d 65 6d 6d 6f 76 65 00 | ed 03 77 63 73 6c 65 6e |memmove.|..wcslen|
|00000670| 00 00 50 02 50 72 6f 62 | 65 46 6f 72 57 72 69 74 |..P.Prob|eForWrit|
|00000680| 65 00 5e 03 5a 77 43 6c | 6f 73 65 00 eb 03 77 63 |e.^.ZwCl|ose...wc|
|00000690| 73 63 70 79 00 00 6f 03 | 5a 77 45 6e 75 6d 65 72 |scpy..o.|ZwEnumer|
|000006a0| 61 74 65 56 61 6c 75 65 | 4b 65 79 00 89 03 5a 77 |ateValue|Key...Zw|
|000006b0| 51 75 65 72 79 4b 65 79 | 00 00 7c 03 5a 77 4f 70 |QueryKey|..|.ZwOp|
|000006c0| 65 6e 4b 65 79 00 d3 02 | 52 74 6c 49 6e 69 74 55 |enKey...|RtlInitU|
|000006d0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 10 03 |nicodeSt|ring....|
|000006e0| 52 74 6c 54 69 6d 65 54 | 6f 54 69 6d 65 46 69 65 |RtlTimeT|oTimeFie|
|000006f0| 6c 64 73 00 70 00 45 78 | 53 79 73 74 65 6d 54 69 |lds.p.Ex|SystemTi|
|00000700| 6d 65 54 6f 4c 6f 63 61 | 6c 54 69 6d 65 00 86 01 |meToLoca|lTime...|
|00000710| 4b 65 51 75 65 72 79 53 | 79 73 74 65 6d 54 69 6d |KeQueryS|ystemTim|
|00000720| 65 00 47 02 4f 62 66 44 | 65 72 65 66 65 72 65 6e |e.G.ObfD|ereferen|
|00000730| 63 65 4f 62 6a 65 63 74 | 00 00 eb 01 4d 6d 4d 61 |ceObject|....MmMa|
|00000740| 70 56 69 65 77 49 6e 53 | 79 73 74 65 6d 53 70 61 |pViewInS|ystemSpa|
|00000750| 63 65 00 00 d6 01 4d 6d | 43 72 65 61 74 65 53 65 |ce....Mm|CreateSe|
|00000760| 63 74 69 6f 6e 00 98 03 | 5a 77 53 65 74 49 6e 66 |ction...|ZwSetInf|
|00000770| 6f 72 6d 61 74 69 6f 6e | 46 69 6c 65 00 00 86 03 |ormation|File....|
|00000780| 5a 77 51 75 65 72 79 49 | 6e 66 6f 72 6d 61 74 69 |ZwQueryI|nformati|
|00000790| 6f 6e 46 69 6c 65 00 00 | 7b 03 5a 77 4f 70 65 6e |onFile..|{.ZwOpen|
|000007a0| 46 69 6c 65 00 00 63 03 | 5a 77 43 72 65 61 74 65 |File..c.|ZwCreate|
|000007b0| 46 69 6c 65 00 00 fc 01 | 4d 6d 55 6e 6d 61 70 56 |File....|MmUnmapV|
|000007c0| 69 65 77 49 6e 53 79 73 | 74 65 6d 53 70 61 63 65 |iewInSys|temSpace|
|000007d0| 00 00 cb 02 52 74 6c 47 | 65 74 44 65 66 61 75 6c |....RtlG|etDefaul|
|000007e0| 74 43 6f 64 65 50 61 67 | 65 00 c7 01 4c 64 72 46 |tCodePag|e...LdrF|
|000007f0| 69 6e 64 52 65 73 6f 75 | 72 63 65 44 69 72 65 63 |indResou|rceDirec|
|00000800| 74 6f 72 79 5f 55 00 00 | 7e 02 52 74 6c 41 70 70 |tory_U..|~.RtlApp|
|00000810| 65 6e 64 55 6e 69 63 6f | 64 65 54 6f 53 74 72 69 |endUnico|deToStri|
|00000820| 6e 67 00 00 c1 03 5f 77 | 63 73 6e 69 63 6d 70 00 |ng...._w|csnicmp.|
|00000830| c5 01 4c 64 72 41 63 63 | 65 73 73 52 65 73 6f 75 |..LdrAcc|essResou|
|00000840| 72 63 65 00 c8 01 4c 64 | 72 46 69 6e 64 52 65 73 |rce...Ld|rFindRes|
|00000850| 6f 75 72 63 65 5f 55 00 | 14 03 52 74 6c 55 6e 69 |ource_U.|..RtlUni|
|00000860| 63 6f 64 65 53 74 72 69 | 6e 67 54 6f 49 6e 74 65 |codeStri|ngToInte|
|00000870| 67 65 72 00 e2 03 73 77 | 70 72 69 6e 74 66 00 00 |ger...sw|printf..|
|00000880| 8f 03 5a 77 51 75 65 72 | 79 56 61 6c 75 65 4b 65 |..ZwQuer|yValueKe|
|00000890| 79 00 17 03 52 74 6c 55 | 6e 69 63 6f 64 65 54 6f |y...RtlU|nicodeTo|
|000008a0| 43 75 73 74 6f 6d 43 50 | 4e 00 9c 02 52 74 6c 43 |CustomCP|N...RtlC|
|000008b0| 75 73 74 6f 6d 43 50 54 | 6f 55 6e 69 63 6f 64 65 |ustomCPT|oUnicode|
|000008c0| 4e 00 d1 02 52 74 6c 49 | 6e 69 74 43 6f 64 65 50 |N...RtlI|nitCodeP|
|000008d0| 61 67 65 54 61 62 6c 65 | 00 00 91 03 5a 77 52 65 |ageTable|....ZwRe|
|000008e0| 61 64 46 69 6c 65 00 00 | 70 01 4b 65 49 6e 69 74 |adFile..|p.KeInit|
|000008f0| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 6f 00 45 78 |ializeEv|ent.o.Ex|
|00000900| 53 79 73 74 65 6d 45 78 | 63 65 70 74 69 6f 6e 46 |SystemEx|ceptionF|
|00000910| 69 6c 74 65 72 00 85 01 | 4b 65 50 75 6c 73 65 45 |ilter...|KePulseE|
|00000920| 76 65 6e 74 00 00 42 02 | 4f 62 52 65 66 65 72 65 |vent..B.|ObRefere|
|00000930| 6e 63 65 4f 62 6a 65 63 | 74 42 79 48 61 6e 64 6c |nceObjec|tByHandl|
|00000940| 65 00 b8 01 4b 65 57 61 | 69 74 46 6f 72 53 69 6e |e...KeWa|itForSin|
|00000950| 67 6c 65 4f 62 6a 65 63 | 74 00 a2 01 4b 65 53 65 |gleObjec|t...KeSe|
|00000960| 74 45 76 65 6e 74 00 00 | d9 00 49 6e 74 65 72 6c |tEvent..|..Interl|
|00000970| 6f 63 6b 65 64 49 6e 63 | 72 65 6d 65 6e 74 00 00 |ockedInc|rement..|
|00000980| 50 03 53 65 54 6f 6b 65 | 6e 54 79 70 65 00 65 02 |P.SeToke|nType.e.|
|00000990| 50 73 52 65 76 65 72 74 | 54 6f 53 65 6c 66 00 00 |PsRevert|ToSelf..|
|000009a0| 3e 03 53 65 49 6d 70 65 | 72 73 6f 6e 61 74 65 43 |>.SeImpe|rsonateC|
|000009b0| 6c 69 65 6e 74 00 38 03 | 53 65 43 72 65 61 74 65 |lient.8.|SeCreate|
|000009c0| 43 6c 69 65 6e 74 53 65 | 63 75 72 69 74 79 00 00 |ClientSe|curity..|
|000009d0| 57 01 4b 65 44 65 6c 61 | 79 45 78 65 63 75 74 69 |W.KeDela|yExecuti|
|000009e0| 6f 6e 54 68 72 65 61 64 | 00 00 b6 01 4b 65 57 61 |onThread|....KeWa|
|000009f0| 69 74 46 6f 72 4d 75 6c | 74 69 70 6c 65 4f 62 6a |itForMul|tipleObj|
|00000a00| 65 63 74 73 00 00 b7 02 | 52 74 6c 46 69 6c 6c 4d |ects....|RtlFillM|
|00000a10| 65 6d 6f 72 79 55 6c 6f | 6e 67 00 00 a2 03 5a 77 |emoryUlo|ng....Zw|
|00000a20| 55 6e 6d 61 70 56 69 65 | 77 4f 66 53 65 63 74 69 |UnmapVie|wOfSecti|
|00000a30| 6f 6e 00 00 77 03 5a 77 | 4d 61 70 56 69 65 77 4f |on..w.Zw|MapViewO|
|00000a40| 66 53 65 63 74 69 6f 6e | 00 00 d5 00 49 6e 74 65 |fSection|....Inte|
|00000a50| 72 6c 6f 63 6b 65 64 43 | 6f 6d 70 61 72 65 45 78 |rlockedC|ompareEx|
|00000a60| 63 68 61 6e 67 65 00 00 | 7d 03 5a 77 4f 70 65 6e |change..|}.ZwOpen|
|00000a70| 50 72 6f 63 65 73 73 00 | 59 01 4b 65 44 65 74 61 |Process.|Y.KeDeta|
|00000a80| 63 68 50 72 6f 63 65 73 | 73 00 4f 01 4b 65 41 74 |chProces|s.O.KeAt|
|00000a90| 74 61 63 68 50 72 6f 63 | 65 73 73 00 9a 01 4b 65 |tachProc|ess...Ke|
|00000aa0| 52 65 73 65 74 45 76 65 | 6e 74 00 00 65 03 5a 77 |ResetEve|nt..e.Zw|
|00000ab0| 43 72 65 61 74 65 53 65 | 63 74 69 6f 6e 00 18 02 |CreateSe|ction...|
|00000ac0| 4e 74 47 6c 6f 62 61 6c | 46 6c 61 67 00 00 f0 03 |NtGlobal|Flag....|
|00000ad0| 77 63 73 6e 63 70 79 00 | 3f 02 4f 62 4f 70 65 6e |wcsncpy.|?.ObOpen|
|00000ae0| 4f 62 6a 65 63 74 42 79 | 50 6f 69 6e 74 65 72 00 |ObjectBy|Pointer.|
|00000af0| 9c 03 5a 77 53 65 74 53 | 79 73 74 65 6d 49 6e 66 |..ZwSetS|ystemInf|
|00000b00| 6f 72 6d 61 74 69 6f 6e | 00 00 b2 02 52 74 6c 45 |ormation|....RtlE|
|00000b10| 71 75 61 6c 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |qualUnic|odeStrin|
|00000b20| 67 00 fb 02 52 74 6c 51 | 75 65 72 79 52 65 67 69 |g...RtlQ|ueryRegi|
|00000b30| 73 74 72 79 56 61 6c 75 | 65 73 00 00 1d 03 52 74 |stryValu|es....Rt|
|00000b40| 6c 55 70 63 61 73 65 55 | 6e 69 63 6f 64 65 53 74 |lUpcaseU|nicodeSt|
|00000b50| 72 69 6e 67 00 00 bf 03 | 5f 77 63 73 69 63 6d 70 |ring....|_wcsicmp|
|00000b60| 00 00 b4 02 52 74 6c 45 | 78 74 65 6e 64 65 64 4c |....RtlE|xtendedL|
|00000b70| 61 72 67 65 49 6e 74 65 | 67 65 72 44 69 76 69 64 |argeInte|gerDivid|
|00000b80| 65 00 ab 02 52 74 6c 45 | 6e 6c 61 72 67 65 64 55 |e...RtlE|nlargedU|
|00000b90| 6e 73 69 67 6e 65 64 44 | 69 76 69 64 65 00 dd 02 |nsignedD|ivide...|
|00000ba0| 52 74 6c 4c 61 72 67 65 | 49 6e 74 65 67 65 72 41 |RtlLarge|IntegerA|
|00000bb0| 64 64 00 00 ac 02 52 74 | 6c 45 6e 6c 61 72 67 65 |dd....Rt|lEnlarge|
|00000bc0| 64 55 6e 73 69 67 6e 65 | 64 4d 75 6c 74 69 70 6c |dUnsigne|dMultipl|
|00000bd0| 79 00 19 03 52 74 6c 55 | 6e 69 63 6f 64 65 54 6f |y...RtlU|nicodeTo|
|00000be0| 4d 75 6c 74 69 42 79 74 | 65 53 69 7a 65 00 ea 03 |MultiByt|eSize...|
|00000bf0| 77 63 73 63 6d 70 00 00 | e8 03 77 63 73 63 61 74 |wcscmp..|..wcscat|
|00000c00| 00 00 dd 03 73 74 72 6e | 63 6d 70 00 de 03 73 74 |....strn|cmp...st|
|00000c10| 72 6e 63 70 79 00 d8 03 | 73 74 72 63 68 72 00 00 |rncpy...|strchr..|
|00000c20| ed 01 4d 6d 50 61 67 65 | 45 6e 74 69 72 65 44 72 |..MmPage|EntireDr|
|00000c30| 69 76 65 72 00 00 56 02 | 50 73 45 73 74 61 62 6c |iver..V.|PsEstabl|
|00000c40| 69 73 68 57 69 6e 33 32 | 43 61 6c 6c 6f 75 74 73 |ishWin32|Callouts|
|00000c50| 00 00 4e 01 4b 65 41 64 | 64 53 79 73 74 65 6d 53 |..N.KeAd|dSystemS|
|00000c60| 65 72 76 69 63 65 54 61 | 62 6c 65 00 96 03 5a 77 |erviceTa|ble...Zw|
|00000c70| 53 65 74 44 65 66 61 75 | 6c 74 4c 6f 63 61 6c 65 |SetDefau|ltLocale|
|00000c80| 00 00 35 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |..5.ExAl|locatePo|
|00000c90| 6f 6c 57 69 74 68 51 75 | 6f 74 61 54 61 67 00 00 |olWithQu|otaTag..|
|00000ca0| 49 03 53 65 52 65 6c 65 | 61 73 65 53 65 63 75 72 |I.SeRele|aseSecur|
|00000cb0| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 34 03 |ityDescr|iptor.4.|
|00000cc0| 53 65 43 61 70 74 75 72 | 65 53 65 63 75 72 69 74 |SeCaptur|eSecurit|
|00000cd0| 79 44 65 73 63 72 69 70 | 74 6f 72 00 3d 00 45 78 |yDescrip|tor.=.Ex|
|00000ce0| 44 65 73 6b 74 6f 70 4f | 62 6a 65 63 74 54 79 70 |DesktopO|bjectTyp|
|00000cf0| 65 00 67 00 45 78 52 61 | 69 73 65 53 74 61 74 75 |e.g.ExRa|iseStatu|
|00000d00| 73 00 28 00 44 62 67 42 | 72 65 61 6b 50 6f 69 6e |s.(.DbgB|reakPoin|
|00000d10| 74 57 69 74 68 53 74 61 | 74 75 73 00 46 01 4b 64 |tWithSta|tus.F.Kd|
|00000d20| 44 65 62 75 67 67 65 72 | 45 6e 61 62 6c 65 64 00 |Debugger|Enabled.|
|00000d30| 80 02 52 74 6c 41 72 65 | 41 6e 79 41 63 63 65 73 |..RtlAre|AnyAcces|
|00000d40| 73 65 73 47 72 61 6e 74 | 65 64 00 00 80 03 5a 77 |sesGrant|ed....Zw|
|00000d50| 4f 70 65 6e 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |OpenSymb|olicLink|
|00000d60| 4f 62 6a 65 63 74 00 00 | f8 00 49 6f 43 72 65 61 |Object..|..IoCrea|
|00000d70| 74 65 53 79 6e 63 68 72 | 6f 6e 69 7a 61 74 69 6f |teSynchr|onizatio|
|00000d80| 6e 45 76 65 6e 74 00 00 | 0b 01 49 6f 47 65 74 43 |nEvent..|..IoGetC|
|00000d90| 6f 6e 66 69 67 75 72 61 | 74 69 6f 6e 49 6e 66 6f |onfigura|tionInfo|
|00000da0| 72 6d 61 74 69 6f 6e 00 | ef 03 77 63 73 6e 63 6d |rmation.|..wcsncm|
|00000db0| 70 00 64 03 5a 77 43 72 | 65 61 74 65 4b 65 79 00 |p.d.ZwCr|eateKey.|
|00000dc0| e9 03 77 63 73 63 68 72 | 00 00 f3 03 77 63 73 73 |..wcschr|....wcss|
|00000dd0| 74 72 00 00 9e 03 5a 77 | 53 65 74 56 61 6c 75 65 |tr....Zw|SetValue|
|00000de0| 4b 65 79 00 28 03 52 74 | 6c 57 72 69 74 65 52 65 |Key.(.Rt|lWriteRe|
|00000df0| 67 69 73 74 72 79 56 61 | 6c 75 65 00 9b 02 52 74 |gistryVa|lue...Rt|
|00000e00| 6c 43 72 65 61 74 65 55 | 6e 69 63 6f 64 65 53 74 |lCreateU|nicodeSt|
|00000e10| 72 69 6e 67 00 00 0d 01 | 49 6f 47 65 74 44 65 76 |ring....|IoGetDev|
|00000e20| 69 63 65 4f 62 6a 65 63 | 74 50 6f 69 6e 74 65 72 |iceObjec|tPointer|
|00000e30| 00 00 db 02 52 74 6c 49 | 6e 74 65 67 65 72 54 6f |....RtlI|ntegerTo|
|00000e40| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 66 00 |UnicodeS|tring.f.|
|00000e50| 45 78 52 61 69 73 65 48 | 61 72 64 45 72 72 6f 72 |ExRaiseH|ardError|
|00000e60| 00 00 61 03 5a 77 43 72 | 65 61 74 65 44 69 72 65 |..a.ZwCr|eateDire|
|00000e70| 63 74 6f 72 79 4f 62 6a | 65 63 74 00 ec 01 4d 6d |ctoryObj|ect...Mm|
|00000e80| 4d 61 70 56 69 65 77 4f | 66 53 65 63 74 69 6f 6e |MapViewO|fSection|
|00000e90| 00 00 72 00 45 78 57 69 | 6e 64 6f 77 53 74 61 74 |..r.ExWi|ndowStat|
|00000ea0| 69 6f 6e 4f 62 6a 65 63 | 74 54 79 70 65 00 f6 01 |ionObjec|tType...|
|00000eb0| 4d 6d 53 79 73 74 65 6d | 52 61 6e 67 65 53 74 61 |MmSystem|RangeSta|
|00000ec0| 72 74 00 00 5c 00 45 78 | 49 73 52 65 73 6f 75 72 |rt..\.Ex|IsResour|
|00000ed0| 63 65 41 63 71 75 69 72 | 65 64 45 78 63 6c 75 73 |ceAcquir|edExclus|
|00000ee0| 69 76 65 4c 69 74 65 00 | 52 01 4b 65 42 75 67 43 |iveLite.|R.KeBugC|
|00000ef0| 68 65 63 6b 45 78 00 00 | 50 01 4b 65 42 6f 6f 73 |heckEx..|P.KeBoos|
|00000f00| 74 43 75 72 72 65 6e 74 | 54 68 72 65 61 64 00 00 |tCurrent|Thread..|
|00000f10| 2f 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |/.ExAcqu|ireResou|
|00000f20| 72 63 65 53 68 61 72 65 | 64 4c 69 74 65 00 c4 02 |rceShare|dLite...|
|00000f30| 52 74 6c 46 72 65 65 48 | 65 61 70 00 6a 02 50 73 |RtlFreeH|eap.j.Ps|
|00000f40| 54 65 72 6d 69 6e 61 74 | 65 53 79 73 74 65 6d 54 |Terminat|eSystemT|
|00000f50| 68 72 65 61 64 00 44 02 | 4f 62 52 65 66 65 72 65 |hread.D.|ObRefere|
|00000f60| 6e 63 65 4f 62 6a 65 63 | 74 42 79 50 6f 69 6e 74 |nceObjec|tByPoint|
|00000f70| 65 72 00 00 40 00 45 78 | 45 76 65 6e 74 4f 62 6a |er..@.Ex|EventObj|
|00000f80| 65 63 74 54 79 70 65 00 | 9b 03 5a 77 53 65 74 49 |ectType.|..ZwSetI|
|00000f90| 6e 66 6f 72 6d 61 74 69 | 6f 6e 54 68 72 65 61 64 |nformati|onThread|
|00000fa0| 00 00 e9 02 52 74 6c 4d | 61 70 47 65 6e 65 72 69 |....RtlM|apGeneri|
|00000fb0| 63 4d 61 73 6b 00 77 02 | 52 74 6c 41 6c 6c 6f 63 |cMask.w.|RtlAlloc|
|00000fc0| 61 74 65 48 65 61 70 00 | 34 02 4f 62 41 73 73 69 |ateHeap.|4.ObAssi|
|00000fd0| 67 6e 53 65 63 75 72 69 | 74 79 00 00 37 02 4f 62 |gnSecuri|ty..7.Ob|
|00000fe0| 43 72 65 61 74 65 4f 62 | 6a 65 63 74 00 00 35 02 |CreateOb|ject..5.|
|00000ff0| 4f 62 43 68 65 63 6b 43 | 72 65 61 74 65 4f 62 6a |ObCheckC|reateObj|
|00001000| 65 63 74 41 63 63 65 73 | 73 00 3e 02 4f 62 4f 70 |ectAcces|s.>.ObOp|
|00001010| 65 6e 4f 62 6a 65 63 74 | 42 79 4e 61 6d 65 00 00 |enObject|ByName..|
|00001020| fd 01 4d 6d 55 6e 6d 61 | 70 56 69 65 77 4f 66 53 |..MmUnma|pViewOfS|
|00001030| 65 63 74 69 6f 6e 00 00 | 6c 03 5a 77 44 75 70 6c |ection..|l.ZwDupl|
|00001040| 69 63 61 74 65 4f 62 6a | 65 63 74 00 39 02 4f 62 |icateObj|ect.9.Ob|
|00001050| 46 69 6e 64 48 61 6e 64 | 6c 65 46 6f 72 4f 62 6a |FindHand|leForObj|
|00001060| 65 63 74 00 5d 00 45 78 | 49 73 52 65 73 6f 75 72 |ect.].Ex|IsResour|
|00001070| 63 65 41 63 71 75 69 72 | 65 64 53 68 61 72 65 64 |ceAcquir|edShared|
|00001080| 4c 69 74 65 00 00 60 02 | 50 73 4c 6f 6f 6b 75 70 |Lite..`.|PsLookup|
|00001090| 54 68 72 65 61 64 42 79 | 54 68 72 65 61 64 49 64 |ThreadBy|ThreadId|
|000010a0| 00 00 88 02 52 74 6c 43 | 6c 65 61 72 42 69 74 73 |....RtlC|learBits|
|000010b0| 00 00 04 03 52 74 6c 53 | 65 74 42 69 74 73 00 00 |....RtlS|etBits..|
|000010c0| d4 02 52 74 6c 49 6e 69 | 74 69 61 6c 69 7a 65 42 |..RtlIni|tializeB|
|000010d0| 69 74 4d 61 70 00 95 02 | 52 74 6c 43 6f 70 79 55 |itMap...|RtlCopyU|
|000010e0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 7d 02 |nicodeSt|ring..}.|
|000010f0| 52 74 6c 41 70 70 65 6e | 64 55 6e 69 63 6f 64 65 |RtlAppen|dUnicode|
|00001100| 53 74 72 69 6e 67 54 6f | 53 74 72 69 6e 67 00 00 |StringTo|String..|
|00001110| b5 01 4b 65 55 73 65 72 | 4d 6f 64 65 43 61 6c 6c |..KeUser|ModeCall|
|00001120| 62 61 63 6b 00 00 7f 02 | 52 74 6c 41 72 65 41 6c |back....|RtlAreAl|
|00001130| 6c 41 63 63 65 73 73 65 | 73 47 72 61 6e 74 65 64 |lAccesse|sGranted|
|00001140| 00 00 6a 03 5a 77 44 65 | 76 69 63 65 49 6f 43 6f |..j.ZwDe|viceIoCo|
|00001150| 6e 74 72 6f 6c 46 69 6c | 65 00 ae 01 4b 65 53 65 |ntrolFil|e...KeSe|
|00001160| 74 54 69 6d 65 72 00 00 | 62 03 5a 77 43 72 65 61 |tTimer..|b.ZwCrea|
|00001170| 74 65 45 76 65 6e 74 00 | 77 01 4b 65 49 6e 69 74 |teEvent.|w.KeInit|
|00001180| 69 61 6c 69 7a 65 54 69 | 6d 65 72 00 c6 02 52 74 |ializeTi|mer...Rt|
|00001190| 6c 46 72 65 65 55 6e 69 | 63 6f 64 65 53 74 72 69 |lFreeUni|codeStri|
|000011a0| 6e 67 00 00 c2 02 52 74 | 6c 46 6f 72 6d 61 74 43 |ng....Rt|lFormatC|
|000011b0| 75 72 72 65 6e 74 55 73 | 65 72 4b 65 79 50 61 74 |urrentUs|erKeyPat|
|000011c0| 68 00 be 02 52 74 6c 46 | 69 6e 64 4d 65 73 73 61 |h...RtlF|indMessa|
|000011d0| 67 65 00 00 7e 03 5a 77 | 4f 70 65 6e 50 72 6f 63 |ge..~.Zw|OpenProc|
|000011e0| 65 73 73 54 6f 6b 65 6e | 00 00 82 03 5a 77 4f 70 |essToken|....ZwOp|
|000011f0| 65 6e 54 68 72 65 61 64 | 54 6f 6b 65 6e 00 46 03 |enThread|Token.F.|
|00001200| 53 65 51 75 65 72 79 41 | 75 74 68 65 6e 74 69 63 |SeQueryA|uthentic|
|00001210| 61 74 69 6f 6e 49 64 54 | 6f 6b 65 6e 00 00 63 02 |ationIdT|oken..c.|
|00001220| 50 73 52 65 66 65 72 65 | 6e 63 65 50 72 69 6d 61 |PsRefere|ncePrima|
|00001230| 72 79 54 6f 6b 65 6e 00 | 62 02 50 73 52 65 66 65 |ryToken.|b.PsRefe|
|00001240| 72 65 6e 63 65 49 6d 70 | 65 72 73 6f 6e 61 74 69 |renceImp|ersonati|
|00001250| 6f 6e 54 6f 6b 65 6e 00 | 54 02 50 73 43 72 65 61 |onToken.|T.PsCrea|
|00001260| 74 65 53 79 73 74 65 6d | 54 68 72 65 61 64 00 00 |teSystem|Thread..|
|00001270| 55 02 50 73 43 72 65 61 | 74 65 57 69 6e 33 32 50 |U.PsCrea|teWin32P|
|00001280| 72 6f 63 65 73 73 00 00 | 99 03 5a 77 53 65 74 49 |rocess..|..ZwSetI|
|00001290| 6e 66 6f 72 6d 61 74 69 | 6f 6e 4f 62 6a 65 63 74 |nformati|onObject|
|000012a0| 00 00 8a 03 5a 77 51 75 | 65 72 79 4f 62 6a 65 63 |....ZwQu|eryObjec|
|000012b0| 74 00 5e 02 50 73 4c 6f | 6f 6b 75 70 50 72 6f 63 |t.^.PsLo|okupProc|
|000012c0| 65 73 73 42 79 50 72 6f | 63 65 73 73 49 64 00 00 |essByPro|cessId..|
|000012d0| da 02 52 74 6c 49 6e 74 | 65 67 65 72 54 6f 43 68 |..RtlInt|egerToCh|
|000012e0| 61 72 00 00 12 03 52 74 | 6c 55 6e 69 63 6f 64 65 |ar....Rt|lUnicode|
|000012f0| 53 74 72 69 6e 67 54 6f | 41 6e 73 69 53 74 72 69 |StringTo|AnsiStri|
|00001300| 6e 67 00 00 93 02 52 74 | 6c 43 6f 70 79 53 69 64 |ng....Rt|lCopySid|
|00001310| 00 00 e6 02 52 74 6c 4c | 65 6e 67 74 68 53 69 64 |....RtlL|engthSid|
|00001320| 00 00 06 03 52 74 6c 53 | 65 74 47 72 6f 75 70 53 |....RtlS|etGroupS|
|00001330| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00001340| 72 00 07 03 52 74 6c 53 | 65 74 4f 77 6e 65 72 53 |r...RtlS|etOwnerS|
|00001350| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00001360| 72 00 08 03 52 74 6c 53 | 65 74 53 61 63 6c 53 65 |r...RtlS|etSaclSe|
|00001370| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00001380| 00 00 05 03 52 74 6c 53 | 65 74 44 61 63 6c 53 65 |....RtlS|etDaclSe|
|00001390| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|000013a0| 00 00 74 02 52 74 6c 41 | 64 64 41 63 65 00 96 02 |..t.RtlA|ddAce...|
|000013b0| 52 74 6c 43 72 65 61 74 | 65 41 63 6c 00 00 9a 02 |RtlCreat|eAcl....|
|000013c0| 52 74 6c 43 72 65 61 74 | 65 53 65 63 75 72 69 74 |RtlCreat|eSecurit|
|000013d0| 79 44 65 73 63 72 69 70 | 74 6f 72 00 3c 03 53 65 |yDescrip|tor.<.Se|
|000013e0| 45 78 70 6f 72 74 73 00 | 88 03 5a 77 51 75 65 72 |Exports.|..ZwQuer|
|000013f0| 79 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 54 6f 6b 65 |yInforma|tionToke|
|00001400| 6e 00 3a 03 53 65 44 65 | 6c 65 74 65 41 63 63 65 |n.:.SeDe|leteAcce|
|00001410| 73 73 53 74 61 74 65 00 | 36 02 4f 62 43 68 65 63 |ssState.|6.ObChec|
|00001420| 6b 4f 62 6a 65 63 74 41 | 63 63 65 73 73 00 37 03 |kObjectA|ccess.7.|
|00001430| 53 65 43 72 65 61 74 65 | 41 63 63 65 73 73 53 74 |SeCreate|AccessSt|
|00001440| 61 74 65 00 4a 03 53 65 | 52 65 6c 65 61 73 65 53 |ate.J.Se|ReleaseS|
|00001450| 75 62 6a 65 63 74 43 6f | 6e 74 65 78 74 00 51 03 |ubjectCo|ntext.Q.|
|00001460| 53 65 55 6e 6c 6f 63 6b | 53 75 62 6a 65 63 74 43 |SeUnlock|SubjectC|
|00001470| 6f 6e 74 65 78 74 00 00 | 44 03 53 65 50 72 69 76 |ontext..|D.SePriv|
|00001480| 69 6c 65 67 65 4f 62 6a | 65 63 74 41 75 64 69 74 |ilegeObj|ectAudit|
|00001490| 41 6c 61 72 6d 00 43 03 | 53 65 50 72 69 76 69 6c |Alarm.C.|SePrivil|
|000014a0| 65 67 65 43 68 65 63 6b | 00 00 3f 03 53 65 4c 6f |egeCheck|..?.SeLo|
|000014b0| 63 6b 53 75 62 6a 65 63 | 74 43 6f 6e 74 65 78 74 |ckSubjec|tContext|
|000014c0| 00 00 35 03 53 65 43 61 | 70 74 75 72 65 53 75 62 |..5.SeCa|ptureSub|
|000014d0| 6a 65 63 74 43 6f 6e 74 | 65 78 74 00 54 01 4b 65 |jectCont|ext.T.Ke|
|000014e0| 43 6c 65 61 72 45 76 65 | 6e 74 00 00 9f 03 5a 77 |ClearEve|nt....Zw|
|000014f0| 54 65 72 6d 69 6e 61 74 | 65 50 72 6f 63 65 73 73 |Terminat|eProcess|
|00001500| 00 00 4b 00 45 78 49 6e | 69 74 69 61 6c 69 7a 65 |..K.ExIn|itialize|
|00001510| 5a 6f 6e 65 00 00 7a 02 | 52 74 6c 41 6e 73 69 53 |Zone..z.|RtlAnsiS|
|00001520| 74 72 69 6e 67 54 6f 55 | 6e 69 63 6f 64 65 53 74 |tringToU|nicodeSt|
|00001530| 72 69 6e 67 00 00 d0 02 | 52 74 6c 49 6e 69 74 41 |ring....|RtlInitA|
|00001540| 6e 73 69 53 74 72 69 6e | 67 00 84 03 5a 77 51 75 |nsiStrin|g...ZwQu|
|00001550| 65 72 79 44 65 66 61 75 | 6c 74 4c 6f 63 61 6c 65 |eryDefau|ltLocale|
|00001560| 00 00 39 03 53 65 44 65 | 61 73 73 69 67 6e 53 65 |..9.SeDe|assignSe|
|00001570| 63 75 72 69 74 79 00 00 | 46 02 4f 62 53 65 74 53 |curity..|F.ObSetS|
|00001580| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00001590| 72 49 6e 66 6f 00 31 03 | 53 65 41 73 73 69 67 6e |rInfo.1.|SeAssign|
|000015a0| 53 65 63 75 72 69 74 79 | 00 00 3c 02 4f 62 49 6e |Security|..<.ObIn|
|000015b0| 73 65 72 74 4f 62 6a 65 | 63 74 00 00 79 03 5a 77 |sertObje|ct..y.Zw|
|000015c0| 4f 70 65 6e 44 69 72 65 | 63 74 6f 72 79 4f 62 6a |OpenDire|ctoryObj|
|000015d0| 65 63 74 00 f7 02 52 74 | 6c 50 69 6e 41 74 6f 6d |ect...Rt|lPinAtom|
|000015e0| 49 6e 41 74 6f 6d 54 61 | 62 6c 65 00 75 02 52 74 |InAtomTa|ble.u.Rt|
|000015f0| 6c 41 64 64 41 74 6f 6d | 54 6f 41 74 6f 6d 54 61 |lAddAtom|ToAtomTa|
|00001600| 62 6c 65 00 97 02 52 74 | 6c 43 72 65 61 74 65 41 |ble...Rt|lCreateA|
|00001610| 74 6f 6d 54 61 62 6c 65 | 00 00 a6 02 52 74 6c 44 |tomTable|....RtlD|
|00001620| 65 73 74 72 6f 79 41 74 | 6f 6d 54 61 62 6c 65 00 |estroyAt|omTable.|
|00001630| a6 03 5a 77 59 69 65 6c | 64 45 78 65 63 75 74 69 |..ZwYiel|dExecuti|
|00001640| 6f 6e 00 00 d0 01 4d 6d | 41 64 6a 75 73 74 57 6f |on....Mm|AdjustWo|
|00001650| 72 6b 69 6e 67 53 65 74 | 53 69 7a 65 00 00 69 02 |rkingSet|Size..i.|
|00001660| 50 73 53 65 74 50 72 6f | 63 65 73 73 50 72 69 6f |PsSetPro|cessPrio|
|00001670| 72 69 74 79 42 79 43 6c | 61 73 73 00 e7 02 52 74 |rityByCl|ass...Rt|
|00001680| 6c 4c 6f 6f 6b 75 70 41 | 74 6f 6d 49 6e 41 74 6f |lLookupA|tomInAto|
|00001690| 6d 54 61 62 6c 65 00 00 | a1 02 52 74 6c 44 65 6c |mTable..|..RtlDel|
|000016a0| 65 74 65 41 74 6f 6d 46 | 72 6f 6d 41 74 6f 6d 54 |eteAtomF|romAtomT|
|000016b0| 61 62 6c 65 00 00 fa 02 | 52 74 6c 51 75 65 72 79 |able....|RtlQuery|
|000016c0| 41 74 6f 6d 49 6e 41 74 | 6f 6d 54 61 62 6c 65 00 |AtomInAt|omTable.|
|000016d0| a9 02 52 74 6c 45 6d 70 | 74 79 41 74 6f 6d 54 61 |..RtlEmp|tyAtomTa|
|000016e0| 62 6c 65 00 29 03 52 74 | 6c 5a 65 72 6f 48 65 61 |ble.).Rt|lZeroHea|
|000016f0| 70 00 98 02 52 74 6c 43 | 72 65 61 74 65 48 65 61 |p...RtlC|reateHea|
|00001700| 70 00 c9 01 4c 70 63 52 | 65 71 75 65 73 74 50 6f |p...LpcR|equestPo|
|00001710| 72 74 00 00 cf 02 52 74 | 6c 49 6d 61 67 65 4e 74 |rt....Rt|lImageNt|
|00001720| 48 65 61 64 65 72 00 00 | ee 02 52 74 6c 4e 74 53 |Header..|..RtlNtS|
|00001730| 74 61 74 75 73 54 6f 44 | 6f 73 45 72 72 6f 72 00 |tatusToD|osError.|
|00001740| 00 02 4e 6c 73 41 6e 73 | 69 43 6f 64 65 50 61 67 |..NlsAns|iCodePag|
|00001750| 65 00 6e 74 6f 73 6b 72 | 6e 6c 2e 65 78 65 00 00 |e.ntoskr|nl.exe..|
|00001760| 1b 03 52 74 6c 55 6e 77 | 69 6e 64 00 44 00 4b 65 |..RtlUnw|ind.D.Ke|
|00001770| 51 75 65 72 79 50 65 72 | 66 6f 72 6d 61 6e 63 65 |QueryPer|formance|
|00001780| 43 6f 75 6e 74 65 72 00 | 22 00 48 61 6c 52 65 71 |Counter.|".HalReq|
|00001790| 75 65 73 74 53 6f 66 74 | 77 61 72 65 49 6e 74 65 |uestSoft|wareInte|
|000017a0| 72 72 75 70 74 00 00 00 | 45 78 41 63 71 75 69 72 |rrupt...|ExAcquir|
|000017b0| 65 46 61 73 74 4d 75 74 | 65 78 00 00 01 00 45 78 |eFastMut|ex....Ex|
|000017c0| 52 65 6c 65 61 73 65 46 | 61 73 74 4d 75 74 65 78 |ReleaseF|astMutex|
|000017d0| 00 00 48 41 4c 2e 64 6c | 6c 00 00 00 00 00 00 00 |..HAL.dl|l.......|
+--------+-------------------------+-------------------------+--------+--------+
