| ofs | hex dump | ascii | 
|---|
| 0000 |  21 3c 61 72 63 68 3e 0a 2f 20 20 20 20 20 20 20    20 20 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | !<arch>./...............10996225 | 
| 0020 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 38 36 33 33 31 20 20 20  | 97..............0.......86331... | 
| 0040 |  20 20 60 0a 00 00 0b 0a 00 02 a5 60 00 02 a5 60    00 02 a5 c4 00 02 a5 c4 00 02 a6 28 00 02 a6 28  | ..`........`...`...........(...( | 
| 0060 |  00 02 a6 8a 00 02 a6 8a 00 02 a6 ec 00 02 a6 ec    00 02 a7 4e 00 02 a7 4e 00 02 a7 b2 00 02 a7 b2  | ...................N...N........ | 
| 0080 |  00 02 a8 16 00 02 a8 16 00 02 a8 7a 00 02 a8 7a    00 02 a8 de 00 02 a8 de 00 02 a9 42 00 02 a9 42  | ...........z...z...........B...B | 
| 00a0 |  00 02 a9 a4 00 02 a9 a4 00 02 aa 08 00 02 aa 08    00 02 aa 6a 00 02 aa 6a 00 02 aa cc 00 02 aa cc  | ...................j...j........ | 
| 00c0 |  00 02 ab 2e 00 02 ab 2e 00 02 ab 90 00 02 ab 90    00 02 ab f4 00 02 ab f4 00 02 ac 68 00 02 ac 68  | ...........................h...h | 
| 00e0 |  00 02 ac d2 00 02 ac d2 00 02 ad 36 00 02 ad 36    00 02 ad 9a 00 02 ad 9a 00 02 ad fe 00 02 ad fe  | ...........6...6................ | 
| 0100 |  00 02 ae 62 00 02 ae 62 00 02 ae c2 00 02 ae c2    00 02 af 26 00 02 af 26 00 02 af 8a 00 02 af 8a  | ...b...b...........&...&........ | 
| 0120 |  00 02 af ec 00 02 af ec 00 02 b0 4e 00 02 b0 4e    00 02 b0 b0 00 02 b0 b0 00 02 b1 14 00 02 b1 14  | ...........N...N................ | 
| 0140 |  00 02 b1 78 00 02 b1 78 00 02 b1 dc 00 02 b1 dc    00 02 b2 40 00 02 b2 40 00 02 b2 a4 00 02 b2 a4  | ...x...x...........@...@........ | 
| 0160 |  00 02 b3 06 00 02 b3 06 00 02 b3 6a 00 02 b3 6a    00 02 b3 cc 00 02 b3 cc 00 02 b4 2e 00 02 b4 2e  | ...........j...j................ | 
| 0180 |  00 02 b4 90 00 02 b4 90 00 02 b4 f2 00 02 b4 f2    00 02 b5 54 00 02 b5 54 00 02 b5 b4 00 02 b5 b4  | ...................T...T........ | 
| 01a0 |  00 02 b6 18 00 02 b6 18 00 02 b6 78 00 02 b6 78    00 02 b6 da 00 02 b6 da 00 02 b7 3a 00 02 b7 3a  | ...........x...x...........:...: | 
| 01c0 |  00 02 b7 9c 00 02 b7 9c 00 02 b8 00 00 02 b8 00    00 02 b8 62 00 02 b8 62 00 02 b8 c4 00 02 b8 c4  | ...................b...b........ | 
| 01e0 |  00 02 b9 26 00 02 b9 26 00 02 b9 8a 00 02 b9 8a    00 02 b9 ea 00 02 b9 ea 00 02 ba 4a 00 02 ba 4a  | ...&...&...................J...J | 
| 0200 |  00 02 ba ae 00 02 ba ae 00 02 bb 14 00 02 bb 14    00 02 bb 78 00 02 bb 78 00 02 bb dc 00 02 bb dc  | ...................x...x........ | 
| 0220 |  00 02 bc 40 00 02 bc 40 00 02 bc a4 00 02 bc a4    00 02 bd 08 00 02 bd 08 00 02 bd 6c 00 02 bd 6c  | ...@...@...................l...l | 
| 0240 |  00 02 bd d0 00 02 bd d0 00 02 be 34 00 02 be 34    00 02 be 98 00 02 be 98 00 02 be fc 00 02 be fc  | ...........4...4................ | 
| 0260 |  00 02 bf 60 00 02 bf 60 00 02 bf c4 00 02 bf c4    00 02 c0 28 00 02 c0 28 00 02 c0 8c 00 02 c0 8c  | ...`...`...........(...(........ | 
| 0280 |  00 02 c0 f0 00 02 c0 f0 00 02 c1 52 00 02 c1 52    00 02 c1 b2 00 02 c1 b2 00 02 c2 12 00 02 c2 12  | ...........R...R................ | 
| 02a0 |  00 02 c2 72 00 02 c2 72 00 02 c2 d6 00 02 c2 d6    00 02 c3 36 00 02 c3 36 00 02 c3 96 00 02 c3 96  | ...r...r...........6...6........ | 
| 02c0 |  00 02 c3 f6 00 02 c3 f6 00 02 c4 56 00 02 c4 56    00 02 c4 b8 00 02 c4 b8 00 02 c5 1c 00 02 c5 1c  | ...........V...V................ | 
| 02e0 |  00 02 c5 7e 00 02 c5 7e 00 02 c5 e2 00 02 c5 e2    00 02 c6 48 00 02 c6 48 00 02 c6 ae 00 02 c6 ae  | ...~...~...........H...H........ | 
| 0300 |  00 02 c7 12 00 02 c7 12 00 02 c7 76 00 02 c7 76    00 02 c7 de 00 02 c7 de 00 02 c8 44 00 02 c8 44  | ...........v...v...........D...D | 
| 0320 |  00 02 c8 ac 00 02 c8 ac 00 02 c9 0e 00 02 c9 0e    00 02 c9 70 00 02 c9 70 00 02 c9 d4 00 02 c9 d4  | ...................p...p........ | 
| 0340 |  00 02 ca 38 00 02 ca 38 00 02 ca 9c 00 02 ca 9c    00 02 cb 00 00 02 cb 00 00 02 cb 64 00 02 cb 64  | ...8...8...................d...d | 
| 0360 |  00 02 cb ca 00 02 cb ca 00 02 cc 2e 00 02 cc 2e    00 02 cc 92 00 02 cc 92 00 02 cc f6 00 02 cc f6  | ................................ | 
| 0380 |  00 02 cd 5c 00 02 cd 5c 00 02 cd c2 00 02 cd c2    00 02 ce 28 00 02 ce 28 00 02 ce 8c 00 02 ce 8c  | ...\...\...........(...(........ | 
| 03a0 |  00 02 ce f0 00 02 ce f0 00 02 cf 52 00 02 cf 52    00 02 cf b4 00 02 cf b4 00 02 d0 16 00 02 d0 16  | ...........R...R................ | 
| 03c0 |  00 02 d0 78 00 02 d0 78 00 02 d0 da 00 02 d0 da    00 02 d1 3e 00 02 d1 3e 00 02 d1 a2 00 02 d1 a2  | ...x...x...........>...>........ | 
| 03e0 |  00 02 d2 04 00 02 d2 04 00 02 d2 68 00 02 d2 68    00 02 d2 cc 00 02 d2 cc 00 02 d3 30 00 02 d3 30  | ...........h...h...........0...0 | 
| 0400 |  00 02 d3 94 00 02 d3 94 00 02 d3 fa 00 02 d3 fa    00 02 d4 5e 00 02 d4 5e 00 02 d4 c2 00 02 d4 c2  | ...................^...^........ | 
| 0420 |  00 02 d5 26 00 02 d5 26 00 02 d5 8a 00 02 d5 8a    00 02 d5 ee 00 02 d5 ee 00 02 d6 58 00 02 d6 58  | ...&...&...................X...X | 
| 0440 |  00 02 d6 bc 00 02 d6 bc 00 02 d7 20 00 02 d7 20    00 02 d7 84 00 02 d7 84 00 02 d7 ea 00 02 d7 ea  | ................................ | 
| 0460 |  00 02 d8 50 00 02 d8 50 00 02 d8 b4 00 02 d8 b4    00 02 d9 1a 00 02 d9 1a 00 02 d9 7e 00 02 d9 7e  | ...P...P...................~...~ | 
| 0480 |  00 02 d9 e0 00 02 d9 e0 00 02 da 42 00 02 da 42    00 02 da a4 00 02 da a4 00 02 db 06 00 02 db 06  | ...........B...B................ | 
| 04a0 |  00 02 db 74 00 02 db 74 00 02 db e8 00 02 db e8    00 02 dc 5a 00 02 dc 5a 00 02 dc ca 00 02 dc ca  | ...t...t...........Z...Z........ | 
| 04c0 |  00 02 dd 34 00 02 dd 34 00 02 dd a4 00 02 dd a4    00 02 de 16 00 02 de 16 00 02 de 8a 00 02 de 8a  | ...4...4........................ | 
| 04e0 |  00 02 df 02 00 02 df 02 00 02 df 7c 00 02 df 7c    00 02 df ee 00 02 df ee 00 02 e0 60 00 02 e0 60  | ...........|...|...........`...` | 
| 0500 |  00 02 e0 ca 00 02 e0 ca 00 02 e1 3c 00 02 e1 3c    00 02 e1 b0 00 02 e1 b0 00 02 e2 1c 00 02 e2 1c  | ...........<...<................ | 
| 0520 |  00 02 e2 88 00 02 e2 88 00 02 e2 f2 00 02 e2 f2    00 02 e3 5c 00 02 e3 5c 00 02 e3 c8 00 02 e3 c8  | ...................\...\........ | 
| 0540 |  00 02 e4 3a 00 02 e4 3a 00 02 e4 a6 00 02 e4 a6    00 02 e5 10 00 02 e5 10 00 02 e5 80 00 02 e5 80  | ...:...:........................ | 
| 0560 |  00 02 e5 f0 00 02 e5 f0 00 02 e6 62 00 02 e6 62    00 02 e6 d6 00 02 e6 d6 00 02 e7 44 00 02 e7 44  | ...........b...b...........D...D | 
| 0580 |  00 02 e7 b2 00 02 e7 b2 00 02 e8 1e 00 02 e8 1e    00 02 e8 8a 00 02 e8 8a 00 02 e9 08 00 02 e9 08  | ................................ | 
| 05a0 |  00 02 e9 76 00 02 e9 76 00 02 e9 f0 00 02 e9 f0    00 02 ea 5c 00 02 ea 5c 00 02 ea c8 00 02 ea c8  | ...v...v...........\...\........ | 
| 05c0 |  00 02 eb 3c 00 02 eb 3c 00 02 eb a6 00 02 eb a6    00 02 ec 1e 00 02 ec 1e 00 02 ec 8c 00 02 ec 8c  | ...<...<........................ | 
| 05e0 |  00 02 ed 00 00 02 ed 00 00 02 ed 76 00 02 ed 76    00 02 ed f2 00 02 ed f2 00 02 ee 6c 00 02 ee 6c  | ...........v...v...........l...l | 
| 0600 |  00 02 ee de 00 02 ee de 00 02 ef 56 00 02 ef 56    00 02 ef ce 00 02 ef ce 00 02 f0 3e 00 02 f0 3e  | ...........V...V...........>...> | 
| 0620 |  00 02 f0 ac 00 02 f0 ac 00 02 f1 1c 00 02 f1 1c    00 02 f1 8e 00 02 f1 8e 00 02 f2 02 00 02 f2 02  | ................................ | 
| 0640 |  00 02 f2 78 00 02 f2 78 00 02 f2 ee 00 02 f2 ee    00 02 f3 64 00 02 f3 64 00 02 f3 d6 00 02 f3 d6  | ...x...x...........d...d........ | 
| 0660 |  00 02 f4 4e 00 02 f4 4e 00 02 f4 c2 00 02 f4 c2    00 02 f5 3c 00 02 f5 3c 00 02 f5 b4 00 02 f5 b4  | ...N...N...........<...<........ | 
| 0680 |  00 02 f6 24 00 02 f6 24 00 02 f6 9a 00 02 f6 9a    00 02 f7 02 00 02 f7 02 00 02 f7 6c 00 02 f7 6c  | ...$...$...................l...l | 
| 06a0 |  00 02 f7 e0 00 02 f7 e0 00 02 f8 54 00 02 f8 54    00 02 f8 c4 00 02 f8 c4 00 02 f9 3c 00 02 f9 3c  | ...........T...T...........<...< | 
| 06c0 |  00 02 f9 b0 00 02 f9 b0 00 02 fa 20 00 02 fa 20    00 02 fa 8e 00 02 fa 8e 00 02 fb 00 00 02 fb 00  | ................................ | 
| 06e0 |  00 02 fb 72 00 02 fb 72 00 02 fb e2 00 02 fb e2    00 02 fc 4c 00 02 fc 4c 00 02 fc b4 00 02 fc b4  | ...r...r...........L...L........ | 
| 0700 |  00 02 fd 20 00 02 fd 20 00 02 fd 8e 00 02 fd 8e    00 02 fd fa 00 02 fd fa 00 02 fe 6a 00 02 fe 6a  | ...........................j...j | 
| 0720 |  00 02 fe d4 00 02 fe d4 00 02 ff 48 00 02 ff 48    00 02 ff be 00 02 ff be 00 03 00 2a 00 03 00 2a  | ...........H...H...........*...* | 
| 0740 |  00 03 00 9e 00 03 00 9e 00 03 01 10 00 03 01 10    00 03 01 88 00 03 01 88 00 03 01 fe 00 03 01 fe  | ................................ | 
| 0760 |  00 03 02 68 00 03 02 68 00 03 02 d4 00 03 02 d4    00 03 03 3e 00 03 03 3e 00 03 03 b0 00 03 03 b0  | ...h...h...........>...>........ | 
| 0780 |  00 03 04 24 00 03 04 24 00 03 04 96 00 03 04 96    00 03 05 04 00 03 05 04 00 03 05 76 00 03 05 76  | ...$...$...................v...v | 
| 07a0 |  00 03 05 f2 00 03 05 f2 00 03 06 64 00 03 06 64    00 03 06 d4 00 03 06 d4 00 03 07 44 00 03 07 44  | ...........d...d...........D...D | 
| 07c0 |  00 03 07 ae 00 03 07 ae 00 03 08 1e 00 03 08 1e    00 03 08 8e 00 03 08 8e 00 03 08 fe 00 03 08 fe  | ................................ | 
| 07e0 |  00 03 09 7a 00 03 09 7a 00 03 09 ee 00 03 09 ee    00 03 0a 5c 00 03 0a 5c 00 03 0a d2 00 03 0a d2  | ...z...z...........\...\........ | 
| 0800 |  00 03 0b 3e 00 03 0b 3e 00 03 0b ae 00 03 0b ae    00 03 0c 26 00 03 0c 26 00 03 0c a4 00 03 0c a4  | ...>...>...........&...&........ | 
| 0820 |  00 03 0d 20 00 03 0d 20 00 03 0d 98 00 03 0d 98    00 03 0e 08 00 03 0e 08 00 03 0e 7c 00 03 0e 7c  | ...........................|...| | 
| 0840 |  00 03 0e ea 00 03 0e ea 00 03 0f 64 00 03 0f 64    00 03 0f e0 00 03 0f e0 00 03 10 58 00 03 10 58  | ...........d...d...........X...X | 
| 0860 |  00 03 10 cc 00 03 10 cc 00 03 11 3c 00 03 11 3c    00 03 11 a8 00 03 11 a8 00 03 12 14 00 03 12 14  | ...........<...<................ | 
| 0880 |  00 03 12 8a 00 03 12 8a 00 03 12 f4 00 03 12 f4    00 03 13 66 00 03 13 66 00 03 13 da 00 03 13 da  | ...................f...f........ | 
| 08a0 |  00 03 14 50 00 03 14 50 00 03 14 c6 00 03 14 c6    00 03 15 3e 00 03 15 3e 00 03 15 b6 00 03 15 b6  | ...P...P...........>...>........ | 
| 08c0 |  00 03 16 2c 00 03 16 2c 00 03 16 a6 00 03 16 a6    00 03 17 1c 00 03 17 1c 00 03 17 92 00 03 17 92  | ...,...,........................ | 
| 08e0 |  00 03 18 0a 00 03 18 0a 00 03 18 76 00 03 18 76    00 03 18 e2 00 03 18 e2 00 03 19 58 00 03 19 58  | ...........v...v...........X...X | 
| 0900 |  00 03 19 ce 00 03 19 ce 00 03 1a 42 00 03 1a 42    00 03 1a b8 00 03 1a b8 00 03 1b 2a 00 03 1b 2a  | ...........B...B...........*...* | 
| 0920 |  00 03 1b a0 00 03 1b a0 00 03 1c 10 00 03 1c 10    00 03 1c 84 00 03 1c 84 00 03 1c f8 00 03 1c f8  | ................................ | 
| 0940 |  00 03 1d 62 00 03 1d 62 00 03 1d d8 00 03 1d d8    00 03 1e 54 00 03 1e 54 00 03 1e ce 00 03 1e ce  | ...b...b...........T...T........ | 
| 0960 |  00 03 1f 3e 00 03 1f 3e 00 03 1f b0 00 03 1f b0    00 03 20 20 00 03 20 20 00 03 20 8a 00 03 20 8a  | ...>...>........................ | 
| 0980 |  00 03 20 fc 00 03 20 fc 00 03 21 6c 00 03 21 6c    00 03 21 d8 00 03 21 d8 00 03 22 50 00 03 22 50  | ..........!l..!l..!...!..."P.."P | 
| 09a0 |  00 03 22 be 00 03 22 be 00 03 23 2a 00 03 23 2a    00 03 23 9e 00 03 23 9e 00 03 24 10 00 03 24 10  | .."..."...#*..#*..#...#...$...$. | 
| 09c0 |  00 03 24 7c 00 03 24 7c 00 03 24 f2 00 03 24 f2    00 03 25 5e 00 03 25 5e 00 03 25 ce 00 03 25 ce  | ..$|..$|..$...$...%^..%^..%...%. | 
| 09e0 |  00 03 26 36 00 03 26 36 00 03 26 a4 00 03 26 a4    00 03 27 16 00 03 27 16 00 03 27 80 00 03 27 80  | ..&6..&6..&...&...'...'...'...'. | 
| 0a00 |  00 03 27 ee 00 03 27 ee 00 03 28 58 00 03 28 58    00 03 28 cc 00 03 28 cc 00 03 29 46 00 03 29 46  | ..'...'...(X..(X..(...(...)F..)F | 
| 0a20 |  00 03 29 b6 00 03 29 b6 00 03 2a 30 00 03 2a 30    00 03 2a a2 00 03 2a a2 00 03 2b 12 00 03 2b 12  | ..)...)...*0..*0..*...*...+...+. | 
| 0a40 |  00 03 2b 84 00 03 2b 84 00 03 2c 00 00 03 2c 00    00 03 2c 76 00 03 2c 76 00 03 2c ea 00 03 2c ea  | ..+...+...,...,...,v..,v..,...,. | 
| 0a60 |  00 03 2d 5e 00 03 2d 5e 00 03 2d d0 00 03 2d d0    00 03 2e 40 00 03 2e 40 00 03 2e ba 00 03 2e ba  | ..-^..-^..-...-....@...@........ | 
| 0a80 |  00 03 2f 24 00 03 2f 24 00 03 2f 8e 00 03 2f 8e    00 03 2f f6 00 03 2f f6 00 03 30 60 00 03 30 60  | ../$../$../.../.../.../...0`..0` | 
| 0aa0 |  00 03 30 ca 00 03 30 ca 00 03 31 34 00 03 31 34    00 03 31 ac 00 03 31 ac 00 03 32 1a 00 03 32 1a  | ..0...0...14..14..1...1...2...2. | 
| 0ac0 |  00 03 32 8e 00 03 32 8e 00 03 33 00 00 03 33 00    00 03 33 72 00 03 33 72 00 03 33 ea 00 03 33 ea  | ..2...2...3...3...3r..3r..3...3. | 
| 0ae0 |  00 03 34 64 00 03 34 64 00 03 34 d2 00 03 34 d2    00 03 35 44 00 03 35 44 00 03 35 b8 00 03 35 b8  | ..4d..4d..4...4...5D..5D..5...5. | 
| 0b00 |  00 03 36 32 00 03 36 32 00 03 36 a2 00 03 36 a2    00 03 37 10 00 03 37 10 00 03 37 82 00 03 37 82  | ..62..62..6...6...7...7...7...7. | 
| 0b20 |  00 03 37 f8 00 03 37 f8 00 03 38 68 00 03 38 68    00 03 38 dc 00 03 38 dc 00 03 39 44 00 03 39 44  | ..7...7...8h..8h..8...8...9D..9D | 
| 0b40 |  00 03 39 ba 00 03 39 ba 00 03 3a 2a 00 03 3a 2a    00 03 3a 94 00 03 3a 94 00 03 3b 00 00 03 3b 00  | ..9...9...:*..:*..:...:...;...;. | 
| 0b60 |  00 03 3b 6e 00 03 3b 6e 00 03 3b e0 00 03 3b e0    00 03 3c 64 00 03 3c 64 00 03 3c d2 00 03 3c d2  | ..;n..;n..;...;...<d..<d..<...<. | 
| 0b80 |  00 03 3d 48 00 03 3d 48 00 03 3d bc 00 03 3d bc    00 03 3e 2c 00 03 3e 2c 00 03 3e 9c 00 03 3e 9c  | ..=H..=H..=...=...>,..>,..>...>. | 
| 0ba0 |  00 03 3f 0a 00 03 3f 0a 00 03 3f 7e 00 03 3f 7e    00 03 3f ec 00 03 3f ec 00 03 40 64 00 03 40 64  | ..?...?...?~..?~..?...?...@d..@d | 
| 0bc0 |  00 03 40 ce 00 03 40 ce 00 03 41 38 00 03 41 38    00 03 41 aa 00 03 41 aa 00 03 42 1a 00 03 42 1a  | ..@...@...A8..A8..A...A...B...B. | 
| 0be0 |  00 03 42 84 00 03 42 84 00 03 42 f2 00 03 42 f2    00 03 43 60 00 03 43 60 00 03 43 d2 00 03 43 d2  | ..B...B...B...B...C`..C`..C...C. | 
| 0c00 |  00 03 44 46 00 03 44 46 00 03 44 b2 00 03 44 b2    00 03 45 1e 00 03 45 1e 00 03 45 8c 00 03 45 8c  | ..DF..DF..D...D...E...E...E...E. | 
| 0c20 |  00 03 46 06 00 03 46 06 00 03 46 76 00 03 46 76    00 03 46 e4 00 03 46 e4 00 03 47 52 00 03 47 52  | ..F...F...Fv..Fv..F...F...GR..GR | 
| 0c40 |  00 03 47 c2 00 03 47 c2 00 03 48 30 00 03 48 30    00 03 48 9c 00 03 48 9c 00 03 49 0e 00 03 49 0e  | ..G...G...H0..H0..H...H...I...I. | 
| 0c60 |  00 03 49 82 00 03 49 82 00 03 49 f0 00 03 49 f0    00 03 4a 64 00 03 4a 64 00 03 4a d6 00 03 4a d6  | ..I...I...I...I...Jd..Jd..J...J. | 
| 0c80 |  00 03 4b 40 00 03 4b 40 00 03 4b ae 00 03 4b ae    00 03 4c 1e 00 03 4c 1e 00 03 4c 92 00 03 4c 92  | ..K@..K@..K...K...L...L...L...L. | 
| 0ca0 |  00 03 4c fe 00 03 4c fe 00 03 4d 6e 00 03 4d 6e    00 03 4d da 00 03 4d da 00 03 4e 50 00 03 4e 50  | ..L...L...Mn..Mn..M...M...NP..NP | 
| 0cc0 |  00 03 4e c2 00 03 4e c2 00 03 4f 2a 00 03 4f 2a    00 03 4f 96 00 03 4f 96 00 03 50 02 00 03 50 02  | ..N...N...O*..O*..O...O...P...P. | 
| 0ce0 |  00 03 50 76 00 03 50 76 00 03 50 e4 00 03 50 e4    00 03 51 50 00 03 51 50 00 03 51 c6 00 03 51 c6  | ..Pv..Pv..P...P...QP..QP..Q...Q. | 
| 0d00 |  00 03 52 2c 00 03 52 2c 00 03 52 96 00 03 52 96    00 03 53 02 00 03 53 02 00 03 53 6e 00 03 53 6e  | ..R,..R,..R...R...S...S...Sn..Sn | 
| 0d20 |  00 03 53 e8 00 03 53 e8 00 03 54 58 00 03 54 58    00 03 54 d0 00 03 54 d0 00 03 55 46 00 03 55 46  | ..S...S...TX..TX..T...T...UF..UF | 
| 0d40 |  00 03 55 ba 00 03 55 ba 00 03 56 30 00 03 56 30    00 03 56 9e 00 03 56 9e 00 03 57 18 00 03 57 18  | ..U...U...V0..V0..V...V...W...W. | 
| 0d60 |  00 03 57 90 00 03 57 90 00 03 57 fc 00 03 57 fc    00 03 58 6e 00 03 58 6e 00 03 58 e4 00 03 58 e4  | ..W...W...W...W...Xn..Xn..X...X. | 
| 0d80 |  00 03 59 56 00 03 59 56 00 03 59 c4 00 03 59 c4    00 03 5a 30 00 03 5a 30 00 03 5a 98 00 03 5a 98  | ..YV..YV..Y...Y...Z0..Z0..Z...Z. | 
| 0da0 |  00 03 5b 2a 00 03 5b 2a 00 03 5b b4 00 03 5b b4    00 03 5c 30 00 03 5c 30 00 03 5c b0 00 03 5c b0  | ..[*..[*..[...[...\0..\0..\...\. | 
| 0dc0 |  00 03 5d 22 00 03 5d 22 00 03 5d 9c 00 03 5d 9c    00 03 5e 08 00 03 5e 08 00 03 5e 7a 00 03 5e 7a  | ..]"..]"..]...]...^...^...^z..^z | 
| 0de0 |  00 03 5e ec 00 03 5e ec 00 03 5f 64 00 03 5f 64    00 03 5f de 00 03 5f de 00 03 60 56 00 03 60 56  | ..^...^..._d.._d.._..._...`V..`V | 
| 0e00 |  00 03 60 d0 00 03 60 d0 00 03 61 48 00 03 61 48    00 03 61 c0 00 03 61 c0 00 03 62 30 00 03 62 30  | ..`...`...aH..aH..a...a...b0..b0 | 
| 0e20 |  00 03 62 a2 00 03 62 a2 00 03 63 0e 00 03 63 0e    00 03 63 82 00 03 63 82 00 03 63 f6 00 03 63 f6  | ..b...b...c...c...c...c...c...c. | 
| 0e40 |  00 03 64 64 00 03 64 64 00 03 64 de 00 03 64 de    00 03 65 52 00 03 65 52 00 03 65 c8 00 03 65 c8  | ..dd..dd..d...d...eR..eR..e...e. | 
| 0e60 |  00 03 66 42 00 03 66 42 00 03 66 ae 00 03 66 ae    00 03 67 18 00 03 67 18 00 03 67 8c 00 03 67 8c  | ..fB..fB..f...f...g...g...g...g. | 
| 0e80 |  00 03 68 00 00 03 68 00 00 03 68 7c 00 03 68 7c    00 03 68 f6 00 03 68 f6 00 03 69 60 00 03 69 60  | ..h...h...h|..h|..h...h...i`..i` | 
| 0ea0 |  00 03 69 d0 00 03 69 d0 00 03 6a 44 00 03 6a 44    00 03 6a ba 00 03 6a ba 00 03 6b 30 00 03 6b 30  | ..i...i...jD..jD..j...j...k0..k0 | 
| 0ec0 |  00 03 6b 9e 00 03 6b 9e 00 03 6c 08 00 03 6c 08    00 03 6c 80 00 03 6c 80 00 03 6d 02 00 03 6d 02  | ..k...k...l...l...l...l...m...m. | 
| 0ee0 |  00 03 6d 6c 00 03 6d 6c 00 03 6d d8 00 03 6d d8    00 03 6e 44 00 03 6e 44 00 03 6e ae 00 03 6e ae  | ..ml..ml..m...m...nD..nD..n...n. | 
| 0f00 |  00 03 6f 1c 00 03 6f 1c 00 03 6f 92 00 03 6f 92    00 03 70 0e 00 03 70 0e 00 03 70 88 00 03 70 88  | ..o...o...o...o...p...p...p...p. | 
| 0f20 |  00 03 71 08 00 03 71 08 00 03 71 90 00 03 71 90    00 03 72 12 00 03 72 12 00 03 72 88 00 03 72 88  | ..q...q...q...q...r...r...r...r. | 
| 0f40 |  00 03 72 fa 00 03 72 fa 00 03 73 62 00 03 73 62    00 03 73 dc 00 03 73 dc 00 03 74 48 00 03 74 48  | ..r...r...sb..sb..s...s...tH..tH | 
| 0f60 |  00 03 74 be 00 03 74 be 00 03 75 26 00 03 75 26    00 03 75 96 00 03 75 96 00 03 76 0e 00 03 76 0e  | ..t...t...u&..u&..u...u...v...v. | 
| 0f80 |  00 03 76 84 00 03 76 84 00 03 76 f8 00 03 76 f8    00 03 77 72 00 03 77 72 00 03 77 ea 00 03 77 ea  | ..v...v...v...v...wr..wr..w...w. | 
| 0fa0 |  00 03 78 62 00 03 78 62 00 03 78 e4 00 03 78 e4    00 03 79 60 00 03 79 60 00 03 79 d8 00 03 79 d8  | ..xb..xb..x...x...y`..y`..y...y. | 
| 0fc0 |  00 03 7a 52 00 03 7a 52 00 03 7a cc 00 03 7a cc    00 03 7b 44 00 03 7b 44 00 03 7b ba 00 03 7b ba  | ..zR..zR..z...z...{D..{D..{...{. | 
| 0fe0 |  00 03 7c 2e 00 03 7c 2e 00 03 7c a0 00 03 7c a0    00 03 7d 14 00 03 7d 14 00 03 7d 8c 00 03 7d 8c  | ..|...|...|...|...}...}...}...}. | 
| 1000 |  00 03 7e 02 00 03 7e 02 00 03 7e 78 00 03 7e 78    00 03 7e ea 00 03 7e ea 00 03 7f 5c 00 03 7f 5c  | ..~...~...~x..~x..~...~....\...\ | 
| 1020 |  00 03 7f d4 00 03 7f d4 00 03 80 4c 00 03 80 4c    00 03 80 c4 00 03 80 c4 00 03 81 36 00 03 81 36  | ...........L...L...........6...6 | 
| 1040 |  00 03 81 ac 00 03 81 ac 00 03 82 1e 00 03 82 1e    00 03 82 92 00 03 82 92 00 03 83 02 00 03 83 02  | ................................ | 
| 1060 |  00 03 83 78 00 03 83 78 00 03 83 e8 00 03 83 e8    00 03 84 5a 00 03 84 5a 00 03 84 c6 00 03 84 c6  | ...x...x...........Z...Z........ | 
| 1080 |  00 03 85 2c 00 03 85 2c 00 03 85 96 00 03 85 96    00 03 86 08 00 03 86 08 00 03 86 7a 00 03 86 7a  | ...,...,...................z...z | 
| 10a0 |  00 03 86 ee 00 03 86 ee 00 03 87 6a 00 03 87 6a    00 03 87 d4 00 03 87 d4 00 03 88 4c 00 03 88 4c  | ...........j...j...........L...L | 
| 10c0 |  00 03 88 c4 00 03 88 c4 00 03 89 36 00 03 89 36    00 03 89 aa 00 03 89 aa 00 03 8a 20 00 03 8a 20  | ...........6...6................ | 
| 10e0 |  00 03 8a 94 00 03 8a 94 00 03 8b 14 00 03 8b 14    00 03 8b 90 00 03 8b 90 00 03 8c 04 00 03 8c 04  | ................................ | 
| 1100 |  00 03 8c 80 00 03 8c 80 00 03 8c f6 00 03 8c f6    00 03 8d 80 00 03 8d 80 00 03 8d f2 00 03 8d f2  | ................................ | 
| 1120 |  00 03 8e 6c 00 03 8e 6c 00 03 8e e0 00 03 8e e0    00 03 8f 54 00 03 8f 54 00 03 8f d0 00 03 8f d0  | ...l...l...........T...T........ | 
| 1140 |  00 03 90 48 00 03 90 48 00 03 90 be 00 03 90 be    00 03 91 3a 00 03 91 3a 00 03 91 b0 00 03 91 b0  | ...H...H...........:...:........ | 
| 1160 |  00 03 92 26 00 03 92 26 00 03 92 a2 00 03 92 a2    00 03 93 20 00 03 93 20 00 03 93 8a 00 03 93 8a  | ...&...&........................ | 
| 1180 |  00 03 94 0c 00 03 94 0c 00 03 94 78 00 03 94 78    00 03 94 f2 00 03 94 f2 00 03 95 6c 00 03 95 6c  | ...........x...x...........l...l | 
| 11a0 |  00 03 95 de 00 03 95 de 00 03 96 56 00 03 96 56    00 03 96 ce 00 03 96 ce 00 03 97 46 00 03 97 46  | ...........V...V...........F...F | 
| 11c0 |  00 03 97 be 00 03 97 be 00 03 98 32 00 03 98 32    00 03 98 a8 00 03 98 a8 00 03 99 1e 00 03 99 1e  | ...........2...2................ | 
| 11e0 |  00 03 99 9e 00 03 99 9e 00 03 9a 1c 00 03 9a 1c    00 03 9a 88 00 03 9a 88 00 03 9a f8 00 03 9a f8  | ................................ | 
| 1200 |  00 03 9b 6c 00 03 9b 6c 00 03 9b de 00 03 9b de    00 03 9c 4e 00 03 9c 4e 00 03 9c c2 00 03 9c c2  | ...l...l...........N...N........ | 
| 1220 |  00 03 9d 3c 00 03 9d 3c 00 03 9d aa 00 03 9d aa    00 03 9e 2c 00 03 9e 2c 00 03 9e 9a 00 03 9e 9a  | ...<...<...........,...,........ | 
| 1240 |  00 03 9f 0a 00 03 9f 0a 00 03 9f 88 00 03 9f 88    00 03 9f fa 00 03 9f fa 00 03 a0 6a 00 03 a0 6a  | ...........................j...j | 
| 1260 |  00 03 a0 d4 00 03 a0 d4 00 03 a1 3c 00 03 a1 3c    00 03 a1 a8 00 03 a1 a8 00 03 a2 18 00 03 a2 18  | ...........<...<................ | 
| 1280 |  00 03 a2 88 00 03 a2 88 00 03 a2 fe 00 03 a2 fe    00 03 a3 78 00 03 a3 78 00 03 a3 e6 00 03 a3 e6  | ...................x...x........ | 
| 12a0 |  00 03 a4 5c 00 03 a4 5c 00 03 a4 d2 00 03 a4 d2    00 03 a5 4e 00 03 a5 4e 00 03 a5 ca 00 03 a5 ca  | ...\...\...........N...N........ | 
| 12c0 |  00 03 a6 48 00 03 a6 48 00 03 a6 ca 00 03 a6 ca    00 03 a7 46 00 03 a7 46 00 03 a7 d0 00 03 a7 d0  | ...H...H...........F...F........ | 
| 12e0 |  00 03 a8 54 00 03 a8 54 00 03 a8 ca 00 03 a8 ca    00 03 a9 40 00 03 a9 40 00 03 a9 bc 00 03 a9 bc  | ...T...T...........@...@........ | 
| 1300 |  00 03 aa 2c 00 03 aa 2c 00 03 aa a2 00 03 aa a2    00 03 ab 0c 00 03 ab 0c 00 03 ab 78 00 03 ab 78  | ...,...,...................x...x | 
| 1320 |  00 03 ab ee 00 03 ab ee 00 03 ac 5c 00 03 ac 5c    00 03 ac c6 00 03 ac c6 00 03 ad 3a 00 03 ad 3a  | ...........\...\...........:...: | 
| 1340 |  00 03 ad aa 00 03 ad aa 00 03 ae 1a 00 03 ae 1a    00 03 ae 8a 00 03 ae 8a 00 03 af 04 00 03 af 04  | ................................ | 
| 1360 |  00 03 af 7c 00 03 af 7c 00 03 af ec 00 03 af ec    00 03 b0 5e 00 03 b0 5e 00 03 b0 dc 00 03 b0 dc  | ...|...|...........^...^........ | 
| 1380 |  00 03 b1 58 00 03 b1 58 00 03 b1 d0 00 03 b1 d0    00 03 b2 44 00 03 b2 44 00 03 b2 be 00 03 b2 be  | ...X...X...........D...D........ | 
| 13a0 |  00 03 b3 36 00 03 b3 36 00 03 b3 c0 00 03 b3 c0    00 03 b4 36 00 03 b4 36 00 03 b4 aa 00 03 b4 aa  | ...6...6...........6...6........ | 
| 13c0 |  00 03 b5 24 00 03 b5 24 00 03 b5 a0 00 03 b5 a0    00 03 b6 12 00 03 b6 12 00 03 b6 88 00 03 b6 88  | ...$...$........................ | 
| 13e0 |  00 03 b7 00 00 03 b7 00 00 03 b7 76 00 03 b7 76    00 03 b7 f6 00 03 b7 f6 00 03 b8 62 00 03 b8 62  | ...........v...v...........b...b | 
| 1400 |  00 03 b8 de 00 03 b8 de 00 03 b9 4e 00 03 b9 4e    00 03 b9 c2 00 03 b9 c2 00 03 ba 44 00 03 ba 44  | ...........N...N...........D...D | 
| 1420 |  00 03 ba c4 00 03 ba c4 00 03 bb 42 00 03 bb 42    00 03 bb bc 00 03 bb bc 00 03 bc 34 00 03 bc 34  | ...........B...B...........4...4 | 
| 1440 |  00 03 bc a6 00 03 bc a6 00 03 bd 1e 00 03 bd 1e    00 03 bd 88 00 03 bd 88 00 03 bd fc 00 03 bd fc  | ................................ | 
| 1460 |  00 03 be 72 00 03 be 72 00 03 be dc 00 03 be dc    00 03 bf 56 00 03 bf 56 00 03 bf c8 00 03 bf c8  | ...r...r...........V...V........ | 
| 1480 |  00 03 c0 3e 00 03 c0 3e 00 03 c0 b2 00 03 c0 b2    00 03 c1 28 00 03 c1 28 00 03 c1 a0 00 03 c1 a0  | ...>...>...........(...(........ | 
| 14a0 |  00 03 c2 18 00 03 c2 18 00 03 c2 8c 00 03 c2 8c    00 03 c3 00 00 03 c3 00 00 03 c3 7e 00 03 c3 7e  | ...........................~...~ | 
| 14c0 |  00 03 c3 f0 00 03 c3 f0 00 03 c4 64 00 03 c4 64    00 03 c4 d2 00 03 c4 d2 00 03 c5 4e 00 03 c5 4e  | ...........d...d...........N...N | 
| 14e0 |  00 03 c5 be 00 03 c5 be 00 03 c6 34 00 03 c6 34    00 03 c6 ac 00 03 c6 ac 00 03 c7 20 00 03 c7 20  | ...........4...4................ | 
| 1500 |  00 03 c7 92 00 03 c7 92 00 03 c8 12 00 03 c8 12    00 03 c8 8a 00 03 c8 8a 00 03 c9 04 00 03 c9 04  | ................................ | 
| 1520 |  00 03 c9 7a 00 03 c9 7a 00 03 c9 f2 00 03 c9 f2    00 03 ca 6a 00 03 ca 6a 00 03 ca e0 00 03 ca e0  | ...z...z...........j...j........ | 
| 1540 |  00 03 cb 56 00 03 cb 56 00 03 cb ce 00 03 cb ce    00 03 cc 46 00 03 cc 46 00 03 cc bc 00 03 cc bc  | ...V...V...........F...F........ | 
| 1560 |  00 03 cd 32 00 03 cd 32 00 03 cd aa 00 03 cd aa    00 03 ce 22 00 03 ce 22 00 03 ce 98 00 03 ce 98  | ...2...2..........."..."........ | 
| 1580 |  00 03 cf 0e 00 03 cf 0e 00 03 cf 86 00 03 cf 86    00 03 cf fe 00 03 cf fe 00 03 d0 74 00 03 d0 74  | ...........................t...t | 
| 15a0 |  00 03 d0 ee 00 03 d0 ee 00 03 d1 68 00 03 d1 68    00 03 d1 de 00 03 d1 de 00 03 d2 5c 00 03 d2 5c  | ...........h...h...........\...\ | 
| 15c0 |  00 03 d2 d4 00 03 d2 d4 00 03 d3 44 00 03 d3 44    00 03 d3 ba 00 03 d3 ba 00 03 d4 3c 00 03 d4 3c  | ...........D...D...........<...< | 
| 15e0 |  00 03 d4 bc 00 03 d4 bc 00 03 d5 3a 00 03 d5 3a    00 03 d5 b6 00 03 d5 b6 00 03 d6 26 00 03 d6 26  | ...........:...:...........&...& | 
| 1600 |  00 03 d6 9a 00 03 d6 9a 00 03 d7 0e 00 03 d7 0e    00 03 d7 80 00 03 d7 80 00 03 d7 f8 00 03 d7 f8  | ................................ | 
| 1620 |  00 03 d8 74 00 03 d8 74 00 03 d8 ec 00 03 d8 ec    00 03 d9 72 00 03 d9 72 00 03 d9 ec 00 03 d9 ec  | ...t...t...........r...r........ | 
| 1640 |  00 03 da 60 00 03 da 60 00 03 da d2 00 03 da d2    00 03 db 48 00 03 db 48 00 03 db bc 00 03 db bc  | ...`...`...........H...H........ | 
| 1660 |  00 03 dc 2e 00 03 dc 2e 00 03 dc 9a 00 03 dc 9a    00 03 dd 18 00 03 dd 18 00 03 dd 88 00 03 dd 88  | ................................ | 
| 1680 |  00 03 dd fa 00 03 dd fa 00 03 de 6c 00 03 de 6c    00 03 de de 00 03 de de 00 03 df 4e 00 03 df 4e  | ...........l...l...........N...N | 
| 16a0 |  00 03 df be 00 03 df be 00 03 e0 2c 00 03 e0 2c    00 03 e0 a0 00 03 e0 a0 00 03 e1 12 00 03 e1 12  | ...........,...,................ | 
| 16c0 |  00 03 e1 80 00 03 e1 80 00 03 e1 fc 00 03 e1 fc    00 03 e2 74 00 03 e2 74 00 03 e2 e8 00 03 e2 e8  | ...................t...t........ | 
| 16e0 |  00 03 e3 54 00 03 e3 54 00 03 e3 c6 00 03 e3 c6    00 03 e4 3a 00 03 e4 3a 00 03 e4 ae 00 03 e4 ae  | ...T...T...........:...:........ | 
| 1700 |  00 03 e5 24 00 03 e5 24 00 03 e5 a4 00 03 e5 a4    00 03 e6 20 00 03 e6 20 00 03 e6 90 00 03 e6 90  | ...$...$........................ | 
| 1720 |  00 03 e7 0c 00 03 e7 0c 00 03 e7 82 00 03 e7 82    00 03 e7 f4 00 03 e7 f4 00 03 e8 66 00 03 e8 66  | ...........................f...f | 
| 1740 |  00 03 e8 e2 00 03 e8 e2 00 03 e9 5a 00 03 e9 5a    00 03 e9 e2 00 03 e9 e2 00 03 ea 6e 00 03 ea 6e  | ...........Z...Z...........n...n | 
| 1760 |  00 03 ea e0 00 03 ea e0 00 03 eb 50 00 03 eb 50    00 03 eb cc 00 03 eb cc 00 03 ec 44 00 03 ec 44  | ...........P...P...........D...D | 
| 1780 |  00 03 ec b8 00 03 ec b8 00 03 ed 22 00 03 ed 22    00 03 ed 9c 00 03 ed 9c 00 03 ee 14 00 03 ee 14  | ..........."..."................ | 
| 17a0 |  00 03 ee 90 00 03 ee 90 00 03 ef 0a 00 03 ef 0a    00 03 ef 78 00 03 ef 78 00 03 ef ee 00 03 ef ee  | ...................x...x........ | 
| 17c0 |  00 03 f0 70 00 03 f0 70 00 03 f0 ee 00 03 f0 ee    00 03 f1 6c 00 03 f1 6c 00 03 f1 de 00 03 f1 de  | ...p...p...........l...l........ | 
| 17e0 |  00 03 f2 5a 00 03 f2 5a 00 03 f2 c2 00 03 f2 c2    00 03 f3 36 00 03 f3 36 00 03 f3 a6 00 03 f3 a6  | ...Z...Z...........6...6........ | 
| 1800 |  00 03 f4 1a 00 03 f4 1a 00 03 f4 8c 00 03 f4 8c    00 03 f5 0e 00 03 f5 0e 00 03 f5 76 00 03 f5 76  | ...........................v...v | 
| 1820 |  00 03 f5 e4 00 03 f5 e4 00 03 f6 4e 00 03 f6 4e    00 03 f6 ba 00 03 f6 ba 00 03 f7 2a 00 03 f7 2a  | ...........N...N...........*...* | 
| 1840 |  00 03 f7 a6 00 03 f7 a6 00 03 f8 18 00 03 f8 18    00 03 f8 88 00 03 f8 88 00 03 f9 02 00 03 f9 02  | ................................ | 
| 1860 |  00 03 f9 7a 00 03 f9 7a 00 03 f9 e8 00 03 f9 e8    00 03 fa 58 00 03 fa 58 00 03 fa ce 00 03 fa ce  | ...z...z...........X...X........ | 
| 1880 |  00 03 fb 3c 00 03 fb 3c 00 03 fb b6 00 03 fb b6    00 03 fc 2e 00 03 fc 2e 00 03 fc 9c 00 03 fc 9c  | ...<...<........................ | 
| 18a0 |  00 03 fd 10 00 03 fd 10 00 03 fd 88 00 03 fd 88    00 03 fe 02 00 03 fe 02 00 03 fe 72 00 03 fe 72  | ...........................r...r | 
| 18c0 |  00 03 fe e8 00 03 fe e8 00 03 ff 58 00 03 ff 58    00 03 ff d2 00 03 ff d2 00 04 00 56 00 04 00 56  | ...........X...X...........V...V | 
| 18e0 |  00 04 00 d8 00 04 00 d8 00 04 01 5e 00 04 01 5e    00 04 01 d0 00 04 01 d0 00 04 02 3c 00 04 02 3c  | ...........^...^...........<...< | 
| 1900 |  00 04 02 b2 00 04 02 b2 00 04 03 2e 00 04 03 2e    00 04 03 a8 00 04 03 a8 00 04 04 14 00 04 04 14  | ................................ | 
| 1920 |  00 04 04 90 00 04 04 90 00 04 05 00 00 04 05 00    00 04 05 74 00 04 05 74 00 04 05 e8 00 04 05 e8  | ...................t...t........ | 
| 1940 |  00 04 06 56 00 04 06 56 00 04 06 c0 00 04 06 c0    00 04 07 30 00 04 07 30 00 04 07 9a 00 04 07 9a  | ...V...V...........0...0........ | 
| 1960 |  00 04 08 0a 00 04 08 0a 00 04 08 7c 00 04 08 7c    00 04 09 04 00 04 09 04 00 04 09 8a 00 04 09 8a  | ...........|...|................ | 
| 1980 |  00 04 0a 10 00 04 0a 10 00 04 0a 8a 00 04 0a 8a    00 04 0b 00 00 04 0b 00 00 04 0b 72 00 04 0b 72  | ...........................r...r | 
| 19a0 |  00 04 0b e8 00 04 0b e8 00 04 0c 62 00 04 0c 62    00 04 0c da 00 04 0c da 00 04 0d 52 00 04 0d 52  | ...........b...b...........R...R | 
| 19c0 |  00 04 0d c6 00 04 0d c6 00 04 0e 34 00 04 0e 34    00 04 0e bc 00 04 0e bc 00 04 0f 2c 00 04 0f 2c  | ...........4...4...........,..., | 
| 19e0 |  00 04 0f a4 00 04 0f a4 00 04 10 12 00 04 10 12    00 04 10 8a 00 04 10 8a 00 04 10 fe 00 04 10 fe  | ................................ | 
| 1a00 |  00 04 11 72 00 04 11 72 00 04 11 e4 00 04 11 e4    00 04 12 72 00 04 12 72 00 04 12 f6 00 04 12 f6  | ...r...r...........r...r........ | 
| 1a20 |  00 04 13 7c 00 04 13 7c 00 04 13 f8 00 04 13 f8    00 04 14 80 00 04 14 80 00 04 14 f2 00 04 14 f2  | ...|...|........................ | 
| 1a40 |  00 04 15 6e 00 04 15 6e 00 04 15 e4 00 04 15 e4    00 04 16 60 00 04 16 60 00 04 16 d8 00 04 16 d8  | ...n...n...........`...`........ | 
| 1a60 |  00 04 17 52 00 04 17 52 00 04 17 be 00 04 17 be    00 04 18 32 00 04 18 32 00 04 18 a6 00 04 18 a6  | ...R...R...........2...2........ | 
| 1a80 |  00 04 19 18 00 04 19 18 00 04 19 8a 00 04 19 8a    00 04 19 fa 00 04 19 fa 00 04 1a 6e 00 04 1a 6e  | ...........................n...n | 
| 1aa0 |  00 04 1a e0 00 04 1a e0 00 04 1b 4e 00 04 1b 4e    00 04 1b c4 00 04 1b c4 00 04 1c 34 00 04 1c 34  | ...........N...N...........4...4 | 
| 1ac0 |  00 04 1c aa 00 04 1c aa 00 04 1d 18 00 04 1d 18    00 04 1d 96 00 04 1d 96 00 04 1e 10 00 04 1e 10  | ................................ | 
| 1ae0 |  00 04 1e 86 00 04 1e 86 00 04 1e fe 00 04 1e fe    00 04 1f 68 00 04 1f 68 00 04 1f d0 00 04 1f d0  | ...................h...h........ | 
| 1b00 |  00 04 20 3e 00 04 20 3e 00 04 20 b2 00 04 20 b2    00 04 21 24 00 04 21 24 00 04 21 98 00 04 21 98  | ...>...>..........!$..!$..!...!. | 
| 1b20 |  00 04 22 06 00 04 22 06 00 04 22 76 00 04 22 76    00 04 22 f2 00 04 22 f2 00 04 23 6c 00 04 23 6c  | .."..."..."v.."v.."..."...#l..#l | 
| 1b40 |  00 04 23 e6 00 04 23 e6 00 04 24 5a 00 04 24 5a    00 04 24 cc 00 04 24 cc 00 04 25 46 00 04 25 46  | ..#...#...$Z..$Z..$...$...%F..%F | 
| 1b60 |  00 04 25 ba 00 04 25 ba 00 04 26 38 00 04 26 38    00 04 26 ac 00 04 26 ac 00 04 27 1e 00 04 27 1e  | ..%...%...&8..&8..&...&...'...'. | 
| 1b80 |  00 04 27 8c 00 04 27 8c 00 04 27 fc 00 04 27 fc    00 04 28 80 00 04 28 80 00 04 28 fa 00 04 28 fa  | ..'...'...'...'...(...(...(...(. | 
| 1ba0 |  00 04 29 6c 00 04 29 6c 00 04 29 e4 00 04 29 e4    00 04 2a 5e 00 04 2a 5e 00 04 2a ca 00 04 2a ca  | ..)l..)l..)...)...*^..*^..*...*. | 
| 1bc0 |  00 04 2b 3c 00 04 2b 3c 00 04 2b b6 00 04 2b b6    00 04 2c 26 00 04 2c 26 00 04 2c 96 00 04 2c 96  | ..+<..+<..+...+...,&..,&..,...,. | 
| 1be0 |  00 04 2d 10 00 04 2d 10 00 04 2d 7c 00 04 2d 7c    00 04 2d ee 00 04 2d ee 00 04 2e 5a 00 04 2e 5a  | ..-...-...-|..-|..-...-....Z...Z | 
| 1c00 |  00 04 2e d6 00 04 2e d6 00 04 2f 40 00 04 2f 40    00 04 2f b8 00 04 2f b8 00 04 30 38 00 04 30 38  | ........../@../@../.../...08..08 | 
| 1c20 |  00 04 30 ac 00 04 30 ac 00 04 31 1e 00 04 31 1e    00 04 31 9a 00 04 31 9a 00 04 32 04 00 04 32 04  | ..0...0...1...1...1...1...2...2. | 
| 1c40 |  00 04 32 80 00 04 32 80 00 04 32 f8 00 04 32 f8    00 04 33 7c 00 04 33 7c 00 04 33 f8 00 04 33 f8  | ..2...2...2...2...3|..3|..3...3. | 
| 1c60 |  00 04 34 72 00 04 34 72 00 04 34 ec 00 04 34 ec    00 04 35 66 00 04 35 66 00 04 35 e2 00 04 35 e2  | ..4r..4r..4...4...5f..5f..5...5. | 
| 1c80 |  00 04 36 5e 00 04 36 5e 00 04 36 d6 00 04 36 d6    00 04 37 44 00 04 37 44 00 04 37 b4 00 04 37 b4  | ..6^..6^..6...6...7D..7D..7...7. | 
| 1ca0 |  00 04 38 2a 00 04 38 2a 00 04 38 9a 00 04 38 9a    00 04 39 0e 00 04 39 0e 00 04 39 7e 00 04 39 7e  | ..8*..8*..8...8...9...9...9~..9~ | 
| 1cc0 |  00 04 39 ea 00 04 39 ea 00 04 3a 5e 00 04 3a 5e    00 04 3a d0 00 04 3a d0 00 04 3b 3c 00 04 3b 3c  | ..9...9...:^..:^..:...:...;<..;< | 
| 1ce0 |  00 04 3b aa 00 04 3b aa 00 04 3c 1c 00 04 3c 1c    00 04 3c 94 00 04 3c 94 00 04 3d 16 00 04 3d 16  | ..;...;...<...<...<...<...=...=. | 
| 1d00 |  00 04 3d 86 00 04 3d 86 00 04 3d fc 00 04 3d fc    00 04 3e 74 00 04 3e 74 00 04 3e e4 00 04 3e e4  | ..=...=...=...=...>t..>t..>...>. | 
| 1d20 |  00 04 3f 50 00 04 3f 50 00 04 3f b8 00 04 3f b8    00 04 40 24 00 04 40 24 00 04 40 92 00 04 40 92  | ..?P..?P..?...?...@$..@$..@...@. | 
| 1d40 |  00 04 41 08 00 04 41 08 00 04 41 7e 00 04 41 7e    00 04 41 f0 00 04 41 f0 00 04 42 5c 00 04 42 5c  | ..A...A...A~..A~..A...A...B\..B\ | 
| 1d60 |  00 04 42 d6 00 04 42 d6 00 04 43 4c 00 04 43 4c    00 04 43 c8 00 04 43 c8 00 04 44 3e 00 04 44 3e  | ..B...B...CL..CL..C...C...D>..D> | 
| 1d80 |  00 04 44 b2 00 04 44 b2 00 04 45 28 00 04 45 28    00 04 45 a4 00 04 45 a4 00 04 46 1c 00 04 46 1c  | ..D...D...E(..E(..E...E...F...F. | 
| 1da0 |  00 04 46 92 00 04 46 92 00 04 47 00 00 04 47 00    00 04 47 70 00 04 47 70 00 04 47 ea 00 04 47 ea  | ..F...F...G...G...Gp..Gp..G...G. | 
| 1dc0 |  00 04 48 6a 00 04 48 6a 00 04 48 dc 00 04 48 dc    00 04 49 54 00 04 49 54 00 04 49 d0 00 04 49 d0  | ..Hj..Hj..H...H...IT..IT..I...I. | 
| 1de0 |  00 04 4a 4c 00 04 4a 4c 00 04 4a c0 00 04 4a c0    00 04 4b 38 00 04 4b 38 00 04 4b a8 00 04 4b a8  | ..JL..JL..J...J...K8..K8..K...K. | 
| 1e00 |  00 04 4c 22 00 04 4c 22 00 04 4c 98 00 04 4c 98    00 04 4d 0c 00 04 4d 0c 00 04 4d 88 00 04 4d 88  | ..L"..L"..L...L...M...M...M...M. | 
| 1e20 |  00 04 4d fc 00 04 4d fc 00 04 4e 6e 00 04 4e 6e    00 04 4e d6 00 04 4e d6 00 04 4f 50 00 04 4f 50  | ..M...M...Nn..Nn..N...N...OP..OP | 
| 1e40 |  00 04 4f c6 00 04 4f c6 00 04 50 3a 00 04 50 3a    00 04 50 b6 00 04 50 b6 00 04 51 2e 00 04 51 2e  | ..O...O...P:..P:..P...P...Q...Q. | 
| 1e60 |  00 04 51 a4 00 04 51 a4 00 04 52 22 00 04 52 22    00 04 52 9e 00 04 52 9e 00 04 53 14 00 04 53 14  | ..Q...Q...R"..R"..R...R...S...S. | 
| 1e80 |  00 04 53 8e 00 04 53 8e 00 04 54 00 00 04 54 00    00 04 54 70 00 04 54 70 00 04 54 ea 00 04 54 ea  | ..S...S...T...T...Tp..Tp..T...T. | 
| 1ea0 |  00 04 55 56 00 04 55 56 00 04 55 c4 00 04 55 c4    00 04 56 32 00 04 56 32 00 04 56 9e 00 04 56 9e  | ..UV..UV..U...U...V2..V2..V...V. | 
| 1ec0 |  00 04 57 0a 00 04 57 0a 00 04 57 78 00 04 57 78    00 04 57 ec 00 04 57 ec 00 04 58 5e 00 04 58 5e  | ..W...W...Wx..Wx..W...W...X^..X^ | 
| 1ee0 |  00 04 58 ce 00 04 58 ce 00 04 59 38 00 04 59 38    00 04 59 a8 00 04 59 a8 00 04 5a 1a 00 04 5a 1a  | ..X...X...Y8..Y8..Y...Y...Z...Z. | 
| 1f00 |  00 04 5a 8e 00 04 5a 8e 00 04 5b 06 00 04 5b 06    00 04 5b 80 00 04 5b 80 00 04 5b f2 00 04 5b f2  | ..Z...Z...[...[...[...[...[...[. | 
| 1f20 |  00 04 5c 64 00 04 5c 64 00 04 5c ce 00 04 5c ce    00 04 5d 40 00 04 5d 40 00 04 5d b4 00 04 5d b4  | ..\d..\d..\...\...]@..]@..]...]. | 
| 1f40 |  00 04 5e 20 00 04 5e 20 00 04 5e 8c 00 04 5e 8c    00 04 5e f6 00 04 5e f6 00 04 5f 60 00 04 5f 60  | ..^...^...^...^...^...^..._`.._` | 
| 1f60 |  00 04 5f cc 00 04 5f cc 00 04 60 3e 00 04 60 3e    00 04 60 aa 00 04 60 aa 00 04 61 14 00 04 61 14  | .._..._...`>..`>..`...`...a...a. | 
| 1f80 |  00 04 61 84 00 04 61 84 00 04 61 f4 00 04 61 f4    00 04 62 66 00 04 62 66 00 04 62 da 00 04 62 da  | ..a...a...a...a...bf..bf..b...b. | 
| 1fa0 |  00 04 63 48 00 04 63 48 00 04 63 b6 00 04 63 b6    00 04 64 22 00 04 64 22 00 04 64 8e 00 04 64 8e  | ..cH..cH..c...c...d"..d"..d...d. | 
| 1fc0 |  00 04 65 0c 00 04 65 0c 00 04 65 7a 00 04 65 7a    00 04 65 f4 00 04 65 f4 00 04 66 60 00 04 66 60  | ..e...e...ez..ez..e...e...f`..f` | 
| 1fe0 |  00 04 66 cc 00 04 66 cc 00 04 67 40 00 04 67 40    00 04 67 aa 00 04 67 aa 00 04 68 22 00 04 68 22  | ..f...f...g@..g@..g...g...h"..h" | 
| 2000 |  00 04 68 90 00 04 68 90 00 04 69 04 00 04 69 04    00 04 69 7a 00 04 69 7a 00 04 69 f6 00 04 69 f6  | ..h...h...i...i...iz..iz..i...i. | 
| 2020 |  00 04 6a 70 00 04 6a 70 00 04 6a e2 00 04 6a e2    00 04 6b 5a 00 04 6b 5a 00 04 6b d2 00 04 6b d2  | ..jp..jp..j...j...kZ..kZ..k...k. | 
| 2040 |  00 04 6c 42 00 04 6c 42 00 04 6c b0 00 04 6c b0    00 04 6d 20 00 04 6d 20 00 04 6d 92 00 04 6d 92  | ..lB..lB..l...l...m...m...m...m. | 
| 2060 |  00 04 6e 06 00 04 6e 06 00 04 6e 7c 00 04 6e 7c    00 04 6e f2 00 04 6e f2 00 04 6f 68 00 04 6f 68  | ..n...n...n|..n|..n...n...oh..oh | 
| 2080 |  00 04 6f da 00 04 6f da 00 04 70 52 00 04 70 52    00 04 70 c6 00 04 70 c6 00 04 71 40 00 04 71 40  | ..o...o...pR..pR..p...p...q@..q@ | 
| 20a0 |  00 04 71 b8 00 04 71 b8 00 04 72 28 00 04 72 28    00 04 72 9e 00 04 72 9e 00 04 73 06 00 04 73 06  | ..q...q...r(..r(..r...r...s...s. | 
| 20c0 |  00 04 73 70 00 04 73 70 00 04 73 e4 00 04 73 e4    00 04 74 58 00 04 74 58 00 04 74 c8 00 04 74 c8  | ..sp..sp..s...s...tX..tX..t...t. | 
| 20e0 |  00 04 75 40 00 04 75 40 00 04 75 b4 00 04 75 b4    00 04 76 24 00 04 76 24 00 04 76 92 00 04 76 92  | ..u@..u@..u...u...v$..v$..v...v. | 
| 2100 |  00 04 77 04 00 04 77 04 00 04 77 76 00 04 77 76    00 04 77 e6 00 04 77 e6 00 04 78 50 00 04 78 50  | ..w...w...wv..wv..w...w...xP..xP | 
| 2120 |  00 04 78 b8 00 04 78 b8 00 04 79 24 00 04 79 24    00 04 79 92 00 04 79 92 00 04 79 fe 00 04 79 fe  | ..x...x...y$..y$..y...y...y...y. | 
| 2140 |  00 04 7a 6e 00 04 7a 6e 00 04 7a d8 00 04 7a d8    00 04 7b 4c 00 04 7b 4c 00 04 7b c2 00 04 7b c2  | ..zn..zn..z...z...{L..{L..{...{. | 
| 2160 |  00 04 7c 2e 00 04 7c 2e 00 04 7c a2 00 04 7c a2    00 04 7d 14 00 04 7d 14 00 04 7d 8c 00 04 7d 8c  | ..|...|...|...|...}...}...}...}. | 
| 2180 |  00 04 7e 02 00 04 7e 02 00 04 7e 6c 00 04 7e 6c    00 04 7e d8 00 04 7e d8 00 04 7f 42 00 04 7f 42  | ..~...~...~l..~l..~...~....B...B | 
| 21a0 |  00 04 7f b4 00 04 7f b4 00 04 80 28 00 04 80 28    00 04 80 9a 00 04 80 9a 00 04 81 08 00 04 81 08  | ...........(...(................ | 
| 21c0 |  00 04 81 7a 00 04 81 7a 00 04 81 f6 00 04 81 f6    00 04 82 68 00 04 82 68 00 04 82 d8 00 04 82 d8  | ...z...z...........h...h........ | 
| 21e0 |  00 04 83 48 00 04 83 48 00 04 83 b2 00 04 83 b2    00 04 84 22 00 04 84 22 00 04 84 92 00 04 84 92  | ...H...H..........."..."........ | 
| 2200 |  00 04 85 02 00 04 85 02 00 04 85 7e 00 04 85 7e    00 04 85 f2 00 04 85 f2 00 04 86 60 00 04 86 60  | ...........~...~...........`...` | 
| 2220 |  00 04 86 d6 00 04 86 d6 00 04 87 42 00 04 87 42    00 04 87 b2 00 04 87 b2 00 04 88 2a 00 04 88 2a  | ...........B...B...........*...* | 
| 2240 |  00 04 88 a8 00 04 88 a8 00 04 89 24 00 04 89 24    00 04 89 9c 00 04 89 9c 00 04 8a 0c 00 04 8a 0c  | ...........$...$................ | 
| 2260 |  00 04 8a 80 00 04 8a 80 00 04 8a ee 00 04 8a ee    00 04 8b 68 00 04 8b 68 00 04 8b e4 00 04 8b e4  | ...................h...h........ | 
| 2280 |  00 04 8c 5c 00 04 8c 5c 00 04 8c d0 00 04 8c d0    00 04 8d 40 00 04 8d 40 00 04 8d ac 00 04 8d ac  | ...\...\...........@...@........ | 
| 22a0 |  00 04 8e 18 00 04 8e 18 00 04 8e 8e 00 04 8e 8e    00 04 8e f8 00 04 8e f8 00 04 8f 6a 00 04 8f 6a  | ...........................j...j | 
| 22c0 |  00 04 8f de 00 04 8f de 00 04 90 54 00 04 90 54    00 04 90 ca 00 04 90 ca 00 04 91 42 00 04 91 42  | ...........T...T...........B...B | 
| 22e0 |  00 04 91 ba 00 04 91 ba 00 04 92 30 00 04 92 30    00 04 92 aa 00 04 92 aa 00 04 93 20 00 04 93 20  | ...........0...0................ | 
| 2300 |  00 04 93 96 00 04 93 96 00 04 94 0e 00 04 94 0e    00 04 94 7a 00 04 94 7a 00 04 94 e6 00 04 94 e6  | ...................z...z........ | 
| 2320 |  00 04 95 5c 00 04 95 5c 00 04 95 d2 00 04 95 d2    00 04 96 46 00 04 96 46 00 04 96 bc 00 04 96 bc  | ...\...\...........F...F........ | 
| 2340 |  00 04 97 2e 00 04 97 2e 00 04 97 a4 00 04 97 a4    00 04 98 14 00 04 98 14 00 04 98 88 00 04 98 88  | ................................ | 
| 2360 |  00 04 98 fc 00 04 98 fc 00 04 99 66 00 04 99 66    00 04 99 dc 00 04 99 dc 00 04 9a 58 00 04 9a 58  | ...........f...f...........X...X | 
| 2380 |  00 04 9a d2 00 04 9a d2 00 04 9b 42 00 04 9b 42    00 04 9b b4 00 04 9b b4 00 04 9c 24 00 04 9c 24  | ...........B...B...........$...$ | 
| 23a0 |  00 04 9c 8e 00 04 9c 8e 00 04 9d 00 00 04 9d 00    00 04 9d 70 00 04 9d 70 00 04 9d dc 00 04 9d dc  | ...................p...p........ | 
| 23c0 |  00 04 9e 54 00 04 9e 54 00 04 9e c2 00 04 9e c2    00 04 9f 2e 00 04 9f 2e 00 04 9f a2 00 04 9f a2  | ...T...T........................ | 
| 23e0 |  00 04 a0 14 00 04 a0 14 00 04 a0 80 00 04 a0 80    00 04 a0 f6 00 04 a0 f6 00 04 a1 62 00 04 a1 62  | ...........................b...b | 
| 2400 |  00 04 a1 d2 00 04 a1 d2 00 04 a2 3a 00 04 a2 3a    00 04 a2 a8 00 04 a2 a8 00 04 a3 1a 00 04 a3 1a  | ...........:...:................ | 
| 2420 |  00 04 a3 84 00 04 a3 84 00 04 a3 f2 00 04 a3 f2    00 04 a4 5c 00 04 a4 5c 00 04 a4 d0 00 04 a4 d0  | ...................\...\........ | 
| 2440 |  00 04 a5 4a 00 04 a5 4a 00 04 a5 ba 00 04 a5 ba    00 04 a6 34 00 04 a6 34 00 04 a6 a6 00 04 a6 a6  | ...J...J...........4...4........ | 
| 2460 |  00 04 a7 16 00 04 a7 16 00 04 a7 88 00 04 a7 88    00 04 a8 04 00 04 a8 04 00 04 a8 7a 00 04 a8 7a  | ...........................z...z | 
| 2480 |  00 04 a8 ee 00 04 a8 ee 00 04 a9 62 00 04 a9 62    00 04 a9 d4 00 04 a9 d4 00 04 aa 44 00 04 aa 44  | ...........b...b...........D...D | 
| 24a0 |  00 04 aa be 00 04 aa be 00 04 ab 28 00 04 ab 28    00 04 ab 92 00 04 ab 92 00 04 ab fa 00 04 ab fa  | ...........(...(................ | 
| 24c0 |  00 04 ac 64 00 04 ac 64 00 04 ac ce 00 04 ac ce    00 04 ad 38 00 04 ad 38 00 04 ad b0 00 04 ad b0  | ...d...d...........8...8........ | 
| 24e0 |  00 04 ae 1e 00 04 ae 1e 00 04 ae 92 00 04 ae 92    00 04 af 04 00 04 af 04 00 04 af 76 00 04 af 76  | ...........................v...v | 
| 2500 |  00 04 af ee 00 04 af ee 00 04 b0 68 00 04 b0 68    00 04 b0 d6 00 04 b0 d6 00 04 b1 42 00 04 b1 42  | ...........h...h...........B...B | 
| 2520 |  00 04 b1 b4 00 04 b1 b4 00 04 b2 28 00 04 b2 28    00 04 b2 a2 00 04 b2 a2 00 04 b3 12 00 04 b3 12  | ...........(...(................ | 
| 2540 |  00 04 b3 80 00 04 b3 80 00 04 b3 f2 00 04 b3 f2    00 04 b4 68 00 04 b4 68 00 04 b4 d8 00 04 b4 d8  | ...................h...h........ | 
| 2560 |  00 04 b5 4c 00 04 b5 4c 00 04 b5 b4 00 04 b5 b4    00 04 b6 2a 00 04 b6 2a 00 04 b6 9a 00 04 b6 9a  | ...L...L...........*...*........ | 
| 2580 |  00 04 b7 04 00 04 b7 04 00 04 b7 70 00 04 b7 70    00 04 b7 de 00 04 b7 de 00 04 b8 50 00 04 b8 50  | ...........p...p...........P...P | 
| 25a0 |  00 04 b8 d4 00 04 b8 d4 00 04 b9 42 00 04 b9 42    00 04 b9 b8 00 04 b9 b8 00 04 ba 2c 00 04 ba 2c  | ...........B...B...........,..., | 
| 25c0 |  00 04 ba 9c 00 04 ba 9c 00 04 bb 0c 00 04 bb 0c    00 04 bb 7a 00 04 bb 7a 00 04 bb ee 00 04 bb ee  | ...................z...z........ | 
| 25e0 |  00 04 bc 5c 00 04 bc 5c 00 04 bc d4 00 04 bc d4    00 04 bd 3e 00 04 bd 3e 00 04 bd a8 00 04 bd a8  | ...\...\...........>...>........ | 
| 2600 |  00 04 be 1a 00 04 be 1a 00 04 be 8a 00 04 be 8a    00 04 be f4 00 04 be f4 00 04 bf 62 00 04 bf 62  | ...........................b...b | 
| 2620 |  00 04 bf d0 00 04 bf d0 00 04 c0 42 00 04 c0 42    00 04 c0 ac 00 04 c0 ac 00 04 c1 20 00 04 c1 20  | ...........B...B................ | 
| 2640 |  00 04 c1 8c 00 04 c1 8c 00 04 c1 f8 00 04 c1 f8    00 04 c2 66 00 04 c2 66 00 04 c2 e0 00 04 c2 e0  | ...................f...f........ | 
| 2660 |  00 04 c3 50 00 04 c3 50 00 04 c3 be 00 04 c3 be    00 04 c4 2c 00 04 c4 2c 00 04 c4 9c 00 04 c4 9c  | ...P...P...........,...,........ | 
| 2680 |  00 04 c5 0a 00 04 c5 0a 00 04 c5 76 00 04 c5 76    00 04 c5 e8 00 04 c5 e8 00 04 c6 5c 00 04 c6 5c  | ...........v...v...........\...\ | 
| 26a0 |  00 04 c6 ca 00 04 c6 ca 00 04 c7 3e 00 04 c7 3e    00 04 c7 b0 00 04 c7 b0 00 04 c8 1a 00 04 c8 1a  | ...........>...>................ | 
| 26c0 |  00 04 c8 88 00 04 c8 88 00 04 c8 f8 00 04 c8 f8    00 04 c9 6c 00 04 c9 6c 00 04 c9 d8 00 04 c9 d8  | ...................l...l........ | 
| 26e0 |  00 04 ca 48 00 04 ca 48 00 04 ca b4 00 04 ca b4    00 04 cb 2a 00 04 cb 2a 00 04 cb 9c 00 04 cb 9c  | ...H...H...........*...*........ | 
| 2700 |  00 04 cc 04 00 04 cc 04 00 04 cc 70 00 04 cc 70    00 04 cc dc 00 04 cc dc 00 04 cd 50 00 04 cd 50  | ...........p...p...........P...P | 
| 2720 |  00 04 cd be 00 04 cd be 00 04 ce 2a 00 04 ce 2a    00 04 ce a0 00 04 ce a0 00 04 cf 06 00 04 cf 06  | ...........*...*................ | 
| 2740 |  00 04 cf 70 00 04 cf 70 00 04 cf dc 00 04 cf dc    00 04 d0 48 00 04 d0 48 00 04 d0 c2 00 04 d0 c2  | ...p...p...........H...H........ | 
| 2760 |  00 04 d1 32 00 04 d1 32 00 04 d1 aa 00 04 d1 aa    00 04 d2 20 00 04 d2 20 00 04 d2 94 00 04 d2 94  | ...2...2........................ | 
| 2780 |  00 04 d3 0a 00 04 d3 0a 00 04 d3 78 00 04 d3 78    00 04 d3 f2 00 04 d3 f2 00 04 d4 6a 00 04 d4 6a  | ...........x...x...........j...j | 
| 27a0 |  00 04 d4 d6 00 04 d4 d6 00 04 d5 48 00 04 d5 48    00 04 d5 be 00 04 d5 be 00 04 d6 30 00 04 d6 30  | ...........H...H...........0...0 | 
| 27c0 |  00 04 d6 9e 00 04 d6 9e 00 04 d7 0a 00 04 d7 0a    00 04 d7 72 00 04 d7 72 00 04 d8 04 00 04 d8 04  | ...................r...r........ | 
| 27e0 |  00 04 d8 8e 00 04 d8 8e 00 04 d9 0a 00 04 d9 0a    00 04 d9 8a 00 04 d9 8a 00 04 d9 fc 00 04 d9 fc  | ................................ | 
| 2800 |  00 04 da 76 00 04 da 76 00 04 da e2 00 04 da e2    00 04 db 54 00 04 db 54 00 04 db c4 00 04 db c4  | ...v...v...........T...T........ | 
| 2820 |  00 04 dc 30 00 04 dc 30 00 04 dc 9c 00 04 dc 9c    00 04 dd 18 00 04 dd 18 00 04 dd 8a 00 04 dd 8a  | ...0...0........................ | 
| 2840 |  00 04 dd f4 00 04 dd f4 00 04 de 72 00 04 de 72    00 04 de e2 00 04 de e2 00 04 df 52 00 04 df 52  | ...........r...r...........R...R | 
| 2860 |  00 04 df c8 00 04 df c8 00 04 e0 4c 00 04 e0 4c    00 04 e0 cc 00 04 e0 cc 00 04 e1 46 00 04 e1 46  | ...........L...L...........F...F | 
| 2880 |  00 04 e1 c8 00 04 e1 c8 00 04 e2 48 00 04 e2 48    00 04 e2 c0 00 04 e2 c0 00 04 e3 3a 00 04 e3 3a  | ...........H...H...........:...: | 
| 28a0 |  00 04 e3 aa 00 04 e3 aa 00 04 e4 14 00 04 e4 14    00 04 e4 90 00 04 e4 90 00 04 e5 02 00 04 e5 02  | ................................ | 
| 28c0 |  00 04 e5 78 00 04 e5 78 00 04 e5 e8 00 04 e5 e8    00 04 e6 5e 00 04 e6 5e 00 04 e6 ce 00 04 e6 ce  | ...x...x...........^...^........ | 
| 28e0 |  00 04 e7 3c 00 04 e7 3c 00 04 e7 ba 00 04 e7 ba    00 04 e8 2a 00 04 e8 2a 00 04 e8 9c 00 04 e8 9c  | ...<...<...........*...*........ | 
| 2900 |  00 04 e9 16 00 04 e9 16 00 04 e9 8a 00 04 e9 8a    00 04 ea 06 00 04 ea 06 00 04 ea 7e 00 04 ea 7e  | ...........................~...~ | 
| 2920 |  00 04 ea ee 00 04 ea ee 00 04 eb 6a 00 04 eb 6a    00 04 eb e4 00 04 eb e4 00 04 ec 5e 00 04 ec 5e  | ...........j...j...........^...^ | 
| 2940 |  00 04 ec d8 00 04 ec d8 00 04 ed 42 00 04 ed 42    00 04 ed b2 00 04 ed b2 00 04 ee 2e 00 04 ee 2e  | ...........B...B................ | 
| 2960 |  00 04 ee a6 00 04 ee a6 00 04 ef 1e 00 04 ef 1e    00 04 ef 90 00 04 ef 90 00 04 f0 0c 00 04 f0 0c  | ................................ | 
| 2980 |  00 04 f0 7a 00 04 f0 7a 00 04 f0 ec 00 04 f0 ec    00 04 f1 5a 00 04 f1 5a 00 04 f1 d0 00 04 f1 d0  | ...z...z...........Z...Z........ | 
| 29a0 |  00 04 f2 42 00 04 f2 42 00 04 f2 b0 00 04 f2 b0    00 04 f3 1e 00 04 f3 1e 00 04 f3 94 00 04 f3 94  | ...B...B........................ | 
| 29c0 |  00 04 f4 04 00 04 f4 04 00 04 f4 70 00 04 f4 70    00 04 f4 e4 00 04 f4 e4 00 04 f5 50 00 04 f5 50  | ...........p...p...........P...P | 
| 29e0 |  00 04 f5 bc 00 04 f5 bc 00 04 f6 28 00 04 f6 28    00 04 f6 96 00 04 f6 96 00 04 f7 04 00 04 f7 04  | ...........(...(................ | 
| 2a00 |  00 04 f7 7a 00 04 f7 7a 00 04 f7 f0 00 04 f7 f0    00 04 f8 68 00 04 f8 68 00 04 f8 e0 00 04 f8 e0  | ...z...z...........h...h........ | 
| 2a20 |  00 04 f9 4e 00 04 f9 4e 00 04 f9 bc 00 04 f9 bc    00 04 fa 2e 00 04 fa 2e 00 04 fa a0 00 04 fa a0  | ...N...N........................ | 
| 2a40 |  00 04 fb 1c 00 04 fb 1c 00 04 fb 98 00 04 fb 98    00 04 fc 0e 00 04 fc 0e 00 04 fc 82 00 04 fc 82  | ................................ | 
| 2a60 |  00 04 fc f6 00 04 fc f6 00 04 fd 64 00 04 fd 64    00 04 fd d2 00 04 fd d2 00 04 fe 48 00 04 fe 48  | ...........d...d...........H...H | 
| 2a80 |  00 04 fe b6 00 04 fe b6 00 04 ff 2c 00 04 ff 2c    00 04 ff 9c 00 04 ff 9c 00 05 00 0c 00 05 00 0c  | ...........,...,................ | 
| 2aa0 |  00 05 00 7c 00 05 00 7c 00 05 00 ee 00 05 00 ee    00 05 01 5e 00 05 01 5e 00 05 01 d6 00 05 01 d6  | ...|...|...........^...^........ | 
| 2ac0 |  00 05 02 46 00 05 02 46 00 05 02 bc 00 05 02 bc    00 05 03 34 00 05 03 34 00 05 03 aa 00 05 03 aa  | ...F...F...........4...4........ | 
| 2ae0 |  00 05 04 28 00 05 04 28 00 05 04 94 00 05 04 94    00 05 05 04 00 05 05 04 00 05 05 7a 00 05 05 7a  | ...(...(...................z...z | 
| 2b00 |  00 05 05 f0 00 05 05 f0 00 05 06 58 00 05 06 58    00 05 06 ca 00 05 06 ca 00 05 07 30 00 05 07 30  | ...........X...X...........0...0 | 
| 2b20 |  00 05 07 94 00 05 07 94 00 05 08 00 00 05 08 00    00 05 08 72 00 05 08 72 00 05 08 e2 00 05 08 e2  | ...................r...r........ | 
| 2b40 |  00 05 09 50 00 05 09 50 00 05 09 ba 00 05 09 ba    00 05 0a 32 00 05 0a 32 00 05 0a a0 00 05 0a a0  | ...P...P...........2...2........ | 
| 2b60 |  00 05 0b 12 00 05 0b 12 00 05 0b 8a 00 05 0b 8a    00 05 0b fc 00 05 0b fc 00 05 0c 6c 00 05 0c 6c  | ...........................l...l | 
| 2b80 |  00 05 0c e2 00 05 0c e2 00 05 0d 6c 00 05 0d 6c    00 05 0d e2 00 05 0d e2 00 05 0e 5a 00 05 0e 5a  | ...........l...l...........Z...Z | 
| 2ba0 |  00 05 0e d0 00 05 0e d0 00 05 0f 40 00 05 0f 40    00 05 0f b2 00 05 0f b2 00 05 10 20 00 05 10 20  | ...........@...@................ | 
| 2bc0 |  00 05 10 9a 00 05 10 9a 00 05 11 20 00 05 11 20    00 05 11 a4 00 05 11 a4 00 05 12 60 00 05 12 60  | ...........................`...` | 
| 2be0 |  00 05 13 26 00 05 13 26 00 05 13 c2 00 05 15 12    00 05 16 48 00 05 18 6a 00 05 18 6a 00 05 18 6a  | ...&...&...........H...j...j...j | 
| 2c00 |  00 05 18 6a 00 05 18 6a 00 05 18 6a 00 05 18 6a    00 05 18 6a 00 05 52 4e 00 05 52 4e 00 05 52 4e  | ...j...j...j...j...j..RN..RN..RN | 
| 2c20 |  00 05 52 4e 00 05 52 4e 00 05 52 4e 00 05 52 4e    00 05 52 4e 00 05 52 4e 00 05 52 4e 00 05 6d 32  | ..RN..RN..RN..RN..RN..RN..RN..m2 | 
| 2c40 |  00 05 7d 40 00 05 7d 40 00 05 90 0a 00 05 9c 6a    00 05 a5 fe 00 05 b1 68 00 05 b1 68 00 05 b7 5c  | ..}@..}@.......j.......h...h...\ | 
| 2c60 |  00 05 c4 04 00 05 ce c8 00 05 d5 44 00 05 d5 44    5f 5f 69 6d 70 5f 5f 77 63 73 74 6f 75 6c 00 5f  | ...........D...D__imp__wcstoul._ | 
| 2c80 |  77 63 73 74 6f 75 6c 00 5f 5f 69 6d 70 5f 5f 77    63 73 74 6f 6d 62 73 00 5f 77 63 73 74 6f 6d 62  | wcstoul.__imp__wcstombs._wcstomb | 
| 2ca0 |  73 00 5f 5f 69 6d 70 5f 5f 77 63 73 74 6f 6c 00    5f 77 63 73 74 6f 6c 00 5f 5f 69 6d 70 5f 5f 77  | s.__imp__wcstol._wcstol.__imp__w | 
| 2cc0 |  63 73 73 74 72 00 5f 77 63 73 73 74 72 00 5f 5f    69 6d 70 5f 5f 77 63 73 73 70 6e 00 5f 77 63 73  | csstr._wcsstr.__imp__wcsspn._wcs | 
| 2ce0 |  73 70 6e 00 5f 5f 69 6d 70 5f 5f 77 63 73 72 63    68 72 00 5f 77 63 73 72 63 68 72 00 5f 5f 69 6d  | spn.__imp__wcsrchr._wcsrchr.__im | 
| 2d00 |  70 5f 5f 77 63 73 70 62 72 6b 00 5f 77 63 73 70    62 72 6b 00 5f 5f 69 6d 70 5f 5f 77 63 73 6e 63  | p__wcspbrk._wcspbrk.__imp__wcsnc | 
| 2d20 |  70 79 00 5f 77 63 73 6e 63 70 79 00 5f 5f 69 6d    70 5f 5f 77 63 73 6e 63 6d 70 00 5f 77 63 73 6e  | py._wcsncpy.__imp__wcsncmp._wcsn | 
| 2d40 |  63 6d 70 00 5f 5f 69 6d 70 5f 5f 77 63 73 6e 63    61 74 00 5f 77 63 73 6e 63 61 74 00 5f 5f 69 6d  | cmp.__imp__wcsncat._wcsncat.__im | 
| 2d60 |  70 5f 5f 77 63 73 6c 65 6e 00 5f 77 63 73 6c 65    6e 00 5f 5f 69 6d 70 5f 5f 77 63 73 63 73 70 6e  | p__wcslen._wcslen.__imp__wcscspn | 
| 2d80 |  00 5f 77 63 73 63 73 70 6e 00 5f 5f 69 6d 70 5f    5f 77 63 73 63 70 79 00 5f 77 63 73 63 70 79 00  | ._wcscspn.__imp__wcscpy._wcscpy. | 
| 2da0 |  5f 5f 69 6d 70 5f 5f 77 63 73 63 6d 70 00 5f 77    63 73 63 6d 70 00 5f 5f 69 6d 70 5f 5f 77 63 73  | __imp__wcscmp._wcscmp.__imp__wcs | 
| 2dc0 |  63 68 72 00 5f 77 63 73 63 68 72 00 5f 5f 69 6d    70 5f 5f 77 63 73 63 61 74 00 5f 77 63 73 63 61  | chr._wcschr.__imp__wcscat._wcsca | 
| 2de0 |  74 00 5f 5f 69 6d 70 5f 5f 76 73 70 72 69 6e 74    66 00 5f 76 73 70 72 69 6e 74 66 00 5f 5f 69 6d  | t.__imp__vsprintf._vsprintf.__im | 
| 2e00 |  70 5f 5f 76 44 62 67 50 72 69 6e 74 45 78 57 69    74 68 50 72 65 66 69 78 40 32 30 00 5f 76 44 62  | p__vDbgPrintExWithPrefix@20._vDb | 
| 2e20 |  67 50 72 69 6e 74 45 78 57 69 74 68 50 72 65 66    69 78 40 32 30 00 5f 5f 69 6d 70 5f 5f 76 44 62  | gPrintExWithPrefix@20.__imp__vDb | 
| 2e40 |  67 50 72 69 6e 74 45 78 40 31 36 00 5f 76 44 62    67 50 72 69 6e 74 45 78 40 31 36 00 5f 5f 69 6d  | gPrintEx@16._vDbgPrintEx@16.__im | 
| 2e60 |  70 5f 5f 74 6f 77 75 70 70 65 72 00 5f 74 6f 77    75 70 70 65 72 00 5f 5f 69 6d 70 5f 5f 74 6f 77  | p__towupper._towupper.__imp__tow | 
| 2e80 |  6c 6f 77 65 72 00 5f 74 6f 77 6c 6f 77 65 72 00    5f 5f 69 6d 70 5f 5f 74 6f 75 70 70 65 72 00 5f  | lower._towlower.__imp__toupper._ | 
| 2ea0 |  74 6f 75 70 70 65 72 00 5f 5f 69 6d 70 5f 5f 74    6f 6c 6f 77 65 72 00 5f 74 6f 6c 6f 77 65 72 00  | toupper.__imp__tolower._tolower. | 
| 2ec0 |  5f 5f 69 6d 70 5f 5f 74 61 6e 00 5f 74 61 6e 00    5f 5f 69 6d 70 5f 5f 73 77 70 72 69 6e 74 66 00  | __imp__tan._tan.__imp__swprintf. | 
| 2ee0 |  5f 73 77 70 72 69 6e 74 66 00 5f 5f 69 6d 70 5f    5f 73 74 72 74 6f 75 6c 00 5f 73 74 72 74 6f 75  | _swprintf.__imp__strtoul._strtou | 
| 2f00 |  6c 00 5f 5f 69 6d 70 5f 5f 73 74 72 74 6f 6c 00    5f 73 74 72 74 6f 6c 00 5f 5f 69 6d 70 5f 5f 73  | l.__imp__strtol._strtol.__imp__s | 
| 2f20 |  74 72 73 74 72 00 5f 73 74 72 73 74 72 00 5f 5f    69 6d 70 5f 5f 73 74 72 73 70 6e 00 5f 73 74 72  | trstr._strstr.__imp__strspn._str | 
| 2f40 |  73 70 6e 00 5f 5f 69 6d 70 5f 5f 73 74 72 72 63    68 72 00 5f 73 74 72 72 63 68 72 00 5f 5f 69 6d  | spn.__imp__strrchr._strrchr.__im | 
| 2f60 |  70 5f 5f 73 74 72 70 62 72 6b 00 5f 73 74 72 70    62 72 6b 00 5f 5f 69 6d 70 5f 5f 73 74 72 6e 63  | p__strpbrk._strpbrk.__imp__strnc | 
| 2f80 |  70 79 00 5f 73 74 72 6e 63 70 79 00 5f 5f 69 6d    70 5f 5f 73 74 72 6e 63 6d 70 00 5f 73 74 72 6e  | py._strncpy.__imp__strncmp._strn | 
| 2fa0 |  63 6d 70 00 5f 5f 69 6d 70 5f 5f 73 74 72 6e 63    61 74 00 5f 73 74 72 6e 63 61 74 00 5f 5f 69 6d  | cmp.__imp__strncat._strncat.__im | 
| 2fc0 |  70 5f 5f 73 74 72 6c 65 6e 00 5f 73 74 72 6c 65    6e 00 5f 5f 69 6d 70 5f 5f 73 74 72 63 73 70 6e  | p__strlen._strlen.__imp__strcspn | 
| 2fe0 |  00 5f 73 74 72 63 73 70 6e 00 5f 5f 69 6d 70 5f    5f 73 74 72 63 70 79 00 5f 73 74 72 63 70 79 00  | ._strcspn.__imp__strcpy._strcpy. | 
| 3000 |  5f 5f 69 6d 70 5f 5f 73 74 72 63 6d 70 00 5f 73    74 72 63 6d 70 00 5f 5f 69 6d 70 5f 5f 73 74 72  | __imp__strcmp._strcmp.__imp__str | 
| 3020 |  63 68 72 00 5f 73 74 72 63 68 72 00 5f 5f 69 6d    70 5f 5f 73 74 72 63 61 74 00 5f 73 74 72 63 61  | chr._strchr.__imp__strcat._strca | 
| 3040 |  74 00 5f 5f 69 6d 70 5f 5f 73 73 63 61 6e 66 00    5f 73 73 63 61 6e 66 00 5f 5f 69 6d 70 5f 5f 73  | t.__imp__sscanf._sscanf.__imp__s | 
| 3060 |  71 72 74 00 5f 73 71 72 74 00 5f 5f 69 6d 70 5f    5f 73 70 72 69 6e 74 66 00 5f 73 70 72 69 6e 74  | qrt._sqrt.__imp__sprintf._sprint | 
| 3080 |  66 00 5f 5f 69 6d 70 5f 5f 73 69 6e 00 5f 73 69    6e 00 5f 5f 69 6d 70 5f 5f 71 73 6f 72 74 00 5f  | f.__imp__sin._sin.__imp__qsort._ | 
| 30a0 |  71 73 6f 72 74 00 5f 5f 69 6d 70 5f 5f 70 6f 77    00 5f 70 6f 77 00 5f 5f 69 6d 70 5f 5f 6d 65 6d  | qsort.__imp__pow._pow.__imp__mem | 
| 30c0 |  73 65 74 00 5f 6d 65 6d 73 65 74 00 5f 5f 69 6d    70 5f 5f 6d 65 6d 6d 6f 76 65 00 5f 6d 65 6d 6d  | set._memset.__imp__memmove._memm | 
| 30e0 |  6f 76 65 00 5f 5f 69 6d 70 5f 5f 6d 65 6d 63 70    79 00 5f 6d 65 6d 63 70 79 00 5f 5f 69 6d 70 5f  | ove.__imp__memcpy._memcpy.__imp_ | 
| 3100 |  5f 6d 65 6d 63 6d 70 00 5f 6d 65 6d 63 6d 70 00    5f 5f 69 6d 70 5f 5f 6d 65 6d 63 68 72 00 5f 6d  | _memcmp._memcmp.__imp__memchr._m | 
| 3120 |  65 6d 63 68 72 00 5f 5f 69 6d 70 5f 5f 6d 62 73    74 6f 77 63 73 00 5f 6d 62 73 74 6f 77 63 73 00  | emchr.__imp__mbstowcs._mbstowcs. | 
| 3140 |  5f 5f 69 6d 70 5f 5f 6c 6f 67 00 5f 6c 6f 67 00    5f 5f 69 6d 70 5f 5f 6c 61 62 73 00 5f 6c 61 62  | __imp__log._log.__imp__labs._lab | 
| 3160 |  73 00 5f 5f 69 6d 70 5f 5f 69 73 78 64 69 67 69    74 00 5f 69 73 78 64 69 67 69 74 00 5f 5f 69 6d  | s.__imp__isxdigit._isxdigit.__im | 
| 3180 |  70 5f 5f 69 73 77 78 64 69 67 69 74 00 5f 69 73    77 78 64 69 67 69 74 00 5f 5f 69 6d 70 5f 5f 69  | p__iswxdigit._iswxdigit.__imp__i | 
| 31a0 |  73 77 73 70 61 63 65 00 5f 69 73 77 73 70 61 63    65 00 5f 5f 69 6d 70 5f 5f 69 73 77 6c 6f 77 65  | swspace._iswspace.__imp__iswlowe | 
| 31c0 |  72 00 5f 69 73 77 6c 6f 77 65 72 00 5f 5f 69 6d    70 5f 5f 69 73 77 64 69 67 69 74 00 5f 69 73 77  | r._iswlower.__imp__iswdigit._isw | 
| 31e0 |  64 69 67 69 74 00 5f 5f 69 6d 70 5f 5f 69 73 77    63 74 79 70 65 00 5f 69 73 77 63 74 79 70 65 00  | digit.__imp__iswctype._iswctype. | 
| 3200 |  5f 5f 69 6d 70 5f 5f 69 73 77 61 6c 70 68 61 00    5f 69 73 77 61 6c 70 68 61 00 5f 5f 69 6d 70 5f  | __imp__iswalpha._iswalpha.__imp_ | 
| 3220 |  5f 69 73 75 70 70 65 72 00 5f 69 73 75 70 70 65    72 00 5f 5f 69 6d 70 5f 5f 69 73 73 70 61 63 65  | _isupper._isupper.__imp__isspace | 
| 3240 |  00 5f 69 73 73 70 61 63 65 00 5f 5f 69 6d 70 5f    5f 69 73 70 75 6e 63 74 00 5f 69 73 70 75 6e 63  | ._isspace.__imp__ispunct._ispunc | 
| 3260 |  74 00 5f 5f 69 6d 70 5f 5f 69 73 70 72 69 6e 74    00 5f 69 73 70 72 69 6e 74 00 5f 5f 69 6d 70 5f  | t.__imp__isprint._isprint.__imp_ | 
| 3280 |  5f 69 73 6c 6f 77 65 72 00 5f 69 73 6c 6f 77 65    72 00 5f 5f 69 6d 70 5f 5f 69 73 67 72 61 70 68  | _islower._islower.__imp__isgraph | 
| 32a0 |  00 5f 69 73 67 72 61 70 68 00 5f 5f 69 6d 70 5f    5f 69 73 64 69 67 69 74 00 5f 69 73 64 69 67 69  | ._isgraph.__imp__isdigit._isdigi | 
| 32c0 |  74 00 5f 5f 69 6d 70 5f 5f 69 73 63 6e 74 72 6c    00 5f 69 73 63 6e 74 72 6c 00 5f 5f 69 6d 70 5f  | t.__imp__iscntrl._iscntrl.__imp_ | 
| 32e0 |  5f 69 73 61 6c 70 68 61 00 5f 69 73 61 6c 70 68    61 00 5f 5f 69 6d 70 5f 5f 69 73 61 6c 6e 75 6d  | _isalpha._isalpha.__imp__isalnum | 
| 3300 |  00 5f 69 73 61 6c 6e 75 6d 00 5f 5f 69 6d 70 5f    5f 66 6c 6f 6f 72 00 5f 66 6c 6f 6f 72 00 5f 5f  | ._isalnum.__imp__floor._floor.__ | 
| 3320 |  69 6d 70 5f 5f 66 61 62 73 00 5f 66 61 62 73 00    5f 5f 69 6d 70 5f 5f 63 6f 73 00 5f 63 6f 73 00  | imp__fabs._fabs.__imp__cos._cos. | 
| 3340 |  5f 5f 69 6d 70 5f 5f 63 65 69 6c 00 5f 63 65 69    6c 00 5f 5f 69 6d 70 5f 5f 62 73 65 61 72 63 68  | __imp__ceil._ceil.__imp__bsearch | 
| 3360 |  00 5f 62 73 65 61 72 63 68 00 5f 5f 69 6d 70 5f    5f 61 74 6f 6c 00 5f 61 74 6f 6c 00 5f 5f 69 6d  | ._bsearch.__imp__atol._atol.__im | 
| 3380 |  70 5f 5f 61 74 6f 69 00 5f 61 74 6f 69 00 5f 5f    69 6d 70 5f 5f 61 74 61 6e 00 5f 61 74 61 6e 00  | p__atoi._atoi.__imp__atan._atan. | 
| 33a0 |  5f 5f 69 6d 70 5f 5f 61 62 73 00 5f 61 62 73 00    5f 5f 69 6d 70 5f 5f 5f 77 74 6f 6c 00 5f 5f 77  | __imp__abs._abs.__imp___wtol.__w | 
| 33c0 |  74 6f 6c 00 5f 5f 69 6d 70 5f 5f 5f 77 74 6f 69    36 34 00 5f 5f 77 74 6f 69 36 34 00 5f 5f 69 6d  | tol.__imp___wtoi64.__wtoi64.__im | 
| 33e0 |  70 5f 5f 5f 77 74 6f 69 00 5f 5f 77 74 6f 69 00    5f 5f 69 6d 70 5f 5f 5f 77 63 73 75 70 72 00 5f  | p___wtoi.__wtoi.__imp___wcsupr._ | 
| 3400 |  5f 77 63 73 75 70 72 00 5f 5f 69 6d 70 5f 5f 5f    77 63 73 74 6f 75 69 36 34 00 5f 5f 77 63 73 74  | _wcsupr.__imp___wcstoui64.__wcst | 
| 3420 |  6f 75 69 36 34 00 5f 5f 69 6d 70 5f 5f 5f 77 63    73 6e 69 63 6d 70 00 5f 5f 77 63 73 6e 69 63 6d  | oui64.__imp___wcsnicmp.__wcsnicm | 
| 3440 |  70 00 5f 5f 69 6d 70 5f 5f 5f 77 63 73 6c 77 72    00 5f 5f 77 63 73 6c 77 72 00 5f 5f 69 6d 70 5f  | p.__imp___wcslwr.__wcslwr.__imp_ | 
| 3460 |  5f 5f 77 63 73 69 63 6d 70 00 5f 5f 77 63 73 69    63 6d 70 00 5f 5f 69 6d 70 5f 5f 5f 76 73 6e 77  | __wcsicmp.__wcsicmp.__imp___vsnw | 
| 3480 |  70 72 69 6e 74 66 00 5f 5f 76 73 6e 77 70 72 69    6e 74 66 00 5f 5f 69 6d 70 5f 5f 5f 76 73 6e 70  | printf.__vsnwprintf.__imp___vsnp | 
| 34a0 |  72 69 6e 74 66 00 5f 5f 76 73 6e 70 72 69 6e 74    66 00 5f 5f 69 6d 70 5f 5f 5f 76 73 63 77 70 72  | rintf.__vsnprintf.__imp___vscwpr | 
| 34c0 |  69 6e 74 66 00 5f 5f 76 73 63 77 70 72 69 6e 74    66 00 5f 5f 69 6d 70 5f 5f 5f 75 6c 74 6f 77 00  | intf.__vscwprintf.__imp___ultow. | 
| 34e0 |  5f 5f 75 6c 74 6f 77 00 5f 5f 69 6d 70 5f 5f 5f    75 6c 74 6f 61 00 5f 5f 75 6c 74 6f 61 00 5f 5f  | __ultow.__imp___ultoa.__ultoa.__ | 
| 3500 |  69 6d 70 5f 5f 5f 75 69 36 34 74 6f 77 00 5f 5f    75 69 36 34 74 6f 77 00 5f 5f 69 6d 70 5f 5f 5f  | imp___ui64tow.__ui64tow.__imp___ | 
| 3520 |  75 69 36 34 74 6f 61 00 5f 5f 75 69 36 34 74 6f    61 00 5f 5f 69 6d 70 5f 5f 5f 74 6f 75 70 70 65  | ui64toa.__ui64toa.__imp___touppe | 
| 3540 |  72 00 5f 5f 74 6f 75 70 70 65 72 00 5f 5f 69 6d    70 5f 5f 5f 74 6f 6c 6f 77 65 72 00 5f 5f 74 6f  | r.__toupper.__imp___tolower.__to | 
| 3560 |  6c 6f 77 65 72 00 5f 5f 69 6d 70 5f 5f 5f 73 74    72 75 70 72 00 5f 5f 73 74 72 75 70 72 00 5f 5f  | lower.__imp___strupr.__strupr.__ | 
| 3580 |  69 6d 70 5f 5f 5f 73 74 72 6e 69 63 6d 70 00 5f    5f 73 74 72 6e 69 63 6d 70 00 5f 5f 69 6d 70 5f  | imp___strnicmp.__strnicmp.__imp_ | 
| 35a0 |  5f 5f 73 74 72 6c 77 72 00 5f 5f 73 74 72 6c 77    72 00 5f 5f 69 6d 70 5f 5f 5f 73 74 72 69 63 6d  | __strlwr.__strlwr.__imp___stricm | 
| 35c0 |  70 00 5f 5f 73 74 72 69 63 6d 70 00 5f 5f 69 6d    70 5f 5f 5f 73 74 72 63 6d 70 69 00 5f 5f 73 74  | p.__stricmp.__imp___strcmpi.__st | 
| 35e0 |  72 63 6d 70 69 00 5f 5f 69 6d 70 5f 5f 5f 73 70    6c 69 74 70 61 74 68 00 5f 5f 73 70 6c 69 74 70  | rcmpi.__imp___splitpath.__splitp | 
| 3600 |  61 74 68 00 5f 5f 69 6d 70 5f 5f 5f 73 6e 77 70    72 69 6e 74 66 00 5f 5f 73 6e 77 70 72 69 6e 74  | ath.__imp___snwprintf.__snwprint | 
| 3620 |  66 00 5f 5f 69 6d 70 5f 5f 5f 73 6e 70 72 69 6e    74 66 00 5f 5f 73 6e 70 72 69 6e 74 66 00 5f 5f  | f.__imp___snprintf.__snprintf.__ | 
| 3640 |  69 6d 70 5f 5f 5f 6d 65 6d 69 63 6d 70 00 5f 5f    6d 65 6d 69 63 6d 70 00 5f 5f 69 6d 70 5f 5f 5f  | imp___memicmp.__memicmp.__imp___ | 
| 3660 |  6d 65 6d 63 63 70 79 00 5f 5f 6d 65 6d 63 63 70    79 00 5f 5f 69 6d 70 5f 5f 5f 6c 74 6f 77 00 5f  | memccpy.__memccpy.__imp___ltow._ | 
| 3680 |  5f 6c 74 6f 77 00 5f 5f 69 6d 70 5f 5f 5f 6c 74    6f 61 00 5f 5f 6c 74 6f 61 00 5f 5f 69 6d 70 5f  | _ltow.__imp___ltoa.__ltoa.__imp_ | 
| 36a0 |  5f 5f 6c 66 69 6e 64 00 5f 5f 6c 66 69 6e 64 00    5f 5f 69 6d 70 5f 5f 5f 69 74 6f 77 00 5f 5f 69  | __lfind.__lfind.__imp___itow.__i | 
| 36c0 |  74 6f 77 00 5f 5f 69 6d 70 5f 5f 5f 69 74 6f 61    00 5f 5f 69 74 6f 61 00 5f 5f 69 36 34 74 6f 77  | tow.__imp___itoa.__itoa.__i64tow | 
| 36e0 |  00 5f 5f 69 6d 70 5f 5f 5f 69 36 34 74 6f 77 00    5f 5f 69 36 34 74 6f 61 00 5f 5f 69 6d 70 5f 5f  | .__imp___i64tow.__i64toa.__imp__ | 
| 3700 |  5f 69 36 34 74 6f 61 00 5f 5f 66 74 6f 6c 00 5f    5f 69 6d 70 5f 5f 5f 66 74 6f 6c 00 5f 5f 66 6c  | _i64toa.__ftol.__imp___ftol.__fl | 
| 3720 |  74 75 73 65 64 00 5f 5f 69 6d 70 5f 5f 5f 66 6c    74 75 73 65 64 00 5f 5f 63 68 6b 73 74 6b 00 5f  | tused.__imp___fltused.__chkstk._ | 
| 3740 |  5f 69 6d 70 5f 5f 5f 63 68 6b 73 74 6b 00 5f 5f    61 75 6c 6c 73 68 72 00 5f 5f 69 6d 70 5f 5f 5f  | _imp___chkstk.__aullshr.__imp___ | 
| 3760 |  61 75 6c 6c 73 68 72 00 5f 5f 61 75 6c 6c 72 65    6d 00 5f 5f 69 6d 70 5f 5f 5f 61 75 6c 6c 72 65  | aullshr.__aullrem.__imp___aullre | 
| 3780 |  6d 00 5f 5f 61 75 6c 6c 64 76 72 6d 00 5f 5f 69    6d 70 5f 5f 5f 61 75 6c 6c 64 76 72 6d 00 5f 5f  | m.__aulldvrm.__imp___aulldvrm.__ | 
| 37a0 |  61 75 6c 6c 64 69 76 00 5f 5f 69 6d 70 5f 5f 5f    61 75 6c 6c 64 69 76 00 5f 5f 61 74 6f 69 36 34  | aulldiv.__imp___aulldiv.__atoi64 | 
| 37c0 |  00 5f 5f 69 6d 70 5f 5f 5f 61 74 6f 69 36 34 00    5f 5f 61 6c 6c 73 68 72 00 5f 5f 69 6d 70 5f 5f  | .__imp___atoi64.__allshr.__imp__ | 
| 37e0 |  5f 61 6c 6c 73 68 72 00 5f 5f 61 6c 6c 73 68 6c    00 5f 5f 69 6d 70 5f 5f 5f 61 6c 6c 73 68 6c 00  | _allshr.__allshl.__imp___allshl. | 
| 3800 |  5f 5f 61 6c 6c 72 65 6d 00 5f 5f 69 6d 70 5f 5f    5f 61 6c 6c 72 65 6d 00 5f 5f 61 6c 6c 6f 63 61  | __allrem.__imp___allrem.__alloca | 
| 3820 |  5f 70 72 6f 62 65 00 5f 5f 69 6d 70 5f 5f 5f 61    6c 6c 6f 63 61 5f 70 72 6f 62 65 00 5f 5f 61 6c  | _probe.__imp___alloca_probe.__al | 
| 3840 |  6c 6d 75 6c 00 5f 5f 69 6d 70 5f 5f 5f 61 6c 6c    6d 75 6c 00 5f 5f 61 6c 6c 64 76 72 6d 00 5f 5f  | lmul.__imp___allmul.__alldvrm.__ | 
| 3860 |  69 6d 70 5f 5f 5f 61 6c 6c 64 76 72 6d 00 5f 5f    61 6c 6c 64 69 76 00 5f 5f 69 6d 70 5f 5f 5f 61  | imp___alldvrm.__alldiv.__imp___a | 
| 3880 |  6c 6c 64 69 76 00 5f 5f 5f 74 6f 61 73 63 69 69    00 5f 5f 69 6d 70 5f 5f 5f 5f 74 6f 61 73 63 69  | lldiv.___toascii.__imp____toasci | 
| 38a0 |  69 00 5f 5f 5f 69 73 63 73 79 6d 66 00 5f 5f 69    6d 70 5f 5f 5f 5f 69 73 63 73 79 6d 66 00 5f 5f  | i.___iscsymf.__imp____iscsymf.__ | 
| 38c0 |  5f 69 73 63 73 79 6d 00 5f 5f 69 6d 70 5f 5f 5f    5f 69 73 63 73 79 6d 00 5f 5f 5f 69 73 61 73 63  | _iscsym.__imp____iscsym.___isasc | 
| 38e0 |  69 69 00 5f 5f 69 6d 70 5f 5f 5f 5f 69 73 61 73    63 69 69 00 5f 5f 43 49 73 71 72 74 00 5f 5f 69  | ii.__imp____isascii.__CIsqrt.__i | 
| 3900 |  6d 70 5f 5f 5f 43 49 73 71 72 74 00 5f 5f 43 49    73 69 6e 00 5f 5f 69 6d 70 5f 5f 5f 43 49 73 69  | mp___CIsqrt.__CIsin.__imp___CIsi | 
| 3920 |  6e 00 5f 5f 43 49 70 6f 77 00 5f 5f 69 6d 70 5f    5f 5f 43 49 70 6f 77 00 5f 5f 43 49 6c 6f 67 00  | n.__CIpow.__imp___CIpow.__CIlog. | 
| 3940 |  5f 5f 69 6d 70 5f 5f 5f 43 49 6c 6f 67 00 5f 5f    43 49 63 6f 73 00 5f 5f 69 6d 70 5f 5f 5f 43 49  | __imp___CIlog.__CIcos.__imp___CI | 
| 3960 |  63 6f 73 00 5f 5a 77 59 69 65 6c 64 45 78 65 63    75 74 69 6f 6e 40 30 00 5f 5f 69 6d 70 5f 5f 5a  | cos._ZwYieldExecution@0.__imp__Z | 
| 3980 |  77 59 69 65 6c 64 45 78 65 63 75 74 69 6f 6e 40    30 00 5f 5a 77 57 72 69 74 65 56 69 72 74 75 61  | wYieldExecution@0._ZwWriteVirtua | 
| 39a0 |  6c 4d 65 6d 6f 72 79 40 32 30 00 5f 5f 69 6d 70    5f 5f 5a 77 57 72 69 74 65 56 69 72 74 75 61 6c  | lMemory@20.__imp__ZwWriteVirtual | 
| 39c0 |  4d 65 6d 6f 72 79 40 32 30 00 5f 5a 77 57 72 69    74 65 52 65 71 75 65 73 74 44 61 74 61 40 32 34  | Memory@20._ZwWriteRequestData@24 | 
| 39e0 |  00 5f 5f 69 6d 70 5f 5f 5a 77 57 72 69 74 65 52    65 71 75 65 73 74 44 61 74 61 40 32 34 00 5f 5a  | .__imp__ZwWriteRequestData@24._Z | 
| 3a00 |  77 57 72 69 74 65 46 69 6c 65 47 61 74 68 65 72    40 33 36 00 5f 5f 69 6d 70 5f 5f 5a 77 57 72 69  | wWriteFileGather@36.__imp__ZwWri | 
| 3a20 |  74 65 46 69 6c 65 47 61 74 68 65 72 40 33 36 00    5f 5a 77 57 72 69 74 65 46 69 6c 65 40 33 36 00  | teFileGather@36._ZwWriteFile@36. | 
| 3a40 |  5f 5f 69 6d 70 5f 5f 5a 77 57 72 69 74 65 46 69    6c 65 40 33 36 00 5f 5a 77 57 61 69 74 4c 6f 77  | __imp__ZwWriteFile@36._ZwWaitLow | 
| 3a60 |  45 76 65 6e 74 50 61 69 72 40 34 00 5f 5f 69 6d    70 5f 5f 5a 77 57 61 69 74 4c 6f 77 45 76 65 6e  | EventPair@4.__imp__ZwWaitLowEven | 
| 3a80 |  74 50 61 69 72 40 34 00 5f 5a 77 57 61 69 74 48    69 67 68 45 76 65 6e 74 50 61 69 72 40 34 00 5f  | tPair@4._ZwWaitHighEventPair@4._ | 
| 3aa0 |  5f 69 6d 70 5f 5f 5a 77 57 61 69 74 48 69 67 68    45 76 65 6e 74 50 61 69 72 40 34 00 5f 5a 77 57  | _imp__ZwWaitHighEventPair@4._ZwW | 
| 3ac0 |  61 69 74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65    63 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 57  | aitForSingleObject@12.__imp__ZwW | 
| 3ae0 |  61 69 74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65    63 74 40 31 32 00 5f 5a 77 57 61 69 74 46 6f 72  | aitForSingleObject@12._ZwWaitFor | 
| 3b00 |  4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 40    32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 57 61 69 74  | MultipleObjects@20.__imp__ZwWait | 
| 3b20 |  46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63    74 73 40 32 30 00 5f 5a 77 57 61 69 74 46 6f 72  | ForMultipleObjects@20._ZwWaitFor | 
| 3b40 |  4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 33    32 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 57 61  | MultipleObjects32@20.__imp__ZwWa | 
| 3b60 |  69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a    65 63 74 73 33 32 40 32 30 00 5f 5a 77 57 61 69  | itForMultipleObjects32@20._ZwWai | 
| 3b80 |  74 46 6f 72 4b 65 79 65 64 45 76 65 6e 74 40 31    36 00 5f 5f 69 6d 70 5f 5f 5a 77 57 61 69 74 46  | tForKeyedEvent@16.__imp__ZwWaitF | 
| 3ba0 |  6f 72 4b 65 79 65 64 45 76 65 6e 74 40 31 36 00    5f 5a 77 57 61 69 74 46 6f 72 44 65 62 75 67 45  | orKeyedEvent@16._ZwWaitForDebugE | 
| 3bc0 |  76 65 6e 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a    77 57 61 69 74 46 6f 72 44 65 62 75 67 45 76 65  | vent@16.__imp__ZwWaitForDebugEve | 
| 3be0 |  6e 74 40 31 36 00 5f 5a 77 56 64 6d 43 6f 6e 74    72 6f 6c 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 56  | nt@16._ZwVdmControl@8.__imp__ZwV | 
| 3c00 |  64 6d 43 6f 6e 74 72 6f 6c 40 38 00 5f 5a 77 55    6e 6d 61 70 56 69 65 77 4f 66 53 65 63 74 69 6f  | dmControl@8._ZwUnmapViewOfSectio | 
| 3c20 |  6e 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 55 6e 6d    61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 40  | n@8.__imp__ZwUnmapViewOfSection@ | 
| 3c40 |  38 00 5f 5a 77 55 6e 6c 6f 63 6b 56 69 72 74 75    61 6c 4d 65 6d 6f 72 79 40 31 36 00 5f 5f 69 6d  | 8._ZwUnlockVirtualMemory@16.__im | 
| 3c60 |  70 5f 5f 5a 77 55 6e 6c 6f 63 6b 56 69 72 74 75    61 6c 4d 65 6d 6f 72 79 40 31 36 00 5f 5a 77 55  | p__ZwUnlockVirtualMemory@16._ZwU | 
| 3c80 |  6e 6c 6f 63 6b 46 69 6c 65 40 32 30 00 5f 5f 69    6d 70 5f 5f 5a 77 55 6e 6c 6f 63 6b 46 69 6c 65  | nlockFile@20.__imp__ZwUnlockFile | 
| 3ca0 |  40 32 30 00 5f 5a 77 55 6e 6c 6f 61 64 4b 65 79    45 78 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 55 6e  | @20._ZwUnloadKeyEx@8.__imp__ZwUn | 
| 3cc0 |  6c 6f 61 64 4b 65 79 45 78 40 38 00 5f 5a 77 55    6e 6c 6f 61 64 4b 65 79 40 34 00 5f 5f 69 6d 70  | loadKeyEx@8._ZwUnloadKey@4.__imp | 
| 3ce0 |  5f 5f 5a 77 55 6e 6c 6f 61 64 4b 65 79 40 34 00    5f 5a 77 55 6e 6c 6f 61 64 4b 65 79 32 40 38 00  | __ZwUnloadKey@4._ZwUnloadKey2@8. | 
| 3d00 |  5f 5f 69 6d 70 5f 5f 5a 77 55 6e 6c 6f 61 64 4b    65 79 32 40 38 00 5f 5a 77 55 6e 6c 6f 61 64 44  | __imp__ZwUnloadKey2@8._ZwUnloadD | 
| 3d20 |  72 69 76 65 72 40 34 00 5f 5f 69 6d 70 5f 5f 5a    77 55 6e 6c 6f 61 64 44 72 69 76 65 72 40 34 00  | river@4.__imp__ZwUnloadDriver@4. | 
| 3d40 |  5f 5a 77 54 72 61 6e 73 6c 61 74 65 46 69 6c 65    50 61 74 68 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a  | _ZwTranslateFilePath@16.__imp__Z | 
| 3d60 |  77 54 72 61 6e 73 6c 61 74 65 46 69 6c 65 50 61    74 68 40 31 36 00 5f 5a 77 54 72 61 63 65 45 76  | wTranslateFilePath@16._ZwTraceEv | 
| 3d80 |  65 6e 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77    54 72 61 63 65 45 76 65 6e 74 40 31 36 00 5f 5a  | ent@16.__imp__ZwTraceEvent@16._Z | 
| 3da0 |  77 54 65 73 74 41 6c 65 72 74 40 30 00 5f 5f 69    6d 70 5f 5f 5a 77 54 65 73 74 41 6c 65 72 74 40  | wTestAlert@0.__imp__ZwTestAlert@ | 
| 3dc0 |  30 00 5f 5a 77 54 65 72 6d 69 6e 61 74 65 54 68    72 65 61 64 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77  | 0._ZwTerminateThread@8.__imp__Zw | 
| 3de0 |  54 65 72 6d 69 6e 61 74 65 54 68 72 65 61 64 40    38 00 5f 5a 77 54 65 72 6d 69 6e 61 74 65 50 72  | TerminateThread@8._ZwTerminatePr | 
| 3e00 |  6f 63 65 73 73 40 38 00 5f 5f 69 6d 70 5f 5f 5a    77 54 65 72 6d 69 6e 61 74 65 50 72 6f 63 65 73  | ocess@8.__imp__ZwTerminateProces | 
| 3e20 |  73 40 38 00 5f 5a 77 54 65 72 6d 69 6e 61 74 65    4a 6f 62 4f 62 6a 65 63 74 40 38 00 5f 5f 69 6d  | s@8._ZwTerminateJobObject@8.__im | 
| 3e40 |  70 5f 5f 5a 77 54 65 72 6d 69 6e 61 74 65 4a 6f    62 4f 62 6a 65 63 74 40 38 00 5f 5a 77 53 79 73  | p__ZwTerminateJobObject@8._ZwSys | 
| 3e60 |  74 65 6d 44 65 62 75 67 43 6f 6e 74 72 6f 6c 40    32 34 00 5f 5f 69 6d 70 5f 5f 5a 77 53 79 73 74  | temDebugControl@24.__imp__ZwSyst | 
| 3e80 |  65 6d 44 65 62 75 67 43 6f 6e 74 72 6f 6c 40 32    34 00 5f 5a 77 53 75 73 70 65 6e 64 54 68 72 65  | emDebugControl@24._ZwSuspendThre | 
| 3ea0 |  61 64 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 53 75    73 70 65 6e 64 54 68 72 65 61 64 40 38 00 5f 5a  | ad@8.__imp__ZwSuspendThread@8._Z | 
| 3ec0 |  77 53 75 73 70 65 6e 64 50 72 6f 63 65 73 73 40    34 00 5f 5f 69 6d 70 5f 5f 5a 77 53 75 73 70 65  | wSuspendProcess@4.__imp__ZwSuspe | 
| 3ee0 |  6e 64 50 72 6f 63 65 73 73 40 34 00 5f 5a 77 53    74 6f 70 50 72 6f 66 69 6c 65 40 34 00 5f 5f 69  | ndProcess@4._ZwStopProfile@4.__i | 
| 3f00 |  6d 70 5f 5f 5a 77 53 74 6f 70 50 72 6f 66 69 6c    65 40 34 00 5f 5a 77 53 74 61 72 74 50 72 6f 66  | mp__ZwStopProfile@4._ZwStartProf | 
| 3f20 |  69 6c 65 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 53    74 61 72 74 50 72 6f 66 69 6c 65 40 34 00 5f 5a  | ile@4.__imp__ZwStartProfile@4._Z | 
| 3f40 |  77 53 69 67 6e 61 6c 41 6e 64 57 61 69 74 46 6f    72 53 69 6e 67 6c 65 4f 62 6a 65 63 74 40 31 36  | wSignalAndWaitForSingleObject@16 | 
| 3f60 |  00 5f 5f 69 6d 70 5f 5f 5a 77 53 69 67 6e 61 6c    41 6e 64 57 61 69 74 46 6f 72 53 69 6e 67 6c 65  | .__imp__ZwSignalAndWaitForSingle | 
| 3f80 |  4f 62 6a 65 63 74 40 31 36 00 5f 5a 77 53 68 75    74 64 6f 77 6e 53 79 73 74 65 6d 40 34 00 5f 5f  | Object@16._ZwShutdownSystem@4.__ | 
| 3fa0 |  69 6d 70 5f 5f 5a 77 53 68 75 74 64 6f 77 6e 53    79 73 74 65 6d 40 34 00 5f 5a 77 53 65 74 56 6f  | imp__ZwShutdownSystem@4._ZwSetVo | 
| 3fc0 |  6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46    69 6c 65 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77  | lumeInformationFile@20.__imp__Zw | 
| 3fe0 |  53 65 74 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61    74 69 6f 6e 46 69 6c 65 40 32 30 00 5f 5a 77 53  | SetVolumeInformationFile@20._ZwS | 
| 4000 |  65 74 56 61 6c 75 65 4b 65 79 40 32 34 00 5f 5f    69 6d 70 5f 5f 5a 77 53 65 74 56 61 6c 75 65 4b  | etValueKey@24.__imp__ZwSetValueK | 
| 4020 |  65 79 40 32 34 00 5f 5a 77 53 65 74 55 75 69 64    53 65 65 64 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77  | ey@24._ZwSetUuidSeed@4.__imp__Zw | 
| 4040 |  53 65 74 55 75 69 64 53 65 65 64 40 34 00 5f 5a    77 53 65 74 54 69 6d 65 72 52 65 73 6f 6c 75 74  | SetUuidSeed@4._ZwSetTimerResolut | 
| 4060 |  69 6f 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77    53 65 74 54 69 6d 65 72 52 65 73 6f 6c 75 74 69  | ion@12.__imp__ZwSetTimerResoluti | 
| 4080 |  6f 6e 40 31 32 00 5f 5a 77 53 65 74 54 69 6d 65    72 40 32 38 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65  | on@12._ZwSetTimer@28.__imp__ZwSe | 
| 40a0 |  74 54 69 6d 65 72 40 32 38 00 5f 5a 77 53 65 74    54 68 72 65 61 64 45 78 65 63 75 74 69 6f 6e 53  | tTimer@28._ZwSetThreadExecutionS | 
| 40c0 |  74 61 74 65 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77    53 65 74 54 68 72 65 61 64 45 78 65 63 75 74 69  | tate@8.__imp__ZwSetThreadExecuti | 
| 40e0 |  6f 6e 53 74 61 74 65 40 38 00 5f 5a 77 53 65 74    53 79 73 74 65 6d 54 69 6d 65 40 38 00 5f 5f 69  | onState@8._ZwSetSystemTime@8.__i | 
| 4100 |  6d 70 5f 5f 5a 77 53 65 74 53 79 73 74 65 6d 54    69 6d 65 40 38 00 5f 5a 77 53 65 74 53 79 73 74  | mp__ZwSetSystemTime@8._ZwSetSyst | 
| 4120 |  65 6d 50 6f 77 65 72 53 74 61 74 65 40 31 32 00    5f 5f 69 6d 70 5f 5f 5a 77 53 65 74 53 79 73 74  | emPowerState@12.__imp__ZwSetSyst | 
| 4140 |  65 6d 50 6f 77 65 72 53 74 61 74 65 40 31 32 00    5f 5a 77 53 65 74 53 79 73 74 65 6d 49 6e 66 6f  | emPowerState@12._ZwSetSystemInfo | 
| 4160 |  72 6d 61 74 69 6f 6e 40 31 32 00 5f 5f 69 6d 70    5f 5f 5a 77 53 65 74 53 79 73 74 65 6d 49 6e 66  | rmation@12.__imp__ZwSetSystemInf | 
| 4180 |  6f 72 6d 61 74 69 6f 6e 40 31 32 00 5f 5a 77 53    65 74 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d  | ormation@12._ZwSetSystemEnvironm | 
| 41a0 |  65 6e 74 56 61 6c 75 65 45 78 40 32 30 00 5f 5f    69 6d 70 5f 5f 5a 77 53 65 74 53 79 73 74 65 6d  | entValueEx@20.__imp__ZwSetSystem | 
| 41c0 |  45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65    45 78 40 32 30 00 5f 5a 77 53 65 74 53 79 73 74  | EnvironmentValueEx@20._ZwSetSyst | 
| 41e0 |  65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c    75 65 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65  | emEnvironmentValue@8.__imp__ZwSe | 
| 4200 |  74 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65    6e 74 56 61 6c 75 65 40 38 00 5f 5a 77 53 65 74  | tSystemEnvironmentValue@8._ZwSet | 
| 4220 |  53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 40 31    32 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65 74 53 65  | SecurityObject@12.__imp__ZwSetSe | 
| 4240 |  63 75 72 69 74 79 4f 62 6a 65 63 74 40 31 32 00    5f 5a 77 53 65 74 51 75 6f 74 61 49 6e 66 6f 72  | curityObject@12._ZwSetQuotaInfor | 
| 4260 |  6d 61 74 69 6f 6e 46 69 6c 65 40 31 36 00 5f 5f    69 6d 70 5f 5f 5a 77 53 65 74 51 75 6f 74 61 49  | mationFile@16.__imp__ZwSetQuotaI | 
| 4280 |  6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40 31    36 00 5f 5a 77 53 65 74 4c 6f 77 57 61 69 74 48  | nformationFile@16._ZwSetLowWaitH | 
| 42a0 |  69 67 68 45 76 65 6e 74 50 61 69 72 40 34 00 5f    5f 69 6d 70 5f 5f 5a 77 53 65 74 4c 6f 77 57 61  | ighEventPair@4.__imp__ZwSetLowWa | 
| 42c0 |  69 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 40    34 00 5f 5a 77 53 65 74 4c 6f 77 45 76 65 6e 74  | itHighEventPair@4._ZwSetLowEvent | 
| 42e0 |  50 61 69 72 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77    53 65 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 40  | Pair@4.__imp__ZwSetLowEventPair@ | 
| 4300 |  34 00 5f 5a 77 53 65 74 4c 64 74 45 6e 74 72 69    65 73 40 32 34 00 5f 5f 69 6d 70 5f 5f 5a 77 53  | 4._ZwSetLdtEntries@24.__imp__ZwS | 
| 4320 |  65 74 4c 64 74 45 6e 74 72 69 65 73 40 32 34 00    5f 5a 77 53 65 74 49 6f 43 6f 6d 70 6c 65 74 69  | etLdtEntries@24._ZwSetIoCompleti | 
| 4340 |  6f 6e 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 53    65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 32  | on@20.__imp__ZwSetIoCompletion@2 | 
| 4360 |  30 00 5f 5a 77 53 65 74 49 6e 74 65 72 76 61 6c    50 72 6f 66 69 6c 65 40 38 00 5f 5f 69 6d 70 5f  | 0._ZwSetIntervalProfile@8.__imp_ | 
| 4380 |  5f 5a 77 53 65 74 49 6e 74 65 72 76 61 6c 50 72    6f 66 69 6c 65 40 38 00 5f 5a 77 53 65 74 49 6e  | _ZwSetIntervalProfile@8._ZwSetIn | 
| 43a0 |  66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 40 31    36 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65 74 49 6e  | formationToken@16.__imp__ZwSetIn | 
| 43c0 |  66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 40 31    36 00 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74  | formationToken@16._ZwSetInformat | 
| 43e0 |  69 6f 6e 54 68 72 65 61 64 40 31 36 00 5f 5f 69    6d 70 5f 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61  | ionThread@16.__imp__ZwSetInforma | 
| 4400 |  74 69 6f 6e 54 68 72 65 61 64 40 31 36 00 5f 5a    77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50  | tionThread@16._ZwSetInformationP | 
| 4420 |  72 6f 63 65 73 73 40 31 36 00 5f 5f 69 6d 70 5f    5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f  | rocess@16.__imp__ZwSetInformatio | 
| 4440 |  6e 50 72 6f 63 65 73 73 40 31 36 00 5f 5a 77 53    65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f 62 6a  | nProcess@16._ZwSetInformationObj | 
| 4460 |  65 63 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77    53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f 62  | ect@16.__imp__ZwSetInformationOb | 
| 4480 |  6a 65 63 74 40 31 36 00 5f 5a 77 53 65 74 49 6e    66 6f 72 6d 61 74 69 6f 6e 4b 65 79 40 31 36 00  | ject@16._ZwSetInformationKey@16. | 
| 44a0 |  5f 5f 69 6d 70 5f 5f 5a 77 53 65 74 49 6e 66 6f    72 6d 61 74 69 6f 6e 4b 65 79 40 31 36 00 5f 5a  | __imp__ZwSetInformationKey@16._Z | 
| 44c0 |  77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a    6f 62 4f 62 6a 65 63 74 40 31 36 00 5f 5f 69 6d  | wSetInformationJobObject@16.__im | 
| 44e0 |  70 5f 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74    69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 40 31 36 00  | p__ZwSetInformationJobObject@16. | 
| 4500 |  5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f    6e 46 69 6c 65 40 32 30 00 5f 5f 69 6d 70 5f 5f  | _ZwSetInformationFile@20.__imp__ | 
| 4520 |  5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e    46 69 6c 65 40 32 30 00 5f 5a 77 53 65 74 49 6e  | ZwSetInformationFile@20._ZwSetIn | 
| 4540 |  66 6f 72 6d 61 74 69 6f 6e 44 65 62 75 67 4f 62    6a 65 63 74 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a  | formationDebugObject@20.__imp__Z | 
| 4560 |  77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 44    65 62 75 67 4f 62 6a 65 63 74 40 32 30 00 5f 5a  | wSetInformationDebugObject@20._Z | 
| 4580 |  77 53 65 74 48 69 67 68 57 61 69 74 4c 6f 77 45    76 65 6e 74 50 61 69 72 40 34 00 5f 5f 69 6d 70  | wSetHighWaitLowEventPair@4.__imp | 
| 45a0 |  5f 5f 5a 77 53 65 74 48 69 67 68 57 61 69 74 4c    6f 77 45 76 65 6e 74 50 61 69 72 40 34 00 5f 5a  | __ZwSetHighWaitLowEventPair@4._Z | 
| 45c0 |  77 53 65 74 48 69 67 68 45 76 65 6e 74 50 61 69    72 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65 74  | wSetHighEventPair@4.__imp__ZwSet | 
| 45e0 |  48 69 67 68 45 76 65 6e 74 50 61 69 72 40 34 00    5f 5a 77 53 65 74 45 76 65 6e 74 42 6f 6f 73 74  | HighEventPair@4._ZwSetEventBoost | 
| 4600 |  50 72 69 6f 72 69 74 79 40 34 00 5f 5f 69 6d 70    5f 5f 5a 77 53 65 74 45 76 65 6e 74 42 6f 6f 73  | Priority@4.__imp__ZwSetEventBoos | 
| 4620 |  74 50 72 69 6f 72 69 74 79 40 34 00 5f 5a 77 53    65 74 45 76 65 6e 74 40 38 00 5f 5f 69 6d 70 5f  | tPriority@4._ZwSetEvent@8.__imp_ | 
| 4640 |  5f 5a 77 53 65 74 45 76 65 6e 74 40 38 00 5f 5a    77 53 65 74 45 61 46 69 6c 65 40 31 36 00 5f 5f  | _ZwSetEvent@8._ZwSetEaFile@16.__ | 
| 4660 |  69 6d 70 5f 5f 5a 77 53 65 74 45 61 46 69 6c 65    40 31 36 00 5f 5a 77 53 65 74 44 72 69 76 65 72  | imp__ZwSetEaFile@16._ZwSetDriver | 
| 4680 |  45 6e 74 72 79 4f 72 64 65 72 40 38 00 5f 5f 69    6d 70 5f 5f 5a 77 53 65 74 44 72 69 76 65 72 45  | EntryOrder@8.__imp__ZwSetDriverE | 
| 46a0 |  6e 74 72 79 4f 72 64 65 72 40 38 00 5f 5a 77 53    65 74 44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75  | ntryOrder@8._ZwSetDefaultUILangu | 
| 46c0 |  61 67 65 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 53    65 74 44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75  | age@4.__imp__ZwSetDefaultUILangu | 
| 46e0 |  61 67 65 40 34 00 5f 5a 77 53 65 74 44 65 66 61    75 6c 74 4c 6f 63 61 6c 65 40 38 00 5f 5f 69 6d  | age@4._ZwSetDefaultLocale@8.__im | 
| 4700 |  70 5f 5f 5a 77 53 65 74 44 65 66 61 75 6c 74 4c    6f 63 61 6c 65 40 38 00 5f 5a 77 53 65 74 44 65  | p__ZwSetDefaultLocale@8._ZwSetDe | 
| 4720 |  66 61 75 6c 74 48 61 72 64 45 72 72 6f 72 50 6f    72 74 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65  | faultHardErrorPort@4.__imp__ZwSe | 
| 4740 |  74 44 65 66 61 75 6c 74 48 61 72 64 45 72 72 6f    72 50 6f 72 74 40 34 00 5f 5a 77 53 65 74 44 65  | tDefaultHardErrorPort@4._ZwSetDe | 
| 4760 |  62 75 67 46 69 6c 74 65 72 53 74 61 74 65 40 31    32 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65 74 44 65  | bugFilterState@12.__imp__ZwSetDe | 
| 4780 |  62 75 67 46 69 6c 74 65 72 53 74 61 74 65 40 31    32 00 5f 5a 77 53 65 74 43 6f 6e 74 65 78 74 54  | bugFilterState@12._ZwSetContextT | 
| 47a0 |  68 72 65 61 64 40 38 00 5f 5f 69 6d 70 5f 5f 5a    77 53 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61  | hread@8.__imp__ZwSetContextThrea | 
| 47c0 |  64 40 38 00 5f 5a 77 53 65 74 42 6f 6f 74 4f 70    74 69 6f 6e 73 40 38 00 5f 5f 69 6d 70 5f 5f 5a  | d@8._ZwSetBootOptions@8.__imp__Z | 
| 47e0 |  77 53 65 74 42 6f 6f 74 4f 70 74 69 6f 6e 73 40    38 00 5f 5a 77 53 65 74 42 6f 6f 74 45 6e 74 72  | wSetBootOptions@8._ZwSetBootEntr | 
| 4800 |  79 4f 72 64 65 72 40 38 00 5f 5f 69 6d 70 5f 5f    5a 77 53 65 74 42 6f 6f 74 45 6e 74 72 79 4f 72  | yOrder@8.__imp__ZwSetBootEntryOr | 
| 4820 |  64 65 72 40 38 00 5f 5a 77 53 65 63 75 72 65 43    6f 6e 6e 65 63 74 50 6f 72 74 40 33 36 00 5f 5f  | der@8._ZwSecureConnectPort@36.__ | 
| 4840 |  69 6d 70 5f 5f 5a 77 53 65 63 75 72 65 43 6f 6e    6e 65 63 74 50 6f 72 74 40 33 36 00 5f 5a 77 53  | imp__ZwSecureConnectPort@36._ZwS | 
| 4860 |  61 76 65 4d 65 72 67 65 64 4b 65 79 73 40 31 32    00 5f 5f 69 6d 70 5f 5f 5a 77 53 61 76 65 4d 65  | aveMergedKeys@12.__imp__ZwSaveMe | 
| 4880 |  72 67 65 64 4b 65 79 73 40 31 32 00 5f 5a 77 53    61 76 65 4b 65 79 45 78 40 31 32 00 5f 5f 69 6d  | rgedKeys@12._ZwSaveKeyEx@12.__im | 
| 48a0 |  70 5f 5f 5a 77 53 61 76 65 4b 65 79 45 78 40 31    32 00 5f 5a 77 53 61 76 65 4b 65 79 40 38 00 5f  | p__ZwSaveKeyEx@12._ZwSaveKey@8._ | 
| 48c0 |  5f 69 6d 70 5f 5f 5a 77 53 61 76 65 4b 65 79 40    38 00 5f 5a 77 52 65 73 75 6d 65 54 68 72 65 61  | _imp__ZwSaveKey@8._ZwResumeThrea | 
| 48e0 |  64 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 52 65 73    75 6d 65 54 68 72 65 61 64 40 38 00 5f 5a 77 52  | d@8.__imp__ZwResumeThread@8._ZwR | 
| 4900 |  65 73 75 6d 65 50 72 6f 63 65 73 73 40 34 00 5f    5f 69 6d 70 5f 5f 5a 77 52 65 73 75 6d 65 50 72  | esumeProcess@4.__imp__ZwResumePr | 
| 4920 |  6f 63 65 73 73 40 34 00 5f 5a 77 52 65 73 74 6f    72 65 4b 65 79 40 31 32 00 5f 5f 69 6d 70 5f 5f  | ocess@4._ZwRestoreKey@12.__imp__ | 
| 4940 |  5a 77 52 65 73 74 6f 72 65 4b 65 79 40 31 32 00    5f 5a 77 52 65 73 65 74 57 72 69 74 65 57 61 74  | ZwRestoreKey@12._ZwResetWriteWat | 
| 4960 |  63 68 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 52    65 73 65 74 57 72 69 74 65 57 61 74 63 68 40 31  | ch@12.__imp__ZwResetWriteWatch@1 | 
| 4980 |  32 00 5f 5a 77 52 65 73 65 74 45 76 65 6e 74 40    38 00 5f 5f 69 6d 70 5f 5f 5a 77 52 65 73 65 74  | 2._ZwResetEvent@8.__imp__ZwReset | 
| 49a0 |  45 76 65 6e 74 40 38 00 5f 5a 77 52 65 71 75 65    73 74 57 61 6b 65 75 70 4c 61 74 65 6e 63 79 40  | Event@8._ZwRequestWakeupLatency@ | 
| 49c0 |  34 00 5f 5f 69 6d 70 5f 5f 5a 77 52 65 71 75 65    73 74 57 61 6b 65 75 70 4c 61 74 65 6e 63 79 40  | 4.__imp__ZwRequestWakeupLatency@ | 
| 49e0 |  34 00 5f 5a 77 52 65 71 75 65 73 74 57 61 69 74    52 65 70 6c 79 50 6f 72 74 40 31 32 00 5f 5f 69  | 4._ZwRequestWaitReplyPort@12.__i | 
| 4a00 |  6d 70 5f 5f 5a 77 52 65 71 75 65 73 74 57 61 69    74 52 65 70 6c 79 50 6f 72 74 40 31 32 00 5f 5a  | mp__ZwRequestWaitReplyPort@12._Z | 
| 4a20 |  77 52 65 71 75 65 73 74 50 6f 72 74 40 38 00 5f    5f 69 6d 70 5f 5f 5a 77 52 65 71 75 65 73 74 50  | wRequestPort@8.__imp__ZwRequestP | 
| 4a40 |  6f 72 74 40 38 00 5f 5a 77 52 65 71 75 65 73 74    44 65 76 69 63 65 57 61 6b 65 75 70 40 34 00 5f  | ort@8._ZwRequestDeviceWakeup@4._ | 
| 4a60 |  5f 69 6d 70 5f 5f 5a 77 52 65 71 75 65 73 74 44    65 76 69 63 65 57 61 6b 65 75 70 40 34 00 5f 5a  | _imp__ZwRequestDeviceWakeup@4._Z | 
| 4a80 |  77 52 65 70 6c 79 57 61 69 74 52 65 70 6c 79 50    6f 72 74 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 52  | wReplyWaitReplyPort@8.__imp__ZwR | 
| 4aa0 |  65 70 6c 79 57 61 69 74 52 65 70 6c 79 50 6f 72    74 40 38 00 5f 5a 77 52 65 70 6c 79 57 61 69 74  | eplyWaitReplyPort@8._ZwReplyWait | 
| 4ac0 |  52 65 63 65 69 76 65 50 6f 72 74 45 78 40 32 30    00 5f 5f 69 6d 70 5f 5f 5a 77 52 65 70 6c 79 57  | ReceivePortEx@20.__imp__ZwReplyW | 
| 4ae0 |  61 69 74 52 65 63 65 69 76 65 50 6f 72 74 45 78    40 32 30 00 5f 5a 77 52 65 70 6c 79 57 61 69 74  | aitReceivePortEx@20._ZwReplyWait | 
| 4b00 |  52 65 63 65 69 76 65 50 6f 72 74 40 31 36 00 5f    5f 69 6d 70 5f 5f 5a 77 52 65 70 6c 79 57 61 69  | ReceivePort@16.__imp__ZwReplyWai | 
| 4b20 |  74 52 65 63 65 69 76 65 50 6f 72 74 40 31 36 00    5f 5a 77 52 65 70 6c 79 50 6f 72 74 40 38 00 5f  | tReceivePort@16._ZwReplyPort@8._ | 
| 4b40 |  5f 69 6d 70 5f 5f 5a 77 52 65 70 6c 79 50 6f 72    74 40 38 00 5f 5a 77 52 65 70 6c 61 63 65 4b 65  | _imp__ZwReplyPort@8._ZwReplaceKe | 
| 4b60 |  79 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 52 65    70 6c 61 63 65 4b 65 79 40 31 32 00 5f 5a 77 52  | y@12.__imp__ZwReplaceKey@12._ZwR | 
| 4b80 |  65 6e 61 6d 65 4b 65 79 40 38 00 5f 5f 69 6d 70    5f 5f 5a 77 52 65 6e 61 6d 65 4b 65 79 40 38 00  | enameKey@8.__imp__ZwRenameKey@8. | 
| 4ba0 |  5f 5a 77 52 65 6d 6f 76 65 50 72 6f 63 65 73 73    44 65 62 75 67 40 38 00 5f 5f 69 6d 70 5f 5f 5a  | _ZwRemoveProcessDebug@8.__imp__Z | 
| 4bc0 |  77 52 65 6d 6f 76 65 50 72 6f 63 65 73 73 44 65    62 75 67 40 38 00 5f 5a 77 52 65 6d 6f 76 65 49  | wRemoveProcessDebug@8._ZwRemoveI | 
| 4be0 |  6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 32 30 00 5f    5f 69 6d 70 5f 5f 5a 77 52 65 6d 6f 76 65 49 6f  | oCompletion@20.__imp__ZwRemoveIo | 
| 4c00 |  43 6f 6d 70 6c 65 74 69 6f 6e 40 32 30 00 5f 5a    77 52 65 6c 65 61 73 65 53 65 6d 61 70 68 6f 72  | Completion@20._ZwReleaseSemaphor | 
| 4c20 |  65 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 52 65    6c 65 61 73 65 53 65 6d 61 70 68 6f 72 65 40 31  | e@12.__imp__ZwReleaseSemaphore@1 | 
| 4c40 |  32 00 5f 5a 77 52 65 6c 65 61 73 65 4d 75 74 61    6e 74 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 52 65  | 2._ZwReleaseMutant@8.__imp__ZwRe | 
| 4c60 |  6c 65 61 73 65 4d 75 74 61 6e 74 40 38 00 5f 5a    77 52 65 6c 65 61 73 65 4b 65 79 65 64 45 76 65  | leaseMutant@8._ZwReleaseKeyedEve | 
| 4c80 |  6e 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 52    65 6c 65 61 73 65 4b 65 79 65 64 45 76 65 6e 74  | nt@16.__imp__ZwReleaseKeyedEvent | 
| 4ca0 |  40 31 36 00 5f 5a 77 52 65 67 69 73 74 65 72 54    68 72 65 61 64 54 65 72 6d 69 6e 61 74 65 50 6f  | @16._ZwRegisterThreadTerminatePo | 
| 4cc0 |  72 74 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 52 65    67 69 73 74 65 72 54 68 72 65 61 64 54 65 72 6d  | rt@4.__imp__ZwRegisterThreadTerm | 
| 4ce0 |  69 6e 61 74 65 50 6f 72 74 40 34 00 5f 5a 77 52    65 61 64 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79  | inatePort@4._ZwReadVirtualMemory | 
| 4d00 |  40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 52 65 61    64 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 32  | @20.__imp__ZwReadVirtualMemory@2 | 
| 4d20 |  30 00 5f 5a 77 52 65 61 64 52 65 71 75 65 73 74    44 61 74 61 40 32 34 00 5f 5f 69 6d 70 5f 5f 5a  | 0._ZwReadRequestData@24.__imp__Z | 
| 4d40 |  77 52 65 61 64 52 65 71 75 65 73 74 44 61 74 61    40 32 34 00 5f 5a 77 52 65 61 64 46 69 6c 65 53  | wReadRequestData@24._ZwReadFileS | 
| 4d60 |  63 61 74 74 65 72 40 33 36 00 5f 5f 69 6d 70 5f    5f 5a 77 52 65 61 64 46 69 6c 65 53 63 61 74 74  | catter@36.__imp__ZwReadFileScatt | 
| 4d80 |  65 72 40 33 36 00 5f 5a 77 52 65 61 64 46 69 6c    65 40 33 36 00 5f 5f 69 6d 70 5f 5f 5a 77 52 65  | er@36._ZwReadFile@36.__imp__ZwRe | 
| 4da0 |  61 64 46 69 6c 65 40 33 36 00 5f 5a 77 52 61 69    73 65 48 61 72 64 45 72 72 6f 72 40 32 34 00 5f  | adFile@36._ZwRaiseHardError@24._ | 
| 4dc0 |  5f 69 6d 70 5f 5f 5a 77 52 61 69 73 65 48 61 72    64 45 72 72 6f 72 40 32 34 00 5f 5a 77 52 61 69  | _imp__ZwRaiseHardError@24._ZwRai | 
| 4de0 |  73 65 45 78 63 65 70 74 69 6f 6e 40 31 32 00 5f    5f 69 6d 70 5f 5f 5a 77 52 61 69 73 65 45 78 63  | seException@12.__imp__ZwRaiseExc | 
| 4e00 |  65 70 74 69 6f 6e 40 31 32 00 5f 5a 77 51 75 65    75 65 41 70 63 54 68 72 65 61 64 40 32 30 00 5f  | eption@12._ZwQueueApcThread@20._ | 
| 4e20 |  5f 69 6d 70 5f 5f 5a 77 51 75 65 75 65 41 70 63    54 68 72 65 61 64 40 32 30 00 5f 5a 77 51 75 65  | _imp__ZwQueueApcThread@20._ZwQue | 
| 4e40 |  72 79 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74    69 6f 6e 46 69 6c 65 40 32 30 00 5f 5f 69 6d 70  | ryVolumeInformationFile@20.__imp | 
| 4e60 |  5f 5f 5a 77 51 75 65 72 79 56 6f 6c 75 6d 65 49    6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40 32  | __ZwQueryVolumeInformationFile@2 | 
| 4e80 |  30 00 5f 5a 77 51 75 65 72 79 56 69 72 74 75 61    6c 4d 65 6d 6f 72 79 40 32 34 00 5f 5f 69 6d 70  | 0._ZwQueryVirtualMemory@24.__imp | 
| 4ea0 |  5f 5f 5a 77 51 75 65 72 79 56 69 72 74 75 61 6c    4d 65 6d 6f 72 79 40 32 34 00 5f 5a 77 51 75 65  | __ZwQueryVirtualMemory@24._ZwQue | 
| 4ec0 |  72 79 56 61 6c 75 65 4b 65 79 40 32 34 00 5f 5f    69 6d 70 5f 5f 5a 77 51 75 65 72 79 56 61 6c 75  | ryValueKey@24.__imp__ZwQueryValu | 
| 4ee0 |  65 4b 65 79 40 32 34 00 5f 5a 77 51 75 65 72 79    54 69 6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e 40  | eKey@24._ZwQueryTimerResolution@ | 
| 4f00 |  31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72    79 54 69 6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e  | 12.__imp__ZwQueryTimerResolution | 
| 4f20 |  40 31 32 00 5f 5a 77 51 75 65 72 79 54 69 6d 65    72 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75  | @12._ZwQueryTimer@20.__imp__ZwQu | 
| 4f40 |  65 72 79 54 69 6d 65 72 40 32 30 00 5f 5a 77 51    75 65 72 79 53 79 73 74 65 6d 54 69 6d 65 40 34  | eryTimer@20._ZwQuerySystemTime@4 | 
| 4f60 |  00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79 53    79 73 74 65 6d 54 69 6d 65 40 34 00 5f 5a 77 51  | .__imp__ZwQuerySystemTime@4._ZwQ | 
| 4f80 |  75 65 72 79 53 79 73 74 65 6d 49 6e 66 6f 72 6d    61 74 69 6f 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f  | uerySystemInformation@16.__imp__ | 
| 4fa0 |  5a 77 51 75 65 72 79 53 79 73 74 65 6d 49 6e 66    6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f 5a 77 51  | ZwQuerySystemInformation@16._ZwQ | 
| 4fc0 |  75 65 72 79 53 79 73 74 65 6d 45 6e 76 69 72 6f    6e 6d 65 6e 74 56 61 6c 75 65 45 78 40 32 30 00  | uerySystemEnvironmentValueEx@20. | 
| 4fe0 |  5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79 53 79    73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56  | __imp__ZwQuerySystemEnvironmentV | 
| 5000 |  61 6c 75 65 45 78 40 32 30 00 5f 5a 77 51 75 65    72 79 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d  | alueEx@20._ZwQuerySystemEnvironm | 
| 5020 |  65 6e 74 56 61 6c 75 65 40 31 36 00 5f 5f 69 6d    70 5f 5f 5a 77 51 75 65 72 79 53 79 73 74 65 6d  | entValue@16.__imp__ZwQuerySystem | 
| 5040 |  45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65    40 31 36 00 5f 5a 77 51 75 65 72 79 53 79 6d 62  | EnvironmentValue@16._ZwQuerySymb | 
| 5060 |  6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 40 31    32 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79  | olicLinkObject@12.__imp__ZwQuery | 
| 5080 |  53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65    63 74 40 31 32 00 5f 5a 77 51 75 65 72 79 53 65  | SymbolicLinkObject@12._ZwQuerySe | 
| 50a0 |  6d 61 70 68 6f 72 65 40 32 30 00 5f 5f 69 6d 70    5f 5f 5a 77 51 75 65 72 79 53 65 6d 61 70 68 6f  | maphore@20.__imp__ZwQuerySemapho | 
| 50c0 |  72 65 40 32 30 00 5f 5a 77 51 75 65 72 79 53 65    63 75 72 69 74 79 4f 62 6a 65 63 74 40 32 30 00  | re@20._ZwQuerySecurityObject@20. | 
| 50e0 |  5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79 53 65    63 75 72 69 74 79 4f 62 6a 65 63 74 40 32 30 00  | __imp__ZwQuerySecurityObject@20. | 
| 5100 |  5f 5a 77 51 75 65 72 79 53 65 63 74 69 6f 6e 40    32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72  | _ZwQuerySection@20.__imp__ZwQuer | 
| 5120 |  79 53 65 63 74 69 6f 6e 40 32 30 00 5f 5a 77 51    75 65 72 79 51 75 6f 74 61 49 6e 66 6f 72 6d 61  | ySection@20._ZwQueryQuotaInforma | 
| 5140 |  74 69 6f 6e 46 69 6c 65 40 33 36 00 5f 5f 69 6d    70 5f 5f 5a 77 51 75 65 72 79 51 75 6f 74 61 49  | tionFile@36.__imp__ZwQueryQuotaI | 
| 5160 |  6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40 33    36 00 5f 5a 77 51 75 65 72 79 50 6f 72 74 49 6e  | nformationFile@36._ZwQueryPortIn | 
| 5180 |  66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73    40 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72  | formationProcess@0.__imp__ZwQuer | 
| 51a0 |  79 50 6f 72 74 49 6e 66 6f 72 6d 61 74 69 6f 6e    50 72 6f 63 65 73 73 40 30 00 5f 5a 77 51 75 65  | yPortInformationProcess@0._ZwQue | 
| 51c0 |  72 79 50 65 72 66 6f 72 6d 61 6e 63 65 43 6f 75    6e 74 65 72 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77  | ryPerformanceCounter@8.__imp__Zw | 
| 51e0 |  51 75 65 72 79 50 65 72 66 6f 72 6d 61 6e 63 65    43 6f 75 6e 74 65 72 40 38 00 5f 5a 77 51 75 65  | QueryPerformanceCounter@8._ZwQue | 
| 5200 |  72 79 4f 70 65 6e 53 75 62 4b 65 79 73 45 78 40    31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72  | ryOpenSubKeysEx@16.__imp__ZwQuer | 
| 5220 |  79 4f 70 65 6e 53 75 62 4b 65 79 73 45 78 40 31    36 00 5f 5a 77 51 75 65 72 79 4f 70 65 6e 53 75  | yOpenSubKeysEx@16._ZwQueryOpenSu | 
| 5240 |  62 4b 65 79 73 40 38 00 5f 5f 69 6d 70 5f 5f 5a    77 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79  | bKeys@8.__imp__ZwQueryOpenSubKey | 
| 5260 |  73 40 38 00 5f 5a 77 51 75 65 72 79 4f 62 6a 65    63 74 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51  | s@8._ZwQueryObject@20.__imp__ZwQ | 
| 5280 |  75 65 72 79 4f 62 6a 65 63 74 40 32 30 00 5f 5a    77 51 75 65 72 79 4d 75 74 61 6e 74 40 32 30 00  | ueryObject@20._ZwQueryMutant@20. | 
| 52a0 |  5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79 4d 75    74 61 6e 74 40 32 30 00 5f 5a 77 51 75 65 72 79  | __imp__ZwQueryMutant@20._ZwQuery | 
| 52c0 |  4d 75 6c 74 69 70 6c 65 56 61 6c 75 65 4b 65 79    40 32 34 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65  | MultipleValueKey@24.__imp__ZwQue | 
| 52e0 |  72 79 4d 75 6c 74 69 70 6c 65 56 61 6c 75 65 4b    65 79 40 32 34 00 5f 5a 77 51 75 65 72 79 4b 65  | ryMultipleValueKey@24._ZwQueryKe | 
| 5300 |  79 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75    65 72 79 4b 65 79 40 32 30 00 5f 5a 77 51 75 65  | y@20.__imp__ZwQueryKey@20._ZwQue | 
| 5320 |  72 79 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 32    30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79  | ryIoCompletion@20.__imp__ZwQuery | 
| 5340 |  49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 32 30 00    5f 5a 77 51 75 65 72 79 49 6e 74 65 72 76 61 6c  | IoCompletion@20._ZwQueryInterval | 
| 5360 |  50 72 6f 66 69 6c 65 40 38 00 5f 5f 69 6d 70 5f    5f 5a 77 51 75 65 72 79 49 6e 74 65 72 76 61 6c  | Profile@8.__imp__ZwQueryInterval | 
| 5380 |  50 72 6f 66 69 6c 65 40 38 00 5f 5a 77 51 75 65    72 79 49 6e 73 74 61 6c 6c 55 49 4c 61 6e 67 75  | Profile@8._ZwQueryInstallUILangu | 
| 53a0 |  61 67 65 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 51    75 65 72 79 49 6e 73 74 61 6c 6c 55 49 4c 61 6e  | age@4.__imp__ZwQueryInstallUILan | 
| 53c0 |  67 75 61 67 65 40 34 00 5f 5a 77 51 75 65 72 79    49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e  | guage@4._ZwQueryInformationToken | 
| 53e0 |  40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65    72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b  | @20.__imp__ZwQueryInformationTok | 
| 5400 |  65 6e 40 32 30 00 5f 5a 77 51 75 65 72 79 49 6e    66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 64 40  | en@20._ZwQueryInformationThread@ | 
| 5420 |  32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72    79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65  | 20.__imp__ZwQueryInformationThre | 
| 5440 |  61 64 40 32 30 00 5f 5a 77 51 75 65 72 79 49 6e    66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73  | ad@20._ZwQueryInformationProcess | 
| 5460 |  40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65    72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f  | @20.__imp__ZwQueryInformationPro | 
| 5480 |  63 65 73 73 40 32 30 00 5f 5a 77 51 75 65 72 79    49 6e 66 6f 72 6d 61 74 69 6f 6e 50 6f 72 74 40  | cess@20._ZwQueryInformationPort@ | 
| 54a0 |  32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72    79 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 6f 72 74  | 20.__imp__ZwQueryInformationPort | 
| 54c0 |  40 32 30 00 5f 5a 77 51 75 65 72 79 49 6e 66 6f    72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74  | @20._ZwQueryInformationJobObject | 
| 54e0 |  40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65    72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62  | @20.__imp__ZwQueryInformationJob | 
| 5500 |  4f 62 6a 65 63 74 40 32 30 00 5f 5a 77 51 75 65    72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c  | Object@20._ZwQueryInformationFil | 
| 5520 |  65 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75    65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69  | e@20.__imp__ZwQueryInformationFi | 
| 5540 |  6c 65 40 32 30 00 5f 5a 77 51 75 65 72 79 49 6e    66 6f 72 6d 61 74 69 6f 6e 41 74 6f 6d 40 32 30  | le@20._ZwQueryInformationAtom@20 | 
| 5560 |  00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79 49    6e 66 6f 72 6d 61 74 69 6f 6e 41 74 6f 6d 40 32  | .__imp__ZwQueryInformationAtom@2 | 
| 5580 |  30 00 5f 5a 77 51 75 65 72 79 46 75 6c 6c 41 74    74 72 69 62 75 74 65 73 46 69 6c 65 40 38 00 5f  | 0._ZwQueryFullAttributesFile@8._ | 
| 55a0 |  5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79 46 75 6c    6c 41 74 74 72 69 62 75 74 65 73 46 69 6c 65 40  | _imp__ZwQueryFullAttributesFile@ | 
| 55c0 |  38 00 5f 5a 77 51 75 65 72 79 45 76 65 6e 74 40    32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72  | 8._ZwQueryEvent@20.__imp__ZwQuer | 
| 55e0 |  79 45 76 65 6e 74 40 32 30 00 5f 5a 77 51 75 65    72 79 45 61 46 69 6c 65 40 33 36 00 5f 5f 69 6d  | yEvent@20._ZwQueryEaFile@36.__im | 
| 5600 |  70 5f 5f 5a 77 51 75 65 72 79 45 61 46 69 6c 65    40 33 36 00 5f 5a 77 51 75 65 72 79 44 72 69 76  | p__ZwQueryEaFile@36._ZwQueryDriv | 
| 5620 |  65 72 45 6e 74 72 79 4f 72 64 65 72 40 38 00 5f    5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79 44 72 69  | erEntryOrder@8.__imp__ZwQueryDri | 
| 5640 |  76 65 72 45 6e 74 72 79 4f 72 64 65 72 40 38 00    5f 5a 77 51 75 65 72 79 44 69 72 65 63 74 6f 72  | verEntryOrder@8._ZwQueryDirector | 
| 5660 |  79 4f 62 6a 65 63 74 40 32 38 00 5f 5f 69 6d 70    5f 5f 5a 77 51 75 65 72 79 44 69 72 65 63 74 6f  | yObject@28.__imp__ZwQueryDirecto | 
| 5680 |  72 79 4f 62 6a 65 63 74 40 32 38 00 5f 5a 77 51    75 65 72 79 44 69 72 65 63 74 6f 72 79 46 69 6c  | ryObject@28._ZwQueryDirectoryFil | 
| 56a0 |  65 40 34 34 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75    65 72 79 44 69 72 65 63 74 6f 72 79 46 69 6c 65  | e@44.__imp__ZwQueryDirectoryFile | 
| 56c0 |  40 34 34 00 5f 5a 77 51 75 65 72 79 44 65 66 61    75 6c 74 55 49 4c 61 6e 67 75 61 67 65 40 34 00  | @44._ZwQueryDefaultUILanguage@4. | 
| 56e0 |  5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79 44 65    66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67 65 40  | __imp__ZwQueryDefaultUILanguage@ | 
| 5700 |  34 00 5f 5a 77 51 75 65 72 79 44 65 66 61 75 6c    74 4c 6f 63 61 6c 65 40 38 00 5f 5f 69 6d 70 5f  | 4._ZwQueryDefaultLocale@8.__imp_ | 
| 5720 |  5f 5a 77 51 75 65 72 79 44 65 66 61 75 6c 74 4c    6f 63 61 6c 65 40 38 00 5f 5a 77 51 75 65 72 79  | _ZwQueryDefaultLocale@8._ZwQuery | 
| 5740 |  44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65    40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72  | DebugFilterState@8.__imp__ZwQuer | 
| 5760 |  79 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74    65 40 38 00 5f 5a 77 51 75 65 72 79 42 6f 6f 74  | yDebugFilterState@8._ZwQueryBoot | 
| 5780 |  4f 70 74 69 6f 6e 73 40 38 00 5f 5f 69 6d 70 5f    5f 5a 77 51 75 65 72 79 42 6f 6f 74 4f 70 74 69  | Options@8.__imp__ZwQueryBootOpti | 
| 57a0 |  6f 6e 73 40 38 00 5f 5a 77 51 75 65 72 79 42 6f    6f 74 45 6e 74 72 79 4f 72 64 65 72 40 38 00 5f  | ons@8._ZwQueryBootEntryOrder@8._ | 
| 57c0 |  5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79 42 6f 6f    74 45 6e 74 72 79 4f 72 64 65 72 40 38 00 5f 5a  | _imp__ZwQueryBootEntryOrder@8._Z | 
| 57e0 |  77 51 75 65 72 79 41 74 74 72 69 62 75 74 65 73    46 69 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77  | wQueryAttributesFile@8.__imp__Zw | 
| 5800 |  51 75 65 72 79 41 74 74 72 69 62 75 74 65 73 46    69 6c 65 40 38 00 5f 5a 77 50 75 6c 73 65 45 76  | QueryAttributesFile@8._ZwPulseEv | 
| 5820 |  65 6e 74 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 50    75 6c 73 65 45 76 65 6e 74 40 38 00 5f 5a 77 50  | ent@8.__imp__ZwPulseEvent@8._ZwP | 
| 5840 |  72 6f 74 65 63 74 56 69 72 74 75 61 6c 4d 65 6d    6f 72 79 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77  | rotectVirtualMemory@20.__imp__Zw | 
| 5860 |  50 72 6f 74 65 63 74 56 69 72 74 75 61 6c 4d 65    6d 6f 72 79 40 32 30 00 5f 5a 77 50 72 69 76 69  | ProtectVirtualMemory@20._ZwPrivi | 
| 5880 |  6c 65 67 65 64 53 65 72 76 69 63 65 41 75 64 69    74 41 6c 61 72 6d 40 32 30 00 5f 5f 69 6d 70 5f  | legedServiceAuditAlarm@20.__imp_ | 
| 58a0 |  5f 5a 77 50 72 69 76 69 6c 65 67 65 64 53 65 72    76 69 63 65 41 75 64 69 74 41 6c 61 72 6d 40 32  | _ZwPrivilegedServiceAuditAlarm@2 | 
| 58c0 |  30 00 5f 5a 77 50 72 69 76 69 6c 65 67 65 4f 62    6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 40 32  | 0._ZwPrivilegeObjectAuditAlarm@2 | 
| 58e0 |  34 00 5f 5f 69 6d 70 5f 5f 5a 77 50 72 69 76 69    6c 65 67 65 4f 62 6a 65 63 74 41 75 64 69 74 41  | 4.__imp__ZwPrivilegeObjectAuditA | 
| 5900 |  6c 61 72 6d 40 32 34 00 5f 5a 77 50 72 69 76 69    6c 65 67 65 43 68 65 63 6b 40 31 32 00 5f 5f 69  | larm@24._ZwPrivilegeCheck@12.__i | 
| 5920 |  6d 70 5f 5f 5a 77 50 72 69 76 69 6c 65 67 65 43    68 65 63 6b 40 31 32 00 5f 5a 77 50 6f 77 65 72  | mp__ZwPrivilegeCheck@12._ZwPower | 
| 5940 |  49 6e 66 6f 72 6d 61 74 69 6f 6e 40 32 30 00 5f    5f 69 6d 70 5f 5f 5a 77 50 6f 77 65 72 49 6e 66  | Information@20.__imp__ZwPowerInf | 
| 5960 |  6f 72 6d 61 74 69 6f 6e 40 32 30 00 5f 5a 77 50    6c 75 67 50 6c 61 79 43 6f 6e 74 72 6f 6c 40 31  | ormation@20._ZwPlugPlayControl@1 | 
| 5980 |  32 00 5f 5f 69 6d 70 5f 5f 5a 77 50 6c 75 67 50    6c 61 79 43 6f 6e 74 72 6f 6c 40 31 32 00 5f 5a  | 2.__imp__ZwPlugPlayControl@12._Z | 
| 59a0 |  77 4f 70 65 6e 54 69 6d 65 72 40 31 32 00 5f 5f    69 6d 70 5f 5f 5a 77 4f 70 65 6e 54 69 6d 65 72  | wOpenTimer@12.__imp__ZwOpenTimer | 
| 59c0 |  40 31 32 00 5f 5a 77 4f 70 65 6e 54 68 72 65 61    64 54 6f 6b 65 6e 45 78 40 32 30 00 5f 5f 69 6d  | @12._ZwOpenThreadTokenEx@20.__im | 
| 59e0 |  70 5f 5f 5a 77 4f 70 65 6e 54 68 72 65 61 64 54    6f 6b 65 6e 45 78 40 32 30 00 5f 5a 77 4f 70 65  | p__ZwOpenThreadTokenEx@20._ZwOpe | 
| 5a00 |  6e 54 68 72 65 61 64 54 6f 6b 65 6e 40 31 36 00    5f 5f 69 6d 70 5f 5f 5a 77 4f 70 65 6e 54 68 72  | nThreadToken@16.__imp__ZwOpenThr | 
| 5a20 |  65 61 64 54 6f 6b 65 6e 40 31 36 00 5f 5a 77 4f    70 65 6e 54 68 72 65 61 64 40 31 36 00 5f 5f 69  | eadToken@16._ZwOpenThread@16.__i | 
| 5a40 |  6d 70 5f 5f 5a 77 4f 70 65 6e 54 68 72 65 61 64    40 31 36 00 5f 5a 77 4f 70 65 6e 53 79 6d 62 6f  | mp__ZwOpenThread@16._ZwOpenSymbo | 
| 5a60 |  6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 40 31 32    00 5f 5f 69 6d 70 5f 5f 5a 77 4f 70 65 6e 53 79  | licLinkObject@12.__imp__ZwOpenSy | 
| 5a80 |  6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74    40 31 32 00 5f 5a 77 4f 70 65 6e 53 65 6d 61 70  | mbolicLinkObject@12._ZwOpenSemap | 
| 5aa0 |  68 6f 72 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a    77 4f 70 65 6e 53 65 6d 61 70 68 6f 72 65 40 31  | hore@12.__imp__ZwOpenSemaphore@1 | 
| 5ac0 |  32 00 5f 5a 77 4f 70 65 6e 53 65 63 74 69 6f 6e    40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 4f 70 65  | 2._ZwOpenSection@12.__imp__ZwOpe | 
| 5ae0 |  6e 53 65 63 74 69 6f 6e 40 31 32 00 5f 5a 77 4f    70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 45  | nSection@12._ZwOpenProcessTokenE | 
| 5b00 |  78 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 4f 70    65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 45 78  | x@16.__imp__ZwOpenProcessTokenEx | 
| 5b20 |  40 31 36 00 5f 5a 77 4f 70 65 6e 50 72 6f 63 65    73 73 54 6f 6b 65 6e 40 31 32 00 5f 5f 69 6d 70  | @16._ZwOpenProcessToken@12.__imp | 
| 5b40 |  5f 5f 5a 77 4f 70 65 6e 50 72 6f 63 65 73 73 54    6f 6b 65 6e 40 31 32 00 5f 5a 77 4f 70 65 6e 50  | __ZwOpenProcessToken@12._ZwOpenP | 
| 5b60 |  72 6f 63 65 73 73 40 31 36 00 5f 5f 69 6d 70 5f    5f 5a 77 4f 70 65 6e 50 72 6f 63 65 73 73 40 31  | rocess@16.__imp__ZwOpenProcess@1 | 
| 5b80 |  36 00 5f 5a 77 4f 70 65 6e 4f 62 6a 65 63 74 41    75 64 69 74 41 6c 61 72 6d 40 34 38 00 5f 5f 69  | 6._ZwOpenObjectAuditAlarm@48.__i | 
| 5ba0 |  6d 70 5f 5f 5a 77 4f 70 65 6e 4f 62 6a 65 63 74    41 75 64 69 74 41 6c 61 72 6d 40 34 38 00 5f 5a  | mp__ZwOpenObjectAuditAlarm@48._Z | 
| 5bc0 |  77 4f 70 65 6e 4d 75 74 61 6e 74 40 31 32 00 5f    5f 69 6d 70 5f 5f 5a 77 4f 70 65 6e 4d 75 74 61  | wOpenMutant@12.__imp__ZwOpenMuta | 
| 5be0 |  6e 74 40 31 32 00 5f 5a 77 4f 70 65 6e 4b 65 79    65 64 45 76 65 6e 74 40 31 32 00 5f 5f 69 6d 70  | nt@12._ZwOpenKeyedEvent@12.__imp | 
| 5c00 |  5f 5f 5a 77 4f 70 65 6e 4b 65 79 65 64 45 76 65    6e 74 40 31 32 00 5f 5a 77 4f 70 65 6e 4b 65 79  | __ZwOpenKeyedEvent@12._ZwOpenKey | 
| 5c20 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 4f 70 65    6e 4b 65 79 40 31 32 00 5f 5a 77 4f 70 65 6e 4a  | @12.__imp__ZwOpenKey@12._ZwOpenJ | 
| 5c40 |  6f 62 4f 62 6a 65 63 74 40 31 32 00 5f 5f 69 6d    70 5f 5f 5a 77 4f 70 65 6e 4a 6f 62 4f 62 6a 65  | obObject@12.__imp__ZwOpenJobObje | 
| 5c60 |  63 74 40 31 32 00 5f 5a 77 4f 70 65 6e 49 6f 43    6f 6d 70 6c 65 74 69 6f 6e 40 31 32 00 5f 5f 69  | ct@12._ZwOpenIoCompletion@12.__i | 
| 5c80 |  6d 70 5f 5f 5a 77 4f 70 65 6e 49 6f 43 6f 6d 70    6c 65 74 69 6f 6e 40 31 32 00 5f 5a 77 4f 70 65  | mp__ZwOpenIoCompletion@12._ZwOpe | 
| 5ca0 |  6e 46 69 6c 65 40 32 34 00 5f 5f 69 6d 70 5f 5f    5a 77 4f 70 65 6e 46 69 6c 65 40 32 34 00 5f 5a  | nFile@24.__imp__ZwOpenFile@24._Z | 
| 5cc0 |  77 4f 70 65 6e 45 76 65 6e 74 50 61 69 72 40 31    32 00 5f 5f 69 6d 70 5f 5f 5a 77 4f 70 65 6e 45  | wOpenEventPair@12.__imp__ZwOpenE | 
| 5ce0 |  76 65 6e 74 50 61 69 72 40 31 32 00 5f 5a 77 4f    70 65 6e 45 76 65 6e 74 40 31 32 00 5f 5f 69 6d  | ventPair@12._ZwOpenEvent@12.__im | 
| 5d00 |  70 5f 5f 5a 77 4f 70 65 6e 45 76 65 6e 74 40 31    32 00 5f 5a 77 4f 70 65 6e 44 69 72 65 63 74 6f  | p__ZwOpenEvent@12._ZwOpenDirecto | 
| 5d20 |  72 79 4f 62 6a 65 63 74 40 31 32 00 5f 5f 69 6d    70 5f 5f 5a 77 4f 70 65 6e 44 69 72 65 63 74 6f  | ryObject@12.__imp__ZwOpenDirecto | 
| 5d40 |  72 79 4f 62 6a 65 63 74 40 31 32 00 5f 5a 77 4e    6f 74 69 66 79 43 68 61 6e 67 65 4d 75 6c 74 69  | ryObject@12._ZwNotifyChangeMulti | 
| 5d60 |  70 6c 65 4b 65 79 73 40 34 38 00 5f 5f 69 6d 70    5f 5f 5a 77 4e 6f 74 69 66 79 43 68 61 6e 67 65  | pleKeys@48.__imp__ZwNotifyChange | 
| 5d80 |  4d 75 6c 74 69 70 6c 65 4b 65 79 73 40 34 38 00    5f 5a 77 4e 6f 74 69 66 79 43 68 61 6e 67 65 4b  | MultipleKeys@48._ZwNotifyChangeK | 
| 5da0 |  65 79 40 34 30 00 5f 5f 69 6d 70 5f 5f 5a 77 4e    6f 74 69 66 79 43 68 61 6e 67 65 4b 65 79 40 34  | ey@40.__imp__ZwNotifyChangeKey@4 | 
| 5dc0 |  30 00 5f 5a 77 4e 6f 74 69 66 79 43 68 61 6e 67    65 44 69 72 65 63 74 6f 72 79 46 69 6c 65 40 33  | 0._ZwNotifyChangeDirectoryFile@3 | 
| 5de0 |  36 00 5f 5f 69 6d 70 5f 5f 5a 77 4e 6f 74 69 66    79 43 68 61 6e 67 65 44 69 72 65 63 74 6f 72 79  | 6.__imp__ZwNotifyChangeDirectory | 
| 5e00 |  46 69 6c 65 40 33 36 00 5f 5a 77 4d 6f 64 69 66    79 44 72 69 76 65 72 45 6e 74 72 79 40 34 00 5f  | File@36._ZwModifyDriverEntry@4._ | 
| 5e20 |  5f 69 6d 70 5f 5f 5a 77 4d 6f 64 69 66 79 44 72    69 76 65 72 45 6e 74 72 79 40 34 00 5f 5a 77 4d  | _imp__ZwModifyDriverEntry@4._ZwM | 
| 5e40 |  6f 64 69 66 79 42 6f 6f 74 45 6e 74 72 79 40 34    00 5f 5f 69 6d 70 5f 5f 5a 77 4d 6f 64 69 66 79  | odifyBootEntry@4.__imp__ZwModify | 
| 5e60 |  42 6f 6f 74 45 6e 74 72 79 40 34 00 5f 5a 77 4d    61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 40  | BootEntry@4._ZwMapViewOfSection@ | 
| 5e80 |  34 30 00 5f 5f 69 6d 70 5f 5f 5a 77 4d 61 70 56    69 65 77 4f 66 53 65 63 74 69 6f 6e 40 34 30 00  | 40.__imp__ZwMapViewOfSection@40. | 
| 5ea0 |  5f 5a 77 4d 61 70 55 73 65 72 50 68 79 73 69 63    61 6c 50 61 67 65 73 53 63 61 74 74 65 72 40 31  | _ZwMapUserPhysicalPagesScatter@1 | 
| 5ec0 |  32 00 5f 5f 69 6d 70 5f 5f 5a 77 4d 61 70 55 73    65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 53  | 2.__imp__ZwMapUserPhysicalPagesS | 
| 5ee0 |  63 61 74 74 65 72 40 31 32 00 5f 5a 77 4d 61 70    55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65  | catter@12._ZwMapUserPhysicalPage | 
| 5f00 |  73 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 4d 61    70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67  | s@12.__imp__ZwMapUserPhysicalPag | 
| 5f20 |  65 73 40 31 32 00 5f 5a 77 4d 61 6b 65 54 65 6d    70 6f 72 61 72 79 4f 62 6a 65 63 74 40 34 00 5f  | es@12._ZwMakeTemporaryObject@4._ | 
| 5f40 |  5f 69 6d 70 5f 5f 5a 77 4d 61 6b 65 54 65 6d 70    6f 72 61 72 79 4f 62 6a 65 63 74 40 34 00 5f 5a  | _imp__ZwMakeTemporaryObject@4._Z | 
| 5f60 |  77 4d 61 6b 65 50 65 72 6d 61 6e 65 6e 74 4f 62    6a 65 63 74 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77  | wMakePermanentObject@4.__imp__Zw | 
| 5f80 |  4d 61 6b 65 50 65 72 6d 61 6e 65 6e 74 4f 62 6a    65 63 74 40 34 00 5f 5a 77 4c 6f 63 6b 56 69 72  | MakePermanentObject@4._ZwLockVir | 
| 5fa0 |  74 75 61 6c 4d 65 6d 6f 72 79 40 31 36 00 5f 5f    69 6d 70 5f 5f 5a 77 4c 6f 63 6b 56 69 72 74 75  | tualMemory@16.__imp__ZwLockVirtu | 
| 5fc0 |  61 6c 4d 65 6d 6f 72 79 40 31 36 00 5f 5a 77 4c    6f 63 6b 52 65 67 69 73 74 72 79 4b 65 79 40 34  | alMemory@16._ZwLockRegistryKey@4 | 
| 5fe0 |  00 5f 5f 69 6d 70 5f 5f 5a 77 4c 6f 63 6b 52 65    67 69 73 74 72 79 4b 65 79 40 34 00 5f 5a 77 4c  | .__imp__ZwLockRegistryKey@4._ZwL | 
| 6000 |  6f 63 6b 50 72 6f 64 75 63 74 41 63 74 69 76 61    74 69 6f 6e 4b 65 79 73 40 38 00 5f 5f 69 6d 70  | ockProductActivationKeys@8.__imp | 
| 6020 |  5f 5f 5a 77 4c 6f 63 6b 50 72 6f 64 75 63 74 41    63 74 69 76 61 74 69 6f 6e 4b 65 79 73 40 38 00  | __ZwLockProductActivationKeys@8. | 
| 6040 |  5f 5a 77 4c 6f 63 6b 46 69 6c 65 40 34 30 00 5f    5f 69 6d 70 5f 5f 5a 77 4c 6f 63 6b 46 69 6c 65  | _ZwLockFile@40.__imp__ZwLockFile | 
| 6060 |  40 34 30 00 5f 5a 77 4c 6f 61 64 4b 65 79 45 78    40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 4c 6f 61  | @40._ZwLoadKeyEx@16.__imp__ZwLoa | 
| 6080 |  64 4b 65 79 45 78 40 31 36 00 5f 5a 77 4c 6f 61    64 4b 65 79 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77  | dKeyEx@16._ZwLoadKey@8.__imp__Zw | 
| 60a0 |  4c 6f 61 64 4b 65 79 40 38 00 5f 5a 77 4c 6f 61    64 4b 65 79 32 40 31 32 00 5f 5f 69 6d 70 5f 5f  | LoadKey@8._ZwLoadKey2@12.__imp__ | 
| 60c0 |  5a 77 4c 6f 61 64 4b 65 79 32 40 31 32 00 5f 5a    77 4c 6f 61 64 44 72 69 76 65 72 40 34 00 5f 5f  | ZwLoadKey2@12._ZwLoadDriver@4.__ | 
| 60e0 |  69 6d 70 5f 5f 5a 77 4c 6f 61 64 44 72 69 76 65    72 40 34 00 5f 5a 77 4c 69 73 74 65 6e 50 6f 72  | imp__ZwLoadDriver@4._ZwListenPor | 
| 6100 |  74 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 4c 69 73    74 65 6e 50 6f 72 74 40 38 00 5f 5a 77 49 73 53  | t@8.__imp__ZwListenPort@8._ZwIsS | 
| 6120 |  79 73 74 65 6d 52 65 73 75 6d 65 41 75 74 6f 6d    61 74 69 63 40 30 00 5f 5f 69 6d 70 5f 5f 5a 77  | ystemResumeAutomatic@0.__imp__Zw | 
| 6140 |  49 73 53 79 73 74 65 6d 52 65 73 75 6d 65 41 75    74 6f 6d 61 74 69 63 40 30 00 5f 5a 77 49 73 50  | IsSystemResumeAutomatic@0._ZwIsP | 
| 6160 |  72 6f 63 65 73 73 49 6e 4a 6f 62 40 38 00 5f 5f    69 6d 70 5f 5f 5a 77 49 73 50 72 6f 63 65 73 73  | rocessInJob@8.__imp__ZwIsProcess | 
| 6180 |  49 6e 4a 6f 62 40 38 00 5f 5a 77 49 6e 69 74 69    61 74 65 50 6f 77 65 72 41 63 74 69 6f 6e 40 31  | InJob@8._ZwInitiatePowerAction@1 | 
| 61a0 |  36 00 5f 5f 69 6d 70 5f 5f 5a 77 49 6e 69 74 69    61 74 65 50 6f 77 65 72 41 63 74 69 6f 6e 40 31  | 6.__imp__ZwInitiatePowerAction@1 | 
| 61c0 |  36 00 5f 5a 77 49 6e 69 74 69 61 6c 69 7a 65 52    65 67 69 73 74 72 79 40 34 00 5f 5f 69 6d 70 5f  | 6._ZwInitializeRegistry@4.__imp_ | 
| 61e0 |  5f 5a 77 49 6e 69 74 69 61 6c 69 7a 65 52 65 67    69 73 74 72 79 40 34 00 5f 5a 77 49 6d 70 65 72  | _ZwInitializeRegistry@4._ZwImper | 
| 6200 |  73 6f 6e 61 74 65 54 68 72 65 61 64 40 31 32 00    5f 5f 69 6d 70 5f 5f 5a 77 49 6d 70 65 72 73 6f  | sonateThread@12.__imp__ZwImperso | 
| 6220 |  6e 61 74 65 54 68 72 65 61 64 40 31 32 00 5f 5a    77 49 6d 70 65 72 73 6f 6e 61 74 65 43 6c 69 65  | nateThread@12._ZwImpersonateClie | 
| 6240 |  6e 74 4f 66 50 6f 72 74 40 38 00 5f 5f 69 6d 70    5f 5f 5a 77 49 6d 70 65 72 73 6f 6e 61 74 65 43  | ntOfPort@8.__imp__ZwImpersonateC | 
| 6260 |  6c 69 65 6e 74 4f 66 50 6f 72 74 40 38 00 5f 5a    77 49 6d 70 65 72 73 6f 6e 61 74 65 41 6e 6f 6e  | lientOfPort@8._ZwImpersonateAnon | 
| 6280 |  79 6d 6f 75 73 54 6f 6b 65 6e 40 34 00 5f 5f 69    6d 70 5f 5f 5a 77 49 6d 70 65 72 73 6f 6e 61 74  | ymousToken@4.__imp__ZwImpersonat | 
| 62a0 |  65 41 6e 6f 6e 79 6d 6f 75 73 54 6f 6b 65 6e 40    34 00 5f 5a 77 47 65 74 57 72 69 74 65 57 61 74  | eAnonymousToken@4._ZwGetWriteWat | 
| 62c0 |  63 68 40 32 38 00 5f 5f 69 6d 70 5f 5f 5a 77 47    65 74 57 72 69 74 65 57 61 74 63 68 40 32 38 00  | ch@28.__imp__ZwGetWriteWatch@28. | 
| 62e0 |  5f 5a 77 47 65 74 50 6c 75 67 50 6c 61 79 45 76    65 6e 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77  | _ZwGetPlugPlayEvent@16.__imp__Zw | 
| 6300 |  47 65 74 50 6c 75 67 50 6c 61 79 45 76 65 6e 74    40 31 36 00 5f 5a 77 47 65 74 44 65 76 69 63 65  | GetPlugPlayEvent@16._ZwGetDevice | 
| 6320 |  50 6f 77 65 72 53 74 61 74 65 40 38 00 5f 5f 69    6d 70 5f 5f 5a 77 47 65 74 44 65 76 69 63 65 50  | PowerState@8.__imp__ZwGetDeviceP | 
| 6340 |  6f 77 65 72 53 74 61 74 65 40 38 00 5f 5a 77 47    65 74 43 75 72 72 65 6e 74 50 72 6f 63 65 73 73  | owerState@8._ZwGetCurrentProcess | 
| 6360 |  6f 72 4e 75 6d 62 65 72 40 30 00 5f 5f 69 6d 70    5f 5f 5a 77 47 65 74 43 75 72 72 65 6e 74 50 72  | orNumber@0.__imp__ZwGetCurrentPr | 
| 6380 |  6f 63 65 73 73 6f 72 4e 75 6d 62 65 72 40 30 00    5f 5a 77 47 65 74 43 6f 6e 74 65 78 74 54 68 72  | ocessorNumber@0._ZwGetContextThr | 
| 63a0 |  65 61 64 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 47    65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 64 40  | ead@8.__imp__ZwGetContextThread@ | 
| 63c0 |  38 00 5f 5a 77 46 73 43 6f 6e 74 72 6f 6c 46 69    6c 65 40 34 30 00 5f 5f 69 6d 70 5f 5f 5a 77 46  | 8._ZwFsControlFile@40.__imp__ZwF | 
| 63e0 |  73 43 6f 6e 74 72 6f 6c 46 69 6c 65 40 34 30 00    5f 5a 77 46 72 65 65 56 69 72 74 75 61 6c 4d 65  | sControlFile@40._ZwFreeVirtualMe | 
| 6400 |  6d 6f 72 79 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a    77 46 72 65 65 56 69 72 74 75 61 6c 4d 65 6d 6f  | mory@16.__imp__ZwFreeVirtualMemo | 
| 6420 |  72 79 40 31 36 00 5f 5a 77 46 72 65 65 55 73 65    72 50 68 79 73 69 63 61 6c 50 61 67 65 73 40 31  | ry@16._ZwFreeUserPhysicalPages@1 | 
| 6440 |  32 00 5f 5f 69 6d 70 5f 5f 5a 77 46 72 65 65 55    73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73  | 2.__imp__ZwFreeUserPhysicalPages | 
| 6460 |  40 31 32 00 5f 5a 77 46 6c 75 73 68 57 72 69 74    65 42 75 66 66 65 72 40 30 00 5f 5f 69 6d 70 5f  | @12._ZwFlushWriteBuffer@0.__imp_ | 
| 6480 |  5f 5a 77 46 6c 75 73 68 57 72 69 74 65 42 75 66    66 65 72 40 30 00 5f 5a 77 46 6c 75 73 68 56 69  | _ZwFlushWriteBuffer@0._ZwFlushVi | 
| 64a0 |  72 74 75 61 6c 4d 65 6d 6f 72 79 40 31 36 00 5f    5f 69 6d 70 5f 5f 5a 77 46 6c 75 73 68 56 69 72  | rtualMemory@16.__imp__ZwFlushVir | 
| 64c0 |  74 75 61 6c 4d 65 6d 6f 72 79 40 31 36 00 5f 5a    77 46 6c 75 73 68 4b 65 79 40 34 00 5f 5f 69 6d  | tualMemory@16._ZwFlushKey@4.__im | 
| 64e0 |  70 5f 5f 5a 77 46 6c 75 73 68 4b 65 79 40 34 00    5f 5a 77 46 6c 75 73 68 49 6e 73 74 72 75 63 74  | p__ZwFlushKey@4._ZwFlushInstruct | 
| 6500 |  69 6f 6e 43 61 63 68 65 40 31 32 00 5f 5f 69 6d    70 5f 5f 5a 77 46 6c 75 73 68 49 6e 73 74 72 75  | ionCache@12.__imp__ZwFlushInstru | 
| 6520 |  63 74 69 6f 6e 43 61 63 68 65 40 31 32 00 5f 5a    77 46 6c 75 73 68 42 75 66 66 65 72 73 46 69 6c  | ctionCache@12._ZwFlushBuffersFil | 
| 6540 |  65 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 46 6c 75    73 68 42 75 66 66 65 72 73 46 69 6c 65 40 38 00  | e@8.__imp__ZwFlushBuffersFile@8. | 
| 6560 |  5f 5a 77 46 69 6e 64 41 74 6f 6d 40 31 32 00 5f    5f 69 6d 70 5f 5f 5a 77 46 69 6e 64 41 74 6f 6d  | _ZwFindAtom@12.__imp__ZwFindAtom | 
| 6580 |  40 31 32 00 5f 5a 77 46 69 6c 74 65 72 54 6f 6b    65 6e 40 32 34 00 5f 5f 69 6d 70 5f 5f 5a 77 46  | @12._ZwFilterToken@24.__imp__ZwF | 
| 65a0 |  69 6c 74 65 72 54 6f 6b 65 6e 40 32 34 00 5f 5a    77 45 78 74 65 6e 64 53 65 63 74 69 6f 6e 40 38  | ilterToken@24._ZwExtendSection@8 | 
| 65c0 |  00 5f 5f 69 6d 70 5f 5f 5a 77 45 78 74 65 6e 64    53 65 63 74 69 6f 6e 40 38 00 5f 5a 77 45 6e 75  | .__imp__ZwExtendSection@8._ZwEnu | 
| 65e0 |  6d 65 72 61 74 65 56 61 6c 75 65 4b 65 79 40 32    34 00 5f 5f 69 6d 70 5f 5f 5a 77 45 6e 75 6d 65  | merateValueKey@24.__imp__ZwEnume | 
| 6600 |  72 61 74 65 56 61 6c 75 65 4b 65 79 40 32 34 00    5f 5a 77 45 6e 75 6d 65 72 61 74 65 53 79 73 74  | rateValueKey@24._ZwEnumerateSyst | 
| 6620 |  65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c    75 65 73 45 78 40 31 32 00 5f 5f 69 6d 70 5f 5f  | emEnvironmentValuesEx@12.__imp__ | 
| 6640 |  5a 77 45 6e 75 6d 65 72 61 74 65 53 79 73 74 65    6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75  | ZwEnumerateSystemEnvironmentValu | 
| 6660 |  65 73 45 78 40 31 32 00 5f 5a 77 45 6e 75 6d 65    72 61 74 65 4b 65 79 40 32 34 00 5f 5f 69 6d 70  | esEx@12._ZwEnumerateKey@24.__imp | 
| 6680 |  5f 5f 5a 77 45 6e 75 6d 65 72 61 74 65 4b 65 79    40 32 34 00 5f 5a 77 45 6e 75 6d 65 72 61 74 65  | __ZwEnumerateKey@24._ZwEnumerate | 
| 66a0 |  44 72 69 76 65 72 45 6e 74 72 69 65 73 40 38 00    5f 5f 69 6d 70 5f 5f 5a 77 45 6e 75 6d 65 72 61  | DriverEntries@8.__imp__ZwEnumera | 
| 66c0 |  74 65 44 72 69 76 65 72 45 6e 74 72 69 65 73 40    38 00 5f 5a 77 45 6e 75 6d 65 72 61 74 65 42 6f  | teDriverEntries@8._ZwEnumerateBo | 
| 66e0 |  6f 74 45 6e 74 72 69 65 73 40 38 00 5f 5f 69 6d    70 5f 5f 5a 77 45 6e 75 6d 65 72 61 74 65 42 6f  | otEntries@8.__imp__ZwEnumerateBo | 
| 6700 |  6f 74 45 6e 74 72 69 65 73 40 38 00 5f 5a 77 44    75 70 6c 69 63 61 74 65 54 6f 6b 65 6e 40 32 34  | otEntries@8._ZwDuplicateToken@24 | 
| 6720 |  00 5f 5f 69 6d 70 5f 5f 5a 77 44 75 70 6c 69 63    61 74 65 54 6f 6b 65 6e 40 32 34 00 5f 5a 77 44  | .__imp__ZwDuplicateToken@24._ZwD | 
| 6740 |  75 70 6c 69 63 61 74 65 4f 62 6a 65 63 74 40 32    38 00 5f 5f 69 6d 70 5f 5f 5a 77 44 75 70 6c 69  | uplicateObject@28.__imp__ZwDupli | 
| 6760 |  63 61 74 65 4f 62 6a 65 63 74 40 32 38 00 5f 5a    77 44 69 73 70 6c 61 79 53 74 72 69 6e 67 40 34  | cateObject@28._ZwDisplayString@4 | 
| 6780 |  00 5f 5f 69 6d 70 5f 5f 5a 77 44 69 73 70 6c 61    79 53 74 72 69 6e 67 40 34 00 5f 5a 77 44 65 76  | .__imp__ZwDisplayString@4._ZwDev | 
| 67a0 |  69 63 65 49 6f 43 6f 6e 74 72 6f 6c 46 69 6c 65    40 34 30 00 5f 5f 69 6d 70 5f 5f 5a 77 44 65 76  | iceIoControlFile@40.__imp__ZwDev | 
| 67c0 |  69 63 65 49 6f 43 6f 6e 74 72 6f 6c 46 69 6c 65    40 34 30 00 5f 5a 77 44 65 6c 65 74 65 56 61 6c  | iceIoControlFile@40._ZwDeleteVal | 
| 67e0 |  75 65 4b 65 79 40 38 00 5f 5f 69 6d 70 5f 5f 5a    77 44 65 6c 65 74 65 56 61 6c 75 65 4b 65 79 40  | ueKey@8.__imp__ZwDeleteValueKey@ | 
| 6800 |  38 00 5f 5a 77 44 65 6c 65 74 65 4f 62 6a 65 63    74 41 75 64 69 74 41 6c 61 72 6d 40 31 32 00 5f  | 8._ZwDeleteObjectAuditAlarm@12._ | 
| 6820 |  5f 69 6d 70 5f 5f 5a 77 44 65 6c 65 74 65 4f 62    6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 40 31  | _imp__ZwDeleteObjectAuditAlarm@1 | 
| 6840 |  32 00 5f 5a 77 44 65 6c 65 74 65 4b 65 79 40 34    00 5f 5f 69 6d 70 5f 5f 5a 77 44 65 6c 65 74 65  | 2._ZwDeleteKey@4.__imp__ZwDelete | 
| 6860 |  4b 65 79 40 34 00 5f 5a 77 44 65 6c 65 74 65 46    69 6c 65 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 44  | Key@4._ZwDeleteFile@4.__imp__ZwD | 
| 6880 |  65 6c 65 74 65 46 69 6c 65 40 34 00 5f 5a 77 44    65 6c 65 74 65 44 72 69 76 65 72 45 6e 74 72 79  | eleteFile@4._ZwDeleteDriverEntry | 
| 68a0 |  40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 44 65 6c 65    74 65 44 72 69 76 65 72 45 6e 74 72 79 40 34 00  | @4.__imp__ZwDeleteDriverEntry@4. | 
| 68c0 |  5f 5a 77 44 65 6c 65 74 65 42 6f 6f 74 45 6e 74    72 79 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 44 65  | _ZwDeleteBootEntry@4.__imp__ZwDe | 
| 68e0 |  6c 65 74 65 42 6f 6f 74 45 6e 74 72 79 40 34 00    5f 5a 77 44 65 6c 65 74 65 41 74 6f 6d 40 34 00  | leteBootEntry@4._ZwDeleteAtom@4. | 
| 6900 |  5f 5f 69 6d 70 5f 5f 5a 77 44 65 6c 65 74 65 41    74 6f 6d 40 34 00 5f 5a 77 44 65 6c 61 79 45 78  | __imp__ZwDeleteAtom@4._ZwDelayEx | 
| 6920 |  65 63 75 74 69 6f 6e 40 38 00 5f 5f 69 6d 70 5f    5f 5a 77 44 65 6c 61 79 45 78 65 63 75 74 69 6f  | ecution@8.__imp__ZwDelayExecutio | 
| 6940 |  6e 40 38 00 5f 5a 77 44 65 62 75 67 43 6f 6e 74    69 6e 75 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a  | n@8._ZwDebugContinue@12.__imp__Z | 
| 6960 |  77 44 65 62 75 67 43 6f 6e 74 69 6e 75 65 40 31    32 00 5f 5a 77 44 65 62 75 67 41 63 74 69 76 65  | wDebugContinue@12._ZwDebugActive | 
| 6980 |  50 72 6f 63 65 73 73 40 38 00 5f 5f 69 6d 70 5f    5f 5a 77 44 65 62 75 67 41 63 74 69 76 65 50 72  | Process@8.__imp__ZwDebugActivePr | 
| 69a0 |  6f 63 65 73 73 40 38 00 5f 5a 77 43 72 65 61 74    65 57 61 69 74 61 62 6c 65 50 6f 72 74 40 32 30  | ocess@8._ZwCreateWaitablePort@20 | 
| 69c0 |  00 5f 5f 69 6d 70 5f 5f 5a 77 43 72 65 61 74 65    57 61 69 74 61 62 6c 65 50 6f 72 74 40 32 30 00  | .__imp__ZwCreateWaitablePort@20. | 
| 69e0 |  5f 5a 77 43 72 65 61 74 65 54 6f 6b 65 6e 40 35    32 00 5f 5f 69 6d 70 5f 5f 5a 77 43 72 65 61 74  | _ZwCreateToken@52.__imp__ZwCreat | 
| 6a00 |  65 54 6f 6b 65 6e 40 35 32 00 5f 5a 77 43 72 65    61 74 65 54 69 6d 65 72 40 31 36 00 5f 5f 69 6d  | eToken@52._ZwCreateTimer@16.__im | 
| 6a20 |  70 5f 5f 5a 77 43 72 65 61 74 65 54 69 6d 65 72    40 31 36 00 5f 5a 77 43 72 65 61 74 65 54 68 72  | p__ZwCreateTimer@16._ZwCreateThr | 
| 6a40 |  65 61 64 40 33 32 00 5f 5f 69 6d 70 5f 5f 5a 77    43 72 65 61 74 65 54 68 72 65 61 64 40 33 32 00  | ead@32.__imp__ZwCreateThread@32. | 
| 6a60 |  5f 5a 77 43 72 65 61 74 65 53 79 6d 62 6f 6c 69    63 4c 69 6e 6b 4f 62 6a 65 63 74 40 31 36 00 5f  | _ZwCreateSymbolicLinkObject@16._ | 
| 6a80 |  5f 69 6d 70 5f 5f 5a 77 43 72 65 61 74 65 53 79    6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74  | _imp__ZwCreateSymbolicLinkObject | 
| 6aa0 |  40 31 36 00 5f 5a 77 43 72 65 61 74 65 53 65 6d    61 70 68 6f 72 65 40 32 30 00 5f 5f 69 6d 70 5f  | @16._ZwCreateSemaphore@20.__imp_ | 
| 6ac0 |  5f 5a 77 43 72 65 61 74 65 53 65 6d 61 70 68 6f    72 65 40 32 30 00 5f 5a 77 43 72 65 61 74 65 53  | _ZwCreateSemaphore@20._ZwCreateS | 
| 6ae0 |  65 63 74 69 6f 6e 40 32 38 00 5f 5f 69 6d 70 5f    5f 5a 77 43 72 65 61 74 65 53 65 63 74 69 6f 6e  | ection@28.__imp__ZwCreateSection | 
| 6b00 |  40 32 38 00 5f 5a 77 43 72 65 61 74 65 50 72 6f    66 69 6c 65 40 33 36 00 5f 5f 69 6d 70 5f 5f 5a  | @28._ZwCreateProfile@36.__imp__Z | 
| 6b20 |  77 43 72 65 61 74 65 50 72 6f 66 69 6c 65 40 33    36 00 5f 5a 77 43 72 65 61 74 65 50 72 6f 63 65  | wCreateProfile@36._ZwCreateProce | 
| 6b40 |  73 73 45 78 40 33 36 00 5f 5f 69 6d 70 5f 5f 5a    77 43 72 65 61 74 65 50 72 6f 63 65 73 73 45 78  | ssEx@36.__imp__ZwCreateProcessEx | 
| 6b60 |  40 33 36 00 5f 5a 77 43 72 65 61 74 65 50 72 6f    63 65 73 73 40 33 32 00 5f 5f 69 6d 70 5f 5f 5a  | @36._ZwCreateProcess@32.__imp__Z | 
| 6b80 |  77 43 72 65 61 74 65 50 72 6f 63 65 73 73 40 33    32 00 5f 5a 77 43 72 65 61 74 65 50 6f 72 74 40  | wCreateProcess@32._ZwCreatePort@ | 
| 6ba0 |  32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 43 72 65 61    74 65 50 6f 72 74 40 32 30 00 5f 5a 77 43 72 65  | 20.__imp__ZwCreatePort@20._ZwCre | 
| 6bc0 |  61 74 65 50 61 67 69 6e 67 46 69 6c 65 40 31 36    00 5f 5f 69 6d 70 5f 5f 5a 77 43 72 65 61 74 65  | atePagingFile@16.__imp__ZwCreate | 
| 6be0 |  50 61 67 69 6e 67 46 69 6c 65 40 31 36 00 5f 5a    77 43 72 65 61 74 65 4e 61 6d 65 64 50 69 70 65  | PagingFile@16._ZwCreateNamedPipe | 
| 6c00 |  46 69 6c 65 40 35 36 00 5f 5f 69 6d 70 5f 5f 5a    77 43 72 65 61 74 65 4e 61 6d 65 64 50 69 70 65  | File@56.__imp__ZwCreateNamedPipe | 
| 6c20 |  46 69 6c 65 40 35 36 00 5f 5a 77 43 72 65 61 74    65 4d 75 74 61 6e 74 40 31 36 00 5f 5f 69 6d 70  | File@56._ZwCreateMutant@16.__imp | 
| 6c40 |  5f 5f 5a 77 43 72 65 61 74 65 4d 75 74 61 6e 74    40 31 36 00 5f 5a 77 43 72 65 61 74 65 4d 61 69  | __ZwCreateMutant@16._ZwCreateMai | 
| 6c60 |  6c 73 6c 6f 74 46 69 6c 65 40 33 32 00 5f 5f 69    6d 70 5f 5f 5a 77 43 72 65 61 74 65 4d 61 69 6c  | lslotFile@32.__imp__ZwCreateMail | 
| 6c80 |  73 6c 6f 74 46 69 6c 65 40 33 32 00 5f 5a 77 43    72 65 61 74 65 4b 65 79 65 64 45 76 65 6e 74 40  | slotFile@32._ZwCreateKeyedEvent@ | 
| 6ca0 |  31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 43 72 65 61    74 65 4b 65 79 65 64 45 76 65 6e 74 40 31 36 00  | 16.__imp__ZwCreateKeyedEvent@16. | 
| 6cc0 |  5f 5a 77 43 72 65 61 74 65 4b 65 79 40 32 38 00    5f 5f 69 6d 70 5f 5f 5a 77 43 72 65 61 74 65 4b  | _ZwCreateKey@28.__imp__ZwCreateK | 
| 6ce0 |  65 79 40 32 38 00 5f 5a 77 43 72 65 61 74 65 4a    6f 62 53 65 74 40 31 32 00 5f 5f 69 6d 70 5f 5f  | ey@28._ZwCreateJobSet@12.__imp__ | 
| 6d00 |  5a 77 43 72 65 61 74 65 4a 6f 62 53 65 74 40 31    32 00 5f 5a 77 43 72 65 61 74 65 4a 6f 62 4f 62  | ZwCreateJobSet@12._ZwCreateJobOb | 
| 6d20 |  6a 65 63 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a    77 43 72 65 61 74 65 4a 6f 62 4f 62 6a 65 63 74  | ject@12.__imp__ZwCreateJobObject | 
| 6d40 |  40 31 32 00 5f 5a 77 43 72 65 61 74 65 49 6f 43    6f 6d 70 6c 65 74 69 6f 6e 40 31 36 00 5f 5f 69  | @12._ZwCreateIoCompletion@16.__i | 
| 6d60 |  6d 70 5f 5f 5a 77 43 72 65 61 74 65 49 6f 43 6f    6d 70 6c 65 74 69 6f 6e 40 31 36 00 5f 5a 77 43  | mp__ZwCreateIoCompletion@16._ZwC | 
| 6d80 |  72 65 61 74 65 46 69 6c 65 40 34 34 00 5f 5f 69    6d 70 5f 5f 5a 77 43 72 65 61 74 65 46 69 6c 65  | reateFile@44.__imp__ZwCreateFile | 
| 6da0 |  40 34 34 00 5f 5a 77 43 72 65 61 74 65 45 76 65    6e 74 50 61 69 72 40 31 32 00 5f 5f 69 6d 70 5f  | @44._ZwCreateEventPair@12.__imp_ | 
| 6dc0 |  5f 5a 77 43 72 65 61 74 65 45 76 65 6e 74 50 61    69 72 40 31 32 00 5f 5a 77 43 72 65 61 74 65 45  | _ZwCreateEventPair@12._ZwCreateE | 
| 6de0 |  76 65 6e 74 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a    77 43 72 65 61 74 65 45 76 65 6e 74 40 32 30 00  | vent@20.__imp__ZwCreateEvent@20. | 
| 6e00 |  5f 5a 77 43 72 65 61 74 65 44 69 72 65 63 74 6f    72 79 4f 62 6a 65 63 74 40 31 32 00 5f 5f 69 6d  | _ZwCreateDirectoryObject@12.__im | 
| 6e20 |  70 5f 5f 5a 77 43 72 65 61 74 65 44 69 72 65 63    74 6f 72 79 4f 62 6a 65 63 74 40 31 32 00 5f 5a  | p__ZwCreateDirectoryObject@12._Z | 
| 6e40 |  77 43 72 65 61 74 65 44 65 62 75 67 4f 62 6a 65    63 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 43  | wCreateDebugObject@16.__imp__ZwC | 
| 6e60 |  72 65 61 74 65 44 65 62 75 67 4f 62 6a 65 63 74    40 31 36 00 5f 5a 77 43 6f 6e 74 69 6e 75 65 40  | reateDebugObject@16._ZwContinue@ | 
| 6e80 |  38 00 5f 5f 69 6d 70 5f 5f 5a 77 43 6f 6e 74 69    6e 75 65 40 38 00 5f 5a 77 43 6f 6e 6e 65 63 74  | 8.__imp__ZwContinue@8._ZwConnect | 
| 6ea0 |  50 6f 72 74 40 33 32 00 5f 5f 69 6d 70 5f 5f 5a    77 43 6f 6e 6e 65 63 74 50 6f 72 74 40 33 32 00  | Port@32.__imp__ZwConnectPort@32. | 
| 6ec0 |  5f 5a 77 43 6f 6d 70 72 65 73 73 4b 65 79 40 34    00 5f 5f 69 6d 70 5f 5f 5a 77 43 6f 6d 70 72 65  | _ZwCompressKey@4.__imp__ZwCompre | 
| 6ee0 |  73 73 4b 65 79 40 34 00 5f 5a 77 43 6f 6d 70 6c    65 74 65 43 6f 6e 6e 65 63 74 50 6f 72 74 40 34  | ssKey@4._ZwCompleteConnectPort@4 | 
| 6f00 |  00 5f 5f 69 6d 70 5f 5f 5a 77 43 6f 6d 70 6c 65    74 65 43 6f 6e 6e 65 63 74 50 6f 72 74 40 34 00  | .__imp__ZwCompleteConnectPort@4. | 
| 6f20 |  5f 5a 77 43 6f 6d 70 61 72 65 54 6f 6b 65 6e 73    40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 43 6f 6d  | _ZwCompareTokens@12.__imp__ZwCom | 
| 6f40 |  70 61 72 65 54 6f 6b 65 6e 73 40 31 32 00 5f 5a    77 43 6f 6d 70 61 63 74 4b 65 79 73 40 38 00 5f  | pareTokens@12._ZwCompactKeys@8._ | 
| 6f60 |  5f 69 6d 70 5f 5f 5a 77 43 6f 6d 70 61 63 74 4b    65 79 73 40 38 00 5f 5a 77 43 6c 6f 73 65 4f 62  | _imp__ZwCompactKeys@8._ZwCloseOb | 
| 6f80 |  6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 40 31    32 00 5f 5f 69 6d 70 5f 5f 5a 77 43 6c 6f 73 65  | jectAuditAlarm@12.__imp__ZwClose | 
| 6fa0 |  4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d    40 31 32 00 5f 5a 77 43 6c 6f 73 65 40 34 00 5f  | ObjectAuditAlarm@12._ZwClose@4._ | 
| 6fc0 |  5f 69 6d 70 5f 5f 5a 77 43 6c 6f 73 65 40 34 00    5f 5a 77 43 6c 65 61 72 45 76 65 6e 74 40 34 00  | _imp__ZwClose@4._ZwClearEvent@4. | 
| 6fe0 |  5f 5f 69 6d 70 5f 5f 5a 77 43 6c 65 61 72 45 76    65 6e 74 40 34 00 5f 5a 77 43 61 6e 63 65 6c 54  | __imp__ZwClearEvent@4._ZwCancelT | 
| 7000 |  69 6d 65 72 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77    43 61 6e 63 65 6c 54 69 6d 65 72 40 38 00 5f 5a  | imer@8.__imp__ZwCancelTimer@8._Z | 
| 7020 |  77 43 61 6e 63 65 6c 49 6f 46 69 6c 65 40 38 00    5f 5f 69 6d 70 5f 5f 5a 77 43 61 6e 63 65 6c 49  | wCancelIoFile@8.__imp__ZwCancelI | 
| 7040 |  6f 46 69 6c 65 40 38 00 5f 5a 77 43 61 6e 63 65    6c 44 65 76 69 63 65 57 61 6b 65 75 70 52 65 71  | oFile@8._ZwCancelDeviceWakeupReq | 
| 7060 |  75 65 73 74 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77    43 61 6e 63 65 6c 44 65 76 69 63 65 57 61 6b 65  | uest@4.__imp__ZwCancelDeviceWake | 
| 7080 |  75 70 52 65 71 75 65 73 74 40 34 00 5f 5a 77 43    61 6c 6c 62 61 63 6b 52 65 74 75 72 6e 40 31 32  | upRequest@4._ZwCallbackReturn@12 | 
| 70a0 |  00 5f 5f 69 6d 70 5f 5f 5a 77 43 61 6c 6c 62 61    63 6b 52 65 74 75 72 6e 40 31 32 00 5f 5a 77 41  | .__imp__ZwCallbackReturn@12._ZwA | 
| 70c0 |  73 73 69 67 6e 50 72 6f 63 65 73 73 54 6f 4a 6f    62 4f 62 6a 65 63 74 40 38 00 5f 5f 69 6d 70 5f  | ssignProcessToJobObject@8.__imp_ | 
| 70e0 |  5f 5a 77 41 73 73 69 67 6e 50 72 6f 63 65 73 73    54 6f 4a 6f 62 4f 62 6a 65 63 74 40 38 00 5f 5a  | _ZwAssignProcessToJobObject@8._Z | 
| 7100 |  77 41 72 65 4d 61 70 70 65 64 46 69 6c 65 73 54    68 65 53 61 6d 65 40 38 00 5f 5f 69 6d 70 5f 5f  | wAreMappedFilesTheSame@8.__imp__ | 
| 7120 |  5a 77 41 72 65 4d 61 70 70 65 64 46 69 6c 65 73    54 68 65 53 61 6d 65 40 38 00 5f 5a 77 41 70 70  | ZwAreMappedFilesTheSame@8._ZwApp | 
| 7140 |  68 65 6c 70 43 61 63 68 65 43 6f 6e 74 72 6f 6c    40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 41 70 70 68  | helpCacheControl@8.__imp__ZwApph | 
| 7160 |  65 6c 70 43 61 63 68 65 43 6f 6e 74 72 6f 6c 40    38 00 5f 5a 77 41 6c 6c 6f 63 61 74 65 56 69 72  | elpCacheControl@8._ZwAllocateVir | 
| 7180 |  74 75 61 6c 4d 65 6d 6f 72 79 40 32 34 00 5f 5f    69 6d 70 5f 5f 5a 77 41 6c 6c 6f 63 61 74 65 56  | tualMemory@24.__imp__ZwAllocateV | 
| 71a0 |  69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 32 34 00    5f 5a 77 41 6c 6c 6f 63 61 74 65 55 75 69 64 73  | irtualMemory@24._ZwAllocateUuids | 
| 71c0 |  40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 41 6c 6c    6f 63 61 74 65 55 75 69 64 73 40 31 36 00 5f 5a  | @16.__imp__ZwAllocateUuids@16._Z | 
| 71e0 |  77 41 6c 6c 6f 63 61 74 65 55 73 65 72 50 68 79    73 69 63 61 6c 50 61 67 65 73 40 31 32 00 5f 5f  | wAllocateUserPhysicalPages@12.__ | 
| 7200 |  69 6d 70 5f 5f 5a 77 41 6c 6c 6f 63 61 74 65 55    73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73  | imp__ZwAllocateUserPhysicalPages | 
| 7220 |  40 31 32 00 5f 5a 77 41 6c 6c 6f 63 61 74 65 4c    6f 63 61 6c 6c 79 55 6e 69 71 75 65 49 64 40 34  | @12._ZwAllocateLocallyUniqueId@4 | 
| 7240 |  00 5f 5f 69 6d 70 5f 5f 5a 77 41 6c 6c 6f 63 61    74 65 4c 6f 63 61 6c 6c 79 55 6e 69 71 75 65 49  | .__imp__ZwAllocateLocallyUniqueI | 
| 7260 |  64 40 34 00 5f 5a 77 41 6c 65 72 74 54 68 72 65    61 64 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 41 6c  | d@4._ZwAlertThread@4.__imp__ZwAl | 
| 7280 |  65 72 74 54 68 72 65 61 64 40 34 00 5f 5a 77 41    6c 65 72 74 52 65 73 75 6d 65 54 68 72 65 61 64  | ertThread@4._ZwAlertResumeThread | 
| 72a0 |  40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 41 6c 65 72    74 52 65 73 75 6d 65 54 68 72 65 61 64 40 38 00  | @8.__imp__ZwAlertResumeThread@8. | 
| 72c0 |  5f 5a 77 41 64 6a 75 73 74 50 72 69 76 69 6c 65    67 65 73 54 6f 6b 65 6e 40 32 34 00 5f 5f 69 6d  | _ZwAdjustPrivilegesToken@24.__im | 
| 72e0 |  70 5f 5f 5a 77 41 64 6a 75 73 74 50 72 69 76 69    6c 65 67 65 73 54 6f 6b 65 6e 40 32 34 00 5f 5a  | p__ZwAdjustPrivilegesToken@24._Z | 
| 7300 |  77 41 64 6a 75 73 74 47 72 6f 75 70 73 54 6f 6b    65 6e 40 32 34 00 5f 5f 69 6d 70 5f 5f 5a 77 41  | wAdjustGroupsToken@24.__imp__ZwA | 
| 7320 |  64 6a 75 73 74 47 72 6f 75 70 73 54 6f 6b 65 6e    40 32 34 00 5f 5a 77 41 64 64 44 72 69 76 65 72  | djustGroupsToken@24._ZwAddDriver | 
| 7340 |  45 6e 74 72 79 40 38 00 5f 5f 69 6d 70 5f 5f 5a    77 41 64 64 44 72 69 76 65 72 45 6e 74 72 79 40  | Entry@8.__imp__ZwAddDriverEntry@ | 
| 7360 |  38 00 5f 5a 77 41 64 64 42 6f 6f 74 45 6e 74 72    79 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 41 64 64  | 8._ZwAddBootEntry@8.__imp__ZwAdd | 
| 7380 |  42 6f 6f 74 45 6e 74 72 79 40 38 00 5f 5a 77 41    64 64 41 74 6f 6d 40 31 32 00 5f 5f 69 6d 70 5f  | BootEntry@8._ZwAddAtom@12.__imp_ | 
| 73a0 |  5f 5a 77 41 64 64 41 74 6f 6d 40 31 32 00 5f 5a    77 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79  | _ZwAddAtom@12._ZwAccessCheckByTy | 
| 73c0 |  70 65 52 65 73 75 6c 74 4c 69 73 74 41 6e 64 41    75 64 69 74 41 6c 61 72 6d 42 79 48 61 6e 64 6c  | peResultListAndAuditAlarmByHandl | 
| 73e0 |  65 40 36 38 00 5f 5f 69 6d 70 5f 5f 5a 77 41 63    63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52  | e@68.__imp__ZwAccessCheckByTypeR | 
| 7400 |  65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69    74 41 6c 61 72 6d 42 79 48 61 6e 64 6c 65 40 36  | esultListAndAuditAlarmByHandle@6 | 
| 7420 |  38 00 5f 5a 77 41 63 63 65 73 73 43 68 65 63 6b    42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74  | 8._ZwAccessCheckByTypeResultList | 
| 7440 |  41 6e 64 41 75 64 69 74 41 6c 61 72 6d 40 36 34    00 5f 5f 69 6d 70 5f 5f 5a 77 41 63 63 65 73 73  | AndAuditAlarm@64.__imp__ZwAccess | 
| 7460 |  43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c    74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c 61  | CheckByTypeResultListAndAuditAla | 
| 7480 |  72 6d 40 36 34 00 5f 5a 77 41 63 63 65 73 73 43    68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74  | rm@64._ZwAccessCheckByTypeResult | 
| 74a0 |  4c 69 73 74 40 34 34 00 5f 5f 69 6d 70 5f 5f 5a    77 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79  | List@44.__imp__ZwAccessCheckByTy | 
| 74c0 |  70 65 52 65 73 75 6c 74 4c 69 73 74 40 34 34 00    5f 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 79  | peResultList@44._ZwAccessCheckBy | 
| 74e0 |  54 79 70 65 41 6e 64 41 75 64 69 74 41 6c 61 72    6d 40 36 34 00 5f 5f 69 6d 70 5f 5f 5a 77 41 63  | TypeAndAuditAlarm@64.__imp__ZwAc | 
| 7500 |  63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 41    6e 64 41 75 64 69 74 41 6c 61 72 6d 40 36 34 00  | cessCheckByTypeAndAuditAlarm@64. | 
| 7520 |  5f 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 79    54 79 70 65 40 34 34 00 5f 5f 69 6d 70 5f 5f 5a  | _ZwAccessCheckByType@44.__imp__Z | 
| 7540 |  77 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79    70 65 40 34 34 00 5f 5a 77 41 63 63 65 73 73 43  | wAccessCheckByType@44._ZwAccessC | 
| 7560 |  68 65 63 6b 41 6e 64 41 75 64 69 74 41 6c 61 72    6d 40 34 34 00 5f 5f 69 6d 70 5f 5f 5a 77 41 63  | heckAndAuditAlarm@44.__imp__ZwAc | 
| 7580 |  63 65 73 73 43 68 65 63 6b 41 6e 64 41 75 64 69    74 41 6c 61 72 6d 40 34 34 00 5f 5a 77 41 63 63  | cessCheckAndAuditAlarm@44._ZwAcc | 
| 75a0 |  65 73 73 43 68 65 63 6b 40 33 32 00 5f 5f 69 6d    70 5f 5f 5a 77 41 63 63 65 73 73 43 68 65 63 6b  | essCheck@32.__imp__ZwAccessCheck | 
| 75c0 |  40 33 32 00 5f 5a 77 41 63 63 65 70 74 43 6f 6e    6e 65 63 74 50 6f 72 74 40 32 34 00 5f 5f 69 6d  | @32._ZwAcceptConnectPort@24.__im | 
| 75e0 |  70 5f 5f 5a 77 41 63 63 65 70 74 43 6f 6e 6e 65    63 74 50 6f 72 74 40 32 34 00 5f 56 65 72 53 65  | p__ZwAcceptConnectPort@24._VerSe | 
| 7600 |  74 43 6f 6e 64 69 74 69 6f 6e 4d 61 73 6b 40 31    36 00 5f 5f 69 6d 70 5f 5f 56 65 72 53 65 74 43  | tConditionMask@16.__imp__VerSetC | 
| 7620 |  6f 6e 64 69 74 69 6f 6e 4d 61 73 6b 40 31 36 00    5f 52 74 6c 78 55 6e 69 63 6f 64 65 53 74 72 69  | onditionMask@16._RtlxUnicodeStri | 
| 7640 |  6e 67 54 6f 4f 65 6d 53 69 7a 65 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 78 55 6e 69 63 6f 64 65  | ngToOemSize@4.__imp__RtlxUnicode | 
| 7660 |  53 74 72 69 6e 67 54 6f 4f 65 6d 53 69 7a 65 40    34 00 5f 52 74 6c 78 55 6e 69 63 6f 64 65 53 74  | StringToOemSize@4._RtlxUnicodeSt | 
| 7680 |  72 69 6e 67 54 6f 41 6e 73 69 53 69 7a 65 40 34    00 5f 5f 69 6d 70 5f 5f 52 74 6c 78 55 6e 69 63  | ringToAnsiSize@4.__imp__RtlxUnic | 
| 76a0 |  6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53    69 7a 65 40 34 00 5f 52 74 6c 78 4f 65 6d 53 74  | odeStringToAnsiSize@4._RtlxOemSt | 
| 76c0 |  72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 69 7a    65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 78 4f  | ringToUnicodeSize@4.__imp__RtlxO | 
| 76e0 |  65 6d 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64    65 53 69 7a 65 40 34 00 5f 52 74 6c 78 41 6e 73  | emStringToUnicodeSize@4._RtlxAns | 
| 7700 |  69 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65    53 69 7a 65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | iStringToUnicodeSize@4.__imp__Rt | 
| 7720 |  6c 78 41 6e 73 69 53 74 72 69 6e 67 54 6f 55 6e    69 63 6f 64 65 53 69 7a 65 40 34 00 5f 52 74 6c  | lxAnsiStringToUnicodeSize@4._Rtl | 
| 7740 |  70 57 61 69 74 46 6f 72 43 72 69 74 69 63 61 6c    53 65 63 74 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f  | pWaitForCriticalSection@4.__imp_ | 
| 7760 |  5f 52 74 6c 70 57 61 69 74 46 6f 72 43 72 69 74    69 63 61 6c 53 65 63 74 69 6f 6e 40 34 00 5f 52  | _RtlpWaitForCriticalSection@4._R | 
| 7780 |  74 6c 70 55 6e 57 61 69 74 43 72 69 74 69 63 61    6c 53 65 63 74 69 6f 6e 40 34 00 5f 5f 69 6d 70  | tlpUnWaitCriticalSection@4.__imp | 
| 77a0 |  5f 5f 52 74 6c 70 55 6e 57 61 69 74 43 72 69 74    69 63 61 6c 53 65 63 74 69 6f 6e 40 34 00 5f 52  | __RtlpUnWaitCriticalSection@4._R | 
| 77c0 |  74 6c 70 4e 74 53 65 74 56 61 6c 75 65 4b 65 79    40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 70 4e  | tlpNtSetValueKey@16.__imp__RtlpN | 
| 77e0 |  74 53 65 74 56 61 6c 75 65 4b 65 79 40 31 36 00    5f 52 74 6c 70 4e 74 51 75 65 72 79 56 61 6c 75  | tSetValueKey@16._RtlpNtQueryValu | 
| 7800 |  65 4b 65 79 40 32 30 00 5f 5f 69 6d 70 5f 5f 52    74 6c 70 4e 74 51 75 65 72 79 56 61 6c 75 65 4b  | eKey@20.__imp__RtlpNtQueryValueK | 
| 7820 |  65 79 40 32 30 00 5f 52 74 6c 70 4e 74 4f 70 65    6e 4b 65 79 40 31 36 00 5f 5f 69 6d 70 5f 5f 52  | ey@20._RtlpNtOpenKey@16.__imp__R | 
| 7840 |  74 6c 70 4e 74 4f 70 65 6e 4b 65 79 40 31 36 00    5f 52 74 6c 70 4e 74 4d 61 6b 65 54 65 6d 70 6f  | tlpNtOpenKey@16._RtlpNtMakeTempo | 
| 7860 |  72 61 72 79 4b 65 79 40 34 00 5f 5f 69 6d 70 5f    5f 52 74 6c 70 4e 74 4d 61 6b 65 54 65 6d 70 6f  | raryKey@4.__imp__RtlpNtMakeTempo | 
| 7880 |  72 61 72 79 4b 65 79 40 34 00 5f 52 74 6c 70 4e    74 45 6e 75 6d 65 72 61 74 65 53 75 62 4b 65 79  | raryKey@4._RtlpNtEnumerateSubKey | 
| 78a0 |  40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 70 4e    74 45 6e 75 6d 65 72 61 74 65 53 75 62 4b 65 79  | @16.__imp__RtlpNtEnumerateSubKey | 
| 78c0 |  40 31 36 00 5f 52 74 6c 70 4e 74 43 72 65 61 74    65 4b 65 79 40 32 34 00 5f 5f 69 6d 70 5f 5f 52  | @16._RtlpNtCreateKey@24.__imp__R | 
| 78e0 |  74 6c 70 4e 74 43 72 65 61 74 65 4b 65 79 40 32    34 00 5f 52 74 6c 70 4e 6f 74 4f 77 6e 65 72 43  | tlpNtCreateKey@24._RtlpNotOwnerC | 
| 7900 |  72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 40 34    00 5f 5f 69 6d 70 5f 5f 52 74 6c 70 4e 6f 74 4f  | riticalSection@4.__imp__RtlpNotO | 
| 7920 |  77 6e 65 72 43 72 69 74 69 63 61 6c 53 65 63 74    69 6f 6e 40 34 00 5f 52 74 6c 70 45 6e 73 75 72  | wnerCriticalSection@4._RtlpEnsur | 
| 7940 |  65 42 75 66 66 65 72 53 69 7a 65 40 31 32 00 5f    5f 69 6d 70 5f 5f 52 74 6c 70 45 6e 73 75 72 65  | eBufferSize@12.__imp__RtlpEnsure | 
| 7960 |  42 75 66 66 65 72 53 69 7a 65 40 31 32 00 5f 52    74 6c 70 41 70 70 6c 79 4c 65 6e 67 74 68 46 75  | BufferSize@12._RtlpApplyLengthFu | 
| 7980 |  6e 63 74 69 6f 6e 40 31 36 00 5f 5f 69 6d 70 5f    5f 52 74 6c 70 41 70 70 6c 79 4c 65 6e 67 74 68  | nction@16.__imp__RtlpApplyLength | 
| 79a0 |  46 75 6e 63 74 69 6f 6e 40 31 36 00 5f 52 74 6c    5a 6f 6d 62 69 66 79 41 63 74 69 76 61 74 69 6f  | Function@16._RtlZombifyActivatio | 
| 79c0 |  6e 43 6f 6e 74 65 78 74 40 34 00 5f 5f 69 6d 70    5f 5f 52 74 6c 5a 6f 6d 62 69 66 79 41 63 74 69  | nContext@4.__imp__RtlZombifyActi | 
| 79e0 |  76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 40 34 00    5f 52 74 6c 5a 65 72 6f 4d 65 6d 6f 72 79 40 38  | vationContext@4._RtlZeroMemory@8 | 
| 7a00 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 5a 65 72 6f 4d    65 6d 6f 72 79 40 38 00 5f 52 74 6c 5a 65 72 6f  | .__imp__RtlZeroMemory@8._RtlZero | 
| 7a20 |  48 65 61 70 40 38 00 5f 5f 69 6d 70 5f 5f 52 74    6c 5a 65 72 6f 48 65 61 70 40 38 00 5f 52 74 6c  | Heap@8.__imp__RtlZeroHeap@8._Rtl | 
| 7a40 |  57 72 69 74 65 52 65 67 69 73 74 72 79 56 61 6c    75 65 40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | WriteRegistryValue@24.__imp__Rtl | 
| 7a60 |  57 72 69 74 65 52 65 67 69 73 74 72 79 56 61 6c    75 65 40 32 34 00 5f 52 74 6c 57 72 69 74 65 4d  | WriteRegistryValue@24._RtlWriteM | 
| 7a80 |  65 6d 6f 72 79 53 74 72 65 61 6d 40 31 36 00 5f    5f 69 6d 70 5f 5f 52 74 6c 57 72 69 74 65 4d 65  | emoryStream@16.__imp__RtlWriteMe | 
| 7aa0 |  6d 6f 72 79 53 74 72 65 61 6d 40 31 36 00 5f 52    74 6c 57 6f 77 36 34 45 6e 61 62 6c 65 46 73 52  | moryStream@16._RtlWow64EnableFsR | 
| 7ac0 |  65 64 69 72 65 63 74 69 6f 6e 45 78 40 38 00 5f    5f 69 6d 70 5f 5f 52 74 6c 57 6f 77 36 34 45 6e  | edirectionEx@8.__imp__RtlWow64En | 
| 7ae0 |  61 62 6c 65 46 73 52 65 64 69 72 65 63 74 69 6f    6e 45 78 40 38 00 5f 52 74 6c 57 6f 77 36 34 45  | ableFsRedirectionEx@8._RtlWow64E | 
| 7b00 |  6e 61 62 6c 65 46 73 52 65 64 69 72 65 63 74 69    6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 57  | nableFsRedirection@4.__imp__RtlW | 
| 7b20 |  6f 77 36 34 45 6e 61 62 6c 65 46 73 52 65 64 69    72 65 63 74 69 6f 6e 40 34 00 5f 52 74 6c 57 61  | ow64EnableFsRedirection@4._RtlWa | 
| 7b40 |  6c 6b 48 65 61 70 40 38 00 5f 5f 69 6d 70 5f 5f    52 74 6c 57 61 6c 6b 48 65 61 70 40 38 00 5f 52  | lkHeap@8.__imp__RtlWalkHeap@8._R | 
| 7b60 |  74 6c 57 61 6c 6b 46 72 61 6d 65 43 68 61 69 6e    40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 57 61  | tlWalkFrameChain@12.__imp__RtlWa | 
| 7b80 |  6c 6b 46 72 61 6d 65 43 68 61 69 6e 40 31 32 00    5f 52 74 6c 56 65 72 69 66 79 56 65 72 73 69 6f  | lkFrameChain@12._RtlVerifyVersio | 
| 7ba0 |  6e 49 6e 66 6f 40 31 36 00 5f 5f 69 6d 70 5f 5f    52 74 6c 56 65 72 69 66 79 56 65 72 73 69 6f 6e  | nInfo@16.__imp__RtlVerifyVersion | 
| 7bc0 |  49 6e 66 6f 40 31 36 00 5f 52 74 6c 56 61 6c 69    64 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e  | Info@16._RtlValidateUnicodeStrin | 
| 7be0 |  67 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 56 61    6c 69 64 61 74 65 55 6e 69 63 6f 64 65 53 74 72  | g@8.__imp__RtlValidateUnicodeStr | 
| 7c00 |  69 6e 67 40 38 00 5f 52 74 6c 56 61 6c 69 64 61    74 65 50 72 6f 63 65 73 73 48 65 61 70 73 40 30  | ing@8._RtlValidateProcessHeaps@0 | 
| 7c20 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 56 61 6c 69 64    61 74 65 50 72 6f 63 65 73 73 48 65 61 70 73 40  | .__imp__RtlValidateProcessHeaps@ | 
| 7c40 |  30 00 5f 52 74 6c 56 61 6c 69 64 61 74 65 48 65    61 70 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | 0._RtlValidateHeap@12.__imp__Rtl | 
| 7c60 |  56 61 6c 69 64 61 74 65 48 65 61 70 40 31 32 00    5f 52 74 6c 56 61 6c 69 64 53 69 64 40 34 00 5f  | ValidateHeap@12._RtlValidSid@4._ | 
| 7c80 |  5f 69 6d 70 5f 5f 52 74 6c 56 61 6c 69 64 53 69    64 40 34 00 5f 52 74 6c 56 61 6c 69 64 53 65 63  | _imp__RtlValidSid@4._RtlValidSec | 
| 7ca0 |  75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 40    34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 56 61 6c 69  | urityDescriptor@4.__imp__RtlVali | 
| 7cc0 |  64 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70    74 6f 72 40 34 00 5f 52 74 6c 56 61 6c 69 64 52  | dSecurityDescriptor@4._RtlValidR | 
| 7ce0 |  65 6c 61 74 69 76 65 53 65 63 75 72 69 74 79 44    65 73 63 72 69 70 74 6f 72 40 31 32 00 5f 5f 69  | elativeSecurityDescriptor@12.__i | 
| 7d00 |  6d 70 5f 5f 52 74 6c 56 61 6c 69 64 52 65 6c 61    74 69 76 65 53 65 63 75 72 69 74 79 44 65 73 63  | mp__RtlValidRelativeSecurityDesc | 
| 7d20 |  72 69 70 74 6f 72 40 31 32 00 5f 52 74 6c 56 61    6c 69 64 41 63 6c 40 34 00 5f 5f 69 6d 70 5f 5f  | riptor@12._RtlValidAcl@4.__imp__ | 
| 7d40 |  52 74 6c 56 61 6c 69 64 41 63 6c 40 34 00 5f 52    74 6c 55 73 61 67 65 48 65 61 70 40 31 32 00 5f  | RtlValidAcl@4._RtlUsageHeap@12._ | 
| 7d60 |  5f 69 6d 70 5f 5f 52 74 6c 55 73 61 67 65 48 65    61 70 40 31 32 00 5f 52 74 6c 55 70 70 65 72 53  | _imp__RtlUsageHeap@12._RtlUpperS | 
| 7d80 |  74 72 69 6e 67 40 38 00 5f 5f 69 6d 70 5f 5f 52    74 6c 55 70 70 65 72 53 74 72 69 6e 67 40 38 00  | tring@8.__imp__RtlUpperString@8. | 
| 7da0 |  5f 52 74 6c 55 70 70 65 72 43 68 61 72 40 34 00    5f 5f 69 6d 70 5f 5f 52 74 6c 55 70 70 65 72 43  | _RtlUpperChar@4.__imp__RtlUpperC | 
| 7dc0 |  68 61 72 40 34 00 5f 52 74 6c 55 70 64 61 74 65    54 69 6d 65 72 40 31 36 00 5f 5f 69 6d 70 5f 5f  | har@4._RtlUpdateTimer@16.__imp__ | 
| 7de0 |  52 74 6c 55 70 64 61 74 65 54 69 6d 65 72 40 31    36 00 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63  | RtlUpdateTimer@16._RtlUpcaseUnic | 
| 7e00 |  6f 64 65 54 6f 4f 65 6d 4e 40 32 30 00 5f 5f 69    6d 70 5f 5f 52 74 6c 55 70 63 61 73 65 55 6e 69  | odeToOemN@20.__imp__RtlUpcaseUni | 
| 7e20 |  63 6f 64 65 54 6f 4f 65 6d 4e 40 32 30 00 5f 52    74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 54  | codeToOemN@20._RtlUpcaseUnicodeT | 
| 7e40 |  6f 4d 75 6c 74 69 42 79 74 65 4e 40 32 30 00 5f    5f 69 6d 70 5f 5f 52 74 6c 55 70 63 61 73 65 55  | oMultiByteN@20.__imp__RtlUpcaseU | 
| 7e60 |  6e 69 63 6f 64 65 54 6f 4d 75 6c 74 69 42 79 74    65 4e 40 32 30 00 5f 52 74 6c 55 70 63 61 73 65  | nicodeToMultiByteN@20._RtlUpcase | 
| 7e80 |  55 6e 69 63 6f 64 65 54 6f 43 75 73 74 6f 6d 43    50 4e 40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | UnicodeToCustomCPN@24.__imp__Rtl | 
| 7ea0 |  55 70 63 61 73 65 55 6e 69 63 6f 64 65 54 6f 43    75 73 74 6f 6d 43 50 4e 40 32 34 00 5f 52 74 6c  | UpcaseUnicodeToCustomCPN@24._Rtl | 
| 7ec0 |  55 70 63 61 73 65 55 6e 69 63 6f 64 65 53 74 72    69 6e 67 54 6f 4f 65 6d 53 74 72 69 6e 67 40 31  | UpcaseUnicodeStringToOemString@1 | 
| 7ee0 |  32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 55 70 63 61    73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54  | 2.__imp__RtlUpcaseUnicodeStringT | 
| 7f00 |  6f 4f 65 6d 53 74 72 69 6e 67 40 31 32 00 5f 52    74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 53  | oOemString@12._RtlUpcaseUnicodeS | 
| 7f20 |  74 72 69 6e 67 54 6f 43 6f 75 6e 74 65 64 4f 65    6d 53 74 72 69 6e 67 40 31 32 00 5f 5f 69 6d 70  | tringToCountedOemString@12.__imp | 
| 7f40 |  5f 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f    64 65 53 74 72 69 6e 67 54 6f 43 6f 75 6e 74 65  | __RtlUpcaseUnicodeStringToCounte | 
| 7f60 |  64 4f 65 6d 53 74 72 69 6e 67 40 31 32 00 5f 52    74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 53  | dOemString@12._RtlUpcaseUnicodeS | 
| 7f80 |  74 72 69 6e 67 54 6f 41 6e 73 69 53 74 72 69 6e    67 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 55  | tringToAnsiString@12.__imp__RtlU | 
| 7fa0 |  70 63 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69    6e 67 54 6f 41 6e 73 69 53 74 72 69 6e 67 40 31  | pcaseUnicodeStringToAnsiString@1 | 
| 7fc0 |  32 00 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63    6f 64 65 53 74 72 69 6e 67 40 31 32 00 5f 5f 69  | 2._RtlUpcaseUnicodeString@12.__i | 
| 7fe0 |  6d 70 5f 5f 52 74 6c 55 70 63 61 73 65 55 6e 69    63 6f 64 65 53 74 72 69 6e 67 40 31 32 00 5f 52  | mp__RtlUpcaseUnicodeString@12._R | 
| 8000 |  74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 43    68 61 72 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | tlUpcaseUnicodeChar@4.__imp__Rtl | 
| 8020 |  55 70 63 61 73 65 55 6e 69 63 6f 64 65 43 68 61    72 40 34 00 5f 52 74 6c 55 6e 77 69 6e 64 40 31  | UpcaseUnicodeChar@4._RtlUnwind@1 | 
| 8040 |  36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 55 6e 77 69    6e 64 40 31 36 00 5f 52 74 6c 55 6e 6c 6f 63 6b  | 6.__imp__RtlUnwind@16._RtlUnlock | 
| 8060 |  4d 65 6d 6f 72 79 53 74 72 65 61 6d 52 65 67 69    6f 6e 40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | MemoryStreamRegion@24.__imp__Rtl | 
| 8080 |  55 6e 6c 6f 63 6b 4d 65 6d 6f 72 79 53 74 72 65    61 6d 52 65 67 69 6f 6e 40 32 34 00 5f 52 74 6c  | UnlockMemoryStreamRegion@24._Rtl | 
| 80a0 |  55 6e 6c 6f 63 6b 48 65 61 70 40 34 00 5f 5f 69    6d 70 5f 5f 52 74 6c 55 6e 6c 6f 63 6b 48 65 61  | UnlockHeap@4.__imp__RtlUnlockHea | 
| 80c0 |  70 40 34 00 5f 52 74 6c 55 6e 6c 6f 63 6b 42 6f    6f 74 53 74 61 74 75 73 44 61 74 61 40 34 00 5f  | p@4._RtlUnlockBootStatusData@4._ | 
| 80e0 |  5f 69 6d 70 5f 5f 52 74 6c 55 6e 6c 6f 63 6b 42    6f 6f 74 53 74 61 74 75 73 44 61 74 61 40 34 00  | _imp__RtlUnlockBootStatusData@4. | 
| 8100 |  5f 52 74 6c 55 6e 69 66 6f 72 6d 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 55 6e 69 66 6f 72 6d 40  | _RtlUniform@4.__imp__RtlUniform@ | 
| 8120 |  34 00 5f 52 74 6c 55 6e 69 63 6f 64 65 54 6f 4f    65 6d 4e 40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74  | 4._RtlUnicodeToOemN@20.__imp__Rt | 
| 8140 |  6c 55 6e 69 63 6f 64 65 54 6f 4f 65 6d 4e 40 32    30 00 5f 52 74 6c 55 6e 69 63 6f 64 65 54 6f 4d  | lUnicodeToOemN@20._RtlUnicodeToM | 
| 8160 |  75 6c 74 69 42 79 74 65 53 69 7a 65 40 31 32 00    5f 5f 69 6d 70 5f 5f 52 74 6c 55 6e 69 63 6f 64  | ultiByteSize@12.__imp__RtlUnicod | 
| 8180 |  65 54 6f 4d 75 6c 74 69 42 79 74 65 53 69 7a 65    40 31 32 00 5f 52 74 6c 55 6e 69 63 6f 64 65 54  | eToMultiByteSize@12._RtlUnicodeT | 
| 81a0 |  6f 4d 75 6c 74 69 42 79 74 65 4e 40 32 30 00 5f    5f 69 6d 70 5f 5f 52 74 6c 55 6e 69 63 6f 64 65  | oMultiByteN@20.__imp__RtlUnicode | 
| 81c0 |  54 6f 4d 75 6c 74 69 42 79 74 65 4e 40 32 30 00    5f 52 74 6c 55 6e 69 63 6f 64 65 54 6f 43 75 73  | ToMultiByteN@20._RtlUnicodeToCus | 
| 81e0 |  74 6f 6d 43 50 4e 40 32 34 00 5f 5f 69 6d 70 5f    5f 52 74 6c 55 6e 69 63 6f 64 65 54 6f 43 75 73  | tomCPN@24.__imp__RtlUnicodeToCus | 
| 8200 |  74 6f 6d 43 50 4e 40 32 34 00 5f 52 74 6c 55 6e    69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d  | tomCPN@24._RtlUnicodeStringToOem | 
| 8220 |  53 74 72 69 6e 67 40 31 32 00 5f 5f 69 6d 70 5f    5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e  | String@12.__imp__RtlUnicodeStrin | 
| 8240 |  67 54 6f 4f 65 6d 53 74 72 69 6e 67 40 31 32 00    5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e  | gToOemString@12._RtlUnicodeStrin | 
| 8260 |  67 54 6f 4f 65 6d 53 69 7a 65 40 34 00 5f 5f 69    6d 70 5f 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74  | gToOemSize@4.__imp__RtlUnicodeSt | 
| 8280 |  72 69 6e 67 54 6f 4f 65 6d 53 69 7a 65 40 34 00    5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e  | ringToOemSize@4._RtlUnicodeStrin | 
| 82a0 |  67 54 6f 49 6e 74 65 67 65 72 40 31 32 00 5f 5f    69 6d 70 5f 5f 52 74 6c 55 6e 69 63 6f 64 65 53  | gToInteger@12.__imp__RtlUnicodeS | 
| 82c0 |  74 72 69 6e 67 54 6f 49 6e 74 65 67 65 72 40 31    32 00 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72  | tringToInteger@12._RtlUnicodeStr | 
| 82e0 |  69 6e 67 54 6f 43 6f 75 6e 74 65 64 4f 65 6d 53    74 72 69 6e 67 40 31 32 00 5f 5f 69 6d 70 5f 5f  | ingToCountedOemString@12.__imp__ | 
| 8300 |  52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67    54 6f 43 6f 75 6e 74 65 64 4f 65 6d 53 74 72 69  | RtlUnicodeStringToCountedOemStri | 
| 8320 |  6e 67 40 31 32 00 5f 52 74 6c 55 6e 69 63 6f 64    65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 74 72  | ng@12._RtlUnicodeStringToAnsiStr | 
| 8340 |  69 6e 67 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74    6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f  | ing@12.__imp__RtlUnicodeStringTo | 
| 8360 |  41 6e 73 69 53 74 72 69 6e 67 40 31 32 00 5f 52    74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54  | AnsiString@12._RtlUnicodeStringT | 
| 8380 |  6f 41 6e 73 69 53 69 7a 65 40 34 00 5f 5f 69 6d    70 5f 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72  | oAnsiSize@4.__imp__RtlUnicodeStr | 
| 83a0 |  69 6e 67 54 6f 41 6e 73 69 53 69 7a 65 40 34 00    5f 52 74 6c 55 6e 68 61 6e 64 6c 65 64 45 78 63  | ingToAnsiSize@4._RtlUnhandledExc | 
| 83c0 |  65 70 74 69 6f 6e 46 69 6c 74 65 72 40 34 00 5f    5f 69 6d 70 5f 5f 52 74 6c 55 6e 68 61 6e 64 6c  | eptionFilter@4.__imp__RtlUnhandl | 
| 83e0 |  65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65    72 40 34 00 5f 52 74 6c 55 6e 68 61 6e 64 6c 65  | edExceptionFilter@4._RtlUnhandle | 
| 8400 |  64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65 72    32 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 55 6e  | dExceptionFilter2@8.__imp__RtlUn | 
| 8420 |  68 61 6e 64 6c 65 64 45 78 63 65 70 74 69 6f 6e    46 69 6c 74 65 72 32 40 38 00 5f 52 74 6c 54 72  | handledExceptionFilter2@8._RtlTr | 
| 8440 |  79 45 6e 74 65 72 43 72 69 74 69 63 61 6c 53 65    63 74 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f 52  | yEnterCriticalSection@4.__imp__R | 
| 8460 |  74 6c 54 72 79 45 6e 74 65 72 43 72 69 74 69 63    61 6c 53 65 63 74 69 6f 6e 40 34 00 5f 52 74 6c  | tlTryEnterCriticalSection@4._Rtl | 
| 8480 |  54 72 61 63 65 44 61 74 61 62 61 73 65 56 61 6c    69 64 61 74 65 40 34 00 5f 5f 69 6d 70 5f 5f 52  | TraceDatabaseValidate@4.__imp__R | 
| 84a0 |  74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 56    61 6c 69 64 61 74 65 40 34 00 5f 52 74 6c 54 72  | tlTraceDatabaseValidate@4._RtlTr | 
| 84c0 |  61 63 65 44 61 74 61 62 61 73 65 55 6e 6c 6f 63    6b 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 54 72  | aceDatabaseUnlock@4.__imp__RtlTr | 
| 84e0 |  61 63 65 44 61 74 61 62 61 73 65 55 6e 6c 6f 63    6b 40 34 00 5f 52 74 6c 54 72 61 63 65 44 61 74  | aceDatabaseUnlock@4._RtlTraceDat | 
| 8500 |  61 62 61 73 65 4c 6f 63 6b 40 34 00 5f 5f 69 6d    70 5f 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62  | abaseLock@4.__imp__RtlTraceDatab | 
| 8520 |  61 73 65 4c 6f 63 6b 40 34 00 5f 52 74 6c 54 72    61 63 65 44 61 74 61 62 61 73 65 46 69 6e 64 40  | aseLock@4._RtlTraceDatabaseFind@ | 
| 8540 |  31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 54 72 61    63 65 44 61 74 61 62 61 73 65 46 69 6e 64 40 31  | 16.__imp__RtlTraceDatabaseFind@1 | 
| 8560 |  36 00 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62    61 73 65 45 6e 75 6d 65 72 61 74 65 40 31 32 00  | 6._RtlTraceDatabaseEnumerate@12. | 
| 8580 |  5f 5f 69 6d 70 5f 5f 52 74 6c 54 72 61 63 65 44    61 74 61 62 61 73 65 45 6e 75 6d 65 72 61 74 65  | __imp__RtlTraceDatabaseEnumerate | 
| 85a0 |  40 31 32 00 5f 52 74 6c 54 72 61 63 65 44 61 74    61 62 61 73 65 44 65 73 74 72 6f 79 40 34 00 5f  | @12._RtlTraceDatabaseDestroy@4._ | 
| 85c0 |  5f 69 6d 70 5f 5f 52 74 6c 54 72 61 63 65 44 61    74 61 62 61 73 65 44 65 73 74 72 6f 79 40 34 00  | _imp__RtlTraceDatabaseDestroy@4. | 
| 85e0 |  5f 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73    65 43 72 65 61 74 65 40 32 30 00 5f 5f 69 6d 70  | _RtlTraceDatabaseCreate@20.__imp | 
| 8600 |  5f 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62 61    73 65 43 72 65 61 74 65 40 32 30 00 5f 52 74 6c  | __RtlTraceDatabaseCreate@20._Rtl | 
| 8620 |  54 72 61 63 65 44 61 74 61 62 61 73 65 41 64 64    40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 54 72  | TraceDatabaseAdd@16.__imp__RtlTr | 
| 8640 |  61 63 65 44 61 74 61 62 61 73 65 41 64 64 40 31    36 00 5f 52 74 6c 54 69 6d 65 54 6f 54 69 6d 65  | aceDatabaseAdd@16._RtlTimeToTime | 
| 8660 |  46 69 65 6c 64 73 40 38 00 5f 5f 69 6d 70 5f 5f    52 74 6c 54 69 6d 65 54 6f 54 69 6d 65 46 69 65  | Fields@8.__imp__RtlTimeToTimeFie | 
| 8680 |  6c 64 73 40 38 00 5f 52 74 6c 54 69 6d 65 54 6f    53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 38 30  | lds@8._RtlTimeToSecondsSince1980 | 
| 86a0 |  40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 54 69 6d    65 54 6f 53 65 63 6f 6e 64 73 53 69 6e 63 65 31  | @8.__imp__RtlTimeToSecondsSince1 | 
| 86c0 |  39 38 30 40 38 00 5f 52 74 6c 54 69 6d 65 54 6f    53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 37 30  | 980@8._RtlTimeToSecondsSince1970 | 
| 86e0 |  40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 54 69 6d    65 54 6f 53 65 63 6f 6e 64 73 53 69 6e 63 65 31  | @8.__imp__RtlTimeToSecondsSince1 | 
| 8700 |  39 37 30 40 38 00 5f 52 74 6c 54 69 6d 65 54 6f    45 6c 61 70 73 65 64 54 69 6d 65 46 69 65 6c 64  | 970@8._RtlTimeToElapsedTimeField | 
| 8720 |  73 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 54 69    6d 65 54 6f 45 6c 61 70 73 65 64 54 69 6d 65 46  | s@8.__imp__RtlTimeToElapsedTimeF | 
| 8740 |  69 65 6c 64 73 40 38 00 5f 52 74 6c 54 69 6d 65    46 69 65 6c 64 73 54 6f 54 69 6d 65 40 38 00 5f  | ields@8._RtlTimeFieldsToTime@8._ | 
| 8760 |  5f 69 6d 70 5f 5f 52 74 6c 54 69 6d 65 46 69 65    6c 64 73 54 6f 54 69 6d 65 40 38 00 5f 52 74 6c  | _imp__RtlTimeFieldsToTime@8._Rtl | 
| 8780 |  53 79 73 74 65 6d 54 69 6d 65 54 6f 4c 6f 63 61    6c 54 69 6d 65 40 38 00 5f 5f 69 6d 70 5f 5f 52  | SystemTimeToLocalTime@8.__imp__R | 
| 87a0 |  74 6c 53 79 73 74 65 6d 54 69 6d 65 54 6f 4c 6f    63 61 6c 54 69 6d 65 40 38 00 5f 52 74 6c 53 75  | tlSystemTimeToLocalTime@8._RtlSu | 
| 87c0 |  62 74 72 65 65 53 75 63 63 65 73 73 6f 72 40 34    00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 75 62 74 72  | btreeSuccessor@4.__imp__RtlSubtr | 
| 87e0 |  65 65 53 75 63 63 65 73 73 6f 72 40 34 00 5f 52    74 6c 53 75 62 74 72 65 65 50 72 65 64 65 63 65  | eeSuccessor@4._RtlSubtreePredece | 
| 8800 |  73 73 6f 72 40 34 00 5f 5f 69 6d 70 5f 5f 52 74    6c 53 75 62 74 72 65 65 50 72 65 64 65 63 65 73  | ssor@4.__imp__RtlSubtreePredeces | 
| 8820 |  73 6f 72 40 34 00 5f 52 74 6c 53 75 62 41 75 74    68 6f 72 69 74 79 53 69 64 40 38 00 5f 5f 69 6d  | sor@4._RtlSubAuthoritySid@8.__im | 
| 8840 |  70 5f 5f 52 74 6c 53 75 62 41 75 74 68 6f 72 69    74 79 53 69 64 40 38 00 5f 52 74 6c 53 75 62 41  | p__RtlSubAuthoritySid@8._RtlSubA | 
| 8860 |  75 74 68 6f 72 69 74 79 43 6f 75 6e 74 53 69 64    40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 75 62  | uthorityCountSid@4.__imp__RtlSub | 
| 8880 |  41 75 74 68 6f 72 69 74 79 43 6f 75 6e 74 53 69    64 40 34 00 5f 52 74 6c 53 74 72 69 6e 67 46 72  | AuthorityCountSid@4._RtlStringFr | 
| 88a0 |  6f 6d 47 55 49 44 40 38 00 5f 5f 69 6d 70 5f 5f    52 74 6c 53 74 72 69 6e 67 46 72 6f 6d 47 55 49  | omGUID@8.__imp__RtlStringFromGUI | 
| 88c0 |  44 40 38 00 5f 52 74 6c 53 74 61 74 4d 65 6d 6f    72 79 53 74 72 65 61 6d 40 31 32 00 5f 5f 69 6d  | D@8._RtlStatMemoryStream@12.__im | 
| 88e0 |  70 5f 5f 52 74 6c 53 74 61 74 4d 65 6d 6f 72 79    53 74 72 65 61 6d 40 31 32 00 5f 52 74 6c 53 74  | p__RtlStatMemoryStream@12._RtlSt | 
| 8900 |  61 72 74 52 58 61 63 74 40 34 00 5f 5f 69 6d 70    5f 5f 52 74 6c 53 74 61 72 74 52 58 61 63 74 40  | artRXact@4.__imp__RtlStartRXact@ | 
| 8920 |  34 00 5f 52 74 6c 53 70 6c 61 79 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 53 70 6c 61 79 40 34 00  | 4._RtlSplay@4.__imp__RtlSplay@4. | 
| 8940 |  5f 52 74 6c 53 69 7a 65 48 65 61 70 40 31 32 00    5f 5f 69 6d 70 5f 5f 52 74 6c 53 69 7a 65 48 65  | _RtlSizeHeap@12.__imp__RtlSizeHe | 
| 8960 |  61 70 40 31 32 00 5f 52 74 6c 53 65 74 55 73 65    72 56 61 6c 75 65 48 65 61 70 40 31 36 00 5f 5f  | ap@12._RtlSetUserValueHeap@16.__ | 
| 8980 |  69 6d 70 5f 5f 52 74 6c 53 65 74 55 73 65 72 56    61 6c 75 65 48 65 61 70 40 31 36 00 5f 52 74 6c  | imp__RtlSetUserValueHeap@16._Rtl | 
| 89a0 |  53 65 74 55 73 65 72 46 6c 61 67 73 48 65 61 70    40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65  | SetUserFlagsHeap@20.__imp__RtlSe | 
| 89c0 |  74 55 73 65 72 46 6c 61 67 73 48 65 61 70 40 32    30 00 5f 52 74 6c 53 65 74 55 6e 69 63 6f 64 65  | tUserFlagsHeap@20._RtlSetUnicode | 
| 89e0 |  43 61 6c 6c 6f 75 74 73 40 34 00 5f 5f 69 6d 70    5f 5f 52 74 6c 53 65 74 55 6e 69 63 6f 64 65 43  | Callouts@4.__imp__RtlSetUnicodeC | 
| 8a00 |  61 6c 6c 6f 75 74 73 40 34 00 5f 52 74 6c 53 65    74 55 6e 68 61 6e 64 6c 65 64 45 78 63 65 70 74  | allouts@4._RtlSetUnhandledExcept | 
| 8a20 |  69 6f 6e 46 69 6c 74 65 72 40 34 00 5f 5f 69 6d    70 5f 5f 52 74 6c 53 65 74 55 6e 68 61 6e 64 6c  | ionFilter@4.__imp__RtlSetUnhandl | 
| 8a40 |  65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65    72 40 34 00 5f 52 74 6c 53 65 74 54 69 6d 65 72  | edExceptionFilter@4._RtlSetTimer | 
| 8a60 |  40 32 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65    74 54 69 6d 65 72 40 32 38 00 5f 52 74 6c 53 65  | @28.__imp__RtlSetTimer@28._RtlSe | 
| 8a80 |  74 54 69 6d 65 5a 6f 6e 65 49 6e 66 6f 72 6d 61    74 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | tTimeZoneInformation@4.__imp__Rt | 
| 8aa0 |  6c 53 65 74 54 69 6d 65 5a 6f 6e 65 49 6e 66 6f    72 6d 61 74 69 6f 6e 40 34 00 5f 52 74 6c 53 65  | lSetTimeZoneInformation@4._RtlSe | 
| 8ac0 |  74 54 68 72 65 61 64 50 6f 6f 6c 53 74 61 72 74    46 75 6e 63 40 38 00 5f 5f 69 6d 70 5f 5f 52 74  | tThreadPoolStartFunc@8.__imp__Rt | 
| 8ae0 |  6c 53 65 74 54 68 72 65 61 64 50 6f 6f 6c 53 74    61 72 74 46 75 6e 63 40 38 00 5f 52 74 6c 53 65  | lSetThreadPoolStartFunc@8._RtlSe | 
| 8b00 |  74 54 68 72 65 61 64 49 73 43 72 69 74 69 63 61    6c 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74 54  | tThreadIsCritical.__imp__RtlSetT | 
| 8b20 |  68 72 65 61 64 49 73 43 72 69 74 69 63 61 6c 00    5f 52 74 6c 53 65 74 54 68 72 65 61 64 45 72 72  | hreadIsCritical._RtlSetThreadErr | 
| 8b40 |  6f 72 4d 6f 64 65 40 38 00 5f 5f 69 6d 70 5f 5f    52 74 6c 53 65 74 54 68 72 65 61 64 45 72 72 6f  | orMode@8.__imp__RtlSetThreadErro | 
| 8b60 |  72 4d 6f 64 65 40 38 00 5f 52 74 6c 53 65 74 53    65 63 75 72 69 74 79 4f 62 6a 65 63 74 45 78 40  | rMode@8._RtlSetSecurityObjectEx@ | 
| 8b80 |  32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74    53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 45 78  | 24.__imp__RtlSetSecurityObjectEx | 
| 8ba0 |  40 32 34 00 5f 52 74 6c 53 65 74 53 65 63 75 72    69 74 79 4f 62 6a 65 63 74 40 32 30 00 5f 5f 69  | @24._RtlSetSecurityObject@20.__i | 
| 8bc0 |  6d 70 5f 5f 52 74 6c 53 65 74 53 65 63 75 72 69    74 79 4f 62 6a 65 63 74 40 32 30 00 5f 52 74 6c  | mp__RtlSetSecurityObject@20._Rtl | 
| 8be0 |  53 65 74 53 65 63 75 72 69 74 79 44 65 73 63 72    69 70 74 6f 72 52 4d 43 6f 6e 74 72 6f 6c 40 38  | SetSecurityDescriptorRMControl@8 | 
| 8c00 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74 53 65    63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72  | .__imp__RtlSetSecurityDescriptor | 
| 8c20 |  52 4d 43 6f 6e 74 72 6f 6c 40 38 00 5f 52 74 6c    53 65 74 53 61 63 6c 53 65 63 75 72 69 74 79 44  | RMControl@8._RtlSetSaclSecurityD | 
| 8c40 |  65 73 63 72 69 70 74 6f 72 40 31 36 00 5f 5f 69    6d 70 5f 5f 52 74 6c 53 65 74 53 61 63 6c 53 65  | escriptor@16.__imp__RtlSetSaclSe | 
| 8c60 |  63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72    40 31 36 00 5f 52 74 6c 53 65 74 50 72 6f 63 65  | curityDescriptor@16._RtlSetProce | 
| 8c80 |  73 73 49 73 43 72 69 74 69 63 61 6c 00 5f 5f 69    6d 70 5f 5f 52 74 6c 53 65 74 50 72 6f 63 65 73  | ssIsCritical.__imp__RtlSetProces | 
| 8ca0 |  73 49 73 43 72 69 74 69 63 61 6c 00 5f 52 74 6c    53 65 74 4f 77 6e 65 72 53 65 63 75 72 69 74 79  | sIsCritical._RtlSetOwnerSecurity | 
| 8cc0 |  44 65 73 63 72 69 70 74 6f 72 40 31 32 00 5f 5f    69 6d 70 5f 5f 52 74 6c 53 65 74 4f 77 6e 65 72  | Descriptor@12.__imp__RtlSetOwner | 
| 8ce0 |  53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74    6f 72 40 31 32 00 5f 52 74 6c 53 65 74 4d 65 6d  | SecurityDescriptor@12._RtlSetMem | 
| 8d00 |  6f 72 79 53 74 72 65 61 6d 53 69 7a 65 40 31 32    00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74 4d 65  | oryStreamSize@12.__imp__RtlSetMe | 
| 8d20 |  6d 6f 72 79 53 74 72 65 61 6d 53 69 7a 65 40 31    32 00 5f 52 74 6c 53 65 74 4c 61 73 74 57 69 6e  | moryStreamSize@12._RtlSetLastWin | 
| 8d40 |  33 32 45 72 72 6f 72 41 6e 64 4e 74 53 74 61 74    75 73 46 72 6f 6d 4e 74 53 74 61 74 75 73 40 34  | 32ErrorAndNtStatusFromNtStatus@4 | 
| 8d60 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74 4c 61    73 74 57 69 6e 33 32 45 72 72 6f 72 41 6e 64 4e  | .__imp__RtlSetLastWin32ErrorAndN | 
| 8d80 |  74 53 74 61 74 75 73 46 72 6f 6d 4e 74 53 74 61    74 75 73 40 34 00 5f 52 74 6c 53 65 74 4c 61 73  | tStatusFromNtStatus@4._RtlSetLas | 
| 8da0 |  74 57 69 6e 33 32 45 72 72 6f 72 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 53 65 74 4c 61 73 74 57  | tWin32Error@4.__imp__RtlSetLastW | 
| 8dc0 |  69 6e 33 32 45 72 72 6f 72 40 34 00 5f 52 74 6c    53 65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 43  | in32Error@4._RtlSetIoCompletionC | 
| 8de0 |  61 6c 6c 62 61 63 6b 40 31 32 00 5f 5f 69 6d 70    5f 5f 52 74 6c 53 65 74 49 6f 43 6f 6d 70 6c 65  | allback@12.__imp__RtlSetIoComple | 
| 8e00 |  74 69 6f 6e 43 61 6c 6c 62 61 63 6b 40 31 32 00    5f 52 74 6c 53 65 74 49 6e 66 6f 72 6d 61 74 69  | tionCallback@12._RtlSetInformati | 
| 8e20 |  6f 6e 41 63 6c 40 31 36 00 5f 5f 69 6d 70 5f 5f    52 74 6c 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f  | onAcl@16.__imp__RtlSetInformatio | 
| 8e40 |  6e 41 63 6c 40 31 36 00 5f 52 74 6c 53 65 74 48    65 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31  | nAcl@16._RtlSetHeapInformation@1 | 
| 8e60 |  36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74 48    65 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31  | 6.__imp__RtlSetHeapInformation@1 | 
| 8e80 |  36 00 5f 52 74 6c 53 65 74 47 72 6f 75 70 53 65    63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72  | 6._RtlSetGroupSecurityDescriptor | 
| 8ea0 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65    74 47 72 6f 75 70 53 65 63 75 72 69 74 79 44 65  | @12.__imp__RtlSetGroupSecurityDe | 
| 8ec0 |  73 63 72 69 70 74 6f 72 40 31 32 00 5f 52 74 6c    53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61  | scriptor@12._RtlSetEnvironmentVa | 
| 8ee0 |  72 69 61 62 6c 65 40 31 32 00 5f 5f 69 6d 70 5f    5f 52 74 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65  | riable@12.__imp__RtlSetEnvironme | 
| 8f00 |  6e 74 56 61 72 69 61 62 6c 65 40 31 32 00 5f 52    74 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74  | ntVariable@12._RtlSetEnvironment | 
| 8f20 |  53 74 72 69 6e 67 73 40 38 00 5f 5f 69 6d 70 5f    5f 52 74 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65  | Strings@8.__imp__RtlSetEnvironme | 
| 8f40 |  6e 74 53 74 72 69 6e 67 73 40 38 00 5f 52 74 6c    53 65 74 44 61 63 6c 53 65 63 75 72 69 74 79 44  | ntStrings@8._RtlSetDaclSecurityD | 
| 8f60 |  65 73 63 72 69 70 74 6f 72 40 31 36 00 5f 5f 69    6d 70 5f 5f 52 74 6c 53 65 74 44 61 63 6c 53 65  | escriptor@16.__imp__RtlSetDaclSe | 
| 8f80 |  63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72    40 31 36 00 5f 52 74 6c 53 65 74 43 75 72 72 65  | curityDescriptor@16._RtlSetCurre | 
| 8fa0 |  6e 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 40 38 00    5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74 43 75 72  | ntEnvironment@8.__imp__RtlSetCur | 
| 8fc0 |  72 65 6e 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 40    38 00 5f 52 74 6c 53 65 74 43 75 72 72 65 6e 74  | rentEnvironment@8._RtlSetCurrent | 
| 8fe0 |  44 69 72 65 63 74 6f 72 79 5f 55 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 53 65 74 43 75 72 72 65  | Directory_U@4.__imp__RtlSetCurre | 
| 9000 |  6e 74 44 69 72 65 63 74 6f 72 79 5f 55 40 34 00    5f 52 74 6c 53 65 74 43 72 69 74 69 63 61 6c 53  | ntDirectory_U@4._RtlSetCriticalS | 
| 9020 |  65 63 74 69 6f 6e 53 70 69 6e 43 6f 75 6e 74 40    38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74 43  | ectionSpinCount@8.__imp__RtlSetC | 
| 9040 |  72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 53 70    69 6e 43 6f 75 6e 74 40 38 00 5f 52 74 6c 53 65  | riticalSectionSpinCount@8._RtlSe | 
| 9060 |  74 43 6f 6e 74 72 6f 6c 53 65 63 75 72 69 74 79    44 65 73 63 72 69 70 74 6f 72 40 31 32 00 5f 5f  | tControlSecurityDescriptor@12.__ | 
| 9080 |  69 6d 70 5f 5f 52 74 6c 53 65 74 43 6f 6e 74 72    6f 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69  | imp__RtlSetControlSecurityDescri | 
| 90a0 |  70 74 6f 72 40 31 32 00 5f 52 74 6c 53 65 74 42    69 74 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74  | ptor@12._RtlSetBits@12.__imp__Rt | 
| 90c0 |  6c 53 65 74 42 69 74 73 40 31 32 00 5f 52 74 6c    53 65 74 41 74 74 72 69 62 75 74 65 73 53 65 63  | lSetBits@12._RtlSetAttributesSec | 
| 90e0 |  75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 40    31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74  | urityDescriptor@12.__imp__RtlSet | 
| 9100 |  41 74 74 72 69 62 75 74 65 73 53 65 63 75 72 69    74 79 44 65 73 63 72 69 70 74 6f 72 40 31 32 00  | AttributesSecurityDescriptor@12. | 
| 9120 |  5f 52 74 6c 53 65 74 41 6c 6c 42 69 74 73 40 34    00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74 41 6c  | _RtlSetAllBits@4.__imp__RtlSetAl | 
| 9140 |  6c 42 69 74 73 40 34 00 5f 52 74 6c 53 65 6c 66    52 65 6c 61 74 69 76 65 54 6f 41 62 73 6f 6c 75  | lBits@4._RtlSelfRelativeToAbsolu | 
| 9160 |  74 65 53 44 40 34 34 00 5f 5f 69 6d 70 5f 5f 52    74 6c 53 65 6c 66 52 65 6c 61 74 69 76 65 54 6f  | teSD@44.__imp__RtlSelfRelativeTo | 
| 9180 |  41 62 73 6f 6c 75 74 65 53 44 40 34 34 00 5f 52    74 6c 53 65 6c 66 52 65 6c 61 74 69 76 65 54 6f  | AbsoluteSD@44._RtlSelfRelativeTo | 
| 91a0 |  41 62 73 6f 6c 75 74 65 53 44 32 40 38 00 5f 5f    69 6d 70 5f 5f 52 74 6c 53 65 6c 66 52 65 6c 61  | AbsoluteSD2@8.__imp__RtlSelfRela | 
| 91c0 |  74 69 76 65 54 6f 41 62 73 6f 6c 75 74 65 53 44    32 40 38 00 5f 52 74 6c 53 65 65 6b 4d 65 6d 6f  | tiveToAbsoluteSD2@8._RtlSeekMemo | 
| 91e0 |  72 79 53 74 72 65 61 6d 40 32 30 00 5f 5f 69 6d    70 5f 5f 52 74 6c 53 65 65 6b 4d 65 6d 6f 72 79  | ryStream@20.__imp__RtlSeekMemory | 
| 9200 |  53 74 72 65 61 6d 40 32 30 00 5f 52 74 6c 53 65    63 6f 6e 64 73 53 69 6e 63 65 31 39 38 30 54 6f  | Stream@20._RtlSecondsSince1980To | 
| 9220 |  54 69 6d 65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74    6c 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 38  | Time@8.__imp__RtlSecondsSince198 | 
| 9240 |  30 54 6f 54 69 6d 65 40 38 00 5f 52 74 6c 53 65    63 6f 6e 64 73 53 69 6e 63 65 31 39 37 30 54 6f  | 0ToTime@8._RtlSecondsSince1970To | 
| 9260 |  54 69 6d 65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74    6c 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 37  | Time@8.__imp__RtlSecondsSince197 | 
| 9280 |  30 54 6f 54 69 6d 65 40 38 00 5f 52 74 6c 52 75    6e 45 6e 63 6f 64 65 55 6e 69 63 6f 64 65 53 74  | 0ToTime@8._RtlRunEncodeUnicodeSt | 
| 92a0 |  72 69 6e 67 40 38 00 5f 5f 69 6d 70 5f 5f 52 74    6c 52 75 6e 45 6e 63 6f 64 65 55 6e 69 63 6f 64  | ring@8.__imp__RtlRunEncodeUnicod | 
| 92c0 |  65 53 74 72 69 6e 67 40 38 00 5f 52 74 6c 52 75    6e 44 65 63 6f 64 65 55 6e 69 63 6f 64 65 53 74  | eString@8._RtlRunDecodeUnicodeSt | 
| 92e0 |  72 69 6e 67 40 38 00 5f 5f 69 6d 70 5f 5f 52 74    6c 52 75 6e 44 65 63 6f 64 65 55 6e 69 63 6f 64  | ring@8.__imp__RtlRunDecodeUnicod | 
| 9300 |  65 53 74 72 69 6e 67 40 38 00 5f 52 74 6c 52 65    76 65 72 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d  | eString@8._RtlRevertMemoryStream | 
| 9320 |  40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 52 65 76    65 72 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 40  | @4.__imp__RtlRevertMemoryStream@ | 
| 9340 |  34 00 5f 52 74 6c 52 65 73 74 6f 72 65 4c 61 73    74 57 69 6e 33 32 45 72 72 6f 72 40 34 00 5f 5f  | 4._RtlRestoreLastWin32Error@4.__ | 
| 9360 |  69 6d 70 5f 5f 52 74 6c 52 65 73 74 6f 72 65 4c    61 73 74 57 69 6e 33 32 45 72 72 6f 72 40 34 00  | imp__RtlRestoreLastWin32Error@4. | 
| 9380 |  5f 52 74 6c 52 65 73 65 74 52 74 6c 54 72 61 6e    73 6c 61 74 69 6f 6e 73 40 34 00 5f 5f 69 6d 70  | _RtlResetRtlTranslations@4.__imp | 
| 93a0 |  5f 5f 52 74 6c 52 65 73 65 74 52 74 6c 54 72 61    6e 73 6c 61 74 69 6f 6e 73 40 34 00 5f 52 74 6c  | __RtlResetRtlTranslations@4._Rtl | 
| 93c0 |  52 65 6d 6f 76 65 56 65 63 74 6f 72 65 64 45 78    63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 40 34  | RemoveVectoredExceptionHandler@4 | 
| 93e0 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 52 65 6d 6f 76    65 56 65 63 74 6f 72 65 64 45 78 63 65 70 74 69  | .__imp__RtlRemoveVectoredExcepti | 
| 9400 |  6f 6e 48 61 6e 64 6c 65 72 40 34 00 5f 52 74 6c    52 65 6d 6f 76 65 56 65 63 74 6f 72 65 64 43 6f  | onHandler@4._RtlRemoveVectoredCo | 
| 9420 |  6e 74 69 6e 75 65 48 61 6e 64 6c 65 72 40 34 00    5f 5f 69 6d 70 5f 5f 52 74 6c 52 65 6d 6f 76 65  | ntinueHandler@4.__imp__RtlRemove | 
| 9440 |  56 65 63 74 6f 72 65 64 43 6f 6e 74 69 6e 75 65    48 61 6e 64 6c 65 72 40 34 00 5f 52 74 6c 52 65  | VectoredContinueHandler@4._RtlRe | 
| 9460 |  6d 6f 74 65 43 61 6c 6c 40 32 38 00 5f 5f 69 6d    70 5f 5f 52 74 6c 52 65 6d 6f 74 65 43 61 6c 6c  | moteCall@28.__imp__RtlRemoteCall | 
| 9480 |  40 32 38 00 5f 52 74 6c 52 65 6c 65 61 73 65 52    65 73 6f 75 72 63 65 40 34 00 5f 5f 69 6d 70 5f  | @28._RtlReleaseResource@4.__imp_ | 
| 94a0 |  5f 52 74 6c 52 65 6c 65 61 73 65 52 65 73 6f 75    72 63 65 40 34 00 5f 52 74 6c 52 65 6c 65 61 73  | _RtlReleaseResource@4._RtlReleas | 
| 94c0 |  65 52 65 6c 61 74 69 76 65 4e 61 6d 65 40 34 00    5f 5f 69 6d 70 5f 5f 52 74 6c 52 65 6c 65 61 73  | eRelativeName@4.__imp__RtlReleas | 
| 94e0 |  65 52 65 6c 61 74 69 76 65 4e 61 6d 65 40 34 00    5f 52 74 6c 52 65 6c 65 61 73 65 50 72 69 76 69  | eRelativeName@4._RtlReleasePrivi | 
| 9500 |  6c 65 67 65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74    6c 52 65 6c 65 61 73 65 50 72 69 76 69 6c 65 67  | lege@4.__imp__RtlReleasePrivileg | 
| 9520 |  65 40 34 00 5f 52 74 6c 52 65 6c 65 61 73 65 50    65 62 4c 6f 63 6b 40 30 00 5f 5f 69 6d 70 5f 5f  | e@4._RtlReleasePebLock@0.__imp__ | 
| 9540 |  52 74 6c 52 65 6c 65 61 73 65 50 65 62 4c 6f 63    6b 40 30 00 5f 52 74 6c 52 65 6c 65 61 73 65 4d  | RtlReleasePebLock@0._RtlReleaseM | 
| 9560 |  65 6d 6f 72 79 53 74 72 65 61 6d 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 52 65 6c 65 61 73 65 4d  | emoryStream@4.__imp__RtlReleaseM | 
| 9580 |  65 6d 6f 72 79 53 74 72 65 61 6d 40 34 00 5f 52    74 6c 52 65 6c 65 61 73 65 41 63 74 69 76 61 74  | emoryStream@4._RtlReleaseActivat | 
| 95a0 |  69 6f 6e 43 6f 6e 74 65 78 74 40 34 00 5f 5f 69    6d 70 5f 5f 52 74 6c 52 65 6c 65 61 73 65 41 63  | ionContext@4.__imp__RtlReleaseAc | 
| 95c0 |  74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 40    34 00 5f 52 74 6c 52 65 67 69 73 74 65 72 57 61  | tivationContext@4._RtlRegisterWa | 
| 95e0 |  69 74 40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c    52 65 67 69 73 74 65 72 57 61 69 74 40 32 34 00  | it@24.__imp__RtlRegisterWait@24. | 
| 9600 |  5f 52 74 6c 52 65 67 69 73 74 65 72 53 65 63 75    72 65 4d 65 6d 6f 72 79 43 61 63 68 65 43 61 6c  | _RtlRegisterSecureMemoryCacheCal | 
| 9620 |  6c 62 61 63 6b 40 34 00 5f 5f 69 6d 70 5f 5f 52    74 6c 52 65 67 69 73 74 65 72 53 65 63 75 72 65  | lback@4.__imp__RtlRegisterSecure | 
| 9640 |  4d 65 6d 6f 72 79 43 61 63 68 65 43 61 6c 6c 62    61 63 6b 40 34 00 5f 52 74 6c 52 65 61 6c 53 75  | MemoryCacheCallback@4._RtlRealSu | 
| 9660 |  63 63 65 73 73 6f 72 40 34 00 5f 5f 69 6d 70 5f    5f 52 74 6c 52 65 61 6c 53 75 63 63 65 73 73 6f  | ccessor@4.__imp__RtlRealSuccesso | 
| 9680 |  72 40 34 00 5f 52 74 6c 52 65 61 6c 50 72 65 64    65 63 65 73 73 6f 72 40 34 00 5f 5f 69 6d 70 5f  | r@4._RtlRealPredecessor@4.__imp_ | 
| 96a0 |  5f 52 74 6c 52 65 61 6c 50 72 65 64 65 63 65 73    73 6f 72 40 34 00 5f 52 74 6c 52 65 61 64 4f 75  | _RtlRealPredecessor@4._RtlReadOu | 
| 96c0 |  74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79    53 74 72 65 61 6d 40 31 36 00 5f 5f 69 6d 70 5f  | tOfProcessMemoryStream@16.__imp_ | 
| 96e0 |  5f 52 74 6c 52 65 61 64 4f 75 74 4f 66 50 72 6f    63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d  | _RtlReadOutOfProcessMemoryStream | 
| 9700 |  40 31 36 00 5f 52 74 6c 52 65 61 64 4d 65 6d 6f    72 79 53 74 72 65 61 6d 40 31 36 00 5f 5f 69 6d  | @16._RtlReadMemoryStream@16.__im | 
| 9720 |  70 5f 5f 52 74 6c 52 65 61 64 4d 65 6d 6f 72 79    53 74 72 65 61 6d 40 31 36 00 5f 52 74 6c 52 65  | p__RtlReadMemoryStream@16._RtlRe | 
| 9740 |  41 6c 6c 6f 63 61 74 65 48 65 61 70 40 31 36 00    5f 5f 69 6d 70 5f 5f 52 74 6c 52 65 41 6c 6c 6f  | AllocateHeap@16.__imp__RtlReAllo | 
| 9760 |  63 61 74 65 48 65 61 70 40 31 36 00 5f 52 74 6c    52 61 6e 64 6f 6d 45 78 40 34 00 5f 5f 69 6d 70  | cateHeap@16._RtlRandomEx@4.__imp | 
| 9780 |  5f 5f 52 74 6c 52 61 6e 64 6f 6d 45 78 40 34 00    5f 52 74 6c 52 61 6e 64 6f 6d 40 34 00 5f 5f 69  | __RtlRandomEx@4._RtlRandom@4.__i | 
| 97a0 |  6d 70 5f 5f 52 74 6c 52 61 6e 64 6f 6d 40 34 00    5f 52 74 6c 52 61 69 73 65 53 74 61 74 75 73 40  | mp__RtlRandom@4._RtlRaiseStatus@ | 
| 97c0 |  34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 52 61 69 73    65 53 74 61 74 75 73 40 34 00 5f 52 74 6c 52 61  | 4.__imp__RtlRaiseStatus@4._RtlRa | 
| 97e0 |  69 73 65 45 78 63 65 70 74 69 6f 6e 40 34 00 5f    5f 69 6d 70 5f 5f 52 74 6c 52 61 69 73 65 45 78  | iseException@4.__imp__RtlRaiseEx | 
| 9800 |  63 65 70 74 69 6f 6e 40 34 00 5f 52 74 6c 51 75    65 75 65 57 6f 72 6b 49 74 65 6d 40 31 32 00 5f  | ception@4._RtlQueueWorkItem@12._ | 
| 9820 |  5f 69 6d 70 5f 5f 52 74 6c 51 75 65 75 65 57 6f    72 6b 49 74 65 6d 40 31 32 00 5f 52 74 6c 51 75  | _imp__RtlQueueWorkItem@12._RtlQu | 
| 9840 |  65 75 65 41 70 63 57 6f 77 36 34 54 68 72 65 61    64 40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 51  | eueApcWow64Thread@20.__imp__RtlQ | 
| 9860 |  75 65 75 65 41 70 63 57 6f 77 36 34 54 68 72 65    61 64 40 32 30 00 5f 52 74 6c 51 75 65 72 79 54  | ueueApcWow64Thread@20._RtlQueryT | 
| 9880 |  69 6d 65 5a 6f 6e 65 49 6e 66 6f 72 6d 61 74 69    6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 51  | imeZoneInformation@4.__imp__RtlQ | 
| 98a0 |  75 65 72 79 54 69 6d 65 5a 6f 6e 65 49 6e 66 6f    72 6d 61 74 69 6f 6e 40 34 00 5f 52 74 6c 51 75  | ueryTimeZoneInformation@4._RtlQu | 
| 98c0 |  65 72 79 54 61 67 48 65 61 70 40 32 30 00 5f 5f    69 6d 70 5f 5f 52 74 6c 51 75 65 72 79 54 61 67  | eryTagHeap@20.__imp__RtlQueryTag | 
| 98e0 |  48 65 61 70 40 32 30 00 5f 52 74 6c 51 75 65 72    79 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 40  | Heap@20._RtlQuerySecurityObject@ | 
| 9900 |  32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 51 75 65    72 79 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74  | 20.__imp__RtlQuerySecurityObject | 
| 9920 |  40 32 30 00 5f 52 74 6c 51 75 65 72 79 52 65 67    69 73 74 72 79 56 61 6c 75 65 73 40 32 30 00 5f  | @20._RtlQueryRegistryValues@20._ | 
| 9940 |  5f 69 6d 70 5f 5f 52 74 6c 51 75 65 72 79 52 65    67 69 73 74 72 79 56 61 6c 75 65 73 40 32 30 00  | _imp__RtlQueryRegistryValues@20. | 
| 9960 |  5f 52 74 6c 51 75 65 72 79 50 72 6f 63 65 73 73    4c 6f 63 6b 49 6e 66 6f 72 6d 61 74 69 6f 6e 40  | _RtlQueryProcessLockInformation@ | 
| 9980 |  34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 51 75 65 72    79 50 72 6f 63 65 73 73 4c 6f 63 6b 49 6e 66 6f  | 4.__imp__RtlQueryProcessLockInfo | 
| 99a0 |  72 6d 61 74 69 6f 6e 40 34 00 5f 52 74 6c 51 75    65 72 79 50 72 6f 63 65 73 73 48 65 61 70 49 6e  | rmation@4._RtlQueryProcessHeapIn | 
| 99c0 |  66 6f 72 6d 61 74 69 6f 6e 40 34 00 5f 5f 69 6d    70 5f 5f 52 74 6c 51 75 65 72 79 50 72 6f 63 65  | formation@4.__imp__RtlQueryProce | 
| 99e0 |  73 73 48 65 61 70 49 6e 66 6f 72 6d 61 74 69 6f    6e 40 34 00 5f 52 74 6c 51 75 65 72 79 50 72 6f  | ssHeapInformation@4._RtlQueryPro | 
| 9a00 |  63 65 73 73 44 65 62 75 67 49 6e 66 6f 72 6d 61    74 69 6f 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 52  | cessDebugInformation@12.__imp__R | 
| 9a20 |  74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 44 65    62 75 67 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31  | tlQueryProcessDebugInformation@1 | 
| 9a40 |  32 00 5f 52 74 6c 51 75 65 72 79 50 72 6f 63 65    73 73 42 61 63 6b 54 72 61 63 65 49 6e 66 6f 72  | 2._RtlQueryProcessBackTraceInfor | 
| 9a60 |  6d 61 74 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f    52 74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 42  | mation@4.__imp__RtlQueryProcessB | 
| 9a80 |  61 63 6b 54 72 61 63 65 49 6e 66 6f 72 6d 61 74    69 6f 6e 40 34 00 5f 52 74 6c 51 75 65 72 79 49  | ackTraceInformation@4._RtlQueryI | 
| 9aa0 |  6e 74 65 72 66 61 63 65 4d 65 6d 6f 72 79 53 74    72 65 61 6d 40 31 32 00 5f 5f 69 6d 70 5f 5f 52  | nterfaceMemoryStream@12.__imp__R | 
| 9ac0 |  74 6c 51 75 65 72 79 49 6e 74 65 72 66 61 63 65    4d 65 6d 6f 72 79 53 74 72 65 61 6d 40 31 32 00  | tlQueryInterfaceMemoryStream@12. | 
| 9ae0 |  5f 52 74 6c 51 75 65 72 79 49 6e 66 6f 72 6d 61    74 69 6f 6e 41 63 74 69 76 65 41 63 74 69 76 61  | _RtlQueryInformationActiveActiva | 
| 9b00 |  74 69 6f 6e 43 6f 6e 74 65 78 74 40 31 36 00 5f    5f 69 6d 70 5f 5f 52 74 6c 51 75 65 72 79 49 6e  | tionContext@16.__imp__RtlQueryIn | 
| 9b20 |  66 6f 72 6d 61 74 69 6f 6e 41 63 74 69 76 65 41    63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74  | formationActiveActivationContext | 
| 9b40 |  40 31 36 00 5f 52 74 6c 51 75 65 72 79 49 6e 66    6f 72 6d 61 74 69 6f 6e 41 63 74 69 76 61 74 69  | @16._RtlQueryInformationActivati | 
| 9b60 |  6f 6e 43 6f 6e 74 65 78 74 40 32 38 00 5f 5f 69    6d 70 5f 5f 52 74 6c 51 75 65 72 79 49 6e 66 6f  | onContext@28.__imp__RtlQueryInfo | 
| 9b80 |  72 6d 61 74 69 6f 6e 41 63 74 69 76 61 74 69 6f    6e 43 6f 6e 74 65 78 74 40 32 38 00 5f 52 74 6c  | rmationActivationContext@28._Rtl | 
| 9ba0 |  51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e    41 63 6c 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74  | QueryInformationAcl@16.__imp__Rt | 
| 9bc0 |  6c 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f    6e 41 63 6c 40 31 36 00 5f 52 74 6c 51 75 65 72  | lQueryInformationAcl@16._RtlQuer | 
| 9be0 |  79 48 65 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e    40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 51 75  | yHeapInformation@20.__imp__RtlQu | 
| 9c00 |  65 72 79 48 65 61 70 49 6e 66 6f 72 6d 61 74 69    6f 6e 40 32 30 00 5f 52 74 6c 51 75 65 72 79 45  | eryHeapInformation@20._RtlQueryE | 
| 9c20 |  6e 76 69 72 6f 6e 6d 65 6e 74 56 61 72 69 61 62    6c 65 5f 55 40 31 32 00 5f 5f 69 6d 70 5f 5f 52  | nvironmentVariable_U@12.__imp__R | 
| 9c40 |  74 6c 51 75 65 72 79 45 6e 76 69 72 6f 6e 6d 65    6e 74 56 61 72 69 61 62 6c 65 5f 55 40 31 32 00  | tlQueryEnvironmentVariable_U@12. | 
| 9c60 |  5f 52 74 6c 51 75 65 72 79 44 65 70 74 68 53 4c    69 73 74 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | _RtlQueryDepthSList@4.__imp__Rtl | 
| 9c80 |  51 75 65 72 79 44 65 70 74 68 53 4c 69 73 74 40    34 00 5f 52 74 6c 51 75 65 72 79 41 74 6f 6d 49  | QueryDepthSList@4._RtlQueryAtomI | 
| 9ca0 |  6e 41 74 6f 6d 54 61 62 6c 65 40 32 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 51 75 65 72 79 41 74 6f  | nAtomTable@24.__imp__RtlQueryAto | 
| 9cc0 |  6d 49 6e 41 74 6f 6d 54 61 62 6c 65 40 32 34 00    5f 52 74 6c 50 75 73 68 46 72 61 6d 65 40 34 00  | mInAtomTable@24._RtlPushFrame@4. | 
| 9ce0 |  5f 5f 69 6d 70 5f 5f 52 74 6c 50 75 73 68 46 72    61 6d 65 40 34 00 5f 52 74 6c 50 72 6f 74 65 63  | __imp__RtlPushFrame@4._RtlProtec | 
| 9d00 |  74 48 65 61 70 40 38 00 5f 5f 69 6d 70 5f 5f 52    74 6c 50 72 6f 74 65 63 74 48 65 61 70 40 38 00  | tHeap@8.__imp__RtlProtectHeap@8. | 
| 9d20 |  5f 52 74 6c 50 72 65 66 69 78 55 6e 69 63 6f 64    65 53 74 72 69 6e 67 40 31 32 00 5f 5f 69 6d 70  | _RtlPrefixUnicodeString@12.__imp | 
| 9d40 |  5f 5f 52 74 6c 50 72 65 66 69 78 55 6e 69 63 6f    64 65 53 74 72 69 6e 67 40 31 32 00 5f 52 74 6c  | __RtlPrefixUnicodeString@12._Rtl | 
| 9d60 |  50 72 65 66 69 78 53 74 72 69 6e 67 40 31 32 00    5f 5f 69 6d 70 5f 5f 52 74 6c 50 72 65 66 69 78  | PrefixString@12.__imp__RtlPrefix | 
| 9d80 |  53 74 72 69 6e 67 40 31 32 00 5f 52 74 6c 50 6f    70 46 72 61 6d 65 40 34 00 5f 5f 69 6d 70 5f 5f  | String@12._RtlPopFrame@4.__imp__ | 
| 9da0 |  52 74 6c 50 6f 70 46 72 61 6d 65 40 34 00 5f 52    74 6c 50 69 6e 41 74 6f 6d 49 6e 41 74 6f 6d 54  | RtlPopFrame@4._RtlPinAtomInAtomT | 
| 9dc0 |  61 62 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74    6c 50 69 6e 41 74 6f 6d 49 6e 41 74 6f 6d 54 61  | able@8.__imp__RtlPinAtomInAtomTa | 
| 9de0 |  62 6c 65 40 38 00 5f 52 74 6c 50 63 54 6f 46 69    6c 65 48 65 61 64 65 72 40 38 00 5f 5f 69 6d 70  | ble@8._RtlPcToFileHeader@8.__imp | 
| 9e00 |  5f 5f 52 74 6c 50 63 54 6f 46 69 6c 65 48 65 61    64 65 72 40 38 00 5f 52 74 6c 4f 70 65 6e 43 75  | __RtlPcToFileHeader@8._RtlOpenCu | 
| 9e20 |  72 72 65 6e 74 55 73 65 72 40 38 00 5f 5f 69 6d    70 5f 5f 52 74 6c 4f 70 65 6e 43 75 72 72 65 6e  | rrentUser@8.__imp__RtlOpenCurren | 
| 9e40 |  74 55 73 65 72 40 38 00 5f 52 74 6c 4f 65 6d 54    6f 55 6e 69 63 6f 64 65 4e 40 32 30 00 5f 5f 69  | tUser@8._RtlOemToUnicodeN@20.__i | 
| 9e60 |  6d 70 5f 5f 52 74 6c 4f 65 6d 54 6f 55 6e 69 63    6f 64 65 4e 40 32 30 00 5f 52 74 6c 4f 65 6d 53  | mp__RtlOemToUnicodeN@20._RtlOemS | 
| 9e80 |  74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 74    72 69 6e 67 40 31 32 00 5f 5f 69 6d 70 5f 5f 52  | tringToUnicodeString@12.__imp__R | 
| 9ea0 |  74 6c 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e 69    63 6f 64 65 53 74 72 69 6e 67 40 31 32 00 5f 52  | tlOemStringToUnicodeString@12._R | 
| 9ec0 |  74 6c 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e 69    63 6f 64 65 53 69 7a 65 40 34 00 5f 5f 69 6d 70  | tlOemStringToUnicodeSize@4.__imp | 
| 9ee0 |  5f 5f 52 74 6c 4f 65 6d 53 74 72 69 6e 67 54 6f    55 6e 69 63 6f 64 65 53 69 7a 65 40 34 00 5f 52  | __RtlOemStringToUnicodeSize@4._R | 
| 9f00 |  74 6c 4e 75 6d 62 65 72 4f 66 53 65 74 42 69 74    73 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4e 75  | tlNumberOfSetBits@4.__imp__RtlNu | 
| 9f20 |  6d 62 65 72 4f 66 53 65 74 42 69 74 73 40 34 00    5f 52 74 6c 4e 75 6d 62 65 72 4f 66 43 6c 65 61  | mberOfSetBits@4._RtlNumberOfClea | 
| 9f40 |  72 42 69 74 73 40 34 00 5f 5f 69 6d 70 5f 5f 52    74 6c 4e 75 6d 62 65 72 4f 66 43 6c 65 61 72 42  | rBits@4.__imp__RtlNumberOfClearB | 
| 9f60 |  69 74 73 40 34 00 5f 52 74 6c 4e 75 6d 62 65 72    47 65 6e 65 72 69 63 54 61 62 6c 65 45 6c 65 6d  | its@4._RtlNumberGenericTableElem | 
| 9f80 |  65 6e 74 73 41 76 6c 40 34 00 5f 5f 69 6d 70 5f    5f 52 74 6c 4e 75 6d 62 65 72 47 65 6e 65 72 69  | entsAvl@4.__imp__RtlNumberGeneri | 
| 9fa0 |  63 54 61 62 6c 65 45 6c 65 6d 65 6e 74 73 41 76    6c 40 34 00 5f 52 74 6c 4e 75 6d 62 65 72 47 65  | cTableElementsAvl@4._RtlNumberGe | 
| 9fc0 |  6e 65 72 69 63 54 61 62 6c 65 45 6c 65 6d 65 6e    74 73 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4e  | nericTableElements@4.__imp__RtlN | 
| 9fe0 |  75 6d 62 65 72 47 65 6e 65 72 69 63 54 61 62 6c    65 45 6c 65 6d 65 6e 74 73 40 34 00 5f 52 74 6c  | umberGenericTableElements@4._Rtl | 
| a000 |  4e 74 53 74 61 74 75 73 54 6f 44 6f 73 45 72 72    6f 72 4e 6f 54 65 62 40 34 00 5f 5f 69 6d 70 5f  | NtStatusToDosErrorNoTeb@4.__imp_ | 
| a020 |  5f 52 74 6c 4e 74 53 74 61 74 75 73 54 6f 44 6f    73 45 72 72 6f 72 4e 6f 54 65 62 40 34 00 5f 52  | _RtlNtStatusToDosErrorNoTeb@4._R | 
| a040 |  74 6c 4e 74 53 74 61 74 75 73 54 6f 44 6f 73 45    72 72 6f 72 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | tlNtStatusToDosError@4.__imp__Rt | 
| a060 |  6c 4e 74 53 74 61 74 75 73 54 6f 44 6f 73 45 72    72 6f 72 40 34 00 5f 52 74 6c 4e 74 50 61 74 68  | lNtStatusToDosError@4._RtlNtPath | 
| a080 |  4e 61 6d 65 54 6f 44 6f 73 50 61 74 68 4e 61 6d    65 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4e  | NameToDosPathName@16.__imp__RtlN | 
| a0a0 |  74 50 61 74 68 4e 61 6d 65 54 6f 44 6f 73 50 61    74 68 4e 61 6d 65 40 31 36 00 5f 52 74 6c 4e 6f  | tPathNameToDosPathName@16._RtlNo | 
| a0c0 |  72 6d 61 6c 69 7a 65 50 72 6f 63 65 73 73 50 61    72 61 6d 73 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | rmalizeProcessParams@4.__imp__Rt | 
| a0e0 |  6c 4e 6f 72 6d 61 6c 69 7a 65 50 72 6f 63 65 73    73 50 61 72 61 6d 73 40 34 00 5f 52 74 6c 4e 65  | lNormalizeProcessParams@4._RtlNe | 
| a100 |  77 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 57    69 74 68 4d 75 6c 74 69 70 6c 65 49 6e 68 65 72  | wSecurityObjectWithMultipleInher | 
| a120 |  69 74 61 6e 63 65 40 33 36 00 5f 5f 69 6d 70 5f    5f 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 4f  | itance@36.__imp__RtlNewSecurityO | 
| a140 |  62 6a 65 63 74 57 69 74 68 4d 75 6c 74 69 70 6c    65 49 6e 68 65 72 69 74 61 6e 63 65 40 33 36 00  | bjectWithMultipleInheritance@36. | 
| a160 |  5f 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 4f    62 6a 65 63 74 45 78 40 33 32 00 5f 5f 69 6d 70  | _RtlNewSecurityObjectEx@32.__imp | 
| a180 |  5f 5f 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79    4f 62 6a 65 63 74 45 78 40 33 32 00 5f 52 74 6c  | __RtlNewSecurityObjectEx@32._Rtl | 
| a1a0 |  4e 65 77 53 65 63 75 72 69 74 79 4f 62 6a 65 63    74 40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4e  | NewSecurityObject@24.__imp__RtlN | 
| a1c0 |  65 77 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74    40 32 34 00 5f 52 74 6c 4e 65 77 53 65 63 75 72  | ewSecurityObject@24._RtlNewSecur | 
| a1e0 |  69 74 79 47 72 61 6e 74 65 64 41 63 63 65 73 73    40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4e 65  | ityGrantedAccess@24.__imp__RtlNe | 
| a200 |  77 53 65 63 75 72 69 74 79 47 72 61 6e 74 65 64    41 63 63 65 73 73 40 32 34 00 5f 52 74 6c 4e 65  | wSecurityGrantedAccess@24._RtlNe | 
| a220 |  77 49 6e 73 74 61 6e 63 65 53 65 63 75 72 69 74    79 4f 62 6a 65 63 74 40 34 30 00 5f 5f 69 6d 70  | wInstanceSecurityObject@40.__imp | 
| a240 |  5f 5f 52 74 6c 4e 65 77 49 6e 73 74 61 6e 63 65    53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 40 34  | __RtlNewInstanceSecurityObject@4 | 
| a260 |  30 00 5f 52 74 6c 4d 75 6c 74 69 70 6c 65 46 72    65 65 48 65 61 70 40 31 36 00 5f 5f 69 6d 70 5f  | 0._RtlMultipleFreeHeap@16.__imp_ | 
| a280 |  5f 52 74 6c 4d 75 6c 74 69 70 6c 65 46 72 65 65    48 65 61 70 40 31 36 00 5f 52 74 6c 4d 75 6c 74  | _RtlMultipleFreeHeap@16._RtlMult | 
| a2a0 |  69 70 6c 65 41 6c 6c 6f 63 61 74 65 48 65 61 70    40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4d 75  | ipleAllocateHeap@20.__imp__RtlMu | 
| a2c0 |  6c 74 69 70 6c 65 41 6c 6c 6f 63 61 74 65 48 65    61 70 40 32 30 00 5f 52 74 6c 4d 75 6c 74 69 42  | ltipleAllocateHeap@20._RtlMultiB | 
| a2e0 |  79 74 65 54 6f 55 6e 69 63 6f 64 65 53 69 7a 65    40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4d 75  | yteToUnicodeSize@12.__imp__RtlMu | 
| a300 |  6c 74 69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65    53 69 7a 65 40 31 32 00 5f 52 74 6c 4d 75 6c 74  | ltiByteToUnicodeSize@12._RtlMult | 
| a320 |  69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65 4e 40    32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4d 75 6c  | iByteToUnicodeN@20.__imp__RtlMul | 
| a340 |  74 69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65 4e    40 32 30 00 5f 52 74 6c 4d 75 6c 74 69 41 70 70  | tiByteToUnicodeN@20._RtlMultiApp | 
| a360 |  65 6e 64 55 6e 69 63 6f 64 65 53 74 72 69 6e 67    42 75 66 66 65 72 40 31 32 00 5f 5f 69 6d 70 5f  | endUnicodeStringBuffer@12.__imp_ | 
| a380 |  5f 52 74 6c 4d 75 6c 74 69 41 70 70 65 6e 64 55    6e 69 63 6f 64 65 53 74 72 69 6e 67 42 75 66 66  | _RtlMultiAppendUnicodeStringBuff | 
| a3a0 |  65 72 40 31 32 00 5f 52 74 6c 4d 6f 76 65 4d 65    6d 6f 72 79 40 31 32 00 5f 5f 69 6d 70 5f 5f 52  | er@12._RtlMoveMemory@12.__imp__R | 
| a3c0 |  74 6c 4d 6f 76 65 4d 65 6d 6f 72 79 40 31 32 00    5f 52 74 6c 4d 61 70 53 65 63 75 72 69 74 79 45  | tlMoveMemory@12._RtlMapSecurityE | 
| a3e0 |  72 72 6f 72 54 6f 4e 74 53 74 61 74 75 73 40 34    00 5f 5f 69 6d 70 5f 5f 52 74 6c 4d 61 70 53 65  | rrorToNtStatus@4.__imp__RtlMapSe | 
| a400 |  63 75 72 69 74 79 45 72 72 6f 72 54 6f 4e 74 53    74 61 74 75 73 40 34 00 5f 52 74 6c 4d 61 70 47  | curityErrorToNtStatus@4._RtlMapG | 
| a420 |  65 6e 65 72 69 63 4d 61 73 6b 40 38 00 5f 5f 69    6d 70 5f 5f 52 74 6c 4d 61 70 47 65 6e 65 72 69  | enericMask@8.__imp__RtlMapGeneri | 
| a440 |  63 4d 61 73 6b 40 38 00 5f 52 74 6c 4d 61 6b 65    53 65 6c 66 52 65 6c 61 74 69 76 65 53 44 40 31  | cMask@8._RtlMakeSelfRelativeSD@1 | 
| a460 |  32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4d 61 6b 65    53 65 6c 66 52 65 6c 61 74 69 76 65 53 44 40 31  | 2.__imp__RtlMakeSelfRelativeSD@1 | 
| a480 |  32 00 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d    65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 46  | 2._RtlLookupElementGenericTableF | 
| a4a0 |  75 6c 6c 41 76 6c 40 31 36 00 5f 5f 69 6d 70 5f    5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e  | ullAvl@16.__imp__RtlLookupElemen | 
| a4c0 |  74 47 65 6e 65 72 69 63 54 61 62 6c 65 46 75 6c    6c 41 76 6c 40 31 36 00 5f 52 74 6c 4c 6f 6f 6b  | tGenericTableFullAvl@16._RtlLook | 
| a4e0 |  75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63    54 61 62 6c 65 46 75 6c 6c 40 31 36 00 5f 5f 69  | upElementGenericTableFull@16.__i | 
| a500 |  6d 70 5f 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65    6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65  | mp__RtlLookupElementGenericTable | 
| a520 |  46 75 6c 6c 40 31 36 00 5f 52 74 6c 4c 6f 6f 6b    75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63  | Full@16._RtlLookupElementGeneric | 
| a540 |  54 61 62 6c 65 41 76 6c 40 38 00 5f 5f 69 6d 70    5f 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65  | TableAvl@8.__imp__RtlLookupEleme | 
| a560 |  6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76    6c 40 38 00 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c  | ntGenericTableAvl@8._RtlLookupEl | 
| a580 |  65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c    65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c 6f  | ementGenericTable@8.__imp__RtlLo | 
| a5a0 |  6f 6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72    69 63 54 61 62 6c 65 40 38 00 5f 52 74 6c 4c 6f  | okupElementGenericTable@8._RtlLo | 
| a5c0 |  6f 6b 75 70 41 74 6f 6d 49 6e 41 74 6f 6d 54 61    62 6c 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74  | okupAtomInAtomTable@12.__imp__Rt | 
| a5e0 |  6c 4c 6f 6f 6b 75 70 41 74 6f 6d 49 6e 41 74 6f    6d 54 61 62 6c 65 40 31 32 00 5f 52 74 6c 4c 6f  | lLookupAtomInAtomTable@12._RtlLo | 
| a600 |  67 53 74 61 63 6b 42 61 63 6b 54 72 61 63 65 40    30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c 6f 67 53  | gStackBackTrace@0.__imp__RtlLogS | 
| a620 |  74 61 63 6b 42 61 63 6b 54 72 61 63 65 40 30 00    5f 52 74 6c 4c 6f 63 6b 4d 65 6d 6f 72 79 53 74  | tackBackTrace@0._RtlLockMemorySt | 
| a640 |  72 65 61 6d 52 65 67 69 6f 6e 40 32 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 4c 6f 63 6b 4d 65 6d 6f  | reamRegion@24.__imp__RtlLockMemo | 
| a660 |  72 79 53 74 72 65 61 6d 52 65 67 69 6f 6e 40 32    34 00 5f 52 74 6c 4c 6f 63 6b 48 65 61 70 40 34  | ryStreamRegion@24._RtlLockHeap@4 | 
| a680 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c 6f 63 6b 48    65 61 70 40 34 00 5f 52 74 6c 4c 6f 63 6b 42 6f  | .__imp__RtlLockHeap@4._RtlLockBo | 
| a6a0 |  6f 74 53 74 61 74 75 73 44 61 74 61 40 34 00 5f    5f 69 6d 70 5f 5f 52 74 6c 4c 6f 63 6b 42 6f 6f  | otStatusData@4.__imp__RtlLockBoo | 
| a6c0 |  74 53 74 61 74 75 73 44 61 74 61 40 34 00 5f 52    74 6c 4c 6f 63 61 6c 54 69 6d 65 54 6f 53 79 73  | tStatusData@4._RtlLocalTimeToSys | 
| a6e0 |  74 65 6d 54 69 6d 65 40 38 00 5f 5f 69 6d 70 5f    5f 52 74 6c 4c 6f 63 61 6c 54 69 6d 65 54 6f 53  | temTime@8.__imp__RtlLocalTimeToS | 
| a700 |  79 73 74 65 6d 54 69 6d 65 40 38 00 5f 52 74 6c    4c 65 6e 67 74 68 53 69 64 40 34 00 5f 5f 69 6d  | ystemTime@8._RtlLengthSid@4.__im | 
| a720 |  70 5f 5f 52 74 6c 4c 65 6e 67 74 68 53 69 64 40    34 00 5f 52 74 6c 4c 65 6e 67 74 68 53 65 63 75  | p__RtlLengthSid@4._RtlLengthSecu | 
| a740 |  72 69 74 79 44 65 73 63 72 69 70 74 6f 72 40 34    00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c 65 6e 67 74  | rityDescriptor@4.__imp__RtlLengt | 
| a760 |  68 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70    74 6f 72 40 34 00 5f 52 74 6c 4c 65 6e 67 74 68  | hSecurityDescriptor@4._RtlLength | 
| a780 |  52 65 71 75 69 72 65 64 53 69 64 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 4c 65 6e 67 74 68 52 65  | RequiredSid@4.__imp__RtlLengthRe | 
| a7a0 |  71 75 69 72 65 64 53 69 64 40 34 00 5f 52 74 6c    4c 65 61 76 65 43 72 69 74 69 63 61 6c 53 65 63  | quiredSid@4._RtlLeaveCriticalSec | 
| a7c0 |  74 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f 52 74    6c 4c 65 61 76 65 43 72 69 74 69 63 61 6c 53 65  | tion@4.__imp__RtlLeaveCriticalSe | 
| a7e0 |  63 74 69 6f 6e 40 34 00 5f 52 74 6c 4c 61 72 67    65 49 6e 74 65 67 65 72 54 6f 43 68 61 72 40 31  | ction@4._RtlLargeIntegerToChar@1 | 
| a800 |  36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c 61 72 67    65 49 6e 74 65 67 65 72 54 6f 43 68 61 72 40 31  | 6.__imp__RtlLargeIntegerToChar@1 | 
| a820 |  36 00 5f 52 74 6c 4c 61 72 67 65 49 6e 74 65 67    65 72 53 75 62 74 72 61 63 74 40 31 36 00 5f 5f  | 6._RtlLargeIntegerSubtract@16.__ | 
| a840 |  69 6d 70 5f 5f 52 74 6c 4c 61 72 67 65 49 6e 74    65 67 65 72 53 75 62 74 72 61 63 74 40 31 36 00  | imp__RtlLargeIntegerSubtract@16. | 
| a860 |  5f 52 74 6c 4c 61 72 67 65 49 6e 74 65 67 65 72    53 68 69 66 74 52 69 67 68 74 40 31 32 00 5f 5f  | _RtlLargeIntegerShiftRight@12.__ | 
| a880 |  69 6d 70 5f 5f 52 74 6c 4c 61 72 67 65 49 6e 74    65 67 65 72 53 68 69 66 74 52 69 67 68 74 40 31  | imp__RtlLargeIntegerShiftRight@1 | 
| a8a0 |  32 00 5f 52 74 6c 4c 61 72 67 65 49 6e 74 65 67    65 72 53 68 69 66 74 4c 65 66 74 40 31 32 00 5f  | 2._RtlLargeIntegerShiftLeft@12._ | 
| a8c0 |  5f 69 6d 70 5f 5f 52 74 6c 4c 61 72 67 65 49 6e    74 65 67 65 72 53 68 69 66 74 4c 65 66 74 40 31  | _imp__RtlLargeIntegerShiftLeft@1 | 
| a8e0 |  32 00 5f 52 74 6c 4c 61 72 67 65 49 6e 74 65 67    65 72 4e 65 67 61 74 65 40 38 00 5f 5f 69 6d 70  | 2._RtlLargeIntegerNegate@8.__imp | 
| a900 |  5f 5f 52 74 6c 4c 61 72 67 65 49 6e 74 65 67 65    72 4e 65 67 61 74 65 40 38 00 5f 52 74 6c 4c 61  | __RtlLargeIntegerNegate@8._RtlLa | 
| a920 |  72 67 65 49 6e 74 65 67 65 72 44 69 76 69 64 65    40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c 61  | rgeIntegerDivide@20.__imp__RtlLa | 
| a940 |  72 67 65 49 6e 74 65 67 65 72 44 69 76 69 64 65    40 32 30 00 5f 52 74 6c 4c 61 72 67 65 49 6e 74  | rgeIntegerDivide@20._RtlLargeInt | 
| a960 |  65 67 65 72 41 72 69 74 68 6d 65 74 69 63 53 68    69 66 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74  | egerArithmeticShift@12.__imp__Rt | 
| a980 |  6c 4c 61 72 67 65 49 6e 74 65 67 65 72 41 72 69    74 68 6d 65 74 69 63 53 68 69 66 74 40 31 32 00  | lLargeIntegerArithmeticShift@12. | 
| a9a0 |  5f 52 74 6c 4c 61 72 67 65 49 6e 74 65 67 65 72    41 64 64 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74  | _RtlLargeIntegerAdd@16.__imp__Rt | 
| a9c0 |  6c 4c 61 72 67 65 49 6e 74 65 67 65 72 41 64 64    40 31 36 00 5f 52 74 6c 49 73 56 61 6c 69 64 49  | lLargeIntegerAdd@16._RtlIsValidI | 
| a9e0 |  6e 64 65 78 48 61 6e 64 6c 65 40 31 32 00 5f 5f    69 6d 70 5f 5f 52 74 6c 49 73 56 61 6c 69 64 49  | ndexHandle@12.__imp__RtlIsValidI | 
| aa00 |  6e 64 65 78 48 61 6e 64 6c 65 40 31 32 00 5f 52    74 6c 49 73 56 61 6c 69 64 48 61 6e 64 6c 65 40  | ndexHandle@12._RtlIsValidHandle@ | 
| aa20 |  38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 73 56 61    6c 69 64 48 61 6e 64 6c 65 40 38 00 5f 52 74 6c  | 8.__imp__RtlIsValidHandle@8._Rtl | 
| aa40 |  49 73 54 68 72 65 61 64 57 69 74 68 69 6e 4c 6f    61 64 65 72 43 61 6c 6c 6f 75 74 40 30 00 5f 5f  | IsThreadWithinLoaderCallout@0.__ | 
| aa60 |  69 6d 70 5f 5f 52 74 6c 49 73 54 68 72 65 61 64    57 69 74 68 69 6e 4c 6f 61 64 65 72 43 61 6c 6c  | imp__RtlIsThreadWithinLoaderCall | 
| aa80 |  6f 75 74 40 30 00 5f 52 74 6c 49 73 54 65 78 74    55 6e 69 63 6f 64 65 40 31 32 00 5f 5f 69 6d 70  | out@0._RtlIsTextUnicode@12.__imp | 
| aaa0 |  5f 5f 52 74 6c 49 73 54 65 78 74 55 6e 69 63 6f    64 65 40 31 32 00 5f 52 74 6c 49 73 4e 61 6d 65  | __RtlIsTextUnicode@12._RtlIsName | 
| aac0 |  4c 65 67 61 6c 44 4f 53 38 44 6f 74 33 40 31 32    00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 73 4e 61 6d  | LegalDOS8Dot3@12.__imp__RtlIsNam | 
| aae0 |  65 4c 65 67 61 6c 44 4f 53 38 44 6f 74 33 40 31    32 00 5f 52 74 6c 49 73 47 65 6e 65 72 69 63 54  | eLegalDOS8Dot3@12._RtlIsGenericT | 
| ab00 |  61 62 6c 65 45 6d 70 74 79 41 76 6c 40 34 00 5f    5f 69 6d 70 5f 5f 52 74 6c 49 73 47 65 6e 65 72  | ableEmptyAvl@4.__imp__RtlIsGener | 
| ab20 |  69 63 54 61 62 6c 65 45 6d 70 74 79 41 76 6c 40    34 00 5f 52 74 6c 49 73 47 65 6e 65 72 69 63 54  | icTableEmptyAvl@4._RtlIsGenericT | 
| ab40 |  61 62 6c 65 45 6d 70 74 79 40 34 00 5f 5f 69 6d    70 5f 5f 52 74 6c 49 73 47 65 6e 65 72 69 63 54  | ableEmpty@4.__imp__RtlIsGenericT | 
| ab60 |  61 62 6c 65 45 6d 70 74 79 40 34 00 5f 52 74 6c    49 73 44 6f 73 44 65 76 69 63 65 4e 61 6d 65 5f  | ableEmpty@4._RtlIsDosDeviceName_ | 
| ab80 |  55 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 73    44 6f 73 44 65 76 69 63 65 4e 61 6d 65 5f 55 40  | U@4.__imp__RtlIsDosDeviceName_U@ | 
| aba0 |  34 00 5f 52 74 6c 49 73 43 72 69 74 69 63 61 6c    53 65 63 74 69 6f 6e 4c 6f 63 6b 65 64 42 79 54  | 4._RtlIsCriticalSectionLockedByT | 
| abc0 |  68 72 65 61 64 40 34 00 5f 5f 69 6d 70 5f 5f 52    74 6c 49 73 43 72 69 74 69 63 61 6c 53 65 63 74  | hread@4.__imp__RtlIsCriticalSect | 
| abe0 |  69 6f 6e 4c 6f 63 6b 65 64 42 79 54 68 72 65 61    64 40 34 00 5f 52 74 6c 49 73 43 72 69 74 69 63  | ionLockedByThread@4._RtlIsCritic | 
| ac00 |  61 6c 53 65 63 74 69 6f 6e 4c 6f 63 6b 65 64 40    34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 73 43 72  | alSectionLocked@4.__imp__RtlIsCr | 
| ac20 |  69 74 69 63 61 6c 53 65 63 74 69 6f 6e 4c 6f 63    6b 65 64 40 34 00 5f 52 74 6c 49 73 41 63 74 69  | iticalSectionLocked@4._RtlIsActi | 
| ac40 |  76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 41 63 74    69 76 65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | vationContextActive@4.__imp__Rtl | 
| ac60 |  49 73 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74    65 78 74 41 63 74 69 76 65 40 34 00 5f 52 74 6c  | IsActivationContextActive@4._Rtl | 
| ac80 |  49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72    65 73 73 57 40 31 32 00 5f 5f 69 6d 70 5f 5f 52  | Ipv6StringToAddressW@12.__imp__R | 
| aca0 |  74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64    64 72 65 73 73 57 40 31 32 00 5f 52 74 6c 49 70  | tlIpv6StringToAddressW@12._RtlIp | 
| acc0 |  76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73    73 45 78 57 40 31 36 00 5f 5f 69 6d 70 5f 5f 52  | v6StringToAddressExW@16.__imp__R | 
| ace0 |  74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64    64 72 65 73 73 45 78 57 40 31 36 00 5f 52 74 6c  | tlIpv6StringToAddressExW@16._Rtl | 
| ad00 |  49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72    65 73 73 45 78 41 40 31 36 00 5f 5f 69 6d 70 5f  | Ipv6StringToAddressExA@16.__imp_ | 
| ad20 |  5f 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f    41 64 64 72 65 73 73 45 78 41 40 31 36 00 5f 52  | _RtlIpv6StringToAddressExA@16._R | 
| ad40 |  74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f 41 64    64 72 65 73 73 41 40 31 32 00 5f 5f 69 6d 70 5f  | tlIpv6StringToAddressA@12.__imp_ | 
| ad60 |  5f 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f    41 64 64 72 65 73 73 41 40 31 32 00 5f 52 74 6c  | _RtlIpv6StringToAddressA@12._Rtl | 
| ad80 |  49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72    69 6e 67 57 40 38 00 5f 5f 69 6d 70 5f 5f 52 74  | Ipv6AddressToStringW@8.__imp__Rt | 
| ada0 |  6c 49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74    72 69 6e 67 57 40 38 00 5f 52 74 6c 49 70 76 36  | lIpv6AddressToStringW@8._RtlIpv6 | 
| adc0 |  41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45    78 57 40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | AddressToStringExW@20.__imp__Rtl | 
| ade0 |  49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72    69 6e 67 45 78 57 40 32 30 00 5f 52 74 6c 49 70  | Ipv6AddressToStringExW@20._RtlIp | 
| ae00 |  76 36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e    67 45 78 41 40 32 30 00 5f 5f 69 6d 70 5f 5f 52  | v6AddressToStringExA@20.__imp__R | 
| ae20 |  74 6c 49 70 76 36 41 64 64 72 65 73 73 54 6f 53    74 72 69 6e 67 45 78 41 40 32 30 00 5f 52 74 6c  | tlIpv6AddressToStringExA@20._Rtl | 
| ae40 |  49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74 72    69 6e 67 41 40 38 00 5f 5f 69 6d 70 5f 5f 52 74  | Ipv6AddressToStringA@8.__imp__Rt | 
| ae60 |  6c 49 70 76 36 41 64 64 72 65 73 73 54 6f 53 74    72 69 6e 67 41 40 38 00 5f 52 74 6c 49 70 76 34  | lIpv6AddressToStringA@8._RtlIpv4 | 
| ae80 |  53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 57    40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 70  | StringToAddressW@16.__imp__RtlIp | 
| aea0 |  76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73    73 57 40 31 36 00 5f 52 74 6c 49 70 76 34 53 74  | v4StringToAddressW@16._RtlIpv4St | 
| aec0 |  72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 57    40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 70  | ringToAddressExW@16.__imp__RtlIp | 
| aee0 |  76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73    73 45 78 57 40 31 36 00 5f 52 74 6c 49 70 76 34  | v4StringToAddressExW@16._RtlIpv4 | 
| af00 |  53 74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45    78 41 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | StringToAddressExA@16.__imp__Rtl | 
| af20 |  49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64 72    65 73 73 45 78 41 40 31 36 00 5f 52 74 6c 49 70  | Ipv4StringToAddressExA@16._RtlIp | 
| af40 |  76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73    73 41 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | v4StringToAddressA@16.__imp__Rtl | 
| af60 |  49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64 72    65 73 73 41 40 31 36 00 5f 52 74 6c 49 70 76 34  | Ipv4StringToAddressA@16._RtlIpv4 | 
| af80 |  41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 57    40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 70 76  | AddressToStringW@8.__imp__RtlIpv | 
| afa0 |  34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67    57 40 38 00 5f 52 74 6c 49 70 76 34 41 64 64 72  | 4AddressToStringW@8._RtlIpv4Addr | 
| afc0 |  65 73 73 54 6f 53 74 72 69 6e 67 45 78 57 40 31    36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 70 76 34  | essToStringExW@16.__imp__RtlIpv4 | 
| afe0 |  41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 45    78 57 40 31 36 00 5f 52 74 6c 49 70 76 34 41 64  | AddressToStringExW@16._RtlIpv4Ad | 
| b000 |  64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 41    40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 70  | dressToStringExA@16.__imp__RtlIp | 
| b020 |  76 34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e    67 45 78 41 40 31 36 00 5f 52 74 6c 49 70 76 34  | v4AddressToStringExA@16._RtlIpv4 | 
| b040 |  41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 41    40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 70 76  | AddressToStringA@8.__imp__RtlIpv | 
| b060 |  34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67    41 40 38 00 5f 52 74 6c 49 6e 74 65 72 6c 6f 63  | 4AddressToStringA@8._RtlInterloc | 
| b080 |  6b 65 64 50 75 73 68 45 6e 74 72 79 53 4c 69 73    74 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e  | kedPushEntrySList@8.__imp__RtlIn | 
| b0a0 |  74 65 72 6c 6f 63 6b 65 64 50 75 73 68 45 6e 74    72 79 53 4c 69 73 74 40 38 00 5f 52 74 6c 49 6e  | terlockedPushEntrySList@8._RtlIn | 
| b0c0 |  74 65 72 6c 6f 63 6b 65 64 50 6f 70 45 6e 74 72    79 53 4c 69 73 74 40 34 00 5f 5f 69 6d 70 5f 5f  | terlockedPopEntrySList@4.__imp__ | 
| b0e0 |  52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 50 6f    70 45 6e 74 72 79 53 4c 69 73 74 40 34 00 5f 52  | RtlInterlockedPopEntrySList@4._R | 
| b100 |  74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 46 6c 75    73 68 53 4c 69 73 74 40 34 00 5f 5f 69 6d 70 5f  | tlInterlockedFlushSList@4.__imp_ | 
| b120 |  5f 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 46    6c 75 73 68 53 4c 69 73 74 40 34 00 5f 52 74 6c  | _RtlInterlockedFlushSList@4._Rtl | 
| b140 |  49 6e 74 65 72 6c 6f 63 6b 65 64 43 6f 6d 70 61    72 65 45 78 63 68 61 6e 67 65 36 34 40 32 30 00  | InterlockedCompareExchange64@20. | 
| b160 |  5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 74 65 72 6c    6f 63 6b 65 64 43 6f 6d 70 61 72 65 45 78 63 68  | __imp__RtlInterlockedCompareExch | 
| b180 |  61 6e 67 65 36 34 40 32 30 00 5f 52 74 6c 49 6e    74 65 67 65 72 54 6f 55 6e 69 63 6f 64 65 53 74  | ange64@20._RtlIntegerToUnicodeSt | 
| b1a0 |  72 69 6e 67 40 31 32 00 5f 5f 69 6d 70 5f 5f 52    74 6c 49 6e 74 65 67 65 72 54 6f 55 6e 69 63 6f  | ring@12.__imp__RtlIntegerToUnico | 
| b1c0 |  64 65 53 74 72 69 6e 67 40 31 32 00 5f 52 74 6c    49 6e 74 65 67 65 72 54 6f 43 68 61 72 40 31 36  | deString@12._RtlIntegerToChar@16 | 
| b1e0 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 74 65 67    65 72 54 6f 43 68 61 72 40 31 36 00 5f 52 74 6c  | .__imp__RtlIntegerToChar@16._Rtl | 
| b200 |  49 6e 74 36 34 54 6f 55 6e 69 63 6f 64 65 53 74    72 69 6e 67 40 31 36 00 5f 5f 69 6d 70 5f 5f 52  | Int64ToUnicodeString@16.__imp__R | 
| b220 |  74 6c 49 6e 74 36 34 54 6f 55 6e 69 63 6f 64 65    53 74 72 69 6e 67 40 31 36 00 5f 52 74 6c 49 6e  | tlInt64ToUnicodeString@16._RtlIn | 
| b240 |  73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72    69 63 54 61 62 6c 65 46 75 6c 6c 41 76 6c 40 32  | sertElementGenericTableFullAvl@2 | 
| b260 |  34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 73 65    72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63  | 4.__imp__RtlInsertElementGeneric | 
| b280 |  54 61 62 6c 65 46 75 6c 6c 41 76 6c 40 32 34 00    5f 52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e  | TableFullAvl@24._RtlInsertElemen | 
| b2a0 |  74 47 65 6e 65 72 69 63 54 61 62 6c 65 46 75 6c    6c 40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49  | tGenericTableFull@24.__imp__RtlI | 
| b2c0 |  6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65    72 69 63 54 61 62 6c 65 46 75 6c 6c 40 32 34 00  | nsertElementGenericTableFull@24. | 
| b2e0 |  5f 52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e    74 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c  | _RtlInsertElementGenericTableAvl | 
| b300 |  40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e    73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72  | @16.__imp__RtlInsertElementGener | 
| b320 |  69 63 54 61 62 6c 65 41 76 6c 40 31 36 00 5f 52    74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47  | icTableAvl@16._RtlInsertElementG | 
| b340 |  65 6e 65 72 69 63 54 61 62 6c 65 40 31 36 00 5f    5f 69 6d 70 5f 5f 52 74 6c 49 6e 73 65 72 74 45  | enericTable@16.__imp__RtlInsertE | 
| b360 |  6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62    6c 65 40 31 36 00 5f 52 74 6c 49 6e 69 74 69 61  | lementGenericTable@16._RtlInitia | 
| b380 |  6c 69 7a 65 53 69 64 40 31 32 00 5f 5f 69 6d 70    5f 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 53  | lizeSid@12.__imp__RtlInitializeS | 
| b3a0 |  69 64 40 31 32 00 5f 52 74 6c 49 6e 69 74 69 61    6c 69 7a 65 53 4c 69 73 74 48 65 61 64 40 34 00  | id@12._RtlInitializeSListHead@4. | 
| b3c0 |  5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 69 74 69 61    6c 69 7a 65 53 4c 69 73 74 48 65 61 64 40 34 00  | __imp__RtlInitializeSListHead@4. | 
| b3e0 |  5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 52 65    73 6f 75 72 63 65 40 34 00 5f 5f 69 6d 70 5f 5f  | _RtlInitializeResource@4.__imp__ | 
| b400 |  52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 52 65 73    6f 75 72 63 65 40 34 00 5f 52 74 6c 49 6e 69 74  | RtlInitializeResource@4._RtlInit | 
| b420 |  69 61 6c 69 7a 65 52 58 61 63 74 40 31 32 00 5f    5f 69 6d 70 5f 5f 52 74 6c 49 6e 69 74 69 61 6c  | ializeRXact@12.__imp__RtlInitial | 
| b440 |  69 7a 65 52 58 61 63 74 40 31 32 00 5f 52 74 6c    49 6e 69 74 69 61 6c 69 7a 65 48 61 6e 64 6c 65  | izeRXact@12._RtlInitializeHandle | 
| b460 |  54 61 62 6c 65 40 31 32 00 5f 5f 69 6d 70 5f 5f    52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 48 61 6e  | Table@12.__imp__RtlInitializeHan | 
| b480 |  64 6c 65 54 61 62 6c 65 40 31 32 00 5f 52 74 6c    49 6e 69 74 69 61 6c 69 7a 65 47 65 6e 65 72 69  | dleTable@12._RtlInitializeGeneri | 
| b4a0 |  63 54 61 62 6c 65 41 76 6c 40 32 30 00 5f 5f 69    6d 70 5f 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a  | cTableAvl@20.__imp__RtlInitializ | 
| b4c0 |  65 47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c    40 32 30 00 5f 52 74 6c 49 6e 69 74 69 61 6c 69  | eGenericTableAvl@20._RtlInitiali | 
| b4e0 |  7a 65 47 65 6e 65 72 69 63 54 61 62 6c 65 40 32    30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 69 74  | zeGenericTable@20.__imp__RtlInit | 
| b500 |  69 61 6c 69 7a 65 47 65 6e 65 72 69 63 54 61 62    6c 65 40 32 30 00 5f 52 74 6c 49 6e 69 74 69 61  | ializeGenericTable@20._RtlInitia | 
| b520 |  6c 69 7a 65 43 72 69 74 69 63 61 6c 53 65 63 74    69 6f 6e 41 6e 64 53 70 69 6e 43 6f 75 6e 74 40  | lizeCriticalSectionAndSpinCount@ | 
| b540 |  38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 69 74    69 61 6c 69 7a 65 43 72 69 74 69 63 61 6c 53 65  | 8.__imp__RtlInitializeCriticalSe | 
| b560 |  63 74 69 6f 6e 41 6e 64 53 70 69 6e 43 6f 75 6e    74 40 38 00 5f 52 74 6c 49 6e 69 74 69 61 6c 69  | ctionAndSpinCount@8._RtlInitiali | 
| b580 |  7a 65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f    6e 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e  | zeCriticalSection@4.__imp__RtlIn | 
| b5a0 |  69 74 69 61 6c 69 7a 65 43 72 69 74 69 63 61 6c    53 65 63 74 69 6f 6e 40 34 00 5f 52 74 6c 49 6e  | itializeCriticalSection@4._RtlIn | 
| b5c0 |  69 74 69 61 6c 69 7a 65 43 6f 6e 74 65 78 74 40    32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 69  | itializeContext@20.__imp__RtlIni | 
| b5e0 |  74 69 61 6c 69 7a 65 43 6f 6e 74 65 78 74 40 32    30 00 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65  | tializeContext@20._RtlInitialize | 
| b600 |  42 69 74 4d 61 70 40 31 32 00 5f 5f 69 6d 70 5f    5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 42 69  | BitMap@12.__imp__RtlInitializeBi | 
| b620 |  74 4d 61 70 40 31 32 00 5f 52 74 6c 49 6e 69 74    69 61 6c 69 7a 65 41 74 6f 6d 50 61 63 6b 61 67  | tMap@12._RtlInitializeAtomPackag | 
| b640 |  65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e    69 74 69 61 6c 69 7a 65 41 74 6f 6d 50 61 63 6b  | e@4.__imp__RtlInitializeAtomPack | 
| b660 |  61 67 65 40 34 00 5f 52 74 6c 49 6e 69 74 55 6e    69 63 6f 64 65 53 74 72 69 6e 67 45 78 40 38 00  | age@4._RtlInitUnicodeStringEx@8. | 
| b680 |  5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 69 74 55 6e    69 63 6f 64 65 53 74 72 69 6e 67 45 78 40 38 00  | __imp__RtlInitUnicodeStringEx@8. | 
| b6a0 |  5f 52 74 6c 49 6e 69 74 55 6e 69 63 6f 64 65 53    74 72 69 6e 67 40 38 00 5f 5f 69 6d 70 5f 5f 52  | _RtlInitUnicodeString@8.__imp__R | 
| b6c0 |  74 6c 49 6e 69 74 55 6e 69 63 6f 64 65 53 74 72    69 6e 67 40 38 00 5f 52 74 6c 49 6e 69 74 53 74  | tlInitUnicodeString@8._RtlInitSt | 
| b6e0 |  72 69 6e 67 40 38 00 5f 5f 69 6d 70 5f 5f 52 74    6c 49 6e 69 74 53 74 72 69 6e 67 40 38 00 5f 52  | ring@8.__imp__RtlInitString@8._R | 
| b700 |  74 6c 49 6e 69 74 4f 75 74 4f 66 50 72 6f 63 65    73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 40 34  | tlInitOutOfProcessMemoryStream@4 | 
| b720 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 69 74 4f    75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72  | .__imp__RtlInitOutOfProcessMemor | 
| b740 |  79 53 74 72 65 61 6d 40 34 00 5f 52 74 6c 49 6e    69 74 4e 6c 73 54 61 62 6c 65 73 40 31 36 00 5f  | yStream@4._RtlInitNlsTables@16._ | 
| b760 |  5f 69 6d 70 5f 5f 52 74 6c 49 6e 69 74 4e 6c 73    54 61 62 6c 65 73 40 31 36 00 5f 52 74 6c 49 6e  | _imp__RtlInitNlsTables@16._RtlIn | 
| b780 |  69 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 40 34    00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 69 74 4d  | itMemoryStream@4.__imp__RtlInitM | 
| b7a0 |  65 6d 6f 72 79 53 74 72 65 61 6d 40 34 00 5f 52    74 6c 49 6e 69 74 43 6f 64 65 50 61 67 65 54 61  | emoryStream@4._RtlInitCodePageTa | 
| b7c0 |  62 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c    49 6e 69 74 43 6f 64 65 50 61 67 65 54 61 62 6c  | ble@8.__imp__RtlInitCodePageTabl | 
| b7e0 |  65 40 38 00 5f 52 74 6c 49 6e 69 74 41 6e 73 69    53 74 72 69 6e 67 45 78 40 38 00 5f 5f 69 6d 70  | e@8._RtlInitAnsiStringEx@8.__imp | 
| b800 |  5f 5f 52 74 6c 49 6e 69 74 41 6e 73 69 53 74 72    69 6e 67 45 78 40 38 00 5f 52 74 6c 49 6e 69 74  | __RtlInitAnsiStringEx@8._RtlInit | 
| b820 |  41 6e 73 69 53 74 72 69 6e 67 40 38 00 5f 5f 69    6d 70 5f 5f 52 74 6c 49 6e 69 74 41 6e 73 69 53  | AnsiString@8.__imp__RtlInitAnsiS | 
| b840 |  74 72 69 6e 67 40 38 00 5f 52 74 6c 49 6d 70 65    72 73 6f 6e 61 74 65 53 65 6c 66 40 34 00 5f 5f  | tring@8._RtlImpersonateSelf@4.__ | 
| b860 |  69 6d 70 5f 5f 52 74 6c 49 6d 70 65 72 73 6f 6e    61 74 65 53 65 6c 66 40 34 00 5f 52 74 6c 49 6d  | imp__RtlImpersonateSelf@4._RtlIm | 
| b880 |  61 67 65 52 76 61 54 6f 56 61 40 31 36 00 5f 5f    69 6d 70 5f 5f 52 74 6c 49 6d 61 67 65 52 76 61  | ageRvaToVa@16.__imp__RtlImageRva | 
| b8a0 |  54 6f 56 61 40 31 36 00 5f 52 74 6c 49 6d 61 67    65 52 76 61 54 6f 53 65 63 74 69 6f 6e 40 31 32  | ToVa@16._RtlImageRvaToSection@12 | 
| b8c0 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6d 61 67 65    52 76 61 54 6f 53 65 63 74 69 6f 6e 40 31 32 00  | .__imp__RtlImageRvaToSection@12. | 
| b8e0 |  5f 52 74 6c 49 6d 61 67 65 4e 74 48 65 61 64 65    72 45 78 40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74  | _RtlImageNtHeaderEx@20.__imp__Rt | 
| b900 |  6c 49 6d 61 67 65 4e 74 48 65 61 64 65 72 45 78    40 32 30 00 5f 52 74 6c 49 6d 61 67 65 4e 74 48  | lImageNtHeaderEx@20._RtlImageNtH | 
| b920 |  65 61 64 65 72 40 34 00 5f 5f 69 6d 70 5f 5f 52    74 6c 49 6d 61 67 65 4e 74 48 65 61 64 65 72 40  | eader@4.__imp__RtlImageNtHeader@ | 
| b940 |  34 00 5f 52 74 6c 49 6d 61 67 65 44 69 72 65 63    74 6f 72 79 45 6e 74 72 79 54 6f 44 61 74 61 40  | 4._RtlImageDirectoryEntryToData@ | 
| b960 |  31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6d 61    67 65 44 69 72 65 63 74 6f 72 79 45 6e 74 72 79  | 16.__imp__RtlImageDirectoryEntry | 
| b980 |  54 6f 44 61 74 61 40 31 36 00 5f 52 74 6c 49 64    65 6e 74 69 66 69 65 72 41 75 74 68 6f 72 69 74  | ToData@16._RtlIdentifierAuthorit | 
| b9a0 |  79 53 69 64 40 34 00 5f 5f 69 6d 70 5f 5f 52 74    6c 49 64 65 6e 74 69 66 69 65 72 41 75 74 68 6f  | ySid@4.__imp__RtlIdentifierAutho | 
| b9c0 |  72 69 74 79 53 69 64 40 34 00 5f 52 74 6c 48 61    73 68 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 40  | ritySid@4._RtlHashUnicodeString@ | 
| b9e0 |  31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 48 61 73    68 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 40 31  | 16.__imp__RtlHashUnicodeString@1 | 
| ba00 |  36 00 5f 52 74 6c 47 65 74 56 65 72 73 69 6f 6e    40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74  | 6._RtlGetVersion@4.__imp__RtlGet | 
| ba20 |  56 65 72 73 69 6f 6e 40 34 00 5f 52 74 6c 47 65    74 55 73 65 72 49 6e 66 6f 48 65 61 70 40 32 30  | Version@4._RtlGetUserInfoHeap@20 | 
| ba40 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74 55 73    65 72 49 6e 66 6f 48 65 61 70 40 32 30 00 5f 52  | .__imp__RtlGetUserInfoHeap@20._R | 
| ba60 |  74 6c 47 65 74 55 6e 6c 6f 61 64 45 76 65 6e 74    54 72 61 63 65 40 30 00 5f 5f 69 6d 70 5f 5f 52  | tlGetUnloadEventTrace@0.__imp__R | 
| ba80 |  74 6c 47 65 74 55 6e 6c 6f 61 64 45 76 65 6e 74    54 72 61 63 65 40 30 00 5f 52 74 6c 47 65 74 54  | tlGetUnloadEventTrace@0._RtlGetT | 
| baa0 |  68 72 65 61 64 45 72 72 6f 72 4d 6f 64 65 40 30    00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74 54 68  | hreadErrorMode@0.__imp__RtlGetTh | 
| bac0 |  72 65 61 64 45 72 72 6f 72 4d 6f 64 65 40 30 00    5f 52 74 6c 47 65 74 53 65 74 42 6f 6f 74 53 74  | readErrorMode@0._RtlGetSetBootSt | 
| bae0 |  61 74 75 73 44 61 74 61 40 32 34 00 5f 5f 69 6d    70 5f 5f 52 74 6c 47 65 74 53 65 74 42 6f 6f 74  | atusData@24.__imp__RtlGetSetBoot | 
| bb00 |  53 74 61 74 75 73 44 61 74 61 40 32 34 00 5f 52    74 6c 47 65 74 53 65 63 75 72 69 74 79 44 65 73  | StatusData@24._RtlGetSecurityDes | 
| bb20 |  63 72 69 70 74 6f 72 52 4d 43 6f 6e 74 72 6f 6c    40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74  | criptorRMControl@8.__imp__RtlGet | 
| bb40 |  53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74    6f 72 52 4d 43 6f 6e 74 72 6f 6c 40 38 00 5f 52  | SecurityDescriptorRMControl@8._R | 
| bb60 |  74 6c 47 65 74 53 61 63 6c 53 65 63 75 72 69 74    79 44 65 73 63 72 69 70 74 6f 72 40 31 36 00 5f  | tlGetSaclSecurityDescriptor@16._ | 
| bb80 |  5f 69 6d 70 5f 5f 52 74 6c 47 65 74 53 61 63 6c    53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74  | _imp__RtlGetSaclSecurityDescript | 
| bba0 |  6f 72 40 31 36 00 5f 52 74 6c 47 65 74 50 72 6f    63 65 73 73 48 65 61 70 73 40 38 00 5f 5f 69 6d  | or@16._RtlGetProcessHeaps@8.__im | 
| bbc0 |  70 5f 5f 52 74 6c 47 65 74 50 72 6f 63 65 73 73    48 65 61 70 73 40 38 00 5f 52 74 6c 47 65 74 4f  | p__RtlGetProcessHeaps@8._RtlGetO | 
| bbe0 |  77 6e 65 72 53 65 63 75 72 69 74 79 44 65 73 63    72 69 70 74 6f 72 40 31 32 00 5f 5f 69 6d 70 5f  | wnerSecurityDescriptor@12.__imp_ | 
| bc00 |  5f 52 74 6c 47 65 74 4f 77 6e 65 72 53 65 63 75    72 69 74 79 44 65 73 63 72 69 70 74 6f 72 40 31  | _RtlGetOwnerSecurityDescriptor@1 | 
| bc20 |  32 00 5f 52 74 6c 47 65 74 4e 74 56 65 72 73 69    6f 6e 4e 75 6d 62 65 72 73 40 31 32 00 5f 5f 69  | 2._RtlGetNtVersionNumbers@12.__i | 
| bc40 |  6d 70 5f 5f 52 74 6c 47 65 74 4e 74 56 65 72 73    69 6f 6e 4e 75 6d 62 65 72 73 40 31 32 00 5f 52  | mp__RtlGetNtVersionNumbers@12._R | 
| bc60 |  74 6c 47 65 74 4e 74 50 72 6f 64 75 63 74 54 79    70 65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47  | tlGetNtProductType@4.__imp__RtlG | 
| bc80 |  65 74 4e 74 50 72 6f 64 75 63 74 54 79 70 65 40    34 00 5f 52 74 6c 47 65 74 4e 74 47 6c 6f 62 61  | etNtProductType@4._RtlGetNtGloba | 
| bca0 |  6c 46 6c 61 67 73 40 30 00 5f 5f 69 6d 70 5f 5f    52 74 6c 47 65 74 4e 74 47 6c 6f 62 61 6c 46 6c  | lFlags@0.__imp__RtlGetNtGlobalFl | 
| bcc0 |  61 67 73 40 30 00 5f 52 74 6c 47 65 74 4e 61 74    69 76 65 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61  | ags@0._RtlGetNativeSystemInforma | 
| bce0 |  74 69 6f 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f 52    74 6c 47 65 74 4e 61 74 69 76 65 53 79 73 74 65  | tion@16.__imp__RtlGetNativeSyste | 
| bd00 |  6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00    5f 52 74 6c 47 65 74 4c 6f 6e 67 65 73 74 4e 74  | mInformation@16._RtlGetLongestNt | 
| bd20 |  50 61 74 68 4c 65 6e 67 74 68 40 30 00 5f 5f 69    6d 70 5f 5f 52 74 6c 47 65 74 4c 6f 6e 67 65 73  | PathLength@0.__imp__RtlGetLonges | 
| bd40 |  74 4e 74 50 61 74 68 4c 65 6e 67 74 68 40 30 00    5f 52 74 6c 47 65 74 4c 65 6e 67 74 68 57 69 74  | tNtPathLength@0._RtlGetLengthWit | 
| bd60 |  68 6f 75 74 54 72 61 69 6c 69 6e 67 50 61 74 68    53 65 70 65 72 61 74 6f 72 73 40 31 32 00 5f 5f  | houtTrailingPathSeperators@12.__ | 
| bd80 |  69 6d 70 5f 5f 52 74 6c 47 65 74 4c 65 6e 67 74    68 57 69 74 68 6f 75 74 54 72 61 69 6c 69 6e 67  | imp__RtlGetLengthWithoutTrailing | 
| bda0 |  50 61 74 68 53 65 70 65 72 61 74 6f 72 73 40 31    32 00 5f 52 74 6c 47 65 74 4c 65 6e 67 74 68 57  | PathSeperators@12._RtlGetLengthW | 
| bdc0 |  69 74 68 6f 75 74 4c 61 73 74 46 75 6c 6c 44 6f    73 4f 72 4e 74 50 61 74 68 45 6c 65 6d 65 6e 74  | ithoutLastFullDosOrNtPathElement | 
| bde0 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65    74 4c 65 6e 67 74 68 57 69 74 68 6f 75 74 4c 61  | @12.__imp__RtlGetLengthWithoutLa | 
| be00 |  73 74 46 75 6c 6c 44 6f 73 4f 72 4e 74 50 61 74    68 45 6c 65 6d 65 6e 74 40 31 32 00 5f 52 74 6c  | stFullDosOrNtPathElement@12._Rtl | 
| be20 |  47 65 74 4c 61 73 74 57 69 6e 33 32 45 72 72 6f    72 40 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65  | GetLastWin32Error@0.__imp__RtlGe | 
| be40 |  74 4c 61 73 74 57 69 6e 33 32 45 72 72 6f 72 40    30 00 5f 52 74 6c 47 65 74 4c 61 73 74 4e 74 53  | tLastWin32Error@0._RtlGetLastNtS | 
| be60 |  74 61 74 75 73 40 30 00 5f 5f 69 6d 70 5f 5f 52    74 6c 47 65 74 4c 61 73 74 4e 74 53 74 61 74 75  | tatus@0.__imp__RtlGetLastNtStatu | 
| be80 |  73 40 30 00 5f 52 74 6c 47 65 74 47 72 6f 75 70    53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74  | s@0._RtlGetGroupSecurityDescript | 
| bea0 |  6f 72 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c    47 65 74 47 72 6f 75 70 53 65 63 75 72 69 74 79  | or@12.__imp__RtlGetGroupSecurity | 
| bec0 |  44 65 73 63 72 69 70 74 6f 72 40 31 32 00 5f 52    74 6c 47 65 74 46 75 6c 6c 50 61 74 68 4e 61 6d  | Descriptor@12._RtlGetFullPathNam | 
| bee0 |  65 5f 55 73 74 72 45 78 40 33 32 00 5f 5f 69 6d    70 5f 5f 52 74 6c 47 65 74 46 75 6c 6c 50 61 74  | e_UstrEx@32.__imp__RtlGetFullPat | 
| bf00 |  68 4e 61 6d 65 5f 55 73 74 72 45 78 40 33 32 00    5f 52 74 6c 47 65 74 46 75 6c 6c 50 61 74 68 4e  | hName_UstrEx@32._RtlGetFullPathN | 
| bf20 |  61 6d 65 5f 55 40 31 36 00 5f 5f 69 6d 70 5f 5f    52 74 6c 47 65 74 46 75 6c 6c 50 61 74 68 4e 61  | ame_U@16.__imp__RtlGetFullPathNa | 
| bf40 |  6d 65 5f 55 40 31 36 00 5f 52 74 6c 47 65 74 46    72 61 6d 65 40 30 00 5f 5f 69 6d 70 5f 5f 52 74  | me_U@16._RtlGetFrame@0.__imp__Rt | 
| bf60 |  6c 47 65 74 46 72 61 6d 65 40 30 00 5f 52 74 6c    47 65 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69  | lGetFrame@0._RtlGetElementGeneri | 
| bf80 |  63 54 61 62 6c 65 41 76 6c 40 38 00 5f 5f 69 6d    70 5f 5f 52 74 6c 47 65 74 45 6c 65 6d 65 6e 74  | cTableAvl@8.__imp__RtlGetElement | 
| bfa0 |  47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 40    38 00 5f 52 74 6c 47 65 74 45 6c 65 6d 65 6e 74  | GenericTableAvl@8._RtlGetElement | 
| bfc0 |  47 65 6e 65 72 69 63 54 61 62 6c 65 40 38 00 5f    5f 69 6d 70 5f 5f 52 74 6c 47 65 74 45 6c 65 6d  | GenericTable@8.__imp__RtlGetElem | 
| bfe0 |  65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 40    38 00 5f 52 74 6c 47 65 74 44 61 63 6c 53 65 63  | entGenericTable@8._RtlGetDaclSec | 
| c000 |  75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 40    31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74  | urityDescriptor@16.__imp__RtlGet | 
| c020 |  44 61 63 6c 53 65 63 75 72 69 74 79 44 65 73 63    72 69 70 74 6f 72 40 31 36 00 5f 52 74 6c 47 65  | DaclSecurityDescriptor@16._RtlGe | 
| c040 |  74 43 75 72 72 65 6e 74 50 72 6f 63 65 73 73 6f    72 4e 75 6d 62 65 72 40 30 00 5f 5f 69 6d 70 5f  | tCurrentProcessorNumber@0.__imp_ | 
| c060 |  5f 52 74 6c 47 65 74 43 75 72 72 65 6e 74 50 72    6f 63 65 73 73 6f 72 4e 75 6d 62 65 72 40 30 00  | _RtlGetCurrentProcessorNumber@0. | 
| c080 |  5f 52 74 6c 47 65 74 43 75 72 72 65 6e 74 50 65    62 40 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65  | _RtlGetCurrentPeb@0.__imp__RtlGe | 
| c0a0 |  74 43 75 72 72 65 6e 74 50 65 62 40 30 00 5f 52    74 6c 47 65 74 43 75 72 72 65 6e 74 44 69 72 65  | tCurrentPeb@0._RtlGetCurrentDire | 
| c0c0 |  63 74 6f 72 79 5f 55 40 38 00 5f 5f 69 6d 70 5f    5f 52 74 6c 47 65 74 43 75 72 72 65 6e 74 44 69  | ctory_U@8.__imp__RtlGetCurrentDi | 
| c0e0 |  72 65 63 74 6f 72 79 5f 55 40 38 00 5f 52 74 6c    47 65 74 43 72 69 74 69 63 61 6c 53 65 63 74 69  | rectory_U@8._RtlGetCriticalSecti | 
| c100 |  6f 6e 52 65 63 75 72 73 69 6f 6e 43 6f 75 6e 74    40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74  | onRecursionCount@4.__imp__RtlGet | 
| c120 |  43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 52    65 63 75 72 73 69 6f 6e 43 6f 75 6e 74 40 34 00  | CriticalSectionRecursionCount@4. | 
| c140 |  5f 52 74 6c 47 65 74 43 6f 6e 74 72 6f 6c 53 65    63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72  | _RtlGetControlSecurityDescriptor | 
| c160 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65    74 43 6f 6e 74 72 6f 6c 53 65 63 75 72 69 74 79  | @12.__imp__RtlGetControlSecurity | 
| c180 |  44 65 73 63 72 69 70 74 6f 72 40 31 32 00 5f 52    74 6c 47 65 74 43 6f 6d 70 72 65 73 73 69 6f 6e  | Descriptor@12._RtlGetCompression | 
| c1a0 |  57 6f 72 6b 53 70 61 63 65 53 69 7a 65 40 31 32    00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74 43 6f  | WorkSpaceSize@12.__imp__RtlGetCo | 
| c1c0 |  6d 70 72 65 73 73 69 6f 6e 57 6f 72 6b 53 70 61    63 65 53 69 7a 65 40 31 32 00 5f 52 74 6c 47 65  | mpressionWorkSpaceSize@12._RtlGe | 
| c1e0 |  74 43 61 6c 6c 65 72 73 41 64 64 72 65 73 73 40    38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74 43  | tCallersAddress@8.__imp__RtlGetC | 
| c200 |  61 6c 6c 65 72 73 41 64 64 72 65 73 73 40 38 00    5f 52 74 6c 47 65 74 41 63 74 69 76 65 41 63 74  | allersAddress@8._RtlGetActiveAct | 
| c220 |  69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 40 34    00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74 41 63  | ivationContext@4.__imp__RtlGetAc | 
| c240 |  74 69 76 65 41 63 74 69 76 61 74 69 6f 6e 43 6f    6e 74 65 78 74 40 34 00 5f 52 74 6c 47 65 74 41  | tiveActivationContext@4._RtlGetA | 
| c260 |  63 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c    47 65 74 41 63 65 40 31 32 00 5f 52 74 6c 47 65  | ce@12.__imp__RtlGetAce@12._RtlGe | 
| c280 |  6e 65 72 61 74 65 38 64 6f 74 33 4e 61 6d 65 40    31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 6e  | nerate8dot3Name@16.__imp__RtlGen | 
| c2a0 |  65 72 61 74 65 38 64 6f 74 33 4e 61 6d 65 40 31    36 00 5f 52 74 6c 47 55 49 44 46 72 6f 6d 53 74  | erate8dot3Name@16._RtlGUIDFromSt | 
| c2c0 |  72 69 6e 67 40 38 00 5f 5f 69 6d 70 5f 5f 52 74    6c 47 55 49 44 46 72 6f 6d 53 74 72 69 6e 67 40  | ring@8.__imp__RtlGUIDFromString@ | 
| c2e0 |  38 00 5f 52 74 6c 46 72 65 65 55 73 65 72 54 68    72 65 61 64 53 74 61 63 6b 40 38 00 5f 5f 69 6d  | 8._RtlFreeUserThreadStack@8.__im | 
| c300 |  70 5f 5f 52 74 6c 46 72 65 65 55 73 65 72 54 68    72 65 61 64 53 74 61 63 6b 40 38 00 5f 52 74 6c  | p__RtlFreeUserThreadStack@8._Rtl | 
| c320 |  46 72 65 65 55 6e 69 63 6f 64 65 53 74 72 69 6e    67 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 72  | FreeUnicodeString@4.__imp__RtlFr | 
| c340 |  65 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 40    34 00 5f 52 74 6c 46 72 65 65 54 68 72 65 61 64  | eeUnicodeString@4._RtlFreeThread | 
| c360 |  41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78    74 53 74 61 63 6b 40 30 00 5f 5f 69 6d 70 5f 5f  | ActivationContextStack@0.__imp__ | 
| c380 |  52 74 6c 46 72 65 65 54 68 72 65 61 64 41 63 74    69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 74  | RtlFreeThreadActivationContextSt | 
| c3a0 |  61 63 6b 40 30 00 5f 52 74 6c 46 72 65 65 53 69    64 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 72  | ack@0._RtlFreeSid@4.__imp__RtlFr | 
| c3c0 |  65 65 53 69 64 40 34 00 5f 52 74 6c 46 72 65 65    4f 65 6d 53 74 72 69 6e 67 40 34 00 5f 5f 69 6d  | eeSid@4._RtlFreeOemString@4.__im | 
| c3e0 |  70 5f 5f 52 74 6c 46 72 65 65 4f 65 6d 53 74 72    69 6e 67 40 34 00 5f 52 74 6c 46 72 65 65 48 65  | p__RtlFreeOemString@4._RtlFreeHe | 
| c400 |  61 70 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c    46 72 65 65 48 65 61 70 40 31 32 00 5f 52 74 6c  | ap@12.__imp__RtlFreeHeap@12._Rtl | 
| c420 |  46 72 65 65 48 61 6e 64 6c 65 40 38 00 5f 5f 69    6d 70 5f 5f 52 74 6c 46 72 65 65 48 61 6e 64 6c  | FreeHandle@8.__imp__RtlFreeHandl | 
| c440 |  65 40 38 00 5f 52 74 6c 46 72 65 65 41 6e 73 69    53 74 72 69 6e 67 40 34 00 5f 5f 69 6d 70 5f 5f  | e@8._RtlFreeAnsiString@4.__imp__ | 
| c460 |  52 74 6c 46 72 65 65 41 6e 73 69 53 74 72 69 6e    67 40 34 00 5f 52 74 6c 46 72 65 65 41 63 74 69  | RtlFreeAnsiString@4._RtlFreeActi | 
| c480 |  76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 74 61    63 6b 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 46  | vationContextStack@4.__imp__RtlF | 
| c4a0 |  72 65 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e    74 65 78 74 53 74 61 63 6b 40 34 00 5f 52 74 6c  | reeActivationContextStack@4._Rtl | 
| c4c0 |  46 6f 72 6d 61 74 4d 65 73 73 61 67 65 45 78 40    34 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 6f 72  | FormatMessageEx@40.__imp__RtlFor | 
| c4e0 |  6d 61 74 4d 65 73 73 61 67 65 45 78 40 34 30 00    5f 52 74 6c 46 6f 72 6d 61 74 4d 65 73 73 61 67  | matMessageEx@40._RtlFormatMessag | 
| c500 |  65 40 33 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 46    6f 72 6d 61 74 4d 65 73 73 61 67 65 40 33 36 00  | e@36.__imp__RtlFormatMessage@36. | 
| c520 |  5f 52 74 6c 46 6f 72 6d 61 74 43 75 72 72 65 6e    74 55 73 65 72 4b 65 79 50 61 74 68 40 34 00 5f  | _RtlFormatCurrentUserKeyPath@4._ | 
| c540 |  5f 69 6d 70 5f 5f 52 74 6c 46 6f 72 6d 61 74 43    75 72 72 65 6e 74 55 73 65 72 4b 65 79 50 61 74  | _imp__RtlFormatCurrentUserKeyPat | 
| c560 |  68 40 34 00 5f 52 74 6c 46 6c 75 73 68 53 65 63    75 72 65 4d 65 6d 6f 72 79 43 61 63 68 65 40 38  | h@4._RtlFlushSecureMemoryCache@8 | 
| c580 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 6c 75 73 68    53 65 63 75 72 65 4d 65 6d 6f 72 79 43 61 63 68  | .__imp__RtlFlushSecureMemoryCach | 
| c5a0 |  65 40 38 00 5f 52 74 6c 46 69 72 73 74 46 72 65    65 41 63 65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74  | e@8._RtlFirstFreeAce@8.__imp__Rt | 
| c5c0 |  6c 46 69 72 73 74 46 72 65 65 41 63 65 40 38 00    5f 52 74 6c 46 69 72 73 74 45 6e 74 72 79 53 4c  | lFirstFreeAce@8._RtlFirstEntrySL | 
| c5e0 |  69 73 74 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c    46 69 72 73 74 45 6e 74 72 79 53 4c 69 73 74 40  | ist@4.__imp__RtlFirstEntrySList@ | 
| c600 |  34 00 5f 52 74 6c 46 69 6e 64 53 65 74 42 69 74    73 41 6e 64 43 6c 65 61 72 40 31 32 00 5f 5f 69  | 4._RtlFindSetBitsAndClear@12.__i | 
| c620 |  6d 70 5f 5f 52 74 6c 46 69 6e 64 53 65 74 42 69    74 73 41 6e 64 43 6c 65 61 72 40 31 32 00 5f 52  | mp__RtlFindSetBitsAndClear@12._R | 
| c640 |  74 6c 46 69 6e 64 53 65 74 42 69 74 73 40 31 32    00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 69 6e 64 53  | tlFindSetBits@12.__imp__RtlFindS | 
| c660 |  65 74 42 69 74 73 40 31 32 00 5f 52 74 6c 46 69    6e 64 4e 65 78 74 46 6f 72 77 61 72 64 52 75 6e  | etBits@12._RtlFindNextForwardRun | 
| c680 |  43 6c 65 61 72 40 31 32 00 5f 5f 69 6d 70 5f 5f    52 74 6c 46 69 6e 64 4e 65 78 74 46 6f 72 77 61  | Clear@12.__imp__RtlFindNextForwa | 
| c6a0 |  72 64 52 75 6e 43 6c 65 61 72 40 31 32 00 5f 52    74 6c 46 69 6e 64 4d 6f 73 74 53 69 67 6e 69 66  | rdRunClear@12._RtlFindMostSignif | 
| c6c0 |  69 63 61 6e 74 42 69 74 40 38 00 5f 5f 69 6d 70    5f 5f 52 74 6c 46 69 6e 64 4d 6f 73 74 53 69 67  | icantBit@8.__imp__RtlFindMostSig | 
| c6e0 |  6e 69 66 69 63 61 6e 74 42 69 74 40 38 00 5f 52    74 6c 46 69 6e 64 4d 65 73 73 61 67 65 40 32 30  | nificantBit@8._RtlFindMessage@20 | 
| c700 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 69 6e 64 4d    65 73 73 61 67 65 40 32 30 00 5f 52 74 6c 46 69  | .__imp__RtlFindMessage@20._RtlFi | 
| c720 |  6e 64 4c 6f 6e 67 65 73 74 52 75 6e 43 6c 65 61    72 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 69  | ndLongestRunClear@8.__imp__RtlFi | 
| c740 |  6e 64 4c 6f 6e 67 65 73 74 52 75 6e 43 6c 65 61    72 40 38 00 5f 52 74 6c 46 69 6e 64 4c 65 61 73  | ndLongestRunClear@8._RtlFindLeas | 
| c760 |  74 53 69 67 6e 69 66 69 63 61 6e 74 42 69 74 40    38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 69 6e 64  | tSignificantBit@8.__imp__RtlFind | 
| c780 |  4c 65 61 73 74 53 69 67 6e 69 66 69 63 61 6e 74    42 69 74 40 38 00 5f 52 74 6c 46 69 6e 64 4c 61  | LeastSignificantBit@8._RtlFindLa | 
| c7a0 |  73 74 42 61 63 6b 77 61 72 64 52 75 6e 43 6c 65    61 72 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | stBackwardRunClear@12.__imp__Rtl | 
| c7c0 |  46 69 6e 64 4c 61 73 74 42 61 63 6b 77 61 72 64    52 75 6e 43 6c 65 61 72 40 31 32 00 5f 52 74 6c  | FindLastBackwardRunClear@12._Rtl | 
| c7e0 |  46 69 6e 64 43 6c 65 61 72 52 75 6e 73 40 31 36    00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 69 6e 64 43  | FindClearRuns@16.__imp__RtlFindC | 
| c800 |  6c 65 61 72 52 75 6e 73 40 31 36 00 5f 52 74 6c    46 69 6e 64 43 6c 65 61 72 42 69 74 73 41 6e 64  | learRuns@16._RtlFindClearBitsAnd | 
| c820 |  53 65 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74    6c 46 69 6e 64 43 6c 65 61 72 42 69 74 73 41 6e  | Set@12.__imp__RtlFindClearBitsAn | 
| c840 |  64 53 65 74 40 31 32 00 5f 52 74 6c 46 69 6e 64    43 6c 65 61 72 42 69 74 73 40 31 32 00 5f 5f 69  | dSet@12._RtlFindClearBits@12.__i | 
| c860 |  6d 70 5f 5f 52 74 6c 46 69 6e 64 43 6c 65 61 72    42 69 74 73 40 31 32 00 5f 52 74 6c 46 69 6e 64  | mp__RtlFindClearBits@12._RtlFind | 
| c880 |  43 68 61 72 49 6e 55 6e 69 63 6f 64 65 53 74 72    69 6e 67 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74  | CharInUnicodeString@16.__imp__Rt | 
| c8a0 |  6c 46 69 6e 64 43 68 61 72 49 6e 55 6e 69 63 6f    64 65 53 74 72 69 6e 67 40 31 36 00 5f 52 74 6c  | lFindCharInUnicodeString@16._Rtl | 
| c8c0 |  46 69 6e 64 41 63 74 69 76 61 74 69 6f 6e 43 6f    6e 74 65 78 74 53 65 63 74 69 6f 6e 53 74 72 69  | FindActivationContextSectionStri | 
| c8e0 |  6e 67 40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c    46 69 6e 64 41 63 74 69 76 61 74 69 6f 6e 43 6f  | ng@20.__imp__RtlFindActivationCo | 
| c900 |  6e 74 65 78 74 53 65 63 74 69 6f 6e 53 74 72 69    6e 67 40 32 30 00 5f 52 74 6c 46 69 6e 64 41 63  | ntextSectionString@20._RtlFindAc | 
| c920 |  74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53    65 63 74 69 6f 6e 47 75 69 64 40 32 30 00 5f 5f  | tivationContextSectionGuid@20.__ | 
| c940 |  69 6d 70 5f 5f 52 74 6c 46 69 6e 64 41 63 74 69    76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 65 63  | imp__RtlFindActivationContextSec | 
| c960 |  74 69 6f 6e 47 75 69 64 40 32 30 00 5f 52 74 6c    46 69 6e 61 6c 52 65 6c 65 61 73 65 4f 75 74 4f  | tionGuid@20._RtlFinalReleaseOutO | 
| c980 |  66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74    72 65 61 6d 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | fProcessMemoryStream@4.__imp__Rt | 
| c9a0 |  6c 46 69 6e 61 6c 52 65 6c 65 61 73 65 4f 75 74    4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53  | lFinalReleaseOutOfProcessMemoryS | 
| c9c0 |  74 72 65 61 6d 40 34 00 5f 52 74 6c 46 69 6c 6c    4d 65 6d 6f 72 79 55 6c 6f 6e 67 40 31 32 00 5f  | tream@4._RtlFillMemoryUlong@12._ | 
| c9e0 |  5f 69 6d 70 5f 5f 52 74 6c 46 69 6c 6c 4d 65 6d    6f 72 79 55 6c 6f 6e 67 40 31 32 00 5f 52 74 6c  | _imp__RtlFillMemoryUlong@12._Rtl | 
| ca00 |  46 69 6c 6c 4d 65 6d 6f 72 79 40 31 32 00 5f 5f    69 6d 70 5f 5f 52 74 6c 46 69 6c 6c 4d 65 6d 6f  | FillMemory@12.__imp__RtlFillMemo | 
| ca20 |  72 79 40 31 32 00 5f 52 74 6c 45 78 74 65 6e 64    65 64 4d 61 67 69 63 44 69 76 69 64 65 40 32 30  | ry@12._RtlExtendedMagicDivide@20 | 
| ca40 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 78 74 65 6e    64 65 64 4d 61 67 69 63 44 69 76 69 64 65 40 32  | .__imp__RtlExtendedMagicDivide@2 | 
| ca60 |  30 00 5f 52 74 6c 45 78 74 65 6e 64 65 64 4c 61    72 67 65 49 6e 74 65 67 65 72 44 69 76 69 64 65  | 0._RtlExtendedLargeIntegerDivide | 
| ca80 |  40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 78    74 65 6e 64 65 64 4c 61 72 67 65 49 6e 74 65 67  | @16.__imp__RtlExtendedLargeInteg | 
| caa0 |  65 72 44 69 76 69 64 65 40 31 36 00 5f 52 74 6c    45 78 74 65 6e 64 65 64 49 6e 74 65 67 65 72 4d  | erDivide@16._RtlExtendedIntegerM | 
| cac0 |  75 6c 74 69 70 6c 79 40 31 32 00 5f 5f 69 6d 70    5f 5f 52 74 6c 45 78 74 65 6e 64 65 64 49 6e 74  | ultiply@12.__imp__RtlExtendedInt | 
| cae0 |  65 67 65 72 4d 75 6c 74 69 70 6c 79 40 31 32 00    5f 52 74 6c 45 78 74 65 6e 64 48 65 61 70 40 31  | egerMultiply@12._RtlExtendHeap@1 | 
| cb00 |  36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 78 74 65    6e 64 48 65 61 70 40 31 36 00 5f 52 74 6c 45 78  | 6.__imp__RtlExtendHeap@16._RtlEx | 
| cb20 |  70 61 6e 64 45 6e 76 69 72 6f 6e 6d 65 6e 74 53    74 72 69 6e 67 73 5f 55 40 31 36 00 5f 5f 69 6d  | pandEnvironmentStrings_U@16.__im | 
| cb40 |  70 5f 5f 52 74 6c 45 78 70 61 6e 64 45 6e 76 69    72 6f 6e 6d 65 6e 74 53 74 72 69 6e 67 73 5f 55  | p__RtlExpandEnvironmentStrings_U | 
| cb60 |  40 31 36 00 5f 52 74 6c 45 78 69 74 55 73 65 72    54 68 72 65 61 64 40 34 00 5f 5f 69 6d 70 5f 5f  | @16._RtlExitUserThread@4.__imp__ | 
| cb80 |  52 74 6c 45 78 69 74 55 73 65 72 54 68 72 65 61    64 40 34 00 5f 52 74 6c 45 72 61 73 65 55 6e 69  | RtlExitUserThread@4._RtlEraseUni | 
| cba0 |  63 6f 64 65 53 74 72 69 6e 67 40 34 00 5f 5f 69    6d 70 5f 5f 52 74 6c 45 72 61 73 65 55 6e 69 63  | codeString@4.__imp__RtlEraseUnic | 
| cbc0 |  6f 64 65 53 74 72 69 6e 67 40 34 00 5f 52 74 6c    45 71 75 61 6c 55 6e 69 63 6f 64 65 53 74 72 69  | odeString@4._RtlEqualUnicodeStri | 
| cbe0 |  6e 67 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c    45 71 75 61 6c 55 6e 69 63 6f 64 65 53 74 72 69  | ng@12.__imp__RtlEqualUnicodeStri | 
| cc00 |  6e 67 40 31 32 00 5f 52 74 6c 45 71 75 61 6c 53    74 72 69 6e 67 40 31 32 00 5f 5f 69 6d 70 5f 5f  | ng@12._RtlEqualString@12.__imp__ | 
| cc20 |  52 74 6c 45 71 75 61 6c 53 74 72 69 6e 67 40 31    32 00 5f 52 74 6c 45 71 75 61 6c 53 69 64 40 38  | RtlEqualString@12._RtlEqualSid@8 | 
| cc40 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 71 75 61 6c    53 69 64 40 38 00 5f 52 74 6c 45 71 75 61 6c 50  | .__imp__RtlEqualSid@8._RtlEqualP | 
| cc60 |  72 65 66 69 78 53 69 64 40 38 00 5f 5f 69 6d 70    5f 5f 52 74 6c 45 71 75 61 6c 50 72 65 66 69 78  | refixSid@8.__imp__RtlEqualPrefix | 
| cc80 |  53 69 64 40 38 00 5f 52 74 6c 45 71 75 61 6c 4c    75 69 64 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | Sid@8._RtlEqualLuid@8.__imp__Rtl | 
| cca0 |  45 71 75 61 6c 4c 75 69 64 40 38 00 5f 52 74 6c    45 71 75 61 6c 44 6f 6d 61 69 6e 4e 61 6d 65 40  | EqualLuid@8._RtlEqualDomainName@ | 
| ccc0 |  38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 71 75 61    6c 44 6f 6d 61 69 6e 4e 61 6d 65 40 38 00 5f 52  | 8.__imp__RtlEqualDomainName@8._R | 
| cce0 |  74 6c 45 71 75 61 6c 43 6f 6d 70 75 74 65 72 4e    61 6d 65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | tlEqualComputerName@8.__imp__Rtl | 
| cd00 |  45 71 75 61 6c 43 6f 6d 70 75 74 65 72 4e 61 6d    65 40 38 00 5f 52 74 6c 45 6e 75 6d 65 72 61 74  | EqualComputerName@8._RtlEnumerat | 
| cd20 |  65 47 65 6e 65 72 69 63 54 61 62 6c 65 57 69 74    68 6f 75 74 53 70 6c 61 79 69 6e 67 41 76 6c 40  | eGenericTableWithoutSplayingAvl@ | 
| cd40 |  38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 6e 75 6d    65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c  | 8.__imp__RtlEnumerateGenericTabl | 
| cd60 |  65 57 69 74 68 6f 75 74 53 70 6c 61 79 69 6e 67    41 76 6c 40 38 00 5f 52 74 6c 45 6e 75 6d 65 72  | eWithoutSplayingAvl@8._RtlEnumer | 
| cd80 |  61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 57    69 74 68 6f 75 74 53 70 6c 61 79 69 6e 67 40 38  | ateGenericTableWithoutSplaying@8 | 
| cda0 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 6e 75 6d 65    72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65  | .__imp__RtlEnumerateGenericTable | 
| cdc0 |  57 69 74 68 6f 75 74 53 70 6c 61 79 69 6e 67 40    38 00 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65 47  | WithoutSplaying@8._RtlEnumerateG | 
| cde0 |  65 6e 65 72 69 63 54 61 62 6c 65 4c 69 6b 65 41    44 69 72 65 63 74 6f 72 79 40 32 38 00 5f 5f 69  | enericTableLikeADirectory@28.__i | 
| ce00 |  6d 70 5f 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65    47 65 6e 65 72 69 63 54 61 62 6c 65 4c 69 6b 65  | mp__RtlEnumerateGenericTableLike | 
| ce20 |  41 44 69 72 65 63 74 6f 72 79 40 32 38 00 5f 52    74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72  | ADirectory@28._RtlEnumerateGener | 
| ce40 |  69 63 54 61 62 6c 65 41 76 6c 40 38 00 5f 5f 69    6d 70 5f 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65  | icTableAvl@8.__imp__RtlEnumerate | 
| ce60 |  47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 40    38 00 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65 47  | GenericTableAvl@8._RtlEnumerateG | 
| ce80 |  65 6e 65 72 69 63 54 61 62 6c 65 40 38 00 5f 5f    69 6d 70 5f 5f 52 74 6c 45 6e 75 6d 65 72 61 74  | enericTable@8.__imp__RtlEnumerat | 
| cea0 |  65 47 65 6e 65 72 69 63 54 61 62 6c 65 40 38 00    5f 52 74 6c 45 6e 75 6d 50 72 6f 63 65 73 73 48  | eGenericTable@8._RtlEnumProcessH | 
| cec0 |  65 61 70 73 40 38 00 5f 5f 69 6d 70 5f 5f 52 74    6c 45 6e 75 6d 50 72 6f 63 65 73 73 48 65 61 70  | eaps@8.__imp__RtlEnumProcessHeap | 
| cee0 |  73 40 38 00 5f 52 74 6c 45 6e 74 65 72 43 72 69    74 69 63 61 6c 53 65 63 74 69 6f 6e 40 34 00 5f  | s@8._RtlEnterCriticalSection@4._ | 
| cf00 |  5f 69 6d 70 5f 5f 52 74 6c 45 6e 74 65 72 43 72    69 74 69 63 61 6c 53 65 63 74 69 6f 6e 40 34 00  | _imp__RtlEnterCriticalSection@4. | 
| cf20 |  5f 52 74 6c 45 6e 6c 61 72 67 65 64 55 6e 73 69    67 6e 65 64 4d 75 6c 74 69 70 6c 79 40 38 00 5f  | _RtlEnlargedUnsignedMultiply@8._ | 
| cf40 |  5f 69 6d 70 5f 5f 52 74 6c 45 6e 6c 61 72 67 65    64 55 6e 73 69 67 6e 65 64 4d 75 6c 74 69 70 6c  | _imp__RtlEnlargedUnsignedMultipl | 
| cf60 |  79 40 38 00 5f 52 74 6c 45 6e 6c 61 72 67 65 64    55 6e 73 69 67 6e 65 64 44 69 76 69 64 65 40 31  | y@8._RtlEnlargedUnsignedDivide@1 | 
| cf80 |  36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 6e 6c 61    72 67 65 64 55 6e 73 69 67 6e 65 64 44 69 76 69  | 6.__imp__RtlEnlargedUnsignedDivi | 
| cfa0 |  64 65 40 31 36 00 5f 52 74 6c 45 6e 6c 61 72 67    65 64 49 6e 74 65 67 65 72 4d 75 6c 74 69 70 6c  | de@16._RtlEnlargedIntegerMultipl | 
| cfc0 |  79 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 6e    6c 61 72 67 65 64 49 6e 74 65 67 65 72 4d 75 6c  | y@8.__imp__RtlEnlargedIntegerMul | 
| cfe0 |  74 69 70 6c 79 40 38 00 5f 52 74 6c 45 6e 63 6f    64 65 53 79 73 74 65 6d 50 6f 69 6e 74 65 72 40  | tiply@8._RtlEncodeSystemPointer@ | 
| d000 |  34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 6e 63 6f    64 65 53 79 73 74 65 6d 50 6f 69 6e 74 65 72 40  | 4.__imp__RtlEncodeSystemPointer@ | 
| d020 |  34 00 5f 52 74 6c 45 6e 63 6f 64 65 50 6f 69 6e    74 65 72 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | 4._RtlEncodePointer@4.__imp__Rtl | 
| d040 |  45 6e 63 6f 64 65 50 6f 69 6e 74 65 72 40 34 00    5f 52 74 6c 45 6e 61 62 6c 65 45 61 72 6c 79 43  | EncodePointer@4._RtlEnableEarlyC | 
| d060 |  72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 45 76    65 6e 74 43 72 65 61 74 69 6f 6e 40 30 00 5f 5f  | riticalSectionEventCreation@0.__ | 
| d080 |  69 6d 70 5f 5f 52 74 6c 45 6e 61 62 6c 65 45 61    72 6c 79 43 72 69 74 69 63 61 6c 53 65 63 74 69  | imp__RtlEnableEarlyCriticalSecti | 
| d0a0 |  6f 6e 45 76 65 6e 74 43 72 65 61 74 69 6f 6e 40    30 00 5f 52 74 6c 45 6d 70 74 79 41 74 6f 6d 54  | onEventCreation@0._RtlEmptyAtomT | 
| d0c0 |  61 62 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74    6c 45 6d 70 74 79 41 74 6f 6d 54 61 62 6c 65 40  | able@8.__imp__RtlEmptyAtomTable@ | 
| d0e0 |  38 00 5f 52 74 6c 44 75 70 6c 69 63 61 74 65 55    6e 69 63 6f 64 65 53 74 72 69 6e 67 40 31 32 00  | 8._RtlDuplicateUnicodeString@12. | 
| d100 |  5f 5f 69 6d 70 5f 5f 52 74 6c 44 75 70 6c 69 63    61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67  | __imp__RtlDuplicateUnicodeString | 
| d120 |  40 31 32 00 5f 52 74 6c 44 75 6d 70 52 65 73 6f    75 72 63 65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | @12._RtlDumpResource@4.__imp__Rt | 
| d140 |  6c 44 75 6d 70 52 65 73 6f 75 72 63 65 40 34 00    5f 52 74 6c 44 6f 77 6e 63 61 73 65 55 6e 69 63  | lDumpResource@4._RtlDowncaseUnic | 
| d160 |  6f 64 65 53 74 72 69 6e 67 40 31 32 00 5f 5f 69    6d 70 5f 5f 52 74 6c 44 6f 77 6e 63 61 73 65 55  | odeString@12.__imp__RtlDowncaseU | 
| d180 |  6e 69 63 6f 64 65 53 74 72 69 6e 67 40 31 32 00    5f 52 74 6c 44 6f 77 6e 63 61 73 65 55 6e 69 63  | nicodeString@12._RtlDowncaseUnic | 
| d1a0 |  6f 64 65 43 68 61 72 40 34 00 5f 5f 69 6d 70 5f    5f 52 74 6c 44 6f 77 6e 63 61 73 65 55 6e 69 63  | odeChar@4.__imp__RtlDowncaseUnic | 
| d1c0 |  6f 64 65 43 68 61 72 40 34 00 5f 52 74 6c 44 6f    73 53 65 61 72 63 68 50 61 74 68 5f 55 73 74 72  | odeChar@4._RtlDosSearchPath_Ustr | 
| d1e0 |  40 33 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 6f    73 53 65 61 72 63 68 50 61 74 68 5f 55 73 74 72  | @36.__imp__RtlDosSearchPath_Ustr | 
| d200 |  40 33 36 00 5f 52 74 6c 44 6f 73 53 65 61 72 63    68 50 61 74 68 5f 55 40 32 34 00 5f 5f 69 6d 70  | @36._RtlDosSearchPath_U@24.__imp | 
| d220 |  5f 5f 52 74 6c 44 6f 73 53 65 61 72 63 68 50 61    74 68 5f 55 40 32 34 00 5f 52 74 6c 44 6f 73 50  | __RtlDosSearchPath_U@24._RtlDosP | 
| d240 |  61 74 68 4e 61 6d 65 54 6f 52 65 6c 61 74 69 76    65 4e 74 50 61 74 68 4e 61 6d 65 5f 55 5f 57 69  | athNameToRelativeNtPathName_U_Wi | 
| d260 |  74 68 53 74 61 74 75 73 40 31 36 00 5f 5f 69 6d    70 5f 5f 52 74 6c 44 6f 73 50 61 74 68 4e 61 6d  | thStatus@16.__imp__RtlDosPathNam | 
| d280 |  65 54 6f 52 65 6c 61 74 69 76 65 4e 74 50 61 74    68 4e 61 6d 65 5f 55 5f 57 69 74 68 53 74 61 74  | eToRelativeNtPathName_U_WithStat | 
| d2a0 |  75 73 40 31 36 00 5f 52 74 6c 44 6f 73 50 61 74    68 4e 61 6d 65 54 6f 52 65 6c 61 74 69 76 65 4e  | us@16._RtlDosPathNameToRelativeN | 
| d2c0 |  74 50 61 74 68 4e 61 6d 65 5f 55 40 31 36 00 5f    5f 69 6d 70 5f 5f 52 74 6c 44 6f 73 50 61 74 68  | tPathName_U@16.__imp__RtlDosPath | 
| d2e0 |  4e 61 6d 65 54 6f 52 65 6c 61 74 69 76 65 4e 74    50 61 74 68 4e 61 6d 65 5f 55 40 31 36 00 5f 52  | NameToRelativeNtPathName_U@16._R | 
| d300 |  74 6c 44 6f 73 50 61 74 68 4e 61 6d 65 54 6f 4e    74 50 61 74 68 4e 61 6d 65 5f 55 5f 57 69 74 68  | tlDosPathNameToNtPathName_U_With | 
| d320 |  53 74 61 74 75 73 40 31 36 00 5f 5f 69 6d 70 5f    5f 52 74 6c 44 6f 73 50 61 74 68 4e 61 6d 65 54  | Status@16.__imp__RtlDosPathNameT | 
| d340 |  6f 4e 74 50 61 74 68 4e 61 6d 65 5f 55 5f 57 69    74 68 53 74 61 74 75 73 40 31 36 00 5f 52 74 6c  | oNtPathName_U_WithStatus@16._Rtl | 
| d360 |  44 6f 73 50 61 74 68 4e 61 6d 65 54 6f 4e 74 50    61 74 68 4e 61 6d 65 5f 55 40 31 36 00 5f 5f 69  | DosPathNameToNtPathName_U@16.__i | 
| d380 |  6d 70 5f 5f 52 74 6c 44 6f 73 50 61 74 68 4e 61    6d 65 54 6f 4e 74 50 61 74 68 4e 61 6d 65 5f 55  | mp__RtlDosPathNameToNtPathName_U | 
| d3a0 |  40 31 36 00 5f 52 74 6c 44 6f 73 41 70 70 6c 79    46 69 6c 65 49 73 6f 6c 61 74 69 6f 6e 52 65 64  | @16._RtlDosApplyFileIsolationRed | 
| d3c0 |  69 72 65 63 74 69 6f 6e 5f 55 73 74 72 40 33 36    00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 6f 73 41 70  | irection_Ustr@36.__imp__RtlDosAp | 
| d3e0 |  70 6c 79 46 69 6c 65 49 73 6f 6c 61 74 69 6f 6e    52 65 64 69 72 65 63 74 69 6f 6e 5f 55 73 74 72  | plyFileIsolationRedirection_Ustr | 
| d400 |  40 33 36 00 5f 52 74 6c 44 6f 65 73 46 69 6c 65    45 78 69 73 74 73 5f 55 40 34 00 5f 5f 69 6d 70  | @36._RtlDoesFileExists_U@4.__imp | 
| d420 |  5f 5f 52 74 6c 44 6f 65 73 46 69 6c 65 45 78 69    73 74 73 5f 55 40 34 00 5f 52 74 6c 44 6e 73 48  | __RtlDoesFileExists_U@4._RtlDnsH | 
| d440 |  6f 73 74 4e 61 6d 65 54 6f 43 6f 6d 70 75 74 65    72 4e 61 6d 65 40 31 32 00 5f 5f 69 6d 70 5f 5f  | ostNameToComputerName@12.__imp__ | 
| d460 |  52 74 6c 44 6e 73 48 6f 73 74 4e 61 6d 65 54 6f    43 6f 6d 70 75 74 65 72 4e 61 6d 65 40 31 32 00  | RtlDnsHostNameToComputerName@12. | 
| d480 |  5f 52 74 6c 44 6c 6c 53 68 75 74 64 6f 77 6e 49    6e 50 72 6f 67 72 65 73 73 40 30 00 5f 5f 69 6d  | _RtlDllShutdownInProgress@0.__im | 
| d4a0 |  70 5f 5f 52 74 6c 44 6c 6c 53 68 75 74 64 6f 77    6e 49 6e 50 72 6f 67 72 65 73 73 40 30 00 5f 52  | p__RtlDllShutdownInProgress@0._R | 
| d4c0 |  74 6c 44 65 74 65 72 6d 69 6e 65 44 6f 73 50 61    74 68 4e 61 6d 65 54 79 70 65 5f 55 40 34 00 5f  | tlDetermineDosPathNameType_U@4._ | 
| d4e0 |  5f 69 6d 70 5f 5f 52 74 6c 44 65 74 65 72 6d 69    6e 65 44 6f 73 50 61 74 68 4e 61 6d 65 54 79 70  | _imp__RtlDetermineDosPathNameTyp | 
| d500 |  65 5f 55 40 34 00 5f 52 74 6c 44 65 73 74 72 6f    79 51 75 65 72 79 44 65 62 75 67 42 75 66 66 65  | e_U@4._RtlDestroyQueryDebugBuffe | 
| d520 |  72 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65    73 74 72 6f 79 51 75 65 72 79 44 65 62 75 67 42  | r@4.__imp__RtlDestroyQueryDebugB | 
| d540 |  75 66 66 65 72 40 34 00 5f 52 74 6c 44 65 73 74    72 6f 79 50 72 6f 63 65 73 73 50 61 72 61 6d 65  | uffer@4._RtlDestroyProcessParame | 
| d560 |  74 65 72 73 40 34 00 5f 5f 69 6d 70 5f 5f 52 74    6c 44 65 73 74 72 6f 79 50 72 6f 63 65 73 73 50  | ters@4.__imp__RtlDestroyProcessP | 
| d580 |  61 72 61 6d 65 74 65 72 73 40 34 00 5f 52 74 6c    44 65 73 74 72 6f 79 48 65 61 70 40 34 00 5f 5f  | arameters@4._RtlDestroyHeap@4.__ | 
| d5a0 |  69 6d 70 5f 5f 52 74 6c 44 65 73 74 72 6f 79 48    65 61 70 40 34 00 5f 52 74 6c 44 65 73 74 72 6f  | imp__RtlDestroyHeap@4._RtlDestro | 
| d5c0 |  79 48 61 6e 64 6c 65 54 61 62 6c 65 40 34 00 5f    5f 69 6d 70 5f 5f 52 74 6c 44 65 73 74 72 6f 79  | yHandleTable@4.__imp__RtlDestroy | 
| d5e0 |  48 61 6e 64 6c 65 54 61 62 6c 65 40 34 00 5f 52    74 6c 44 65 73 74 72 6f 79 45 6e 76 69 72 6f 6e  | HandleTable@4._RtlDestroyEnviron | 
| d600 |  6d 65 6e 74 40 34 00 5f 5f 69 6d 70 5f 5f 52 74    6c 44 65 73 74 72 6f 79 45 6e 76 69 72 6f 6e 6d  | ment@4.__imp__RtlDestroyEnvironm | 
| d620 |  65 6e 74 40 34 00 5f 52 74 6c 44 65 73 74 72 6f    79 41 74 6f 6d 54 61 62 6c 65 40 34 00 5f 5f 69  | ent@4._RtlDestroyAtomTable@4.__i | 
| d640 |  6d 70 5f 5f 52 74 6c 44 65 73 74 72 6f 79 41 74    6f 6d 54 61 62 6c 65 40 34 00 5f 52 74 6c 44 65  | mp__RtlDestroyAtomTable@4._RtlDe | 
| d660 |  72 65 67 69 73 74 65 72 57 61 69 74 45 78 40 38    00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 72 65 67  | registerWaitEx@8.__imp__RtlDereg | 
| d680 |  69 73 74 65 72 57 61 69 74 45 78 40 38 00 5f 52    74 6c 44 65 72 65 67 69 73 74 65 72 57 61 69 74  | isterWaitEx@8._RtlDeregisterWait | 
| d6a0 |  40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 72    65 67 69 73 74 65 72 57 61 69 74 40 34 00 5f 52  | @4.__imp__RtlDeregisterWait@4._R | 
| d6c0 |  74 6c 44 65 6c 65 74 65 54 69 6d 65 72 51 75 65    75 65 45 78 40 38 00 5f 5f 69 6d 70 5f 5f 52 74  | tlDeleteTimerQueueEx@8.__imp__Rt | 
| d6e0 |  6c 44 65 6c 65 74 65 54 69 6d 65 72 51 75 65 75    65 45 78 40 38 00 5f 52 74 6c 44 65 6c 65 74 65  | lDeleteTimerQueueEx@8._RtlDelete | 
| d700 |  54 69 6d 65 72 51 75 65 75 65 40 34 00 5f 5f 69    6d 70 5f 5f 52 74 6c 44 65 6c 65 74 65 54 69 6d  | TimerQueue@4.__imp__RtlDeleteTim | 
| d720 |  65 72 51 75 65 75 65 40 34 00 5f 52 74 6c 44 65    6c 65 74 65 54 69 6d 65 72 40 31 32 00 5f 5f 69  | erQueue@4._RtlDeleteTimer@12.__i | 
| d740 |  6d 70 5f 5f 52 74 6c 44 65 6c 65 74 65 54 69 6d    65 72 40 31 32 00 5f 52 74 6c 44 65 6c 65 74 65  | mp__RtlDeleteTimer@12._RtlDelete | 
| d760 |  53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 40 34    00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 6c 65 74  | SecurityObject@4.__imp__RtlDelet | 
| d780 |  65 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 40    34 00 5f 52 74 6c 44 65 6c 65 74 65 52 65 73 6f  | eSecurityObject@4._RtlDeleteReso | 
| d7a0 |  75 72 63 65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74    6c 44 65 6c 65 74 65 52 65 73 6f 75 72 63 65 40  | urce@4.__imp__RtlDeleteResource@ | 
| d7c0 |  34 00 5f 52 74 6c 44 65 6c 65 74 65 52 65 67 69    73 74 72 79 56 61 6c 75 65 40 31 32 00 5f 5f 69  | 4._RtlDeleteRegistryValue@12.__i | 
| d7e0 |  6d 70 5f 5f 52 74 6c 44 65 6c 65 74 65 52 65 67    69 73 74 72 79 56 61 6c 75 65 40 31 32 00 5f 52  | mp__RtlDeleteRegistryValue@12._R | 
| d800 |  74 6c 44 65 6c 65 74 65 4e 6f 53 70 6c 61 79 40    38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 6c 65  | tlDeleteNoSplay@8.__imp__RtlDele | 
| d820 |  74 65 4e 6f 53 70 6c 61 79 40 38 00 5f 52 74 6c    44 65 6c 65 74 65 45 6c 65 6d 65 6e 74 47 65 6e  | teNoSplay@8._RtlDeleteElementGen | 
| d840 |  65 72 69 63 54 61 62 6c 65 41 76 6c 40 38 00 5f    5f 69 6d 70 5f 5f 52 74 6c 44 65 6c 65 74 65 45  | ericTableAvl@8.__imp__RtlDeleteE | 
| d860 |  6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62    6c 65 41 76 6c 40 38 00 5f 52 74 6c 44 65 6c 65  | lementGenericTableAvl@8._RtlDele | 
| d880 |  74 65 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63    54 61 62 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 52  | teElementGenericTable@8.__imp__R | 
| d8a0 |  74 6c 44 65 6c 65 74 65 45 6c 65 6d 65 6e 74 47    65 6e 65 72 69 63 54 61 62 6c 65 40 38 00 5f 52  | tlDeleteElementGenericTable@8._R | 
| d8c0 |  74 6c 44 65 6c 65 74 65 43 72 69 74 69 63 61 6c    53 65 63 74 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f  | tlDeleteCriticalSection@4.__imp_ | 
| d8e0 |  5f 52 74 6c 44 65 6c 65 74 65 43 72 69 74 69 63    61 6c 53 65 63 74 69 6f 6e 40 34 00 5f 52 74 6c  | _RtlDeleteCriticalSection@4._Rtl | 
| d900 |  44 65 6c 65 74 65 41 74 6f 6d 46 72 6f 6d 41 74    6f 6d 54 61 62 6c 65 40 38 00 5f 5f 69 6d 70 5f  | DeleteAtomFromAtomTable@8.__imp_ | 
| d920 |  5f 52 74 6c 44 65 6c 65 74 65 41 74 6f 6d 46 72    6f 6d 41 74 6f 6d 54 61 62 6c 65 40 38 00 5f 52  | _RtlDeleteAtomFromAtomTable@8._R | 
| d940 |  74 6c 44 65 6c 65 74 65 41 63 65 40 38 00 5f 5f    69 6d 70 5f 5f 52 74 6c 44 65 6c 65 74 65 41 63  | tlDeleteAce@8.__imp__RtlDeleteAc | 
| d960 |  65 40 38 00 5f 52 74 6c 44 65 6c 65 74 65 40 34    00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 6c 65 74  | e@8._RtlDelete@4.__imp__RtlDelet | 
| d980 |  65 40 34 00 5f 52 74 6c 44 65 66 61 75 6c 74 4e    70 41 63 6c 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | e@4._RtlDefaultNpAcl@4.__imp__Rt | 
| d9a0 |  6c 44 65 66 61 75 6c 74 4e 70 41 63 6c 40 34 00    5f 52 74 6c 44 65 63 6f 6d 70 72 65 73 73 46 72  | lDefaultNpAcl@4._RtlDecompressFr | 
| d9c0 |  61 67 6d 65 6e 74 40 33 32 00 5f 5f 69 6d 70 5f    5f 52 74 6c 44 65 63 6f 6d 70 72 65 73 73 46 72  | agment@32.__imp__RtlDecompressFr | 
| d9e0 |  61 67 6d 65 6e 74 40 33 32 00 5f 52 74 6c 44 65    63 6f 6d 70 72 65 73 73 42 75 66 66 65 72 40 32  | agment@32._RtlDecompressBuffer@2 | 
| da00 |  34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 63 6f    6d 70 72 65 73 73 42 75 66 66 65 72 40 32 34 00  | 4.__imp__RtlDecompressBuffer@24. | 
| da20 |  5f 52 74 6c 44 65 63 6f 64 65 53 79 73 74 65 6d    50 6f 69 6e 74 65 72 40 34 00 5f 5f 69 6d 70 5f  | _RtlDecodeSystemPointer@4.__imp_ | 
| da40 |  5f 52 74 6c 44 65 63 6f 64 65 53 79 73 74 65 6d    50 6f 69 6e 74 65 72 40 34 00 5f 52 74 6c 44 65  | _RtlDecodeSystemPointer@4._RtlDe | 
| da60 |  63 6f 64 65 50 6f 69 6e 74 65 72 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 44 65 63 6f 64 65 50 6f  | codePointer@4.__imp__RtlDecodePo | 
| da80 |  69 6e 74 65 72 40 34 00 5f 52 74 6c 44 65 62 75    67 50 72 69 6e 74 54 69 6d 65 73 40 30 00 5f 5f  | inter@4._RtlDebugPrintTimes@0.__ | 
| daa0 |  69 6d 70 5f 5f 52 74 6c 44 65 62 75 67 50 72 69    6e 74 54 69 6d 65 73 40 30 00 5f 52 74 6c 44 65  | imp__RtlDebugPrintTimes@0._RtlDe | 
| dac0 |  61 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69    6f 6e 43 6f 6e 74 65 78 74 40 38 00 5f 5f 69 6d  | activateActivationContext@8.__im | 
| dae0 |  70 5f 5f 52 74 6c 44 65 61 63 74 69 76 61 74 65    41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78  | p__RtlDeactivateActivationContex | 
| db00 |  74 40 38 00 5f 52 74 6c 44 65 4e 6f 72 6d 61 6c    69 7a 65 50 72 6f 63 65 73 73 50 61 72 61 6d 73  | t@8._RtlDeNormalizeProcessParams | 
| db20 |  40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 4e    6f 72 6d 61 6c 69 7a 65 50 72 6f 63 65 73 73 50  | @4.__imp__RtlDeNormalizeProcessP | 
| db40 |  61 72 61 6d 73 40 34 00 5f 52 74 6c 43 75 74 6f    76 65 72 54 69 6d 65 54 6f 53 79 73 74 65 6d 54  | arams@4._RtlCutoverTimeToSystemT | 
| db60 |  69 6d 65 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74    6c 43 75 74 6f 76 65 72 54 69 6d 65 54 6f 53 79  | ime@16.__imp__RtlCutoverTimeToSy | 
| db80 |  73 74 65 6d 54 69 6d 65 40 31 36 00 5f 52 74 6c    43 75 73 74 6f 6d 43 50 54 6f 55 6e 69 63 6f 64  | stemTime@16._RtlCustomCPToUnicod | 
| dba0 |  65 4e 40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c    43 75 73 74 6f 6d 43 50 54 6f 55 6e 69 63 6f 64  | eN@24.__imp__RtlCustomCPToUnicod | 
| dbc0 |  65 4e 40 32 34 00 5f 52 74 6c 43 72 65 61 74 65    55 73 65 72 54 68 72 65 61 64 40 34 30 00 5f 5f  | eN@24._RtlCreateUserThread@40.__ | 
| dbe0 |  69 6d 70 5f 5f 52 74 6c 43 72 65 61 74 65 55 73    65 72 54 68 72 65 61 64 40 34 30 00 5f 52 74 6c  | imp__RtlCreateUserThread@40._Rtl | 
| dc00 |  43 72 65 61 74 65 55 73 65 72 53 65 63 75 72 69    74 79 4f 62 6a 65 63 74 40 32 38 00 5f 5f 69 6d  | CreateUserSecurityObject@28.__im | 
| dc20 |  70 5f 5f 52 74 6c 43 72 65 61 74 65 55 73 65 72    53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 40 32  | p__RtlCreateUserSecurityObject@2 | 
| dc40 |  38 00 5f 52 74 6c 43 72 65 61 74 65 55 73 65 72    50 72 6f 63 65 73 73 40 34 30 00 5f 5f 69 6d 70  | 8._RtlCreateUserProcess@40.__imp | 
| dc60 |  5f 5f 52 74 6c 43 72 65 61 74 65 55 73 65 72 50    72 6f 63 65 73 73 40 34 30 00 5f 52 74 6c 43 72  | __RtlCreateUserProcess@40._RtlCr | 
| dc80 |  65 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e    67 46 72 6f 6d 41 73 63 69 69 7a 40 38 00 5f 5f  | eateUnicodeStringFromAsciiz@8.__ | 
| dca0 |  69 6d 70 5f 5f 52 74 6c 43 72 65 61 74 65 55 6e    69 63 6f 64 65 53 74 72 69 6e 67 46 72 6f 6d 41  | imp__RtlCreateUnicodeStringFromA | 
| dcc0 |  73 63 69 69 7a 40 38 00 5f 52 74 6c 43 72 65 61    74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 40  | sciiz@8._RtlCreateUnicodeString@ | 
| dce0 |  38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 72 65 61    74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 40  | 8.__imp__RtlCreateUnicodeString@ | 
| dd00 |  38 00 5f 52 74 6c 43 72 65 61 74 65 54 69 6d 65    72 51 75 65 75 65 40 34 00 5f 5f 69 6d 70 5f 5f  | 8._RtlCreateTimerQueue@4.__imp__ | 
| dd20 |  52 74 6c 43 72 65 61 74 65 54 69 6d 65 72 51 75    65 75 65 40 34 00 5f 52 74 6c 43 72 65 61 74 65  | RtlCreateTimerQueue@4._RtlCreate | 
| dd40 |  54 69 6d 65 72 40 32 38 00 5f 5f 69 6d 70 5f 5f    52 74 6c 43 72 65 61 74 65 54 69 6d 65 72 40 32  | Timer@28.__imp__RtlCreateTimer@2 | 
| dd60 |  38 00 5f 52 74 6c 43 72 65 61 74 65 54 61 67 48    65 61 70 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74  | 8._RtlCreateTagHeap@16.__imp__Rt | 
| dd80 |  6c 43 72 65 61 74 65 54 61 67 48 65 61 70 40 31    36 00 5f 52 74 6c 43 72 65 61 74 65 53 79 73 74  | lCreateTagHeap@16._RtlCreateSyst | 
| dda0 |  65 6d 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74    69 6f 6e 46 6f 6c 64 65 72 40 34 00 5f 5f 69 6d  | emVolumeInformationFolder@4.__im | 
| ddc0 |  70 5f 5f 52 74 6c 43 72 65 61 74 65 53 79 73 74    65 6d 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74  | p__RtlCreateSystemVolumeInformat | 
| dde0 |  69 6f 6e 46 6f 6c 64 65 72 40 34 00 5f 52 74 6c    43 72 65 61 74 65 53 65 63 75 72 69 74 79 44 65  | ionFolder@4._RtlCreateSecurityDe | 
| de00 |  73 63 72 69 70 74 6f 72 40 38 00 5f 5f 69 6d 70    5f 5f 52 74 6c 43 72 65 61 74 65 53 65 63 75 72  | scriptor@8.__imp__RtlCreateSecur | 
| de20 |  69 74 79 44 65 73 63 72 69 70 74 6f 72 40 38 00    5f 52 74 6c 43 72 65 61 74 65 52 65 67 69 73 74  | ityDescriptor@8._RtlCreateRegist | 
| de40 |  72 79 4b 65 79 40 38 00 5f 5f 69 6d 70 5f 5f 52    74 6c 43 72 65 61 74 65 52 65 67 69 73 74 72 79  | ryKey@8.__imp__RtlCreateRegistry | 
| de60 |  4b 65 79 40 38 00 5f 52 74 6c 43 72 65 61 74 65    51 75 65 72 79 44 65 62 75 67 42 75 66 66 65 72  | Key@8._RtlCreateQueryDebugBuffer | 
| de80 |  40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 72 65    61 74 65 51 75 65 72 79 44 65 62 75 67 42 75 66  | @8.__imp__RtlCreateQueryDebugBuf | 
| dea0 |  66 65 72 40 38 00 5f 52 74 6c 43 72 65 61 74 65    50 72 6f 63 65 73 73 50 61 72 61 6d 65 74 65 72  | fer@8._RtlCreateProcessParameter | 
| dec0 |  73 40 34 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43    72 65 61 74 65 50 72 6f 63 65 73 73 50 61 72 61  | s@40.__imp__RtlCreateProcessPara | 
| dee0 |  6d 65 74 65 72 73 40 34 30 00 5f 52 74 6c 43 72    65 61 74 65 48 65 61 70 40 32 34 00 5f 5f 69 6d  | meters@40._RtlCreateHeap@24.__im | 
| df00 |  70 5f 5f 52 74 6c 43 72 65 61 74 65 48 65 61 70    40 32 34 00 5f 52 74 6c 43 72 65 61 74 65 45 6e  | p__RtlCreateHeap@24._RtlCreateEn | 
| df20 |  76 69 72 6f 6e 6d 65 6e 74 40 38 00 5f 5f 69 6d    70 5f 5f 52 74 6c 43 72 65 61 74 65 45 6e 76 69  | vironment@8.__imp__RtlCreateEnvi | 
| df40 |  72 6f 6e 6d 65 6e 74 40 38 00 5f 52 74 6c 43 72    65 61 74 65 42 6f 6f 74 53 74 61 74 75 73 44 61  | ronment@8._RtlCreateBootStatusDa | 
| df60 |  74 61 46 69 6c 65 40 30 00 5f 5f 69 6d 70 5f 5f    52 74 6c 43 72 65 61 74 65 42 6f 6f 74 53 74 61  | taFile@0.__imp__RtlCreateBootSta | 
| df80 |  74 75 73 44 61 74 61 46 69 6c 65 40 30 00 5f 52    74 6c 43 72 65 61 74 65 41 74 6f 6d 54 61 62 6c  | tusDataFile@0._RtlCreateAtomTabl | 
| dfa0 |  65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 72    65 61 74 65 41 74 6f 6d 54 61 62 6c 65 40 38 00  | e@8.__imp__RtlCreateAtomTable@8. | 
| dfc0 |  5f 52 74 6c 43 72 65 61 74 65 41 6e 64 53 65 74    53 44 40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | _RtlCreateAndSetSD@20.__imp__Rtl | 
| dfe0 |  43 72 65 61 74 65 41 6e 64 53 65 74 53 44 40 32    30 00 5f 52 74 6c 43 72 65 61 74 65 41 63 74 69  | CreateAndSetSD@20._RtlCreateActi | 
| e000 |  76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 40 32 34    00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 72 65 61 74  | vationContext@24.__imp__RtlCreat | 
| e020 |  65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65    78 74 40 32 34 00 5f 52 74 6c 43 72 65 61 74 65  | eActivationContext@24._RtlCreate | 
| e040 |  41 63 6c 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74    6c 43 72 65 61 74 65 41 63 6c 40 31 32 00 5f 52  | Acl@12.__imp__RtlCreateAcl@12._R | 
| e060 |  74 6c 43 6f 70 79 55 6e 69 63 6f 64 65 53 74 72    69 6e 67 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | tlCopyUnicodeString@8.__imp__Rtl | 
| e080 |  43 6f 70 79 55 6e 69 63 6f 64 65 53 74 72 69 6e    67 40 38 00 5f 52 74 6c 43 6f 70 79 53 74 72 69  | CopyUnicodeString@8._RtlCopyStri | 
| e0a0 |  6e 67 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43    6f 70 79 53 74 72 69 6e 67 40 38 00 5f 52 74 6c  | ng@8.__imp__RtlCopyString@8._Rtl | 
| e0c0 |  43 6f 70 79 53 69 64 41 6e 64 41 74 74 72 69 62    75 74 65 73 41 72 72 61 79 40 32 38 00 5f 5f 69  | CopySidAndAttributesArray@28.__i | 
| e0e0 |  6d 70 5f 5f 52 74 6c 43 6f 70 79 53 69 64 41 6e    64 41 74 74 72 69 62 75 74 65 73 41 72 72 61 79  | mp__RtlCopySidAndAttributesArray | 
| e100 |  40 32 38 00 5f 52 74 6c 43 6f 70 79 53 69 64 40    31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f 70  | @28._RtlCopySid@12.__imp__RtlCop | 
| e120 |  79 53 69 64 40 31 32 00 5f 52 74 6c 43 6f 70 79    53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74  | ySid@12._RtlCopySecurityDescript | 
| e140 |  6f 72 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43    6f 70 79 53 65 63 75 72 69 74 79 44 65 73 63 72  | or@8.__imp__RtlCopySecurityDescr | 
| e160 |  69 70 74 6f 72 40 38 00 5f 52 74 6c 43 6f 70 79    4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f  | iptor@8._RtlCopyOutOfProcessMemo | 
| e180 |  72 79 53 74 72 65 61 6d 54 6f 40 32 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 43 6f 70 79 4f 75 74 4f  | ryStreamTo@24.__imp__RtlCopyOutO | 
| e1a0 |  66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74    72 65 61 6d 54 6f 40 32 34 00 5f 52 74 6c 43 6f  | fProcessMemoryStreamTo@24._RtlCo | 
| e1c0 |  70 79 4d 65 6d 6f 72 79 53 74 72 65 61 6d 54 6f    40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f  | pyMemoryStreamTo@24.__imp__RtlCo | 
| e1e0 |  70 79 4d 65 6d 6f 72 79 53 74 72 65 61 6d 54 6f    40 32 34 00 5f 52 74 6c 43 6f 70 79 4d 61 70 70  | pyMemoryStreamTo@24._RtlCopyMapp | 
| e200 |  65 64 4d 65 6d 6f 72 79 40 31 32 00 5f 5f 69 6d    70 5f 5f 52 74 6c 43 6f 70 79 4d 61 70 70 65 64  | edMemory@12.__imp__RtlCopyMapped | 
| e220 |  4d 65 6d 6f 72 79 40 31 32 00 5f 52 74 6c 43 6f    70 79 4c 75 69 64 41 6e 64 41 74 74 72 69 62 75  | Memory@12._RtlCopyLuidAndAttribu | 
| e240 |  74 65 73 41 72 72 61 79 40 31 32 00 5f 5f 69 6d    70 5f 5f 52 74 6c 43 6f 70 79 4c 75 69 64 41 6e  | tesArray@12.__imp__RtlCopyLuidAn | 
| e260 |  64 41 74 74 72 69 62 75 74 65 73 41 72 72 61 79    40 31 32 00 5f 52 74 6c 43 6f 70 79 4c 75 69 64  | dAttributesArray@12._RtlCopyLuid | 
| e280 |  40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f 70    79 4c 75 69 64 40 38 00 5f 52 74 6c 43 6f 6e 76  | @8.__imp__RtlCopyLuid@8._RtlConv | 
| e2a0 |  65 72 74 55 6c 6f 6e 67 54 6f 4c 61 72 67 65 49    6e 74 65 67 65 72 40 34 00 5f 5f 69 6d 70 5f 5f  | ertUlongToLargeInteger@4.__imp__ | 
| e2c0 |  52 74 6c 43 6f 6e 76 65 72 74 55 6c 6f 6e 67 54    6f 4c 61 72 67 65 49 6e 74 65 67 65 72 40 34 00  | RtlConvertUlongToLargeInteger@4. | 
| e2e0 |  5f 52 74 6c 43 6f 6e 76 65 72 74 55 69 4c 69 73    74 54 6f 41 70 69 4c 69 73 74 40 31 32 00 5f 5f  | _RtlConvertUiListToApiList@12.__ | 
| e300 |  69 6d 70 5f 5f 52 74 6c 43 6f 6e 76 65 72 74 55    69 4c 69 73 74 54 6f 41 70 69 4c 69 73 74 40 31  | imp__RtlConvertUiListToApiList@1 | 
| e320 |  32 00 5f 52 74 6c 43 6f 6e 76 65 72 74 54 6f 41    75 74 6f 49 6e 68 65 72 69 74 53 65 63 75 72 69  | 2._RtlConvertToAutoInheritSecuri | 
| e340 |  74 79 4f 62 6a 65 63 74 40 32 34 00 5f 5f 69 6d    70 5f 5f 52 74 6c 43 6f 6e 76 65 72 74 54 6f 41  | tyObject@24.__imp__RtlConvertToA | 
| e360 |  75 74 6f 49 6e 68 65 72 69 74 53 65 63 75 72 69    74 79 4f 62 6a 65 63 74 40 32 34 00 5f 52 74 6c  | utoInheritSecurityObject@24._Rtl | 
| e380 |  43 6f 6e 76 65 72 74 53 69 64 54 6f 55 6e 69 63    6f 64 65 53 74 72 69 6e 67 40 31 32 00 5f 5f 69  | ConvertSidToUnicodeString@12.__i | 
| e3a0 |  6d 70 5f 5f 52 74 6c 43 6f 6e 76 65 72 74 53 69    64 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67  | mp__RtlConvertSidToUnicodeString | 
| e3c0 |  40 31 32 00 5f 52 74 6c 43 6f 6e 76 65 72 74 53    68 61 72 65 64 54 6f 45 78 63 6c 75 73 69 76 65  | @12._RtlConvertSharedToExclusive | 
| e3e0 |  40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f 6e    76 65 72 74 53 68 61 72 65 64 54 6f 45 78 63 6c  | @4.__imp__RtlConvertSharedToExcl | 
| e400 |  75 73 69 76 65 40 34 00 5f 52 74 6c 43 6f 6e 76    65 72 74 4c 6f 6e 67 54 6f 4c 61 72 67 65 49 6e  | usive@4._RtlConvertLongToLargeIn | 
| e420 |  74 65 67 65 72 40 34 00 5f 5f 69 6d 70 5f 5f 52    74 6c 43 6f 6e 76 65 72 74 4c 6f 6e 67 54 6f 4c  | teger@4.__imp__RtlConvertLongToL | 
| e440 |  61 72 67 65 49 6e 74 65 67 65 72 40 34 00 5f 52    74 6c 43 6f 6e 76 65 72 74 45 78 63 6c 75 73 69  | argeInteger@4._RtlConvertExclusi | 
| e460 |  76 65 54 6f 53 68 61 72 65 64 40 34 00 5f 5f 69    6d 70 5f 5f 52 74 6c 43 6f 6e 76 65 72 74 45 78  | veToShared@4.__imp__RtlConvertEx | 
| e480 |  63 6c 75 73 69 76 65 54 6f 53 68 61 72 65 64 40    34 00 5f 52 74 6c 43 6f 6e 73 6f 6c 65 4d 75 6c  | clusiveToShared@4._RtlConsoleMul | 
| e4a0 |  74 69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65 4e    40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f  | tiByteToUnicodeN@24.__imp__RtlCo | 
| e4c0 |  6e 73 6f 6c 65 4d 75 6c 74 69 42 79 74 65 54 6f    55 6e 69 63 6f 64 65 4e 40 32 34 00 5f 52 74 6c  | nsoleMultiByteToUnicodeN@24._Rtl | 
| e4e0 |  43 6f 6d 70 75 74 65 50 72 69 76 61 74 69 7a 65    64 44 6c 6c 4e 61 6d 65 5f 55 40 31 32 00 5f 5f  | ComputePrivatizedDllName_U@12.__ | 
| e500 |  69 6d 70 5f 5f 52 74 6c 43 6f 6d 70 75 74 65 50    72 69 76 61 74 69 7a 65 64 44 6c 6c 4e 61 6d 65  | imp__RtlComputePrivatizedDllName | 
| e520 |  5f 55 40 31 32 00 5f 52 74 6c 43 6f 6d 70 75 74    65 49 6d 70 6f 72 74 54 61 62 6c 65 48 61 73 68  | _U@12._RtlComputeImportTableHash | 
| e540 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f    6d 70 75 74 65 49 6d 70 6f 72 74 54 61 62 6c 65  | @12.__imp__RtlComputeImportTable | 
| e560 |  48 61 73 68 40 31 32 00 5f 52 74 6c 43 6f 6d 70    75 74 65 43 72 63 33 32 40 31 32 00 5f 5f 69 6d  | Hash@12._RtlComputeCrc32@12.__im | 
| e580 |  70 5f 5f 52 74 6c 43 6f 6d 70 75 74 65 43 72 63    33 32 40 31 32 00 5f 52 74 6c 43 6f 6d 70 72 65  | p__RtlComputeCrc32@12._RtlCompre | 
| e5a0 |  73 73 42 75 66 66 65 72 40 33 32 00 5f 5f 69 6d    70 5f 5f 52 74 6c 43 6f 6d 70 72 65 73 73 42 75  | ssBuffer@32.__imp__RtlCompressBu | 
| e5c0 |  66 66 65 72 40 33 32 00 5f 52 74 6c 43 6f 6d 70    61 72 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67  | ffer@32._RtlCompareUnicodeString | 
| e5e0 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f    6d 70 61 72 65 55 6e 69 63 6f 64 65 53 74 72 69  | @12.__imp__RtlCompareUnicodeStri | 
| e600 |  6e 67 40 31 32 00 5f 52 74 6c 43 6f 6d 70 61 72    65 53 74 72 69 6e 67 40 31 32 00 5f 5f 69 6d 70  | ng@12._RtlCompareString@12.__imp | 
| e620 |  5f 5f 52 74 6c 43 6f 6d 70 61 72 65 53 74 72 69    6e 67 40 31 32 00 5f 52 74 6c 43 6f 6d 70 61 72  | __RtlCompareString@12._RtlCompar | 
| e640 |  65 4d 65 6d 6f 72 79 55 6c 6f 6e 67 40 31 32 00    5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f 6d 70 61 72  | eMemoryUlong@12.__imp__RtlCompar | 
| e660 |  65 4d 65 6d 6f 72 79 55 6c 6f 6e 67 40 31 32 00    5f 52 74 6c 43 6f 6d 70 61 72 65 4d 65 6d 6f 72  | eMemoryUlong@12._RtlCompareMemor | 
| e680 |  79 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43    6f 6d 70 61 72 65 4d 65 6d 6f 72 79 40 31 32 00  | y@12.__imp__RtlCompareMemory@12. | 
| e6a0 |  5f 52 74 6c 43 6f 6d 70 61 63 74 48 65 61 70 40    38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f 6d 70  | _RtlCompactHeap@8.__imp__RtlComp | 
| e6c0 |  61 63 74 48 65 61 70 40 38 00 5f 52 74 6c 43 6f    6d 6d 69 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d  | actHeap@8._RtlCommitMemoryStream | 
| e6e0 |  40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f 6d    6d 69 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 40  | @8.__imp__RtlCommitMemoryStream@ | 
| e700 |  38 00 5f 52 74 6c 43 6c 6f 6e 65 4d 65 6d 6f 72    79 53 74 72 65 61 6d 40 38 00 5f 5f 69 6d 70 5f  | 8._RtlCloneMemoryStream@8.__imp_ | 
| e720 |  5f 52 74 6c 43 6c 6f 6e 65 4d 65 6d 6f 72 79 53    74 72 65 61 6d 40 38 00 5f 52 74 6c 43 6c 65 61  | _RtlCloneMemoryStream@8._RtlClea | 
| e740 |  72 42 69 74 73 40 31 32 00 5f 5f 69 6d 70 5f 5f    52 74 6c 43 6c 65 61 72 42 69 74 73 40 31 32 00  | rBits@12.__imp__RtlClearBits@12. | 
| e760 |  5f 52 74 6c 43 6c 65 61 72 41 6c 6c 42 69 74 73    40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6c 65  | _RtlClearAllBits@4.__imp__RtlCle | 
| e780 |  61 72 41 6c 6c 42 69 74 73 40 34 00 5f 52 74 6c    43 68 65 63 6b 52 65 67 69 73 74 72 79 4b 65 79  | arAllBits@4._RtlCheckRegistryKey | 
| e7a0 |  40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 68 65    63 6b 52 65 67 69 73 74 72 79 4b 65 79 40 38 00  | @8.__imp__RtlCheckRegistryKey@8. | 
| e7c0 |  5f 52 74 6c 43 68 65 63 6b 50 72 6f 63 65 73 73    50 61 72 61 6d 65 74 65 72 73 40 31 36 00 5f 5f  | _RtlCheckProcessParameters@16.__ | 
| e7e0 |  69 6d 70 5f 5f 52 74 6c 43 68 65 63 6b 50 72 6f    63 65 73 73 50 61 72 61 6d 65 74 65 72 73 40 31  | imp__RtlCheckProcessParameters@1 | 
| e800 |  36 00 5f 52 74 6c 43 68 65 63 6b 46 6f 72 4f 72    70 68 61 6e 65 64 43 72 69 74 69 63 61 6c 53 65  | 6._RtlCheckForOrphanedCriticalSe | 
| e820 |  63 74 69 6f 6e 73 40 34 00 5f 5f 69 6d 70 5f 5f    52 74 6c 43 68 65 63 6b 46 6f 72 4f 72 70 68 61  | ctions@4.__imp__RtlCheckForOrpha | 
| e840 |  6e 65 64 43 72 69 74 69 63 61 6c 53 65 63 74 69    6f 6e 73 40 34 00 5f 52 74 6c 43 68 61 72 54 6f  | nedCriticalSections@4._RtlCharTo | 
| e860 |  49 6e 74 65 67 65 72 40 31 32 00 5f 5f 69 6d 70    5f 5f 52 74 6c 43 68 61 72 54 6f 49 6e 74 65 67  | Integer@12.__imp__RtlCharToInteg | 
| e880 |  65 72 40 31 32 00 5f 52 74 6c 43 61 70 74 75 72    65 53 74 61 63 6b 43 6f 6e 74 65 78 74 40 31 32  | er@12._RtlCaptureStackContext@12 | 
| e8a0 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 61 70 74 75    72 65 53 74 61 63 6b 43 6f 6e 74 65 78 74 40 31  | .__imp__RtlCaptureStackContext@1 | 
| e8c0 |  32 00 5f 52 74 6c 43 61 70 74 75 72 65 53 74 61    63 6b 42 61 63 6b 54 72 61 63 65 40 31 36 00 5f  | 2._RtlCaptureStackBackTrace@16._ | 
| e8e0 |  5f 69 6d 70 5f 5f 52 74 6c 43 61 70 74 75 72 65    53 74 61 63 6b 42 61 63 6b 54 72 61 63 65 40 31  | _imp__RtlCaptureStackBackTrace@1 | 
| e900 |  36 00 5f 52 74 6c 43 61 70 74 75 72 65 43 6f 6e    74 65 78 74 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | 6._RtlCaptureContext@4.__imp__Rt | 
| e920 |  6c 43 61 70 74 75 72 65 43 6f 6e 74 65 78 74 40    34 00 5f 52 74 6c 43 61 6e 63 65 6c 54 69 6d 65  | lCaptureContext@4._RtlCancelTime | 
| e940 |  72 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 61    6e 63 65 6c 54 69 6d 65 72 40 38 00 5f 52 74 6c  | r@8.__imp__RtlCancelTimer@8._Rtl | 
| e960 |  41 73 73 65 72 74 40 31 36 00 5f 5f 69 6d 70 5f    5f 52 74 6c 41 73 73 65 72 74 40 31 36 00 5f 52  | Assert@16.__imp__RtlAssert@16._R | 
| e980 |  74 6c 41 72 65 42 69 74 73 53 65 74 40 31 32 00    5f 5f 69 6d 70 5f 5f 52 74 6c 41 72 65 42 69 74  | tlAreBitsSet@12.__imp__RtlAreBit | 
| e9a0 |  73 53 65 74 40 31 32 00 5f 52 74 6c 41 72 65 42    69 74 73 43 6c 65 61 72 40 31 32 00 5f 5f 69 6d  | sSet@12._RtlAreBitsClear@12.__im | 
| e9c0 |  70 5f 5f 52 74 6c 41 72 65 42 69 74 73 43 6c 65    61 72 40 31 32 00 5f 52 74 6c 41 72 65 41 6e 79  | p__RtlAreBitsClear@12._RtlAreAny | 
| e9e0 |  41 63 63 65 73 73 65 73 47 72 61 6e 74 65 64 40    38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 72 65 41  | AccessesGranted@8.__imp__RtlAreA | 
| ea00 |  6e 79 41 63 63 65 73 73 65 73 47 72 61 6e 74 65    64 40 38 00 5f 52 74 6c 41 72 65 41 6c 6c 41 63  | nyAccessesGranted@8._RtlAreAllAc | 
| ea20 |  63 65 73 73 65 73 47 72 61 6e 74 65 64 40 38 00    5f 5f 69 6d 70 5f 5f 52 74 6c 41 72 65 41 6c 6c  | cessesGranted@8.__imp__RtlAreAll | 
| ea40 |  41 63 63 65 73 73 65 73 47 72 61 6e 74 65 64 40    38 00 5f 52 74 6c 41 70 70 6c 79 52 58 61 63 74  | AccessesGranted@8._RtlApplyRXact | 
| ea60 |  4e 6f 46 6c 75 73 68 40 34 00 5f 5f 69 6d 70 5f    5f 52 74 6c 41 70 70 6c 79 52 58 61 63 74 4e 6f  | NoFlush@4.__imp__RtlApplyRXactNo | 
| ea80 |  46 6c 75 73 68 40 34 00 5f 52 74 6c 41 70 70 6c    79 52 58 61 63 74 40 34 00 5f 5f 69 6d 70 5f 5f  | Flush@4._RtlApplyRXact@4.__imp__ | 
| eaa0 |  52 74 6c 41 70 70 6c 79 52 58 61 63 74 40 34 00    5f 52 74 6c 41 70 70 6c 69 63 61 74 69 6f 6e 56  | RtlApplyRXact@4._RtlApplicationV | 
| eac0 |  65 72 69 66 69 65 72 53 74 6f 70 40 34 30 00 5f    5f 69 6d 70 5f 5f 52 74 6c 41 70 70 6c 69 63 61  | erifierStop@40.__imp__RtlApplica | 
| eae0 |  74 69 6f 6e 56 65 72 69 66 69 65 72 53 74 6f 70    40 34 30 00 5f 52 74 6c 41 70 70 65 6e 64 55 6e  | tionVerifierStop@40._RtlAppendUn | 
| eb00 |  69 63 6f 64 65 54 6f 53 74 72 69 6e 67 40 38 00    5f 5f 69 6d 70 5f 5f 52 74 6c 41 70 70 65 6e 64  | icodeToString@8.__imp__RtlAppend | 
| eb20 |  55 6e 69 63 6f 64 65 54 6f 53 74 72 69 6e 67 40    38 00 5f 52 74 6c 41 70 70 65 6e 64 55 6e 69 63  | UnicodeToString@8._RtlAppendUnic | 
| eb40 |  6f 64 65 53 74 72 69 6e 67 54 6f 53 74 72 69 6e    67 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 70  | odeStringToString@8.__imp__RtlAp | 
| eb60 |  70 65 6e 64 55 6e 69 63 6f 64 65 53 74 72 69 6e    67 54 6f 53 74 72 69 6e 67 40 38 00 5f 52 74 6c  | pendUnicodeStringToString@8._Rtl | 
| eb80 |  41 70 70 65 6e 64 53 74 72 69 6e 67 54 6f 53 74    72 69 6e 67 40 38 00 5f 5f 69 6d 70 5f 5f 52 74  | AppendStringToString@8.__imp__Rt | 
| eba0 |  6c 41 70 70 65 6e 64 53 74 72 69 6e 67 54 6f 53    74 72 69 6e 67 40 38 00 5f 52 74 6c 41 70 70 65  | lAppendStringToString@8._RtlAppe | 
| ebc0 |  6e 64 50 61 74 68 45 6c 65 6d 65 6e 74 40 31 32    00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 70 70 65 6e  | ndPathElement@12.__imp__RtlAppen | 
| ebe0 |  64 50 61 74 68 45 6c 65 6d 65 6e 74 40 31 32 00    5f 52 74 6c 41 70 70 65 6e 64 41 73 63 69 69 7a  | dPathElement@12._RtlAppendAsciiz | 
| ec00 |  54 6f 53 74 72 69 6e 67 40 38 00 5f 5f 69 6d 70    5f 5f 52 74 6c 41 70 70 65 6e 64 41 73 63 69 69  | ToString@8.__imp__RtlAppendAscii | 
| ec20 |  7a 54 6f 53 74 72 69 6e 67 40 38 00 5f 52 74 6c    41 6e 73 69 53 74 72 69 6e 67 54 6f 55 6e 69 63  | zToString@8._RtlAnsiStringToUnic | 
| ec40 |  6f 64 65 53 74 72 69 6e 67 40 31 32 00 5f 5f 69    6d 70 5f 5f 52 74 6c 41 6e 73 69 53 74 72 69 6e  | odeString@12.__imp__RtlAnsiStrin | 
| ec60 |  67 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67    40 31 32 00 5f 52 74 6c 41 6e 73 69 53 74 72 69  | gToUnicodeString@12._RtlAnsiStri | 
| ec80 |  6e 67 54 6f 55 6e 69 63 6f 64 65 53 69 7a 65 40    34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 6e 73 69  | ngToUnicodeSize@4.__imp__RtlAnsi | 
| eca0 |  53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53    69 7a 65 40 34 00 5f 52 74 6c 41 6e 73 69 43 68  | StringToUnicodeSize@4._RtlAnsiCh | 
| ecc0 |  61 72 54 6f 55 6e 69 63 6f 64 65 43 68 61 72 40    34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 6e 73 69  | arToUnicodeChar@4.__imp__RtlAnsi | 
| ece0 |  43 68 61 72 54 6f 55 6e 69 63 6f 64 65 43 68 61    72 40 34 00 5f 52 74 6c 41 6c 6c 6f 63 61 74 65  | CharToUnicodeChar@4._RtlAllocate | 
| ed00 |  48 65 61 70 40 31 32 00 5f 5f 69 6d 70 5f 5f 52    74 6c 41 6c 6c 6f 63 61 74 65 48 65 61 70 40 31  | Heap@12.__imp__RtlAllocateHeap@1 | 
| ed20 |  32 00 5f 52 74 6c 41 6c 6c 6f 63 61 74 65 48 61    6e 64 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74  | 2._RtlAllocateHandle@8.__imp__Rt | 
| ed40 |  6c 41 6c 6c 6f 63 61 74 65 48 61 6e 64 6c 65 40    38 00 5f 52 74 6c 41 6c 6c 6f 63 61 74 65 41 6e  | lAllocateHandle@8._RtlAllocateAn | 
| ed60 |  64 49 6e 69 74 69 61 6c 69 7a 65 53 69 64 40 34    34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 6c 6c 6f  | dInitializeSid@44.__imp__RtlAllo | 
| ed80 |  63 61 74 65 41 6e 64 49 6e 69 74 69 61 6c 69 7a    65 53 69 64 40 34 34 00 5f 52 74 6c 41 6c 6c 6f  | cateAndInitializeSid@44._RtlAllo | 
| eda0 |  63 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f    6e 74 65 78 74 53 74 61 63 6b 40 34 00 5f 5f 69  | cateActivationContextStack@4.__i | 
| edc0 |  6d 70 5f 5f 52 74 6c 41 6c 6c 6f 63 61 74 65 41    63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74  | mp__RtlAllocateActivationContext | 
| ede0 |  53 74 61 63 6b 40 34 00 5f 52 74 6c 41 64 6a 75    73 74 50 72 69 76 69 6c 65 67 65 40 31 36 00 5f  | Stack@4._RtlAdjustPrivilege@16._ | 
| ee00 |  5f 69 6d 70 5f 5f 52 74 6c 41 64 6a 75 73 74 50    72 69 76 69 6c 65 67 65 40 31 36 00 5f 52 74 6c  | _imp__RtlAdjustPrivilege@16._Rtl | 
| ee20 |  41 64 64 72 65 73 73 49 6e 53 65 63 74 69 6f 6e    54 61 62 6c 65 40 31 32 00 5f 5f 69 6d 70 5f 5f  | AddressInSectionTable@12.__imp__ | 
| ee40 |  52 74 6c 41 64 64 72 65 73 73 49 6e 53 65 63 74    69 6f 6e 54 61 62 6c 65 40 31 32 00 5f 52 74 6c  | RtlAddressInSectionTable@12._Rtl | 
| ee60 |  41 64 64 56 65 63 74 6f 72 65 64 45 78 63 65 70    74 69 6f 6e 48 61 6e 64 6c 65 72 40 38 00 5f 5f  | AddVectoredExceptionHandler@8.__ | 
| ee80 |  69 6d 70 5f 5f 52 74 6c 41 64 64 56 65 63 74 6f    72 65 64 45 78 63 65 70 74 69 6f 6e 48 61 6e 64  | imp__RtlAddVectoredExceptionHand | 
| eea0 |  6c 65 72 40 38 00 5f 52 74 6c 41 64 64 56 65 63    74 6f 72 65 64 43 6f 6e 74 69 6e 75 65 48 61 6e  | ler@8._RtlAddVectoredContinueHan | 
| eec0 |  64 6c 65 72 40 38 00 5f 5f 69 6d 70 5f 5f 52 74    6c 41 64 64 56 65 63 74 6f 72 65 64 43 6f 6e 74  | dler@8.__imp__RtlAddVectoredCont | 
| eee0 |  69 6e 75 65 48 61 6e 64 6c 65 72 40 38 00 5f 52    74 6c 41 64 64 52 65 66 4d 65 6d 6f 72 79 53 74  | inueHandler@8._RtlAddRefMemorySt | 
| ef00 |  72 65 61 6d 40 34 00 5f 5f 69 6d 70 5f 5f 52 74    6c 41 64 64 52 65 66 4d 65 6d 6f 72 79 53 74 72  | ream@4.__imp__RtlAddRefMemoryStr | 
| ef20 |  65 61 6d 40 34 00 5f 52 74 6c 41 64 64 52 65 66    41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78  | eam@4._RtlAddRefActivationContex | 
| ef40 |  74 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 64    64 52 65 66 41 63 74 69 76 61 74 69 6f 6e 43 6f  | t@4.__imp__RtlAddRefActivationCo | 
| ef60 |  6e 74 65 78 74 40 34 00 5f 52 74 6c 41 64 64 43    6f 6d 70 6f 75 6e 64 41 63 65 40 32 34 00 5f 5f  | ntext@4._RtlAddCompoundAce@24.__ | 
| ef80 |  69 6d 70 5f 5f 52 74 6c 41 64 64 43 6f 6d 70 6f    75 6e 64 41 63 65 40 32 34 00 5f 52 74 6c 41 64  | imp__RtlAddCompoundAce@24._RtlAd | 
| efa0 |  64 41 75 64 69 74 41 63 63 65 73 73 4f 62 6a 65    63 74 41 63 65 40 33 36 00 5f 5f 69 6d 70 5f 5f  | dAuditAccessObjectAce@36.__imp__ | 
| efc0 |  52 74 6c 41 64 64 41 75 64 69 74 41 63 63 65 73    73 4f 62 6a 65 63 74 41 63 65 40 33 36 00 5f 52  | RtlAddAuditAccessObjectAce@36._R | 
| efe0 |  74 6c 41 64 64 41 75 64 69 74 41 63 63 65 73 73    41 63 65 45 78 40 32 38 00 5f 5f 69 6d 70 5f 5f  | tlAddAuditAccessAceEx@28.__imp__ | 
| f000 |  52 74 6c 41 64 64 41 75 64 69 74 41 63 63 65 73    73 41 63 65 45 78 40 32 38 00 5f 52 74 6c 41 64  | RtlAddAuditAccessAceEx@28._RtlAd | 
| f020 |  64 41 75 64 69 74 41 63 63 65 73 73 41 63 65 40    32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 64 64  | dAuditAccessAce@24.__imp__RtlAdd | 
| f040 |  41 75 64 69 74 41 63 63 65 73 73 41 63 65 40 32    34 00 5f 52 74 6c 41 64 64 41 74 74 72 69 62 75  | AuditAccessAce@24._RtlAddAttribu | 
| f060 |  74 65 41 63 74 69 6f 6e 54 6f 52 58 61 63 74 40    33 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 64 64  | teActionToRXact@32.__imp__RtlAdd | 
| f080 |  41 74 74 72 69 62 75 74 65 41 63 74 69 6f 6e 54    6f 52 58 61 63 74 40 33 32 00 5f 52 74 6c 41 64  | AttributeActionToRXact@32._RtlAd | 
| f0a0 |  64 41 74 6f 6d 54 6f 41 74 6f 6d 54 61 62 6c 65    40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 64  | dAtomToAtomTable@12.__imp__RtlAd | 
| f0c0 |  64 41 74 6f 6d 54 6f 41 74 6f 6d 54 61 62 6c 65    40 31 32 00 5f 52 74 6c 41 64 64 41 63 74 69 6f  | dAtomToAtomTable@12._RtlAddActio | 
| f0e0 |  6e 54 6f 52 58 61 63 74 40 32 34 00 5f 5f 69 6d    70 5f 5f 52 74 6c 41 64 64 41 63 74 69 6f 6e 54  | nToRXact@24.__imp__RtlAddActionT | 
| f100 |  6f 52 58 61 63 74 40 32 34 00 5f 52 74 6c 41 64    64 41 63 65 40 32 30 00 5f 5f 69 6d 70 5f 5f 52  | oRXact@24._RtlAddAce@20.__imp__R | 
| f120 |  74 6c 41 64 64 41 63 65 40 32 30 00 5f 52 74 6c    41 64 64 41 63 63 65 73 73 44 65 6e 69 65 64 4f  | tlAddAce@20._RtlAddAccessDeniedO | 
| f140 |  62 6a 65 63 74 41 63 65 40 32 38 00 5f 5f 69 6d    70 5f 5f 52 74 6c 41 64 64 41 63 63 65 73 73 44  | bjectAce@28.__imp__RtlAddAccessD | 
| f160 |  65 6e 69 65 64 4f 62 6a 65 63 74 41 63 65 40 32    38 00 5f 52 74 6c 41 64 64 41 63 63 65 73 73 44  | eniedObjectAce@28._RtlAddAccessD | 
| f180 |  65 6e 69 65 64 41 63 65 45 78 40 32 30 00 5f 5f    69 6d 70 5f 5f 52 74 6c 41 64 64 41 63 63 65 73  | eniedAceEx@20.__imp__RtlAddAcces | 
| f1a0 |  73 44 65 6e 69 65 64 41 63 65 45 78 40 32 30 00    5f 52 74 6c 41 64 64 41 63 63 65 73 73 44 65 6e  | sDeniedAceEx@20._RtlAddAccessDen | 
| f1c0 |  69 65 64 41 63 65 40 31 36 00 5f 5f 69 6d 70 5f    5f 52 74 6c 41 64 64 41 63 63 65 73 73 44 65 6e  | iedAce@16.__imp__RtlAddAccessDen | 
| f1e0 |  69 65 64 41 63 65 40 31 36 00 5f 52 74 6c 41 64    64 41 63 63 65 73 73 41 6c 6c 6f 77 65 64 4f 62  | iedAce@16._RtlAddAccessAllowedOb | 
| f200 |  6a 65 63 74 41 63 65 40 32 38 00 5f 5f 69 6d 70    5f 5f 52 74 6c 41 64 64 41 63 63 65 73 73 41 6c  | jectAce@28.__imp__RtlAddAccessAl | 
| f220 |  6c 6f 77 65 64 4f 62 6a 65 63 74 41 63 65 40 32    38 00 5f 52 74 6c 41 64 64 41 63 63 65 73 73 41  | lowedObjectAce@28._RtlAddAccessA | 
| f240 |  6c 6c 6f 77 65 64 41 63 65 45 78 40 32 30 00 5f    5f 69 6d 70 5f 5f 52 74 6c 41 64 64 41 63 63 65  | llowedAceEx@20.__imp__RtlAddAcce | 
| f260 |  73 73 41 6c 6c 6f 77 65 64 41 63 65 45 78 40 32    30 00 5f 52 74 6c 41 64 64 41 63 63 65 73 73 41  | ssAllowedAceEx@20._RtlAddAccessA | 
| f280 |  6c 6c 6f 77 65 64 41 63 65 40 31 36 00 5f 5f 69    6d 70 5f 5f 52 74 6c 41 64 64 41 63 63 65 73 73  | llowedAce@16.__imp__RtlAddAccess | 
| f2a0 |  41 6c 6c 6f 77 65 64 41 63 65 40 31 36 00 5f 52    74 6c 41 63 74 69 76 61 74 65 41 63 74 69 76 61  | AllowedAce@16._RtlActivateActiva | 
| f2c0 |  74 69 6f 6e 43 6f 6e 74 65 78 74 45 78 40 31 36    00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 63 74 69 76  | tionContextEx@16.__imp__RtlActiv | 
| f2e0 |  61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e    74 65 78 74 45 78 40 31 36 00 5f 52 74 6c 41 63  | ateActivationContextEx@16._RtlAc | 
| f300 |  74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e    43 6f 6e 74 65 78 74 40 31 32 00 5f 5f 69 6d 70  | tivateActivationContext@12.__imp | 
| f320 |  5f 5f 52 74 6c 41 63 74 69 76 61 74 65 41 63 74    69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 40 31  | __RtlActivateActivationContext@1 | 
| f340 |  32 00 5f 52 74 6c 41 63 71 75 69 72 65 52 65 73    6f 75 72 63 65 53 68 61 72 65 64 40 38 00 5f 5f  | 2._RtlAcquireResourceShared@8.__ | 
| f360 |  69 6d 70 5f 5f 52 74 6c 41 63 71 75 69 72 65 52    65 73 6f 75 72 63 65 53 68 61 72 65 64 40 38 00  | imp__RtlAcquireResourceShared@8. | 
| f380 |  5f 52 74 6c 41 63 71 75 69 72 65 52 65 73 6f 75    72 63 65 45 78 63 6c 75 73 69 76 65 40 38 00 5f  | _RtlAcquireResourceExclusive@8._ | 
| f3a0 |  5f 69 6d 70 5f 5f 52 74 6c 41 63 71 75 69 72 65    52 65 73 6f 75 72 63 65 45 78 63 6c 75 73 69 76  | _imp__RtlAcquireResourceExclusiv | 
| f3c0 |  65 40 38 00 5f 52 74 6c 41 63 71 75 69 72 65 50    72 69 76 69 6c 65 67 65 40 31 36 00 5f 5f 69 6d  | e@8._RtlAcquirePrivilege@16.__im | 
| f3e0 |  70 5f 5f 52 74 6c 41 63 71 75 69 72 65 50 72 69    76 69 6c 65 67 65 40 31 36 00 5f 52 74 6c 41 63  | p__RtlAcquirePrivilege@16._RtlAc | 
| f400 |  71 75 69 72 65 50 65 62 4c 6f 63 6b 40 30 00 5f    5f 69 6d 70 5f 5f 52 74 6c 41 63 71 75 69 72 65  | quirePebLock@0.__imp__RtlAcquire | 
| f420 |  50 65 62 4c 6f 63 6b 40 30 00 5f 52 74 6c 41 62    73 6f 6c 75 74 65 54 6f 53 65 6c 66 52 65 6c 61  | PebLock@0._RtlAbsoluteToSelfRela | 
| f440 |  74 69 76 65 53 44 40 31 32 00 5f 5f 69 6d 70 5f    5f 52 74 6c 41 62 73 6f 6c 75 74 65 54 6f 53 65  | tiveSD@12.__imp__RtlAbsoluteToSe | 
| f460 |  6c 66 52 65 6c 61 74 69 76 65 53 44 40 31 32 00    5f 52 74 6c 41 62 6f 72 74 52 58 61 63 74 40 34  | lfRelativeSD@12._RtlAbortRXact@4 | 
| f480 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 62 6f 72 74    52 58 61 63 74 40 34 00 5f 50 66 78 52 65 6d 6f  | .__imp__RtlAbortRXact@4._PfxRemo | 
| f4a0 |  76 65 50 72 65 66 69 78 40 38 00 5f 5f 69 6d 70    5f 5f 50 66 78 52 65 6d 6f 76 65 50 72 65 66 69  | vePrefix@8.__imp__PfxRemovePrefi | 
| f4c0 |  78 40 38 00 5f 50 66 78 49 6e 73 65 72 74 50 72    65 66 69 78 40 31 32 00 5f 5f 69 6d 70 5f 5f 50  | x@8._PfxInsertPrefix@12.__imp__P | 
| f4e0 |  66 78 49 6e 73 65 72 74 50 72 65 66 69 78 40 31    32 00 5f 50 66 78 49 6e 69 74 69 61 6c 69 7a 65  | fxInsertPrefix@12._PfxInitialize | 
| f500 |  40 34 00 5f 5f 69 6d 70 5f 5f 50 66 78 49 6e 69    74 69 61 6c 69 7a 65 40 34 00 5f 50 66 78 46 69  | @4.__imp__PfxInitialize@4._PfxFi | 
| f520 |  6e 64 50 72 65 66 69 78 40 38 00 5f 5f 69 6d 70    5f 5f 50 66 78 46 69 6e 64 50 72 65 66 69 78 40  | ndPrefix@8.__imp__PfxFindPrefix@ | 
| f540 |  38 00 5f 4e 74 59 69 65 6c 64 45 78 65 63 75 74    69 6f 6e 40 30 00 5f 5f 69 6d 70 5f 5f 4e 74 59  | 8._NtYieldExecution@0.__imp__NtY | 
| f560 |  69 65 6c 64 45 78 65 63 75 74 69 6f 6e 40 30 00    5f 4e 74 57 72 69 74 65 56 69 72 74 75 61 6c 4d  | ieldExecution@0._NtWriteVirtualM | 
| f580 |  65 6d 6f 72 79 40 32 30 00 5f 5f 69 6d 70 5f 5f    4e 74 57 72 69 74 65 56 69 72 74 75 61 6c 4d 65  | emory@20.__imp__NtWriteVirtualMe | 
| f5a0 |  6d 6f 72 79 40 32 30 00 5f 4e 74 57 72 69 74 65    52 65 71 75 65 73 74 44 61 74 61 40 32 34 00 5f  | mory@20._NtWriteRequestData@24._ | 
| f5c0 |  5f 69 6d 70 5f 5f 4e 74 57 72 69 74 65 52 65 71    75 65 73 74 44 61 74 61 40 32 34 00 5f 4e 74 57  | _imp__NtWriteRequestData@24._NtW | 
| f5e0 |  72 69 74 65 46 69 6c 65 47 61 74 68 65 72 40 33    36 00 5f 5f 69 6d 70 5f 5f 4e 74 57 72 69 74 65  | riteFileGather@36.__imp__NtWrite | 
| f600 |  46 69 6c 65 47 61 74 68 65 72 40 33 36 00 5f 4e    74 57 72 69 74 65 46 69 6c 65 40 33 36 00 5f 5f  | FileGather@36._NtWriteFile@36.__ | 
| f620 |  69 6d 70 5f 5f 4e 74 57 72 69 74 65 46 69 6c 65    40 33 36 00 5f 4e 74 57 61 69 74 4c 6f 77 45 76  | imp__NtWriteFile@36._NtWaitLowEv | 
| f640 |  65 6e 74 50 61 69 72 40 34 00 5f 5f 69 6d 70 5f    5f 4e 74 57 61 69 74 4c 6f 77 45 76 65 6e 74 50  | entPair@4.__imp__NtWaitLowEventP | 
| f660 |  61 69 72 40 34 00 5f 4e 74 57 61 69 74 48 69 67    68 45 76 65 6e 74 50 61 69 72 40 34 00 5f 5f 69  | air@4._NtWaitHighEventPair@4.__i | 
| f680 |  6d 70 5f 5f 4e 74 57 61 69 74 48 69 67 68 45 76    65 6e 74 50 61 69 72 40 34 00 5f 4e 74 57 61 69  | mp__NtWaitHighEventPair@4._NtWai | 
| f6a0 |  74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74    40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 57 61 69  | tForSingleObject@12.__imp__NtWai | 
| f6c0 |  74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74    40 31 32 00 5f 4e 74 57 61 69 74 46 6f 72 4d 75  | tForSingleObject@12._NtWaitForMu | 
| f6e0 |  6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 40 32 30    00 5f 5f 69 6d 70 5f 5f 4e 74 57 61 69 74 46 6f  | ltipleObjects@20.__imp__NtWaitFo | 
| f700 |  72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73    40 32 30 00 5f 4e 74 57 61 69 74 46 6f 72 4d 75  | rMultipleObjects@20._NtWaitForMu | 
| f720 |  6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 33 32 40    32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 57 61 69 74  | ltipleObjects32@20.__imp__NtWait | 
| f740 |  46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63    74 73 33 32 40 32 30 00 5f 4e 74 57 61 69 74 46  | ForMultipleObjects32@20._NtWaitF | 
| f760 |  6f 72 4b 65 79 65 64 45 76 65 6e 74 40 31 36 00    5f 5f 69 6d 70 5f 5f 4e 74 57 61 69 74 46 6f 72  | orKeyedEvent@16.__imp__NtWaitFor | 
| f780 |  4b 65 79 65 64 45 76 65 6e 74 40 31 36 00 5f 4e    74 57 61 69 74 46 6f 72 44 65 62 75 67 45 76 65  | KeyedEvent@16._NtWaitForDebugEve | 
| f7a0 |  6e 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 57    61 69 74 46 6f 72 44 65 62 75 67 45 76 65 6e 74  | nt@16.__imp__NtWaitForDebugEvent | 
| f7c0 |  40 31 36 00 5f 4e 74 56 64 6d 43 6f 6e 74 72 6f    6c 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 56 64 6d  | @16._NtVdmControl@8.__imp__NtVdm | 
| f7e0 |  43 6f 6e 74 72 6f 6c 40 38 00 5f 4e 74 55 6e 6d    61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 40  | Control@8._NtUnmapViewOfSection@ | 
| f800 |  38 00 5f 5f 69 6d 70 5f 5f 4e 74 55 6e 6d 61 70    56 69 65 77 4f 66 53 65 63 74 69 6f 6e 40 38 00  | 8.__imp__NtUnmapViewOfSection@8. | 
| f820 |  5f 4e 74 55 6e 6c 6f 63 6b 56 69 72 74 75 61 6c    4d 65 6d 6f 72 79 40 31 36 00 5f 5f 69 6d 70 5f  | _NtUnlockVirtualMemory@16.__imp_ | 
| f840 |  5f 4e 74 55 6e 6c 6f 63 6b 56 69 72 74 75 61 6c    4d 65 6d 6f 72 79 40 31 36 00 5f 4e 74 55 6e 6c  | _NtUnlockVirtualMemory@16._NtUnl | 
| f860 |  6f 63 6b 46 69 6c 65 40 32 30 00 5f 5f 69 6d 70    5f 5f 4e 74 55 6e 6c 6f 63 6b 46 69 6c 65 40 32  | ockFile@20.__imp__NtUnlockFile@2 | 
| f880 |  30 00 5f 4e 74 55 6e 6c 6f 61 64 4b 65 79 45 78    40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 55 6e 6c 6f  | 0._NtUnloadKeyEx@8.__imp__NtUnlo | 
| f8a0 |  61 64 4b 65 79 45 78 40 38 00 5f 4e 74 55 6e 6c    6f 61 64 4b 65 79 40 34 00 5f 5f 69 6d 70 5f 5f  | adKeyEx@8._NtUnloadKey@4.__imp__ | 
| f8c0 |  4e 74 55 6e 6c 6f 61 64 4b 65 79 40 34 00 5f 4e    74 55 6e 6c 6f 61 64 4b 65 79 32 40 38 00 5f 5f  | NtUnloadKey@4._NtUnloadKey2@8.__ | 
| f8e0 |  69 6d 70 5f 5f 4e 74 55 6e 6c 6f 61 64 4b 65 79    32 40 38 00 5f 4e 74 55 6e 6c 6f 61 64 44 72 69  | imp__NtUnloadKey2@8._NtUnloadDri | 
| f900 |  76 65 72 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 55    6e 6c 6f 61 64 44 72 69 76 65 72 40 34 00 5f 4e  | ver@4.__imp__NtUnloadDriver@4._N | 
| f920 |  74 54 72 61 6e 73 6c 61 74 65 46 69 6c 65 50 61    74 68 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 54  | tTranslateFilePath@16.__imp__NtT | 
| f940 |  72 61 6e 73 6c 61 74 65 46 69 6c 65 50 61 74 68    40 31 36 00 5f 4e 74 54 72 61 63 65 45 76 65 6e  | ranslateFilePath@16._NtTraceEven | 
| f960 |  74 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 54 72    61 63 65 45 76 65 6e 74 40 31 36 00 5f 4e 74 54  | t@16.__imp__NtTraceEvent@16._NtT | 
| f980 |  65 73 74 41 6c 65 72 74 40 30 00 5f 5f 69 6d 70    5f 5f 4e 74 54 65 73 74 41 6c 65 72 74 40 30 00  | estAlert@0.__imp__NtTestAlert@0. | 
| f9a0 |  5f 4e 74 54 65 72 6d 69 6e 61 74 65 54 68 72 65    61 64 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 54 65  | _NtTerminateThread@8.__imp__NtTe | 
| f9c0 |  72 6d 69 6e 61 74 65 54 68 72 65 61 64 40 38 00    5f 4e 74 54 65 72 6d 69 6e 61 74 65 50 72 6f 63  | rminateThread@8._NtTerminateProc | 
| f9e0 |  65 73 73 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 54    65 72 6d 69 6e 61 74 65 50 72 6f 63 65 73 73 40  | ess@8.__imp__NtTerminateProcess@ | 
| fa00 |  38 00 5f 4e 74 54 65 72 6d 69 6e 61 74 65 4a 6f    62 4f 62 6a 65 63 74 40 38 00 5f 5f 69 6d 70 5f  | 8._NtTerminateJobObject@8.__imp_ | 
| fa20 |  5f 4e 74 54 65 72 6d 69 6e 61 74 65 4a 6f 62 4f    62 6a 65 63 74 40 38 00 5f 4e 74 53 79 73 74 65  | _NtTerminateJobObject@8._NtSyste | 
| fa40 |  6d 44 65 62 75 67 43 6f 6e 74 72 6f 6c 40 32 34    00 5f 5f 69 6d 70 5f 5f 4e 74 53 79 73 74 65 6d  | mDebugControl@24.__imp__NtSystem | 
| fa60 |  44 65 62 75 67 43 6f 6e 74 72 6f 6c 40 32 34 00    5f 4e 74 53 75 73 70 65 6e 64 54 68 72 65 61 64  | DebugControl@24._NtSuspendThread | 
| fa80 |  40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 53 75 73 70    65 6e 64 54 68 72 65 61 64 40 38 00 5f 4e 74 53  | @8.__imp__NtSuspendThread@8._NtS | 
| faa0 |  75 73 70 65 6e 64 50 72 6f 63 65 73 73 40 34 00    5f 5f 69 6d 70 5f 5f 4e 74 53 75 73 70 65 6e 64  | uspendProcess@4.__imp__NtSuspend | 
| fac0 |  50 72 6f 63 65 73 73 40 34 00 5f 4e 74 53 74 6f    70 50 72 6f 66 69 6c 65 40 34 00 5f 5f 69 6d 70  | Process@4._NtStopProfile@4.__imp | 
| fae0 |  5f 5f 4e 74 53 74 6f 70 50 72 6f 66 69 6c 65 40    34 00 5f 4e 74 53 74 61 72 74 50 72 6f 66 69 6c  | __NtStopProfile@4._NtStartProfil | 
| fb00 |  65 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 53 74 61    72 74 50 72 6f 66 69 6c 65 40 34 00 5f 4e 74 53  | e@4.__imp__NtStartProfile@4._NtS | 
| fb20 |  69 67 6e 61 6c 41 6e 64 57 61 69 74 46 6f 72 53    69 6e 67 6c 65 4f 62 6a 65 63 74 40 31 36 00 5f  | ignalAndWaitForSingleObject@16._ | 
| fb40 |  5f 69 6d 70 5f 5f 4e 74 53 69 67 6e 61 6c 41 6e    64 57 61 69 74 46 6f 72 53 69 6e 67 6c 65 4f 62  | _imp__NtSignalAndWaitForSingleOb | 
| fb60 |  6a 65 63 74 40 31 36 00 5f 4e 74 53 68 75 74 64    6f 77 6e 53 79 73 74 65 6d 40 34 00 5f 5f 69 6d  | ject@16._NtShutdownSystem@4.__im | 
| fb80 |  70 5f 5f 4e 74 53 68 75 74 64 6f 77 6e 53 79 73    74 65 6d 40 34 00 5f 4e 74 53 65 74 56 6f 6c 75  | p__NtShutdownSystem@4._NtSetVolu | 
| fba0 |  6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c    65 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65  | meInformationFile@20.__imp__NtSe | 
| fbc0 |  74 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69    6f 6e 46 69 6c 65 40 32 30 00 5f 4e 74 53 65 74  | tVolumeInformationFile@20._NtSet | 
| fbe0 |  56 61 6c 75 65 4b 65 79 40 32 34 00 5f 5f 69 6d    70 5f 5f 4e 74 53 65 74 56 61 6c 75 65 4b 65 79  | ValueKey@24.__imp__NtSetValueKey | 
| fc00 |  40 32 34 00 5f 4e 74 53 65 74 55 75 69 64 53 65    65 64 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65  | @24._NtSetUuidSeed@4.__imp__NtSe | 
| fc20 |  74 55 75 69 64 53 65 65 64 40 34 00 5f 4e 74 53    65 74 54 69 6d 65 72 52 65 73 6f 6c 75 74 69 6f  | tUuidSeed@4._NtSetTimerResolutio | 
| fc40 |  6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65    74 54 69 6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e  | n@12.__imp__NtSetTimerResolution | 
| fc60 |  40 31 32 00 5f 4e 74 53 65 74 54 69 6d 65 72 40    32 38 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65 74 54  | @12._NtSetTimer@28.__imp__NtSetT | 
| fc80 |  69 6d 65 72 40 32 38 00 5f 4e 74 53 65 74 54 68    72 65 61 64 45 78 65 63 75 74 69 6f 6e 53 74 61  | imer@28._NtSetThreadExecutionSta | 
| fca0 |  74 65 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65    74 54 68 72 65 61 64 45 78 65 63 75 74 69 6f 6e  | te@8.__imp__NtSetThreadExecution | 
| fcc0 |  53 74 61 74 65 40 38 00 5f 4e 74 53 65 74 53 79    73 74 65 6d 54 69 6d 65 40 38 00 5f 5f 69 6d 70  | State@8._NtSetSystemTime@8.__imp | 
| fce0 |  5f 5f 4e 74 53 65 74 53 79 73 74 65 6d 54 69 6d    65 40 38 00 5f 4e 74 53 65 74 53 79 73 74 65 6d  | __NtSetSystemTime@8._NtSetSystem | 
| fd00 |  50 6f 77 65 72 53 74 61 74 65 40 31 32 00 5f 5f    69 6d 70 5f 5f 4e 74 53 65 74 53 79 73 74 65 6d  | PowerState@12.__imp__NtSetSystem | 
| fd20 |  50 6f 77 65 72 53 74 61 74 65 40 31 32 00 5f 4e    74 53 65 74 53 79 73 74 65 6d 49 6e 66 6f 72 6d  | PowerState@12._NtSetSystemInform | 
| fd40 |  61 74 69 6f 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f    4e 74 53 65 74 53 79 73 74 65 6d 49 6e 66 6f 72  | ation@12.__imp__NtSetSystemInfor | 
| fd60 |  6d 61 74 69 6f 6e 40 31 32 00 5f 4e 74 53 65 74    53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e  | mation@12._NtSetSystemEnvironmen | 
| fd80 |  74 56 61 6c 75 65 45 78 40 32 30 00 5f 5f 69 6d    70 5f 5f 4e 74 53 65 74 53 79 73 74 65 6d 45 6e  | tValueEx@20.__imp__NtSetSystemEn | 
| fda0 |  76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78    40 32 30 00 5f 4e 74 53 65 74 53 79 73 74 65 6d  | vironmentValueEx@20._NtSetSystem | 
| fdc0 |  45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65    40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65 74 53  | EnvironmentValue@8.__imp__NtSetS | 
| fde0 |  79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74    56 61 6c 75 65 40 38 00 5f 4e 74 53 65 74 53 65  | ystemEnvironmentValue@8._NtSetSe | 
| fe00 |  63 75 72 69 74 79 4f 62 6a 65 63 74 40 31 32 00    5f 5f 69 6d 70 5f 5f 4e 74 53 65 74 53 65 63 75  | curityObject@12.__imp__NtSetSecu | 
| fe20 |  72 69 74 79 4f 62 6a 65 63 74 40 31 32 00 5f 4e    74 53 65 74 51 75 6f 74 61 49 6e 66 6f 72 6d 61  | rityObject@12._NtSetQuotaInforma | 
| fe40 |  74 69 6f 6e 46 69 6c 65 40 31 36 00 5f 5f 69 6d    70 5f 5f 4e 74 53 65 74 51 75 6f 74 61 49 6e 66  | tionFile@16.__imp__NtSetQuotaInf | 
| fe60 |  6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40 31 36 00    5f 4e 74 53 65 74 4c 6f 77 57 61 69 74 48 69 67  | ormationFile@16._NtSetLowWaitHig | 
| fe80 |  68 45 76 65 6e 74 50 61 69 72 40 34 00 5f 5f 69    6d 70 5f 5f 4e 74 53 65 74 4c 6f 77 57 61 69 74  | hEventPair@4.__imp__NtSetLowWait | 
| fea0 |  48 69 67 68 45 76 65 6e 74 50 61 69 72 40 34 00    5f 4e 74 53 65 74 4c 6f 77 45 76 65 6e 74 50 61  | HighEventPair@4._NtSetLowEventPa | 
| fec0 |  69 72 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65    74 4c 6f 77 45 76 65 6e 74 50 61 69 72 40 34 00  | ir@4.__imp__NtSetLowEventPair@4. | 
| fee0 |  5f 4e 74 53 65 74 4c 64 74 45 6e 74 72 69 65 73    40 32 34 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65 74  | _NtSetLdtEntries@24.__imp__NtSet | 
| ff00 |  4c 64 74 45 6e 74 72 69 65 73 40 32 34 00 5f 4e    74 53 65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e  | LdtEntries@24._NtSetIoCompletion | 
| ff20 |  40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65 74    49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 32 30 00  | @20.__imp__NtSetIoCompletion@20. | 
| ff40 |  5f 4e 74 53 65 74 49 6e 74 65 72 76 61 6c 50 72    6f 66 69 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 4e  | _NtSetIntervalProfile@8.__imp__N | 
| ff60 |  74 53 65 74 49 6e 74 65 72 76 61 6c 50 72 6f 66    69 6c 65 40 38 00 5f 4e 74 53 65 74 49 6e 66 6f  | tSetIntervalProfile@8._NtSetInfo | 
| ff80 |  72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 40 31 36 00    5f 5f 69 6d 70 5f 5f 4e 74 53 65 74 49 6e 66 6f  | rmationToken@16.__imp__NtSetInfo | 
| ffa0 |  72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 40 31 36 00    5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f  | rmationToken@16._NtSetInformatio | 
| ffc0 |  6e 54 68 72 65 61 64 40 31 36 00 5f 5f 69 6d 70    5f 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69  | nThread@16.__imp__NtSetInformati | 
| ffe0 |  6f 6e 54 68 72 65 61 64 40 31 36 00 5f 4e 74 53    65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f  | onThread@16._NtSetInformationPro | 
| 10000 |  63 65 73 73 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e    74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50  | cess@16.__imp__NtSetInformationP | 
| 10020 |  72 6f 63 65 73 73 40 31 36 00 5f 4e 74 53 65 74    49 6e 66 6f 72 6d 61 74 69 6f 6e 4f 62 6a 65 63  | rocess@16._NtSetInformationObjec | 
| 10040 |  74 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65    74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f 62 6a 65  | t@16.__imp__NtSetInformationObje | 
| 10060 |  63 74 40 31 36 00 5f 4e 74 53 65 74 49 6e 66 6f    72 6d 61 74 69 6f 6e 4b 65 79 40 31 36 00 5f 5f  | ct@16._NtSetInformationKey@16.__ | 
| 10080 |  69 6d 70 5f 5f 4e 74 53 65 74 49 6e 66 6f 72 6d    61 74 69 6f 6e 4b 65 79 40 31 36 00 5f 4e 74 53  | imp__NtSetInformationKey@16._NtS | 
| 100a0 |  65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62    4f 62 6a 65 63 74 40 31 36 00 5f 5f 69 6d 70 5f  | etInformationJobObject@16.__imp_ | 
| 100c0 |  5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f    6e 4a 6f 62 4f 62 6a 65 63 74 40 31 36 00 5f 4e  | _NtSetInformationJobObject@16._N | 
| 100e0 |  74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 46    69 6c 65 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74  | tSetInformationFile@20.__imp__Nt | 
| 10100 |  53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69    6c 65 40 32 30 00 5f 4e 74 53 65 74 49 6e 66 6f  | SetInformationFile@20._NtSetInfo | 
| 10120 |  72 6d 61 74 69 6f 6e 44 65 62 75 67 4f 62 6a 65    63 74 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 53  | rmationDebugObject@20.__imp__NtS | 
| 10140 |  65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 44 65 62    75 67 4f 62 6a 65 63 74 40 32 30 00 5f 4e 74 53  | etInformationDebugObject@20._NtS | 
| 10160 |  65 74 48 69 67 68 57 61 69 74 4c 6f 77 45 76 65    6e 74 50 61 69 72 40 34 00 5f 5f 69 6d 70 5f 5f  | etHighWaitLowEventPair@4.__imp__ | 
| 10180 |  4e 74 53 65 74 48 69 67 68 57 61 69 74 4c 6f 77    45 76 65 6e 74 50 61 69 72 40 34 00 5f 4e 74 53  | NtSetHighWaitLowEventPair@4._NtS | 
| 101a0 |  65 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 40    34 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65 74 48 69  | etHighEventPair@4.__imp__NtSetHi | 
| 101c0 |  67 68 45 76 65 6e 74 50 61 69 72 40 34 00 5f 4e    74 53 65 74 45 76 65 6e 74 42 6f 6f 73 74 50 72  | ghEventPair@4._NtSetEventBoostPr | 
| 101e0 |  69 6f 72 69 74 79 40 34 00 5f 5f 69 6d 70 5f 5f    4e 74 53 65 74 45 76 65 6e 74 42 6f 6f 73 74 50  | iority@4.__imp__NtSetEventBoostP | 
| 10200 |  72 69 6f 72 69 74 79 40 34 00 5f 4e 74 53 65 74    45 76 65 6e 74 40 38 00 5f 5f 69 6d 70 5f 5f 4e  | riority@4._NtSetEvent@8.__imp__N | 
| 10220 |  74 53 65 74 45 76 65 6e 74 40 38 00 5f 4e 74 53    65 74 45 61 46 69 6c 65 40 31 36 00 5f 5f 69 6d  | tSetEvent@8._NtSetEaFile@16.__im | 
| 10240 |  70 5f 5f 4e 74 53 65 74 45 61 46 69 6c 65 40 31    36 00 5f 4e 74 53 65 74 44 72 69 76 65 72 45 6e  | p__NtSetEaFile@16._NtSetDriverEn | 
| 10260 |  74 72 79 4f 72 64 65 72 40 38 00 5f 5f 69 6d 70    5f 5f 4e 74 53 65 74 44 72 69 76 65 72 45 6e 74  | tryOrder@8.__imp__NtSetDriverEnt | 
| 10280 |  72 79 4f 72 64 65 72 40 38 00 5f 4e 74 53 65 74    44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67  | ryOrder@8._NtSetDefaultUILanguag | 
| 102a0 |  65 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65 74    44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67  | e@4.__imp__NtSetDefaultUILanguag | 
| 102c0 |  65 40 34 00 5f 4e 74 53 65 74 44 65 66 61 75 6c    74 4c 6f 63 61 6c 65 40 38 00 5f 5f 69 6d 70 5f  | e@4._NtSetDefaultLocale@8.__imp_ | 
| 102e0 |  5f 4e 74 53 65 74 44 65 66 61 75 6c 74 4c 6f 63    61 6c 65 40 38 00 5f 4e 74 53 65 74 44 65 66 61  | _NtSetDefaultLocale@8._NtSetDefa | 
| 10300 |  75 6c 74 48 61 72 64 45 72 72 6f 72 50 6f 72 74    40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65 74 44  | ultHardErrorPort@4.__imp__NtSetD | 
| 10320 |  65 66 61 75 6c 74 48 61 72 64 45 72 72 6f 72 50    6f 72 74 40 34 00 5f 4e 74 53 65 74 44 65 62 75  | efaultHardErrorPort@4._NtSetDebu | 
| 10340 |  67 46 69 6c 74 65 72 53 74 61 74 65 40 31 32 00    5f 5f 69 6d 70 5f 5f 4e 74 53 65 74 44 65 62 75  | gFilterState@12.__imp__NtSetDebu | 
| 10360 |  67 46 69 6c 74 65 72 53 74 61 74 65 40 31 32 00    5f 4e 74 53 65 74 43 6f 6e 74 65 78 74 54 68 72  | gFilterState@12._NtSetContextThr | 
| 10380 |  65 61 64 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 53    65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 64 40  | ead@8.__imp__NtSetContextThread@ | 
| 103a0 |  38 00 5f 4e 74 53 65 74 42 6f 6f 74 4f 70 74 69    6f 6e 73 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 53  | 8._NtSetBootOptions@8.__imp__NtS | 
| 103c0 |  65 74 42 6f 6f 74 4f 70 74 69 6f 6e 73 40 38 00    5f 4e 74 53 65 74 42 6f 6f 74 45 6e 74 72 79 4f  | etBootOptions@8._NtSetBootEntryO | 
| 103e0 |  72 64 65 72 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74    53 65 74 42 6f 6f 74 45 6e 74 72 79 4f 72 64 65  | rder@8.__imp__NtSetBootEntryOrde | 
| 10400 |  72 40 38 00 5f 4e 74 53 65 63 75 72 65 43 6f 6e    6e 65 63 74 50 6f 72 74 40 33 36 00 5f 5f 69 6d  | r@8._NtSecureConnectPort@36.__im | 
| 10420 |  70 5f 5f 4e 74 53 65 63 75 72 65 43 6f 6e 6e 65    63 74 50 6f 72 74 40 33 36 00 5f 4e 74 53 61 76  | p__NtSecureConnectPort@36._NtSav | 
| 10440 |  65 4d 65 72 67 65 64 4b 65 79 73 40 31 32 00 5f    5f 69 6d 70 5f 5f 4e 74 53 61 76 65 4d 65 72 67  | eMergedKeys@12.__imp__NtSaveMerg | 
| 10460 |  65 64 4b 65 79 73 40 31 32 00 5f 4e 74 53 61 76    65 4b 65 79 45 78 40 31 32 00 5f 5f 69 6d 70 5f  | edKeys@12._NtSaveKeyEx@12.__imp_ | 
| 10480 |  5f 4e 74 53 61 76 65 4b 65 79 45 78 40 31 32 00    5f 4e 74 53 61 76 65 4b 65 79 40 38 00 5f 5f 69  | _NtSaveKeyEx@12._NtSaveKey@8.__i | 
| 104a0 |  6d 70 5f 5f 4e 74 53 61 76 65 4b 65 79 40 38 00    5f 4e 74 52 65 73 75 6d 65 54 68 72 65 61 64 40  | mp__NtSaveKey@8._NtResumeThread@ | 
| 104c0 |  38 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 73 75 6d    65 54 68 72 65 61 64 40 38 00 5f 4e 74 52 65 73  | 8.__imp__NtResumeThread@8._NtRes | 
| 104e0 |  75 6d 65 50 72 6f 63 65 73 73 40 34 00 5f 5f 69    6d 70 5f 5f 4e 74 52 65 73 75 6d 65 50 72 6f 63  | umeProcess@4.__imp__NtResumeProc | 
| 10500 |  65 73 73 40 34 00 5f 4e 74 52 65 73 74 6f 72 65    4b 65 79 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74  | ess@4._NtRestoreKey@12.__imp__Nt | 
| 10520 |  52 65 73 74 6f 72 65 4b 65 79 40 31 32 00 5f 4e    74 52 65 73 65 74 57 72 69 74 65 57 61 74 63 68  | RestoreKey@12._NtResetWriteWatch | 
| 10540 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 73    65 74 57 72 69 74 65 57 61 74 63 68 40 31 32 00  | @12.__imp__NtResetWriteWatch@12. | 
| 10560 |  5f 4e 74 52 65 73 65 74 45 76 65 6e 74 40 38 00    5f 5f 69 6d 70 5f 5f 4e 74 52 65 73 65 74 45 76  | _NtResetEvent@8.__imp__NtResetEv | 
| 10580 |  65 6e 74 40 38 00 5f 4e 74 52 65 71 75 65 73 74    57 61 6b 65 75 70 4c 61 74 65 6e 63 79 40 34 00  | ent@8._NtRequestWakeupLatency@4. | 
| 105a0 |  5f 5f 69 6d 70 5f 5f 4e 74 52 65 71 75 65 73 74    57 61 6b 65 75 70 4c 61 74 65 6e 63 79 40 34 00  | __imp__NtRequestWakeupLatency@4. | 
| 105c0 |  5f 4e 74 52 65 71 75 65 73 74 57 61 69 74 52 65    70 6c 79 50 6f 72 74 40 31 32 00 5f 5f 69 6d 70  | _NtRequestWaitReplyPort@12.__imp | 
| 105e0 |  5f 5f 4e 74 52 65 71 75 65 73 74 57 61 69 74 52    65 70 6c 79 50 6f 72 74 40 31 32 00 5f 4e 74 52  | __NtRequestWaitReplyPort@12._NtR | 
| 10600 |  65 71 75 65 73 74 50 6f 72 74 40 38 00 5f 5f 69    6d 70 5f 5f 4e 74 52 65 71 75 65 73 74 50 6f 72  | equestPort@8.__imp__NtRequestPor | 
| 10620 |  74 40 38 00 5f 4e 74 52 65 71 75 65 73 74 44 65    76 69 63 65 57 61 6b 65 75 70 40 34 00 5f 5f 69  | t@8._NtRequestDeviceWakeup@4.__i | 
| 10640 |  6d 70 5f 5f 4e 74 52 65 71 75 65 73 74 44 65 76    69 63 65 57 61 6b 65 75 70 40 34 00 5f 4e 74 52  | mp__NtRequestDeviceWakeup@4._NtR | 
| 10660 |  65 70 6c 79 57 61 69 74 52 65 70 6c 79 50 6f 72    74 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 70  | eplyWaitReplyPort@8.__imp__NtRep | 
| 10680 |  6c 79 57 61 69 74 52 65 70 6c 79 50 6f 72 74 40    38 00 5f 4e 74 52 65 70 6c 79 57 61 69 74 52 65  | lyWaitReplyPort@8._NtReplyWaitRe | 
| 106a0 |  63 65 69 76 65 50 6f 72 74 45 78 40 32 30 00 5f    5f 69 6d 70 5f 5f 4e 74 52 65 70 6c 79 57 61 69  | ceivePortEx@20.__imp__NtReplyWai | 
| 106c0 |  74 52 65 63 65 69 76 65 50 6f 72 74 45 78 40 32    30 00 5f 4e 74 52 65 70 6c 79 57 61 69 74 52 65  | tReceivePortEx@20._NtReplyWaitRe | 
| 106e0 |  63 65 69 76 65 50 6f 72 74 40 31 36 00 5f 5f 69    6d 70 5f 5f 4e 74 52 65 70 6c 79 57 61 69 74 52  | ceivePort@16.__imp__NtReplyWaitR | 
| 10700 |  65 63 65 69 76 65 50 6f 72 74 40 31 36 00 5f 4e    74 52 65 70 6c 79 50 6f 72 74 40 38 00 5f 5f 69  | eceivePort@16._NtReplyPort@8.__i | 
| 10720 |  6d 70 5f 5f 4e 74 52 65 70 6c 79 50 6f 72 74 40    38 00 5f 4e 74 52 65 70 6c 61 63 65 4b 65 79 40  | mp__NtReplyPort@8._NtReplaceKey@ | 
| 10740 |  31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 70 6c    61 63 65 4b 65 79 40 31 32 00 5f 4e 74 52 65 6e  | 12.__imp__NtReplaceKey@12._NtRen | 
| 10760 |  61 6d 65 4b 65 79 40 38 00 5f 5f 69 6d 70 5f 5f    4e 74 52 65 6e 61 6d 65 4b 65 79 40 38 00 5f 4e  | ameKey@8.__imp__NtRenameKey@8._N | 
| 10780 |  74 52 65 6d 6f 76 65 50 72 6f 63 65 73 73 44 65    62 75 67 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 52  | tRemoveProcessDebug@8.__imp__NtR | 
| 107a0 |  65 6d 6f 76 65 50 72 6f 63 65 73 73 44 65 62 75    67 40 38 00 5f 4e 74 52 65 6d 6f 76 65 49 6f 43  | emoveProcessDebug@8._NtRemoveIoC | 
| 107c0 |  6f 6d 70 6c 65 74 69 6f 6e 40 32 30 00 5f 5f 69    6d 70 5f 5f 4e 74 52 65 6d 6f 76 65 49 6f 43 6f  | ompletion@20.__imp__NtRemoveIoCo | 
| 107e0 |  6d 70 6c 65 74 69 6f 6e 40 32 30 00 5f 4e 74 52    65 6c 65 61 73 65 53 65 6d 61 70 68 6f 72 65 40  | mpletion@20._NtReleaseSemaphore@ | 
| 10800 |  31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 6c 65    61 73 65 53 65 6d 61 70 68 6f 72 65 40 31 32 00  | 12.__imp__NtReleaseSemaphore@12. | 
| 10820 |  5f 4e 74 52 65 6c 65 61 73 65 4d 75 74 61 6e 74    40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 6c 65  | _NtReleaseMutant@8.__imp__NtRele | 
| 10840 |  61 73 65 4d 75 74 61 6e 74 40 38 00 5f 4e 74 52    65 6c 65 61 73 65 4b 65 79 65 64 45 76 65 6e 74  | aseMutant@8._NtReleaseKeyedEvent | 
| 10860 |  40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 6c    65 61 73 65 4b 65 79 65 64 45 76 65 6e 74 40 31  | @16.__imp__NtReleaseKeyedEvent@1 | 
| 10880 |  36 00 5f 4e 74 52 65 67 69 73 74 65 72 54 68 72    65 61 64 54 65 72 6d 69 6e 61 74 65 50 6f 72 74  | 6._NtRegisterThreadTerminatePort | 
| 108a0 |  40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 67 69    73 74 65 72 54 68 72 65 61 64 54 65 72 6d 69 6e  | @4.__imp__NtRegisterThreadTermin | 
| 108c0 |  61 74 65 50 6f 72 74 40 34 00 5f 4e 74 52 65 61    64 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 32  | atePort@4._NtReadVirtualMemory@2 | 
| 108e0 |  30 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 61 64 56    69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 32 30 00  | 0.__imp__NtReadVirtualMemory@20. | 
| 10900 |  5f 4e 74 52 65 61 64 52 65 71 75 65 73 74 44 61    74 61 40 32 34 00 5f 5f 69 6d 70 5f 5f 4e 74 52  | _NtReadRequestData@24.__imp__NtR | 
| 10920 |  65 61 64 52 65 71 75 65 73 74 44 61 74 61 40 32    34 00 5f 4e 74 52 65 61 64 46 69 6c 65 53 63 61  | eadRequestData@24._NtReadFileSca | 
| 10940 |  74 74 65 72 40 33 36 00 5f 5f 69 6d 70 5f 5f 4e    74 52 65 61 64 46 69 6c 65 53 63 61 74 74 65 72  | tter@36.__imp__NtReadFileScatter | 
| 10960 |  40 33 36 00 5f 4e 74 52 65 61 64 46 69 6c 65 40    33 36 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 61 64  | @36._NtReadFile@36.__imp__NtRead | 
| 10980 |  46 69 6c 65 40 33 36 00 5f 4e 74 52 61 69 73 65    48 61 72 64 45 72 72 6f 72 40 32 34 00 5f 5f 69  | File@36._NtRaiseHardError@24.__i | 
| 109a0 |  6d 70 5f 5f 4e 74 52 61 69 73 65 48 61 72 64 45    72 72 6f 72 40 32 34 00 5f 4e 74 52 61 69 73 65  | mp__NtRaiseHardError@24._NtRaise | 
| 109c0 |  45 78 63 65 70 74 69 6f 6e 40 31 32 00 5f 5f 69    6d 70 5f 5f 4e 74 52 61 69 73 65 45 78 63 65 70  | Exception@12.__imp__NtRaiseExcep | 
| 109e0 |  74 69 6f 6e 40 31 32 00 5f 4e 74 51 75 65 75 65    41 70 63 54 68 72 65 61 64 40 32 30 00 5f 5f 69  | tion@12._NtQueueApcThread@20.__i | 
| 10a00 |  6d 70 5f 5f 4e 74 51 75 65 75 65 41 70 63 54 68    72 65 61 64 40 32 30 00 5f 4e 74 51 75 65 72 79  | mp__NtQueueApcThread@20._NtQuery | 
| 10a20 |  56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f    6e 46 69 6c 65 40 32 30 00 5f 5f 69 6d 70 5f 5f  | VolumeInformationFile@20.__imp__ | 
| 10a40 |  4e 74 51 75 65 72 79 56 6f 6c 75 6d 65 49 6e 66    6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40 32 30 00  | NtQueryVolumeInformationFile@20. | 
| 10a60 |  5f 4e 74 51 75 65 72 79 56 69 72 74 75 61 6c 4d    65 6d 6f 72 79 40 32 34 00 5f 5f 69 6d 70 5f 5f  | _NtQueryVirtualMemory@24.__imp__ | 
| 10a80 |  4e 74 51 75 65 72 79 56 69 72 74 75 61 6c 4d 65    6d 6f 72 79 40 32 34 00 5f 4e 74 51 75 65 72 79  | NtQueryVirtualMemory@24._NtQuery | 
| 10aa0 |  56 61 6c 75 65 4b 65 79 40 32 34 00 5f 5f 69 6d    70 5f 5f 4e 74 51 75 65 72 79 56 61 6c 75 65 4b  | ValueKey@24.__imp__NtQueryValueK | 
| 10ac0 |  65 79 40 32 34 00 5f 4e 74 51 75 65 72 79 54 69    6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e 40 31 32  | ey@24._NtQueryTimerResolution@12 | 
| 10ae0 |  00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 54    69 6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e 40 31  | .__imp__NtQueryTimerResolution@1 | 
| 10b00 |  32 00 5f 4e 74 51 75 65 72 79 54 69 6d 65 72 40    32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72  | 2._NtQueryTimer@20.__imp__NtQuer | 
| 10b20 |  79 54 69 6d 65 72 40 32 30 00 5f 4e 74 51 75 65    72 79 53 79 73 74 65 6d 54 69 6d 65 40 34 00 5f  | yTimer@20._NtQuerySystemTime@4._ | 
| 10b40 |  5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 53 79 73    74 65 6d 54 69 6d 65 40 34 00 5f 4e 74 51 75 65  | _imp__NtQuerySystemTime@4._NtQue | 
| 10b60 |  72 79 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74    69 6f 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74  | rySystemInformation@16.__imp__Nt | 
| 10b80 |  51 75 65 72 79 53 79 73 74 65 6d 49 6e 66 6f 72    6d 61 74 69 6f 6e 40 31 36 00 5f 4e 74 51 75 65  | QuerySystemInformation@16._NtQue | 
| 10ba0 |  72 79 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d    65 6e 74 56 61 6c 75 65 45 78 40 32 30 00 5f 5f  | rySystemEnvironmentValueEx@20.__ | 
| 10bc0 |  69 6d 70 5f 5f 4e 74 51 75 65 72 79 53 79 73 74    65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c  | imp__NtQuerySystemEnvironmentVal | 
| 10be0 |  75 65 45 78 40 32 30 00 5f 4e 74 51 75 65 72 79    53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e  | ueEx@20._NtQuerySystemEnvironmen | 
| 10c00 |  74 56 61 6c 75 65 40 31 36 00 5f 5f 69 6d 70 5f    5f 4e 74 51 75 65 72 79 53 79 73 74 65 6d 45 6e  | tValue@16.__imp__NtQuerySystemEn | 
| 10c20 |  76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 40 31    36 00 5f 4e 74 51 75 65 72 79 53 79 6d 62 6f 6c  | vironmentValue@16._NtQuerySymbol | 
| 10c40 |  69 63 4c 69 6e 6b 4f 62 6a 65 63 74 40 31 32 00    5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 53 79  | icLinkObject@12.__imp__NtQuerySy | 
| 10c60 |  6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74    40 31 32 00 5f 4e 74 51 75 65 72 79 53 65 6d 61  | mbolicLinkObject@12._NtQuerySema | 
| 10c80 |  70 68 6f 72 65 40 32 30 00 5f 5f 69 6d 70 5f 5f    4e 74 51 75 65 72 79 53 65 6d 61 70 68 6f 72 65  | phore@20.__imp__NtQuerySemaphore | 
| 10ca0 |  40 32 30 00 5f 4e 74 51 75 65 72 79 53 65 63 75    72 69 74 79 4f 62 6a 65 63 74 40 32 30 00 5f 5f  | @20._NtQuerySecurityObject@20.__ | 
| 10cc0 |  69 6d 70 5f 5f 4e 74 51 75 65 72 79 53 65 63 75    72 69 74 79 4f 62 6a 65 63 74 40 32 30 00 5f 4e  | imp__NtQuerySecurityObject@20._N | 
| 10ce0 |  74 51 75 65 72 79 53 65 63 74 69 6f 6e 40 32 30    00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 53  | tQuerySection@20.__imp__NtQueryS | 
| 10d00 |  65 63 74 69 6f 6e 40 32 30 00 5f 4e 74 51 75 65    72 79 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69  | ection@20._NtQueryQuotaInformati | 
| 10d20 |  6f 6e 46 69 6c 65 40 33 36 00 5f 5f 69 6d 70 5f    5f 4e 74 51 75 65 72 79 51 75 6f 74 61 49 6e 66  | onFile@36.__imp__NtQueryQuotaInf | 
| 10d40 |  6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40 33 36 00    5f 4e 74 51 75 65 72 79 50 6f 72 74 49 6e 66 6f  | ormationFile@36._NtQueryPortInfo | 
| 10d60 |  72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 40 30    00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 50  | rmationProcess@0.__imp__NtQueryP | 
| 10d80 |  6f 72 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72    6f 63 65 73 73 40 30 00 5f 4e 74 51 75 65 72 79  | ortInformationProcess@0._NtQuery | 
| 10da0 |  50 65 72 66 6f 72 6d 61 6e 63 65 43 6f 75 6e 74    65 72 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75  | PerformanceCounter@8.__imp__NtQu | 
| 10dc0 |  65 72 79 50 65 72 66 6f 72 6d 61 6e 63 65 43 6f    75 6e 74 65 72 40 38 00 5f 4e 74 51 75 65 72 79  | eryPerformanceCounter@8._NtQuery | 
| 10de0 |  4f 70 65 6e 53 75 62 4b 65 79 73 45 78 40 31 36    00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 4f  | OpenSubKeysEx@16.__imp__NtQueryO | 
| 10e00 |  70 65 6e 53 75 62 4b 65 79 73 45 78 40 31 36 00    5f 4e 74 51 75 65 72 79 4f 70 65 6e 53 75 62 4b  | penSubKeysEx@16._NtQueryOpenSubK | 
| 10e20 |  65 79 73 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 51    75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 40  | eys@8.__imp__NtQueryOpenSubKeys@ | 
| 10e40 |  38 00 5f 4e 74 51 75 65 72 79 4f 62 6a 65 63 74    40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65  | 8._NtQueryObject@20.__imp__NtQue | 
| 10e60 |  72 79 4f 62 6a 65 63 74 40 32 30 00 5f 4e 74 51    75 65 72 79 4d 75 74 61 6e 74 40 32 30 00 5f 5f  | ryObject@20._NtQueryMutant@20.__ | 
| 10e80 |  69 6d 70 5f 5f 4e 74 51 75 65 72 79 4d 75 74 61    6e 74 40 32 30 00 5f 4e 74 51 75 65 72 79 4d 75  | imp__NtQueryMutant@20._NtQueryMu | 
| 10ea0 |  6c 74 69 70 6c 65 56 61 6c 75 65 4b 65 79 40 32    34 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79  | ltipleValueKey@24.__imp__NtQuery | 
| 10ec0 |  4d 75 6c 74 69 70 6c 65 56 61 6c 75 65 4b 65 79    40 32 34 00 5f 4e 74 51 75 65 72 79 4b 65 79 40  | MultipleValueKey@24._NtQueryKey@ | 
| 10ee0 |  32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72    79 4b 65 79 40 32 30 00 5f 4e 74 51 75 65 72 79  | 20.__imp__NtQueryKey@20._NtQuery | 
| 10f00 |  49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 32 30 00    5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 49 6f  | IoCompletion@20.__imp__NtQueryIo | 
| 10f20 |  43 6f 6d 70 6c 65 74 69 6f 6e 40 32 30 00 5f 4e    74 51 75 65 72 79 49 6e 74 65 72 76 61 6c 50 72  | Completion@20._NtQueryIntervalPr | 
| 10f40 |  6f 66 69 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 4e    74 51 75 65 72 79 49 6e 74 65 72 76 61 6c 50 72  | ofile@8.__imp__NtQueryIntervalPr | 
| 10f60 |  6f 66 69 6c 65 40 38 00 5f 4e 74 51 75 65 72 79    49 6e 73 74 61 6c 6c 55 49 4c 61 6e 67 75 61 67  | ofile@8._NtQueryInstallUILanguag | 
| 10f80 |  65 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65    72 79 49 6e 73 74 61 6c 6c 55 49 4c 61 6e 67 75  | e@4.__imp__NtQueryInstallUILangu | 
| 10fa0 |  61 67 65 40 34 00 5f 4e 74 51 75 65 72 79 49 6e    66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 40 32  | age@4._NtQueryInformationToken@2 | 
| 10fc0 |  30 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79    49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e  | 0.__imp__NtQueryInformationToken | 
| 10fe0 |  40 32 30 00 5f 4e 74 51 75 65 72 79 49 6e 66 6f    72 6d 61 74 69 6f 6e 54 68 72 65 61 64 40 32 30  | @20._NtQueryInformationThread@20 | 
| 11000 |  00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 49    6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 64  | .__imp__NtQueryInformationThread | 
| 11020 |  40 32 30 00 5f 4e 74 51 75 65 72 79 49 6e 66 6f    72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 40 32  | @20._NtQueryInformationProcess@2 | 
| 11040 |  30 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79    49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65  | 0.__imp__NtQueryInformationProce | 
| 11060 |  73 73 40 32 30 00 5f 4e 74 51 75 65 72 79 49 6e    66 6f 72 6d 61 74 69 6f 6e 50 6f 72 74 40 32 30  | ss@20._NtQueryInformationPort@20 | 
| 11080 |  00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 49    6e 66 6f 72 6d 61 74 69 6f 6e 50 6f 72 74 40 32  | .__imp__NtQueryInformationPort@2 | 
| 110a0 |  30 00 5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d    61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 40 32  | 0._NtQueryInformationJobObject@2 | 
| 110c0 |  30 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79    49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62  | 0.__imp__NtQueryInformationJobOb | 
| 110e0 |  6a 65 63 74 40 32 30 00 5f 4e 74 51 75 65 72 79    49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40  | ject@20._NtQueryInformationFile@ | 
| 11100 |  32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72    79 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65  | 20.__imp__NtQueryInformationFile | 
| 11120 |  40 32 30 00 5f 4e 74 51 75 65 72 79 49 6e 66 6f    72 6d 61 74 69 6f 6e 41 74 6f 6d 40 32 30 00 5f  | @20._NtQueryInformationAtom@20._ | 
| 11140 |  5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 49 6e 66    6f 72 6d 61 74 69 6f 6e 41 74 6f 6d 40 32 30 00  | _imp__NtQueryInformationAtom@20. | 
| 11160 |  5f 4e 74 51 75 65 72 79 46 75 6c 6c 41 74 74 72    69 62 75 74 65 73 46 69 6c 65 40 38 00 5f 5f 69  | _NtQueryFullAttributesFile@8.__i | 
| 11180 |  6d 70 5f 5f 4e 74 51 75 65 72 79 46 75 6c 6c 41    74 74 72 69 62 75 74 65 73 46 69 6c 65 40 38 00  | mp__NtQueryFullAttributesFile@8. | 
| 111a0 |  5f 4e 74 51 75 65 72 79 45 76 65 6e 74 40 32 30    00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 45  | _NtQueryEvent@20.__imp__NtQueryE | 
| 111c0 |  76 65 6e 74 40 32 30 00 5f 4e 74 51 75 65 72 79    45 61 46 69 6c 65 40 33 36 00 5f 5f 69 6d 70 5f  | vent@20._NtQueryEaFile@36.__imp_ | 
| 111e0 |  5f 4e 74 51 75 65 72 79 45 61 46 69 6c 65 40 33    36 00 5f 4e 74 51 75 65 72 79 44 72 69 76 65 72  | _NtQueryEaFile@36._NtQueryDriver | 
| 11200 |  45 6e 74 72 79 4f 72 64 65 72 40 38 00 5f 5f 69    6d 70 5f 5f 4e 74 51 75 65 72 79 44 72 69 76 65  | EntryOrder@8.__imp__NtQueryDrive | 
| 11220 |  72 45 6e 74 72 79 4f 72 64 65 72 40 38 00 5f 4e    74 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 4f  | rEntryOrder@8._NtQueryDirectoryO | 
| 11240 |  62 6a 65 63 74 40 32 38 00 5f 5f 69 6d 70 5f 5f    4e 74 51 75 65 72 79 44 69 72 65 63 74 6f 72 79  | bject@28.__imp__NtQueryDirectory | 
| 11260 |  4f 62 6a 65 63 74 40 32 38 00 5f 4e 74 51 75 65    72 79 44 69 72 65 63 74 6f 72 79 46 69 6c 65 40  | Object@28._NtQueryDirectoryFile@ | 
| 11280 |  34 34 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72    79 44 69 72 65 63 74 6f 72 79 46 69 6c 65 40 34  | 44.__imp__NtQueryDirectoryFile@4 | 
| 112a0 |  34 00 5f 4e 74 51 75 65 72 79 44 65 66 61 75 6c    74 55 49 4c 61 6e 67 75 61 67 65 40 34 00 5f 5f  | 4._NtQueryDefaultUILanguage@4.__ | 
| 112c0 |  69 6d 70 5f 5f 4e 74 51 75 65 72 79 44 65 66 61    75 6c 74 55 49 4c 61 6e 67 75 61 67 65 40 34 00  | imp__NtQueryDefaultUILanguage@4. | 
| 112e0 |  5f 4e 74 51 75 65 72 79 44 65 66 61 75 6c 74 4c    6f 63 61 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 4e  | _NtQueryDefaultLocale@8.__imp__N | 
| 11300 |  74 51 75 65 72 79 44 65 66 61 75 6c 74 4c 6f 63    61 6c 65 40 38 00 5f 4e 74 51 75 65 72 79 44 65  | tQueryDefaultLocale@8._NtQueryDe | 
| 11320 |  62 75 67 46 69 6c 74 65 72 53 74 61 74 65 40 38    00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 44  | bugFilterState@8.__imp__NtQueryD | 
| 11340 |  65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 40    38 00 5f 4e 74 51 75 65 72 79 42 6f 6f 74 4f 70  | ebugFilterState@8._NtQueryBootOp | 
| 11360 |  74 69 6f 6e 73 40 38 00 5f 5f 69 6d 70 5f 5f 4e    74 51 75 65 72 79 42 6f 6f 74 4f 70 74 69 6f 6e  | tions@8.__imp__NtQueryBootOption | 
| 11380 |  73 40 38 00 5f 4e 74 51 75 65 72 79 42 6f 6f 74    45 6e 74 72 79 4f 72 64 65 72 40 38 00 5f 5f 69  | s@8._NtQueryBootEntryOrder@8.__i | 
| 113a0 |  6d 70 5f 5f 4e 74 51 75 65 72 79 42 6f 6f 74 45    6e 74 72 79 4f 72 64 65 72 40 38 00 5f 4e 74 51  | mp__NtQueryBootEntryOrder@8._NtQ | 
| 113c0 |  75 65 72 79 41 74 74 72 69 62 75 74 65 73 46 69    6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75  | ueryAttributesFile@8.__imp__NtQu | 
| 113e0 |  65 72 79 41 74 74 72 69 62 75 74 65 73 46 69 6c    65 40 38 00 5f 4e 74 50 75 6c 73 65 45 76 65 6e  | eryAttributesFile@8._NtPulseEven | 
| 11400 |  74 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 50 75 6c    73 65 45 76 65 6e 74 40 38 00 5f 4e 74 50 72 6f  | t@8.__imp__NtPulseEvent@8._NtPro | 
| 11420 |  74 65 63 74 56 69 72 74 75 61 6c 4d 65 6d 6f 72    79 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 50 72  | tectVirtualMemory@20.__imp__NtPr | 
| 11440 |  6f 74 65 63 74 56 69 72 74 75 61 6c 4d 65 6d 6f    72 79 40 32 30 00 5f 4e 74 50 72 69 76 69 6c 65  | otectVirtualMemory@20._NtPrivile | 
| 11460 |  67 65 64 53 65 72 76 69 63 65 41 75 64 69 74 41    6c 61 72 6d 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e  | gedServiceAuditAlarm@20.__imp__N | 
| 11480 |  74 50 72 69 76 69 6c 65 67 65 64 53 65 72 76 69    63 65 41 75 64 69 74 41 6c 61 72 6d 40 32 30 00  | tPrivilegedServiceAuditAlarm@20. | 
| 114a0 |  5f 4e 74 50 72 69 76 69 6c 65 67 65 4f 62 6a 65    63 74 41 75 64 69 74 41 6c 61 72 6d 40 32 34 00  | _NtPrivilegeObjectAuditAlarm@24. | 
| 114c0 |  5f 5f 69 6d 70 5f 5f 4e 74 50 72 69 76 69 6c 65    67 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61  | __imp__NtPrivilegeObjectAuditAla | 
| 114e0 |  72 6d 40 32 34 00 5f 4e 74 50 72 69 76 69 6c 65    67 65 43 68 65 63 6b 40 31 32 00 5f 5f 69 6d 70  | rm@24._NtPrivilegeCheck@12.__imp | 
| 11500 |  5f 5f 4e 74 50 72 69 76 69 6c 65 67 65 43 68 65    63 6b 40 31 32 00 5f 4e 74 50 6f 77 65 72 49 6e  | __NtPrivilegeCheck@12._NtPowerIn | 
| 11520 |  66 6f 72 6d 61 74 69 6f 6e 40 32 30 00 5f 5f 69    6d 70 5f 5f 4e 74 50 6f 77 65 72 49 6e 66 6f 72  | formation@20.__imp__NtPowerInfor | 
| 11540 |  6d 61 74 69 6f 6e 40 32 30 00 5f 4e 74 50 6c 75    67 50 6c 61 79 43 6f 6e 74 72 6f 6c 40 31 32 00  | mation@20._NtPlugPlayControl@12. | 
| 11560 |  5f 5f 69 6d 70 5f 5f 4e 74 50 6c 75 67 50 6c 61    79 43 6f 6e 74 72 6f 6c 40 31 32 00 5f 4e 74 4f  | __imp__NtPlugPlayControl@12._NtO | 
| 11580 |  70 65 6e 54 69 6d 65 72 40 31 32 00 5f 5f 69 6d    70 5f 5f 4e 74 4f 70 65 6e 54 69 6d 65 72 40 31  | penTimer@12.__imp__NtOpenTimer@1 | 
| 115a0 |  32 00 5f 4e 74 4f 70 65 6e 54 68 72 65 61 64 54    6f 6b 65 6e 45 78 40 32 30 00 5f 5f 69 6d 70 5f  | 2._NtOpenThreadTokenEx@20.__imp_ | 
| 115c0 |  5f 4e 74 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b    65 6e 45 78 40 32 30 00 5f 4e 74 4f 70 65 6e 54  | _NtOpenThreadTokenEx@20._NtOpenT | 
| 115e0 |  68 72 65 61 64 54 6f 6b 65 6e 40 31 36 00 5f 5f    69 6d 70 5f 5f 4e 74 4f 70 65 6e 54 68 72 65 61  | hreadToken@16.__imp__NtOpenThrea | 
| 11600 |  64 54 6f 6b 65 6e 40 31 36 00 5f 4e 74 4f 70 65    6e 54 68 72 65 61 64 40 31 36 00 5f 5f 69 6d 70  | dToken@16._NtOpenThread@16.__imp | 
| 11620 |  5f 5f 4e 74 4f 70 65 6e 54 68 72 65 61 64 40 31    36 00 5f 4e 74 4f 70 65 6e 53 79 6d 62 6f 6c 69  | __NtOpenThread@16._NtOpenSymboli | 
| 11640 |  63 4c 69 6e 6b 4f 62 6a 65 63 74 40 31 32 00 5f    5f 69 6d 70 5f 5f 4e 74 4f 70 65 6e 53 79 6d 62  | cLinkObject@12.__imp__NtOpenSymb | 
| 11660 |  6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 40 31    32 00 5f 4e 74 4f 70 65 6e 53 65 6d 61 70 68 6f  | olicLinkObject@12._NtOpenSemapho | 
| 11680 |  72 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 4f    70 65 6e 53 65 6d 61 70 68 6f 72 65 40 31 32 00  | re@12.__imp__NtOpenSemaphore@12. | 
| 116a0 |  5f 4e 74 4f 70 65 6e 53 65 63 74 69 6f 6e 40 31    32 00 5f 5f 69 6d 70 5f 5f 4e 74 4f 70 65 6e 53  | _NtOpenSection@12.__imp__NtOpenS | 
| 116c0 |  65 63 74 69 6f 6e 40 31 32 00 5f 4e 74 4f 70 65    6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 45 78 40  | ection@12._NtOpenProcessTokenEx@ | 
| 116e0 |  31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 4f 70 65 6e    50 72 6f 63 65 73 73 54 6f 6b 65 6e 45 78 40 31  | 16.__imp__NtOpenProcessTokenEx@1 | 
| 11700 |  36 00 5f 4e 74 4f 70 65 6e 50 72 6f 63 65 73 73    54 6f 6b 65 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f  | 6._NtOpenProcessToken@12.__imp__ | 
| 11720 |  4e 74 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b    65 6e 40 31 32 00 5f 4e 74 4f 70 65 6e 50 72 6f  | NtOpenProcessToken@12._NtOpenPro | 
| 11740 |  63 65 73 73 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e    74 4f 70 65 6e 50 72 6f 63 65 73 73 40 31 36 00  | cess@16.__imp__NtOpenProcess@16. | 
| 11760 |  5f 4e 74 4f 70 65 6e 4f 62 6a 65 63 74 41 75 64    69 74 41 6c 61 72 6d 40 34 38 00 5f 5f 69 6d 70  | _NtOpenObjectAuditAlarm@48.__imp | 
| 11780 |  5f 5f 4e 74 4f 70 65 6e 4f 62 6a 65 63 74 41 75    64 69 74 41 6c 61 72 6d 40 34 38 00 5f 4e 74 4f  | __NtOpenObjectAuditAlarm@48._NtO | 
| 117a0 |  70 65 6e 4d 75 74 61 6e 74 40 31 32 00 5f 5f 69    6d 70 5f 5f 4e 74 4f 70 65 6e 4d 75 74 61 6e 74  | penMutant@12.__imp__NtOpenMutant | 
| 117c0 |  40 31 32 00 5f 4e 74 4f 70 65 6e 4b 65 79 65 64    45 76 65 6e 74 40 31 32 00 5f 5f 69 6d 70 5f 5f  | @12._NtOpenKeyedEvent@12.__imp__ | 
| 117e0 |  4e 74 4f 70 65 6e 4b 65 79 65 64 45 76 65 6e 74    40 31 32 00 5f 4e 74 4f 70 65 6e 4b 65 79 40 31  | NtOpenKeyedEvent@12._NtOpenKey@1 | 
| 11800 |  32 00 5f 5f 69 6d 70 5f 5f 4e 74 4f 70 65 6e 4b    65 79 40 31 32 00 5f 4e 74 4f 70 65 6e 4a 6f 62  | 2.__imp__NtOpenKey@12._NtOpenJob | 
| 11820 |  4f 62 6a 65 63 74 40 31 32 00 5f 5f 69 6d 70 5f    5f 4e 74 4f 70 65 6e 4a 6f 62 4f 62 6a 65 63 74  | Object@12.__imp__NtOpenJobObject | 
| 11840 |  40 31 32 00 5f 4e 74 4f 70 65 6e 49 6f 43 6f 6d    70 6c 65 74 69 6f 6e 40 31 32 00 5f 5f 69 6d 70  | @12._NtOpenIoCompletion@12.__imp | 
| 11860 |  5f 5f 4e 74 4f 70 65 6e 49 6f 43 6f 6d 70 6c 65    74 69 6f 6e 40 31 32 00 5f 4e 74 4f 70 65 6e 46  | __NtOpenIoCompletion@12._NtOpenF | 
| 11880 |  69 6c 65 40 32 34 00 5f 5f 69 6d 70 5f 5f 4e 74    4f 70 65 6e 46 69 6c 65 40 32 34 00 5f 4e 74 4f  | ile@24.__imp__NtOpenFile@24._NtO | 
| 118a0 |  70 65 6e 45 76 65 6e 74 50 61 69 72 40 31 32 00    5f 5f 69 6d 70 5f 5f 4e 74 4f 70 65 6e 45 76 65  | penEventPair@12.__imp__NtOpenEve | 
| 118c0 |  6e 74 50 61 69 72 40 31 32 00 5f 4e 74 4f 70 65    6e 45 76 65 6e 74 40 31 32 00 5f 5f 69 6d 70 5f  | ntPair@12._NtOpenEvent@12.__imp_ | 
| 118e0 |  5f 4e 74 4f 70 65 6e 45 76 65 6e 74 40 31 32 00    5f 4e 74 4f 70 65 6e 44 69 72 65 63 74 6f 72 79  | _NtOpenEvent@12._NtOpenDirectory | 
| 11900 |  4f 62 6a 65 63 74 40 31 32 00 5f 5f 69 6d 70 5f    5f 4e 74 4f 70 65 6e 44 69 72 65 63 74 6f 72 79  | Object@12.__imp__NtOpenDirectory | 
| 11920 |  4f 62 6a 65 63 74 40 31 32 00 5f 4e 74 4e 6f 74    69 66 79 43 68 61 6e 67 65 4d 75 6c 74 69 70 6c  | Object@12._NtNotifyChangeMultipl | 
| 11940 |  65 4b 65 79 73 40 34 38 00 5f 5f 69 6d 70 5f 5f    4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 4d 75  | eKeys@48.__imp__NtNotifyChangeMu | 
| 11960 |  6c 74 69 70 6c 65 4b 65 79 73 40 34 38 00 5f 4e    74 4e 6f 74 69 66 79 43 68 61 6e 67 65 4b 65 79  | ltipleKeys@48._NtNotifyChangeKey | 
| 11980 |  40 34 30 00 5f 5f 69 6d 70 5f 5f 4e 74 4e 6f 74    69 66 79 43 68 61 6e 67 65 4b 65 79 40 34 30 00  | @40.__imp__NtNotifyChangeKey@40. | 
| 119a0 |  5f 4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 44    69 72 65 63 74 6f 72 79 46 69 6c 65 40 33 36 00  | _NtNotifyChangeDirectoryFile@36. | 
| 119c0 |  5f 5f 69 6d 70 5f 5f 4e 74 4e 6f 74 69 66 79 43    68 61 6e 67 65 44 69 72 65 63 74 6f 72 79 46 69  | __imp__NtNotifyChangeDirectoryFi | 
| 119e0 |  6c 65 40 33 36 00 5f 4e 74 4d 6f 64 69 66 79 44    72 69 76 65 72 45 6e 74 72 79 40 34 00 5f 5f 69  | le@36._NtModifyDriverEntry@4.__i | 
| 11a00 |  6d 70 5f 5f 4e 74 4d 6f 64 69 66 79 44 72 69 76    65 72 45 6e 74 72 79 40 34 00 5f 4e 74 4d 6f 64  | mp__NtModifyDriverEntry@4._NtMod | 
| 11a20 |  69 66 79 42 6f 6f 74 45 6e 74 72 79 40 34 00 5f    5f 69 6d 70 5f 5f 4e 74 4d 6f 64 69 66 79 42 6f  | ifyBootEntry@4.__imp__NtModifyBo | 
| 11a40 |  6f 74 45 6e 74 72 79 40 34 00 5f 4e 74 4d 61 70    56 69 65 77 4f 66 53 65 63 74 69 6f 6e 40 34 30  | otEntry@4._NtMapViewOfSection@40 | 
| 11a60 |  00 5f 5f 69 6d 70 5f 5f 4e 74 4d 61 70 56 69 65    77 4f 66 53 65 63 74 69 6f 6e 40 34 30 00 5f 4e  | .__imp__NtMapViewOfSection@40._N | 
| 11a80 |  74 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c    50 61 67 65 73 53 63 61 74 74 65 72 40 31 32 00  | tMapUserPhysicalPagesScatter@12. | 
| 11aa0 |  5f 5f 69 6d 70 5f 5f 4e 74 4d 61 70 55 73 65 72    50 68 79 73 69 63 61 6c 50 61 67 65 73 53 63 61  | __imp__NtMapUserPhysicalPagesSca | 
| 11ac0 |  74 74 65 72 40 31 32 00 5f 4e 74 4d 61 70 55 73    65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 40  | tter@12._NtMapUserPhysicalPages@ | 
| 11ae0 |  31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 4d 61 70 55    73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73  | 12.__imp__NtMapUserPhysicalPages | 
| 11b00 |  40 31 32 00 5f 4e 74 4d 61 6b 65 54 65 6d 70 6f    72 61 72 79 4f 62 6a 65 63 74 40 34 00 5f 5f 69  | @12._NtMakeTemporaryObject@4.__i | 
| 11b20 |  6d 70 5f 5f 4e 74 4d 61 6b 65 54 65 6d 70 6f 72    61 72 79 4f 62 6a 65 63 74 40 34 00 5f 4e 74 4d  | mp__NtMakeTemporaryObject@4._NtM | 
| 11b40 |  61 6b 65 50 65 72 6d 61 6e 65 6e 74 4f 62 6a 65    63 74 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 4d 61  | akePermanentObject@4.__imp__NtMa | 
| 11b60 |  6b 65 50 65 72 6d 61 6e 65 6e 74 4f 62 6a 65 63    74 40 34 00 5f 4e 74 4c 6f 63 6b 56 69 72 74 75  | kePermanentObject@4._NtLockVirtu | 
| 11b80 |  61 6c 4d 65 6d 6f 72 79 40 31 36 00 5f 5f 69 6d    70 5f 5f 4e 74 4c 6f 63 6b 56 69 72 74 75 61 6c  | alMemory@16.__imp__NtLockVirtual | 
| 11ba0 |  4d 65 6d 6f 72 79 40 31 36 00 5f 4e 74 4c 6f 63    6b 52 65 67 69 73 74 72 79 4b 65 79 40 34 00 5f  | Memory@16._NtLockRegistryKey@4._ | 
| 11bc0 |  5f 69 6d 70 5f 5f 4e 74 4c 6f 63 6b 52 65 67 69    73 74 72 79 4b 65 79 40 34 00 5f 4e 74 4c 6f 63  | _imp__NtLockRegistryKey@4._NtLoc | 
| 11be0 |  6b 50 72 6f 64 75 63 74 41 63 74 69 76 61 74 69    6f 6e 4b 65 79 73 40 38 00 5f 5f 69 6d 70 5f 5f  | kProductActivationKeys@8.__imp__ | 
| 11c00 |  4e 74 4c 6f 63 6b 50 72 6f 64 75 63 74 41 63 74    69 76 61 74 69 6f 6e 4b 65 79 73 40 38 00 5f 4e  | NtLockProductActivationKeys@8._N | 
| 11c20 |  74 4c 6f 63 6b 46 69 6c 65 40 34 30 00 5f 5f 69    6d 70 5f 5f 4e 74 4c 6f 63 6b 46 69 6c 65 40 34  | tLockFile@40.__imp__NtLockFile@4 | 
| 11c40 |  30 00 5f 4e 74 4c 6f 61 64 4b 65 79 45 78 40 31    36 00 5f 5f 69 6d 70 5f 5f 4e 74 4c 6f 61 64 4b  | 0._NtLoadKeyEx@16.__imp__NtLoadK | 
| 11c60 |  65 79 45 78 40 31 36 00 5f 4e 74 4c 6f 61 64 4b    65 79 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 4c 6f  | eyEx@16._NtLoadKey@8.__imp__NtLo | 
| 11c80 |  61 64 4b 65 79 40 38 00 5f 4e 74 4c 6f 61 64 4b    65 79 32 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74  | adKey@8._NtLoadKey2@12.__imp__Nt | 
| 11ca0 |  4c 6f 61 64 4b 65 79 32 40 31 32 00 5f 4e 74 4c    6f 61 64 44 72 69 76 65 72 40 34 00 5f 5f 69 6d  | LoadKey2@12._NtLoadDriver@4.__im | 
| 11cc0 |  70 5f 5f 4e 74 4c 6f 61 64 44 72 69 76 65 72 40    34 00 5f 4e 74 4c 69 73 74 65 6e 50 6f 72 74 40  | p__NtLoadDriver@4._NtListenPort@ | 
| 11ce0 |  38 00 5f 5f 69 6d 70 5f 5f 4e 74 4c 69 73 74 65    6e 50 6f 72 74 40 38 00 5f 4e 74 49 73 53 79 73  | 8.__imp__NtListenPort@8._NtIsSys | 
| 11d00 |  74 65 6d 52 65 73 75 6d 65 41 75 74 6f 6d 61 74    69 63 40 30 00 5f 5f 69 6d 70 5f 5f 4e 74 49 73  | temResumeAutomatic@0.__imp__NtIs | 
| 11d20 |  53 79 73 74 65 6d 52 65 73 75 6d 65 41 75 74 6f    6d 61 74 69 63 40 30 00 5f 4e 74 49 73 50 72 6f  | SystemResumeAutomatic@0._NtIsPro | 
| 11d40 |  63 65 73 73 49 6e 4a 6f 62 40 38 00 5f 5f 69 6d    70 5f 5f 4e 74 49 73 50 72 6f 63 65 73 73 49 6e  | cessInJob@8.__imp__NtIsProcessIn | 
| 11d60 |  4a 6f 62 40 38 00 5f 4e 74 49 6e 69 74 69 61 74    65 50 6f 77 65 72 41 63 74 69 6f 6e 40 31 36 00  | Job@8._NtInitiatePowerAction@16. | 
| 11d80 |  5f 5f 69 6d 70 5f 5f 4e 74 49 6e 69 74 69 61 74    65 50 6f 77 65 72 41 63 74 69 6f 6e 40 31 36 00  | __imp__NtInitiatePowerAction@16. | 
| 11da0 |  5f 4e 74 49 6e 69 74 69 61 6c 69 7a 65 52 65 67    69 73 74 72 79 40 34 00 5f 5f 69 6d 70 5f 5f 4e  | _NtInitializeRegistry@4.__imp__N | 
| 11dc0 |  74 49 6e 69 74 69 61 6c 69 7a 65 52 65 67 69 73    74 72 79 40 34 00 5f 4e 74 49 6d 70 65 72 73 6f  | tInitializeRegistry@4._NtImperso | 
| 11de0 |  6e 61 74 65 54 68 72 65 61 64 40 31 32 00 5f 5f    69 6d 70 5f 5f 4e 74 49 6d 70 65 72 73 6f 6e 61  | nateThread@12.__imp__NtImpersona | 
| 11e00 |  74 65 54 68 72 65 61 64 40 31 32 00 5f 4e 74 49    6d 70 65 72 73 6f 6e 61 74 65 43 6c 69 65 6e 74  | teThread@12._NtImpersonateClient | 
| 11e20 |  4f 66 50 6f 72 74 40 38 00 5f 5f 69 6d 70 5f 5f    4e 74 49 6d 70 65 72 73 6f 6e 61 74 65 43 6c 69  | OfPort@8.__imp__NtImpersonateCli | 
| 11e40 |  65 6e 74 4f 66 50 6f 72 74 40 38 00 5f 4e 74 49    6d 70 65 72 73 6f 6e 61 74 65 41 6e 6f 6e 79 6d  | entOfPort@8._NtImpersonateAnonym | 
| 11e60 |  6f 75 73 54 6f 6b 65 6e 40 34 00 5f 5f 69 6d 70    5f 5f 4e 74 49 6d 70 65 72 73 6f 6e 61 74 65 41  | ousToken@4.__imp__NtImpersonateA | 
| 11e80 |  6e 6f 6e 79 6d 6f 75 73 54 6f 6b 65 6e 40 34 00    5f 4e 74 47 65 74 57 72 69 74 65 57 61 74 63 68  | nonymousToken@4._NtGetWriteWatch | 
| 11ea0 |  40 32 38 00 5f 5f 69 6d 70 5f 5f 4e 74 47 65 74    57 72 69 74 65 57 61 74 63 68 40 32 38 00 5f 4e  | @28.__imp__NtGetWriteWatch@28._N | 
| 11ec0 |  74 47 65 74 54 69 63 6b 43 6f 75 6e 74 40 30 00    5f 5f 69 6d 70 5f 5f 4e 74 47 65 74 54 69 63 6b  | tGetTickCount@0.__imp__NtGetTick | 
| 11ee0 |  43 6f 75 6e 74 40 30 00 5f 4e 74 47 65 74 50 6c    75 67 50 6c 61 79 45 76 65 6e 74 40 31 36 00 5f  | Count@0._NtGetPlugPlayEvent@16._ | 
| 11f00 |  5f 69 6d 70 5f 5f 4e 74 47 65 74 50 6c 75 67 50    6c 61 79 45 76 65 6e 74 40 31 36 00 5f 4e 74 47  | _imp__NtGetPlugPlayEvent@16._NtG | 
| 11f20 |  65 74 44 65 76 69 63 65 50 6f 77 65 72 53 74 61    74 65 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 47 65  | etDevicePowerState@8.__imp__NtGe | 
| 11f40 |  74 44 65 76 69 63 65 50 6f 77 65 72 53 74 61 74    65 40 38 00 5f 4e 74 47 65 74 43 75 72 72 65 6e  | tDevicePowerState@8._NtGetCurren | 
| 11f60 |  74 50 72 6f 63 65 73 73 6f 72 4e 75 6d 62 65 72    40 30 00 5f 5f 69 6d 70 5f 5f 4e 74 47 65 74 43  | tProcessorNumber@0.__imp__NtGetC | 
| 11f80 |  75 72 72 65 6e 74 50 72 6f 63 65 73 73 6f 72 4e    75 6d 62 65 72 40 30 00 5f 4e 74 47 65 74 43 6f  | urrentProcessorNumber@0._NtGetCo | 
| 11fa0 |  6e 74 65 78 74 54 68 72 65 61 64 40 38 00 5f 5f    69 6d 70 5f 5f 4e 74 47 65 74 43 6f 6e 74 65 78  | ntextThread@8.__imp__NtGetContex | 
| 11fc0 |  74 54 68 72 65 61 64 40 38 00 5f 4e 74 46 73 43    6f 6e 74 72 6f 6c 46 69 6c 65 40 34 30 00 5f 5f  | tThread@8._NtFsControlFile@40.__ | 
| 11fe0 |  69 6d 70 5f 5f 4e 74 46 73 43 6f 6e 74 72 6f 6c    46 69 6c 65 40 34 30 00 5f 4e 74 46 72 65 65 56  | imp__NtFsControlFile@40._NtFreeV | 
| 12000 |  69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 31 36 00    5f 5f 69 6d 70 5f 5f 4e 74 46 72 65 65 56 69 72  | irtualMemory@16.__imp__NtFreeVir | 
| 12020 |  74 75 61 6c 4d 65 6d 6f 72 79 40 31 36 00 5f 4e    74 46 72 65 65 55 73 65 72 50 68 79 73 69 63 61  | tualMemory@16._NtFreeUserPhysica | 
| 12040 |  6c 50 61 67 65 73 40 31 32 00 5f 5f 69 6d 70 5f    5f 4e 74 46 72 65 65 55 73 65 72 50 68 79 73 69  | lPages@12.__imp__NtFreeUserPhysi | 
| 12060 |  63 61 6c 50 61 67 65 73 40 31 32 00 5f 4e 74 46    6c 75 73 68 57 72 69 74 65 42 75 66 66 65 72 40  | calPages@12._NtFlushWriteBuffer@ | 
| 12080 |  30 00 5f 5f 69 6d 70 5f 5f 4e 74 46 6c 75 73 68    57 72 69 74 65 42 75 66 66 65 72 40 30 00 5f 4e  | 0.__imp__NtFlushWriteBuffer@0._N | 
| 120a0 |  74 46 6c 75 73 68 56 69 72 74 75 61 6c 4d 65 6d    6f 72 79 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74  | tFlushVirtualMemory@16.__imp__Nt | 
| 120c0 |  46 6c 75 73 68 56 69 72 74 75 61 6c 4d 65 6d 6f    72 79 40 31 36 00 5f 4e 74 46 6c 75 73 68 4b 65  | FlushVirtualMemory@16._NtFlushKe | 
| 120e0 |  79 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 46 6c 75    73 68 4b 65 79 40 34 00 5f 4e 74 46 6c 75 73 68  | y@4.__imp__NtFlushKey@4._NtFlush | 
| 12100 |  49 6e 73 74 72 75 63 74 69 6f 6e 43 61 63 68 65    40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 46 6c 75  | InstructionCache@12.__imp__NtFlu | 
| 12120 |  73 68 49 6e 73 74 72 75 63 74 69 6f 6e 43 61 63    68 65 40 31 32 00 5f 4e 74 46 6c 75 73 68 42 75  | shInstructionCache@12._NtFlushBu | 
| 12140 |  66 66 65 72 73 46 69 6c 65 40 38 00 5f 5f 69 6d    70 5f 5f 4e 74 46 6c 75 73 68 42 75 66 66 65 72  | ffersFile@8.__imp__NtFlushBuffer | 
| 12160 |  73 46 69 6c 65 40 38 00 5f 4e 74 46 69 6e 64 41    74 6f 6d 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74  | sFile@8._NtFindAtom@12.__imp__Nt | 
| 12180 |  46 69 6e 64 41 74 6f 6d 40 31 32 00 5f 4e 74 46    69 6c 74 65 72 54 6f 6b 65 6e 40 32 34 00 5f 5f  | FindAtom@12._NtFilterToken@24.__ | 
| 121a0 |  69 6d 70 5f 5f 4e 74 46 69 6c 74 65 72 54 6f 6b    65 6e 40 32 34 00 5f 4e 74 45 78 74 65 6e 64 53  | imp__NtFilterToken@24._NtExtendS | 
| 121c0 |  65 63 74 69 6f 6e 40 38 00 5f 5f 69 6d 70 5f 5f    4e 74 45 78 74 65 6e 64 53 65 63 74 69 6f 6e 40  | ection@8.__imp__NtExtendSection@ | 
| 121e0 |  38 00 5f 4e 74 45 6e 75 6d 65 72 61 74 65 56 61    6c 75 65 4b 65 79 40 32 34 00 5f 5f 69 6d 70 5f  | 8._NtEnumerateValueKey@24.__imp_ | 
| 12200 |  5f 4e 74 45 6e 75 6d 65 72 61 74 65 56 61 6c 75    65 4b 65 79 40 32 34 00 5f 4e 74 45 6e 75 6d 65  | _NtEnumerateValueKey@24._NtEnume | 
| 12220 |  72 61 74 65 53 79 73 74 65 6d 45 6e 76 69 72 6f    6e 6d 65 6e 74 56 61 6c 75 65 73 45 78 40 31 32  | rateSystemEnvironmentValuesEx@12 | 
| 12240 |  00 5f 5f 69 6d 70 5f 5f 4e 74 45 6e 75 6d 65 72    61 74 65 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e  | .__imp__NtEnumerateSystemEnviron | 
| 12260 |  6d 65 6e 74 56 61 6c 75 65 73 45 78 40 31 32 00    5f 4e 74 45 6e 75 6d 65 72 61 74 65 4b 65 79 40  | mentValuesEx@12._NtEnumerateKey@ | 
| 12280 |  32 34 00 5f 5f 69 6d 70 5f 5f 4e 74 45 6e 75 6d    65 72 61 74 65 4b 65 79 40 32 34 00 5f 4e 74 45  | 24.__imp__NtEnumerateKey@24._NtE | 
| 122a0 |  6e 75 6d 65 72 61 74 65 44 72 69 76 65 72 45 6e    74 72 69 65 73 40 38 00 5f 5f 69 6d 70 5f 5f 4e  | numerateDriverEntries@8.__imp__N | 
| 122c0 |  74 45 6e 75 6d 65 72 61 74 65 44 72 69 76 65 72    45 6e 74 72 69 65 73 40 38 00 5f 4e 74 45 6e 75  | tEnumerateDriverEntries@8._NtEnu | 
| 122e0 |  6d 65 72 61 74 65 42 6f 6f 74 45 6e 74 72 69 65    73 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 45 6e 75  | merateBootEntries@8.__imp__NtEnu | 
| 12300 |  6d 65 72 61 74 65 42 6f 6f 74 45 6e 74 72 69 65    73 40 38 00 5f 4e 74 44 75 70 6c 69 63 61 74 65  | merateBootEntries@8._NtDuplicate | 
| 12320 |  54 6f 6b 65 6e 40 32 34 00 5f 5f 69 6d 70 5f 5f    4e 74 44 75 70 6c 69 63 61 74 65 54 6f 6b 65 6e  | Token@24.__imp__NtDuplicateToken | 
| 12340 |  40 32 34 00 5f 4e 74 44 75 70 6c 69 63 61 74 65    4f 62 6a 65 63 74 40 32 38 00 5f 5f 69 6d 70 5f  | @24._NtDuplicateObject@28.__imp_ | 
| 12360 |  5f 4e 74 44 75 70 6c 69 63 61 74 65 4f 62 6a 65    63 74 40 32 38 00 5f 4e 74 44 69 73 70 6c 61 79  | _NtDuplicateObject@28._NtDisplay | 
| 12380 |  53 74 72 69 6e 67 40 34 00 5f 5f 69 6d 70 5f 5f    4e 74 44 69 73 70 6c 61 79 53 74 72 69 6e 67 40  | String@4.__imp__NtDisplayString@ | 
| 123a0 |  34 00 5f 4e 74 44 65 76 69 63 65 49 6f 43 6f 6e    74 72 6f 6c 46 69 6c 65 40 34 30 00 5f 5f 69 6d  | 4._NtDeviceIoControlFile@40.__im | 
| 123c0 |  70 5f 5f 4e 74 44 65 76 69 63 65 49 6f 43 6f 6e    74 72 6f 6c 46 69 6c 65 40 34 30 00 5f 4e 74 44  | p__NtDeviceIoControlFile@40._NtD | 
| 123e0 |  65 6c 65 74 65 56 61 6c 75 65 4b 65 79 40 38 00    5f 5f 69 6d 70 5f 5f 4e 74 44 65 6c 65 74 65 56  | eleteValueKey@8.__imp__NtDeleteV | 
| 12400 |  61 6c 75 65 4b 65 79 40 38 00 5f 4e 74 44 65 6c    65 74 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c  | alueKey@8._NtDeleteObjectAuditAl | 
| 12420 |  61 72 6d 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74    44 65 6c 65 74 65 4f 62 6a 65 63 74 41 75 64 69  | arm@12.__imp__NtDeleteObjectAudi | 
| 12440 |  74 41 6c 61 72 6d 40 31 32 00 5f 4e 74 44 65 6c    65 74 65 4b 65 79 40 34 00 5f 5f 69 6d 70 5f 5f  | tAlarm@12._NtDeleteKey@4.__imp__ | 
| 12460 |  4e 74 44 65 6c 65 74 65 4b 65 79 40 34 00 5f 4e    74 44 65 6c 65 74 65 46 69 6c 65 40 34 00 5f 5f  | NtDeleteKey@4._NtDeleteFile@4.__ | 
| 12480 |  69 6d 70 5f 5f 4e 74 44 65 6c 65 74 65 46 69 6c    65 40 34 00 5f 4e 74 44 65 6c 65 74 65 44 72 69  | imp__NtDeleteFile@4._NtDeleteDri | 
| 124a0 |  76 65 72 45 6e 74 72 79 40 34 00 5f 5f 69 6d 70    5f 5f 4e 74 44 65 6c 65 74 65 44 72 69 76 65 72  | verEntry@4.__imp__NtDeleteDriver | 
| 124c0 |  45 6e 74 72 79 40 34 00 5f 4e 74 44 65 6c 65 74    65 42 6f 6f 74 45 6e 74 72 79 40 34 00 5f 5f 69  | Entry@4._NtDeleteBootEntry@4.__i | 
| 124e0 |  6d 70 5f 5f 4e 74 44 65 6c 65 74 65 42 6f 6f 74    45 6e 74 72 79 40 34 00 5f 4e 74 44 65 6c 65 74  | mp__NtDeleteBootEntry@4._NtDelet | 
| 12500 |  65 41 74 6f 6d 40 34 00 5f 5f 69 6d 70 5f 5f 4e    74 44 65 6c 65 74 65 41 74 6f 6d 40 34 00 5f 4e  | eAtom@4.__imp__NtDeleteAtom@4._N | 
| 12520 |  74 44 65 6c 61 79 45 78 65 63 75 74 69 6f 6e 40    38 00 5f 5f 69 6d 70 5f 5f 4e 74 44 65 6c 61 79  | tDelayExecution@8.__imp__NtDelay | 
| 12540 |  45 78 65 63 75 74 69 6f 6e 40 38 00 5f 4e 74 44    65 62 75 67 43 6f 6e 74 69 6e 75 65 40 31 32 00  | Execution@8._NtDebugContinue@12. | 
| 12560 |  5f 5f 69 6d 70 5f 5f 4e 74 44 65 62 75 67 43 6f    6e 74 69 6e 75 65 40 31 32 00 5f 4e 74 44 65 62  | __imp__NtDebugContinue@12._NtDeb | 
| 12580 |  75 67 41 63 74 69 76 65 50 72 6f 63 65 73 73 40    38 00 5f 5f 69 6d 70 5f 5f 4e 74 44 65 62 75 67  | ugActiveProcess@8.__imp__NtDebug | 
| 125a0 |  41 63 74 69 76 65 50 72 6f 63 65 73 73 40 38 00    5f 4e 74 43 75 72 72 65 6e 74 54 65 62 40 30 00  | ActiveProcess@8._NtCurrentTeb@0. | 
| 125c0 |  5f 5f 69 6d 70 5f 5f 4e 74 43 75 72 72 65 6e 74    54 65 62 40 30 00 5f 4e 74 43 72 65 61 74 65 57  | __imp__NtCurrentTeb@0._NtCreateW | 
| 125e0 |  61 69 74 61 62 6c 65 50 6f 72 74 40 32 30 00 5f    5f 69 6d 70 5f 5f 4e 74 43 72 65 61 74 65 57 61  | aitablePort@20.__imp__NtCreateWa | 
| 12600 |  69 74 61 62 6c 65 50 6f 72 74 40 32 30 00 5f 4e    74 43 72 65 61 74 65 54 6f 6b 65 6e 40 35 32 00  | itablePort@20._NtCreateToken@52. | 
| 12620 |  5f 5f 69 6d 70 5f 5f 4e 74 43 72 65 61 74 65 54    6f 6b 65 6e 40 35 32 00 5f 4e 74 43 72 65 61 74  | __imp__NtCreateToken@52._NtCreat | 
| 12640 |  65 54 69 6d 65 72 40 31 36 00 5f 5f 69 6d 70 5f    5f 4e 74 43 72 65 61 74 65 54 69 6d 65 72 40 31  | eTimer@16.__imp__NtCreateTimer@1 | 
| 12660 |  36 00 5f 4e 74 43 72 65 61 74 65 54 68 72 65 61    64 40 33 32 00 5f 5f 69 6d 70 5f 5f 4e 74 43 72  | 6._NtCreateThread@32.__imp__NtCr | 
| 12680 |  65 61 74 65 54 68 72 65 61 64 40 33 32 00 5f 4e    74 43 72 65 61 74 65 53 79 6d 62 6f 6c 69 63 4c  | eateThread@32._NtCreateSymbolicL | 
| 126a0 |  69 6e 6b 4f 62 6a 65 63 74 40 31 36 00 5f 5f 69    6d 70 5f 5f 4e 74 43 72 65 61 74 65 53 79 6d 62  | inkObject@16.__imp__NtCreateSymb | 
| 126c0 |  6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 40 31    36 00 5f 4e 74 43 72 65 61 74 65 53 65 6d 61 70  | olicLinkObject@16._NtCreateSemap | 
| 126e0 |  68 6f 72 65 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e    74 43 72 65 61 74 65 53 65 6d 61 70 68 6f 72 65  | hore@20.__imp__NtCreateSemaphore | 
| 12700 |  40 32 30 00 5f 4e 74 43 72 65 61 74 65 53 65 63    74 69 6f 6e 40 32 38 00 5f 5f 69 6d 70 5f 5f 4e  | @20._NtCreateSection@28.__imp__N | 
| 12720 |  74 43 72 65 61 74 65 53 65 63 74 69 6f 6e 40 32    38 00 5f 4e 74 43 72 65 61 74 65 50 72 6f 66 69  | tCreateSection@28._NtCreateProfi | 
| 12740 |  6c 65 40 33 36 00 5f 5f 69 6d 70 5f 5f 4e 74 43    72 65 61 74 65 50 72 6f 66 69 6c 65 40 33 36 00  | le@36.__imp__NtCreateProfile@36. | 
| 12760 |  5f 4e 74 43 72 65 61 74 65 50 72 6f 63 65 73 73    45 78 40 33 36 00 5f 5f 69 6d 70 5f 5f 4e 74 43  | _NtCreateProcessEx@36.__imp__NtC | 
| 12780 |  72 65 61 74 65 50 72 6f 63 65 73 73 45 78 40 33    36 00 5f 4e 74 43 72 65 61 74 65 50 72 6f 63 65  | reateProcessEx@36._NtCreateProce | 
| 127a0 |  73 73 40 33 32 00 5f 5f 69 6d 70 5f 5f 4e 74 43    72 65 61 74 65 50 72 6f 63 65 73 73 40 33 32 00  | ss@32.__imp__NtCreateProcess@32. | 
| 127c0 |  5f 4e 74 43 72 65 61 74 65 50 6f 72 74 40 32 30    00 5f 5f 69 6d 70 5f 5f 4e 74 43 72 65 61 74 65  | _NtCreatePort@20.__imp__NtCreate | 
| 127e0 |  50 6f 72 74 40 32 30 00 5f 4e 74 43 72 65 61 74    65 50 61 67 69 6e 67 46 69 6c 65 40 31 36 00 5f  | Port@20._NtCreatePagingFile@16._ | 
| 12800 |  5f 69 6d 70 5f 5f 4e 74 43 72 65 61 74 65 50 61    67 69 6e 67 46 69 6c 65 40 31 36 00 5f 4e 74 43  | _imp__NtCreatePagingFile@16._NtC | 
| 12820 |  72 65 61 74 65 4e 61 6d 65 64 50 69 70 65 46 69    6c 65 40 35 36 00 5f 5f 69 6d 70 5f 5f 4e 74 43  | reateNamedPipeFile@56.__imp__NtC | 
| 12840 |  72 65 61 74 65 4e 61 6d 65 64 50 69 70 65 46 69    6c 65 40 35 36 00 5f 4e 74 43 72 65 61 74 65 4d  | reateNamedPipeFile@56._NtCreateM | 
| 12860 |  75 74 61 6e 74 40 31 36 00 5f 5f 69 6d 70 5f 5f    4e 74 43 72 65 61 74 65 4d 75 74 61 6e 74 40 31  | utant@16.__imp__NtCreateMutant@1 | 
| 12880 |  36 00 5f 4e 74 43 72 65 61 74 65 4d 61 69 6c 73    6c 6f 74 46 69 6c 65 40 33 32 00 5f 5f 69 6d 70  | 6._NtCreateMailslotFile@32.__imp | 
| 128a0 |  5f 5f 4e 74 43 72 65 61 74 65 4d 61 69 6c 73 6c    6f 74 46 69 6c 65 40 33 32 00 5f 4e 74 43 72 65  | __NtCreateMailslotFile@32._NtCre | 
| 128c0 |  61 74 65 4b 65 79 65 64 45 76 65 6e 74 40 31 36    00 5f 5f 69 6d 70 5f 5f 4e 74 43 72 65 61 74 65  | ateKeyedEvent@16.__imp__NtCreate | 
| 128e0 |  4b 65 79 65 64 45 76 65 6e 74 40 31 36 00 5f 4e    74 43 72 65 61 74 65 4b 65 79 40 32 38 00 5f 5f  | KeyedEvent@16._NtCreateKey@28.__ | 
| 12900 |  69 6d 70 5f 5f 4e 74 43 72 65 61 74 65 4b 65 79    40 32 38 00 5f 4e 74 43 72 65 61 74 65 4a 6f 62  | imp__NtCreateKey@28._NtCreateJob | 
| 12920 |  53 65 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74    43 72 65 61 74 65 4a 6f 62 53 65 74 40 31 32 00  | Set@12.__imp__NtCreateJobSet@12. | 
| 12940 |  5f 4e 74 43 72 65 61 74 65 4a 6f 62 4f 62 6a 65    63 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 43  | _NtCreateJobObject@12.__imp__NtC | 
| 12960 |  72 65 61 74 65 4a 6f 62 4f 62 6a 65 63 74 40 31    32 00 5f 4e 74 43 72 65 61 74 65 49 6f 43 6f 6d  | reateJobObject@12._NtCreateIoCom | 
| 12980 |  70 6c 65 74 69 6f 6e 40 31 36 00 5f 5f 69 6d 70    5f 5f 4e 74 43 72 65 61 74 65 49 6f 43 6f 6d 70  | pletion@16.__imp__NtCreateIoComp | 
| 129a0 |  6c 65 74 69 6f 6e 40 31 36 00 5f 4e 74 43 72 65    61 74 65 46 69 6c 65 40 34 34 00 5f 5f 69 6d 70  | letion@16._NtCreateFile@44.__imp | 
| 129c0 |  5f 5f 4e 74 43 72 65 61 74 65 46 69 6c 65 40 34    34 00 5f 4e 74 43 72 65 61 74 65 45 76 65 6e 74  | __NtCreateFile@44._NtCreateEvent | 
| 129e0 |  50 61 69 72 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e    74 43 72 65 61 74 65 45 76 65 6e 74 50 61 69 72  | Pair@12.__imp__NtCreateEventPair | 
| 12a00 |  40 31 32 00 5f 4e 74 43 72 65 61 74 65 45 76 65    6e 74 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 43  | @12._NtCreateEvent@20.__imp__NtC | 
| 12a20 |  72 65 61 74 65 45 76 65 6e 74 40 32 30 00 5f 4e    74 43 72 65 61 74 65 44 69 72 65 63 74 6f 72 79  | reateEvent@20._NtCreateDirectory | 
| 12a40 |  4f 62 6a 65 63 74 40 31 32 00 5f 5f 69 6d 70 5f    5f 4e 74 43 72 65 61 74 65 44 69 72 65 63 74 6f  | Object@12.__imp__NtCreateDirecto | 
| 12a60 |  72 79 4f 62 6a 65 63 74 40 31 32 00 5f 4e 74 43    72 65 61 74 65 44 65 62 75 67 4f 62 6a 65 63 74  | ryObject@12._NtCreateDebugObject | 
| 12a80 |  40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 43 72 65    61 74 65 44 65 62 75 67 4f 62 6a 65 63 74 40 31  | @16.__imp__NtCreateDebugObject@1 | 
| 12aa0 |  36 00 5f 4e 74 43 6f 6e 74 69 6e 75 65 40 38 00    5f 5f 69 6d 70 5f 5f 4e 74 43 6f 6e 74 69 6e 75  | 6._NtContinue@8.__imp__NtContinu | 
| 12ac0 |  65 40 38 00 5f 4e 74 43 6f 6e 6e 65 63 74 50 6f    72 74 40 33 32 00 5f 5f 69 6d 70 5f 5f 4e 74 43  | e@8._NtConnectPort@32.__imp__NtC | 
| 12ae0 |  6f 6e 6e 65 63 74 50 6f 72 74 40 33 32 00 5f 4e    74 43 6f 6d 70 72 65 73 73 4b 65 79 40 34 00 5f  | onnectPort@32._NtCompressKey@4._ | 
| 12b00 |  5f 69 6d 70 5f 5f 4e 74 43 6f 6d 70 72 65 73 73    4b 65 79 40 34 00 5f 4e 74 43 6f 6d 70 6c 65 74  | _imp__NtCompressKey@4._NtComplet | 
| 12b20 |  65 43 6f 6e 6e 65 63 74 50 6f 72 74 40 34 00 5f    5f 69 6d 70 5f 5f 4e 74 43 6f 6d 70 6c 65 74 65  | eConnectPort@4.__imp__NtComplete | 
| 12b40 |  43 6f 6e 6e 65 63 74 50 6f 72 74 40 34 00 5f 4e    74 43 6f 6d 70 61 72 65 54 6f 6b 65 6e 73 40 31  | ConnectPort@4._NtCompareTokens@1 | 
| 12b60 |  32 00 5f 5f 69 6d 70 5f 5f 4e 74 43 6f 6d 70 61    72 65 54 6f 6b 65 6e 73 40 31 32 00 5f 4e 74 43  | 2.__imp__NtCompareTokens@12._NtC | 
| 12b80 |  6f 6d 70 61 63 74 4b 65 79 73 40 38 00 5f 5f 69    6d 70 5f 5f 4e 74 43 6f 6d 70 61 63 74 4b 65 79  | ompactKeys@8.__imp__NtCompactKey | 
| 12ba0 |  73 40 38 00 5f 4e 74 43 6c 6f 73 65 4f 62 6a 65    63 74 41 75 64 69 74 41 6c 61 72 6d 40 31 32 00  | s@8._NtCloseObjectAuditAlarm@12. | 
| 12bc0 |  5f 5f 69 6d 70 5f 5f 4e 74 43 6c 6f 73 65 4f 62    6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 40 31  | __imp__NtCloseObjectAuditAlarm@1 | 
| 12be0 |  32 00 5f 4e 74 43 6c 6f 73 65 40 34 00 5f 5f 69    6d 70 5f 5f 4e 74 43 6c 6f 73 65 40 34 00 5f 4e  | 2._NtClose@4.__imp__NtClose@4._N | 
| 12c00 |  74 43 6c 65 61 72 45 76 65 6e 74 40 34 00 5f 5f    69 6d 70 5f 5f 4e 74 43 6c 65 61 72 45 76 65 6e  | tClearEvent@4.__imp__NtClearEven | 
| 12c20 |  74 40 34 00 5f 4e 74 43 61 6e 63 65 6c 54 69 6d    65 72 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 43 61  | t@4._NtCancelTimer@8.__imp__NtCa | 
| 12c40 |  6e 63 65 6c 54 69 6d 65 72 40 38 00 5f 4e 74 43    61 6e 63 65 6c 49 6f 46 69 6c 65 40 38 00 5f 5f  | ncelTimer@8._NtCancelIoFile@8.__ | 
| 12c60 |  69 6d 70 5f 5f 4e 74 43 61 6e 63 65 6c 49 6f 46    69 6c 65 40 38 00 5f 4e 74 43 61 6e 63 65 6c 44  | imp__NtCancelIoFile@8._NtCancelD | 
| 12c80 |  65 76 69 63 65 57 61 6b 65 75 70 52 65 71 75 65    73 74 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 43 61  | eviceWakeupRequest@4.__imp__NtCa | 
| 12ca0 |  6e 63 65 6c 44 65 76 69 63 65 57 61 6b 65 75 70    52 65 71 75 65 73 74 40 34 00 5f 4e 74 43 61 6c  | ncelDeviceWakeupRequest@4._NtCal | 
| 12cc0 |  6c 62 61 63 6b 52 65 74 75 72 6e 40 31 32 00 5f    5f 69 6d 70 5f 5f 4e 74 43 61 6c 6c 62 61 63 6b  | lbackReturn@12.__imp__NtCallback | 
| 12ce0 |  52 65 74 75 72 6e 40 31 32 00 5f 4e 74 41 73 73    69 67 6e 50 72 6f 63 65 73 73 54 6f 4a 6f 62 4f  | Return@12._NtAssignProcessToJobO | 
| 12d00 |  62 6a 65 63 74 40 38 00 5f 5f 69 6d 70 5f 5f 4e    74 41 73 73 69 67 6e 50 72 6f 63 65 73 73 54 6f  | bject@8.__imp__NtAssignProcessTo | 
| 12d20 |  4a 6f 62 4f 62 6a 65 63 74 40 38 00 5f 4e 74 41    72 65 4d 61 70 70 65 64 46 69 6c 65 73 54 68 65  | JobObject@8._NtAreMappedFilesThe | 
| 12d40 |  53 61 6d 65 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74    41 72 65 4d 61 70 70 65 64 46 69 6c 65 73 54 68  | Same@8.__imp__NtAreMappedFilesTh | 
| 12d60 |  65 53 61 6d 65 40 38 00 5f 4e 74 41 70 70 68 65    6c 70 43 61 63 68 65 43 6f 6e 74 72 6f 6c 40 38  | eSame@8._NtApphelpCacheControl@8 | 
| 12d80 |  00 5f 5f 69 6d 70 5f 5f 4e 74 41 70 70 68 65 6c    70 43 61 63 68 65 43 6f 6e 74 72 6f 6c 40 38 00  | .__imp__NtApphelpCacheControl@8. | 
| 12da0 |  5f 4e 74 41 6c 6c 6f 63 61 74 65 56 69 72 74 75    61 6c 4d 65 6d 6f 72 79 40 32 34 00 5f 5f 69 6d  | _NtAllocateVirtualMemory@24.__im | 
| 12dc0 |  70 5f 5f 4e 74 41 6c 6c 6f 63 61 74 65 56 69 72    74 75 61 6c 4d 65 6d 6f 72 79 40 32 34 00 5f 4e  | p__NtAllocateVirtualMemory@24._N | 
| 12de0 |  74 41 6c 6c 6f 63 61 74 65 55 75 69 64 73 40 31    36 00 5f 5f 69 6d 70 5f 5f 4e 74 41 6c 6c 6f 63  | tAllocateUuids@16.__imp__NtAlloc | 
| 12e00 |  61 74 65 55 75 69 64 73 40 31 36 00 5f 4e 74 41    6c 6c 6f 63 61 74 65 55 73 65 72 50 68 79 73 69  | ateUuids@16._NtAllocateUserPhysi | 
| 12e20 |  63 61 6c 50 61 67 65 73 40 31 32 00 5f 5f 69 6d    70 5f 5f 4e 74 41 6c 6c 6f 63 61 74 65 55 73 65  | calPages@12.__imp__NtAllocateUse | 
| 12e40 |  72 50 68 79 73 69 63 61 6c 50 61 67 65 73 40 31    32 00 5f 4e 74 41 6c 6c 6f 63 61 74 65 4c 6f 63  | rPhysicalPages@12._NtAllocateLoc | 
| 12e60 |  61 6c 6c 79 55 6e 69 71 75 65 49 64 40 34 00 5f    5f 69 6d 70 5f 5f 4e 74 41 6c 6c 6f 63 61 74 65  | allyUniqueId@4.__imp__NtAllocate | 
| 12e80 |  4c 6f 63 61 6c 6c 79 55 6e 69 71 75 65 49 64 40    34 00 5f 4e 74 41 6c 65 72 74 54 68 72 65 61 64  | LocallyUniqueId@4._NtAlertThread | 
| 12ea0 |  40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 41 6c 65 72    74 54 68 72 65 61 64 40 34 00 5f 4e 74 41 6c 65  | @4.__imp__NtAlertThread@4._NtAle | 
| 12ec0 |  72 74 52 65 73 75 6d 65 54 68 72 65 61 64 40 38    00 5f 5f 69 6d 70 5f 5f 4e 74 41 6c 65 72 74 52  | rtResumeThread@8.__imp__NtAlertR | 
| 12ee0 |  65 73 75 6d 65 54 68 72 65 61 64 40 38 00 5f 4e    74 41 64 6a 75 73 74 50 72 69 76 69 6c 65 67 65  | esumeThread@8._NtAdjustPrivilege | 
| 12f00 |  73 54 6f 6b 65 6e 40 32 34 00 5f 5f 69 6d 70 5f    5f 4e 74 41 64 6a 75 73 74 50 72 69 76 69 6c 65  | sToken@24.__imp__NtAdjustPrivile | 
| 12f20 |  67 65 73 54 6f 6b 65 6e 40 32 34 00 5f 4e 74 41    64 6a 75 73 74 47 72 6f 75 70 73 54 6f 6b 65 6e  | gesToken@24._NtAdjustGroupsToken | 
| 12f40 |  40 32 34 00 5f 5f 69 6d 70 5f 5f 4e 74 41 64 6a    75 73 74 47 72 6f 75 70 73 54 6f 6b 65 6e 40 32  | @24.__imp__NtAdjustGroupsToken@2 | 
| 12f60 |  34 00 5f 4e 74 41 64 64 44 72 69 76 65 72 45 6e    74 72 79 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 41  | 4._NtAddDriverEntry@8.__imp__NtA | 
| 12f80 |  64 64 44 72 69 76 65 72 45 6e 74 72 79 40 38 00    5f 4e 74 41 64 64 42 6f 6f 74 45 6e 74 72 79 40  | ddDriverEntry@8._NtAddBootEntry@ | 
| 12fa0 |  38 00 5f 5f 69 6d 70 5f 5f 4e 74 41 64 64 42 6f    6f 74 45 6e 74 72 79 40 38 00 5f 4e 74 41 64 64  | 8.__imp__NtAddBootEntry@8._NtAdd | 
| 12fc0 |  41 74 6f 6d 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e    74 41 64 64 41 74 6f 6d 40 31 32 00 5f 4e 74 41  | Atom@12.__imp__NtAddAtom@12._NtA | 
| 12fe0 |  63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65    52 65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64  | ccessCheckByTypeResultListAndAud | 
| 13000 |  69 74 41 6c 61 72 6d 42 79 48 61 6e 64 6c 65 40    36 38 00 5f 5f 69 6d 70 5f 5f 4e 74 41 63 63 65  | itAlarmByHandle@68.__imp__NtAcce | 
| 13020 |  73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73    75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41  | ssCheckByTypeResultListAndAuditA | 
| 13040 |  6c 61 72 6d 42 79 48 61 6e 64 6c 65 40 36 38 00    5f 4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79  | larmByHandle@68._NtAccessCheckBy | 
| 13060 |  54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 41 6e    64 41 75 64 69 74 41 6c 61 72 6d 40 36 34 00 5f  | TypeResultListAndAuditAlarm@64._ | 
| 13080 |  5f 69 6d 70 5f 5f 4e 74 41 63 63 65 73 73 43 68    65 63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c  | _imp__NtAccessCheckByTypeResultL | 
| 130a0 |  69 73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d    40 36 34 00 5f 4e 74 41 63 63 65 73 73 43 68 65  | istAndAuditAlarm@64._NtAccessChe | 
| 130c0 |  63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69    73 74 40 34 34 00 5f 5f 69 6d 70 5f 5f 4e 74 41  | ckByTypeResultList@44.__imp__NtA | 
| 130e0 |  63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65    52 65 73 75 6c 74 4c 69 73 74 40 34 34 00 5f 4e  | ccessCheckByTypeResultList@44._N | 
| 13100 |  74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79    70 65 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 40  | tAccessCheckByTypeAndAuditAlarm@ | 
| 13120 |  36 34 00 5f 5f 69 6d 70 5f 5f 4e 74 41 63 63 65    73 73 43 68 65 63 6b 42 79 54 79 70 65 41 6e 64  | 64.__imp__NtAccessCheckByTypeAnd | 
| 13140 |  41 75 64 69 74 41 6c 61 72 6d 40 36 34 00 5f 4e    74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79  | AuditAlarm@64._NtAccessCheckByTy | 
| 13160 |  70 65 40 34 34 00 5f 5f 69 6d 70 5f 5f 4e 74 41    63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65  | pe@44.__imp__NtAccessCheckByType | 
| 13180 |  40 34 34 00 5f 4e 74 41 63 63 65 73 73 43 68 65    63 6b 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 40  | @44._NtAccessCheckAndAuditAlarm@ | 
| 131a0 |  34 34 00 5f 5f 69 6d 70 5f 5f 4e 74 41 63 63 65    73 73 43 68 65 63 6b 41 6e 64 41 75 64 69 74 41  | 44.__imp__NtAccessCheckAndAuditA | 
| 131c0 |  6c 61 72 6d 40 34 34 00 5f 4e 74 41 63 63 65 73    73 43 68 65 63 6b 40 33 32 00 5f 5f 69 6d 70 5f  | larm@44._NtAccessCheck@32.__imp_ | 
| 131e0 |  5f 4e 74 41 63 63 65 73 73 43 68 65 63 6b 40 33    32 00 5f 4e 74 41 63 63 65 70 74 43 6f 6e 6e 65  | _NtAccessCheck@32._NtAcceptConne | 
| 13200 |  63 74 50 6f 72 74 40 32 34 00 5f 5f 69 6d 70 5f    5f 4e 74 41 63 63 65 70 74 43 6f 6e 6e 65 63 74  | ctPort@24.__imp__NtAcceptConnect | 
| 13220 |  50 6f 72 74 40 32 34 00 5f 4e 6c 73 4d 62 4f 65    6d 43 6f 64 65 50 61 67 65 54 61 67 00 5f 5f 69  | Port@24._NlsMbOemCodePageTag.__i | 
| 13240 |  6d 70 5f 5f 4e 6c 73 4d 62 4f 65 6d 43 6f 64 65    50 61 67 65 54 61 67 00 5f 4e 6c 73 4d 62 43 6f  | mp__NlsMbOemCodePageTag._NlsMbCo | 
| 13260 |  64 65 50 61 67 65 54 61 67 00 5f 5f 69 6d 70 5f    5f 4e 6c 73 4d 62 43 6f 64 65 50 61 67 65 54 61  | dePageTag.__imp__NlsMbCodePageTa | 
| 13280 |  67 00 5f 4e 6c 73 41 6e 73 69 43 6f 64 65 50 61    67 65 00 5f 5f 69 6d 70 5f 5f 4e 6c 73 41 6e 73  | g._NlsAnsiCodePage.__imp__NlsAns | 
| 132a0 |  69 43 6f 64 65 50 61 67 65 00 5f 4c 64 72 56 65    72 69 66 79 49 6d 61 67 65 4d 61 74 63 68 65 73  | iCodePage._LdrVerifyImageMatches | 
| 132c0 |  43 68 65 63 6b 73 75 6d 40 31 36 00 5f 5f 69 6d    70 5f 5f 4c 64 72 56 65 72 69 66 79 49 6d 61 67  | Checksum@16.__imp__LdrVerifyImag | 
| 132e0 |  65 4d 61 74 63 68 65 73 43 68 65 63 6b 73 75 6d    40 31 36 00 5f 4c 64 72 55 6e 6c 6f 63 6b 4c 6f  | eMatchesChecksum@16._LdrUnlockLo | 
| 13300 |  61 64 65 72 4c 6f 63 6b 40 38 00 5f 5f 69 6d 70    5f 5f 4c 64 72 55 6e 6c 6f 63 6b 4c 6f 61 64 65  | aderLock@8.__imp__LdrUnlockLoade | 
| 13320 |  72 4c 6f 63 6b 40 38 00 5f 4c 64 72 55 6e 6c 6f    61 64 44 6c 6c 40 34 00 5f 5f 69 6d 70 5f 5f 4c  | rLock@8._LdrUnloadDll@4.__imp__L | 
| 13340 |  64 72 55 6e 6c 6f 61 64 44 6c 6c 40 34 00 5f 4c    64 72 55 6e 6c 6f 61 64 41 6c 74 65 72 6e 61 74  | drUnloadDll@4._LdrUnloadAlternat | 
| 13360 |  65 52 65 73 6f 75 72 63 65 4d 6f 64 75 6c 65 40    34 00 5f 5f 69 6d 70 5f 5f 4c 64 72 55 6e 6c 6f  | eResourceModule@4.__imp__LdrUnlo | 
| 13380 |  61 64 41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75    72 63 65 4d 6f 64 75 6c 65 40 34 00 5f 4c 64 72  | adAlternateResourceModule@4._Ldr | 
| 133a0 |  53 68 75 74 64 6f 77 6e 54 68 72 65 61 64 40 30    00 5f 5f 69 6d 70 5f 5f 4c 64 72 53 68 75 74 64  | ShutdownThread@0.__imp__LdrShutd | 
| 133c0 |  6f 77 6e 54 68 72 65 61 64 40 30 00 5f 4c 64 72    53 68 75 74 64 6f 77 6e 50 72 6f 63 65 73 73 40  | ownThread@0._LdrShutdownProcess@ | 
| 133e0 |  30 00 5f 5f 69 6d 70 5f 5f 4c 64 72 53 68 75 74    64 6f 77 6e 50 72 6f 63 65 73 73 40 30 00 5f 4c  | 0.__imp__LdrShutdownProcess@0._L | 
| 13400 |  64 72 53 65 74 44 6c 6c 4d 61 6e 69 66 65 73 74    50 72 6f 62 65 72 40 34 00 5f 5f 69 6d 70 5f 5f  | drSetDllManifestProber@4.__imp__ | 
| 13420 |  4c 64 72 53 65 74 44 6c 6c 4d 61 6e 69 66 65 73    74 50 72 6f 62 65 72 40 34 00 5f 4c 64 72 53 65  | LdrSetDllManifestProber@4._LdrSe | 
| 13440 |  74 41 70 70 43 6f 6d 70 61 74 44 6c 6c 52 65 64    69 72 65 63 74 69 6f 6e 43 61 6c 6c 62 61 63 6b  | tAppCompatDllRedirectionCallback | 
| 13460 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 4c 64 72 53 65    74 41 70 70 43 6f 6d 70 61 74 44 6c 6c 52 65 64  | @12.__imp__LdrSetAppCompatDllRed | 
| 13480 |  69 72 65 63 74 69 6f 6e 43 61 6c 6c 62 61 63 6b    40 31 32 00 5f 4c 64 72 51 75 65 72 79 50 72 6f  | irectionCallback@12._LdrQueryPro | 
| 134a0 |  63 65 73 73 4d 6f 64 75 6c 65 49 6e 66 6f 72 6d    61 74 69 6f 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f  | cessModuleInformation@12.__imp__ | 
| 134c0 |  4c 64 72 51 75 65 72 79 50 72 6f 63 65 73 73 4d    6f 64 75 6c 65 49 6e 66 6f 72 6d 61 74 69 6f 6e  | LdrQueryProcessModuleInformation | 
| 134e0 |  40 31 32 00 5f 4c 64 72 51 75 65 72 79 49 6d 61    67 65 46 69 6c 65 4b 65 79 4f 70 74 69 6f 6e 40  | @12._LdrQueryImageFileKeyOption@ | 
| 13500 |  32 34 00 5f 5f 69 6d 70 5f 5f 4c 64 72 51 75 65    72 79 49 6d 61 67 65 46 69 6c 65 4b 65 79 4f 70  | 24.__imp__LdrQueryImageFileKeyOp | 
| 13520 |  74 69 6f 6e 40 32 34 00 5f 4c 64 72 51 75 65 72    79 49 6d 61 67 65 46 69 6c 65 45 78 65 63 75 74  | tion@24._LdrQueryImageFileExecut | 
| 13540 |  69 6f 6e 4f 70 74 69 6f 6e 73 45 78 40 32 38 00    5f 5f 69 6d 70 5f 5f 4c 64 72 51 75 65 72 79 49  | ionOptionsEx@28.__imp__LdrQueryI | 
| 13560 |  6d 61 67 65 46 69 6c 65 45 78 65 63 75 74 69 6f    6e 4f 70 74 69 6f 6e 73 45 78 40 32 38 00 5f 4c  | mageFileExecutionOptionsEx@28._L | 
| 13580 |  64 72 51 75 65 72 79 49 6d 61 67 65 46 69 6c 65    45 78 65 63 75 74 69 6f 6e 4f 70 74 69 6f 6e 73  | drQueryImageFileExecutionOptions | 
| 135a0 |  40 32 34 00 5f 5f 69 6d 70 5f 5f 4c 64 72 51 75    65 72 79 49 6d 61 67 65 46 69 6c 65 45 78 65 63  | @24.__imp__LdrQueryImageFileExec | 
| 135c0 |  75 74 69 6f 6e 4f 70 74 69 6f 6e 73 40 32 34 00    5f 4c 64 72 50 72 6f 63 65 73 73 52 65 6c 6f 63  | utionOptions@24._LdrProcessReloc | 
| 135e0 |  61 74 69 6f 6e 42 6c 6f 63 6b 40 31 36 00 5f 5f    69 6d 70 5f 5f 4c 64 72 50 72 6f 63 65 73 73 52  | ationBlock@16.__imp__LdrProcessR | 
| 13600 |  65 6c 6f 63 61 74 69 6f 6e 42 6c 6f 63 6b 40 31    36 00 5f 4c 64 72 4f 70 65 6e 49 6d 61 67 65 46  | elocationBlock@16._LdrOpenImageF | 
| 13620 |  69 6c 65 4f 70 74 69 6f 6e 73 4b 65 79 40 31 32    00 5f 5f 69 6d 70 5f 5f 4c 64 72 4f 70 65 6e 49  | ileOptionsKey@12.__imp__LdrOpenI | 
| 13640 |  6d 61 67 65 46 69 6c 65 4f 70 74 69 6f 6e 73 4b    65 79 40 31 32 00 5f 4c 64 72 4c 6f 63 6b 4c 6f  | mageFileOptionsKey@12._LdrLockLo | 
| 13660 |  61 64 65 72 4c 6f 63 6b 40 31 32 00 5f 5f 69 6d    70 5f 5f 4c 64 72 4c 6f 63 6b 4c 6f 61 64 65 72  | aderLock@12.__imp__LdrLockLoader | 
| 13680 |  4c 6f 63 6b 40 31 32 00 5f 4c 64 72 4c 6f 61 64    44 6c 6c 40 31 36 00 5f 5f 69 6d 70 5f 5f 4c 64  | Lock@12._LdrLoadDll@16.__imp__Ld | 
| 136a0 |  72 4c 6f 61 64 44 6c 6c 40 31 36 00 5f 4c 64 72    4c 6f 61 64 41 6c 74 65 72 6e 61 74 65 52 65 73  | rLoadDll@16._LdrLoadAlternateRes | 
| 136c0 |  6f 75 72 63 65 4d 6f 64 75 6c 65 40 38 00 5f 5f    69 6d 70 5f 5f 4c 64 72 4c 6f 61 64 41 6c 74 65  | ourceModule@8.__imp__LdrLoadAlte | 
| 136e0 |  72 6e 61 74 65 52 65 73 6f 75 72 63 65 4d 6f 64    75 6c 65 40 38 00 5f 4c 64 72 49 6e 69 74 69 61  | rnateResourceModule@8._LdrInitia | 
| 13700 |  6c 69 7a 65 54 68 75 6e 6b 40 31 36 00 5f 5f 69    6d 70 5f 5f 4c 64 72 49 6e 69 74 69 61 6c 69 7a  | lizeThunk@16.__imp__LdrInitializ | 
| 13720 |  65 54 68 75 6e 6b 40 31 36 00 5f 4c 64 72 49 6e    69 74 53 68 69 6d 45 6e 67 69 6e 65 44 79 6e 61  | eThunk@16._LdrInitShimEngineDyna | 
| 13740 |  6d 69 63 40 34 00 5f 5f 69 6d 70 5f 5f 4c 64 72    49 6e 69 74 53 68 69 6d 45 6e 67 69 6e 65 44 79  | mic@4.__imp__LdrInitShimEngineDy | 
| 13760 |  6e 61 6d 69 63 40 34 00 5f 4c 64 72 48 6f 74 50    61 74 63 68 52 6f 75 74 69 6e 65 40 34 00 5f 5f  | namic@4._LdrHotPatchRoutine@4.__ | 
| 13780 |  69 6d 70 5f 5f 4c 64 72 48 6f 74 50 61 74 63 68    52 6f 75 74 69 6e 65 40 34 00 5f 4c 64 72 47 65  | imp__LdrHotPatchRoutine@4._LdrGe | 
| 137a0 |  74 50 72 6f 63 65 64 75 72 65 41 64 64 72 65 73    73 40 31 36 00 5f 5f 69 6d 70 5f 5f 4c 64 72 47  | tProcedureAddress@16.__imp__LdrG | 
| 137c0 |  65 74 50 72 6f 63 65 64 75 72 65 41 64 64 72 65    73 73 40 31 36 00 5f 4c 64 72 47 65 74 44 6c 6c  | etProcedureAddress@16._LdrGetDll | 
| 137e0 |  48 61 6e 64 6c 65 45 78 40 32 30 00 5f 5f 69 6d    70 5f 5f 4c 64 72 47 65 74 44 6c 6c 48 61 6e 64  | HandleEx@20.__imp__LdrGetDllHand | 
| 13800 |  6c 65 45 78 40 32 30 00 5f 4c 64 72 47 65 74 44    6c 6c 48 61 6e 64 6c 65 40 31 36 00 5f 5f 69 6d  | leEx@20._LdrGetDllHandle@16.__im | 
| 13820 |  70 5f 5f 4c 64 72 47 65 74 44 6c 6c 48 61 6e 64    6c 65 40 31 36 00 5f 4c 64 72 46 6c 75 73 68 41  | p__LdrGetDllHandle@16._LdrFlushA | 
| 13840 |  6c 74 65 72 6e 61 74 65 52 65 73 6f 75 72 63 65    4d 6f 64 75 6c 65 73 40 30 00 5f 5f 69 6d 70 5f  | lternateResourceModules@0.__imp_ | 
| 13860 |  5f 4c 64 72 46 6c 75 73 68 41 6c 74 65 72 6e 61    74 65 52 65 73 6f 75 72 63 65 4d 6f 64 75 6c 65  | _LdrFlushAlternateResourceModule | 
| 13880 |  73 40 30 00 5f 4c 64 72 46 69 6e 64 52 65 73 6f    75 72 63 65 5f 55 40 31 36 00 5f 5f 69 6d 70 5f  | s@0._LdrFindResource_U@16.__imp_ | 
| 138a0 |  5f 4c 64 72 46 69 6e 64 52 65 73 6f 75 72 63 65    5f 55 40 31 36 00 5f 4c 64 72 46 69 6e 64 52 65  | _LdrFindResource_U@16._LdrFindRe | 
| 138c0 |  73 6f 75 72 63 65 45 78 5f 55 40 32 30 00 5f 5f    69 6d 70 5f 5f 4c 64 72 46 69 6e 64 52 65 73 6f  | sourceEx_U@20.__imp__LdrFindReso | 
| 138e0 |  75 72 63 65 45 78 5f 55 40 32 30 00 5f 4c 64 72    46 69 6e 64 52 65 73 6f 75 72 63 65 44 69 72 65  | urceEx_U@20._LdrFindResourceDire | 
| 13900 |  63 74 6f 72 79 5f 55 40 31 36 00 5f 5f 69 6d 70    5f 5f 4c 64 72 46 69 6e 64 52 65 73 6f 75 72 63  | ctory_U@16.__imp__LdrFindResourc | 
| 13920 |  65 44 69 72 65 63 74 6f 72 79 5f 55 40 31 36 00    5f 4c 64 72 46 69 6e 64 45 6e 74 72 79 46 6f 72  | eDirectory_U@16._LdrFindEntryFor | 
| 13940 |  41 64 64 72 65 73 73 40 38 00 5f 5f 69 6d 70 5f    5f 4c 64 72 46 69 6e 64 45 6e 74 72 79 46 6f 72  | Address@8.__imp__LdrFindEntryFor | 
| 13960 |  41 64 64 72 65 73 73 40 38 00 5f 4c 64 72 46 69    6e 64 43 72 65 61 74 65 50 72 6f 63 65 73 73 4d  | Address@8._LdrFindCreateProcessM | 
| 13980 |  61 6e 69 66 65 73 74 40 32 30 00 5f 5f 69 6d 70    5f 5f 4c 64 72 46 69 6e 64 43 72 65 61 74 65 50  | anifest@20.__imp__LdrFindCreateP | 
| 139a0 |  72 6f 63 65 73 73 4d 61 6e 69 66 65 73 74 40 32    30 00 5f 4c 64 72 45 6e 75 6d 65 72 61 74 65 4c  | rocessManifest@20._LdrEnumerateL | 
| 139c0 |  6f 61 64 65 64 4d 6f 64 75 6c 65 73 40 31 32 00    5f 5f 69 6d 70 5f 5f 4c 64 72 45 6e 75 6d 65 72  | oadedModules@12.__imp__LdrEnumer | 
| 139e0 |  61 74 65 4c 6f 61 64 65 64 4d 6f 64 75 6c 65 73    40 31 32 00 5f 4c 64 72 45 6e 75 6d 52 65 73 6f  | ateLoadedModules@12._LdrEnumReso | 
| 13a00 |  75 72 63 65 73 40 32 30 00 5f 5f 69 6d 70 5f 5f    4c 64 72 45 6e 75 6d 52 65 73 6f 75 72 63 65 73  | urces@20.__imp__LdrEnumResources | 
| 13a20 |  40 32 30 00 5f 4c 64 72 44 69 73 61 62 6c 65 54    68 72 65 61 64 43 61 6c 6c 6f 75 74 73 46 6f 72  | @20._LdrDisableThreadCalloutsFor | 
| 13a40 |  44 6c 6c 40 34 00 5f 5f 69 6d 70 5f 5f 4c 64 72    44 69 73 61 62 6c 65 54 68 72 65 61 64 43 61 6c  | Dll@4.__imp__LdrDisableThreadCal | 
| 13a60 |  6c 6f 75 74 73 46 6f 72 44 6c 6c 40 34 00 5f 4c    64 72 44 65 73 74 72 6f 79 4f 75 74 4f 66 50 72  | loutsForDll@4._LdrDestroyOutOfPr | 
| 13a80 |  6f 63 65 73 73 49 6d 61 67 65 40 34 00 5f 5f 69    6d 70 5f 5f 4c 64 72 44 65 73 74 72 6f 79 4f 75  | ocessImage@4.__imp__LdrDestroyOu | 
| 13aa0 |  74 4f 66 50 72 6f 63 65 73 73 49 6d 61 67 65 40    34 00 5f 4c 64 72 43 72 65 61 74 65 4f 75 74 4f  | tOfProcessImage@4._LdrCreateOutO | 
| 13ac0 |  66 50 72 6f 63 65 73 73 49 6d 61 67 65 40 32 30    00 5f 5f 69 6d 70 5f 5f 4c 64 72 43 72 65 61 74  | fProcessImage@20.__imp__LdrCreat | 
| 13ae0 |  65 4f 75 74 4f 66 50 72 6f 63 65 73 73 49 6d 61    67 65 40 32 30 00 5f 4c 64 72 41 6c 74 65 72 6e  | eOutOfProcessImage@20._LdrAltern | 
| 13b00 |  61 74 65 52 65 73 6f 75 72 63 65 73 45 6e 61 62    6c 65 64 40 30 00 5f 5f 69 6d 70 5f 5f 4c 64 72  | ateResourcesEnabled@0.__imp__Ldr | 
| 13b20 |  41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75 72 63    65 73 45 6e 61 62 6c 65 64 40 30 00 5f 4c 64 72  | AlternateResourcesEnabled@0._Ldr | 
| 13b40 |  41 64 64 52 65 66 44 6c 6c 40 38 00 5f 5f 69 6d    70 5f 5f 4c 64 72 41 64 64 52 65 66 44 6c 6c 40  | AddRefDll@8.__imp__LdrAddRefDll@ | 
| 13b60 |  38 00 5f 4c 64 72 41 63 63 65 73 73 52 65 73 6f    75 72 63 65 40 31 36 00 5f 5f 69 6d 70 5f 5f 4c  | 8._LdrAccessResource@16.__imp__L | 
| 13b80 |  64 72 41 63 63 65 73 73 52 65 73 6f 75 72 63 65    40 31 36 00 5f 4c 64 72 41 63 63 65 73 73 4f 75  | drAccessResource@16._LdrAccessOu | 
| 13ba0 |  74 4f 66 50 72 6f 63 65 73 73 52 65 73 6f 75 72    63 65 40 32 30 00 5f 5f 69 6d 70 5f 5f 4c 64 72  | tOfProcessResource@20.__imp__Ldr | 
| 13bc0 |  41 63 63 65 73 73 4f 75 74 4f 66 50 72 6f 63 65    73 73 52 65 73 6f 75 72 63 65 40 32 30 00 5f 4b  | AccessOutOfProcessResource@20._K | 
| 13be0 |  69 55 73 65 72 45 78 63 65 70 74 69 6f 6e 44 69    73 70 61 74 63 68 65 72 40 38 00 5f 5f 69 6d 70  | iUserExceptionDispatcher@8.__imp | 
| 13c00 |  5f 5f 4b 69 55 73 65 72 45 78 63 65 70 74 69 6f    6e 44 69 73 70 61 74 63 68 65 72 40 38 00 5f 4b  | __KiUserExceptionDispatcher@8._K | 
| 13c20 |  69 55 73 65 72 43 61 6c 6c 62 61 63 6b 44 69 73    70 61 74 63 68 65 72 40 31 32 00 5f 5f 69 6d 70  | iUserCallbackDispatcher@12.__imp | 
| 13c40 |  5f 5f 4b 69 55 73 65 72 43 61 6c 6c 62 61 63 6b    44 69 73 70 61 74 63 68 65 72 40 31 32 00 5f 4b  | __KiUserCallbackDispatcher@12._K | 
| 13c60 |  69 55 73 65 72 41 70 63 44 69 73 70 61 74 63 68    65 72 40 31 36 00 5f 5f 69 6d 70 5f 5f 4b 69 55  | iUserApcDispatcher@16.__imp__KiU | 
| 13c80 |  73 65 72 41 70 63 44 69 73 70 61 74 63 68 65 72    40 31 36 00 5f 4b 69 52 61 69 73 65 55 73 65 72  | serApcDispatcher@16._KiRaiseUser | 
| 13ca0 |  45 78 63 65 70 74 69 6f 6e 44 69 73 70 61 74 63    68 65 72 40 30 00 5f 5f 69 6d 70 5f 5f 4b 69 52  | ExceptionDispatcher@0.__imp__KiR | 
| 13cc0 |  61 69 73 65 55 73 65 72 45 78 63 65 70 74 69 6f    6e 44 69 73 70 61 74 63 68 65 72 40 30 00 5f 4b  | aiseUserExceptionDispatcher@0._K | 
| 13ce0 |  69 49 6e 74 53 79 73 74 65 6d 43 61 6c 6c 40 30    00 5f 5f 69 6d 70 5f 5f 4b 69 49 6e 74 53 79 73  | iIntSystemCall@0.__imp__KiIntSys | 
| 13d00 |  74 65 6d 43 61 6c 6c 40 30 00 5f 4b 69 46 61 73    74 53 79 73 74 65 6d 43 61 6c 6c 52 65 74 40 30  | temCall@0._KiFastSystemCallRet@0 | 
| 13d20 |  00 5f 5f 69 6d 70 5f 5f 4b 69 46 61 73 74 53 79    73 74 65 6d 43 61 6c 6c 52 65 74 40 30 00 5f 4b  | .__imp__KiFastSystemCallRet@0._K | 
| 13d40 |  69 46 61 73 74 53 79 73 74 65 6d 43 61 6c 6c 40    30 00 5f 5f 69 6d 70 5f 5f 4b 69 46 61 73 74 53  | iFastSystemCall@0.__imp__KiFastS | 
| 13d60 |  79 73 74 65 6d 43 61 6c 6c 40 30 00 5f 45 74 77    70 53 65 74 48 57 43 6f 6e 66 69 67 46 75 6e 63  | ystemCall@0._EtwpSetHWConfigFunc | 
| 13d80 |  74 69 6f 6e 40 38 00 5f 5f 69 6d 70 5f 5f 45 74    77 70 53 65 74 48 57 43 6f 6e 66 69 67 46 75 6e  | tion@8.__imp__EtwpSetHWConfigFun | 
| 13da0 |  63 74 69 6f 6e 40 38 00 5f 45 74 77 70 47 65 74    54 72 61 63 65 42 75 66 66 65 72 40 31 36 00 5f  | ction@8._EtwpGetTraceBuffer@16._ | 
| 13dc0 |  5f 69 6d 70 5f 5f 45 74 77 70 47 65 74 54 72 61    63 65 42 75 66 66 65 72 40 31 36 00 5f 45 74 77  | _imp__EtwpGetTraceBuffer@16._Etw | 
| 13de0 |  55 70 64 61 74 65 54 72 61 63 65 57 40 31 36 00    5f 5f 69 6d 70 5f 5f 45 74 77 55 70 64 61 74 65  | UpdateTraceW@16.__imp__EtwUpdate | 
| 13e00 |  54 72 61 63 65 57 40 31 36 00 5f 45 74 77 55 70    64 61 74 65 54 72 61 63 65 41 40 31 36 00 5f 5f  | TraceW@16._EtwUpdateTraceA@16.__ | 
| 13e20 |  69 6d 70 5f 5f 45 74 77 55 70 64 61 74 65 54 72    61 63 65 41 40 31 36 00 5f 45 74 77 55 6e 72 65  | imp__EtwUpdateTraceA@16._EtwUnre | 
| 13e40 |  67 69 73 74 65 72 54 72 61 63 65 47 75 69 64 73    40 38 00 5f 5f 69 6d 70 5f 5f 45 74 77 55 6e 72  | gisterTraceGuids@8.__imp__EtwUnr | 
| 13e60 |  65 67 69 73 74 65 72 54 72 61 63 65 47 75 69 64    73 40 38 00 5f 45 74 77 54 72 61 63 65 4d 65 73  | egisterTraceGuids@8._EtwTraceMes | 
| 13e80 |  73 61 67 65 56 61 40 32 34 00 5f 5f 69 6d 70 5f    5f 45 74 77 54 72 61 63 65 4d 65 73 73 61 67 65  | sageVa@24.__imp__EtwTraceMessage | 
| 13ea0 |  56 61 40 32 34 00 5f 45 74 77 54 72 61 63 65 4d    65 73 73 61 67 65 00 5f 5f 69 6d 70 5f 5f 45 74  | Va@24._EtwTraceMessage.__imp__Et | 
| 13ec0 |  77 54 72 61 63 65 4d 65 73 73 61 67 65 00 5f 45    74 77 54 72 61 63 65 45 76 65 6e 74 49 6e 73 74  | wTraceMessage._EtwTraceEventInst | 
| 13ee0 |  61 6e 63 65 40 32 30 00 5f 5f 69 6d 70 5f 5f 45    74 77 54 72 61 63 65 45 76 65 6e 74 49 6e 73 74  | ance@20.__imp__EtwTraceEventInst | 
| 13f00 |  61 6e 63 65 40 32 30 00 5f 45 74 77 54 72 61 63    65 45 76 65 6e 74 40 31 32 00 5f 5f 69 6d 70 5f  | ance@20._EtwTraceEvent@12.__imp_ | 
| 13f20 |  5f 45 74 77 54 72 61 63 65 45 76 65 6e 74 40 31    32 00 5f 45 74 77 53 74 6f 70 54 72 61 63 65 57  | _EtwTraceEvent@12._EtwStopTraceW | 
| 13f40 |  40 31 36 00 5f 5f 69 6d 70 5f 5f 45 74 77 53 74    6f 70 54 72 61 63 65 57 40 31 36 00 5f 45 74 77  | @16.__imp__EtwStopTraceW@16._Etw | 
| 13f60 |  53 74 6f 70 54 72 61 63 65 41 40 31 36 00 5f 5f    69 6d 70 5f 5f 45 74 77 53 74 6f 70 54 72 61 63  | StopTraceA@16.__imp__EtwStopTrac | 
| 13f80 |  65 41 40 31 36 00 5f 45 74 77 53 74 61 72 74 54    72 61 63 65 57 40 31 32 00 5f 5f 69 6d 70 5f 5f  | eA@16._EtwStartTraceW@12.__imp__ | 
| 13fa0 |  45 74 77 53 74 61 72 74 54 72 61 63 65 57 40 31    32 00 5f 45 74 77 53 74 61 72 74 54 72 61 63 65  | EtwStartTraceW@12._EtwStartTrace | 
| 13fc0 |  41 40 31 32 00 5f 5f 69 6d 70 5f 5f 45 74 77 53    74 61 72 74 54 72 61 63 65 41 40 31 32 00 5f 45  | A@12.__imp__EtwStartTraceA@12._E | 
| 13fe0 |  74 77 52 65 67 69 73 74 65 72 54 72 61 63 65 47    75 69 64 73 57 40 33 32 00 5f 5f 69 6d 70 5f 5f  | twRegisterTraceGuidsW@32.__imp__ | 
| 14000 |  45 74 77 52 65 67 69 73 74 65 72 54 72 61 63 65    47 75 69 64 73 57 40 33 32 00 5f 45 74 77 52 65  | EtwRegisterTraceGuidsW@32._EtwRe | 
| 14020 |  67 69 73 74 65 72 54 72 61 63 65 47 75 69 64 73    41 40 33 32 00 5f 5f 69 6d 70 5f 5f 45 74 77 52  | gisterTraceGuidsA@32.__imp__EtwR | 
| 14040 |  65 67 69 73 74 65 72 54 72 61 63 65 47 75 69 64    73 41 40 33 32 00 5f 45 74 77 52 65 63 65 69 76  | egisterTraceGuidsA@32._EtwReceiv | 
| 14060 |  65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 57 40    31 36 00 5f 5f 69 6d 70 5f 5f 45 74 77 52 65 63  | eNotificationsW@16.__imp__EtwRec | 
| 14080 |  65 69 76 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e    73 57 40 31 36 00 5f 45 74 77 52 65 63 65 69 76  | eiveNotificationsW@16._EtwReceiv | 
| 140a0 |  65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73 41 40    31 36 00 5f 5f 69 6d 70 5f 5f 45 74 77 52 65 63  | eNotificationsA@16.__imp__EtwRec | 
| 140c0 |  65 69 76 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e    73 41 40 31 36 00 5f 45 74 77 51 75 65 72 79 54  | eiveNotificationsA@16._EtwQueryT | 
| 140e0 |  72 61 63 65 57 40 31 36 00 5f 5f 69 6d 70 5f 5f    45 74 77 51 75 65 72 79 54 72 61 63 65 57 40 31  | raceW@16.__imp__EtwQueryTraceW@1 | 
| 14100 |  36 00 5f 45 74 77 51 75 65 72 79 54 72 61 63 65    41 40 31 36 00 5f 5f 69 6d 70 5f 5f 45 74 77 51  | 6._EtwQueryTraceA@16.__imp__EtwQ | 
| 14120 |  75 65 72 79 54 72 61 63 65 41 40 31 36 00 5f 45    74 77 51 75 65 72 79 41 6c 6c 54 72 61 63 65 73  | ueryTraceA@16._EtwQueryAllTraces | 
| 14140 |  57 40 31 32 00 5f 5f 69 6d 70 5f 5f 45 74 77 51    75 65 72 79 41 6c 6c 54 72 61 63 65 73 57 40 31  | W@12.__imp__EtwQueryAllTracesW@1 | 
| 14160 |  32 00 5f 45 74 77 51 75 65 72 79 41 6c 6c 54 72    61 63 65 73 41 40 31 32 00 5f 5f 69 6d 70 5f 5f  | 2._EtwQueryAllTracesA@12.__imp__ | 
| 14180 |  45 74 77 51 75 65 72 79 41 6c 6c 54 72 61 63 65    73 41 40 31 32 00 5f 45 74 77 4e 6f 74 69 66 69  | EtwQueryAllTracesA@12._EtwNotifi | 
| 141a0 |  63 61 74 69 6f 6e 52 65 67 69 73 74 72 61 74 69    6f 6e 57 40 32 30 00 5f 5f 69 6d 70 5f 5f 45 74  | cationRegistrationW@20.__imp__Et | 
| 141c0 |  77 4e 6f 74 69 66 69 63 61 74 69 6f 6e 52 65 67    69 73 74 72 61 74 69 6f 6e 57 40 32 30 00 5f 45  | wNotificationRegistrationW@20._E | 
| 141e0 |  74 77 4e 6f 74 69 66 69 63 61 74 69 6f 6e 52 65    67 69 73 74 72 61 74 69 6f 6e 41 40 32 30 00 5f  | twNotificationRegistrationA@20._ | 
| 14200 |  5f 69 6d 70 5f 5f 45 74 77 4e 6f 74 69 66 69 63    61 74 69 6f 6e 52 65 67 69 73 74 72 61 74 69 6f  | _imp__EtwNotificationRegistratio | 
| 14220 |  6e 41 40 32 30 00 5f 45 74 77 47 65 74 54 72 61    63 65 4c 6f 67 67 65 72 48 61 6e 64 6c 65 40 34  | nA@20._EtwGetTraceLoggerHandle@4 | 
| 14240 |  00 5f 5f 69 6d 70 5f 5f 45 74 77 47 65 74 54 72    61 63 65 4c 6f 67 67 65 72 48 61 6e 64 6c 65 40  | .__imp__EtwGetTraceLoggerHandle@ | 
| 14260 |  34 00 5f 45 74 77 47 65 74 54 72 61 63 65 45 6e    61 62 6c 65 4c 65 76 65 6c 40 38 00 5f 5f 69 6d  | 4._EtwGetTraceEnableLevel@8.__im | 
| 14280 |  70 5f 5f 45 74 77 47 65 74 54 72 61 63 65 45 6e    61 62 6c 65 4c 65 76 65 6c 40 38 00 5f 45 74 77  | p__EtwGetTraceEnableLevel@8._Etw | 
| 142a0 |  47 65 74 54 72 61 63 65 45 6e 61 62 6c 65 46 6c    61 67 73 40 38 00 5f 5f 69 6d 70 5f 5f 45 74 77  | GetTraceEnableFlags@8.__imp__Etw | 
| 142c0 |  47 65 74 54 72 61 63 65 45 6e 61 62 6c 65 46 6c    61 67 73 40 38 00 5f 45 74 77 46 6c 75 73 68 54  | GetTraceEnableFlags@8._EtwFlushT | 
| 142e0 |  72 61 63 65 57 40 31 36 00 5f 5f 69 6d 70 5f 5f    45 74 77 46 6c 75 73 68 54 72 61 63 65 57 40 31  | raceW@16.__imp__EtwFlushTraceW@1 | 
| 14300 |  36 00 5f 45 74 77 46 6c 75 73 68 54 72 61 63 65    41 40 31 36 00 5f 5f 69 6d 70 5f 5f 45 74 77 46  | 6._EtwFlushTraceA@16.__imp__EtwF | 
| 14320 |  6c 75 73 68 54 72 61 63 65 41 40 31 36 00 5f 45    74 77 45 6e 75 6d 65 72 61 74 65 54 72 61 63 65  | lushTraceA@16._EtwEnumerateTrace | 
| 14340 |  47 75 69 64 73 40 31 32 00 5f 5f 69 6d 70 5f 5f    45 74 77 45 6e 75 6d 65 72 61 74 65 54 72 61 63  | Guids@12.__imp__EtwEnumerateTrac | 
| 14360 |  65 47 75 69 64 73 40 31 32 00 5f 45 74 77 45 6e    61 62 6c 65 54 72 61 63 65 40 32 34 00 5f 5f 69  | eGuids@12._EtwEnableTrace@24.__i | 
| 14380 |  6d 70 5f 5f 45 74 77 45 6e 61 62 6c 65 54 72 61    63 65 40 32 34 00 5f 45 74 77 43 72 65 61 74 65  | mp__EtwEnableTrace@24._EtwCreate | 
| 143a0 |  54 72 61 63 65 49 6e 73 74 61 6e 63 65 49 64 40    38 00 5f 5f 69 6d 70 5f 5f 45 74 77 43 72 65 61  | TraceInstanceId@8.__imp__EtwCrea | 
| 143c0 |  74 65 54 72 61 63 65 49 6e 73 74 61 6e 63 65 49    64 40 38 00 5f 45 74 77 43 6f 6e 74 72 6f 6c 54  | teTraceInstanceId@8._EtwControlT | 
| 143e0 |  72 61 63 65 57 40 32 30 00 5f 5f 69 6d 70 5f 5f    45 74 77 43 6f 6e 74 72 6f 6c 54 72 61 63 65 57  | raceW@20.__imp__EtwControlTraceW | 
| 14400 |  40 32 30 00 5f 45 74 77 43 6f 6e 74 72 6f 6c 54    72 61 63 65 41 40 32 30 00 5f 5f 69 6d 70 5f 5f  | @20._EtwControlTraceA@20.__imp__ | 
| 14420 |  45 74 77 43 6f 6e 74 72 6f 6c 54 72 61 63 65 41    40 32 30 00 5f 44 62 67 55 73 65 72 42 72 65 61  | EtwControlTraceA@20._DbgUserBrea | 
| 14440 |  6b 50 6f 69 6e 74 40 30 00 5f 5f 69 6d 70 5f 5f    44 62 67 55 73 65 72 42 72 65 61 6b 50 6f 69 6e  | kPoint@0.__imp__DbgUserBreakPoin | 
| 14460 |  74 40 30 00 5f 44 62 67 55 69 57 61 69 74 53 74    61 74 65 43 68 61 6e 67 65 40 38 00 5f 5f 69 6d  | t@0._DbgUiWaitStateChange@8.__im | 
| 14480 |  70 5f 5f 44 62 67 55 69 57 61 69 74 53 74 61 74    65 43 68 61 6e 67 65 40 38 00 5f 44 62 67 55 69  | p__DbgUiWaitStateChange@8._DbgUi | 
| 144a0 |  53 74 6f 70 44 65 62 75 67 67 69 6e 67 40 34 00    5f 5f 69 6d 70 5f 5f 44 62 67 55 69 53 74 6f 70  | StopDebugging@4.__imp__DbgUiStop | 
| 144c0 |  44 65 62 75 67 67 69 6e 67 40 34 00 5f 44 62 67    55 69 53 65 74 54 68 72 65 61 64 44 65 62 75 67  | Debugging@4._DbgUiSetThreadDebug | 
| 144e0 |  4f 62 6a 65 63 74 40 34 00 5f 5f 69 6d 70 5f 5f    44 62 67 55 69 53 65 74 54 68 72 65 61 64 44 65  | Object@4.__imp__DbgUiSetThreadDe | 
| 14500 |  62 75 67 4f 62 6a 65 63 74 40 34 00 5f 44 62 67    55 69 52 65 6d 6f 74 65 42 72 65 61 6b 69 6e 40  | bugObject@4._DbgUiRemoteBreakin@ | 
| 14520 |  34 00 5f 5f 69 6d 70 5f 5f 44 62 67 55 69 52 65    6d 6f 74 65 42 72 65 61 6b 69 6e 40 34 00 5f 44  | 4.__imp__DbgUiRemoteBreakin@4._D | 
| 14540 |  62 67 55 69 49 73 73 75 65 52 65 6d 6f 74 65 42    72 65 61 6b 69 6e 40 34 00 5f 5f 69 6d 70 5f 5f  | bgUiIssueRemoteBreakin@4.__imp__ | 
| 14560 |  44 62 67 55 69 49 73 73 75 65 52 65 6d 6f 74 65    42 72 65 61 6b 69 6e 40 34 00 5f 44 62 67 55 69  | DbgUiIssueRemoteBreakin@4._DbgUi | 
| 14580 |  47 65 74 54 68 72 65 61 64 44 65 62 75 67 4f 62    6a 65 63 74 40 30 00 5f 5f 69 6d 70 5f 5f 44 62  | GetThreadDebugObject@0.__imp__Db | 
| 145a0 |  67 55 69 47 65 74 54 68 72 65 61 64 44 65 62 75    67 4f 62 6a 65 63 74 40 30 00 5f 44 62 67 55 69  | gUiGetThreadDebugObject@0._DbgUi | 
| 145c0 |  44 65 62 75 67 41 63 74 69 76 65 50 72 6f 63 65    73 73 40 34 00 5f 5f 69 6d 70 5f 5f 44 62 67 55  | DebugActiveProcess@4.__imp__DbgU | 
| 145e0 |  69 44 65 62 75 67 41 63 74 69 76 65 50 72 6f 63    65 73 73 40 34 00 5f 44 62 67 55 69 43 6f 6e 76  | iDebugActiveProcess@4._DbgUiConv | 
| 14600 |  65 72 74 53 74 61 74 65 43 68 61 6e 67 65 53 74    72 75 63 74 75 72 65 40 38 00 5f 5f 69 6d 70 5f  | ertStateChangeStructure@8.__imp_ | 
| 14620 |  5f 44 62 67 55 69 43 6f 6e 76 65 72 74 53 74 61    74 65 43 68 61 6e 67 65 53 74 72 75 63 74 75 72  | _DbgUiConvertStateChangeStructur | 
| 14640 |  65 40 38 00 5f 44 62 67 55 69 43 6f 6e 74 69 6e    75 65 40 38 00 5f 5f 69 6d 70 5f 5f 44 62 67 55  | e@8._DbgUiContinue@8.__imp__DbgU | 
| 14660 |  69 43 6f 6e 74 69 6e 75 65 40 38 00 5f 44 62 67    55 69 43 6f 6e 6e 65 63 74 54 6f 44 62 67 40 30  | iContinue@8._DbgUiConnectToDbg@0 | 
| 14680 |  00 5f 5f 69 6d 70 5f 5f 44 62 67 55 69 43 6f 6e    6e 65 63 74 54 6f 44 62 67 40 30 00 5f 44 62 67  | .__imp__DbgUiConnectToDbg@0._Dbg | 
| 146a0 |  53 65 74 44 65 62 75 67 46 69 6c 74 65 72 53 74    61 74 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 44 62  | SetDebugFilterState@12.__imp__Db | 
| 146c0 |  67 53 65 74 44 65 62 75 67 46 69 6c 74 65 72 53    74 61 74 65 40 31 32 00 5f 44 62 67 51 75 65 72  | gSetDebugFilterState@12._DbgQuer | 
| 146e0 |  79 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74    65 40 38 00 5f 5f 69 6d 70 5f 5f 44 62 67 51 75  | yDebugFilterState@8.__imp__DbgQu | 
| 14700 |  65 72 79 44 65 62 75 67 46 69 6c 74 65 72 53 74    61 74 65 40 38 00 5f 44 62 67 50 72 6f 6d 70 74  | eryDebugFilterState@8._DbgPrompt | 
| 14720 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 44 62 67 50 72    6f 6d 70 74 40 31 32 00 5f 44 62 67 50 72 69 6e  | @12.__imp__DbgPrompt@12._DbgPrin | 
| 14740 |  74 52 65 74 75 72 6e 43 6f 6e 74 72 6f 6c 43 00    5f 5f 69 6d 70 5f 5f 44 62 67 50 72 69 6e 74 52  | tReturnControlC.__imp__DbgPrintR | 
| 14760 |  65 74 75 72 6e 43 6f 6e 74 72 6f 6c 43 00 5f 44    62 67 50 72 69 6e 74 45 78 00 5f 5f 69 6d 70 5f  | eturnControlC._DbgPrintEx.__imp_ | 
| 14780 |  5f 44 62 67 50 72 69 6e 74 45 78 00 5f 44 62 67    50 72 69 6e 74 00 5f 5f 69 6d 70 5f 5f 44 62 67  | _DbgPrintEx._DbgPrint.__imp__Dbg | 
| 147a0 |  50 72 69 6e 74 00 5f 44 62 67 42 72 65 61 6b 50    6f 69 6e 74 40 30 00 5f 5f 69 6d 70 5f 5f 44 62  | Print._DbgBreakPoint@0.__imp__Db | 
| 147c0 |  67 42 72 65 61 6b 50 6f 69 6e 74 40 30 00 5f 43    73 72 53 65 74 50 72 69 6f 72 69 74 79 43 6c 61  | gBreakPoint@0._CsrSetPriorityCla | 
| 147e0 |  73 73 40 38 00 5f 5f 69 6d 70 5f 5f 43 73 72 53    65 74 50 72 69 6f 72 69 74 79 43 6c 61 73 73 40  | ss@8.__imp__CsrSetPriorityClass@ | 
| 14800 |  38 00 5f 43 73 72 50 72 6f 62 65 46 6f 72 57 72    69 74 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 43 73  | 8._CsrProbeForWrite@12.__imp__Cs | 
| 14820 |  72 50 72 6f 62 65 46 6f 72 57 72 69 74 65 40 31    32 00 5f 43 73 72 50 72 6f 62 65 46 6f 72 52 65  | rProbeForWrite@12._CsrProbeForRe | 
| 14840 |  61 64 40 31 32 00 5f 5f 69 6d 70 5f 5f 43 73 72    50 72 6f 62 65 46 6f 72 52 65 61 64 40 31 32 00  | ad@12.__imp__CsrProbeForRead@12. | 
| 14860 |  5f 43 73 72 4e 65 77 54 68 72 65 61 64 40 30 00    5f 5f 69 6d 70 5f 5f 43 73 72 4e 65 77 54 68 72  | _CsrNewThread@0.__imp__CsrNewThr | 
| 14880 |  65 61 64 40 30 00 5f 43 73 72 49 64 65 6e 74 69    66 79 41 6c 65 72 74 61 62 6c 65 54 68 72 65 61  | ead@0._CsrIdentifyAlertableThrea | 
| 148a0 |  64 40 30 00 5f 5f 69 6d 70 5f 5f 43 73 72 49 64    65 6e 74 69 66 79 41 6c 65 72 74 61 62 6c 65 54  | d@0.__imp__CsrIdentifyAlertableT | 
| 148c0 |  68 72 65 61 64 40 30 00 5f 43 73 72 47 65 74 50    72 6f 63 65 73 73 49 64 40 30 00 5f 5f 69 6d 70  | hread@0._CsrGetProcessId@0.__imp | 
| 148e0 |  5f 5f 43 73 72 47 65 74 50 72 6f 63 65 73 73 49    64 40 30 00 5f 43 73 72 46 72 65 65 43 61 70 74  | __CsrGetProcessId@0._CsrFreeCapt | 
| 14900 |  75 72 65 42 75 66 66 65 72 40 34 00 5f 5f 69 6d    70 5f 5f 43 73 72 46 72 65 65 43 61 70 74 75 72  | ureBuffer@4.__imp__CsrFreeCaptur | 
| 14920 |  65 42 75 66 66 65 72 40 34 00 5f 43 73 72 43 6c    69 65 6e 74 43 6f 6e 6e 65 63 74 54 6f 53 65 72  | eBuffer@4._CsrClientConnectToSer | 
| 14940 |  76 65 72 40 32 30 00 5f 5f 69 6d 70 5f 5f 43 73    72 43 6c 69 65 6e 74 43 6f 6e 6e 65 63 74 54 6f  | ver@20.__imp__CsrClientConnectTo | 
| 14960 |  53 65 72 76 65 72 40 32 30 00 5f 43 73 72 43 6c    69 65 6e 74 43 61 6c 6c 53 65 72 76 65 72 40 31  | Server@20._CsrClientCallServer@1 | 
| 14980 |  36 00 5f 5f 69 6d 70 5f 5f 43 73 72 43 6c 69 65    6e 74 43 61 6c 6c 53 65 72 76 65 72 40 31 36 00  | 6.__imp__CsrClientCallServer@16. | 
| 149a0 |  5f 43 73 72 43 61 70 74 75 72 65 54 69 6d 65 6f    75 74 40 38 00 5f 5f 69 6d 70 5f 5f 43 73 72 43  | _CsrCaptureTimeout@8.__imp__CsrC | 
| 149c0 |  61 70 74 75 72 65 54 69 6d 65 6f 75 74 40 38 00    5f 43 73 72 43 61 70 74 75 72 65 4d 65 73 73 61  | aptureTimeout@8._CsrCaptureMessa | 
| 149e0 |  67 65 53 74 72 69 6e 67 40 32 30 00 5f 5f 69 6d    70 5f 5f 43 73 72 43 61 70 74 75 72 65 4d 65 73  | geString@20.__imp__CsrCaptureMes | 
| 14a00 |  73 61 67 65 53 74 72 69 6e 67 40 32 30 00 5f 43    73 72 43 61 70 74 75 72 65 4d 65 73 73 61 67 65  | sageString@20._CsrCaptureMessage | 
| 14a20 |  4d 75 6c 74 69 55 6e 69 63 6f 64 65 53 74 72 69    6e 67 73 49 6e 50 6c 61 63 65 40 31 32 00 5f 5f  | MultiUnicodeStringsInPlace@12.__ | 
| 14a40 |  69 6d 70 5f 5f 43 73 72 43 61 70 74 75 72 65 4d    65 73 73 61 67 65 4d 75 6c 74 69 55 6e 69 63 6f  | imp__CsrCaptureMessageMultiUnico | 
| 14a60 |  64 65 53 74 72 69 6e 67 73 49 6e 50 6c 61 63 65    40 31 32 00 5f 43 73 72 43 61 70 74 75 72 65 4d  | deStringsInPlace@12._CsrCaptureM | 
| 14a80 |  65 73 73 61 67 65 42 75 66 66 65 72 40 31 36 00    5f 5f 69 6d 70 5f 5f 43 73 72 43 61 70 74 75 72  | essageBuffer@16.__imp__CsrCaptur | 
| 14aa0 |  65 4d 65 73 73 61 67 65 42 75 66 66 65 72 40 31    36 00 5f 43 73 72 41 6c 6c 6f 63 61 74 65 4d 65  | eMessageBuffer@16._CsrAllocateMe | 
| 14ac0 |  73 73 61 67 65 50 6f 69 6e 74 65 72 40 31 32 00    5f 5f 69 6d 70 5f 5f 43 73 72 41 6c 6c 6f 63 61  | ssagePointer@12.__imp__CsrAlloca | 
| 14ae0 |  74 65 4d 65 73 73 61 67 65 50 6f 69 6e 74 65 72    40 31 32 00 5f 43 73 72 41 6c 6c 6f 63 61 74 65  | teMessagePointer@12._CsrAllocate | 
| 14b00 |  43 61 70 74 75 72 65 42 75 66 66 65 72 40 38 00    5f 5f 69 6d 70 5f 5f 43 73 72 41 6c 6c 6f 63 61  | CaptureBuffer@8.__imp__CsrAlloca | 
| 14b20 |  74 65 43 61 70 74 75 72 65 42 75 66 66 65 72 40    38 00 40 52 74 6c 55 73 68 6f 72 74 42 79 74 65  | teCaptureBuffer@8.@RtlUshortByte | 
| 14b40 |  53 77 61 70 40 34 00 5f 5f 69 6d 70 5f 40 52 74    6c 55 73 68 6f 72 74 42 79 74 65 53 77 61 70 40  | Swap@4.__imp_@RtlUshortByteSwap@ | 
| 14b60 |  34 00 40 52 74 6c 55 6c 6f 6e 67 6c 6f 6e 67 42    79 74 65 53 77 61 70 40 38 00 5f 5f 69 6d 70 5f  | 4.@RtlUlonglongByteSwap@8.__imp_ | 
| 14b80 |  40 52 74 6c 55 6c 6f 6e 67 6c 6f 6e 67 42 79 74    65 53 77 61 70 40 38 00 40 52 74 6c 55 6c 6f 6e  | @RtlUlonglongByteSwap@8.@RtlUlon | 
| 14ba0 |  67 42 79 74 65 53 77 61 70 40 34 00 5f 5f 69 6d    70 5f 40 52 74 6c 55 6c 6f 6e 67 42 79 74 65 53  | gByteSwap@4.__imp_@RtlUlongByteS | 
| 14bc0 |  77 61 70 40 34 00 40 52 74 6c 49 6e 74 65 72 6c    6f 63 6b 65 64 50 75 73 68 4c 69 73 74 53 4c 69  | wap@4.@RtlInterlockedPushListSLi | 
| 14be0 |  73 74 40 31 36 00 5f 5f 69 6d 70 5f 40 52 74 6c    49 6e 74 65 72 6c 6f 63 6b 65 64 50 75 73 68 4c  | st@16.__imp_@RtlInterlockedPushL | 
| 14c00 |  69 73 74 53 4c 69 73 74 40 31 36 00 40 52 74 6c    44 65 61 63 74 69 76 61 74 65 41 63 74 69 76 61  | istSList@16.@RtlDeactivateActiva | 
| 14c20 |  74 69 6f 6e 43 6f 6e 74 65 78 74 55 6e 73 61 66    65 46 61 73 74 40 34 00 5f 5f 69 6d 70 5f 40 52  | tionContextUnsafeFast@4.__imp_@R | 
| 14c40 |  74 6c 44 65 61 63 74 69 76 61 74 65 41 63 74 69    76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 55 6e 73  | tlDeactivateActivationContextUns | 
| 14c60 |  61 66 65 46 61 73 74 40 34 00 40 52 74 6c 41 63    74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e  | afeFast@4.@RtlActivateActivation | 
| 14c80 |  43 6f 6e 74 65 78 74 55 6e 73 61 66 65 46 61 73    74 40 38 00 5f 5f 69 6d 70 5f 40 52 74 6c 41 63  | ContextUnsafeFast@8.__imp_@RtlAc | 
| 14ca0 |  74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e    43 6f 6e 74 65 78 74 55 6e 73 61 66 65 46 61 73  | tivateActivationContextUnsafeFas | 
| 14cc0 |  74 40 38 00 3f 52 74 6c 43 6f 6e 76 65 72 74 56    61 72 69 61 6e 74 54 6f 50 72 6f 70 65 72 74 79  | t@8.?RtlConvertVariantToProperty | 
| 14ce0 |  40 40 59 47 50 41 55 74 61 67 53 45 52 49 41 4c    49 5a 45 44 50 52 4f 50 45 52 54 59 56 41 4c 55  | @@YGPAUtagSERIALIZEDPROPERTYVALU | 
| 14d00 |  45 40 40 50 42 55 74 61 67 50 52 4f 50 56 41 52    49 41 4e 54 40 40 47 50 41 55 31 40 50 41 4b 4b  | E@@PBUtagPROPVARIANT@@GPAU1@PAKK | 
| 14d20 |  45 32 40 5a 00 5f 5f 69 6d 70 5f 3f 52 74 6c 43    6f 6e 76 65 72 74 56 61 72 69 61 6e 74 54 6f 50  | E2@Z.__imp_?RtlConvertVariantToP | 
| 14d40 |  72 6f 70 65 72 74 79 40 40 59 47 50 41 55 74 61    67 53 45 52 49 41 4c 49 5a 45 44 50 52 4f 50 45  | roperty@@YGPAUtagSERIALIZEDPROPE | 
| 14d60 |  52 54 59 56 41 4c 55 45 40 40 50 42 55 74 61 67    50 52 4f 50 56 41 52 49 41 4e 54 40 40 47 50 41  | RTYVALUE@@PBUtagPROPVARIANT@@GPA | 
| 14d80 |  55 31 40 50 41 4b 4b 45 32 40 5a 00 3f 52 74 6c    43 6f 6e 76 65 72 74 50 72 6f 70 65 72 74 79 54  | U1@PAKKE2@Z.?RtlConvertPropertyT | 
| 14da0 |  6f 56 61 72 69 61 6e 74 40 40 59 47 45 50 42 55    74 61 67 53 45 52 49 41 4c 49 5a 45 44 50 52 4f  | oVariant@@YGEPBUtagSERIALIZEDPRO | 
| 14dc0 |  50 45 52 54 59 56 41 4c 55 45 40 40 47 50 41 55    74 61 67 50 52 4f 50 56 41 52 49 41 4e 54 40 40  | PERTYVALUE@@GPAUtagPROPVARIANT@@ | 
| 14de0 |  50 41 56 50 4d 65 6d 6f 72 79 41 6c 6c 6f 63 61    74 6f 72 40 40 40 5a 00 5f 5f 69 6d 70 5f 3f 52  | PAVPMemoryAllocator@@@Z.__imp_?R | 
| 14e00 |  74 6c 43 6f 6e 76 65 72 74 50 72 6f 70 65 72 74    79 54 6f 56 61 72 69 61 6e 74 40 40 59 47 45 50  | tlConvertPropertyToVariant@@YGEP | 
| 14e20 |  42 55 74 61 67 53 45 52 49 41 4c 49 5a 45 44 50    52 4f 50 45 52 54 59 56 41 4c 55 45 40 40 47 50  | BUtagSERIALIZEDPROPERTYVALUE@@GP | 
| 14e40 |  41 55 74 61 67 50 52 4f 50 56 41 52 49 41 4e 54    40 40 50 41 56 50 4d 65 6d 6f 72 79 41 6c 6c 6f  | AUtagPROPVARIANT@@PAVPMemoryAllo | 
| 14e60 |  63 61 74 6f 72 40 40 40 5a 00 3f 50 72 6f 70 65    72 74 79 4c 65 6e 67 74 68 41 73 56 61 72 69 61  | cator@@@Z.?PropertyLengthAsVaria | 
| 14e80 |  6e 74 40 40 59 47 4b 50 42 55 74 61 67 53 45 52    49 41 4c 49 5a 45 44 50 52 4f 50 45 52 54 59 56  | nt@@YGKPBUtagSERIALIZEDPROPERTYV | 
| 14ea0 |  41 4c 55 45 40 40 4b 47 45 40 5a 00 5f 5f 69 6d    70 5f 3f 50 72 6f 70 65 72 74 79 4c 65 6e 67 74  | ALUE@@KGE@Z.__imp_?PropertyLengt | 
| 14ec0 |  68 41 73 56 61 72 69 61 6e 74 40 40 59 47 4b 50    42 55 74 61 67 53 45 52 49 41 4c 49 5a 45 44 50  | hAsVariant@@YGKPBUtagSERIALIZEDP | 
| 14ee0 |  52 4f 50 45 52 54 59 56 41 4c 55 45 40 40 4b 47    45 40 5a 00 7f 6e 74 64 6c 6c 5f 4e 55 4c 4c 5f  | ROPERTYVALUE@@KGE@Z..ntdll_NULL_ | 
| 14f00 |  54 48 55 4e 4b 5f 44 41 54 41 00 5f 5f 4e 55 4c    4c 5f 49 4d 50 4f 52 54 5f 44 45 53 43 52 49 50  | THUNK_DATA.__NULL_IMPORT_DESCRIP | 
| 14f20 |  54 4f 52 00 5f 5f 49 4d 50 4f 52 54 5f 44 45 53    43 52 49 50 54 4f 52 5f 6e 74 64 6c 6c 00 3f 3f  | TOR.__IMPORT_DESCRIPTOR_ntdll.?? | 
| 14f40 |  5f 43 40 5f 31 33 43 47 4f 4b 4a 50 49 4c 40 3f    24 41 41 3f 31 3f 24 41 41 3f 24 41 41 40 00 3f  | _C@_13CGOKJPIL@?$AA?1?$AA?$AA@.? | 
| 14f60 |  3f 5f 43 40 5f 31 33 46 50 47 41 4a 41 50 4a 40    3f 24 41 41 3f 32 3f 24 41 41 3f 24 41 41 40 00  | ?_C@_13FPGAJAPJ@?$AA?2?$AA?$AA@. | 
| 14f80 |  3f 3f 5f 43 40 5f 31 35 4d 4e 43 41 43 4a 4c 49    40 3f 24 41 41 3f 32 3f 24 41 41 3f 31 3f 24 41  | ??_C@_15MNCACJLI@?$AA?2?$AA?1?$A | 
| 14fa0 |  41 3f 24 41 41 40 00 5f 45 48 5f 56 69 72 74 75    61 6c 51 75 65 72 79 40 31 32 00 5f 52 74 6c 41  | A?$AA@._EH_VirtualQuery@12._RtlA | 
| 14fc0 |  6c 74 65 72 6e 61 74 65 44 6f 73 50 61 74 68 53    65 70 65 72 61 74 6f 72 53 74 72 69 6e 67 00 5f  | lternateDosPathSeperatorString._ | 
| 14fe0 |  52 74 6c 44 6f 73 50 61 74 68 53 65 70 65 72 61    74 6f 72 73 53 74 72 69 6e 67 00 5f 52 74 6c 4e  | RtlDosPathSeperatorsString._RtlN | 
| 15000 |  74 50 61 74 68 53 65 70 65 72 61 74 6f 72 53 74    72 69 6e 67 00 5f 5f 56 61 6c 69 64 61 74 65 45  | tPathSeperatorString.__ValidateE | 
| 15020 |  48 33 52 4e 00 5f 5f 4e 4c 47 5f 44 65 73 74 69    6e 61 74 69 6f 6e 00 5f 5f 4e 4c 47 5f 44 69 73  | H3RN.__NLG_Destination.__NLG_Dis | 
| 15040 |  70 61 74 63 68 00 5f 5f 4e 4c 47 5f 44 69 73 70    61 74 63 68 32 00 5f 5f 4e 4c 47 5f 4e 6f 74 69  | patch.__NLG_Dispatch2.__NLG_Noti | 
| 15060 |  66 79 00 5f 5f 4e 4c 47 5f 4e 6f 74 69 66 79 31    00 5f 5f 4e 4c 47 5f 52 65 74 75 72 6e 32 00 5f  | fy.__NLG_Notify1.__NLG_Return2._ | 
| 15080 |  5f 61 62 6e 6f 72 6d 61 6c 5f 74 65 72 6d 69 6e    61 74 69 6f 6e 00 5f 5f 65 78 63 65 70 74 5f 6c  | _abnormal_termination.__except_l | 
| 150a0 |  69 73 74 00 5f 5f 67 6c 6f 62 61 6c 5f 75 6e 77    69 6e 64 32 00 5f 5f 6c 6f 63 61 6c 5f 75 6e 77  | ist.__global_unwind2.__local_unw | 
| 150c0 |  69 6e 64 32 00 5f 5f 65 78 63 65 70 74 5f 68 61    6e 64 6c 65 72 32 00 5f 5f 65 78 63 65 70 74 5f  | ind2.__except_handler2.__except_ | 
| 150e0 |  68 61 6e 64 6c 65 72 33 00 5f 5f 73 65 68 5f 6c    6f 6e 67 6a 6d 70 5f 75 6e 77 69 6e 64 40 34 00  | handler3.__seh_longjmp_unwind@4. | 
| 15100 |  5f 5f 72 74 5f 70 72 6f 62 65 5f 72 65 61 64 34    40 34 00 5f 5f 73 65 74 6a 6d 70 00 5f 5f 73 65  | __rt_probe_read4@4.__setjmp.__se | 
| 15120 |  74 6a 6d 70 33 00 5f 5f 6c 6f 6e 67 6a 6d 70 65    78 00 5f 5f 73 65 74 6a 6d 70 65 78 75 73 65 64  | tjmp3.__longjmpex.__setjmpexused | 
| 15140 |  00 5f 6c 6f 6e 67 6a 6d 70 00 5f 5f 6c 6f 61 64    5f 63 6f 6e 66 69 67 5f 75 73 65 64 00 5f 5f 66  | ._longjmp.__load_config_used.__f | 
| 15160 |  74 6f 6c 32 00 5f 5f 53 45 48 5f 65 70 69 6c 6f    67 00 5f 5f 53 45 48 5f 70 72 6f 6c 6f 67 00 0a  | tol2.__SEH_epilog.__SEH_prolog.. | 
| 15180 |  2f 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | /...............1099622597...... | 
| 151a0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    38 36 33 32 37 20 20 20 20 20 60 0a 83 05 00 00  | ........0.......86327.....`..... | 
| 151c0 |  60 a5 02 00 c4 a5 02 00 28 a6 02 00 8a a6 02 00    ec a6 02 00 4e a7 02 00 b2 a7 02 00 16 a8 02 00  | `.......(...........N........... | 
| 151e0 |  7a a8 02 00 de a8 02 00 42 a9 02 00 a4 a9 02 00    08 aa 02 00 6a aa 02 00 cc aa 02 00 2e ab 02 00  | z.......B...........j........... | 
| 15200 |  90 ab 02 00 f4 ab 02 00 68 ac 02 00 d2 ac 02 00    36 ad 02 00 9a ad 02 00 fe ad 02 00 62 ae 02 00  | ........h.......6...........b... | 
| 15220 |  c2 ae 02 00 26 af 02 00 8a af 02 00 ec af 02 00    4e b0 02 00 b0 b0 02 00 14 b1 02 00 78 b1 02 00  | ....&...........N...........x... | 
| 15240 |  dc b1 02 00 40 b2 02 00 a4 b2 02 00 06 b3 02 00    6a b3 02 00 cc b3 02 00 2e b4 02 00 90 b4 02 00  | ....@...........j............... | 
| 15260 |  f2 b4 02 00 54 b5 02 00 b4 b5 02 00 18 b6 02 00    78 b6 02 00 da b6 02 00 3a b7 02 00 9c b7 02 00  | ....T...........x.......:....... | 
| 15280 |  00 b8 02 00 62 b8 02 00 c4 b8 02 00 26 b9 02 00    8a b9 02 00 ea b9 02 00 4a ba 02 00 ae ba 02 00  | ....b.......&...........J....... | 
| 152a0 |  14 bb 02 00 78 bb 02 00 dc bb 02 00 40 bc 02 00    a4 bc 02 00 08 bd 02 00 6c bd 02 00 d0 bd 02 00  | ....x.......@...........l....... | 
| 152c0 |  34 be 02 00 98 be 02 00 fc be 02 00 60 bf 02 00    c4 bf 02 00 28 c0 02 00 8c c0 02 00 f0 c0 02 00  | 4...........`.......(........... | 
| 152e0 |  52 c1 02 00 b2 c1 02 00 12 c2 02 00 72 c2 02 00    d6 c2 02 00 36 c3 02 00 96 c3 02 00 f6 c3 02 00  | R...........r.......6........... | 
| 15300 |  56 c4 02 00 b8 c4 02 00 1c c5 02 00 7e c5 02 00    e2 c5 02 00 48 c6 02 00 ae c6 02 00 12 c7 02 00  | V...........~.......H........... | 
| 15320 |  76 c7 02 00 de c7 02 00 44 c8 02 00 ac c8 02 00    0e c9 02 00 70 c9 02 00 d4 c9 02 00 38 ca 02 00  | v.......D...........p.......8... | 
| 15340 |  9c ca 02 00 00 cb 02 00 64 cb 02 00 ca cb 02 00    2e cc 02 00 92 cc 02 00 f6 cc 02 00 5c cd 02 00  | ........d...................\... | 
| 15360 |  c2 cd 02 00 28 ce 02 00 8c ce 02 00 f0 ce 02 00    52 cf 02 00 b4 cf 02 00 16 d0 02 00 78 d0 02 00  | ....(...........R...........x... | 
| 15380 |  da d0 02 00 3e d1 02 00 a2 d1 02 00 04 d2 02 00    68 d2 02 00 cc d2 02 00 30 d3 02 00 94 d3 02 00  | ....>...........h.......0....... | 
| 153a0 |  fa d3 02 00 5e d4 02 00 c2 d4 02 00 26 d5 02 00    8a d5 02 00 ee d5 02 00 58 d6 02 00 bc d6 02 00  | ....^.......&...........X....... | 
| 153c0 |  20 d7 02 00 84 d7 02 00 ea d7 02 00 50 d8 02 00    b4 d8 02 00 1a d9 02 00 7e d9 02 00 e0 d9 02 00  | ............P...........~....... | 
| 153e0 |  42 da 02 00 a4 da 02 00 06 db 02 00 74 db 02 00    e8 db 02 00 5a dc 02 00 ca dc 02 00 34 dd 02 00  | B...........t.......Z.......4... | 
| 15400 |  a4 dd 02 00 16 de 02 00 8a de 02 00 02 df 02 00    7c df 02 00 ee df 02 00 60 e0 02 00 ca e0 02 00  | ................|.......`....... | 
| 15420 |  3c e1 02 00 b0 e1 02 00 1c e2 02 00 88 e2 02 00    f2 e2 02 00 5c e3 02 00 c8 e3 02 00 3a e4 02 00  | <...................\.......:... | 
| 15440 |  a6 e4 02 00 10 e5 02 00 80 e5 02 00 f0 e5 02 00    62 e6 02 00 d6 e6 02 00 44 e7 02 00 b2 e7 02 00  | ................b.......D....... | 
| 15460 |  1e e8 02 00 8a e8 02 00 08 e9 02 00 76 e9 02 00    f0 e9 02 00 5c ea 02 00 c8 ea 02 00 3c eb 02 00  | ............v.......\.......<... | 
| 15480 |  a6 eb 02 00 1e ec 02 00 8c ec 02 00 00 ed 02 00    76 ed 02 00 f2 ed 02 00 6c ee 02 00 de ee 02 00  | ................v.......l....... | 
| 154a0 |  56 ef 02 00 ce ef 02 00 3e f0 02 00 ac f0 02 00    1c f1 02 00 8e f1 02 00 02 f2 02 00 78 f2 02 00  | V.......>...................x... | 
| 154c0 |  ee f2 02 00 64 f3 02 00 d6 f3 02 00 4e f4 02 00    c2 f4 02 00 3c f5 02 00 b4 f5 02 00 24 f6 02 00  | ....d.......N.......<.......$... | 
| 154e0 |  9a f6 02 00 02 f7 02 00 6c f7 02 00 e0 f7 02 00    54 f8 02 00 c4 f8 02 00 3c f9 02 00 b0 f9 02 00  | ........l.......T.......<....... | 
| 15500 |  20 fa 02 00 8e fa 02 00 00 fb 02 00 72 fb 02 00    e2 fb 02 00 4c fc 02 00 b4 fc 02 00 20 fd 02 00  | ............r.......L........... | 
| 15520 |  8e fd 02 00 fa fd 02 00 6a fe 02 00 d4 fe 02 00    48 ff 02 00 be ff 02 00 2a 00 03 00 9e 00 03 00  | ........j.......H.......*....... | 
| 15540 |  10 01 03 00 88 01 03 00 fe 01 03 00 68 02 03 00    d4 02 03 00 3e 03 03 00 b0 03 03 00 24 04 03 00  | ............h.......>.......$... | 
| 15560 |  96 04 03 00 04 05 03 00 76 05 03 00 f2 05 03 00    64 06 03 00 d4 06 03 00 44 07 03 00 ae 07 03 00  | ........v.......d.......D....... | 
| 15580 |  1e 08 03 00 8e 08 03 00 fe 08 03 00 7a 09 03 00    ee 09 03 00 5c 0a 03 00 d2 0a 03 00 3e 0b 03 00  | ............z.......\.......>... | 
| 155a0 |  ae 0b 03 00 26 0c 03 00 a4 0c 03 00 20 0d 03 00    98 0d 03 00 08 0e 03 00 7c 0e 03 00 ea 0e 03 00  | ....&...................|....... | 
| 155c0 |  64 0f 03 00 e0 0f 03 00 58 10 03 00 cc 10 03 00    3c 11 03 00 a8 11 03 00 14 12 03 00 8a 12 03 00  | d.......X.......<............... | 
| 155e0 |  f4 12 03 00 66 13 03 00 da 13 03 00 50 14 03 00    c6 14 03 00 3e 15 03 00 b6 15 03 00 2c 16 03 00  | ....f.......P.......>.......,... | 
| 15600 |  a6 16 03 00 1c 17 03 00 92 17 03 00 0a 18 03 00    76 18 03 00 e2 18 03 00 58 19 03 00 ce 19 03 00  | ................v.......X....... | 
| 15620 |  42 1a 03 00 b8 1a 03 00 2a 1b 03 00 a0 1b 03 00    10 1c 03 00 84 1c 03 00 f8 1c 03 00 62 1d 03 00  | B.......*...................b... | 
| 15640 |  d8 1d 03 00 54 1e 03 00 ce 1e 03 00 3e 1f 03 00    b0 1f 03 00 20 20 03 00 8a 20 03 00 fc 20 03 00  | ....T.......>................... | 
| 15660 |  6c 21 03 00 d8 21 03 00 50 22 03 00 be 22 03 00    2a 23 03 00 9e 23 03 00 10 24 03 00 7c 24 03 00  | l!...!..P"..."..*#...#...$..|$.. | 
| 15680 |  f2 24 03 00 5e 25 03 00 ce 25 03 00 36 26 03 00    a4 26 03 00 16 27 03 00 80 27 03 00 ee 27 03 00  | .$..^%...%..6&...&...'...'...'.. | 
| 156a0 |  58 28 03 00 cc 28 03 00 46 29 03 00 b6 29 03 00    30 2a 03 00 a2 2a 03 00 12 2b 03 00 84 2b 03 00  | X(...(..F)...)..0*...*...+...+.. | 
| 156c0 |  00 2c 03 00 76 2c 03 00 ea 2c 03 00 5e 2d 03 00    d0 2d 03 00 40 2e 03 00 ba 2e 03 00 24 2f 03 00  | .,..v,...,..^-...-..@.......$/.. | 
| 156e0 |  8e 2f 03 00 f6 2f 03 00 60 30 03 00 ca 30 03 00    34 31 03 00 ac 31 03 00 1a 32 03 00 8e 32 03 00  | ./.../..`0...0..41...1...2...2.. | 
| 15700 |  00 33 03 00 72 33 03 00 ea 33 03 00 64 34 03 00    d2 34 03 00 44 35 03 00 b8 35 03 00 32 36 03 00  | .3..r3...3..d4...4..D5...5..26.. | 
| 15720 |  a2 36 03 00 10 37 03 00 82 37 03 00 f8 37 03 00    68 38 03 00 dc 38 03 00 44 39 03 00 ba 39 03 00  | .6...7...7...7..h8...8..D9...9.. | 
| 15740 |  2a 3a 03 00 94 3a 03 00 00 3b 03 00 6e 3b 03 00    e0 3b 03 00 64 3c 03 00 d2 3c 03 00 48 3d 03 00  | *:...:...;..n;...;..d<...<..H=.. | 
| 15760 |  bc 3d 03 00 2c 3e 03 00 9c 3e 03 00 0a 3f 03 00    7e 3f 03 00 ec 3f 03 00 64 40 03 00 ce 40 03 00  | .=..,>...>...?..~?...?..d@...@.. | 
| 15780 |  38 41 03 00 aa 41 03 00 1a 42 03 00 84 42 03 00    f2 42 03 00 60 43 03 00 d2 43 03 00 46 44 03 00  | 8A...A...B...B...B..`C...C..FD.. | 
| 157a0 |  b2 44 03 00 1e 45 03 00 8c 45 03 00 06 46 03 00    76 46 03 00 e4 46 03 00 52 47 03 00 c2 47 03 00  | .D...E...E...F..vF...F..RG...G.. | 
| 157c0 |  30 48 03 00 9c 48 03 00 0e 49 03 00 82 49 03 00    f0 49 03 00 64 4a 03 00 d6 4a 03 00 40 4b 03 00  | 0H...H...I...I...I..dJ...J..@K.. | 
| 157e0 |  ae 4b 03 00 1e 4c 03 00 92 4c 03 00 fe 4c 03 00    6e 4d 03 00 da 4d 03 00 50 4e 03 00 c2 4e 03 00  | .K...L...L...L..nM...M..PN...N.. | 
| 15800 |  2a 4f 03 00 96 4f 03 00 02 50 03 00 76 50 03 00    e4 50 03 00 50 51 03 00 c6 51 03 00 2c 52 03 00  | *O...O...P..vP...P..PQ...Q..,R.. | 
| 15820 |  96 52 03 00 02 53 03 00 6e 53 03 00 e8 53 03 00    58 54 03 00 d0 54 03 00 46 55 03 00 ba 55 03 00  | .R...S..nS...S..XT...T..FU...U.. | 
| 15840 |  30 56 03 00 9e 56 03 00 18 57 03 00 90 57 03 00    fc 57 03 00 6e 58 03 00 e4 58 03 00 56 59 03 00  | 0V...V...W...W...W..nX...X..VY.. | 
| 15860 |  c4 59 03 00 30 5a 03 00 98 5a 03 00 2a 5b 03 00    b4 5b 03 00 30 5c 03 00 b0 5c 03 00 22 5d 03 00  | .Y..0Z...Z..*[...[..0\...\.."].. | 
| 15880 |  9c 5d 03 00 08 5e 03 00 7a 5e 03 00 ec 5e 03 00    64 5f 03 00 de 5f 03 00 56 60 03 00 d0 60 03 00  | .]...^..z^...^..d_..._..V`...`.. | 
| 158a0 |  48 61 03 00 c0 61 03 00 30 62 03 00 a2 62 03 00    0e 63 03 00 82 63 03 00 f6 63 03 00 64 64 03 00  | Ha...a..0b...b...c...c...c..dd.. | 
| 158c0 |  de 64 03 00 52 65 03 00 c8 65 03 00 42 66 03 00    ae 66 03 00 18 67 03 00 8c 67 03 00 00 68 03 00  | .d..Re...e..Bf...f...g...g...h.. | 
| 158e0 |  7c 68 03 00 f6 68 03 00 60 69 03 00 d0 69 03 00    44 6a 03 00 ba 6a 03 00 30 6b 03 00 9e 6b 03 00  | |h...h..`i...i..Dj...j..0k...k.. | 
| 15900 |  08 6c 03 00 80 6c 03 00 02 6d 03 00 6c 6d 03 00    d8 6d 03 00 44 6e 03 00 ae 6e 03 00 1c 6f 03 00  | .l...l...m..lm...m..Dn...n...o.. | 
| 15920 |  92 6f 03 00 0e 70 03 00 88 70 03 00 08 71 03 00    90 71 03 00 12 72 03 00 88 72 03 00 fa 72 03 00  | .o...p...p...q...q...r...r...r.. | 
| 15940 |  62 73 03 00 dc 73 03 00 48 74 03 00 be 74 03 00    26 75 03 00 96 75 03 00 0e 76 03 00 84 76 03 00  | bs...s..Ht...t..&u...u...v...v.. | 
| 15960 |  f8 76 03 00 72 77 03 00 ea 77 03 00 62 78 03 00    e4 78 03 00 60 79 03 00 d8 79 03 00 52 7a 03 00  | .v..rw...w..bx...x..`y...y..Rz.. | 
| 15980 |  cc 7a 03 00 44 7b 03 00 ba 7b 03 00 2e 7c 03 00    a0 7c 03 00 14 7d 03 00 8c 7d 03 00 02 7e 03 00  | .z..D{...{...|...|...}...}...~.. | 
| 159a0 |  78 7e 03 00 ea 7e 03 00 5c 7f 03 00 d4 7f 03 00    4c 80 03 00 c4 80 03 00 36 81 03 00 ac 81 03 00  | x~...~..\.......L.......6....... | 
| 159c0 |  1e 82 03 00 92 82 03 00 02 83 03 00 78 83 03 00    e8 83 03 00 5a 84 03 00 c6 84 03 00 2c 85 03 00  | ............x.......Z.......,... | 
| 159e0 |  96 85 03 00 08 86 03 00 7a 86 03 00 ee 86 03 00    6a 87 03 00 d4 87 03 00 4c 88 03 00 c4 88 03 00  | ........z.......j.......L....... | 
| 15a00 |  36 89 03 00 aa 89 03 00 20 8a 03 00 94 8a 03 00    14 8b 03 00 90 8b 03 00 04 8c 03 00 80 8c 03 00  | 6............................... | 
| 15a20 |  f6 8c 03 00 80 8d 03 00 f2 8d 03 00 6c 8e 03 00    e0 8e 03 00 54 8f 03 00 d0 8f 03 00 48 90 03 00  | ............l.......T.......H... | 
| 15a40 |  be 90 03 00 3a 91 03 00 b0 91 03 00 26 92 03 00    a2 92 03 00 20 93 03 00 8a 93 03 00 0c 94 03 00  | ....:.......&................... | 
| 15a60 |  78 94 03 00 f2 94 03 00 6c 95 03 00 de 95 03 00    56 96 03 00 ce 96 03 00 46 97 03 00 be 97 03 00  | x.......l.......V.......F....... | 
| 15a80 |  32 98 03 00 a8 98 03 00 1e 99 03 00 9e 99 03 00    1c 9a 03 00 88 9a 03 00 f8 9a 03 00 6c 9b 03 00  | 2...........................l... | 
| 15aa0 |  de 9b 03 00 4e 9c 03 00 c2 9c 03 00 3c 9d 03 00    aa 9d 03 00 2c 9e 03 00 9a 9e 03 00 0a 9f 03 00  | ....N.......<.......,........... | 
| 15ac0 |  88 9f 03 00 fa 9f 03 00 6a a0 03 00 d4 a0 03 00    3c a1 03 00 a8 a1 03 00 18 a2 03 00 88 a2 03 00  | ........j.......<............... | 
| 15ae0 |  fe a2 03 00 78 a3 03 00 e6 a3 03 00 5c a4 03 00    d2 a4 03 00 4e a5 03 00 ca a5 03 00 48 a6 03 00  | ....x.......\.......N.......H... | 
| 15b00 |  ca a6 03 00 46 a7 03 00 d0 a7 03 00 54 a8 03 00    ca a8 03 00 40 a9 03 00 bc a9 03 00 2c aa 03 00  | ....F.......T.......@.......,... | 
| 15b20 |  a2 aa 03 00 0c ab 03 00 78 ab 03 00 ee ab 03 00    5c ac 03 00 c6 ac 03 00 3a ad 03 00 aa ad 03 00  | ........x.......\.......:....... | 
| 15b40 |  1a ae 03 00 8a ae 03 00 04 af 03 00 7c af 03 00    ec af 03 00 5e b0 03 00 dc b0 03 00 58 b1 03 00  | ............|.......^.......X... | 
| 15b60 |  d0 b1 03 00 44 b2 03 00 be b2 03 00 36 b3 03 00    c0 b3 03 00 36 b4 03 00 aa b4 03 00 24 b5 03 00  | ....D.......6.......6.......$... | 
| 15b80 |  a0 b5 03 00 12 b6 03 00 88 b6 03 00 00 b7 03 00    76 b7 03 00 f6 b7 03 00 62 b8 03 00 de b8 03 00  | ................v.......b....... | 
| 15ba0 |  4e b9 03 00 c2 b9 03 00 44 ba 03 00 c4 ba 03 00    42 bb 03 00 bc bb 03 00 34 bc 03 00 a6 bc 03 00  | N.......D.......B.......4....... | 
| 15bc0 |  1e bd 03 00 88 bd 03 00 fc bd 03 00 72 be 03 00    dc be 03 00 56 bf 03 00 c8 bf 03 00 3e c0 03 00  | ............r.......V.......>... | 
| 15be0 |  b2 c0 03 00 28 c1 03 00 a0 c1 03 00 18 c2 03 00    8c c2 03 00 00 c3 03 00 7e c3 03 00 f0 c3 03 00  | ....(...................~....... | 
| 15c00 |  64 c4 03 00 d2 c4 03 00 4e c5 03 00 be c5 03 00    34 c6 03 00 ac c6 03 00 20 c7 03 00 92 c7 03 00  | d.......N.......4............... | 
| 15c20 |  12 c8 03 00 8a c8 03 00 04 c9 03 00 7a c9 03 00    f2 c9 03 00 6a ca 03 00 e0 ca 03 00 56 cb 03 00  | ............z.......j.......V... | 
| 15c40 |  ce cb 03 00 46 cc 03 00 bc cc 03 00 32 cd 03 00    aa cd 03 00 22 ce 03 00 98 ce 03 00 0e cf 03 00  | ....F.......2......."........... | 
| 15c60 |  86 cf 03 00 fe cf 03 00 74 d0 03 00 ee d0 03 00    68 d1 03 00 de d1 03 00 5c d2 03 00 d4 d2 03 00  | ........t.......h.......\....... | 
| 15c80 |  44 d3 03 00 ba d3 03 00 3c d4 03 00 bc d4 03 00    3a d5 03 00 b6 d5 03 00 26 d6 03 00 9a d6 03 00  | D.......<.......:.......&....... | 
| 15ca0 |  0e d7 03 00 80 d7 03 00 f8 d7 03 00 74 d8 03 00    ec d8 03 00 72 d9 03 00 ec d9 03 00 60 da 03 00  | ............t.......r.......`... | 
| 15cc0 |  d2 da 03 00 48 db 03 00 bc db 03 00 2e dc 03 00    9a dc 03 00 18 dd 03 00 88 dd 03 00 fa dd 03 00  | ....H........................... | 
| 15ce0 |  6c de 03 00 de de 03 00 4e df 03 00 be df 03 00    2c e0 03 00 a0 e0 03 00 12 e1 03 00 80 e1 03 00  | l.......N.......,............... | 
| 15d00 |  fc e1 03 00 74 e2 03 00 e8 e2 03 00 54 e3 03 00    c6 e3 03 00 3a e4 03 00 ae e4 03 00 24 e5 03 00  | ....t.......T.......:.......$... | 
| 15d20 |  a4 e5 03 00 20 e6 03 00 90 e6 03 00 0c e7 03 00    82 e7 03 00 f4 e7 03 00 66 e8 03 00 e2 e8 03 00  | ........................f....... | 
| 15d40 |  5a e9 03 00 e2 e9 03 00 6e ea 03 00 e0 ea 03 00    50 eb 03 00 cc eb 03 00 44 ec 03 00 b8 ec 03 00  | Z.......n.......P.......D....... | 
| 15d60 |  22 ed 03 00 9c ed 03 00 14 ee 03 00 90 ee 03 00    0a ef 03 00 78 ef 03 00 ee ef 03 00 70 f0 03 00  | "...................x.......p... | 
| 15d80 |  ee f0 03 00 6c f1 03 00 de f1 03 00 5a f2 03 00    c2 f2 03 00 36 f3 03 00 a6 f3 03 00 1a f4 03 00  | ....l.......Z.......6........... | 
| 15da0 |  8c f4 03 00 0e f5 03 00 76 f5 03 00 e4 f5 03 00    4e f6 03 00 ba f6 03 00 2a f7 03 00 a6 f7 03 00  | ........v.......N.......*....... | 
| 15dc0 |  18 f8 03 00 88 f8 03 00 02 f9 03 00 7a f9 03 00    e8 f9 03 00 58 fa 03 00 ce fa 03 00 3c fb 03 00  | ............z.......X.......<... | 
| 15de0 |  b6 fb 03 00 2e fc 03 00 9c fc 03 00 10 fd 03 00    88 fd 03 00 02 fe 03 00 72 fe 03 00 e8 fe 03 00  | ........................r....... | 
| 15e00 |  58 ff 03 00 d2 ff 03 00 56 00 04 00 d8 00 04 00    5e 01 04 00 d0 01 04 00 3c 02 04 00 b2 02 04 00  | X.......V.......^.......<....... | 
| 15e20 |  2e 03 04 00 a8 03 04 00 14 04 04 00 90 04 04 00    00 05 04 00 74 05 04 00 e8 05 04 00 56 06 04 00  | ....................t.......V... | 
| 15e40 |  c0 06 04 00 30 07 04 00 9a 07 04 00 0a 08 04 00    7c 08 04 00 04 09 04 00 8a 09 04 00 10 0a 04 00  | ....0...........|............... | 
| 15e60 |  8a 0a 04 00 00 0b 04 00 72 0b 04 00 e8 0b 04 00    62 0c 04 00 da 0c 04 00 52 0d 04 00 c6 0d 04 00  | ........r.......b.......R....... | 
| 15e80 |  34 0e 04 00 bc 0e 04 00 2c 0f 04 00 a4 0f 04 00    12 10 04 00 8a 10 04 00 fe 10 04 00 72 11 04 00  | 4.......,...................r... | 
| 15ea0 |  e4 11 04 00 72 12 04 00 f6 12 04 00 7c 13 04 00    f8 13 04 00 80 14 04 00 f2 14 04 00 6e 15 04 00  | ....r.......|...............n... | 
| 15ec0 |  e4 15 04 00 60 16 04 00 d8 16 04 00 52 17 04 00    be 17 04 00 32 18 04 00 a6 18 04 00 18 19 04 00  | ....`.......R.......2........... | 
| 15ee0 |  8a 19 04 00 fa 19 04 00 6e 1a 04 00 e0 1a 04 00    4e 1b 04 00 c4 1b 04 00 34 1c 04 00 aa 1c 04 00  | ........n.......N.......4....... | 
| 15f00 |  18 1d 04 00 96 1d 04 00 10 1e 04 00 86 1e 04 00    fe 1e 04 00 68 1f 04 00 d0 1f 04 00 3e 20 04 00  | ....................h.......>... | 
| 15f20 |  b2 20 04 00 24 21 04 00 98 21 04 00 06 22 04 00    76 22 04 00 f2 22 04 00 6c 23 04 00 e6 23 04 00  | ....$!...!..."..v"..."..l#...#.. | 
| 15f40 |  5a 24 04 00 cc 24 04 00 46 25 04 00 ba 25 04 00    38 26 04 00 ac 26 04 00 1e 27 04 00 8c 27 04 00  | Z$...$..F%...%..8&...&...'...'.. | 
| 15f60 |  fc 27 04 00 80 28 04 00 fa 28 04 00 6c 29 04 00    e4 29 04 00 5e 2a 04 00 ca 2a 04 00 3c 2b 04 00  | .'...(...(..l)...)..^*...*..<+.. | 
| 15f80 |  b6 2b 04 00 26 2c 04 00 96 2c 04 00 10 2d 04 00    7c 2d 04 00 ee 2d 04 00 5a 2e 04 00 d6 2e 04 00  | .+..&,...,...-..|-...-..Z....... | 
| 15fa0 |  40 2f 04 00 b8 2f 04 00 38 30 04 00 ac 30 04 00    1e 31 04 00 9a 31 04 00 04 32 04 00 80 32 04 00  | @/.../..80...0...1...1...2...2.. | 
| 15fc0 |  f8 32 04 00 7c 33 04 00 f8 33 04 00 72 34 04 00    ec 34 04 00 66 35 04 00 e2 35 04 00 5e 36 04 00  | .2..|3...3..r4...4..f5...5..^6.. | 
| 15fe0 |  d6 36 04 00 44 37 04 00 b4 37 04 00 2a 38 04 00    9a 38 04 00 0e 39 04 00 7e 39 04 00 ea 39 04 00  | .6..D7...7..*8...8...9..~9...9.. | 
| 16000 |  5e 3a 04 00 d0 3a 04 00 3c 3b 04 00 aa 3b 04 00    1c 3c 04 00 94 3c 04 00 16 3d 04 00 86 3d 04 00  | ^:...:..<;...;...<...<...=...=.. | 
| 16020 |  fc 3d 04 00 74 3e 04 00 e4 3e 04 00 50 3f 04 00    b8 3f 04 00 24 40 04 00 92 40 04 00 08 41 04 00  | .=..t>...>..P?...?..$@...@...A.. | 
| 16040 |  7e 41 04 00 f0 41 04 00 5c 42 04 00 d6 42 04 00    4c 43 04 00 c8 43 04 00 3e 44 04 00 b2 44 04 00  | ~A...A..\B...B..LC...C..>D...D.. | 
| 16060 |  28 45 04 00 a4 45 04 00 1c 46 04 00 92 46 04 00    00 47 04 00 70 47 04 00 ea 47 04 00 6a 48 04 00  | (E...E...F...F...G..pG...G..jH.. | 
| 16080 |  dc 48 04 00 54 49 04 00 d0 49 04 00 4c 4a 04 00    c0 4a 04 00 38 4b 04 00 a8 4b 04 00 22 4c 04 00  | .H..TI...I..LJ...J..8K...K.."L.. | 
| 160a0 |  98 4c 04 00 0c 4d 04 00 88 4d 04 00 fc 4d 04 00    6e 4e 04 00 d6 4e 04 00 50 4f 04 00 c6 4f 04 00  | .L...M...M...M..nN...N..PO...O.. | 
| 160c0 |  3a 50 04 00 b6 50 04 00 2e 51 04 00 a4 51 04 00    22 52 04 00 9e 52 04 00 14 53 04 00 8e 53 04 00  | :P...P...Q...Q.."R...R...S...S.. | 
| 160e0 |  00 54 04 00 70 54 04 00 ea 54 04 00 56 55 04 00    c4 55 04 00 32 56 04 00 9e 56 04 00 0a 57 04 00  | .T..pT...T..VU...U..2V...V...W.. | 
| 16100 |  78 57 04 00 ec 57 04 00 5e 58 04 00 ce 58 04 00    38 59 04 00 a8 59 04 00 1a 5a 04 00 8e 5a 04 00  | xW...W..^X...X..8Y...Y...Z...Z.. | 
| 16120 |  06 5b 04 00 80 5b 04 00 f2 5b 04 00 64 5c 04 00    ce 5c 04 00 40 5d 04 00 b4 5d 04 00 20 5e 04 00  | .[...[...[..d\...\..@]...]...^.. | 
| 16140 |  8c 5e 04 00 f6 5e 04 00 60 5f 04 00 cc 5f 04 00    3e 60 04 00 aa 60 04 00 14 61 04 00 84 61 04 00  | .^...^..`_..._..>`...`...a...a.. | 
| 16160 |  f4 61 04 00 66 62 04 00 da 62 04 00 48 63 04 00    b6 63 04 00 22 64 04 00 8e 64 04 00 0c 65 04 00  | .a..fb...b..Hc...c.."d...d...e.. | 
| 16180 |  7a 65 04 00 f4 65 04 00 60 66 04 00 cc 66 04 00    40 67 04 00 aa 67 04 00 22 68 04 00 90 68 04 00  | ze...e..`f...f..@g...g.."h...h.. | 
| 161a0 |  04 69 04 00 7a 69 04 00 f6 69 04 00 70 6a 04 00    e2 6a 04 00 5a 6b 04 00 d2 6b 04 00 42 6c 04 00  | .i..zi...i..pj...j..Zk...k..Bl.. | 
| 161c0 |  b0 6c 04 00 20 6d 04 00 92 6d 04 00 06 6e 04 00    7c 6e 04 00 f2 6e 04 00 68 6f 04 00 da 6f 04 00  | .l...m...m...n..|n...n..ho...o.. | 
| 161e0 |  52 70 04 00 c6 70 04 00 40 71 04 00 b8 71 04 00    28 72 04 00 9e 72 04 00 06 73 04 00 70 73 04 00  | Rp...p..@q...q..(r...r...s..ps.. | 
| 16200 |  e4 73 04 00 58 74 04 00 c8 74 04 00 40 75 04 00    b4 75 04 00 24 76 04 00 92 76 04 00 04 77 04 00  | .s..Xt...t..@u...u..$v...v...w.. | 
| 16220 |  76 77 04 00 e6 77 04 00 50 78 04 00 b8 78 04 00    24 79 04 00 92 79 04 00 fe 79 04 00 6e 7a 04 00  | vw...w..Px...x..$y...y...y..nz.. | 
| 16240 |  d8 7a 04 00 4c 7b 04 00 c2 7b 04 00 2e 7c 04 00    a2 7c 04 00 14 7d 04 00 8c 7d 04 00 02 7e 04 00  | .z..L{...{...|...|...}...}...~.. | 
| 16260 |  6c 7e 04 00 d8 7e 04 00 42 7f 04 00 b4 7f 04 00    28 80 04 00 9a 80 04 00 08 81 04 00 7a 81 04 00  | l~...~..B.......(...........z... | 
| 16280 |  f6 81 04 00 68 82 04 00 d8 82 04 00 48 83 04 00    b2 83 04 00 22 84 04 00 92 84 04 00 02 85 04 00  | ....h.......H......."........... | 
| 162a0 |  7e 85 04 00 f2 85 04 00 60 86 04 00 d6 86 04 00    42 87 04 00 b2 87 04 00 2a 88 04 00 a8 88 04 00  | ~.......`.......B.......*....... | 
| 162c0 |  24 89 04 00 9c 89 04 00 0c 8a 04 00 80 8a 04 00    ee 8a 04 00 68 8b 04 00 e4 8b 04 00 5c 8c 04 00  | $...................h.......\... | 
| 162e0 |  d0 8c 04 00 40 8d 04 00 ac 8d 04 00 18 8e 04 00    8e 8e 04 00 f8 8e 04 00 6a 8f 04 00 de 8f 04 00  | ....@...................j....... | 
| 16300 |  54 90 04 00 ca 90 04 00 42 91 04 00 ba 91 04 00    30 92 04 00 aa 92 04 00 20 93 04 00 96 93 04 00  | T.......B.......0............... | 
| 16320 |  0e 94 04 00 7a 94 04 00 e6 94 04 00 5c 95 04 00    d2 95 04 00 46 96 04 00 bc 96 04 00 2e 97 04 00  | ....z.......\.......F........... | 
| 16340 |  a4 97 04 00 14 98 04 00 88 98 04 00 fc 98 04 00    66 99 04 00 dc 99 04 00 58 9a 04 00 d2 9a 04 00  | ................f.......X....... | 
| 16360 |  42 9b 04 00 b4 9b 04 00 24 9c 04 00 8e 9c 04 00    00 9d 04 00 70 9d 04 00 dc 9d 04 00 54 9e 04 00  | B.......$...........p.......T... | 
| 16380 |  c2 9e 04 00 2e 9f 04 00 a2 9f 04 00 14 a0 04 00    80 a0 04 00 f6 a0 04 00 62 a1 04 00 d2 a1 04 00  | ........................b....... | 
| 163a0 |  3a a2 04 00 a8 a2 04 00 1a a3 04 00 84 a3 04 00    f2 a3 04 00 5c a4 04 00 d0 a4 04 00 4a a5 04 00  | :...................\.......J... | 
| 163c0 |  ba a5 04 00 34 a6 04 00 a6 a6 04 00 16 a7 04 00    88 a7 04 00 04 a8 04 00 7a a8 04 00 ee a8 04 00  | ....4...................z....... | 
| 163e0 |  62 a9 04 00 d4 a9 04 00 44 aa 04 00 be aa 04 00    28 ab 04 00 92 ab 04 00 fa ab 04 00 64 ac 04 00  | b.......D.......(...........d... | 
| 16400 |  ce ac 04 00 38 ad 04 00 b0 ad 04 00 1e ae 04 00    92 ae 04 00 04 af 04 00 76 af 04 00 ee af 04 00  | ....8...................v....... | 
| 16420 |  68 b0 04 00 d6 b0 04 00 42 b1 04 00 b4 b1 04 00    28 b2 04 00 a2 b2 04 00 12 b3 04 00 80 b3 04 00  | h.......B.......(............... | 
| 16440 |  f2 b3 04 00 68 b4 04 00 d8 b4 04 00 4c b5 04 00    b4 b5 04 00 2a b6 04 00 9a b6 04 00 04 b7 04 00  | ....h.......L.......*........... | 
| 16460 |  70 b7 04 00 de b7 04 00 50 b8 04 00 d4 b8 04 00    42 b9 04 00 b8 b9 04 00 2c ba 04 00 9c ba 04 00  | p.......P.......B.......,....... | 
| 16480 |  0c bb 04 00 7a bb 04 00 ee bb 04 00 5c bc 04 00    d4 bc 04 00 3e bd 04 00 a8 bd 04 00 1a be 04 00  | ....z.......\.......>........... | 
| 164a0 |  8a be 04 00 f4 be 04 00 62 bf 04 00 d0 bf 04 00    42 c0 04 00 ac c0 04 00 20 c1 04 00 8c c1 04 00  | ........b.......B............... | 
| 164c0 |  f8 c1 04 00 66 c2 04 00 e0 c2 04 00 50 c3 04 00    be c3 04 00 2c c4 04 00 9c c4 04 00 0a c5 04 00  | ....f.......P.......,........... | 
| 164e0 |  76 c5 04 00 e8 c5 04 00 5c c6 04 00 ca c6 04 00    3e c7 04 00 b0 c7 04 00 1a c8 04 00 88 c8 04 00  | v.......\.......>............... | 
| 16500 |  f8 c8 04 00 6c c9 04 00 d8 c9 04 00 48 ca 04 00    b4 ca 04 00 2a cb 04 00 9c cb 04 00 04 cc 04 00  | ....l.......H.......*........... | 
| 16520 |  70 cc 04 00 dc cc 04 00 50 cd 04 00 be cd 04 00    2a ce 04 00 a0 ce 04 00 06 cf 04 00 70 cf 04 00  | p.......P.......*...........p... | 
| 16540 |  dc cf 04 00 48 d0 04 00 c2 d0 04 00 32 d1 04 00    aa d1 04 00 20 d2 04 00 94 d2 04 00 0a d3 04 00  | ....H.......2................... | 
| 16560 |  78 d3 04 00 f2 d3 04 00 6a d4 04 00 d6 d4 04 00    48 d5 04 00 be d5 04 00 30 d6 04 00 9e d6 04 00  | x.......j.......H.......0....... | 
| 16580 |  0a d7 04 00 72 d7 04 00 04 d8 04 00 8e d8 04 00    0a d9 04 00 8a d9 04 00 fc d9 04 00 76 da 04 00  | ....r.......................v... | 
| 165a0 |  e2 da 04 00 54 db 04 00 c4 db 04 00 30 dc 04 00    9c dc 04 00 18 dd 04 00 8a dd 04 00 f4 dd 04 00  | ....T.......0................... | 
| 165c0 |  72 de 04 00 e2 de 04 00 52 df 04 00 c8 df 04 00    4c e0 04 00 cc e0 04 00 46 e1 04 00 c8 e1 04 00  | r.......R.......L.......F....... | 
| 165e0 |  48 e2 04 00 c0 e2 04 00 3a e3 04 00 aa e3 04 00    14 e4 04 00 90 e4 04 00 02 e5 04 00 78 e5 04 00  | H.......:...................x... | 
| 16600 |  e8 e5 04 00 5e e6 04 00 ce e6 04 00 3c e7 04 00    ba e7 04 00 2a e8 04 00 9c e8 04 00 16 e9 04 00  | ....^.......<.......*........... | 
| 16620 |  8a e9 04 00 06 ea 04 00 7e ea 04 00 ee ea 04 00    6a eb 04 00 e4 eb 04 00 5e ec 04 00 d8 ec 04 00  | ........~.......j.......^....... | 
| 16640 |  42 ed 04 00 b2 ed 04 00 2e ee 04 00 a6 ee 04 00    1e ef 04 00 90 ef 04 00 0c f0 04 00 7a f0 04 00  | B...........................z... | 
| 16660 |  ec f0 04 00 5a f1 04 00 d0 f1 04 00 42 f2 04 00    b0 f2 04 00 1e f3 04 00 94 f3 04 00 04 f4 04 00  | ....Z.......B................... | 
| 16680 |  70 f4 04 00 e4 f4 04 00 50 f5 04 00 bc f5 04 00    28 f6 04 00 96 f6 04 00 04 f7 04 00 7a f7 04 00  | p.......P.......(...........z... | 
| 166a0 |  f0 f7 04 00 68 f8 04 00 e0 f8 04 00 4e f9 04 00    bc f9 04 00 2e fa 04 00 a0 fa 04 00 1c fb 04 00  | ....h.......N................... | 
| 166c0 |  98 fb 04 00 0e fc 04 00 82 fc 04 00 f6 fc 04 00    64 fd 04 00 d2 fd 04 00 48 fe 04 00 b6 fe 04 00  | ................d.......H....... | 
| 166e0 |  2c ff 04 00 9c ff 04 00 0c 00 05 00 7c 00 05 00    ee 00 05 00 5e 01 05 00 d6 01 05 00 46 02 05 00  | ,...........|.......^.......F... | 
| 16700 |  bc 02 05 00 34 03 05 00 aa 03 05 00 28 04 05 00    94 04 05 00 04 05 05 00 7a 05 05 00 f0 05 05 00  | ....4.......(...........z....... | 
| 16720 |  58 06 05 00 ca 06 05 00 30 07 05 00 94 07 05 00    00 08 05 00 72 08 05 00 e2 08 05 00 50 09 05 00  | X.......0...........r.......P... | 
| 16740 |  ba 09 05 00 32 0a 05 00 a0 0a 05 00 12 0b 05 00    8a 0b 05 00 fc 0b 05 00 6c 0c 05 00 e2 0c 05 00  | ....2...................l....... | 
| 16760 |  6c 0d 05 00 e2 0d 05 00 5a 0e 05 00 d0 0e 05 00    40 0f 05 00 b2 0f 05 00 20 10 05 00 9a 10 05 00  | l.......Z.......@............... | 
| 16780 |  20 11 05 00 a4 11 05 00 60 12 05 00 26 13 05 00    c2 13 05 00 12 15 05 00 48 16 05 00 6a 18 05 00  | ........`...&...........H...j... | 
| 167a0 |  4e 52 05 00 32 6d 05 00 40 7d 05 00 0a 90 05 00    6a 9c 05 00 fe a5 05 00 68 b1 05 00 5c b7 05 00  | NR..2m..@}......j.......h...\... | 
| 167c0 |  04 c4 05 00 c8 ce 05 00 44 d5 05 00 0a 0b 00 00    78 05 78 05 78 05 74 05 73 05 72 05 71 05 70 05  | ........D.......x.x.x.t.s.r.q.p. | 
| 167e0 |  6f 05 6e 05 6d 05 6c 05 6b 05 6a 05 69 05 68 05    67 05 66 05 65 05 64 05 63 05 62 05 61 05 60 05  | o.n.m.l.k.j.i.h.g.f.e.d.c.b.a.`. | 
| 16800 |  5f 05 5e 05 5d 05 5c 05 5b 05 5a 05 59 05 58 05    57 05 56 05 55 05 54 05 53 05 52 05 51 05 50 05  | _.^.].\.[.Z.Y.X.W.V.U.T.S.R.Q.P. | 
| 16820 |  4f 05 4e 05 4d 05 4c 05 4b 05 78 05 4a 05 49 05    48 05 47 05 46 05 45 05 44 05 43 05 42 05 41 05  | O.N.M.L.K.x.J.I.H.G.F.E.D.C.B.A. | 
| 16840 |  40 05 3f 05 3e 05 3d 05 3c 05 3b 05 3a 05 39 05    38 05 37 05 36 05 35 05 34 05 33 05 32 05 31 05  | @.?.>.=.<.;.:.9.8.7.6.5.4.3.2.1. | 
| 16860 |  30 05 2f 05 2e 05 2d 05 2c 05 2b 05 2a 05 29 05    28 05 27 05 26 05 25 05 24 05 23 05 22 05 21 05  | 0./...-.,.+.*.).(.'.&.%.$.#.".!. | 
| 16880 |  20 05 1f 05 1e 05 1d 05 1c 05 1b 05 1a 05 19 05    18 05 17 05 16 05 15 05 14 05 13 05 12 05 11 05  | ................................ | 
| 168a0 |  10 05 0f 05 0e 05 0d 05 0c 05 0b 05 0a 05 09 05    08 05 07 05 06 05 05 05 04 05 03 05 02 05 01 05  | ................................ | 
| 168c0 |  00 05 ff 04 fe 04 fd 04 fc 04 fb 04 fa 04 f9 04    f8 04 f7 04 f6 04 f5 04 f4 04 f3 04 f2 04 f1 04  | ................................ | 
| 168e0 |  f0 04 ef 04 ee 04 ed 04 ec 04 eb 04 ea 04 e9 04    e8 04 e7 04 e6 04 e5 04 e4 04 e3 04 e2 04 e1 04  | ................................ | 
| 16900 |  e0 04 df 04 de 04 dd 04 dc 04 db 04 da 04 d9 04    d8 04 d7 04 d6 04 d5 04 d4 04 d3 04 d2 04 d1 04  | ................................ | 
| 16920 |  d0 04 cf 04 ce 04 cd 04 cc 04 cb 04 ca 04 c9 04    c8 04 c7 04 c6 04 c5 04 c4 04 c3 04 c2 04 c1 04  | ................................ | 
| 16940 |  c0 04 bf 04 be 04 bd 04 bc 04 bb 04 ba 04 b9 04    b8 04 b7 04 b6 04 b5 04 b4 04 b3 04 b2 04 b1 04  | ................................ | 
| 16960 |  b0 04 af 04 ae 04 ad 04 ac 04 ab 04 aa 04 a9 04    a8 04 a7 04 a6 04 a5 04 a4 04 a3 04 a2 04 a1 04  | ................................ | 
| 16980 |  a0 04 9f 04 9e 04 9d 04 9c 04 9b 04 9a 04 99 04    98 04 97 04 96 04 95 04 94 04 93 04 92 04 91 04  | ................................ | 
| 169a0 |  90 04 8f 04 8e 04 8d 04 8c 04 8b 04 8a 04 89 04    88 04 87 04 86 04 85 04 84 04 83 04 82 04 81 04  | ................................ | 
| 169c0 |  80 04 7f 04 7e 04 7d 04 7c 04 7b 04 7a 04 79 04    78 04 77 04 76 04 75 04 74 04 73 04 72 04 71 04  | ....~.}.|.{.z.y.x.w.v.u.t.s.r.q. | 
| 169e0 |  70 04 6f 04 6e 04 6d 04 6c 04 6b 04 6a 04 69 04    68 04 67 04 66 04 65 04 64 04 63 04 62 04 61 04  | p.o.n.m.l.k.j.i.h.g.f.e.d.c.b.a. | 
| 16a00 |  60 04 5f 04 5e 04 5d 04 5c 04 5b 04 5a 04 59 04    58 04 57 04 56 04 55 04 54 04 53 04 52 04 51 04  | `._.^.].\.[.Z.Y.X.W.V.U.T.S.R.Q. | 
| 16a20 |  50 04 4f 04 4e 04 4d 04 4c 04 4b 04 4a 04 49 04    48 04 47 04 46 04 45 04 44 04 43 04 42 04 41 04  | P.O.N.M.L.K.J.I.H.G.F.E.D.C.B.A. | 
| 16a40 |  40 04 3f 04 3e 04 3d 04 3c 04 3b 04 3a 04 39 04    38 04 37 04 36 04 35 04 34 04 33 04 32 04 31 04  | @.?.>.=.<.;.:.9.8.7.6.5.4.3.2.1. | 
| 16a60 |  30 04 2f 04 2e 04 2d 04 2c 04 2b 04 2a 04 29 04    28 04 27 04 26 04 25 04 24 04 23 04 22 04 21 04  | 0./...-.,.+.*.).(.'.&.%.$.#.".!. | 
| 16a80 |  20 04 1f 04 1e 04 1d 04 1c 04 1b 04 1a 04 19 04    18 04 17 04 16 04 15 04 14 04 13 04 12 04 11 04  | ................................ | 
| 16aa0 |  10 04 0f 04 0e 04 0d 04 0c 04 0b 04 0a 04 09 04    08 04 07 04 06 04 05 04 04 04 03 04 02 04 01 04  | ................................ | 
| 16ac0 |  00 04 ff 03 fe 03 fd 03 fc 03 fb 03 fa 03 f9 03    f8 03 f7 03 f6 03 f5 03 f4 03 f3 03 f2 03 f1 03  | ................................ | 
| 16ae0 |  f0 03 ef 03 ee 03 ed 03 ec 03 eb 03 ea 03 e9 03    e8 03 e7 03 e6 03 e5 03 e4 03 e3 03 e2 03 e1 03  | ................................ | 
| 16b00 |  e0 03 df 03 de 03 dd 03 dc 03 db 03 da 03 d9 03    d8 03 d7 03 d6 03 d5 03 d4 03 d3 03 d2 03 d1 03  | ................................ | 
| 16b20 |  d0 03 cf 03 ce 03 cd 03 cc 03 cb 03 ca 03 c9 03    c8 03 c7 03 c6 03 c5 03 c4 03 c3 03 c2 03 c1 03  | ................................ | 
| 16b40 |  c0 03 bf 03 be 03 bd 03 bc 03 bb 03 ba 03 b9 03    b8 03 b7 03 b6 03 b5 03 b4 03 b3 03 b2 03 b1 03  | ................................ | 
| 16b60 |  b0 03 af 03 ae 03 ad 03 ac 03 78 05 ab 03 aa 03    a9 03 a8 03 a7 03 a6 03 a5 03 a4 03 a3 03 a2 03  | ..........x..................... | 
| 16b80 |  a1 03 a0 03 9f 03 9e 03 9d 03 9c 03 9b 03 9a 03    99 03 98 03 97 03 96 03 95 03 94 03 93 03 92 03  | ................................ | 
| 16ba0 |  91 03 90 03 8f 03 8e 03 8d 03 8c 03 8b 03 8a 03    89 03 88 03 87 03 86 03 85 03 84 03 83 03 82 03  | ................................ | 
| 16bc0 |  81 03 80 03 7f 03 7e 03 7d 03 7c 03 7b 03 7a 03    79 03 78 03 77 03 76 03 75 03 74 03 73 03 72 03  | ......~.}.|.{.z.y.x.w.v.u.t.s.r. | 
| 16be0 |  71 03 70 03 6f 03 6e 03 6d 03 6c 03 6b 03 6a 03    69 03 68 03 67 03 66 03 65 03 64 03 63 03 62 03  | q.p.o.n.m.l.k.j.i.h.g.f.e.d.c.b. | 
| 16c00 |  61 03 60 03 5f 03 5e 03 5d 03 5c 03 5b 03 5a 03    59 03 58 03 57 03 56 03 55 03 54 03 53 03 52 03  | a.`._.^.].\.[.Z.Y.X.W.V.U.T.S.R. | 
| 16c20 |  51 03 50 03 4f 03 4e 03 4d 03 4c 03 4b 03 4a 03    49 03 48 03 47 03 46 03 45 03 44 03 43 03 42 03  | Q.P.O.N.M.L.K.J.I.H.G.F.E.D.C.B. | 
| 16c40 |  41 03 40 03 3f 03 3e 03 3d 03 3c 03 3b 03 3a 03    39 03 78 05 38 03 37 03 36 03 35 03 34 03 33 03  | A.@.?.>.=.<.;.:.9.x.8.7.6.5.4.3. | 
| 16c60 |  32 03 31 03 30 03 2f 03 2e 03 2d 03 2c 03 2b 03    2a 03 29 03 28 03 27 03 26 03 25 03 24 03 23 03  | 2.1.0./...-.,.+.*.).(.'.&.%.$.#. | 
| 16c80 |  22 03 21 03 20 03 1f 03 1e 03 1d 03 1c 03 1b 03    1a 03 19 03 18 03 17 03 16 03 15 03 14 03 13 03  | ".!............................. | 
| 16ca0 |  12 03 11 03 10 03 0f 03 0e 03 0d 03 0c 03 0b 03    0a 03 09 03 08 03 07 03 06 03 05 03 04 03 03 03  | ................................ | 
| 16cc0 |  02 03 01 03 00 03 ff 02 fe 02 fd 02 fc 02 fb 02    fa 02 f9 02 f8 02 f7 02 f6 02 f5 02 f4 02 f3 02  | ................................ | 
| 16ce0 |  f2 02 f1 02 f0 02 ef 02 ee 02 ed 02 ec 02 eb 02    ea 02 e9 02 e8 02 e7 02 e6 02 e5 02 e4 02 e3 02  | ................................ | 
| 16d00 |  e2 02 e1 02 e0 02 df 02 de 02 dd 02 dc 02 db 02    da 02 d9 02 d8 02 d7 02 d6 02 d5 02 d4 02 d3 02  | ................................ | 
| 16d20 |  d2 02 d1 02 d0 02 cf 02 ce 02 cd 02 cc 02 cb 02    ca 02 c9 02 c8 02 c7 02 c6 02 c5 02 c4 02 c3 02  | ................................ | 
| 16d40 |  c2 02 c1 02 c0 02 bf 02 be 02 bd 02 bc 02 bb 02    ba 02 b9 02 b8 02 b7 02 b6 02 b5 02 b4 02 b3 02  | ................................ | 
| 16d60 |  b2 02 b1 02 b0 02 af 02 ae 02 ad 02 ac 02 ab 02    aa 02 a9 02 a8 02 a7 02 a6 02 a5 02 a4 02 a3 02  | ................................ | 
| 16d80 |  a2 02 a1 02 a0 02 9f 02 9e 02 9d 02 9c 02 9b 02    9a 02 99 02 98 02 97 02 96 02 95 02 94 02 93 02  | ................................ | 
| 16da0 |  92 02 91 02 90 02 8f 02 8e 02 8d 02 8c 02 8b 02    8a 02 89 02 88 02 87 02 86 02 85 02 84 02 83 02  | ................................ | 
| 16dc0 |  82 02 81 02 80 02 7f 02 7e 02 7d 02 7c 02 7b 02    7a 02 79 02 78 02 77 02 76 02 75 02 74 02 73 02  | ........~.}.|.{.z.y.x.w.v.u.t.s. | 
| 16de0 |  72 02 71 02 70 02 6f 02 6e 02 6d 02 6c 02 6b 02    6a 02 78 05 69 02 68 02 67 02 66 02 65 02 64 02  | r.q.p.o.n.m.l.k.j.x.i.h.g.f.e.d. | 
| 16e00 |  63 02 62 02 61 02 60 02 5f 02 5e 02 5d 02 5c 02    5b 02 5a 02 59 02 58 02 57 02 56 02 55 02 54 02  | c.b.a.`._.^.].\.[.Z.Y.X.W.V.U.T. | 
| 16e20 |  53 02 52 02 51 02 50 02 4f 02 4e 02 4d 02 4c 02    4b 02 4a 02 49 02 48 02 47 02 46 02 45 02 44 02  | S.R.Q.P.O.N.M.L.K.J.I.H.G.F.E.D. | 
| 16e40 |  43 02 42 02 41 02 40 02 3f 02 3e 02 3d 02 3c 02    3b 02 3a 02 39 02 38 02 37 02 36 02 35 02 34 02  | C.B.A.@.?.>.=.<.;.:.9.8.7.6.5.4. | 
| 16e60 |  33 02 32 02 31 02 30 02 2f 02 2e 02 2d 02 2c 02    2b 02 2a 02 29 02 28 02 27 02 26 02 25 02 24 02  | 3.2.1.0./...-.,.+.*.).(.'.&.%.$. | 
| 16e80 |  23 02 22 02 21 02 20 02 1f 02 1e 02 1d 02 1c 02    1b 02 1a 02 19 02 18 02 17 02 16 02 15 02 14 02  | #.".!........................... | 
| 16ea0 |  13 02 12 02 11 02 10 02 0f 02 0e 02 0d 02 0c 02    0b 02 0a 02 09 02 08 02 07 02 06 02 05 02 04 02  | ................................ | 
| 16ec0 |  03 02 02 02 01 02 00 02 ff 01 fe 01 fd 01 fc 01    fb 01 fa 01 f9 01 f8 01 f7 01 f6 01 f5 01 f4 01  | ................................ | 
| 16ee0 |  f3 01 f2 01 f1 01 f0 01 ef 01 ee 01 ed 01 ec 01    eb 01 ea 01 e9 01 e8 01 e7 01 e6 01 e5 01 e4 01  | ................................ | 
| 16f00 |  e3 01 e2 01 e1 01 e0 01 df 01 de 01 dd 01 dc 01    db 01 da 01 d9 01 d8 01 d7 01 d6 01 d5 01 d4 01  | ................................ | 
| 16f20 |  d3 01 d2 01 d1 01 d0 01 cf 01 ce 01 cd 01 cc 01    cb 01 ca 01 c9 01 c8 01 c7 01 c6 01 c5 01 c4 01  | ................................ | 
| 16f40 |  c3 01 c2 01 c1 01 c0 01 bf 01 be 01 bd 01 bc 01    bb 01 ba 01 b9 01 b8 01 b7 01 b6 01 b5 01 b4 01  | ................................ | 
| 16f60 |  b3 01 b2 01 b1 01 b0 01 af 01 ae 01 ad 01 ac 01    ab 01 aa 01 a9 01 a8 01 a7 01 a6 01 a5 01 a4 01  | ................................ | 
| 16f80 |  a3 01 a2 01 a1 01 a0 01 9f 01 9e 01 9d 01 9c 01    9b 01 9a 01 99 01 98 01 97 01 96 01 95 01 94 01  | ................................ | 
| 16fa0 |  93 01 92 01 91 01 90 01 8f 01 8e 01 8d 01 8c 01    8b 01 8a 01 89 01 88 01 87 01 86 01 85 01 84 01  | ................................ | 
| 16fc0 |  83 01 82 01 81 01 80 01 7f 01 7e 01 7d 01 7c 01    7b 01 7a 01 79 01 78 01 77 01 76 01 75 01 74 01  | ..........~.}.|.{.z.y.x.w.v.u.t. | 
| 16fe0 |  73 01 72 01 71 01 70 01 6f 01 6e 01 6d 01 6c 01    6b 01 6a 01 69 01 68 01 67 01 66 01 65 01 64 01  | s.r.q.p.o.n.m.l.k.j.i.h.g.f.e.d. | 
| 17000 |  63 01 62 01 61 01 60 01 5f 01 5e 01 5d 01 5c 01    5b 01 5a 01 59 01 58 01 57 01 56 01 55 01 54 01  | c.b.a.`._.^.].\.[.Z.Y.X.W.V.U.T. | 
| 17020 |  53 01 52 01 51 01 50 01 4f 01 4e 01 4d 01 4c 01    4b 01 4a 01 49 01 48 01 47 01 46 01 45 01 44 01  | S.R.Q.P.O.N.M.L.K.J.I.H.G.F.E.D. | 
| 17040 |  43 01 42 01 41 01 40 01 3f 01 3e 01 3d 01 3c 01    3b 01 3a 01 39 01 38 01 37 01 36 01 35 01 34 01  | C.B.A.@.?.>.=.<.;.:.9.8.7.6.5.4. | 
| 17060 |  33 01 32 01 31 01 30 01 2f 01 2e 01 2d 01 2c 01    2b 01 2a 01 29 01 28 01 27 01 26 01 25 01 24 01  | 3.2.1.0./...-.,.+.*.).(.'.&.%.$. | 
| 17080 |  23 01 22 01 21 01 20 01 1f 01 1e 01 1d 01 1c 01    1b 01 1a 01 19 01 18 01 17 01 16 01 15 01 14 01  | #.".!........................... | 
| 170a0 |  13 01 12 01 11 01 10 01 0f 01 0e 01 0d 01 0c 01    0b 01 0a 01 09 01 08 01 07 01 06 01 05 01 04 01  | ................................ | 
| 170c0 |  03 01 02 01 01 01 00 01 ff 00 fe 00 fd 00 fc 00    fb 00 fa 00 f9 00 f8 00 f7 00 f6 00 f5 00 f4 00  | ................................ | 
| 170e0 |  f3 00 f2 00 f1 00 f0 00 ef 00 ee 00 ed 00 ec 00    eb 00 ea 00 e9 00 e8 00 e7 00 e6 00 e5 00 e4 00  | ................................ | 
| 17100 |  e3 00 e2 00 e1 00 e0 00 df 00 de 00 dd 00 dc 00    db 00 da 00 d9 00 d8 00 d7 00 d6 00 d5 00 d4 00  | ................................ | 
| 17120 |  d3 00 d2 00 d1 00 d0 00 cf 00 ce 00 cd 00 cc 00    cb 00 ca 00 c9 00 c8 00 c7 00 c6 00 c5 00 c4 00  | ................................ | 
| 17140 |  c3 00 c2 00 c1 00 c0 00 bf 00 be 00 bd 00 bc 00    bb 00 ba 00 b9 00 b8 00 b7 00 b6 00 b5 00 b4 00  | ................................ | 
| 17160 |  b3 00 b2 00 b1 00 b0 00 af 00 ae 00 ad 00 ac 00    ab 00 aa 00 a9 00 a8 00 a7 00 a6 00 a5 00 a4 00  | ................................ | 
| 17180 |  a3 00 a2 00 a1 00 a0 00 9f 00 9e 00 9d 00 9c 00    9b 00 9a 00 99 00 98 00 97 00 96 00 95 00 94 00  | ................................ | 
| 171a0 |  93 00 92 00 91 00 90 00 8f 00 8e 00 8d 00 8c 00    8b 00 8a 00 89 00 88 00 87 00 86 00 77 05 79 05  | ............................w.y. | 
| 171c0 |  79 05 79 05 79 05 79 05 79 05 76 05 83 05 83 05    78 05 85 00 84 00 83 00 82 00 79 05 81 00 80 00  | y.y.y.y.y.v.....x.........y..... | 
| 171e0 |  7f 00 7e 00 7d 00 7c 00 7b 00 7a 00 79 00 78 00    77 00 76 00 75 00 7a 05 7b 05 79 05 74 00 73 00  | ..~.}.|.{.z.y.x.w.v.u.z.{.y.t.s. | 
| 17200 |  82 05 79 05 72 00 71 00 74 05 73 05 72 05 71 05    70 05 6f 05 6e 05 6d 05 6c 05 6b 05 6a 05 69 05  | ..y.r.q.t.s.r.q.p.o.n.m.l.k.j.i. | 
| 17220 |  68 05 67 05 66 05 65 05 64 05 63 05 62 05 61 05    60 05 5f 05 5e 05 5d 05 5c 05 5b 05 5a 05 59 05  | h.g.f.e.d.c.b.a.`._.^.].\.[.Z.Y. | 
| 17240 |  58 05 57 05 56 05 55 05 54 05 53 05 52 05 51 05    50 05 4f 05 4e 05 4d 05 4c 05 4b 05 4a 05 49 05  | X.W.V.U.T.S.R.Q.P.O.N.M.L.K.J.I. | 
| 17260 |  48 05 47 05 46 05 45 05 44 05 43 05 42 05 41 05    40 05 3f 05 3e 05 3d 05 3c 05 3b 05 3a 05 39 05  | H.G.F.E.D.C.B.A.@.?.>.=.<.;.:.9. | 
| 17280 |  38 05 37 05 36 05 35 05 34 05 33 05 32 05 31 05    30 05 2f 05 2e 05 2d 05 2c 05 2b 05 2a 05 29 05  | 8.7.6.5.4.3.2.1.0./...-.,.+.*.). | 
| 172a0 |  28 05 27 05 26 05 25 05 24 05 23 05 22 05 21 05    20 05 1f 05 1e 05 1d 05 1c 05 1b 05 1a 05 19 05  | (.'.&.%.$.#.".!................. | 
| 172c0 |  18 05 17 05 16 05 15 05 14 05 13 05 12 05 11 05    10 05 0f 05 0e 05 0d 05 0c 05 0b 05 0a 05 09 05  | ................................ | 
| 172e0 |  08 05 07 05 06 05 05 05 04 05 03 05 02 05 01 05    00 05 ff 04 fe 04 fd 04 fc 04 fb 04 fa 04 f9 04  | ................................ | 
| 17300 |  f8 04 f7 04 f6 04 f5 04 f4 04 f3 04 f2 04 f1 04    f0 04 ef 04 ee 04 ed 04 ec 04 eb 04 ea 04 e9 04  | ................................ | 
| 17320 |  e8 04 e7 04 e6 04 e5 04 e4 04 e3 04 e2 04 e1 04    e0 04 df 04 de 04 dd 04 dc 04 db 04 da 04 d9 04  | ................................ | 
| 17340 |  d8 04 d7 04 d6 04 d5 04 d4 04 d3 04 d2 04 d1 04    d0 04 cf 04 ce 04 cd 04 cc 04 cb 04 ca 04 c9 04  | ................................ | 
| 17360 |  c8 04 c7 04 c6 04 c5 04 c4 04 c3 04 c2 04 c1 04    c0 04 bf 04 be 04 bd 04 bc 04 bb 04 ba 04 b9 04  | ................................ | 
| 17380 |  b8 04 b7 04 b6 04 b5 04 b4 04 b3 04 b2 04 b1 04    b0 04 af 04 ae 04 ad 04 ac 04 ab 04 aa 04 a9 04  | ................................ | 
| 173a0 |  a8 04 a7 04 a6 04 a5 04 a4 04 a3 04 a2 04 a1 04    a0 04 9f 04 9e 04 9d 04 9c 04 9b 04 9a 04 99 04  | ................................ | 
| 173c0 |  98 04 97 04 96 04 95 04 94 04 93 04 92 04 91 04    90 04 8f 04 8e 04 8d 04 8c 04 8b 04 8a 04 89 04  | ................................ | 
| 173e0 |  88 04 87 04 86 04 85 04 84 04 83 04 82 04 81 04    80 04 7f 04 7e 04 7d 04 7c 04 7b 04 7a 04 79 04  | ....................~.}.|.{.z.y. | 
| 17400 |  78 04 77 04 76 04 75 04 74 04 73 04 72 04 71 04    70 04 6f 04 6e 04 6d 04 6c 04 6b 04 6a 04 69 04  | x.w.v.u.t.s.r.q.p.o.n.m.l.k.j.i. | 
| 17420 |  68 04 67 04 66 04 65 04 64 04 63 04 62 04 61 04    60 04 5f 04 5e 04 5d 04 5c 04 5b 04 5a 04 59 04  | h.g.f.e.d.c.b.a.`._.^.].\.[.Z.Y. | 
| 17440 |  58 04 57 04 56 04 55 04 54 04 53 04 52 04 51 04    50 04 4f 04 4e 04 4d 04 4c 04 4b 04 4a 04 49 04  | X.W.V.U.T.S.R.Q.P.O.N.M.L.K.J.I. | 
| 17460 |  48 04 47 04 46 04 45 04 44 04 43 04 42 04 41 04    40 04 3f 04 3e 04 3d 04 3c 04 3b 04 3a 04 39 04  | H.G.F.E.D.C.B.A.@.?.>.=.<.;.:.9. | 
| 17480 |  38 04 37 04 36 04 35 04 34 04 33 04 32 04 31 04    30 04 2f 04 2e 04 2d 04 2c 04 2b 04 2a 04 29 04  | 8.7.6.5.4.3.2.1.0./...-.,.+.*.). | 
| 174a0 |  28 04 27 04 26 04 25 04 24 04 23 04 22 04 21 04    20 04 1f 04 1e 04 1d 04 1c 04 1b 04 1a 04 19 04  | (.'.&.%.$.#.".!................. | 
| 174c0 |  18 04 17 04 16 04 15 04 14 04 13 04 12 04 11 04    10 04 0f 04 0e 04 0d 04 0c 04 0b 04 0a 04 09 04  | ................................ | 
| 174e0 |  08 04 07 04 06 04 05 04 04 04 03 04 02 04 01 04    00 04 ff 03 fe 03 fd 03 fc 03 fb 03 fa 03 f9 03  | ................................ | 
| 17500 |  f8 03 f7 03 f6 03 f5 03 f4 03 f3 03 f2 03 f1 03    f0 03 ef 03 ee 03 ed 03 ec 03 eb 03 ea 03 e9 03  | ................................ | 
| 17520 |  e8 03 e7 03 e6 03 e5 03 e4 03 e3 03 e2 03 e1 03    e0 03 df 03 de 03 dd 03 dc 03 db 03 da 03 d9 03  | ................................ | 
| 17540 |  d8 03 d7 03 d6 03 d5 03 d4 03 d3 03 d2 03 d1 03    d0 03 cf 03 ce 03 cd 03 cc 03 cb 03 ca 03 c9 03  | ................................ | 
| 17560 |  c8 03 c7 03 c6 03 c5 03 c4 03 c3 03 c2 03 c1 03    c0 03 bf 03 be 03 bd 03 bc 03 bb 03 ba 03 b9 03  | ................................ | 
| 17580 |  b8 03 b7 03 b6 03 b5 03 b4 03 b3 03 b2 03 b1 03    b0 03 af 03 ae 03 ad 03 ac 03 ab 03 aa 03 a9 03  | ................................ | 
| 175a0 |  a8 03 a7 03 a6 03 a5 03 a4 03 a3 03 a2 03 a1 03    a0 03 9f 03 9e 03 9d 03 9c 03 9b 03 9a 03 99 03  | ................................ | 
| 175c0 |  98 03 97 03 96 03 95 03 94 03 93 03 92 03 91 03    90 03 8f 03 8e 03 8d 03 8c 03 8b 03 8a 03 89 03  | ................................ | 
| 175e0 |  88 03 87 03 86 03 85 03 84 03 83 03 82 03 81 03    80 03 7f 03 7e 03 7d 03 7c 03 7b 03 7a 03 79 03  | ....................~.}.|.{.z.y. | 
| 17600 |  78 03 77 03 76 03 75 03 74 03 73 03 72 03 71 03    70 03 6f 03 6e 03 6d 03 6c 03 6b 03 6a 03 69 03  | x.w.v.u.t.s.r.q.p.o.n.m.l.k.j.i. | 
| 17620 |  68 03 67 03 66 03 65 03 64 03 63 03 62 03 61 03    60 03 5f 03 5e 03 5d 03 5c 03 5b 03 5a 03 59 03  | h.g.f.e.d.c.b.a.`._.^.].\.[.Z.Y. | 
| 17640 |  58 03 57 03 56 03 55 03 54 03 53 03 52 03 51 03    50 03 4f 03 4e 03 4d 03 4c 03 4b 03 4a 03 49 03  | X.W.V.U.T.S.R.Q.P.O.N.M.L.K.J.I. | 
| 17660 |  48 03 47 03 46 03 45 03 44 03 43 03 42 03 41 03    40 03 3f 03 3e 03 3d 03 3c 03 3b 03 3a 03 39 03  | H.G.F.E.D.C.B.A.@.?.>.=.<.;.:.9. | 
| 17680 |  38 03 37 03 36 03 35 03 34 03 33 03 32 03 31 03    30 03 2f 03 2e 03 2d 03 2c 03 2b 03 2a 03 29 03  | 8.7.6.5.4.3.2.1.0./...-.,.+.*.). | 
| 176a0 |  28 03 27 03 26 03 25 03 24 03 23 03 22 03 21 03    20 03 1f 03 1e 03 1d 03 1c 03 1b 03 1a 03 19 03  | (.'.&.%.$.#.".!................. | 
| 176c0 |  18 03 17 03 16 03 15 03 14 03 13 03 12 03 11 03    10 03 0f 03 0e 03 0d 03 0c 03 0b 03 0a 03 09 03  | ................................ | 
| 176e0 |  08 03 07 03 06 03 05 03 04 03 03 03 02 03 01 03    00 03 ff 02 fe 02 fd 02 fc 02 fb 02 fa 02 f9 02  | ................................ | 
| 17700 |  f8 02 f7 02 f6 02 f5 02 f4 02 f3 02 f2 02 f1 02    f0 02 ef 02 ee 02 ed 02 ec 02 eb 02 ea 02 e9 02  | ................................ | 
| 17720 |  e8 02 e7 02 e6 02 e5 02 e4 02 e3 02 e2 02 e1 02    e0 02 df 02 de 02 dd 02 dc 02 db 02 da 02 d9 02  | ................................ | 
| 17740 |  d8 02 d7 02 d6 02 d5 02 d4 02 d3 02 d2 02 d1 02    d0 02 cf 02 ce 02 cd 02 cc 02 cb 02 ca 02 c9 02  | ................................ | 
| 17760 |  c8 02 c7 02 c6 02 c5 02 c4 02 c3 02 c2 02 c1 02    c0 02 bf 02 be 02 bd 02 bc 02 bb 02 ba 02 b9 02  | ................................ | 
| 17780 |  b8 02 b7 02 b6 02 b5 02 b4 02 b3 02 b2 02 b1 02    b0 02 af 02 ae 02 ad 02 ac 02 ab 02 aa 02 a9 02  | ................................ | 
| 177a0 |  a8 02 a7 02 a6 02 a5 02 a4 02 a3 02 a2 02 a1 02    a0 02 9f 02 9e 02 9d 02 9c 02 9b 02 9a 02 99 02  | ................................ | 
| 177c0 |  98 02 97 02 96 02 95 02 94 02 93 02 92 02 91 02    90 02 8f 02 8e 02 8d 02 8c 02 8b 02 8a 02 89 02  | ................................ | 
| 177e0 |  88 02 87 02 86 02 85 02 84 02 83 02 82 02 81 02    80 02 7f 02 7e 02 7d 02 7c 02 7b 02 7a 02 79 02  | ....................~.}.|.{.z.y. | 
| 17800 |  78 02 77 02 76 02 75 02 74 02 73 02 72 02 71 02    70 02 6f 02 6e 02 6d 02 6c 02 6b 02 6a 02 69 02  | x.w.v.u.t.s.r.q.p.o.n.m.l.k.j.i. | 
| 17820 |  68 02 67 02 66 02 65 02 64 02 63 02 62 02 61 02    60 02 5f 02 5e 02 5d 02 5c 02 5b 02 5a 02 59 02  | h.g.f.e.d.c.b.a.`._.^.].\.[.Z.Y. | 
| 17840 |  58 02 57 02 56 02 55 02 54 02 53 02 52 02 51 02    50 02 4f 02 4e 02 4d 02 4c 02 4b 02 4a 02 49 02  | X.W.V.U.T.S.R.Q.P.O.N.M.L.K.J.I. | 
| 17860 |  48 02 47 02 46 02 45 02 44 02 43 02 42 02 41 02    40 02 3f 02 3e 02 3d 02 3c 02 3b 02 3a 02 39 02  | H.G.F.E.D.C.B.A.@.?.>.=.<.;.:.9. | 
| 17880 |  38 02 37 02 36 02 35 02 34 02 33 02 32 02 31 02    30 02 2f 02 2e 02 2d 02 2c 02 2b 02 2a 02 29 02  | 8.7.6.5.4.3.2.1.0./...-.,.+.*.). | 
| 178a0 |  28 02 27 02 26 02 25 02 24 02 23 02 22 02 21 02    20 02 1f 02 1e 02 1d 02 1c 02 1b 02 1a 02 19 02  | (.'.&.%.$.#.".!................. | 
| 178c0 |  18 02 17 02 16 02 15 02 14 02 13 02 12 02 11 02    10 02 0f 02 0e 02 0d 02 0c 02 0b 02 0a 02 09 02  | ................................ | 
| 178e0 |  08 02 07 02 06 02 05 02 04 02 03 02 02 02 01 02    00 02 ff 01 fe 01 fd 01 fc 01 fb 01 fa 01 f9 01  | ................................ | 
| 17900 |  f8 01 f7 01 f6 01 f5 01 f4 01 f3 01 f2 01 f1 01    f0 01 ef 01 ee 01 ed 01 ec 01 eb 01 ea 01 e9 01  | ................................ | 
| 17920 |  e8 01 e7 01 e6 01 e5 01 e4 01 e3 01 e2 01 e1 01    e0 01 df 01 de 01 dd 01 dc 01 db 01 da 01 d9 01  | ................................ | 
| 17940 |  d8 01 d7 01 d6 01 d5 01 d4 01 d3 01 d2 01 d1 01    d0 01 cf 01 ce 01 cd 01 cc 01 cb 01 ca 01 c9 01  | ................................ | 
| 17960 |  c8 01 c7 01 c6 01 c5 01 c4 01 c3 01 c2 01 c1 01    c0 01 bf 01 be 01 bd 01 bc 01 bb 01 ba 01 b9 01  | ................................ | 
| 17980 |  b8 01 b7 01 b6 01 b5 01 b4 01 b3 01 b2 01 b1 01    b0 01 af 01 ae 01 ad 01 ac 01 ab 01 aa 01 a9 01  | ................................ | 
| 179a0 |  a8 01 a7 01 a6 01 a5 01 a4 01 a3 01 a2 01 a1 01    a0 01 9f 01 9e 01 9d 01 9c 01 9b 01 9a 01 99 01  | ................................ | 
| 179c0 |  98 01 97 01 96 01 95 01 94 01 93 01 92 01 91 01    90 01 8f 01 8e 01 8d 01 8c 01 8b 01 8a 01 89 01  | ................................ | 
| 179e0 |  88 01 87 01 86 01 85 01 84 01 83 01 82 01 81 01    80 01 7f 01 7e 01 7d 01 7c 01 7b 01 7a 01 79 01  | ....................~.}.|.{.z.y. | 
| 17a00 |  78 01 77 01 76 01 75 01 74 01 73 01 72 01 71 01    70 01 6f 01 6e 01 6d 01 6c 01 6b 01 6a 01 69 01  | x.w.v.u.t.s.r.q.p.o.n.m.l.k.j.i. | 
| 17a20 |  68 01 67 01 66 01 65 01 64 01 63 01 62 01 61 01    60 01 5f 01 5e 01 5d 01 5c 01 5b 01 5a 01 59 01  | h.g.f.e.d.c.b.a.`._.^.].\.[.Z.Y. | 
| 17a40 |  58 01 57 01 56 01 55 01 54 01 53 01 52 01 51 01    50 01 4f 01 4e 01 4d 01 4c 01 4b 01 4a 01 49 01  | X.W.V.U.T.S.R.Q.P.O.N.M.L.K.J.I. | 
| 17a60 |  48 01 47 01 46 01 45 01 44 01 43 01 42 01 41 01    40 01 3f 01 3e 01 3d 01 3c 01 3b 01 3a 01 39 01  | H.G.F.E.D.C.B.A.@.?.>.=.<.;.:.9. | 
| 17a80 |  38 01 37 01 36 01 35 01 34 01 33 01 32 01 31 01    30 01 2f 01 2e 01 2d 01 2c 01 2b 01 2a 01 29 01  | 8.7.6.5.4.3.2.1.0./...-.,.+.*.). | 
| 17aa0 |  28 01 27 01 26 01 25 01 24 01 23 01 22 01 21 01    20 01 1f 01 1e 01 1d 01 1c 01 1b 01 1a 01 19 01  | (.'.&.%.$.#.".!................. | 
| 17ac0 |  18 01 17 01 16 01 15 01 14 01 13 01 12 01 11 01    10 01 0f 01 0e 01 0d 01 0c 01 0b 01 0a 01 09 01  | ................................ | 
| 17ae0 |  08 01 07 01 06 01 05 01 04 01 03 01 02 01 01 01    00 01 ff 00 fe 00 fd 00 fc 00 fb 00 fa 00 f9 00  | ................................ | 
| 17b00 |  f8 00 f7 00 f6 00 f5 00 f4 00 f3 00 f2 00 f1 00    f0 00 ef 00 ee 00 ed 00 ec 00 eb 00 ea 00 e9 00  | ................................ | 
| 17b20 |  e8 00 e7 00 e6 00 e5 00 e4 00 e3 00 e2 00 e1 00    e0 00 df 00 de 00 dd 00 dc 00 db 00 da 00 d9 00  | ................................ | 
| 17b40 |  d8 00 d7 00 d6 00 d5 00 d4 00 d3 00 d2 00 d1 00    d0 00 cf 00 ce 00 cd 00 cc 00 cb 00 ca 00 c9 00  | ................................ | 
| 17b60 |  c8 00 c7 00 c6 00 c5 00 c4 00 c3 00 c2 00 c1 00    c0 00 bf 00 be 00 bd 00 bc 00 bb 00 ba 00 b9 00  | ................................ | 
| 17b80 |  b8 00 b7 00 b6 00 b5 00 b4 00 b3 00 b2 00 b1 00    b0 00 af 00 ae 00 ad 00 ac 00 ab 00 aa 00 a9 00  | ................................ | 
| 17ba0 |  a8 00 a7 00 a6 00 a5 00 a4 00 a3 00 a2 00 a1 00    a0 00 9f 00 9e 00 9d 00 9c 00 9b 00 9a 00 99 00  | ................................ | 
| 17bc0 |  98 00 97 00 96 00 95 00 94 00 93 00 92 00 91 00    90 00 8f 00 8e 00 8d 00 8c 00 8b 00 8a 00 89 00  | ................................ | 
| 17be0 |  88 00 87 00 86 00 85 00 84 00 83 00 82 00 81 00    80 00 7f 00 7e 00 7d 00 7c 00 7b 00 7a 00 79 00  | ....................~.}.|.{.z.y. | 
| 17c00 |  78 00 77 00 76 00 75 00 74 00 73 00 72 00 71 00    70 00 6f 00 6e 00 6d 00 6c 00 6b 00 6a 00 69 00  | x.w.v.u.t.s.r.q.p.o.n.m.l.k.j.i. | 
| 17c20 |  68 00 67 00 66 00 65 00 64 00 63 00 62 00 61 00    60 00 5f 00 5e 00 5d 00 5c 00 5b 00 5a 00 59 00  | h.g.f.e.d.c.b.a.`._.^.].\.[.Z.Y. | 
| 17c40 |  58 00 57 00 56 00 55 00 54 00 53 00 52 00 51 00    50 00 4f 00 4e 00 4d 00 4c 00 4b 00 4a 00 49 00  | X.W.V.U.T.S.R.Q.P.O.N.M.L.K.J.I. | 
| 17c60 |  48 00 47 00 46 00 45 00 44 00 43 00 42 00 41 00    40 00 3f 00 3e 00 3d 00 3c 00 3b 00 3a 00 39 00  | H.G.F.E.D.C.B.A.@.?.>.=.<.;.:.9. | 
| 17c80 |  38 00 37 00 36 00 35 00 34 00 33 00 32 00 31 00    30 00 2f 00 2e 00 2d 00 2c 00 2b 00 2a 00 29 00  | 8.7.6.5.4.3.2.1.0./...-.,.+.*.). | 
| 17ca0 |  28 00 27 00 26 00 25 00 24 00 23 00 22 00 21 00    20 00 1f 00 1e 00 1d 00 1c 00 1b 00 1a 00 19 00  | (.'.&.%.$.#.".!................. | 
| 17cc0 |  18 00 17 00 16 00 15 00 14 00 13 00 12 00 11 00    10 00 0f 00 0e 00 0d 00 0c 00 0b 00 0a 00 09 00  | ................................ | 
| 17ce0 |  08 00 07 00 06 00 05 00 04 00 03 00 02 00 01 00    70 00 6f 00 6e 00 81 05 79 05 7f 05 6d 00 6c 00  | ................p.o.n...y...m.l. | 
| 17d00 |  6b 00 6a 00 7c 05 7b 05 7d 05 7e 05 7f 05 69 00    68 00 67 00 66 00 65 00 64 00 63 00 62 00 61 00  | k.j.|.{.}.~...i.h.g.f.e.d.c.b.a. | 
| 17d20 |  60 00 5f 00 5e 00 5d 00 5c 00 5b 00 5a 00 59 00    58 00 57 00 56 00 55 00 54 00 53 00 52 00 51 00  | `._.^.].\.[.Z.Y.X.W.V.U.T.S.R.Q. | 
| 17d40 |  50 00 4f 00 4e 00 4d 00 4c 00 4b 00 4a 00 49 00    48 00 47 00 46 00 45 00 44 00 43 00 42 00 41 00  | P.O.N.M.L.K.J.I.H.G.F.E.D.C.B.A. | 
| 17d60 |  40 00 3f 00 3e 00 3d 00 3c 00 3b 00 3a 00 39 00    38 00 37 00 36 00 35 00 80 05 34 00 33 00 32 00  | @.?.>.=.<.;.:.9.8.7.6.5...4.3.2. | 
| 17d80 |  31 00 30 00 2f 00 2e 00 2d 00 2c 00 2b 00 2a 00    29 00 28 00 27 00 26 00 25 00 24 00 23 00 22 00  | 1.0./...-.,.+.*.).(.'.&.%.$.#.". | 
| 17da0 |  21 00 20 00 1f 00 1e 00 1d 00 1c 00 1b 00 1a 00    19 00 18 00 17 00 16 00 15 00 14 00 13 00 12 00  | !............................... | 
| 17dc0 |  11 00 10 00 0f 00 0e 00 0d 00 0c 00 0b 00 0a 00    09 00 08 00 07 00 06 00 05 00 04 00 03 00 02 00  | ................................ | 
| 17de0 |  01 00 75 05 3f 3f 5f 43 40 5f 31 33 43 47 4f 4b    4a 50 49 4c 40 3f 24 41 41 3f 31 3f 24 41 41 3f  | ..u.??_C@_13CGOKJPIL@?$AA?1?$AA? | 
| 17e00 |  24 41 41 40 00 3f 3f 5f 43 40 5f 31 33 46 50 47    41 4a 41 50 4a 40 3f 24 41 41 3f 32 3f 24 41 41  | $AA@.??_C@_13FPGAJAPJ@?$AA?2?$AA | 
| 17e20 |  3f 24 41 41 40 00 3f 3f 5f 43 40 5f 31 35 4d 4e    43 41 43 4a 4c 49 40 3f 24 41 41 3f 32 3f 24 41  | ?$AA@.??_C@_15MNCACJLI@?$AA?2?$A | 
| 17e40 |  41 3f 31 3f 24 41 41 3f 24 41 41 40 00 3f 50 72    6f 70 65 72 74 79 4c 65 6e 67 74 68 41 73 56 61  | A?1?$AA?$AA@.?PropertyLengthAsVa | 
| 17e60 |  72 69 61 6e 74 40 40 59 47 4b 50 42 55 74 61 67    53 45 52 49 41 4c 49 5a 45 44 50 52 4f 50 45 52  | riant@@YGKPBUtagSERIALIZEDPROPER | 
| 17e80 |  54 59 56 41 4c 55 45 40 40 4b 47 45 40 5a 00 3f    52 74 6c 43 6f 6e 76 65 72 74 50 72 6f 70 65 72  | TYVALUE@@KGE@Z.?RtlConvertProper | 
| 17ea0 |  74 79 54 6f 56 61 72 69 61 6e 74 40 40 59 47 45    50 42 55 74 61 67 53 45 52 49 41 4c 49 5a 45 44  | tyToVariant@@YGEPBUtagSERIALIZED | 
| 17ec0 |  50 52 4f 50 45 52 54 59 56 41 4c 55 45 40 40 47    50 41 55 74 61 67 50 52 4f 50 56 41 52 49 41 4e  | PROPERTYVALUE@@GPAUtagPROPVARIAN | 
| 17ee0 |  54 40 40 50 41 56 50 4d 65 6d 6f 72 79 41 6c 6c    6f 63 61 74 6f 72 40 40 40 5a 00 3f 52 74 6c 43  | T@@PAVPMemoryAllocator@@@Z.?RtlC | 
| 17f00 |  6f 6e 76 65 72 74 56 61 72 69 61 6e 74 54 6f 50    72 6f 70 65 72 74 79 40 40 59 47 50 41 55 74 61  | onvertVariantToProperty@@YGPAUta | 
| 17f20 |  67 53 45 52 49 41 4c 49 5a 45 44 50 52 4f 50 45    52 54 59 56 41 4c 55 45 40 40 50 42 55 74 61 67  | gSERIALIZEDPROPERTYVALUE@@PBUtag | 
| 17f40 |  50 52 4f 50 56 41 52 49 41 4e 54 40 40 47 50 41    55 31 40 50 41 4b 4b 45 32 40 5a 00 40 52 74 6c  | PROPVARIANT@@GPAU1@PAKKE2@Z.@Rtl | 
| 17f60 |  41 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69    6f 6e 43 6f 6e 74 65 78 74 55 6e 73 61 66 65 46  | ActivateActivationContextUnsafeF | 
| 17f80 |  61 73 74 40 38 00 40 52 74 6c 44 65 61 63 74 69    76 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f  | ast@8.@RtlDeactivateActivationCo | 
| 17fa0 |  6e 74 65 78 74 55 6e 73 61 66 65 46 61 73 74 40    34 00 40 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65  | ntextUnsafeFast@4.@RtlInterlocke | 
| 17fc0 |  64 50 75 73 68 4c 69 73 74 53 4c 69 73 74 40 31    36 00 40 52 74 6c 55 6c 6f 6e 67 42 79 74 65 53  | dPushListSList@16.@RtlUlongByteS | 
| 17fe0 |  77 61 70 40 34 00 40 52 74 6c 55 6c 6f 6e 67 6c    6f 6e 67 42 79 74 65 53 77 61 70 40 38 00 40 52  | wap@4.@RtlUlonglongByteSwap@8.@R | 
| 18000 |  74 6c 55 73 68 6f 72 74 42 79 74 65 53 77 61 70    40 34 00 5f 43 73 72 41 6c 6c 6f 63 61 74 65 43  | tlUshortByteSwap@4._CsrAllocateC | 
| 18020 |  61 70 74 75 72 65 42 75 66 66 65 72 40 38 00 5f    43 73 72 41 6c 6c 6f 63 61 74 65 4d 65 73 73 61  | aptureBuffer@8._CsrAllocateMessa | 
| 18040 |  67 65 50 6f 69 6e 74 65 72 40 31 32 00 5f 43 73    72 43 61 70 74 75 72 65 4d 65 73 73 61 67 65 42  | gePointer@12._CsrCaptureMessageB | 
| 18060 |  75 66 66 65 72 40 31 36 00 5f 43 73 72 43 61 70    74 75 72 65 4d 65 73 73 61 67 65 4d 75 6c 74 69  | uffer@16._CsrCaptureMessageMulti | 
| 18080 |  55 6e 69 63 6f 64 65 53 74 72 69 6e 67 73 49 6e    50 6c 61 63 65 40 31 32 00 5f 43 73 72 43 61 70  | UnicodeStringsInPlace@12._CsrCap | 
| 180a0 |  74 75 72 65 4d 65 73 73 61 67 65 53 74 72 69 6e    67 40 32 30 00 5f 43 73 72 43 61 70 74 75 72 65  | tureMessageString@20._CsrCapture | 
| 180c0 |  54 69 6d 65 6f 75 74 40 38 00 5f 43 73 72 43 6c    69 65 6e 74 43 61 6c 6c 53 65 72 76 65 72 40 31  | Timeout@8._CsrClientCallServer@1 | 
| 180e0 |  36 00 5f 43 73 72 43 6c 69 65 6e 74 43 6f 6e 6e    65 63 74 54 6f 53 65 72 76 65 72 40 32 30 00 5f  | 6._CsrClientConnectToServer@20._ | 
| 18100 |  43 73 72 46 72 65 65 43 61 70 74 75 72 65 42 75    66 66 65 72 40 34 00 5f 43 73 72 47 65 74 50 72  | CsrFreeCaptureBuffer@4._CsrGetPr | 
| 18120 |  6f 63 65 73 73 49 64 40 30 00 5f 43 73 72 49 64    65 6e 74 69 66 79 41 6c 65 72 74 61 62 6c 65 54  | ocessId@0._CsrIdentifyAlertableT | 
| 18140 |  68 72 65 61 64 40 30 00 5f 43 73 72 4e 65 77 54    68 72 65 61 64 40 30 00 5f 43 73 72 50 72 6f 62  | hread@0._CsrNewThread@0._CsrProb | 
| 18160 |  65 46 6f 72 52 65 61 64 40 31 32 00 5f 43 73 72    50 72 6f 62 65 46 6f 72 57 72 69 74 65 40 31 32  | eForRead@12._CsrProbeForWrite@12 | 
| 18180 |  00 5f 43 73 72 53 65 74 50 72 69 6f 72 69 74 79    43 6c 61 73 73 40 38 00 5f 44 62 67 42 72 65 61  | ._CsrSetPriorityClass@8._DbgBrea | 
| 181a0 |  6b 50 6f 69 6e 74 40 30 00 5f 44 62 67 50 72 69    6e 74 00 5f 44 62 67 50 72 69 6e 74 45 78 00 5f  | kPoint@0._DbgPrint._DbgPrintEx._ | 
| 181c0 |  44 62 67 50 72 69 6e 74 52 65 74 75 72 6e 43 6f    6e 74 72 6f 6c 43 00 5f 44 62 67 50 72 6f 6d 70  | DbgPrintReturnControlC._DbgPromp | 
| 181e0 |  74 40 31 32 00 5f 44 62 67 51 75 65 72 79 44 65    62 75 67 46 69 6c 74 65 72 53 74 61 74 65 40 38  | t@12._DbgQueryDebugFilterState@8 | 
| 18200 |  00 5f 44 62 67 53 65 74 44 65 62 75 67 46 69 6c    74 65 72 53 74 61 74 65 40 31 32 00 5f 44 62 67  | ._DbgSetDebugFilterState@12._Dbg | 
| 18220 |  55 69 43 6f 6e 6e 65 63 74 54 6f 44 62 67 40 30    00 5f 44 62 67 55 69 43 6f 6e 74 69 6e 75 65 40  | UiConnectToDbg@0._DbgUiContinue@ | 
| 18240 |  38 00 5f 44 62 67 55 69 43 6f 6e 76 65 72 74 53    74 61 74 65 43 68 61 6e 67 65 53 74 72 75 63 74  | 8._DbgUiConvertStateChangeStruct | 
| 18260 |  75 72 65 40 38 00 5f 44 62 67 55 69 44 65 62 75    67 41 63 74 69 76 65 50 72 6f 63 65 73 73 40 34  | ure@8._DbgUiDebugActiveProcess@4 | 
| 18280 |  00 5f 44 62 67 55 69 47 65 74 54 68 72 65 61 64    44 65 62 75 67 4f 62 6a 65 63 74 40 30 00 5f 44  | ._DbgUiGetThreadDebugObject@0._D | 
| 182a0 |  62 67 55 69 49 73 73 75 65 52 65 6d 6f 74 65 42    72 65 61 6b 69 6e 40 34 00 5f 44 62 67 55 69 52  | bgUiIssueRemoteBreakin@4._DbgUiR | 
| 182c0 |  65 6d 6f 74 65 42 72 65 61 6b 69 6e 40 34 00 5f    44 62 67 55 69 53 65 74 54 68 72 65 61 64 44 65  | emoteBreakin@4._DbgUiSetThreadDe | 
| 182e0 |  62 75 67 4f 62 6a 65 63 74 40 34 00 5f 44 62 67    55 69 53 74 6f 70 44 65 62 75 67 67 69 6e 67 40  | bugObject@4._DbgUiStopDebugging@ | 
| 18300 |  34 00 5f 44 62 67 55 69 57 61 69 74 53 74 61 74    65 43 68 61 6e 67 65 40 38 00 5f 44 62 67 55 73  | 4._DbgUiWaitStateChange@8._DbgUs | 
| 18320 |  65 72 42 72 65 61 6b 50 6f 69 6e 74 40 30 00 5f    45 48 5f 56 69 72 74 75 61 6c 51 75 65 72 79 40  | erBreakPoint@0._EH_VirtualQuery@ | 
| 18340 |  31 32 00 5f 45 74 77 43 6f 6e 74 72 6f 6c 54 72    61 63 65 41 40 32 30 00 5f 45 74 77 43 6f 6e 74  | 12._EtwControlTraceA@20._EtwCont | 
| 18360 |  72 6f 6c 54 72 61 63 65 57 40 32 30 00 5f 45 74    77 43 72 65 61 74 65 54 72 61 63 65 49 6e 73 74  | rolTraceW@20._EtwCreateTraceInst | 
| 18380 |  61 6e 63 65 49 64 40 38 00 5f 45 74 77 45 6e 61    62 6c 65 54 72 61 63 65 40 32 34 00 5f 45 74 77  | anceId@8._EtwEnableTrace@24._Etw | 
| 183a0 |  45 6e 75 6d 65 72 61 74 65 54 72 61 63 65 47 75    69 64 73 40 31 32 00 5f 45 74 77 46 6c 75 73 68  | EnumerateTraceGuids@12._EtwFlush | 
| 183c0 |  54 72 61 63 65 41 40 31 36 00 5f 45 74 77 46 6c    75 73 68 54 72 61 63 65 57 40 31 36 00 5f 45 74  | TraceA@16._EtwFlushTraceW@16._Et | 
| 183e0 |  77 47 65 74 54 72 61 63 65 45 6e 61 62 6c 65 46    6c 61 67 73 40 38 00 5f 45 74 77 47 65 74 54 72  | wGetTraceEnableFlags@8._EtwGetTr | 
| 18400 |  61 63 65 45 6e 61 62 6c 65 4c 65 76 65 6c 40 38    00 5f 45 74 77 47 65 74 54 72 61 63 65 4c 6f 67  | aceEnableLevel@8._EtwGetTraceLog | 
| 18420 |  67 65 72 48 61 6e 64 6c 65 40 34 00 5f 45 74 77    4e 6f 74 69 66 69 63 61 74 69 6f 6e 52 65 67 69  | gerHandle@4._EtwNotificationRegi | 
| 18440 |  73 74 72 61 74 69 6f 6e 41 40 32 30 00 5f 45 74    77 4e 6f 74 69 66 69 63 61 74 69 6f 6e 52 65 67  | strationA@20._EtwNotificationReg | 
| 18460 |  69 73 74 72 61 74 69 6f 6e 57 40 32 30 00 5f 45    74 77 51 75 65 72 79 41 6c 6c 54 72 61 63 65 73  | istrationW@20._EtwQueryAllTraces | 
| 18480 |  41 40 31 32 00 5f 45 74 77 51 75 65 72 79 41 6c    6c 54 72 61 63 65 73 57 40 31 32 00 5f 45 74 77  | A@12._EtwQueryAllTracesW@12._Etw | 
| 184a0 |  51 75 65 72 79 54 72 61 63 65 41 40 31 36 00 5f    45 74 77 51 75 65 72 79 54 72 61 63 65 57 40 31  | QueryTraceA@16._EtwQueryTraceW@1 | 
| 184c0 |  36 00 5f 45 74 77 52 65 63 65 69 76 65 4e 6f 74    69 66 69 63 61 74 69 6f 6e 73 41 40 31 36 00 5f  | 6._EtwReceiveNotificationsA@16._ | 
| 184e0 |  45 74 77 52 65 63 65 69 76 65 4e 6f 74 69 66 69    63 61 74 69 6f 6e 73 57 40 31 36 00 5f 45 74 77  | EtwReceiveNotificationsW@16._Etw | 
| 18500 |  52 65 67 69 73 74 65 72 54 72 61 63 65 47 75 69    64 73 41 40 33 32 00 5f 45 74 77 52 65 67 69 73  | RegisterTraceGuidsA@32._EtwRegis | 
| 18520 |  74 65 72 54 72 61 63 65 47 75 69 64 73 57 40 33    32 00 5f 45 74 77 53 74 61 72 74 54 72 61 63 65  | terTraceGuidsW@32._EtwStartTrace | 
| 18540 |  41 40 31 32 00 5f 45 74 77 53 74 61 72 74 54 72    61 63 65 57 40 31 32 00 5f 45 74 77 53 74 6f 70  | A@12._EtwStartTraceW@12._EtwStop | 
| 18560 |  54 72 61 63 65 41 40 31 36 00 5f 45 74 77 53 74    6f 70 54 72 61 63 65 57 40 31 36 00 5f 45 74 77  | TraceA@16._EtwStopTraceW@16._Etw | 
| 18580 |  54 72 61 63 65 45 76 65 6e 74 40 31 32 00 5f 45    74 77 54 72 61 63 65 45 76 65 6e 74 49 6e 73 74  | TraceEvent@12._EtwTraceEventInst | 
| 185a0 |  61 6e 63 65 40 32 30 00 5f 45 74 77 54 72 61 63    65 4d 65 73 73 61 67 65 00 5f 45 74 77 54 72 61  | ance@20._EtwTraceMessage._EtwTra | 
| 185c0 |  63 65 4d 65 73 73 61 67 65 56 61 40 32 34 00 5f    45 74 77 55 6e 72 65 67 69 73 74 65 72 54 72 61  | ceMessageVa@24._EtwUnregisterTra | 
| 185e0 |  63 65 47 75 69 64 73 40 38 00 5f 45 74 77 55 70    64 61 74 65 54 72 61 63 65 41 40 31 36 00 5f 45  | ceGuids@8._EtwUpdateTraceA@16._E | 
| 18600 |  74 77 55 70 64 61 74 65 54 72 61 63 65 57 40 31    36 00 5f 45 74 77 70 47 65 74 54 72 61 63 65 42  | twUpdateTraceW@16._EtwpGetTraceB | 
| 18620 |  75 66 66 65 72 40 31 36 00 5f 45 74 77 70 53 65    74 48 57 43 6f 6e 66 69 67 46 75 6e 63 74 69 6f  | uffer@16._EtwpSetHWConfigFunctio | 
| 18640 |  6e 40 38 00 5f 4b 69 46 61 73 74 53 79 73 74 65    6d 43 61 6c 6c 40 30 00 5f 4b 69 46 61 73 74 53  | n@8._KiFastSystemCall@0._KiFastS | 
| 18660 |  79 73 74 65 6d 43 61 6c 6c 52 65 74 40 30 00 5f    4b 69 49 6e 74 53 79 73 74 65 6d 43 61 6c 6c 40  | ystemCallRet@0._KiIntSystemCall@ | 
| 18680 |  30 00 5f 4b 69 52 61 69 73 65 55 73 65 72 45 78    63 65 70 74 69 6f 6e 44 69 73 70 61 74 63 68 65  | 0._KiRaiseUserExceptionDispatche | 
| 186a0 |  72 40 30 00 5f 4b 69 55 73 65 72 41 70 63 44 69    73 70 61 74 63 68 65 72 40 31 36 00 5f 4b 69 55  | r@0._KiUserApcDispatcher@16._KiU | 
| 186c0 |  73 65 72 43 61 6c 6c 62 61 63 6b 44 69 73 70 61    74 63 68 65 72 40 31 32 00 5f 4b 69 55 73 65 72  | serCallbackDispatcher@12._KiUser | 
| 186e0 |  45 78 63 65 70 74 69 6f 6e 44 69 73 70 61 74 63    68 65 72 40 38 00 5f 4c 64 72 41 63 63 65 73 73  | ExceptionDispatcher@8._LdrAccess | 
| 18700 |  4f 75 74 4f 66 50 72 6f 63 65 73 73 52 65 73 6f    75 72 63 65 40 32 30 00 5f 4c 64 72 41 63 63 65  | OutOfProcessResource@20._LdrAcce | 
| 18720 |  73 73 52 65 73 6f 75 72 63 65 40 31 36 00 5f 4c    64 72 41 64 64 52 65 66 44 6c 6c 40 38 00 5f 4c  | ssResource@16._LdrAddRefDll@8._L | 
| 18740 |  64 72 41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75    72 63 65 73 45 6e 61 62 6c 65 64 40 30 00 5f 4c  | drAlternateResourcesEnabled@0._L | 
| 18760 |  64 72 43 72 65 61 74 65 4f 75 74 4f 66 50 72 6f    63 65 73 73 49 6d 61 67 65 40 32 30 00 5f 4c 64  | drCreateOutOfProcessImage@20._Ld | 
| 18780 |  72 44 65 73 74 72 6f 79 4f 75 74 4f 66 50 72 6f    63 65 73 73 49 6d 61 67 65 40 34 00 5f 4c 64 72  | rDestroyOutOfProcessImage@4._Ldr | 
| 187a0 |  44 69 73 61 62 6c 65 54 68 72 65 61 64 43 61 6c    6c 6f 75 74 73 46 6f 72 44 6c 6c 40 34 00 5f 4c  | DisableThreadCalloutsForDll@4._L | 
| 187c0 |  64 72 45 6e 75 6d 52 65 73 6f 75 72 63 65 73 40    32 30 00 5f 4c 64 72 45 6e 75 6d 65 72 61 74 65  | drEnumResources@20._LdrEnumerate | 
| 187e0 |  4c 6f 61 64 65 64 4d 6f 64 75 6c 65 73 40 31 32    00 5f 4c 64 72 46 69 6e 64 43 72 65 61 74 65 50  | LoadedModules@12._LdrFindCreateP | 
| 18800 |  72 6f 63 65 73 73 4d 61 6e 69 66 65 73 74 40 32    30 00 5f 4c 64 72 46 69 6e 64 45 6e 74 72 79 46  | rocessManifest@20._LdrFindEntryF | 
| 18820 |  6f 72 41 64 64 72 65 73 73 40 38 00 5f 4c 64 72    46 69 6e 64 52 65 73 6f 75 72 63 65 44 69 72 65  | orAddress@8._LdrFindResourceDire | 
| 18840 |  63 74 6f 72 79 5f 55 40 31 36 00 5f 4c 64 72 46    69 6e 64 52 65 73 6f 75 72 63 65 45 78 5f 55 40  | ctory_U@16._LdrFindResourceEx_U@ | 
| 18860 |  32 30 00 5f 4c 64 72 46 69 6e 64 52 65 73 6f 75    72 63 65 5f 55 40 31 36 00 5f 4c 64 72 46 6c 75  | 20._LdrFindResource_U@16._LdrFlu | 
| 18880 |  73 68 41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75    72 63 65 4d 6f 64 75 6c 65 73 40 30 00 5f 4c 64  | shAlternateResourceModules@0._Ld | 
| 188a0 |  72 47 65 74 44 6c 6c 48 61 6e 64 6c 65 40 31 36    00 5f 4c 64 72 47 65 74 44 6c 6c 48 61 6e 64 6c  | rGetDllHandle@16._LdrGetDllHandl | 
| 188c0 |  65 45 78 40 32 30 00 5f 4c 64 72 47 65 74 50 72    6f 63 65 64 75 72 65 41 64 64 72 65 73 73 40 31  | eEx@20._LdrGetProcedureAddress@1 | 
| 188e0 |  36 00 5f 4c 64 72 48 6f 74 50 61 74 63 68 52 6f    75 74 69 6e 65 40 34 00 5f 4c 64 72 49 6e 69 74  | 6._LdrHotPatchRoutine@4._LdrInit | 
| 18900 |  53 68 69 6d 45 6e 67 69 6e 65 44 79 6e 61 6d 69    63 40 34 00 5f 4c 64 72 49 6e 69 74 69 61 6c 69  | ShimEngineDynamic@4._LdrInitiali | 
| 18920 |  7a 65 54 68 75 6e 6b 40 31 36 00 5f 4c 64 72 4c    6f 61 64 41 6c 74 65 72 6e 61 74 65 52 65 73 6f  | zeThunk@16._LdrLoadAlternateReso | 
| 18940 |  75 72 63 65 4d 6f 64 75 6c 65 40 38 00 5f 4c 64    72 4c 6f 61 64 44 6c 6c 40 31 36 00 5f 4c 64 72  | urceModule@8._LdrLoadDll@16._Ldr | 
| 18960 |  4c 6f 63 6b 4c 6f 61 64 65 72 4c 6f 63 6b 40 31    32 00 5f 4c 64 72 4f 70 65 6e 49 6d 61 67 65 46  | LockLoaderLock@12._LdrOpenImageF | 
| 18980 |  69 6c 65 4f 70 74 69 6f 6e 73 4b 65 79 40 31 32    00 5f 4c 64 72 50 72 6f 63 65 73 73 52 65 6c 6f  | ileOptionsKey@12._LdrProcessRelo | 
| 189a0 |  63 61 74 69 6f 6e 42 6c 6f 63 6b 40 31 36 00 5f    4c 64 72 51 75 65 72 79 49 6d 61 67 65 46 69 6c  | cationBlock@16._LdrQueryImageFil | 
| 189c0 |  65 45 78 65 63 75 74 69 6f 6e 4f 70 74 69 6f 6e    73 40 32 34 00 5f 4c 64 72 51 75 65 72 79 49 6d  | eExecutionOptions@24._LdrQueryIm | 
| 189e0 |  61 67 65 46 69 6c 65 45 78 65 63 75 74 69 6f 6e    4f 70 74 69 6f 6e 73 45 78 40 32 38 00 5f 4c 64  | ageFileExecutionOptionsEx@28._Ld | 
| 18a00 |  72 51 75 65 72 79 49 6d 61 67 65 46 69 6c 65 4b    65 79 4f 70 74 69 6f 6e 40 32 34 00 5f 4c 64 72  | rQueryImageFileKeyOption@24._Ldr | 
| 18a20 |  51 75 65 72 79 50 72 6f 63 65 73 73 4d 6f 64 75    6c 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 32  | QueryProcessModuleInformation@12 | 
| 18a40 |  00 5f 4c 64 72 53 65 74 41 70 70 43 6f 6d 70 61    74 44 6c 6c 52 65 64 69 72 65 63 74 69 6f 6e 43  | ._LdrSetAppCompatDllRedirectionC | 
| 18a60 |  61 6c 6c 62 61 63 6b 40 31 32 00 5f 4c 64 72 53    65 74 44 6c 6c 4d 61 6e 69 66 65 73 74 50 72 6f  | allback@12._LdrSetDllManifestPro | 
| 18a80 |  62 65 72 40 34 00 5f 4c 64 72 53 68 75 74 64 6f    77 6e 50 72 6f 63 65 73 73 40 30 00 5f 4c 64 72  | ber@4._LdrShutdownProcess@0._Ldr | 
| 18aa0 |  53 68 75 74 64 6f 77 6e 54 68 72 65 61 64 40 30    00 5f 4c 64 72 55 6e 6c 6f 61 64 41 6c 74 65 72  | ShutdownThread@0._LdrUnloadAlter | 
| 18ac0 |  6e 61 74 65 52 65 73 6f 75 72 63 65 4d 6f 64 75    6c 65 40 34 00 5f 4c 64 72 55 6e 6c 6f 61 64 44  | nateResourceModule@4._LdrUnloadD | 
| 18ae0 |  6c 6c 40 34 00 5f 4c 64 72 55 6e 6c 6f 63 6b 4c    6f 61 64 65 72 4c 6f 63 6b 40 38 00 5f 4c 64 72  | ll@4._LdrUnlockLoaderLock@8._Ldr | 
| 18b00 |  56 65 72 69 66 79 49 6d 61 67 65 4d 61 74 63 68    65 73 43 68 65 63 6b 73 75 6d 40 31 36 00 5f 4e  | VerifyImageMatchesChecksum@16._N | 
| 18b20 |  6c 73 41 6e 73 69 43 6f 64 65 50 61 67 65 00 5f    4e 6c 73 4d 62 43 6f 64 65 50 61 67 65 54 61 67  | lsAnsiCodePage._NlsMbCodePageTag | 
| 18b40 |  00 5f 4e 6c 73 4d 62 4f 65 6d 43 6f 64 65 50 61    67 65 54 61 67 00 5f 4e 74 41 63 63 65 70 74 43  | ._NlsMbOemCodePageTag._NtAcceptC | 
| 18b60 |  6f 6e 6e 65 63 74 50 6f 72 74 40 32 34 00 5f 4e    74 41 63 63 65 73 73 43 68 65 63 6b 40 33 32 00  | onnectPort@24._NtAccessCheck@32. | 
| 18b80 |  5f 4e 74 41 63 63 65 73 73 43 68 65 63 6b 41 6e    64 41 75 64 69 74 41 6c 61 72 6d 40 34 34 00 5f  | _NtAccessCheckAndAuditAlarm@44._ | 
| 18ba0 |  4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54    79 70 65 40 34 34 00 5f 4e 74 41 63 63 65 73 73  | NtAccessCheckByType@44._NtAccess | 
| 18bc0 |  43 68 65 63 6b 42 79 54 79 70 65 41 6e 64 41 75    64 69 74 41 6c 61 72 6d 40 36 34 00 5f 4e 74 41  | CheckByTypeAndAuditAlarm@64._NtA | 
| 18be0 |  63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65    52 65 73 75 6c 74 4c 69 73 74 40 34 34 00 5f 4e  | ccessCheckByTypeResultList@44._N | 
| 18c00 |  74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79    70 65 52 65 73 75 6c 74 4c 69 73 74 41 6e 64 41  | tAccessCheckByTypeResultListAndA | 
| 18c20 |  75 64 69 74 41 6c 61 72 6d 40 36 34 00 5f 4e 74    41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70  | uditAlarm@64._NtAccessCheckByTyp | 
| 18c40 |  65 52 65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75    64 69 74 41 6c 61 72 6d 42 79 48 61 6e 64 6c 65  | eResultListAndAuditAlarmByHandle | 
| 18c60 |  40 36 38 00 5f 4e 74 41 64 64 41 74 6f 6d 40 31    32 00 5f 4e 74 41 64 64 42 6f 6f 74 45 6e 74 72  | @68._NtAddAtom@12._NtAddBootEntr | 
| 18c80 |  79 40 38 00 5f 4e 74 41 64 64 44 72 69 76 65 72    45 6e 74 72 79 40 38 00 5f 4e 74 41 64 6a 75 73  | y@8._NtAddDriverEntry@8._NtAdjus | 
| 18ca0 |  74 47 72 6f 75 70 73 54 6f 6b 65 6e 40 32 34 00    5f 4e 74 41 64 6a 75 73 74 50 72 69 76 69 6c 65  | tGroupsToken@24._NtAdjustPrivile | 
| 18cc0 |  67 65 73 54 6f 6b 65 6e 40 32 34 00 5f 4e 74 41    6c 65 72 74 52 65 73 75 6d 65 54 68 72 65 61 64  | gesToken@24._NtAlertResumeThread | 
| 18ce0 |  40 38 00 5f 4e 74 41 6c 65 72 74 54 68 72 65 61    64 40 34 00 5f 4e 74 41 6c 6c 6f 63 61 74 65 4c  | @8._NtAlertThread@4._NtAllocateL | 
| 18d00 |  6f 63 61 6c 6c 79 55 6e 69 71 75 65 49 64 40 34    00 5f 4e 74 41 6c 6c 6f 63 61 74 65 55 73 65 72  | ocallyUniqueId@4._NtAllocateUser | 
| 18d20 |  50 68 79 73 69 63 61 6c 50 61 67 65 73 40 31 32    00 5f 4e 74 41 6c 6c 6f 63 61 74 65 55 75 69 64  | PhysicalPages@12._NtAllocateUuid | 
| 18d40 |  73 40 31 36 00 5f 4e 74 41 6c 6c 6f 63 61 74 65    56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 32 34  | s@16._NtAllocateVirtualMemory@24 | 
| 18d60 |  00 5f 4e 74 41 70 70 68 65 6c 70 43 61 63 68 65    43 6f 6e 74 72 6f 6c 40 38 00 5f 4e 74 41 72 65  | ._NtApphelpCacheControl@8._NtAre | 
| 18d80 |  4d 61 70 70 65 64 46 69 6c 65 73 54 68 65 53 61    6d 65 40 38 00 5f 4e 74 41 73 73 69 67 6e 50 72  | MappedFilesTheSame@8._NtAssignPr | 
| 18da0 |  6f 63 65 73 73 54 6f 4a 6f 62 4f 62 6a 65 63 74    40 38 00 5f 4e 74 43 61 6c 6c 62 61 63 6b 52 65  | ocessToJobObject@8._NtCallbackRe | 
| 18dc0 |  74 75 72 6e 40 31 32 00 5f 4e 74 43 61 6e 63 65    6c 44 65 76 69 63 65 57 61 6b 65 75 70 52 65 71  | turn@12._NtCancelDeviceWakeupReq | 
| 18de0 |  75 65 73 74 40 34 00 5f 4e 74 43 61 6e 63 65 6c    49 6f 46 69 6c 65 40 38 00 5f 4e 74 43 61 6e 63  | uest@4._NtCancelIoFile@8._NtCanc | 
| 18e00 |  65 6c 54 69 6d 65 72 40 38 00 5f 4e 74 43 6c 65    61 72 45 76 65 6e 74 40 34 00 5f 4e 74 43 6c 6f  | elTimer@8._NtClearEvent@4._NtClo | 
| 18e20 |  73 65 40 34 00 5f 4e 74 43 6c 6f 73 65 4f 62 6a    65 63 74 41 75 64 69 74 41 6c 61 72 6d 40 31 32  | se@4._NtCloseObjectAuditAlarm@12 | 
| 18e40 |  00 5f 4e 74 43 6f 6d 70 61 63 74 4b 65 79 73 40    38 00 5f 4e 74 43 6f 6d 70 61 72 65 54 6f 6b 65  | ._NtCompactKeys@8._NtCompareToke | 
| 18e60 |  6e 73 40 31 32 00 5f 4e 74 43 6f 6d 70 6c 65 74    65 43 6f 6e 6e 65 63 74 50 6f 72 74 40 34 00 5f  | ns@12._NtCompleteConnectPort@4._ | 
| 18e80 |  4e 74 43 6f 6d 70 72 65 73 73 4b 65 79 40 34 00    5f 4e 74 43 6f 6e 6e 65 63 74 50 6f 72 74 40 33  | NtCompressKey@4._NtConnectPort@3 | 
| 18ea0 |  32 00 5f 4e 74 43 6f 6e 74 69 6e 75 65 40 38 00    5f 4e 74 43 72 65 61 74 65 44 65 62 75 67 4f 62  | 2._NtContinue@8._NtCreateDebugOb | 
| 18ec0 |  6a 65 63 74 40 31 36 00 5f 4e 74 43 72 65 61 74    65 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74  | ject@16._NtCreateDirectoryObject | 
| 18ee0 |  40 31 32 00 5f 4e 74 43 72 65 61 74 65 45 76 65    6e 74 40 32 30 00 5f 4e 74 43 72 65 61 74 65 45  | @12._NtCreateEvent@20._NtCreateE | 
| 18f00 |  76 65 6e 74 50 61 69 72 40 31 32 00 5f 4e 74 43    72 65 61 74 65 46 69 6c 65 40 34 34 00 5f 4e 74  | ventPair@12._NtCreateFile@44._Nt | 
| 18f20 |  43 72 65 61 74 65 49 6f 43 6f 6d 70 6c 65 74 69    6f 6e 40 31 36 00 5f 4e 74 43 72 65 61 74 65 4a  | CreateIoCompletion@16._NtCreateJ | 
| 18f40 |  6f 62 4f 62 6a 65 63 74 40 31 32 00 5f 4e 74 43    72 65 61 74 65 4a 6f 62 53 65 74 40 31 32 00 5f  | obObject@12._NtCreateJobSet@12._ | 
| 18f60 |  4e 74 43 72 65 61 74 65 4b 65 79 40 32 38 00 5f    4e 74 43 72 65 61 74 65 4b 65 79 65 64 45 76 65  | NtCreateKey@28._NtCreateKeyedEve | 
| 18f80 |  6e 74 40 31 36 00 5f 4e 74 43 72 65 61 74 65 4d    61 69 6c 73 6c 6f 74 46 69 6c 65 40 33 32 00 5f  | nt@16._NtCreateMailslotFile@32._ | 
| 18fa0 |  4e 74 43 72 65 61 74 65 4d 75 74 61 6e 74 40 31    36 00 5f 4e 74 43 72 65 61 74 65 4e 61 6d 65 64  | NtCreateMutant@16._NtCreateNamed | 
| 18fc0 |  50 69 70 65 46 69 6c 65 40 35 36 00 5f 4e 74 43    72 65 61 74 65 50 61 67 69 6e 67 46 69 6c 65 40  | PipeFile@56._NtCreatePagingFile@ | 
| 18fe0 |  31 36 00 5f 4e 74 43 72 65 61 74 65 50 6f 72 74    40 32 30 00 5f 4e 74 43 72 65 61 74 65 50 72 6f  | 16._NtCreatePort@20._NtCreatePro | 
| 19000 |  63 65 73 73 40 33 32 00 5f 4e 74 43 72 65 61 74    65 50 72 6f 63 65 73 73 45 78 40 33 36 00 5f 4e  | cess@32._NtCreateProcessEx@36._N | 
| 19020 |  74 43 72 65 61 74 65 50 72 6f 66 69 6c 65 40 33    36 00 5f 4e 74 43 72 65 61 74 65 53 65 63 74 69  | tCreateProfile@36._NtCreateSecti | 
| 19040 |  6f 6e 40 32 38 00 5f 4e 74 43 72 65 61 74 65 53    65 6d 61 70 68 6f 72 65 40 32 30 00 5f 4e 74 43  | on@28._NtCreateSemaphore@20._NtC | 
| 19060 |  72 65 61 74 65 53 79 6d 62 6f 6c 69 63 4c 69 6e    6b 4f 62 6a 65 63 74 40 31 36 00 5f 4e 74 43 72  | reateSymbolicLinkObject@16._NtCr | 
| 19080 |  65 61 74 65 54 68 72 65 61 64 40 33 32 00 5f 4e    74 43 72 65 61 74 65 54 69 6d 65 72 40 31 36 00  | eateThread@32._NtCreateTimer@16. | 
| 190a0 |  5f 4e 74 43 72 65 61 74 65 54 6f 6b 65 6e 40 35    32 00 5f 4e 74 43 72 65 61 74 65 57 61 69 74 61  | _NtCreateToken@52._NtCreateWaita | 
| 190c0 |  62 6c 65 50 6f 72 74 40 32 30 00 5f 4e 74 43 75    72 72 65 6e 74 54 65 62 40 30 00 5f 4e 74 44 65  | blePort@20._NtCurrentTeb@0._NtDe | 
| 190e0 |  62 75 67 41 63 74 69 76 65 50 72 6f 63 65 73 73    40 38 00 5f 4e 74 44 65 62 75 67 43 6f 6e 74 69  | bugActiveProcess@8._NtDebugConti | 
| 19100 |  6e 75 65 40 31 32 00 5f 4e 74 44 65 6c 61 79 45    78 65 63 75 74 69 6f 6e 40 38 00 5f 4e 74 44 65  | nue@12._NtDelayExecution@8._NtDe | 
| 19120 |  6c 65 74 65 41 74 6f 6d 40 34 00 5f 4e 74 44 65    6c 65 74 65 42 6f 6f 74 45 6e 74 72 79 40 34 00  | leteAtom@4._NtDeleteBootEntry@4. | 
| 19140 |  5f 4e 74 44 65 6c 65 74 65 44 72 69 76 65 72 45    6e 74 72 79 40 34 00 5f 4e 74 44 65 6c 65 74 65  | _NtDeleteDriverEntry@4._NtDelete | 
| 19160 |  46 69 6c 65 40 34 00 5f 4e 74 44 65 6c 65 74 65    4b 65 79 40 34 00 5f 4e 74 44 65 6c 65 74 65 4f  | File@4._NtDeleteKey@4._NtDeleteO | 
| 19180 |  62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 40    31 32 00 5f 4e 74 44 65 6c 65 74 65 56 61 6c 75  | bjectAuditAlarm@12._NtDeleteValu | 
| 191a0 |  65 4b 65 79 40 38 00 5f 4e 74 44 65 76 69 63 65    49 6f 43 6f 6e 74 72 6f 6c 46 69 6c 65 40 34 30  | eKey@8._NtDeviceIoControlFile@40 | 
| 191c0 |  00 5f 4e 74 44 69 73 70 6c 61 79 53 74 72 69 6e    67 40 34 00 5f 4e 74 44 75 70 6c 69 63 61 74 65  | ._NtDisplayString@4._NtDuplicate | 
| 191e0 |  4f 62 6a 65 63 74 40 32 38 00 5f 4e 74 44 75 70    6c 69 63 61 74 65 54 6f 6b 65 6e 40 32 34 00 5f  | Object@28._NtDuplicateToken@24._ | 
| 19200 |  4e 74 45 6e 75 6d 65 72 61 74 65 42 6f 6f 74 45    6e 74 72 69 65 73 40 38 00 5f 4e 74 45 6e 75 6d  | NtEnumerateBootEntries@8._NtEnum | 
| 19220 |  65 72 61 74 65 44 72 69 76 65 72 45 6e 74 72 69    65 73 40 38 00 5f 4e 74 45 6e 75 6d 65 72 61 74  | erateDriverEntries@8._NtEnumerat | 
| 19240 |  65 4b 65 79 40 32 34 00 5f 4e 74 45 6e 75 6d 65    72 61 74 65 53 79 73 74 65 6d 45 6e 76 69 72 6f  | eKey@24._NtEnumerateSystemEnviro | 
| 19260 |  6e 6d 65 6e 74 56 61 6c 75 65 73 45 78 40 31 32    00 5f 4e 74 45 6e 75 6d 65 72 61 74 65 56 61 6c  | nmentValuesEx@12._NtEnumerateVal | 
| 19280 |  75 65 4b 65 79 40 32 34 00 5f 4e 74 45 78 74 65    6e 64 53 65 63 74 69 6f 6e 40 38 00 5f 4e 74 46  | ueKey@24._NtExtendSection@8._NtF | 
| 192a0 |  69 6c 74 65 72 54 6f 6b 65 6e 40 32 34 00 5f 4e    74 46 69 6e 64 41 74 6f 6d 40 31 32 00 5f 4e 74  | ilterToken@24._NtFindAtom@12._Nt | 
| 192c0 |  46 6c 75 73 68 42 75 66 66 65 72 73 46 69 6c 65    40 38 00 5f 4e 74 46 6c 75 73 68 49 6e 73 74 72  | FlushBuffersFile@8._NtFlushInstr | 
| 192e0 |  75 63 74 69 6f 6e 43 61 63 68 65 40 31 32 00 5f    4e 74 46 6c 75 73 68 4b 65 79 40 34 00 5f 4e 74  | uctionCache@12._NtFlushKey@4._Nt | 
| 19300 |  46 6c 75 73 68 56 69 72 74 75 61 6c 4d 65 6d 6f    72 79 40 31 36 00 5f 4e 74 46 6c 75 73 68 57 72  | FlushVirtualMemory@16._NtFlushWr | 
| 19320 |  69 74 65 42 75 66 66 65 72 40 30 00 5f 4e 74 46    72 65 65 55 73 65 72 50 68 79 73 69 63 61 6c 50  | iteBuffer@0._NtFreeUserPhysicalP | 
| 19340 |  61 67 65 73 40 31 32 00 5f 4e 74 46 72 65 65 56    69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 31 36 00  | ages@12._NtFreeVirtualMemory@16. | 
| 19360 |  5f 4e 74 46 73 43 6f 6e 74 72 6f 6c 46 69 6c 65    40 34 30 00 5f 4e 74 47 65 74 43 6f 6e 74 65 78  | _NtFsControlFile@40._NtGetContex | 
| 19380 |  74 54 68 72 65 61 64 40 38 00 5f 4e 74 47 65 74    43 75 72 72 65 6e 74 50 72 6f 63 65 73 73 6f 72  | tThread@8._NtGetCurrentProcessor | 
| 193a0 |  4e 75 6d 62 65 72 40 30 00 5f 4e 74 47 65 74 44    65 76 69 63 65 50 6f 77 65 72 53 74 61 74 65 40  | Number@0._NtGetDevicePowerState@ | 
| 193c0 |  38 00 5f 4e 74 47 65 74 50 6c 75 67 50 6c 61 79    45 76 65 6e 74 40 31 36 00 5f 4e 74 47 65 74 54  | 8._NtGetPlugPlayEvent@16._NtGetT | 
| 193e0 |  69 63 6b 43 6f 75 6e 74 40 30 00 5f 4e 74 47 65    74 57 72 69 74 65 57 61 74 63 68 40 32 38 00 5f  | ickCount@0._NtGetWriteWatch@28._ | 
| 19400 |  4e 74 49 6d 70 65 72 73 6f 6e 61 74 65 41 6e 6f    6e 79 6d 6f 75 73 54 6f 6b 65 6e 40 34 00 5f 4e  | NtImpersonateAnonymousToken@4._N | 
| 19420 |  74 49 6d 70 65 72 73 6f 6e 61 74 65 43 6c 69 65    6e 74 4f 66 50 6f 72 74 40 38 00 5f 4e 74 49 6d  | tImpersonateClientOfPort@8._NtIm | 
| 19440 |  70 65 72 73 6f 6e 61 74 65 54 68 72 65 61 64 40    31 32 00 5f 4e 74 49 6e 69 74 69 61 6c 69 7a 65  | personateThread@12._NtInitialize | 
| 19460 |  52 65 67 69 73 74 72 79 40 34 00 5f 4e 74 49 6e    69 74 69 61 74 65 50 6f 77 65 72 41 63 74 69 6f  | Registry@4._NtInitiatePowerActio | 
| 19480 |  6e 40 31 36 00 5f 4e 74 49 73 50 72 6f 63 65 73    73 49 6e 4a 6f 62 40 38 00 5f 4e 74 49 73 53 79  | n@16._NtIsProcessInJob@8._NtIsSy | 
| 194a0 |  73 74 65 6d 52 65 73 75 6d 65 41 75 74 6f 6d 61    74 69 63 40 30 00 5f 4e 74 4c 69 73 74 65 6e 50  | stemResumeAutomatic@0._NtListenP | 
| 194c0 |  6f 72 74 40 38 00 5f 4e 74 4c 6f 61 64 44 72 69    76 65 72 40 34 00 5f 4e 74 4c 6f 61 64 4b 65 79  | ort@8._NtLoadDriver@4._NtLoadKey | 
| 194e0 |  32 40 31 32 00 5f 4e 74 4c 6f 61 64 4b 65 79 40    38 00 5f 4e 74 4c 6f 61 64 4b 65 79 45 78 40 31  | 2@12._NtLoadKey@8._NtLoadKeyEx@1 | 
| 19500 |  36 00 5f 4e 74 4c 6f 63 6b 46 69 6c 65 40 34 30    00 5f 4e 74 4c 6f 63 6b 50 72 6f 64 75 63 74 41  | 6._NtLockFile@40._NtLockProductA | 
| 19520 |  63 74 69 76 61 74 69 6f 6e 4b 65 79 73 40 38 00    5f 4e 74 4c 6f 63 6b 52 65 67 69 73 74 72 79 4b  | ctivationKeys@8._NtLockRegistryK | 
| 19540 |  65 79 40 34 00 5f 4e 74 4c 6f 63 6b 56 69 72 74    75 61 6c 4d 65 6d 6f 72 79 40 31 36 00 5f 4e 74  | ey@4._NtLockVirtualMemory@16._Nt | 
| 19560 |  4d 61 6b 65 50 65 72 6d 61 6e 65 6e 74 4f 62 6a    65 63 74 40 34 00 5f 4e 74 4d 61 6b 65 54 65 6d  | MakePermanentObject@4._NtMakeTem | 
| 19580 |  70 6f 72 61 72 79 4f 62 6a 65 63 74 40 34 00 5f    4e 74 4d 61 70 55 73 65 72 50 68 79 73 69 63 61  | poraryObject@4._NtMapUserPhysica | 
| 195a0 |  6c 50 61 67 65 73 40 31 32 00 5f 4e 74 4d 61 70    55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65  | lPages@12._NtMapUserPhysicalPage | 
| 195c0 |  73 53 63 61 74 74 65 72 40 31 32 00 5f 4e 74 4d    61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 40  | sScatter@12._NtMapViewOfSection@ | 
| 195e0 |  34 30 00 5f 4e 74 4d 6f 64 69 66 79 42 6f 6f 74    45 6e 74 72 79 40 34 00 5f 4e 74 4d 6f 64 69 66  | 40._NtModifyBootEntry@4._NtModif | 
| 19600 |  79 44 72 69 76 65 72 45 6e 74 72 79 40 34 00 5f    4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 44 69  | yDriverEntry@4._NtNotifyChangeDi | 
| 19620 |  72 65 63 74 6f 72 79 46 69 6c 65 40 33 36 00 5f    4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 4b 65  | rectoryFile@36._NtNotifyChangeKe | 
| 19640 |  79 40 34 30 00 5f 4e 74 4e 6f 74 69 66 79 43 68    61 6e 67 65 4d 75 6c 74 69 70 6c 65 4b 65 79 73  | y@40._NtNotifyChangeMultipleKeys | 
| 19660 |  40 34 38 00 5f 4e 74 4f 70 65 6e 44 69 72 65 63    74 6f 72 79 4f 62 6a 65 63 74 40 31 32 00 5f 4e  | @48._NtOpenDirectoryObject@12._N | 
| 19680 |  74 4f 70 65 6e 45 76 65 6e 74 40 31 32 00 5f 4e    74 4f 70 65 6e 45 76 65 6e 74 50 61 69 72 40 31  | tOpenEvent@12._NtOpenEventPair@1 | 
| 196a0 |  32 00 5f 4e 74 4f 70 65 6e 46 69 6c 65 40 32 34    00 5f 4e 74 4f 70 65 6e 49 6f 43 6f 6d 70 6c 65  | 2._NtOpenFile@24._NtOpenIoComple | 
| 196c0 |  74 69 6f 6e 40 31 32 00 5f 4e 74 4f 70 65 6e 4a    6f 62 4f 62 6a 65 63 74 40 31 32 00 5f 4e 74 4f  | tion@12._NtOpenJobObject@12._NtO | 
| 196e0 |  70 65 6e 4b 65 79 40 31 32 00 5f 4e 74 4f 70 65    6e 4b 65 79 65 64 45 76 65 6e 74 40 31 32 00 5f  | penKey@12._NtOpenKeyedEvent@12._ | 
| 19700 |  4e 74 4f 70 65 6e 4d 75 74 61 6e 74 40 31 32 00    5f 4e 74 4f 70 65 6e 4f 62 6a 65 63 74 41 75 64  | NtOpenMutant@12._NtOpenObjectAud | 
| 19720 |  69 74 41 6c 61 72 6d 40 34 38 00 5f 4e 74 4f 70    65 6e 50 72 6f 63 65 73 73 40 31 36 00 5f 4e 74  | itAlarm@48._NtOpenProcess@16._Nt | 
| 19740 |  4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e    40 31 32 00 5f 4e 74 4f 70 65 6e 50 72 6f 63 65  | OpenProcessToken@12._NtOpenProce | 
| 19760 |  73 73 54 6f 6b 65 6e 45 78 40 31 36 00 5f 4e 74    4f 70 65 6e 53 65 63 74 69 6f 6e 40 31 32 00 5f  | ssTokenEx@16._NtOpenSection@12._ | 
| 19780 |  4e 74 4f 70 65 6e 53 65 6d 61 70 68 6f 72 65 40    31 32 00 5f 4e 74 4f 70 65 6e 53 79 6d 62 6f 6c  | NtOpenSemaphore@12._NtOpenSymbol | 
| 197a0 |  69 63 4c 69 6e 6b 4f 62 6a 65 63 74 40 31 32 00    5f 4e 74 4f 70 65 6e 54 68 72 65 61 64 40 31 36  | icLinkObject@12._NtOpenThread@16 | 
| 197c0 |  00 5f 4e 74 4f 70 65 6e 54 68 72 65 61 64 54 6f    6b 65 6e 40 31 36 00 5f 4e 74 4f 70 65 6e 54 68  | ._NtOpenThreadToken@16._NtOpenTh | 
| 197e0 |  72 65 61 64 54 6f 6b 65 6e 45 78 40 32 30 00 5f    4e 74 4f 70 65 6e 54 69 6d 65 72 40 31 32 00 5f  | readTokenEx@20._NtOpenTimer@12._ | 
| 19800 |  4e 74 50 6c 75 67 50 6c 61 79 43 6f 6e 74 72 6f    6c 40 31 32 00 5f 4e 74 50 6f 77 65 72 49 6e 66  | NtPlugPlayControl@12._NtPowerInf | 
| 19820 |  6f 72 6d 61 74 69 6f 6e 40 32 30 00 5f 4e 74 50    72 69 76 69 6c 65 67 65 43 68 65 63 6b 40 31 32  | ormation@20._NtPrivilegeCheck@12 | 
| 19840 |  00 5f 4e 74 50 72 69 76 69 6c 65 67 65 4f 62 6a    65 63 74 41 75 64 69 74 41 6c 61 72 6d 40 32 34  | ._NtPrivilegeObjectAuditAlarm@24 | 
| 19860 |  00 5f 4e 74 50 72 69 76 69 6c 65 67 65 64 53 65    72 76 69 63 65 41 75 64 69 74 41 6c 61 72 6d 40  | ._NtPrivilegedServiceAuditAlarm@ | 
| 19880 |  32 30 00 5f 4e 74 50 72 6f 74 65 63 74 56 69 72    74 75 61 6c 4d 65 6d 6f 72 79 40 32 30 00 5f 4e  | 20._NtProtectVirtualMemory@20._N | 
| 198a0 |  74 50 75 6c 73 65 45 76 65 6e 74 40 38 00 5f 4e    74 51 75 65 72 79 41 74 74 72 69 62 75 74 65 73  | tPulseEvent@8._NtQueryAttributes | 
| 198c0 |  46 69 6c 65 40 38 00 5f 4e 74 51 75 65 72 79 42    6f 6f 74 45 6e 74 72 79 4f 72 64 65 72 40 38 00  | File@8._NtQueryBootEntryOrder@8. | 
| 198e0 |  5f 4e 74 51 75 65 72 79 42 6f 6f 74 4f 70 74 69    6f 6e 73 40 38 00 5f 4e 74 51 75 65 72 79 44 65  | _NtQueryBootOptions@8._NtQueryDe | 
| 19900 |  62 75 67 46 69 6c 74 65 72 53 74 61 74 65 40 38    00 5f 4e 74 51 75 65 72 79 44 65 66 61 75 6c 74  | bugFilterState@8._NtQueryDefault | 
| 19920 |  4c 6f 63 61 6c 65 40 38 00 5f 4e 74 51 75 65 72    79 44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61  | Locale@8._NtQueryDefaultUILangua | 
| 19940 |  67 65 40 34 00 5f 4e 74 51 75 65 72 79 44 69 72    65 63 74 6f 72 79 46 69 6c 65 40 34 34 00 5f 4e  | ge@4._NtQueryDirectoryFile@44._N | 
| 19960 |  74 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 4f    62 6a 65 63 74 40 32 38 00 5f 4e 74 51 75 65 72  | tQueryDirectoryObject@28._NtQuer | 
| 19980 |  79 44 72 69 76 65 72 45 6e 74 72 79 4f 72 64 65    72 40 38 00 5f 4e 74 51 75 65 72 79 45 61 46 69  | yDriverEntryOrder@8._NtQueryEaFi | 
| 199a0 |  6c 65 40 33 36 00 5f 4e 74 51 75 65 72 79 45 76    65 6e 74 40 32 30 00 5f 4e 74 51 75 65 72 79 46  | le@36._NtQueryEvent@20._NtQueryF | 
| 199c0 |  75 6c 6c 41 74 74 72 69 62 75 74 65 73 46 69 6c    65 40 38 00 5f 4e 74 51 75 65 72 79 49 6e 66 6f  | ullAttributesFile@8._NtQueryInfo | 
| 199e0 |  72 6d 61 74 69 6f 6e 41 74 6f 6d 40 32 30 00 5f    4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69  | rmationAtom@20._NtQueryInformati | 
| 19a00 |  6f 6e 46 69 6c 65 40 32 30 00 5f 4e 74 51 75 65    72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62  | onFile@20._NtQueryInformationJob | 
| 19a20 |  4f 62 6a 65 63 74 40 32 30 00 5f 4e 74 51 75 65    72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 6f 72  | Object@20._NtQueryInformationPor | 
| 19a40 |  74 40 32 30 00 5f 4e 74 51 75 65 72 79 49 6e 66    6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 40  | t@20._NtQueryInformationProcess@ | 
| 19a60 |  32 30 00 5f 4e 74 51 75 65 72 79 49 6e 66 6f 72    6d 61 74 69 6f 6e 54 68 72 65 61 64 40 32 30 00  | 20._NtQueryInformationThread@20. | 
| 19a80 |  5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74    69 6f 6e 54 6f 6b 65 6e 40 32 30 00 5f 4e 74 51  | _NtQueryInformationToken@20._NtQ | 
| 19aa0 |  75 65 72 79 49 6e 73 74 61 6c 6c 55 49 4c 61 6e    67 75 61 67 65 40 34 00 5f 4e 74 51 75 65 72 79  | ueryInstallUILanguage@4._NtQuery | 
| 19ac0 |  49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c 65 40    38 00 5f 4e 74 51 75 65 72 79 49 6f 43 6f 6d 70  | IntervalProfile@8._NtQueryIoComp | 
| 19ae0 |  6c 65 74 69 6f 6e 40 32 30 00 5f 4e 74 51 75 65    72 79 4b 65 79 40 32 30 00 5f 4e 74 51 75 65 72  | letion@20._NtQueryKey@20._NtQuer | 
| 19b00 |  79 4d 75 6c 74 69 70 6c 65 56 61 6c 75 65 4b 65    79 40 32 34 00 5f 4e 74 51 75 65 72 79 4d 75 74  | yMultipleValueKey@24._NtQueryMut | 
| 19b20 |  61 6e 74 40 32 30 00 5f 4e 74 51 75 65 72 79 4f    62 6a 65 63 74 40 32 30 00 5f 4e 74 51 75 65 72  | ant@20._NtQueryObject@20._NtQuer | 
| 19b40 |  79 4f 70 65 6e 53 75 62 4b 65 79 73 40 38 00 5f    4e 74 51 75 65 72 79 4f 70 65 6e 53 75 62 4b 65  | yOpenSubKeys@8._NtQueryOpenSubKe | 
| 19b60 |  79 73 45 78 40 31 36 00 5f 4e 74 51 75 65 72 79    50 65 72 66 6f 72 6d 61 6e 63 65 43 6f 75 6e 74  | ysEx@16._NtQueryPerformanceCount | 
| 19b80 |  65 72 40 38 00 5f 4e 74 51 75 65 72 79 50 6f 72    74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63  | er@8._NtQueryPortInformationProc | 
| 19ba0 |  65 73 73 40 30 00 5f 4e 74 51 75 65 72 79 51 75    6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69  | ess@0._NtQueryQuotaInformationFi | 
| 19bc0 |  6c 65 40 33 36 00 5f 4e 74 51 75 65 72 79 53 65    63 74 69 6f 6e 40 32 30 00 5f 4e 74 51 75 65 72  | le@36._NtQuerySection@20._NtQuer | 
| 19be0 |  79 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 40    32 30 00 5f 4e 74 51 75 65 72 79 53 65 6d 61 70  | ySecurityObject@20._NtQuerySemap | 
| 19c00 |  68 6f 72 65 40 32 30 00 5f 4e 74 51 75 65 72 79    53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65  | hore@20._NtQuerySymbolicLinkObje | 
| 19c20 |  63 74 40 31 32 00 5f 4e 74 51 75 65 72 79 53 79    73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56  | ct@12._NtQuerySystemEnvironmentV | 
| 19c40 |  61 6c 75 65 40 31 36 00 5f 4e 74 51 75 65 72 79    53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e  | alue@16._NtQuerySystemEnvironmen | 
| 19c60 |  74 56 61 6c 75 65 45 78 40 32 30 00 5f 4e 74 51    75 65 72 79 53 79 73 74 65 6d 49 6e 66 6f 72 6d  | tValueEx@20._NtQuerySystemInform | 
| 19c80 |  61 74 69 6f 6e 40 31 36 00 5f 4e 74 51 75 65 72    79 53 79 73 74 65 6d 54 69 6d 65 40 34 00 5f 4e  | ation@16._NtQuerySystemTime@4._N | 
| 19ca0 |  74 51 75 65 72 79 54 69 6d 65 72 40 32 30 00 5f    4e 74 51 75 65 72 79 54 69 6d 65 72 52 65 73 6f  | tQueryTimer@20._NtQueryTimerReso | 
| 19cc0 |  6c 75 74 69 6f 6e 40 31 32 00 5f 4e 74 51 75 65    72 79 56 61 6c 75 65 4b 65 79 40 32 34 00 5f 4e  | lution@12._NtQueryValueKey@24._N | 
| 19ce0 |  74 51 75 65 72 79 56 69 72 74 75 61 6c 4d 65 6d    6f 72 79 40 32 34 00 5f 4e 74 51 75 65 72 79 56  | tQueryVirtualMemory@24._NtQueryV | 
| 19d00 |  6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e    46 69 6c 65 40 32 30 00 5f 4e 74 51 75 65 75 65  | olumeInformationFile@20._NtQueue | 
| 19d20 |  41 70 63 54 68 72 65 61 64 40 32 30 00 5f 4e 74    52 61 69 73 65 45 78 63 65 70 74 69 6f 6e 40 31  | ApcThread@20._NtRaiseException@1 | 
| 19d40 |  32 00 5f 4e 74 52 61 69 73 65 48 61 72 64 45 72    72 6f 72 40 32 34 00 5f 4e 74 52 65 61 64 46 69  | 2._NtRaiseHardError@24._NtReadFi | 
| 19d60 |  6c 65 40 33 36 00 5f 4e 74 52 65 61 64 46 69 6c    65 53 63 61 74 74 65 72 40 33 36 00 5f 4e 74 52  | le@36._NtReadFileScatter@36._NtR | 
| 19d80 |  65 61 64 52 65 71 75 65 73 74 44 61 74 61 40 32    34 00 5f 4e 74 52 65 61 64 56 69 72 74 75 61 6c  | eadRequestData@24._NtReadVirtual | 
| 19da0 |  4d 65 6d 6f 72 79 40 32 30 00 5f 4e 74 52 65 67    69 73 74 65 72 54 68 72 65 61 64 54 65 72 6d 69  | Memory@20._NtRegisterThreadTermi | 
| 19dc0 |  6e 61 74 65 50 6f 72 74 40 34 00 5f 4e 74 52 65    6c 65 61 73 65 4b 65 79 65 64 45 76 65 6e 74 40  | natePort@4._NtReleaseKeyedEvent@ | 
| 19de0 |  31 36 00 5f 4e 74 52 65 6c 65 61 73 65 4d 75 74    61 6e 74 40 38 00 5f 4e 74 52 65 6c 65 61 73 65  | 16._NtReleaseMutant@8._NtRelease | 
| 19e00 |  53 65 6d 61 70 68 6f 72 65 40 31 32 00 5f 4e 74    52 65 6d 6f 76 65 49 6f 43 6f 6d 70 6c 65 74 69  | Semaphore@12._NtRemoveIoCompleti | 
| 19e20 |  6f 6e 40 32 30 00 5f 4e 74 52 65 6d 6f 76 65 50    72 6f 63 65 73 73 44 65 62 75 67 40 38 00 5f 4e  | on@20._NtRemoveProcessDebug@8._N | 
| 19e40 |  74 52 65 6e 61 6d 65 4b 65 79 40 38 00 5f 4e 74    52 65 70 6c 61 63 65 4b 65 79 40 31 32 00 5f 4e  | tRenameKey@8._NtReplaceKey@12._N | 
| 19e60 |  74 52 65 70 6c 79 50 6f 72 74 40 38 00 5f 4e 74    52 65 70 6c 79 57 61 69 74 52 65 63 65 69 76 65  | tReplyPort@8._NtReplyWaitReceive | 
| 19e80 |  50 6f 72 74 40 31 36 00 5f 4e 74 52 65 70 6c 79    57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 45  | Port@16._NtReplyWaitReceivePortE | 
| 19ea0 |  78 40 32 30 00 5f 4e 74 52 65 70 6c 79 57 61 69    74 52 65 70 6c 79 50 6f 72 74 40 38 00 5f 4e 74  | x@20._NtReplyWaitReplyPort@8._Nt | 
| 19ec0 |  52 65 71 75 65 73 74 44 65 76 69 63 65 57 61 6b    65 75 70 40 34 00 5f 4e 74 52 65 71 75 65 73 74  | RequestDeviceWakeup@4._NtRequest | 
| 19ee0 |  50 6f 72 74 40 38 00 5f 4e 74 52 65 71 75 65 73    74 57 61 69 74 52 65 70 6c 79 50 6f 72 74 40 31  | Port@8._NtRequestWaitReplyPort@1 | 
| 19f00 |  32 00 5f 4e 74 52 65 71 75 65 73 74 57 61 6b 65    75 70 4c 61 74 65 6e 63 79 40 34 00 5f 4e 74 52  | 2._NtRequestWakeupLatency@4._NtR | 
| 19f20 |  65 73 65 74 45 76 65 6e 74 40 38 00 5f 4e 74 52    65 73 65 74 57 72 69 74 65 57 61 74 63 68 40 31  | esetEvent@8._NtResetWriteWatch@1 | 
| 19f40 |  32 00 5f 4e 74 52 65 73 74 6f 72 65 4b 65 79 40    31 32 00 5f 4e 74 52 65 73 75 6d 65 50 72 6f 63  | 2._NtRestoreKey@12._NtResumeProc | 
| 19f60 |  65 73 73 40 34 00 5f 4e 74 52 65 73 75 6d 65 54    68 72 65 61 64 40 38 00 5f 4e 74 53 61 76 65 4b  | ess@4._NtResumeThread@8._NtSaveK | 
| 19f80 |  65 79 40 38 00 5f 4e 74 53 61 76 65 4b 65 79 45    78 40 31 32 00 5f 4e 74 53 61 76 65 4d 65 72 67  | ey@8._NtSaveKeyEx@12._NtSaveMerg | 
| 19fa0 |  65 64 4b 65 79 73 40 31 32 00 5f 4e 74 53 65 63    75 72 65 43 6f 6e 6e 65 63 74 50 6f 72 74 40 33  | edKeys@12._NtSecureConnectPort@3 | 
| 19fc0 |  36 00 5f 4e 74 53 65 74 42 6f 6f 74 45 6e 74 72    79 4f 72 64 65 72 40 38 00 5f 4e 74 53 65 74 42  | 6._NtSetBootEntryOrder@8._NtSetB | 
| 19fe0 |  6f 6f 74 4f 70 74 69 6f 6e 73 40 38 00 5f 4e 74    53 65 74 43 6f 6e 74 65 78 74 54 68 72 65 61 64  | ootOptions@8._NtSetContextThread | 
| 1a000 |  40 38 00 5f 4e 74 53 65 74 44 65 62 75 67 46 69    6c 74 65 72 53 74 61 74 65 40 31 32 00 5f 4e 74  | @8._NtSetDebugFilterState@12._Nt | 
| 1a020 |  53 65 74 44 65 66 61 75 6c 74 48 61 72 64 45 72    72 6f 72 50 6f 72 74 40 34 00 5f 4e 74 53 65 74  | SetDefaultHardErrorPort@4._NtSet | 
| 1a040 |  44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 40 38 00    5f 4e 74 53 65 74 44 65 66 61 75 6c 74 55 49 4c  | DefaultLocale@8._NtSetDefaultUIL | 
| 1a060 |  61 6e 67 75 61 67 65 40 34 00 5f 4e 74 53 65 74    44 72 69 76 65 72 45 6e 74 72 79 4f 72 64 65 72  | anguage@4._NtSetDriverEntryOrder | 
| 1a080 |  40 38 00 5f 4e 74 53 65 74 45 61 46 69 6c 65 40    31 36 00 5f 4e 74 53 65 74 45 76 65 6e 74 40 38  | @8._NtSetEaFile@16._NtSetEvent@8 | 
| 1a0a0 |  00 5f 4e 74 53 65 74 45 76 65 6e 74 42 6f 6f 73    74 50 72 69 6f 72 69 74 79 40 34 00 5f 4e 74 53  | ._NtSetEventBoostPriority@4._NtS | 
| 1a0c0 |  65 74 48 69 67 68 45 76 65 6e 74 50 61 69 72 40    34 00 5f 4e 74 53 65 74 48 69 67 68 57 61 69 74  | etHighEventPair@4._NtSetHighWait | 
| 1a0e0 |  4c 6f 77 45 76 65 6e 74 50 61 69 72 40 34 00 5f    4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e  | LowEventPair@4._NtSetInformation | 
| 1a100 |  44 65 62 75 67 4f 62 6a 65 63 74 40 32 30 00 5f    4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e  | DebugObject@20._NtSetInformation | 
| 1a120 |  46 69 6c 65 40 32 30 00 5f 4e 74 53 65 74 49 6e    66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65  | File@20._NtSetInformationJobObje | 
| 1a140 |  63 74 40 31 36 00 5f 4e 74 53 65 74 49 6e 66 6f    72 6d 61 74 69 6f 6e 4b 65 79 40 31 36 00 5f 4e  | ct@16._NtSetInformationKey@16._N | 
| 1a160 |  74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f    62 6a 65 63 74 40 31 36 00 5f 4e 74 53 65 74 49  | tSetInformationObject@16._NtSetI | 
| 1a180 |  6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73    73 40 31 36 00 5f 4e 74 53 65 74 49 6e 66 6f 72  | nformationProcess@16._NtSetInfor | 
| 1a1a0 |  6d 61 74 69 6f 6e 54 68 72 65 61 64 40 31 36 00    5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f  | mationThread@16._NtSetInformatio | 
| 1a1c0 |  6e 54 6f 6b 65 6e 40 31 36 00 5f 4e 74 53 65 74    49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c 65 40  | nToken@16._NtSetIntervalProfile@ | 
| 1a1e0 |  38 00 5f 4e 74 53 65 74 49 6f 43 6f 6d 70 6c 65    74 69 6f 6e 40 32 30 00 5f 4e 74 53 65 74 4c 64  | 8._NtSetIoCompletion@20._NtSetLd | 
| 1a200 |  74 45 6e 74 72 69 65 73 40 32 34 00 5f 4e 74 53    65 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 40 34  | tEntries@24._NtSetLowEventPair@4 | 
| 1a220 |  00 5f 4e 74 53 65 74 4c 6f 77 57 61 69 74 48 69    67 68 45 76 65 6e 74 50 61 69 72 40 34 00 5f 4e  | ._NtSetLowWaitHighEventPair@4._N | 
| 1a240 |  74 53 65 74 51 75 6f 74 61 49 6e 66 6f 72 6d 61    74 69 6f 6e 46 69 6c 65 40 31 36 00 5f 4e 74 53  | tSetQuotaInformationFile@16._NtS | 
| 1a260 |  65 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74    40 31 32 00 5f 4e 74 53 65 74 53 79 73 74 65 6d  | etSecurityObject@12._NtSetSystem | 
| 1a280 |  45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65    40 38 00 5f 4e 74 53 65 74 53 79 73 74 65 6d 45  | EnvironmentValue@8._NtSetSystemE | 
| 1a2a0 |  6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45    78 40 32 30 00 5f 4e 74 53 65 74 53 79 73 74 65  | nvironmentValueEx@20._NtSetSyste | 
| 1a2c0 |  6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 32 00    5f 4e 74 53 65 74 53 79 73 74 65 6d 50 6f 77 65  | mInformation@12._NtSetSystemPowe | 
| 1a2e0 |  72 53 74 61 74 65 40 31 32 00 5f 4e 74 53 65 74    53 79 73 74 65 6d 54 69 6d 65 40 38 00 5f 4e 74  | rState@12._NtSetSystemTime@8._Nt | 
| 1a300 |  53 65 74 54 68 72 65 61 64 45 78 65 63 75 74 69    6f 6e 53 74 61 74 65 40 38 00 5f 4e 74 53 65 74  | SetThreadExecutionState@8._NtSet | 
| 1a320 |  54 69 6d 65 72 40 32 38 00 5f 4e 74 53 65 74 54    69 6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e 40 31  | Timer@28._NtSetTimerResolution@1 | 
| 1a340 |  32 00 5f 4e 74 53 65 74 55 75 69 64 53 65 65 64    40 34 00 5f 4e 74 53 65 74 56 61 6c 75 65 4b 65  | 2._NtSetUuidSeed@4._NtSetValueKe | 
| 1a360 |  79 40 32 34 00 5f 4e 74 53 65 74 56 6f 6c 75 6d    65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65  | y@24._NtSetVolumeInformationFile | 
| 1a380 |  40 32 30 00 5f 4e 74 53 68 75 74 64 6f 77 6e 53    79 73 74 65 6d 40 34 00 5f 4e 74 53 69 67 6e 61  | @20._NtShutdownSystem@4._NtSigna | 
| 1a3a0 |  6c 41 6e 64 57 61 69 74 46 6f 72 53 69 6e 67 6c    65 4f 62 6a 65 63 74 40 31 36 00 5f 4e 74 53 74  | lAndWaitForSingleObject@16._NtSt | 
| 1a3c0 |  61 72 74 50 72 6f 66 69 6c 65 40 34 00 5f 4e 74    53 74 6f 70 50 72 6f 66 69 6c 65 40 34 00 5f 4e  | artProfile@4._NtStopProfile@4._N | 
| 1a3e0 |  74 53 75 73 70 65 6e 64 50 72 6f 63 65 73 73 40    34 00 5f 4e 74 53 75 73 70 65 6e 64 54 68 72 65  | tSuspendProcess@4._NtSuspendThre | 
| 1a400 |  61 64 40 38 00 5f 4e 74 53 79 73 74 65 6d 44 65    62 75 67 43 6f 6e 74 72 6f 6c 40 32 34 00 5f 4e  | ad@8._NtSystemDebugControl@24._N | 
| 1a420 |  74 54 65 72 6d 69 6e 61 74 65 4a 6f 62 4f 62 6a    65 63 74 40 38 00 5f 4e 74 54 65 72 6d 69 6e 61  | tTerminateJobObject@8._NtTermina | 
| 1a440 |  74 65 50 72 6f 63 65 73 73 40 38 00 5f 4e 74 54    65 72 6d 69 6e 61 74 65 54 68 72 65 61 64 40 38  | teProcess@8._NtTerminateThread@8 | 
| 1a460 |  00 5f 4e 74 54 65 73 74 41 6c 65 72 74 40 30 00    5f 4e 74 54 72 61 63 65 45 76 65 6e 74 40 31 36  | ._NtTestAlert@0._NtTraceEvent@16 | 
| 1a480 |  00 5f 4e 74 54 72 61 6e 73 6c 61 74 65 46 69 6c    65 50 61 74 68 40 31 36 00 5f 4e 74 55 6e 6c 6f  | ._NtTranslateFilePath@16._NtUnlo | 
| 1a4a0 |  61 64 44 72 69 76 65 72 40 34 00 5f 4e 74 55 6e    6c 6f 61 64 4b 65 79 32 40 38 00 5f 4e 74 55 6e  | adDriver@4._NtUnloadKey2@8._NtUn | 
| 1a4c0 |  6c 6f 61 64 4b 65 79 40 34 00 5f 4e 74 55 6e 6c    6f 61 64 4b 65 79 45 78 40 38 00 5f 4e 74 55 6e  | loadKey@4._NtUnloadKeyEx@8._NtUn | 
| 1a4e0 |  6c 6f 63 6b 46 69 6c 65 40 32 30 00 5f 4e 74 55    6e 6c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f  | lockFile@20._NtUnlockVirtualMemo | 
| 1a500 |  72 79 40 31 36 00 5f 4e 74 55 6e 6d 61 70 56 69    65 77 4f 66 53 65 63 74 69 6f 6e 40 38 00 5f 4e  | ry@16._NtUnmapViewOfSection@8._N | 
| 1a520 |  74 56 64 6d 43 6f 6e 74 72 6f 6c 40 38 00 5f 4e    74 57 61 69 74 46 6f 72 44 65 62 75 67 45 76 65  | tVdmControl@8._NtWaitForDebugEve | 
| 1a540 |  6e 74 40 31 36 00 5f 4e 74 57 61 69 74 46 6f 72    4b 65 79 65 64 45 76 65 6e 74 40 31 36 00 5f 4e  | nt@16._NtWaitForKeyedEvent@16._N | 
| 1a560 |  74 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65    4f 62 6a 65 63 74 73 33 32 40 32 30 00 5f 4e 74  | tWaitForMultipleObjects32@20._Nt | 
| 1a580 |  57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f    62 6a 65 63 74 73 40 32 30 00 5f 4e 74 57 61 69  | WaitForMultipleObjects@20._NtWai | 
| 1a5a0 |  74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74    40 31 32 00 5f 4e 74 57 61 69 74 48 69 67 68 45  | tForSingleObject@12._NtWaitHighE | 
| 1a5c0 |  76 65 6e 74 50 61 69 72 40 34 00 5f 4e 74 57 61    69 74 4c 6f 77 45 76 65 6e 74 50 61 69 72 40 34  | ventPair@4._NtWaitLowEventPair@4 | 
| 1a5e0 |  00 5f 4e 74 57 72 69 74 65 46 69 6c 65 40 33 36    00 5f 4e 74 57 72 69 74 65 46 69 6c 65 47 61 74  | ._NtWriteFile@36._NtWriteFileGat | 
| 1a600 |  68 65 72 40 33 36 00 5f 4e 74 57 72 69 74 65 52    65 71 75 65 73 74 44 61 74 61 40 32 34 00 5f 4e  | her@36._NtWriteRequestData@24._N | 
| 1a620 |  74 57 72 69 74 65 56 69 72 74 75 61 6c 4d 65 6d    6f 72 79 40 32 30 00 5f 4e 74 59 69 65 6c 64 45  | tWriteVirtualMemory@20._NtYieldE | 
| 1a640 |  78 65 63 75 74 69 6f 6e 40 30 00 5f 50 66 78 46    69 6e 64 50 72 65 66 69 78 40 38 00 5f 50 66 78  | xecution@0._PfxFindPrefix@8._Pfx | 
| 1a660 |  49 6e 69 74 69 61 6c 69 7a 65 40 34 00 5f 50 66    78 49 6e 73 65 72 74 50 72 65 66 69 78 40 31 32  | Initialize@4._PfxInsertPrefix@12 | 
| 1a680 |  00 5f 50 66 78 52 65 6d 6f 76 65 50 72 65 66 69    78 40 38 00 5f 52 74 6c 41 62 6f 72 74 52 58 61  | ._PfxRemovePrefix@8._RtlAbortRXa | 
| 1a6a0 |  63 74 40 34 00 5f 52 74 6c 41 62 73 6f 6c 75 74    65 54 6f 53 65 6c 66 52 65 6c 61 74 69 76 65 53  | ct@4._RtlAbsoluteToSelfRelativeS | 
| 1a6c0 |  44 40 31 32 00 5f 52 74 6c 41 63 71 75 69 72 65    50 65 62 4c 6f 63 6b 40 30 00 5f 52 74 6c 41 63  | D@12._RtlAcquirePebLock@0._RtlAc | 
| 1a6e0 |  71 75 69 72 65 50 72 69 76 69 6c 65 67 65 40 31    36 00 5f 52 74 6c 41 63 71 75 69 72 65 52 65 73  | quirePrivilege@16._RtlAcquireRes | 
| 1a700 |  6f 75 72 63 65 45 78 63 6c 75 73 69 76 65 40 38    00 5f 52 74 6c 41 63 71 75 69 72 65 52 65 73 6f  | ourceExclusive@8._RtlAcquireReso | 
| 1a720 |  75 72 63 65 53 68 61 72 65 64 40 38 00 5f 52 74    6c 41 63 74 69 76 61 74 65 41 63 74 69 76 61 74  | urceShared@8._RtlActivateActivat | 
| 1a740 |  69 6f 6e 43 6f 6e 74 65 78 74 40 31 32 00 5f 52    74 6c 41 63 74 69 76 61 74 65 41 63 74 69 76 61  | ionContext@12._RtlActivateActiva | 
| 1a760 |  74 69 6f 6e 43 6f 6e 74 65 78 74 45 78 40 31 36    00 5f 52 74 6c 41 64 64 41 63 63 65 73 73 41 6c  | tionContextEx@16._RtlAddAccessAl | 
| 1a780 |  6c 6f 77 65 64 41 63 65 40 31 36 00 5f 52 74 6c    41 64 64 41 63 63 65 73 73 41 6c 6c 6f 77 65 64  | lowedAce@16._RtlAddAccessAllowed | 
| 1a7a0 |  41 63 65 45 78 40 32 30 00 5f 52 74 6c 41 64 64    41 63 63 65 73 73 41 6c 6c 6f 77 65 64 4f 62 6a  | AceEx@20._RtlAddAccessAllowedObj | 
| 1a7c0 |  65 63 74 41 63 65 40 32 38 00 5f 52 74 6c 41 64    64 41 63 63 65 73 73 44 65 6e 69 65 64 41 63 65  | ectAce@28._RtlAddAccessDeniedAce | 
| 1a7e0 |  40 31 36 00 5f 52 74 6c 41 64 64 41 63 63 65 73    73 44 65 6e 69 65 64 41 63 65 45 78 40 32 30 00  | @16._RtlAddAccessDeniedAceEx@20. | 
| 1a800 |  5f 52 74 6c 41 64 64 41 63 63 65 73 73 44 65 6e    69 65 64 4f 62 6a 65 63 74 41 63 65 40 32 38 00  | _RtlAddAccessDeniedObjectAce@28. | 
| 1a820 |  5f 52 74 6c 41 64 64 41 63 65 40 32 30 00 5f 52    74 6c 41 64 64 41 63 74 69 6f 6e 54 6f 52 58 61  | _RtlAddAce@20._RtlAddActionToRXa | 
| 1a840 |  63 74 40 32 34 00 5f 52 74 6c 41 64 64 41 74 6f    6d 54 6f 41 74 6f 6d 54 61 62 6c 65 40 31 32 00  | ct@24._RtlAddAtomToAtomTable@12. | 
| 1a860 |  5f 52 74 6c 41 64 64 41 74 74 72 69 62 75 74 65    41 63 74 69 6f 6e 54 6f 52 58 61 63 74 40 33 32  | _RtlAddAttributeActionToRXact@32 | 
| 1a880 |  00 5f 52 74 6c 41 64 64 41 75 64 69 74 41 63 63    65 73 73 41 63 65 40 32 34 00 5f 52 74 6c 41 64  | ._RtlAddAuditAccessAce@24._RtlAd | 
| 1a8a0 |  64 41 75 64 69 74 41 63 63 65 73 73 41 63 65 45    78 40 32 38 00 5f 52 74 6c 41 64 64 41 75 64 69  | dAuditAccessAceEx@28._RtlAddAudi | 
| 1a8c0 |  74 41 63 63 65 73 73 4f 62 6a 65 63 74 41 63 65    40 33 36 00 5f 52 74 6c 41 64 64 43 6f 6d 70 6f  | tAccessObjectAce@36._RtlAddCompo | 
| 1a8e0 |  75 6e 64 41 63 65 40 32 34 00 5f 52 74 6c 41 64    64 52 65 66 41 63 74 69 76 61 74 69 6f 6e 43 6f  | undAce@24._RtlAddRefActivationCo | 
| 1a900 |  6e 74 65 78 74 40 34 00 5f 52 74 6c 41 64 64 52    65 66 4d 65 6d 6f 72 79 53 74 72 65 61 6d 40 34  | ntext@4._RtlAddRefMemoryStream@4 | 
| 1a920 |  00 5f 52 74 6c 41 64 64 56 65 63 74 6f 72 65 64    43 6f 6e 74 69 6e 75 65 48 61 6e 64 6c 65 72 40  | ._RtlAddVectoredContinueHandler@ | 
| 1a940 |  38 00 5f 52 74 6c 41 64 64 56 65 63 74 6f 72 65    64 45 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65  | 8._RtlAddVectoredExceptionHandle | 
| 1a960 |  72 40 38 00 5f 52 74 6c 41 64 64 72 65 73 73 49    6e 53 65 63 74 69 6f 6e 54 61 62 6c 65 40 31 32  | r@8._RtlAddressInSectionTable@12 | 
| 1a980 |  00 5f 52 74 6c 41 64 6a 75 73 74 50 72 69 76 69    6c 65 67 65 40 31 36 00 5f 52 74 6c 41 6c 6c 6f  | ._RtlAdjustPrivilege@16._RtlAllo | 
| 1a9a0 |  63 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f    6e 74 65 78 74 53 74 61 63 6b 40 34 00 5f 52 74  | cateActivationContextStack@4._Rt | 
| 1a9c0 |  6c 41 6c 6c 6f 63 61 74 65 41 6e 64 49 6e 69 74    69 61 6c 69 7a 65 53 69 64 40 34 34 00 5f 52 74  | lAllocateAndInitializeSid@44._Rt | 
| 1a9e0 |  6c 41 6c 6c 6f 63 61 74 65 48 61 6e 64 6c 65 40    38 00 5f 52 74 6c 41 6c 6c 6f 63 61 74 65 48 65  | lAllocateHandle@8._RtlAllocateHe | 
| 1aa00 |  61 70 40 31 32 00 5f 52 74 6c 41 6c 74 65 72 6e    61 74 65 44 6f 73 50 61 74 68 53 65 70 65 72 61  | ap@12._RtlAlternateDosPathSepera | 
| 1aa20 |  74 6f 72 53 74 72 69 6e 67 00 5f 52 74 6c 41 6e    73 69 43 68 61 72 54 6f 55 6e 69 63 6f 64 65 43  | torString._RtlAnsiCharToUnicodeC | 
| 1aa40 |  68 61 72 40 34 00 5f 52 74 6c 41 6e 73 69 53 74    72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 69 7a  | har@4._RtlAnsiStringToUnicodeSiz | 
| 1aa60 |  65 40 34 00 5f 52 74 6c 41 6e 73 69 53 74 72 69    6e 67 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e  | e@4._RtlAnsiStringToUnicodeStrin | 
| 1aa80 |  67 40 31 32 00 5f 52 74 6c 41 70 70 65 6e 64 41    73 63 69 69 7a 54 6f 53 74 72 69 6e 67 40 38 00  | g@12._RtlAppendAsciizToString@8. | 
| 1aaa0 |  5f 52 74 6c 41 70 70 65 6e 64 50 61 74 68 45 6c    65 6d 65 6e 74 40 31 32 00 5f 52 74 6c 41 70 70  | _RtlAppendPathElement@12._RtlApp | 
| 1aac0 |  65 6e 64 53 74 72 69 6e 67 54 6f 53 74 72 69 6e    67 40 38 00 5f 52 74 6c 41 70 70 65 6e 64 55 6e  | endStringToString@8._RtlAppendUn | 
| 1aae0 |  69 63 6f 64 65 53 74 72 69 6e 67 54 6f 53 74 72    69 6e 67 40 38 00 5f 52 74 6c 41 70 70 65 6e 64  | icodeStringToString@8._RtlAppend | 
| 1ab00 |  55 6e 69 63 6f 64 65 54 6f 53 74 72 69 6e 67 40    38 00 5f 52 74 6c 41 70 70 6c 69 63 61 74 69 6f  | UnicodeToString@8._RtlApplicatio | 
| 1ab20 |  6e 56 65 72 69 66 69 65 72 53 74 6f 70 40 34 30    00 5f 52 74 6c 41 70 70 6c 79 52 58 61 63 74 40  | nVerifierStop@40._RtlApplyRXact@ | 
| 1ab40 |  34 00 5f 52 74 6c 41 70 70 6c 79 52 58 61 63 74    4e 6f 46 6c 75 73 68 40 34 00 5f 52 74 6c 41 72  | 4._RtlApplyRXactNoFlush@4._RtlAr | 
| 1ab60 |  65 41 6c 6c 41 63 63 65 73 73 65 73 47 72 61 6e    74 65 64 40 38 00 5f 52 74 6c 41 72 65 41 6e 79  | eAllAccessesGranted@8._RtlAreAny | 
| 1ab80 |  41 63 63 65 73 73 65 73 47 72 61 6e 74 65 64 40    38 00 5f 52 74 6c 41 72 65 42 69 74 73 43 6c 65  | AccessesGranted@8._RtlAreBitsCle | 
| 1aba0 |  61 72 40 31 32 00 5f 52 74 6c 41 72 65 42 69 74    73 53 65 74 40 31 32 00 5f 52 74 6c 41 73 73 65  | ar@12._RtlAreBitsSet@12._RtlAsse | 
| 1abc0 |  72 74 40 31 36 00 5f 52 74 6c 43 61 6e 63 65 6c    54 69 6d 65 72 40 38 00 5f 52 74 6c 43 61 70 74  | rt@16._RtlCancelTimer@8._RtlCapt | 
| 1abe0 |  75 72 65 43 6f 6e 74 65 78 74 40 34 00 5f 52 74    6c 43 61 70 74 75 72 65 53 74 61 63 6b 42 61 63  | ureContext@4._RtlCaptureStackBac | 
| 1ac00 |  6b 54 72 61 63 65 40 31 36 00 5f 52 74 6c 43 61    70 74 75 72 65 53 74 61 63 6b 43 6f 6e 74 65 78  | kTrace@16._RtlCaptureStackContex | 
| 1ac20 |  74 40 31 32 00 5f 52 74 6c 43 68 61 72 54 6f 49    6e 74 65 67 65 72 40 31 32 00 5f 52 74 6c 43 68  | t@12._RtlCharToInteger@12._RtlCh | 
| 1ac40 |  65 63 6b 46 6f 72 4f 72 70 68 61 6e 65 64 43 72    69 74 69 63 61 6c 53 65 63 74 69 6f 6e 73 40 34  | eckForOrphanedCriticalSections@4 | 
| 1ac60 |  00 5f 52 74 6c 43 68 65 63 6b 50 72 6f 63 65 73    73 50 61 72 61 6d 65 74 65 72 73 40 31 36 00 5f  | ._RtlCheckProcessParameters@16._ | 
| 1ac80 |  52 74 6c 43 68 65 63 6b 52 65 67 69 73 74 72 79    4b 65 79 40 38 00 5f 52 74 6c 43 6c 65 61 72 41  | RtlCheckRegistryKey@8._RtlClearA | 
| 1aca0 |  6c 6c 42 69 74 73 40 34 00 5f 52 74 6c 43 6c 65    61 72 42 69 74 73 40 31 32 00 5f 52 74 6c 43 6c  | llBits@4._RtlClearBits@12._RtlCl | 
| 1acc0 |  6f 6e 65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 40    38 00 5f 52 74 6c 43 6f 6d 6d 69 74 4d 65 6d 6f  | oneMemoryStream@8._RtlCommitMemo | 
| 1ace0 |  72 79 53 74 72 65 61 6d 40 38 00 5f 52 74 6c 43    6f 6d 70 61 63 74 48 65 61 70 40 38 00 5f 52 74  | ryStream@8._RtlCompactHeap@8._Rt | 
| 1ad00 |  6c 43 6f 6d 70 61 72 65 4d 65 6d 6f 72 79 40 31    32 00 5f 52 74 6c 43 6f 6d 70 61 72 65 4d 65 6d  | lCompareMemory@12._RtlCompareMem | 
| 1ad20 |  6f 72 79 55 6c 6f 6e 67 40 31 32 00 5f 52 74 6c    43 6f 6d 70 61 72 65 53 74 72 69 6e 67 40 31 32  | oryUlong@12._RtlCompareString@12 | 
| 1ad40 |  00 5f 52 74 6c 43 6f 6d 70 61 72 65 55 6e 69 63    6f 64 65 53 74 72 69 6e 67 40 31 32 00 5f 52 74  | ._RtlCompareUnicodeString@12._Rt | 
| 1ad60 |  6c 43 6f 6d 70 72 65 73 73 42 75 66 66 65 72 40    33 32 00 5f 52 74 6c 43 6f 6d 70 75 74 65 43 72  | lCompressBuffer@32._RtlComputeCr | 
| 1ad80 |  63 33 32 40 31 32 00 5f 52 74 6c 43 6f 6d 70 75    74 65 49 6d 70 6f 72 74 54 61 62 6c 65 48 61 73  | c32@12._RtlComputeImportTableHas | 
| 1ada0 |  68 40 31 32 00 5f 52 74 6c 43 6f 6d 70 75 74 65    50 72 69 76 61 74 69 7a 65 64 44 6c 6c 4e 61 6d  | h@12._RtlComputePrivatizedDllNam | 
| 1adc0 |  65 5f 55 40 31 32 00 5f 52 74 6c 43 6f 6e 73 6f    6c 65 4d 75 6c 74 69 42 79 74 65 54 6f 55 6e 69  | e_U@12._RtlConsoleMultiByteToUni | 
| 1ade0 |  63 6f 64 65 4e 40 32 34 00 5f 52 74 6c 43 6f 6e    76 65 72 74 45 78 63 6c 75 73 69 76 65 54 6f 53  | codeN@24._RtlConvertExclusiveToS | 
| 1ae00 |  68 61 72 65 64 40 34 00 5f 52 74 6c 43 6f 6e 76    65 72 74 4c 6f 6e 67 54 6f 4c 61 72 67 65 49 6e  | hared@4._RtlConvertLongToLargeIn | 
| 1ae20 |  74 65 67 65 72 40 34 00 5f 52 74 6c 43 6f 6e 76    65 72 74 53 68 61 72 65 64 54 6f 45 78 63 6c 75  | teger@4._RtlConvertSharedToExclu | 
| 1ae40 |  73 69 76 65 40 34 00 5f 52 74 6c 43 6f 6e 76 65    72 74 53 69 64 54 6f 55 6e 69 63 6f 64 65 53 74  | sive@4._RtlConvertSidToUnicodeSt | 
| 1ae60 |  72 69 6e 67 40 31 32 00 5f 52 74 6c 43 6f 6e 76    65 72 74 54 6f 41 75 74 6f 49 6e 68 65 72 69 74  | ring@12._RtlConvertToAutoInherit | 
| 1ae80 |  53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 40 32    34 00 5f 52 74 6c 43 6f 6e 76 65 72 74 55 69 4c  | SecurityObject@24._RtlConvertUiL | 
| 1aea0 |  69 73 74 54 6f 41 70 69 4c 69 73 74 40 31 32 00    5f 52 74 6c 43 6f 6e 76 65 72 74 55 6c 6f 6e 67  | istToApiList@12._RtlConvertUlong | 
| 1aec0 |  54 6f 4c 61 72 67 65 49 6e 74 65 67 65 72 40 34    00 5f 52 74 6c 43 6f 70 79 4c 75 69 64 40 38 00  | ToLargeInteger@4._RtlCopyLuid@8. | 
| 1aee0 |  5f 52 74 6c 43 6f 70 79 4c 75 69 64 41 6e 64 41    74 74 72 69 62 75 74 65 73 41 72 72 61 79 40 31  | _RtlCopyLuidAndAttributesArray@1 | 
| 1af00 |  32 00 5f 52 74 6c 43 6f 70 79 4d 61 70 70 65 64    4d 65 6d 6f 72 79 40 31 32 00 5f 52 74 6c 43 6f  | 2._RtlCopyMappedMemory@12._RtlCo | 
| 1af20 |  70 79 4d 65 6d 6f 72 79 53 74 72 65 61 6d 54 6f    40 32 34 00 5f 52 74 6c 43 6f 70 79 4f 75 74 4f  | pyMemoryStreamTo@24._RtlCopyOutO | 
| 1af40 |  66 50 72 6f 63 65 73 73 4d 65 6d 6f 72 79 53 74    72 65 61 6d 54 6f 40 32 34 00 5f 52 74 6c 43 6f  | fProcessMemoryStreamTo@24._RtlCo | 
| 1af60 |  70 79 53 65 63 75 72 69 74 79 44 65 73 63 72 69    70 74 6f 72 40 38 00 5f 52 74 6c 43 6f 70 79 53  | pySecurityDescriptor@8._RtlCopyS | 
| 1af80 |  69 64 40 31 32 00 5f 52 74 6c 43 6f 70 79 53 69    64 41 6e 64 41 74 74 72 69 62 75 74 65 73 41 72  | id@12._RtlCopySidAndAttributesAr | 
| 1afa0 |  72 61 79 40 32 38 00 5f 52 74 6c 43 6f 70 79 53    74 72 69 6e 67 40 38 00 5f 52 74 6c 43 6f 70 79  | ray@28._RtlCopyString@8._RtlCopy | 
| 1afc0 |  55 6e 69 63 6f 64 65 53 74 72 69 6e 67 40 38 00    5f 52 74 6c 43 72 65 61 74 65 41 63 6c 40 31 32  | UnicodeString@8._RtlCreateAcl@12 | 
| 1afe0 |  00 5f 52 74 6c 43 72 65 61 74 65 41 63 74 69 76    61 74 69 6f 6e 43 6f 6e 74 65 78 74 40 32 34 00  | ._RtlCreateActivationContext@24. | 
| 1b000 |  5f 52 74 6c 43 72 65 61 74 65 41 6e 64 53 65 74    53 44 40 32 30 00 5f 52 74 6c 43 72 65 61 74 65  | _RtlCreateAndSetSD@20._RtlCreate | 
| 1b020 |  41 74 6f 6d 54 61 62 6c 65 40 38 00 5f 52 74 6c    43 72 65 61 74 65 42 6f 6f 74 53 74 61 74 75 73  | AtomTable@8._RtlCreateBootStatus | 
| 1b040 |  44 61 74 61 46 69 6c 65 40 30 00 5f 52 74 6c 43    72 65 61 74 65 45 6e 76 69 72 6f 6e 6d 65 6e 74  | DataFile@0._RtlCreateEnvironment | 
| 1b060 |  40 38 00 5f 52 74 6c 43 72 65 61 74 65 48 65 61    70 40 32 34 00 5f 52 74 6c 43 72 65 61 74 65 50  | @8._RtlCreateHeap@24._RtlCreateP | 
| 1b080 |  72 6f 63 65 73 73 50 61 72 61 6d 65 74 65 72 73    40 34 30 00 5f 52 74 6c 43 72 65 61 74 65 51 75  | rocessParameters@40._RtlCreateQu | 
| 1b0a0 |  65 72 79 44 65 62 75 67 42 75 66 66 65 72 40 38    00 5f 52 74 6c 43 72 65 61 74 65 52 65 67 69 73  | eryDebugBuffer@8._RtlCreateRegis | 
| 1b0c0 |  74 72 79 4b 65 79 40 38 00 5f 52 74 6c 43 72 65    61 74 65 53 65 63 75 72 69 74 79 44 65 73 63 72  | tryKey@8._RtlCreateSecurityDescr | 
| 1b0e0 |  69 70 74 6f 72 40 38 00 5f 52 74 6c 43 72 65 61    74 65 53 79 73 74 65 6d 56 6f 6c 75 6d 65 49 6e  | iptor@8._RtlCreateSystemVolumeIn | 
| 1b100 |  66 6f 72 6d 61 74 69 6f 6e 46 6f 6c 64 65 72 40    34 00 5f 52 74 6c 43 72 65 61 74 65 54 61 67 48  | formationFolder@4._RtlCreateTagH | 
| 1b120 |  65 61 70 40 31 36 00 5f 52 74 6c 43 72 65 61 74    65 54 69 6d 65 72 40 32 38 00 5f 52 74 6c 43 72  | eap@16._RtlCreateTimer@28._RtlCr | 
| 1b140 |  65 61 74 65 54 69 6d 65 72 51 75 65 75 65 40 34    00 5f 52 74 6c 43 72 65 61 74 65 55 6e 69 63 6f  | eateTimerQueue@4._RtlCreateUnico | 
| 1b160 |  64 65 53 74 72 69 6e 67 40 38 00 5f 52 74 6c 43    72 65 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69  | deString@8._RtlCreateUnicodeStri | 
| 1b180 |  6e 67 46 72 6f 6d 41 73 63 69 69 7a 40 38 00 5f    52 74 6c 43 72 65 61 74 65 55 73 65 72 50 72 6f  | ngFromAsciiz@8._RtlCreateUserPro | 
| 1b1a0 |  63 65 73 73 40 34 30 00 5f 52 74 6c 43 72 65 61    74 65 55 73 65 72 53 65 63 75 72 69 74 79 4f 62  | cess@40._RtlCreateUserSecurityOb | 
| 1b1c0 |  6a 65 63 74 40 32 38 00 5f 52 74 6c 43 72 65 61    74 65 55 73 65 72 54 68 72 65 61 64 40 34 30 00  | ject@28._RtlCreateUserThread@40. | 
| 1b1e0 |  5f 52 74 6c 43 75 73 74 6f 6d 43 50 54 6f 55 6e    69 63 6f 64 65 4e 40 32 34 00 5f 52 74 6c 43 75  | _RtlCustomCPToUnicodeN@24._RtlCu | 
| 1b200 |  74 6f 76 65 72 54 69 6d 65 54 6f 53 79 73 74 65    6d 54 69 6d 65 40 31 36 00 5f 52 74 6c 44 65 4e  | toverTimeToSystemTime@16._RtlDeN | 
| 1b220 |  6f 72 6d 61 6c 69 7a 65 50 72 6f 63 65 73 73 50    61 72 61 6d 73 40 34 00 5f 52 74 6c 44 65 61 63  | ormalizeProcessParams@4._RtlDeac | 
| 1b240 |  74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e    43 6f 6e 74 65 78 74 40 38 00 5f 52 74 6c 44 65  | tivateActivationContext@8._RtlDe | 
| 1b260 |  62 75 67 50 72 69 6e 74 54 69 6d 65 73 40 30 00    5f 52 74 6c 44 65 63 6f 64 65 50 6f 69 6e 74 65  | bugPrintTimes@0._RtlDecodePointe | 
| 1b280 |  72 40 34 00 5f 52 74 6c 44 65 63 6f 64 65 53 79    73 74 65 6d 50 6f 69 6e 74 65 72 40 34 00 5f 52  | r@4._RtlDecodeSystemPointer@4._R | 
| 1b2a0 |  74 6c 44 65 63 6f 6d 70 72 65 73 73 42 75 66 66    65 72 40 32 34 00 5f 52 74 6c 44 65 63 6f 6d 70  | tlDecompressBuffer@24._RtlDecomp | 
| 1b2c0 |  72 65 73 73 46 72 61 67 6d 65 6e 74 40 33 32 00    5f 52 74 6c 44 65 66 61 75 6c 74 4e 70 41 63 6c  | ressFragment@32._RtlDefaultNpAcl | 
| 1b2e0 |  40 34 00 5f 52 74 6c 44 65 6c 65 74 65 40 34 00    5f 52 74 6c 44 65 6c 65 74 65 41 63 65 40 38 00  | @4._RtlDelete@4._RtlDeleteAce@8. | 
| 1b300 |  5f 52 74 6c 44 65 6c 65 74 65 41 74 6f 6d 46 72    6f 6d 41 74 6f 6d 54 61 62 6c 65 40 38 00 5f 52  | _RtlDeleteAtomFromAtomTable@8._R | 
| 1b320 |  74 6c 44 65 6c 65 74 65 43 72 69 74 69 63 61 6c    53 65 63 74 69 6f 6e 40 34 00 5f 52 74 6c 44 65  | tlDeleteCriticalSection@4._RtlDe | 
| 1b340 |  6c 65 74 65 45 6c 65 6d 65 6e 74 47 65 6e 65 72    69 63 54 61 62 6c 65 40 38 00 5f 52 74 6c 44 65  | leteElementGenericTable@8._RtlDe | 
| 1b360 |  6c 65 74 65 45 6c 65 6d 65 6e 74 47 65 6e 65 72    69 63 54 61 62 6c 65 41 76 6c 40 38 00 5f 52 74  | leteElementGenericTableAvl@8._Rt | 
| 1b380 |  6c 44 65 6c 65 74 65 4e 6f 53 70 6c 61 79 40 38    00 5f 52 74 6c 44 65 6c 65 74 65 52 65 67 69 73  | lDeleteNoSplay@8._RtlDeleteRegis | 
| 1b3a0 |  74 72 79 56 61 6c 75 65 40 31 32 00 5f 52 74 6c    44 65 6c 65 74 65 52 65 73 6f 75 72 63 65 40 34  | tryValue@12._RtlDeleteResource@4 | 
| 1b3c0 |  00 5f 52 74 6c 44 65 6c 65 74 65 53 65 63 75 72    69 74 79 4f 62 6a 65 63 74 40 34 00 5f 52 74 6c  | ._RtlDeleteSecurityObject@4._Rtl | 
| 1b3e0 |  44 65 6c 65 74 65 54 69 6d 65 72 40 31 32 00 5f    52 74 6c 44 65 6c 65 74 65 54 69 6d 65 72 51 75  | DeleteTimer@12._RtlDeleteTimerQu | 
| 1b400 |  65 75 65 40 34 00 5f 52 74 6c 44 65 6c 65 74 65    54 69 6d 65 72 51 75 65 75 65 45 78 40 38 00 5f  | eue@4._RtlDeleteTimerQueueEx@8._ | 
| 1b420 |  52 74 6c 44 65 72 65 67 69 73 74 65 72 57 61 69    74 40 34 00 5f 52 74 6c 44 65 72 65 67 69 73 74  | RtlDeregisterWait@4._RtlDeregist | 
| 1b440 |  65 72 57 61 69 74 45 78 40 38 00 5f 52 74 6c 44    65 73 74 72 6f 79 41 74 6f 6d 54 61 62 6c 65 40  | erWaitEx@8._RtlDestroyAtomTable@ | 
| 1b460 |  34 00 5f 52 74 6c 44 65 73 74 72 6f 79 45 6e 76    69 72 6f 6e 6d 65 6e 74 40 34 00 5f 52 74 6c 44  | 4._RtlDestroyEnvironment@4._RtlD | 
| 1b480 |  65 73 74 72 6f 79 48 61 6e 64 6c 65 54 61 62 6c    65 40 34 00 5f 52 74 6c 44 65 73 74 72 6f 79 48  | estroyHandleTable@4._RtlDestroyH | 
| 1b4a0 |  65 61 70 40 34 00 5f 52 74 6c 44 65 73 74 72 6f    79 50 72 6f 63 65 73 73 50 61 72 61 6d 65 74 65  | eap@4._RtlDestroyProcessParamete | 
| 1b4c0 |  72 73 40 34 00 5f 52 74 6c 44 65 73 74 72 6f 79    51 75 65 72 79 44 65 62 75 67 42 75 66 66 65 72  | rs@4._RtlDestroyQueryDebugBuffer | 
| 1b4e0 |  40 34 00 5f 52 74 6c 44 65 74 65 72 6d 69 6e 65    44 6f 73 50 61 74 68 4e 61 6d 65 54 79 70 65 5f  | @4._RtlDetermineDosPathNameType_ | 
| 1b500 |  55 40 34 00 5f 52 74 6c 44 6c 6c 53 68 75 74 64    6f 77 6e 49 6e 50 72 6f 67 72 65 73 73 40 30 00  | U@4._RtlDllShutdownInProgress@0. | 
| 1b520 |  5f 52 74 6c 44 6e 73 48 6f 73 74 4e 61 6d 65 54    6f 43 6f 6d 70 75 74 65 72 4e 61 6d 65 40 31 32  | _RtlDnsHostNameToComputerName@12 | 
| 1b540 |  00 5f 52 74 6c 44 6f 65 73 46 69 6c 65 45 78 69    73 74 73 5f 55 40 34 00 5f 52 74 6c 44 6f 73 41  | ._RtlDoesFileExists_U@4._RtlDosA | 
| 1b560 |  70 70 6c 79 46 69 6c 65 49 73 6f 6c 61 74 69 6f    6e 52 65 64 69 72 65 63 74 69 6f 6e 5f 55 73 74  | pplyFileIsolationRedirection_Ust | 
| 1b580 |  72 40 33 36 00 5f 52 74 6c 44 6f 73 50 61 74 68    4e 61 6d 65 54 6f 4e 74 50 61 74 68 4e 61 6d 65  | r@36._RtlDosPathNameToNtPathName | 
| 1b5a0 |  5f 55 40 31 36 00 5f 52 74 6c 44 6f 73 50 61 74    68 4e 61 6d 65 54 6f 4e 74 50 61 74 68 4e 61 6d  | _U@16._RtlDosPathNameToNtPathNam | 
| 1b5c0 |  65 5f 55 5f 57 69 74 68 53 74 61 74 75 73 40 31    36 00 5f 52 74 6c 44 6f 73 50 61 74 68 4e 61 6d  | e_U_WithStatus@16._RtlDosPathNam | 
| 1b5e0 |  65 54 6f 52 65 6c 61 74 69 76 65 4e 74 50 61 74    68 4e 61 6d 65 5f 55 40 31 36 00 5f 52 74 6c 44  | eToRelativeNtPathName_U@16._RtlD | 
| 1b600 |  6f 73 50 61 74 68 4e 61 6d 65 54 6f 52 65 6c 61    74 69 76 65 4e 74 50 61 74 68 4e 61 6d 65 5f 55  | osPathNameToRelativeNtPathName_U | 
| 1b620 |  5f 57 69 74 68 53 74 61 74 75 73 40 31 36 00 5f    52 74 6c 44 6f 73 50 61 74 68 53 65 70 65 72 61  | _WithStatus@16._RtlDosPathSepera | 
| 1b640 |  74 6f 72 73 53 74 72 69 6e 67 00 5f 52 74 6c 44    6f 73 53 65 61 72 63 68 50 61 74 68 5f 55 40 32  | torsString._RtlDosSearchPath_U@2 | 
| 1b660 |  34 00 5f 52 74 6c 44 6f 73 53 65 61 72 63 68 50    61 74 68 5f 55 73 74 72 40 33 36 00 5f 52 74 6c  | 4._RtlDosSearchPath_Ustr@36._Rtl | 
| 1b680 |  44 6f 77 6e 63 61 73 65 55 6e 69 63 6f 64 65 43    68 61 72 40 34 00 5f 52 74 6c 44 6f 77 6e 63 61  | DowncaseUnicodeChar@4._RtlDownca | 
| 1b6a0 |  73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 40    31 32 00 5f 52 74 6c 44 75 6d 70 52 65 73 6f 75  | seUnicodeString@12._RtlDumpResou | 
| 1b6c0 |  72 63 65 40 34 00 5f 52 74 6c 44 75 70 6c 69 63    61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67  | rce@4._RtlDuplicateUnicodeString | 
| 1b6e0 |  40 31 32 00 5f 52 74 6c 45 6d 70 74 79 41 74 6f    6d 54 61 62 6c 65 40 38 00 5f 52 74 6c 45 6e 61  | @12._RtlEmptyAtomTable@8._RtlEna | 
| 1b700 |  62 6c 65 45 61 72 6c 79 43 72 69 74 69 63 61 6c    53 65 63 74 69 6f 6e 45 76 65 6e 74 43 72 65 61  | bleEarlyCriticalSectionEventCrea | 
| 1b720 |  74 69 6f 6e 40 30 00 5f 52 74 6c 45 6e 63 6f 64    65 50 6f 69 6e 74 65 72 40 34 00 5f 52 74 6c 45  | tion@0._RtlEncodePointer@4._RtlE | 
| 1b740 |  6e 63 6f 64 65 53 79 73 74 65 6d 50 6f 69 6e 74    65 72 40 34 00 5f 52 74 6c 45 6e 6c 61 72 67 65  | ncodeSystemPointer@4._RtlEnlarge | 
| 1b760 |  64 49 6e 74 65 67 65 72 4d 75 6c 74 69 70 6c 79    40 38 00 5f 52 74 6c 45 6e 6c 61 72 67 65 64 55  | dIntegerMultiply@8._RtlEnlargedU | 
| 1b780 |  6e 73 69 67 6e 65 64 44 69 76 69 64 65 40 31 36    00 5f 52 74 6c 45 6e 6c 61 72 67 65 64 55 6e 73  | nsignedDivide@16._RtlEnlargedUns | 
| 1b7a0 |  69 67 6e 65 64 4d 75 6c 74 69 70 6c 79 40 38 00    5f 52 74 6c 45 6e 74 65 72 43 72 69 74 69 63 61  | ignedMultiply@8._RtlEnterCritica | 
| 1b7c0 |  6c 53 65 63 74 69 6f 6e 40 34 00 5f 52 74 6c 45    6e 75 6d 50 72 6f 63 65 73 73 48 65 61 70 73 40  | lSection@4._RtlEnumProcessHeaps@ | 
| 1b7e0 |  38 00 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65 47    65 6e 65 72 69 63 54 61 62 6c 65 40 38 00 5f 52  | 8._RtlEnumerateGenericTable@8._R | 
| 1b800 |  74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72    69 63 54 61 62 6c 65 41 76 6c 40 38 00 5f 52 74  | tlEnumerateGenericTableAvl@8._Rt | 
| 1b820 |  6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69    63 54 61 62 6c 65 4c 69 6b 65 41 44 69 72 65 63  | lEnumerateGenericTableLikeADirec | 
| 1b840 |  74 6f 72 79 40 32 38 00 5f 52 74 6c 45 6e 75 6d    65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c  | tory@28._RtlEnumerateGenericTabl | 
| 1b860 |  65 57 69 74 68 6f 75 74 53 70 6c 61 79 69 6e 67    40 38 00 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65  | eWithoutSplaying@8._RtlEnumerate | 
| 1b880 |  47 65 6e 65 72 69 63 54 61 62 6c 65 57 69 74 68    6f 75 74 53 70 6c 61 79 69 6e 67 41 76 6c 40 38  | GenericTableWithoutSplayingAvl@8 | 
| 1b8a0 |  00 5f 52 74 6c 45 71 75 61 6c 43 6f 6d 70 75 74    65 72 4e 61 6d 65 40 38 00 5f 52 74 6c 45 71 75  | ._RtlEqualComputerName@8._RtlEqu | 
| 1b8c0 |  61 6c 44 6f 6d 61 69 6e 4e 61 6d 65 40 38 00 5f    52 74 6c 45 71 75 61 6c 4c 75 69 64 40 38 00 5f  | alDomainName@8._RtlEqualLuid@8._ | 
| 1b8e0 |  52 74 6c 45 71 75 61 6c 50 72 65 66 69 78 53 69    64 40 38 00 5f 52 74 6c 45 71 75 61 6c 53 69 64  | RtlEqualPrefixSid@8._RtlEqualSid | 
| 1b900 |  40 38 00 5f 52 74 6c 45 71 75 61 6c 53 74 72 69    6e 67 40 31 32 00 5f 52 74 6c 45 71 75 61 6c 55  | @8._RtlEqualString@12._RtlEqualU | 
| 1b920 |  6e 69 63 6f 64 65 53 74 72 69 6e 67 40 31 32 00    5f 52 74 6c 45 72 61 73 65 55 6e 69 63 6f 64 65  | nicodeString@12._RtlEraseUnicode | 
| 1b940 |  53 74 72 69 6e 67 40 34 00 5f 52 74 6c 45 78 69    74 55 73 65 72 54 68 72 65 61 64 40 34 00 5f 52  | String@4._RtlExitUserThread@4._R | 
| 1b960 |  74 6c 45 78 70 61 6e 64 45 6e 76 69 72 6f 6e 6d    65 6e 74 53 74 72 69 6e 67 73 5f 55 40 31 36 00  | tlExpandEnvironmentStrings_U@16. | 
| 1b980 |  5f 52 74 6c 45 78 74 65 6e 64 48 65 61 70 40 31    36 00 5f 52 74 6c 45 78 74 65 6e 64 65 64 49 6e  | _RtlExtendHeap@16._RtlExtendedIn | 
| 1b9a0 |  74 65 67 65 72 4d 75 6c 74 69 70 6c 79 40 31 32    00 5f 52 74 6c 45 78 74 65 6e 64 65 64 4c 61 72  | tegerMultiply@12._RtlExtendedLar | 
| 1b9c0 |  67 65 49 6e 74 65 67 65 72 44 69 76 69 64 65 40    31 36 00 5f 52 74 6c 45 78 74 65 6e 64 65 64 4d  | geIntegerDivide@16._RtlExtendedM | 
| 1b9e0 |  61 67 69 63 44 69 76 69 64 65 40 32 30 00 5f 52    74 6c 46 69 6c 6c 4d 65 6d 6f 72 79 40 31 32 00  | agicDivide@20._RtlFillMemory@12. | 
| 1ba00 |  5f 52 74 6c 46 69 6c 6c 4d 65 6d 6f 72 79 55 6c    6f 6e 67 40 31 32 00 5f 52 74 6c 46 69 6e 61 6c  | _RtlFillMemoryUlong@12._RtlFinal | 
| 1ba20 |  52 65 6c 65 61 73 65 4f 75 74 4f 66 50 72 6f 63    65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 40  | ReleaseOutOfProcessMemoryStream@ | 
| 1ba40 |  34 00 5f 52 74 6c 46 69 6e 64 41 63 74 69 76 61    74 69 6f 6e 43 6f 6e 74 65 78 74 53 65 63 74 69  | 4._RtlFindActivationContextSecti | 
| 1ba60 |  6f 6e 47 75 69 64 40 32 30 00 5f 52 74 6c 46 69    6e 64 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74  | onGuid@20._RtlFindActivationCont | 
| 1ba80 |  65 78 74 53 65 63 74 69 6f 6e 53 74 72 69 6e 67    40 32 30 00 5f 52 74 6c 46 69 6e 64 43 68 61 72  | extSectionString@20._RtlFindChar | 
| 1baa0 |  49 6e 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 40    31 36 00 5f 52 74 6c 46 69 6e 64 43 6c 65 61 72  | InUnicodeString@16._RtlFindClear | 
| 1bac0 |  42 69 74 73 40 31 32 00 5f 52 74 6c 46 69 6e 64    43 6c 65 61 72 42 69 74 73 41 6e 64 53 65 74 40  | Bits@12._RtlFindClearBitsAndSet@ | 
| 1bae0 |  31 32 00 5f 52 74 6c 46 69 6e 64 43 6c 65 61 72    52 75 6e 73 40 31 36 00 5f 52 74 6c 46 69 6e 64  | 12._RtlFindClearRuns@16._RtlFind | 
| 1bb00 |  4c 61 73 74 42 61 63 6b 77 61 72 64 52 75 6e 43    6c 65 61 72 40 31 32 00 5f 52 74 6c 46 69 6e 64  | LastBackwardRunClear@12._RtlFind | 
| 1bb20 |  4c 65 61 73 74 53 69 67 6e 69 66 69 63 61 6e 74    42 69 74 40 38 00 5f 52 74 6c 46 69 6e 64 4c 6f  | LeastSignificantBit@8._RtlFindLo | 
| 1bb40 |  6e 67 65 73 74 52 75 6e 43 6c 65 61 72 40 38 00    5f 52 74 6c 46 69 6e 64 4d 65 73 73 61 67 65 40  | ngestRunClear@8._RtlFindMessage@ | 
| 1bb60 |  32 30 00 5f 52 74 6c 46 69 6e 64 4d 6f 73 74 53    69 67 6e 69 66 69 63 61 6e 74 42 69 74 40 38 00  | 20._RtlFindMostSignificantBit@8. | 
| 1bb80 |  5f 52 74 6c 46 69 6e 64 4e 65 78 74 46 6f 72 77    61 72 64 52 75 6e 43 6c 65 61 72 40 31 32 00 5f  | _RtlFindNextForwardRunClear@12._ | 
| 1bba0 |  52 74 6c 46 69 6e 64 53 65 74 42 69 74 73 40 31    32 00 5f 52 74 6c 46 69 6e 64 53 65 74 42 69 74  | RtlFindSetBits@12._RtlFindSetBit | 
| 1bbc0 |  73 41 6e 64 43 6c 65 61 72 40 31 32 00 5f 52 74    6c 46 69 72 73 74 45 6e 74 72 79 53 4c 69 73 74  | sAndClear@12._RtlFirstEntrySList | 
| 1bbe0 |  40 34 00 5f 52 74 6c 46 69 72 73 74 46 72 65 65    41 63 65 40 38 00 5f 52 74 6c 46 6c 75 73 68 53  | @4._RtlFirstFreeAce@8._RtlFlushS | 
| 1bc00 |  65 63 75 72 65 4d 65 6d 6f 72 79 43 61 63 68 65    40 38 00 5f 52 74 6c 46 6f 72 6d 61 74 43 75 72  | ecureMemoryCache@8._RtlFormatCur | 
| 1bc20 |  72 65 6e 74 55 73 65 72 4b 65 79 50 61 74 68 40    34 00 5f 52 74 6c 46 6f 72 6d 61 74 4d 65 73 73  | rentUserKeyPath@4._RtlFormatMess | 
| 1bc40 |  61 67 65 40 33 36 00 5f 52 74 6c 46 6f 72 6d 61    74 4d 65 73 73 61 67 65 45 78 40 34 30 00 5f 52  | age@36._RtlFormatMessageEx@40._R | 
| 1bc60 |  74 6c 46 72 65 65 41 63 74 69 76 61 74 69 6f 6e    43 6f 6e 74 65 78 74 53 74 61 63 6b 40 34 00 5f  | tlFreeActivationContextStack@4._ | 
| 1bc80 |  52 74 6c 46 72 65 65 41 6e 73 69 53 74 72 69 6e    67 40 34 00 5f 52 74 6c 46 72 65 65 48 61 6e 64  | RtlFreeAnsiString@4._RtlFreeHand | 
| 1bca0 |  6c 65 40 38 00 5f 52 74 6c 46 72 65 65 48 65 61    70 40 31 32 00 5f 52 74 6c 46 72 65 65 4f 65 6d  | le@8._RtlFreeHeap@12._RtlFreeOem | 
| 1bcc0 |  53 74 72 69 6e 67 40 34 00 5f 52 74 6c 46 72 65    65 53 69 64 40 34 00 5f 52 74 6c 46 72 65 65 54  | String@4._RtlFreeSid@4._RtlFreeT | 
| 1bce0 |  68 72 65 61 64 41 63 74 69 76 61 74 69 6f 6e 43    6f 6e 74 65 78 74 53 74 61 63 6b 40 30 00 5f 52  | hreadActivationContextStack@0._R | 
| 1bd00 |  74 6c 46 72 65 65 55 6e 69 63 6f 64 65 53 74 72    69 6e 67 40 34 00 5f 52 74 6c 46 72 65 65 55 73  | tlFreeUnicodeString@4._RtlFreeUs | 
| 1bd20 |  65 72 54 68 72 65 61 64 53 74 61 63 6b 40 38 00    5f 52 74 6c 47 55 49 44 46 72 6f 6d 53 74 72 69  | erThreadStack@8._RtlGUIDFromStri | 
| 1bd40 |  6e 67 40 38 00 5f 52 74 6c 47 65 6e 65 72 61 74    65 38 64 6f 74 33 4e 61 6d 65 40 31 36 00 5f 52  | ng@8._RtlGenerate8dot3Name@16._R | 
| 1bd60 |  74 6c 47 65 74 41 63 65 40 31 32 00 5f 52 74 6c    47 65 74 41 63 74 69 76 65 41 63 74 69 76 61 74  | tlGetAce@12._RtlGetActiveActivat | 
| 1bd80 |  69 6f 6e 43 6f 6e 74 65 78 74 40 34 00 5f 52 74    6c 47 65 74 43 61 6c 6c 65 72 73 41 64 64 72 65  | ionContext@4._RtlGetCallersAddre | 
| 1bda0 |  73 73 40 38 00 5f 52 74 6c 47 65 74 43 6f 6d 70    72 65 73 73 69 6f 6e 57 6f 72 6b 53 70 61 63 65  | ss@8._RtlGetCompressionWorkSpace | 
| 1bdc0 |  53 69 7a 65 40 31 32 00 5f 52 74 6c 47 65 74 43    6f 6e 74 72 6f 6c 53 65 63 75 72 69 74 79 44 65  | Size@12._RtlGetControlSecurityDe | 
| 1bde0 |  73 63 72 69 70 74 6f 72 40 31 32 00 5f 52 74 6c    47 65 74 43 72 69 74 69 63 61 6c 53 65 63 74 69  | scriptor@12._RtlGetCriticalSecti | 
| 1be00 |  6f 6e 52 65 63 75 72 73 69 6f 6e 43 6f 75 6e 74    40 34 00 5f 52 74 6c 47 65 74 43 75 72 72 65 6e  | onRecursionCount@4._RtlGetCurren | 
| 1be20 |  74 44 69 72 65 63 74 6f 72 79 5f 55 40 38 00 5f    52 74 6c 47 65 74 43 75 72 72 65 6e 74 50 65 62  | tDirectory_U@8._RtlGetCurrentPeb | 
| 1be40 |  40 30 00 5f 52 74 6c 47 65 74 43 75 72 72 65 6e    74 50 72 6f 63 65 73 73 6f 72 4e 75 6d 62 65 72  | @0._RtlGetCurrentProcessorNumber | 
| 1be60 |  40 30 00 5f 52 74 6c 47 65 74 44 61 63 6c 53 65    63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72  | @0._RtlGetDaclSecurityDescriptor | 
| 1be80 |  40 31 36 00 5f 52 74 6c 47 65 74 45 6c 65 6d 65    6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 40 38  | @16._RtlGetElementGenericTable@8 | 
| 1bea0 |  00 5f 52 74 6c 47 65 74 45 6c 65 6d 65 6e 74 47    65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 40 38  | ._RtlGetElementGenericTableAvl@8 | 
| 1bec0 |  00 5f 52 74 6c 47 65 74 46 72 61 6d 65 40 30 00    5f 52 74 6c 47 65 74 46 75 6c 6c 50 61 74 68 4e  | ._RtlGetFrame@0._RtlGetFullPathN | 
| 1bee0 |  61 6d 65 5f 55 40 31 36 00 5f 52 74 6c 47 65 74    46 75 6c 6c 50 61 74 68 4e 61 6d 65 5f 55 73 74  | ame_U@16._RtlGetFullPathName_Ust | 
| 1bf00 |  72 45 78 40 33 32 00 5f 52 74 6c 47 65 74 47 72    6f 75 70 53 65 63 75 72 69 74 79 44 65 73 63 72  | rEx@32._RtlGetGroupSecurityDescr | 
| 1bf20 |  69 70 74 6f 72 40 31 32 00 5f 52 74 6c 47 65 74    4c 61 73 74 4e 74 53 74 61 74 75 73 40 30 00 5f  | iptor@12._RtlGetLastNtStatus@0._ | 
| 1bf40 |  52 74 6c 47 65 74 4c 61 73 74 57 69 6e 33 32 45    72 72 6f 72 40 30 00 5f 52 74 6c 47 65 74 4c 65  | RtlGetLastWin32Error@0._RtlGetLe | 
| 1bf60 |  6e 67 74 68 57 69 74 68 6f 75 74 4c 61 73 74 46    75 6c 6c 44 6f 73 4f 72 4e 74 50 61 74 68 45 6c  | ngthWithoutLastFullDosOrNtPathEl | 
| 1bf80 |  65 6d 65 6e 74 40 31 32 00 5f 52 74 6c 47 65 74    4c 65 6e 67 74 68 57 69 74 68 6f 75 74 54 72 61  | ement@12._RtlGetLengthWithoutTra | 
| 1bfa0 |  69 6c 69 6e 67 50 61 74 68 53 65 70 65 72 61 74    6f 72 73 40 31 32 00 5f 52 74 6c 47 65 74 4c 6f  | ilingPathSeperators@12._RtlGetLo | 
| 1bfc0 |  6e 67 65 73 74 4e 74 50 61 74 68 4c 65 6e 67 74    68 40 30 00 5f 52 74 6c 47 65 74 4e 61 74 69 76  | ngestNtPathLength@0._RtlGetNativ | 
| 1bfe0 |  65 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69    6f 6e 40 31 36 00 5f 52 74 6c 47 65 74 4e 74 47  | eSystemInformation@16._RtlGetNtG | 
| 1c000 |  6c 6f 62 61 6c 46 6c 61 67 73 40 30 00 5f 52 74    6c 47 65 74 4e 74 50 72 6f 64 75 63 74 54 79 70  | lobalFlags@0._RtlGetNtProductTyp | 
| 1c020 |  65 40 34 00 5f 52 74 6c 47 65 74 4e 74 56 65 72    73 69 6f 6e 4e 75 6d 62 65 72 73 40 31 32 00 5f  | e@4._RtlGetNtVersionNumbers@12._ | 
| 1c040 |  52 74 6c 47 65 74 4f 77 6e 65 72 53 65 63 75 72    69 74 79 44 65 73 63 72 69 70 74 6f 72 40 31 32  | RtlGetOwnerSecurityDescriptor@12 | 
| 1c060 |  00 5f 52 74 6c 47 65 74 50 72 6f 63 65 73 73 48    65 61 70 73 40 38 00 5f 52 74 6c 47 65 74 53 61  | ._RtlGetProcessHeaps@8._RtlGetSa | 
| 1c080 |  63 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69    70 74 6f 72 40 31 36 00 5f 52 74 6c 47 65 74 53  | clSecurityDescriptor@16._RtlGetS | 
| 1c0a0 |  65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f    72 52 4d 43 6f 6e 74 72 6f 6c 40 38 00 5f 52 74  | ecurityDescriptorRMControl@8._Rt | 
| 1c0c0 |  6c 47 65 74 53 65 74 42 6f 6f 74 53 74 61 74 75    73 44 61 74 61 40 32 34 00 5f 52 74 6c 47 65 74  | lGetSetBootStatusData@24._RtlGet | 
| 1c0e0 |  54 68 72 65 61 64 45 72 72 6f 72 4d 6f 64 65 40    30 00 5f 52 74 6c 47 65 74 55 6e 6c 6f 61 64 45  | ThreadErrorMode@0._RtlGetUnloadE | 
| 1c100 |  76 65 6e 74 54 72 61 63 65 40 30 00 5f 52 74 6c    47 65 74 55 73 65 72 49 6e 66 6f 48 65 61 70 40  | ventTrace@0._RtlGetUserInfoHeap@ | 
| 1c120 |  32 30 00 5f 52 74 6c 47 65 74 56 65 72 73 69 6f    6e 40 34 00 5f 52 74 6c 48 61 73 68 55 6e 69 63  | 20._RtlGetVersion@4._RtlHashUnic | 
| 1c140 |  6f 64 65 53 74 72 69 6e 67 40 31 36 00 5f 52 74    6c 49 64 65 6e 74 69 66 69 65 72 41 75 74 68 6f  | odeString@16._RtlIdentifierAutho | 
| 1c160 |  72 69 74 79 53 69 64 40 34 00 5f 52 74 6c 49 6d    61 67 65 44 69 72 65 63 74 6f 72 79 45 6e 74 72  | ritySid@4._RtlImageDirectoryEntr | 
| 1c180 |  79 54 6f 44 61 74 61 40 31 36 00 5f 52 74 6c 49    6d 61 67 65 4e 74 48 65 61 64 65 72 40 34 00 5f  | yToData@16._RtlImageNtHeader@4._ | 
| 1c1a0 |  52 74 6c 49 6d 61 67 65 4e 74 48 65 61 64 65 72    45 78 40 32 30 00 5f 52 74 6c 49 6d 61 67 65 52  | RtlImageNtHeaderEx@20._RtlImageR | 
| 1c1c0 |  76 61 54 6f 53 65 63 74 69 6f 6e 40 31 32 00 5f    52 74 6c 49 6d 61 67 65 52 76 61 54 6f 56 61 40  | vaToSection@12._RtlImageRvaToVa@ | 
| 1c1e0 |  31 36 00 5f 52 74 6c 49 6d 70 65 72 73 6f 6e 61    74 65 53 65 6c 66 40 34 00 5f 52 74 6c 49 6e 69  | 16._RtlImpersonateSelf@4._RtlIni | 
| 1c200 |  74 41 6e 73 69 53 74 72 69 6e 67 40 38 00 5f 52    74 6c 49 6e 69 74 41 6e 73 69 53 74 72 69 6e 67  | tAnsiString@8._RtlInitAnsiString | 
| 1c220 |  45 78 40 38 00 5f 52 74 6c 49 6e 69 74 43 6f 64    65 50 61 67 65 54 61 62 6c 65 40 38 00 5f 52 74  | Ex@8._RtlInitCodePageTable@8._Rt | 
| 1c240 |  6c 49 6e 69 74 4d 65 6d 6f 72 79 53 74 72 65 61    6d 40 34 00 5f 52 74 6c 49 6e 69 74 4e 6c 73 54  | lInitMemoryStream@4._RtlInitNlsT | 
| 1c260 |  61 62 6c 65 73 40 31 36 00 5f 52 74 6c 49 6e 69    74 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d  | ables@16._RtlInitOutOfProcessMem | 
| 1c280 |  6f 72 79 53 74 72 65 61 6d 40 34 00 5f 52 74 6c    49 6e 69 74 53 74 72 69 6e 67 40 38 00 5f 52 74  | oryStream@4._RtlInitString@8._Rt | 
| 1c2a0 |  6c 49 6e 69 74 55 6e 69 63 6f 64 65 53 74 72 69    6e 67 40 38 00 5f 52 74 6c 49 6e 69 74 55 6e 69  | lInitUnicodeString@8._RtlInitUni | 
| 1c2c0 |  63 6f 64 65 53 74 72 69 6e 67 45 78 40 38 00 5f    52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 41 74 6f  | codeStringEx@8._RtlInitializeAto | 
| 1c2e0 |  6d 50 61 63 6b 61 67 65 40 34 00 5f 52 74 6c 49    6e 69 74 69 61 6c 69 7a 65 42 69 74 4d 61 70 40  | mPackage@4._RtlInitializeBitMap@ | 
| 1c300 |  31 32 00 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a    65 43 6f 6e 74 65 78 74 40 32 30 00 5f 52 74 6c  | 12._RtlInitializeContext@20._Rtl | 
| 1c320 |  49 6e 69 74 69 61 6c 69 7a 65 43 72 69 74 69 63    61 6c 53 65 63 74 69 6f 6e 40 34 00 5f 52 74 6c  | InitializeCriticalSection@4._Rtl | 
| 1c340 |  49 6e 69 74 69 61 6c 69 7a 65 43 72 69 74 69 63    61 6c 53 65 63 74 69 6f 6e 41 6e 64 53 70 69 6e  | InitializeCriticalSectionAndSpin | 
| 1c360 |  43 6f 75 6e 74 40 38 00 5f 52 74 6c 49 6e 69 74    69 61 6c 69 7a 65 47 65 6e 65 72 69 63 54 61 62  | Count@8._RtlInitializeGenericTab | 
| 1c380 |  6c 65 40 32 30 00 5f 52 74 6c 49 6e 69 74 69 61    6c 69 7a 65 47 65 6e 65 72 69 63 54 61 62 6c 65  | le@20._RtlInitializeGenericTable | 
| 1c3a0 |  41 76 6c 40 32 30 00 5f 52 74 6c 49 6e 69 74 69    61 6c 69 7a 65 48 61 6e 64 6c 65 54 61 62 6c 65  | Avl@20._RtlInitializeHandleTable | 
| 1c3c0 |  40 31 32 00 5f 52 74 6c 49 6e 69 74 69 61 6c 69    7a 65 52 58 61 63 74 40 31 32 00 5f 52 74 6c 49  | @12._RtlInitializeRXact@12._RtlI | 
| 1c3e0 |  6e 69 74 69 61 6c 69 7a 65 52 65 73 6f 75 72 63    65 40 34 00 5f 52 74 6c 49 6e 69 74 69 61 6c 69  | nitializeResource@4._RtlInitiali | 
| 1c400 |  7a 65 53 4c 69 73 74 48 65 61 64 40 34 00 5f 52    74 6c 49 6e 69 74 69 61 6c 69 7a 65 53 69 64 40  | zeSListHead@4._RtlInitializeSid@ | 
| 1c420 |  31 32 00 5f 52 74 6c 49 6e 73 65 72 74 45 6c 65    6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65  | 12._RtlInsertElementGenericTable | 
| 1c440 |  40 31 36 00 5f 52 74 6c 49 6e 73 65 72 74 45 6c    65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c  | @16._RtlInsertElementGenericTabl | 
| 1c460 |  65 41 76 6c 40 31 36 00 5f 52 74 6c 49 6e 73 65    72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63  | eAvl@16._RtlInsertElementGeneric | 
| 1c480 |  54 61 62 6c 65 46 75 6c 6c 40 32 34 00 5f 52 74    6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65  | TableFull@24._RtlInsertElementGe | 
| 1c4a0 |  6e 65 72 69 63 54 61 62 6c 65 46 75 6c 6c 41 76    6c 40 32 34 00 5f 52 74 6c 49 6e 74 36 34 54 6f  | nericTableFullAvl@24._RtlInt64To | 
| 1c4c0 |  55 6e 69 63 6f 64 65 53 74 72 69 6e 67 40 31 36    00 5f 52 74 6c 49 6e 74 65 67 65 72 54 6f 43 68  | UnicodeString@16._RtlIntegerToCh | 
| 1c4e0 |  61 72 40 31 36 00 5f 52 74 6c 49 6e 74 65 67 65    72 54 6f 55 6e 69 63 6f 64 65 53 74 72 69 6e 67  | ar@16._RtlIntegerToUnicodeString | 
| 1c500 |  40 31 32 00 5f 52 74 6c 49 6e 74 65 72 6c 6f 63    6b 65 64 43 6f 6d 70 61 72 65 45 78 63 68 61 6e  | @12._RtlInterlockedCompareExchan | 
| 1c520 |  67 65 36 34 40 32 30 00 5f 52 74 6c 49 6e 74 65    72 6c 6f 63 6b 65 64 46 6c 75 73 68 53 4c 69 73  | ge64@20._RtlInterlockedFlushSLis | 
| 1c540 |  74 40 34 00 5f 52 74 6c 49 6e 74 65 72 6c 6f 63    6b 65 64 50 6f 70 45 6e 74 72 79 53 4c 69 73 74  | t@4._RtlInterlockedPopEntrySList | 
| 1c560 |  40 34 00 5f 52 74 6c 49 6e 74 65 72 6c 6f 63 6b    65 64 50 75 73 68 45 6e 74 72 79 53 4c 69 73 74  | @4._RtlInterlockedPushEntrySList | 
| 1c580 |  40 38 00 5f 52 74 6c 49 70 76 34 41 64 64 72 65    73 73 54 6f 53 74 72 69 6e 67 41 40 38 00 5f 52  | @8._RtlIpv4AddressToStringA@8._R | 
| 1c5a0 |  74 6c 49 70 76 34 41 64 64 72 65 73 73 54 6f 53    74 72 69 6e 67 45 78 41 40 31 36 00 5f 52 74 6c  | tlIpv4AddressToStringExA@16._Rtl | 
| 1c5c0 |  49 70 76 34 41 64 64 72 65 73 73 54 6f 53 74 72    69 6e 67 45 78 57 40 31 36 00 5f 52 74 6c 49 70  | Ipv4AddressToStringExW@16._RtlIp | 
| 1c5e0 |  76 34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e    67 57 40 38 00 5f 52 74 6c 49 70 76 34 53 74 72  | v4AddressToStringW@8._RtlIpv4Str | 
| 1c600 |  69 6e 67 54 6f 41 64 64 72 65 73 73 41 40 31 36    00 5f 52 74 6c 49 70 76 34 53 74 72 69 6e 67 54  | ingToAddressA@16._RtlIpv4StringT | 
| 1c620 |  6f 41 64 64 72 65 73 73 45 78 41 40 31 36 00 5f    52 74 6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41  | oAddressExA@16._RtlIpv4StringToA | 
| 1c640 |  64 64 72 65 73 73 45 78 57 40 31 36 00 5f 52 74    6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64  | ddressExW@16._RtlIpv4StringToAdd | 
| 1c660 |  72 65 73 73 57 40 31 36 00 5f 52 74 6c 49 70 76    36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67  | ressW@16._RtlIpv6AddressToString | 
| 1c680 |  41 40 38 00 5f 52 74 6c 49 70 76 36 41 64 64 72    65 73 73 54 6f 53 74 72 69 6e 67 45 78 41 40 32  | A@8._RtlIpv6AddressToStringExA@2 | 
| 1c6a0 |  30 00 5f 52 74 6c 49 70 76 36 41 64 64 72 65 73    73 54 6f 53 74 72 69 6e 67 45 78 57 40 32 30 00  | 0._RtlIpv6AddressToStringExW@20. | 
| 1c6c0 |  5f 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54    6f 53 74 72 69 6e 67 57 40 38 00 5f 52 74 6c 49  | _RtlIpv6AddressToStringW@8._RtlI | 
| 1c6e0 |  70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65    73 73 41 40 31 32 00 5f 52 74 6c 49 70 76 36 53  | pv6StringToAddressA@12._RtlIpv6S | 
| 1c700 |  74 72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78    41 40 31 36 00 5f 52 74 6c 49 70 76 36 53 74 72  | tringToAddressExA@16._RtlIpv6Str | 
| 1c720 |  69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 57 40    31 36 00 5f 52 74 6c 49 70 76 36 53 74 72 69 6e  | ingToAddressExW@16._RtlIpv6Strin | 
| 1c740 |  67 54 6f 41 64 64 72 65 73 73 57 40 31 32 00 5f    52 74 6c 49 73 41 63 74 69 76 61 74 69 6f 6e 43  | gToAddressW@12._RtlIsActivationC | 
| 1c760 |  6f 6e 74 65 78 74 41 63 74 69 76 65 40 34 00 5f    52 74 6c 49 73 43 72 69 74 69 63 61 6c 53 65 63  | ontextActive@4._RtlIsCriticalSec | 
| 1c780 |  74 69 6f 6e 4c 6f 63 6b 65 64 40 34 00 5f 52 74    6c 49 73 43 72 69 74 69 63 61 6c 53 65 63 74 69  | tionLocked@4._RtlIsCriticalSecti | 
| 1c7a0 |  6f 6e 4c 6f 63 6b 65 64 42 79 54 68 72 65 61 64    40 34 00 5f 52 74 6c 49 73 44 6f 73 44 65 76 69  | onLockedByThread@4._RtlIsDosDevi | 
| 1c7c0 |  63 65 4e 61 6d 65 5f 55 40 34 00 5f 52 74 6c 49    73 47 65 6e 65 72 69 63 54 61 62 6c 65 45 6d 70  | ceName_U@4._RtlIsGenericTableEmp | 
| 1c7e0 |  74 79 40 34 00 5f 52 74 6c 49 73 47 65 6e 65 72    69 63 54 61 62 6c 65 45 6d 70 74 79 41 76 6c 40  | ty@4._RtlIsGenericTableEmptyAvl@ | 
| 1c800 |  34 00 5f 52 74 6c 49 73 4e 61 6d 65 4c 65 67 61    6c 44 4f 53 38 44 6f 74 33 40 31 32 00 5f 52 74  | 4._RtlIsNameLegalDOS8Dot3@12._Rt | 
| 1c820 |  6c 49 73 54 65 78 74 55 6e 69 63 6f 64 65 40 31    32 00 5f 52 74 6c 49 73 54 68 72 65 61 64 57 69  | lIsTextUnicode@12._RtlIsThreadWi | 
| 1c840 |  74 68 69 6e 4c 6f 61 64 65 72 43 61 6c 6c 6f 75    74 40 30 00 5f 52 74 6c 49 73 56 61 6c 69 64 48  | thinLoaderCallout@0._RtlIsValidH | 
| 1c860 |  61 6e 64 6c 65 40 38 00 5f 52 74 6c 49 73 56 61    6c 69 64 49 6e 64 65 78 48 61 6e 64 6c 65 40 31  | andle@8._RtlIsValidIndexHandle@1 | 
| 1c880 |  32 00 5f 52 74 6c 4c 61 72 67 65 49 6e 74 65 67    65 72 41 64 64 40 31 36 00 5f 52 74 6c 4c 61 72  | 2._RtlLargeIntegerAdd@16._RtlLar | 
| 1c8a0 |  67 65 49 6e 74 65 67 65 72 41 72 69 74 68 6d 65    74 69 63 53 68 69 66 74 40 31 32 00 5f 52 74 6c  | geIntegerArithmeticShift@12._Rtl | 
| 1c8c0 |  4c 61 72 67 65 49 6e 74 65 67 65 72 44 69 76 69    64 65 40 32 30 00 5f 52 74 6c 4c 61 72 67 65 49  | LargeIntegerDivide@20._RtlLargeI | 
| 1c8e0 |  6e 74 65 67 65 72 4e 65 67 61 74 65 40 38 00 5f    52 74 6c 4c 61 72 67 65 49 6e 74 65 67 65 72 53  | ntegerNegate@8._RtlLargeIntegerS | 
| 1c900 |  68 69 66 74 4c 65 66 74 40 31 32 00 5f 52 74 6c    4c 61 72 67 65 49 6e 74 65 67 65 72 53 68 69 66  | hiftLeft@12._RtlLargeIntegerShif | 
| 1c920 |  74 52 69 67 68 74 40 31 32 00 5f 52 74 6c 4c 61    72 67 65 49 6e 74 65 67 65 72 53 75 62 74 72 61  | tRight@12._RtlLargeIntegerSubtra | 
| 1c940 |  63 74 40 31 36 00 5f 52 74 6c 4c 61 72 67 65 49    6e 74 65 67 65 72 54 6f 43 68 61 72 40 31 36 00  | ct@16._RtlLargeIntegerToChar@16. | 
| 1c960 |  5f 52 74 6c 4c 65 61 76 65 43 72 69 74 69 63 61    6c 53 65 63 74 69 6f 6e 40 34 00 5f 52 74 6c 4c  | _RtlLeaveCriticalSection@4._RtlL | 
| 1c980 |  65 6e 67 74 68 52 65 71 75 69 72 65 64 53 69 64    40 34 00 5f 52 74 6c 4c 65 6e 67 74 68 53 65 63  | engthRequiredSid@4._RtlLengthSec | 
| 1c9a0 |  75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 40    34 00 5f 52 74 6c 4c 65 6e 67 74 68 53 69 64 40  | urityDescriptor@4._RtlLengthSid@ | 
| 1c9c0 |  34 00 5f 52 74 6c 4c 6f 63 61 6c 54 69 6d 65 54    6f 53 79 73 74 65 6d 54 69 6d 65 40 38 00 5f 52  | 4._RtlLocalTimeToSystemTime@8._R | 
| 1c9e0 |  74 6c 4c 6f 63 6b 42 6f 6f 74 53 74 61 74 75 73    44 61 74 61 40 34 00 5f 52 74 6c 4c 6f 63 6b 48  | tlLockBootStatusData@4._RtlLockH | 
| 1ca00 |  65 61 70 40 34 00 5f 52 74 6c 4c 6f 63 6b 4d 65    6d 6f 72 79 53 74 72 65 61 6d 52 65 67 69 6f 6e  | eap@4._RtlLockMemoryStreamRegion | 
| 1ca20 |  40 32 34 00 5f 52 74 6c 4c 6f 67 53 74 61 63 6b    42 61 63 6b 54 72 61 63 65 40 30 00 5f 52 74 6c  | @24._RtlLogStackBackTrace@0._Rtl | 
| 1ca40 |  4c 6f 6f 6b 75 70 41 74 6f 6d 49 6e 41 74 6f 6d    54 61 62 6c 65 40 31 32 00 5f 52 74 6c 4c 6f 6f  | LookupAtomInAtomTable@12._RtlLoo | 
| 1ca60 |  6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69    63 54 61 62 6c 65 40 38 00 5f 52 74 6c 4c 6f 6f  | kupElementGenericTable@8._RtlLoo | 
| 1ca80 |  6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69    63 54 61 62 6c 65 41 76 6c 40 38 00 5f 52 74 6c  | kupElementGenericTableAvl@8._Rtl | 
| 1caa0 |  4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e 74 47 65 6e    65 72 69 63 54 61 62 6c 65 46 75 6c 6c 40 31 36  | LookupElementGenericTableFull@16 | 
| 1cac0 |  00 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65    6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 46 75  | ._RtlLookupElementGenericTableFu | 
| 1cae0 |  6c 6c 41 76 6c 40 31 36 00 5f 52 74 6c 4d 61 6b    65 53 65 6c 66 52 65 6c 61 74 69 76 65 53 44 40  | llAvl@16._RtlMakeSelfRelativeSD@ | 
| 1cb00 |  31 32 00 5f 52 74 6c 4d 61 70 47 65 6e 65 72 69    63 4d 61 73 6b 40 38 00 5f 52 74 6c 4d 61 70 53  | 12._RtlMapGenericMask@8._RtlMapS | 
| 1cb20 |  65 63 75 72 69 74 79 45 72 72 6f 72 54 6f 4e 74    53 74 61 74 75 73 40 34 00 5f 52 74 6c 4d 6f 76  | ecurityErrorToNtStatus@4._RtlMov | 
| 1cb40 |  65 4d 65 6d 6f 72 79 40 31 32 00 5f 52 74 6c 4d    75 6c 74 69 41 70 70 65 6e 64 55 6e 69 63 6f 64  | eMemory@12._RtlMultiAppendUnicod | 
| 1cb60 |  65 53 74 72 69 6e 67 42 75 66 66 65 72 40 31 32    00 5f 52 74 6c 4d 75 6c 74 69 42 79 74 65 54 6f  | eStringBuffer@12._RtlMultiByteTo | 
| 1cb80 |  55 6e 69 63 6f 64 65 4e 40 32 30 00 5f 52 74 6c    4d 75 6c 74 69 42 79 74 65 54 6f 55 6e 69 63 6f  | UnicodeN@20._RtlMultiByteToUnico | 
| 1cba0 |  64 65 53 69 7a 65 40 31 32 00 5f 52 74 6c 4d 75    6c 74 69 70 6c 65 41 6c 6c 6f 63 61 74 65 48 65  | deSize@12._RtlMultipleAllocateHe | 
| 1cbc0 |  61 70 40 32 30 00 5f 52 74 6c 4d 75 6c 74 69 70    6c 65 46 72 65 65 48 65 61 70 40 31 36 00 5f 52  | ap@20._RtlMultipleFreeHeap@16._R | 
| 1cbe0 |  74 6c 4e 65 77 49 6e 73 74 61 6e 63 65 53 65 63    75 72 69 74 79 4f 62 6a 65 63 74 40 34 30 00 5f  | tlNewInstanceSecurityObject@40._ | 
| 1cc00 |  52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 47 72    61 6e 74 65 64 41 63 63 65 73 73 40 32 34 00 5f  | RtlNewSecurityGrantedAccess@24._ | 
| 1cc20 |  52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 4f 62    6a 65 63 74 40 32 34 00 5f 52 74 6c 4e 65 77 53  | RtlNewSecurityObject@24._RtlNewS | 
| 1cc40 |  65 63 75 72 69 74 79 4f 62 6a 65 63 74 45 78 40    33 32 00 5f 52 74 6c 4e 65 77 53 65 63 75 72 69  | ecurityObjectEx@32._RtlNewSecuri | 
| 1cc60 |  74 79 4f 62 6a 65 63 74 57 69 74 68 4d 75 6c 74    69 70 6c 65 49 6e 68 65 72 69 74 61 6e 63 65 40  | tyObjectWithMultipleInheritance@ | 
| 1cc80 |  33 36 00 5f 52 74 6c 4e 6f 72 6d 61 6c 69 7a 65    50 72 6f 63 65 73 73 50 61 72 61 6d 73 40 34 00  | 36._RtlNormalizeProcessParams@4. | 
| 1cca0 |  5f 52 74 6c 4e 74 50 61 74 68 4e 61 6d 65 54 6f    44 6f 73 50 61 74 68 4e 61 6d 65 40 31 36 00 5f  | _RtlNtPathNameToDosPathName@16._ | 
| 1ccc0 |  52 74 6c 4e 74 50 61 74 68 53 65 70 65 72 61 74    6f 72 53 74 72 69 6e 67 00 5f 52 74 6c 4e 74 53  | RtlNtPathSeperatorString._RtlNtS | 
| 1cce0 |  74 61 74 75 73 54 6f 44 6f 73 45 72 72 6f 72 40    34 00 5f 52 74 6c 4e 74 53 74 61 74 75 73 54 6f  | tatusToDosError@4._RtlNtStatusTo | 
| 1cd00 |  44 6f 73 45 72 72 6f 72 4e 6f 54 65 62 40 34 00    5f 52 74 6c 4e 75 6d 62 65 72 47 65 6e 65 72 69  | DosErrorNoTeb@4._RtlNumberGeneri | 
| 1cd20 |  63 54 61 62 6c 65 45 6c 65 6d 65 6e 74 73 40 34    00 5f 52 74 6c 4e 75 6d 62 65 72 47 65 6e 65 72  | cTableElements@4._RtlNumberGener | 
| 1cd40 |  69 63 54 61 62 6c 65 45 6c 65 6d 65 6e 74 73 41    76 6c 40 34 00 5f 52 74 6c 4e 75 6d 62 65 72 4f  | icTableElementsAvl@4._RtlNumberO | 
| 1cd60 |  66 43 6c 65 61 72 42 69 74 73 40 34 00 5f 52 74    6c 4e 75 6d 62 65 72 4f 66 53 65 74 42 69 74 73  | fClearBits@4._RtlNumberOfSetBits | 
| 1cd80 |  40 34 00 5f 52 74 6c 4f 65 6d 53 74 72 69 6e 67    54 6f 55 6e 69 63 6f 64 65 53 69 7a 65 40 34 00  | @4._RtlOemStringToUnicodeSize@4. | 
| 1cda0 |  5f 52 74 6c 4f 65 6d 53 74 72 69 6e 67 54 6f 55    6e 69 63 6f 64 65 53 74 72 69 6e 67 40 31 32 00  | _RtlOemStringToUnicodeString@12. | 
| 1cdc0 |  5f 52 74 6c 4f 65 6d 54 6f 55 6e 69 63 6f 64 65    4e 40 32 30 00 5f 52 74 6c 4f 70 65 6e 43 75 72  | _RtlOemToUnicodeN@20._RtlOpenCur | 
| 1cde0 |  72 65 6e 74 55 73 65 72 40 38 00 5f 52 74 6c 50    63 54 6f 46 69 6c 65 48 65 61 64 65 72 40 38 00  | rentUser@8._RtlPcToFileHeader@8. | 
| 1ce00 |  5f 52 74 6c 50 69 6e 41 74 6f 6d 49 6e 41 74 6f    6d 54 61 62 6c 65 40 38 00 5f 52 74 6c 50 6f 70  | _RtlPinAtomInAtomTable@8._RtlPop | 
| 1ce20 |  46 72 61 6d 65 40 34 00 5f 52 74 6c 50 72 65 66    69 78 53 74 72 69 6e 67 40 31 32 00 5f 52 74 6c  | Frame@4._RtlPrefixString@12._Rtl | 
| 1ce40 |  50 72 65 66 69 78 55 6e 69 63 6f 64 65 53 74 72    69 6e 67 40 31 32 00 5f 52 74 6c 50 72 6f 74 65  | PrefixUnicodeString@12._RtlProte | 
| 1ce60 |  63 74 48 65 61 70 40 38 00 5f 52 74 6c 50 75 73    68 46 72 61 6d 65 40 34 00 5f 52 74 6c 51 75 65  | ctHeap@8._RtlPushFrame@4._RtlQue | 
| 1ce80 |  72 79 41 74 6f 6d 49 6e 41 74 6f 6d 54 61 62 6c    65 40 32 34 00 5f 52 74 6c 51 75 65 72 79 44 65  | ryAtomInAtomTable@24._RtlQueryDe | 
| 1cea0 |  70 74 68 53 4c 69 73 74 40 34 00 5f 52 74 6c 51    75 65 72 79 45 6e 76 69 72 6f 6e 6d 65 6e 74 56  | pthSList@4._RtlQueryEnvironmentV | 
| 1cec0 |  61 72 69 61 62 6c 65 5f 55 40 31 32 00 5f 52 74    6c 51 75 65 72 79 48 65 61 70 49 6e 66 6f 72 6d  | ariable_U@12._RtlQueryHeapInform | 
| 1cee0 |  61 74 69 6f 6e 40 32 30 00 5f 52 74 6c 51 75 65    72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63 6c  | ation@20._RtlQueryInformationAcl | 
| 1cf00 |  40 31 36 00 5f 52 74 6c 51 75 65 72 79 49 6e 66    6f 72 6d 61 74 69 6f 6e 41 63 74 69 76 61 74 69  | @16._RtlQueryInformationActivati | 
| 1cf20 |  6f 6e 43 6f 6e 74 65 78 74 40 32 38 00 5f 52 74    6c 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f  | onContext@28._RtlQueryInformatio | 
| 1cf40 |  6e 41 63 74 69 76 65 41 63 74 69 76 61 74 69 6f    6e 43 6f 6e 74 65 78 74 40 31 36 00 5f 52 74 6c  | nActiveActivationContext@16._Rtl | 
| 1cf60 |  51 75 65 72 79 49 6e 74 65 72 66 61 63 65 4d 65    6d 6f 72 79 53 74 72 65 61 6d 40 31 32 00 5f 52  | QueryInterfaceMemoryStream@12._R | 
| 1cf80 |  74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 42 61    63 6b 54 72 61 63 65 49 6e 66 6f 72 6d 61 74 69  | tlQueryProcessBackTraceInformati | 
| 1cfa0 |  6f 6e 40 34 00 5f 52 74 6c 51 75 65 72 79 50 72    6f 63 65 73 73 44 65 62 75 67 49 6e 66 6f 72 6d  | on@4._RtlQueryProcessDebugInform | 
| 1cfc0 |  61 74 69 6f 6e 40 31 32 00 5f 52 74 6c 51 75 65    72 79 50 72 6f 63 65 73 73 48 65 61 70 49 6e 66  | ation@12._RtlQueryProcessHeapInf | 
| 1cfe0 |  6f 72 6d 61 74 69 6f 6e 40 34 00 5f 52 74 6c 51    75 65 72 79 50 72 6f 63 65 73 73 4c 6f 63 6b 49  | ormation@4._RtlQueryProcessLockI | 
| 1d000 |  6e 66 6f 72 6d 61 74 69 6f 6e 40 34 00 5f 52 74    6c 51 75 65 72 79 52 65 67 69 73 74 72 79 56 61  | nformation@4._RtlQueryRegistryVa | 
| 1d020 |  6c 75 65 73 40 32 30 00 5f 52 74 6c 51 75 65 72    79 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 40  | lues@20._RtlQuerySecurityObject@ | 
| 1d040 |  32 30 00 5f 52 74 6c 51 75 65 72 79 54 61 67 48    65 61 70 40 32 30 00 5f 52 74 6c 51 75 65 72 79  | 20._RtlQueryTagHeap@20._RtlQuery | 
| 1d060 |  54 69 6d 65 5a 6f 6e 65 49 6e 66 6f 72 6d 61 74    69 6f 6e 40 34 00 5f 52 74 6c 51 75 65 75 65 41  | TimeZoneInformation@4._RtlQueueA | 
| 1d080 |  70 63 57 6f 77 36 34 54 68 72 65 61 64 40 32 30    00 5f 52 74 6c 51 75 65 75 65 57 6f 72 6b 49 74  | pcWow64Thread@20._RtlQueueWorkIt | 
| 1d0a0 |  65 6d 40 31 32 00 5f 52 74 6c 52 61 69 73 65 45    78 63 65 70 74 69 6f 6e 40 34 00 5f 52 74 6c 52  | em@12._RtlRaiseException@4._RtlR | 
| 1d0c0 |  61 69 73 65 53 74 61 74 75 73 40 34 00 5f 52 74    6c 52 61 6e 64 6f 6d 40 34 00 5f 52 74 6c 52 61  | aiseStatus@4._RtlRandom@4._RtlRa | 
| 1d0e0 |  6e 64 6f 6d 45 78 40 34 00 5f 52 74 6c 52 65 41    6c 6c 6f 63 61 74 65 48 65 61 70 40 31 36 00 5f  | ndomEx@4._RtlReAllocateHeap@16._ | 
| 1d100 |  52 74 6c 52 65 61 64 4d 65 6d 6f 72 79 53 74 72    65 61 6d 40 31 36 00 5f 52 74 6c 52 65 61 64 4f  | RtlReadMemoryStream@16._RtlReadO | 
| 1d120 |  75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72    79 53 74 72 65 61 6d 40 31 36 00 5f 52 74 6c 52  | utOfProcessMemoryStream@16._RtlR | 
| 1d140 |  65 61 6c 50 72 65 64 65 63 65 73 73 6f 72 40 34    00 5f 52 74 6c 52 65 61 6c 53 75 63 63 65 73 73  | ealPredecessor@4._RtlRealSuccess | 
| 1d160 |  6f 72 40 34 00 5f 52 74 6c 52 65 67 69 73 74 65    72 53 65 63 75 72 65 4d 65 6d 6f 72 79 43 61 63  | or@4._RtlRegisterSecureMemoryCac | 
| 1d180 |  68 65 43 61 6c 6c 62 61 63 6b 40 34 00 5f 52 74    6c 52 65 67 69 73 74 65 72 57 61 69 74 40 32 34  | heCallback@4._RtlRegisterWait@24 | 
| 1d1a0 |  00 5f 52 74 6c 52 65 6c 65 61 73 65 41 63 74 69    76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 40 34 00  | ._RtlReleaseActivationContext@4. | 
| 1d1c0 |  5f 52 74 6c 52 65 6c 65 61 73 65 4d 65 6d 6f 72    79 53 74 72 65 61 6d 40 34 00 5f 52 74 6c 52 65  | _RtlReleaseMemoryStream@4._RtlRe | 
| 1d1e0 |  6c 65 61 73 65 50 65 62 4c 6f 63 6b 40 30 00 5f    52 74 6c 52 65 6c 65 61 73 65 50 72 69 76 69 6c  | leasePebLock@0._RtlReleasePrivil | 
| 1d200 |  65 67 65 40 34 00 5f 52 74 6c 52 65 6c 65 61 73    65 52 65 6c 61 74 69 76 65 4e 61 6d 65 40 34 00  | ege@4._RtlReleaseRelativeName@4. | 
| 1d220 |  5f 52 74 6c 52 65 6c 65 61 73 65 52 65 73 6f 75    72 63 65 40 34 00 5f 52 74 6c 52 65 6d 6f 74 65  | _RtlReleaseResource@4._RtlRemote | 
| 1d240 |  43 61 6c 6c 40 32 38 00 5f 52 74 6c 52 65 6d 6f    76 65 56 65 63 74 6f 72 65 64 43 6f 6e 74 69 6e  | Call@28._RtlRemoveVectoredContin | 
| 1d260 |  75 65 48 61 6e 64 6c 65 72 40 34 00 5f 52 74 6c    52 65 6d 6f 76 65 56 65 63 74 6f 72 65 64 45 78  | ueHandler@4._RtlRemoveVectoredEx | 
| 1d280 |  63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72 40 34    00 5f 52 74 6c 52 65 73 65 74 52 74 6c 54 72 61  | ceptionHandler@4._RtlResetRtlTra | 
| 1d2a0 |  6e 73 6c 61 74 69 6f 6e 73 40 34 00 5f 52 74 6c    52 65 73 74 6f 72 65 4c 61 73 74 57 69 6e 33 32  | nslations@4._RtlRestoreLastWin32 | 
| 1d2c0 |  45 72 72 6f 72 40 34 00 5f 52 74 6c 52 65 76 65    72 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 40 34  | Error@4._RtlRevertMemoryStream@4 | 
| 1d2e0 |  00 5f 52 74 6c 52 75 6e 44 65 63 6f 64 65 55 6e    69 63 6f 64 65 53 74 72 69 6e 67 40 38 00 5f 52  | ._RtlRunDecodeUnicodeString@8._R | 
| 1d300 |  74 6c 52 75 6e 45 6e 63 6f 64 65 55 6e 69 63 6f    64 65 53 74 72 69 6e 67 40 38 00 5f 52 74 6c 53  | tlRunEncodeUnicodeString@8._RtlS | 
| 1d320 |  65 63 6f 6e 64 73 53 69 6e 63 65 31 39 37 30 54    6f 54 69 6d 65 40 38 00 5f 52 74 6c 53 65 63 6f  | econdsSince1970ToTime@8._RtlSeco | 
| 1d340 |  6e 64 73 53 69 6e 63 65 31 39 38 30 54 6f 54 69    6d 65 40 38 00 5f 52 74 6c 53 65 65 6b 4d 65 6d  | ndsSince1980ToTime@8._RtlSeekMem | 
| 1d360 |  6f 72 79 53 74 72 65 61 6d 40 32 30 00 5f 52 74    6c 53 65 6c 66 52 65 6c 61 74 69 76 65 54 6f 41  | oryStream@20._RtlSelfRelativeToA | 
| 1d380 |  62 73 6f 6c 75 74 65 53 44 32 40 38 00 5f 52 74    6c 53 65 6c 66 52 65 6c 61 74 69 76 65 54 6f 41  | bsoluteSD2@8._RtlSelfRelativeToA | 
| 1d3a0 |  62 73 6f 6c 75 74 65 53 44 40 34 34 00 5f 52 74    6c 53 65 74 41 6c 6c 42 69 74 73 40 34 00 5f 52  | bsoluteSD@44._RtlSetAllBits@4._R | 
| 1d3c0 |  74 6c 53 65 74 41 74 74 72 69 62 75 74 65 73 53    65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f  | tlSetAttributesSecurityDescripto | 
| 1d3e0 |  72 40 31 32 00 5f 52 74 6c 53 65 74 42 69 74 73    40 31 32 00 5f 52 74 6c 53 65 74 43 6f 6e 74 72  | r@12._RtlSetBits@12._RtlSetContr | 
| 1d400 |  6f 6c 53 65 63 75 72 69 74 79 44 65 73 63 72 69    70 74 6f 72 40 31 32 00 5f 52 74 6c 53 65 74 43  | olSecurityDescriptor@12._RtlSetC | 
| 1d420 |  72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 53 70    69 6e 43 6f 75 6e 74 40 38 00 5f 52 74 6c 53 65  | riticalSectionSpinCount@8._RtlSe | 
| 1d440 |  74 43 75 72 72 65 6e 74 44 69 72 65 63 74 6f 72    79 5f 55 40 34 00 5f 52 74 6c 53 65 74 43 75 72  | tCurrentDirectory_U@4._RtlSetCur | 
| 1d460 |  72 65 6e 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 40    38 00 5f 52 74 6c 53 65 74 44 61 63 6c 53 65 63  | rentEnvironment@8._RtlSetDaclSec | 
| 1d480 |  75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 40    31 36 00 5f 52 74 6c 53 65 74 45 6e 76 69 72 6f  | urityDescriptor@16._RtlSetEnviro | 
| 1d4a0 |  6e 6d 65 6e 74 53 74 72 69 6e 67 73 40 38 00 5f    52 74 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e  | nmentStrings@8._RtlSetEnvironmen | 
| 1d4c0 |  74 56 61 72 69 61 62 6c 65 40 31 32 00 5f 52 74    6c 53 65 74 47 72 6f 75 70 53 65 63 75 72 69 74  | tVariable@12._RtlSetGroupSecurit | 
| 1d4e0 |  79 44 65 73 63 72 69 70 74 6f 72 40 31 32 00 5f    52 74 6c 53 65 74 48 65 61 70 49 6e 66 6f 72 6d  | yDescriptor@12._RtlSetHeapInform | 
| 1d500 |  61 74 69 6f 6e 40 31 36 00 5f 52 74 6c 53 65 74    49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63 6c 40 31  | ation@16._RtlSetInformationAcl@1 | 
| 1d520 |  36 00 5f 52 74 6c 53 65 74 49 6f 43 6f 6d 70 6c    65 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 40 31 32  | 6._RtlSetIoCompletionCallback@12 | 
| 1d540 |  00 5f 52 74 6c 53 65 74 4c 61 73 74 57 69 6e 33    32 45 72 72 6f 72 40 34 00 5f 52 74 6c 53 65 74  | ._RtlSetLastWin32Error@4._RtlSet | 
| 1d560 |  4c 61 73 74 57 69 6e 33 32 45 72 72 6f 72 41 6e    64 4e 74 53 74 61 74 75 73 46 72 6f 6d 4e 74 53  | LastWin32ErrorAndNtStatusFromNtS | 
| 1d580 |  74 61 74 75 73 40 34 00 5f 52 74 6c 53 65 74 4d    65 6d 6f 72 79 53 74 72 65 61 6d 53 69 7a 65 40  | tatus@4._RtlSetMemoryStreamSize@ | 
| 1d5a0 |  31 32 00 5f 52 74 6c 53 65 74 4f 77 6e 65 72 53    65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f  | 12._RtlSetOwnerSecurityDescripto | 
| 1d5c0 |  72 40 31 32 00 5f 52 74 6c 53 65 74 50 72 6f 63    65 73 73 49 73 43 72 69 74 69 63 61 6c 00 5f 52  | r@12._RtlSetProcessIsCritical._R | 
| 1d5e0 |  74 6c 53 65 74 53 61 63 6c 53 65 63 75 72 69 74    79 44 65 73 63 72 69 70 74 6f 72 40 31 36 00 5f  | tlSetSaclSecurityDescriptor@16._ | 
| 1d600 |  52 74 6c 53 65 74 53 65 63 75 72 69 74 79 44 65    73 63 72 69 70 74 6f 72 52 4d 43 6f 6e 74 72 6f  | RtlSetSecurityDescriptorRMContro | 
| 1d620 |  6c 40 38 00 5f 52 74 6c 53 65 74 53 65 63 75 72    69 74 79 4f 62 6a 65 63 74 40 32 30 00 5f 52 74  | l@8._RtlSetSecurityObject@20._Rt | 
| 1d640 |  6c 53 65 74 53 65 63 75 72 69 74 79 4f 62 6a 65    63 74 45 78 40 32 34 00 5f 52 74 6c 53 65 74 54  | lSetSecurityObjectEx@24._RtlSetT | 
| 1d660 |  68 72 65 61 64 45 72 72 6f 72 4d 6f 64 65 40 38    00 5f 52 74 6c 53 65 74 54 68 72 65 61 64 49 73  | hreadErrorMode@8._RtlSetThreadIs | 
| 1d680 |  43 72 69 74 69 63 61 6c 00 5f 52 74 6c 53 65 74    54 68 72 65 61 64 50 6f 6f 6c 53 74 61 72 74 46  | Critical._RtlSetThreadPoolStartF | 
| 1d6a0 |  75 6e 63 40 38 00 5f 52 74 6c 53 65 74 54 69 6d    65 5a 6f 6e 65 49 6e 66 6f 72 6d 61 74 69 6f 6e  | unc@8._RtlSetTimeZoneInformation | 
| 1d6c0 |  40 34 00 5f 52 74 6c 53 65 74 54 69 6d 65 72 40    32 38 00 5f 52 74 6c 53 65 74 55 6e 68 61 6e 64  | @4._RtlSetTimer@28._RtlSetUnhand | 
| 1d6e0 |  6c 65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74    65 72 40 34 00 5f 52 74 6c 53 65 74 55 6e 69 63  | ledExceptionFilter@4._RtlSetUnic | 
| 1d700 |  6f 64 65 43 61 6c 6c 6f 75 74 73 40 34 00 5f 52    74 6c 53 65 74 55 73 65 72 46 6c 61 67 73 48 65  | odeCallouts@4._RtlSetUserFlagsHe | 
| 1d720 |  61 70 40 32 30 00 5f 52 74 6c 53 65 74 55 73 65    72 56 61 6c 75 65 48 65 61 70 40 31 36 00 5f 52  | ap@20._RtlSetUserValueHeap@16._R | 
| 1d740 |  74 6c 53 69 7a 65 48 65 61 70 40 31 32 00 5f 52    74 6c 53 70 6c 61 79 40 34 00 5f 52 74 6c 53 74  | tlSizeHeap@12._RtlSplay@4._RtlSt | 
| 1d760 |  61 72 74 52 58 61 63 74 40 34 00 5f 52 74 6c 53    74 61 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d 40  | artRXact@4._RtlStatMemoryStream@ | 
| 1d780 |  31 32 00 5f 52 74 6c 53 74 72 69 6e 67 46 72 6f    6d 47 55 49 44 40 38 00 5f 52 74 6c 53 75 62 41  | 12._RtlStringFromGUID@8._RtlSubA | 
| 1d7a0 |  75 74 68 6f 72 69 74 79 43 6f 75 6e 74 53 69 64    40 34 00 5f 52 74 6c 53 75 62 41 75 74 68 6f 72  | uthorityCountSid@4._RtlSubAuthor | 
| 1d7c0 |  69 74 79 53 69 64 40 38 00 5f 52 74 6c 53 75 62    74 72 65 65 50 72 65 64 65 63 65 73 73 6f 72 40  | itySid@8._RtlSubtreePredecessor@ | 
| 1d7e0 |  34 00 5f 52 74 6c 53 75 62 74 72 65 65 53 75 63    63 65 73 73 6f 72 40 34 00 5f 52 74 6c 53 79 73  | 4._RtlSubtreeSuccessor@4._RtlSys | 
| 1d800 |  74 65 6d 54 69 6d 65 54 6f 4c 6f 63 61 6c 54 69    6d 65 40 38 00 5f 52 74 6c 54 69 6d 65 46 69 65  | temTimeToLocalTime@8._RtlTimeFie | 
| 1d820 |  6c 64 73 54 6f 54 69 6d 65 40 38 00 5f 52 74 6c    54 69 6d 65 54 6f 45 6c 61 70 73 65 64 54 69 6d  | ldsToTime@8._RtlTimeToElapsedTim | 
| 1d840 |  65 46 69 65 6c 64 73 40 38 00 5f 52 74 6c 54 69    6d 65 54 6f 53 65 63 6f 6e 64 73 53 69 6e 63 65  | eFields@8._RtlTimeToSecondsSince | 
| 1d860 |  31 39 37 30 40 38 00 5f 52 74 6c 54 69 6d 65 54    6f 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39 38  | 1970@8._RtlTimeToSecondsSince198 | 
| 1d880 |  30 40 38 00 5f 52 74 6c 54 69 6d 65 54 6f 54 69    6d 65 46 69 65 6c 64 73 40 38 00 5f 52 74 6c 54  | 0@8._RtlTimeToTimeFields@8._RtlT | 
| 1d8a0 |  72 61 63 65 44 61 74 61 62 61 73 65 41 64 64 40    31 36 00 5f 52 74 6c 54 72 61 63 65 44 61 74 61  | raceDatabaseAdd@16._RtlTraceData | 
| 1d8c0 |  62 61 73 65 43 72 65 61 74 65 40 32 30 00 5f 52    74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 44  | baseCreate@20._RtlTraceDatabaseD | 
| 1d8e0 |  65 73 74 72 6f 79 40 34 00 5f 52 74 6c 54 72 61    63 65 44 61 74 61 62 61 73 65 45 6e 75 6d 65 72  | estroy@4._RtlTraceDatabaseEnumer | 
| 1d900 |  61 74 65 40 31 32 00 5f 52 74 6c 54 72 61 63 65    44 61 74 61 62 61 73 65 46 69 6e 64 40 31 36 00  | ate@12._RtlTraceDatabaseFind@16. | 
| 1d920 |  5f 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73    65 4c 6f 63 6b 40 34 00 5f 52 74 6c 54 72 61 63  | _RtlTraceDatabaseLock@4._RtlTrac | 
| 1d940 |  65 44 61 74 61 62 61 73 65 55 6e 6c 6f 63 6b 40    34 00 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62  | eDatabaseUnlock@4._RtlTraceDatab | 
| 1d960 |  61 73 65 56 61 6c 69 64 61 74 65 40 34 00 5f 52    74 6c 54 72 79 45 6e 74 65 72 43 72 69 74 69 63  | aseValidate@4._RtlTryEnterCritic | 
| 1d980 |  61 6c 53 65 63 74 69 6f 6e 40 34 00 5f 52 74 6c    55 6e 68 61 6e 64 6c 65 64 45 78 63 65 70 74 69  | alSection@4._RtlUnhandledExcepti | 
| 1d9a0 |  6f 6e 46 69 6c 74 65 72 32 40 38 00 5f 52 74 6c    55 6e 68 61 6e 64 6c 65 64 45 78 63 65 70 74 69  | onFilter2@8._RtlUnhandledExcepti | 
| 1d9c0 |  6f 6e 46 69 6c 74 65 72 40 34 00 5f 52 74 6c 55    6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e  | onFilter@4._RtlUnicodeStringToAn | 
| 1d9e0 |  73 69 53 69 7a 65 40 34 00 5f 52 74 6c 55 6e 69    63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69  | siSize@4._RtlUnicodeStringToAnsi | 
| 1da00 |  53 74 72 69 6e 67 40 31 32 00 5f 52 74 6c 55 6e    69 63 6f 64 65 53 74 72 69 6e 67 54 6f 43 6f 75  | String@12._RtlUnicodeStringToCou | 
| 1da20 |  6e 74 65 64 4f 65 6d 53 74 72 69 6e 67 40 31 32    00 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69  | ntedOemString@12._RtlUnicodeStri | 
| 1da40 |  6e 67 54 6f 49 6e 74 65 67 65 72 40 31 32 00 5f    52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67  | ngToInteger@12._RtlUnicodeString | 
| 1da60 |  54 6f 4f 65 6d 53 69 7a 65 40 34 00 5f 52 74 6c    55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f  | ToOemSize@4._RtlUnicodeStringToO | 
| 1da80 |  65 6d 53 74 72 69 6e 67 40 31 32 00 5f 52 74 6c    55 6e 69 63 6f 64 65 54 6f 43 75 73 74 6f 6d 43  | emString@12._RtlUnicodeToCustomC | 
| 1daa0 |  50 4e 40 32 34 00 5f 52 74 6c 55 6e 69 63 6f 64    65 54 6f 4d 75 6c 74 69 42 79 74 65 4e 40 32 30  | PN@24._RtlUnicodeToMultiByteN@20 | 
| 1dac0 |  00 5f 52 74 6c 55 6e 69 63 6f 64 65 54 6f 4d 75    6c 74 69 42 79 74 65 53 69 7a 65 40 31 32 00 5f  | ._RtlUnicodeToMultiByteSize@12._ | 
| 1dae0 |  52 74 6c 55 6e 69 63 6f 64 65 54 6f 4f 65 6d 4e    40 32 30 00 5f 52 74 6c 55 6e 69 66 6f 72 6d 40  | RtlUnicodeToOemN@20._RtlUniform@ | 
| 1db00 |  34 00 5f 52 74 6c 55 6e 6c 6f 63 6b 42 6f 6f 74    53 74 61 74 75 73 44 61 74 61 40 34 00 5f 52 74  | 4._RtlUnlockBootStatusData@4._Rt | 
| 1db20 |  6c 55 6e 6c 6f 63 6b 48 65 61 70 40 34 00 5f 52    74 6c 55 6e 6c 6f 63 6b 4d 65 6d 6f 72 79 53 74  | lUnlockHeap@4._RtlUnlockMemorySt | 
| 1db40 |  72 65 61 6d 52 65 67 69 6f 6e 40 32 34 00 5f 52    74 6c 55 6e 77 69 6e 64 40 31 36 00 5f 52 74 6c  | reamRegion@24._RtlUnwind@16._Rtl | 
| 1db60 |  55 70 63 61 73 65 55 6e 69 63 6f 64 65 43 68 61    72 40 34 00 5f 52 74 6c 55 70 63 61 73 65 55 6e  | UpcaseUnicodeChar@4._RtlUpcaseUn | 
| 1db80 |  69 63 6f 64 65 53 74 72 69 6e 67 40 31 32 00 5f    52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65  | icodeString@12._RtlUpcaseUnicode | 
| 1dba0 |  53 74 72 69 6e 67 54 6f 41 6e 73 69 53 74 72 69    6e 67 40 31 32 00 5f 52 74 6c 55 70 63 61 73 65  | StringToAnsiString@12._RtlUpcase | 
| 1dbc0 |  55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 43    6f 75 6e 74 65 64 4f 65 6d 53 74 72 69 6e 67 40  | UnicodeStringToCountedOemString@ | 
| 1dbe0 |  31 32 00 5f 52 74 6c 55 70 63 61 73 65 55 6e 69    63 6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53  | 12._RtlUpcaseUnicodeStringToOemS | 
| 1dc00 |  74 72 69 6e 67 40 31 32 00 5f 52 74 6c 55 70 63    61 73 65 55 6e 69 63 6f 64 65 54 6f 43 75 73 74  | tring@12._RtlUpcaseUnicodeToCust | 
| 1dc20 |  6f 6d 43 50 4e 40 32 34 00 5f 52 74 6c 55 70 63    61 73 65 55 6e 69 63 6f 64 65 54 6f 4d 75 6c 74  | omCPN@24._RtlUpcaseUnicodeToMult | 
| 1dc40 |  69 42 79 74 65 4e 40 32 30 00 5f 52 74 6c 55 70    63 61 73 65 55 6e 69 63 6f 64 65 54 6f 4f 65 6d  | iByteN@20._RtlUpcaseUnicodeToOem | 
| 1dc60 |  4e 40 32 30 00 5f 52 74 6c 55 70 64 61 74 65 54    69 6d 65 72 40 31 36 00 5f 52 74 6c 55 70 70 65  | N@20._RtlUpdateTimer@16._RtlUppe | 
| 1dc80 |  72 43 68 61 72 40 34 00 5f 52 74 6c 55 70 70 65    72 53 74 72 69 6e 67 40 38 00 5f 52 74 6c 55 73  | rChar@4._RtlUpperString@8._RtlUs | 
| 1dca0 |  61 67 65 48 65 61 70 40 31 32 00 5f 52 74 6c 56    61 6c 69 64 41 63 6c 40 34 00 5f 52 74 6c 56 61  | ageHeap@12._RtlValidAcl@4._RtlVa | 
| 1dcc0 |  6c 69 64 52 65 6c 61 74 69 76 65 53 65 63 75 72    69 74 79 44 65 73 63 72 69 70 74 6f 72 40 31 32  | lidRelativeSecurityDescriptor@12 | 
| 1dce0 |  00 5f 52 74 6c 56 61 6c 69 64 53 65 63 75 72 69    74 79 44 65 73 63 72 69 70 74 6f 72 40 34 00 5f  | ._RtlValidSecurityDescriptor@4._ | 
| 1dd00 |  52 74 6c 56 61 6c 69 64 53 69 64 40 34 00 5f 52    74 6c 56 61 6c 69 64 61 74 65 48 65 61 70 40 31  | RtlValidSid@4._RtlValidateHeap@1 | 
| 1dd20 |  32 00 5f 52 74 6c 56 61 6c 69 64 61 74 65 50 72    6f 63 65 73 73 48 65 61 70 73 40 30 00 5f 52 74  | 2._RtlValidateProcessHeaps@0._Rt | 
| 1dd40 |  6c 56 61 6c 69 64 61 74 65 55 6e 69 63 6f 64 65    53 74 72 69 6e 67 40 38 00 5f 52 74 6c 56 65 72  | lValidateUnicodeString@8._RtlVer | 
| 1dd60 |  69 66 79 56 65 72 73 69 6f 6e 49 6e 66 6f 40 31    36 00 5f 52 74 6c 57 61 6c 6b 46 72 61 6d 65 43  | ifyVersionInfo@16._RtlWalkFrameC | 
| 1dd80 |  68 61 69 6e 40 31 32 00 5f 52 74 6c 57 61 6c 6b    48 65 61 70 40 38 00 5f 52 74 6c 57 6f 77 36 34  | hain@12._RtlWalkHeap@8._RtlWow64 | 
| 1dda0 |  45 6e 61 62 6c 65 46 73 52 65 64 69 72 65 63 74    69 6f 6e 40 34 00 5f 52 74 6c 57 6f 77 36 34 45  | EnableFsRedirection@4._RtlWow64E | 
| 1ddc0 |  6e 61 62 6c 65 46 73 52 65 64 69 72 65 63 74 69    6f 6e 45 78 40 38 00 5f 52 74 6c 57 72 69 74 65  | nableFsRedirectionEx@8._RtlWrite | 
| 1dde0 |  4d 65 6d 6f 72 79 53 74 72 65 61 6d 40 31 36 00    5f 52 74 6c 57 72 69 74 65 52 65 67 69 73 74 72  | MemoryStream@16._RtlWriteRegistr | 
| 1de00 |  79 56 61 6c 75 65 40 32 34 00 5f 52 74 6c 5a 65    72 6f 48 65 61 70 40 38 00 5f 52 74 6c 5a 65 72  | yValue@24._RtlZeroHeap@8._RtlZer | 
| 1de20 |  6f 4d 65 6d 6f 72 79 40 38 00 5f 52 74 6c 5a 6f    6d 62 69 66 79 41 63 74 69 76 61 74 69 6f 6e 43  | oMemory@8._RtlZombifyActivationC | 
| 1de40 |  6f 6e 74 65 78 74 40 34 00 5f 52 74 6c 70 41 70    70 6c 79 4c 65 6e 67 74 68 46 75 6e 63 74 69 6f  | ontext@4._RtlpApplyLengthFunctio | 
| 1de60 |  6e 40 31 36 00 5f 52 74 6c 70 45 6e 73 75 72 65    42 75 66 66 65 72 53 69 7a 65 40 31 32 00 5f 52  | n@16._RtlpEnsureBufferSize@12._R | 
| 1de80 |  74 6c 70 4e 6f 74 4f 77 6e 65 72 43 72 69 74 69    63 61 6c 53 65 63 74 69 6f 6e 40 34 00 5f 52 74  | tlpNotOwnerCriticalSection@4._Rt | 
| 1dea0 |  6c 70 4e 74 43 72 65 61 74 65 4b 65 79 40 32 34    00 5f 52 74 6c 70 4e 74 45 6e 75 6d 65 72 61 74  | lpNtCreateKey@24._RtlpNtEnumerat | 
| 1dec0 |  65 53 75 62 4b 65 79 40 31 36 00 5f 52 74 6c 70    4e 74 4d 61 6b 65 54 65 6d 70 6f 72 61 72 79 4b  | eSubKey@16._RtlpNtMakeTemporaryK | 
| 1dee0 |  65 79 40 34 00 5f 52 74 6c 70 4e 74 4f 70 65 6e    4b 65 79 40 31 36 00 5f 52 74 6c 70 4e 74 51 75  | ey@4._RtlpNtOpenKey@16._RtlpNtQu | 
| 1df00 |  65 72 79 56 61 6c 75 65 4b 65 79 40 32 30 00 5f    52 74 6c 70 4e 74 53 65 74 56 61 6c 75 65 4b 65  | eryValueKey@20._RtlpNtSetValueKe | 
| 1df20 |  79 40 31 36 00 5f 52 74 6c 70 55 6e 57 61 69 74    43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 40  | y@16._RtlpUnWaitCriticalSection@ | 
| 1df40 |  34 00 5f 52 74 6c 70 57 61 69 74 46 6f 72 43 72    69 74 69 63 61 6c 53 65 63 74 69 6f 6e 40 34 00  | 4._RtlpWaitForCriticalSection@4. | 
| 1df60 |  5f 52 74 6c 78 41 6e 73 69 53 74 72 69 6e 67 54    6f 55 6e 69 63 6f 64 65 53 69 7a 65 40 34 00 5f  | _RtlxAnsiStringToUnicodeSize@4._ | 
| 1df80 |  52 74 6c 78 4f 65 6d 53 74 72 69 6e 67 54 6f 55    6e 69 63 6f 64 65 53 69 7a 65 40 34 00 5f 52 74  | RtlxOemStringToUnicodeSize@4._Rt | 
| 1dfa0 |  6c 78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54    6f 41 6e 73 69 53 69 7a 65 40 34 00 5f 52 74 6c  | lxUnicodeStringToAnsiSize@4._Rtl | 
| 1dfc0 |  78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f    4f 65 6d 53 69 7a 65 40 34 00 5f 56 65 72 53 65  | xUnicodeStringToOemSize@4._VerSe | 
| 1dfe0 |  74 43 6f 6e 64 69 74 69 6f 6e 4d 61 73 6b 40 31    36 00 5f 5a 77 41 63 63 65 70 74 43 6f 6e 6e 65  | tConditionMask@16._ZwAcceptConne | 
| 1e000 |  63 74 50 6f 72 74 40 32 34 00 5f 5a 77 41 63 63    65 73 73 43 68 65 63 6b 40 33 32 00 5f 5a 77 41  | ctPort@24._ZwAccessCheck@32._ZwA | 
| 1e020 |  63 63 65 73 73 43 68 65 63 6b 41 6e 64 41 75 64    69 74 41 6c 61 72 6d 40 34 34 00 5f 5a 77 41 63  | ccessCheckAndAuditAlarm@44._ZwAc | 
| 1e040 |  63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 40    34 34 00 5f 5a 77 41 63 63 65 73 73 43 68 65 63  | cessCheckByType@44._ZwAccessChec | 
| 1e060 |  6b 42 79 54 79 70 65 41 6e 64 41 75 64 69 74 41    6c 61 72 6d 40 36 34 00 5f 5a 77 41 63 63 65 73  | kByTypeAndAuditAlarm@64._ZwAcces | 
| 1e080 |  73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75    6c 74 4c 69 73 74 40 34 34 00 5f 5a 77 41 63 63  | sCheckByTypeResultList@44._ZwAcc | 
| 1e0a0 |  65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65    73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74  | essCheckByTypeResultListAndAudit | 
| 1e0c0 |  41 6c 61 72 6d 40 36 34 00 5f 5a 77 41 63 63 65    73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73  | Alarm@64._ZwAccessCheckByTypeRes | 
| 1e0e0 |  75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41    6c 61 72 6d 42 79 48 61 6e 64 6c 65 40 36 38 00  | ultListAndAuditAlarmByHandle@68. | 
| 1e100 |  5f 5a 77 41 64 64 41 74 6f 6d 40 31 32 00 5f 5a    77 41 64 64 42 6f 6f 74 45 6e 74 72 79 40 38 00  | _ZwAddAtom@12._ZwAddBootEntry@8. | 
| 1e120 |  5f 5a 77 41 64 64 44 72 69 76 65 72 45 6e 74 72    79 40 38 00 5f 5a 77 41 64 6a 75 73 74 47 72 6f  | _ZwAddDriverEntry@8._ZwAdjustGro | 
| 1e140 |  75 70 73 54 6f 6b 65 6e 40 32 34 00 5f 5a 77 41    64 6a 75 73 74 50 72 69 76 69 6c 65 67 65 73 54  | upsToken@24._ZwAdjustPrivilegesT | 
| 1e160 |  6f 6b 65 6e 40 32 34 00 5f 5a 77 41 6c 65 72 74    52 65 73 75 6d 65 54 68 72 65 61 64 40 38 00 5f  | oken@24._ZwAlertResumeThread@8._ | 
| 1e180 |  5a 77 41 6c 65 72 74 54 68 72 65 61 64 40 34 00    5f 5a 77 41 6c 6c 6f 63 61 74 65 4c 6f 63 61 6c  | ZwAlertThread@4._ZwAllocateLocal | 
| 1e1a0 |  6c 79 55 6e 69 71 75 65 49 64 40 34 00 5f 5a 77    41 6c 6c 6f 63 61 74 65 55 73 65 72 50 68 79 73  | lyUniqueId@4._ZwAllocateUserPhys | 
| 1e1c0 |  69 63 61 6c 50 61 67 65 73 40 31 32 00 5f 5a 77    41 6c 6c 6f 63 61 74 65 55 75 69 64 73 40 31 36  | icalPages@12._ZwAllocateUuids@16 | 
| 1e1e0 |  00 5f 5a 77 41 6c 6c 6f 63 61 74 65 56 69 72 74    75 61 6c 4d 65 6d 6f 72 79 40 32 34 00 5f 5a 77  | ._ZwAllocateVirtualMemory@24._Zw | 
| 1e200 |  41 70 70 68 65 6c 70 43 61 63 68 65 43 6f 6e 74    72 6f 6c 40 38 00 5f 5a 77 41 72 65 4d 61 70 70  | ApphelpCacheControl@8._ZwAreMapp | 
| 1e220 |  65 64 46 69 6c 65 73 54 68 65 53 61 6d 65 40 38    00 5f 5a 77 41 73 73 69 67 6e 50 72 6f 63 65 73  | edFilesTheSame@8._ZwAssignProces | 
| 1e240 |  73 54 6f 4a 6f 62 4f 62 6a 65 63 74 40 38 00 5f    5a 77 43 61 6c 6c 62 61 63 6b 52 65 74 75 72 6e  | sToJobObject@8._ZwCallbackReturn | 
| 1e260 |  40 31 32 00 5f 5a 77 43 61 6e 63 65 6c 44 65 76    69 63 65 57 61 6b 65 75 70 52 65 71 75 65 73 74  | @12._ZwCancelDeviceWakeupRequest | 
| 1e280 |  40 34 00 5f 5a 77 43 61 6e 63 65 6c 49 6f 46 69    6c 65 40 38 00 5f 5a 77 43 61 6e 63 65 6c 54 69  | @4._ZwCancelIoFile@8._ZwCancelTi | 
| 1e2a0 |  6d 65 72 40 38 00 5f 5a 77 43 6c 65 61 72 45 76    65 6e 74 40 34 00 5f 5a 77 43 6c 6f 73 65 40 34  | mer@8._ZwClearEvent@4._ZwClose@4 | 
| 1e2c0 |  00 5f 5a 77 43 6c 6f 73 65 4f 62 6a 65 63 74 41    75 64 69 74 41 6c 61 72 6d 40 31 32 00 5f 5a 77  | ._ZwCloseObjectAuditAlarm@12._Zw | 
| 1e2e0 |  43 6f 6d 70 61 63 74 4b 65 79 73 40 38 00 5f 5a    77 43 6f 6d 70 61 72 65 54 6f 6b 65 6e 73 40 31  | CompactKeys@8._ZwCompareTokens@1 | 
| 1e300 |  32 00 5f 5a 77 43 6f 6d 70 6c 65 74 65 43 6f 6e    6e 65 63 74 50 6f 72 74 40 34 00 5f 5a 77 43 6f  | 2._ZwCompleteConnectPort@4._ZwCo | 
| 1e320 |  6d 70 72 65 73 73 4b 65 79 40 34 00 5f 5a 77 43    6f 6e 6e 65 63 74 50 6f 72 74 40 33 32 00 5f 5a  | mpressKey@4._ZwConnectPort@32._Z | 
| 1e340 |  77 43 6f 6e 74 69 6e 75 65 40 38 00 5f 5a 77 43    72 65 61 74 65 44 65 62 75 67 4f 62 6a 65 63 74  | wContinue@8._ZwCreateDebugObject | 
| 1e360 |  40 31 36 00 5f 5a 77 43 72 65 61 74 65 44 69 72    65 63 74 6f 72 79 4f 62 6a 65 63 74 40 31 32 00  | @16._ZwCreateDirectoryObject@12. | 
| 1e380 |  5f 5a 77 43 72 65 61 74 65 45 76 65 6e 74 40 32    30 00 5f 5a 77 43 72 65 61 74 65 45 76 65 6e 74  | _ZwCreateEvent@20._ZwCreateEvent | 
| 1e3a0 |  50 61 69 72 40 31 32 00 5f 5a 77 43 72 65 61 74    65 46 69 6c 65 40 34 34 00 5f 5a 77 43 72 65 61  | Pair@12._ZwCreateFile@44._ZwCrea | 
| 1e3c0 |  74 65 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 31    36 00 5f 5a 77 43 72 65 61 74 65 4a 6f 62 4f 62  | teIoCompletion@16._ZwCreateJobOb | 
| 1e3e0 |  6a 65 63 74 40 31 32 00 5f 5a 77 43 72 65 61 74    65 4a 6f 62 53 65 74 40 31 32 00 5f 5a 77 43 72  | ject@12._ZwCreateJobSet@12._ZwCr | 
| 1e400 |  65 61 74 65 4b 65 79 40 32 38 00 5f 5a 77 43 72    65 61 74 65 4b 65 79 65 64 45 76 65 6e 74 40 31  | eateKey@28._ZwCreateKeyedEvent@1 | 
| 1e420 |  36 00 5f 5a 77 43 72 65 61 74 65 4d 61 69 6c 73    6c 6f 74 46 69 6c 65 40 33 32 00 5f 5a 77 43 72  | 6._ZwCreateMailslotFile@32._ZwCr | 
| 1e440 |  65 61 74 65 4d 75 74 61 6e 74 40 31 36 00 5f 5a    77 43 72 65 61 74 65 4e 61 6d 65 64 50 69 70 65  | eateMutant@16._ZwCreateNamedPipe | 
| 1e460 |  46 69 6c 65 40 35 36 00 5f 5a 77 43 72 65 61 74    65 50 61 67 69 6e 67 46 69 6c 65 40 31 36 00 5f  | File@56._ZwCreatePagingFile@16._ | 
| 1e480 |  5a 77 43 72 65 61 74 65 50 6f 72 74 40 32 30 00    5f 5a 77 43 72 65 61 74 65 50 72 6f 63 65 73 73  | ZwCreatePort@20._ZwCreateProcess | 
| 1e4a0 |  40 33 32 00 5f 5a 77 43 72 65 61 74 65 50 72 6f    63 65 73 73 45 78 40 33 36 00 5f 5a 77 43 72 65  | @32._ZwCreateProcessEx@36._ZwCre | 
| 1e4c0 |  61 74 65 50 72 6f 66 69 6c 65 40 33 36 00 5f 5a    77 43 72 65 61 74 65 53 65 63 74 69 6f 6e 40 32  | ateProfile@36._ZwCreateSection@2 | 
| 1e4e0 |  38 00 5f 5a 77 43 72 65 61 74 65 53 65 6d 61 70    68 6f 72 65 40 32 30 00 5f 5a 77 43 72 65 61 74  | 8._ZwCreateSemaphore@20._ZwCreat | 
| 1e500 |  65 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a    65 63 74 40 31 36 00 5f 5a 77 43 72 65 61 74 65  | eSymbolicLinkObject@16._ZwCreate | 
| 1e520 |  54 68 72 65 61 64 40 33 32 00 5f 5a 77 43 72 65    61 74 65 54 69 6d 65 72 40 31 36 00 5f 5a 77 43  | Thread@32._ZwCreateTimer@16._ZwC | 
| 1e540 |  72 65 61 74 65 54 6f 6b 65 6e 40 35 32 00 5f 5a    77 43 72 65 61 74 65 57 61 69 74 61 62 6c 65 50  | reateToken@52._ZwCreateWaitableP | 
| 1e560 |  6f 72 74 40 32 30 00 5f 5a 77 44 65 62 75 67 41    63 74 69 76 65 50 72 6f 63 65 73 73 40 38 00 5f  | ort@20._ZwDebugActiveProcess@8._ | 
| 1e580 |  5a 77 44 65 62 75 67 43 6f 6e 74 69 6e 75 65 40    31 32 00 5f 5a 77 44 65 6c 61 79 45 78 65 63 75  | ZwDebugContinue@12._ZwDelayExecu | 
| 1e5a0 |  74 69 6f 6e 40 38 00 5f 5a 77 44 65 6c 65 74 65    41 74 6f 6d 40 34 00 5f 5a 77 44 65 6c 65 74 65  | tion@8._ZwDeleteAtom@4._ZwDelete | 
| 1e5c0 |  42 6f 6f 74 45 6e 74 72 79 40 34 00 5f 5a 77 44    65 6c 65 74 65 44 72 69 76 65 72 45 6e 74 72 79  | BootEntry@4._ZwDeleteDriverEntry | 
| 1e5e0 |  40 34 00 5f 5a 77 44 65 6c 65 74 65 46 69 6c 65    40 34 00 5f 5a 77 44 65 6c 65 74 65 4b 65 79 40  | @4._ZwDeleteFile@4._ZwDeleteKey@ | 
| 1e600 |  34 00 5f 5a 77 44 65 6c 65 74 65 4f 62 6a 65 63    74 41 75 64 69 74 41 6c 61 72 6d 40 31 32 00 5f  | 4._ZwDeleteObjectAuditAlarm@12._ | 
| 1e620 |  5a 77 44 65 6c 65 74 65 56 61 6c 75 65 4b 65 79    40 38 00 5f 5a 77 44 65 76 69 63 65 49 6f 43 6f  | ZwDeleteValueKey@8._ZwDeviceIoCo | 
| 1e640 |  6e 74 72 6f 6c 46 69 6c 65 40 34 30 00 5f 5a 77    44 69 73 70 6c 61 79 53 74 72 69 6e 67 40 34 00  | ntrolFile@40._ZwDisplayString@4. | 
| 1e660 |  5f 5a 77 44 75 70 6c 69 63 61 74 65 4f 62 6a 65    63 74 40 32 38 00 5f 5a 77 44 75 70 6c 69 63 61  | _ZwDuplicateObject@28._ZwDuplica | 
| 1e680 |  74 65 54 6f 6b 65 6e 40 32 34 00 5f 5a 77 45 6e    75 6d 65 72 61 74 65 42 6f 6f 74 45 6e 74 72 69  | teToken@24._ZwEnumerateBootEntri | 
| 1e6a0 |  65 73 40 38 00 5f 5a 77 45 6e 75 6d 65 72 61 74    65 44 72 69 76 65 72 45 6e 74 72 69 65 73 40 38  | es@8._ZwEnumerateDriverEntries@8 | 
| 1e6c0 |  00 5f 5a 77 45 6e 75 6d 65 72 61 74 65 4b 65 79    40 32 34 00 5f 5a 77 45 6e 75 6d 65 72 61 74 65  | ._ZwEnumerateKey@24._ZwEnumerate | 
| 1e6e0 |  53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e    74 56 61 6c 75 65 73 45 78 40 31 32 00 5f 5a 77  | SystemEnvironmentValuesEx@12._Zw | 
| 1e700 |  45 6e 75 6d 65 72 61 74 65 56 61 6c 75 65 4b 65    79 40 32 34 00 5f 5a 77 45 78 74 65 6e 64 53 65  | EnumerateValueKey@24._ZwExtendSe | 
| 1e720 |  63 74 69 6f 6e 40 38 00 5f 5a 77 46 69 6c 74 65    72 54 6f 6b 65 6e 40 32 34 00 5f 5a 77 46 69 6e  | ction@8._ZwFilterToken@24._ZwFin | 
| 1e740 |  64 41 74 6f 6d 40 31 32 00 5f 5a 77 46 6c 75 73    68 42 75 66 66 65 72 73 46 69 6c 65 40 38 00 5f  | dAtom@12._ZwFlushBuffersFile@8._ | 
| 1e760 |  5a 77 46 6c 75 73 68 49 6e 73 74 72 75 63 74 69    6f 6e 43 61 63 68 65 40 31 32 00 5f 5a 77 46 6c  | ZwFlushInstructionCache@12._ZwFl | 
| 1e780 |  75 73 68 4b 65 79 40 34 00 5f 5a 77 46 6c 75 73    68 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 31  | ushKey@4._ZwFlushVirtualMemory@1 | 
| 1e7a0 |  36 00 5f 5a 77 46 6c 75 73 68 57 72 69 74 65 42    75 66 66 65 72 40 30 00 5f 5a 77 46 72 65 65 55  | 6._ZwFlushWriteBuffer@0._ZwFreeU | 
| 1e7c0 |  73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73    40 31 32 00 5f 5a 77 46 72 65 65 56 69 72 74 75  | serPhysicalPages@12._ZwFreeVirtu | 
| 1e7e0 |  61 6c 4d 65 6d 6f 72 79 40 31 36 00 5f 5a 77 46    73 43 6f 6e 74 72 6f 6c 46 69 6c 65 40 34 30 00  | alMemory@16._ZwFsControlFile@40. | 
| 1e800 |  5f 5a 77 47 65 74 43 6f 6e 74 65 78 74 54 68 72    65 61 64 40 38 00 5f 5a 77 47 65 74 43 75 72 72  | _ZwGetContextThread@8._ZwGetCurr | 
| 1e820 |  65 6e 74 50 72 6f 63 65 73 73 6f 72 4e 75 6d 62    65 72 40 30 00 5f 5a 77 47 65 74 44 65 76 69 63  | entProcessorNumber@0._ZwGetDevic | 
| 1e840 |  65 50 6f 77 65 72 53 74 61 74 65 40 38 00 5f 5a    77 47 65 74 50 6c 75 67 50 6c 61 79 45 76 65 6e  | ePowerState@8._ZwGetPlugPlayEven | 
| 1e860 |  74 40 31 36 00 5f 5a 77 47 65 74 57 72 69 74 65    57 61 74 63 68 40 32 38 00 5f 5a 77 49 6d 70 65  | t@16._ZwGetWriteWatch@28._ZwImpe | 
| 1e880 |  72 73 6f 6e 61 74 65 41 6e 6f 6e 79 6d 6f 75 73    54 6f 6b 65 6e 40 34 00 5f 5a 77 49 6d 70 65 72  | rsonateAnonymousToken@4._ZwImper | 
| 1e8a0 |  73 6f 6e 61 74 65 43 6c 69 65 6e 74 4f 66 50 6f    72 74 40 38 00 5f 5a 77 49 6d 70 65 72 73 6f 6e  | sonateClientOfPort@8._ZwImperson | 
| 1e8c0 |  61 74 65 54 68 72 65 61 64 40 31 32 00 5f 5a 77    49 6e 69 74 69 61 6c 69 7a 65 52 65 67 69 73 74  | ateThread@12._ZwInitializeRegist | 
| 1e8e0 |  72 79 40 34 00 5f 5a 77 49 6e 69 74 69 61 74 65    50 6f 77 65 72 41 63 74 69 6f 6e 40 31 36 00 5f  | ry@4._ZwInitiatePowerAction@16._ | 
| 1e900 |  5a 77 49 73 50 72 6f 63 65 73 73 49 6e 4a 6f 62    40 38 00 5f 5a 77 49 73 53 79 73 74 65 6d 52 65  | ZwIsProcessInJob@8._ZwIsSystemRe | 
| 1e920 |  73 75 6d 65 41 75 74 6f 6d 61 74 69 63 40 30 00    5f 5a 77 4c 69 73 74 65 6e 50 6f 72 74 40 38 00  | sumeAutomatic@0._ZwListenPort@8. | 
| 1e940 |  5f 5a 77 4c 6f 61 64 44 72 69 76 65 72 40 34 00    5f 5a 77 4c 6f 61 64 4b 65 79 32 40 31 32 00 5f  | _ZwLoadDriver@4._ZwLoadKey2@12._ | 
| 1e960 |  5a 77 4c 6f 61 64 4b 65 79 40 38 00 5f 5a 77 4c    6f 61 64 4b 65 79 45 78 40 31 36 00 5f 5a 77 4c  | ZwLoadKey@8._ZwLoadKeyEx@16._ZwL | 
| 1e980 |  6f 63 6b 46 69 6c 65 40 34 30 00 5f 5a 77 4c 6f    63 6b 50 72 6f 64 75 63 74 41 63 74 69 76 61 74  | ockFile@40._ZwLockProductActivat | 
| 1e9a0 |  69 6f 6e 4b 65 79 73 40 38 00 5f 5a 77 4c 6f 63    6b 52 65 67 69 73 74 72 79 4b 65 79 40 34 00 5f  | ionKeys@8._ZwLockRegistryKey@4._ | 
| 1e9c0 |  5a 77 4c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d    6f 72 79 40 31 36 00 5f 5a 77 4d 61 6b 65 50 65  | ZwLockVirtualMemory@16._ZwMakePe | 
| 1e9e0 |  72 6d 61 6e 65 6e 74 4f 62 6a 65 63 74 40 34 00    5f 5a 77 4d 61 6b 65 54 65 6d 70 6f 72 61 72 79  | rmanentObject@4._ZwMakeTemporary | 
| 1ea00 |  4f 62 6a 65 63 74 40 34 00 5f 5a 77 4d 61 70 55    73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73  | Object@4._ZwMapUserPhysicalPages | 
| 1ea20 |  40 31 32 00 5f 5a 77 4d 61 70 55 73 65 72 50 68    79 73 69 63 61 6c 50 61 67 65 73 53 63 61 74 74  | @12._ZwMapUserPhysicalPagesScatt | 
| 1ea40 |  65 72 40 31 32 00 5f 5a 77 4d 61 70 56 69 65 77    4f 66 53 65 63 74 69 6f 6e 40 34 30 00 5f 5a 77  | er@12._ZwMapViewOfSection@40._Zw | 
| 1ea60 |  4d 6f 64 69 66 79 42 6f 6f 74 45 6e 74 72 79 40    34 00 5f 5a 77 4d 6f 64 69 66 79 44 72 69 76 65  | ModifyBootEntry@4._ZwModifyDrive | 
| 1ea80 |  72 45 6e 74 72 79 40 34 00 5f 5a 77 4e 6f 74 69    66 79 43 68 61 6e 67 65 44 69 72 65 63 74 6f 72  | rEntry@4._ZwNotifyChangeDirector | 
| 1eaa0 |  79 46 69 6c 65 40 33 36 00 5f 5a 77 4e 6f 74 69    66 79 43 68 61 6e 67 65 4b 65 79 40 34 30 00 5f  | yFile@36._ZwNotifyChangeKey@40._ | 
| 1eac0 |  5a 77 4e 6f 74 69 66 79 43 68 61 6e 67 65 4d 75    6c 74 69 70 6c 65 4b 65 79 73 40 34 38 00 5f 5a  | ZwNotifyChangeMultipleKeys@48._Z | 
| 1eae0 |  77 4f 70 65 6e 44 69 72 65 63 74 6f 72 79 4f 62    6a 65 63 74 40 31 32 00 5f 5a 77 4f 70 65 6e 45  | wOpenDirectoryObject@12._ZwOpenE | 
| 1eb00 |  76 65 6e 74 40 31 32 00 5f 5a 77 4f 70 65 6e 45    76 65 6e 74 50 61 69 72 40 31 32 00 5f 5a 77 4f  | vent@12._ZwOpenEventPair@12._ZwO | 
| 1eb20 |  70 65 6e 46 69 6c 65 40 32 34 00 5f 5a 77 4f 70    65 6e 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 31  | penFile@24._ZwOpenIoCompletion@1 | 
| 1eb40 |  32 00 5f 5a 77 4f 70 65 6e 4a 6f 62 4f 62 6a 65    63 74 40 31 32 00 5f 5a 77 4f 70 65 6e 4b 65 79  | 2._ZwOpenJobObject@12._ZwOpenKey | 
| 1eb60 |  40 31 32 00 5f 5a 77 4f 70 65 6e 4b 65 79 65 64    45 76 65 6e 74 40 31 32 00 5f 5a 77 4f 70 65 6e  | @12._ZwOpenKeyedEvent@12._ZwOpen | 
| 1eb80 |  4d 75 74 61 6e 74 40 31 32 00 5f 5a 77 4f 70 65    6e 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72  | Mutant@12._ZwOpenObjectAuditAlar | 
| 1eba0 |  6d 40 34 38 00 5f 5a 77 4f 70 65 6e 50 72 6f 63    65 73 73 40 31 36 00 5f 5a 77 4f 70 65 6e 50 72  | m@48._ZwOpenProcess@16._ZwOpenPr | 
| 1ebc0 |  6f 63 65 73 73 54 6f 6b 65 6e 40 31 32 00 5f 5a    77 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65  | ocessToken@12._ZwOpenProcessToke | 
| 1ebe0 |  6e 45 78 40 31 36 00 5f 5a 77 4f 70 65 6e 53 65    63 74 69 6f 6e 40 31 32 00 5f 5a 77 4f 70 65 6e  | nEx@16._ZwOpenSection@12._ZwOpen | 
| 1ec00 |  53 65 6d 61 70 68 6f 72 65 40 31 32 00 5f 5a 77    4f 70 65 6e 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b  | Semaphore@12._ZwOpenSymbolicLink | 
| 1ec20 |  4f 62 6a 65 63 74 40 31 32 00 5f 5a 77 4f 70 65    6e 54 68 72 65 61 64 40 31 36 00 5f 5a 77 4f 70  | Object@12._ZwOpenThread@16._ZwOp | 
| 1ec40 |  65 6e 54 68 72 65 61 64 54 6f 6b 65 6e 40 31 36    00 5f 5a 77 4f 70 65 6e 54 68 72 65 61 64 54 6f  | enThreadToken@16._ZwOpenThreadTo | 
| 1ec60 |  6b 65 6e 45 78 40 32 30 00 5f 5a 77 4f 70 65 6e    54 69 6d 65 72 40 31 32 00 5f 5a 77 50 6c 75 67  | kenEx@20._ZwOpenTimer@12._ZwPlug | 
| 1ec80 |  50 6c 61 79 43 6f 6e 74 72 6f 6c 40 31 32 00 5f    5a 77 50 6f 77 65 72 49 6e 66 6f 72 6d 61 74 69  | PlayControl@12._ZwPowerInformati | 
| 1eca0 |  6f 6e 40 32 30 00 5f 5a 77 50 72 69 76 69 6c 65    67 65 43 68 65 63 6b 40 31 32 00 5f 5a 77 50 72  | on@20._ZwPrivilegeCheck@12._ZwPr | 
| 1ecc0 |  69 76 69 6c 65 67 65 4f 62 6a 65 63 74 41 75 64    69 74 41 6c 61 72 6d 40 32 34 00 5f 5a 77 50 72  | ivilegeObjectAuditAlarm@24._ZwPr | 
| 1ece0 |  69 76 69 6c 65 67 65 64 53 65 72 76 69 63 65 41    75 64 69 74 41 6c 61 72 6d 40 32 30 00 5f 5a 77  | ivilegedServiceAuditAlarm@20._Zw | 
| 1ed00 |  50 72 6f 74 65 63 74 56 69 72 74 75 61 6c 4d 65    6d 6f 72 79 40 32 30 00 5f 5a 77 50 75 6c 73 65  | ProtectVirtualMemory@20._ZwPulse | 
| 1ed20 |  45 76 65 6e 74 40 38 00 5f 5a 77 51 75 65 72 79    41 74 74 72 69 62 75 74 65 73 46 69 6c 65 40 38  | Event@8._ZwQueryAttributesFile@8 | 
| 1ed40 |  00 5f 5a 77 51 75 65 72 79 42 6f 6f 74 45 6e 74    72 79 4f 72 64 65 72 40 38 00 5f 5a 77 51 75 65  | ._ZwQueryBootEntryOrder@8._ZwQue | 
| 1ed60 |  72 79 42 6f 6f 74 4f 70 74 69 6f 6e 73 40 38 00    5f 5a 77 51 75 65 72 79 44 65 62 75 67 46 69 6c  | ryBootOptions@8._ZwQueryDebugFil | 
| 1ed80 |  74 65 72 53 74 61 74 65 40 38 00 5f 5a 77 51 75    65 72 79 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65  | terState@8._ZwQueryDefaultLocale | 
| 1eda0 |  40 38 00 5f 5a 77 51 75 65 72 79 44 65 66 61 75    6c 74 55 49 4c 61 6e 67 75 61 67 65 40 34 00 5f  | @8._ZwQueryDefaultUILanguage@4._ | 
| 1edc0 |  5a 77 51 75 65 72 79 44 69 72 65 63 74 6f 72 79    46 69 6c 65 40 34 34 00 5f 5a 77 51 75 65 72 79  | ZwQueryDirectoryFile@44._ZwQuery | 
| 1ede0 |  44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 40    32 38 00 5f 5a 77 51 75 65 72 79 44 72 69 76 65  | DirectoryObject@28._ZwQueryDrive | 
| 1ee00 |  72 45 6e 74 72 79 4f 72 64 65 72 40 38 00 5f 5a    77 51 75 65 72 79 45 61 46 69 6c 65 40 33 36 00  | rEntryOrder@8._ZwQueryEaFile@36. | 
| 1ee20 |  5f 5a 77 51 75 65 72 79 45 76 65 6e 74 40 32 30    00 5f 5a 77 51 75 65 72 79 46 75 6c 6c 41 74 74  | _ZwQueryEvent@20._ZwQueryFullAtt | 
| 1ee40 |  72 69 62 75 74 65 73 46 69 6c 65 40 38 00 5f 5a    77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f  | ributesFile@8._ZwQueryInformatio | 
| 1ee60 |  6e 41 74 6f 6d 40 32 30 00 5f 5a 77 51 75 65 72    79 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65  | nAtom@20._ZwQueryInformationFile | 
| 1ee80 |  40 32 30 00 5f 5a 77 51 75 65 72 79 49 6e 66 6f    72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74  | @20._ZwQueryInformationJobObject | 
| 1eea0 |  40 32 30 00 5f 5a 77 51 75 65 72 79 49 6e 66 6f    72 6d 61 74 69 6f 6e 50 6f 72 74 40 32 30 00 5f  | @20._ZwQueryInformationPort@20._ | 
| 1eec0 |  5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69    6f 6e 50 72 6f 63 65 73 73 40 32 30 00 5f 5a 77  | ZwQueryInformationProcess@20._Zw | 
| 1eee0 |  51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e    54 68 72 65 61 64 40 32 30 00 5f 5a 77 51 75 65  | QueryInformationThread@20._ZwQue | 
| 1ef00 |  72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b    65 6e 40 32 30 00 5f 5a 77 51 75 65 72 79 49 6e  | ryInformationToken@20._ZwQueryIn | 
| 1ef20 |  73 74 61 6c 6c 55 49 4c 61 6e 67 75 61 67 65 40    34 00 5f 5a 77 51 75 65 72 79 49 6e 74 65 72 76  | stallUILanguage@4._ZwQueryInterv | 
| 1ef40 |  61 6c 50 72 6f 66 69 6c 65 40 38 00 5f 5a 77 51    75 65 72 79 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e  | alProfile@8._ZwQueryIoCompletion | 
| 1ef60 |  40 32 30 00 5f 5a 77 51 75 65 72 79 4b 65 79 40    32 30 00 5f 5a 77 51 75 65 72 79 4d 75 6c 74 69  | @20._ZwQueryKey@20._ZwQueryMulti | 
| 1ef80 |  70 6c 65 56 61 6c 75 65 4b 65 79 40 32 34 00 5f    5a 77 51 75 65 72 79 4d 75 74 61 6e 74 40 32 30  | pleValueKey@24._ZwQueryMutant@20 | 
| 1efa0 |  00 5f 5a 77 51 75 65 72 79 4f 62 6a 65 63 74 40    32 30 00 5f 5a 77 51 75 65 72 79 4f 70 65 6e 53  | ._ZwQueryObject@20._ZwQueryOpenS | 
| 1efc0 |  75 62 4b 65 79 73 40 38 00 5f 5a 77 51 75 65 72    79 4f 70 65 6e 53 75 62 4b 65 79 73 45 78 40 31  | ubKeys@8._ZwQueryOpenSubKeysEx@1 | 
| 1efe0 |  36 00 5f 5a 77 51 75 65 72 79 50 65 72 66 6f 72    6d 61 6e 63 65 43 6f 75 6e 74 65 72 40 38 00 5f  | 6._ZwQueryPerformanceCounter@8._ | 
| 1f000 |  5a 77 51 75 65 72 79 50 6f 72 74 49 6e 66 6f 72    6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 40 30 00  | ZwQueryPortInformationProcess@0. | 
| 1f020 |  5f 5a 77 51 75 65 72 79 51 75 6f 74 61 49 6e 66    6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40 33 36 00  | _ZwQueryQuotaInformationFile@36. | 
| 1f040 |  5f 5a 77 51 75 65 72 79 53 65 63 74 69 6f 6e 40    32 30 00 5f 5a 77 51 75 65 72 79 53 65 63 75 72  | _ZwQuerySection@20._ZwQuerySecur | 
| 1f060 |  69 74 79 4f 62 6a 65 63 74 40 32 30 00 5f 5a 77    51 75 65 72 79 53 65 6d 61 70 68 6f 72 65 40 32  | ityObject@20._ZwQuerySemaphore@2 | 
| 1f080 |  30 00 5f 5a 77 51 75 65 72 79 53 79 6d 62 6f 6c    69 63 4c 69 6e 6b 4f 62 6a 65 63 74 40 31 32 00  | 0._ZwQuerySymbolicLinkObject@12. | 
| 1f0a0 |  5f 5a 77 51 75 65 72 79 53 79 73 74 65 6d 45 6e    76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 40 31  | _ZwQuerySystemEnvironmentValue@1 | 
| 1f0c0 |  36 00 5f 5a 77 51 75 65 72 79 53 79 73 74 65 6d    45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65  | 6._ZwQuerySystemEnvironmentValue | 
| 1f0e0 |  45 78 40 32 30 00 5f 5a 77 51 75 65 72 79 53 79    73 74 65 6d 49 6e 66 6f 72 6d 61 74 69 6f 6e 40  | Ex@20._ZwQuerySystemInformation@ | 
| 1f100 |  31 36 00 5f 5a 77 51 75 65 72 79 53 79 73 74 65    6d 54 69 6d 65 40 34 00 5f 5a 77 51 75 65 72 79  | 16._ZwQuerySystemTime@4._ZwQuery | 
| 1f120 |  54 69 6d 65 72 40 32 30 00 5f 5a 77 51 75 65 72    79 54 69 6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e  | Timer@20._ZwQueryTimerResolution | 
| 1f140 |  40 31 32 00 5f 5a 77 51 75 65 72 79 56 61 6c 75    65 4b 65 79 40 32 34 00 5f 5a 77 51 75 65 72 79  | @12._ZwQueryValueKey@24._ZwQuery | 
| 1f160 |  56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 32 34    00 5f 5a 77 51 75 65 72 79 56 6f 6c 75 6d 65 49  | VirtualMemory@24._ZwQueryVolumeI | 
| 1f180 |  6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40 32    30 00 5f 5a 77 51 75 65 75 65 41 70 63 54 68 72  | nformationFile@20._ZwQueueApcThr | 
| 1f1a0 |  65 61 64 40 32 30 00 5f 5a 77 52 61 69 73 65 45    78 63 65 70 74 69 6f 6e 40 31 32 00 5f 5a 77 52  | ead@20._ZwRaiseException@12._ZwR | 
| 1f1c0 |  61 69 73 65 48 61 72 64 45 72 72 6f 72 40 32 34    00 5f 5a 77 52 65 61 64 46 69 6c 65 40 33 36 00  | aiseHardError@24._ZwReadFile@36. | 
| 1f1e0 |  5f 5a 77 52 65 61 64 46 69 6c 65 53 63 61 74 74    65 72 40 33 36 00 5f 5a 77 52 65 61 64 52 65 71  | _ZwReadFileScatter@36._ZwReadReq | 
| 1f200 |  75 65 73 74 44 61 74 61 40 32 34 00 5f 5a 77 52    65 61 64 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79  | uestData@24._ZwReadVirtualMemory | 
| 1f220 |  40 32 30 00 5f 5a 77 52 65 67 69 73 74 65 72 54    68 72 65 61 64 54 65 72 6d 69 6e 61 74 65 50 6f  | @20._ZwRegisterThreadTerminatePo | 
| 1f240 |  72 74 40 34 00 5f 5a 77 52 65 6c 65 61 73 65 4b    65 79 65 64 45 76 65 6e 74 40 31 36 00 5f 5a 77  | rt@4._ZwReleaseKeyedEvent@16._Zw | 
| 1f260 |  52 65 6c 65 61 73 65 4d 75 74 61 6e 74 40 38 00    5f 5a 77 52 65 6c 65 61 73 65 53 65 6d 61 70 68  | ReleaseMutant@8._ZwReleaseSemaph | 
| 1f280 |  6f 72 65 40 31 32 00 5f 5a 77 52 65 6d 6f 76 65    49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 32 30 00  | ore@12._ZwRemoveIoCompletion@20. | 
| 1f2a0 |  5f 5a 77 52 65 6d 6f 76 65 50 72 6f 63 65 73 73    44 65 62 75 67 40 38 00 5f 5a 77 52 65 6e 61 6d  | _ZwRemoveProcessDebug@8._ZwRenam | 
| 1f2c0 |  65 4b 65 79 40 38 00 5f 5a 77 52 65 70 6c 61 63    65 4b 65 79 40 31 32 00 5f 5a 77 52 65 70 6c 79  | eKey@8._ZwReplaceKey@12._ZwReply | 
| 1f2e0 |  50 6f 72 74 40 38 00 5f 5a 77 52 65 70 6c 79 57    61 69 74 52 65 63 65 69 76 65 50 6f 72 74 40 31  | Port@8._ZwReplyWaitReceivePort@1 | 
| 1f300 |  36 00 5f 5a 77 52 65 70 6c 79 57 61 69 74 52 65    63 65 69 76 65 50 6f 72 74 45 78 40 32 30 00 5f  | 6._ZwReplyWaitReceivePortEx@20._ | 
| 1f320 |  5a 77 52 65 70 6c 79 57 61 69 74 52 65 70 6c 79    50 6f 72 74 40 38 00 5f 5a 77 52 65 71 75 65 73  | ZwReplyWaitReplyPort@8._ZwReques | 
| 1f340 |  74 44 65 76 69 63 65 57 61 6b 65 75 70 40 34 00    5f 5a 77 52 65 71 75 65 73 74 50 6f 72 74 40 38  | tDeviceWakeup@4._ZwRequestPort@8 | 
| 1f360 |  00 5f 5a 77 52 65 71 75 65 73 74 57 61 69 74 52    65 70 6c 79 50 6f 72 74 40 31 32 00 5f 5a 77 52  | ._ZwRequestWaitReplyPort@12._ZwR | 
| 1f380 |  65 71 75 65 73 74 57 61 6b 65 75 70 4c 61 74 65    6e 63 79 40 34 00 5f 5a 77 52 65 73 65 74 45 76  | equestWakeupLatency@4._ZwResetEv | 
| 1f3a0 |  65 6e 74 40 38 00 5f 5a 77 52 65 73 65 74 57 72    69 74 65 57 61 74 63 68 40 31 32 00 5f 5a 77 52  | ent@8._ZwResetWriteWatch@12._ZwR | 
| 1f3c0 |  65 73 74 6f 72 65 4b 65 79 40 31 32 00 5f 5a 77    52 65 73 75 6d 65 50 72 6f 63 65 73 73 40 34 00  | estoreKey@12._ZwResumeProcess@4. | 
| 1f3e0 |  5f 5a 77 52 65 73 75 6d 65 54 68 72 65 61 64 40    38 00 5f 5a 77 53 61 76 65 4b 65 79 40 38 00 5f  | _ZwResumeThread@8._ZwSaveKey@8._ | 
| 1f400 |  5a 77 53 61 76 65 4b 65 79 45 78 40 31 32 00 5f    5a 77 53 61 76 65 4d 65 72 67 65 64 4b 65 79 73  | ZwSaveKeyEx@12._ZwSaveMergedKeys | 
| 1f420 |  40 31 32 00 5f 5a 77 53 65 63 75 72 65 43 6f 6e    6e 65 63 74 50 6f 72 74 40 33 36 00 5f 5a 77 53  | @12._ZwSecureConnectPort@36._ZwS | 
| 1f440 |  65 74 42 6f 6f 74 45 6e 74 72 79 4f 72 64 65 72    40 38 00 5f 5a 77 53 65 74 42 6f 6f 74 4f 70 74  | etBootEntryOrder@8._ZwSetBootOpt | 
| 1f460 |  69 6f 6e 73 40 38 00 5f 5a 77 53 65 74 43 6f 6e    74 65 78 74 54 68 72 65 61 64 40 38 00 5f 5a 77  | ions@8._ZwSetContextThread@8._Zw | 
| 1f480 |  53 65 74 44 65 62 75 67 46 69 6c 74 65 72 53 74    61 74 65 40 31 32 00 5f 5a 77 53 65 74 44 65 66  | SetDebugFilterState@12._ZwSetDef | 
| 1f4a0 |  61 75 6c 74 48 61 72 64 45 72 72 6f 72 50 6f 72    74 40 34 00 5f 5a 77 53 65 74 44 65 66 61 75 6c  | aultHardErrorPort@4._ZwSetDefaul | 
| 1f4c0 |  74 4c 6f 63 61 6c 65 40 38 00 5f 5a 77 53 65 74    44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67  | tLocale@8._ZwSetDefaultUILanguag | 
| 1f4e0 |  65 40 34 00 5f 5a 77 53 65 74 44 72 69 76 65 72    45 6e 74 72 79 4f 72 64 65 72 40 38 00 5f 5a 77  | e@4._ZwSetDriverEntryOrder@8._Zw | 
| 1f500 |  53 65 74 45 61 46 69 6c 65 40 31 36 00 5f 5a 77    53 65 74 45 76 65 6e 74 40 38 00 5f 5a 77 53 65  | SetEaFile@16._ZwSetEvent@8._ZwSe | 
| 1f520 |  74 45 76 65 6e 74 42 6f 6f 73 74 50 72 69 6f 72    69 74 79 40 34 00 5f 5a 77 53 65 74 48 69 67 68  | tEventBoostPriority@4._ZwSetHigh | 
| 1f540 |  45 76 65 6e 74 50 61 69 72 40 34 00 5f 5a 77 53    65 74 48 69 67 68 57 61 69 74 4c 6f 77 45 76 65  | EventPair@4._ZwSetHighWaitLowEve | 
| 1f560 |  6e 74 50 61 69 72 40 34 00 5f 5a 77 53 65 74 49    6e 66 6f 72 6d 61 74 69 6f 6e 44 65 62 75 67 4f  | ntPair@4._ZwSetInformationDebugO | 
| 1f580 |  62 6a 65 63 74 40 32 30 00 5f 5a 77 53 65 74 49    6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40 32  | bject@20._ZwSetInformationFile@2 | 
| 1f5a0 |  30 00 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74    69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 40 31 36 00  | 0._ZwSetInformationJobObject@16. | 
| 1f5c0 |  5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f    6e 4b 65 79 40 31 36 00 5f 5a 77 53 65 74 49 6e  | _ZwSetInformationKey@16._ZwSetIn | 
| 1f5e0 |  66 6f 72 6d 61 74 69 6f 6e 4f 62 6a 65 63 74 40    31 36 00 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61  | formationObject@16._ZwSetInforma | 
| 1f600 |  74 69 6f 6e 50 72 6f 63 65 73 73 40 31 36 00 5f    5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e  | tionProcess@16._ZwSetInformation | 
| 1f620 |  54 68 72 65 61 64 40 31 36 00 5f 5a 77 53 65 74    49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f 6b 65 6e  | Thread@16._ZwSetInformationToken | 
| 1f640 |  40 31 36 00 5f 5a 77 53 65 74 49 6e 74 65 72 76    61 6c 50 72 6f 66 69 6c 65 40 38 00 5f 5a 77 53  | @16._ZwSetIntervalProfile@8._ZwS | 
| 1f660 |  65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 32    30 00 5f 5a 77 53 65 74 4c 64 74 45 6e 74 72 69  | etIoCompletion@20._ZwSetLdtEntri | 
| 1f680 |  65 73 40 32 34 00 5f 5a 77 53 65 74 4c 6f 77 45    76 65 6e 74 50 61 69 72 40 34 00 5f 5a 77 53 65  | es@24._ZwSetLowEventPair@4._ZwSe | 
| 1f6a0 |  74 4c 6f 77 57 61 69 74 48 69 67 68 45 76 65 6e    74 50 61 69 72 40 34 00 5f 5a 77 53 65 74 51 75  | tLowWaitHighEventPair@4._ZwSetQu | 
| 1f6c0 |  6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69    6c 65 40 31 36 00 5f 5a 77 53 65 74 53 65 63 75  | otaInformationFile@16._ZwSetSecu | 
| 1f6e0 |  72 69 74 79 4f 62 6a 65 63 74 40 31 32 00 5f 5a    77 53 65 74 53 79 73 74 65 6d 45 6e 76 69 72 6f  | rityObject@12._ZwSetSystemEnviro | 
| 1f700 |  6e 6d 65 6e 74 56 61 6c 75 65 40 38 00 5f 5a 77    53 65 74 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e  | nmentValue@8._ZwSetSystemEnviron | 
| 1f720 |  6d 65 6e 74 56 61 6c 75 65 45 78 40 32 30 00 5f    5a 77 53 65 74 53 79 73 74 65 6d 49 6e 66 6f 72  | mentValueEx@20._ZwSetSystemInfor | 
| 1f740 |  6d 61 74 69 6f 6e 40 31 32 00 5f 5a 77 53 65 74    53 79 73 74 65 6d 50 6f 77 65 72 53 74 61 74 65  | mation@12._ZwSetSystemPowerState | 
| 1f760 |  40 31 32 00 5f 5a 77 53 65 74 53 79 73 74 65 6d    54 69 6d 65 40 38 00 5f 5a 77 53 65 74 54 68 72  | @12._ZwSetSystemTime@8._ZwSetThr | 
| 1f780 |  65 61 64 45 78 65 63 75 74 69 6f 6e 53 74 61 74    65 40 38 00 5f 5a 77 53 65 74 54 69 6d 65 72 40  | eadExecutionState@8._ZwSetTimer@ | 
| 1f7a0 |  32 38 00 5f 5a 77 53 65 74 54 69 6d 65 72 52 65    73 6f 6c 75 74 69 6f 6e 40 31 32 00 5f 5a 77 53  | 28._ZwSetTimerResolution@12._ZwS | 
| 1f7c0 |  65 74 55 75 69 64 53 65 65 64 40 34 00 5f 5a 77    53 65 74 56 61 6c 75 65 4b 65 79 40 32 34 00 5f  | etUuidSeed@4._ZwSetValueKey@24._ | 
| 1f7e0 |  5a 77 53 65 74 56 6f 6c 75 6d 65 49 6e 66 6f 72    6d 61 74 69 6f 6e 46 69 6c 65 40 32 30 00 5f 5a  | ZwSetVolumeInformationFile@20._Z | 
| 1f800 |  77 53 68 75 74 64 6f 77 6e 53 79 73 74 65 6d 40    34 00 5f 5a 77 53 69 67 6e 61 6c 41 6e 64 57 61  | wShutdownSystem@4._ZwSignalAndWa | 
| 1f820 |  69 74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63    74 40 31 36 00 5f 5a 77 53 74 61 72 74 50 72 6f  | itForSingleObject@16._ZwStartPro | 
| 1f840 |  66 69 6c 65 40 34 00 5f 5a 77 53 74 6f 70 50 72    6f 66 69 6c 65 40 34 00 5f 5a 77 53 75 73 70 65  | file@4._ZwStopProfile@4._ZwSuspe | 
| 1f860 |  6e 64 50 72 6f 63 65 73 73 40 34 00 5f 5a 77 53    75 73 70 65 6e 64 54 68 72 65 61 64 40 38 00 5f  | ndProcess@4._ZwSuspendThread@8._ | 
| 1f880 |  5a 77 53 79 73 74 65 6d 44 65 62 75 67 43 6f 6e    74 72 6f 6c 40 32 34 00 5f 5a 77 54 65 72 6d 69  | ZwSystemDebugControl@24._ZwTermi | 
| 1f8a0 |  6e 61 74 65 4a 6f 62 4f 62 6a 65 63 74 40 38 00    5f 5a 77 54 65 72 6d 69 6e 61 74 65 50 72 6f 63  | nateJobObject@8._ZwTerminateProc | 
| 1f8c0 |  65 73 73 40 38 00 5f 5a 77 54 65 72 6d 69 6e 61    74 65 54 68 72 65 61 64 40 38 00 5f 5a 77 54 65  | ess@8._ZwTerminateThread@8._ZwTe | 
| 1f8e0 |  73 74 41 6c 65 72 74 40 30 00 5f 5a 77 54 72 61    63 65 45 76 65 6e 74 40 31 36 00 5f 5a 77 54 72  | stAlert@0._ZwTraceEvent@16._ZwTr | 
| 1f900 |  61 6e 73 6c 61 74 65 46 69 6c 65 50 61 74 68 40    31 36 00 5f 5a 77 55 6e 6c 6f 61 64 44 72 69 76  | anslateFilePath@16._ZwUnloadDriv | 
| 1f920 |  65 72 40 34 00 5f 5a 77 55 6e 6c 6f 61 64 4b 65    79 32 40 38 00 5f 5a 77 55 6e 6c 6f 61 64 4b 65  | er@4._ZwUnloadKey2@8._ZwUnloadKe | 
| 1f940 |  79 40 34 00 5f 5a 77 55 6e 6c 6f 61 64 4b 65 79    45 78 40 38 00 5f 5a 77 55 6e 6c 6f 63 6b 46 69  | y@4._ZwUnloadKeyEx@8._ZwUnlockFi | 
| 1f960 |  6c 65 40 32 30 00 5f 5a 77 55 6e 6c 6f 63 6b 56    69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 31 36 00  | le@20._ZwUnlockVirtualMemory@16. | 
| 1f980 |  5f 5a 77 55 6e 6d 61 70 56 69 65 77 4f 66 53 65    63 74 69 6f 6e 40 38 00 5f 5a 77 56 64 6d 43 6f  | _ZwUnmapViewOfSection@8._ZwVdmCo | 
| 1f9a0 |  6e 74 72 6f 6c 40 38 00 5f 5a 77 57 61 69 74 46    6f 72 44 65 62 75 67 45 76 65 6e 74 40 31 36 00  | ntrol@8._ZwWaitForDebugEvent@16. | 
| 1f9c0 |  5f 5a 77 57 61 69 74 46 6f 72 4b 65 79 65 64 45    76 65 6e 74 40 31 36 00 5f 5a 77 57 61 69 74 46  | _ZwWaitForKeyedEvent@16._ZwWaitF | 
| 1f9e0 |  6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74    73 33 32 40 32 30 00 5f 5a 77 57 61 69 74 46 6f  | orMultipleObjects32@20._ZwWaitFo | 
| 1fa00 |  72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73    40 32 30 00 5f 5a 77 57 61 69 74 46 6f 72 53 69  | rMultipleObjects@20._ZwWaitForSi | 
| 1fa20 |  6e 67 6c 65 4f 62 6a 65 63 74 40 31 32 00 5f 5a    77 57 61 69 74 48 69 67 68 45 76 65 6e 74 50 61  | ngleObject@12._ZwWaitHighEventPa | 
| 1fa40 |  69 72 40 34 00 5f 5a 77 57 61 69 74 4c 6f 77 45    76 65 6e 74 50 61 69 72 40 34 00 5f 5a 77 57 72  | ir@4._ZwWaitLowEventPair@4._ZwWr | 
| 1fa60 |  69 74 65 46 69 6c 65 40 33 36 00 5f 5a 77 57 72    69 74 65 46 69 6c 65 47 61 74 68 65 72 40 33 36  | iteFile@36._ZwWriteFileGather@36 | 
| 1fa80 |  00 5f 5a 77 57 72 69 74 65 52 65 71 75 65 73 74    44 61 74 61 40 32 34 00 5f 5a 77 57 72 69 74 65  | ._ZwWriteRequestData@24._ZwWrite | 
| 1faa0 |  56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 32 30    00 5f 5a 77 59 69 65 6c 64 45 78 65 63 75 74 69  | VirtualMemory@20._ZwYieldExecuti | 
| 1fac0 |  6f 6e 40 30 00 5f 5f 43 49 63 6f 73 00 5f 5f 43    49 6c 6f 67 00 5f 5f 43 49 70 6f 77 00 5f 5f 43  | on@0.__CIcos.__CIlog.__CIpow.__C | 
| 1fae0 |  49 73 69 6e 00 5f 5f 43 49 73 71 72 74 00 5f 5f    49 4d 50 4f 52 54 5f 44 45 53 43 52 49 50 54 4f  | Isin.__CIsqrt.__IMPORT_DESCRIPTO | 
| 1fb00 |  52 5f 6e 74 64 6c 6c 00 5f 5f 4e 4c 47 5f 44 65    73 74 69 6e 61 74 69 6f 6e 00 5f 5f 4e 4c 47 5f  | R_ntdll.__NLG_Destination.__NLG_ | 
| 1fb20 |  44 69 73 70 61 74 63 68 00 5f 5f 4e 4c 47 5f 44    69 73 70 61 74 63 68 32 00 5f 5f 4e 4c 47 5f 4e  | Dispatch.__NLG_Dispatch2.__NLG_N | 
| 1fb40 |  6f 74 69 66 79 00 5f 5f 4e 4c 47 5f 4e 6f 74 69    66 79 31 00 5f 5f 4e 4c 47 5f 52 65 74 75 72 6e  | otify.__NLG_Notify1.__NLG_Return | 
| 1fb60 |  32 00 5f 5f 4e 55 4c 4c 5f 49 4d 50 4f 52 54 5f    44 45 53 43 52 49 50 54 4f 52 00 5f 5f 53 45 48  | 2.__NULL_IMPORT_DESCRIPTOR.__SEH | 
| 1fb80 |  5f 65 70 69 6c 6f 67 00 5f 5f 53 45 48 5f 70 72    6f 6c 6f 67 00 5f 5f 56 61 6c 69 64 61 74 65 45  | _epilog.__SEH_prolog.__ValidateE | 
| 1fba0 |  48 33 52 4e 00 5f 5f 5f 69 73 61 73 63 69 69 00    5f 5f 5f 69 73 63 73 79 6d 00 5f 5f 5f 69 73 63  | H3RN.___isascii.___iscsym.___isc | 
| 1fbc0 |  73 79 6d 66 00 5f 5f 5f 74 6f 61 73 63 69 69 00    5f 5f 61 62 6e 6f 72 6d 61 6c 5f 74 65 72 6d 69  | symf.___toascii.__abnormal_termi | 
| 1fbe0 |  6e 61 74 69 6f 6e 00 5f 5f 61 6c 6c 64 69 76 00    5f 5f 61 6c 6c 64 76 72 6d 00 5f 5f 61 6c 6c 6d  | nation.__alldiv.__alldvrm.__allm | 
| 1fc00 |  75 6c 00 5f 5f 61 6c 6c 6f 63 61 5f 70 72 6f 62    65 00 5f 5f 61 6c 6c 72 65 6d 00 5f 5f 61 6c 6c  | ul.__alloca_probe.__allrem.__all | 
| 1fc20 |  73 68 6c 00 5f 5f 61 6c 6c 73 68 72 00 5f 5f 61    74 6f 69 36 34 00 5f 5f 61 75 6c 6c 64 69 76 00  | shl.__allshr.__atoi64.__aulldiv. | 
| 1fc40 |  5f 5f 61 75 6c 6c 64 76 72 6d 00 5f 5f 61 75 6c    6c 72 65 6d 00 5f 5f 61 75 6c 6c 73 68 72 00 5f  | __aulldvrm.__aullrem.__aullshr._ | 
| 1fc60 |  5f 63 68 6b 73 74 6b 00 5f 5f 65 78 63 65 70 74    5f 68 61 6e 64 6c 65 72 32 00 5f 5f 65 78 63 65  | _chkstk.__except_handler2.__exce | 
| 1fc80 |  70 74 5f 68 61 6e 64 6c 65 72 33 00 5f 5f 65 78    63 65 70 74 5f 6c 69 73 74 00 5f 5f 66 6c 74 75  | pt_handler3.__except_list.__fltu | 
| 1fca0 |  73 65 64 00 5f 5f 66 74 6f 6c 00 5f 5f 66 74 6f    6c 32 00 5f 5f 67 6c 6f 62 61 6c 5f 75 6e 77 69  | sed.__ftol.__ftol2.__global_unwi | 
| 1fcc0 |  6e 64 32 00 5f 5f 69 36 34 74 6f 61 00 5f 5f 69    36 34 74 6f 77 00 5f 5f 69 6d 70 5f 3f 50 72 6f  | nd2.__i64toa.__i64tow.__imp_?Pro | 
| 1fce0 |  70 65 72 74 79 4c 65 6e 67 74 68 41 73 56 61 72    69 61 6e 74 40 40 59 47 4b 50 42 55 74 61 67 53  | pertyLengthAsVariant@@YGKPBUtagS | 
| 1fd00 |  45 52 49 41 4c 49 5a 45 44 50 52 4f 50 45 52 54    59 56 41 4c 55 45 40 40 4b 47 45 40 5a 00 5f 5f  | ERIALIZEDPROPERTYVALUE@@KGE@Z.__ | 
| 1fd20 |  69 6d 70 5f 3f 52 74 6c 43 6f 6e 76 65 72 74 50    72 6f 70 65 72 74 79 54 6f 56 61 72 69 61 6e 74  | imp_?RtlConvertPropertyToVariant | 
| 1fd40 |  40 40 59 47 45 50 42 55 74 61 67 53 45 52 49 41    4c 49 5a 45 44 50 52 4f 50 45 52 54 59 56 41 4c  | @@YGEPBUtagSERIALIZEDPROPERTYVAL | 
| 1fd60 |  55 45 40 40 47 50 41 55 74 61 67 50 52 4f 50 56    41 52 49 41 4e 54 40 40 50 41 56 50 4d 65 6d 6f  | UE@@GPAUtagPROPVARIANT@@PAVPMemo | 
| 1fd80 |  72 79 41 6c 6c 6f 63 61 74 6f 72 40 40 40 5a 00    5f 5f 69 6d 70 5f 3f 52 74 6c 43 6f 6e 76 65 72  | ryAllocator@@@Z.__imp_?RtlConver | 
| 1fda0 |  74 56 61 72 69 61 6e 74 54 6f 50 72 6f 70 65 72    74 79 40 40 59 47 50 41 55 74 61 67 53 45 52 49  | tVariantToProperty@@YGPAUtagSERI | 
| 1fdc0 |  41 4c 49 5a 45 44 50 52 4f 50 45 52 54 59 56 41    4c 55 45 40 40 50 42 55 74 61 67 50 52 4f 50 56  | ALIZEDPROPERTYVALUE@@PBUtagPROPV | 
| 1fde0 |  41 52 49 41 4e 54 40 40 47 50 41 55 31 40 50 41    4b 4b 45 32 40 5a 00 5f 5f 69 6d 70 5f 40 52 74  | ARIANT@@GPAU1@PAKKE2@Z.__imp_@Rt | 
| 1fe00 |  6c 41 63 74 69 76 61 74 65 41 63 74 69 76 61 74    69 6f 6e 43 6f 6e 74 65 78 74 55 6e 73 61 66 65  | lActivateActivationContextUnsafe | 
| 1fe20 |  46 61 73 74 40 38 00 5f 5f 69 6d 70 5f 40 52 74    6c 44 65 61 63 74 69 76 61 74 65 41 63 74 69 76  | Fast@8.__imp_@RtlDeactivateActiv | 
| 1fe40 |  61 74 69 6f 6e 43 6f 6e 74 65 78 74 55 6e 73 61    66 65 46 61 73 74 40 34 00 5f 5f 69 6d 70 5f 40  | ationContextUnsafeFast@4.__imp_@ | 
| 1fe60 |  52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 50 75    73 68 4c 69 73 74 53 4c 69 73 74 40 31 36 00 5f  | RtlInterlockedPushListSList@16._ | 
| 1fe80 |  5f 69 6d 70 5f 40 52 74 6c 55 6c 6f 6e 67 42 79    74 65 53 77 61 70 40 34 00 5f 5f 69 6d 70 5f 40  | _imp_@RtlUlongByteSwap@4.__imp_@ | 
| 1fea0 |  52 74 6c 55 6c 6f 6e 67 6c 6f 6e 67 42 79 74 65    53 77 61 70 40 38 00 5f 5f 69 6d 70 5f 40 52 74  | RtlUlonglongByteSwap@8.__imp_@Rt | 
| 1fec0 |  6c 55 73 68 6f 72 74 42 79 74 65 53 77 61 70 40    34 00 5f 5f 69 6d 70 5f 5f 43 73 72 41 6c 6c 6f  | lUshortByteSwap@4.__imp__CsrAllo | 
| 1fee0 |  63 61 74 65 43 61 70 74 75 72 65 42 75 66 66 65    72 40 38 00 5f 5f 69 6d 70 5f 5f 43 73 72 41 6c  | cateCaptureBuffer@8.__imp__CsrAl | 
| 1ff00 |  6c 6f 63 61 74 65 4d 65 73 73 61 67 65 50 6f 69    6e 74 65 72 40 31 32 00 5f 5f 69 6d 70 5f 5f 43  | locateMessagePointer@12.__imp__C | 
| 1ff20 |  73 72 43 61 70 74 75 72 65 4d 65 73 73 61 67 65    42 75 66 66 65 72 40 31 36 00 5f 5f 69 6d 70 5f  | srCaptureMessageBuffer@16.__imp_ | 
| 1ff40 |  5f 43 73 72 43 61 70 74 75 72 65 4d 65 73 73 61    67 65 4d 75 6c 74 69 55 6e 69 63 6f 64 65 53 74  | _CsrCaptureMessageMultiUnicodeSt | 
| 1ff60 |  72 69 6e 67 73 49 6e 50 6c 61 63 65 40 31 32 00    5f 5f 69 6d 70 5f 5f 43 73 72 43 61 70 74 75 72  | ringsInPlace@12.__imp__CsrCaptur | 
| 1ff80 |  65 4d 65 73 73 61 67 65 53 74 72 69 6e 67 40 32    30 00 5f 5f 69 6d 70 5f 5f 43 73 72 43 61 70 74  | eMessageString@20.__imp__CsrCapt | 
| 1ffa0 |  75 72 65 54 69 6d 65 6f 75 74 40 38 00 5f 5f 69    6d 70 5f 5f 43 73 72 43 6c 69 65 6e 74 43 61 6c  | ureTimeout@8.__imp__CsrClientCal | 
| 1ffc0 |  6c 53 65 72 76 65 72 40 31 36 00 5f 5f 69 6d 70    5f 5f 43 73 72 43 6c 69 65 6e 74 43 6f 6e 6e 65  | lServer@16.__imp__CsrClientConne | 
| 1ffe0 |  63 74 54 6f 53 65 72 76 65 72 40 32 30 00 5f 5f    69 6d 70 5f 5f 43 73 72 46 72 65 65 43 61 70 74  | ctToServer@20.__imp__CsrFreeCapt | 
| 20000 |  75 72 65 42 75 66 66 65 72 40 34 00 5f 5f 69 6d    70 5f 5f 43 73 72 47 65 74 50 72 6f 63 65 73 73  | ureBuffer@4.__imp__CsrGetProcess | 
| 20020 |  49 64 40 30 00 5f 5f 69 6d 70 5f 5f 43 73 72 49    64 65 6e 74 69 66 79 41 6c 65 72 74 61 62 6c 65  | Id@0.__imp__CsrIdentifyAlertable | 
| 20040 |  54 68 72 65 61 64 40 30 00 5f 5f 69 6d 70 5f 5f    43 73 72 4e 65 77 54 68 72 65 61 64 40 30 00 5f  | Thread@0.__imp__CsrNewThread@0._ | 
| 20060 |  5f 69 6d 70 5f 5f 43 73 72 50 72 6f 62 65 46 6f    72 52 65 61 64 40 31 32 00 5f 5f 69 6d 70 5f 5f  | _imp__CsrProbeForRead@12.__imp__ | 
| 20080 |  43 73 72 50 72 6f 62 65 46 6f 72 57 72 69 74 65    40 31 32 00 5f 5f 69 6d 70 5f 5f 43 73 72 53 65  | CsrProbeForWrite@12.__imp__CsrSe | 
| 200a0 |  74 50 72 69 6f 72 69 74 79 43 6c 61 73 73 40 38    00 5f 5f 69 6d 70 5f 5f 44 62 67 42 72 65 61 6b  | tPriorityClass@8.__imp__DbgBreak | 
| 200c0 |  50 6f 69 6e 74 40 30 00 5f 5f 69 6d 70 5f 5f 44    62 67 50 72 69 6e 74 00 5f 5f 69 6d 70 5f 5f 44  | Point@0.__imp__DbgPrint.__imp__D | 
| 200e0 |  62 67 50 72 69 6e 74 45 78 00 5f 5f 69 6d 70 5f    5f 44 62 67 50 72 69 6e 74 52 65 74 75 72 6e 43  | bgPrintEx.__imp__DbgPrintReturnC | 
| 20100 |  6f 6e 74 72 6f 6c 43 00 5f 5f 69 6d 70 5f 5f 44    62 67 50 72 6f 6d 70 74 40 31 32 00 5f 5f 69 6d  | ontrolC.__imp__DbgPrompt@12.__im | 
| 20120 |  70 5f 5f 44 62 67 51 75 65 72 79 44 65 62 75 67    46 69 6c 74 65 72 53 74 61 74 65 40 38 00 5f 5f  | p__DbgQueryDebugFilterState@8.__ | 
| 20140 |  69 6d 70 5f 5f 44 62 67 53 65 74 44 65 62 75 67    46 69 6c 74 65 72 53 74 61 74 65 40 31 32 00 5f  | imp__DbgSetDebugFilterState@12._ | 
| 20160 |  5f 69 6d 70 5f 5f 44 62 67 55 69 43 6f 6e 6e 65    63 74 54 6f 44 62 67 40 30 00 5f 5f 69 6d 70 5f  | _imp__DbgUiConnectToDbg@0.__imp_ | 
| 20180 |  5f 44 62 67 55 69 43 6f 6e 74 69 6e 75 65 40 38    00 5f 5f 69 6d 70 5f 5f 44 62 67 55 69 43 6f 6e  | _DbgUiContinue@8.__imp__DbgUiCon | 
| 201a0 |  76 65 72 74 53 74 61 74 65 43 68 61 6e 67 65 53    74 72 75 63 74 75 72 65 40 38 00 5f 5f 69 6d 70  | vertStateChangeStructure@8.__imp | 
| 201c0 |  5f 5f 44 62 67 55 69 44 65 62 75 67 41 63 74 69    76 65 50 72 6f 63 65 73 73 40 34 00 5f 5f 69 6d  | __DbgUiDebugActiveProcess@4.__im | 
| 201e0 |  70 5f 5f 44 62 67 55 69 47 65 74 54 68 72 65 61    64 44 65 62 75 67 4f 62 6a 65 63 74 40 30 00 5f  | p__DbgUiGetThreadDebugObject@0._ | 
| 20200 |  5f 69 6d 70 5f 5f 44 62 67 55 69 49 73 73 75 65    52 65 6d 6f 74 65 42 72 65 61 6b 69 6e 40 34 00  | _imp__DbgUiIssueRemoteBreakin@4. | 
| 20220 |  5f 5f 69 6d 70 5f 5f 44 62 67 55 69 52 65 6d 6f    74 65 42 72 65 61 6b 69 6e 40 34 00 5f 5f 69 6d  | __imp__DbgUiRemoteBreakin@4.__im | 
| 20240 |  70 5f 5f 44 62 67 55 69 53 65 74 54 68 72 65 61    64 44 65 62 75 67 4f 62 6a 65 63 74 40 34 00 5f  | p__DbgUiSetThreadDebugObject@4._ | 
| 20260 |  5f 69 6d 70 5f 5f 44 62 67 55 69 53 74 6f 70 44    65 62 75 67 67 69 6e 67 40 34 00 5f 5f 69 6d 70  | _imp__DbgUiStopDebugging@4.__imp | 
| 20280 |  5f 5f 44 62 67 55 69 57 61 69 74 53 74 61 74 65    43 68 61 6e 67 65 40 38 00 5f 5f 69 6d 70 5f 5f  | __DbgUiWaitStateChange@8.__imp__ | 
| 202a0 |  44 62 67 55 73 65 72 42 72 65 61 6b 50 6f 69 6e    74 40 30 00 5f 5f 69 6d 70 5f 5f 45 74 77 43 6f  | DbgUserBreakPoint@0.__imp__EtwCo | 
| 202c0 |  6e 74 72 6f 6c 54 72 61 63 65 41 40 32 30 00 5f    5f 69 6d 70 5f 5f 45 74 77 43 6f 6e 74 72 6f 6c  | ntrolTraceA@20.__imp__EtwControl | 
| 202e0 |  54 72 61 63 65 57 40 32 30 00 5f 5f 69 6d 70 5f    5f 45 74 77 43 72 65 61 74 65 54 72 61 63 65 49  | TraceW@20.__imp__EtwCreateTraceI | 
| 20300 |  6e 73 74 61 6e 63 65 49 64 40 38 00 5f 5f 69 6d    70 5f 5f 45 74 77 45 6e 61 62 6c 65 54 72 61 63  | nstanceId@8.__imp__EtwEnableTrac | 
| 20320 |  65 40 32 34 00 5f 5f 69 6d 70 5f 5f 45 74 77 45    6e 75 6d 65 72 61 74 65 54 72 61 63 65 47 75 69  | e@24.__imp__EtwEnumerateTraceGui | 
| 20340 |  64 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 45 74 77    46 6c 75 73 68 54 72 61 63 65 41 40 31 36 00 5f  | ds@12.__imp__EtwFlushTraceA@16._ | 
| 20360 |  5f 69 6d 70 5f 5f 45 74 77 46 6c 75 73 68 54 72    61 63 65 57 40 31 36 00 5f 5f 69 6d 70 5f 5f 45  | _imp__EtwFlushTraceW@16.__imp__E | 
| 20380 |  74 77 47 65 74 54 72 61 63 65 45 6e 61 62 6c 65    46 6c 61 67 73 40 38 00 5f 5f 69 6d 70 5f 5f 45  | twGetTraceEnableFlags@8.__imp__E | 
| 203a0 |  74 77 47 65 74 54 72 61 63 65 45 6e 61 62 6c 65    4c 65 76 65 6c 40 38 00 5f 5f 69 6d 70 5f 5f 45  | twGetTraceEnableLevel@8.__imp__E | 
| 203c0 |  74 77 47 65 74 54 72 61 63 65 4c 6f 67 67 65 72    48 61 6e 64 6c 65 40 34 00 5f 5f 69 6d 70 5f 5f  | twGetTraceLoggerHandle@4.__imp__ | 
| 203e0 |  45 74 77 4e 6f 74 69 66 69 63 61 74 69 6f 6e 52    65 67 69 73 74 72 61 74 69 6f 6e 41 40 32 30 00  | EtwNotificationRegistrationA@20. | 
| 20400 |  5f 5f 69 6d 70 5f 5f 45 74 77 4e 6f 74 69 66 69    63 61 74 69 6f 6e 52 65 67 69 73 74 72 61 74 69  | __imp__EtwNotificationRegistrati | 
| 20420 |  6f 6e 57 40 32 30 00 5f 5f 69 6d 70 5f 5f 45 74    77 51 75 65 72 79 41 6c 6c 54 72 61 63 65 73 41  | onW@20.__imp__EtwQueryAllTracesA | 
| 20440 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 45 74 77 51 75    65 72 79 41 6c 6c 54 72 61 63 65 73 57 40 31 32  | @12.__imp__EtwQueryAllTracesW@12 | 
| 20460 |  00 5f 5f 69 6d 70 5f 5f 45 74 77 51 75 65 72 79    54 72 61 63 65 41 40 31 36 00 5f 5f 69 6d 70 5f  | .__imp__EtwQueryTraceA@16.__imp_ | 
| 20480 |  5f 45 74 77 51 75 65 72 79 54 72 61 63 65 57 40    31 36 00 5f 5f 69 6d 70 5f 5f 45 74 77 52 65 63  | _EtwQueryTraceW@16.__imp__EtwRec | 
| 204a0 |  65 69 76 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e    73 41 40 31 36 00 5f 5f 69 6d 70 5f 5f 45 74 77  | eiveNotificationsA@16.__imp__Etw | 
| 204c0 |  52 65 63 65 69 76 65 4e 6f 74 69 66 69 63 61 74    69 6f 6e 73 57 40 31 36 00 5f 5f 69 6d 70 5f 5f  | ReceiveNotificationsW@16.__imp__ | 
| 204e0 |  45 74 77 52 65 67 69 73 74 65 72 54 72 61 63 65    47 75 69 64 73 41 40 33 32 00 5f 5f 69 6d 70 5f  | EtwRegisterTraceGuidsA@32.__imp_ | 
| 20500 |  5f 45 74 77 52 65 67 69 73 74 65 72 54 72 61 63    65 47 75 69 64 73 57 40 33 32 00 5f 5f 69 6d 70  | _EtwRegisterTraceGuidsW@32.__imp | 
| 20520 |  5f 5f 45 74 77 53 74 61 72 74 54 72 61 63 65 41    40 31 32 00 5f 5f 69 6d 70 5f 5f 45 74 77 53 74  | __EtwStartTraceA@12.__imp__EtwSt | 
| 20540 |  61 72 74 54 72 61 63 65 57 40 31 32 00 5f 5f 69    6d 70 5f 5f 45 74 77 53 74 6f 70 54 72 61 63 65  | artTraceW@12.__imp__EtwStopTrace | 
| 20560 |  41 40 31 36 00 5f 5f 69 6d 70 5f 5f 45 74 77 53    74 6f 70 54 72 61 63 65 57 40 31 36 00 5f 5f 69  | A@16.__imp__EtwStopTraceW@16.__i | 
| 20580 |  6d 70 5f 5f 45 74 77 54 72 61 63 65 45 76 65 6e    74 40 31 32 00 5f 5f 69 6d 70 5f 5f 45 74 77 54  | mp__EtwTraceEvent@12.__imp__EtwT | 
| 205a0 |  72 61 63 65 45 76 65 6e 74 49 6e 73 74 61 6e 63    65 40 32 30 00 5f 5f 69 6d 70 5f 5f 45 74 77 54  | raceEventInstance@20.__imp__EtwT | 
| 205c0 |  72 61 63 65 4d 65 73 73 61 67 65 00 5f 5f 69 6d    70 5f 5f 45 74 77 54 72 61 63 65 4d 65 73 73 61  | raceMessage.__imp__EtwTraceMessa | 
| 205e0 |  67 65 56 61 40 32 34 00 5f 5f 69 6d 70 5f 5f 45    74 77 55 6e 72 65 67 69 73 74 65 72 54 72 61 63  | geVa@24.__imp__EtwUnregisterTrac | 
| 20600 |  65 47 75 69 64 73 40 38 00 5f 5f 69 6d 70 5f 5f    45 74 77 55 70 64 61 74 65 54 72 61 63 65 41 40  | eGuids@8.__imp__EtwUpdateTraceA@ | 
| 20620 |  31 36 00 5f 5f 69 6d 70 5f 5f 45 74 77 55 70 64    61 74 65 54 72 61 63 65 57 40 31 36 00 5f 5f 69  | 16.__imp__EtwUpdateTraceW@16.__i | 
| 20640 |  6d 70 5f 5f 45 74 77 70 47 65 74 54 72 61 63 65    42 75 66 66 65 72 40 31 36 00 5f 5f 69 6d 70 5f  | mp__EtwpGetTraceBuffer@16.__imp_ | 
| 20660 |  5f 45 74 77 70 53 65 74 48 57 43 6f 6e 66 69 67    46 75 6e 63 74 69 6f 6e 40 38 00 5f 5f 69 6d 70  | _EtwpSetHWConfigFunction@8.__imp | 
| 20680 |  5f 5f 4b 69 46 61 73 74 53 79 73 74 65 6d 43 61    6c 6c 40 30 00 5f 5f 69 6d 70 5f 5f 4b 69 46 61  | __KiFastSystemCall@0.__imp__KiFa | 
| 206a0 |  73 74 53 79 73 74 65 6d 43 61 6c 6c 52 65 74 40    30 00 5f 5f 69 6d 70 5f 5f 4b 69 49 6e 74 53 79  | stSystemCallRet@0.__imp__KiIntSy | 
| 206c0 |  73 74 65 6d 43 61 6c 6c 40 30 00 5f 5f 69 6d 70    5f 5f 4b 69 52 61 69 73 65 55 73 65 72 45 78 63  | stemCall@0.__imp__KiRaiseUserExc | 
| 206e0 |  65 70 74 69 6f 6e 44 69 73 70 61 74 63 68 65 72    40 30 00 5f 5f 69 6d 70 5f 5f 4b 69 55 73 65 72  | eptionDispatcher@0.__imp__KiUser | 
| 20700 |  41 70 63 44 69 73 70 61 74 63 68 65 72 40 31 36    00 5f 5f 69 6d 70 5f 5f 4b 69 55 73 65 72 43 61  | ApcDispatcher@16.__imp__KiUserCa | 
| 20720 |  6c 6c 62 61 63 6b 44 69 73 70 61 74 63 68 65 72    40 31 32 00 5f 5f 69 6d 70 5f 5f 4b 69 55 73 65  | llbackDispatcher@12.__imp__KiUse | 
| 20740 |  72 45 78 63 65 70 74 69 6f 6e 44 69 73 70 61 74    63 68 65 72 40 38 00 5f 5f 69 6d 70 5f 5f 4c 64  | rExceptionDispatcher@8.__imp__Ld | 
| 20760 |  72 41 63 63 65 73 73 4f 75 74 4f 66 50 72 6f 63    65 73 73 52 65 73 6f 75 72 63 65 40 32 30 00 5f  | rAccessOutOfProcessResource@20._ | 
| 20780 |  5f 69 6d 70 5f 5f 4c 64 72 41 63 63 65 73 73 52    65 73 6f 75 72 63 65 40 31 36 00 5f 5f 69 6d 70  | _imp__LdrAccessResource@16.__imp | 
| 207a0 |  5f 5f 4c 64 72 41 64 64 52 65 66 44 6c 6c 40 38    00 5f 5f 69 6d 70 5f 5f 4c 64 72 41 6c 74 65 72  | __LdrAddRefDll@8.__imp__LdrAlter | 
| 207c0 |  6e 61 74 65 52 65 73 6f 75 72 63 65 73 45 6e 61    62 6c 65 64 40 30 00 5f 5f 69 6d 70 5f 5f 4c 64  | nateResourcesEnabled@0.__imp__Ld | 
| 207e0 |  72 43 72 65 61 74 65 4f 75 74 4f 66 50 72 6f 63    65 73 73 49 6d 61 67 65 40 32 30 00 5f 5f 69 6d  | rCreateOutOfProcessImage@20.__im | 
| 20800 |  70 5f 5f 4c 64 72 44 65 73 74 72 6f 79 4f 75 74    4f 66 50 72 6f 63 65 73 73 49 6d 61 67 65 40 34  | p__LdrDestroyOutOfProcessImage@4 | 
| 20820 |  00 5f 5f 69 6d 70 5f 5f 4c 64 72 44 69 73 61 62    6c 65 54 68 72 65 61 64 43 61 6c 6c 6f 75 74 73  | .__imp__LdrDisableThreadCallouts | 
| 20840 |  46 6f 72 44 6c 6c 40 34 00 5f 5f 69 6d 70 5f 5f    4c 64 72 45 6e 75 6d 52 65 73 6f 75 72 63 65 73  | ForDll@4.__imp__LdrEnumResources | 
| 20860 |  40 32 30 00 5f 5f 69 6d 70 5f 5f 4c 64 72 45 6e    75 6d 65 72 61 74 65 4c 6f 61 64 65 64 4d 6f 64  | @20.__imp__LdrEnumerateLoadedMod | 
| 20880 |  75 6c 65 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 4c    64 72 46 69 6e 64 43 72 65 61 74 65 50 72 6f 63  | ules@12.__imp__LdrFindCreateProc | 
| 208a0 |  65 73 73 4d 61 6e 69 66 65 73 74 40 32 30 00 5f    5f 69 6d 70 5f 5f 4c 64 72 46 69 6e 64 45 6e 74  | essManifest@20.__imp__LdrFindEnt | 
| 208c0 |  72 79 46 6f 72 41 64 64 72 65 73 73 40 38 00 5f    5f 69 6d 70 5f 5f 4c 64 72 46 69 6e 64 52 65 73  | ryForAddress@8.__imp__LdrFindRes | 
| 208e0 |  6f 75 72 63 65 44 69 72 65 63 74 6f 72 79 5f 55    40 31 36 00 5f 5f 69 6d 70 5f 5f 4c 64 72 46 69  | ourceDirectory_U@16.__imp__LdrFi | 
| 20900 |  6e 64 52 65 73 6f 75 72 63 65 45 78 5f 55 40 32    30 00 5f 5f 69 6d 70 5f 5f 4c 64 72 46 69 6e 64  | ndResourceEx_U@20.__imp__LdrFind | 
| 20920 |  52 65 73 6f 75 72 63 65 5f 55 40 31 36 00 5f 5f    69 6d 70 5f 5f 4c 64 72 46 6c 75 73 68 41 6c 74  | Resource_U@16.__imp__LdrFlushAlt | 
| 20940 |  65 72 6e 61 74 65 52 65 73 6f 75 72 63 65 4d 6f    64 75 6c 65 73 40 30 00 5f 5f 69 6d 70 5f 5f 4c  | ernateResourceModules@0.__imp__L | 
| 20960 |  64 72 47 65 74 44 6c 6c 48 61 6e 64 6c 65 40 31    36 00 5f 5f 69 6d 70 5f 5f 4c 64 72 47 65 74 44  | drGetDllHandle@16.__imp__LdrGetD | 
| 20980 |  6c 6c 48 61 6e 64 6c 65 45 78 40 32 30 00 5f 5f    69 6d 70 5f 5f 4c 64 72 47 65 74 50 72 6f 63 65  | llHandleEx@20.__imp__LdrGetProce | 
| 209a0 |  64 75 72 65 41 64 64 72 65 73 73 40 31 36 00 5f    5f 69 6d 70 5f 5f 4c 64 72 48 6f 74 50 61 74 63  | dureAddress@16.__imp__LdrHotPatc | 
| 209c0 |  68 52 6f 75 74 69 6e 65 40 34 00 5f 5f 69 6d 70    5f 5f 4c 64 72 49 6e 69 74 53 68 69 6d 45 6e 67  | hRoutine@4.__imp__LdrInitShimEng | 
| 209e0 |  69 6e 65 44 79 6e 61 6d 69 63 40 34 00 5f 5f 69    6d 70 5f 5f 4c 64 72 49 6e 69 74 69 61 6c 69 7a  | ineDynamic@4.__imp__LdrInitializ | 
| 20a00 |  65 54 68 75 6e 6b 40 31 36 00 5f 5f 69 6d 70 5f    5f 4c 64 72 4c 6f 61 64 41 6c 74 65 72 6e 61 74  | eThunk@16.__imp__LdrLoadAlternat | 
| 20a20 |  65 52 65 73 6f 75 72 63 65 4d 6f 64 75 6c 65 40    38 00 5f 5f 69 6d 70 5f 5f 4c 64 72 4c 6f 61 64  | eResourceModule@8.__imp__LdrLoad | 
| 20a40 |  44 6c 6c 40 31 36 00 5f 5f 69 6d 70 5f 5f 4c 64    72 4c 6f 63 6b 4c 6f 61 64 65 72 4c 6f 63 6b 40  | Dll@16.__imp__LdrLockLoaderLock@ | 
| 20a60 |  31 32 00 5f 5f 69 6d 70 5f 5f 4c 64 72 4f 70 65    6e 49 6d 61 67 65 46 69 6c 65 4f 70 74 69 6f 6e  | 12.__imp__LdrOpenImageFileOption | 
| 20a80 |  73 4b 65 79 40 31 32 00 5f 5f 69 6d 70 5f 5f 4c    64 72 50 72 6f 63 65 73 73 52 65 6c 6f 63 61 74  | sKey@12.__imp__LdrProcessRelocat | 
| 20aa0 |  69 6f 6e 42 6c 6f 63 6b 40 31 36 00 5f 5f 69 6d    70 5f 5f 4c 64 72 51 75 65 72 79 49 6d 61 67 65  | ionBlock@16.__imp__LdrQueryImage | 
| 20ac0 |  46 69 6c 65 45 78 65 63 75 74 69 6f 6e 4f 70 74    69 6f 6e 73 40 32 34 00 5f 5f 69 6d 70 5f 5f 4c  | FileExecutionOptions@24.__imp__L | 
| 20ae0 |  64 72 51 75 65 72 79 49 6d 61 67 65 46 69 6c 65    45 78 65 63 75 74 69 6f 6e 4f 70 74 69 6f 6e 73  | drQueryImageFileExecutionOptions | 
| 20b00 |  45 78 40 32 38 00 5f 5f 69 6d 70 5f 5f 4c 64 72    51 75 65 72 79 49 6d 61 67 65 46 69 6c 65 4b 65  | Ex@28.__imp__LdrQueryImageFileKe | 
| 20b20 |  79 4f 70 74 69 6f 6e 40 32 34 00 5f 5f 69 6d 70    5f 5f 4c 64 72 51 75 65 72 79 50 72 6f 63 65 73  | yOption@24.__imp__LdrQueryProces | 
| 20b40 |  73 4d 6f 64 75 6c 65 49 6e 66 6f 72 6d 61 74 69    6f 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 4c 64 72  | sModuleInformation@12.__imp__Ldr | 
| 20b60 |  53 65 74 41 70 70 43 6f 6d 70 61 74 44 6c 6c 52    65 64 69 72 65 63 74 69 6f 6e 43 61 6c 6c 62 61  | SetAppCompatDllRedirectionCallba | 
| 20b80 |  63 6b 40 31 32 00 5f 5f 69 6d 70 5f 5f 4c 64 72    53 65 74 44 6c 6c 4d 61 6e 69 66 65 73 74 50 72  | ck@12.__imp__LdrSetDllManifestPr | 
| 20ba0 |  6f 62 65 72 40 34 00 5f 5f 69 6d 70 5f 5f 4c 64    72 53 68 75 74 64 6f 77 6e 50 72 6f 63 65 73 73  | ober@4.__imp__LdrShutdownProcess | 
| 20bc0 |  40 30 00 5f 5f 69 6d 70 5f 5f 4c 64 72 53 68 75    74 64 6f 77 6e 54 68 72 65 61 64 40 30 00 5f 5f  | @0.__imp__LdrShutdownThread@0.__ | 
| 20be0 |  69 6d 70 5f 5f 4c 64 72 55 6e 6c 6f 61 64 41 6c    74 65 72 6e 61 74 65 52 65 73 6f 75 72 63 65 4d  | imp__LdrUnloadAlternateResourceM | 
| 20c00 |  6f 64 75 6c 65 40 34 00 5f 5f 69 6d 70 5f 5f 4c    64 72 55 6e 6c 6f 61 64 44 6c 6c 40 34 00 5f 5f  | odule@4.__imp__LdrUnloadDll@4.__ | 
| 20c20 |  69 6d 70 5f 5f 4c 64 72 55 6e 6c 6f 63 6b 4c 6f    61 64 65 72 4c 6f 63 6b 40 38 00 5f 5f 69 6d 70  | imp__LdrUnlockLoaderLock@8.__imp | 
| 20c40 |  5f 5f 4c 64 72 56 65 72 69 66 79 49 6d 61 67 65    4d 61 74 63 68 65 73 43 68 65 63 6b 73 75 6d 40  | __LdrVerifyImageMatchesChecksum@ | 
| 20c60 |  31 36 00 5f 5f 69 6d 70 5f 5f 4e 6c 73 41 6e 73    69 43 6f 64 65 50 61 67 65 00 5f 5f 69 6d 70 5f  | 16.__imp__NlsAnsiCodePage.__imp_ | 
| 20c80 |  5f 4e 6c 73 4d 62 43 6f 64 65 50 61 67 65 54 61    67 00 5f 5f 69 6d 70 5f 5f 4e 6c 73 4d 62 4f 65  | _NlsMbCodePageTag.__imp__NlsMbOe | 
| 20ca0 |  6d 43 6f 64 65 50 61 67 65 54 61 67 00 5f 5f 69    6d 70 5f 5f 4e 74 41 63 63 65 70 74 43 6f 6e 6e  | mCodePageTag.__imp__NtAcceptConn | 
| 20cc0 |  65 63 74 50 6f 72 74 40 32 34 00 5f 5f 69 6d 70    5f 5f 4e 74 41 63 63 65 73 73 43 68 65 63 6b 40  | ectPort@24.__imp__NtAccessCheck@ | 
| 20ce0 |  33 32 00 5f 5f 69 6d 70 5f 5f 4e 74 41 63 63 65    73 73 43 68 65 63 6b 41 6e 64 41 75 64 69 74 41  | 32.__imp__NtAccessCheckAndAuditA | 
| 20d00 |  6c 61 72 6d 40 34 34 00 5f 5f 69 6d 70 5f 5f 4e    74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79  | larm@44.__imp__NtAccessCheckByTy | 
| 20d20 |  70 65 40 34 34 00 5f 5f 69 6d 70 5f 5f 4e 74 41    63 63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65  | pe@44.__imp__NtAccessCheckByType | 
| 20d40 |  41 6e 64 41 75 64 69 74 41 6c 61 72 6d 40 36 34    00 5f 5f 69 6d 70 5f 5f 4e 74 41 63 63 65 73 73  | AndAuditAlarm@64.__imp__NtAccess | 
| 20d60 |  43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75 6c    74 4c 69 73 74 40 34 34 00 5f 5f 69 6d 70 5f 5f  | CheckByTypeResultList@44.__imp__ | 
| 20d80 |  4e 74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54    79 70 65 52 65 73 75 6c 74 4c 69 73 74 41 6e 64  | NtAccessCheckByTypeResultListAnd | 
| 20da0 |  41 75 64 69 74 41 6c 61 72 6d 40 36 34 00 5f 5f    69 6d 70 5f 5f 4e 74 41 63 63 65 73 73 43 68 65  | AuditAlarm@64.__imp__NtAccessChe | 
| 20dc0 |  63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69    73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 42  | ckByTypeResultListAndAuditAlarmB | 
| 20de0 |  79 48 61 6e 64 6c 65 40 36 38 00 5f 5f 69 6d 70    5f 5f 4e 74 41 64 64 41 74 6f 6d 40 31 32 00 5f  | yHandle@68.__imp__NtAddAtom@12._ | 
| 20e00 |  5f 69 6d 70 5f 5f 4e 74 41 64 64 42 6f 6f 74 45    6e 74 72 79 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74  | _imp__NtAddBootEntry@8.__imp__Nt | 
| 20e20 |  41 64 64 44 72 69 76 65 72 45 6e 74 72 79 40 38    00 5f 5f 69 6d 70 5f 5f 4e 74 41 64 6a 75 73 74  | AddDriverEntry@8.__imp__NtAdjust | 
| 20e40 |  47 72 6f 75 70 73 54 6f 6b 65 6e 40 32 34 00 5f    5f 69 6d 70 5f 5f 4e 74 41 64 6a 75 73 74 50 72  | GroupsToken@24.__imp__NtAdjustPr | 
| 20e60 |  69 76 69 6c 65 67 65 73 54 6f 6b 65 6e 40 32 34    00 5f 5f 69 6d 70 5f 5f 4e 74 41 6c 65 72 74 52  | ivilegesToken@24.__imp__NtAlertR | 
| 20e80 |  65 73 75 6d 65 54 68 72 65 61 64 40 38 00 5f 5f    69 6d 70 5f 5f 4e 74 41 6c 65 72 74 54 68 72 65  | esumeThread@8.__imp__NtAlertThre | 
| 20ea0 |  61 64 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 41 6c    6c 6f 63 61 74 65 4c 6f 63 61 6c 6c 79 55 6e 69  | ad@4.__imp__NtAllocateLocallyUni | 
| 20ec0 |  71 75 65 49 64 40 34 00 5f 5f 69 6d 70 5f 5f 4e    74 41 6c 6c 6f 63 61 74 65 55 73 65 72 50 68 79  | queId@4.__imp__NtAllocateUserPhy | 
| 20ee0 |  73 69 63 61 6c 50 61 67 65 73 40 31 32 00 5f 5f    69 6d 70 5f 5f 4e 74 41 6c 6c 6f 63 61 74 65 55  | sicalPages@12.__imp__NtAllocateU | 
| 20f00 |  75 69 64 73 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e    74 41 6c 6c 6f 63 61 74 65 56 69 72 74 75 61 6c  | uids@16.__imp__NtAllocateVirtual | 
| 20f20 |  4d 65 6d 6f 72 79 40 32 34 00 5f 5f 69 6d 70 5f    5f 4e 74 41 70 70 68 65 6c 70 43 61 63 68 65 43  | Memory@24.__imp__NtApphelpCacheC | 
| 20f40 |  6f 6e 74 72 6f 6c 40 38 00 5f 5f 69 6d 70 5f 5f    4e 74 41 72 65 4d 61 70 70 65 64 46 69 6c 65 73  | ontrol@8.__imp__NtAreMappedFiles | 
| 20f60 |  54 68 65 53 61 6d 65 40 38 00 5f 5f 69 6d 70 5f    5f 4e 74 41 73 73 69 67 6e 50 72 6f 63 65 73 73  | TheSame@8.__imp__NtAssignProcess | 
| 20f80 |  54 6f 4a 6f 62 4f 62 6a 65 63 74 40 38 00 5f 5f    69 6d 70 5f 5f 4e 74 43 61 6c 6c 62 61 63 6b 52  | ToJobObject@8.__imp__NtCallbackR | 
| 20fa0 |  65 74 75 72 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f    4e 74 43 61 6e 63 65 6c 44 65 76 69 63 65 57 61  | eturn@12.__imp__NtCancelDeviceWa | 
| 20fc0 |  6b 65 75 70 52 65 71 75 65 73 74 40 34 00 5f 5f    69 6d 70 5f 5f 4e 74 43 61 6e 63 65 6c 49 6f 46  | keupRequest@4.__imp__NtCancelIoF | 
| 20fe0 |  69 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 43    61 6e 63 65 6c 54 69 6d 65 72 40 38 00 5f 5f 69  | ile@8.__imp__NtCancelTimer@8.__i | 
| 21000 |  6d 70 5f 5f 4e 74 43 6c 65 61 72 45 76 65 6e 74    40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 43 6c 6f 73  | mp__NtClearEvent@4.__imp__NtClos | 
| 21020 |  65 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 43 6c 6f    73 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61  | e@4.__imp__NtCloseObjectAuditAla | 
| 21040 |  72 6d 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 43    6f 6d 70 61 63 74 4b 65 79 73 40 38 00 5f 5f 69  | rm@12.__imp__NtCompactKeys@8.__i | 
| 21060 |  6d 70 5f 5f 4e 74 43 6f 6d 70 61 72 65 54 6f 6b    65 6e 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74  | mp__NtCompareTokens@12.__imp__Nt | 
| 21080 |  43 6f 6d 70 6c 65 74 65 43 6f 6e 6e 65 63 74 50    6f 72 74 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 43  | CompleteConnectPort@4.__imp__NtC | 
| 210a0 |  6f 6d 70 72 65 73 73 4b 65 79 40 34 00 5f 5f 69    6d 70 5f 5f 4e 74 43 6f 6e 6e 65 63 74 50 6f 72  | ompressKey@4.__imp__NtConnectPor | 
| 210c0 |  74 40 33 32 00 5f 5f 69 6d 70 5f 5f 4e 74 43 6f    6e 74 69 6e 75 65 40 38 00 5f 5f 69 6d 70 5f 5f  | t@32.__imp__NtContinue@8.__imp__ | 
| 210e0 |  4e 74 43 72 65 61 74 65 44 65 62 75 67 4f 62 6a    65 63 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74  | NtCreateDebugObject@16.__imp__Nt | 
| 21100 |  43 72 65 61 74 65 44 69 72 65 63 74 6f 72 79 4f    62 6a 65 63 74 40 31 32 00 5f 5f 69 6d 70 5f 5f  | CreateDirectoryObject@12.__imp__ | 
| 21120 |  4e 74 43 72 65 61 74 65 45 76 65 6e 74 40 32 30    00 5f 5f 69 6d 70 5f 5f 4e 74 43 72 65 61 74 65  | NtCreateEvent@20.__imp__NtCreate | 
| 21140 |  45 76 65 6e 74 50 61 69 72 40 31 32 00 5f 5f 69    6d 70 5f 5f 4e 74 43 72 65 61 74 65 46 69 6c 65  | EventPair@12.__imp__NtCreateFile | 
| 21160 |  40 34 34 00 5f 5f 69 6d 70 5f 5f 4e 74 43 72 65    61 74 65 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 40  | @44.__imp__NtCreateIoCompletion@ | 
| 21180 |  31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 43 72 65 61    74 65 4a 6f 62 4f 62 6a 65 63 74 40 31 32 00 5f  | 16.__imp__NtCreateJobObject@12._ | 
| 211a0 |  5f 69 6d 70 5f 5f 4e 74 43 72 65 61 74 65 4a 6f    62 53 65 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e  | _imp__NtCreateJobSet@12.__imp__N | 
| 211c0 |  74 43 72 65 61 74 65 4b 65 79 40 32 38 00 5f 5f    69 6d 70 5f 5f 4e 74 43 72 65 61 74 65 4b 65 79  | tCreateKey@28.__imp__NtCreateKey | 
| 211e0 |  65 64 45 76 65 6e 74 40 31 36 00 5f 5f 69 6d 70    5f 5f 4e 74 43 72 65 61 74 65 4d 61 69 6c 73 6c  | edEvent@16.__imp__NtCreateMailsl | 
| 21200 |  6f 74 46 69 6c 65 40 33 32 00 5f 5f 69 6d 70 5f    5f 4e 74 43 72 65 61 74 65 4d 75 74 61 6e 74 40  | otFile@32.__imp__NtCreateMutant@ | 
| 21220 |  31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 43 72 65 61    74 65 4e 61 6d 65 64 50 69 70 65 46 69 6c 65 40  | 16.__imp__NtCreateNamedPipeFile@ | 
| 21240 |  35 36 00 5f 5f 69 6d 70 5f 5f 4e 74 43 72 65 61    74 65 50 61 67 69 6e 67 46 69 6c 65 40 31 36 00  | 56.__imp__NtCreatePagingFile@16. | 
| 21260 |  5f 5f 69 6d 70 5f 5f 4e 74 43 72 65 61 74 65 50    6f 72 74 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74  | __imp__NtCreatePort@20.__imp__Nt | 
| 21280 |  43 72 65 61 74 65 50 72 6f 63 65 73 73 40 33 32    00 5f 5f 69 6d 70 5f 5f 4e 74 43 72 65 61 74 65  | CreateProcess@32.__imp__NtCreate | 
| 212a0 |  50 72 6f 63 65 73 73 45 78 40 33 36 00 5f 5f 69    6d 70 5f 5f 4e 74 43 72 65 61 74 65 50 72 6f 66  | ProcessEx@36.__imp__NtCreateProf | 
| 212c0 |  69 6c 65 40 33 36 00 5f 5f 69 6d 70 5f 5f 4e 74    43 72 65 61 74 65 53 65 63 74 69 6f 6e 40 32 38  | ile@36.__imp__NtCreateSection@28 | 
| 212e0 |  00 5f 5f 69 6d 70 5f 5f 4e 74 43 72 65 61 74 65    53 65 6d 61 70 68 6f 72 65 40 32 30 00 5f 5f 69  | .__imp__NtCreateSemaphore@20.__i | 
| 21300 |  6d 70 5f 5f 4e 74 43 72 65 61 74 65 53 79 6d 62    6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 40 31  | mp__NtCreateSymbolicLinkObject@1 | 
| 21320 |  36 00 5f 5f 69 6d 70 5f 5f 4e 74 43 72 65 61 74    65 54 68 72 65 61 64 40 33 32 00 5f 5f 69 6d 70  | 6.__imp__NtCreateThread@32.__imp | 
| 21340 |  5f 5f 4e 74 43 72 65 61 74 65 54 69 6d 65 72 40    31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 43 72 65 61  | __NtCreateTimer@16.__imp__NtCrea | 
| 21360 |  74 65 54 6f 6b 65 6e 40 35 32 00 5f 5f 69 6d 70    5f 5f 4e 74 43 72 65 61 74 65 57 61 69 74 61 62  | teToken@52.__imp__NtCreateWaitab | 
| 21380 |  6c 65 50 6f 72 74 40 32 30 00 5f 5f 69 6d 70 5f    5f 4e 74 43 75 72 72 65 6e 74 54 65 62 40 30 00  | lePort@20.__imp__NtCurrentTeb@0. | 
| 213a0 |  5f 5f 69 6d 70 5f 5f 4e 74 44 65 62 75 67 41 63    74 69 76 65 50 72 6f 63 65 73 73 40 38 00 5f 5f  | __imp__NtDebugActiveProcess@8.__ | 
| 213c0 |  69 6d 70 5f 5f 4e 74 44 65 62 75 67 43 6f 6e 74    69 6e 75 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e  | imp__NtDebugContinue@12.__imp__N | 
| 213e0 |  74 44 65 6c 61 79 45 78 65 63 75 74 69 6f 6e 40    38 00 5f 5f 69 6d 70 5f 5f 4e 74 44 65 6c 65 74  | tDelayExecution@8.__imp__NtDelet | 
| 21400 |  65 41 74 6f 6d 40 34 00 5f 5f 69 6d 70 5f 5f 4e    74 44 65 6c 65 74 65 42 6f 6f 74 45 6e 74 72 79  | eAtom@4.__imp__NtDeleteBootEntry | 
| 21420 |  40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 44 65 6c 65    74 65 44 72 69 76 65 72 45 6e 74 72 79 40 34 00  | @4.__imp__NtDeleteDriverEntry@4. | 
| 21440 |  5f 5f 69 6d 70 5f 5f 4e 74 44 65 6c 65 74 65 46    69 6c 65 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 44  | __imp__NtDeleteFile@4.__imp__NtD | 
| 21460 |  65 6c 65 74 65 4b 65 79 40 34 00 5f 5f 69 6d 70    5f 5f 4e 74 44 65 6c 65 74 65 4f 62 6a 65 63 74  | eleteKey@4.__imp__NtDeleteObject | 
| 21480 |  41 75 64 69 74 41 6c 61 72 6d 40 31 32 00 5f 5f    69 6d 70 5f 5f 4e 74 44 65 6c 65 74 65 56 61 6c  | AuditAlarm@12.__imp__NtDeleteVal | 
| 214a0 |  75 65 4b 65 79 40 38 00 5f 5f 69 6d 70 5f 5f 4e    74 44 65 76 69 63 65 49 6f 43 6f 6e 74 72 6f 6c  | ueKey@8.__imp__NtDeviceIoControl | 
| 214c0 |  46 69 6c 65 40 34 30 00 5f 5f 69 6d 70 5f 5f 4e    74 44 69 73 70 6c 61 79 53 74 72 69 6e 67 40 34  | File@40.__imp__NtDisplayString@4 | 
| 214e0 |  00 5f 5f 69 6d 70 5f 5f 4e 74 44 75 70 6c 69 63    61 74 65 4f 62 6a 65 63 74 40 32 38 00 5f 5f 69  | .__imp__NtDuplicateObject@28.__i | 
| 21500 |  6d 70 5f 5f 4e 74 44 75 70 6c 69 63 61 74 65 54    6f 6b 65 6e 40 32 34 00 5f 5f 69 6d 70 5f 5f 4e  | mp__NtDuplicateToken@24.__imp__N | 
| 21520 |  74 45 6e 75 6d 65 72 61 74 65 42 6f 6f 74 45 6e    74 72 69 65 73 40 38 00 5f 5f 69 6d 70 5f 5f 4e  | tEnumerateBootEntries@8.__imp__N | 
| 21540 |  74 45 6e 75 6d 65 72 61 74 65 44 72 69 76 65 72    45 6e 74 72 69 65 73 40 38 00 5f 5f 69 6d 70 5f  | tEnumerateDriverEntries@8.__imp_ | 
| 21560 |  5f 4e 74 45 6e 75 6d 65 72 61 74 65 4b 65 79 40    32 34 00 5f 5f 69 6d 70 5f 5f 4e 74 45 6e 75 6d  | _NtEnumerateKey@24.__imp__NtEnum | 
| 21580 |  65 72 61 74 65 53 79 73 74 65 6d 45 6e 76 69 72    6f 6e 6d 65 6e 74 56 61 6c 75 65 73 45 78 40 31  | erateSystemEnvironmentValuesEx@1 | 
| 215a0 |  32 00 5f 5f 69 6d 70 5f 5f 4e 74 45 6e 75 6d 65    72 61 74 65 56 61 6c 75 65 4b 65 79 40 32 34 00  | 2.__imp__NtEnumerateValueKey@24. | 
| 215c0 |  5f 5f 69 6d 70 5f 5f 4e 74 45 78 74 65 6e 64 53    65 63 74 69 6f 6e 40 38 00 5f 5f 69 6d 70 5f 5f  | __imp__NtExtendSection@8.__imp__ | 
| 215e0 |  4e 74 46 69 6c 74 65 72 54 6f 6b 65 6e 40 32 34    00 5f 5f 69 6d 70 5f 5f 4e 74 46 69 6e 64 41 74  | NtFilterToken@24.__imp__NtFindAt | 
| 21600 |  6f 6d 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 46    6c 75 73 68 42 75 66 66 65 72 73 46 69 6c 65 40  | om@12.__imp__NtFlushBuffersFile@ | 
| 21620 |  38 00 5f 5f 69 6d 70 5f 5f 4e 74 46 6c 75 73 68    49 6e 73 74 72 75 63 74 69 6f 6e 43 61 63 68 65  | 8.__imp__NtFlushInstructionCache | 
| 21640 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 46 6c 75    73 68 4b 65 79 40 34 00 5f 5f 69 6d 70 5f 5f 4e  | @12.__imp__NtFlushKey@4.__imp__N | 
| 21660 |  74 46 6c 75 73 68 56 69 72 74 75 61 6c 4d 65 6d    6f 72 79 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74  | tFlushVirtualMemory@16.__imp__Nt | 
| 21680 |  46 6c 75 73 68 57 72 69 74 65 42 75 66 66 65 72    40 30 00 5f 5f 69 6d 70 5f 5f 4e 74 46 72 65 65  | FlushWriteBuffer@0.__imp__NtFree | 
| 216a0 |  55 73 65 72 50 68 79 73 69 63 61 6c 50 61 67 65    73 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 46 72  | UserPhysicalPages@12.__imp__NtFr | 
| 216c0 |  65 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40    31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 46 73 43 6f  | eeVirtualMemory@16.__imp__NtFsCo | 
| 216e0 |  6e 74 72 6f 6c 46 69 6c 65 40 34 30 00 5f 5f 69    6d 70 5f 5f 4e 74 47 65 74 43 6f 6e 74 65 78 74  | ntrolFile@40.__imp__NtGetContext | 
| 21700 |  54 68 72 65 61 64 40 38 00 5f 5f 69 6d 70 5f 5f    4e 74 47 65 74 43 75 72 72 65 6e 74 50 72 6f 63  | Thread@8.__imp__NtGetCurrentProc | 
| 21720 |  65 73 73 6f 72 4e 75 6d 62 65 72 40 30 00 5f 5f    69 6d 70 5f 5f 4e 74 47 65 74 44 65 76 69 63 65  | essorNumber@0.__imp__NtGetDevice | 
| 21740 |  50 6f 77 65 72 53 74 61 74 65 40 38 00 5f 5f 69    6d 70 5f 5f 4e 74 47 65 74 50 6c 75 67 50 6c 61  | PowerState@8.__imp__NtGetPlugPla | 
| 21760 |  79 45 76 65 6e 74 40 31 36 00 5f 5f 69 6d 70 5f    5f 4e 74 47 65 74 54 69 63 6b 43 6f 75 6e 74 40  | yEvent@16.__imp__NtGetTickCount@ | 
| 21780 |  30 00 5f 5f 69 6d 70 5f 5f 4e 74 47 65 74 57 72    69 74 65 57 61 74 63 68 40 32 38 00 5f 5f 69 6d  | 0.__imp__NtGetWriteWatch@28.__im | 
| 217a0 |  70 5f 5f 4e 74 49 6d 70 65 72 73 6f 6e 61 74 65    41 6e 6f 6e 79 6d 6f 75 73 54 6f 6b 65 6e 40 34  | p__NtImpersonateAnonymousToken@4 | 
| 217c0 |  00 5f 5f 69 6d 70 5f 5f 4e 74 49 6d 70 65 72 73    6f 6e 61 74 65 43 6c 69 65 6e 74 4f 66 50 6f 72  | .__imp__NtImpersonateClientOfPor | 
| 217e0 |  74 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 49 6d 70    65 72 73 6f 6e 61 74 65 54 68 72 65 61 64 40 31  | t@8.__imp__NtImpersonateThread@1 | 
| 21800 |  32 00 5f 5f 69 6d 70 5f 5f 4e 74 49 6e 69 74 69    61 6c 69 7a 65 52 65 67 69 73 74 72 79 40 34 00  | 2.__imp__NtInitializeRegistry@4. | 
| 21820 |  5f 5f 69 6d 70 5f 5f 4e 74 49 6e 69 74 69 61 74    65 50 6f 77 65 72 41 63 74 69 6f 6e 40 31 36 00  | __imp__NtInitiatePowerAction@16. | 
| 21840 |  5f 5f 69 6d 70 5f 5f 4e 74 49 73 50 72 6f 63 65    73 73 49 6e 4a 6f 62 40 38 00 5f 5f 69 6d 70 5f  | __imp__NtIsProcessInJob@8.__imp_ | 
| 21860 |  5f 4e 74 49 73 53 79 73 74 65 6d 52 65 73 75 6d    65 41 75 74 6f 6d 61 74 69 63 40 30 00 5f 5f 69  | _NtIsSystemResumeAutomatic@0.__i | 
| 21880 |  6d 70 5f 5f 4e 74 4c 69 73 74 65 6e 50 6f 72 74    40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 4c 6f 61 64  | mp__NtListenPort@8.__imp__NtLoad | 
| 218a0 |  44 72 69 76 65 72 40 34 00 5f 5f 69 6d 70 5f 5f    4e 74 4c 6f 61 64 4b 65 79 32 40 31 32 00 5f 5f  | Driver@4.__imp__NtLoadKey2@12.__ | 
| 218c0 |  69 6d 70 5f 5f 4e 74 4c 6f 61 64 4b 65 79 40 38    00 5f 5f 69 6d 70 5f 5f 4e 74 4c 6f 61 64 4b 65  | imp__NtLoadKey@8.__imp__NtLoadKe | 
| 218e0 |  79 45 78 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74    4c 6f 63 6b 46 69 6c 65 40 34 30 00 5f 5f 69 6d  | yEx@16.__imp__NtLockFile@40.__im | 
| 21900 |  70 5f 5f 4e 74 4c 6f 63 6b 50 72 6f 64 75 63 74    41 63 74 69 76 61 74 69 6f 6e 4b 65 79 73 40 38  | p__NtLockProductActivationKeys@8 | 
| 21920 |  00 5f 5f 69 6d 70 5f 5f 4e 74 4c 6f 63 6b 52 65    67 69 73 74 72 79 4b 65 79 40 34 00 5f 5f 69 6d  | .__imp__NtLockRegistryKey@4.__im | 
| 21940 |  70 5f 5f 4e 74 4c 6f 63 6b 56 69 72 74 75 61 6c    4d 65 6d 6f 72 79 40 31 36 00 5f 5f 69 6d 70 5f  | p__NtLockVirtualMemory@16.__imp_ | 
| 21960 |  5f 4e 74 4d 61 6b 65 50 65 72 6d 61 6e 65 6e 74    4f 62 6a 65 63 74 40 34 00 5f 5f 69 6d 70 5f 5f  | _NtMakePermanentObject@4.__imp__ | 
| 21980 |  4e 74 4d 61 6b 65 54 65 6d 70 6f 72 61 72 79 4f    62 6a 65 63 74 40 34 00 5f 5f 69 6d 70 5f 5f 4e  | NtMakeTemporaryObject@4.__imp__N | 
| 219a0 |  74 4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c    50 61 67 65 73 40 31 32 00 5f 5f 69 6d 70 5f 5f  | tMapUserPhysicalPages@12.__imp__ | 
| 219c0 |  4e 74 4d 61 70 55 73 65 72 50 68 79 73 69 63 61    6c 50 61 67 65 73 53 63 61 74 74 65 72 40 31 32  | NtMapUserPhysicalPagesScatter@12 | 
| 219e0 |  00 5f 5f 69 6d 70 5f 5f 4e 74 4d 61 70 56 69 65    77 4f 66 53 65 63 74 69 6f 6e 40 34 30 00 5f 5f  | .__imp__NtMapViewOfSection@40.__ | 
| 21a00 |  69 6d 70 5f 5f 4e 74 4d 6f 64 69 66 79 42 6f 6f    74 45 6e 74 72 79 40 34 00 5f 5f 69 6d 70 5f 5f  | imp__NtModifyBootEntry@4.__imp__ | 
| 21a20 |  4e 74 4d 6f 64 69 66 79 44 72 69 76 65 72 45 6e    74 72 79 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 4e  | NtModifyDriverEntry@4.__imp__NtN | 
| 21a40 |  6f 74 69 66 79 43 68 61 6e 67 65 44 69 72 65 63    74 6f 72 79 46 69 6c 65 40 33 36 00 5f 5f 69 6d  | otifyChangeDirectoryFile@36.__im | 
| 21a60 |  70 5f 5f 4e 74 4e 6f 74 69 66 79 43 68 61 6e 67    65 4b 65 79 40 34 30 00 5f 5f 69 6d 70 5f 5f 4e  | p__NtNotifyChangeKey@40.__imp__N | 
| 21a80 |  74 4e 6f 74 69 66 79 43 68 61 6e 67 65 4d 75 6c    74 69 70 6c 65 4b 65 79 73 40 34 38 00 5f 5f 69  | tNotifyChangeMultipleKeys@48.__i | 
| 21aa0 |  6d 70 5f 5f 4e 74 4f 70 65 6e 44 69 72 65 63 74    6f 72 79 4f 62 6a 65 63 74 40 31 32 00 5f 5f 69  | mp__NtOpenDirectoryObject@12.__i | 
| 21ac0 |  6d 70 5f 5f 4e 74 4f 70 65 6e 45 76 65 6e 74 40    31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 4f 70 65 6e  | mp__NtOpenEvent@12.__imp__NtOpen | 
| 21ae0 |  45 76 65 6e 74 50 61 69 72 40 31 32 00 5f 5f 69    6d 70 5f 5f 4e 74 4f 70 65 6e 46 69 6c 65 40 32  | EventPair@12.__imp__NtOpenFile@2 | 
| 21b00 |  34 00 5f 5f 69 6d 70 5f 5f 4e 74 4f 70 65 6e 49    6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 31 32 00 5f  | 4.__imp__NtOpenIoCompletion@12._ | 
| 21b20 |  5f 69 6d 70 5f 5f 4e 74 4f 70 65 6e 4a 6f 62 4f    62 6a 65 63 74 40 31 32 00 5f 5f 69 6d 70 5f 5f  | _imp__NtOpenJobObject@12.__imp__ | 
| 21b40 |  4e 74 4f 70 65 6e 4b 65 79 40 31 32 00 5f 5f 69    6d 70 5f 5f 4e 74 4f 70 65 6e 4b 65 79 65 64 45  | NtOpenKey@12.__imp__NtOpenKeyedE | 
| 21b60 |  76 65 6e 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e    74 4f 70 65 6e 4d 75 74 61 6e 74 40 31 32 00 5f  | vent@12.__imp__NtOpenMutant@12._ | 
| 21b80 |  5f 69 6d 70 5f 5f 4e 74 4f 70 65 6e 4f 62 6a 65    63 74 41 75 64 69 74 41 6c 61 72 6d 40 34 38 00  | _imp__NtOpenObjectAuditAlarm@48. | 
| 21ba0 |  5f 5f 69 6d 70 5f 5f 4e 74 4f 70 65 6e 50 72 6f    63 65 73 73 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e  | __imp__NtOpenProcess@16.__imp__N | 
| 21bc0 |  74 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65    6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 4f 70  | tOpenProcessToken@12.__imp__NtOp | 
| 21be0 |  65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 45 78    40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 4f 70 65  | enProcessTokenEx@16.__imp__NtOpe | 
| 21c00 |  6e 53 65 63 74 69 6f 6e 40 31 32 00 5f 5f 69 6d    70 5f 5f 4e 74 4f 70 65 6e 53 65 6d 61 70 68 6f  | nSection@12.__imp__NtOpenSemapho | 
| 21c20 |  72 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 4f    70 65 6e 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f  | re@12.__imp__NtOpenSymbolicLinkO | 
| 21c40 |  62 6a 65 63 74 40 31 32 00 5f 5f 69 6d 70 5f 5f    4e 74 4f 70 65 6e 54 68 72 65 61 64 40 31 36 00  | bject@12.__imp__NtOpenThread@16. | 
| 21c60 |  5f 5f 69 6d 70 5f 5f 4e 74 4f 70 65 6e 54 68 72    65 61 64 54 6f 6b 65 6e 40 31 36 00 5f 5f 69 6d  | __imp__NtOpenThreadToken@16.__im | 
| 21c80 |  70 5f 5f 4e 74 4f 70 65 6e 54 68 72 65 61 64 54    6f 6b 65 6e 45 78 40 32 30 00 5f 5f 69 6d 70 5f  | p__NtOpenThreadTokenEx@20.__imp_ | 
| 21ca0 |  5f 4e 74 4f 70 65 6e 54 69 6d 65 72 40 31 32 00    5f 5f 69 6d 70 5f 5f 4e 74 50 6c 75 67 50 6c 61  | _NtOpenTimer@12.__imp__NtPlugPla | 
| 21cc0 |  79 43 6f 6e 74 72 6f 6c 40 31 32 00 5f 5f 69 6d    70 5f 5f 4e 74 50 6f 77 65 72 49 6e 66 6f 72 6d  | yControl@12.__imp__NtPowerInform | 
| 21ce0 |  61 74 69 6f 6e 40 32 30 00 5f 5f 69 6d 70 5f 5f    4e 74 50 72 69 76 69 6c 65 67 65 43 68 65 63 6b  | ation@20.__imp__NtPrivilegeCheck | 
| 21d00 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 50 72 69    76 69 6c 65 67 65 4f 62 6a 65 63 74 41 75 64 69  | @12.__imp__NtPrivilegeObjectAudi | 
| 21d20 |  74 41 6c 61 72 6d 40 32 34 00 5f 5f 69 6d 70 5f    5f 4e 74 50 72 69 76 69 6c 65 67 65 64 53 65 72  | tAlarm@24.__imp__NtPrivilegedSer | 
| 21d40 |  76 69 63 65 41 75 64 69 74 41 6c 61 72 6d 40 32    30 00 5f 5f 69 6d 70 5f 5f 4e 74 50 72 6f 74 65  | viceAuditAlarm@20.__imp__NtProte | 
| 21d60 |  63 74 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40    32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 50 75 6c 73  | ctVirtualMemory@20.__imp__NtPuls | 
| 21d80 |  65 45 76 65 6e 74 40 38 00 5f 5f 69 6d 70 5f 5f    4e 74 51 75 65 72 79 41 74 74 72 69 62 75 74 65  | eEvent@8.__imp__NtQueryAttribute | 
| 21da0 |  73 46 69 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 4e    74 51 75 65 72 79 42 6f 6f 74 45 6e 74 72 79 4f  | sFile@8.__imp__NtQueryBootEntryO | 
| 21dc0 |  72 64 65 72 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74    51 75 65 72 79 42 6f 6f 74 4f 70 74 69 6f 6e 73  | rder@8.__imp__NtQueryBootOptions | 
| 21de0 |  40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72    79 44 65 62 75 67 46 69 6c 74 65 72 53 74 61 74  | @8.__imp__NtQueryDebugFilterStat | 
| 21e00 |  65 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65    72 79 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 40  | e@8.__imp__NtQueryDefaultLocale@ | 
| 21e20 |  38 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79    44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67  | 8.__imp__NtQueryDefaultUILanguag | 
| 21e40 |  65 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65    72 79 44 69 72 65 63 74 6f 72 79 46 69 6c 65 40  | e@4.__imp__NtQueryDirectoryFile@ | 
| 21e60 |  34 34 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72    79 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74  | 44.__imp__NtQueryDirectoryObject | 
| 21e80 |  40 32 38 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65    72 79 44 72 69 76 65 72 45 6e 74 72 79 4f 72 64  | @28.__imp__NtQueryDriverEntryOrd | 
| 21ea0 |  65 72 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75    65 72 79 45 61 46 69 6c 65 40 33 36 00 5f 5f 69  | er@8.__imp__NtQueryEaFile@36.__i | 
| 21ec0 |  6d 70 5f 5f 4e 74 51 75 65 72 79 45 76 65 6e 74    40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65  | mp__NtQueryEvent@20.__imp__NtQue | 
| 21ee0 |  72 79 46 75 6c 6c 41 74 74 72 69 62 75 74 65 73    46 69 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74  | ryFullAttributesFile@8.__imp__Nt | 
| 21f00 |  51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e    41 74 6f 6d 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e  | QueryInformationAtom@20.__imp__N | 
| 21f20 |  74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f    6e 46 69 6c 65 40 32 30 00 5f 5f 69 6d 70 5f 5f  | tQueryInformationFile@20.__imp__ | 
| 21f40 |  4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69    6f 6e 4a 6f 62 4f 62 6a 65 63 74 40 32 30 00 5f  | NtQueryInformationJobObject@20._ | 
| 21f60 |  5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 49 6e 66    6f 72 6d 61 74 69 6f 6e 50 6f 72 74 40 32 30 00  | _imp__NtQueryInformationPort@20. | 
| 21f80 |  5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 49 6e    66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73  | __imp__NtQueryInformationProcess | 
| 21fa0 |  40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65    72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72  | @20.__imp__NtQueryInformationThr | 
| 21fc0 |  65 61 64 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74    51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e  | ead@20.__imp__NtQueryInformation | 
| 21fe0 |  54 6f 6b 65 6e 40 32 30 00 5f 5f 69 6d 70 5f 5f    4e 74 51 75 65 72 79 49 6e 73 74 61 6c 6c 55 49  | Token@20.__imp__NtQueryInstallUI | 
| 22000 |  4c 61 6e 67 75 61 67 65 40 34 00 5f 5f 69 6d 70    5f 5f 4e 74 51 75 65 72 79 49 6e 74 65 72 76 61  | Language@4.__imp__NtQueryInterva | 
| 22020 |  6c 50 72 6f 66 69 6c 65 40 38 00 5f 5f 69 6d 70    5f 5f 4e 74 51 75 65 72 79 49 6f 43 6f 6d 70 6c  | lProfile@8.__imp__NtQueryIoCompl | 
| 22040 |  65 74 69 6f 6e 40 32 30 00 5f 5f 69 6d 70 5f 5f    4e 74 51 75 65 72 79 4b 65 79 40 32 30 00 5f 5f  | etion@20.__imp__NtQueryKey@20.__ | 
| 22060 |  69 6d 70 5f 5f 4e 74 51 75 65 72 79 4d 75 6c 74    69 70 6c 65 56 61 6c 75 65 4b 65 79 40 32 34 00  | imp__NtQueryMultipleValueKey@24. | 
| 22080 |  5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 4d 75    74 61 6e 74 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e  | __imp__NtQueryMutant@20.__imp__N | 
| 220a0 |  74 51 75 65 72 79 4f 62 6a 65 63 74 40 32 30 00    5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 4f 70  | tQueryObject@20.__imp__NtQueryOp | 
| 220c0 |  65 6e 53 75 62 4b 65 79 73 40 38 00 5f 5f 69 6d    70 5f 5f 4e 74 51 75 65 72 79 4f 70 65 6e 53 75  | enSubKeys@8.__imp__NtQueryOpenSu | 
| 220e0 |  62 4b 65 79 73 45 78 40 31 36 00 5f 5f 69 6d 70    5f 5f 4e 74 51 75 65 72 79 50 65 72 66 6f 72 6d  | bKeysEx@16.__imp__NtQueryPerform | 
| 22100 |  61 6e 63 65 43 6f 75 6e 74 65 72 40 38 00 5f 5f    69 6d 70 5f 5f 4e 74 51 75 65 72 79 50 6f 72 74  | anceCounter@8.__imp__NtQueryPort | 
| 22120 |  49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65    73 73 40 30 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75  | InformationProcess@0.__imp__NtQu | 
| 22140 |  65 72 79 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74    69 6f 6e 46 69 6c 65 40 33 36 00 5f 5f 69 6d 70  | eryQuotaInformationFile@36.__imp | 
| 22160 |  5f 5f 4e 74 51 75 65 72 79 53 65 63 74 69 6f 6e    40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65  | __NtQuerySection@20.__imp__NtQue | 
| 22180 |  72 79 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74    40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65  | rySecurityObject@20.__imp__NtQue | 
| 221a0 |  72 79 53 65 6d 61 70 68 6f 72 65 40 32 30 00 5f    5f 69 6d 70 5f 5f 4e 74 51 75 65 72 79 53 79 6d  | rySemaphore@20.__imp__NtQuerySym | 
| 221c0 |  62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 40    31 32 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72  | bolicLinkObject@12.__imp__NtQuer | 
| 221e0 |  79 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65    6e 74 56 61 6c 75 65 40 31 36 00 5f 5f 69 6d 70  | ySystemEnvironmentValue@16.__imp | 
| 22200 |  5f 5f 4e 74 51 75 65 72 79 53 79 73 74 65 6d 45    6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45  | __NtQuerySystemEnvironmentValueE | 
| 22220 |  78 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75    65 72 79 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61  | x@20.__imp__NtQuerySystemInforma | 
| 22240 |  74 69 6f 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e    74 51 75 65 72 79 53 79 73 74 65 6d 54 69 6d 65  | tion@16.__imp__NtQuerySystemTime | 
| 22260 |  40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65 72    79 54 69 6d 65 72 40 32 30 00 5f 5f 69 6d 70 5f  | @4.__imp__NtQueryTimer@20.__imp_ | 
| 22280 |  5f 4e 74 51 75 65 72 79 54 69 6d 65 72 52 65 73    6f 6c 75 74 69 6f 6e 40 31 32 00 5f 5f 69 6d 70  | _NtQueryTimerResolution@12.__imp | 
| 222a0 |  5f 5f 4e 74 51 75 65 72 79 56 61 6c 75 65 4b 65    79 40 32 34 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75  | __NtQueryValueKey@24.__imp__NtQu | 
| 222c0 |  65 72 79 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79    40 32 34 00 5f 5f 69 6d 70 5f 5f 4e 74 51 75 65  | eryVirtualMemory@24.__imp__NtQue | 
| 222e0 |  72 79 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74    69 6f 6e 46 69 6c 65 40 32 30 00 5f 5f 69 6d 70  | ryVolumeInformationFile@20.__imp | 
| 22300 |  5f 5f 4e 74 51 75 65 75 65 41 70 63 54 68 72 65    61 64 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 52  | __NtQueueApcThread@20.__imp__NtR | 
| 22320 |  61 69 73 65 45 78 63 65 70 74 69 6f 6e 40 31 32    00 5f 5f 69 6d 70 5f 5f 4e 74 52 61 69 73 65 48  | aiseException@12.__imp__NtRaiseH | 
| 22340 |  61 72 64 45 72 72 6f 72 40 32 34 00 5f 5f 69 6d    70 5f 5f 4e 74 52 65 61 64 46 69 6c 65 40 33 36  | ardError@24.__imp__NtReadFile@36 | 
| 22360 |  00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 61 64 46 69    6c 65 53 63 61 74 74 65 72 40 33 36 00 5f 5f 69  | .__imp__NtReadFileScatter@36.__i | 
| 22380 |  6d 70 5f 5f 4e 74 52 65 61 64 52 65 71 75 65 73    74 44 61 74 61 40 32 34 00 5f 5f 69 6d 70 5f 5f  | mp__NtReadRequestData@24.__imp__ | 
| 223a0 |  4e 74 52 65 61 64 56 69 72 74 75 61 6c 4d 65 6d    6f 72 79 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74  | NtReadVirtualMemory@20.__imp__Nt | 
| 223c0 |  52 65 67 69 73 74 65 72 54 68 72 65 61 64 54 65    72 6d 69 6e 61 74 65 50 6f 72 74 40 34 00 5f 5f  | RegisterThreadTerminatePort@4.__ | 
| 223e0 |  69 6d 70 5f 5f 4e 74 52 65 6c 65 61 73 65 4b 65    79 65 64 45 76 65 6e 74 40 31 36 00 5f 5f 69 6d  | imp__NtReleaseKeyedEvent@16.__im | 
| 22400 |  70 5f 5f 4e 74 52 65 6c 65 61 73 65 4d 75 74 61    6e 74 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65  | p__NtReleaseMutant@8.__imp__NtRe | 
| 22420 |  6c 65 61 73 65 53 65 6d 61 70 68 6f 72 65 40 31    32 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 6d 6f 76  | leaseSemaphore@12.__imp__NtRemov | 
| 22440 |  65 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 32 30    00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 6d 6f 76 65  | eIoCompletion@20.__imp__NtRemove | 
| 22460 |  50 72 6f 63 65 73 73 44 65 62 75 67 40 38 00 5f    5f 69 6d 70 5f 5f 4e 74 52 65 6e 61 6d 65 4b 65  | ProcessDebug@8.__imp__NtRenameKe | 
| 22480 |  79 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 70    6c 61 63 65 4b 65 79 40 31 32 00 5f 5f 69 6d 70  | y@8.__imp__NtReplaceKey@12.__imp | 
| 224a0 |  5f 5f 4e 74 52 65 70 6c 79 50 6f 72 74 40 38 00    5f 5f 69 6d 70 5f 5f 4e 74 52 65 70 6c 79 57 61  | __NtReplyPort@8.__imp__NtReplyWa | 
| 224c0 |  69 74 52 65 63 65 69 76 65 50 6f 72 74 40 31 36    00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 70 6c 79 57  | itReceivePort@16.__imp__NtReplyW | 
| 224e0 |  61 69 74 52 65 63 65 69 76 65 50 6f 72 74 45 78    40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 70  | aitReceivePortEx@20.__imp__NtRep | 
| 22500 |  6c 79 57 61 69 74 52 65 70 6c 79 50 6f 72 74 40    38 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 71 75 65  | lyWaitReplyPort@8.__imp__NtReque | 
| 22520 |  73 74 44 65 76 69 63 65 57 61 6b 65 75 70 40 34    00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 71 75 65 73  | stDeviceWakeup@4.__imp__NtReques | 
| 22540 |  74 50 6f 72 74 40 38 00 5f 5f 69 6d 70 5f 5f 4e    74 52 65 71 75 65 73 74 57 61 69 74 52 65 70 6c  | tPort@8.__imp__NtRequestWaitRepl | 
| 22560 |  79 50 6f 72 74 40 31 32 00 5f 5f 69 6d 70 5f 5f    4e 74 52 65 71 75 65 73 74 57 61 6b 65 75 70 4c  | yPort@12.__imp__NtRequestWakeupL | 
| 22580 |  61 74 65 6e 63 79 40 34 00 5f 5f 69 6d 70 5f 5f    4e 74 52 65 73 65 74 45 76 65 6e 74 40 38 00 5f  | atency@4.__imp__NtResetEvent@8._ | 
| 225a0 |  5f 69 6d 70 5f 5f 4e 74 52 65 73 65 74 57 72 69    74 65 57 61 74 63 68 40 31 32 00 5f 5f 69 6d 70  | _imp__NtResetWriteWatch@12.__imp | 
| 225c0 |  5f 5f 4e 74 52 65 73 74 6f 72 65 4b 65 79 40 31    32 00 5f 5f 69 6d 70 5f 5f 4e 74 52 65 73 75 6d  | __NtRestoreKey@12.__imp__NtResum | 
| 225e0 |  65 50 72 6f 63 65 73 73 40 34 00 5f 5f 69 6d 70    5f 5f 4e 74 52 65 73 75 6d 65 54 68 72 65 61 64  | eProcess@4.__imp__NtResumeThread | 
| 22600 |  40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 53 61 76 65    4b 65 79 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 53  | @8.__imp__NtSaveKey@8.__imp__NtS | 
| 22620 |  61 76 65 4b 65 79 45 78 40 31 32 00 5f 5f 69 6d    70 5f 5f 4e 74 53 61 76 65 4d 65 72 67 65 64 4b  | aveKeyEx@12.__imp__NtSaveMergedK | 
| 22640 |  65 79 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e 74    53 65 63 75 72 65 43 6f 6e 6e 65 63 74 50 6f 72  | eys@12.__imp__NtSecureConnectPor | 
| 22660 |  74 40 33 36 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65    74 42 6f 6f 74 45 6e 74 72 79 4f 72 64 65 72 40  | t@36.__imp__NtSetBootEntryOrder@ | 
| 22680 |  38 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65 74 42 6f    6f 74 4f 70 74 69 6f 6e 73 40 38 00 5f 5f 69 6d  | 8.__imp__NtSetBootOptions@8.__im | 
| 226a0 |  70 5f 5f 4e 74 53 65 74 43 6f 6e 74 65 78 74 54    68 72 65 61 64 40 38 00 5f 5f 69 6d 70 5f 5f 4e  | p__NtSetContextThread@8.__imp__N | 
| 226c0 |  74 53 65 74 44 65 62 75 67 46 69 6c 74 65 72 53    74 61 74 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 4e  | tSetDebugFilterState@12.__imp__N | 
| 226e0 |  74 53 65 74 44 65 66 61 75 6c 74 48 61 72 64 45    72 72 6f 72 50 6f 72 74 40 34 00 5f 5f 69 6d 70  | tSetDefaultHardErrorPort@4.__imp | 
| 22700 |  5f 5f 4e 74 53 65 74 44 65 66 61 75 6c 74 4c 6f    63 61 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74  | __NtSetDefaultLocale@8.__imp__Nt | 
| 22720 |  53 65 74 44 65 66 61 75 6c 74 55 49 4c 61 6e 67    75 61 67 65 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74  | SetDefaultUILanguage@4.__imp__Nt | 
| 22740 |  53 65 74 44 72 69 76 65 72 45 6e 74 72 79 4f 72    64 65 72 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 53  | SetDriverEntryOrder@8.__imp__NtS | 
| 22760 |  65 74 45 61 46 69 6c 65 40 31 36 00 5f 5f 69 6d    70 5f 5f 4e 74 53 65 74 45 76 65 6e 74 40 38 00  | etEaFile@16.__imp__NtSetEvent@8. | 
| 22780 |  5f 5f 69 6d 70 5f 5f 4e 74 53 65 74 45 76 65 6e    74 42 6f 6f 73 74 50 72 69 6f 72 69 74 79 40 34  | __imp__NtSetEventBoostPriority@4 | 
| 227a0 |  00 5f 5f 69 6d 70 5f 5f 4e 74 53 65 74 48 69 67    68 45 76 65 6e 74 50 61 69 72 40 34 00 5f 5f 69  | .__imp__NtSetHighEventPair@4.__i | 
| 227c0 |  6d 70 5f 5f 4e 74 53 65 74 48 69 67 68 57 61 69    74 4c 6f 77 45 76 65 6e 74 50 61 69 72 40 34 00  | mp__NtSetHighWaitLowEventPair@4. | 
| 227e0 |  5f 5f 69 6d 70 5f 5f 4e 74 53 65 74 49 6e 66 6f    72 6d 61 74 69 6f 6e 44 65 62 75 67 4f 62 6a 65  | __imp__NtSetInformationDebugObje | 
| 22800 |  63 74 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 53    65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c  | ct@20.__imp__NtSetInformationFil | 
| 22820 |  65 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65    74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f  | e@20.__imp__NtSetInformationJobO | 
| 22840 |  62 6a 65 63 74 40 31 36 00 5f 5f 69 6d 70 5f 5f    4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e  | bject@16.__imp__NtSetInformation | 
| 22860 |  4b 65 79 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74    53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f 62  | Key@16.__imp__NtSetInformationOb | 
| 22880 |  6a 65 63 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e    74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50  | ject@16.__imp__NtSetInformationP | 
| 228a0 |  72 6f 63 65 73 73 40 31 36 00 5f 5f 69 6d 70 5f    5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f  | rocess@16.__imp__NtSetInformatio | 
| 228c0 |  6e 54 68 72 65 61 64 40 31 36 00 5f 5f 69 6d 70    5f 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74 69  | nThread@16.__imp__NtSetInformati | 
| 228e0 |  6f 6e 54 6f 6b 65 6e 40 31 36 00 5f 5f 69 6d 70    5f 5f 4e 74 53 65 74 49 6e 74 65 72 76 61 6c 50  | onToken@16.__imp__NtSetIntervalP | 
| 22900 |  72 6f 66 69 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f    4e 74 53 65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f  | rofile@8.__imp__NtSetIoCompletio | 
| 22920 |  6e 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65    74 4c 64 74 45 6e 74 72 69 65 73 40 32 34 00 5f  | n@20.__imp__NtSetLdtEntries@24._ | 
| 22940 |  5f 69 6d 70 5f 5f 4e 74 53 65 74 4c 6f 77 45 76    65 6e 74 50 61 69 72 40 34 00 5f 5f 69 6d 70 5f  | _imp__NtSetLowEventPair@4.__imp_ | 
| 22960 |  5f 4e 74 53 65 74 4c 6f 77 57 61 69 74 48 69 67    68 45 76 65 6e 74 50 61 69 72 40 34 00 5f 5f 69  | _NtSetLowWaitHighEventPair@4.__i | 
| 22980 |  6d 70 5f 5f 4e 74 53 65 74 51 75 6f 74 61 49 6e    66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40 31 36  | mp__NtSetQuotaInformationFile@16 | 
| 229a0 |  00 5f 5f 69 6d 70 5f 5f 4e 74 53 65 74 53 65 63    75 72 69 74 79 4f 62 6a 65 63 74 40 31 32 00 5f  | .__imp__NtSetSecurityObject@12._ | 
| 229c0 |  5f 69 6d 70 5f 5f 4e 74 53 65 74 53 79 73 74 65    6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75  | _imp__NtSetSystemEnvironmentValu | 
| 229e0 |  65 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65 74    53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e  | e@8.__imp__NtSetSystemEnvironmen | 
| 22a00 |  74 56 61 6c 75 65 45 78 40 32 30 00 5f 5f 69 6d    70 5f 5f 4e 74 53 65 74 53 79 73 74 65 6d 49 6e  | tValueEx@20.__imp__NtSetSystemIn | 
| 22a20 |  66 6f 72 6d 61 74 69 6f 6e 40 31 32 00 5f 5f 69    6d 70 5f 5f 4e 74 53 65 74 53 79 73 74 65 6d 50  | formation@12.__imp__NtSetSystemP | 
| 22a40 |  6f 77 65 72 53 74 61 74 65 40 31 32 00 5f 5f 69    6d 70 5f 5f 4e 74 53 65 74 53 79 73 74 65 6d 54  | owerState@12.__imp__NtSetSystemT | 
| 22a60 |  69 6d 65 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 53    65 74 54 68 72 65 61 64 45 78 65 63 75 74 69 6f  | ime@8.__imp__NtSetThreadExecutio | 
| 22a80 |  6e 53 74 61 74 65 40 38 00 5f 5f 69 6d 70 5f 5f    4e 74 53 65 74 54 69 6d 65 72 40 32 38 00 5f 5f  | nState@8.__imp__NtSetTimer@28.__ | 
| 22aa0 |  69 6d 70 5f 5f 4e 74 53 65 74 54 69 6d 65 72 52    65 73 6f 6c 75 74 69 6f 6e 40 31 32 00 5f 5f 69  | imp__NtSetTimerResolution@12.__i | 
| 22ac0 |  6d 70 5f 5f 4e 74 53 65 74 55 75 69 64 53 65 65    64 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 53 65 74  | mp__NtSetUuidSeed@4.__imp__NtSet | 
| 22ae0 |  56 61 6c 75 65 4b 65 79 40 32 34 00 5f 5f 69 6d    70 5f 5f 4e 74 53 65 74 56 6f 6c 75 6d 65 49 6e  | ValueKey@24.__imp__NtSetVolumeIn | 
| 22b00 |  66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40 32 30    00 5f 5f 69 6d 70 5f 5f 4e 74 53 68 75 74 64 6f  | formationFile@20.__imp__NtShutdo | 
| 22b20 |  77 6e 53 79 73 74 65 6d 40 34 00 5f 5f 69 6d 70    5f 5f 4e 74 53 69 67 6e 61 6c 41 6e 64 57 61 69  | wnSystem@4.__imp__NtSignalAndWai | 
| 22b40 |  74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74    40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 53 74 61  | tForSingleObject@16.__imp__NtSta | 
| 22b60 |  72 74 50 72 6f 66 69 6c 65 40 34 00 5f 5f 69 6d    70 5f 5f 4e 74 53 74 6f 70 50 72 6f 66 69 6c 65  | rtProfile@4.__imp__NtStopProfile | 
| 22b80 |  40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 53 75 73 70    65 6e 64 50 72 6f 63 65 73 73 40 34 00 5f 5f 69  | @4.__imp__NtSuspendProcess@4.__i | 
| 22ba0 |  6d 70 5f 5f 4e 74 53 75 73 70 65 6e 64 54 68 72    65 61 64 40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 53  | mp__NtSuspendThread@8.__imp__NtS | 
| 22bc0 |  79 73 74 65 6d 44 65 62 75 67 43 6f 6e 74 72 6f    6c 40 32 34 00 5f 5f 69 6d 70 5f 5f 4e 74 54 65  | ystemDebugControl@24.__imp__NtTe | 
| 22be0 |  72 6d 69 6e 61 74 65 4a 6f 62 4f 62 6a 65 63 74    40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 54 65 72 6d  | rminateJobObject@8.__imp__NtTerm | 
| 22c00 |  69 6e 61 74 65 50 72 6f 63 65 73 73 40 38 00 5f    5f 69 6d 70 5f 5f 4e 74 54 65 72 6d 69 6e 61 74  | inateProcess@8.__imp__NtTerminat | 
| 22c20 |  65 54 68 72 65 61 64 40 38 00 5f 5f 69 6d 70 5f    5f 4e 74 54 65 73 74 41 6c 65 72 74 40 30 00 5f  | eThread@8.__imp__NtTestAlert@0._ | 
| 22c40 |  5f 69 6d 70 5f 5f 4e 74 54 72 61 63 65 45 76 65    6e 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 54  | _imp__NtTraceEvent@16.__imp__NtT | 
| 22c60 |  72 61 6e 73 6c 61 74 65 46 69 6c 65 50 61 74 68    40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 55 6e 6c  | ranslateFilePath@16.__imp__NtUnl | 
| 22c80 |  6f 61 64 44 72 69 76 65 72 40 34 00 5f 5f 69 6d    70 5f 5f 4e 74 55 6e 6c 6f 61 64 4b 65 79 32 40  | oadDriver@4.__imp__NtUnloadKey2@ | 
| 22ca0 |  38 00 5f 5f 69 6d 70 5f 5f 4e 74 55 6e 6c 6f 61    64 4b 65 79 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74  | 8.__imp__NtUnloadKey@4.__imp__Nt | 
| 22cc0 |  55 6e 6c 6f 61 64 4b 65 79 45 78 40 38 00 5f 5f    69 6d 70 5f 5f 4e 74 55 6e 6c 6f 63 6b 46 69 6c  | UnloadKeyEx@8.__imp__NtUnlockFil | 
| 22ce0 |  65 40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 55 6e    6c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f 72  | e@20.__imp__NtUnlockVirtualMemor | 
| 22d00 |  79 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 55 6e    6d 61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e  | y@16.__imp__NtUnmapViewOfSection | 
| 22d20 |  40 38 00 5f 5f 69 6d 70 5f 5f 4e 74 56 64 6d 43    6f 6e 74 72 6f 6c 40 38 00 5f 5f 69 6d 70 5f 5f  | @8.__imp__NtVdmControl@8.__imp__ | 
| 22d40 |  4e 74 57 61 69 74 46 6f 72 44 65 62 75 67 45 76    65 6e 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74  | NtWaitForDebugEvent@16.__imp__Nt | 
| 22d60 |  57 61 69 74 46 6f 72 4b 65 79 65 64 45 76 65 6e    74 40 31 36 00 5f 5f 69 6d 70 5f 5f 4e 74 57 61  | WaitForKeyedEvent@16.__imp__NtWa | 
| 22d80 |  69 74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a    65 63 74 73 33 32 40 32 30 00 5f 5f 69 6d 70 5f  | itForMultipleObjects32@20.__imp_ | 
| 22da0 |  5f 4e 74 57 61 69 74 46 6f 72 4d 75 6c 74 69 70    6c 65 4f 62 6a 65 63 74 73 40 32 30 00 5f 5f 69  | _NtWaitForMultipleObjects@20.__i | 
| 22dc0 |  6d 70 5f 5f 4e 74 57 61 69 74 46 6f 72 53 69 6e    67 6c 65 4f 62 6a 65 63 74 40 31 32 00 5f 5f 69  | mp__NtWaitForSingleObject@12.__i | 
| 22de0 |  6d 70 5f 5f 4e 74 57 61 69 74 48 69 67 68 45 76    65 6e 74 50 61 69 72 40 34 00 5f 5f 69 6d 70 5f  | mp__NtWaitHighEventPair@4.__imp_ | 
| 22e00 |  5f 4e 74 57 61 69 74 4c 6f 77 45 76 65 6e 74 50    61 69 72 40 34 00 5f 5f 69 6d 70 5f 5f 4e 74 57  | _NtWaitLowEventPair@4.__imp__NtW | 
| 22e20 |  72 69 74 65 46 69 6c 65 40 33 36 00 5f 5f 69 6d    70 5f 5f 4e 74 57 72 69 74 65 46 69 6c 65 47 61  | riteFile@36.__imp__NtWriteFileGa | 
| 22e40 |  74 68 65 72 40 33 36 00 5f 5f 69 6d 70 5f 5f 4e    74 57 72 69 74 65 52 65 71 75 65 73 74 44 61 74  | ther@36.__imp__NtWriteRequestDat | 
| 22e60 |  61 40 32 34 00 5f 5f 69 6d 70 5f 5f 4e 74 57 72    69 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79  | a@24.__imp__NtWriteVirtualMemory | 
| 22e80 |  40 32 30 00 5f 5f 69 6d 70 5f 5f 4e 74 59 69 65    6c 64 45 78 65 63 75 74 69 6f 6e 40 30 00 5f 5f  | @20.__imp__NtYieldExecution@0.__ | 
| 22ea0 |  69 6d 70 5f 5f 50 66 78 46 69 6e 64 50 72 65 66    69 78 40 38 00 5f 5f 69 6d 70 5f 5f 50 66 78 49  | imp__PfxFindPrefix@8.__imp__PfxI | 
| 22ec0 |  6e 69 74 69 61 6c 69 7a 65 40 34 00 5f 5f 69 6d    70 5f 5f 50 66 78 49 6e 73 65 72 74 50 72 65 66  | nitialize@4.__imp__PfxInsertPref | 
| 22ee0 |  69 78 40 31 32 00 5f 5f 69 6d 70 5f 5f 50 66 78    52 65 6d 6f 76 65 50 72 65 66 69 78 40 38 00 5f  | ix@12.__imp__PfxRemovePrefix@8._ | 
| 22f00 |  5f 69 6d 70 5f 5f 52 74 6c 41 62 6f 72 74 52 58    61 63 74 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | _imp__RtlAbortRXact@4.__imp__Rtl | 
| 22f20 |  41 62 73 6f 6c 75 74 65 54 6f 53 65 6c 66 52 65    6c 61 74 69 76 65 53 44 40 31 32 00 5f 5f 69 6d  | AbsoluteToSelfRelativeSD@12.__im | 
| 22f40 |  70 5f 5f 52 74 6c 41 63 71 75 69 72 65 50 65 62    4c 6f 63 6b 40 30 00 5f 5f 69 6d 70 5f 5f 52 74  | p__RtlAcquirePebLock@0.__imp__Rt | 
| 22f60 |  6c 41 63 71 75 69 72 65 50 72 69 76 69 6c 65 67    65 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41  | lAcquirePrivilege@16.__imp__RtlA | 
| 22f80 |  63 71 75 69 72 65 52 65 73 6f 75 72 63 65 45 78    63 6c 75 73 69 76 65 40 38 00 5f 5f 69 6d 70 5f  | cquireResourceExclusive@8.__imp_ | 
| 22fa0 |  5f 52 74 6c 41 63 71 75 69 72 65 52 65 73 6f 75    72 63 65 53 68 61 72 65 64 40 38 00 5f 5f 69 6d  | _RtlAcquireResourceShared@8.__im | 
| 22fc0 |  70 5f 5f 52 74 6c 41 63 74 69 76 61 74 65 41 63    74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 40  | p__RtlActivateActivationContext@ | 
| 22fe0 |  31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 63 74    69 76 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43  | 12.__imp__RtlActivateActivationC | 
| 23000 |  6f 6e 74 65 78 74 45 78 40 31 36 00 5f 5f 69 6d    70 5f 5f 52 74 6c 41 64 64 41 63 63 65 73 73 41  | ontextEx@16.__imp__RtlAddAccessA | 
| 23020 |  6c 6c 6f 77 65 64 41 63 65 40 31 36 00 5f 5f 69    6d 70 5f 5f 52 74 6c 41 64 64 41 63 63 65 73 73  | llowedAce@16.__imp__RtlAddAccess | 
| 23040 |  41 6c 6c 6f 77 65 64 41 63 65 45 78 40 32 30 00    5f 5f 69 6d 70 5f 5f 52 74 6c 41 64 64 41 63 63  | AllowedAceEx@20.__imp__RtlAddAcc | 
| 23060 |  65 73 73 41 6c 6c 6f 77 65 64 4f 62 6a 65 63 74    41 63 65 40 32 38 00 5f 5f 69 6d 70 5f 5f 52 74  | essAllowedObjectAce@28.__imp__Rt | 
| 23080 |  6c 41 64 64 41 63 63 65 73 73 44 65 6e 69 65 64    41 63 65 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74  | lAddAccessDeniedAce@16.__imp__Rt | 
| 230a0 |  6c 41 64 64 41 63 63 65 73 73 44 65 6e 69 65 64    41 63 65 45 78 40 32 30 00 5f 5f 69 6d 70 5f 5f  | lAddAccessDeniedAceEx@20.__imp__ | 
| 230c0 |  52 74 6c 41 64 64 41 63 63 65 73 73 44 65 6e 69    65 64 4f 62 6a 65 63 74 41 63 65 40 32 38 00 5f  | RtlAddAccessDeniedObjectAce@28._ | 
| 230e0 |  5f 69 6d 70 5f 5f 52 74 6c 41 64 64 41 63 65 40    32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 64 64  | _imp__RtlAddAce@20.__imp__RtlAdd | 
| 23100 |  41 63 74 69 6f 6e 54 6f 52 58 61 63 74 40 32 34    00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 64 64 41 74  | ActionToRXact@24.__imp__RtlAddAt | 
| 23120 |  6f 6d 54 6f 41 74 6f 6d 54 61 62 6c 65 40 31 32    00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 64 64 41 74  | omToAtomTable@12.__imp__RtlAddAt | 
| 23140 |  74 72 69 62 75 74 65 41 63 74 69 6f 6e 54 6f 52    58 61 63 74 40 33 32 00 5f 5f 69 6d 70 5f 5f 52  | tributeActionToRXact@32.__imp__R | 
| 23160 |  74 6c 41 64 64 41 75 64 69 74 41 63 63 65 73 73    41 63 65 40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74  | tlAddAuditAccessAce@24.__imp__Rt | 
| 23180 |  6c 41 64 64 41 75 64 69 74 41 63 63 65 73 73 41    63 65 45 78 40 32 38 00 5f 5f 69 6d 70 5f 5f 52  | lAddAuditAccessAceEx@28.__imp__R | 
| 231a0 |  74 6c 41 64 64 41 75 64 69 74 41 63 63 65 73 73    4f 62 6a 65 63 74 41 63 65 40 33 36 00 5f 5f 69  | tlAddAuditAccessObjectAce@36.__i | 
| 231c0 |  6d 70 5f 5f 52 74 6c 41 64 64 43 6f 6d 70 6f 75    6e 64 41 63 65 40 32 34 00 5f 5f 69 6d 70 5f 5f  | mp__RtlAddCompoundAce@24.__imp__ | 
| 231e0 |  52 74 6c 41 64 64 52 65 66 41 63 74 69 76 61 74    69 6f 6e 43 6f 6e 74 65 78 74 40 34 00 5f 5f 69  | RtlAddRefActivationContext@4.__i | 
| 23200 |  6d 70 5f 5f 52 74 6c 41 64 64 52 65 66 4d 65 6d    6f 72 79 53 74 72 65 61 6d 40 34 00 5f 5f 69 6d  | mp__RtlAddRefMemoryStream@4.__im | 
| 23220 |  70 5f 5f 52 74 6c 41 64 64 56 65 63 74 6f 72 65    64 43 6f 6e 74 69 6e 75 65 48 61 6e 64 6c 65 72  | p__RtlAddVectoredContinueHandler | 
| 23240 |  40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 64 64    56 65 63 74 6f 72 65 64 45 78 63 65 70 74 69 6f  | @8.__imp__RtlAddVectoredExceptio | 
| 23260 |  6e 48 61 6e 64 6c 65 72 40 38 00 5f 5f 69 6d 70    5f 5f 52 74 6c 41 64 64 72 65 73 73 49 6e 53 65  | nHandler@8.__imp__RtlAddressInSe | 
| 23280 |  63 74 69 6f 6e 54 61 62 6c 65 40 31 32 00 5f 5f    69 6d 70 5f 5f 52 74 6c 41 64 6a 75 73 74 50 72  | ctionTable@12.__imp__RtlAdjustPr | 
| 232a0 |  69 76 69 6c 65 67 65 40 31 36 00 5f 5f 69 6d 70    5f 5f 52 74 6c 41 6c 6c 6f 63 61 74 65 41 63 74  | ivilege@16.__imp__RtlAllocateAct | 
| 232c0 |  69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 74    61 63 6b 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | ivationContextStack@4.__imp__Rtl | 
| 232e0 |  41 6c 6c 6f 63 61 74 65 41 6e 64 49 6e 69 74 69    61 6c 69 7a 65 53 69 64 40 34 34 00 5f 5f 69 6d  | AllocateAndInitializeSid@44.__im | 
| 23300 |  70 5f 5f 52 74 6c 41 6c 6c 6f 63 61 74 65 48 61    6e 64 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74  | p__RtlAllocateHandle@8.__imp__Rt | 
| 23320 |  6c 41 6c 6c 6f 63 61 74 65 48 65 61 70 40 31 32    00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 6e 73 69 43  | lAllocateHeap@12.__imp__RtlAnsiC | 
| 23340 |  68 61 72 54 6f 55 6e 69 63 6f 64 65 43 68 61 72    40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 6e 73  | harToUnicodeChar@4.__imp__RtlAns | 
| 23360 |  69 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65    53 69 7a 65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | iStringToUnicodeSize@4.__imp__Rt | 
| 23380 |  6c 41 6e 73 69 53 74 72 69 6e 67 54 6f 55 6e 69    63 6f 64 65 53 74 72 69 6e 67 40 31 32 00 5f 5f  | lAnsiStringToUnicodeString@12.__ | 
| 233a0 |  69 6d 70 5f 5f 52 74 6c 41 70 70 65 6e 64 41 73    63 69 69 7a 54 6f 53 74 72 69 6e 67 40 38 00 5f  | imp__RtlAppendAsciizToString@8._ | 
| 233c0 |  5f 69 6d 70 5f 5f 52 74 6c 41 70 70 65 6e 64 50    61 74 68 45 6c 65 6d 65 6e 74 40 31 32 00 5f 5f  | _imp__RtlAppendPathElement@12.__ | 
| 233e0 |  69 6d 70 5f 5f 52 74 6c 41 70 70 65 6e 64 53 74    72 69 6e 67 54 6f 53 74 72 69 6e 67 40 38 00 5f  | imp__RtlAppendStringToString@8._ | 
| 23400 |  5f 69 6d 70 5f 5f 52 74 6c 41 70 70 65 6e 64 55    6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 53 74  | _imp__RtlAppendUnicodeStringToSt | 
| 23420 |  72 69 6e 67 40 38 00 5f 5f 69 6d 70 5f 5f 52 74    6c 41 70 70 65 6e 64 55 6e 69 63 6f 64 65 54 6f  | ring@8.__imp__RtlAppendUnicodeTo | 
| 23440 |  53 74 72 69 6e 67 40 38 00 5f 5f 69 6d 70 5f 5f    52 74 6c 41 70 70 6c 69 63 61 74 69 6f 6e 56 65  | String@8.__imp__RtlApplicationVe | 
| 23460 |  72 69 66 69 65 72 53 74 6f 70 40 34 30 00 5f 5f    69 6d 70 5f 5f 52 74 6c 41 70 70 6c 79 52 58 61  | rifierStop@40.__imp__RtlApplyRXa | 
| 23480 |  63 74 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41    70 70 6c 79 52 58 61 63 74 4e 6f 46 6c 75 73 68  | ct@4.__imp__RtlApplyRXactNoFlush | 
| 234a0 |  40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 72 65    41 6c 6c 41 63 63 65 73 73 65 73 47 72 61 6e 74  | @4.__imp__RtlAreAllAccessesGrant | 
| 234c0 |  65 64 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 41    72 65 41 6e 79 41 63 63 65 73 73 65 73 47 72 61  | ed@8.__imp__RtlAreAnyAccessesGra | 
| 234e0 |  6e 74 65 64 40 38 00 5f 5f 69 6d 70 5f 5f 52 74    6c 41 72 65 42 69 74 73 43 6c 65 61 72 40 31 32  | nted@8.__imp__RtlAreBitsClear@12 | 
| 23500 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 41 72 65 42 69    74 73 53 65 74 40 31 32 00 5f 5f 69 6d 70 5f 5f  | .__imp__RtlAreBitsSet@12.__imp__ | 
| 23520 |  52 74 6c 41 73 73 65 72 74 40 31 36 00 5f 5f 69    6d 70 5f 5f 52 74 6c 43 61 6e 63 65 6c 54 69 6d  | RtlAssert@16.__imp__RtlCancelTim | 
| 23540 |  65 72 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43    61 70 74 75 72 65 43 6f 6e 74 65 78 74 40 34 00  | er@8.__imp__RtlCaptureContext@4. | 
| 23560 |  5f 5f 69 6d 70 5f 5f 52 74 6c 43 61 70 74 75 72    65 53 74 61 63 6b 42 61 63 6b 54 72 61 63 65 40  | __imp__RtlCaptureStackBackTrace@ | 
| 23580 |  31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 61 70    74 75 72 65 53 74 61 63 6b 43 6f 6e 74 65 78 74  | 16.__imp__RtlCaptureStackContext | 
| 235a0 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 68    61 72 54 6f 49 6e 74 65 67 65 72 40 31 32 00 5f  | @12.__imp__RtlCharToInteger@12._ | 
| 235c0 |  5f 69 6d 70 5f 5f 52 74 6c 43 68 65 63 6b 46 6f    72 4f 72 70 68 61 6e 65 64 43 72 69 74 69 63 61  | _imp__RtlCheckForOrphanedCritica | 
| 235e0 |  6c 53 65 63 74 69 6f 6e 73 40 34 00 5f 5f 69 6d    70 5f 5f 52 74 6c 43 68 65 63 6b 50 72 6f 63 65  | lSections@4.__imp__RtlCheckProce | 
| 23600 |  73 73 50 61 72 61 6d 65 74 65 72 73 40 31 36 00    5f 5f 69 6d 70 5f 5f 52 74 6c 43 68 65 63 6b 52  | ssParameters@16.__imp__RtlCheckR | 
| 23620 |  65 67 69 73 74 72 79 4b 65 79 40 38 00 5f 5f 69    6d 70 5f 5f 52 74 6c 43 6c 65 61 72 41 6c 6c 42  | egistryKey@8.__imp__RtlClearAllB | 
| 23640 |  69 74 73 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c    43 6c 65 61 72 42 69 74 73 40 31 32 00 5f 5f 69  | its@4.__imp__RtlClearBits@12.__i | 
| 23660 |  6d 70 5f 5f 52 74 6c 43 6c 6f 6e 65 4d 65 6d 6f    72 79 53 74 72 65 61 6d 40 38 00 5f 5f 69 6d 70  | mp__RtlCloneMemoryStream@8.__imp | 
| 23680 |  5f 5f 52 74 6c 43 6f 6d 6d 69 74 4d 65 6d 6f 72    79 53 74 72 65 61 6d 40 38 00 5f 5f 69 6d 70 5f  | __RtlCommitMemoryStream@8.__imp_ | 
| 236a0 |  5f 52 74 6c 43 6f 6d 70 61 63 74 48 65 61 70 40    38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f 6d 70  | _RtlCompactHeap@8.__imp__RtlComp | 
| 236c0 |  61 72 65 4d 65 6d 6f 72 79 40 31 32 00 5f 5f 69    6d 70 5f 5f 52 74 6c 43 6f 6d 70 61 72 65 4d 65  | areMemory@12.__imp__RtlCompareMe | 
| 236e0 |  6d 6f 72 79 55 6c 6f 6e 67 40 31 32 00 5f 5f 69    6d 70 5f 5f 52 74 6c 43 6f 6d 70 61 72 65 53 74  | moryUlong@12.__imp__RtlCompareSt | 
| 23700 |  72 69 6e 67 40 31 32 00 5f 5f 69 6d 70 5f 5f 52    74 6c 43 6f 6d 70 61 72 65 55 6e 69 63 6f 64 65  | ring@12.__imp__RtlCompareUnicode | 
| 23720 |  53 74 72 69 6e 67 40 31 32 00 5f 5f 69 6d 70 5f    5f 52 74 6c 43 6f 6d 70 72 65 73 73 42 75 66 66  | String@12.__imp__RtlCompressBuff | 
| 23740 |  65 72 40 33 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c    43 6f 6d 70 75 74 65 43 72 63 33 32 40 31 32 00  | er@32.__imp__RtlComputeCrc32@12. | 
| 23760 |  5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f 6d 70 75 74    65 49 6d 70 6f 72 74 54 61 62 6c 65 48 61 73 68  | __imp__RtlComputeImportTableHash | 
| 23780 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f    6d 70 75 74 65 50 72 69 76 61 74 69 7a 65 64 44  | @12.__imp__RtlComputePrivatizedD | 
| 237a0 |  6c 6c 4e 61 6d 65 5f 55 40 31 32 00 5f 5f 69 6d    70 5f 5f 52 74 6c 43 6f 6e 73 6f 6c 65 4d 75 6c  | llName_U@12.__imp__RtlConsoleMul | 
| 237c0 |  74 69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65 4e    40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f  | tiByteToUnicodeN@24.__imp__RtlCo | 
| 237e0 |  6e 76 65 72 74 45 78 63 6c 75 73 69 76 65 54 6f    53 68 61 72 65 64 40 34 00 5f 5f 69 6d 70 5f 5f  | nvertExclusiveToShared@4.__imp__ | 
| 23800 |  52 74 6c 43 6f 6e 76 65 72 74 4c 6f 6e 67 54 6f    4c 61 72 67 65 49 6e 74 65 67 65 72 40 34 00 5f  | RtlConvertLongToLargeInteger@4._ | 
| 23820 |  5f 69 6d 70 5f 5f 52 74 6c 43 6f 6e 76 65 72 74    53 68 61 72 65 64 54 6f 45 78 63 6c 75 73 69 76  | _imp__RtlConvertSharedToExclusiv | 
| 23840 |  65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f    6e 76 65 72 74 53 69 64 54 6f 55 6e 69 63 6f 64  | e@4.__imp__RtlConvertSidToUnicod | 
| 23860 |  65 53 74 72 69 6e 67 40 31 32 00 5f 5f 69 6d 70    5f 5f 52 74 6c 43 6f 6e 76 65 72 74 54 6f 41 75  | eString@12.__imp__RtlConvertToAu | 
| 23880 |  74 6f 49 6e 68 65 72 69 74 53 65 63 75 72 69 74    79 4f 62 6a 65 63 74 40 32 34 00 5f 5f 69 6d 70  | toInheritSecurityObject@24.__imp | 
| 238a0 |  5f 5f 52 74 6c 43 6f 6e 76 65 72 74 55 69 4c 69    73 74 54 6f 41 70 69 4c 69 73 74 40 31 32 00 5f  | __RtlConvertUiListToApiList@12._ | 
| 238c0 |  5f 69 6d 70 5f 5f 52 74 6c 43 6f 6e 76 65 72 74    55 6c 6f 6e 67 54 6f 4c 61 72 67 65 49 6e 74 65  | _imp__RtlConvertUlongToLargeInte | 
| 238e0 |  67 65 72 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c    43 6f 70 79 4c 75 69 64 40 38 00 5f 5f 69 6d 70  | ger@4.__imp__RtlCopyLuid@8.__imp | 
| 23900 |  5f 5f 52 74 6c 43 6f 70 79 4c 75 69 64 41 6e 64    41 74 74 72 69 62 75 74 65 73 41 72 72 61 79 40  | __RtlCopyLuidAndAttributesArray@ | 
| 23920 |  31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f 70    79 4d 61 70 70 65 64 4d 65 6d 6f 72 79 40 31 32  | 12.__imp__RtlCopyMappedMemory@12 | 
| 23940 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f 70 79 4d    65 6d 6f 72 79 53 74 72 65 61 6d 54 6f 40 32 34  | .__imp__RtlCopyMemoryStreamTo@24 | 
| 23960 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f 70 79 4f    75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f 72  | .__imp__RtlCopyOutOfProcessMemor | 
| 23980 |  79 53 74 72 65 61 6d 54 6f 40 32 34 00 5f 5f 69    6d 70 5f 5f 52 74 6c 43 6f 70 79 53 65 63 75 72  | yStreamTo@24.__imp__RtlCopySecur | 
| 239a0 |  69 74 79 44 65 73 63 72 69 70 74 6f 72 40 38 00    5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f 70 79 53 69  | ityDescriptor@8.__imp__RtlCopySi | 
| 239c0 |  64 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43    6f 70 79 53 69 64 41 6e 64 41 74 74 72 69 62 75  | d@12.__imp__RtlCopySidAndAttribu | 
| 239e0 |  74 65 73 41 72 72 61 79 40 32 38 00 5f 5f 69 6d    70 5f 5f 52 74 6c 43 6f 70 79 53 74 72 69 6e 67  | tesArray@28.__imp__RtlCopyString | 
| 23a00 |  40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 6f 70    79 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 40 38  | @8.__imp__RtlCopyUnicodeString@8 | 
| 23a20 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 43 72 65 61 74    65 41 63 6c 40 31 32 00 5f 5f 69 6d 70 5f 5f 52  | .__imp__RtlCreateAcl@12.__imp__R | 
| 23a40 |  74 6c 43 72 65 61 74 65 41 63 74 69 76 61 74 69    6f 6e 43 6f 6e 74 65 78 74 40 32 34 00 5f 5f 69  | tlCreateActivationContext@24.__i | 
| 23a60 |  6d 70 5f 5f 52 74 6c 43 72 65 61 74 65 41 6e 64    53 65 74 53 44 40 32 30 00 5f 5f 69 6d 70 5f 5f  | mp__RtlCreateAndSetSD@20.__imp__ | 
| 23a80 |  52 74 6c 43 72 65 61 74 65 41 74 6f 6d 54 61 62    6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43  | RtlCreateAtomTable@8.__imp__RtlC | 
| 23aa0 |  72 65 61 74 65 42 6f 6f 74 53 74 61 74 75 73 44    61 74 61 46 69 6c 65 40 30 00 5f 5f 69 6d 70 5f  | reateBootStatusDataFile@0.__imp_ | 
| 23ac0 |  5f 52 74 6c 43 72 65 61 74 65 45 6e 76 69 72 6f    6e 6d 65 6e 74 40 38 00 5f 5f 69 6d 70 5f 5f 52  | _RtlCreateEnvironment@8.__imp__R | 
| 23ae0 |  74 6c 43 72 65 61 74 65 48 65 61 70 40 32 34 00    5f 5f 69 6d 70 5f 5f 52 74 6c 43 72 65 61 74 65  | tlCreateHeap@24.__imp__RtlCreate | 
| 23b00 |  50 72 6f 63 65 73 73 50 61 72 61 6d 65 74 65 72    73 40 34 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43  | ProcessParameters@40.__imp__RtlC | 
| 23b20 |  72 65 61 74 65 51 75 65 72 79 44 65 62 75 67 42    75 66 66 65 72 40 38 00 5f 5f 69 6d 70 5f 5f 52  | reateQueryDebugBuffer@8.__imp__R | 
| 23b40 |  74 6c 43 72 65 61 74 65 52 65 67 69 73 74 72 79    4b 65 79 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | tlCreateRegistryKey@8.__imp__Rtl | 
| 23b60 |  43 72 65 61 74 65 53 65 63 75 72 69 74 79 44 65    73 63 72 69 70 74 6f 72 40 38 00 5f 5f 69 6d 70  | CreateSecurityDescriptor@8.__imp | 
| 23b80 |  5f 5f 52 74 6c 43 72 65 61 74 65 53 79 73 74 65    6d 56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69  | __RtlCreateSystemVolumeInformati | 
| 23ba0 |  6f 6e 46 6f 6c 64 65 72 40 34 00 5f 5f 69 6d 70    5f 5f 52 74 6c 43 72 65 61 74 65 54 61 67 48 65  | onFolder@4.__imp__RtlCreateTagHe | 
| 23bc0 |  61 70 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c    43 72 65 61 74 65 54 69 6d 65 72 40 32 38 00 5f  | ap@16.__imp__RtlCreateTimer@28._ | 
| 23be0 |  5f 69 6d 70 5f 5f 52 74 6c 43 72 65 61 74 65 54    69 6d 65 72 51 75 65 75 65 40 34 00 5f 5f 69 6d  | _imp__RtlCreateTimerQueue@4.__im | 
| 23c00 |  70 5f 5f 52 74 6c 43 72 65 61 74 65 55 6e 69 63    6f 64 65 53 74 72 69 6e 67 40 38 00 5f 5f 69 6d  | p__RtlCreateUnicodeString@8.__im | 
| 23c20 |  70 5f 5f 52 74 6c 43 72 65 61 74 65 55 6e 69 63    6f 64 65 53 74 72 69 6e 67 46 72 6f 6d 41 73 63  | p__RtlCreateUnicodeStringFromAsc | 
| 23c40 |  69 69 7a 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c    43 72 65 61 74 65 55 73 65 72 50 72 6f 63 65 73  | iiz@8.__imp__RtlCreateUserProces | 
| 23c60 |  73 40 34 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 43    72 65 61 74 65 55 73 65 72 53 65 63 75 72 69 74  | s@40.__imp__RtlCreateUserSecurit | 
| 23c80 |  79 4f 62 6a 65 63 74 40 32 38 00 5f 5f 69 6d 70    5f 5f 52 74 6c 43 72 65 61 74 65 55 73 65 72 54  | yObject@28.__imp__RtlCreateUserT | 
| 23ca0 |  68 72 65 61 64 40 34 30 00 5f 5f 69 6d 70 5f 5f    52 74 6c 43 75 73 74 6f 6d 43 50 54 6f 55 6e 69  | hread@40.__imp__RtlCustomCPToUni | 
| 23cc0 |  63 6f 64 65 4e 40 32 34 00 5f 5f 69 6d 70 5f 5f    52 74 6c 43 75 74 6f 76 65 72 54 69 6d 65 54 6f  | codeN@24.__imp__RtlCutoverTimeTo | 
| 23ce0 |  53 79 73 74 65 6d 54 69 6d 65 40 31 36 00 5f 5f    69 6d 70 5f 5f 52 74 6c 44 65 4e 6f 72 6d 61 6c  | SystemTime@16.__imp__RtlDeNormal | 
| 23d00 |  69 7a 65 50 72 6f 63 65 73 73 50 61 72 61 6d 73    40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 61  | izeProcessParams@4.__imp__RtlDea | 
| 23d20 |  63 74 69 76 61 74 65 41 63 74 69 76 61 74 69 6f    6e 43 6f 6e 74 65 78 74 40 38 00 5f 5f 69 6d 70  | ctivateActivationContext@8.__imp | 
| 23d40 |  5f 5f 52 74 6c 44 65 62 75 67 50 72 69 6e 74 54    69 6d 65 73 40 30 00 5f 5f 69 6d 70 5f 5f 52 74  | __RtlDebugPrintTimes@0.__imp__Rt | 
| 23d60 |  6c 44 65 63 6f 64 65 50 6f 69 6e 74 65 72 40 34    00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 63 6f 64  | lDecodePointer@4.__imp__RtlDecod | 
| 23d80 |  65 53 79 73 74 65 6d 50 6f 69 6e 74 65 72 40 34    00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 63 6f 6d  | eSystemPointer@4.__imp__RtlDecom | 
| 23da0 |  70 72 65 73 73 42 75 66 66 65 72 40 32 34 00 5f    5f 69 6d 70 5f 5f 52 74 6c 44 65 63 6f 6d 70 72  | pressBuffer@24.__imp__RtlDecompr | 
| 23dc0 |  65 73 73 46 72 61 67 6d 65 6e 74 40 33 32 00 5f    5f 69 6d 70 5f 5f 52 74 6c 44 65 66 61 75 6c 74  | essFragment@32.__imp__RtlDefault | 
| 23de0 |  4e 70 41 63 6c 40 34 00 5f 5f 69 6d 70 5f 5f 52    74 6c 44 65 6c 65 74 65 40 34 00 5f 5f 69 6d 70  | NpAcl@4.__imp__RtlDelete@4.__imp | 
| 23e00 |  5f 5f 52 74 6c 44 65 6c 65 74 65 41 63 65 40 38    00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 6c 65 74  | __RtlDeleteAce@8.__imp__RtlDelet | 
| 23e20 |  65 41 74 6f 6d 46 72 6f 6d 41 74 6f 6d 54 61 62    6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44  | eAtomFromAtomTable@8.__imp__RtlD | 
| 23e40 |  65 6c 65 74 65 43 72 69 74 69 63 61 6c 53 65 63    74 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | eleteCriticalSection@4.__imp__Rt | 
| 23e60 |  6c 44 65 6c 65 74 65 45 6c 65 6d 65 6e 74 47 65    6e 65 72 69 63 54 61 62 6c 65 40 38 00 5f 5f 69  | lDeleteElementGenericTable@8.__i | 
| 23e80 |  6d 70 5f 5f 52 74 6c 44 65 6c 65 74 65 45 6c 65    6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65  | mp__RtlDeleteElementGenericTable | 
| 23ea0 |  41 76 6c 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c    44 65 6c 65 74 65 4e 6f 53 70 6c 61 79 40 38 00  | Avl@8.__imp__RtlDeleteNoSplay@8. | 
| 23ec0 |  5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 6c 65 74 65    52 65 67 69 73 74 72 79 56 61 6c 75 65 40 31 32  | __imp__RtlDeleteRegistryValue@12 | 
| 23ee0 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 6c 65 74    65 52 65 73 6f 75 72 63 65 40 34 00 5f 5f 69 6d  | .__imp__RtlDeleteResource@4.__im | 
| 23f00 |  70 5f 5f 52 74 6c 44 65 6c 65 74 65 53 65 63 75    72 69 74 79 4f 62 6a 65 63 74 40 34 00 5f 5f 69  | p__RtlDeleteSecurityObject@4.__i | 
| 23f20 |  6d 70 5f 5f 52 74 6c 44 65 6c 65 74 65 54 69 6d    65 72 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | mp__RtlDeleteTimer@12.__imp__Rtl | 
| 23f40 |  44 65 6c 65 74 65 54 69 6d 65 72 51 75 65 75 65    40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 6c  | DeleteTimerQueue@4.__imp__RtlDel | 
| 23f60 |  65 74 65 54 69 6d 65 72 51 75 65 75 65 45 78 40    38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 72 65  | eteTimerQueueEx@8.__imp__RtlDere | 
| 23f80 |  67 69 73 74 65 72 57 61 69 74 40 34 00 5f 5f 69    6d 70 5f 5f 52 74 6c 44 65 72 65 67 69 73 74 65  | gisterWait@4.__imp__RtlDeregiste | 
| 23fa0 |  72 57 61 69 74 45 78 40 38 00 5f 5f 69 6d 70 5f    5f 52 74 6c 44 65 73 74 72 6f 79 41 74 6f 6d 54  | rWaitEx@8.__imp__RtlDestroyAtomT | 
| 23fc0 |  61 62 6c 65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74    6c 44 65 73 74 72 6f 79 45 6e 76 69 72 6f 6e 6d  | able@4.__imp__RtlDestroyEnvironm | 
| 23fe0 |  65 6e 74 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c    44 65 73 74 72 6f 79 48 61 6e 64 6c 65 54 61 62  | ent@4.__imp__RtlDestroyHandleTab | 
| 24000 |  6c 65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44    65 73 74 72 6f 79 48 65 61 70 40 34 00 5f 5f 69  | le@4.__imp__RtlDestroyHeap@4.__i | 
| 24020 |  6d 70 5f 5f 52 74 6c 44 65 73 74 72 6f 79 50 72    6f 63 65 73 73 50 61 72 61 6d 65 74 65 72 73 40  | mp__RtlDestroyProcessParameters@ | 
| 24040 |  34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 65 73 74    72 6f 79 51 75 65 72 79 44 65 62 75 67 42 75 66  | 4.__imp__RtlDestroyQueryDebugBuf | 
| 24060 |  66 65 72 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c    44 65 74 65 72 6d 69 6e 65 44 6f 73 50 61 74 68  | fer@4.__imp__RtlDetermineDosPath | 
| 24080 |  4e 61 6d 65 54 79 70 65 5f 55 40 34 00 5f 5f 69    6d 70 5f 5f 52 74 6c 44 6c 6c 53 68 75 74 64 6f  | NameType_U@4.__imp__RtlDllShutdo | 
| 240a0 |  77 6e 49 6e 50 72 6f 67 72 65 73 73 40 30 00 5f    5f 69 6d 70 5f 5f 52 74 6c 44 6e 73 48 6f 73 74  | wnInProgress@0.__imp__RtlDnsHost | 
| 240c0 |  4e 61 6d 65 54 6f 43 6f 6d 70 75 74 65 72 4e 61    6d 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | NameToComputerName@12.__imp__Rtl | 
| 240e0 |  44 6f 65 73 46 69 6c 65 45 78 69 73 74 73 5f 55    40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 6f 73  | DoesFileExists_U@4.__imp__RtlDos | 
| 24100 |  41 70 70 6c 79 46 69 6c 65 49 73 6f 6c 61 74 69    6f 6e 52 65 64 69 72 65 63 74 69 6f 6e 5f 55 73  | ApplyFileIsolationRedirection_Us | 
| 24120 |  74 72 40 33 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c    44 6f 73 50 61 74 68 4e 61 6d 65 54 6f 4e 74 50  | tr@36.__imp__RtlDosPathNameToNtP | 
| 24140 |  61 74 68 4e 61 6d 65 5f 55 40 31 36 00 5f 5f 69    6d 70 5f 5f 52 74 6c 44 6f 73 50 61 74 68 4e 61  | athName_U@16.__imp__RtlDosPathNa | 
| 24160 |  6d 65 54 6f 4e 74 50 61 74 68 4e 61 6d 65 5f 55    5f 57 69 74 68 53 74 61 74 75 73 40 31 36 00 5f  | meToNtPathName_U_WithStatus@16._ | 
| 24180 |  5f 69 6d 70 5f 5f 52 74 6c 44 6f 73 50 61 74 68    4e 61 6d 65 54 6f 52 65 6c 61 74 69 76 65 4e 74  | _imp__RtlDosPathNameToRelativeNt | 
| 241a0 |  50 61 74 68 4e 61 6d 65 5f 55 40 31 36 00 5f 5f    69 6d 70 5f 5f 52 74 6c 44 6f 73 50 61 74 68 4e  | PathName_U@16.__imp__RtlDosPathN | 
| 241c0 |  61 6d 65 54 6f 52 65 6c 61 74 69 76 65 4e 74 50    61 74 68 4e 61 6d 65 5f 55 5f 57 69 74 68 53 74  | ameToRelativeNtPathName_U_WithSt | 
| 241e0 |  61 74 75 73 40 31 36 00 5f 5f 69 6d 70 5f 5f 52    74 6c 44 6f 73 53 65 61 72 63 68 50 61 74 68 5f  | atus@16.__imp__RtlDosSearchPath_ | 
| 24200 |  55 40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44    6f 73 53 65 61 72 63 68 50 61 74 68 5f 55 73 74  | U@24.__imp__RtlDosSearchPath_Ust | 
| 24220 |  72 40 33 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44    6f 77 6e 63 61 73 65 55 6e 69 63 6f 64 65 43 68  | r@36.__imp__RtlDowncaseUnicodeCh | 
| 24240 |  61 72 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 44    6f 77 6e 63 61 73 65 55 6e 69 63 6f 64 65 53 74  | ar@4.__imp__RtlDowncaseUnicodeSt | 
| 24260 |  72 69 6e 67 40 31 32 00 5f 5f 69 6d 70 5f 5f 52    74 6c 44 75 6d 70 52 65 73 6f 75 72 63 65 40 34  | ring@12.__imp__RtlDumpResource@4 | 
| 24280 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 44 75 70 6c 69    63 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e  | .__imp__RtlDuplicateUnicodeStrin | 
| 242a0 |  67 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 45    6d 70 74 79 41 74 6f 6d 54 61 62 6c 65 40 38 00  | g@12.__imp__RtlEmptyAtomTable@8. | 
| 242c0 |  5f 5f 69 6d 70 5f 5f 52 74 6c 45 6e 61 62 6c 65    45 61 72 6c 79 43 72 69 74 69 63 61 6c 53 65 63  | __imp__RtlEnableEarlyCriticalSec | 
| 242e0 |  74 69 6f 6e 45 76 65 6e 74 43 72 65 61 74 69 6f    6e 40 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 6e  | tionEventCreation@0.__imp__RtlEn | 
| 24300 |  63 6f 64 65 50 6f 69 6e 74 65 72 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 45 6e 63 6f 64 65 53 79  | codePointer@4.__imp__RtlEncodeSy | 
| 24320 |  73 74 65 6d 50 6f 69 6e 74 65 72 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 45 6e 6c 61 72 67 65 64  | stemPointer@4.__imp__RtlEnlarged | 
| 24340 |  49 6e 74 65 67 65 72 4d 75 6c 74 69 70 6c 79 40    38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 6e 6c 61  | IntegerMultiply@8.__imp__RtlEnla | 
| 24360 |  72 67 65 64 55 6e 73 69 67 6e 65 64 44 69 76 69    64 65 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | rgedUnsignedDivide@16.__imp__Rtl | 
| 24380 |  45 6e 6c 61 72 67 65 64 55 6e 73 69 67 6e 65 64    4d 75 6c 74 69 70 6c 79 40 38 00 5f 5f 69 6d 70  | EnlargedUnsignedMultiply@8.__imp | 
| 243a0 |  5f 5f 52 74 6c 45 6e 74 65 72 43 72 69 74 69 63    61 6c 53 65 63 74 69 6f 6e 40 34 00 5f 5f 69 6d  | __RtlEnterCriticalSection@4.__im | 
| 243c0 |  70 5f 5f 52 74 6c 45 6e 75 6d 50 72 6f 63 65 73    73 48 65 61 70 73 40 38 00 5f 5f 69 6d 70 5f 5f  | p__RtlEnumProcessHeaps@8.__imp__ | 
| 243e0 |  52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e 65    72 69 63 54 61 62 6c 65 40 38 00 5f 5f 69 6d 70  | RtlEnumerateGenericTable@8.__imp | 
| 24400 |  5f 5f 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65    6e 65 72 69 63 54 61 62 6c 65 41 76 6c 40 38 00  | __RtlEnumerateGenericTableAvl@8. | 
| 24420 |  5f 5f 69 6d 70 5f 5f 52 74 6c 45 6e 75 6d 65 72    61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65 4c  | __imp__RtlEnumerateGenericTableL | 
| 24440 |  69 6b 65 41 44 69 72 65 63 74 6f 72 79 40 32 38    00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 6e 75 6d 65  | ikeADirectory@28.__imp__RtlEnume | 
| 24460 |  72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c 65    57 69 74 68 6f 75 74 53 70 6c 61 79 69 6e 67 40  | rateGenericTableWithoutSplaying@ | 
| 24480 |  38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 6e 75 6d    65 72 61 74 65 47 65 6e 65 72 69 63 54 61 62 6c  | 8.__imp__RtlEnumerateGenericTabl | 
| 244a0 |  65 57 69 74 68 6f 75 74 53 70 6c 61 79 69 6e 67    41 76 6c 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | eWithoutSplayingAvl@8.__imp__Rtl | 
| 244c0 |  45 71 75 61 6c 43 6f 6d 70 75 74 65 72 4e 61 6d    65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 71  | EqualComputerName@8.__imp__RtlEq | 
| 244e0 |  75 61 6c 44 6f 6d 61 69 6e 4e 61 6d 65 40 38 00    5f 5f 69 6d 70 5f 5f 52 74 6c 45 71 75 61 6c 4c  | ualDomainName@8.__imp__RtlEqualL | 
| 24500 |  75 69 64 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c    45 71 75 61 6c 50 72 65 66 69 78 53 69 64 40 38  | uid@8.__imp__RtlEqualPrefixSid@8 | 
| 24520 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 71 75 61 6c    53 69 64 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | .__imp__RtlEqualSid@8.__imp__Rtl | 
| 24540 |  45 71 75 61 6c 53 74 72 69 6e 67 40 31 32 00 5f    5f 69 6d 70 5f 5f 52 74 6c 45 71 75 61 6c 55 6e  | EqualString@12.__imp__RtlEqualUn | 
| 24560 |  69 63 6f 64 65 53 74 72 69 6e 67 40 31 32 00 5f    5f 69 6d 70 5f 5f 52 74 6c 45 72 61 73 65 55 6e  | icodeString@12.__imp__RtlEraseUn | 
| 24580 |  69 63 6f 64 65 53 74 72 69 6e 67 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 45 78 69 74 55 73 65 72  | icodeString@4.__imp__RtlExitUser | 
| 245a0 |  54 68 72 65 61 64 40 34 00 5f 5f 69 6d 70 5f 5f    52 74 6c 45 78 70 61 6e 64 45 6e 76 69 72 6f 6e  | Thread@4.__imp__RtlExpandEnviron | 
| 245c0 |  6d 65 6e 74 53 74 72 69 6e 67 73 5f 55 40 31 36    00 5f 5f 69 6d 70 5f 5f 52 74 6c 45 78 74 65 6e  | mentStrings_U@16.__imp__RtlExten | 
| 245e0 |  64 48 65 61 70 40 31 36 00 5f 5f 69 6d 70 5f 5f    52 74 6c 45 78 74 65 6e 64 65 64 49 6e 74 65 67  | dHeap@16.__imp__RtlExtendedInteg | 
| 24600 |  65 72 4d 75 6c 74 69 70 6c 79 40 31 32 00 5f 5f    69 6d 70 5f 5f 52 74 6c 45 78 74 65 6e 64 65 64  | erMultiply@12.__imp__RtlExtended | 
| 24620 |  4c 61 72 67 65 49 6e 74 65 67 65 72 44 69 76 69    64 65 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | LargeIntegerDivide@16.__imp__Rtl | 
| 24640 |  45 78 74 65 6e 64 65 64 4d 61 67 69 63 44 69 76    69 64 65 40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74  | ExtendedMagicDivide@20.__imp__Rt | 
| 24660 |  6c 46 69 6c 6c 4d 65 6d 6f 72 79 40 31 32 00 5f    5f 69 6d 70 5f 5f 52 74 6c 46 69 6c 6c 4d 65 6d  | lFillMemory@12.__imp__RtlFillMem | 
| 24680 |  6f 72 79 55 6c 6f 6e 67 40 31 32 00 5f 5f 69 6d    70 5f 5f 52 74 6c 46 69 6e 61 6c 52 65 6c 65 61  | oryUlong@12.__imp__RtlFinalRelea | 
| 246a0 |  73 65 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65    6d 6f 72 79 53 74 72 65 61 6d 40 34 00 5f 5f 69  | seOutOfProcessMemoryStream@4.__i | 
| 246c0 |  6d 70 5f 5f 52 74 6c 46 69 6e 64 41 63 74 69 76    61 74 69 6f 6e 43 6f 6e 74 65 78 74 53 65 63 74  | mp__RtlFindActivationContextSect | 
| 246e0 |  69 6f 6e 47 75 69 64 40 32 30 00 5f 5f 69 6d 70    5f 5f 52 74 6c 46 69 6e 64 41 63 74 69 76 61 74  | ionGuid@20.__imp__RtlFindActivat | 
| 24700 |  69 6f 6e 43 6f 6e 74 65 78 74 53 65 63 74 69 6f    6e 53 74 72 69 6e 67 40 32 30 00 5f 5f 69 6d 70  | ionContextSectionString@20.__imp | 
| 24720 |  5f 5f 52 74 6c 46 69 6e 64 43 68 61 72 49 6e 55    6e 69 63 6f 64 65 53 74 72 69 6e 67 40 31 36 00  | __RtlFindCharInUnicodeString@16. | 
| 24740 |  5f 5f 69 6d 70 5f 5f 52 74 6c 46 69 6e 64 43 6c    65 61 72 42 69 74 73 40 31 32 00 5f 5f 69 6d 70  | __imp__RtlFindClearBits@12.__imp | 
| 24760 |  5f 5f 52 74 6c 46 69 6e 64 43 6c 65 61 72 42 69    74 73 41 6e 64 53 65 74 40 31 32 00 5f 5f 69 6d  | __RtlFindClearBitsAndSet@12.__im | 
| 24780 |  70 5f 5f 52 74 6c 46 69 6e 64 43 6c 65 61 72 52    75 6e 73 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74  | p__RtlFindClearRuns@16.__imp__Rt | 
| 247a0 |  6c 46 69 6e 64 4c 61 73 74 42 61 63 6b 77 61 72    64 52 75 6e 43 6c 65 61 72 40 31 32 00 5f 5f 69  | lFindLastBackwardRunClear@12.__i | 
| 247c0 |  6d 70 5f 5f 52 74 6c 46 69 6e 64 4c 65 61 73 74    53 69 67 6e 69 66 69 63 61 6e 74 42 69 74 40 38  | mp__RtlFindLeastSignificantBit@8 | 
| 247e0 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 69 6e 64 4c    6f 6e 67 65 73 74 52 75 6e 43 6c 65 61 72 40 38  | .__imp__RtlFindLongestRunClear@8 | 
| 24800 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 69 6e 64 4d    65 73 73 61 67 65 40 32 30 00 5f 5f 69 6d 70 5f  | .__imp__RtlFindMessage@20.__imp_ | 
| 24820 |  5f 52 74 6c 46 69 6e 64 4d 6f 73 74 53 69 67 6e    69 66 69 63 61 6e 74 42 69 74 40 38 00 5f 5f 69  | _RtlFindMostSignificantBit@8.__i | 
| 24840 |  6d 70 5f 5f 52 74 6c 46 69 6e 64 4e 65 78 74 46    6f 72 77 61 72 64 52 75 6e 43 6c 65 61 72 40 31  | mp__RtlFindNextForwardRunClear@1 | 
| 24860 |  32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 69 6e 64    53 65 74 42 69 74 73 40 31 32 00 5f 5f 69 6d 70  | 2.__imp__RtlFindSetBits@12.__imp | 
| 24880 |  5f 5f 52 74 6c 46 69 6e 64 53 65 74 42 69 74 73    41 6e 64 43 6c 65 61 72 40 31 32 00 5f 5f 69 6d  | __RtlFindSetBitsAndClear@12.__im | 
| 248a0 |  70 5f 5f 52 74 6c 46 69 72 73 74 45 6e 74 72 79    53 4c 69 73 74 40 34 00 5f 5f 69 6d 70 5f 5f 52  | p__RtlFirstEntrySList@4.__imp__R | 
| 248c0 |  74 6c 46 69 72 73 74 46 72 65 65 41 63 65 40 38    00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 6c 75 73 68  | tlFirstFreeAce@8.__imp__RtlFlush | 
| 248e0 |  53 65 63 75 72 65 4d 65 6d 6f 72 79 43 61 63 68    65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 6f  | SecureMemoryCache@8.__imp__RtlFo | 
| 24900 |  72 6d 61 74 43 75 72 72 65 6e 74 55 73 65 72 4b    65 79 50 61 74 68 40 34 00 5f 5f 69 6d 70 5f 5f  | rmatCurrentUserKeyPath@4.__imp__ | 
| 24920 |  52 74 6c 46 6f 72 6d 61 74 4d 65 73 73 61 67 65    40 33 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 6f  | RtlFormatMessage@36.__imp__RtlFo | 
| 24940 |  72 6d 61 74 4d 65 73 73 61 67 65 45 78 40 34 30    00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 72 65 65 41  | rmatMessageEx@40.__imp__RtlFreeA | 
| 24960 |  63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74    53 74 61 63 6b 40 34 00 5f 5f 69 6d 70 5f 5f 52  | ctivationContextStack@4.__imp__R | 
| 24980 |  74 6c 46 72 65 65 41 6e 73 69 53 74 72 69 6e 67    40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 46 72 65  | tlFreeAnsiString@4.__imp__RtlFre | 
| 249a0 |  65 48 61 6e 64 6c 65 40 38 00 5f 5f 69 6d 70 5f    5f 52 74 6c 46 72 65 65 48 65 61 70 40 31 32 00  | eHandle@8.__imp__RtlFreeHeap@12. | 
| 249c0 |  5f 5f 69 6d 70 5f 5f 52 74 6c 46 72 65 65 4f 65    6d 53 74 72 69 6e 67 40 34 00 5f 5f 69 6d 70 5f  | __imp__RtlFreeOemString@4.__imp_ | 
| 249e0 |  5f 52 74 6c 46 72 65 65 53 69 64 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 46 72 65 65 54 68 72 65  | _RtlFreeSid@4.__imp__RtlFreeThre | 
| 24a00 |  61 64 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74    65 78 74 53 74 61 63 6b 40 30 00 5f 5f 69 6d 70  | adActivationContextStack@0.__imp | 
| 24a20 |  5f 5f 52 74 6c 46 72 65 65 55 6e 69 63 6f 64 65    53 74 72 69 6e 67 40 34 00 5f 5f 69 6d 70 5f 5f  | __RtlFreeUnicodeString@4.__imp__ | 
| 24a40 |  52 74 6c 46 72 65 65 55 73 65 72 54 68 72 65 61    64 53 74 61 63 6b 40 38 00 5f 5f 69 6d 70 5f 5f  | RtlFreeUserThreadStack@8.__imp__ | 
| 24a60 |  52 74 6c 47 55 49 44 46 72 6f 6d 53 74 72 69 6e    67 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65  | RtlGUIDFromString@8.__imp__RtlGe | 
| 24a80 |  6e 65 72 61 74 65 38 64 6f 74 33 4e 61 6d 65 40    31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74  | nerate8dot3Name@16.__imp__RtlGet | 
| 24aa0 |  41 63 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74    6c 47 65 74 41 63 74 69 76 65 41 63 74 69 76 61  | Ace@12.__imp__RtlGetActiveActiva | 
| 24ac0 |  74 69 6f 6e 43 6f 6e 74 65 78 74 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 47 65 74 43 61 6c 6c 65  | tionContext@4.__imp__RtlGetCalle | 
| 24ae0 |  72 73 41 64 64 72 65 73 73 40 38 00 5f 5f 69 6d    70 5f 5f 52 74 6c 47 65 74 43 6f 6d 70 72 65 73  | rsAddress@8.__imp__RtlGetCompres | 
| 24b00 |  73 69 6f 6e 57 6f 72 6b 53 70 61 63 65 53 69 7a    65 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47  | sionWorkSpaceSize@12.__imp__RtlG | 
| 24b20 |  65 74 43 6f 6e 74 72 6f 6c 53 65 63 75 72 69 74    79 44 65 73 63 72 69 70 74 6f 72 40 31 32 00 5f  | etControlSecurityDescriptor@12._ | 
| 24b40 |  5f 69 6d 70 5f 5f 52 74 6c 47 65 74 43 72 69 74    69 63 61 6c 53 65 63 74 69 6f 6e 52 65 63 75 72  | _imp__RtlGetCriticalSectionRecur | 
| 24b60 |  73 69 6f 6e 43 6f 75 6e 74 40 34 00 5f 5f 69 6d    70 5f 5f 52 74 6c 47 65 74 43 75 72 72 65 6e 74  | sionCount@4.__imp__RtlGetCurrent | 
| 24b80 |  44 69 72 65 63 74 6f 72 79 5f 55 40 38 00 5f 5f    69 6d 70 5f 5f 52 74 6c 47 65 74 43 75 72 72 65  | Directory_U@8.__imp__RtlGetCurre | 
| 24ba0 |  6e 74 50 65 62 40 30 00 5f 5f 69 6d 70 5f 5f 52    74 6c 47 65 74 43 75 72 72 65 6e 74 50 72 6f 63  | ntPeb@0.__imp__RtlGetCurrentProc | 
| 24bc0 |  65 73 73 6f 72 4e 75 6d 62 65 72 40 30 00 5f 5f    69 6d 70 5f 5f 52 74 6c 47 65 74 44 61 63 6c 53  | essorNumber@0.__imp__RtlGetDaclS | 
| 24be0 |  65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f    72 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47  | ecurityDescriptor@16.__imp__RtlG | 
| 24c00 |  65 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63    54 61 62 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 52  | etElementGenericTable@8.__imp__R | 
| 24c20 |  74 6c 47 65 74 45 6c 65 6d 65 6e 74 47 65 6e 65    72 69 63 54 61 62 6c 65 41 76 6c 40 38 00 5f 5f  | tlGetElementGenericTableAvl@8.__ | 
| 24c40 |  69 6d 70 5f 5f 52 74 6c 47 65 74 46 72 61 6d 65    40 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74  | imp__RtlGetFrame@0.__imp__RtlGet | 
| 24c60 |  46 75 6c 6c 50 61 74 68 4e 61 6d 65 5f 55 40 31    36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74 46  | FullPathName_U@16.__imp__RtlGetF | 
| 24c80 |  75 6c 6c 50 61 74 68 4e 61 6d 65 5f 55 73 74 72    45 78 40 33 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | ullPathName_UstrEx@32.__imp__Rtl | 
| 24ca0 |  47 65 74 47 72 6f 75 70 53 65 63 75 72 69 74 79    44 65 73 63 72 69 70 74 6f 72 40 31 32 00 5f 5f  | GetGroupSecurityDescriptor@12.__ | 
| 24cc0 |  69 6d 70 5f 5f 52 74 6c 47 65 74 4c 61 73 74 4e    74 53 74 61 74 75 73 40 30 00 5f 5f 69 6d 70 5f  | imp__RtlGetLastNtStatus@0.__imp_ | 
| 24ce0 |  5f 52 74 6c 47 65 74 4c 61 73 74 57 69 6e 33 32    45 72 72 6f 72 40 30 00 5f 5f 69 6d 70 5f 5f 52  | _RtlGetLastWin32Error@0.__imp__R | 
| 24d00 |  74 6c 47 65 74 4c 65 6e 67 74 68 57 69 74 68 6f    75 74 4c 61 73 74 46 75 6c 6c 44 6f 73 4f 72 4e  | tlGetLengthWithoutLastFullDosOrN | 
| 24d20 |  74 50 61 74 68 45 6c 65 6d 65 6e 74 40 31 32 00    5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74 4c 65 6e  | tPathElement@12.__imp__RtlGetLen | 
| 24d40 |  67 74 68 57 69 74 68 6f 75 74 54 72 61 69 6c 69    6e 67 50 61 74 68 53 65 70 65 72 61 74 6f 72 73  | gthWithoutTrailingPathSeperators | 
| 24d60 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65    74 4c 6f 6e 67 65 73 74 4e 74 50 61 74 68 4c 65  | @12.__imp__RtlGetLongestNtPathLe | 
| 24d80 |  6e 67 74 68 40 30 00 5f 5f 69 6d 70 5f 5f 52 74    6c 47 65 74 4e 61 74 69 76 65 53 79 73 74 65 6d  | ngth@0.__imp__RtlGetNativeSystem | 
| 24da0 |  49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 5f    5f 69 6d 70 5f 5f 52 74 6c 47 65 74 4e 74 47 6c  | Information@16.__imp__RtlGetNtGl | 
| 24dc0 |  6f 62 61 6c 46 6c 61 67 73 40 30 00 5f 5f 69 6d    70 5f 5f 52 74 6c 47 65 74 4e 74 50 72 6f 64 75  | obalFlags@0.__imp__RtlGetNtProdu | 
| 24de0 |  63 74 54 79 70 65 40 34 00 5f 5f 69 6d 70 5f 5f    52 74 6c 47 65 74 4e 74 56 65 72 73 69 6f 6e 4e  | ctType@4.__imp__RtlGetNtVersionN | 
| 24e00 |  75 6d 62 65 72 73 40 31 32 00 5f 5f 69 6d 70 5f    5f 52 74 6c 47 65 74 4f 77 6e 65 72 53 65 63 75  | umbers@12.__imp__RtlGetOwnerSecu | 
| 24e20 |  72 69 74 79 44 65 73 63 72 69 70 74 6f 72 40 31    32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74 50  | rityDescriptor@12.__imp__RtlGetP | 
| 24e40 |  72 6f 63 65 73 73 48 65 61 70 73 40 38 00 5f 5f    69 6d 70 5f 5f 52 74 6c 47 65 74 53 61 63 6c 53  | rocessHeaps@8.__imp__RtlGetSaclS | 
| 24e60 |  65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f    72 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47  | ecurityDescriptor@16.__imp__RtlG | 
| 24e80 |  65 74 53 65 63 75 72 69 74 79 44 65 73 63 72 69    70 74 6f 72 52 4d 43 6f 6e 74 72 6f 6c 40 38 00  | etSecurityDescriptorRMControl@8. | 
| 24ea0 |  5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74 53 65 74    42 6f 6f 74 53 74 61 74 75 73 44 61 74 61 40 32  | __imp__RtlGetSetBootStatusData@2 | 
| 24ec0 |  34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74 54    68 72 65 61 64 45 72 72 6f 72 4d 6f 64 65 40 30  | 4.__imp__RtlGetThreadErrorMode@0 | 
| 24ee0 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74 55 6e    6c 6f 61 64 45 76 65 6e 74 54 72 61 63 65 40 30  | .__imp__RtlGetUnloadEventTrace@0 | 
| 24f00 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 47 65 74 55 73    65 72 49 6e 66 6f 48 65 61 70 40 32 30 00 5f 5f  | .__imp__RtlGetUserInfoHeap@20.__ | 
| 24f20 |  69 6d 70 5f 5f 52 74 6c 47 65 74 56 65 72 73 69    6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 48  | imp__RtlGetVersion@4.__imp__RtlH | 
| 24f40 |  61 73 68 55 6e 69 63 6f 64 65 53 74 72 69 6e 67    40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 64  | ashUnicodeString@16.__imp__RtlId | 
| 24f60 |  65 6e 74 69 66 69 65 72 41 75 74 68 6f 72 69 74    79 53 69 64 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | entifierAuthoritySid@4.__imp__Rt | 
| 24f80 |  6c 49 6d 61 67 65 44 69 72 65 63 74 6f 72 79 45    6e 74 72 79 54 6f 44 61 74 61 40 31 36 00 5f 5f  | lImageDirectoryEntryToData@16.__ | 
| 24fa0 |  69 6d 70 5f 5f 52 74 6c 49 6d 61 67 65 4e 74 48    65 61 64 65 72 40 34 00 5f 5f 69 6d 70 5f 5f 52  | imp__RtlImageNtHeader@4.__imp__R | 
| 24fc0 |  74 6c 49 6d 61 67 65 4e 74 48 65 61 64 65 72 45    78 40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49  | tlImageNtHeaderEx@20.__imp__RtlI | 
| 24fe0 |  6d 61 67 65 52 76 61 54 6f 53 65 63 74 69 6f 6e    40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6d  | mageRvaToSection@12.__imp__RtlIm | 
| 25000 |  61 67 65 52 76 61 54 6f 56 61 40 31 36 00 5f 5f    69 6d 70 5f 5f 52 74 6c 49 6d 70 65 72 73 6f 6e  | ageRvaToVa@16.__imp__RtlImperson | 
| 25020 |  61 74 65 53 65 6c 66 40 34 00 5f 5f 69 6d 70 5f    5f 52 74 6c 49 6e 69 74 41 6e 73 69 53 74 72 69  | ateSelf@4.__imp__RtlInitAnsiStri | 
| 25040 |  6e 67 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49    6e 69 74 41 6e 73 69 53 74 72 69 6e 67 45 78 40  | ng@8.__imp__RtlInitAnsiStringEx@ | 
| 25060 |  38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 69 74    43 6f 64 65 50 61 67 65 54 61 62 6c 65 40 38 00  | 8.__imp__RtlInitCodePageTable@8. | 
| 25080 |  5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 69 74 4d 65    6d 6f 72 79 53 74 72 65 61 6d 40 34 00 5f 5f 69  | __imp__RtlInitMemoryStream@4.__i | 
| 250a0 |  6d 70 5f 5f 52 74 6c 49 6e 69 74 4e 6c 73 54 61    62 6c 65 73 40 31 36 00 5f 5f 69 6d 70 5f 5f 52  | mp__RtlInitNlsTables@16.__imp__R | 
| 250c0 |  74 6c 49 6e 69 74 4f 75 74 4f 66 50 72 6f 63 65    73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d 40 34  | tlInitOutOfProcessMemoryStream@4 | 
| 250e0 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 69 74 53    74 72 69 6e 67 40 38 00 5f 5f 69 6d 70 5f 5f 52  | .__imp__RtlInitString@8.__imp__R | 
| 25100 |  74 6c 49 6e 69 74 55 6e 69 63 6f 64 65 53 74 72    69 6e 67 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | tlInitUnicodeString@8.__imp__Rtl | 
| 25120 |  49 6e 69 74 55 6e 69 63 6f 64 65 53 74 72 69 6e    67 45 78 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | InitUnicodeStringEx@8.__imp__Rtl | 
| 25140 |  49 6e 69 74 69 61 6c 69 7a 65 41 74 6f 6d 50 61    63 6b 61 67 65 40 34 00 5f 5f 69 6d 70 5f 5f 52  | InitializeAtomPackage@4.__imp__R | 
| 25160 |  74 6c 49 6e 69 74 69 61 6c 69 7a 65 42 69 74 4d    61 70 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | tlInitializeBitMap@12.__imp__Rtl | 
| 25180 |  49 6e 69 74 69 61 6c 69 7a 65 43 6f 6e 74 65 78    74 40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49  | InitializeContext@20.__imp__RtlI | 
| 251a0 |  6e 69 74 69 61 6c 69 7a 65 43 72 69 74 69 63 61    6c 53 65 63 74 69 6f 6e 40 34 00 5f 5f 69 6d 70  | nitializeCriticalSection@4.__imp | 
| 251c0 |  5f 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 43    72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 41 6e  | __RtlInitializeCriticalSectionAn | 
| 251e0 |  64 53 70 69 6e 43 6f 75 6e 74 40 38 00 5f 5f 69    6d 70 5f 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a  | dSpinCount@8.__imp__RtlInitializ | 
| 25200 |  65 47 65 6e 65 72 69 63 54 61 62 6c 65 40 32 30    00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 69 74 69  | eGenericTable@20.__imp__RtlIniti | 
| 25220 |  61 6c 69 7a 65 47 65 6e 65 72 69 63 54 61 62 6c    65 41 76 6c 40 32 30 00 5f 5f 69 6d 70 5f 5f 52  | alizeGenericTableAvl@20.__imp__R | 
| 25240 |  74 6c 49 6e 69 74 69 61 6c 69 7a 65 48 61 6e 64    6c 65 54 61 62 6c 65 40 31 32 00 5f 5f 69 6d 70  | tlInitializeHandleTable@12.__imp | 
| 25260 |  5f 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 52    58 61 63 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 52  | __RtlInitializeRXact@12.__imp__R | 
| 25280 |  74 6c 49 6e 69 74 69 61 6c 69 7a 65 52 65 73 6f    75 72 63 65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | tlInitializeResource@4.__imp__Rt | 
| 252a0 |  6c 49 6e 69 74 69 61 6c 69 7a 65 53 4c 69 73 74    48 65 61 64 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | lInitializeSListHead@4.__imp__Rt | 
| 252c0 |  6c 49 6e 69 74 69 61 6c 69 7a 65 53 69 64 40 31    32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 73 65  | lInitializeSid@12.__imp__RtlInse | 
| 252e0 |  72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63    54 61 62 6c 65 40 31 36 00 5f 5f 69 6d 70 5f 5f  | rtElementGenericTable@16.__imp__ | 
| 25300 |  52 74 6c 49 6e 73 65 72 74 45 6c 65 6d 65 6e 74    47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 40  | RtlInsertElementGenericTableAvl@ | 
| 25320 |  31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 6e 73    65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69  | 16.__imp__RtlInsertElementGeneri | 
| 25340 |  63 54 61 62 6c 65 46 75 6c 6c 40 32 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 49 6e 73 65 72 74 45 6c  | cTableFull@24.__imp__RtlInsertEl | 
| 25360 |  65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c    65 46 75 6c 6c 41 76 6c 40 32 34 00 5f 5f 69 6d  | ementGenericTableFullAvl@24.__im | 
| 25380 |  70 5f 5f 52 74 6c 49 6e 74 36 34 54 6f 55 6e 69    63 6f 64 65 53 74 72 69 6e 67 40 31 36 00 5f 5f  | p__RtlInt64ToUnicodeString@16.__ | 
| 253a0 |  69 6d 70 5f 5f 52 74 6c 49 6e 74 65 67 65 72 54    6f 43 68 61 72 40 31 36 00 5f 5f 69 6d 70 5f 5f  | imp__RtlIntegerToChar@16.__imp__ | 
| 253c0 |  52 74 6c 49 6e 74 65 67 65 72 54 6f 55 6e 69 63    6f 64 65 53 74 72 69 6e 67 40 31 32 00 5f 5f 69  | RtlIntegerToUnicodeString@12.__i | 
| 253e0 |  6d 70 5f 5f 52 74 6c 49 6e 74 65 72 6c 6f 63 6b    65 64 43 6f 6d 70 61 72 65 45 78 63 68 61 6e 67  | mp__RtlInterlockedCompareExchang | 
| 25400 |  65 36 34 40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74    6c 49 6e 74 65 72 6c 6f 63 6b 65 64 46 6c 75 73  | e64@20.__imp__RtlInterlockedFlus | 
| 25420 |  68 53 4c 69 73 74 40 34 00 5f 5f 69 6d 70 5f 5f    52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 50 6f  | hSList@4.__imp__RtlInterlockedPo | 
| 25440 |  70 45 6e 74 72 79 53 4c 69 73 74 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 49 6e 74 65 72 6c 6f 63  | pEntrySList@4.__imp__RtlInterloc | 
| 25460 |  6b 65 64 50 75 73 68 45 6e 74 72 79 53 4c 69 73    74 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 70  | kedPushEntrySList@8.__imp__RtlIp | 
| 25480 |  76 34 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e    67 41 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49  | v4AddressToStringA@8.__imp__RtlI | 
| 254a0 |  70 76 34 41 64 64 72 65 73 73 54 6f 53 74 72 69    6e 67 45 78 41 40 31 36 00 5f 5f 69 6d 70 5f 5f  | pv4AddressToStringExA@16.__imp__ | 
| 254c0 |  52 74 6c 49 70 76 34 41 64 64 72 65 73 73 54 6f    53 74 72 69 6e 67 45 78 57 40 31 36 00 5f 5f 69  | RtlIpv4AddressToStringExW@16.__i | 
| 254e0 |  6d 70 5f 5f 52 74 6c 49 70 76 34 41 64 64 72 65    73 73 54 6f 53 74 72 69 6e 67 57 40 38 00 5f 5f  | mp__RtlIpv4AddressToStringW@8.__ | 
| 25500 |  69 6d 70 5f 5f 52 74 6c 49 70 76 34 53 74 72 69    6e 67 54 6f 41 64 64 72 65 73 73 41 40 31 36 00  | imp__RtlIpv4StringToAddressA@16. | 
| 25520 |  5f 5f 69 6d 70 5f 5f 52 74 6c 49 70 76 34 53 74    72 69 6e 67 54 6f 41 64 64 72 65 73 73 45 78 41  | __imp__RtlIpv4StringToAddressExA | 
| 25540 |  40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 70    76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73  | @16.__imp__RtlIpv4StringToAddres | 
| 25560 |  73 45 78 57 40 31 36 00 5f 5f 69 6d 70 5f 5f 52    74 6c 49 70 76 34 53 74 72 69 6e 67 54 6f 41 64  | sExW@16.__imp__RtlIpv4StringToAd | 
| 25580 |  64 72 65 73 73 57 40 31 36 00 5f 5f 69 6d 70 5f    5f 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54  | dressW@16.__imp__RtlIpv6AddressT | 
| 255a0 |  6f 53 74 72 69 6e 67 41 40 38 00 5f 5f 69 6d 70    5f 5f 52 74 6c 49 70 76 36 41 64 64 72 65 73 73  | oStringA@8.__imp__RtlIpv6Address | 
| 255c0 |  54 6f 53 74 72 69 6e 67 45 78 41 40 32 30 00 5f    5f 69 6d 70 5f 5f 52 74 6c 49 70 76 36 41 64 64  | ToStringExA@20.__imp__RtlIpv6Add | 
| 255e0 |  72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 57 40    32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 70 76  | ressToStringExW@20.__imp__RtlIpv | 
| 25600 |  36 41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67    57 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 70  | 6AddressToStringW@8.__imp__RtlIp | 
| 25620 |  76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73    73 41 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | v6StringToAddressA@12.__imp__Rtl | 
| 25640 |  49 70 76 36 53 74 72 69 6e 67 54 6f 41 64 64 72    65 73 73 45 78 41 40 31 36 00 5f 5f 69 6d 70 5f  | Ipv6StringToAddressExA@16.__imp_ | 
| 25660 |  5f 52 74 6c 49 70 76 36 53 74 72 69 6e 67 54 6f    41 64 64 72 65 73 73 45 78 57 40 31 36 00 5f 5f  | _RtlIpv6StringToAddressExW@16.__ | 
| 25680 |  69 6d 70 5f 5f 52 74 6c 49 70 76 36 53 74 72 69    6e 67 54 6f 41 64 64 72 65 73 73 57 40 31 32 00  | imp__RtlIpv6StringToAddressW@12. | 
| 256a0 |  5f 5f 69 6d 70 5f 5f 52 74 6c 49 73 41 63 74 69    76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 41 63 74  | __imp__RtlIsActivationContextAct | 
| 256c0 |  69 76 65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c    49 73 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f  | ive@4.__imp__RtlIsCriticalSectio | 
| 256e0 |  6e 4c 6f 63 6b 65 64 40 34 00 5f 5f 69 6d 70 5f    5f 52 74 6c 49 73 43 72 69 74 69 63 61 6c 53 65  | nLocked@4.__imp__RtlIsCriticalSe | 
| 25700 |  63 74 69 6f 6e 4c 6f 63 6b 65 64 42 79 54 68 72    65 61 64 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | ctionLockedByThread@4.__imp__Rtl | 
| 25720 |  49 73 44 6f 73 44 65 76 69 63 65 4e 61 6d 65 5f    55 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 73  | IsDosDeviceName_U@4.__imp__RtlIs | 
| 25740 |  47 65 6e 65 72 69 63 54 61 62 6c 65 45 6d 70 74    79 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 73  | GenericTableEmpty@4.__imp__RtlIs | 
| 25760 |  47 65 6e 65 72 69 63 54 61 62 6c 65 45 6d 70 74    79 41 76 6c 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | GenericTableEmptyAvl@4.__imp__Rt | 
| 25780 |  6c 49 73 4e 61 6d 65 4c 65 67 61 6c 44 4f 53 38    44 6f 74 33 40 31 32 00 5f 5f 69 6d 70 5f 5f 52  | lIsNameLegalDOS8Dot3@12.__imp__R | 
| 257a0 |  74 6c 49 73 54 65 78 74 55 6e 69 63 6f 64 65 40    31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49 73 54  | tlIsTextUnicode@12.__imp__RtlIsT | 
| 257c0 |  68 72 65 61 64 57 69 74 68 69 6e 4c 6f 61 64 65    72 43 61 6c 6c 6f 75 74 40 30 00 5f 5f 69 6d 70  | hreadWithinLoaderCallout@0.__imp | 
| 257e0 |  5f 5f 52 74 6c 49 73 56 61 6c 69 64 48 61 6e 64    6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 49  | __RtlIsValidHandle@8.__imp__RtlI | 
| 25800 |  73 56 61 6c 69 64 49 6e 64 65 78 48 61 6e 64 6c    65 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c  | sValidIndexHandle@12.__imp__RtlL | 
| 25820 |  61 72 67 65 49 6e 74 65 67 65 72 41 64 64 40 31    36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c 61 72 67  | argeIntegerAdd@16.__imp__RtlLarg | 
| 25840 |  65 49 6e 74 65 67 65 72 41 72 69 74 68 6d 65 74    69 63 53 68 69 66 74 40 31 32 00 5f 5f 69 6d 70  | eIntegerArithmeticShift@12.__imp | 
| 25860 |  5f 5f 52 74 6c 4c 61 72 67 65 49 6e 74 65 67 65    72 44 69 76 69 64 65 40 32 30 00 5f 5f 69 6d 70  | __RtlLargeIntegerDivide@20.__imp | 
| 25880 |  5f 5f 52 74 6c 4c 61 72 67 65 49 6e 74 65 67 65    72 4e 65 67 61 74 65 40 38 00 5f 5f 69 6d 70 5f  | __RtlLargeIntegerNegate@8.__imp_ | 
| 258a0 |  5f 52 74 6c 4c 61 72 67 65 49 6e 74 65 67 65 72    53 68 69 66 74 4c 65 66 74 40 31 32 00 5f 5f 69  | _RtlLargeIntegerShiftLeft@12.__i | 
| 258c0 |  6d 70 5f 5f 52 74 6c 4c 61 72 67 65 49 6e 74 65    67 65 72 53 68 69 66 74 52 69 67 68 74 40 31 32  | mp__RtlLargeIntegerShiftRight@12 | 
| 258e0 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c 61 72 67 65    49 6e 74 65 67 65 72 53 75 62 74 72 61 63 74 40  | .__imp__RtlLargeIntegerSubtract@ | 
| 25900 |  31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c 61 72    67 65 49 6e 74 65 67 65 72 54 6f 43 68 61 72 40  | 16.__imp__RtlLargeIntegerToChar@ | 
| 25920 |  31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c 65 61    76 65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f  | 16.__imp__RtlLeaveCriticalSectio | 
| 25940 |  6e 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c 65    6e 67 74 68 52 65 71 75 69 72 65 64 53 69 64 40  | n@4.__imp__RtlLengthRequiredSid@ | 
| 25960 |  34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c 65 6e 67    74 68 53 65 63 75 72 69 74 79 44 65 73 63 72 69  | 4.__imp__RtlLengthSecurityDescri | 
| 25980 |  70 74 6f 72 40 34 00 5f 5f 69 6d 70 5f 5f 52 74    6c 4c 65 6e 67 74 68 53 69 64 40 34 00 5f 5f 69  | ptor@4.__imp__RtlLengthSid@4.__i | 
| 259a0 |  6d 70 5f 5f 52 74 6c 4c 6f 63 61 6c 54 69 6d 65    54 6f 53 79 73 74 65 6d 54 69 6d 65 40 38 00 5f  | mp__RtlLocalTimeToSystemTime@8._ | 
| 259c0 |  5f 69 6d 70 5f 5f 52 74 6c 4c 6f 63 6b 42 6f 6f    74 53 74 61 74 75 73 44 61 74 61 40 34 00 5f 5f  | _imp__RtlLockBootStatusData@4.__ | 
| 259e0 |  69 6d 70 5f 5f 52 74 6c 4c 6f 63 6b 48 65 61 70    40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c 6f 63  | imp__RtlLockHeap@4.__imp__RtlLoc | 
| 25a00 |  6b 4d 65 6d 6f 72 79 53 74 72 65 61 6d 52 65 67    69 6f 6e 40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74  | kMemoryStreamRegion@24.__imp__Rt | 
| 25a20 |  6c 4c 6f 67 53 74 61 63 6b 42 61 63 6b 54 72 61    63 65 40 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c  | lLogStackBackTrace@0.__imp__RtlL | 
| 25a40 |  6f 6f 6b 75 70 41 74 6f 6d 49 6e 41 74 6f 6d 54    61 62 6c 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 52  | ookupAtomInAtomTable@12.__imp__R | 
| 25a60 |  74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e 74 47    65 6e 65 72 69 63 54 61 62 6c 65 40 38 00 5f 5f  | tlLookupElementGenericTable@8.__ | 
| 25a80 |  69 6d 70 5f 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c    65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c  | imp__RtlLookupElementGenericTabl | 
| 25aa0 |  65 41 76 6c 40 38 00 5f 5f 69 6d 70 5f 5f 52 74    6c 4c 6f 6f 6b 75 70 45 6c 65 6d 65 6e 74 47 65  | eAvl@8.__imp__RtlLookupElementGe | 
| 25ac0 |  6e 65 72 69 63 54 61 62 6c 65 46 75 6c 6c 40 31    36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4c 6f 6f 6b  | nericTableFull@16.__imp__RtlLook | 
| 25ae0 |  75 70 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63    54 61 62 6c 65 46 75 6c 6c 41 76 6c 40 31 36 00  | upElementGenericTableFullAvl@16. | 
| 25b00 |  5f 5f 69 6d 70 5f 5f 52 74 6c 4d 61 6b 65 53 65    6c 66 52 65 6c 61 74 69 76 65 53 44 40 31 32 00  | __imp__RtlMakeSelfRelativeSD@12. | 
| 25b20 |  5f 5f 69 6d 70 5f 5f 52 74 6c 4d 61 70 47 65 6e    65 72 69 63 4d 61 73 6b 40 38 00 5f 5f 69 6d 70  | __imp__RtlMapGenericMask@8.__imp | 
| 25b40 |  5f 5f 52 74 6c 4d 61 70 53 65 63 75 72 69 74 79    45 72 72 6f 72 54 6f 4e 74 53 74 61 74 75 73 40  | __RtlMapSecurityErrorToNtStatus@ | 
| 25b60 |  34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4d 6f 76 65    4d 65 6d 6f 72 79 40 31 32 00 5f 5f 69 6d 70 5f  | 4.__imp__RtlMoveMemory@12.__imp_ | 
| 25b80 |  5f 52 74 6c 4d 75 6c 74 69 41 70 70 65 6e 64 55    6e 69 63 6f 64 65 53 74 72 69 6e 67 42 75 66 66  | _RtlMultiAppendUnicodeStringBuff | 
| 25ba0 |  65 72 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c    4d 75 6c 74 69 42 79 74 65 54 6f 55 6e 69 63 6f  | er@12.__imp__RtlMultiByteToUnico | 
| 25bc0 |  64 65 4e 40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74    6c 4d 75 6c 74 69 42 79 74 65 54 6f 55 6e 69 63  | deN@20.__imp__RtlMultiByteToUnic | 
| 25be0 |  6f 64 65 53 69 7a 65 40 31 32 00 5f 5f 69 6d 70    5f 5f 52 74 6c 4d 75 6c 74 69 70 6c 65 41 6c 6c  | odeSize@12.__imp__RtlMultipleAll | 
| 25c00 |  6f 63 61 74 65 48 65 61 70 40 32 30 00 5f 5f 69    6d 70 5f 5f 52 74 6c 4d 75 6c 74 69 70 6c 65 46  | ocateHeap@20.__imp__RtlMultipleF | 
| 25c20 |  72 65 65 48 65 61 70 40 31 36 00 5f 5f 69 6d 70    5f 5f 52 74 6c 4e 65 77 49 6e 73 74 61 6e 63 65  | reeHeap@16.__imp__RtlNewInstance | 
| 25c40 |  53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 40 34    30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4e 65 77 53  | SecurityObject@40.__imp__RtlNewS | 
| 25c60 |  65 63 75 72 69 74 79 47 72 61 6e 74 65 64 41 63    63 65 73 73 40 32 34 00 5f 5f 69 6d 70 5f 5f 52  | ecurityGrantedAccess@24.__imp__R | 
| 25c80 |  74 6c 4e 65 77 53 65 63 75 72 69 74 79 4f 62 6a    65 63 74 40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74  | tlNewSecurityObject@24.__imp__Rt | 
| 25ca0 |  6c 4e 65 77 53 65 63 75 72 69 74 79 4f 62 6a 65    63 74 45 78 40 33 32 00 5f 5f 69 6d 70 5f 5f 52  | lNewSecurityObjectEx@32.__imp__R | 
| 25cc0 |  74 6c 4e 65 77 53 65 63 75 72 69 74 79 4f 62 6a    65 63 74 57 69 74 68 4d 75 6c 74 69 70 6c 65 49  | tlNewSecurityObjectWithMultipleI | 
| 25ce0 |  6e 68 65 72 69 74 61 6e 63 65 40 33 36 00 5f 5f    69 6d 70 5f 5f 52 74 6c 4e 6f 72 6d 61 6c 69 7a  | nheritance@36.__imp__RtlNormaliz | 
| 25d00 |  65 50 72 6f 63 65 73 73 50 61 72 61 6d 73 40 34    00 5f 5f 69 6d 70 5f 5f 52 74 6c 4e 74 50 61 74  | eProcessParams@4.__imp__RtlNtPat | 
| 25d20 |  68 4e 61 6d 65 54 6f 44 6f 73 50 61 74 68 4e 61    6d 65 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | hNameToDosPathName@16.__imp__Rtl | 
| 25d40 |  4e 74 53 74 61 74 75 73 54 6f 44 6f 73 45 72 72    6f 72 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4e  | NtStatusToDosError@4.__imp__RtlN | 
| 25d60 |  74 53 74 61 74 75 73 54 6f 44 6f 73 45 72 72 6f    72 4e 6f 54 65 62 40 34 00 5f 5f 69 6d 70 5f 5f  | tStatusToDosErrorNoTeb@4.__imp__ | 
| 25d80 |  52 74 6c 4e 75 6d 62 65 72 47 65 6e 65 72 69 63    54 61 62 6c 65 45 6c 65 6d 65 6e 74 73 40 34 00  | RtlNumberGenericTableElements@4. | 
| 25da0 |  5f 5f 69 6d 70 5f 5f 52 74 6c 4e 75 6d 62 65 72    47 65 6e 65 72 69 63 54 61 62 6c 65 45 6c 65 6d  | __imp__RtlNumberGenericTableElem | 
| 25dc0 |  65 6e 74 73 41 76 6c 40 34 00 5f 5f 69 6d 70 5f    5f 52 74 6c 4e 75 6d 62 65 72 4f 66 43 6c 65 61  | entsAvl@4.__imp__RtlNumberOfClea | 
| 25de0 |  72 42 69 74 73 40 34 00 5f 5f 69 6d 70 5f 5f 52    74 6c 4e 75 6d 62 65 72 4f 66 53 65 74 42 69 74  | rBits@4.__imp__RtlNumberOfSetBit | 
| 25e00 |  73 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 4f 65    6d 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65  | s@4.__imp__RtlOemStringToUnicode | 
| 25e20 |  53 69 7a 65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74    6c 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e 69 63  | Size@4.__imp__RtlOemStringToUnic | 
| 25e40 |  6f 64 65 53 74 72 69 6e 67 40 31 32 00 5f 5f 69    6d 70 5f 5f 52 74 6c 4f 65 6d 54 6f 55 6e 69 63  | odeString@12.__imp__RtlOemToUnic | 
| 25e60 |  6f 64 65 4e 40 32 30 00 5f 5f 69 6d 70 5f 5f 52    74 6c 4f 70 65 6e 43 75 72 72 65 6e 74 55 73 65  | odeN@20.__imp__RtlOpenCurrentUse | 
| 25e80 |  72 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 50 63    54 6f 46 69 6c 65 48 65 61 64 65 72 40 38 00 5f  | r@8.__imp__RtlPcToFileHeader@8._ | 
| 25ea0 |  5f 69 6d 70 5f 5f 52 74 6c 50 69 6e 41 74 6f 6d    49 6e 41 74 6f 6d 54 61 62 6c 65 40 38 00 5f 5f  | _imp__RtlPinAtomInAtomTable@8.__ | 
| 25ec0 |  69 6d 70 5f 5f 52 74 6c 50 6f 70 46 72 61 6d 65    40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 50 72 65  | imp__RtlPopFrame@4.__imp__RtlPre | 
| 25ee0 |  66 69 78 53 74 72 69 6e 67 40 31 32 00 5f 5f 69    6d 70 5f 5f 52 74 6c 50 72 65 66 69 78 55 6e 69  | fixString@12.__imp__RtlPrefixUni | 
| 25f00 |  63 6f 64 65 53 74 72 69 6e 67 40 31 32 00 5f 5f    69 6d 70 5f 5f 52 74 6c 50 72 6f 74 65 63 74 48  | codeString@12.__imp__RtlProtectH | 
| 25f20 |  65 61 70 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c    50 75 73 68 46 72 61 6d 65 40 34 00 5f 5f 69 6d  | eap@8.__imp__RtlPushFrame@4.__im | 
| 25f40 |  70 5f 5f 52 74 6c 51 75 65 72 79 41 74 6f 6d 49    6e 41 74 6f 6d 54 61 62 6c 65 40 32 34 00 5f 5f  | p__RtlQueryAtomInAtomTable@24.__ | 
| 25f60 |  69 6d 70 5f 5f 52 74 6c 51 75 65 72 79 44 65 70    74 68 53 4c 69 73 74 40 34 00 5f 5f 69 6d 70 5f  | imp__RtlQueryDepthSList@4.__imp_ | 
| 25f80 |  5f 52 74 6c 51 75 65 72 79 45 6e 76 69 72 6f 6e    6d 65 6e 74 56 61 72 69 61 62 6c 65 5f 55 40 31  | _RtlQueryEnvironmentVariable_U@1 | 
| 25fa0 |  32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 51 75 65 72    79 48 65 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e  | 2.__imp__RtlQueryHeapInformation | 
| 25fc0 |  40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 51 75    65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63  | @20.__imp__RtlQueryInformationAc | 
| 25fe0 |  6c 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 51    75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41  | l@16.__imp__RtlQueryInformationA | 
| 26000 |  63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74    40 32 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 51 75  | ctivationContext@28.__imp__RtlQu | 
| 26020 |  65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63    74 69 76 65 41 63 74 69 76 61 74 69 6f 6e 43 6f  | eryInformationActiveActivationCo | 
| 26040 |  6e 74 65 78 74 40 31 36 00 5f 5f 69 6d 70 5f 5f    52 74 6c 51 75 65 72 79 49 6e 74 65 72 66 61 63  | ntext@16.__imp__RtlQueryInterfac | 
| 26060 |  65 4d 65 6d 6f 72 79 53 74 72 65 61 6d 40 31 32    00 5f 5f 69 6d 70 5f 5f 52 74 6c 51 75 65 72 79  | eMemoryStream@12.__imp__RtlQuery | 
| 26080 |  50 72 6f 63 65 73 73 42 61 63 6b 54 72 61 63 65    49 6e 66 6f 72 6d 61 74 69 6f 6e 40 34 00 5f 5f  | ProcessBackTraceInformation@4.__ | 
| 260a0 |  69 6d 70 5f 5f 52 74 6c 51 75 65 72 79 50 72 6f    63 65 73 73 44 65 62 75 67 49 6e 66 6f 72 6d 61  | imp__RtlQueryProcessDebugInforma | 
| 260c0 |  74 69 6f 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 52    74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 48 65  | tion@12.__imp__RtlQueryProcessHe | 
| 260e0 |  61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 34 00    5f 5f 69 6d 70 5f 5f 52 74 6c 51 75 65 72 79 50  | apInformation@4.__imp__RtlQueryP | 
| 26100 |  72 6f 63 65 73 73 4c 6f 63 6b 49 6e 66 6f 72 6d    61 74 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f 52  | rocessLockInformation@4.__imp__R | 
| 26120 |  74 6c 51 75 65 72 79 52 65 67 69 73 74 72 79 56    61 6c 75 65 73 40 32 30 00 5f 5f 69 6d 70 5f 5f  | tlQueryRegistryValues@20.__imp__ | 
| 26140 |  52 74 6c 51 75 65 72 79 53 65 63 75 72 69 74 79    4f 62 6a 65 63 74 40 32 30 00 5f 5f 69 6d 70 5f  | RtlQuerySecurityObject@20.__imp_ | 
| 26160 |  5f 52 74 6c 51 75 65 72 79 54 61 67 48 65 61 70    40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 51 75  | _RtlQueryTagHeap@20.__imp__RtlQu | 
| 26180 |  65 72 79 54 69 6d 65 5a 6f 6e 65 49 6e 66 6f 72    6d 61 74 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f  | eryTimeZoneInformation@4.__imp__ | 
| 261a0 |  52 74 6c 51 75 65 75 65 41 70 63 57 6f 77 36 34    54 68 72 65 61 64 40 32 30 00 5f 5f 69 6d 70 5f  | RtlQueueApcWow64Thread@20.__imp_ | 
| 261c0 |  5f 52 74 6c 51 75 65 75 65 57 6f 72 6b 49 74 65    6d 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 52  | _RtlQueueWorkItem@12.__imp__RtlR | 
| 261e0 |  61 69 73 65 45 78 63 65 70 74 69 6f 6e 40 34 00    5f 5f 69 6d 70 5f 5f 52 74 6c 52 61 69 73 65 53  | aiseException@4.__imp__RtlRaiseS | 
| 26200 |  74 61 74 75 73 40 34 00 5f 5f 69 6d 70 5f 5f 52    74 6c 52 61 6e 64 6f 6d 40 34 00 5f 5f 69 6d 70  | tatus@4.__imp__RtlRandom@4.__imp | 
| 26220 |  5f 5f 52 74 6c 52 61 6e 64 6f 6d 45 78 40 34 00    5f 5f 69 6d 70 5f 5f 52 74 6c 52 65 41 6c 6c 6f  | __RtlRandomEx@4.__imp__RtlReAllo | 
| 26240 |  63 61 74 65 48 65 61 70 40 31 36 00 5f 5f 69 6d    70 5f 5f 52 74 6c 52 65 61 64 4d 65 6d 6f 72 79  | cateHeap@16.__imp__RtlReadMemory | 
| 26260 |  53 74 72 65 61 6d 40 31 36 00 5f 5f 69 6d 70 5f    5f 52 74 6c 52 65 61 64 4f 75 74 4f 66 50 72 6f  | Stream@16.__imp__RtlReadOutOfPro | 
| 26280 |  63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d    40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 52 65  | cessMemoryStream@16.__imp__RtlRe | 
| 262a0 |  61 6c 50 72 65 64 65 63 65 73 73 6f 72 40 34 00    5f 5f 69 6d 70 5f 5f 52 74 6c 52 65 61 6c 53 75  | alPredecessor@4.__imp__RtlRealSu | 
| 262c0 |  63 63 65 73 73 6f 72 40 34 00 5f 5f 69 6d 70 5f    5f 52 74 6c 52 65 67 69 73 74 65 72 53 65 63 75  | ccessor@4.__imp__RtlRegisterSecu | 
| 262e0 |  72 65 4d 65 6d 6f 72 79 43 61 63 68 65 43 61 6c    6c 62 61 63 6b 40 34 00 5f 5f 69 6d 70 5f 5f 52  | reMemoryCacheCallback@4.__imp__R | 
| 26300 |  74 6c 52 65 67 69 73 74 65 72 57 61 69 74 40 32    34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 52 65 6c 65  | tlRegisterWait@24.__imp__RtlRele | 
| 26320 |  61 73 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e    74 65 78 74 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | aseActivationContext@4.__imp__Rt | 
| 26340 |  6c 52 65 6c 65 61 73 65 4d 65 6d 6f 72 79 53 74    72 65 61 6d 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | lReleaseMemoryStream@4.__imp__Rt | 
| 26360 |  6c 52 65 6c 65 61 73 65 50 65 62 4c 6f 63 6b 40    30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 52 65 6c 65  | lReleasePebLock@0.__imp__RtlRele | 
| 26380 |  61 73 65 50 72 69 76 69 6c 65 67 65 40 34 00 5f    5f 69 6d 70 5f 5f 52 74 6c 52 65 6c 65 61 73 65  | asePrivilege@4.__imp__RtlRelease | 
| 263a0 |  52 65 6c 61 74 69 76 65 4e 61 6d 65 40 34 00 5f    5f 69 6d 70 5f 5f 52 74 6c 52 65 6c 65 61 73 65  | RelativeName@4.__imp__RtlRelease | 
| 263c0 |  52 65 73 6f 75 72 63 65 40 34 00 5f 5f 69 6d 70    5f 5f 52 74 6c 52 65 6d 6f 74 65 43 61 6c 6c 40  | Resource@4.__imp__RtlRemoteCall@ | 
| 263e0 |  32 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 52 65 6d    6f 76 65 56 65 63 74 6f 72 65 64 43 6f 6e 74 69  | 28.__imp__RtlRemoveVectoredConti | 
| 26400 |  6e 75 65 48 61 6e 64 6c 65 72 40 34 00 5f 5f 69    6d 70 5f 5f 52 74 6c 52 65 6d 6f 76 65 56 65 63  | nueHandler@4.__imp__RtlRemoveVec | 
| 26420 |  74 6f 72 65 64 45 78 63 65 70 74 69 6f 6e 48 61    6e 64 6c 65 72 40 34 00 5f 5f 69 6d 70 5f 5f 52  | toredExceptionHandler@4.__imp__R | 
| 26440 |  74 6c 52 65 73 65 74 52 74 6c 54 72 61 6e 73 6c    61 74 69 6f 6e 73 40 34 00 5f 5f 69 6d 70 5f 5f  | tlResetRtlTranslations@4.__imp__ | 
| 26460 |  52 74 6c 52 65 73 74 6f 72 65 4c 61 73 74 57 69    6e 33 32 45 72 72 6f 72 40 34 00 5f 5f 69 6d 70  | RtlRestoreLastWin32Error@4.__imp | 
| 26480 |  5f 5f 52 74 6c 52 65 76 65 72 74 4d 65 6d 6f 72    79 53 74 72 65 61 6d 40 34 00 5f 5f 69 6d 70 5f  | __RtlRevertMemoryStream@4.__imp_ | 
| 264a0 |  5f 52 74 6c 52 75 6e 44 65 63 6f 64 65 55 6e 69    63 6f 64 65 53 74 72 69 6e 67 40 38 00 5f 5f 69  | _RtlRunDecodeUnicodeString@8.__i | 
| 264c0 |  6d 70 5f 5f 52 74 6c 52 75 6e 45 6e 63 6f 64 65    55 6e 69 63 6f 64 65 53 74 72 69 6e 67 40 38 00  | mp__RtlRunEncodeUnicodeString@8. | 
| 264e0 |  5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 63 6f 6e 64    73 53 69 6e 63 65 31 39 37 30 54 6f 54 69 6d 65  | __imp__RtlSecondsSince1970ToTime | 
| 26500 |  40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 63    6f 6e 64 73 53 69 6e 63 65 31 39 38 30 54 6f 54  | @8.__imp__RtlSecondsSince1980ToT | 
| 26520 |  69 6d 65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c    53 65 65 6b 4d 65 6d 6f 72 79 53 74 72 65 61 6d  | ime@8.__imp__RtlSeekMemoryStream | 
| 26540 |  40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65    6c 66 52 65 6c 61 74 69 76 65 54 6f 41 62 73 6f  | @20.__imp__RtlSelfRelativeToAbso | 
| 26560 |  6c 75 74 65 53 44 32 40 38 00 5f 5f 69 6d 70 5f    5f 52 74 6c 53 65 6c 66 52 65 6c 61 74 69 76 65  | luteSD2@8.__imp__RtlSelfRelative | 
| 26580 |  54 6f 41 62 73 6f 6c 75 74 65 53 44 40 34 34 00    5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74 41 6c 6c  | ToAbsoluteSD@44.__imp__RtlSetAll | 
| 265a0 |  42 69 74 73 40 34 00 5f 5f 69 6d 70 5f 5f 52 74    6c 53 65 74 41 74 74 72 69 62 75 74 65 73 53 65  | Bits@4.__imp__RtlSetAttributesSe | 
| 265c0 |  63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72    40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65  | curityDescriptor@12.__imp__RtlSe | 
| 265e0 |  74 42 69 74 73 40 31 32 00 5f 5f 69 6d 70 5f 5f    52 74 6c 53 65 74 43 6f 6e 74 72 6f 6c 53 65 63  | tBits@12.__imp__RtlSetControlSec | 
| 26600 |  75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 40    31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74  | urityDescriptor@12.__imp__RtlSet | 
| 26620 |  43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 53    70 69 6e 43 6f 75 6e 74 40 38 00 5f 5f 69 6d 70  | CriticalSectionSpinCount@8.__imp | 
| 26640 |  5f 5f 52 74 6c 53 65 74 43 75 72 72 65 6e 74 44    69 72 65 63 74 6f 72 79 5f 55 40 34 00 5f 5f 69  | __RtlSetCurrentDirectory_U@4.__i | 
| 26660 |  6d 70 5f 5f 52 74 6c 53 65 74 43 75 72 72 65 6e    74 45 6e 76 69 72 6f 6e 6d 65 6e 74 40 38 00 5f  | mp__RtlSetCurrentEnvironment@8._ | 
| 26680 |  5f 69 6d 70 5f 5f 52 74 6c 53 65 74 44 61 63 6c    53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74  | _imp__RtlSetDaclSecurityDescript | 
| 266a0 |  6f 72 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c    53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74 53 74  | or@16.__imp__RtlSetEnvironmentSt | 
| 266c0 |  72 69 6e 67 73 40 38 00 5f 5f 69 6d 70 5f 5f 52    74 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65 6e 74  | rings@8.__imp__RtlSetEnvironment | 
| 266e0 |  56 61 72 69 61 62 6c 65 40 31 32 00 5f 5f 69 6d    70 5f 5f 52 74 6c 53 65 74 47 72 6f 75 70 53 65  | Variable@12.__imp__RtlSetGroupSe | 
| 26700 |  63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72    40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65  | curityDescriptor@12.__imp__RtlSe | 
| 26720 |  74 48 65 61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e    40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65  | tHeapInformation@16.__imp__RtlSe | 
| 26740 |  74 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63 6c 40    31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74  | tInformationAcl@16.__imp__RtlSet | 
| 26760 |  49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 43 61 6c 6c    62 61 63 6b 40 31 32 00 5f 5f 69 6d 70 5f 5f 52  | IoCompletionCallback@12.__imp__R | 
| 26780 |  74 6c 53 65 74 4c 61 73 74 57 69 6e 33 32 45 72    72 6f 72 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | tlSetLastWin32Error@4.__imp__Rtl | 
| 267a0 |  53 65 74 4c 61 73 74 57 69 6e 33 32 45 72 72 6f    72 41 6e 64 4e 74 53 74 61 74 75 73 46 72 6f 6d  | SetLastWin32ErrorAndNtStatusFrom | 
| 267c0 |  4e 74 53 74 61 74 75 73 40 34 00 5f 5f 69 6d 70    5f 5f 52 74 6c 53 65 74 4d 65 6d 6f 72 79 53 74  | NtStatus@4.__imp__RtlSetMemorySt | 
| 267e0 |  72 65 61 6d 53 69 7a 65 40 31 32 00 5f 5f 69 6d    70 5f 5f 52 74 6c 53 65 74 4f 77 6e 65 72 53 65  | reamSize@12.__imp__RtlSetOwnerSe | 
| 26800 |  63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72    40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65  | curityDescriptor@12.__imp__RtlSe | 
| 26820 |  74 50 72 6f 63 65 73 73 49 73 43 72 69 74 69 63    61 6c 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74  | tProcessIsCritical.__imp__RtlSet | 
| 26840 |  53 61 63 6c 53 65 63 75 72 69 74 79 44 65 73 63    72 69 70 74 6f 72 40 31 36 00 5f 5f 69 6d 70 5f  | SaclSecurityDescriptor@16.__imp_ | 
| 26860 |  5f 52 74 6c 53 65 74 53 65 63 75 72 69 74 79 44    65 73 63 72 69 70 74 6f 72 52 4d 43 6f 6e 74 72  | _RtlSetSecurityDescriptorRMContr | 
| 26880 |  6f 6c 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53    65 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74  | ol@8.__imp__RtlSetSecurityObject | 
| 268a0 |  40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65    74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 45  | @20.__imp__RtlSetSecurityObjectE | 
| 268c0 |  78 40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53    65 74 54 68 72 65 61 64 45 72 72 6f 72 4d 6f 64  | x@24.__imp__RtlSetThreadErrorMod | 
| 268e0 |  65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65    74 54 68 72 65 61 64 49 73 43 72 69 74 69 63 61  | e@8.__imp__RtlSetThreadIsCritica | 
| 26900 |  6c 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74 54    68 72 65 61 64 50 6f 6f 6c 53 74 61 72 74 46 75  | l.__imp__RtlSetThreadPoolStartFu | 
| 26920 |  6e 63 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53    65 74 54 69 6d 65 5a 6f 6e 65 49 6e 66 6f 72 6d  | nc@8.__imp__RtlSetTimeZoneInform | 
| 26940 |  61 74 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f 52    74 6c 53 65 74 54 69 6d 65 72 40 32 38 00 5f 5f  | ation@4.__imp__RtlSetTimer@28.__ | 
| 26960 |  69 6d 70 5f 5f 52 74 6c 53 65 74 55 6e 68 61 6e    64 6c 65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c  | imp__RtlSetUnhandledExceptionFil | 
| 26980 |  74 65 72 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c    53 65 74 55 6e 69 63 6f 64 65 43 61 6c 6c 6f 75  | ter@4.__imp__RtlSetUnicodeCallou | 
| 269a0 |  74 73 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53    65 74 55 73 65 72 46 6c 61 67 73 48 65 61 70 40  | ts@4.__imp__RtlSetUserFlagsHeap@ | 
| 269c0 |  32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 65 74    55 73 65 72 56 61 6c 75 65 48 65 61 70 40 31 36  | 20.__imp__RtlSetUserValueHeap@16 | 
| 269e0 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 69 7a 65 48    65 61 70 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74  | .__imp__RtlSizeHeap@12.__imp__Rt | 
| 26a00 |  6c 53 70 6c 61 79 40 34 00 5f 5f 69 6d 70 5f 5f    52 74 6c 53 74 61 72 74 52 58 61 63 74 40 34 00  | lSplay@4.__imp__RtlStartRXact@4. | 
| 26a20 |  5f 5f 69 6d 70 5f 5f 52 74 6c 53 74 61 74 4d 65    6d 6f 72 79 53 74 72 65 61 6d 40 31 32 00 5f 5f  | __imp__RtlStatMemoryStream@12.__ | 
| 26a40 |  69 6d 70 5f 5f 52 74 6c 53 74 72 69 6e 67 46 72    6f 6d 47 55 49 44 40 38 00 5f 5f 69 6d 70 5f 5f  | imp__RtlStringFromGUID@8.__imp__ | 
| 26a60 |  52 74 6c 53 75 62 41 75 74 68 6f 72 69 74 79 43    6f 75 6e 74 53 69 64 40 34 00 5f 5f 69 6d 70 5f  | RtlSubAuthorityCountSid@4.__imp_ | 
| 26a80 |  5f 52 74 6c 53 75 62 41 75 74 68 6f 72 69 74 79    53 69 64 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | _RtlSubAuthoritySid@8.__imp__Rtl | 
| 26aa0 |  53 75 62 74 72 65 65 50 72 65 64 65 63 65 73 73    6f 72 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53  | SubtreePredecessor@4.__imp__RtlS | 
| 26ac0 |  75 62 74 72 65 65 53 75 63 63 65 73 73 6f 72 40    34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 53 79 73 74  | ubtreeSuccessor@4.__imp__RtlSyst | 
| 26ae0 |  65 6d 54 69 6d 65 54 6f 4c 6f 63 61 6c 54 69 6d    65 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 54 69  | emTimeToLocalTime@8.__imp__RtlTi | 
| 26b00 |  6d 65 46 69 65 6c 64 73 54 6f 54 69 6d 65 40 38    00 5f 5f 69 6d 70 5f 5f 52 74 6c 54 69 6d 65 54  | meFieldsToTime@8.__imp__RtlTimeT | 
| 26b20 |  6f 45 6c 61 70 73 65 64 54 69 6d 65 46 69 65 6c    64 73 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 54  | oElapsedTimeFields@8.__imp__RtlT | 
| 26b40 |  69 6d 65 54 6f 53 65 63 6f 6e 64 73 53 69 6e 63    65 31 39 37 30 40 38 00 5f 5f 69 6d 70 5f 5f 52  | imeToSecondsSince1970@8.__imp__R | 
| 26b60 |  74 6c 54 69 6d 65 54 6f 53 65 63 6f 6e 64 73 53    69 6e 63 65 31 39 38 30 40 38 00 5f 5f 69 6d 70  | tlTimeToSecondsSince1980@8.__imp | 
| 26b80 |  5f 5f 52 74 6c 54 69 6d 65 54 6f 54 69 6d 65 46    69 65 6c 64 73 40 38 00 5f 5f 69 6d 70 5f 5f 52  | __RtlTimeToTimeFields@8.__imp__R | 
| 26ba0 |  74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 41    64 64 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | tlTraceDatabaseAdd@16.__imp__Rtl | 
| 26bc0 |  54 72 61 63 65 44 61 74 61 62 61 73 65 43 72 65    61 74 65 40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74  | TraceDatabaseCreate@20.__imp__Rt | 
| 26be0 |  6c 54 72 61 63 65 44 61 74 61 62 61 73 65 44 65    73 74 72 6f 79 40 34 00 5f 5f 69 6d 70 5f 5f 52  | lTraceDatabaseDestroy@4.__imp__R | 
| 26c00 |  74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 45    6e 75 6d 65 72 61 74 65 40 31 32 00 5f 5f 69 6d  | tlTraceDatabaseEnumerate@12.__im | 
| 26c20 |  70 5f 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62    61 73 65 46 69 6e 64 40 31 36 00 5f 5f 69 6d 70  | p__RtlTraceDatabaseFind@16.__imp | 
| 26c40 |  5f 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62 61    73 65 4c 6f 63 6b 40 34 00 5f 5f 69 6d 70 5f 5f  | __RtlTraceDatabaseLock@4.__imp__ | 
| 26c60 |  52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65    55 6e 6c 6f 63 6b 40 34 00 5f 5f 69 6d 70 5f 5f  | RtlTraceDatabaseUnlock@4.__imp__ | 
| 26c80 |  52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65    56 61 6c 69 64 61 74 65 40 34 00 5f 5f 69 6d 70  | RtlTraceDatabaseValidate@4.__imp | 
| 26ca0 |  5f 5f 52 74 6c 54 72 79 45 6e 74 65 72 43 72 69    74 69 63 61 6c 53 65 63 74 69 6f 6e 40 34 00 5f  | __RtlTryEnterCriticalSection@4._ | 
| 26cc0 |  5f 69 6d 70 5f 5f 52 74 6c 55 6e 68 61 6e 64 6c    65 64 45 78 63 65 70 74 69 6f 6e 46 69 6c 74 65  | _imp__RtlUnhandledExceptionFilte | 
| 26ce0 |  72 32 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 55    6e 68 61 6e 64 6c 65 64 45 78 63 65 70 74 69 6f  | r2@8.__imp__RtlUnhandledExceptio | 
| 26d00 |  6e 46 69 6c 74 65 72 40 34 00 5f 5f 69 6d 70 5f    5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e  | nFilter@4.__imp__RtlUnicodeStrin | 
| 26d20 |  67 54 6f 41 6e 73 69 53 69 7a 65 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 55 6e 69 63 6f 64 65 53  | gToAnsiSize@4.__imp__RtlUnicodeS | 
| 26d40 |  74 72 69 6e 67 54 6f 41 6e 73 69 53 74 72 69 6e    67 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 55  | tringToAnsiString@12.__imp__RtlU | 
| 26d60 |  6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 43 6f    75 6e 74 65 64 4f 65 6d 53 74 72 69 6e 67 40 31  | nicodeStringToCountedOemString@1 | 
| 26d80 |  32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 55 6e 69 63    6f 64 65 53 74 72 69 6e 67 54 6f 49 6e 74 65 67  | 2.__imp__RtlUnicodeStringToInteg | 
| 26da0 |  65 72 40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c    55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f 4f  | er@12.__imp__RtlUnicodeStringToO | 
| 26dc0 |  65 6d 53 69 7a 65 40 34 00 5f 5f 69 6d 70 5f 5f    52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e 67  | emSize@4.__imp__RtlUnicodeString | 
| 26de0 |  54 6f 4f 65 6d 53 74 72 69 6e 67 40 31 32 00 5f    5f 69 6d 70 5f 5f 52 74 6c 55 6e 69 63 6f 64 65  | ToOemString@12.__imp__RtlUnicode | 
| 26e00 |  54 6f 43 75 73 74 6f 6d 43 50 4e 40 32 34 00 5f    5f 69 6d 70 5f 5f 52 74 6c 55 6e 69 63 6f 64 65  | ToCustomCPN@24.__imp__RtlUnicode | 
| 26e20 |  54 6f 4d 75 6c 74 69 42 79 74 65 4e 40 32 30 00    5f 5f 69 6d 70 5f 5f 52 74 6c 55 6e 69 63 6f 64  | ToMultiByteN@20.__imp__RtlUnicod | 
| 26e40 |  65 54 6f 4d 75 6c 74 69 42 79 74 65 53 69 7a 65    40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 55 6e  | eToMultiByteSize@12.__imp__RtlUn | 
| 26e60 |  69 63 6f 64 65 54 6f 4f 65 6d 4e 40 32 30 00 5f    5f 69 6d 70 5f 5f 52 74 6c 55 6e 69 66 6f 72 6d  | icodeToOemN@20.__imp__RtlUniform | 
| 26e80 |  40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 55 6e 6c    6f 63 6b 42 6f 6f 74 53 74 61 74 75 73 44 61 74  | @4.__imp__RtlUnlockBootStatusDat | 
| 26ea0 |  61 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 55 6e    6c 6f 63 6b 48 65 61 70 40 34 00 5f 5f 69 6d 70  | a@4.__imp__RtlUnlockHeap@4.__imp | 
| 26ec0 |  5f 5f 52 74 6c 55 6e 6c 6f 63 6b 4d 65 6d 6f 72    79 53 74 72 65 61 6d 52 65 67 69 6f 6e 40 32 34  | __RtlUnlockMemoryStreamRegion@24 | 
| 26ee0 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 55 6e 77 69 6e    64 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 55  | .__imp__RtlUnwind@16.__imp__RtlU | 
| 26f00 |  70 63 61 73 65 55 6e 69 63 6f 64 65 43 68 61 72    40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 55 70 63  | pcaseUnicodeChar@4.__imp__RtlUpc | 
| 26f20 |  61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67    40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 55 70  | aseUnicodeString@12.__imp__RtlUp | 
| 26f40 |  63 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e    67 54 6f 41 6e 73 69 53 74 72 69 6e 67 40 31 32  | caseUnicodeStringToAnsiString@12 | 
| 26f60 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 55 70 63 61 73    65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f  | .__imp__RtlUpcaseUnicodeStringTo | 
| 26f80 |  43 6f 75 6e 74 65 64 4f 65 6d 53 74 72 69 6e 67    40 31 32 00 5f 5f 69 6d 70 5f 5f 52 74 6c 55 70  | CountedOemString@12.__imp__RtlUp | 
| 26fa0 |  63 61 73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e    67 54 6f 4f 65 6d 53 74 72 69 6e 67 40 31 32 00  | caseUnicodeStringToOemString@12. | 
| 26fc0 |  5f 5f 69 6d 70 5f 5f 52 74 6c 55 70 63 61 73 65    55 6e 69 63 6f 64 65 54 6f 43 75 73 74 6f 6d 43  | __imp__RtlUpcaseUnicodeToCustomC | 
| 26fe0 |  50 4e 40 32 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c    55 70 63 61 73 65 55 6e 69 63 6f 64 65 54 6f 4d  | PN@24.__imp__RtlUpcaseUnicodeToM | 
| 27000 |  75 6c 74 69 42 79 74 65 4e 40 32 30 00 5f 5f 69    6d 70 5f 5f 52 74 6c 55 70 63 61 73 65 55 6e 69  | ultiByteN@20.__imp__RtlUpcaseUni | 
| 27020 |  63 6f 64 65 54 6f 4f 65 6d 4e 40 32 30 00 5f 5f    69 6d 70 5f 5f 52 74 6c 55 70 64 61 74 65 54 69  | codeToOemN@20.__imp__RtlUpdateTi | 
| 27040 |  6d 65 72 40 31 36 00 5f 5f 69 6d 70 5f 5f 52 74    6c 55 70 70 65 72 43 68 61 72 40 34 00 5f 5f 69  | mer@16.__imp__RtlUpperChar@4.__i | 
| 27060 |  6d 70 5f 5f 52 74 6c 55 70 70 65 72 53 74 72 69    6e 67 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 55  | mp__RtlUpperString@8.__imp__RtlU | 
| 27080 |  73 61 67 65 48 65 61 70 40 31 32 00 5f 5f 69 6d    70 5f 5f 52 74 6c 56 61 6c 69 64 41 63 6c 40 34  | sageHeap@12.__imp__RtlValidAcl@4 | 
| 270a0 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 56 61 6c 69 64    52 65 6c 61 74 69 76 65 53 65 63 75 72 69 74 79  | .__imp__RtlValidRelativeSecurity | 
| 270c0 |  44 65 73 63 72 69 70 74 6f 72 40 31 32 00 5f 5f    69 6d 70 5f 5f 52 74 6c 56 61 6c 69 64 53 65 63  | Descriptor@12.__imp__RtlValidSec | 
| 270e0 |  75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72 40    34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 56 61 6c 69  | urityDescriptor@4.__imp__RtlVali | 
| 27100 |  64 53 69 64 40 34 00 5f 5f 69 6d 70 5f 5f 52 74    6c 56 61 6c 69 64 61 74 65 48 65 61 70 40 31 32  | dSid@4.__imp__RtlValidateHeap@12 | 
| 27120 |  00 5f 5f 69 6d 70 5f 5f 52 74 6c 56 61 6c 69 64    61 74 65 50 72 6f 63 65 73 73 48 65 61 70 73 40  | .__imp__RtlValidateProcessHeaps@ | 
| 27140 |  30 00 5f 5f 69 6d 70 5f 5f 52 74 6c 56 61 6c 69    64 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e  | 0.__imp__RtlValidateUnicodeStrin | 
| 27160 |  67 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 56 65    72 69 66 79 56 65 72 73 69 6f 6e 49 6e 66 6f 40  | g@8.__imp__RtlVerifyVersionInfo@ | 
| 27180 |  31 36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 57 61 6c    6b 46 72 61 6d 65 43 68 61 69 6e 40 31 32 00 5f  | 16.__imp__RtlWalkFrameChain@12._ | 
| 271a0 |  5f 69 6d 70 5f 5f 52 74 6c 57 61 6c 6b 48 65 61    70 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 57 6f  | _imp__RtlWalkHeap@8.__imp__RtlWo | 
| 271c0 |  77 36 34 45 6e 61 62 6c 65 46 73 52 65 64 69 72    65 63 74 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f  | w64EnableFsRedirection@4.__imp__ | 
| 271e0 |  52 74 6c 57 6f 77 36 34 45 6e 61 62 6c 65 46 73    52 65 64 69 72 65 63 74 69 6f 6e 45 78 40 38 00  | RtlWow64EnableFsRedirectionEx@8. | 
| 27200 |  5f 5f 69 6d 70 5f 5f 52 74 6c 57 72 69 74 65 4d    65 6d 6f 72 79 53 74 72 65 61 6d 40 31 36 00 5f  | __imp__RtlWriteMemoryStream@16._ | 
| 27220 |  5f 69 6d 70 5f 5f 52 74 6c 57 72 69 74 65 52 65    67 69 73 74 72 79 56 61 6c 75 65 40 32 34 00 5f  | _imp__RtlWriteRegistryValue@24._ | 
| 27240 |  5f 69 6d 70 5f 5f 52 74 6c 5a 65 72 6f 48 65 61    70 40 38 00 5f 5f 69 6d 70 5f 5f 52 74 6c 5a 65  | _imp__RtlZeroHeap@8.__imp__RtlZe | 
| 27260 |  72 6f 4d 65 6d 6f 72 79 40 38 00 5f 5f 69 6d 70    5f 5f 52 74 6c 5a 6f 6d 62 69 66 79 41 63 74 69  | roMemory@8.__imp__RtlZombifyActi | 
| 27280 |  76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 40 34 00    5f 5f 69 6d 70 5f 5f 52 74 6c 70 41 70 70 6c 79  | vationContext@4.__imp__RtlpApply | 
| 272a0 |  4c 65 6e 67 74 68 46 75 6e 63 74 69 6f 6e 40 31    36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 70 45 6e 73  | LengthFunction@16.__imp__RtlpEns | 
| 272c0 |  75 72 65 42 75 66 66 65 72 53 69 7a 65 40 31 32    00 5f 5f 69 6d 70 5f 5f 52 74 6c 70 4e 6f 74 4f  | ureBufferSize@12.__imp__RtlpNotO | 
| 272e0 |  77 6e 65 72 43 72 69 74 69 63 61 6c 53 65 63 74    69 6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c  | wnerCriticalSection@4.__imp__Rtl | 
| 27300 |  70 4e 74 43 72 65 61 74 65 4b 65 79 40 32 34 00    5f 5f 69 6d 70 5f 5f 52 74 6c 70 4e 74 45 6e 75  | pNtCreateKey@24.__imp__RtlpNtEnu | 
| 27320 |  6d 65 72 61 74 65 53 75 62 4b 65 79 40 31 36 00    5f 5f 69 6d 70 5f 5f 52 74 6c 70 4e 74 4d 61 6b  | merateSubKey@16.__imp__RtlpNtMak | 
| 27340 |  65 54 65 6d 70 6f 72 61 72 79 4b 65 79 40 34 00    5f 5f 69 6d 70 5f 5f 52 74 6c 70 4e 74 4f 70 65  | eTemporaryKey@4.__imp__RtlpNtOpe | 
| 27360 |  6e 4b 65 79 40 31 36 00 5f 5f 69 6d 70 5f 5f 52    74 6c 70 4e 74 51 75 65 72 79 56 61 6c 75 65 4b  | nKey@16.__imp__RtlpNtQueryValueK | 
| 27380 |  65 79 40 32 30 00 5f 5f 69 6d 70 5f 5f 52 74 6c    70 4e 74 53 65 74 56 61 6c 75 65 4b 65 79 40 31  | ey@20.__imp__RtlpNtSetValueKey@1 | 
| 273a0 |  36 00 5f 5f 69 6d 70 5f 5f 52 74 6c 70 55 6e 57    61 69 74 43 72 69 74 69 63 61 6c 53 65 63 74 69  | 6.__imp__RtlpUnWaitCriticalSecti | 
| 273c0 |  6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 70    57 61 69 74 46 6f 72 43 72 69 74 69 63 61 6c 53  | on@4.__imp__RtlpWaitForCriticalS | 
| 273e0 |  65 63 74 69 6f 6e 40 34 00 5f 5f 69 6d 70 5f 5f    52 74 6c 78 41 6e 73 69 53 74 72 69 6e 67 54 6f  | ection@4.__imp__RtlxAnsiStringTo | 
| 27400 |  55 6e 69 63 6f 64 65 53 69 7a 65 40 34 00 5f 5f    69 6d 70 5f 5f 52 74 6c 78 4f 65 6d 53 74 72 69  | UnicodeSize@4.__imp__RtlxOemStri | 
| 27420 |  6e 67 54 6f 55 6e 69 63 6f 64 65 53 69 7a 65 40    34 00 5f 5f 69 6d 70 5f 5f 52 74 6c 78 55 6e 69  | ngToUnicodeSize@4.__imp__RtlxUni | 
| 27440 |  63 6f 64 65 53 74 72 69 6e 67 54 6f 41 6e 73 69    53 69 7a 65 40 34 00 5f 5f 69 6d 70 5f 5f 52 74  | codeStringToAnsiSize@4.__imp__Rt | 
| 27460 |  6c 78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54    6f 4f 65 6d 53 69 7a 65 40 34 00 5f 5f 69 6d 70  | lxUnicodeStringToOemSize@4.__imp | 
| 27480 |  5f 5f 56 65 72 53 65 74 43 6f 6e 64 69 74 69 6f    6e 4d 61 73 6b 40 31 36 00 5f 5f 69 6d 70 5f 5f  | __VerSetConditionMask@16.__imp__ | 
| 274a0 |  5a 77 41 63 63 65 70 74 43 6f 6e 6e 65 63 74 50    6f 72 74 40 32 34 00 5f 5f 69 6d 70 5f 5f 5a 77  | ZwAcceptConnectPort@24.__imp__Zw | 
| 274c0 |  41 63 63 65 73 73 43 68 65 63 6b 40 33 32 00 5f    5f 69 6d 70 5f 5f 5a 77 41 63 63 65 73 73 43 68  | AccessCheck@32.__imp__ZwAccessCh | 
| 274e0 |  65 63 6b 41 6e 64 41 75 64 69 74 41 6c 61 72 6d    40 34 34 00 5f 5f 69 6d 70 5f 5f 5a 77 41 63 63  | eckAndAuditAlarm@44.__imp__ZwAcc | 
| 27500 |  65 73 73 43 68 65 63 6b 42 79 54 79 70 65 40 34    34 00 5f 5f 69 6d 70 5f 5f 5a 77 41 63 63 65 73  | essCheckByType@44.__imp__ZwAcces | 
| 27520 |  73 43 68 65 63 6b 42 79 54 79 70 65 41 6e 64 41    75 64 69 74 41 6c 61 72 6d 40 36 34 00 5f 5f 69  | sCheckByTypeAndAuditAlarm@64.__i | 
| 27540 |  6d 70 5f 5f 5a 77 41 63 63 65 73 73 43 68 65 63    6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73  | mp__ZwAccessCheckByTypeResultLis | 
| 27560 |  74 40 34 34 00 5f 5f 69 6d 70 5f 5f 5a 77 41 63    63 65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52  | t@44.__imp__ZwAccessCheckByTypeR | 
| 27580 |  65 73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69    74 41 6c 61 72 6d 40 36 34 00 5f 5f 69 6d 70 5f  | esultListAndAuditAlarm@64.__imp_ | 
| 275a0 |  5f 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 79    54 79 70 65 52 65 73 75 6c 74 4c 69 73 74 41 6e  | _ZwAccessCheckByTypeResultListAn | 
| 275c0 |  64 41 75 64 69 74 41 6c 61 72 6d 42 79 48 61 6e    64 6c 65 40 36 38 00 5f 5f 69 6d 70 5f 5f 5a 77  | dAuditAlarmByHandle@68.__imp__Zw | 
| 275e0 |  41 64 64 41 74 6f 6d 40 31 32 00 5f 5f 69 6d 70    5f 5f 5a 77 41 64 64 42 6f 6f 74 45 6e 74 72 79  | AddAtom@12.__imp__ZwAddBootEntry | 
| 27600 |  40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 41 64 64 44    72 69 76 65 72 45 6e 74 72 79 40 38 00 5f 5f 69  | @8.__imp__ZwAddDriverEntry@8.__i | 
| 27620 |  6d 70 5f 5f 5a 77 41 64 6a 75 73 74 47 72 6f 75    70 73 54 6f 6b 65 6e 40 32 34 00 5f 5f 69 6d 70  | mp__ZwAdjustGroupsToken@24.__imp | 
| 27640 |  5f 5f 5a 77 41 64 6a 75 73 74 50 72 69 76 69 6c    65 67 65 73 54 6f 6b 65 6e 40 32 34 00 5f 5f 69  | __ZwAdjustPrivilegesToken@24.__i | 
| 27660 |  6d 70 5f 5f 5a 77 41 6c 65 72 74 52 65 73 75 6d    65 54 68 72 65 61 64 40 38 00 5f 5f 69 6d 70 5f  | mp__ZwAlertResumeThread@8.__imp_ | 
| 27680 |  5f 5a 77 41 6c 65 72 74 54 68 72 65 61 64 40 34    00 5f 5f 69 6d 70 5f 5f 5a 77 41 6c 6c 6f 63 61  | _ZwAlertThread@4.__imp__ZwAlloca | 
| 276a0 |  74 65 4c 6f 63 61 6c 6c 79 55 6e 69 71 75 65 49    64 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 41 6c 6c  | teLocallyUniqueId@4.__imp__ZwAll | 
| 276c0 |  6f 63 61 74 65 55 73 65 72 50 68 79 73 69 63 61    6c 50 61 67 65 73 40 31 32 00 5f 5f 69 6d 70 5f  | ocateUserPhysicalPages@12.__imp_ | 
| 276e0 |  5f 5a 77 41 6c 6c 6f 63 61 74 65 55 75 69 64 73    40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 41 6c 6c  | _ZwAllocateUuids@16.__imp__ZwAll | 
| 27700 |  6f 63 61 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f    72 79 40 32 34 00 5f 5f 69 6d 70 5f 5f 5a 77 41  | ocateVirtualMemory@24.__imp__ZwA | 
| 27720 |  70 70 68 65 6c 70 43 61 63 68 65 43 6f 6e 74 72    6f 6c 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 41 72  | pphelpCacheControl@8.__imp__ZwAr | 
| 27740 |  65 4d 61 70 70 65 64 46 69 6c 65 73 54 68 65 53    61 6d 65 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 41  | eMappedFilesTheSame@8.__imp__ZwA | 
| 27760 |  73 73 69 67 6e 50 72 6f 63 65 73 73 54 6f 4a 6f    62 4f 62 6a 65 63 74 40 38 00 5f 5f 69 6d 70 5f  | ssignProcessToJobObject@8.__imp_ | 
| 27780 |  5f 5a 77 43 61 6c 6c 62 61 63 6b 52 65 74 75 72    6e 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 43 61  | _ZwCallbackReturn@12.__imp__ZwCa | 
| 277a0 |  6e 63 65 6c 44 65 76 69 63 65 57 61 6b 65 75 70    52 65 71 75 65 73 74 40 34 00 5f 5f 69 6d 70 5f  | ncelDeviceWakeupRequest@4.__imp_ | 
| 277c0 |  5f 5a 77 43 61 6e 63 65 6c 49 6f 46 69 6c 65 40    38 00 5f 5f 69 6d 70 5f 5f 5a 77 43 61 6e 63 65  | _ZwCancelIoFile@8.__imp__ZwCance | 
| 277e0 |  6c 54 69 6d 65 72 40 38 00 5f 5f 69 6d 70 5f 5f    5a 77 43 6c 65 61 72 45 76 65 6e 74 40 34 00 5f  | lTimer@8.__imp__ZwClearEvent@4._ | 
| 27800 |  5f 69 6d 70 5f 5f 5a 77 43 6c 6f 73 65 40 34 00    5f 5f 69 6d 70 5f 5f 5a 77 43 6c 6f 73 65 4f 62  | _imp__ZwClose@4.__imp__ZwCloseOb | 
| 27820 |  6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d 40 31    32 00 5f 5f 69 6d 70 5f 5f 5a 77 43 6f 6d 70 61  | jectAuditAlarm@12.__imp__ZwCompa | 
| 27840 |  63 74 4b 65 79 73 40 38 00 5f 5f 69 6d 70 5f 5f    5a 77 43 6f 6d 70 61 72 65 54 6f 6b 65 6e 73 40  | ctKeys@8.__imp__ZwCompareTokens@ | 
| 27860 |  31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 43 6f 6d 70    6c 65 74 65 43 6f 6e 6e 65 63 74 50 6f 72 74 40  | 12.__imp__ZwCompleteConnectPort@ | 
| 27880 |  34 00 5f 5f 69 6d 70 5f 5f 5a 77 43 6f 6d 70 72    65 73 73 4b 65 79 40 34 00 5f 5f 69 6d 70 5f 5f  | 4.__imp__ZwCompressKey@4.__imp__ | 
| 278a0 |  5a 77 43 6f 6e 6e 65 63 74 50 6f 72 74 40 33 32    00 5f 5f 69 6d 70 5f 5f 5a 77 43 6f 6e 74 69 6e  | ZwConnectPort@32.__imp__ZwContin | 
| 278c0 |  75 65 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 43 72    65 61 74 65 44 65 62 75 67 4f 62 6a 65 63 74 40  | ue@8.__imp__ZwCreateDebugObject@ | 
| 278e0 |  31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 43 72 65 61    74 65 44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63  | 16.__imp__ZwCreateDirectoryObjec | 
| 27900 |  74 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 43 72    65 61 74 65 45 76 65 6e 74 40 32 30 00 5f 5f 69  | t@12.__imp__ZwCreateEvent@20.__i | 
| 27920 |  6d 70 5f 5f 5a 77 43 72 65 61 74 65 45 76 65 6e    74 50 61 69 72 40 31 32 00 5f 5f 69 6d 70 5f 5f  | mp__ZwCreateEventPair@12.__imp__ | 
| 27940 |  5a 77 43 72 65 61 74 65 46 69 6c 65 40 34 34 00    5f 5f 69 6d 70 5f 5f 5a 77 43 72 65 61 74 65 49  | ZwCreateFile@44.__imp__ZwCreateI | 
| 27960 |  6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 31 36 00 5f    5f 69 6d 70 5f 5f 5a 77 43 72 65 61 74 65 4a 6f  | oCompletion@16.__imp__ZwCreateJo | 
| 27980 |  62 4f 62 6a 65 63 74 40 31 32 00 5f 5f 69 6d 70    5f 5f 5a 77 43 72 65 61 74 65 4a 6f 62 53 65 74  | bObject@12.__imp__ZwCreateJobSet | 
| 279a0 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 43 72 65    61 74 65 4b 65 79 40 32 38 00 5f 5f 69 6d 70 5f  | @12.__imp__ZwCreateKey@28.__imp_ | 
| 279c0 |  5f 5a 77 43 72 65 61 74 65 4b 65 79 65 64 45 76    65 6e 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77  | _ZwCreateKeyedEvent@16.__imp__Zw | 
| 279e0 |  43 72 65 61 74 65 4d 61 69 6c 73 6c 6f 74 46 69    6c 65 40 33 32 00 5f 5f 69 6d 70 5f 5f 5a 77 43  | CreateMailslotFile@32.__imp__ZwC | 
| 27a00 |  72 65 61 74 65 4d 75 74 61 6e 74 40 31 36 00 5f    5f 69 6d 70 5f 5f 5a 77 43 72 65 61 74 65 4e 61  | reateMutant@16.__imp__ZwCreateNa | 
| 27a20 |  6d 65 64 50 69 70 65 46 69 6c 65 40 35 36 00 5f    5f 69 6d 70 5f 5f 5a 77 43 72 65 61 74 65 50 61  | medPipeFile@56.__imp__ZwCreatePa | 
| 27a40 |  67 69 6e 67 46 69 6c 65 40 31 36 00 5f 5f 69 6d    70 5f 5f 5a 77 43 72 65 61 74 65 50 6f 72 74 40  | gingFile@16.__imp__ZwCreatePort@ | 
| 27a60 |  32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 43 72 65 61    74 65 50 72 6f 63 65 73 73 40 33 32 00 5f 5f 69  | 20.__imp__ZwCreateProcess@32.__i | 
| 27a80 |  6d 70 5f 5f 5a 77 43 72 65 61 74 65 50 72 6f 63    65 73 73 45 78 40 33 36 00 5f 5f 69 6d 70 5f 5f  | mp__ZwCreateProcessEx@36.__imp__ | 
| 27aa0 |  5a 77 43 72 65 61 74 65 50 72 6f 66 69 6c 65 40    33 36 00 5f 5f 69 6d 70 5f 5f 5a 77 43 72 65 61  | ZwCreateProfile@36.__imp__ZwCrea | 
| 27ac0 |  74 65 53 65 63 74 69 6f 6e 40 32 38 00 5f 5f 69    6d 70 5f 5f 5a 77 43 72 65 61 74 65 53 65 6d 61  | teSection@28.__imp__ZwCreateSema | 
| 27ae0 |  70 68 6f 72 65 40 32 30 00 5f 5f 69 6d 70 5f 5f    5a 77 43 72 65 61 74 65 53 79 6d 62 6f 6c 69 63  | phore@20.__imp__ZwCreateSymbolic | 
| 27b00 |  4c 69 6e 6b 4f 62 6a 65 63 74 40 31 36 00 5f 5f    69 6d 70 5f 5f 5a 77 43 72 65 61 74 65 54 68 72  | LinkObject@16.__imp__ZwCreateThr | 
| 27b20 |  65 61 64 40 33 32 00 5f 5f 69 6d 70 5f 5f 5a 77    43 72 65 61 74 65 54 69 6d 65 72 40 31 36 00 5f  | ead@32.__imp__ZwCreateTimer@16._ | 
| 27b40 |  5f 69 6d 70 5f 5f 5a 77 43 72 65 61 74 65 54 6f    6b 65 6e 40 35 32 00 5f 5f 69 6d 70 5f 5f 5a 77  | _imp__ZwCreateToken@52.__imp__Zw | 
| 27b60 |  43 72 65 61 74 65 57 61 69 74 61 62 6c 65 50 6f    72 74 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 44  | CreateWaitablePort@20.__imp__ZwD | 
| 27b80 |  65 62 75 67 41 63 74 69 76 65 50 72 6f 63 65 73    73 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 44 65 62  | ebugActiveProcess@8.__imp__ZwDeb | 
| 27ba0 |  75 67 43 6f 6e 74 69 6e 75 65 40 31 32 00 5f 5f    69 6d 70 5f 5f 5a 77 44 65 6c 61 79 45 78 65 63  | ugContinue@12.__imp__ZwDelayExec | 
| 27bc0 |  75 74 69 6f 6e 40 38 00 5f 5f 69 6d 70 5f 5f 5a    77 44 65 6c 65 74 65 41 74 6f 6d 40 34 00 5f 5f  | ution@8.__imp__ZwDeleteAtom@4.__ | 
| 27be0 |  69 6d 70 5f 5f 5a 77 44 65 6c 65 74 65 42 6f 6f    74 45 6e 74 72 79 40 34 00 5f 5f 69 6d 70 5f 5f  | imp__ZwDeleteBootEntry@4.__imp__ | 
| 27c00 |  5a 77 44 65 6c 65 74 65 44 72 69 76 65 72 45 6e    74 72 79 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 44  | ZwDeleteDriverEntry@4.__imp__ZwD | 
| 27c20 |  65 6c 65 74 65 46 69 6c 65 40 34 00 5f 5f 69 6d    70 5f 5f 5a 77 44 65 6c 65 74 65 4b 65 79 40 34  | eleteFile@4.__imp__ZwDeleteKey@4 | 
| 27c40 |  00 5f 5f 69 6d 70 5f 5f 5a 77 44 65 6c 65 74 65    4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d  | .__imp__ZwDeleteObjectAuditAlarm | 
| 27c60 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 44 65 6c    65 74 65 56 61 6c 75 65 4b 65 79 40 38 00 5f 5f  | @12.__imp__ZwDeleteValueKey@8.__ | 
| 27c80 |  69 6d 70 5f 5f 5a 77 44 65 76 69 63 65 49 6f 43    6f 6e 74 72 6f 6c 46 69 6c 65 40 34 30 00 5f 5f  | imp__ZwDeviceIoControlFile@40.__ | 
| 27ca0 |  69 6d 70 5f 5f 5a 77 44 69 73 70 6c 61 79 53 74    72 69 6e 67 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77  | imp__ZwDisplayString@4.__imp__Zw | 
| 27cc0 |  44 75 70 6c 69 63 61 74 65 4f 62 6a 65 63 74 40    32 38 00 5f 5f 69 6d 70 5f 5f 5a 77 44 75 70 6c  | DuplicateObject@28.__imp__ZwDupl | 
| 27ce0 |  69 63 61 74 65 54 6f 6b 65 6e 40 32 34 00 5f 5f    69 6d 70 5f 5f 5a 77 45 6e 75 6d 65 72 61 74 65  | icateToken@24.__imp__ZwEnumerate | 
| 27d00 |  42 6f 6f 74 45 6e 74 72 69 65 73 40 38 00 5f 5f    69 6d 70 5f 5f 5a 77 45 6e 75 6d 65 72 61 74 65  | BootEntries@8.__imp__ZwEnumerate | 
| 27d20 |  44 72 69 76 65 72 45 6e 74 72 69 65 73 40 38 00    5f 5f 69 6d 70 5f 5f 5a 77 45 6e 75 6d 65 72 61  | DriverEntries@8.__imp__ZwEnumera | 
| 27d40 |  74 65 4b 65 79 40 32 34 00 5f 5f 69 6d 70 5f 5f    5a 77 45 6e 75 6d 65 72 61 74 65 53 79 73 74 65  | teKey@24.__imp__ZwEnumerateSyste | 
| 27d60 |  6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75    65 73 45 78 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a  | mEnvironmentValuesEx@12.__imp__Z | 
| 27d80 |  77 45 6e 75 6d 65 72 61 74 65 56 61 6c 75 65 4b    65 79 40 32 34 00 5f 5f 69 6d 70 5f 5f 5a 77 45  | wEnumerateValueKey@24.__imp__ZwE | 
| 27da0 |  78 74 65 6e 64 53 65 63 74 69 6f 6e 40 38 00 5f    5f 69 6d 70 5f 5f 5a 77 46 69 6c 74 65 72 54 6f  | xtendSection@8.__imp__ZwFilterTo | 
| 27dc0 |  6b 65 6e 40 32 34 00 5f 5f 69 6d 70 5f 5f 5a 77    46 69 6e 64 41 74 6f 6d 40 31 32 00 5f 5f 69 6d  | ken@24.__imp__ZwFindAtom@12.__im | 
| 27de0 |  70 5f 5f 5a 77 46 6c 75 73 68 42 75 66 66 65 72    73 46 69 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 5a  | p__ZwFlushBuffersFile@8.__imp__Z | 
| 27e00 |  77 46 6c 75 73 68 49 6e 73 74 72 75 63 74 69 6f    6e 43 61 63 68 65 40 31 32 00 5f 5f 69 6d 70 5f  | wFlushInstructionCache@12.__imp_ | 
| 27e20 |  5f 5a 77 46 6c 75 73 68 4b 65 79 40 34 00 5f 5f    69 6d 70 5f 5f 5a 77 46 6c 75 73 68 56 69 72 74  | _ZwFlushKey@4.__imp__ZwFlushVirt | 
| 27e40 |  75 61 6c 4d 65 6d 6f 72 79 40 31 36 00 5f 5f 69    6d 70 5f 5f 5a 77 46 6c 75 73 68 57 72 69 74 65  | ualMemory@16.__imp__ZwFlushWrite | 
| 27e60 |  42 75 66 66 65 72 40 30 00 5f 5f 69 6d 70 5f 5f    5a 77 46 72 65 65 55 73 65 72 50 68 79 73 69 63  | Buffer@0.__imp__ZwFreeUserPhysic | 
| 27e80 |  61 6c 50 61 67 65 73 40 31 32 00 5f 5f 69 6d 70    5f 5f 5a 77 46 72 65 65 56 69 72 74 75 61 6c 4d  | alPages@12.__imp__ZwFreeVirtualM | 
| 27ea0 |  65 6d 6f 72 79 40 31 36 00 5f 5f 69 6d 70 5f 5f    5a 77 46 73 43 6f 6e 74 72 6f 6c 46 69 6c 65 40  | emory@16.__imp__ZwFsControlFile@ | 
| 27ec0 |  34 30 00 5f 5f 69 6d 70 5f 5f 5a 77 47 65 74 43    6f 6e 74 65 78 74 54 68 72 65 61 64 40 38 00 5f  | 40.__imp__ZwGetContextThread@8._ | 
| 27ee0 |  5f 69 6d 70 5f 5f 5a 77 47 65 74 43 75 72 72 65    6e 74 50 72 6f 63 65 73 73 6f 72 4e 75 6d 62 65  | _imp__ZwGetCurrentProcessorNumbe | 
| 27f00 |  72 40 30 00 5f 5f 69 6d 70 5f 5f 5a 77 47 65 74    44 65 76 69 63 65 50 6f 77 65 72 53 74 61 74 65  | r@0.__imp__ZwGetDevicePowerState | 
| 27f20 |  40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 47 65 74 50    6c 75 67 50 6c 61 79 45 76 65 6e 74 40 31 36 00  | @8.__imp__ZwGetPlugPlayEvent@16. | 
| 27f40 |  5f 5f 69 6d 70 5f 5f 5a 77 47 65 74 57 72 69 74    65 57 61 74 63 68 40 32 38 00 5f 5f 69 6d 70 5f  | __imp__ZwGetWriteWatch@28.__imp_ | 
| 27f60 |  5f 5a 77 49 6d 70 65 72 73 6f 6e 61 74 65 41 6e    6f 6e 79 6d 6f 75 73 54 6f 6b 65 6e 40 34 00 5f  | _ZwImpersonateAnonymousToken@4._ | 
| 27f80 |  5f 69 6d 70 5f 5f 5a 77 49 6d 70 65 72 73 6f 6e    61 74 65 43 6c 69 65 6e 74 4f 66 50 6f 72 74 40  | _imp__ZwImpersonateClientOfPort@ | 
| 27fa0 |  38 00 5f 5f 69 6d 70 5f 5f 5a 77 49 6d 70 65 72    73 6f 6e 61 74 65 54 68 72 65 61 64 40 31 32 00  | 8.__imp__ZwImpersonateThread@12. | 
| 27fc0 |  5f 5f 69 6d 70 5f 5f 5a 77 49 6e 69 74 69 61 6c    69 7a 65 52 65 67 69 73 74 72 79 40 34 00 5f 5f  | __imp__ZwInitializeRegistry@4.__ | 
| 27fe0 |  69 6d 70 5f 5f 5a 77 49 6e 69 74 69 61 74 65 50    6f 77 65 72 41 63 74 69 6f 6e 40 31 36 00 5f 5f  | imp__ZwInitiatePowerAction@16.__ | 
| 28000 |  69 6d 70 5f 5f 5a 77 49 73 50 72 6f 63 65 73 73    49 6e 4a 6f 62 40 38 00 5f 5f 69 6d 70 5f 5f 5a  | imp__ZwIsProcessInJob@8.__imp__Z | 
| 28020 |  77 49 73 53 79 73 74 65 6d 52 65 73 75 6d 65 41    75 74 6f 6d 61 74 69 63 40 30 00 5f 5f 69 6d 70  | wIsSystemResumeAutomatic@0.__imp | 
| 28040 |  5f 5f 5a 77 4c 69 73 74 65 6e 50 6f 72 74 40 38    00 5f 5f 69 6d 70 5f 5f 5a 77 4c 6f 61 64 44 72  | __ZwListenPort@8.__imp__ZwLoadDr | 
| 28060 |  69 76 65 72 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77    4c 6f 61 64 4b 65 79 32 40 31 32 00 5f 5f 69 6d  | iver@4.__imp__ZwLoadKey2@12.__im | 
| 28080 |  70 5f 5f 5a 77 4c 6f 61 64 4b 65 79 40 38 00 5f    5f 69 6d 70 5f 5f 5a 77 4c 6f 61 64 4b 65 79 45  | p__ZwLoadKey@8.__imp__ZwLoadKeyE | 
| 280a0 |  78 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 4c 6f    63 6b 46 69 6c 65 40 34 30 00 5f 5f 69 6d 70 5f  | x@16.__imp__ZwLockFile@40.__imp_ | 
| 280c0 |  5f 5a 77 4c 6f 63 6b 50 72 6f 64 75 63 74 41 63    74 69 76 61 74 69 6f 6e 4b 65 79 73 40 38 00 5f  | _ZwLockProductActivationKeys@8._ | 
| 280e0 |  5f 69 6d 70 5f 5f 5a 77 4c 6f 63 6b 52 65 67 69    73 74 72 79 4b 65 79 40 34 00 5f 5f 69 6d 70 5f  | _imp__ZwLockRegistryKey@4.__imp_ | 
| 28100 |  5f 5a 77 4c 6f 63 6b 56 69 72 74 75 61 6c 4d 65    6d 6f 72 79 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a  | _ZwLockVirtualMemory@16.__imp__Z | 
| 28120 |  77 4d 61 6b 65 50 65 72 6d 61 6e 65 6e 74 4f 62    6a 65 63 74 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77  | wMakePermanentObject@4.__imp__Zw | 
| 28140 |  4d 61 6b 65 54 65 6d 70 6f 72 61 72 79 4f 62 6a    65 63 74 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 4d  | MakeTemporaryObject@4.__imp__ZwM | 
| 28160 |  61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50 61    67 65 73 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77  | apUserPhysicalPages@12.__imp__Zw | 
| 28180 |  4d 61 70 55 73 65 72 50 68 79 73 69 63 61 6c 50    61 67 65 73 53 63 61 74 74 65 72 40 31 32 00 5f  | MapUserPhysicalPagesScatter@12._ | 
| 281a0 |  5f 69 6d 70 5f 5f 5a 77 4d 61 70 56 69 65 77 4f    66 53 65 63 74 69 6f 6e 40 34 30 00 5f 5f 69 6d  | _imp__ZwMapViewOfSection@40.__im | 
| 281c0 |  70 5f 5f 5a 77 4d 6f 64 69 66 79 42 6f 6f 74 45    6e 74 72 79 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77  | p__ZwModifyBootEntry@4.__imp__Zw | 
| 281e0 |  4d 6f 64 69 66 79 44 72 69 76 65 72 45 6e 74 72    79 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 4e 6f 74  | ModifyDriverEntry@4.__imp__ZwNot | 
| 28200 |  69 66 79 43 68 61 6e 67 65 44 69 72 65 63 74 6f    72 79 46 69 6c 65 40 33 36 00 5f 5f 69 6d 70 5f  | ifyChangeDirectoryFile@36.__imp_ | 
| 28220 |  5f 5a 77 4e 6f 74 69 66 79 43 68 61 6e 67 65 4b    65 79 40 34 30 00 5f 5f 69 6d 70 5f 5f 5a 77 4e  | _ZwNotifyChangeKey@40.__imp__ZwN | 
| 28240 |  6f 74 69 66 79 43 68 61 6e 67 65 4d 75 6c 74 69    70 6c 65 4b 65 79 73 40 34 38 00 5f 5f 69 6d 70  | otifyChangeMultipleKeys@48.__imp | 
| 28260 |  5f 5f 5a 77 4f 70 65 6e 44 69 72 65 63 74 6f 72    79 4f 62 6a 65 63 74 40 31 32 00 5f 5f 69 6d 70  | __ZwOpenDirectoryObject@12.__imp | 
| 28280 |  5f 5f 5a 77 4f 70 65 6e 45 76 65 6e 74 40 31 32    00 5f 5f 69 6d 70 5f 5f 5a 77 4f 70 65 6e 45 76  | __ZwOpenEvent@12.__imp__ZwOpenEv | 
| 282a0 |  65 6e 74 50 61 69 72 40 31 32 00 5f 5f 69 6d 70    5f 5f 5a 77 4f 70 65 6e 46 69 6c 65 40 32 34 00  | entPair@12.__imp__ZwOpenFile@24. | 
| 282c0 |  5f 5f 69 6d 70 5f 5f 5a 77 4f 70 65 6e 49 6f 43    6f 6d 70 6c 65 74 69 6f 6e 40 31 32 00 5f 5f 69  | __imp__ZwOpenIoCompletion@12.__i | 
| 282e0 |  6d 70 5f 5f 5a 77 4f 70 65 6e 4a 6f 62 4f 62 6a    65 63 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77  | mp__ZwOpenJobObject@12.__imp__Zw | 
| 28300 |  4f 70 65 6e 4b 65 79 40 31 32 00 5f 5f 69 6d 70    5f 5f 5a 77 4f 70 65 6e 4b 65 79 65 64 45 76 65  | OpenKey@12.__imp__ZwOpenKeyedEve | 
| 28320 |  6e 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 4f    70 65 6e 4d 75 74 61 6e 74 40 31 32 00 5f 5f 69  | nt@12.__imp__ZwOpenMutant@12.__i | 
| 28340 |  6d 70 5f 5f 5a 77 4f 70 65 6e 4f 62 6a 65 63 74    41 75 64 69 74 41 6c 61 72 6d 40 34 38 00 5f 5f  | mp__ZwOpenObjectAuditAlarm@48.__ | 
| 28360 |  69 6d 70 5f 5f 5a 77 4f 70 65 6e 50 72 6f 63 65    73 73 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 4f  | imp__ZwOpenProcess@16.__imp__ZwO | 
| 28380 |  70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 40    31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 4f 70 65 6e  | penProcessToken@12.__imp__ZwOpen | 
| 283a0 |  50 72 6f 63 65 73 73 54 6f 6b 65 6e 45 78 40 31    36 00 5f 5f 69 6d 70 5f 5f 5a 77 4f 70 65 6e 53  | ProcessTokenEx@16.__imp__ZwOpenS | 
| 283c0 |  65 63 74 69 6f 6e 40 31 32 00 5f 5f 69 6d 70 5f    5f 5a 77 4f 70 65 6e 53 65 6d 61 70 68 6f 72 65  | ection@12.__imp__ZwOpenSemaphore | 
| 283e0 |  40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 4f 70 65    6e 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a  | @12.__imp__ZwOpenSymbolicLinkObj | 
| 28400 |  65 63 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77    4f 70 65 6e 54 68 72 65 61 64 40 31 36 00 5f 5f  | ect@12.__imp__ZwOpenThread@16.__ | 
| 28420 |  69 6d 70 5f 5f 5a 77 4f 70 65 6e 54 68 72 65 61    64 54 6f 6b 65 6e 40 31 36 00 5f 5f 69 6d 70 5f  | imp__ZwOpenThreadToken@16.__imp_ | 
| 28440 |  5f 5a 77 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b    65 6e 45 78 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a  | _ZwOpenThreadTokenEx@20.__imp__Z | 
| 28460 |  77 4f 70 65 6e 54 69 6d 65 72 40 31 32 00 5f 5f    69 6d 70 5f 5f 5a 77 50 6c 75 67 50 6c 61 79 43  | wOpenTimer@12.__imp__ZwPlugPlayC | 
| 28480 |  6f 6e 74 72 6f 6c 40 31 32 00 5f 5f 69 6d 70 5f    5f 5a 77 50 6f 77 65 72 49 6e 66 6f 72 6d 61 74  | ontrol@12.__imp__ZwPowerInformat | 
| 284a0 |  69 6f 6e 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77    50 72 69 76 69 6c 65 67 65 43 68 65 63 6b 40 31  | ion@20.__imp__ZwPrivilegeCheck@1 | 
| 284c0 |  32 00 5f 5f 69 6d 70 5f 5f 5a 77 50 72 69 76 69    6c 65 67 65 4f 62 6a 65 63 74 41 75 64 69 74 41  | 2.__imp__ZwPrivilegeObjectAuditA | 
| 284e0 |  6c 61 72 6d 40 32 34 00 5f 5f 69 6d 70 5f 5f 5a    77 50 72 69 76 69 6c 65 67 65 64 53 65 72 76 69  | larm@24.__imp__ZwPrivilegedServi | 
| 28500 |  63 65 41 75 64 69 74 41 6c 61 72 6d 40 32 30 00    5f 5f 69 6d 70 5f 5f 5a 77 50 72 6f 74 65 63 74  | ceAuditAlarm@20.__imp__ZwProtect | 
| 28520 |  56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 32 30    00 5f 5f 69 6d 70 5f 5f 5a 77 50 75 6c 73 65 45  | VirtualMemory@20.__imp__ZwPulseE | 
| 28540 |  76 65 6e 74 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77    51 75 65 72 79 41 74 74 72 69 62 75 74 65 73 46  | vent@8.__imp__ZwQueryAttributesF | 
| 28560 |  69 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 51    75 65 72 79 42 6f 6f 74 45 6e 74 72 79 4f 72 64  | ile@8.__imp__ZwQueryBootEntryOrd | 
| 28580 |  65 72 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75    65 72 79 42 6f 6f 74 4f 70 74 69 6f 6e 73 40 38  | er@8.__imp__ZwQueryBootOptions@8 | 
| 285a0 |  00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79 44    65 62 75 67 46 69 6c 74 65 72 53 74 61 74 65 40  | .__imp__ZwQueryDebugFilterState@ | 
| 285c0 |  38 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79    44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 40 38 00  | 8.__imp__ZwQueryDefaultLocale@8. | 
| 285e0 |  5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79 44 65    66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67 65 40  | __imp__ZwQueryDefaultUILanguage@ | 
| 28600 |  34 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79    44 69 72 65 63 74 6f 72 79 46 69 6c 65 40 34 34  | 4.__imp__ZwQueryDirectoryFile@44 | 
| 28620 |  00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79 44    69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 40 32  | .__imp__ZwQueryDirectoryObject@2 | 
| 28640 |  38 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79    44 72 69 76 65 72 45 6e 74 72 79 4f 72 64 65 72  | 8.__imp__ZwQueryDriverEntryOrder | 
| 28660 |  40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72    79 45 61 46 69 6c 65 40 33 36 00 5f 5f 69 6d 70  | @8.__imp__ZwQueryEaFile@36.__imp | 
| 28680 |  5f 5f 5a 77 51 75 65 72 79 45 76 65 6e 74 40 32    30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79  | __ZwQueryEvent@20.__imp__ZwQuery | 
| 286a0 |  46 75 6c 6c 41 74 74 72 69 62 75 74 65 73 46 69    6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75  | FullAttributesFile@8.__imp__ZwQu | 
| 286c0 |  65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 74    6f 6d 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51  | eryInformationAtom@20.__imp__ZwQ | 
| 286e0 |  75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 46    69 6c 65 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77  | ueryInformationFile@20.__imp__Zw | 
| 28700 |  51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e    4a 6f 62 4f 62 6a 65 63 74 40 32 30 00 5f 5f 69  | QueryInformationJobObject@20.__i | 
| 28720 |  6d 70 5f 5f 5a 77 51 75 65 72 79 49 6e 66 6f 72    6d 61 74 69 6f 6e 50 6f 72 74 40 32 30 00 5f 5f  | mp__ZwQueryInformationPort@20.__ | 
| 28740 |  69 6d 70 5f 5f 5a 77 51 75 65 72 79 49 6e 66 6f    72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73 40 32  | imp__ZwQueryInformationProcess@2 | 
| 28760 |  30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79    49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61  | 0.__imp__ZwQueryInformationThrea | 
| 28780 |  64 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75    65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 6f  | d@20.__imp__ZwQueryInformationTo | 
| 287a0 |  6b 65 6e 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77    51 75 65 72 79 49 6e 73 74 61 6c 6c 55 49 4c 61  | ken@20.__imp__ZwQueryInstallUILa | 
| 287c0 |  6e 67 75 61 67 65 40 34 00 5f 5f 69 6d 70 5f 5f    5a 77 51 75 65 72 79 49 6e 74 65 72 76 61 6c 50  | nguage@4.__imp__ZwQueryIntervalP | 
| 287e0 |  72 6f 66 69 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f    5a 77 51 75 65 72 79 49 6f 43 6f 6d 70 6c 65 74  | rofile@8.__imp__ZwQueryIoComplet | 
| 28800 |  69 6f 6e 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77    51 75 65 72 79 4b 65 79 40 32 30 00 5f 5f 69 6d  | ion@20.__imp__ZwQueryKey@20.__im | 
| 28820 |  70 5f 5f 5a 77 51 75 65 72 79 4d 75 6c 74 69 70    6c 65 56 61 6c 75 65 4b 65 79 40 32 34 00 5f 5f  | p__ZwQueryMultipleValueKey@24.__ | 
| 28840 |  69 6d 70 5f 5f 5a 77 51 75 65 72 79 4d 75 74 61    6e 74 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51  | imp__ZwQueryMutant@20.__imp__ZwQ | 
| 28860 |  75 65 72 79 4f 62 6a 65 63 74 40 32 30 00 5f 5f    69 6d 70 5f 5f 5a 77 51 75 65 72 79 4f 70 65 6e  | ueryObject@20.__imp__ZwQueryOpen | 
| 28880 |  53 75 62 4b 65 79 73 40 38 00 5f 5f 69 6d 70 5f    5f 5a 77 51 75 65 72 79 4f 70 65 6e 53 75 62 4b  | SubKeys@8.__imp__ZwQueryOpenSubK | 
| 288a0 |  65 79 73 45 78 40 31 36 00 5f 5f 69 6d 70 5f 5f    5a 77 51 75 65 72 79 50 65 72 66 6f 72 6d 61 6e  | eysEx@16.__imp__ZwQueryPerforman | 
| 288c0 |  63 65 43 6f 75 6e 74 65 72 40 38 00 5f 5f 69 6d    70 5f 5f 5a 77 51 75 65 72 79 50 6f 72 74 49 6e  | ceCounter@8.__imp__ZwQueryPortIn | 
| 288e0 |  66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73    40 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72  | formationProcess@0.__imp__ZwQuer | 
| 28900 |  79 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69 6f    6e 46 69 6c 65 40 33 36 00 5f 5f 69 6d 70 5f 5f  | yQuotaInformationFile@36.__imp__ | 
| 28920 |  5a 77 51 75 65 72 79 53 65 63 74 69 6f 6e 40 32    30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79  | ZwQuerySection@20.__imp__ZwQuery | 
| 28940 |  53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 40 32    30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79  | SecurityObject@20.__imp__ZwQuery | 
| 28960 |  53 65 6d 61 70 68 6f 72 65 40 32 30 00 5f 5f 69    6d 70 5f 5f 5a 77 51 75 65 72 79 53 79 6d 62 6f  | Semaphore@20.__imp__ZwQuerySymbo | 
| 28980 |  6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 40 31 32    00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79 53  | licLinkObject@12.__imp__ZwQueryS | 
| 289a0 |  79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74    56 61 6c 75 65 40 31 36 00 5f 5f 69 6d 70 5f 5f  | ystemEnvironmentValue@16.__imp__ | 
| 289c0 |  5a 77 51 75 65 72 79 53 79 73 74 65 6d 45 6e 76    69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 45 78 40  | ZwQuerySystemEnvironmentValueEx@ | 
| 289e0 |  32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72    79 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61 74 69  | 20.__imp__ZwQuerySystemInformati | 
| 28a00 |  6f 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 51    75 65 72 79 53 79 73 74 65 6d 54 69 6d 65 40 34  | on@16.__imp__ZwQuerySystemTime@4 | 
| 28a20 |  00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79 54    69 6d 65 72 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a  | .__imp__ZwQueryTimer@20.__imp__Z | 
| 28a40 |  77 51 75 65 72 79 54 69 6d 65 72 52 65 73 6f 6c    75 74 69 6f 6e 40 31 32 00 5f 5f 69 6d 70 5f 5f  | wQueryTimerResolution@12.__imp__ | 
| 28a60 |  5a 77 51 75 65 72 79 56 61 6c 75 65 4b 65 79 40    32 34 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72  | ZwQueryValueKey@24.__imp__ZwQuer | 
| 28a80 |  79 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 32    34 00 5f 5f 69 6d 70 5f 5f 5a 77 51 75 65 72 79  | yVirtualMemory@24.__imp__ZwQuery | 
| 28aa0 |  56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f    6e 46 69 6c 65 40 32 30 00 5f 5f 69 6d 70 5f 5f  | VolumeInformationFile@20.__imp__ | 
| 28ac0 |  5a 77 51 75 65 75 65 41 70 63 54 68 72 65 61 64    40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 52 61 69  | ZwQueueApcThread@20.__imp__ZwRai | 
| 28ae0 |  73 65 45 78 63 65 70 74 69 6f 6e 40 31 32 00 5f    5f 69 6d 70 5f 5f 5a 77 52 61 69 73 65 48 61 72  | seException@12.__imp__ZwRaiseHar | 
| 28b00 |  64 45 72 72 6f 72 40 32 34 00 5f 5f 69 6d 70 5f    5f 5a 77 52 65 61 64 46 69 6c 65 40 33 36 00 5f  | dError@24.__imp__ZwReadFile@36._ | 
| 28b20 |  5f 69 6d 70 5f 5f 5a 77 52 65 61 64 46 69 6c 65    53 63 61 74 74 65 72 40 33 36 00 5f 5f 69 6d 70  | _imp__ZwReadFileScatter@36.__imp | 
| 28b40 |  5f 5f 5a 77 52 65 61 64 52 65 71 75 65 73 74 44    61 74 61 40 32 34 00 5f 5f 69 6d 70 5f 5f 5a 77  | __ZwReadRequestData@24.__imp__Zw | 
| 28b60 |  52 65 61 64 56 69 72 74 75 61 6c 4d 65 6d 6f 72    79 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 52 65  | ReadVirtualMemory@20.__imp__ZwRe | 
| 28b80 |  67 69 73 74 65 72 54 68 72 65 61 64 54 65 72 6d    69 6e 61 74 65 50 6f 72 74 40 34 00 5f 5f 69 6d  | gisterThreadTerminatePort@4.__im | 
| 28ba0 |  70 5f 5f 5a 77 52 65 6c 65 61 73 65 4b 65 79 65    64 45 76 65 6e 74 40 31 36 00 5f 5f 69 6d 70 5f  | p__ZwReleaseKeyedEvent@16.__imp_ | 
| 28bc0 |  5f 5a 77 52 65 6c 65 61 73 65 4d 75 74 61 6e 74    40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 52 65 6c 65  | _ZwReleaseMutant@8.__imp__ZwRele | 
| 28be0 |  61 73 65 53 65 6d 61 70 68 6f 72 65 40 31 32 00    5f 5f 69 6d 70 5f 5f 5a 77 52 65 6d 6f 76 65 49  | aseSemaphore@12.__imp__ZwRemoveI | 
| 28c00 |  6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 32 30 00 5f    5f 69 6d 70 5f 5f 5a 77 52 65 6d 6f 76 65 50 72  | oCompletion@20.__imp__ZwRemovePr | 
| 28c20 |  6f 63 65 73 73 44 65 62 75 67 40 38 00 5f 5f 69    6d 70 5f 5f 5a 77 52 65 6e 61 6d 65 4b 65 79 40  | ocessDebug@8.__imp__ZwRenameKey@ | 
| 28c40 |  38 00 5f 5f 69 6d 70 5f 5f 5a 77 52 65 70 6c 61    63 65 4b 65 79 40 31 32 00 5f 5f 69 6d 70 5f 5f  | 8.__imp__ZwReplaceKey@12.__imp__ | 
| 28c60 |  5a 77 52 65 70 6c 79 50 6f 72 74 40 38 00 5f 5f    69 6d 70 5f 5f 5a 77 52 65 70 6c 79 57 61 69 74  | ZwReplyPort@8.__imp__ZwReplyWait | 
| 28c80 |  52 65 63 65 69 76 65 50 6f 72 74 40 31 36 00 5f    5f 69 6d 70 5f 5f 5a 77 52 65 70 6c 79 57 61 69  | ReceivePort@16.__imp__ZwReplyWai | 
| 28ca0 |  74 52 65 63 65 69 76 65 50 6f 72 74 45 78 40 32    30 00 5f 5f 69 6d 70 5f 5f 5a 77 52 65 70 6c 79  | tReceivePortEx@20.__imp__ZwReply | 
| 28cc0 |  57 61 69 74 52 65 70 6c 79 50 6f 72 74 40 38 00    5f 5f 69 6d 70 5f 5f 5a 77 52 65 71 75 65 73 74  | WaitReplyPort@8.__imp__ZwRequest | 
| 28ce0 |  44 65 76 69 63 65 57 61 6b 65 75 70 40 34 00 5f    5f 69 6d 70 5f 5f 5a 77 52 65 71 75 65 73 74 50  | DeviceWakeup@4.__imp__ZwRequestP | 
| 28d00 |  6f 72 74 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 52    65 71 75 65 73 74 57 61 69 74 52 65 70 6c 79 50  | ort@8.__imp__ZwRequestWaitReplyP | 
| 28d20 |  6f 72 74 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77    52 65 71 75 65 73 74 57 61 6b 65 75 70 4c 61 74  | ort@12.__imp__ZwRequestWakeupLat | 
| 28d40 |  65 6e 63 79 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77    52 65 73 65 74 45 76 65 6e 74 40 38 00 5f 5f 69  | ency@4.__imp__ZwResetEvent@8.__i | 
| 28d60 |  6d 70 5f 5f 5a 77 52 65 73 65 74 57 72 69 74 65    57 61 74 63 68 40 31 32 00 5f 5f 69 6d 70 5f 5f  | mp__ZwResetWriteWatch@12.__imp__ | 
| 28d80 |  5a 77 52 65 73 74 6f 72 65 4b 65 79 40 31 32 00    5f 5f 69 6d 70 5f 5f 5a 77 52 65 73 75 6d 65 50  | ZwRestoreKey@12.__imp__ZwResumeP | 
| 28da0 |  72 6f 63 65 73 73 40 34 00 5f 5f 69 6d 70 5f 5f    5a 77 52 65 73 75 6d 65 54 68 72 65 61 64 40 38  | rocess@4.__imp__ZwResumeThread@8 | 
| 28dc0 |  00 5f 5f 69 6d 70 5f 5f 5a 77 53 61 76 65 4b 65    79 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 53 61 76  | .__imp__ZwSaveKey@8.__imp__ZwSav | 
| 28de0 |  65 4b 65 79 45 78 40 31 32 00 5f 5f 69 6d 70 5f    5f 5a 77 53 61 76 65 4d 65 72 67 65 64 4b 65 79  | eKeyEx@12.__imp__ZwSaveMergedKey | 
| 28e00 |  73 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65    63 75 72 65 43 6f 6e 6e 65 63 74 50 6f 72 74 40  | s@12.__imp__ZwSecureConnectPort@ | 
| 28e20 |  33 36 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65 74 42    6f 6f 74 45 6e 74 72 79 4f 72 64 65 72 40 38 00  | 36.__imp__ZwSetBootEntryOrder@8. | 
| 28e40 |  5f 5f 69 6d 70 5f 5f 5a 77 53 65 74 42 6f 6f 74    4f 70 74 69 6f 6e 73 40 38 00 5f 5f 69 6d 70 5f  | __imp__ZwSetBootOptions@8.__imp_ | 
| 28e60 |  5f 5a 77 53 65 74 43 6f 6e 74 65 78 74 54 68 72    65 61 64 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 53  | _ZwSetContextThread@8.__imp__ZwS | 
| 28e80 |  65 74 44 65 62 75 67 46 69 6c 74 65 72 53 74 61    74 65 40 31 32 00 5f 5f 69 6d 70 5f 5f 5a 77 53  | etDebugFilterState@12.__imp__ZwS | 
| 28ea0 |  65 74 44 65 66 61 75 6c 74 48 61 72 64 45 72 72    6f 72 50 6f 72 74 40 34 00 5f 5f 69 6d 70 5f 5f  | etDefaultHardErrorPort@4.__imp__ | 
| 28ec0 |  5a 77 53 65 74 44 65 66 61 75 6c 74 4c 6f 63 61    6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65  | ZwSetDefaultLocale@8.__imp__ZwSe | 
| 28ee0 |  74 44 65 66 61 75 6c 74 55 49 4c 61 6e 67 75 61    67 65 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65  | tDefaultUILanguage@4.__imp__ZwSe | 
| 28f00 |  74 44 72 69 76 65 72 45 6e 74 72 79 4f 72 64 65    72 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65 74  | tDriverEntryOrder@8.__imp__ZwSet | 
| 28f20 |  45 61 46 69 6c 65 40 31 36 00 5f 5f 69 6d 70 5f    5f 5a 77 53 65 74 45 76 65 6e 74 40 38 00 5f 5f  | EaFile@16.__imp__ZwSetEvent@8.__ | 
| 28f40 |  69 6d 70 5f 5f 5a 77 53 65 74 45 76 65 6e 74 42    6f 6f 73 74 50 72 69 6f 72 69 74 79 40 34 00 5f  | imp__ZwSetEventBoostPriority@4._ | 
| 28f60 |  5f 69 6d 70 5f 5f 5a 77 53 65 74 48 69 67 68 45    76 65 6e 74 50 61 69 72 40 34 00 5f 5f 69 6d 70  | _imp__ZwSetHighEventPair@4.__imp | 
| 28f80 |  5f 5f 5a 77 53 65 74 48 69 67 68 57 61 69 74 4c    6f 77 45 76 65 6e 74 50 61 69 72 40 34 00 5f 5f  | __ZwSetHighWaitLowEventPair@4.__ | 
| 28fa0 |  69 6d 70 5f 5f 5a 77 53 65 74 49 6e 66 6f 72 6d    61 74 69 6f 6e 44 65 62 75 67 4f 62 6a 65 63 74  | imp__ZwSetInformationDebugObject | 
| 28fc0 |  40 32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65 74    49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40  | @20.__imp__ZwSetInformationFile@ | 
| 28fe0 |  32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65 74 49    6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a  | 20.__imp__ZwSetInformationJobObj | 
| 29000 |  65 63 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77    53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4b 65  | ect@16.__imp__ZwSetInformationKe | 
| 29020 |  79 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65    74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f 62 6a 65  | y@16.__imp__ZwSetInformationObje | 
| 29040 |  63 74 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 53    65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f  | ct@16.__imp__ZwSetInformationPro | 
| 29060 |  63 65 73 73 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a    77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 54  | cess@16.__imp__ZwSetInformationT | 
| 29080 |  68 72 65 61 64 40 31 36 00 5f 5f 69 6d 70 5f 5f    5a 77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e  | hread@16.__imp__ZwSetInformation | 
| 290a0 |  54 6f 6b 65 6e 40 31 36 00 5f 5f 69 6d 70 5f 5f    5a 77 53 65 74 49 6e 74 65 72 76 61 6c 50 72 6f  | Token@16.__imp__ZwSetIntervalPro | 
| 290c0 |  66 69 6c 65 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77    53 65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 40  | file@8.__imp__ZwSetIoCompletion@ | 
| 290e0 |  32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65 74 4c    64 74 45 6e 74 72 69 65 73 40 32 34 00 5f 5f 69  | 20.__imp__ZwSetLdtEntries@24.__i | 
| 29100 |  6d 70 5f 5f 5a 77 53 65 74 4c 6f 77 45 76 65 6e    74 50 61 69 72 40 34 00 5f 5f 69 6d 70 5f 5f 5a  | mp__ZwSetLowEventPair@4.__imp__Z | 
| 29120 |  77 53 65 74 4c 6f 77 57 61 69 74 48 69 67 68 45    76 65 6e 74 50 61 69 72 40 34 00 5f 5f 69 6d 70  | wSetLowWaitHighEventPair@4.__imp | 
| 29140 |  5f 5f 5a 77 53 65 74 51 75 6f 74 61 49 6e 66 6f    72 6d 61 74 69 6f 6e 46 69 6c 65 40 31 36 00 5f  | __ZwSetQuotaInformationFile@16._ | 
| 29160 |  5f 69 6d 70 5f 5f 5a 77 53 65 74 53 65 63 75 72    69 74 79 4f 62 6a 65 63 74 40 31 32 00 5f 5f 69  | _imp__ZwSetSecurityObject@12.__i | 
| 29180 |  6d 70 5f 5f 5a 77 53 65 74 53 79 73 74 65 6d 45    6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 40  | mp__ZwSetSystemEnvironmentValue@ | 
| 291a0 |  38 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65 74 53 79    73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56  | 8.__imp__ZwSetSystemEnvironmentV | 
| 291c0 |  61 6c 75 65 45 78 40 32 30 00 5f 5f 69 6d 70 5f    5f 5a 77 53 65 74 53 79 73 74 65 6d 49 6e 66 6f  | alueEx@20.__imp__ZwSetSystemInfo | 
| 291e0 |  72 6d 61 74 69 6f 6e 40 31 32 00 5f 5f 69 6d 70    5f 5f 5a 77 53 65 74 53 79 73 74 65 6d 50 6f 77  | rmation@12.__imp__ZwSetSystemPow | 
| 29200 |  65 72 53 74 61 74 65 40 31 32 00 5f 5f 69 6d 70    5f 5f 5a 77 53 65 74 53 79 73 74 65 6d 54 69 6d  | erState@12.__imp__ZwSetSystemTim | 
| 29220 |  65 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65 74    54 68 72 65 61 64 45 78 65 63 75 74 69 6f 6e 53  | e@8.__imp__ZwSetThreadExecutionS | 
| 29240 |  74 61 74 65 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77    53 65 74 54 69 6d 65 72 40 32 38 00 5f 5f 69 6d  | tate@8.__imp__ZwSetTimer@28.__im | 
| 29260 |  70 5f 5f 5a 77 53 65 74 54 69 6d 65 72 52 65 73    6f 6c 75 74 69 6f 6e 40 31 32 00 5f 5f 69 6d 70  | p__ZwSetTimerResolution@12.__imp | 
| 29280 |  5f 5f 5a 77 53 65 74 55 75 69 64 53 65 65 64 40    34 00 5f 5f 69 6d 70 5f 5f 5a 77 53 65 74 56 61  | __ZwSetUuidSeed@4.__imp__ZwSetVa | 
| 292a0 |  6c 75 65 4b 65 79 40 32 34 00 5f 5f 69 6d 70 5f    5f 5a 77 53 65 74 56 6f 6c 75 6d 65 49 6e 66 6f  | lueKey@24.__imp__ZwSetVolumeInfo | 
| 292c0 |  72 6d 61 74 69 6f 6e 46 69 6c 65 40 32 30 00 5f    5f 69 6d 70 5f 5f 5a 77 53 68 75 74 64 6f 77 6e  | rmationFile@20.__imp__ZwShutdown | 
| 292e0 |  53 79 73 74 65 6d 40 34 00 5f 5f 69 6d 70 5f 5f    5a 77 53 69 67 6e 61 6c 41 6e 64 57 61 69 74 46  | System@4.__imp__ZwSignalAndWaitF | 
| 29300 |  6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74 40 31    36 00 5f 5f 69 6d 70 5f 5f 5a 77 53 74 61 72 74  | orSingleObject@16.__imp__ZwStart | 
| 29320 |  50 72 6f 66 69 6c 65 40 34 00 5f 5f 69 6d 70 5f    5f 5a 77 53 74 6f 70 50 72 6f 66 69 6c 65 40 34  | Profile@4.__imp__ZwStopProfile@4 | 
| 29340 |  00 5f 5f 69 6d 70 5f 5f 5a 77 53 75 73 70 65 6e    64 50 72 6f 63 65 73 73 40 34 00 5f 5f 69 6d 70  | .__imp__ZwSuspendProcess@4.__imp | 
| 29360 |  5f 5f 5a 77 53 75 73 70 65 6e 64 54 68 72 65 61    64 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77 53 79 73  | __ZwSuspendThread@8.__imp__ZwSys | 
| 29380 |  74 65 6d 44 65 62 75 67 43 6f 6e 74 72 6f 6c 40    32 34 00 5f 5f 69 6d 70 5f 5f 5a 77 54 65 72 6d  | temDebugControl@24.__imp__ZwTerm | 
| 293a0 |  69 6e 61 74 65 4a 6f 62 4f 62 6a 65 63 74 40 38    00 5f 5f 69 6d 70 5f 5f 5a 77 54 65 72 6d 69 6e  | inateJobObject@8.__imp__ZwTermin | 
| 293c0 |  61 74 65 50 72 6f 63 65 73 73 40 38 00 5f 5f 69    6d 70 5f 5f 5a 77 54 65 72 6d 69 6e 61 74 65 54  | ateProcess@8.__imp__ZwTerminateT | 
| 293e0 |  68 72 65 61 64 40 38 00 5f 5f 69 6d 70 5f 5f 5a    77 54 65 73 74 41 6c 65 72 74 40 30 00 5f 5f 69  | hread@8.__imp__ZwTestAlert@0.__i | 
| 29400 |  6d 70 5f 5f 5a 77 54 72 61 63 65 45 76 65 6e 74    40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 54 72 61  | mp__ZwTraceEvent@16.__imp__ZwTra | 
| 29420 |  6e 73 6c 61 74 65 46 69 6c 65 50 61 74 68 40 31    36 00 5f 5f 69 6d 70 5f 5f 5a 77 55 6e 6c 6f 61  | nslateFilePath@16.__imp__ZwUnloa | 
| 29440 |  64 44 72 69 76 65 72 40 34 00 5f 5f 69 6d 70 5f    5f 5a 77 55 6e 6c 6f 61 64 4b 65 79 32 40 38 00  | dDriver@4.__imp__ZwUnloadKey2@8. | 
| 29460 |  5f 5f 69 6d 70 5f 5f 5a 77 55 6e 6c 6f 61 64 4b    65 79 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 55 6e  | __imp__ZwUnloadKey@4.__imp__ZwUn | 
| 29480 |  6c 6f 61 64 4b 65 79 45 78 40 38 00 5f 5f 69 6d    70 5f 5f 5a 77 55 6e 6c 6f 63 6b 46 69 6c 65 40  | loadKeyEx@8.__imp__ZwUnlockFile@ | 
| 294a0 |  32 30 00 5f 5f 69 6d 70 5f 5f 5a 77 55 6e 6c 6f    63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40  | 20.__imp__ZwUnlockVirtualMemory@ | 
| 294c0 |  31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 55 6e 6d 61    70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 40 38  | 16.__imp__ZwUnmapViewOfSection@8 | 
| 294e0 |  00 5f 5f 69 6d 70 5f 5f 5a 77 56 64 6d 43 6f 6e    74 72 6f 6c 40 38 00 5f 5f 69 6d 70 5f 5f 5a 77  | .__imp__ZwVdmControl@8.__imp__Zw | 
| 29500 |  57 61 69 74 46 6f 72 44 65 62 75 67 45 76 65 6e    74 40 31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 57 61  | WaitForDebugEvent@16.__imp__ZwWa | 
| 29520 |  69 74 46 6f 72 4b 65 79 65 64 45 76 65 6e 74 40    31 36 00 5f 5f 69 6d 70 5f 5f 5a 77 57 61 69 74  | itForKeyedEvent@16.__imp__ZwWait | 
| 29540 |  46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63    74 73 33 32 40 32 30 00 5f 5f 69 6d 70 5f 5f 5a  | ForMultipleObjects32@20.__imp__Z | 
| 29560 |  77 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65    4f 62 6a 65 63 74 73 40 32 30 00 5f 5f 69 6d 70  | wWaitForMultipleObjects@20.__imp | 
| 29580 |  5f 5f 5a 77 57 61 69 74 46 6f 72 53 69 6e 67 6c    65 4f 62 6a 65 63 74 40 31 32 00 5f 5f 69 6d 70  | __ZwWaitForSingleObject@12.__imp | 
| 295a0 |  5f 5f 5a 77 57 61 69 74 48 69 67 68 45 76 65 6e    74 50 61 69 72 40 34 00 5f 5f 69 6d 70 5f 5f 5a  | __ZwWaitHighEventPair@4.__imp__Z | 
| 295c0 |  77 57 61 69 74 4c 6f 77 45 76 65 6e 74 50 61 69    72 40 34 00 5f 5f 69 6d 70 5f 5f 5a 77 57 72 69  | wWaitLowEventPair@4.__imp__ZwWri | 
| 295e0 |  74 65 46 69 6c 65 40 33 36 00 5f 5f 69 6d 70 5f    5f 5a 77 57 72 69 74 65 46 69 6c 65 47 61 74 68  | teFile@36.__imp__ZwWriteFileGath | 
| 29600 |  65 72 40 33 36 00 5f 5f 69 6d 70 5f 5f 5a 77 57    72 69 74 65 52 65 71 75 65 73 74 44 61 74 61 40  | er@36.__imp__ZwWriteRequestData@ | 
| 29620 |  32 34 00 5f 5f 69 6d 70 5f 5f 5a 77 57 72 69 74    65 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 32  | 24.__imp__ZwWriteVirtualMemory@2 | 
| 29640 |  30 00 5f 5f 69 6d 70 5f 5f 5a 77 59 69 65 6c 64    45 78 65 63 75 74 69 6f 6e 40 30 00 5f 5f 69 6d  | 0.__imp__ZwYieldExecution@0.__im | 
| 29660 |  70 5f 5f 5f 43 49 63 6f 73 00 5f 5f 69 6d 70 5f    5f 5f 43 49 6c 6f 67 00 5f 5f 69 6d 70 5f 5f 5f  | p___CIcos.__imp___CIlog.__imp___ | 
| 29680 |  43 49 70 6f 77 00 5f 5f 69 6d 70 5f 5f 5f 43 49    73 69 6e 00 5f 5f 69 6d 70 5f 5f 5f 43 49 73 71  | CIpow.__imp___CIsin.__imp___CIsq | 
| 296a0 |  72 74 00 5f 5f 69 6d 70 5f 5f 5f 5f 69 73 61 73    63 69 69 00 5f 5f 69 6d 70 5f 5f 5f 5f 69 73 63  | rt.__imp____isascii.__imp____isc | 
| 296c0 |  73 79 6d 00 5f 5f 69 6d 70 5f 5f 5f 5f 69 73 63    73 79 6d 66 00 5f 5f 69 6d 70 5f 5f 5f 5f 74 6f  | sym.__imp____iscsymf.__imp____to | 
| 296e0 |  61 73 63 69 69 00 5f 5f 69 6d 70 5f 5f 5f 61 6c    6c 64 69 76 00 5f 5f 69 6d 70 5f 5f 5f 61 6c 6c  | ascii.__imp___alldiv.__imp___all | 
| 29700 |  64 76 72 6d 00 5f 5f 69 6d 70 5f 5f 5f 61 6c 6c    6d 75 6c 00 5f 5f 69 6d 70 5f 5f 5f 61 6c 6c 6f  | dvrm.__imp___allmul.__imp___allo | 
| 29720 |  63 61 5f 70 72 6f 62 65 00 5f 5f 69 6d 70 5f 5f    5f 61 6c 6c 72 65 6d 00 5f 5f 69 6d 70 5f 5f 5f  | ca_probe.__imp___allrem.__imp___ | 
| 29740 |  61 6c 6c 73 68 6c 00 5f 5f 69 6d 70 5f 5f 5f 61    6c 6c 73 68 72 00 5f 5f 69 6d 70 5f 5f 5f 61 74  | allshl.__imp___allshr.__imp___at | 
| 29760 |  6f 69 36 34 00 5f 5f 69 6d 70 5f 5f 5f 61 75 6c    6c 64 69 76 00 5f 5f 69 6d 70 5f 5f 5f 61 75 6c  | oi64.__imp___aulldiv.__imp___aul | 
| 29780 |  6c 64 76 72 6d 00 5f 5f 69 6d 70 5f 5f 5f 61 75    6c 6c 72 65 6d 00 5f 5f 69 6d 70 5f 5f 5f 61 75  | ldvrm.__imp___aullrem.__imp___au | 
| 297a0 |  6c 6c 73 68 72 00 5f 5f 69 6d 70 5f 5f 5f 63 68    6b 73 74 6b 00 5f 5f 69 6d 70 5f 5f 5f 66 6c 74  | llshr.__imp___chkstk.__imp___flt | 
| 297c0 |  75 73 65 64 00 5f 5f 69 6d 70 5f 5f 5f 66 74 6f    6c 00 5f 5f 69 6d 70 5f 5f 5f 69 36 34 74 6f 61  | used.__imp___ftol.__imp___i64toa | 
| 297e0 |  00 5f 5f 69 6d 70 5f 5f 5f 69 36 34 74 6f 77 00    5f 5f 69 6d 70 5f 5f 5f 69 74 6f 61 00 5f 5f 69  | .__imp___i64tow.__imp___itoa.__i | 
| 29800 |  6d 70 5f 5f 5f 69 74 6f 77 00 5f 5f 69 6d 70 5f    5f 5f 6c 66 69 6e 64 00 5f 5f 69 6d 70 5f 5f 5f  | mp___itow.__imp___lfind.__imp___ | 
| 29820 |  6c 74 6f 61 00 5f 5f 69 6d 70 5f 5f 5f 6c 74 6f    77 00 5f 5f 69 6d 70 5f 5f 5f 6d 65 6d 63 63 70  | ltoa.__imp___ltow.__imp___memccp | 
| 29840 |  79 00 5f 5f 69 6d 70 5f 5f 5f 6d 65 6d 69 63 6d    70 00 5f 5f 69 6d 70 5f 5f 5f 73 6e 70 72 69 6e  | y.__imp___memicmp.__imp___snprin | 
| 29860 |  74 66 00 5f 5f 69 6d 70 5f 5f 5f 73 6e 77 70 72    69 6e 74 66 00 5f 5f 69 6d 70 5f 5f 5f 73 70 6c  | tf.__imp___snwprintf.__imp___spl | 
| 29880 |  69 74 70 61 74 68 00 5f 5f 69 6d 70 5f 5f 5f 73    74 72 63 6d 70 69 00 5f 5f 69 6d 70 5f 5f 5f 73  | itpath.__imp___strcmpi.__imp___s | 
| 298a0 |  74 72 69 63 6d 70 00 5f 5f 69 6d 70 5f 5f 5f 73    74 72 6c 77 72 00 5f 5f 69 6d 70 5f 5f 5f 73 74  | tricmp.__imp___strlwr.__imp___st | 
| 298c0 |  72 6e 69 63 6d 70 00 5f 5f 69 6d 70 5f 5f 5f 73    74 72 75 70 72 00 5f 5f 69 6d 70 5f 5f 5f 74 6f  | rnicmp.__imp___strupr.__imp___to | 
| 298e0 |  6c 6f 77 65 72 00 5f 5f 69 6d 70 5f 5f 5f 74 6f    75 70 70 65 72 00 5f 5f 69 6d 70 5f 5f 5f 75 69  | lower.__imp___toupper.__imp___ui | 
| 29900 |  36 34 74 6f 61 00 5f 5f 69 6d 70 5f 5f 5f 75 69    36 34 74 6f 77 00 5f 5f 69 6d 70 5f 5f 5f 75 6c  | 64toa.__imp___ui64tow.__imp___ul | 
| 29920 |  74 6f 61 00 5f 5f 69 6d 70 5f 5f 5f 75 6c 74 6f    77 00 5f 5f 69 6d 70 5f 5f 5f 76 73 63 77 70 72  | toa.__imp___ultow.__imp___vscwpr | 
| 29940 |  69 6e 74 66 00 5f 5f 69 6d 70 5f 5f 5f 76 73 6e    70 72 69 6e 74 66 00 5f 5f 69 6d 70 5f 5f 5f 76  | intf.__imp___vsnprintf.__imp___v | 
| 29960 |  73 6e 77 70 72 69 6e 74 66 00 5f 5f 69 6d 70 5f    5f 5f 77 63 73 69 63 6d 70 00 5f 5f 69 6d 70 5f  | snwprintf.__imp___wcsicmp.__imp_ | 
| 29980 |  5f 5f 77 63 73 6c 77 72 00 5f 5f 69 6d 70 5f 5f    5f 77 63 73 6e 69 63 6d 70 00 5f 5f 69 6d 70 5f  | __wcslwr.__imp___wcsnicmp.__imp_ | 
| 299a0 |  5f 5f 77 63 73 74 6f 75 69 36 34 00 5f 5f 69 6d    70 5f 5f 5f 77 63 73 75 70 72 00 5f 5f 69 6d 70  | __wcstoui64.__imp___wcsupr.__imp | 
| 299c0 |  5f 5f 5f 77 74 6f 69 00 5f 5f 69 6d 70 5f 5f 5f    77 74 6f 69 36 34 00 5f 5f 69 6d 70 5f 5f 5f 77  | ___wtoi.__imp___wtoi64.__imp___w | 
| 299e0 |  74 6f 6c 00 5f 5f 69 6d 70 5f 5f 61 62 73 00 5f    5f 69 6d 70 5f 5f 61 74 61 6e 00 5f 5f 69 6d 70  | tol.__imp__abs.__imp__atan.__imp | 
| 29a00 |  5f 5f 61 74 6f 69 00 5f 5f 69 6d 70 5f 5f 61 74    6f 6c 00 5f 5f 69 6d 70 5f 5f 62 73 65 61 72 63  | __atoi.__imp__atol.__imp__bsearc | 
| 29a20 |  68 00 5f 5f 69 6d 70 5f 5f 63 65 69 6c 00 5f 5f    69 6d 70 5f 5f 63 6f 73 00 5f 5f 69 6d 70 5f 5f  | h.__imp__ceil.__imp__cos.__imp__ | 
| 29a40 |  66 61 62 73 00 5f 5f 69 6d 70 5f 5f 66 6c 6f 6f    72 00 5f 5f 69 6d 70 5f 5f 69 73 61 6c 6e 75 6d  | fabs.__imp__floor.__imp__isalnum | 
| 29a60 |  00 5f 5f 69 6d 70 5f 5f 69 73 61 6c 70 68 61 00    5f 5f 69 6d 70 5f 5f 69 73 63 6e 74 72 6c 00 5f  | .__imp__isalpha.__imp__iscntrl._ | 
| 29a80 |  5f 69 6d 70 5f 5f 69 73 64 69 67 69 74 00 5f 5f    69 6d 70 5f 5f 69 73 67 72 61 70 68 00 5f 5f 69  | _imp__isdigit.__imp__isgraph.__i | 
| 29aa0 |  6d 70 5f 5f 69 73 6c 6f 77 65 72 00 5f 5f 69 6d    70 5f 5f 69 73 70 72 69 6e 74 00 5f 5f 69 6d 70  | mp__islower.__imp__isprint.__imp | 
| 29ac0 |  5f 5f 69 73 70 75 6e 63 74 00 5f 5f 69 6d 70 5f    5f 69 73 73 70 61 63 65 00 5f 5f 69 6d 70 5f 5f  | __ispunct.__imp__isspace.__imp__ | 
| 29ae0 |  69 73 75 70 70 65 72 00 5f 5f 69 6d 70 5f 5f 69    73 77 61 6c 70 68 61 00 5f 5f 69 6d 70 5f 5f 69  | isupper.__imp__iswalpha.__imp__i | 
| 29b00 |  73 77 63 74 79 70 65 00 5f 5f 69 6d 70 5f 5f 69    73 77 64 69 67 69 74 00 5f 5f 69 6d 70 5f 5f 69  | swctype.__imp__iswdigit.__imp__i | 
| 29b20 |  73 77 6c 6f 77 65 72 00 5f 5f 69 6d 70 5f 5f 69    73 77 73 70 61 63 65 00 5f 5f 69 6d 70 5f 5f 69  | swlower.__imp__iswspace.__imp__i | 
| 29b40 |  73 77 78 64 69 67 69 74 00 5f 5f 69 6d 70 5f 5f    69 73 78 64 69 67 69 74 00 5f 5f 69 6d 70 5f 5f  | swxdigit.__imp__isxdigit.__imp__ | 
| 29b60 |  6c 61 62 73 00 5f 5f 69 6d 70 5f 5f 6c 6f 67 00    5f 5f 69 6d 70 5f 5f 6d 62 73 74 6f 77 63 73 00  | labs.__imp__log.__imp__mbstowcs. | 
| 29b80 |  5f 5f 69 6d 70 5f 5f 6d 65 6d 63 68 72 00 5f 5f    69 6d 70 5f 5f 6d 65 6d 63 6d 70 00 5f 5f 69 6d  | __imp__memchr.__imp__memcmp.__im | 
| 29ba0 |  70 5f 5f 6d 65 6d 63 70 79 00 5f 5f 69 6d 70 5f    5f 6d 65 6d 6d 6f 76 65 00 5f 5f 69 6d 70 5f 5f  | p__memcpy.__imp__memmove.__imp__ | 
| 29bc0 |  6d 65 6d 73 65 74 00 5f 5f 69 6d 70 5f 5f 70 6f    77 00 5f 5f 69 6d 70 5f 5f 71 73 6f 72 74 00 5f  | memset.__imp__pow.__imp__qsort._ | 
| 29be0 |  5f 69 6d 70 5f 5f 73 69 6e 00 5f 5f 69 6d 70 5f    5f 73 70 72 69 6e 74 66 00 5f 5f 69 6d 70 5f 5f  | _imp__sin.__imp__sprintf.__imp__ | 
| 29c00 |  73 71 72 74 00 5f 5f 69 6d 70 5f 5f 73 73 63 61    6e 66 00 5f 5f 69 6d 70 5f 5f 73 74 72 63 61 74  | sqrt.__imp__sscanf.__imp__strcat | 
| 29c20 |  00 5f 5f 69 6d 70 5f 5f 73 74 72 63 68 72 00 5f    5f 69 6d 70 5f 5f 73 74 72 63 6d 70 00 5f 5f 69  | .__imp__strchr.__imp__strcmp.__i | 
| 29c40 |  6d 70 5f 5f 73 74 72 63 70 79 00 5f 5f 69 6d 70    5f 5f 73 74 72 63 73 70 6e 00 5f 5f 69 6d 70 5f  | mp__strcpy.__imp__strcspn.__imp_ | 
| 29c60 |  5f 73 74 72 6c 65 6e 00 5f 5f 69 6d 70 5f 5f 73    74 72 6e 63 61 74 00 5f 5f 69 6d 70 5f 5f 73 74  | _strlen.__imp__strncat.__imp__st | 
| 29c80 |  72 6e 63 6d 70 00 5f 5f 69 6d 70 5f 5f 73 74 72    6e 63 70 79 00 5f 5f 69 6d 70 5f 5f 73 74 72 70  | rncmp.__imp__strncpy.__imp__strp | 
| 29ca0 |  62 72 6b 00 5f 5f 69 6d 70 5f 5f 73 74 72 72 63    68 72 00 5f 5f 69 6d 70 5f 5f 73 74 72 73 70 6e  | brk.__imp__strrchr.__imp__strspn | 
| 29cc0 |  00 5f 5f 69 6d 70 5f 5f 73 74 72 73 74 72 00 5f    5f 69 6d 70 5f 5f 73 74 72 74 6f 6c 00 5f 5f 69  | .__imp__strstr.__imp__strtol.__i | 
| 29ce0 |  6d 70 5f 5f 73 74 72 74 6f 75 6c 00 5f 5f 69 6d    70 5f 5f 73 77 70 72 69 6e 74 66 00 5f 5f 69 6d  | mp__strtoul.__imp__swprintf.__im | 
| 29d00 |  70 5f 5f 74 61 6e 00 5f 5f 69 6d 70 5f 5f 74 6f    6c 6f 77 65 72 00 5f 5f 69 6d 70 5f 5f 74 6f 75  | p__tan.__imp__tolower.__imp__tou | 
| 29d20 |  70 70 65 72 00 5f 5f 69 6d 70 5f 5f 74 6f 77 6c    6f 77 65 72 00 5f 5f 69 6d 70 5f 5f 74 6f 77 75  | pper.__imp__towlower.__imp__towu | 
| 29d40 |  70 70 65 72 00 5f 5f 69 6d 70 5f 5f 76 44 62 67    50 72 69 6e 74 45 78 40 31 36 00 5f 5f 69 6d 70  | pper.__imp__vDbgPrintEx@16.__imp | 
| 29d60 |  5f 5f 76 44 62 67 50 72 69 6e 74 45 78 57 69 74    68 50 72 65 66 69 78 40 32 30 00 5f 5f 69 6d 70  | __vDbgPrintExWithPrefix@20.__imp | 
| 29d80 |  5f 5f 76 73 70 72 69 6e 74 66 00 5f 5f 69 6d 70    5f 5f 77 63 73 63 61 74 00 5f 5f 69 6d 70 5f 5f  | __vsprintf.__imp__wcscat.__imp__ | 
| 29da0 |  77 63 73 63 68 72 00 5f 5f 69 6d 70 5f 5f 77 63    73 63 6d 70 00 5f 5f 69 6d 70 5f 5f 77 63 73 63  | wcschr.__imp__wcscmp.__imp__wcsc | 
| 29dc0 |  70 79 00 5f 5f 69 6d 70 5f 5f 77 63 73 63 73 70    6e 00 5f 5f 69 6d 70 5f 5f 77 63 73 6c 65 6e 00  | py.__imp__wcscspn.__imp__wcslen. | 
| 29de0 |  5f 5f 69 6d 70 5f 5f 77 63 73 6e 63 61 74 00 5f    5f 69 6d 70 5f 5f 77 63 73 6e 63 6d 70 00 5f 5f  | __imp__wcsncat.__imp__wcsncmp.__ | 
| 29e00 |  69 6d 70 5f 5f 77 63 73 6e 63 70 79 00 5f 5f 69    6d 70 5f 5f 77 63 73 70 62 72 6b 00 5f 5f 69 6d  | imp__wcsncpy.__imp__wcspbrk.__im | 
| 29e20 |  70 5f 5f 77 63 73 72 63 68 72 00 5f 5f 69 6d 70    5f 5f 77 63 73 73 70 6e 00 5f 5f 69 6d 70 5f 5f  | p__wcsrchr.__imp__wcsspn.__imp__ | 
| 29e40 |  77 63 73 73 74 72 00 5f 5f 69 6d 70 5f 5f 77 63    73 74 6f 6c 00 5f 5f 69 6d 70 5f 5f 77 63 73 74  | wcsstr.__imp__wcstol.__imp__wcst | 
| 29e60 |  6f 6d 62 73 00 5f 5f 69 6d 70 5f 5f 77 63 73 74    6f 75 6c 00 5f 5f 69 74 6f 61 00 5f 5f 69 74 6f  | ombs.__imp__wcstoul.__itoa.__ito | 
| 29e80 |  77 00 5f 5f 6c 66 69 6e 64 00 5f 5f 6c 6f 61 64    5f 63 6f 6e 66 69 67 5f 75 73 65 64 00 5f 5f 6c  | w.__lfind.__load_config_used.__l | 
| 29ea0 |  6f 63 61 6c 5f 75 6e 77 69 6e 64 32 00 5f 5f 6c    6f 6e 67 6a 6d 70 65 78 00 5f 5f 6c 74 6f 61 00  | ocal_unwind2.__longjmpex.__ltoa. | 
| 29ec0 |  5f 5f 6c 74 6f 77 00 5f 5f 6d 65 6d 63 63 70 79    00 5f 5f 6d 65 6d 69 63 6d 70 00 5f 5f 72 74 5f  | __ltow.__memccpy.__memicmp.__rt_ | 
| 29ee0 |  70 72 6f 62 65 5f 72 65 61 64 34 40 34 00 5f 5f    73 65 68 5f 6c 6f 6e 67 6a 6d 70 5f 75 6e 77 69  | probe_read4@4.__seh_longjmp_unwi | 
| 29f00 |  6e 64 40 34 00 5f 5f 73 65 74 6a 6d 70 00 5f 5f    73 65 74 6a 6d 70 33 00 5f 5f 73 65 74 6a 6d 70  | nd@4.__setjmp.__setjmp3.__setjmp | 
| 29f20 |  65 78 75 73 65 64 00 5f 5f 73 6e 70 72 69 6e 74    66 00 5f 5f 73 6e 77 70 72 69 6e 74 66 00 5f 5f  | exused.__snprintf.__snwprintf.__ | 
| 29f40 |  73 70 6c 69 74 70 61 74 68 00 5f 5f 73 74 72 63    6d 70 69 00 5f 5f 73 74 72 69 63 6d 70 00 5f 5f  | splitpath.__strcmpi.__stricmp.__ | 
| 29f60 |  73 74 72 6c 77 72 00 5f 5f 73 74 72 6e 69 63 6d    70 00 5f 5f 73 74 72 75 70 72 00 5f 5f 74 6f 6c  | strlwr.__strnicmp.__strupr.__tol | 
| 29f80 |  6f 77 65 72 00 5f 5f 74 6f 75 70 70 65 72 00 5f    5f 75 69 36 34 74 6f 61 00 5f 5f 75 69 36 34 74  | ower.__toupper.__ui64toa.__ui64t | 
| 29fa0 |  6f 77 00 5f 5f 75 6c 74 6f 61 00 5f 5f 75 6c 74    6f 77 00 5f 5f 76 73 63 77 70 72 69 6e 74 66 00  | ow.__ultoa.__ultow.__vscwprintf. | 
| 29fc0 |  5f 5f 76 73 6e 70 72 69 6e 74 66 00 5f 5f 76 73    6e 77 70 72 69 6e 74 66 00 5f 5f 77 63 73 69 63  | __vsnprintf.__vsnwprintf.__wcsic | 
| 29fe0 |  6d 70 00 5f 5f 77 63 73 6c 77 72 00 5f 5f 77 63    73 6e 69 63 6d 70 00 5f 5f 77 63 73 74 6f 75 69  | mp.__wcslwr.__wcsnicmp.__wcstoui | 
| 2a000 |  36 34 00 5f 5f 77 63 73 75 70 72 00 5f 5f 77 74    6f 69 00 5f 5f 77 74 6f 69 36 34 00 5f 5f 77 74  | 64.__wcsupr.__wtoi.__wtoi64.__wt | 
| 2a020 |  6f 6c 00 5f 61 62 73 00 5f 61 74 61 6e 00 5f 61    74 6f 69 00 5f 61 74 6f 6c 00 5f 62 73 65 61 72  | ol._abs._atan._atoi._atol._bsear | 
| 2a040 |  63 68 00 5f 63 65 69 6c 00 5f 63 6f 73 00 5f 66    61 62 73 00 5f 66 6c 6f 6f 72 00 5f 69 73 61 6c  | ch._ceil._cos._fabs._floor._isal | 
| 2a060 |  6e 75 6d 00 5f 69 73 61 6c 70 68 61 00 5f 69 73    63 6e 74 72 6c 00 5f 69 73 64 69 67 69 74 00 5f  | num._isalpha._iscntrl._isdigit._ | 
| 2a080 |  69 73 67 72 61 70 68 00 5f 69 73 6c 6f 77 65 72    00 5f 69 73 70 72 69 6e 74 00 5f 69 73 70 75 6e  | isgraph._islower._isprint._ispun | 
| 2a0a0 |  63 74 00 5f 69 73 73 70 61 63 65 00 5f 69 73 75    70 70 65 72 00 5f 69 73 77 61 6c 70 68 61 00 5f  | ct._isspace._isupper._iswalpha._ | 
| 2a0c0 |  69 73 77 63 74 79 70 65 00 5f 69 73 77 64 69 67    69 74 00 5f 69 73 77 6c 6f 77 65 72 00 5f 69 73  | iswctype._iswdigit._iswlower._is | 
| 2a0e0 |  77 73 70 61 63 65 00 5f 69 73 77 78 64 69 67 69    74 00 5f 69 73 78 64 69 67 69 74 00 5f 6c 61 62  | wspace._iswxdigit._isxdigit._lab | 
| 2a100 |  73 00 5f 6c 6f 67 00 5f 6c 6f 6e 67 6a 6d 70 00    5f 6d 62 73 74 6f 77 63 73 00 5f 6d 65 6d 63 68  | s._log._longjmp._mbstowcs._memch | 
| 2a120 |  72 00 5f 6d 65 6d 63 6d 70 00 5f 6d 65 6d 63 70    79 00 5f 6d 65 6d 6d 6f 76 65 00 5f 6d 65 6d 73  | r._memcmp._memcpy._memmove._mems | 
| 2a140 |  65 74 00 5f 70 6f 77 00 5f 71 73 6f 72 74 00 5f    73 69 6e 00 5f 73 70 72 69 6e 74 66 00 5f 73 71  | et._pow._qsort._sin._sprintf._sq | 
| 2a160 |  72 74 00 5f 73 73 63 61 6e 66 00 5f 73 74 72 63    61 74 00 5f 73 74 72 63 68 72 00 5f 73 74 72 63  | rt._sscanf._strcat._strchr._strc | 
| 2a180 |  6d 70 00 5f 73 74 72 63 70 79 00 5f 73 74 72 63    73 70 6e 00 5f 73 74 72 6c 65 6e 00 5f 73 74 72  | mp._strcpy._strcspn._strlen._str | 
| 2a1a0 |  6e 63 61 74 00 5f 73 74 72 6e 63 6d 70 00 5f 73    74 72 6e 63 70 79 00 5f 73 74 72 70 62 72 6b 00  | ncat._strncmp._strncpy._strpbrk. | 
| 2a1c0 |  5f 73 74 72 72 63 68 72 00 5f 73 74 72 73 70 6e    00 5f 73 74 72 73 74 72 00 5f 73 74 72 74 6f 6c  | _strrchr._strspn._strstr._strtol | 
| 2a1e0 |  00 5f 73 74 72 74 6f 75 6c 00 5f 73 77 70 72 69    6e 74 66 00 5f 74 61 6e 00 5f 74 6f 6c 6f 77 65  | ._strtoul._swprintf._tan._tolowe | 
| 2a200 |  72 00 5f 74 6f 75 70 70 65 72 00 5f 74 6f 77 6c    6f 77 65 72 00 5f 74 6f 77 75 70 70 65 72 00 5f  | r._toupper._towlower._towupper._ | 
| 2a220 |  76 44 62 67 50 72 69 6e 74 45 78 40 31 36 00 5f    76 44 62 67 50 72 69 6e 74 45 78 57 69 74 68 50  | vDbgPrintEx@16._vDbgPrintExWithP | 
| 2a240 |  72 65 66 69 78 40 32 30 00 5f 76 73 70 72 69 6e    74 66 00 5f 77 63 73 63 61 74 00 5f 77 63 73 63  | refix@20._vsprintf._wcscat._wcsc | 
| 2a260 |  68 72 00 5f 77 63 73 63 6d 70 00 5f 77 63 73 63    70 79 00 5f 77 63 73 63 73 70 6e 00 5f 77 63 73  | hr._wcscmp._wcscpy._wcscspn._wcs | 
| 2a280 |  6c 65 6e 00 5f 77 63 73 6e 63 61 74 00 5f 77 63    73 6e 63 6d 70 00 5f 77 63 73 6e 63 70 79 00 5f  | len._wcsncat._wcsncmp._wcsncpy._ | 
| 2a2a0 |  77 63 73 70 62 72 6b 00 5f 77 63 73 72 63 68 72    00 5f 77 63 73 73 70 6e 00 5f 77 63 73 73 74 72  | wcspbrk._wcsrchr._wcsspn._wcsstr | 
| 2a2c0 |  00 5f 77 63 73 74 6f 6c 00 5f 77 63 73 74 6f 6d    62 73 00 5f 77 63 73 74 6f 75 6c 00 7f 6e 74 64  | ._wcstol._wcstombs._wcstoul..ntd | 
| 2a2e0 |  6c 6c 5f 4e 55 4c 4c 5f 54 48 55 4e 4b 5f 44 41    54 41 00 0a 2f 2f 20 20 20 20 20 20 20 20 20 20  | ll_NULL_THUNK_DATA..//.......... | 
| 2a300 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2a320 |  20 20 20 20 35 35 39 20 20 20 20 20 20 20 60 0a    2e 2e 5c 2e 2e 5c 2e 2e 5c 63 72 74 77 33 32 5c  | ....559.......`...\..\..\crtw32\ | 
| 2a340 |  6d 69 73 63 5c 6e 74 5c 6f 62 6a 5c 69 33 38 36    5c 65 68 33 76 61 6c 69 64 5f 75 73 65 72 2e 6f  | misc\nt\obj\i386\eh3valid_user.o | 
| 2a360 |  62 6a 00 2e 2e 5c 2e 2e 5c 2e 2e 5c 63 72 74 77    33 32 5c 6d 69 73 63 5c 6e 74 5c 6f 62 6a 5c 69  | bj...\..\..\crtw32\misc\nt\obj\i | 
| 2a380 |  33 38 36 5c 65 78 73 75 70 2e 6f 62 6a 00 2e 2e    5c 2e 2e 5c 2e 2e 5c 63 72 74 77 33 32 5c 6d 69  | 386\exsup.obj...\..\..\crtw32\mi | 
| 2a3a0 |  73 63 5c 6e 74 5c 6f 62 6a 5c 69 33 38 36 5c 65    78 73 75 70 32 2e 6f 62 6a 00 2e 2e 5c 2e 2e 5c  | sc\nt\obj\i386\exsup2.obj...\..\ | 
| 2a3c0 |  2e 2e 5c 63 72 74 77 33 32 5c 6d 69 73 63 5c 6e    74 5c 6f 62 6a 5c 69 33 38 36 5c 65 78 73 75 70  | ..\crtw32\misc\nt\obj\i386\exsup | 
| 2a3e0 |  33 2e 6f 62 6a 00 2e 2e 5c 2e 2e 5c 2e 2e 5c 63    72 74 77 33 32 5c 6d 69 73 63 5c 6e 74 5c 6f 62  | 3.obj...\..\..\crtw32\misc\nt\ob | 
| 2a400 |  6a 5c 69 33 38 36 5c 73 65 68 73 75 70 70 2e 6f    62 6a 00 2e 2e 5c 2e 2e 5c 2e 2e 5c 63 72 74 77  | j\i386\sehsupp.obj...\..\..\crtw | 
| 2a420 |  33 32 5c 6d 69 73 63 5c 6e 74 5c 6f 62 6a 5c 69    33 38 36 5c 73 65 74 6a 6d 70 2e 6f 62 6a 00 2e  | 32\misc\nt\obj\i386\setjmp.obj.. | 
| 2a440 |  2e 5c 2e 2e 5c 2e 2e 5c 63 72 74 77 33 32 5c 6d    69 73 63 5c 6e 74 5c 6f 62 6a 5c 69 33 38 36 5c  | .\..\..\crtw32\misc\nt\obj\i386\ | 
| 2a460 |  73 65 74 6a 6d 70 33 2e 6f 62 6a 00 2e 2e 5c 2e    2e 5c 2e 2e 5c 63 72 74 77 33 32 5c 6d 69 73 63  | setjmp3.obj...\..\..\crtw32\misc | 
| 2a480 |  5c 6e 74 5c 6f 62 6a 5c 69 33 38 36 5c 73 65 74    6a 6d 70 65 78 2e 6f 62 6a 00 2e 2e 5c 2e 2e 5c  | \nt\obj\i386\setjmpex.obj...\..\ | 
| 2a4a0 |  2e 2e 5c 63 72 74 77 33 32 5c 6d 69 73 63 5c 6e    74 5c 6f 62 6a 5c 69 33 38 36 5c 6c 6f 6e 67 6a  | ..\crtw32\misc\nt\obj\i386\longj | 
| 2a4c0 |  6d 70 2e 6f 62 6a 00 64 3a 5c 64 6e 73 72 76 5c    70 75 62 6c 69 63 5c 69 6e 74 65 72 6e 61 6c 5c  | mp.obj.d:\dnsrv\public\internal\ | 
| 2a4e0 |  62 61 73 65 5c 6c 69 62 5c 69 33 38 36 5c 6c 6f    61 64 63 66 67 2e 6f 62 6a 00 64 3a 5c 64 6e 73  | base\lib\i386\loadcfg.obj.d:\dns | 
| 2a500 |  72 76 5c 70 75 62 6c 69 63 5c 69 6e 74 65 72 6e    61 6c 5c 62 61 73 65 5c 6c 69 62 5c 69 33 38 36  | rv\public\internal\base\lib\i386 | 
| 2a520 |  5c 66 74 6f 6c 32 2e 6f 62 6a 00 64 3a 5c 64 6e    73 72 76 5c 70 75 62 6c 69 63 5c 69 6e 74 65 72  | \ftol2.obj.d:\dnsrv\public\inter | 
| 2a540 |  6e 61 6c 5c 62 61 73 65 5c 6c 69 62 5c 69 33 38    36 5c 73 65 68 70 72 6f 6c 67 2e 6f 62 6a 00 0a  | nal\base\lib\i386\sehprolg.obj.. | 
| 2a560 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 2a580 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......39........`..... | 
| 2a5a0 |  00 00 4c 01 c5 e8 8a 41 13 00 00 00 76 05 08 00    5f 77 63 73 74 6f 75 6c 00 6e 74 64 6c 6c 2e 64  | ..L....A....v..._wcstoul.ntdll.d | 
| 2a5c0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 2a5e0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a  | ............0.......40........`. | 
| 2a600 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 14 00 00 00    75 05 08 00 5f 77 63 73 74 6f 6d 62 73 00 6e 74  | ......L....A....u..._wcstombs.nt | 
| 2a620 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 2a640 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20  | 97..............0.......38...... | 
| 2a660 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    12 00 00 00 74 05 08 00 5f 77 63 73 74 6f 6c 00  | ..`.......L....A....t..._wcstol. | 
| 2a680 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 2a6a0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20  | 2597..............0.......38.... | 
| 2a6c0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 12 00 00 00 73 05 08 00 5f 77 63 73 73 74  | ....`.......L....A....s..._wcsst | 
| 2a6e0 |  72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | r.ntdll.dll.ntdll.dll/......1099 | 
| 2a700 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20  | 622597..............0.......38.. | 
| 2a720 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 12 00 00 00 72 05 08 00 5f 77 63 73  | ......`.......L....A....r..._wcs | 
| 2a740 |  73 70 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | spn.ntdll.dll.ntdll.dll/......10 | 
| 2a760 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39  | 99622597..............0.......39 | 
| 2a780 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 13 00 00 00 71 05 08 00 5f 77  | ........`.......L....A....q..._w | 
| 2a7a0 |  63 73 72 63 68 72 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | csrchr.ntdll.dll..ntdll.dll/.... | 
| 2a7c0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 2a7e0 |  20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 13 00 00 00 70 05  | ..39........`.......L....A....p. | 
| 2a800 |  08 00 5f 77 63 73 70 62 72 6b 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | .._wcspbrk.ntdll.dll..ntdll.dll/ | 
| 2a820 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2a840 |  20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 13 00  | ......39........`.......L....A.. | 
| 2a860 |  00 00 6f 05 08 00 5f 77 63 73 6e 63 70 79 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | ..o..._wcsncpy.ntdll.dll..ntdll. | 
| 2a880 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 2a8a0 |  20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......39........`.......L... | 
| 2a8c0 |  8a 41 13 00 00 00 6e 05 08 00 5f 77 63 73 6e 63    6d 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | .A....n..._wcsncmp.ntdll.dll..nt | 
| 2a8e0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 2a900 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......39........`....... | 
| 2a920 |  4c 01 c5 e8 8a 41 13 00 00 00 6d 05 08 00 5f 77    63 73 6e 63 61 74 00 6e 74 64 6c 6c 2e 64 6c 6c  | L....A....m..._wcsncat.ntdll.dll | 
| 2a940 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 2a960 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......38........`... | 
| 2a980 |  ff ff 00 00 4c 01 c5 e8 8a 41 12 00 00 00 6c 05    08 00 5f 77 63 73 6c 65 6e 00 6e 74 64 6c 6c 2e  | ....L....A....l..._wcslen.ntdll. | 
| 2a9a0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 2a9c0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a  | ............0.......39........`. | 
| 2a9e0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 13 00 00 00    6b 05 08 00 5f 77 63 73 63 73 70 6e 00 6e 74 64  | ......L....A....k..._wcscspn.ntd | 
| 2aa00 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 2aa20 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 33 38 20 20 20 20 20 20  | 97..............0.......38...... | 
| 2aa40 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    12 00 00 00 6a 05 08 00 5f 77 63 73 63 70 79 00  | ..`.......L....A....j..._wcscpy. | 
| 2aa60 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 2aa80 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20  | 2597..............0.......38.... | 
| 2aaa0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 12 00 00 00 69 05 08 00 5f 77 63 73 63 6d  | ....`.......L....A....i..._wcscm | 
| 2aac0 |  70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | p.ntdll.dll.ntdll.dll/......1099 | 
| 2aae0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20  | 622597..............0.......38.. | 
| 2ab00 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 12 00 00 00 68 05 08 00 5f 77 63 73  | ......`.......L....A....h..._wcs | 
| 2ab20 |  63 68 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | chr.ntdll.dll.ntdll.dll/......10 | 
| 2ab40 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38  | 99622597..............0.......38 | 
| 2ab60 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 12 00 00 00 67 05 08 00 5f 77  | ........`.......L....A....g..._w | 
| 2ab80 |  63 73 63 61 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | cscat.ntdll.dll.ntdll.dll/...... | 
| 2aba0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 2abc0 |  34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 14 00 00 00 66 05 08 00  | 40........`.......L....A....f... | 
| 2abe0 |  5f 76 73 70 72 69 6e 74 66 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | _vsprintf.ntdll.dll.ntdll.dll/.. | 
| 2ac00 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2ac20 |  20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 24 00 00 00  | ....56........`.......L....A$... | 
| 2ac40 |  65 05 0c 00 5f 76 44 62 67 50 72 69 6e 74 45 78    57 69 74 68 50 72 65 66 69 78 40 32 30 00 6e 74  | e..._vDbgPrintExWithPrefix@20.nt | 
| 2ac60 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 2ac80 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20  | 97..............0.......46...... | 
| 2aca0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1a 00 00 00 64 05 0c 00 5f 76 44 62 67 50 72 69  | ..`.......L....A....d..._vDbgPri | 
| 2acc0 |  6e 74 45 78 40 31 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ntEx@16.ntdll.dll.ntdll.dll/.... | 
| 2ace0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 2ad00 |  20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 14 00 00 00 63 05  | ..40........`.......L....A....c. | 
| 2ad20 |  08 00 5f 74 6f 77 75 70 70 65 72 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | .._towupper.ntdll.dll.ntdll.dll/ | 
| 2ad40 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2ad60 |  20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 14 00  | ......40........`.......L....A.. | 
| 2ad80 |  00 00 62 05 08 00 5f 74 6f 77 6c 6f 77 65 72 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | ..b..._towlower.ntdll.dll.ntdll. | 
| 2ada0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 2adc0 |  20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......39........`.......L... | 
| 2ade0 |  8a 41 13 00 00 00 61 05 08 00 5f 74 6f 75 70 70    65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | .A....a..._toupper.ntdll.dll..nt | 
| 2ae00 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 2ae20 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......39........`....... | 
| 2ae40 |  4c 01 c5 e8 8a 41 13 00 00 00 60 05 08 00 5f 74    6f 6c 6f 77 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c  | L....A....`..._tolower.ntdll.dll | 
| 2ae60 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 2ae80 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 33 35 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......35........`... | 
| 2aea0 |  ff ff 00 00 4c 01 c5 e8 8a 41 0f 00 00 00 5f 05    08 00 5f 74 61 6e 00 6e 74 64 6c 6c 2e 64 6c 6c  | ....L....A...._..._tan.ntdll.dll | 
| 2aec0 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 2aee0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......40........`... | 
| 2af00 |  ff ff 00 00 4c 01 c5 e8 8a 41 14 00 00 00 5e 05    08 00 5f 73 77 70 72 69 6e 74 66 00 6e 74 64 6c  | ....L....A....^..._swprintf.ntdl | 
| 2af20 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 2af40 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20  | ..............0.......39........ | 
| 2af60 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 13 00    00 00 5d 05 08 00 5f 73 74 72 74 6f 75 6c 00 6e  | `.......L....A....]..._strtoul.n | 
| 2af80 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 2afa0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20  | 2597..............0.......38.... | 
| 2afc0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 12 00 00 00 5c 05 08 00 5f 73 74 72 74 6f  | ....`.......L....A....\..._strto | 
| 2afe0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | l.ntdll.dll.ntdll.dll/......1099 | 
| 2b000 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20  | 622597..............0.......38.. | 
| 2b020 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 12 00 00 00 5b 05 08 00 5f 73 74 72  | ......`.......L....A....[..._str | 
| 2b040 |  73 74 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | str.ntdll.dll.ntdll.dll/......10 | 
| 2b060 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38  | 99622597..............0.......38 | 
| 2b080 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 12 00 00 00 5a 05 08 00 5f 73  | ........`.......L....A....Z..._s | 
| 2b0a0 |  74 72 73 70 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | trspn.ntdll.dll.ntdll.dll/...... | 
| 2b0c0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 2b0e0 |  33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 13 00 00 00 59 05 08 00  | 39........`.......L....A....Y... | 
| 2b100 |  5f 73 74 72 72 63 68 72 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | _strrchr.ntdll.dll..ntdll.dll/.. | 
| 2b120 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2b140 |  20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 13 00 00 00  | ....39........`.......L....A.... | 
| 2b160 |  58 05 08 00 5f 73 74 72 70 62 72 6b 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | X..._strpbrk.ntdll.dll..ntdll.dl | 
| 2b180 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 2b1a0 |  30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......39........`.......L....A | 
| 2b1c0 |  13 00 00 00 57 05 08 00 5f 73 74 72 6e 63 70 79    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | ....W..._strncpy.ntdll.dll..ntdl | 
| 2b1e0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2b200 |  20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......39........`.......L. | 
| 2b220 |  c5 e8 8a 41 13 00 00 00 56 05 08 00 5f 73 74 72    6e 63 6d 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | ...A....V..._strncmp.ntdll.dll.. | 
| 2b240 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 2b260 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......39........`..... | 
| 2b280 |  00 00 4c 01 c5 e8 8a 41 13 00 00 00 55 05 08 00    5f 73 74 72 6e 63 61 74 00 6e 74 64 6c 6c 2e 64  | ..L....A....U..._strncat.ntdll.d | 
| 2b2a0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 2b2c0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a  | ............0.......38........`. | 
| 2b2e0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 12 00 00 00    54 05 08 00 5f 73 74 72 6c 65 6e 00 6e 74 64 6c  | ......L....A....T..._strlen.ntdl | 
| 2b300 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 2b320 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20  | ..............0.......39........ | 
| 2b340 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 13 00    00 00 53 05 08 00 5f 73 74 72 63 73 70 6e 00 6e  | `.......L....A....S..._strcspn.n | 
| 2b360 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 2b380 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20  | 2597..............0.......38.... | 
| 2b3a0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 12 00 00 00 52 05 08 00 5f 73 74 72 63 70  | ....`.......L....A....R..._strcp | 
| 2b3c0 |  79 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | y.ntdll.dll.ntdll.dll/......1099 | 
| 2b3e0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20  | 622597..............0.......38.. | 
| 2b400 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 12 00 00 00 51 05 08 00 5f 73 74 72  | ......`.......L....A....Q..._str | 
| 2b420 |  63 6d 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | cmp.ntdll.dll.ntdll.dll/......10 | 
| 2b440 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38  | 99622597..............0.......38 | 
| 2b460 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 12 00 00 00 50 05 08 00 5f 73  | ........`.......L....A....P..._s | 
| 2b480 |  74 72 63 68 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | trchr.ntdll.dll.ntdll.dll/...... | 
| 2b4a0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 2b4c0 |  33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 12 00 00 00 4f 05 08 00  | 38........`.......L....A....O... | 
| 2b4e0 |  5f 73 74 72 63 61 74 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | _strcat.ntdll.dll.ntdll.dll/.... | 
| 2b500 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 2b520 |  20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 12 00 00 00 4e 05  | ..38........`.......L....A....N. | 
| 2b540 |  08 00 5f 73 73 63 61 6e 66 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | .._sscanf.ntdll.dll.ntdll.dll/.. | 
| 2b560 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2b580 |  20 20 20 20 33 36 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 10 00 00 00  | ....36........`.......L....A.... | 
| 2b5a0 |  4d 05 08 00 5f 73 71 72 74 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | M..._sqrt.ntdll.dll.ntdll.dll/.. | 
| 2b5c0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2b5e0 |  20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 13 00 00 00  | ....39........`.......L....A.... | 
| 2b600 |  4c 05 08 00 5f 73 70 72 69 6e 74 66 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | L..._sprintf.ntdll.dll..ntdll.dl | 
| 2b620 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 2b640 |  30 20 20 20 20 20 20 20 33 35 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......35........`.......L....A | 
| 2b660 |  0f 00 00 00 4b 05 08 00 5f 73 69 6e 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | ....K..._sin.ntdll.dll..ntdll.dl | 
| 2b680 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 2b6a0 |  30 20 20 20 20 20 20 20 33 37 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......37........`.......L....A | 
| 2b6c0 |  11 00 00 00 4a 05 08 00 5f 71 73 6f 72 74 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | ....J..._qsort.ntdll.dll..ntdll. | 
| 2b6e0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 2b700 |  20 20 30 20 20 20 20 20 20 20 33 35 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......35........`.......L... | 
| 2b720 |  8a 41 0f 00 00 00 49 05 08 00 5f 70 6f 77 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | .A....I..._pow.ntdll.dll..ntdll. | 
| 2b740 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 2b760 |  20 20 30 20 20 20 20 20 20 20 33 38 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......38........`.......L... | 
| 2b780 |  8a 41 12 00 00 00 48 05 08 00 5f 6d 65 6d 73 65    74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | .A....H..._memset.ntdll.dll.ntdl | 
| 2b7a0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2b7c0 |  20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......39........`.......L. | 
| 2b7e0 |  c5 e8 8a 41 13 00 00 00 47 05 08 00 5f 6d 65 6d    6d 6f 76 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | ...A....G..._memmove.ntdll.dll.. | 
| 2b800 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 2b820 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......38........`..... | 
| 2b840 |  00 00 4c 01 c5 e8 8a 41 12 00 00 00 46 05 08 00    5f 6d 65 6d 63 70 79 00 6e 74 64 6c 6c 2e 64 6c  | ..L....A....F..._memcpy.ntdll.dl | 
| 2b860 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 2b880 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......38........`... | 
| 2b8a0 |  ff ff 00 00 4c 01 c5 e8 8a 41 12 00 00 00 45 05    08 00 5f 6d 65 6d 63 6d 70 00 6e 74 64 6c 6c 2e  | ....L....A....E..._memcmp.ntdll. | 
| 2b8c0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 2b8e0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a  | ............0.......38........`. | 
| 2b900 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 12 00 00 00    44 05 08 00 5f 6d 65 6d 63 68 72 00 6e 74 64 6c  | ......L....A....D..._memchr.ntdl | 
| 2b920 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 2b940 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 34 30 20 20 20 20 20 20 20 20  | ..............0.......40........ | 
| 2b960 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 14 00    00 00 43 05 08 00 5f 6d 62 73 74 6f 77 63 73 00  | `.......L....A....C..._mbstowcs. | 
| 2b980 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 2b9a0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 33 35 20 20 20 20  | 2597..............0.......35.... | 
| 2b9c0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 0f 00 00 00 42 05 08 00 5f 6c 6f 67 00 6e  | ....`.......L....A....B..._log.n | 
| 2b9e0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 2ba00 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 33 36 20 20 20 20  | 2597..............0.......36.... | 
| 2ba20 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 10 00 00 00 41 05 08 00 5f 6c 61 62 73 00  | ....`.......L....A....A..._labs. | 
| 2ba40 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 2ba60 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20  | 2597..............0.......40.... | 
| 2ba80 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 14 00 00 00 40 05 08 00 5f 69 73 78 64 69  | ....`.......L....A....@..._isxdi | 
| 2baa0 |  67 69 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | git.ntdll.dll.ntdll.dll/......10 | 
| 2bac0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 31  | 99622597..............0.......41 | 
| 2bae0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 15 00 00 00 3f 05 08 00 5f 69  | ........`.......L....A....?..._i | 
| 2bb00 |  73 77 78 64 69 67 69 74 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | swxdigit.ntdll.dll..ntdll.dll/.. | 
| 2bb20 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2bb40 |  20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 14 00 00 00  | ....40........`.......L....A.... | 
| 2bb60 |  3e 05 08 00 5f 69 73 77 73 70 61 63 65 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | >..._iswspace.ntdll.dll.ntdll.dl | 
| 2bb80 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 2bba0 |  30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......40........`.......L....A | 
| 2bbc0 |  14 00 00 00 3d 05 08 00 5f 69 73 77 6c 6f 77 65    72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | ....=..._iswlower.ntdll.dll.ntdl | 
| 2bbe0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2bc00 |  20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......40........`.......L. | 
| 2bc20 |  c5 e8 8a 41 14 00 00 00 3c 05 08 00 5f 69 73 77    64 69 67 69 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | ...A....<..._iswdigit.ntdll.dll. | 
| 2bc40 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 2bc60 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......40........`..... | 
| 2bc80 |  00 00 4c 01 c5 e8 8a 41 14 00 00 00 3b 05 08 00    5f 69 73 77 63 74 79 70 65 00 6e 74 64 6c 6c 2e  | ..L....A....;..._iswctype.ntdll. | 
| 2bca0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 2bcc0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a  | ............0.......40........`. | 
| 2bce0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 14 00 00 00    3a 05 08 00 5f 69 73 77 61 6c 70 68 61 00 6e 74  | ......L....A....:..._iswalpha.nt | 
| 2bd00 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 2bd20 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20  | 97..............0.......39...... | 
| 2bd40 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    13 00 00 00 39 05 08 00 5f 69 73 75 70 70 65 72  | ..`.......L....A....9..._isupper | 
| 2bd60 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 2bd80 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20  | 622597..............0.......39.. | 
| 2bda0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 13 00 00 00 38 05 08 00 5f 69 73 73  | ......`.......L....A....8..._iss | 
| 2bdc0 |  70 61 63 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | pace.ntdll.dll..ntdll.dll/...... | 
| 2bde0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 2be00 |  33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 13 00 00 00 37 05 08 00  | 39........`.......L....A....7... | 
| 2be20 |  5f 69 73 70 75 6e 63 74 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | _ispunct.ntdll.dll..ntdll.dll/.. | 
| 2be40 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2be60 |  20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 13 00 00 00  | ....39........`.......L....A.... | 
| 2be80 |  36 05 08 00 5f 69 73 70 72 69 6e 74 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | 6..._isprint.ntdll.dll..ntdll.dl | 
| 2bea0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 2bec0 |  30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......39........`.......L....A | 
| 2bee0 |  13 00 00 00 35 05 08 00 5f 69 73 6c 6f 77 65 72    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | ....5..._islower.ntdll.dll..ntdl | 
| 2bf00 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2bf20 |  20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......39........`.......L. | 
| 2bf40 |  c5 e8 8a 41 13 00 00 00 34 05 08 00 5f 69 73 67    72 61 70 68 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | ...A....4..._isgraph.ntdll.dll.. | 
| 2bf60 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 2bf80 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......39........`..... | 
| 2bfa0 |  00 00 4c 01 c5 e8 8a 41 13 00 00 00 33 05 08 00    5f 69 73 64 69 67 69 74 00 6e 74 64 6c 6c 2e 64  | ..L....A....3..._isdigit.ntdll.d | 
| 2bfc0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 2bfe0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 33 39 20 20 20 20 20 20 20 20 60 0a  | ............0.......39........`. | 
| 2c000 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 13 00 00 00    32 05 08 00 5f 69 73 63 6e 74 72 6c 00 6e 74 64  | ......L....A....2..._iscntrl.ntd | 
| 2c020 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 2c040 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20  | 97..............0.......39...... | 
| 2c060 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    13 00 00 00 31 05 08 00 5f 69 73 61 6c 70 68 61  | ..`.......L....A....1..._isalpha | 
| 2c080 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 2c0a0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 33 39 20 20  | 622597..............0.......39.. | 
| 2c0c0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 13 00 00 00 30 05 08 00 5f 69 73 61  | ......`.......L....A....0..._isa | 
| 2c0e0 |  6c 6e 75 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | lnum.ntdll.dll..ntdll.dll/...... | 
| 2c100 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 2c120 |  33 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 11 00 00 00 2f 05 08 00  | 37........`.......L....A..../... | 
| 2c140 |  5f 66 6c 6f 6f 72 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | _floor.ntdll.dll..ntdll.dll/.... | 
| 2c160 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 2c180 |  20 20 33 36 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 10 00 00 00 2e 05  | ..36........`.......L....A...... | 
| 2c1a0 |  08 00 5f 66 61 62 73 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | .._fabs.ntdll.dll.ntdll.dll/.... | 
| 2c1c0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 2c1e0 |  20 20 33 35 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 0f 00 00 00 2d 05  | ..35........`.......L....A....-. | 
| 2c200 |  08 00 5f 63 6f 73 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | .._cos.ntdll.dll..ntdll.dll/.... | 
| 2c220 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 2c240 |  20 20 33 36 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 10 00 00 00 2c 05  | ..36........`.......L....A....,. | 
| 2c260 |  08 00 5f 63 65 69 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | .._ceil.ntdll.dll.ntdll.dll/.... | 
| 2c280 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 2c2a0 |  20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 13 00 00 00 2b 05  | ..39........`.......L....A....+. | 
| 2c2c0 |  08 00 5f 62 73 65 61 72 63 68 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | .._bsearch.ntdll.dll..ntdll.dll/ | 
| 2c2e0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2c300 |  20 20 20 20 20 20 33 36 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 10 00  | ......36........`.......L....A.. | 
| 2c320 |  00 00 2a 05 08 00 5f 61 74 6f 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ..*..._atol.ntdll.dll.ntdll.dll/ | 
| 2c340 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2c360 |  20 20 20 20 20 20 33 36 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 10 00  | ......36........`.......L....A.. | 
| 2c380 |  00 00 29 05 08 00 5f 61 74 6f 69 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ..)..._atoi.ntdll.dll.ntdll.dll/ | 
| 2c3a0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2c3c0 |  20 20 20 20 20 20 33 36 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 10 00  | ......36........`.......L....A.. | 
| 2c3e0 |  00 00 28 05 08 00 5f 61 74 61 6e 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ..(..._atan.ntdll.dll.ntdll.dll/ | 
| 2c400 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2c420 |  20 20 20 20 20 20 33 35 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 0f 00  | ......35........`.......L....A.. | 
| 2c440 |  00 00 27 05 08 00 5f 61 62 73 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ..'..._abs.ntdll.dll..ntdll.dll/ | 
| 2c460 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2c480 |  20 20 20 20 20 20 33 37 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 11 00  | ......37........`.......L....A.. | 
| 2c4a0 |  00 00 26 05 08 00 5f 5f 77 74 6f 6c 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | ..&...__wtol.ntdll.dll..ntdll.dl | 
| 2c4c0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 2c4e0 |  30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......39........`.......L....A | 
| 2c500 |  13 00 00 00 25 05 08 00 5f 5f 77 74 6f 69 36 34    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | ....%...__wtoi64.ntdll.dll..ntdl | 
| 2c520 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2c540 |  20 20 20 20 30 20 20 20 20 20 20 20 33 37 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......37........`.......L. | 
| 2c560 |  c5 e8 8a 41 11 00 00 00 24 05 08 00 5f 5f 77 74    6f 69 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | ...A....$...__wtoi.ntdll.dll..nt | 
| 2c580 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 2c5a0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......39........`....... | 
| 2c5c0 |  4c 01 c5 e8 8a 41 13 00 00 00 23 05 08 00 5f 5f    77 63 73 75 70 72 00 6e 74 64 6c 6c 2e 64 6c 6c  | L....A....#...__wcsupr.ntdll.dll | 
| 2c5e0 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 2c600 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 32 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......42........`... | 
| 2c620 |  ff ff 00 00 4c 01 c5 e8 8a 41 16 00 00 00 22 05    08 00 5f 5f 77 63 73 74 6f 75 69 36 34 00 6e 74  | ....L....A...."...__wcstoui64.nt | 
| 2c640 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 2c660 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 31 20 20 20 20 20 20  | 97..............0.......41...... | 
| 2c680 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    15 00 00 00 21 05 08 00 5f 5f 77 63 73 6e 69 63  | ..`.......L....A....!...__wcsnic | 
| 2c6a0 |  6d 70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | mp.ntdll.dll..ntdll.dll/......10 | 
| 2c6c0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39  | 99622597..............0.......39 | 
| 2c6e0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 13 00 00 00 20 05 08 00 5f 5f  | ........`.......L....A........__ | 
| 2c700 |  77 63 73 6c 77 72 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | wcslwr.ntdll.dll..ntdll.dll/.... | 
| 2c720 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 2c740 |  20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 14 00 00 00 1f 05  | ..40........`.......L....A...... | 
| 2c760 |  08 00 5f 5f 77 63 73 69 63 6d 70 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ..__wcsicmp.ntdll.dll.ntdll.dll/ | 
| 2c780 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2c7a0 |  20 20 20 20 20 20 34 33 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 17 00  | ......43........`.......L....A.. | 
| 2c7c0 |  00 00 1e 05 08 00 5f 5f 76 73 6e 77 70 72 69 6e    74 66 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | ......__vsnwprintf.ntdll.dll..nt | 
| 2c7e0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 2c800 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 32    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......42........`....... | 
| 2c820 |  4c 01 c5 e8 8a 41 16 00 00 00 1d 05 08 00 5f 5f    76 73 6e 70 72 69 6e 74 66 00 6e 74 64 6c 6c 2e  | L....A........__vsnprintf.ntdll. | 
| 2c840 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 2c860 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a  | ............0.......43........`. | 
| 2c880 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 17 00 00 00    1c 05 08 00 5f 5f 76 73 63 77 70 72 69 6e 74 66  | ......L....A........__vscwprintf | 
| 2c8a0 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 2c8c0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 33 38 20 20  | 622597..............0.......38.. | 
| 2c8e0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 12 00 00 00 1b 05 08 00 5f 5f 75 6c  | ......`.......L....A........__ul | 
| 2c900 |  74 6f 77 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | tow.ntdll.dll.ntdll.dll/......10 | 
| 2c920 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38  | 99622597..............0.......38 | 
| 2c940 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 12 00 00 00 1a 05 08 00 5f 5f  | ........`.......L....A........__ | 
| 2c960 |  75 6c 74 6f 61 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ultoa.ntdll.dll.ntdll.dll/...... | 
| 2c980 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 2c9a0 |  34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 14 00 00 00 19 05 08 00  | 40........`.......L....A........ | 
| 2c9c0 |  5f 5f 75 69 36 34 74 6f 77 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | __ui64tow.ntdll.dll.ntdll.dll/.. | 
| 2c9e0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2ca00 |  20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 14 00 00 00  | ....40........`.......L....A.... | 
| 2ca20 |  18 05 08 00 5f 5f 75 69 36 34 74 6f 61 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | ....__ui64toa.ntdll.dll.ntdll.dl | 
| 2ca40 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 2ca60 |  30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......40........`.......L....A | 
| 2ca80 |  14 00 00 00 17 05 08 00 5f 5f 74 6f 75 70 70 65    72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | ........__toupper.ntdll.dll.ntdl | 
| 2caa0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2cac0 |  20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......40........`.......L. | 
| 2cae0 |  c5 e8 8a 41 14 00 00 00 16 05 08 00 5f 5f 74 6f    6c 6f 77 65 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | ...A........__tolower.ntdll.dll. | 
| 2cb00 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 2cb20 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......39........`..... | 
| 2cb40 |  00 00 4c 01 c5 e8 8a 41 13 00 00 00 15 05 08 00    5f 5f 73 74 72 75 70 72 00 6e 74 64 6c 6c 2e 64  | ..L....A........__strupr.ntdll.d | 
| 2cb60 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 2cb80 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a  | ............0.......41........`. | 
| 2cba0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 15 00 00 00    14 05 08 00 5f 5f 73 74 72 6e 69 63 6d 70 00 6e  | ......L....A........__strnicmp.n | 
| 2cbc0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 2cbe0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20  | 2597..............0.......39.... | 
| 2cc00 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 13 00 00 00 13 05 08 00 5f 5f 73 74 72 6c  | ....`.......L....A........__strl | 
| 2cc20 |  77 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | wr.ntdll.dll..ntdll.dll/......10 | 
| 2cc40 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 30  | 99622597..............0.......40 | 
| 2cc60 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 14 00 00 00 12 05 08 00 5f 5f  | ........`.......L....A........__ | 
| 2cc80 |  73 74 72 69 63 6d 70 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | stricmp.ntdll.dll.ntdll.dll/.... | 
| 2cca0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 2ccc0 |  20 20 34 30 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 14 00 00 00 11 05  | ..40........`.......L....A...... | 
| 2cce0 |  08 00 5f 5f 73 74 72 63 6d 70 69 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ..__strcmpi.ntdll.dll.ntdll.dll/ | 
| 2cd00 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2cd20 |  20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 16 00  | ......42........`.......L....A.. | 
| 2cd40 |  00 00 10 05 08 00 5f 5f 73 70 6c 69 74 70 61 74    68 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | ......__splitpath.ntdll.dll.ntdl | 
| 2cd60 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2cd80 |  20 20 20 20 30 20 20 20 20 20 20 20 34 32 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......42........`.......L. | 
| 2cda0 |  c5 e8 8a 41 16 00 00 00 0f 05 08 00 5f 5f 73 6e    77 70 72 69 6e 74 66 00 6e 74 64 6c 6c 2e 64 6c  | ...A........__snwprintf.ntdll.dl | 
| 2cdc0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 2cde0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 31 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......41........`... | 
| 2ce00 |  ff ff 00 00 4c 01 c5 e8 8a 41 15 00 00 00 0e 05    08 00 5f 5f 73 6e 70 72 69 6e 74 66 00 6e 74 64  | ....L....A........__snprintf.ntd | 
| 2ce20 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 2ce40 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 30 20 20 20 20 20 20  | 97..............0.......40...... | 
| 2ce60 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    14 00 00 00 0d 05 08 00 5f 5f 6d 65 6d 69 63 6d  | ..`.......L....A........__memicm | 
| 2ce80 |  70 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | p.ntdll.dll.ntdll.dll/......1099 | 
| 2cea0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20  | 622597..............0.......40.. | 
| 2cec0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 14 00 00 00 0c 05 08 00 5f 5f 6d 65  | ......`.......L....A........__me | 
| 2cee0 |  6d 63 63 70 79 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | mccpy.ntdll.dll.ntdll.dll/...... | 
| 2cf00 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 2cf20 |  33 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 11 00 00 00 0b 05 08 00  | 37........`.......L....A........ | 
| 2cf40 |  5f 5f 6c 74 6f 77 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | __ltow.ntdll.dll..ntdll.dll/.... | 
| 2cf60 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 2cf80 |  20 20 33 37 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 11 00 00 00 0a 05  | ..37........`.......L....A...... | 
| 2cfa0 |  08 00 5f 5f 6c 74 6f 61 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ..__ltoa.ntdll.dll..ntdll.dll/.. | 
| 2cfc0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2cfe0 |  20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 12 00 00 00  | ....38........`.......L....A.... | 
| 2d000 |  09 05 08 00 5f 5f 6c 66 69 6e 64 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ....__lfind.ntdll.dll.ntdll.dll/ | 
| 2d020 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2d040 |  20 20 20 20 20 20 33 37 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 11 00  | ......37........`.......L....A.. | 
| 2d060 |  00 00 08 05 08 00 5f 5f 69 74 6f 77 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | ......__itow.ntdll.dll..ntdll.dl | 
| 2d080 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 2d0a0 |  30 20 20 20 20 20 20 20 33 37 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......37........`.......L....A | 
| 2d0c0 |  11 00 00 00 07 05 08 00 5f 5f 69 74 6f 61 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | ........__itoa.ntdll.dll..ntdll. | 
| 2d0e0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 2d100 |  20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......39........`.......L... | 
| 2d120 |  8a 41 13 00 00 00 06 05 08 00 5f 5f 69 36 34 74    6f 77 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | .A........__i64tow.ntdll.dll..nt | 
| 2d140 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 2d160 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......39........`....... | 
| 2d180 |  4c 01 c5 e8 8a 41 13 00 00 00 05 05 08 00 5f 5f    69 36 34 74 6f 61 00 6e 74 64 6c 6c 2e 64 6c 6c  | L....A........__i64toa.ntdll.dll | 
| 2d1a0 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 2d1c0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 33 37 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......37........`... | 
| 2d1e0 |  ff ff 00 00 4c 01 c5 e8 8a 41 11 00 00 00 04 05    08 00 5f 5f 66 74 6f 6c 00 6e 74 64 6c 6c 2e 64  | ....L....A........__ftol.ntdll.d | 
| 2d200 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 2d220 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 30 20 20 20 20 20 20 20 20 60 0a  | ............0.......40........`. | 
| 2d240 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 14 00 00 00    03 05 0a 00 5f 5f 66 6c 74 75 73 65 64 00 6e 74  | ......L....A........__fltused.nt | 
| 2d260 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 2d280 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20  | 97..............0.......39...... | 
| 2d2a0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    13 00 00 00 02 05 08 00 5f 5f 63 68 6b 73 74 6b  | ..`.......L....A........__chkstk | 
| 2d2c0 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 2d2e0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20  | 622597..............0.......40.. | 
| 2d300 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 14 00 00 00 01 05 08 00 5f 5f 61 75  | ......`.......L....A........__au | 
| 2d320 |  6c 6c 73 68 72 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | llshr.ntdll.dll.ntdll.dll/...... | 
| 2d340 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 2d360 |  34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 14 00 00 00 00 05 08 00  | 40........`.......L....A........ | 
| 2d380 |  5f 5f 61 75 6c 6c 72 65 6d 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | __aullrem.ntdll.dll.ntdll.dll/.. | 
| 2d3a0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2d3c0 |  20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 15 00 00 00  | ....41........`.......L....A.... | 
| 2d3e0 |  ff 04 08 00 5f 5f 61 75 6c 6c 64 76 72 6d 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | ....__aulldvrm.ntdll.dll..ntdll. | 
| 2d400 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 2d420 |  20 20 30 20 20 20 20 20 20 20 34 30 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......40........`.......L... | 
| 2d440 |  8a 41 14 00 00 00 fe 04 08 00 5f 5f 61 75 6c 6c    64 69 76 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | .A........__aulldiv.ntdll.dll.nt | 
| 2d460 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 2d480 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 39    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......39........`....... | 
| 2d4a0 |  4c 01 c5 e8 8a 41 13 00 00 00 fd 04 08 00 5f 5f    61 74 6f 69 36 34 00 6e 74 64 6c 6c 2e 64 6c 6c  | L....A........__atoi64.ntdll.dll | 
| 2d4c0 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 2d4e0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 33 39 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......39........`... | 
| 2d500 |  ff ff 00 00 4c 01 c5 e8 8a 41 13 00 00 00 fc 04    08 00 5f 5f 61 6c 6c 73 68 72 00 6e 74 64 6c 6c  | ....L....A........__allshr.ntdll | 
| 2d520 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 2d540 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 33 39 20 20 20 20 20 20 20 20  | ..............0.......39........ | 
| 2d560 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 13 00    00 00 fb 04 08 00 5f 5f 61 6c 6c 73 68 6c 00 6e  | `.......L....A........__allshl.n | 
| 2d580 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 2d5a0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20  | 2597..............0.......39.... | 
| 2d5c0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 13 00 00 00 fa 04 08 00 5f 5f 61 6c 6c 72  | ....`.......L....A........__allr | 
| 2d5e0 |  65 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | em.ntdll.dll..ntdll.dll/......10 | 
| 2d600 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35  | 99622597..............0.......45 | 
| 2d620 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 19 00 00 00 f9 04 08 00 5f 5f  | ........`.......L....A........__ | 
| 2d640 |  61 6c 6c 6f 63 61 5f 70 72 6f 62 65 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | alloca_probe.ntdll.dll..ntdll.dl | 
| 2d660 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 2d680 |  30 20 20 20 20 20 20 20 33 39 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......39........`.......L....A | 
| 2d6a0 |  13 00 00 00 f8 04 08 00 5f 5f 61 6c 6c 6d 75 6c    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | ........__allmul.ntdll.dll..ntdl | 
| 2d6c0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2d6e0 |  20 20 20 20 30 20 20 20 20 20 20 20 34 30 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......40........`.......L. | 
| 2d700 |  c5 e8 8a 41 14 00 00 00 f7 04 08 00 5f 5f 61 6c    6c 64 76 72 6d 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | ...A........__alldvrm.ntdll.dll. | 
| 2d720 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 2d740 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    33 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......39........`..... | 
| 2d760 |  00 00 4c 01 c5 e8 8a 41 13 00 00 00 f6 04 08 00    5f 5f 61 6c 6c 64 69 76 00 6e 74 64 6c 6c 2e 64  | ..L....A........__alldiv.ntdll.d | 
| 2d780 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 2d7a0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a  | ............0.......41........`. | 
| 2d7c0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 15 00 00 00    f5 04 08 00 5f 5f 5f 74 6f 61 73 63 69 69 00 6e  | ......L....A........___toascii.n | 
| 2d7e0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 2d800 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 31 20 20 20 20  | 2597..............0.......41.... | 
| 2d820 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 15 00 00 00 f4 04 08 00 5f 5f 5f 69 73 63  | ....`.......L....A........___isc | 
| 2d840 |  73 79 6d 66 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | symf.ntdll.dll..ntdll.dll/...... | 
| 2d860 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 2d880 |  34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 14 00 00 00 f3 04 08 00  | 40........`.......L....A........ | 
| 2d8a0 |  5f 5f 5f 69 73 63 73 79 6d 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ___iscsym.ntdll.dll.ntdll.dll/.. | 
| 2d8c0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2d8e0 |  20 20 20 20 34 31 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 15 00 00 00  | ....41........`.......L....A.... | 
| 2d900 |  f2 04 08 00 5f 5f 5f 69 73 61 73 63 69 69 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | ....___isascii.ntdll.dll..ntdll. | 
| 2d920 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 2d940 |  20 20 30 20 20 20 20 20 20 20 33 39 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......39........`.......L... | 
| 2d960 |  8a 41 13 00 00 00 f1 04 08 00 5f 5f 43 49 73 71    72 74 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | .A........__CIsqrt.ntdll.dll..nt | 
| 2d980 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 2d9a0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 33 38    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......38........`....... | 
| 2d9c0 |  4c 01 c5 e8 8a 41 12 00 00 00 f0 04 08 00 5f 5f    43 49 73 69 6e 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | L....A........__CIsin.ntdll.dll. | 
| 2d9e0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 2da00 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    33 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......38........`..... | 
| 2da20 |  00 00 4c 01 c5 e8 8a 41 12 00 00 00 ef 04 08 00    5f 5f 43 49 70 6f 77 00 6e 74 64 6c 6c 2e 64 6c  | ..L....A........__CIpow.ntdll.dl | 
| 2da40 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 2da60 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 33 38 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......38........`... | 
| 2da80 |  ff ff 00 00 4c 01 c5 e8 8a 41 12 00 00 00 ee 04    08 00 5f 5f 43 49 6c 6f 67 00 6e 74 64 6c 6c 2e  | ....L....A........__CIlog.ntdll. | 
| 2daa0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 2dac0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 33 38 20 20 20 20 20 20 20 20 60 0a  | ............0.......38........`. | 
| 2dae0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 12 00 00 00    ed 04 08 00 5f 5f 43 49 63 6f 73 00 6e 74 64 6c  | ......L....A........__CIcos.ntdl | 
| 2db00 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 2db20 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20  | ..............0.......50........ | 
| 2db40 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00    00 00 ec 04 0c 00 5f 5a 77 59 69 65 6c 64 45 78  | `.......L....A........_ZwYieldEx | 
| 2db60 |  65 63 75 74 69 6f 6e 40 30 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ecution@0.ntdll.dll.ntdll.dll/.. | 
| 2db80 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2dba0 |  20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 23 00 00 00  | ....55........`.......L....A#... | 
| 2dbc0 |  eb 04 0c 00 5f 5a 77 57 72 69 74 65 56 69 72 74    75 61 6c 4d 65 6d 6f 72 79 40 32 30 00 6e 74 64  | ...._ZwWriteVirtualMemory@20.ntd | 
| 2dbe0 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 2dc00 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20  | 97..............0.......53...... | 
| 2dc20 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    21 00 00 00 ea 04 0c 00 5f 5a 77 57 72 69 74 65  | ..`.......L....A!......._ZwWrite | 
| 2dc40 |  52 65 71 75 65 73 74 44 61 74 61 40 32 34 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | RequestData@24.ntdll.dll..ntdll. | 
| 2dc60 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 2dc80 |  20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......52........`.......L... | 
| 2dca0 |  8a 41 20 00 00 00 e9 04 0c 00 5f 5a 77 57 72 69    74 65 46 69 6c 65 47 61 74 68 65 72 40 33 36 00  | .A........_ZwWriteFileGather@36. | 
| 2dcc0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 2dce0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20  | 2597..............0.......46.... | 
| 2dd00 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1a 00 00 00 e8 04 0c 00 5f 5a 77 57 72 69  | ....`.......L....A........_ZwWri | 
| 2dd20 |  74 65 46 69 6c 65 40 33 36 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | teFile@36.ntdll.dll.ntdll.dll/.. | 
| 2dd40 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2dd60 |  20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00  | ....52........`.......L....A.... | 
| 2dd80 |  e7 04 0c 00 5f 5a 77 57 61 69 74 4c 6f 77 45 76    65 6e 74 50 61 69 72 40 34 00 6e 74 64 6c 6c 2e  | ...._ZwWaitLowEventPair@4.ntdll. | 
| 2dda0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 2ddc0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a  | ............0.......53........`. | 
| 2dde0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00    e6 04 0c 00 5f 5a 77 57 61 69 74 48 69 67 68 45  | ......L....A!......._ZwWaitHighE | 
| 2de00 |  76 65 6e 74 50 61 69 72 40 34 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ventPair@4.ntdll.dll..ntdll.dll/ | 
| 2de20 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2de40 |  20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 24 00  | ......56........`.......L....A$. | 
| 2de60 |  00 00 e5 04 0c 00 5f 5a 77 57 61 69 74 46 6f 72    53 69 6e 67 6c 65 4f 62 6a 65 63 74 40 31 32 00  | ......_ZwWaitForSingleObject@12. | 
| 2de80 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 2dea0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20  | 2597..............0.......59.... | 
| 2dec0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 27 00 00 00 e3 04 0c 00 5f 5a 77 57 61 69  | ....`.......L....A'......._ZwWai | 
| 2dee0 |  74 46 6f 72 4d 75 6c 74 69 70 6c 65 4f 62 6a 65    63 74 73 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c  | tForMultipleObjects@20.ntdll.dll | 
| 2df00 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 2df20 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 31 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......61........`... | 
| 2df40 |  ff ff 00 00 4c 01 c5 e8 8a 41 29 00 00 00 e4 04    0c 00 5f 5a 77 57 61 69 74 46 6f 72 4d 75 6c 74  | ....L....A)......._ZwWaitForMult | 
| 2df60 |  69 70 6c 65 4f 62 6a 65 63 74 73 33 32 40 32 30    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | ipleObjects32@20.ntdll.dll..ntdl | 
| 2df80 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2dfa0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......54........`.......L. | 
| 2dfc0 |  c5 e8 8a 41 22 00 00 00 e2 04 0c 00 5f 5a 77 57    61 69 74 46 6f 72 4b 65 79 65 64 45 76 65 6e 74  | ...A"......._ZwWaitForKeyedEvent | 
| 2dfe0 |  40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @16.ntdll.dll.ntdll.dll/......10 | 
| 2e000 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34  | 99622597..............0.......54 | 
| 2e020 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 22 00 00 00 e1 04 0c 00 5f 5a  | ........`.......L....A"......._Z | 
| 2e040 |  77 57 61 69 74 46 6f 72 44 65 62 75 67 45 76 65    6e 74 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | wWaitForDebugEvent@16.ntdll.dll. | 
| 2e060 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 2e080 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......46........`..... | 
| 2e0a0 |  00 00 4c 01 c5 e8 8a 41 1a 00 00 00 e0 04 0c 00    5f 5a 77 56 64 6d 43 6f 6e 74 72 6f 6c 40 38 00  | ..L....A........_ZwVdmControl@8. | 
| 2e0c0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 2e0e0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20  | 2597..............0.......54.... | 
| 2e100 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 22 00 00 00 df 04 0c 00 5f 5a 77 55 6e 6d  | ....`.......L....A"......._ZwUnm | 
| 2e120 |  61 70 56 69 65 77 4f 66 53 65 63 74 69 6f 6e 40    38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | apViewOfSection@8.ntdll.dll.ntdl | 
| 2e140 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2e160 |  20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......56........`.......L. | 
| 2e180 |  c5 e8 8a 41 24 00 00 00 de 04 0c 00 5f 5a 77 55    6e 6c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f  | ...A$......._ZwUnlockVirtualMemo | 
| 2e1a0 |  72 79 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ry@16.ntdll.dll.ntdll.dll/...... | 
| 2e1c0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 2e1e0 |  34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1b 00 00 00 dd 04 0c 00  | 47........`.......L....A........ | 
| 2e200 |  5f 5a 77 55 6e 6c 6f 63 6b 46 69 6c 65 40 32 30    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | _ZwUnlockFile@20.ntdll.dll..ntdl | 
| 2e220 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2e240 |  20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......47........`.......L. | 
| 2e260 |  c5 e8 8a 41 1b 00 00 00 dc 04 0c 00 5f 5a 77 55    6e 6c 6f 61 64 4b 65 79 45 78 40 38 00 6e 74 64  | ...A........_ZwUnloadKeyEx@8.ntd | 
| 2e280 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 2e2a0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20  | 97..............0.......45...... | 
| 2e2c0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    19 00 00 00 da 04 0c 00 5f 5a 77 55 6e 6c 6f 61  | ..`.......L....A........_ZwUnloa | 
| 2e2e0 |  64 4b 65 79 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | dKey@4.ntdll.dll..ntdll.dll/.... | 
| 2e300 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 2e320 |  20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1a 00 00 00 db 04  | ..46........`.......L....A...... | 
| 2e340 |  0c 00 5f 5a 77 55 6e 6c 6f 61 64 4b 65 79 32 40    38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | .._ZwUnloadKey2@8.ntdll.dll.ntdl | 
| 2e360 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2e380 |  20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......48........`.......L. | 
| 2e3a0 |  c5 e8 8a 41 1c 00 00 00 d9 04 0c 00 5f 5a 77 55    6e 6c 6f 61 64 44 72 69 76 65 72 40 34 00 6e 74  | ...A........_ZwUnloadDriver@4.nt | 
| 2e3c0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 2e3e0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20  | 97..............0.......54...... | 
| 2e400 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    22 00 00 00 d8 04 0c 00 5f 5a 77 54 72 61 6e 73  | ..`.......L....A"......._ZwTrans | 
| 2e420 |  6c 61 74 65 46 69 6c 65 50 61 74 68 40 31 36 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | lateFilePath@16.ntdll.dll.ntdll. | 
| 2e440 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 2e460 |  20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......47........`.......L... | 
| 2e480 |  8a 41 1b 00 00 00 d7 04 0c 00 5f 5a 77 54 72 61    63 65 45 76 65 6e 74 40 31 36 00 6e 74 64 6c 6c  | .A........_ZwTraceEvent@16.ntdll | 
| 2e4a0 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 2e4c0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20  | ..............0.......45........ | 
| 2e4e0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 19 00    00 00 d6 04 0c 00 5f 5a 77 54 65 73 74 41 6c 65  | `.......L....A........_ZwTestAle | 
| 2e500 |  72 74 40 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | rt@0.ntdll.dll..ntdll.dll/...... | 
| 2e520 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 2e540 |  35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1f 00 00 00 d5 04 0c 00  | 51........`.......L....A........ | 
| 2e560 |  5f 5a 77 54 65 72 6d 69 6e 61 74 65 54 68 72 65    61 64 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | _ZwTerminateThread@8.ntdll.dll.. | 
| 2e580 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 2e5a0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......52........`..... | 
| 2e5c0 |  00 00 4c 01 c5 e8 8a 41 20 00 00 00 d4 04 0c 00    5f 5a 77 54 65 72 6d 69 6e 61 74 65 50 72 6f 63  | ..L....A........_ZwTerminateProc | 
| 2e5e0 |  65 73 73 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ess@8.ntdll.dll.ntdll.dll/...... | 
| 2e600 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 2e620 |  35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 22 00 00 00 d3 04 0c 00  | 54........`.......L....A"....... | 
| 2e640 |  5f 5a 77 54 65 72 6d 69 6e 61 74 65 4a 6f 62 4f    62 6a 65 63 74 40 38 00 6e 74 64 6c 6c 2e 64 6c  | _ZwTerminateJobObject@8.ntdll.dl | 
| 2e660 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 2e680 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......55........`... | 
| 2e6a0 |  ff ff 00 00 4c 01 c5 e8 8a 41 23 00 00 00 d2 04    0c 00 5f 5a 77 53 79 73 74 65 6d 44 65 62 75 67  | ....L....A#......._ZwSystemDebug | 
| 2e6c0 |  43 6f 6e 74 72 6f 6c 40 32 34 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | Control@24.ntdll.dll..ntdll.dll/ | 
| 2e6e0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2e700 |  20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1d 00  | ......49........`.......L....A.. | 
| 2e720 |  00 00 d1 04 0c 00 5f 5a 77 53 75 73 70 65 6e 64    54 68 72 65 61 64 40 38 00 6e 74 64 6c 6c 2e 64  | ......_ZwSuspendThread@8.ntdll.d | 
| 2e740 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 2e760 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a  | ............0.......50........`. | 
| 2e780 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00    d0 04 0c 00 5f 5a 77 53 75 73 70 65 6e 64 50 72  | ......L....A........_ZwSuspendPr | 
| 2e7a0 |  6f 63 65 73 73 40 34 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ocess@4.ntdll.dll.ntdll.dll/.... | 
| 2e7c0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 2e7e0 |  20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1b 00 00 00 cf 04  | ..47........`.......L....A...... | 
| 2e800 |  0c 00 5f 5a 77 53 74 6f 70 50 72 6f 66 69 6c 65    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | .._ZwStopProfile@4.ntdll.dll..nt | 
| 2e820 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 2e840 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......48........`....... | 
| 2e860 |  4c 01 c5 e8 8a 41 1c 00 00 00 ce 04 0c 00 5f 5a    77 53 74 61 72 74 50 72 6f 66 69 6c 65 40 34 00  | L....A........_ZwStartProfile@4. | 
| 2e880 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 2e8a0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 35 20 20 20 20  | 2597..............0.......65.... | 
| 2e8c0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 2d 00 00 00 cd 04 0c 00 5f 5a 77 53 69 67  | ....`.......L....A-......._ZwSig | 
| 2e8e0 |  6e 61 6c 41 6e 64 57 61 69 74 46 6f 72 53 69 6e    67 6c 65 4f 62 6a 65 63 74 40 31 36 00 6e 74 64  | nalAndWaitForSingleObject@16.ntd | 
| 2e900 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 2e920 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20  | 97..............0.......50...... | 
| 2e940 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1e 00 00 00 cc 04 0c 00 5f 5a 77 53 68 75 74 64  | ..`.......L....A........_ZwShutd | 
| 2e960 |  6f 77 6e 53 79 73 74 65 6d 40 34 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ownSystem@4.ntdll.dll.ntdll.dll/ | 
| 2e980 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2e9a0 |  20 20 20 20 20 20 36 31 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 29 00  | ......61........`.......L....A). | 
| 2e9c0 |  00 00 cb 04 0c 00 5f 5a 77 53 65 74 56 6f 6c 75    6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c  | ......_ZwSetVolumeInformationFil | 
| 2e9e0 |  65 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | e@20.ntdll.dll..ntdll.dll/...... | 
| 2ea00 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 2ea20 |  34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1c 00 00 00 ca 04 0c 00  | 48........`.......L....A........ | 
| 2ea40 |  5f 5a 77 53 65 74 56 61 6c 75 65 4b 65 79 40 32    34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | _ZwSetValueKey@24.ntdll.dll.ntdl | 
| 2ea60 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2ea80 |  20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......47........`.......L. | 
| 2eaa0 |  c5 e8 8a 41 1b 00 00 00 c9 04 0c 00 5f 5a 77 53    65 74 55 75 69 64 53 65 65 64 40 34 00 6e 74 64  | ...A........_ZwSetUuidSeed@4.ntd | 
| 2eac0 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 2eae0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20  | 97..............0.......55...... | 
| 2eb00 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    23 00 00 00 c8 04 0c 00 5f 5a 77 53 65 74 54 69  | ..`.......L....A#......._ZwSetTi | 
| 2eb20 |  6d 65 72 52 65 73 6f 6c 75 74 69 6f 6e 40 31 32    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | merResolution@12.ntdll.dll..ntdl | 
| 2eb40 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2eb60 |  20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......45........`.......L. | 
| 2eb80 |  c5 e8 8a 41 19 00 00 00 c7 04 0c 00 5f 5a 77 53    65 74 54 69 6d 65 72 40 32 38 00 6e 74 64 6c 6c  | ...A........_ZwSetTimer@28.ntdll | 
| 2eba0 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 2ebc0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20  | ..............0.......59........ | 
| 2ebe0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00    00 00 c6 04 0c 00 5f 5a 77 53 65 74 54 68 72 65  | `.......L....A'......._ZwSetThre | 
| 2ec00 |  61 64 45 78 65 63 75 74 69 6f 6e 53 74 61 74 65    40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | adExecutionState@8.ntdll.dll..nt | 
| 2ec20 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 2ec40 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......49........`....... | 
| 2ec60 |  4c 01 c5 e8 8a 41 1d 00 00 00 c5 04 0c 00 5f 5a    77 53 65 74 53 79 73 74 65 6d 54 69 6d 65 40 38  | L....A........_ZwSetSystemTime@8 | 
| 2ec80 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 2eca0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20  | 622597..............0.......56.. | 
| 2ecc0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 24 00 00 00 c4 04 0c 00 5f 5a 77 53  | ......`.......L....A$......._ZwS | 
| 2ece0 |  65 74 53 79 73 74 65 6d 50 6f 77 65 72 53 74 61    74 65 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | etSystemPowerState@12.ntdll.dll. | 
| 2ed00 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 2ed20 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......57........`..... | 
| 2ed40 |  00 00 4c 01 c5 e8 8a 41 25 00 00 00 c3 04 0c 00    5f 5a 77 53 65 74 53 79 73 74 65 6d 49 6e 66 6f  | ..L....A%......._ZwSetSystemInfo | 
| 2ed60 |  72 6d 61 74 69 6f 6e 40 31 32 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | rmation@12.ntdll.dll..ntdll.dll/ | 
| 2ed80 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2eda0 |  20 20 20 20 20 20 36 34 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2c 00  | ......64........`.......L....A,. | 
| 2edc0 |  00 00 c2 04 0c 00 5f 5a 77 53 65 74 53 79 73 74    65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c  | ......_ZwSetSystemEnvironmentVal | 
| 2ede0 |  75 65 45 78 40 32 30 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ueEx@20.ntdll.dll.ntdll.dll/.... | 
| 2ee00 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 2ee20 |  20 20 36 31 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 29 00 00 00 c1 04  | ..61........`.......L....A)..... | 
| 2ee40 |  0c 00 5f 5a 77 53 65 74 53 79 73 74 65 6d 45 6e    76 69 72 6f 6e 6d 65 6e 74 56 61 6c 75 65 40 38  | .._ZwSetSystemEnvironmentValue@8 | 
| 2ee60 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 2ee80 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20  | 622597..............0.......54.. | 
| 2eea0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 22 00 00 00 c0 04 0c 00 5f 5a 77 53  | ......`.......L....A"......._ZwS | 
| 2eec0 |  65 74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74    40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | etSecurityObject@12.ntdll.dll.nt | 
| 2eee0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 2ef00 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......60........`....... | 
| 2ef20 |  4c 01 c5 e8 8a 41 28 00 00 00 bf 04 0c 00 5f 5a    77 53 65 74 51 75 6f 74 61 49 6e 66 6f 72 6d 61  | L....A(......._ZwSetQuotaInforma | 
| 2ef40 |  74 69 6f 6e 46 69 6c 65 40 31 36 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | tionFile@16.ntdll.dll.ntdll.dll/ | 
| 2ef60 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2ef80 |  20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00  | ......59........`.......L....A'. | 
| 2efa0 |  00 00 be 04 0c 00 5f 5a 77 53 65 74 4c 6f 77 57    61 69 74 48 69 67 68 45 76 65 6e 74 50 61 69 72  | ......_ZwSetLowWaitHighEventPair | 
| 2efc0 |  40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @4.ntdll.dll..ntdll.dll/......10 | 
| 2efe0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31  | 99622597..............0.......51 | 
| 2f000 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1f 00 00 00 bd 04 0c 00 5f 5a  | ........`.......L....A........_Z | 
| 2f020 |  77 53 65 74 4c 6f 77 45 76 65 6e 74 50 61 69 72    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | wSetLowEventPair@4.ntdll.dll..nt | 
| 2f040 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 2f060 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......50........`....... | 
| 2f080 |  4c 01 c5 e8 8a 41 1e 00 00 00 bc 04 0c 00 5f 5a    77 53 65 74 4c 64 74 45 6e 74 72 69 65 73 40 32  | L....A........_ZwSetLdtEntries@2 | 
| 2f0a0 |  34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 4.ntdll.dll.ntdll.dll/......1099 | 
| 2f0c0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20  | 622597..............0.......52.. | 
| 2f0e0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 20 00 00 00 bb 04 0c 00 5f 5a 77 53  | ......`.......L....A........_ZwS | 
| 2f100 |  65 74 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 32    30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | etIoCompletion@20.ntdll.dll.ntdl | 
| 2f120 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2f140 |  20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......54........`.......L. | 
| 2f160 |  c5 e8 8a 41 22 00 00 00 ba 04 0c 00 5f 5a 77 53    65 74 49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c  | ...A"......._ZwSetIntervalProfil | 
| 2f180 |  65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | e@8.ntdll.dll.ntdll.dll/......10 | 
| 2f1a0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36  | 99622597..............0.......56 | 
| 2f1c0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 24 00 00 00 b9 04 0c 00 5f 5a  | ........`.......L....A$......._Z | 
| 2f1e0 |  77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 54    6f 6b 65 6e 40 31 36 00 6e 74 64 6c 6c 2e 64 6c  | wSetInformationToken@16.ntdll.dl | 
| 2f200 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 2f220 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......57........`... | 
| 2f240 |  ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00 b8 04    0c 00 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74  | ....L....A%......._ZwSetInformat | 
| 2f260 |  69 6f 6e 54 68 72 65 61 64 40 31 36 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | ionThread@16.ntdll.dll..ntdll.dl | 
| 2f280 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 2f2a0 |  30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......58........`.......L....A | 
| 2f2c0 |  26 00 00 00 b7 04 0c 00 5f 5a 77 53 65 74 49 6e    66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65 73 73  | &......._ZwSetInformationProcess | 
| 2f2e0 |  40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @16.ntdll.dll.ntdll.dll/......10 | 
| 2f300 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37  | 99622597..............0.......57 | 
| 2f320 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 25 00 00 00 b6 04 0c 00 5f 5a  | ........`.......L....A%......._Z | 
| 2f340 |  77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 4f    62 6a 65 63 74 40 31 36 00 6e 74 64 6c 6c 2e 64  | wSetInformationObject@16.ntdll.d | 
| 2f360 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 2f380 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a  | ............0.......54........`. | 
| 2f3a0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00    b5 04 0c 00 5f 5a 77 53 65 74 49 6e 66 6f 72 6d  | ......L....A"......._ZwSetInform | 
| 2f3c0 |  61 74 69 6f 6e 4b 65 79 40 31 36 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ationKey@16.ntdll.dll.ntdll.dll/ | 
| 2f3e0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 2f400 |  20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 28 00  | ......60........`.......L....A(. | 
| 2f420 |  00 00 b4 04 0c 00 5f 5a 77 53 65 74 49 6e 66 6f    72 6d 61 74 69 6f 6e 4a 6f 62 4f 62 6a 65 63 74  | ......_ZwSetInformationJobObject | 
| 2f440 |  40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @16.ntdll.dll.ntdll.dll/......10 | 
| 2f460 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35  | 99622597..............0.......55 | 
| 2f480 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 23 00 00 00 b3 04 0c 00 5f 5a  | ........`.......L....A#......._Z | 
| 2f4a0 |  77 53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 46    69 6c 65 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c  | wSetInformationFile@20.ntdll.dll | 
| 2f4c0 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 2f4e0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 32 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......62........`... | 
| 2f500 |  ff ff 00 00 4c 01 c5 e8 8a 41 2a 00 00 00 b2 04    0c 00 5f 5a 77 53 65 74 49 6e 66 6f 72 6d 61 74  | ....L....A*......._ZwSetInformat | 
| 2f520 |  69 6f 6e 44 65 62 75 67 4f 62 6a 65 63 74 40 32    30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | ionDebugObject@20.ntdll.dll.ntdl | 
| 2f540 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2f560 |  20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......59........`.......L. | 
| 2f580 |  c5 e8 8a 41 27 00 00 00 b1 04 0c 00 5f 5a 77 53    65 74 48 69 67 68 57 61 69 74 4c 6f 77 45 76 65  | ...A'......._ZwSetHighWaitLowEve | 
| 2f5a0 |  6e 74 50 61 69 72 40 34 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ntPair@4.ntdll.dll..ntdll.dll/.. | 
| 2f5c0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2f5e0 |  20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00  | ....52........`.......L....A.... | 
| 2f600 |  b0 04 0c 00 5f 5a 77 53 65 74 48 69 67 68 45 76    65 6e 74 50 61 69 72 40 34 00 6e 74 64 6c 6c 2e  | ...._ZwSetHighEventPair@4.ntdll. | 
| 2f620 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 2f640 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a  | ............0.......57........`. | 
| 2f660 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00    af 04 0c 00 5f 5a 77 53 65 74 45 76 65 6e 74 42  | ......L....A%......._ZwSetEventB | 
| 2f680 |  6f 6f 73 74 50 72 69 6f 72 69 74 79 40 34 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | oostPriority@4.ntdll.dll..ntdll. | 
| 2f6a0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 2f6c0 |  20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......44........`.......L... | 
| 2f6e0 |  8a 41 18 00 00 00 ae 04 0c 00 5f 5a 77 53 65 74    45 76 65 6e 74 40 38 00 6e 74 64 6c 6c 2e 64 6c  | .A........_ZwSetEvent@8.ntdll.dl | 
| 2f700 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 2f720 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......46........`... | 
| 2f740 |  ff ff 00 00 4c 01 c5 e8 8a 41 1a 00 00 00 ad 04    0c 00 5f 5a 77 53 65 74 45 61 46 69 6c 65 40 31  | ....L....A........_ZwSetEaFile@1 | 
| 2f760 |  36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 6.ntdll.dll.ntdll.dll/......1099 | 
| 2f780 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20  | 622597..............0.......55.. | 
| 2f7a0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 23 00 00 00 ac 04 0c 00 5f 5a 77 53  | ......`.......L....A#......._ZwS | 
| 2f7c0 |  65 74 44 72 69 76 65 72 45 6e 74 72 79 4f 72 64    65 72 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | etDriverEntryOrder@8.ntdll.dll.. | 
| 2f7e0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 2f800 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......56........`..... | 
| 2f820 |  00 00 4c 01 c5 e8 8a 41 24 00 00 00 ab 04 0c 00    5f 5a 77 53 65 74 44 65 66 61 75 6c 74 55 49 4c  | ..L....A$......._ZwSetDefaultUIL | 
| 2f840 |  61 6e 67 75 61 67 65 40 34 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | anguage@4.ntdll.dll.ntdll.dll/.. | 
| 2f860 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2f880 |  20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00  | ....52........`.......L....A.... | 
| 2f8a0 |  aa 04 0c 00 5f 5a 77 53 65 74 44 65 66 61 75 6c    74 4c 6f 63 61 6c 65 40 38 00 6e 74 64 6c 6c 2e  | ...._ZwSetDefaultLocale@8.ntdll. | 
| 2f8c0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 2f8e0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a  | ............0.......59........`. | 
| 2f900 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00    a9 04 0c 00 5f 5a 77 53 65 74 44 65 66 61 75 6c  | ......L....A'......._ZwSetDefaul | 
| 2f920 |  74 48 61 72 64 45 72 72 6f 72 50 6f 72 74 40 34    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | tHardErrorPort@4.ntdll.dll..ntdl | 
| 2f940 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 2f960 |  20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......56........`.......L. | 
| 2f980 |  c5 e8 8a 41 24 00 00 00 a8 04 0c 00 5f 5a 77 53    65 74 44 65 62 75 67 46 69 6c 74 65 72 53 74 61  | ...A$......._ZwSetDebugFilterSta | 
| 2f9a0 |  74 65 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | te@12.ntdll.dll.ntdll.dll/...... | 
| 2f9c0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 2f9e0 |  35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 20 00 00 00 a7 04 0c 00  | 52........`.......L....A........ | 
| 2fa00 |  5f 5a 77 53 65 74 43 6f 6e 74 65 78 74 54 68 72    65 61 64 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | _ZwSetContextThread@8.ntdll.dll. | 
| 2fa20 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 2fa40 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......50........`..... | 
| 2fa60 |  00 00 4c 01 c5 e8 8a 41 1e 00 00 00 a6 04 0c 00    5f 5a 77 53 65 74 42 6f 6f 74 4f 70 74 69 6f 6e  | ..L....A........_ZwSetBootOption | 
| 2fa80 |  73 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | s@8.ntdll.dll.ntdll.dll/......10 | 
| 2faa0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33  | 99622597..............0.......53 | 
| 2fac0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 21 00 00 00 a5 04 0c 00 5f 5a  | ........`.......L....A!......._Z | 
| 2fae0 |  77 53 65 74 42 6f 6f 74 45 6e 74 72 79 4f 72 64    65 72 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | wSetBootEntryOrder@8.ntdll.dll.. | 
| 2fb00 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 2fb20 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......54........`..... | 
| 2fb40 |  00 00 4c 01 c5 e8 8a 41 22 00 00 00 a4 04 0c 00    5f 5a 77 53 65 63 75 72 65 43 6f 6e 6e 65 63 74  | ..L....A"......._ZwSecureConnect | 
| 2fb60 |  50 6f 72 74 40 33 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | Port@36.ntdll.dll.ntdll.dll/.... | 
| 2fb80 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 2fba0 |  20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00 a3 04  | ..51........`.......L....A...... | 
| 2fbc0 |  0c 00 5f 5a 77 53 61 76 65 4d 65 72 67 65 64 4b    65 79 73 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c  | .._ZwSaveMergedKeys@12.ntdll.dll | 
| 2fbe0 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 2fc00 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......46........`... | 
| 2fc20 |  ff ff 00 00 4c 01 c5 e8 8a 41 1a 00 00 00 a2 04    0c 00 5f 5a 77 53 61 76 65 4b 65 79 45 78 40 31  | ....L....A........_ZwSaveKeyEx@1 | 
| 2fc40 |  32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 2.ntdll.dll.ntdll.dll/......1099 | 
| 2fc60 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 33 20 20  | 622597..............0.......43.. | 
| 2fc80 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 17 00 00 00 a1 04 0c 00 5f 5a 77 53  | ......`.......L....A........_ZwS | 
| 2fca0 |  61 76 65 4b 65 79 40 38 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | aveKey@8.ntdll.dll..ntdll.dll/.. | 
| 2fcc0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2fce0 |  20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00  | ....48........`.......L....A.... | 
| 2fd00 |  a0 04 0c 00 5f 5a 77 52 65 73 75 6d 65 54 68 72    65 61 64 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | ...._ZwResumeThread@8.ntdll.dll. | 
| 2fd20 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 2fd40 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......49........`..... | 
| 2fd60 |  00 00 4c 01 c5 e8 8a 41 1d 00 00 00 9f 04 0c 00    5f 5a 77 52 65 73 75 6d 65 50 72 6f 63 65 73 73  | ..L....A........_ZwResumeProcess | 
| 2fd80 |  40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @4.ntdll.dll..ntdll.dll/......10 | 
| 2fda0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37  | 99622597..............0.......47 | 
| 2fdc0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1b 00 00 00 9e 04 0c 00 5f 5a  | ........`.......L....A........_Z | 
| 2fde0 |  77 52 65 73 74 6f 72 65 4b 65 79 40 31 32 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | wRestoreKey@12.ntdll.dll..ntdll. | 
| 2fe00 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 2fe20 |  20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......52........`.......L... | 
| 2fe40 |  8a 41 20 00 00 00 9d 04 0c 00 5f 5a 77 52 65 73    65 74 57 72 69 74 65 57 61 74 63 68 40 31 32 00  | .A........_ZwResetWriteWatch@12. | 
| 2fe60 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 2fe80 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20  | 2597..............0.......46.... | 
| 2fea0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1a 00 00 00 9c 04 0c 00 5f 5a 77 52 65 73  | ....`.......L....A........_ZwRes | 
| 2fec0 |  65 74 45 76 65 6e 74 40 38 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | etEvent@8.ntdll.dll.ntdll.dll/.. | 
| 2fee0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 2ff00 |  20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 24 00 00 00  | ....56........`.......L....A$... | 
| 2ff20 |  9b 04 0c 00 5f 5a 77 52 65 71 75 65 73 74 57 61    6b 65 75 70 4c 61 74 65 6e 63 79 40 34 00 6e 74  | ...._ZwRequestWakeupLatency@4.nt | 
| 2ff40 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 2ff60 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20  | 97..............0.......57...... | 
| 2ff80 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    25 00 00 00 9a 04 0c 00 5f 5a 77 52 65 71 75 65  | ..`.......L....A%......._ZwReque | 
| 2ffa0 |  73 74 57 61 69 74 52 65 70 6c 79 50 6f 72 74 40    31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | stWaitReplyPort@12.ntdll.dll..nt | 
| 2ffc0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 2ffe0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......47........`....... | 
| 30000 |  4c 01 c5 e8 8a 41 1b 00 00 00 99 04 0c 00 5f 5a    77 52 65 71 75 65 73 74 50 6f 72 74 40 38 00 6e  | L....A........_ZwRequestPort@8.n | 
| 30020 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 30040 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20  | 2597..............0.......55.... | 
| 30060 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 23 00 00 00 98 04 0c 00 5f 5a 77 52 65 71  | ....`.......L....A#......._ZwReq | 
| 30080 |  75 65 73 74 44 65 76 69 63 65 57 61 6b 65 75 70    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | uestDeviceWakeup@4.ntdll.dll..nt | 
| 300a0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 300c0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......54........`....... | 
| 300e0 |  4c 01 c5 e8 8a 41 22 00 00 00 97 04 0c 00 5f 5a    77 52 65 70 6c 79 57 61 69 74 52 65 70 6c 79 50  | L....A"......._ZwReplyWaitReplyP | 
| 30100 |  6f 72 74 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ort@8.ntdll.dll.ntdll.dll/...... | 
| 30120 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 30140 |  35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 27 00 00 00 96 04 0c 00  | 59........`.......L....A'....... | 
| 30160 |  5f 5a 77 52 65 70 6c 79 57 61 69 74 52 65 63 65    69 76 65 50 6f 72 74 45 78 40 32 30 00 6e 74 64  | _ZwReplyWaitReceivePortEx@20.ntd | 
| 30180 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 301a0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20  | 97..............0.......57...... | 
| 301c0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    25 00 00 00 95 04 0c 00 5f 5a 77 52 65 70 6c 79  | ..`.......L....A%......._ZwReply | 
| 301e0 |  57 61 69 74 52 65 63 65 69 76 65 50 6f 72 74 40    31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | WaitReceivePort@16.ntdll.dll..nt | 
| 30200 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 30220 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......45........`....... | 
| 30240 |  4c 01 c5 e8 8a 41 19 00 00 00 94 04 0c 00 5f 5a    77 52 65 70 6c 79 50 6f 72 74 40 38 00 6e 74 64  | L....A........_ZwReplyPort@8.ntd | 
| 30260 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 30280 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20  | 97..............0.......47...... | 
| 302a0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1b 00 00 00 93 04 0c 00 5f 5a 77 52 65 70 6c 61  | ..`.......L....A........_ZwRepla | 
| 302c0 |  63 65 4b 65 79 40 31 32 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ceKey@12.ntdll.dll..ntdll.dll/.. | 
| 302e0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 30300 |  20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 19 00 00 00  | ....45........`.......L....A.... | 
| 30320 |  92 04 0c 00 5f 5a 77 52 65 6e 61 6d 65 4b 65 79    40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | ...._ZwRenameKey@8.ntdll.dll..nt | 
| 30340 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 30360 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......54........`....... | 
| 30380 |  4c 01 c5 e8 8a 41 22 00 00 00 91 04 0c 00 5f 5a    77 52 65 6d 6f 76 65 50 72 6f 63 65 73 73 44 65  | L....A"......._ZwRemoveProcessDe | 
| 303a0 |  62 75 67 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | bug@8.ntdll.dll.ntdll.dll/...... | 
| 303c0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 303e0 |  35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 23 00 00 00 90 04 0c 00  | 55........`.......L....A#....... | 
| 30400 |  5f 5a 77 52 65 6d 6f 76 65 49 6f 43 6f 6d 70 6c    65 74 69 6f 6e 40 32 30 00 6e 74 64 6c 6c 2e 64  | _ZwRemoveIoCompletion@20.ntdll.d | 
| 30420 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 30440 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a  | ............0.......53........`. | 
| 30460 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00    8f 04 0c 00 5f 5a 77 52 65 6c 65 61 73 65 53 65  | ......L....A!......._ZwReleaseSe | 
| 30480 |  6d 61 70 68 6f 72 65 40 31 32 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | maphore@12.ntdll.dll..ntdll.dll/ | 
| 304a0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 304c0 |  20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1d 00  | ......49........`.......L....A.. | 
| 304e0 |  00 00 8e 04 0c 00 5f 5a 77 52 65 6c 65 61 73 65    4d 75 74 61 6e 74 40 38 00 6e 74 64 6c 6c 2e 64  | ......_ZwReleaseMutant@8.ntdll.d | 
| 30500 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 30520 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a  | ............0.......54........`. | 
| 30540 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00    8d 04 0c 00 5f 5a 77 52 65 6c 65 61 73 65 4b 65  | ......L....A"......._ZwReleaseKe | 
| 30560 |  79 65 64 45 76 65 6e 74 40 31 36 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | yedEvent@16.ntdll.dll.ntdll.dll/ | 
| 30580 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 305a0 |  20 20 20 20 20 20 36 33 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2b 00  | ......63........`.......L....A+. | 
| 305c0 |  00 00 8c 04 0c 00 5f 5a 77 52 65 67 69 73 74 65    72 54 68 72 65 61 64 54 65 72 6d 69 6e 61 74 65  | ......_ZwRegisterThreadTerminate | 
| 305e0 |  50 6f 72 74 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | Port@4.ntdll.dll..ntdll.dll/.... | 
| 30600 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 30620 |  20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00 8b 04  | ..54........`.......L....A"..... | 
| 30640 |  0c 00 5f 5a 77 52 65 61 64 56 69 72 74 75 61 6c    4d 65 6d 6f 72 79 40 32 30 00 6e 74 64 6c 6c 2e  | .._ZwReadVirtualMemory@20.ntdll. | 
| 30660 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 30680 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a  | ............0.......52........`. | 
| 306a0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00    8a 04 0c 00 5f 5a 77 52 65 61 64 52 65 71 75 65  | ......L....A........_ZwReadReque | 
| 306c0 |  73 74 44 61 74 61 40 32 34 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | stData@24.ntdll.dll.ntdll.dll/.. | 
| 306e0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 30700 |  20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00  | ....52........`.......L....A.... | 
| 30720 |  89 04 0c 00 5f 5a 77 52 65 61 64 46 69 6c 65 53    63 61 74 74 65 72 40 33 36 00 6e 74 64 6c 6c 2e  | ...._ZwReadFileScatter@36.ntdll. | 
| 30740 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 30760 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a  | ............0.......45........`. | 
| 30780 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 19 00 00 00    88 04 0c 00 5f 5a 77 52 65 61 64 46 69 6c 65 40  | ......L....A........_ZwReadFile@ | 
| 307a0 |  33 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 36.ntdll.dll..ntdll.dll/......10 | 
| 307c0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31  | 99622597..............0.......51 | 
| 307e0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1f 00 00 00 87 04 0c 00 5f 5a  | ........`.......L....A........_Z | 
| 30800 |  77 52 61 69 73 65 48 61 72 64 45 72 72 6f 72 40    32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | wRaiseHardError@24.ntdll.dll..nt | 
| 30820 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 30840 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......51........`....... | 
| 30860 |  4c 01 c5 e8 8a 41 1f 00 00 00 86 04 0c 00 5f 5a    77 52 61 69 73 65 45 78 63 65 70 74 69 6f 6e 40  | L....A........_ZwRaiseException@ | 
| 30880 |  31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 12.ntdll.dll..ntdll.dll/......10 | 
| 308a0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31  | 99622597..............0.......51 | 
| 308c0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1f 00 00 00 85 04 0c 00 5f 5a  | ........`.......L....A........_Z | 
| 308e0 |  77 51 75 65 75 65 41 70 63 54 68 72 65 61 64 40    32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | wQueueApcThread@20.ntdll.dll..nt | 
| 30900 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 30920 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 33    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......63........`....... | 
| 30940 |  4c 01 c5 e8 8a 41 2b 00 00 00 84 04 0c 00 5f 5a    77 51 75 65 72 79 56 6f 6c 75 6d 65 49 6e 66 6f  | L....A+......._ZwQueryVolumeInfo | 
| 30960 |  72 6d 61 74 69 6f 6e 46 69 6c 65 40 32 30 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | rmationFile@20.ntdll.dll..ntdll. | 
| 30980 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 309a0 |  20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......55........`.......L... | 
| 309c0 |  8a 41 23 00 00 00 83 04 0c 00 5f 5a 77 51 75 65    72 79 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40  | .A#......._ZwQueryVirtualMemory@ | 
| 309e0 |  32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 24.ntdll.dll..ntdll.dll/......10 | 
| 30a00 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30  | 99622597..............0.......50 | 
| 30a20 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1e 00 00 00 82 04 0c 00 5f 5a  | ........`.......L....A........_Z | 
| 30a40 |  77 51 75 65 72 79 56 61 6c 75 65 4b 65 79 40 32    34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | wQueryValueKey@24.ntdll.dll.ntdl | 
| 30a60 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 30a80 |  20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......57........`.......L. | 
| 30aa0 |  c5 e8 8a 41 25 00 00 00 81 04 0c 00 5f 5a 77 51    75 65 72 79 54 69 6d 65 72 52 65 73 6f 6c 75 74  | ...A%......._ZwQueryTimerResolut | 
| 30ac0 |  69 6f 6e 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ion@12.ntdll.dll..ntdll.dll/.... | 
| 30ae0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 30b00 |  20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1b 00 00 00 80 04  | ..47........`.......L....A...... | 
| 30b20 |  0c 00 5f 5a 77 51 75 65 72 79 54 69 6d 65 72 40    32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | .._ZwQueryTimer@20.ntdll.dll..nt | 
| 30b40 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 30b60 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......51........`....... | 
| 30b80 |  4c 01 c5 e8 8a 41 1f 00 00 00 7f 04 0c 00 5f 5a    77 51 75 65 72 79 53 79 73 74 65 6d 54 69 6d 65  | L....A........_ZwQuerySystemTime | 
| 30ba0 |  40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @4.ntdll.dll..ntdll.dll/......10 | 
| 30bc0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39  | 99622597..............0.......59 | 
| 30be0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 27 00 00 00 7e 04 0c 00 5f 5a  | ........`.......L....A'...~..._Z | 
| 30c00 |  77 51 75 65 72 79 53 79 73 74 65 6d 49 6e 66 6f    72 6d 61 74 69 6f 6e 40 31 36 00 6e 74 64 6c 6c  | wQuerySystemInformation@16.ntdll | 
| 30c20 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 30c40 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 36 36 20 20 20 20 20 20 20 20  | ..............0.......66........ | 
| 30c60 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2e 00    00 00 7d 04 0c 00 5f 5a 77 51 75 65 72 79 53 79  | `.......L....A....}..._ZwQuerySy | 
| 30c80 |  73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56    61 6c 75 65 45 78 40 32 30 00 6e 74 64 6c 6c 2e  | stemEnvironmentValueEx@20.ntdll. | 
| 30ca0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 30cc0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 34 20 20 20 20 20 20 20 20 60 0a  | ............0.......64........`. | 
| 30ce0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2c 00 00 00    7c 04 0c 00 5f 5a 77 51 75 65 72 79 53 79 73 74  | ......L....A,...|..._ZwQuerySyst | 
| 30d00 |  65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c    75 65 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | emEnvironmentValue@16.ntdll.dll. | 
| 30d20 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 30d40 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......60........`..... | 
| 30d60 |  00 00 4c 01 c5 e8 8a 41 28 00 00 00 7b 04 0c 00    5f 5a 77 51 75 65 72 79 53 79 6d 62 6f 6c 69 63  | ..L....A(...{..._ZwQuerySymbolic | 
| 30d80 |  4c 69 6e 6b 4f 62 6a 65 63 74 40 31 32 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | LinkObject@12.ntdll.dll.ntdll.dl | 
| 30da0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 30dc0 |  30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......51........`.......L....A | 
| 30de0 |  1f 00 00 00 7a 04 0c 00 5f 5a 77 51 75 65 72 79    53 65 6d 61 70 68 6f 72 65 40 32 30 00 6e 74 64  | ....z..._ZwQuerySemaphore@20.ntd | 
| 30e00 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 30e20 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20  | 97..............0.......56...... | 
| 30e40 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    24 00 00 00 79 04 0c 00 5f 5a 77 51 75 65 72 79  | ..`.......L....A$...y..._ZwQuery | 
| 30e60 |  53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 40 32    30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | SecurityObject@20.ntdll.dll.ntdl | 
| 30e80 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 30ea0 |  20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......49........`.......L. | 
| 30ec0 |  c5 e8 8a 41 1d 00 00 00 78 04 0c 00 5f 5a 77 51    75 65 72 79 53 65 63 74 69 6f 6e 40 32 30 00 6e  | ...A....x..._ZwQuerySection@20.n | 
| 30ee0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 30f00 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 32 20 20 20 20  | 2597..............0.......62.... | 
| 30f20 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 2a 00 00 00 77 04 0c 00 5f 5a 77 51 75 65  | ....`.......L....A*...w..._ZwQue | 
| 30f40 |  72 79 51 75 6f 74 61 49 6e 66 6f 72 6d 61 74 69    6f 6e 46 69 6c 65 40 33 36 00 6e 74 64 6c 6c 2e  | ryQuotaInformationFile@36.ntdll. | 
| 30f60 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 30f80 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a  | ............0.......63........`. | 
| 30fa0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2b 00 00 00    76 04 0c 00 5f 5a 77 51 75 65 72 79 50 6f 72 74  | ......L....A+...v..._ZwQueryPort | 
| 30fc0 |  49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f 63 65    73 73 40 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | InformationProcess@0.ntdll.dll.. | 
| 30fe0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 31000 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......59........`..... | 
| 31020 |  00 00 4c 01 c5 e8 8a 41 27 00 00 00 75 04 0c 00    5f 5a 77 51 75 65 72 79 50 65 72 66 6f 72 6d 61  | ..L....A'...u..._ZwQueryPerforma | 
| 31040 |  6e 63 65 43 6f 75 6e 74 65 72 40 38 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | nceCounter@8.ntdll.dll..ntdll.dl | 
| 31060 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 31080 |  30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......55........`.......L....A | 
| 310a0 |  23 00 00 00 74 04 0c 00 5f 5a 77 51 75 65 72 79    4f 70 65 6e 53 75 62 4b 65 79 73 45 78 40 31 36  | #...t..._ZwQueryOpenSubKeysEx@16 | 
| 310c0 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 310e0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20  | 622597..............0.......52.. | 
| 31100 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 20 00 00 00 73 04 0c 00 5f 5a 77 51  | ......`.......L....A....s..._ZwQ | 
| 31120 |  75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 40    38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | ueryOpenSubKeys@8.ntdll.dll.ntdl | 
| 31140 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 31160 |  20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......48........`.......L. | 
| 31180 |  c5 e8 8a 41 1c 00 00 00 72 04 0c 00 5f 5a 77 51    75 65 72 79 4f 62 6a 65 63 74 40 32 30 00 6e 74  | ...A....r..._ZwQueryObject@20.nt | 
| 311a0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 311c0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20  | 97..............0.......48...... | 
| 311e0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1c 00 00 00 71 04 0c 00 5f 5a 77 51 75 65 72 79  | ..`.......L....A....q..._ZwQuery | 
| 31200 |  4d 75 74 61 6e 74 40 32 30 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | Mutant@20.ntdll.dll.ntdll.dll/.. | 
| 31220 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 31240 |  20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00  | ....58........`.......L....A&... | 
| 31260 |  70 04 0c 00 5f 5a 77 51 75 65 72 79 4d 75 6c 74    69 70 6c 65 56 61 6c 75 65 4b 65 79 40 32 34 00  | p..._ZwQueryMultipleValueKey@24. | 
| 31280 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 312a0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20  | 2597..............0.......45.... | 
| 312c0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 19 00 00 00 6f 04 0c 00 5f 5a 77 51 75 65  | ....`.......L....A....o..._ZwQue | 
| 312e0 |  72 79 4b 65 79 40 32 30 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ryKey@20.ntdll.dll..ntdll.dll/.. | 
| 31300 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 31320 |  20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00  | ....54........`.......L....A"... | 
| 31340 |  6e 04 0c 00 5f 5a 77 51 75 65 72 79 49 6f 43 6f    6d 70 6c 65 74 69 6f 6e 40 32 30 00 6e 74 64 6c  | n..._ZwQueryIoCompletion@20.ntdl | 
| 31360 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 31380 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20  | ..............0.......56........ | 
| 313a0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 24 00    00 00 6d 04 0c 00 5f 5a 77 51 75 65 72 79 49 6e  | `.......L....A$...m..._ZwQueryIn | 
| 313c0 |  74 65 72 76 61 6c 50 72 6f 66 69 6c 65 40 38 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | tervalProfile@8.ntdll.dll.ntdll. | 
| 313e0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 31400 |  20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......58........`.......L... | 
| 31420 |  8a 41 26 00 00 00 6c 04 0c 00 5f 5a 77 51 75 65    72 79 49 6e 73 74 61 6c 6c 55 49 4c 61 6e 67 75  | .A&...l..._ZwQueryInstallUILangu | 
| 31440 |  61 67 65 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | age@4.ntdll.dll.ntdll.dll/...... | 
| 31460 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 31480 |  35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 26 00 00 00 6b 04 0c 00  | 58........`.......L....A&...k... | 
| 314a0 |  5f 5a 77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74    69 6f 6e 54 6f 6b 65 6e 40 32 30 00 6e 74 64 6c  | _ZwQueryInformationToken@20.ntdl | 
| 314c0 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 314e0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20  | ..............0.......59........ | 
| 31500 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00    00 00 6a 04 0c 00 5f 5a 77 51 75 65 72 79 49 6e  | `.......L....A'...j..._ZwQueryIn | 
| 31520 |  66 6f 72 6d 61 74 69 6f 6e 54 68 72 65 61 64 40    32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | formationThread@20.ntdll.dll..nt | 
| 31540 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 31560 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......60........`....... | 
| 31580 |  4c 01 c5 e8 8a 41 28 00 00 00 69 04 0c 00 5f 5a    77 51 75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f  | L....A(...i..._ZwQueryInformatio | 
| 315a0 |  6e 50 72 6f 63 65 73 73 40 32 30 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | nProcess@20.ntdll.dll.ntdll.dll/ | 
| 315c0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 315e0 |  20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00  | ......57........`.......L....A%. | 
| 31600 |  00 00 68 04 0c 00 5f 5a 77 51 75 65 72 79 49 6e    66 6f 72 6d 61 74 69 6f 6e 50 6f 72 74 40 32 30  | ..h..._ZwQueryInformationPort@20 | 
| 31620 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 31640 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 32 20 20  | 622597..............0.......62.. | 
| 31660 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 2a 00 00 00 67 04 0c 00 5f 5a 77 51  | ......`.......L....A*...g..._ZwQ | 
| 31680 |  75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 4a    6f 62 4f 62 6a 65 63 74 40 32 30 00 6e 74 64 6c  | ueryInformationJobObject@20.ntdl | 
| 316a0 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 316c0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20  | ..............0.......57........ | 
| 316e0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00    00 00 66 04 0c 00 5f 5a 77 51 75 65 72 79 49 6e  | `.......L....A%...f..._ZwQueryIn | 
| 31700 |  66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40 32 30    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | formationFile@20.ntdll.dll..ntdl | 
| 31720 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 31740 |  20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......57........`.......L. | 
| 31760 |  c5 e8 8a 41 25 00 00 00 65 04 0c 00 5f 5a 77 51    75 65 72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 41  | ...A%...e..._ZwQueryInformationA | 
| 31780 |  74 6f 6d 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | tom@20.ntdll.dll..ntdll.dll/.... | 
| 317a0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 317c0 |  20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00 64 04  | ..59........`.......L....A'...d. | 
| 317e0 |  0c 00 5f 5a 77 51 75 65 72 79 46 75 6c 6c 41 74    74 72 69 62 75 74 65 73 46 69 6c 65 40 38 00 6e  | .._ZwQueryFullAttributesFile@8.n | 
| 31800 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 31820 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20  | 2597..............0.......47.... | 
| 31840 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1b 00 00 00 63 04 0c 00 5f 5a 77 51 75 65  | ....`.......L....A....c..._ZwQue | 
| 31860 |  72 79 45 76 65 6e 74 40 32 30 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ryEvent@20.ntdll.dll..ntdll.dll/ | 
| 31880 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 318a0 |  20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1c 00  | ......48........`.......L....A.. | 
| 318c0 |  00 00 62 04 0c 00 5f 5a 77 51 75 65 72 79 45 61    46 69 6c 65 40 33 36 00 6e 74 64 6c 6c 2e 64 6c  | ..b..._ZwQueryEaFile@36.ntdll.dl | 
| 318e0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 31900 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......57........`... | 
| 31920 |  ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00 61 04    0c 00 5f 5a 77 51 75 65 72 79 44 72 69 76 65 72  | ....L....A%...a..._ZwQueryDriver | 
| 31940 |  45 6e 74 72 79 4f 72 64 65 72 40 38 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | EntryOrder@8.ntdll.dll..ntdll.dl | 
| 31960 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 31980 |  30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......57........`.......L....A | 
| 319a0 |  25 00 00 00 60 04 0c 00 5f 5a 77 51 75 65 72 79    44 69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 40  | %...`..._ZwQueryDirectoryObject@ | 
| 319c0 |  32 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 28.ntdll.dll..ntdll.dll/......10 | 
| 319e0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35  | 99622597..............0.......55 | 
| 31a00 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 23 00 00 00 5f 04 0c 00 5f 5a  | ........`.......L....A#..._..._Z | 
| 31a20 |  77 51 75 65 72 79 44 69 72 65 63 74 6f 72 79 46    69 6c 65 40 34 34 00 6e 74 64 6c 6c 2e 64 6c 6c  | wQueryDirectoryFile@44.ntdll.dll | 
| 31a40 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 31a60 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......58........`... | 
| 31a80 |  ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00 5e 04    0c 00 5f 5a 77 51 75 65 72 79 44 65 66 61 75 6c  | ....L....A&...^..._ZwQueryDefaul | 
| 31aa0 |  74 55 49 4c 61 6e 67 75 61 67 65 40 34 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | tUILanguage@4.ntdll.dll.ntdll.dl | 
| 31ac0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 31ae0 |  30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......54........`.......L....A | 
| 31b00 |  22 00 00 00 5d 04 0c 00 5f 5a 77 51 75 65 72 79    44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 40 38 00  | "...]..._ZwQueryDefaultLocale@8. | 
| 31b20 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 31b40 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20  | 2597..............0.......57.... | 
| 31b60 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 25 00 00 00 5c 04 0c 00 5f 5a 77 51 75 65  | ....`.......L....A%...\..._ZwQue | 
| 31b80 |  72 79 44 65 62 75 67 46 69 6c 74 65 72 53 74 61    74 65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | ryDebugFilterState@8.ntdll.dll.. | 
| 31ba0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 31bc0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......52........`..... | 
| 31be0 |  00 00 4c 01 c5 e8 8a 41 20 00 00 00 5b 04 0c 00    5f 5a 77 51 75 65 72 79 42 6f 6f 74 4f 70 74 69  | ..L....A....[..._ZwQueryBootOpti | 
| 31c00 |  6f 6e 73 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ons@8.ntdll.dll.ntdll.dll/...... | 
| 31c20 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 31c40 |  35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 23 00 00 00 5a 04 0c 00  | 55........`.......L....A#...Z... | 
| 31c60 |  5f 5a 77 51 75 65 72 79 42 6f 6f 74 45 6e 74 72    79 4f 72 64 65 72 40 38 00 6e 74 64 6c 6c 2e 64  | _ZwQueryBootEntryOrder@8.ntdll.d | 
| 31c80 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 31ca0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a  | ............0.......55........`. | 
| 31cc0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 23 00 00 00    59 04 0c 00 5f 5a 77 51 75 65 72 79 41 74 74 72  | ......L....A#...Y..._ZwQueryAttr | 
| 31ce0 |  69 62 75 74 65 73 46 69 6c 65 40 38 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | ibutesFile@8.ntdll.dll..ntdll.dl | 
| 31d00 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 31d20 |  30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......46........`.......L....A | 
| 31d40 |  1a 00 00 00 58 04 0c 00 5f 5a 77 50 75 6c 73 65    45 76 65 6e 74 40 38 00 6e 74 64 6c 6c 2e 64 6c  | ....X..._ZwPulseEvent@8.ntdll.dl | 
| 31d60 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 31d80 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......57........`... | 
| 31da0 |  ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00 57 04    0c 00 5f 5a 77 50 72 6f 74 65 63 74 56 69 72 74  | ....L....A%...W..._ZwProtectVirt | 
| 31dc0 |  75 61 6c 4d 65 6d 6f 72 79 40 32 30 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | ualMemory@20.ntdll.dll..ntdll.dl | 
| 31de0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 31e00 |  30 20 20 20 20 20 20 20 36 34 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......64........`.......L....A | 
| 31e20 |  2c 00 00 00 56 04 0c 00 5f 5a 77 50 72 69 76 69    6c 65 67 65 64 53 65 72 76 69 63 65 41 75 64 69  | ,...V..._ZwPrivilegedServiceAudi | 
| 31e40 |  74 41 6c 61 72 6d 40 32 30 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | tAlarm@20.ntdll.dll.ntdll.dll/.. | 
| 31e60 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 31e80 |  20 20 20 20 36 32 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2a 00 00 00  | ....62........`.......L....A*... | 
| 31ea0 |  55 04 0c 00 5f 5a 77 50 72 69 76 69 6c 65 67 65    4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61 72 6d  | U..._ZwPrivilegeObjectAuditAlarm | 
| 31ec0 |  40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @24.ntdll.dll.ntdll.dll/......10 | 
| 31ee0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31  | 99622597..............0.......51 | 
| 31f00 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1f 00 00 00 54 04 0c 00 5f 5a  | ........`.......L....A....T..._Z | 
| 31f20 |  77 50 72 69 76 69 6c 65 67 65 43 68 65 63 6b 40    31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | wPrivilegeCheck@12.ntdll.dll..nt | 
| 31f40 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 31f60 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......53........`....... | 
| 31f80 |  4c 01 c5 e8 8a 41 21 00 00 00 53 04 0c 00 5f 5a    77 50 6f 77 65 72 49 6e 66 6f 72 6d 61 74 69 6f  | L....A!...S..._ZwPowerInformatio | 
| 31fa0 |  6e 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | n@20.ntdll.dll..ntdll.dll/...... | 
| 31fc0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 31fe0 |  35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 20 00 00 00 52 04 0c 00  | 52........`.......L....A....R... | 
| 32000 |  5f 5a 77 50 6c 75 67 50 6c 61 79 43 6f 6e 74 72    6f 6c 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | _ZwPlugPlayControl@12.ntdll.dll. | 
| 32020 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 32040 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......46........`..... | 
| 32060 |  00 00 4c 01 c5 e8 8a 41 1a 00 00 00 51 04 0c 00    5f 5a 77 4f 70 65 6e 54 69 6d 65 72 40 31 32 00  | ..L....A....Q..._ZwOpenTimer@12. | 
| 32080 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 320a0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20  | 2597..............0.......54.... | 
| 320c0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 22 00 00 00 50 04 0c 00 5f 5a 77 4f 70 65  | ....`.......L....A"...P..._ZwOpe | 
| 320e0 |  6e 54 68 72 65 61 64 54 6f 6b 65 6e 45 78 40 32    30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | nThreadTokenEx@20.ntdll.dll.ntdl | 
| 32100 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 32120 |  20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......52........`.......L. | 
| 32140 |  c5 e8 8a 41 20 00 00 00 4f 04 0c 00 5f 5a 77 4f    70 65 6e 54 68 72 65 61 64 54 6f 6b 65 6e 40 31  | ...A....O..._ZwOpenThreadToken@1 | 
| 32160 |  36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 6.ntdll.dll.ntdll.dll/......1099 | 
| 32180 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20  | 622597..............0.......47.. | 
| 321a0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1b 00 00 00 4e 04 0c 00 5f 5a 77 4f  | ......`.......L....A....N..._ZwO | 
| 321c0 |  70 65 6e 54 68 72 65 61 64 40 31 36 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | penThread@16.ntdll.dll..ntdll.dl | 
| 321e0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 32200 |  30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......59........`.......L....A | 
| 32220 |  27 00 00 00 4d 04 0c 00 5f 5a 77 4f 70 65 6e 53    79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63  | '...M..._ZwOpenSymbolicLinkObjec | 
| 32240 |  74 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | t@12.ntdll.dll..ntdll.dll/...... | 
| 32260 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 32280 |  35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1e 00 00 00 4c 04 0c 00  | 50........`.......L....A....L... | 
| 322a0 |  5f 5a 77 4f 70 65 6e 53 65 6d 61 70 68 6f 72 65    40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | _ZwOpenSemaphore@12.ntdll.dll.nt | 
| 322c0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 322e0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......48........`....... | 
| 32300 |  4c 01 c5 e8 8a 41 1c 00 00 00 4b 04 0c 00 5f 5a    77 4f 70 65 6e 53 65 63 74 69 6f 6e 40 31 32 00  | L....A....K..._ZwOpenSection@12. | 
| 32320 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 32340 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20  | 2597..............0.......55.... | 
| 32360 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 23 00 00 00 4a 04 0c 00 5f 5a 77 4f 70 65  | ....`.......L....A#...J..._ZwOpe | 
| 32380 |  6e 50 72 6f 63 65 73 73 54 6f 6b 65 6e 45 78 40    31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | nProcessTokenEx@16.ntdll.dll..nt | 
| 323a0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 323c0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......53........`....... | 
| 323e0 |  4c 01 c5 e8 8a 41 21 00 00 00 49 04 0c 00 5f 5a    77 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65  | L....A!...I..._ZwOpenProcessToke | 
| 32400 |  6e 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | n@12.ntdll.dll..ntdll.dll/...... | 
| 32420 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 32440 |  34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1c 00 00 00 48 04 0c 00  | 48........`.......L....A....H... | 
| 32460 |  5f 5a 77 4f 70 65 6e 50 72 6f 63 65 73 73 40 31    36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | _ZwOpenProcess@16.ntdll.dll.ntdl | 
| 32480 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 324a0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......57........`.......L. | 
| 324c0 |  c5 e8 8a 41 25 00 00 00 47 04 0c 00 5f 5a 77 4f    70 65 6e 4f 62 6a 65 63 74 41 75 64 69 74 41 6c  | ...A%...G..._ZwOpenObjectAuditAl | 
| 324e0 |  61 72 6d 40 34 38 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | arm@48.ntdll.dll..ntdll.dll/.... | 
| 32500 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 32520 |  20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1b 00 00 00 46 04  | ..47........`.......L....A....F. | 
| 32540 |  0c 00 5f 5a 77 4f 70 65 6e 4d 75 74 61 6e 74 40    31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | .._ZwOpenMutant@12.ntdll.dll..nt | 
| 32560 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 32580 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......51........`....... | 
| 325a0 |  4c 01 c5 e8 8a 41 1f 00 00 00 45 04 0c 00 5f 5a    77 4f 70 65 6e 4b 65 79 65 64 45 76 65 6e 74 40  | L....A....E..._ZwOpenKeyedEvent@ | 
| 325c0 |  31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 12.ntdll.dll..ntdll.dll/......10 | 
| 325e0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34  | 99622597..............0.......44 | 
| 32600 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 18 00 00 00 44 04 0c 00 5f 5a  | ........`.......L....A....D..._Z | 
| 32620 |  77 4f 70 65 6e 4b 65 79 40 31 32 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | wOpenKey@12.ntdll.dll.ntdll.dll/ | 
| 32640 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 32660 |  20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00  | ......50........`.......L....A.. | 
| 32680 |  00 00 43 04 0c 00 5f 5a 77 4f 70 65 6e 4a 6f 62    4f 62 6a 65 63 74 40 31 32 00 6e 74 64 6c 6c 2e  | ..C..._ZwOpenJobObject@12.ntdll. | 
| 326a0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 326c0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a  | ............0.......53........`. | 
| 326e0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00    42 04 0c 00 5f 5a 77 4f 70 65 6e 49 6f 43 6f 6d  | ......L....A!...B..._ZwOpenIoCom | 
| 32700 |  70 6c 65 74 69 6f 6e 40 31 32 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | pletion@12.ntdll.dll..ntdll.dll/ | 
| 32720 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 32740 |  20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 19 00  | ......45........`.......L....A.. | 
| 32760 |  00 00 41 04 0c 00 5f 5a 77 4f 70 65 6e 46 69 6c    65 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | ..A..._ZwOpenFile@24.ntdll.dll.. | 
| 32780 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 327a0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......50........`..... | 
| 327c0 |  00 00 4c 01 c5 e8 8a 41 1e 00 00 00 40 04 0c 00    5f 5a 77 4f 70 65 6e 45 76 65 6e 74 50 61 69 72  | ..L....A....@..._ZwOpenEventPair | 
| 327e0 |  40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @12.ntdll.dll.ntdll.dll/......10 | 
| 32800 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36  | 99622597..............0.......46 | 
| 32820 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1a 00 00 00 3f 04 0c 00 5f 5a  | ........`.......L....A....?..._Z | 
| 32840 |  77 4f 70 65 6e 45 76 65 6e 74 40 31 32 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | wOpenEvent@12.ntdll.dll.ntdll.dl | 
| 32860 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 32880 |  30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......56........`.......L....A | 
| 328a0 |  24 00 00 00 3e 04 0c 00 5f 5a 77 4f 70 65 6e 44    69 72 65 63 74 6f 72 79 4f 62 6a 65 63 74 40 31  | $...>..._ZwOpenDirectoryObject@1 | 
| 328c0 |  32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 2.ntdll.dll.ntdll.dll/......1099 | 
| 328e0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20  | 622597..............0.......61.. | 
| 32900 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 29 00 00 00 3d 04 0c 00 5f 5a 77 4e  | ......`.......L....A)...=..._ZwN | 
| 32920 |  6f 74 69 66 79 43 68 61 6e 67 65 4d 75 6c 74 69    70 6c 65 4b 65 79 73 40 34 38 00 6e 74 64 6c 6c  | otifyChangeMultipleKeys@48.ntdll | 
| 32940 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 32960 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20  | ..............0.......52........ | 
| 32980 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00    00 00 3c 04 0c 00 5f 5a 77 4e 6f 74 69 66 79 43  | `.......L....A....<..._ZwNotifyC | 
| 329a0 |  68 61 6e 67 65 4b 65 79 40 34 30 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | hangeKey@40.ntdll.dll.ntdll.dll/ | 
| 329c0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 329e0 |  20 20 20 20 20 20 36 32 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2a 00  | ......62........`.......L....A*. | 
| 32a00 |  00 00 3b 04 0c 00 5f 5a 77 4e 6f 74 69 66 79 43    68 61 6e 67 65 44 69 72 65 63 74 6f 72 79 46 69  | ..;..._ZwNotifyChangeDirectoryFi | 
| 32a20 |  6c 65 40 33 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | le@36.ntdll.dll.ntdll.dll/...... | 
| 32a40 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 32a60 |  35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 21 00 00 00 3a 04 0c 00  | 53........`.......L....A!...:... | 
| 32a80 |  5f 5a 77 4d 6f 64 69 66 79 44 72 69 76 65 72 45    6e 74 72 79 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c  | _ZwModifyDriverEntry@4.ntdll.dll | 
| 32aa0 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 32ac0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......51........`... | 
| 32ae0 |  ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00 39 04    0c 00 5f 5a 77 4d 6f 64 69 66 79 42 6f 6f 74 45  | ....L....A....9..._ZwModifyBootE | 
| 32b00 |  6e 74 72 79 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ntry@4.ntdll.dll..ntdll.dll/.... | 
| 32b20 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 32b40 |  20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00 38 04  | ..53........`.......L....A!...8. | 
| 32b60 |  0c 00 5f 5a 77 4d 61 70 56 69 65 77 4f 66 53 65    63 74 69 6f 6e 40 34 30 00 6e 74 64 6c 6c 2e 64  | .._ZwMapViewOfSection@40.ntdll.d | 
| 32b80 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 32ba0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 34 20 20 20 20 20 20 20 20 60 0a  | ............0.......64........`. | 
| 32bc0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2c 00 00 00    37 04 0c 00 5f 5a 77 4d 61 70 55 73 65 72 50 68  | ......L....A,...7..._ZwMapUserPh | 
| 32be0 |  79 73 69 63 61 6c 50 61 67 65 73 53 63 61 74 74    65 72 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | ysicalPagesScatter@12.ntdll.dll. | 
| 32c00 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 32c20 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......57........`..... | 
| 32c40 |  00 00 4c 01 c5 e8 8a 41 25 00 00 00 36 04 0c 00    5f 5a 77 4d 61 70 55 73 65 72 50 68 79 73 69 63  | ..L....A%...6..._ZwMapUserPhysic | 
| 32c60 |  61 6c 50 61 67 65 73 40 31 32 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | alPages@12.ntdll.dll..ntdll.dll/ | 
| 32c80 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 32ca0 |  20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 23 00  | ......55........`.......L....A#. | 
| 32cc0 |  00 00 35 04 0c 00 5f 5a 77 4d 61 6b 65 54 65 6d    70 6f 72 61 72 79 4f 62 6a 65 63 74 40 34 00 6e  | ..5..._ZwMakeTemporaryObject@4.n | 
| 32ce0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 32d00 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20  | 2597..............0.......55.... | 
| 32d20 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 23 00 00 00 34 04 0c 00 5f 5a 77 4d 61 6b  | ....`.......L....A#...4..._ZwMak | 
| 32d40 |  65 50 65 72 6d 61 6e 65 6e 74 4f 62 6a 65 63 74    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | ePermanentObject@4.ntdll.dll..nt | 
| 32d60 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 32d80 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......54........`....... | 
| 32da0 |  4c 01 c5 e8 8a 41 22 00 00 00 33 04 0c 00 5f 5a    77 4c 6f 63 6b 56 69 72 74 75 61 6c 4d 65 6d 6f  | L....A"...3..._ZwLockVirtualMemo | 
| 32dc0 |  72 79 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ry@16.ntdll.dll.ntdll.dll/...... | 
| 32de0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 32e00 |  35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1f 00 00 00 32 04 0c 00  | 51........`.......L....A....2... | 
| 32e20 |  5f 5a 77 4c 6f 63 6b 52 65 67 69 73 74 72 79 4b    65 79 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | _ZwLockRegistryKey@4.ntdll.dll.. | 
| 32e40 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 32e60 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    36 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......61........`..... | 
| 32e80 |  00 00 4c 01 c5 e8 8a 41 29 00 00 00 31 04 0c 00    5f 5a 77 4c 6f 63 6b 50 72 6f 64 75 63 74 41 63  | ..L....A)...1..._ZwLockProductAc | 
| 32ea0 |  74 69 76 61 74 69 6f 6e 4b 65 79 73 40 38 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | tivationKeys@8.ntdll.dll..ntdll. | 
| 32ec0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 32ee0 |  20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......45........`.......L... | 
| 32f00 |  8a 41 19 00 00 00 30 04 0c 00 5f 5a 77 4c 6f 63    6b 46 69 6c 65 40 34 30 00 6e 74 64 6c 6c 2e 64  | .A....0..._ZwLockFile@40.ntdll.d | 
| 32f20 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 32f40 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a  | ............0.......46........`. | 
| 32f60 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1a 00 00 00    2f 04 0c 00 5f 5a 77 4c 6f 61 64 4b 65 79 45 78  | ......L....A..../..._ZwLoadKeyEx | 
| 32f80 |  40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @16.ntdll.dll.ntdll.dll/......10 | 
| 32fa0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 33  | 99622597..............0.......43 | 
| 32fc0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 17 00 00 00 2d 04 0c 00 5f 5a  | ........`.......L....A....-..._Z | 
| 32fe0 |  77 4c 6f 61 64 4b 65 79 40 38 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | wLoadKey@8.ntdll.dll..ntdll.dll/ | 
| 33000 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 33020 |  20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 19 00  | ......45........`.......L....A.. | 
| 33040 |  00 00 2e 04 0c 00 5f 5a 77 4c 6f 61 64 4b 65 79    32 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | ......_ZwLoadKey2@12.ntdll.dll.. | 
| 33060 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 33080 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......46........`..... | 
| 330a0 |  00 00 4c 01 c5 e8 8a 41 1a 00 00 00 2c 04 0c 00    5f 5a 77 4c 6f 61 64 44 72 69 76 65 72 40 34 00  | ..L....A....,..._ZwLoadDriver@4. | 
| 330c0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 330e0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20  | 2597..............0.......46.... | 
| 33100 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1a 00 00 00 2b 04 0c 00 5f 5a 77 4c 69 73  | ....`.......L....A....+..._ZwLis | 
| 33120 |  74 65 6e 50 6f 72 74 40 38 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | tenPort@8.ntdll.dll.ntdll.dll/.. | 
| 33140 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 33160 |  20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00  | ....59........`.......L....A'... | 
| 33180 |  2a 04 0c 00 5f 5a 77 49 73 53 79 73 74 65 6d 52    65 73 75 6d 65 41 75 74 6f 6d 61 74 69 63 40 30  | *..._ZwIsSystemResumeAutomatic@0 | 
| 331a0 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 331c0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20  | 622597..............0.......50.. | 
| 331e0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1e 00 00 00 29 04 0c 00 5f 5a 77 49  | ......`.......L....A....)..._ZwI | 
| 33200 |  73 50 72 6f 63 65 73 73 49 6e 4a 6f 62 40 38 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | sProcessInJob@8.ntdll.dll.ntdll. | 
| 33220 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 33240 |  20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......56........`.......L... | 
| 33260 |  8a 41 24 00 00 00 28 04 0c 00 5f 5a 77 49 6e 69    74 69 61 74 65 50 6f 77 65 72 41 63 74 69 6f 6e  | .A$...(..._ZwInitiatePowerAction | 
| 33280 |  40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @16.ntdll.dll.ntdll.dll/......10 | 
| 332a0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34  | 99622597..............0.......54 | 
| 332c0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 22 00 00 00 27 04 0c 00 5f 5a  | ........`.......L....A"...'..._Z | 
| 332e0 |  77 49 6e 69 74 69 61 6c 69 7a 65 52 65 67 69 73    74 72 79 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | wInitializeRegistry@4.ntdll.dll. | 
| 33300 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 33320 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......54........`..... | 
| 33340 |  00 00 4c 01 c5 e8 8a 41 22 00 00 00 26 04 0c 00    5f 5a 77 49 6d 70 65 72 73 6f 6e 61 74 65 54 68  | ..L....A"...&..._ZwImpersonateTh | 
| 33360 |  72 65 61 64 40 31 32 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | read@12.ntdll.dll.ntdll.dll/.... | 
| 33380 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 333a0 |  20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00 25 04  | ..59........`.......L....A'...%. | 
| 333c0 |  0c 00 5f 5a 77 49 6d 70 65 72 73 6f 6e 61 74 65    43 6c 69 65 6e 74 4f 66 50 6f 72 74 40 38 00 6e  | .._ZwImpersonateClientOfPort@8.n | 
| 333e0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 33400 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 31 20 20 20 20  | 2597..............0.......61.... | 
| 33420 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 29 00 00 00 24 04 0c 00 5f 5a 77 49 6d 70  | ....`.......L....A)...$..._ZwImp | 
| 33440 |  65 72 73 6f 6e 61 74 65 41 6e 6f 6e 79 6d 6f 75    73 54 6f 6b 65 6e 40 34 00 6e 74 64 6c 6c 2e 64  | ersonateAnonymousToken@4.ntdll.d | 
| 33460 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 33480 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a  | ............0.......50........`. | 
| 334a0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00    23 04 0c 00 5f 5a 77 47 65 74 57 72 69 74 65 57  | ......L....A....#..._ZwGetWriteW | 
| 334c0 |  61 74 63 68 40 32 38 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | atch@28.ntdll.dll.ntdll.dll/.... | 
| 334e0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 33500 |  20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00 22 04  | ..53........`.......L....A!...". | 
| 33520 |  0c 00 5f 5a 77 47 65 74 50 6c 75 67 50 6c 61 79    45 76 65 6e 74 40 31 36 00 6e 74 64 6c 6c 2e 64  | .._ZwGetPlugPlayEvent@16.ntdll.d | 
| 33540 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 33560 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a  | ............0.......55........`. | 
| 33580 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 23 00 00 00    21 04 0c 00 5f 5a 77 47 65 74 44 65 76 69 63 65  | ......L....A#...!..._ZwGetDevice | 
| 335a0 |  50 6f 77 65 72 53 74 61 74 65 40 38 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | PowerState@8.ntdll.dll..ntdll.dl | 
| 335c0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 335e0 |  30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......61........`.......L....A | 
| 33600 |  29 00 00 00 20 04 0c 00 5f 5a 77 47 65 74 43 75    72 72 65 6e 74 50 72 6f 63 65 73 73 6f 72 4e 75  | )......._ZwGetCurrentProcessorNu | 
| 33620 |  6d 62 65 72 40 30 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | mber@0.ntdll.dll..ntdll.dll/.... | 
| 33640 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 33660 |  20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00 1f 04  | ..52........`.......L....A...... | 
| 33680 |  0c 00 5f 5a 77 47 65 74 43 6f 6e 74 65 78 74 54    68 72 65 61 64 40 38 00 6e 74 64 6c 6c 2e 64 6c  | .._ZwGetContextThread@8.ntdll.dl | 
| 336a0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 336c0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......50........`... | 
| 336e0 |  ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00 1e 04    0c 00 5f 5a 77 46 73 43 6f 6e 74 72 6f 6c 46 69  | ....L....A........_ZwFsControlFi | 
| 33700 |  6c 65 40 34 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | le@40.ntdll.dll.ntdll.dll/...... | 
| 33720 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 33740 |  35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 22 00 00 00 1d 04 0c 00  | 54........`.......L....A"....... | 
| 33760 |  5f 5a 77 46 72 65 65 56 69 72 74 75 61 6c 4d 65    6d 6f 72 79 40 31 36 00 6e 74 64 6c 6c 2e 64 6c  | _ZwFreeVirtualMemory@16.ntdll.dl | 
| 33780 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 337a0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......58........`... | 
| 337c0 |  ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00 1c 04    0c 00 5f 5a 77 46 72 65 65 55 73 65 72 50 68 79  | ....L....A&......._ZwFreeUserPhy | 
| 337e0 |  73 69 63 61 6c 50 61 67 65 73 40 31 32 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | sicalPages@12.ntdll.dll.ntdll.dl | 
| 33800 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 33820 |  30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......52........`.......L....A | 
| 33840 |  20 00 00 00 1b 04 0c 00 5f 5a 77 46 6c 75 73 68    57 72 69 74 65 42 75 66 66 65 72 40 30 00 6e 74  | ........_ZwFlushWriteBuffer@0.nt | 
| 33860 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 33880 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20  | 97..............0.......55...... | 
| 338a0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    23 00 00 00 1a 04 0c 00 5f 5a 77 46 6c 75 73 68  | ..`.......L....A#......._ZwFlush | 
| 338c0 |  56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 31 36    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | VirtualMemory@16.ntdll.dll..ntdl | 
| 338e0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 33900 |  20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......44........`.......L. | 
| 33920 |  c5 e8 8a 41 18 00 00 00 19 04 0c 00 5f 5a 77 46    6c 75 73 68 4b 65 79 40 34 00 6e 74 64 6c 6c 2e  | ...A........_ZwFlushKey@4.ntdll. | 
| 33940 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 33960 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a  | ............0.......58........`. | 
| 33980 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00    18 04 0c 00 5f 5a 77 46 6c 75 73 68 49 6e 73 74  | ......L....A&......._ZwFlushInst | 
| 339a0 |  72 75 63 74 69 6f 6e 43 61 63 68 65 40 31 32 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | ructionCache@12.ntdll.dll.ntdll. | 
| 339c0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 339e0 |  20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......52........`.......L... | 
| 33a00 |  8a 41 20 00 00 00 17 04 0c 00 5f 5a 77 46 6c 75    73 68 42 75 66 66 65 72 73 46 69 6c 65 40 38 00  | .A........_ZwFlushBuffersFile@8. | 
| 33a20 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 33a40 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20  | 2597..............0.......45.... | 
| 33a60 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 19 00 00 00 16 04 0c 00 5f 5a 77 46 69 6e  | ....`.......L....A........_ZwFin | 
| 33a80 |  64 41 74 6f 6d 40 31 32 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | dAtom@12.ntdll.dll..ntdll.dll/.. | 
| 33aa0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 33ac0 |  20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00  | ....48........`.......L....A.... | 
| 33ae0 |  15 04 0c 00 5f 5a 77 46 69 6c 74 65 72 54 6f 6b    65 6e 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | ...._ZwFilterToken@24.ntdll.dll. | 
| 33b00 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 33b20 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......49........`..... | 
| 33b40 |  00 00 4c 01 c5 e8 8a 41 1d 00 00 00 14 04 0c 00    5f 5a 77 45 78 74 65 6e 64 53 65 63 74 69 6f 6e  | ..L....A........_ZwExtendSection | 
| 33b60 |  40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @8.ntdll.dll..ntdll.dll/......10 | 
| 33b80 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34  | 99622597..............0.......54 | 
| 33ba0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 22 00 00 00 13 04 0c 00 5f 5a  | ........`.......L....A"......._Z | 
| 33bc0 |  77 45 6e 75 6d 65 72 61 74 65 56 61 6c 75 65 4b    65 79 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | wEnumerateValueKey@24.ntdll.dll. | 
| 33be0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 33c00 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    37 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......71........`..... | 
| 33c20 |  00 00 4c 01 c5 e8 8a 41 33 00 00 00 12 04 0c 00    5f 5a 77 45 6e 75 6d 65 72 61 74 65 53 79 73 74  | ..L....A3......._ZwEnumerateSyst | 
| 33c40 |  65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c    75 65 73 45 78 40 31 32 00 6e 74 64 6c 6c 2e 64  | emEnvironmentValuesEx@12.ntdll.d | 
| 33c60 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 33c80 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a  | ............0.......49........`. | 
| 33ca0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1d 00 00 00    11 04 0c 00 5f 5a 77 45 6e 75 6d 65 72 61 74 65  | ......L....A........_ZwEnumerate | 
| 33cc0 |  4b 65 79 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | Key@24.ntdll.dll..ntdll.dll/.... | 
| 33ce0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 33d00 |  20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00 10 04  | ..58........`.......L....A&..... | 
| 33d20 |  0c 00 5f 5a 77 45 6e 75 6d 65 72 61 74 65 44 72    69 76 65 72 45 6e 74 72 69 65 73 40 38 00 6e 74  | .._ZwEnumerateDriverEntries@8.nt | 
| 33d40 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 33d60 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20  | 97..............0.......56...... | 
| 33d80 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    24 00 00 00 0f 04 0c 00 5f 5a 77 45 6e 75 6d 65  | ..`.......L....A$......._ZwEnume | 
| 33da0 |  72 61 74 65 42 6f 6f 74 45 6e 74 72 69 65 73 40    38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | rateBootEntries@8.ntdll.dll.ntdl | 
| 33dc0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 33de0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......51........`.......L. | 
| 33e00 |  c5 e8 8a 41 1f 00 00 00 0e 04 0c 00 5f 5a 77 44    75 70 6c 69 63 61 74 65 54 6f 6b 65 6e 40 32 34  | ...A........_ZwDuplicateToken@24 | 
| 33e20 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 33e40 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20  | 622597..............0.......52.. | 
| 33e60 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 20 00 00 00 0d 04 0c 00 5f 5a 77 44  | ......`.......L....A........_ZwD | 
| 33e80 |  75 70 6c 69 63 61 74 65 4f 62 6a 65 63 74 40 32    38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | uplicateObject@28.ntdll.dll.ntdl | 
| 33ea0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 33ec0 |  20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......49........`.......L. | 
| 33ee0 |  c5 e8 8a 41 1d 00 00 00 0c 04 0c 00 5f 5a 77 44    69 73 70 6c 61 79 53 74 72 69 6e 67 40 34 00 6e  | ...A........_ZwDisplayString@4.n | 
| 33f00 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 33f20 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20  | 2597..............0.......56.... | 
| 33f40 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 24 00 00 00 0b 04 0c 00 5f 5a 77 44 65 76  | ....`.......L....A$......._ZwDev | 
| 33f60 |  69 63 65 49 6f 43 6f 6e 74 72 6f 6c 46 69 6c 65    40 34 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | iceIoControlFile@40.ntdll.dll.nt | 
| 33f80 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 33fa0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......50........`....... | 
| 33fc0 |  4c 01 c5 e8 8a 41 1e 00 00 00 0a 04 0c 00 5f 5a    77 44 65 6c 65 74 65 56 61 6c 75 65 4b 65 79 40  | L....A........_ZwDeleteValueKey@ | 
| 33fe0 |  38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 8.ntdll.dll.ntdll.dll/......1099 | 
| 34000 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20  | 622597..............0.......59.. | 
| 34020 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 27 00 00 00 09 04 0c 00 5f 5a 77 44  | ......`.......L....A'......._ZwD | 
| 34040 |  65 6c 65 74 65 4f 62 6a 65 63 74 41 75 64 69 74    41 6c 61 72 6d 40 31 32 00 6e 74 64 6c 6c 2e 64  | eleteObjectAuditAlarm@12.ntdll.d | 
| 34060 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 34080 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a  | ............0.......45........`. | 
| 340a0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 19 00 00 00    08 04 0c 00 5f 5a 77 44 65 6c 65 74 65 4b 65 79  | ......L....A........_ZwDeleteKey | 
| 340c0 |  40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @4.ntdll.dll..ntdll.dll/......10 | 
| 340e0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36  | 99622597..............0.......46 | 
| 34100 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1a 00 00 00 07 04 0c 00 5f 5a  | ........`.......L....A........_Z | 
| 34120 |  77 44 65 6c 65 74 65 46 69 6c 65 40 34 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | wDeleteFile@4.ntdll.dll.ntdll.dl | 
| 34140 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 34160 |  30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......53........`.......L....A | 
| 34180 |  21 00 00 00 06 04 0c 00 5f 5a 77 44 65 6c 65 74    65 44 72 69 76 65 72 45 6e 74 72 79 40 34 00 6e  | !......._ZwDeleteDriverEntry@4.n | 
| 341a0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 341c0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20  | 2597..............0.......51.... | 
| 341e0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1f 00 00 00 05 04 0c 00 5f 5a 77 44 65 6c  | ....`.......L....A........_ZwDel | 
| 34200 |  65 74 65 42 6f 6f 74 45 6e 74 72 79 40 34 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | eteBootEntry@4.ntdll.dll..ntdll. | 
| 34220 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 34240 |  20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......46........`.......L... | 
| 34260 |  8a 41 1a 00 00 00 04 04 0c 00 5f 5a 77 44 65 6c    65 74 65 41 74 6f 6d 40 34 00 6e 74 64 6c 6c 2e  | .A........_ZwDeleteAtom@4.ntdll. | 
| 34280 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 342a0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a  | ............0.......50........`. | 
| 342c0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00    03 04 0c 00 5f 5a 77 44 65 6c 61 79 45 78 65 63  | ......L....A........_ZwDelayExec | 
| 342e0 |  75 74 69 6f 6e 40 38 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ution@8.ntdll.dll.ntdll.dll/.... | 
| 34300 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 34320 |  20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00 02 04  | ..50........`.......L....A...... | 
| 34340 |  0c 00 5f 5a 77 44 65 62 75 67 43 6f 6e 74 69 6e    75 65 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | .._ZwDebugContinue@12.ntdll.dll. | 
| 34360 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 34380 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......54........`..... | 
| 343a0 |  00 00 4c 01 c5 e8 8a 41 22 00 00 00 01 04 0c 00    5f 5a 77 44 65 62 75 67 41 63 74 69 76 65 50 72  | ..L....A"......._ZwDebugActivePr | 
| 343c0 |  6f 63 65 73 73 40 38 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ocess@8.ntdll.dll.ntdll.dll/.... | 
| 343e0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 34400 |  20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 23 00 00 00 00 04  | ..55........`.......L....A#..... | 
| 34420 |  0c 00 5f 5a 77 43 72 65 61 74 65 57 61 69 74 61    62 6c 65 50 6f 72 74 40 32 30 00 6e 74 64 6c 6c  | .._ZwCreateWaitablePort@20.ntdll | 
| 34440 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 34460 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20  | ..............0.......48........ | 
| 34480 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1c 00    00 00 ff 03 0c 00 5f 5a 77 43 72 65 61 74 65 54  | `.......L....A........_ZwCreateT | 
| 344a0 |  6f 6b 65 6e 40 35 32 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | oken@52.ntdll.dll.ntdll.dll/.... | 
| 344c0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 344e0 |  20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00 fe 03  | ..48........`.......L....A...... | 
| 34500 |  0c 00 5f 5a 77 43 72 65 61 74 65 54 69 6d 65 72    40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | .._ZwCreateTimer@16.ntdll.dll.nt | 
| 34520 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 34540 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......49........`....... | 
| 34560 |  4c 01 c5 e8 8a 41 1d 00 00 00 fd 03 0c 00 5f 5a    77 43 72 65 61 74 65 54 68 72 65 61 64 40 33 32  | L....A........_ZwCreateThread@32 | 
| 34580 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 345a0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20  | 622597..............0.......61.. | 
| 345c0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 29 00 00 00 fc 03 0c 00 5f 5a 77 43  | ......`.......L....A)......._ZwC | 
| 345e0 |  72 65 61 74 65 53 79 6d 62 6f 6c 69 63 4c 69 6e    6b 4f 62 6a 65 63 74 40 31 36 00 6e 74 64 6c 6c  | reateSymbolicLinkObject@16.ntdll | 
| 34600 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 34620 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20  | ..............0.......52........ | 
| 34640 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00    00 00 fb 03 0c 00 5f 5a 77 43 72 65 61 74 65 53  | `.......L....A........_ZwCreateS | 
| 34660 |  65 6d 61 70 68 6f 72 65 40 32 30 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | emaphore@20.ntdll.dll.ntdll.dll/ | 
| 34680 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 346a0 |  20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00  | ......50........`.......L....A.. | 
| 346c0 |  00 00 fa 03 0c 00 5f 5a 77 43 72 65 61 74 65 53    65 63 74 69 6f 6e 40 32 38 00 6e 74 64 6c 6c 2e  | ......_ZwCreateSection@28.ntdll. | 
| 346e0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 34700 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a  | ............0.......50........`. | 
| 34720 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00    f9 03 0c 00 5f 5a 77 43 72 65 61 74 65 50 72 6f  | ......L....A........_ZwCreatePro | 
| 34740 |  66 69 6c 65 40 33 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | file@36.ntdll.dll.ntdll.dll/.... | 
| 34760 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 34780 |  20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00 f8 03  | ..52........`.......L....A...... | 
| 347a0 |  0c 00 5f 5a 77 43 72 65 61 74 65 50 72 6f 63 65    73 73 45 78 40 33 36 00 6e 74 64 6c 6c 2e 64 6c  | .._ZwCreateProcessEx@36.ntdll.dl | 
| 347c0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 347e0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......50........`... | 
| 34800 |  ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00 f7 03    0c 00 5f 5a 77 43 72 65 61 74 65 50 72 6f 63 65  | ....L....A........_ZwCreateProce | 
| 34820 |  73 73 40 33 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ss@32.ntdll.dll.ntdll.dll/...... | 
| 34840 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 34860 |  34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1b 00 00 00 f6 03 0c 00  | 47........`.......L....A........ | 
| 34880 |  5f 5a 77 43 72 65 61 74 65 50 6f 72 74 40 32 30    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | _ZwCreatePort@20.ntdll.dll..ntdl | 
| 348a0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 348c0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......53........`.......L. | 
| 348e0 |  c5 e8 8a 41 21 00 00 00 f5 03 0c 00 5f 5a 77 43    72 65 61 74 65 50 61 67 69 6e 67 46 69 6c 65 40  | ...A!......._ZwCreatePagingFile@ | 
| 34900 |  31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 16.ntdll.dll..ntdll.dll/......10 | 
| 34920 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36  | 99622597..............0.......56 | 
| 34940 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 24 00 00 00 f4 03 0c 00 5f 5a  | ........`.......L....A$......._Z | 
| 34960 |  77 43 72 65 61 74 65 4e 61 6d 65 64 50 69 70 65    46 69 6c 65 40 35 36 00 6e 74 64 6c 6c 2e 64 6c  | wCreateNamedPipeFile@56.ntdll.dl | 
| 34980 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 349a0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......49........`... | 
| 349c0 |  ff ff 00 00 4c 01 c5 e8 8a 41 1d 00 00 00 f3 03    0c 00 5f 5a 77 43 72 65 61 74 65 4d 75 74 61 6e  | ....L....A........_ZwCreateMutan | 
| 349e0 |  74 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | t@16.ntdll.dll..ntdll.dll/...... | 
| 34a00 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 34a20 |  35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 23 00 00 00 f2 03 0c 00  | 55........`.......L....A#....... | 
| 34a40 |  5f 5a 77 43 72 65 61 74 65 4d 61 69 6c 73 6c 6f    74 46 69 6c 65 40 33 32 00 6e 74 64 6c 6c 2e 64  | _ZwCreateMailslotFile@32.ntdll.d | 
| 34a60 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 34a80 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a  | ............0.......53........`. | 
| 34aa0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00    f1 03 0c 00 5f 5a 77 43 72 65 61 74 65 4b 65 79  | ......L....A!......._ZwCreateKey | 
| 34ac0 |  65 64 45 76 65 6e 74 40 31 36 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | edEvent@16.ntdll.dll..ntdll.dll/ | 
| 34ae0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 34b00 |  20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1a 00  | ......46........`.......L....A.. | 
| 34b20 |  00 00 f0 03 0c 00 5f 5a 77 43 72 65 61 74 65 4b    65 79 40 32 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | ......_ZwCreateKey@28.ntdll.dll. | 
| 34b40 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 34b60 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......49........`..... | 
| 34b80 |  00 00 4c 01 c5 e8 8a 41 1d 00 00 00 ef 03 0c 00    5f 5a 77 43 72 65 61 74 65 4a 6f 62 53 65 74 40  | ..L....A........_ZwCreateJobSet@ | 
| 34ba0 |  31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 12.ntdll.dll..ntdll.dll/......10 | 
| 34bc0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32  | 99622597..............0.......52 | 
| 34be0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 20 00 00 00 ee 03 0c 00 5f 5a  | ........`.......L....A........_Z | 
| 34c00 |  77 43 72 65 61 74 65 4a 6f 62 4f 62 6a 65 63 74    40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | wCreateJobObject@12.ntdll.dll.nt | 
| 34c20 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 34c40 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......55........`....... | 
| 34c60 |  4c 01 c5 e8 8a 41 23 00 00 00 ed 03 0c 00 5f 5a    77 43 72 65 61 74 65 49 6f 43 6f 6d 70 6c 65 74  | L....A#......._ZwCreateIoComplet | 
| 34c80 |  69 6f 6e 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ion@16.ntdll.dll..ntdll.dll/.... | 
| 34ca0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 34cc0 |  20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1b 00 00 00 ec 03  | ..47........`.......L....A...... | 
| 34ce0 |  0c 00 5f 5a 77 43 72 65 61 74 65 46 69 6c 65 40    34 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | .._ZwCreateFile@44.ntdll.dll..nt | 
| 34d00 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 34d20 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......52........`....... | 
| 34d40 |  4c 01 c5 e8 8a 41 20 00 00 00 eb 03 0c 00 5f 5a    77 43 72 65 61 74 65 45 76 65 6e 74 50 61 69 72  | L....A........_ZwCreateEventPair | 
| 34d60 |  40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @12.ntdll.dll.ntdll.dll/......10 | 
| 34d80 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38  | 99622597..............0.......48 | 
| 34da0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1c 00 00 00 ea 03 0c 00 5f 5a  | ........`.......L....A........_Z | 
| 34dc0 |  77 43 72 65 61 74 65 45 76 65 6e 74 40 32 30 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | wCreateEvent@20.ntdll.dll.ntdll. | 
| 34de0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 34e00 |  20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......58........`.......L... | 
| 34e20 |  8a 41 26 00 00 00 e9 03 0c 00 5f 5a 77 43 72 65    61 74 65 44 69 72 65 63 74 6f 72 79 4f 62 6a 65  | .A&......._ZwCreateDirectoryObje | 
| 34e40 |  63 74 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ct@12.ntdll.dll.ntdll.dll/...... | 
| 34e60 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 34e80 |  35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 22 00 00 00 e8 03 0c 00  | 54........`.......L....A"....... | 
| 34ea0 |  5f 5a 77 43 72 65 61 74 65 44 65 62 75 67 4f 62    6a 65 63 74 40 31 36 00 6e 74 64 6c 6c 2e 64 6c  | _ZwCreateDebugObject@16.ntdll.dl | 
| 34ec0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 34ee0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......44........`... | 
| 34f00 |  ff ff 00 00 4c 01 c5 e8 8a 41 18 00 00 00 e7 03    0c 00 5f 5a 77 43 6f 6e 74 69 6e 75 65 40 38 00  | ....L....A........_ZwContinue@8. | 
| 34f20 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 34f40 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20  | 2597..............0.......48.... | 
| 34f60 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1c 00 00 00 e6 03 0c 00 5f 5a 77 43 6f 6e  | ....`.......L....A........_ZwCon | 
| 34f80 |  6e 65 63 74 50 6f 72 74 40 33 32 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | nectPort@32.ntdll.dll.ntdll.dll/ | 
| 34fa0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 34fc0 |  20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1b 00  | ......47........`.......L....A.. | 
| 34fe0 |  00 00 e5 03 0c 00 5f 5a 77 43 6f 6d 70 72 65 73    73 4b 65 79 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c  | ......_ZwCompressKey@4.ntdll.dll | 
| 35000 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 35020 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......55........`... | 
| 35040 |  ff ff 00 00 4c 01 c5 e8 8a 41 23 00 00 00 e4 03    0c 00 5f 5a 77 43 6f 6d 70 6c 65 74 65 43 6f 6e  | ....L....A#......._ZwCompleteCon | 
| 35060 |  6e 65 63 74 50 6f 72 74 40 34 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | nectPort@4.ntdll.dll..ntdll.dll/ | 
| 35080 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 350a0 |  20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00  | ......50........`.......L....A.. | 
| 350c0 |  00 00 e3 03 0c 00 5f 5a 77 43 6f 6d 70 61 72 65    54 6f 6b 65 6e 73 40 31 32 00 6e 74 64 6c 6c 2e  | ......_ZwCompareTokens@12.ntdll. | 
| 350e0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 35100 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a  | ............0.......47........`. | 
| 35120 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1b 00 00 00    e2 03 0c 00 5f 5a 77 43 6f 6d 70 61 63 74 4b 65  | ......L....A........_ZwCompactKe | 
| 35140 |  79 73 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ys@8.ntdll.dll..ntdll.dll/...... | 
| 35160 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 35180 |  35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 26 00 00 00 e1 03 0c 00  | 58........`.......L....A&....... | 
| 351a0 |  5f 5a 77 43 6c 6f 73 65 4f 62 6a 65 63 74 41 75    64 69 74 41 6c 61 72 6d 40 31 32 00 6e 74 64 6c  | _ZwCloseObjectAuditAlarm@12.ntdl | 
| 351c0 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 351e0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 34 31 20 20 20 20 20 20 20 20  | ..............0.......41........ | 
| 35200 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 15 00    00 00 e0 03 0c 00 5f 5a 77 43 6c 6f 73 65 40 34  | `.......L....A........_ZwClose@4 | 
| 35220 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 35240 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20  | 622597..............0.......46.. | 
| 35260 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1a 00 00 00 df 03 0c 00 5f 5a 77 43  | ......`.......L....A........_ZwC | 
| 35280 |  6c 65 61 72 45 76 65 6e 74 40 34 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | learEvent@4.ntdll.dll.ntdll.dll/ | 
| 352a0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 352c0 |  20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1b 00  | ......47........`.......L....A.. | 
| 352e0 |  00 00 de 03 0c 00 5f 5a 77 43 61 6e 63 65 6c 54    69 6d 65 72 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c  | ......_ZwCancelTimer@8.ntdll.dll | 
| 35300 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 35320 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......48........`... | 
| 35340 |  ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00 dd 03    0c 00 5f 5a 77 43 61 6e 63 65 6c 49 6f 46 69 6c  | ....L....A........_ZwCancelIoFil | 
| 35360 |  65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | e@8.ntdll.dll.ntdll.dll/......10 | 
| 35380 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 31  | 99622597..............0.......61 | 
| 353a0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 29 00 00 00 dc 03 0c 00 5f 5a  | ........`.......L....A)......._Z | 
| 353c0 |  77 43 61 6e 63 65 6c 44 65 76 69 63 65 57 61 6b    65 75 70 52 65 71 75 65 73 74 40 34 00 6e 74 64  | wCancelDeviceWakeupRequest@4.ntd | 
| 353e0 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 35400 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20  | 97..............0.......51...... | 
| 35420 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1f 00 00 00 db 03 0c 00 5f 5a 77 43 61 6c 6c 62  | ..`.......L....A........_ZwCallb | 
| 35440 |  61 63 6b 52 65 74 75 72 6e 40 31 32 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | ackReturn@12.ntdll.dll..ntdll.dl | 
| 35460 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 35480 |  30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......60........`.......L....A | 
| 354a0 |  28 00 00 00 da 03 0c 00 5f 5a 77 41 73 73 69 67    6e 50 72 6f 63 65 73 73 54 6f 4a 6f 62 4f 62 6a  | (......._ZwAssignProcessToJobObj | 
| 354c0 |  65 63 74 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ect@8.ntdll.dll.ntdll.dll/...... | 
| 354e0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 35500 |  35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 25 00 00 00 d9 03 0c 00  | 57........`.......L....A%....... | 
| 35520 |  5f 5a 77 41 72 65 4d 61 70 70 65 64 46 69 6c 65    73 54 68 65 53 61 6d 65 40 38 00 6e 74 64 6c 6c  | _ZwAreMappedFilesTheSame@8.ntdll | 
| 35540 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 35560 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20  | ..............0.......55........ | 
| 35580 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 23 00    00 00 d8 03 0c 00 5f 5a 77 41 70 70 68 65 6c 70  | `.......L....A#......._ZwApphelp | 
| 355a0 |  43 61 63 68 65 43 6f 6e 74 72 6f 6c 40 38 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | CacheControl@8.ntdll.dll..ntdll. | 
| 355c0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 355e0 |  20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......58........`.......L... | 
| 35600 |  8a 41 26 00 00 00 d7 03 0c 00 5f 5a 77 41 6c 6c    6f 63 61 74 65 56 69 72 74 75 61 6c 4d 65 6d 6f  | .A&......._ZwAllocateVirtualMemo | 
| 35620 |  72 79 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ry@24.ntdll.dll.ntdll.dll/...... | 
| 35640 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 35660 |  35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1e 00 00 00 d6 03 0c 00  | 50........`.......L....A........ | 
| 35680 |  5f 5a 77 41 6c 6c 6f 63 61 74 65 55 75 69 64 73    40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | _ZwAllocateUuids@16.ntdll.dll.nt | 
| 356a0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 356c0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 32    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......62........`....... | 
| 356e0 |  4c 01 c5 e8 8a 41 2a 00 00 00 d5 03 0c 00 5f 5a    77 41 6c 6c 6f 63 61 74 65 55 73 65 72 50 68 79  | L....A*......._ZwAllocateUserPhy | 
| 35700 |  73 69 63 61 6c 50 61 67 65 73 40 31 32 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | sicalPages@12.ntdll.dll.ntdll.dl | 
| 35720 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 35740 |  30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......59........`.......L....A | 
| 35760 |  27 00 00 00 d4 03 0c 00 5f 5a 77 41 6c 6c 6f 63    61 74 65 4c 6f 63 61 6c 6c 79 55 6e 69 71 75 65  | '......._ZwAllocateLocallyUnique | 
| 35780 |  49 64 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | Id@4.ntdll.dll..ntdll.dll/...... | 
| 357a0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 357c0 |  34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1b 00 00 00 d3 03 0c 00  | 47........`.......L....A........ | 
| 357e0 |  5f 5a 77 41 6c 65 72 74 54 68 72 65 61 64 40 34    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | _ZwAlertThread@4.ntdll.dll..ntdl | 
| 35800 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 35820 |  20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......53........`.......L. | 
| 35840 |  c5 e8 8a 41 21 00 00 00 d2 03 0c 00 5f 5a 77 41    6c 65 72 74 52 65 73 75 6d 65 54 68 72 65 61 64  | ...A!......._ZwAlertResumeThread | 
| 35860 |  40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @8.ntdll.dll..ntdll.dll/......10 | 
| 35880 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38  | 99622597..............0.......58 | 
| 358a0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 26 00 00 00 d1 03 0c 00 5f 5a  | ........`.......L....A&......._Z | 
| 358c0 |  77 41 64 6a 75 73 74 50 72 69 76 69 6c 65 67 65    73 54 6f 6b 65 6e 40 32 34 00 6e 74 64 6c 6c 2e  | wAdjustPrivilegesToken@24.ntdll. | 
| 358e0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 35900 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a  | ............0.......54........`. | 
| 35920 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00    d0 03 0c 00 5f 5a 77 41 64 6a 75 73 74 47 72 6f  | ......L....A"......._ZwAdjustGro | 
| 35940 |  75 70 73 54 6f 6b 65 6e 40 32 34 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | upsToken@24.ntdll.dll.ntdll.dll/ | 
| 35960 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 35980 |  20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00  | ......50........`.......L....A.. | 
| 359a0 |  00 00 cf 03 0c 00 5f 5a 77 41 64 64 44 72 69 76    65 72 45 6e 74 72 79 40 38 00 6e 74 64 6c 6c 2e  | ......_ZwAddDriverEntry@8.ntdll. | 
| 359c0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 359e0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a  | ............0.......48........`. | 
| 35a00 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00    ce 03 0c 00 5f 5a 77 41 64 64 42 6f 6f 74 45 6e  | ......L....A........_ZwAddBootEn | 
| 35a20 |  74 72 79 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | try@8.ntdll.dll.ntdll.dll/...... | 
| 35a40 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 35a60 |  34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 18 00 00 00 cd 03 0c 00  | 44........`.......L....A........ | 
| 35a80 |  5f 5a 77 41 64 64 41 74 6f 6d 40 31 32 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | _ZwAddAtom@12.ntdll.dll.ntdll.dl | 
| 35aa0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 35ac0 |  30 20 20 20 20 20 20 20 38 35 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......85........`.......L....A | 
| 35ae0 |  41 00 00 00 cc 03 0c 00 5f 5a 77 41 63 63 65 73    73 43 68 65 63 6b 42 79 54 79 70 65 52 65 73 75  | A......._ZwAccessCheckByTypeResu | 
| 35b00 |  6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74 41 6c    61 72 6d 42 79 48 61 6e 64 6c 65 40 36 38 00 6e  | ltListAndAuditAlarmByHandle@68.n | 
| 35b20 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 35b40 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 37 37 20 20 20 20  | 2597..............0.......77.... | 
| 35b60 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 39 00 00 00 cb 03 0c 00 5f 5a 77 41 63 63  | ....`.......L....A9......._ZwAcc | 
| 35b80 |  65 73 73 43 68 65 63 6b 42 79 54 79 70 65 52 65    73 75 6c 74 4c 69 73 74 41 6e 64 41 75 64 69 74  | essCheckByTypeResultListAndAudit | 
| 35ba0 |  41 6c 61 72 6d 40 36 34 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | Alarm@64.ntdll.dll..ntdll.dll/.. | 
| 35bc0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 35be0 |  20 20 20 20 36 34 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2c 00 00 00  | ....64........`.......L....A,... | 
| 35c00 |  ca 03 0c 00 5f 5a 77 41 63 63 65 73 73 43 68 65    63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69  | ...._ZwAccessCheckByTypeResultLi | 
| 35c20 |  73 74 40 34 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | st@44.ntdll.dll.ntdll.dll/...... | 
| 35c40 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 35c60 |  36 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 2f 00 00 00 c9 03 0c 00  | 67........`.......L....A/....... | 
| 35c80 |  5f 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 79    54 79 70 65 41 6e 64 41 75 64 69 74 41 6c 61 72  | _ZwAccessCheckByTypeAndAuditAlar | 
| 35ca0 |  6d 40 36 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | m@64.ntdll.dll..ntdll.dll/...... | 
| 35cc0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 35ce0 |  35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 22 00 00 00 c8 03 0c 00  | 54........`.......L....A"....... | 
| 35d00 |  5f 5a 77 41 63 63 65 73 73 43 68 65 63 6b 42 79    54 79 70 65 40 34 34 00 6e 74 64 6c 6c 2e 64 6c  | _ZwAccessCheckByType@44.ntdll.dl | 
| 35d20 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 35d40 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 31 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......61........`... | 
| 35d60 |  ff ff 00 00 4c 01 c5 e8 8a 41 29 00 00 00 c7 03    0c 00 5f 5a 77 41 63 63 65 73 73 43 68 65 63 6b  | ....L....A)......._ZwAccessCheck | 
| 35d80 |  41 6e 64 41 75 64 69 74 41 6c 61 72 6d 40 34 34    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | AndAuditAlarm@44.ntdll.dll..ntdl | 
| 35da0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 35dc0 |  20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......48........`.......L. | 
| 35de0 |  c5 e8 8a 41 1c 00 00 00 c6 03 0c 00 5f 5a 77 41    63 63 65 73 73 43 68 65 63 6b 40 33 32 00 6e 74  | ...A........_ZwAccessCheck@32.nt | 
| 35e00 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 35e20 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20  | 97..............0.......54...... | 
| 35e40 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    22 00 00 00 c5 03 0c 00 5f 5a 77 41 63 63 65 70  | ..`.......L....A"......._ZwAccep | 
| 35e60 |  74 43 6f 6e 6e 65 63 74 50 6f 72 74 40 32 34 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | tConnectPort@24.ntdll.dll.ntdll. | 
| 35e80 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 35ea0 |  20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......54........`.......L... | 
| 35ec0 |  8a 41 22 00 00 00 c4 03 0c 00 5f 56 65 72 53 65    74 43 6f 6e 64 69 74 69 6f 6e 4d 61 73 6b 40 31  | .A"......._VerSetConditionMask@1 | 
| 35ee0 |  36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 6.ntdll.dll.ntdll.dll/......1099 | 
| 35f00 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20  | 622597..............0.......60.. | 
| 35f20 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 28 00 00 00 c3 03 0c 00 5f 52 74 6c  | ......`.......L....A(......._Rtl | 
| 35f40 |  78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54 6f    4f 65 6d 53 69 7a 65 40 34 00 6e 74 64 6c 6c 2e  | xUnicodeStringToOemSize@4.ntdll. | 
| 35f60 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 35f80 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 31 20 20 20 20 20 20 20 20 60 0a  | ............0.......61........`. | 
| 35fa0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 29 00 00 00    c2 03 0c 00 5f 52 74 6c 78 55 6e 69 63 6f 64 65  | ......L....A)......._RtlxUnicode | 
| 35fc0 |  53 74 72 69 6e 67 54 6f 41 6e 73 69 53 69 7a 65    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | StringToAnsiSize@4.ntdll.dll..nt | 
| 35fe0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 36000 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......60........`....... | 
| 36020 |  4c 01 c5 e8 8a 41 28 00 00 00 c1 03 0c 00 5f 52    74 6c 78 4f 65 6d 53 74 72 69 6e 67 54 6f 55 6e  | L....A(......._RtlxOemStringToUn | 
| 36040 |  69 63 6f 64 65 53 69 7a 65 40 34 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | icodeSize@4.ntdll.dll.ntdll.dll/ | 
| 36060 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 36080 |  20 20 20 20 20 20 36 31 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 29 00  | ......61........`.......L....A). | 
| 360a0 |  00 00 c0 03 0c 00 5f 52 74 6c 78 41 6e 73 69 53    74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53 69  | ......_RtlxAnsiStringToUnicodeSi | 
| 360c0 |  7a 65 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ze@4.ntdll.dll..ntdll.dll/...... | 
| 360e0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 36100 |  36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 28 00 00 00 bf 03 0c 00  | 60........`.......L....A(....... | 
| 36120 |  5f 52 74 6c 70 57 61 69 74 46 6f 72 43 72 69 74    69 63 61 6c 53 65 63 74 69 6f 6e 40 34 00 6e 74  | _RtlpWaitForCriticalSection@4.nt | 
| 36140 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 36160 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20  | 97..............0.......59...... | 
| 36180 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    27 00 00 00 be 03 0c 00 5f 52 74 6c 70 55 6e 57  | ..`.......L....A'......._RtlpUnW | 
| 361a0 |  61 69 74 43 72 69 74 69 63 61 6c 53 65 63 74 69    6f 6e 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | aitCriticalSection@4.ntdll.dll.. | 
| 361c0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 361e0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......52........`..... | 
| 36200 |  00 00 4c 01 c5 e8 8a 41 20 00 00 00 bd 03 0c 00    5f 52 74 6c 70 4e 74 53 65 74 56 61 6c 75 65 4b  | ..L....A........_RtlpNtSetValueK | 
| 36220 |  65 79 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ey@16.ntdll.dll.ntdll.dll/...... | 
| 36240 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 36260 |  35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 22 00 00 00 bc 03 0c 00  | 54........`.......L....A"....... | 
| 36280 |  5f 52 74 6c 70 4e 74 51 75 65 72 79 56 61 6c 75    65 4b 65 79 40 32 30 00 6e 74 64 6c 6c 2e 64 6c  | _RtlpNtQueryValueKey@20.ntdll.dl | 
| 362a0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 362c0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......48........`... | 
| 362e0 |  ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00 bb 03    0c 00 5f 52 74 6c 70 4e 74 4f 70 65 6e 4b 65 79  | ....L....A........_RtlpNtOpenKey | 
| 36300 |  40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @16.ntdll.dll.ntdll.dll/......10 | 
| 36320 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36  | 99622597..............0.......56 | 
| 36340 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 24 00 00 00 ba 03 0c 00 5f 52  | ........`.......L....A$......._R | 
| 36360 |  74 6c 70 4e 74 4d 61 6b 65 54 65 6d 70 6f 72 61    72 79 4b 65 79 40 34 00 6e 74 64 6c 6c 2e 64 6c  | tlpNtMakeTemporaryKey@4.ntdll.dl | 
| 36380 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 363a0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......56........`... | 
| 363c0 |  ff ff 00 00 4c 01 c5 e8 8a 41 24 00 00 00 b9 03    0c 00 5f 52 74 6c 70 4e 74 45 6e 75 6d 65 72 61  | ....L....A$......._RtlpNtEnumera | 
| 363e0 |  74 65 53 75 62 4b 65 79 40 31 36 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | teSubKey@16.ntdll.dll.ntdll.dll/ | 
| 36400 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 36420 |  20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00  | ......50........`.......L....A.. | 
| 36440 |  00 00 b8 03 0c 00 5f 52 74 6c 70 4e 74 43 72 65    61 74 65 4b 65 79 40 32 34 00 6e 74 64 6c 6c 2e  | ......_RtlpNtCreateKey@24.ntdll. | 
| 36460 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 36480 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 31 20 20 20 20 20 20 20 20 60 0a  | ............0.......61........`. | 
| 364a0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 29 00 00 00    b7 03 0c 00 5f 52 74 6c 70 4e 6f 74 4f 77 6e 65  | ......L....A)......._RtlpNotOwne | 
| 364c0 |  72 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | rCriticalSection@4.ntdll.dll..nt | 
| 364e0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 36500 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......55........`....... | 
| 36520 |  4c 01 c5 e8 8a 41 23 00 00 00 b6 03 0c 00 5f 52    74 6c 70 45 6e 73 75 72 65 42 75 66 66 65 72 53  | L....A#......._RtlpEnsureBufferS | 
| 36540 |  69 7a 65 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ize@12.ntdll.dll..ntdll.dll/.... | 
| 36560 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 36580 |  20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00 b5 03  | ..58........`.......L....A&..... | 
| 365a0 |  0c 00 5f 52 74 6c 70 41 70 70 6c 79 4c 65 6e 67    74 68 46 75 6e 63 74 69 6f 6e 40 31 36 00 6e 74  | .._RtlpApplyLengthFunction@16.nt | 
| 365c0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 365e0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20  | 97..............0.......61...... | 
| 36600 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    29 00 00 00 b4 03 0c 00 5f 52 74 6c 5a 6f 6d 62  | ..`.......L....A)......._RtlZomb | 
| 36620 |  69 66 79 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e    74 65 78 74 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c  | ifyActivationContext@4.ntdll.dll | 
| 36640 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 36660 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......47........`... | 
| 36680 |  ff ff 00 00 4c 01 c5 e8 8a 41 1b 00 00 00 b3 03    0c 00 5f 52 74 6c 5a 65 72 6f 4d 65 6d 6f 72 79  | ....L....A........_RtlZeroMemory | 
| 366a0 |  40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @8.ntdll.dll..ntdll.dll/......10 | 
| 366c0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35  | 99622597..............0.......45 | 
| 366e0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 19 00 00 00 b2 03 0c 00 5f 52  | ........`.......L....A........_R | 
| 36700 |  74 6c 5a 65 72 6f 48 65 61 70 40 38 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | tlZeroHeap@8.ntdll.dll..ntdll.dl | 
| 36720 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 36740 |  30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......56........`.......L....A | 
| 36760 |  24 00 00 00 b1 03 0c 00 5f 52 74 6c 57 72 69 74    65 52 65 67 69 73 74 72 79 56 61 6c 75 65 40 32  | $......._RtlWriteRegistryValue@2 | 
| 36780 |  34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 4.ntdll.dll.ntdll.dll/......1099 | 
| 367a0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20  | 622597..............0.......55.. | 
| 367c0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 23 00 00 00 b0 03 0c 00 5f 52 74 6c  | ......`.......L....A#......._Rtl | 
| 367e0 |  57 72 69 74 65 4d 65 6d 6f 72 79 53 74 72 65 61    6d 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | WriteMemoryStream@16.ntdll.dll.. | 
| 36800 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 36820 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    36 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......63........`..... | 
| 36840 |  00 00 4c 01 c5 e8 8a 41 2b 00 00 00 af 03 0c 00    5f 52 74 6c 57 6f 77 36 34 45 6e 61 62 6c 65 46  | ..L....A+......._RtlWow64EnableF | 
| 36860 |  73 52 65 64 69 72 65 63 74 69 6f 6e 45 78 40 38    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | sRedirectionEx@8.ntdll.dll..ntdl | 
| 36880 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 368a0 |  20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......61........`.......L. | 
| 368c0 |  c5 e8 8a 41 29 00 00 00 ae 03 0c 00 5f 52 74 6c    57 6f 77 36 34 45 6e 61 62 6c 65 46 73 52 65 64  | ...A)......._RtlWow64EnableFsRed | 
| 368e0 |  69 72 65 63 74 69 6f 6e 40 34 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | irection@4.ntdll.dll..ntdll.dll/ | 
| 36900 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 36920 |  20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 19 00  | ......45........`.......L....A.. | 
| 36940 |  00 00 ad 03 0c 00 5f 52 74 6c 57 61 6c 6b 48 65    61 70 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | ......_RtlWalkHeap@8.ntdll.dll.. | 
| 36960 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 36980 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......52........`..... | 
| 369a0 |  00 00 4c 01 c5 e8 8a 41 20 00 00 00 ac 03 0c 00    5f 52 74 6c 57 61 6c 6b 46 72 61 6d 65 43 68 61  | ..L....A........_RtlWalkFrameCha | 
| 369c0 |  69 6e 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | in@12.ntdll.dll.ntdll.dll/...... | 
| 369e0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 36a00 |  35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 23 00 00 00 ab 03 0c 00  | 55........`.......L....A#....... | 
| 36a20 |  5f 52 74 6c 56 65 72 69 66 79 56 65 72 73 69 6f    6e 49 6e 66 6f 40 31 36 00 6e 74 64 6c 6c 2e 64  | _RtlVerifyVersionInfo@16.ntdll.d | 
| 36a40 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 36a60 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a  | ............0.......58........`. | 
| 36a80 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00    aa 03 0c 00 5f 52 74 6c 56 61 6c 69 64 61 74 65  | ......L....A&......._RtlValidate | 
| 36aa0 |  55 6e 69 63 6f 64 65 53 74 72 69 6e 67 40 38 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | UnicodeString@8.ntdll.dll.ntdll. | 
| 36ac0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 36ae0 |  20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......57........`.......L... | 
| 36b00 |  8a 41 25 00 00 00 a9 03 0c 00 5f 52 74 6c 56 61    6c 69 64 61 74 65 50 72 6f 63 65 73 73 48 65 61  | .A%......._RtlValidateProcessHea | 
| 36b20 |  70 73 40 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ps@0.ntdll.dll..ntdll.dll/...... | 
| 36b40 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 36b60 |  35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1e 00 00 00 a8 03 0c 00  | 50........`.......L....A........ | 
| 36b80 |  5f 52 74 6c 56 61 6c 69 64 61 74 65 48 65 61 70    40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | _RtlValidateHeap@12.ntdll.dll.nt | 
| 36ba0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 36bc0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......45........`....... | 
| 36be0 |  4c 01 c5 e8 8a 41 19 00 00 00 a7 03 0c 00 5f 52    74 6c 56 61 6c 69 64 53 69 64 40 34 00 6e 74 64  | L....A........_RtlValidSid@4.ntd | 
| 36c00 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 36c20 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20  | 97..............0.......60...... | 
| 36c40 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    28 00 00 00 a6 03 0c 00 5f 52 74 6c 56 61 6c 69  | ..`.......L....A(......._RtlVali | 
| 36c60 |  64 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70    74 6f 72 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | dSecurityDescriptor@4.ntdll.dll. | 
| 36c80 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 36ca0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    36 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......69........`..... | 
| 36cc0 |  00 00 4c 01 c5 e8 8a 41 31 00 00 00 a5 03 0c 00    5f 52 74 6c 56 61 6c 69 64 52 65 6c 61 74 69 76  | ..L....A1......._RtlValidRelativ | 
| 36ce0 |  65 53 65 63 75 72 69 74 79 44 65 73 63 72 69 70    74 6f 72 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c  | eSecurityDescriptor@12.ntdll.dll | 
| 36d00 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 36d20 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......45........`... | 
| 36d40 |  ff ff 00 00 4c 01 c5 e8 8a 41 19 00 00 00 a4 03    0c 00 5f 52 74 6c 56 61 6c 69 64 41 63 6c 40 34  | ....L....A........_RtlValidAcl@4 | 
| 36d60 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 36d80 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20  | 622597..............0.......47.. | 
| 36da0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1b 00 00 00 a2 03 0c 00 5f 52 74 6c  | ......`.......L....A........_Rtl | 
| 36dc0 |  55 73 61 67 65 48 65 61 70 40 31 32 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | UsageHeap@12.ntdll.dll..ntdll.dl | 
| 36de0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 36e00 |  30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......48........`.......L....A | 
| 36e20 |  1c 00 00 00 a1 03 0c 00 5f 52 74 6c 55 70 70 65    72 53 74 72 69 6e 67 40 38 00 6e 74 64 6c 6c 2e  | ........_RtlUpperString@8.ntdll. | 
| 36e40 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 36e60 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a  | ............0.......46........`. | 
| 36e80 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1a 00 00 00    a0 03 0c 00 5f 52 74 6c 55 70 70 65 72 43 68 61  | ......L....A........_RtlUpperCha | 
| 36ea0 |  72 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | r@4.ntdll.dll.ntdll.dll/......10 | 
| 36ec0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39  | 99622597..............0.......49 | 
| 36ee0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1d 00 00 00 9f 03 0c 00 5f 52  | ........`.......L....A........_R | 
| 36f00 |  74 6c 55 70 64 61 74 65 54 69 6d 65 72 40 31 36    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | tlUpdateTimer@16.ntdll.dll..ntdl | 
| 36f20 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 36f40 |  20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......57........`.......L. | 
| 36f60 |  c5 e8 8a 41 25 00 00 00 9e 03 0c 00 5f 52 74 6c    55 70 63 61 73 65 55 6e 69 63 6f 64 65 54 6f 4f  | ...A%......._RtlUpcaseUnicodeToO | 
| 36f80 |  65 6d 4e 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | emN@20.ntdll.dll..ntdll.dll/.... | 
| 36fa0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 36fc0 |  20 20 36 33 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 2b 00 00 00 9d 03  | ..63........`.......L....A+..... | 
| 36fe0 |  0c 00 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63    6f 64 65 54 6f 4d 75 6c 74 69 42 79 74 65 4e 40  | .._RtlUpcaseUnicodeToMultiByteN@ | 
| 37000 |  32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 20.ntdll.dll..ntdll.dll/......10 | 
| 37020 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 32  | 99622597..............0.......62 | 
| 37040 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 2a 00 00 00 9c 03 0c 00 5f 52  | ........`.......L....A*......._R | 
| 37060 |  74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64 65 54    6f 43 75 73 74 6f 6d 43 50 4e 40 32 34 00 6e 74  | tlUpcaseUnicodeToCustomCPN@24.nt | 
| 37080 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 370a0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 38 20 20 20 20 20 20  | 97..............0.......68...... | 
| 370c0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    30 00 00 00 9b 03 0c 00 5f 52 74 6c 55 70 63 61  | ..`.......L....A0......._RtlUpca | 
| 370e0 |  73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54    6f 4f 65 6d 53 74 72 69 6e 67 40 31 32 00 6e 74  | seUnicodeStringToOemString@12.nt | 
| 37100 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 37120 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 37 35 20 20 20 20 20 20  | 97..............0.......75...... | 
| 37140 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    37 00 00 00 9a 03 0c 00 5f 52 74 6c 55 70 63 61  | ..`.......L....A7......._RtlUpca | 
| 37160 |  73 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 54    6f 43 6f 75 6e 74 65 64 4f 65 6d 53 74 72 69 6e  | seUnicodeStringToCountedOemStrin | 
| 37180 |  67 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | g@12.ntdll.dll..ntdll.dll/...... | 
| 371a0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 371c0 |  36 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 31 00 00 00 99 03 0c 00  | 69........`.......L....A1....... | 
| 371e0 |  5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63 6f 64    65 53 74 72 69 6e 67 54 6f 41 6e 73 69 53 74 72  | _RtlUpcaseUnicodeStringToAnsiStr | 
| 37200 |  69 6e 67 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ing@12.ntdll.dll..ntdll.dll/.... | 
| 37220 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 37240 |  20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00 98 03  | ..57........`.......L....A%..... | 
| 37260 |  0c 00 5f 52 74 6c 55 70 63 61 73 65 55 6e 69 63    6f 64 65 53 74 72 69 6e 67 40 31 32 00 6e 74 64  | .._RtlUpcaseUnicodeString@12.ntd | 
| 37280 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 372a0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20  | 97..............0.......54...... | 
| 372c0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    22 00 00 00 97 03 0c 00 5f 52 74 6c 55 70 63 61  | ..`.......L....A"......._RtlUpca | 
| 372e0 |  73 65 55 6e 69 63 6f 64 65 43 68 61 72 40 34 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | seUnicodeChar@4.ntdll.dll.ntdll. | 
| 37300 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 37320 |  20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......44........`.......L... | 
| 37340 |  8a 41 18 00 00 00 96 03 0c 00 5f 52 74 6c 55 6e    77 69 6e 64 40 31 36 00 6e 74 64 6c 6c 2e 64 6c  | .A........_RtlUnwind@16.ntdll.dl | 
| 37360 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 37380 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 32 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......62........`... | 
| 373a0 |  ff ff 00 00 4c 01 c5 e8 8a 41 2a 00 00 00 95 03    0c 00 5f 52 74 6c 55 6e 6c 6f 63 6b 4d 65 6d 6f  | ....L....A*......._RtlUnlockMemo | 
| 373c0 |  72 79 53 74 72 65 61 6d 52 65 67 69 6f 6e 40 32    34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | ryStreamRegion@24.ntdll.dll.ntdl | 
| 373e0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 37400 |  20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......47........`.......L. | 
| 37420 |  c5 e8 8a 41 1b 00 00 00 94 03 0c 00 5f 52 74 6c    55 6e 6c 6f 63 6b 48 65 61 70 40 34 00 6e 74 64  | ...A........_RtlUnlockHeap@4.ntd | 
| 37440 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 37460 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20  | 97..............0.......57...... | 
| 37480 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    25 00 00 00 93 03 0c 00 5f 52 74 6c 55 6e 6c 6f  | ..`.......L....A%......._RtlUnlo | 
| 374a0 |  63 6b 42 6f 6f 74 53 74 61 74 75 73 44 61 74 61    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | ckBootStatusData@4.ntdll.dll..nt | 
| 374c0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 374e0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......44........`....... | 
| 37500 |  4c 01 c5 e8 8a 41 18 00 00 00 92 03 0c 00 5f 52    74 6c 55 6e 69 66 6f 72 6d 40 34 00 6e 74 64 6c  | L....A........_RtlUniform@4.ntdl | 
| 37520 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 37540 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20  | ..............0.......51........ | 
| 37560 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1f 00    00 00 91 03 0c 00 5f 52 74 6c 55 6e 69 63 6f 64  | `.......L....A........_RtlUnicod | 
| 37580 |  65 54 6f 4f 65 6d 4e 40 32 30 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | eToOemN@20.ntdll.dll..ntdll.dll/ | 
| 375a0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 375c0 |  20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 28 00  | ......60........`.......L....A(. | 
| 375e0 |  00 00 90 03 0c 00 5f 52 74 6c 55 6e 69 63 6f 64    65 54 6f 4d 75 6c 74 69 42 79 74 65 53 69 7a 65  | ......_RtlUnicodeToMultiByteSize | 
| 37600 |  40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @12.ntdll.dll.ntdll.dll/......10 | 
| 37620 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37  | 99622597..............0.......57 | 
| 37640 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 25 00 00 00 8f 03 0c 00 5f 52  | ........`.......L....A%......._R | 
| 37660 |  74 6c 55 6e 69 63 6f 64 65 54 6f 4d 75 6c 74 69    42 79 74 65 4e 40 32 30 00 6e 74 64 6c 6c 2e 64  | tlUnicodeToMultiByteN@20.ntdll.d | 
| 37680 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 376a0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a  | ............0.......56........`. | 
| 376c0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 24 00 00 00    8e 03 0c 00 5f 52 74 6c 55 6e 69 63 6f 64 65 54  | ......L....A$......._RtlUnicodeT | 
| 376e0 |  6f 43 75 73 74 6f 6d 43 50 4e 40 32 34 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | oCustomCPN@24.ntdll.dll.ntdll.dl | 
| 37700 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 37720 |  30 20 20 20 20 20 20 20 36 32 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......62........`.......L....A | 
| 37740 |  2a 00 00 00 8d 03 0c 00 5f 52 74 6c 55 6e 69 63    6f 64 65 53 74 72 69 6e 67 54 6f 4f 65 6d 53 74  | *......._RtlUnicodeStringToOemSt | 
| 37760 |  72 69 6e 67 40 31 32 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ring@12.ntdll.dll.ntdll.dll/.... | 
| 37780 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 377a0 |  20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00 8c 03  | ..59........`.......L....A'..... | 
| 377c0 |  0c 00 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72    69 6e 67 54 6f 4f 65 6d 53 69 7a 65 40 34 00 6e  | .._RtlUnicodeStringToOemSize@4.n | 
| 377e0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 37800 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20  | 2597..............0.......60.... | 
| 37820 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 28 00 00 00 8b 03 0c 00 5f 52 74 6c 55 6e  | ....`.......L....A(......._RtlUn | 
| 37840 |  69 63 6f 64 65 53 74 72 69 6e 67 54 6f 49 6e 74    65 67 65 72 40 31 32 00 6e 74 64 6c 6c 2e 64 6c  | icodeStringToInteger@12.ntdll.dl | 
| 37860 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 37880 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 39 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......69........`... | 
| 378a0 |  ff ff 00 00 4c 01 c5 e8 8a 41 31 00 00 00 8a 03    0c 00 5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72  | ....L....A1......._RtlUnicodeStr | 
| 378c0 |  69 6e 67 54 6f 43 6f 75 6e 74 65 64 4f 65 6d 53    74 72 69 6e 67 40 31 32 00 6e 74 64 6c 6c 2e 64  | ingToCountedOemString@12.ntdll.d | 
| 378e0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 37900 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a  | ............0.......63........`. | 
| 37920 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2b 00 00 00    89 03 0c 00 5f 52 74 6c 55 6e 69 63 6f 64 65 53  | ......L....A+......._RtlUnicodeS | 
| 37940 |  74 72 69 6e 67 54 6f 41 6e 73 69 53 74 72 69 6e    67 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | tringToAnsiString@12.ntdll.dll.. | 
| 37960 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 37980 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......60........`..... | 
| 379a0 |  00 00 4c 01 c5 e8 8a 41 28 00 00 00 88 03 0c 00    5f 52 74 6c 55 6e 69 63 6f 64 65 53 74 72 69 6e  | ..L....A(......._RtlUnicodeStrin | 
| 379c0 |  67 54 6f 41 6e 73 69 53 69 7a 65 40 34 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | gToAnsiSize@4.ntdll.dll.ntdll.dl | 
| 379e0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 37a00 |  30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......61........`.......L....A | 
| 37a20 |  29 00 00 00 86 03 0c 00 5f 52 74 6c 55 6e 68 61    6e 64 6c 65 64 45 78 63 65 70 74 69 6f 6e 46 69  | )......._RtlUnhandledExceptionFi | 
| 37a40 |  6c 74 65 72 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | lter@4.ntdll.dll..ntdll.dll/.... | 
| 37a60 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 37a80 |  20 20 36 32 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 2a 00 00 00 87 03  | ..62........`.......L....A*..... | 
| 37aa0 |  0c 00 5f 52 74 6c 55 6e 68 61 6e 64 6c 65 64 45    78 63 65 70 74 69 6f 6e 46 69 6c 74 65 72 32 40  | .._RtlUnhandledExceptionFilter2@ | 
| 37ac0 |  38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 8.ntdll.dll.ntdll.dll/......1099 | 
| 37ae0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20  | 622597..............0.......60.. | 
| 37b00 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 28 00 00 00 83 03 0c 00 5f 52 74 6c  | ......`.......L....A(......._Rtl | 
| 37b20 |  54 72 79 45 6e 74 65 72 43 72 69 74 69 63 61 6c    53 65 63 74 69 6f 6e 40 34 00 6e 74 64 6c 6c 2e  | TryEnterCriticalSection@4.ntdll. | 
| 37b40 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 37b60 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a  | ............0.......58........`. | 
| 37b80 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00    82 03 0c 00 5f 52 74 6c 54 72 61 63 65 44 61 74  | ......L....A&......._RtlTraceDat | 
| 37ba0 |  61 62 61 73 65 56 61 6c 69 64 61 74 65 40 34 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | abaseValidate@4.ntdll.dll.ntdll. | 
| 37bc0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 37be0 |  20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......56........`.......L... | 
| 37c00 |  8a 41 24 00 00 00 81 03 0c 00 5f 52 74 6c 54 72    61 63 65 44 61 74 61 62 61 73 65 55 6e 6c 6f 63  | .A$......._RtlTraceDatabaseUnloc | 
| 37c20 |  6b 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | k@4.ntdll.dll.ntdll.dll/......10 | 
| 37c40 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34  | 99622597..............0.......54 | 
| 37c60 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 22 00 00 00 80 03 0c 00 5f 52  | ........`.......L....A"......._R | 
| 37c80 |  74 6c 54 72 61 63 65 44 61 74 61 62 61 73 65 4c    6f 63 6b 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | tlTraceDatabaseLock@4.ntdll.dll. | 
| 37ca0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 37cc0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......55........`..... | 
| 37ce0 |  00 00 4c 01 c5 e8 8a 41 23 00 00 00 7f 03 0c 00    5f 52 74 6c 54 72 61 63 65 44 61 74 61 62 61 73  | ..L....A#......._RtlTraceDatabas | 
| 37d00 |  65 46 69 6e 64 40 31 36 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | eFind@16.ntdll.dll..ntdll.dll/.. | 
| 37d20 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 37d40 |  20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 28 00 00 00  | ....60........`.......L....A(... | 
| 37d60 |  7e 03 0c 00 5f 52 74 6c 54 72 61 63 65 44 61 74    61 62 61 73 65 45 6e 75 6d 65 72 61 74 65 40 31  | ~..._RtlTraceDatabaseEnumerate@1 | 
| 37d80 |  32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 2.ntdll.dll.ntdll.dll/......1099 | 
| 37da0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20  | 622597..............0.......57.. | 
| 37dc0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 25 00 00 00 7d 03 0c 00 5f 52 74 6c  | ......`.......L....A%...}..._Rtl | 
| 37de0 |  54 72 61 63 65 44 61 74 61 62 61 73 65 44 65 73    74 72 6f 79 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c  | TraceDatabaseDestroy@4.ntdll.dll | 
| 37e00 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 37e20 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......57........`... | 
| 37e40 |  ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00 7c 03    0c 00 5f 52 74 6c 54 72 61 63 65 44 61 74 61 62  | ....L....A%...|..._RtlTraceDatab | 
| 37e60 |  61 73 65 43 72 65 61 74 65 40 32 30 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | aseCreate@20.ntdll.dll..ntdll.dl | 
| 37e80 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 37ea0 |  30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......54........`.......L....A | 
| 37ec0 |  22 00 00 00 7b 03 0c 00 5f 52 74 6c 54 72 61 63    65 44 61 74 61 62 61 73 65 41 64 64 40 31 36 00  | "...{..._RtlTraceDatabaseAdd@16. | 
| 37ee0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 37f00 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20  | 2597..............0.......53.... | 
| 37f20 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 21 00 00 00 7a 03 0c 00 5f 52 74 6c 54 69  | ....`.......L....A!...z..._RtlTi | 
| 37f40 |  6d 65 54 6f 54 69 6d 65 46 69 65 6c 64 73 40 38    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | meToTimeFields@8.ntdll.dll..ntdl | 
| 37f60 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 37f80 |  20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......59........`.......L. | 
| 37fa0 |  c5 e8 8a 41 27 00 00 00 79 03 0c 00 5f 52 74 6c    54 69 6d 65 54 6f 53 65 63 6f 6e 64 73 53 69 6e  | ...A'...y..._RtlTimeToSecondsSin | 
| 37fc0 |  63 65 31 39 38 30 40 38 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ce1980@8.ntdll.dll..ntdll.dll/.. | 
| 37fe0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 38000 |  20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00  | ....59........`.......L....A'... | 
| 38020 |  78 03 0c 00 5f 52 74 6c 54 69 6d 65 54 6f 53 65    63 6f 6e 64 73 53 69 6e 63 65 31 39 37 30 40 38  | x..._RtlTimeToSecondsSince1970@8 | 
| 38040 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 38060 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20  | 622597..............0.......60.. | 
| 38080 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 28 00 00 00 77 03 0c 00 5f 52 74 6c  | ......`.......L....A(...w..._Rtl | 
| 380a0 |  54 69 6d 65 54 6f 45 6c 61 70 73 65 64 54 69 6d    65 46 69 65 6c 64 73 40 38 00 6e 74 64 6c 6c 2e  | TimeToElapsedTimeFields@8.ntdll. | 
| 380c0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 380e0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a  | ............0.......53........`. | 
| 38100 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00    76 03 0c 00 5f 52 74 6c 54 69 6d 65 46 69 65 6c  | ......L....A!...v..._RtlTimeFiel | 
| 38120 |  64 73 54 6f 54 69 6d 65 40 38 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | dsToTime@8.ntdll.dll..ntdll.dll/ | 
| 38140 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 38160 |  20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 26 00  | ......58........`.......L....A&. | 
| 38180 |  00 00 75 03 0c 00 5f 52 74 6c 53 79 73 74 65 6d    54 69 6d 65 54 6f 4c 6f 63 61 6c 54 69 6d 65 40  | ..u..._RtlSystemTimeToLocalTime@ | 
| 381a0 |  38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 8.ntdll.dll.ntdll.dll/......1099 | 
| 381c0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20  | 622597..............0.......53.. | 
| 381e0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 21 00 00 00 74 03 0c 00 5f 52 74 6c  | ......`.......L....A!...t..._Rtl | 
| 38200 |  53 75 62 74 72 65 65 53 75 63 63 65 73 73 6f 72    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | SubtreeSuccessor@4.ntdll.dll..nt | 
| 38220 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 38240 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......55........`....... | 
| 38260 |  4c 01 c5 e8 8a 41 23 00 00 00 73 03 0c 00 5f 52    74 6c 53 75 62 74 72 65 65 50 72 65 64 65 63 65  | L....A#...s..._RtlSubtreePredece | 
| 38280 |  73 73 6f 72 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ssor@4.ntdll.dll..ntdll.dll/.... | 
| 382a0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 382c0 |  20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00 72 03  | ..52........`.......L....A....r. | 
| 382e0 |  0c 00 5f 52 74 6c 53 75 62 41 75 74 68 6f 72 69    74 79 53 69 64 40 38 00 6e 74 64 6c 6c 2e 64 6c  | .._RtlSubAuthoritySid@8.ntdll.dl | 
| 38300 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 38320 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......57........`... | 
| 38340 |  ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00 71 03    0c 00 5f 52 74 6c 53 75 62 41 75 74 68 6f 72 69  | ....L....A%...q..._RtlSubAuthori | 
| 38360 |  74 79 43 6f 75 6e 74 53 69 64 40 34 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | tyCountSid@4.ntdll.dll..ntdll.dl | 
| 38380 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 383a0 |  30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......51........`.......L....A | 
| 383c0 |  1f 00 00 00 70 03 0c 00 5f 52 74 6c 53 74 72 69    6e 67 46 72 6f 6d 47 55 49 44 40 38 00 6e 74 64  | ....p..._RtlStringFromGUID@8.ntd | 
| 383e0 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 38400 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20  | 97..............0.......54...... | 
| 38420 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    22 00 00 00 6f 03 0c 00 5f 52 74 6c 53 74 61 74  | ..`.......L....A"...o..._RtlStat | 
| 38440 |  4d 65 6d 6f 72 79 53 74 72 65 61 6d 40 31 32 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | MemoryStream@12.ntdll.dll.ntdll. | 
| 38460 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 38480 |  20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......47........`.......L... | 
| 384a0 |  8a 41 1b 00 00 00 6e 03 0c 00 5f 52 74 6c 53 74    61 72 74 52 58 61 63 74 40 34 00 6e 74 64 6c 6c  | .A....n..._RtlStartRXact@4.ntdll | 
| 384c0 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 384e0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 34 32 20 20 20 20 20 20 20 20  | ..............0.......42........ | 
| 38500 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 16 00    00 00 6d 03 0c 00 5f 52 74 6c 53 70 6c 61 79 40  | `.......L....A....m..._RtlSplay@ | 
| 38520 |  34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 4.ntdll.dll.ntdll.dll/......1099 | 
| 38540 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20  | 622597..............0.......46.. | 
| 38560 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1a 00 00 00 6c 03 0c 00 5f 52 74 6c  | ......`.......L....A....l..._Rtl | 
| 38580 |  53 69 7a 65 48 65 61 70 40 31 32 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | SizeHeap@12.ntdll.dll.ntdll.dll/ | 
| 385a0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 385c0 |  20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 22 00  | ......54........`.......L....A". | 
| 385e0 |  00 00 6b 03 0c 00 5f 52 74 6c 53 65 74 55 73 65    72 56 61 6c 75 65 48 65 61 70 40 31 36 00 6e 74  | ..k..._RtlSetUserValueHeap@16.nt | 
| 38600 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 38620 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20  | 97..............0.......54...... | 
| 38640 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    22 00 00 00 6a 03 0c 00 5f 52 74 6c 53 65 74 55  | ..`.......L....A"...j..._RtlSetU | 
| 38660 |  73 65 72 46 6c 61 67 73 48 65 61 70 40 32 30 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | serFlagsHeap@20.ntdll.dll.ntdll. | 
| 38680 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 386a0 |  20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......55........`.......L... | 
| 386c0 |  8a 41 23 00 00 00 69 03 0c 00 5f 52 74 6c 53 65    74 55 6e 69 63 6f 64 65 43 61 6c 6c 6f 75 74 73  | .A#...i..._RtlSetUnicodeCallouts | 
| 386e0 |  40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @4.ntdll.dll..ntdll.dll/......10 | 
| 38700 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 34  | 99622597..............0.......64 | 
| 38720 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 2c 00 00 00 68 03 0c 00 5f 52  | ........`.......L....A,...h..._R | 
| 38740 |  74 6c 53 65 74 55 6e 68 61 6e 64 6c 65 64 45 78    63 65 70 74 69 6f 6e 46 69 6c 74 65 72 40 34 00  | tlSetUnhandledExceptionFilter@4. | 
| 38760 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 38780 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20  | 2597..............0.......46.... | 
| 387a0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1a 00 00 00 67 03 0c 00 5f 52 74 6c 53 65  | ....`.......L....A....g..._RtlSe | 
| 387c0 |  74 54 69 6d 65 72 40 32 38 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | tTimer@28.ntdll.dll.ntdll.dll/.. | 
| 387e0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 38800 |  20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00  | ....59........`.......L....A'... | 
| 38820 |  66 03 0c 00 5f 52 74 6c 53 65 74 54 69 6d 65 5a    6f 6e 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 34  | f..._RtlSetTimeZoneInformation@4 | 
| 38840 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 38860 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20  | 622597..............0.......59.. | 
| 38880 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 27 00 00 00 65 03 0c 00 5f 52 74 6c  | ......`.......L....A'...e..._Rtl | 
| 388a0 |  53 65 74 54 68 72 65 61 64 50 6f 6f 6c 53 74 61    72 74 46 75 6e 63 40 38 00 6e 74 64 6c 6c 2e 64  | SetThreadPoolStartFunc@8.ntdll.d | 
| 388c0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 388e0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a  | ............0.......54........`. | 
| 38900 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00    64 03 08 00 5f 52 74 6c 53 65 74 54 68 72 65 61  | ......L....A"...d..._RtlSetThrea | 
| 38920 |  64 49 73 43 72 69 74 69 63 61 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | dIsCritical.ntdll.dll.ntdll.dll/ | 
| 38940 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 38960 |  20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 23 00  | ......55........`.......L....A#. | 
| 38980 |  00 00 63 03 0c 00 5f 52 74 6c 53 65 74 54 68 72    65 61 64 45 72 72 6f 72 4d 6f 64 65 40 38 00 6e  | ..c..._RtlSetThreadErrorMode@8.n | 
| 389a0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 389c0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20  | 2597..............0.......57.... | 
| 389e0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 25 00 00 00 62 03 0c 00 5f 52 74 6c 53 65  | ....`.......L....A%...b..._RtlSe | 
| 38a00 |  74 53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 45    78 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | tSecurityObjectEx@24.ntdll.dll.. | 
| 38a20 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 38a40 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......55........`..... | 
| 38a60 |  00 00 4c 01 c5 e8 8a 41 23 00 00 00 61 03 0c 00    5f 52 74 6c 53 65 74 53 65 63 75 72 69 74 79 4f  | ..L....A#...a..._RtlSetSecurityO | 
| 38a80 |  62 6a 65 63 74 40 32 30 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | bject@20.ntdll.dll..ntdll.dll/.. | 
| 38aa0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 38ac0 |  20 20 20 20 36 37 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2f 00 00 00  | ....67........`.......L....A/... | 
| 38ae0 |  60 03 0c 00 5f 52 74 6c 53 65 74 53 65 63 75 72    69 74 79 44 65 73 63 72 69 70 74 6f 72 52 4d 43  | `..._RtlSetSecurityDescriptorRMC | 
| 38b00 |  6f 6e 74 72 6f 6c 40 38 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ontrol@8.ntdll.dll..ntdll.dll/.. | 
| 38b20 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 38b40 |  20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2b 00 00 00  | ....63........`.......L....A+... | 
| 38b60 |  5f 03 0c 00 5f 52 74 6c 53 65 74 53 61 63 6c 53    65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f  | _..._RtlSetSaclSecurityDescripto | 
| 38b80 |  72 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | r@16.ntdll.dll..ntdll.dll/...... | 
| 38ba0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 38bc0 |  35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 23 00 00 00 5e 03 08 00  | 55........`.......L....A#...^... | 
| 38be0 |  5f 52 74 6c 53 65 74 50 72 6f 63 65 73 73 49 73    43 72 69 74 69 63 61 6c 00 6e 74 64 6c 6c 2e 64  | _RtlSetProcessIsCritical.ntdll.d | 
| 38c00 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 38c20 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 34 20 20 20 20 20 20 20 20 60 0a  | ............0.......64........`. | 
| 38c40 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2c 00 00 00    5d 03 0c 00 5f 52 74 6c 53 65 74 4f 77 6e 65 72  | ......L....A,...]..._RtlSetOwner | 
| 38c60 |  53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74    6f 72 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | SecurityDescriptor@12.ntdll.dll. | 
| 38c80 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 38ca0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......57........`..... | 
| 38cc0 |  00 00 4c 01 c5 e8 8a 41 25 00 00 00 5c 03 0c 00    5f 52 74 6c 53 65 74 4d 65 6d 6f 72 79 53 74 72  | ..L....A%...\..._RtlSetMemoryStr | 
| 38ce0 |  65 61 6d 53 69 7a 65 40 31 32 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | eamSize@12.ntdll.dll..ntdll.dll/ | 
| 38d00 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 38d20 |  20 20 20 20 20 20 37 37 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 39 00  | ......77........`.......L....A9. | 
| 38d40 |  00 00 5b 03 0c 00 5f 52 74 6c 53 65 74 4c 61 73    74 57 69 6e 33 32 45 72 72 6f 72 41 6e 64 4e 74  | ..[..._RtlSetLastWin32ErrorAndNt | 
| 38d60 |  53 74 61 74 75 73 46 72 6f 6d 4e 74 53 74 61 74    75 73 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | StatusFromNtStatus@4.ntdll.dll.. | 
| 38d80 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 38da0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......54........`..... | 
| 38dc0 |  00 00 4c 01 c5 e8 8a 41 22 00 00 00 5a 03 0c 00    5f 52 74 6c 53 65 74 4c 61 73 74 57 69 6e 33 32  | ..L....A"...Z..._RtlSetLastWin32 | 
| 38de0 |  45 72 72 6f 72 40 34 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | Error@4.ntdll.dll.ntdll.dll/.... | 
| 38e00 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 38e20 |  20 20 36 31 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 29 00 00 00 59 03  | ..61........`.......L....A)...Y. | 
| 38e40 |  0c 00 5f 52 74 6c 53 65 74 49 6f 43 6f 6d 70 6c    65 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 40 31 32  | .._RtlSetIoCompletionCallback@12 | 
| 38e60 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 38e80 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20  | 622597..............0.......55.. | 
| 38ea0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 23 00 00 00 58 03 0c 00 5f 52 74 6c  | ......`.......L....A#...X..._Rtl | 
| 38ec0 |  53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 41 63    6c 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | SetInformationAcl@16.ntdll.dll.. | 
| 38ee0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 38f00 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......56........`..... | 
| 38f20 |  00 00 4c 01 c5 e8 8a 41 24 00 00 00 57 03 0c 00    5f 52 74 6c 53 65 74 48 65 61 70 49 6e 66 6f 72  | ..L....A$...W..._RtlSetHeapInfor | 
| 38f40 |  6d 61 74 69 6f 6e 40 31 36 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | mation@16.ntdll.dll.ntdll.dll/.. | 
| 38f60 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 38f80 |  20 20 20 20 36 34 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2c 00 00 00  | ....64........`.......L....A,... | 
| 38fa0 |  56 03 0c 00 5f 52 74 6c 53 65 74 47 72 6f 75 70    53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74  | V..._RtlSetGroupSecurityDescript | 
| 38fc0 |  6f 72 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | or@12.ntdll.dll.ntdll.dll/...... | 
| 38fe0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 39000 |  36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 28 00 00 00 55 03 0c 00  | 60........`.......L....A(...U... | 
| 39020 |  5f 52 74 6c 53 65 74 45 6e 76 69 72 6f 6e 6d 65    6e 74 56 61 72 69 61 62 6c 65 40 31 32 00 6e 74  | _RtlSetEnvironmentVariable@12.nt | 
| 39040 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 39060 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20  | 97..............0.......58...... | 
| 39080 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    26 00 00 00 54 03 0c 00 5f 52 74 6c 53 65 74 45  | ..`.......L....A&...T..._RtlSetE | 
| 390a0 |  6e 76 69 72 6f 6e 6d 65 6e 74 53 74 72 69 6e 67    73 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | nvironmentStrings@8.ntdll.dll.nt | 
| 390c0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 390e0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 33    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......63........`....... | 
| 39100 |  4c 01 c5 e8 8a 41 2b 00 00 00 53 03 0c 00 5f 52    74 6c 53 65 74 44 61 63 6c 53 65 63 75 72 69 74  | L....A+...S..._RtlSetDaclSecurit | 
| 39120 |  79 44 65 73 63 72 69 70 74 6f 72 40 31 36 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | yDescriptor@16.ntdll.dll..ntdll. | 
| 39140 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 39160 |  20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......58........`.......L... | 
| 39180 |  8a 41 26 00 00 00 52 03 0c 00 5f 52 74 6c 53 65    74 43 75 72 72 65 6e 74 45 6e 76 69 72 6f 6e 6d  | .A&...R..._RtlSetCurrentEnvironm | 
| 391a0 |  65 6e 74 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ent@8.ntdll.dll.ntdll.dll/...... | 
| 391c0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 391e0 |  35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 26 00 00 00 51 03 0c 00  | 58........`.......L....A&...Q... | 
| 39200 |  5f 52 74 6c 53 65 74 43 75 72 72 65 6e 74 44 69    72 65 63 74 6f 72 79 5f 55 40 34 00 6e 74 64 6c  | _RtlSetCurrentDirectory_U@4.ntdl | 
| 39220 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 39240 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 36 34 20 20 20 20 20 20 20 20  | ..............0.......64........ | 
| 39260 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2c 00    00 00 50 03 0c 00 5f 52 74 6c 53 65 74 43 72 69  | `.......L....A,...P..._RtlSetCri | 
| 39280 |  74 69 63 61 6c 53 65 63 74 69 6f 6e 53 70 69 6e    43 6f 75 6e 74 40 38 00 6e 74 64 6c 6c 2e 64 6c  | ticalSectionSpinCount@8.ntdll.dl | 
| 392a0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 392c0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 36 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......66........`... | 
| 392e0 |  ff ff 00 00 4c 01 c5 e8 8a 41 2e 00 00 00 4f 03    0c 00 5f 52 74 6c 53 65 74 43 6f 6e 74 72 6f 6c  | ....L....A....O..._RtlSetControl | 
| 39300 |  53 65 63 75 72 69 74 79 44 65 73 63 72 69 70 74    6f 72 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | SecurityDescriptor@12.ntdll.dll. | 
| 39320 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 39340 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......45........`..... | 
| 39360 |  00 00 4c 01 c5 e8 8a 41 19 00 00 00 4e 03 0c 00    5f 52 74 6c 53 65 74 42 69 74 73 40 31 32 00 6e  | ..L....A....N..._RtlSetBits@12.n | 
| 39380 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 393a0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 39 20 20 20 20  | 2597..............0.......69.... | 
| 393c0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 31 00 00 00 4d 03 0c 00 5f 52 74 6c 53 65  | ....`.......L....A1...M..._RtlSe | 
| 393e0 |  74 41 74 74 72 69 62 75 74 65 73 53 65 63 75 72    69 74 79 44 65 73 63 72 69 70 74 6f 72 40 31 32  | tAttributesSecurityDescriptor@12 | 
| 39400 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 39420 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20  | 622597..............0.......47.. | 
| 39440 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1b 00 00 00 4c 03 0c 00 5f 52 74 6c  | ......`.......L....A....L..._Rtl | 
| 39460 |  53 65 74 41 6c 6c 42 69 74 73 40 34 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | SetAllBits@4.ntdll.dll..ntdll.dl | 
| 39480 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 394a0 |  30 20 20 20 20 20 20 20 36 32 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......62........`.......L....A | 
| 394c0 |  2a 00 00 00 4a 03 0c 00 5f 52 74 6c 53 65 6c 66    52 65 6c 61 74 69 76 65 54 6f 41 62 73 6f 6c 75  | *...J..._RtlSelfRelativeToAbsolu | 
| 394e0 |  74 65 53 44 40 34 34 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | teSD@44.ntdll.dll.ntdll.dll/.... | 
| 39500 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 39520 |  20 20 36 32 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 2a 00 00 00 4b 03  | ..62........`.......L....A*...K. | 
| 39540 |  0c 00 5f 52 74 6c 53 65 6c 66 52 65 6c 61 74 69    76 65 54 6f 41 62 73 6f 6c 75 74 65 53 44 32 40  | .._RtlSelfRelativeToAbsoluteSD2@ | 
| 39560 |  38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 8.ntdll.dll.ntdll.dll/......1099 | 
| 39580 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20  | 622597..............0.......54.. | 
| 395a0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 22 00 00 00 49 03 0c 00 5f 52 74 6c  | ......`.......L....A"...I..._Rtl | 
| 395c0 |  53 65 65 6b 4d 65 6d 6f 72 79 53 74 72 65 61 6d    40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | SeekMemoryStream@20.ntdll.dll.nt | 
| 395e0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 39600 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......59........`....... | 
| 39620 |  4c 01 c5 e8 8a 41 27 00 00 00 48 03 0c 00 5f 52    74 6c 53 65 63 6f 6e 64 73 53 69 6e 63 65 31 39  | L....A'...H..._RtlSecondsSince19 | 
| 39640 |  38 30 54 6f 54 69 6d 65 40 38 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | 80ToTime@8.ntdll.dll..ntdll.dll/ | 
| 39660 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 39680 |  20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00  | ......59........`.......L....A'. | 
| 396a0 |  00 00 47 03 0c 00 5f 52 74 6c 53 65 63 6f 6e 64    73 53 69 6e 63 65 31 39 37 30 54 6f 54 69 6d 65  | ..G..._RtlSecondsSince1970ToTime | 
| 396c0 |  40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @8.ntdll.dll..ntdll.dll/......10 | 
| 396e0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39  | 99622597..............0.......59 | 
| 39700 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 27 00 00 00 46 03 0c 00 5f 52  | ........`.......L....A'...F..._R | 
| 39720 |  74 6c 52 75 6e 45 6e 63 6f 64 65 55 6e 69 63 6f    64 65 53 74 72 69 6e 67 40 38 00 6e 74 64 6c 6c  | tlRunEncodeUnicodeString@8.ntdll | 
| 39740 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 39760 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20  | ..............0.......59........ | 
| 39780 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00    00 00 45 03 0c 00 5f 52 74 6c 52 75 6e 44 65 63  | `.......L....A'...E..._RtlRunDec | 
| 397a0 |  6f 64 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67    40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | odeUnicodeString@8.ntdll.dll..nt | 
| 397c0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 397e0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......55........`....... | 
| 39800 |  4c 01 c5 e8 8a 41 23 00 00 00 44 03 0c 00 5f 52    74 6c 52 65 76 65 72 74 4d 65 6d 6f 72 79 53 74  | L....A#...D..._RtlRevertMemorySt | 
| 39820 |  72 65 61 6d 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ream@4.ntdll.dll..ntdll.dll/.... | 
| 39840 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 39860 |  20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00 43 03  | ..58........`.......L....A&...C. | 
| 39880 |  0c 00 5f 52 74 6c 52 65 73 74 6f 72 65 4c 61 73    74 57 69 6e 33 32 45 72 72 6f 72 40 34 00 6e 74  | .._RtlRestoreLastWin32Error@4.nt | 
| 398a0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 398c0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20  | 97..............0.......57...... | 
| 398e0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    25 00 00 00 42 03 0c 00 5f 52 74 6c 52 65 73 65  | ..`.......L....A%...B..._RtlRese | 
| 39900 |  74 52 74 6c 54 72 61 6e 73 6c 61 74 69 6f 6e 73    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | tRtlTranslations@4.ntdll.dll..nt | 
| 39920 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 39940 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 37    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......67........`....... | 
| 39960 |  4c 01 c5 e8 8a 41 2f 00 00 00 41 03 0c 00 5f 52    74 6c 52 65 6d 6f 76 65 56 65 63 74 6f 72 65 64  | L....A/...A..._RtlRemoveVectored | 
| 39980 |  45 78 63 65 70 74 69 6f 6e 48 61 6e 64 6c 65 72    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | ExceptionHandler@4.ntdll.dll..nt | 
| 399a0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 399c0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 36    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......66........`....... | 
| 399e0 |  4c 01 c5 e8 8a 41 2e 00 00 00 40 03 0c 00 5f 52    74 6c 52 65 6d 6f 76 65 56 65 63 74 6f 72 65 64  | L....A....@..._RtlRemoveVectored | 
| 39a00 |  43 6f 6e 74 69 6e 75 65 48 61 6e 64 6c 65 72 40    34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | ContinueHandler@4.ntdll.dll.ntdl | 
| 39a20 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 39a40 |  20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......48........`.......L. | 
| 39a60 |  c5 e8 8a 41 1c 00 00 00 3f 03 0c 00 5f 52 74 6c    52 65 6d 6f 74 65 43 61 6c 6c 40 32 38 00 6e 74  | ...A....?..._RtlRemoteCall@28.nt | 
| 39a80 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 39aa0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20  | 97..............0.......52...... | 
| 39ac0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    20 00 00 00 3e 03 0c 00 5f 52 74 6c 52 65 6c 65  | ..`.......L....A....>..._RtlRele | 
| 39ae0 |  61 73 65 52 65 73 6f 75 72 63 65 40 34 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | aseResource@4.ntdll.dll.ntdll.dl | 
| 39b00 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 39b20 |  30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......56........`.......L....A | 
| 39b40 |  24 00 00 00 3d 03 0c 00 5f 52 74 6c 52 65 6c 65    61 73 65 52 65 6c 61 74 69 76 65 4e 61 6d 65 40  | $...=..._RtlReleaseRelativeName@ | 
| 39b60 |  34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 4.ntdll.dll.ntdll.dll/......1099 | 
| 39b80 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20  | 622597..............0.......53.. | 
| 39ba0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 21 00 00 00 3c 03 0c 00 5f 52 74 6c  | ......`.......L....A!...<..._Rtl | 
| 39bc0 |  52 65 6c 65 61 73 65 50 72 69 76 69 6c 65 67 65    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | ReleasePrivilege@4.ntdll.dll..nt | 
| 39be0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 39c00 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......51........`....... | 
| 39c20 |  4c 01 c5 e8 8a 41 1f 00 00 00 3b 03 0c 00 5f 52    74 6c 52 65 6c 65 61 73 65 50 65 62 4c 6f 63 6b  | L....A....;..._RtlReleasePebLock | 
| 39c40 |  40 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @0.ntdll.dll..ntdll.dll/......10 | 
| 39c60 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36  | 99622597..............0.......56 | 
| 39c80 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 24 00 00 00 3a 03 0c 00 5f 52  | ........`.......L....A$...:..._R | 
| 39ca0 |  74 6c 52 65 6c 65 61 73 65 4d 65 6d 6f 72 79 53    74 72 65 61 6d 40 34 00 6e 74 64 6c 6c 2e 64 6c  | tlReleaseMemoryStream@4.ntdll.dl | 
| 39cc0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 39ce0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 31 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......61........`... | 
| 39d00 |  ff ff 00 00 4c 01 c5 e8 8a 41 29 00 00 00 39 03    0c 00 5f 52 74 6c 52 65 6c 65 61 73 65 41 63 74  | ....L....A)...9..._RtlReleaseAct | 
| 39d20 |  69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 40 34    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | ivationContext@4.ntdll.dll..ntdl | 
| 39d40 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 39d60 |  20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......50........`.......L. | 
| 39d80 |  c5 e8 8a 41 1e 00 00 00 38 03 0c 00 5f 52 74 6c    52 65 67 69 73 74 65 72 57 61 69 74 40 32 34 00  | ...A....8..._RtlRegisterWait@24. | 
| 39da0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 39dc0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 37 30 20 20 20 20  | 2597..............0.......70.... | 
| 39de0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 32 00 00 00 37 03 0c 00 5f 52 74 6c 52 65  | ....`.......L....A2...7..._RtlRe | 
| 39e00 |  67 69 73 74 65 72 53 65 63 75 72 65 4d 65 6d 6f    72 79 43 61 63 68 65 43 61 6c 6c 62 61 63 6b 40  | gisterSecureMemoryCacheCallback@ | 
| 39e20 |  34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 4.ntdll.dll.ntdll.dll/......1099 | 
| 39e40 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20  | 622597..............0.......50.. | 
| 39e60 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1e 00 00 00 36 03 0c 00 5f 52 74 6c  | ......`.......L....A....6..._Rtl | 
| 39e80 |  52 65 61 6c 53 75 63 63 65 73 73 6f 72 40 34 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | RealSuccessor@4.ntdll.dll.ntdll. | 
| 39ea0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 39ec0 |  20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......52........`.......L... | 
| 39ee0 |  8a 41 20 00 00 00 35 03 0c 00 5f 52 74 6c 52 65    61 6c 50 72 65 64 65 63 65 73 73 6f 72 40 34 00  | .A....5..._RtlRealPredecessor@4. | 
| 39f00 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 39f20 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 36 20 20 20 20  | 2597..............0.......66.... | 
| 39f40 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 2e 00 00 00 34 03 0c 00 5f 52 74 6c 52 65  | ....`.......L....A....4..._RtlRe | 
| 39f60 |  61 64 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65    6d 6f 72 79 53 74 72 65 61 6d 40 31 36 00 6e 74  | adOutOfProcessMemoryStream@16.nt | 
| 39f80 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 39fa0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20  | 97..............0.......54...... | 
| 39fc0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    22 00 00 00 33 03 0c 00 5f 52 74 6c 52 65 61 64  | ..`.......L....A"...3..._RtlRead | 
| 39fe0 |  4d 65 6d 6f 72 79 53 74 72 65 61 6d 40 31 36 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | MemoryStream@16.ntdll.dll.ntdll. | 
| 3a000 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 3a020 |  20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......52........`.......L... | 
| 3a040 |  8a 41 20 00 00 00 32 03 0c 00 5f 52 74 6c 52 65    41 6c 6c 6f 63 61 74 65 48 65 61 70 40 31 36 00  | .A....2..._RtlReAllocateHeap@16. | 
| 3a060 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 3a080 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20  | 2597..............0.......45.... | 
| 3a0a0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 19 00 00 00 31 03 0c 00 5f 52 74 6c 52 61  | ....`.......L....A....1..._RtlRa | 
| 3a0c0 |  6e 64 6f 6d 45 78 40 34 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ndomEx@4.ntdll.dll..ntdll.dll/.. | 
| 3a0e0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 3a100 |  20 20 20 20 34 33 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 17 00 00 00  | ....43........`.......L....A.... | 
| 3a120 |  30 03 0c 00 5f 52 74 6c 52 61 6e 64 6f 6d 40 34    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | 0..._RtlRandom@4.ntdll.dll..ntdl | 
| 3a140 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3a160 |  20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......48........`.......L. | 
| 3a180 |  c5 e8 8a 41 1c 00 00 00 2f 03 0c 00 5f 52 74 6c    52 61 69 73 65 53 74 61 74 75 73 40 34 00 6e 74  | ...A..../..._RtlRaiseStatus@4.nt | 
| 3a1a0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 3a1c0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20  | 97..............0.......51...... | 
| 3a1e0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1f 00 00 00 2e 03 0c 00 5f 52 74 6c 52 61 69 73  | ..`.......L....A........_RtlRais | 
| 3a200 |  65 45 78 63 65 70 74 69 6f 6e 40 34 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | eException@4.ntdll.dll..ntdll.dl | 
| 3a220 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 3a240 |  30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......51........`.......L....A | 
| 3a260 |  1f 00 00 00 2d 03 0c 00 5f 52 74 6c 51 75 65 75    65 57 6f 72 6b 49 74 65 6d 40 31 32 00 6e 74 64  | ....-..._RtlQueueWorkItem@12.ntd | 
| 3a280 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 3a2a0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20  | 97..............0.......57...... | 
| 3a2c0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    25 00 00 00 2c 03 0c 00 5f 52 74 6c 51 75 65 75  | ..`.......L....A%...,..._RtlQueu | 
| 3a2e0 |  65 41 70 63 57 6f 77 36 34 54 68 72 65 61 64 40    32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | eApcWow64Thread@20.ntdll.dll..nt | 
| 3a300 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 3a320 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 31    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......61........`....... | 
| 3a340 |  4c 01 c5 e8 8a 41 29 00 00 00 2b 03 0c 00 5f 52    74 6c 51 75 65 72 79 54 69 6d 65 5a 6f 6e 65 49  | L....A)...+..._RtlQueryTimeZoneI | 
| 3a360 |  6e 66 6f 72 6d 61 74 69 6f 6e 40 34 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | nformation@4.ntdll.dll..ntdll.dl | 
| 3a380 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 3a3a0 |  30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......50........`.......L....A | 
| 3a3c0 |  1e 00 00 00 2a 03 0c 00 5f 52 74 6c 51 75 65 72    79 54 61 67 48 65 61 70 40 32 30 00 6e 74 64 6c  | ....*..._RtlQueryTagHeap@20.ntdl | 
| 3a3e0 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 3a400 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20  | ..............0.......57........ | 
| 3a420 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00    00 00 29 03 0c 00 5f 52 74 6c 51 75 65 72 79 53  | `.......L....A%...)..._RtlQueryS | 
| 3a440 |  65 63 75 72 69 74 79 4f 62 6a 65 63 74 40 32 30    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | ecurityObject@20.ntdll.dll..ntdl | 
| 3a460 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3a480 |  20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......57........`.......L. | 
| 3a4a0 |  c5 e8 8a 41 25 00 00 00 28 03 0c 00 5f 52 74 6c    51 75 65 72 79 52 65 67 69 73 74 72 79 56 61 6c  | ...A%...(..._RtlQueryRegistryVal | 
| 3a4c0 |  75 65 73 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ues@20.ntdll.dll..ntdll.dll/.... | 
| 3a4e0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 3a500 |  20 20 36 34 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 2c 00 00 00 27 03  | ..64........`.......L....A,...'. | 
| 3a520 |  0c 00 5f 52 74 6c 51 75 65 72 79 50 72 6f 63 65    73 73 4c 6f 63 6b 49 6e 66 6f 72 6d 61 74 69 6f  | .._RtlQueryProcessLockInformatio | 
| 3a540 |  6e 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | n@4.ntdll.dll.ntdll.dll/......10 | 
| 3a560 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 34  | 99622597..............0.......64 | 
| 3a580 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 2c 00 00 00 26 03 0c 00 5f 52  | ........`.......L....A,...&..._R | 
| 3a5a0 |  74 6c 51 75 65 72 79 50 72 6f 63 65 73 73 48 65    61 70 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 34 00  | tlQueryProcessHeapInformation@4. | 
| 3a5c0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 3a5e0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 36 20 20 20 20  | 2597..............0.......66.... | 
| 3a600 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 2e 00 00 00 25 03 0c 00 5f 52 74 6c 51 75  | ....`.......L....A....%..._RtlQu | 
| 3a620 |  65 72 79 50 72 6f 63 65 73 73 44 65 62 75 67 49    6e 66 6f 72 6d 61 74 69 6f 6e 40 31 32 00 6e 74  | eryProcessDebugInformation@12.nt | 
| 3a640 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 3a660 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 39 20 20 20 20 20 20  | 97..............0.......69...... | 
| 3a680 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    31 00 00 00 24 03 0c 00 5f 52 74 6c 51 75 65 72  | ..`.......L....A1...$..._RtlQuer | 
| 3a6a0 |  79 50 72 6f 63 65 73 73 42 61 63 6b 54 72 61 63    65 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 34 00 6e  | yProcessBackTraceInformation@4.n | 
| 3a6c0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 3a6e0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 34 20 20 20 20  | 2597..............0.......64.... | 
| 3a700 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 2c 00 00 00 23 03 0c 00 5f 52 74 6c 51 75  | ....`.......L....A,...#..._RtlQu | 
| 3a720 |  65 72 79 49 6e 74 65 72 66 61 63 65 4d 65 6d 6f    72 79 53 74 72 65 61 6d 40 31 32 00 6e 74 64 6c  | eryInterfaceMemoryStream@12.ntdl | 
| 3a740 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 3a760 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 37 37 20 20 20 20 20 20 20 20  | ..............0.......77........ | 
| 3a780 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 39 00    00 00 22 03 0c 00 5f 52 74 6c 51 75 65 72 79 49  | `.......L....A9..."..._RtlQueryI | 
| 3a7a0 |  6e 66 6f 72 6d 61 74 69 6f 6e 41 63 74 69 76 65    41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78  | nformationActiveActivationContex | 
| 3a7c0 |  74 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | t@16.ntdll.dll..ntdll.dll/...... | 
| 3a7e0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 3a800 |  37 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 33 00 00 00 21 03 0c 00  | 71........`.......L....A3...!... | 
| 3a820 |  5f 52 74 6c 51 75 65 72 79 49 6e 66 6f 72 6d 61    74 69 6f 6e 41 63 74 69 76 61 74 69 6f 6e 43 6f  | _RtlQueryInformationActivationCo | 
| 3a840 |  6e 74 65 78 74 40 32 38 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ntext@28.ntdll.dll..ntdll.dll/.. | 
| 3a860 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 3a880 |  20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00  | ....57........`.......L....A%... | 
| 3a8a0 |  20 03 0c 00 5f 52 74 6c 51 75 65 72 79 49 6e 66    6f 72 6d 61 74 69 6f 6e 41 63 6c 40 31 36 00 6e  | ...._RtlQueryInformationAcl@16.n | 
| 3a8c0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 3a8e0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20  | 2597..............0.......58.... | 
| 3a900 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 26 00 00 00 1f 03 0c 00 5f 52 74 6c 51 75  | ....`.......L....A&......._RtlQu | 
| 3a920 |  65 72 79 48 65 61 70 49 6e 66 6f 72 6d 61 74 69    6f 6e 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | eryHeapInformation@20.ntdll.dll. | 
| 3a940 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 3a960 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    36 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......64........`..... | 
| 3a980 |  00 00 4c 01 c5 e8 8a 41 2c 00 00 00 1e 03 0c 00    5f 52 74 6c 51 75 65 72 79 45 6e 76 69 72 6f 6e  | ..L....A,......._RtlQueryEnviron | 
| 3a9a0 |  6d 65 6e 74 56 61 72 69 61 62 6c 65 5f 55 40 31    32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | mentVariable_U@12.ntdll.dll.ntdl | 
| 3a9c0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3a9e0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......52........`.......L. | 
| 3aa00 |  c5 e8 8a 41 20 00 00 00 1d 03 0c 00 5f 52 74 6c    51 75 65 72 79 44 65 70 74 68 53 4c 69 73 74 40  | ...A........_RtlQueryDepthSList@ | 
| 3aa20 |  34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 4.ntdll.dll.ntdll.dll/......1099 | 
| 3aa40 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20  | 622597..............0.......58.. | 
| 3aa60 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 26 00 00 00 1c 03 0c 00 5f 52 74 6c  | ......`.......L....A&......._Rtl | 
| 3aa80 |  51 75 65 72 79 41 74 6f 6d 49 6e 41 74 6f 6d 54    61 62 6c 65 40 32 34 00 6e 74 64 6c 6c 2e 64 6c  | QueryAtomInAtomTable@24.ntdll.dl | 
| 3aaa0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 3aac0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......46........`... | 
| 3aae0 |  ff ff 00 00 4c 01 c5 e8 8a 41 1a 00 00 00 1b 03    0c 00 5f 52 74 6c 50 75 73 68 46 72 61 6d 65 40  | ....L....A........_RtlPushFrame@ | 
| 3ab00 |  34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 4.ntdll.dll.ntdll.dll/......1099 | 
| 3ab20 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20  | 622597..............0.......48.. | 
| 3ab40 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1c 00 00 00 1a 03 0c 00 5f 52 74 6c  | ......`.......L....A........_Rtl | 
| 3ab60 |  50 72 6f 74 65 63 74 48 65 61 70 40 38 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | ProtectHeap@8.ntdll.dll.ntdll.dl | 
| 3ab80 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 3aba0 |  30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......57........`.......L....A | 
| 3abc0 |  25 00 00 00 19 03 0c 00 5f 52 74 6c 50 72 65 66    69 78 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 40  | %......._RtlPrefixUnicodeString@ | 
| 3abe0 |  31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 12.ntdll.dll..ntdll.dll/......10 | 
| 3ac00 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30  | 99622597..............0.......50 | 
| 3ac20 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1e 00 00 00 18 03 0c 00 5f 52  | ........`.......L....A........_R | 
| 3ac40 |  74 6c 50 72 65 66 69 78 53 74 72 69 6e 67 40 31    32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | tlPrefixString@12.ntdll.dll.ntdl | 
| 3ac60 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3ac80 |  20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......45........`.......L. | 
| 3aca0 |  c5 e8 8a 41 19 00 00 00 17 03 0c 00 5f 52 74 6c    50 6f 70 46 72 61 6d 65 40 34 00 6e 74 64 6c 6c  | ...A........_RtlPopFrame@4.ntdll | 
| 3acc0 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 3ace0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20  | ..............0.......55........ | 
| 3ad00 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 23 00    00 00 16 03 0c 00 5f 52 74 6c 50 69 6e 41 74 6f  | `.......L....A#......._RtlPinAto | 
| 3ad20 |  6d 49 6e 41 74 6f 6d 54 61 62 6c 65 40 38 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | mInAtomTable@8.ntdll.dll..ntdll. | 
| 3ad40 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 3ad60 |  20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......51........`.......L... | 
| 3ad80 |  8a 41 1f 00 00 00 15 03 0c 00 5f 52 74 6c 50 63    54 6f 46 69 6c 65 48 65 61 64 65 72 40 38 00 6e  | .A........_RtlPcToFileHeader@8.n | 
| 3ada0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 3adc0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20  | 2597..............0.......52.... | 
| 3ade0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 20 00 00 00 14 03 0c 00 5f 52 74 6c 4f 70  | ....`.......L....A........_RtlOp | 
| 3ae00 |  65 6e 43 75 72 72 65 6e 74 55 73 65 72 40 38 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | enCurrentUser@8.ntdll.dll.ntdll. | 
| 3ae20 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 3ae40 |  20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......51........`.......L... | 
| 3ae60 |  8a 41 1f 00 00 00 13 03 0c 00 5f 52 74 6c 4f 65    6d 54 6f 55 6e 69 63 6f 64 65 4e 40 32 30 00 6e  | .A........_RtlOemToUnicodeN@20.n | 
| 3ae80 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 3aea0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 32 20 20 20 20  | 2597..............0.......62.... | 
| 3aec0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 2a 00 00 00 12 03 0c 00 5f 52 74 6c 4f 65  | ....`.......L....A*......._RtlOe | 
| 3aee0 |  6d 53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65    53 74 72 69 6e 67 40 31 32 00 6e 74 64 6c 6c 2e  | mStringToUnicodeString@12.ntdll. | 
| 3af00 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 3af20 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a  | ............0.......59........`. | 
| 3af40 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00    11 03 0c 00 5f 52 74 6c 4f 65 6d 53 74 72 69 6e  | ......L....A'......._RtlOemStrin | 
| 3af60 |  67 54 6f 55 6e 69 63 6f 64 65 53 69 7a 65 40 34    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | gToUnicodeSize@4.ntdll.dll..ntdl | 
| 3af80 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3afa0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......52........`.......L. | 
| 3afc0 |  c5 e8 8a 41 20 00 00 00 10 03 0c 00 5f 52 74 6c    4e 75 6d 62 65 72 4f 66 53 65 74 42 69 74 73 40  | ...A........_RtlNumberOfSetBits@ | 
| 3afe0 |  34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 4.ntdll.dll.ntdll.dll/......1099 | 
| 3b000 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20  | 622597..............0.......54.. | 
| 3b020 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 22 00 00 00 0f 03 0c 00 5f 52 74 6c  | ......`.......L....A"......._Rtl | 
| 3b040 |  4e 75 6d 62 65 72 4f 66 43 6c 65 61 72 42 69 74    73 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | NumberOfClearBits@4.ntdll.dll.nt | 
| 3b060 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 3b080 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 36    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......66........`....... | 
| 3b0a0 |  4c 01 c5 e8 8a 41 2e 00 00 00 0e 03 0c 00 5f 52    74 6c 4e 75 6d 62 65 72 47 65 6e 65 72 69 63 54  | L....A........_RtlNumberGenericT | 
| 3b0c0 |  61 62 6c 65 45 6c 65 6d 65 6e 74 73 41 76 6c 40    34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | ableElementsAvl@4.ntdll.dll.ntdl | 
| 3b0e0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3b100 |  20 20 20 20 30 20 20 20 20 20 20 20 36 33 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......63........`.......L. | 
| 3b120 |  c5 e8 8a 41 2b 00 00 00 0d 03 0c 00 5f 52 74 6c    4e 75 6d 62 65 72 47 65 6e 65 72 69 63 54 61 62  | ...A+......._RtlNumberGenericTab | 
| 3b140 |  6c 65 45 6c 65 6d 65 6e 74 73 40 34 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | leElements@4.ntdll.dll..ntdll.dl | 
| 3b160 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 3b180 |  30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......60........`.......L....A | 
| 3b1a0 |  28 00 00 00 0c 03 0c 00 5f 52 74 6c 4e 74 53 74    61 74 75 73 54 6f 44 6f 73 45 72 72 6f 72 4e 6f  | (......._RtlNtStatusToDosErrorNo | 
| 3b1c0 |  54 65 62 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | Teb@4.ntdll.dll.ntdll.dll/...... | 
| 3b1e0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 3b200 |  35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 23 00 00 00 0b 03 0c 00  | 55........`.......L....A#....... | 
| 3b220 |  5f 52 74 6c 4e 74 53 74 61 74 75 73 54 6f 44 6f    73 45 72 72 6f 72 40 34 00 6e 74 64 6c 6c 2e 64  | _RtlNtStatusToDosError@4.ntdll.d | 
| 3b240 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 3b260 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 31 20 20 20 20 20 20 20 20 60 0a  | ............0.......61........`. | 
| 3b280 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 29 00 00 00    0a 03 0c 00 5f 52 74 6c 4e 74 50 61 74 68 4e 61  | ......L....A)......._RtlNtPathNa | 
| 3b2a0 |  6d 65 54 6f 44 6f 73 50 61 74 68 4e 61 6d 65 40    31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | meToDosPathName@16.ntdll.dll..nt | 
| 3b2c0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 3b2e0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......59........`....... | 
| 3b300 |  4c 01 c5 e8 8a 41 27 00 00 00 09 03 0c 00 5f 52    74 6c 4e 6f 72 6d 61 6c 69 7a 65 50 72 6f 63 65  | L....A'......._RtlNormalizeProce | 
| 3b320 |  73 73 50 61 72 61 6d 73 40 34 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ssParams@4.ntdll.dll..ntdll.dll/ | 
| 3b340 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 3b360 |  20 20 20 20 20 20 37 38 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 3a 00  | ......78........`.......L....A:. | 
| 3b380 |  00 00 08 03 0c 00 5f 52 74 6c 4e 65 77 53 65 63    75 72 69 74 79 4f 62 6a 65 63 74 57 69 74 68 4d  | ......_RtlNewSecurityObjectWithM | 
| 3b3a0 |  75 6c 74 69 70 6c 65 49 6e 68 65 72 69 74 61 6e    63 65 40 33 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | ultipleInheritance@36.ntdll.dll. | 
| 3b3c0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 3b3e0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......57........`..... | 
| 3b400 |  00 00 4c 01 c5 e8 8a 41 25 00 00 00 07 03 0c 00    5f 52 74 6c 4e 65 77 53 65 63 75 72 69 74 79 4f  | ..L....A%......._RtlNewSecurityO | 
| 3b420 |  62 6a 65 63 74 45 78 40 33 32 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | bjectEx@32.ntdll.dll..ntdll.dll/ | 
| 3b440 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 3b460 |  20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 23 00  | ......55........`.......L....A#. | 
| 3b480 |  00 00 06 03 0c 00 5f 52 74 6c 4e 65 77 53 65 63    75 72 69 74 79 4f 62 6a 65 63 74 40 32 34 00 6e  | ......_RtlNewSecurityObject@24.n | 
| 3b4a0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 3b4c0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 32 20 20 20 20  | 2597..............0.......62.... | 
| 3b4e0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 2a 00 00 00 05 03 0c 00 5f 52 74 6c 4e 65  | ....`.......L....A*......._RtlNe | 
| 3b500 |  77 53 65 63 75 72 69 74 79 47 72 61 6e 74 65 64    41 63 63 65 73 73 40 32 34 00 6e 74 64 6c 6c 2e  | wSecurityGrantedAccess@24.ntdll. | 
| 3b520 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 3b540 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a  | ............0.......63........`. | 
| 3b560 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2b 00 00 00    04 03 0c 00 5f 52 74 6c 4e 65 77 49 6e 73 74 61  | ......L....A+......._RtlNewInsta | 
| 3b580 |  6e 63 65 53 65 63 75 72 69 74 79 4f 62 6a 65 63    74 40 34 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | nceSecurityObject@40.ntdll.dll.. | 
| 3b5a0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 3b5c0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......54........`..... | 
| 3b5e0 |  00 00 4c 01 c5 e8 8a 41 22 00 00 00 03 03 0c 00    5f 52 74 6c 4d 75 6c 74 69 70 6c 65 46 72 65 65  | ..L....A"......._RtlMultipleFree | 
| 3b600 |  48 65 61 70 40 31 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | Heap@16.ntdll.dll.ntdll.dll/.... | 
| 3b620 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 3b640 |  20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00 02 03  | ..58........`.......L....A&..... | 
| 3b660 |  0c 00 5f 52 74 6c 4d 75 6c 74 69 70 6c 65 41 6c    6c 6f 63 61 74 65 48 65 61 70 40 32 30 00 6e 74  | .._RtlMultipleAllocateHeap@20.nt | 
| 3b680 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 3b6a0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20  | 97..............0.......60...... | 
| 3b6c0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    28 00 00 00 01 03 0c 00 5f 52 74 6c 4d 75 6c 74  | ..`.......L....A(......._RtlMult | 
| 3b6e0 |  69 42 79 74 65 54 6f 55 6e 69 63 6f 64 65 53 69    7a 65 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | iByteToUnicodeSize@12.ntdll.dll. | 
| 3b700 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 3b720 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......57........`..... | 
| 3b740 |  00 00 4c 01 c5 e8 8a 41 25 00 00 00 00 03 0c 00    5f 52 74 6c 4d 75 6c 74 69 42 79 74 65 54 6f 55  | ..L....A%......._RtlMultiByteToU | 
| 3b760 |  6e 69 63 6f 64 65 4e 40 32 30 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | nicodeN@20.ntdll.dll..ntdll.dll/ | 
| 3b780 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 3b7a0 |  20 20 20 20 20 20 36 38 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 30 00  | ......68........`.......L....A0. | 
| 3b7c0 |  00 00 ff 02 0c 00 5f 52 74 6c 4d 75 6c 74 69 41    70 70 65 6e 64 55 6e 69 63 6f 64 65 53 74 72 69  | ......_RtlMultiAppendUnicodeStri | 
| 3b7e0 |  6e 67 42 75 66 66 65 72 40 31 32 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ngBuffer@12.ntdll.dll.ntdll.dll/ | 
| 3b800 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 3b820 |  20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1c 00  | ......48........`.......L....A.. | 
| 3b840 |  00 00 fe 02 0c 00 5f 52 74 6c 4d 6f 76 65 4d 65    6d 6f 72 79 40 31 32 00 6e 74 64 6c 6c 2e 64 6c  | ......_RtlMoveMemory@12.ntdll.dl | 
| 3b860 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 3b880 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 33 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......63........`... | 
| 3b8a0 |  ff ff 00 00 4c 01 c5 e8 8a 41 2b 00 00 00 fd 02    0c 00 5f 52 74 6c 4d 61 70 53 65 63 75 72 69 74  | ....L....A+......._RtlMapSecurit | 
| 3b8c0 |  79 45 72 72 6f 72 54 6f 4e 74 53 74 61 74 75 73    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | yErrorToNtStatus@4.ntdll.dll..nt | 
| 3b8e0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 3b900 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......51........`....... | 
| 3b920 |  4c 01 c5 e8 8a 41 1f 00 00 00 fc 02 0c 00 5f 52    74 6c 4d 61 70 47 65 6e 65 72 69 63 4d 61 73 6b  | L....A........_RtlMapGenericMask | 
| 3b940 |  40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @8.ntdll.dll..ntdll.dll/......10 | 
| 3b960 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36  | 99622597..............0.......56 | 
| 3b980 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 24 00 00 00 fb 02 0c 00 5f 52  | ........`.......L....A$......._R | 
| 3b9a0 |  74 6c 4d 61 6b 65 53 65 6c 66 52 65 6c 61 74 69    76 65 53 44 40 31 32 00 6e 74 64 6c 6c 2e 64 6c  | tlMakeSelfRelativeSD@12.ntdll.dl | 
| 3b9c0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 3b9e0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 37 30 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......70........`... | 
| 3ba00 |  ff ff 00 00 4c 01 c5 e8 8a 41 32 00 00 00 fa 02    0c 00 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d  | ....L....A2......._RtlLookupElem | 
| 3ba20 |  65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 46    75 6c 6c 41 76 6c 40 31 36 00 6e 74 64 6c 6c 2e  | entGenericTableFullAvl@16.ntdll. | 
| 3ba40 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 3ba60 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 37 20 20 20 20 20 20 20 20 60 0a  | ............0.......67........`. | 
| 3ba80 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2f 00 00 00    f9 02 0c 00 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c  | ......L....A/......._RtlLookupEl | 
| 3baa0 |  65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c    65 46 75 6c 6c 40 31 36 00 6e 74 64 6c 6c 2e 64  | ementGenericTableFull@16.ntdll.d | 
| 3bac0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 3bae0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 35 20 20 20 20 20 20 20 20 60 0a  | ............0.......65........`. | 
| 3bb00 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2d 00 00 00    f8 02 0c 00 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c  | ......L....A-......._RtlLookupEl | 
| 3bb20 |  65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c    65 41 76 6c 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c  | ementGenericTableAvl@8.ntdll.dll | 
| 3bb40 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 3bb60 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 32 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......62........`... | 
| 3bb80 |  ff ff 00 00 4c 01 c5 e8 8a 41 2a 00 00 00 f7 02    0c 00 5f 52 74 6c 4c 6f 6f 6b 75 70 45 6c 65 6d  | ....L....A*......._RtlLookupElem | 
| 3bba0 |  65 6e 74 47 65 6e 65 72 69 63 54 61 62 6c 65 40    38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | entGenericTable@8.ntdll.dll.ntdl | 
| 3bbc0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3bbe0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......59........`.......L. | 
| 3bc00 |  c5 e8 8a 41 27 00 00 00 f6 02 0c 00 5f 52 74 6c    4c 6f 6f 6b 75 70 41 74 6f 6d 49 6e 41 74 6f 6d  | ...A'......._RtlLookupAtomInAtom | 
| 3bc20 |  54 61 62 6c 65 40 31 32 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | Table@12.ntdll.dll..ntdll.dll/.. | 
| 3bc40 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 3bc60 |  20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00  | ....54........`.......L....A"... | 
| 3bc80 |  f5 02 0c 00 5f 52 74 6c 4c 6f 67 53 74 61 63 6b    42 61 63 6b 54 72 61 63 65 40 30 00 6e 74 64 6c  | ...._RtlLogStackBackTrace@0.ntdl | 
| 3bca0 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 3bcc0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20  | ..............0.......60........ | 
| 3bce0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 28 00    00 00 f4 02 0c 00 5f 52 74 6c 4c 6f 63 6b 4d 65  | `.......L....A(......._RtlLockMe | 
| 3bd00 |  6d 6f 72 79 53 74 72 65 61 6d 52 65 67 69 6f 6e    40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | moryStreamRegion@24.ntdll.dll.nt | 
| 3bd20 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 3bd40 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......45........`....... | 
| 3bd60 |  4c 01 c5 e8 8a 41 19 00 00 00 f3 02 0c 00 5f 52    74 6c 4c 6f 63 6b 48 65 61 70 40 34 00 6e 74 64  | L....A........_RtlLockHeap@4.ntd | 
| 3bd80 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 3bda0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20  | 97..............0.......55...... | 
| 3bdc0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    23 00 00 00 f2 02 0c 00 5f 52 74 6c 4c 6f 63 6b  | ..`.......L....A#......._RtlLock | 
| 3bde0 |  42 6f 6f 74 53 74 61 74 75 73 44 61 74 61 40 34    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | BootStatusData@4.ntdll.dll..ntdl | 
| 3be00 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3be20 |  20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......58........`.......L. | 
| 3be40 |  c5 e8 8a 41 26 00 00 00 f1 02 0c 00 5f 52 74 6c    4c 6f 63 61 6c 54 69 6d 65 54 6f 53 79 73 74 65  | ...A&......._RtlLocalTimeToSyste | 
| 3be60 |  6d 54 69 6d 65 40 38 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | mTime@8.ntdll.dll.ntdll.dll/.... | 
| 3be80 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 3bea0 |  20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1a 00 00 00 f0 02  | ..46........`.......L....A...... | 
| 3bec0 |  0c 00 5f 52 74 6c 4c 65 6e 67 74 68 53 69 64 40    34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | .._RtlLengthSid@4.ntdll.dll.ntdl | 
| 3bee0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3bf00 |  20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......61........`.......L. | 
| 3bf20 |  c5 e8 8a 41 29 00 00 00 ef 02 0c 00 5f 52 74 6c    4c 65 6e 67 74 68 53 65 63 75 72 69 74 79 44 65  | ...A)......._RtlLengthSecurityDe | 
| 3bf40 |  73 63 72 69 70 74 6f 72 40 34 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | scriptor@4.ntdll.dll..ntdll.dll/ | 
| 3bf60 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 3bf80 |  20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 22 00  | ......54........`.......L....A". | 
| 3bfa0 |  00 00 ee 02 0c 00 5f 52 74 6c 4c 65 6e 67 74 68    52 65 71 75 69 72 65 64 53 69 64 40 34 00 6e 74  | ......_RtlLengthRequiredSid@4.nt | 
| 3bfc0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 3bfe0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20  | 97..............0.......57...... | 
| 3c000 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    25 00 00 00 ed 02 0c 00 5f 52 74 6c 4c 65 61 76  | ..`.......L....A%......._RtlLeav | 
| 3c020 |  65 43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | eCriticalSection@4.ntdll.dll..nt | 
| 3c040 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 3c060 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......56........`....... | 
| 3c080 |  4c 01 c5 e8 8a 41 24 00 00 00 ec 02 0c 00 5f 52    74 6c 4c 61 72 67 65 49 6e 74 65 67 65 72 54 6f  | L....A$......._RtlLargeIntegerTo | 
| 3c0a0 |  43 68 61 72 40 31 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | Char@16.ntdll.dll.ntdll.dll/.... | 
| 3c0c0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 3c0e0 |  20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00 eb 02  | ..58........`.......L....A&..... | 
| 3c100 |  0c 00 5f 52 74 6c 4c 61 72 67 65 49 6e 74 65 67    65 72 53 75 62 74 72 61 63 74 40 31 36 00 6e 74  | .._RtlLargeIntegerSubtract@16.nt | 
| 3c120 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 3c140 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20  | 97..............0.......60...... | 
| 3c160 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    28 00 00 00 ea 02 0c 00 5f 52 74 6c 4c 61 72 67  | ..`.......L....A(......._RtlLarg | 
| 3c180 |  65 49 6e 74 65 67 65 72 53 68 69 66 74 52 69 67    68 74 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | eIntegerShiftRight@12.ntdll.dll. | 
| 3c1a0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 3c1c0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......59........`..... | 
| 3c1e0 |  00 00 4c 01 c5 e8 8a 41 27 00 00 00 e9 02 0c 00    5f 52 74 6c 4c 61 72 67 65 49 6e 74 65 67 65 72  | ..L....A'......._RtlLargeInteger | 
| 3c200 |  53 68 69 66 74 4c 65 66 74 40 31 32 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | ShiftLeft@12.ntdll.dll..ntdll.dl | 
| 3c220 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 3c240 |  30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......55........`.......L....A | 
| 3c260 |  23 00 00 00 e8 02 0c 00 5f 52 74 6c 4c 61 72 67    65 49 6e 74 65 67 65 72 4e 65 67 61 74 65 40 38  | #......._RtlLargeIntegerNegate@8 | 
| 3c280 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 3c2a0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20  | 622597..............0.......56.. | 
| 3c2c0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 24 00 00 00 e7 02 0c 00 5f 52 74 6c  | ......`.......L....A$......._Rtl | 
| 3c2e0 |  4c 61 72 67 65 49 6e 74 65 67 65 72 44 69 76 69    64 65 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | LargeIntegerDivide@20.ntdll.dll. | 
| 3c300 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 3c320 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    36 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......65........`..... | 
| 3c340 |  00 00 4c 01 c5 e8 8a 41 2d 00 00 00 e6 02 0c 00    5f 52 74 6c 4c 61 72 67 65 49 6e 74 65 67 65 72  | ..L....A-......._RtlLargeInteger | 
| 3c360 |  41 72 69 74 68 6d 65 74 69 63 53 68 69 66 74 40    31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | ArithmeticShift@12.ntdll.dll..nt | 
| 3c380 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 3c3a0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......53........`....... | 
| 3c3c0 |  4c 01 c5 e8 8a 41 21 00 00 00 e5 02 0c 00 5f 52    74 6c 4c 61 72 67 65 49 6e 74 65 67 65 72 41 64  | L....A!......._RtlLargeIntegerAd | 
| 3c3e0 |  64 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | d@16.ntdll.dll..ntdll.dll/...... | 
| 3c400 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 3c420 |  35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 24 00 00 00 e4 02 0c 00  | 56........`.......L....A$....... | 
| 3c440 |  5f 52 74 6c 49 73 56 61 6c 69 64 49 6e 64 65 78    48 61 6e 64 6c 65 40 31 32 00 6e 74 64 6c 6c 2e  | _RtlIsValidIndexHandle@12.ntdll. | 
| 3c460 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 3c480 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a  | ............0.......50........`. | 
| 3c4a0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00    e3 02 0c 00 5f 52 74 6c 49 73 56 61 6c 69 64 48  | ......L....A........_RtlIsValidH | 
| 3c4c0 |  61 6e 64 6c 65 40 38 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | andle@8.ntdll.dll.ntdll.dll/.... | 
| 3c4e0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 3c500 |  20 20 36 34 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 2c 00 00 00 e2 02  | ..64........`.......L....A,..... | 
| 3c520 |  0c 00 5f 52 74 6c 49 73 54 68 72 65 61 64 57 69    74 68 69 6e 4c 6f 61 64 65 72 43 61 6c 6c 6f 75  | .._RtlIsThreadWithinLoaderCallou | 
| 3c540 |  74 40 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | t@0.ntdll.dll.ntdll.dll/......10 | 
| 3c560 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31  | 99622597..............0.......51 | 
| 3c580 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1f 00 00 00 e1 02 0c 00 5f 52  | ........`.......L....A........_R | 
| 3c5a0 |  74 6c 49 73 54 65 78 74 55 6e 69 63 6f 64 65 40    31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | tlIsTextUnicode@12.ntdll.dll..nt | 
| 3c5c0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 3c5e0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......57........`....... | 
| 3c600 |  4c 01 c5 e8 8a 41 25 00 00 00 e0 02 0c 00 5f 52    74 6c 49 73 4e 61 6d 65 4c 65 67 61 6c 44 4f 53  | L....A%......._RtlIsNameLegalDOS | 
| 3c620 |  38 44 6f 74 33 40 31 32 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | 8Dot3@12.ntdll.dll..ntdll.dll/.. | 
| 3c640 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 3c660 |  20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00  | ....59........`.......L....A'... | 
| 3c680 |  df 02 0c 00 5f 52 74 6c 49 73 47 65 6e 65 72 69    63 54 61 62 6c 65 45 6d 70 74 79 41 76 6c 40 34  | ...._RtlIsGenericTableEmptyAvl@4 | 
| 3c6a0 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 3c6c0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20  | 622597..............0.......56.. | 
| 3c6e0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 24 00 00 00 de 02 0c 00 5f 52 74 6c  | ......`.......L....A$......._Rtl | 
| 3c700 |  49 73 47 65 6e 65 72 69 63 54 61 62 6c 65 45 6d    70 74 79 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | IsGenericTableEmpty@4.ntdll.dll. | 
| 3c720 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 3c740 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......54........`..... | 
| 3c760 |  00 00 4c 01 c5 e8 8a 41 22 00 00 00 dd 02 0c 00    5f 52 74 6c 49 73 44 6f 73 44 65 76 69 63 65 4e  | ..L....A"......._RtlIsDosDeviceN | 
| 3c780 |  61 6d 65 5f 55 40 34 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ame_U@4.ntdll.dll.ntdll.dll/.... | 
| 3c7a0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 3c7c0 |  20 20 36 38 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 30 00 00 00 dc 02  | ..68........`.......L....A0..... | 
| 3c7e0 |  0c 00 5f 52 74 6c 49 73 43 72 69 74 69 63 61 6c    53 65 63 74 69 6f 6e 4c 6f 63 6b 65 64 42 79 54  | .._RtlIsCriticalSectionLockedByT | 
| 3c800 |  68 72 65 61 64 40 34 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | hread@4.ntdll.dll.ntdll.dll/.... | 
| 3c820 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 3c840 |  20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 28 00 00 00 db 02  | ..60........`.......L....A(..... | 
| 3c860 |  0c 00 5f 52 74 6c 49 73 43 72 69 74 69 63 61 6c    53 65 63 74 69 6f 6e 4c 6f 63 6b 65 64 40 34 00  | .._RtlIsCriticalSectionLocked@4. | 
| 3c880 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 3c8a0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 32 20 20 20 20  | 2597..............0.......62.... | 
| 3c8c0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 2a 00 00 00 da 02 0c 00 5f 52 74 6c 49 73  | ....`.......L....A*......._RtlIs | 
| 3c8e0 |  41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78    74 41 63 74 69 76 65 40 34 00 6e 74 64 6c 6c 2e  | ActivationContextActive@4.ntdll. | 
| 3c900 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 3c920 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a  | ............0.......58........`. | 
| 3c940 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00    d9 02 0c 00 5f 52 74 6c 49 70 76 36 53 74 72 69  | ......L....A&......._RtlIpv6Stri | 
| 3c960 |  6e 67 54 6f 41 64 64 72 65 73 73 57 40 31 32 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | ngToAddressW@12.ntdll.dll.ntdll. | 
| 3c980 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 3c9a0 |  20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......60........`.......L... | 
| 3c9c0 |  8a 41 28 00 00 00 d8 02 0c 00 5f 52 74 6c 49 70    76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73  | .A(......._RtlIpv6StringToAddres | 
| 3c9e0 |  73 45 78 57 40 31 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | sExW@16.ntdll.dll.ntdll.dll/.... | 
| 3ca00 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 3ca20 |  20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 28 00 00 00 d7 02  | ..60........`.......L....A(..... | 
| 3ca40 |  0c 00 5f 52 74 6c 49 70 76 36 53 74 72 69 6e 67    54 6f 41 64 64 72 65 73 73 45 78 41 40 31 36 00  | .._RtlIpv6StringToAddressExA@16. | 
| 3ca60 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 3ca80 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20  | 2597..............0.......58.... | 
| 3caa0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 26 00 00 00 d6 02 0c 00 5f 52 74 6c 49 70  | ....`.......L....A&......._RtlIp | 
| 3cac0 |  76 36 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73    73 41 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | v6StringToAddressA@12.ntdll.dll. | 
| 3cae0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 3cb00 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......57........`..... | 
| 3cb20 |  00 00 4c 01 c5 e8 8a 41 25 00 00 00 d5 02 0c 00    5f 52 74 6c 49 70 76 36 41 64 64 72 65 73 73 54  | ..L....A%......._RtlIpv6AddressT | 
| 3cb40 |  6f 53 74 72 69 6e 67 57 40 38 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | oStringW@8.ntdll.dll..ntdll.dll/ | 
| 3cb60 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 3cb80 |  20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 28 00  | ......60........`.......L....A(. | 
| 3cba0 |  00 00 d4 02 0c 00 5f 52 74 6c 49 70 76 36 41 64    64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 57  | ......_RtlIpv6AddressToStringExW | 
| 3cbc0 |  40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @20.ntdll.dll.ntdll.dll/......10 | 
| 3cbe0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30  | 99622597..............0.......60 | 
| 3cc00 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 28 00 00 00 d3 02 0c 00 5f 52  | ........`.......L....A(......._R | 
| 3cc20 |  74 6c 49 70 76 36 41 64 64 72 65 73 73 54 6f 53    74 72 69 6e 67 45 78 41 40 32 30 00 6e 74 64 6c  | tlIpv6AddressToStringExA@20.ntdl | 
| 3cc40 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 3cc60 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20  | ..............0.......57........ | 
| 3cc80 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00    00 00 d2 02 0c 00 5f 52 74 6c 49 70 76 36 41 64  | `.......L....A%......._RtlIpv6Ad | 
| 3cca0 |  64 72 65 73 73 54 6f 53 74 72 69 6e 67 41 40 38    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | dressToStringA@8.ntdll.dll..ntdl | 
| 3ccc0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3cce0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......58........`.......L. | 
| 3cd00 |  c5 e8 8a 41 26 00 00 00 d1 02 0c 00 5f 52 74 6c    49 70 76 34 53 74 72 69 6e 67 54 6f 41 64 64 72  | ...A&......._RtlIpv4StringToAddr | 
| 3cd20 |  65 73 73 57 40 31 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | essW@16.ntdll.dll.ntdll.dll/.... | 
| 3cd40 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 3cd60 |  20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 28 00 00 00 d0 02  | ..60........`.......L....A(..... | 
| 3cd80 |  0c 00 5f 52 74 6c 49 70 76 34 53 74 72 69 6e 67    54 6f 41 64 64 72 65 73 73 45 78 57 40 31 36 00  | .._RtlIpv4StringToAddressExW@16. | 
| 3cda0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 3cdc0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20  | 2597..............0.......60.... | 
| 3cde0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 28 00 00 00 cf 02 0c 00 5f 52 74 6c 49 70  | ....`.......L....A(......._RtlIp | 
| 3ce00 |  76 34 53 74 72 69 6e 67 54 6f 41 64 64 72 65 73    73 45 78 41 40 31 36 00 6e 74 64 6c 6c 2e 64 6c  | v4StringToAddressExA@16.ntdll.dl | 
| 3ce20 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 3ce40 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......58........`... | 
| 3ce60 |  ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00 ce 02    0c 00 5f 52 74 6c 49 70 76 34 53 74 72 69 6e 67  | ....L....A&......._RtlIpv4String | 
| 3ce80 |  54 6f 41 64 64 72 65 73 73 41 40 31 36 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | ToAddressA@16.ntdll.dll.ntdll.dl | 
| 3cea0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 3cec0 |  30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......57........`.......L....A | 
| 3cee0 |  25 00 00 00 cd 02 0c 00 5f 52 74 6c 49 70 76 34    41 64 64 72 65 73 73 54 6f 53 74 72 69 6e 67 57  | %......._RtlIpv4AddressToStringW | 
| 3cf00 |  40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @8.ntdll.dll..ntdll.dll/......10 | 
| 3cf20 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30  | 99622597..............0.......60 | 
| 3cf40 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 28 00 00 00 cc 02 0c 00 5f 52  | ........`.......L....A(......._R | 
| 3cf60 |  74 6c 49 70 76 34 41 64 64 72 65 73 73 54 6f 53    74 72 69 6e 67 45 78 57 40 31 36 00 6e 74 64 6c  | tlIpv4AddressToStringExW@16.ntdl | 
| 3cf80 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 3cfa0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20  | ..............0.......60........ | 
| 3cfc0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 28 00    00 00 cb 02 0c 00 5f 52 74 6c 49 70 76 34 41 64  | `.......L....A(......._RtlIpv4Ad | 
| 3cfe0 |  64 72 65 73 73 54 6f 53 74 72 69 6e 67 45 78 41    40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | dressToStringExA@16.ntdll.dll.nt | 
| 3d000 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 3d020 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......57........`....... | 
| 3d040 |  4c 01 c5 e8 8a 41 25 00 00 00 ca 02 0c 00 5f 52    74 6c 49 70 76 34 41 64 64 72 65 73 73 54 6f 53  | L....A%......._RtlIpv4AddressToS | 
| 3d060 |  74 72 69 6e 67 41 40 38 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | tringA@8.ntdll.dll..ntdll.dll/.. | 
| 3d080 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 3d0a0 |  20 20 20 20 36 32 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2a 00 00 00  | ....62........`.......L....A*... | 
| 3d0c0 |  c8 02 0c 00 5f 52 74 6c 49 6e 74 65 72 6c 6f 63    6b 65 64 50 75 73 68 45 6e 74 72 79 53 4c 69 73  | ...._RtlInterlockedPushEntrySLis | 
| 3d0e0 |  74 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | t@8.ntdll.dll.ntdll.dll/......10 | 
| 3d100 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 31  | 99622597..............0.......61 | 
| 3d120 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 29 00 00 00 c7 02 0c 00 5f 52  | ........`.......L....A)......._R | 
| 3d140 |  74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 50 6f 70    45 6e 74 72 79 53 4c 69 73 74 40 34 00 6e 74 64  | tlInterlockedPopEntrySList@4.ntd | 
| 3d160 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 3d180 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20  | 97..............0.......58...... | 
| 3d1a0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    26 00 00 00 c6 02 0c 00 5f 52 74 6c 49 6e 74 65  | ..`.......L....A&......._RtlInte | 
| 3d1c0 |  72 6c 6f 63 6b 65 64 46 6c 75 73 68 53 4c 69 73    74 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | rlockedFlushSList@4.ntdll.dll.nt | 
| 3d1e0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 3d200 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 36    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......66........`....... | 
| 3d220 |  4c 01 c5 e8 8a 41 2e 00 00 00 c5 02 0c 00 5f 52    74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 43 6f 6d  | L....A........_RtlInterlockedCom | 
| 3d240 |  70 61 72 65 45 78 63 68 61 6e 67 65 36 34 40 32    30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | pareExchange64@20.ntdll.dll.ntdl | 
| 3d260 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3d280 |  20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......60........`.......L. | 
| 3d2a0 |  c5 e8 8a 41 28 00 00 00 c4 02 0c 00 5f 52 74 6c    49 6e 74 65 67 65 72 54 6f 55 6e 69 63 6f 64 65  | ...A(......._RtlIntegerToUnicode | 
| 3d2c0 |  53 74 72 69 6e 67 40 31 32 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | String@12.ntdll.dll.ntdll.dll/.. | 
| 3d2e0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 3d300 |  20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00  | ....51........`.......L....A.... | 
| 3d320 |  c3 02 0c 00 5f 52 74 6c 49 6e 74 65 67 65 72 54    6f 43 68 61 72 40 31 36 00 6e 74 64 6c 6c 2e 64  | ...._RtlIntegerToChar@16.ntdll.d | 
| 3d340 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 3d360 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a  | ............0.......58........`. | 
| 3d380 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00    c2 02 0c 00 5f 52 74 6c 49 6e 74 36 34 54 6f 55  | ......L....A&......._RtlInt64ToU | 
| 3d3a0 |  6e 69 63 6f 64 65 53 74 72 69 6e 67 40 31 36 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | nicodeString@16.ntdll.dll.ntdll. | 
| 3d3c0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 3d3e0 |  20 20 30 20 20 20 20 20 20 20 37 30 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......70........`.......L... | 
| 3d400 |  8a 41 32 00 00 00 c1 02 0c 00 5f 52 74 6c 49 6e    73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72  | .A2......._RtlInsertElementGener | 
| 3d420 |  69 63 54 61 62 6c 65 46 75 6c 6c 41 76 6c 40 32    34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | icTableFullAvl@24.ntdll.dll.ntdl | 
| 3d440 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3d460 |  20 20 20 20 30 20 20 20 20 20 20 20 36 37 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......67........`.......L. | 
| 3d480 |  c5 e8 8a 41 2f 00 00 00 c0 02 0c 00 5f 52 74 6c    49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e  | ...A/......._RtlInsertElementGen | 
| 3d4a0 |  65 72 69 63 54 61 62 6c 65 46 75 6c 6c 40 32 34    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | ericTableFull@24.ntdll.dll..ntdl | 
| 3d4c0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3d4e0 |  20 20 20 20 30 20 20 20 20 20 20 20 36 36 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......66........`.......L. | 
| 3d500 |  c5 e8 8a 41 2e 00 00 00 bf 02 0c 00 5f 52 74 6c    49 6e 73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e  | ...A........_RtlInsertElementGen | 
| 3d520 |  65 72 69 63 54 61 62 6c 65 41 76 6c 40 31 36 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | ericTableAvl@16.ntdll.dll.ntdll. | 
| 3d540 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 3d560 |  20 20 30 20 20 20 20 20 20 20 36 33 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......63........`.......L... | 
| 3d580 |  8a 41 2b 00 00 00 be 02 0c 00 5f 52 74 6c 49 6e    73 65 72 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72  | .A+......._RtlInsertElementGener | 
| 3d5a0 |  69 63 54 61 62 6c 65 40 31 36 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | icTable@16.ntdll.dll..ntdll.dll/ | 
| 3d5c0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 3d5e0 |  20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1f 00  | ......51........`.......L....A.. | 
| 3d600 |  00 00 bd 02 0c 00 5f 52 74 6c 49 6e 69 74 69 61    6c 69 7a 65 53 69 64 40 31 32 00 6e 74 64 6c 6c  | ......_RtlInitializeSid@12.ntdll | 
| 3d620 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 3d640 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20  | ..............0.......56........ | 
| 3d660 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 24 00    00 00 bc 02 0c 00 5f 52 74 6c 49 6e 69 74 69 61  | `.......L....A$......._RtlInitia | 
| 3d680 |  6c 69 7a 65 53 4c 69 73 74 48 65 61 64 40 34 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | lizeSListHead@4.ntdll.dll.ntdll. | 
| 3d6a0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 3d6c0 |  20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......55........`.......L... | 
| 3d6e0 |  8a 41 23 00 00 00 bb 02 0c 00 5f 52 74 6c 49 6e    69 74 69 61 6c 69 7a 65 52 65 73 6f 75 72 63 65  | .A#......._RtlInitializeResource | 
| 3d700 |  40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @4.ntdll.dll..ntdll.dll/......10 | 
| 3d720 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33  | 99622597..............0.......53 | 
| 3d740 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 21 00 00 00 ba 02 0c 00 5f 52  | ........`.......L....A!......._R | 
| 3d760 |  74 6c 49 6e 69 74 69 61 6c 69 7a 65 52 58 61 63    74 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | tlInitializeRXact@12.ntdll.dll.. | 
| 3d780 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 3d7a0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......59........`..... | 
| 3d7c0 |  00 00 4c 01 c5 e8 8a 41 27 00 00 00 b9 02 0c 00    5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 48 61  | ..L....A'......._RtlInitializeHa | 
| 3d7e0 |  6e 64 6c 65 54 61 62 6c 65 40 31 32 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | ndleTable@12.ntdll.dll..ntdll.dl | 
| 3d800 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 3d820 |  30 20 20 20 20 20 20 20 36 33 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......63........`.......L....A | 
| 3d840 |  2b 00 00 00 b8 02 0c 00 5f 52 74 6c 49 6e 69 74    69 61 6c 69 7a 65 47 65 6e 65 72 69 63 54 61 62  | +......._RtlInitializeGenericTab | 
| 3d860 |  6c 65 41 76 6c 40 32 30 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | leAvl@20.ntdll.dll..ntdll.dll/.. | 
| 3d880 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 3d8a0 |  20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 28 00 00 00  | ....60........`.......L....A(... | 
| 3d8c0 |  b7 02 0c 00 5f 52 74 6c 49 6e 69 74 69 61 6c 69    7a 65 47 65 6e 65 72 69 63 54 61 62 6c 65 40 32  | ...._RtlInitializeGenericTable@2 | 
| 3d8e0 |  30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 0.ntdll.dll.ntdll.dll/......1099 | 
| 3d900 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 37 34 20 20  | 622597..............0.......74.. | 
| 3d920 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 36 00 00 00 b6 02 0c 00 5f 52 74 6c  | ......`.......L....A6......._Rtl | 
| 3d940 |  49 6e 69 74 69 61 6c 69 7a 65 43 72 69 74 69 63    61 6c 53 65 63 74 69 6f 6e 41 6e 64 53 70 69 6e  | InitializeCriticalSectionAndSpin | 
| 3d960 |  43 6f 75 6e 74 40 38 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | Count@8.ntdll.dll.ntdll.dll/.... | 
| 3d980 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 3d9a0 |  20 20 36 32 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 2a 00 00 00 b5 02  | ..62........`.......L....A*..... | 
| 3d9c0 |  0c 00 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65    43 72 69 74 69 63 61 6c 53 65 63 74 69 6f 6e 40  | .._RtlInitializeCriticalSection@ | 
| 3d9e0 |  34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 4.ntdll.dll.ntdll.dll/......1099 | 
| 3da00 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20  | 622597..............0.......55.. | 
| 3da20 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 23 00 00 00 b4 02 0c 00 5f 52 74 6c  | ......`.......L....A#......._Rtl | 
| 3da40 |  49 6e 69 74 69 61 6c 69 7a 65 43 6f 6e 74 65 78    74 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | InitializeContext@20.ntdll.dll.. | 
| 3da60 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 3da80 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......54........`..... | 
| 3daa0 |  00 00 4c 01 c5 e8 8a 41 22 00 00 00 b3 02 0c 00    5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65 42 69  | ..L....A"......._RtlInitializeBi | 
| 3dac0 |  74 4d 61 70 40 31 32 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | tMap@12.ntdll.dll.ntdll.dll/.... | 
| 3dae0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 3db00 |  20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00 b2 02  | ..58........`.......L....A&..... | 
| 3db20 |  0c 00 5f 52 74 6c 49 6e 69 74 69 61 6c 69 7a 65    41 74 6f 6d 50 61 63 6b 61 67 65 40 34 00 6e 74  | .._RtlInitializeAtomPackage@4.nt | 
| 3db40 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 3db60 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20  | 97..............0.......56...... | 
| 3db80 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    24 00 00 00 b1 02 0c 00 5f 52 74 6c 49 6e 69 74  | ..`.......L....A$......._RtlInit | 
| 3dba0 |  55 6e 69 63 6f 64 65 53 74 72 69 6e 67 45 78 40    38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | UnicodeStringEx@8.ntdll.dll.ntdl | 
| 3dbc0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3dbe0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......54........`.......L. | 
| 3dc00 |  c5 e8 8a 41 22 00 00 00 b0 02 0c 00 5f 52 74 6c    49 6e 69 74 55 6e 69 63 6f 64 65 53 74 72 69 6e  | ...A"......._RtlInitUnicodeStrin | 
| 3dc20 |  67 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | g@8.ntdll.dll.ntdll.dll/......10 | 
| 3dc40 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37  | 99622597..............0.......47 | 
| 3dc60 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1b 00 00 00 af 02 0c 00 5f 52  | ........`.......L....A........_R | 
| 3dc80 |  74 6c 49 6e 69 74 53 74 72 69 6e 67 40 38 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | tlInitString@8.ntdll.dll..ntdll. | 
| 3dca0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 3dcc0 |  20 20 30 20 20 20 20 20 20 20 36 35 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......65........`.......L... | 
| 3dce0 |  8a 41 2d 00 00 00 ae 02 0c 00 5f 52 74 6c 49 6e    69 74 4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65  | .A-......._RtlInitOutOfProcessMe | 
| 3dd00 |  6d 6f 72 79 53 74 72 65 61 6d 40 34 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | moryStream@4.ntdll.dll..ntdll.dl | 
| 3dd20 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 3dd40 |  30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......51........`.......L....A | 
| 3dd60 |  1f 00 00 00 ad 02 0c 00 5f 52 74 6c 49 6e 69 74    4e 6c 73 54 61 62 6c 65 73 40 31 36 00 6e 74 64  | ........_RtlInitNlsTables@16.ntd | 
| 3dd80 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 3dda0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20  | 97..............0.......53...... | 
| 3ddc0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    21 00 00 00 ac 02 0c 00 5f 52 74 6c 49 6e 69 74  | ..`.......L....A!......._RtlInit | 
| 3dde0 |  4d 65 6d 6f 72 79 53 74 72 65 61 6d 40 34 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | MemoryStream@4.ntdll.dll..ntdll. | 
| 3de00 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 3de20 |  20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......54........`.......L... | 
| 3de40 |  8a 41 22 00 00 00 ab 02 0c 00 5f 52 74 6c 49 6e    69 74 43 6f 64 65 50 61 67 65 54 61 62 6c 65 40  | .A"......._RtlInitCodePageTable@ | 
| 3de60 |  38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 8.ntdll.dll.ntdll.dll/......1099 | 
| 3de80 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20  | 622597..............0.......53.. | 
| 3dea0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 21 00 00 00 aa 02 0c 00 5f 52 74 6c  | ......`.......L....A!......._Rtl | 
| 3dec0 |  49 6e 69 74 41 6e 73 69 53 74 72 69 6e 67 45 78    40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | InitAnsiStringEx@8.ntdll.dll..nt | 
| 3dee0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 3df00 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......51........`....... | 
| 3df20 |  4c 01 c5 e8 8a 41 1f 00 00 00 a9 02 0c 00 5f 52    74 6c 49 6e 69 74 41 6e 73 69 53 74 72 69 6e 67  | L....A........_RtlInitAnsiString | 
| 3df40 |  40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @8.ntdll.dll..ntdll.dll/......10 | 
| 3df60 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32  | 99622597..............0.......52 | 
| 3df80 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 20 00 00 00 a8 02 0c 00 5f 52  | ........`.......L....A........_R | 
| 3dfa0 |  74 6c 49 6d 70 65 72 73 6f 6e 61 74 65 53 65 6c    66 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | tlImpersonateSelf@4.ntdll.dll.nt | 
| 3dfc0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 3dfe0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......50........`....... | 
| 3e000 |  4c 01 c5 e8 8a 41 1e 00 00 00 a7 02 0c 00 5f 52    74 6c 49 6d 61 67 65 52 76 61 54 6f 56 61 40 31  | L....A........_RtlImageRvaToVa@1 | 
| 3e020 |  36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 6.ntdll.dll.ntdll.dll/......1099 | 
| 3e040 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20  | 622597..............0.......55.. | 
| 3e060 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 23 00 00 00 a6 02 0c 00 5f 52 74 6c  | ......`.......L....A#......._Rtl | 
| 3e080 |  49 6d 61 67 65 52 76 61 54 6f 53 65 63 74 69 6f    6e 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | ImageRvaToSection@12.ntdll.dll.. | 
| 3e0a0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 3e0c0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......53........`..... | 
| 3e0e0 |  00 00 4c 01 c5 e8 8a 41 21 00 00 00 a5 02 0c 00    5f 52 74 6c 49 6d 61 67 65 4e 74 48 65 61 64 65  | ..L....A!......._RtlImageNtHeade | 
| 3e100 |  72 45 78 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | rEx@20.ntdll.dll..ntdll.dll/.... | 
| 3e120 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 3e140 |  20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00 a4 02  | ..50........`.......L....A...... | 
| 3e160 |  0c 00 5f 52 74 6c 49 6d 61 67 65 4e 74 48 65 61    64 65 72 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | .._RtlImageNtHeader@4.ntdll.dll. | 
| 3e180 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 3e1a0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    36 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......63........`..... | 
| 3e1c0 |  00 00 4c 01 c5 e8 8a 41 2b 00 00 00 a3 02 0c 00    5f 52 74 6c 49 6d 61 67 65 44 69 72 65 63 74 6f  | ..L....A+......._RtlImageDirecto | 
| 3e1e0 |  72 79 45 6e 74 72 79 54 6f 44 61 74 61 40 31 36    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | ryEntryToData@16.ntdll.dll..ntdl | 
| 3e200 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3e220 |  20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......59........`.......L. | 
| 3e240 |  c5 e8 8a 41 27 00 00 00 a2 02 0c 00 5f 52 74 6c    49 64 65 6e 74 69 66 69 65 72 41 75 74 68 6f 72  | ...A'......._RtlIdentifierAuthor | 
| 3e260 |  69 74 79 53 69 64 40 34 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | itySid@4.ntdll.dll..ntdll.dll/.. | 
| 3e280 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 3e2a0 |  20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 23 00 00 00  | ....55........`.......L....A#... | 
| 3e2c0 |  a1 02 0c 00 5f 52 74 6c 48 61 73 68 55 6e 69 63    6f 64 65 53 74 72 69 6e 67 40 31 36 00 6e 74 64  | ...._RtlHashUnicodeString@16.ntd | 
| 3e2e0 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 3e300 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20  | 97..............0.......47...... | 
| 3e320 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1b 00 00 00 a0 02 0c 00 5f 52 74 6c 47 65 74 56  | ..`.......L....A........_RtlGetV | 
| 3e340 |  65 72 73 69 6f 6e 40 34 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ersion@4.ntdll.dll..ntdll.dll/.. | 
| 3e360 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 3e380 |  20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00  | ....53........`.......L....A!... | 
| 3e3a0 |  9f 02 0c 00 5f 52 74 6c 47 65 74 55 73 65 72 49    6e 66 6f 48 65 61 70 40 32 30 00 6e 74 64 6c 6c  | ...._RtlGetUserInfoHeap@20.ntdll | 
| 3e3c0 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 3e3e0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20  | ..............0.......56........ | 
| 3e400 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 24 00    00 00 9e 02 0c 00 5f 52 74 6c 47 65 74 55 6e 6c  | `.......L....A$......._RtlGetUnl | 
| 3e420 |  6f 61 64 45 76 65 6e 74 54 72 61 63 65 40 30 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | oadEventTrace@0.ntdll.dll.ntdll. | 
| 3e440 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 3e460 |  20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......55........`.......L... | 
| 3e480 |  8a 41 23 00 00 00 9d 02 0c 00 5f 52 74 6c 47 65    74 54 68 72 65 61 64 45 72 72 6f 72 4d 6f 64 65  | .A#......._RtlGetThreadErrorMode | 
| 3e4a0 |  40 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @0.ntdll.dll..ntdll.dll/......10 | 
| 3e4c0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38  | 99622597..............0.......58 | 
| 3e4e0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 26 00 00 00 9c 02 0c 00 5f 52  | ........`.......L....A&......._R | 
| 3e500 |  74 6c 47 65 74 53 65 74 42 6f 6f 74 53 74 61 74    75 73 44 61 74 61 40 32 34 00 6e 74 64 6c 6c 2e  | tlGetSetBootStatusData@24.ntdll. | 
| 3e520 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 3e540 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 37 20 20 20 20 20 20 20 20 60 0a  | ............0.......67........`. | 
| 3e560 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2f 00 00 00    9b 02 0c 00 5f 52 74 6c 47 65 74 53 65 63 75 72  | ......L....A/......._RtlGetSecur | 
| 3e580 |  69 74 79 44 65 73 63 72 69 70 74 6f 72 52 4d 43    6f 6e 74 72 6f 6c 40 38 00 6e 74 64 6c 6c 2e 64  | ityDescriptorRMControl@8.ntdll.d | 
| 3e5a0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 3e5c0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a  | ............0.......63........`. | 
| 3e5e0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2b 00 00 00    9a 02 0c 00 5f 52 74 6c 47 65 74 53 61 63 6c 53  | ......L....A+......._RtlGetSaclS | 
| 3e600 |  65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f    72 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | ecurityDescriptor@16.ntdll.dll.. | 
| 3e620 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 3e640 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......52........`..... | 
| 3e660 |  00 00 4c 01 c5 e8 8a 41 20 00 00 00 99 02 0c 00    5f 52 74 6c 47 65 74 50 72 6f 63 65 73 73 48 65  | ..L....A........_RtlGetProcessHe | 
| 3e680 |  61 70 73 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | aps@8.ntdll.dll.ntdll.dll/...... | 
| 3e6a0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 3e6c0 |  36 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 2c 00 00 00 98 02 0c 00  | 64........`.......L....A,....... | 
| 3e6e0 |  5f 52 74 6c 47 65 74 4f 77 6e 65 72 53 65 63 75    72 69 74 79 44 65 73 63 72 69 70 74 6f 72 40 31  | _RtlGetOwnerSecurityDescriptor@1 | 
| 3e700 |  32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 2.ntdll.dll.ntdll.dll/......1099 | 
| 3e720 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20  | 622597..............0.......57.. | 
| 3e740 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 25 00 00 00 97 02 0c 00 5f 52 74 6c  | ......`.......L....A%......._Rtl | 
| 3e760 |  47 65 74 4e 74 56 65 72 73 69 6f 6e 4e 75 6d 62    65 72 73 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c  | GetNtVersionNumbers@12.ntdll.dll | 
| 3e780 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 3e7a0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......53........`... | 
| 3e7c0 |  ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00 96 02    0c 00 5f 52 74 6c 47 65 74 4e 74 50 72 6f 64 75  | ....L....A!......._RtlGetNtProdu | 
| 3e7e0 |  63 74 54 79 70 65 40 34 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ctType@4.ntdll.dll..ntdll.dll/.. | 
| 3e800 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 3e820 |  20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00  | ....53........`.......L....A!... | 
| 3e840 |  95 02 0c 00 5f 52 74 6c 47 65 74 4e 74 47 6c 6f    62 61 6c 46 6c 61 67 73 40 30 00 6e 74 64 6c 6c  | ...._RtlGetNtGlobalFlags@0.ntdll | 
| 3e860 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 3e880 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 36 34 20 20 20 20 20 20 20 20  | ..............0.......64........ | 
| 3e8a0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2c 00    00 00 94 02 0c 00 5f 52 74 6c 47 65 74 4e 61 74  | `.......L....A,......._RtlGetNat | 
| 3e8c0 |  69 76 65 53 79 73 74 65 6d 49 6e 66 6f 72 6d 61    74 69 6f 6e 40 31 36 00 6e 74 64 6c 6c 2e 64 6c  | iveSystemInformation@16.ntdll.dl | 
| 3e8e0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 3e900 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......59........`... | 
| 3e920 |  ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00 93 02    0c 00 5f 52 74 6c 47 65 74 4c 6f 6e 67 65 73 74  | ....L....A'......._RtlGetLongest | 
| 3e940 |  4e 74 50 61 74 68 4c 65 6e 67 74 68 40 30 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | NtPathLength@0.ntdll.dll..ntdll. | 
| 3e960 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 3e980 |  20 20 30 20 20 20 20 20 20 20 37 36 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......76........`.......L... | 
| 3e9a0 |  8a 41 38 00 00 00 92 02 0c 00 5f 52 74 6c 47 65    74 4c 65 6e 67 74 68 57 69 74 68 6f 75 74 54 72  | .A8......._RtlGetLengthWithoutTr | 
| 3e9c0 |  61 69 6c 69 6e 67 50 61 74 68 53 65 70 65 72 61    74 6f 72 73 40 31 32 00 6e 74 64 6c 6c 2e 64 6c  | ailingPathSeperators@12.ntdll.dl | 
| 3e9e0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 3ea00 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 38 30 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......80........`... | 
| 3ea20 |  ff ff 00 00 4c 01 c5 e8 8a 41 3c 00 00 00 91 02    0c 00 5f 52 74 6c 47 65 74 4c 65 6e 67 74 68 57  | ....L....A<......._RtlGetLengthW | 
| 3ea40 |  69 74 68 6f 75 74 4c 61 73 74 46 75 6c 6c 44 6f    73 4f 72 4e 74 50 61 74 68 45 6c 65 6d 65 6e 74  | ithoutLastFullDosOrNtPathElement | 
| 3ea60 |  40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @12.ntdll.dll.ntdll.dll/......10 | 
| 3ea80 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34  | 99622597..............0.......54 | 
| 3eaa0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 22 00 00 00 90 02 0c 00 5f 52  | ........`.......L....A"......._R | 
| 3eac0 |  74 6c 47 65 74 4c 61 73 74 57 69 6e 33 32 45 72    72 6f 72 40 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | tlGetLastWin32Error@0.ntdll.dll. | 
| 3eae0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 3eb00 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......52........`..... | 
| 3eb20 |  00 00 4c 01 c5 e8 8a 41 20 00 00 00 8f 02 0c 00    5f 52 74 6c 47 65 74 4c 61 73 74 4e 74 53 74 61  | ..L....A........_RtlGetLastNtSta | 
| 3eb40 |  74 75 73 40 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | tus@0.ntdll.dll.ntdll.dll/...... | 
| 3eb60 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 3eb80 |  36 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 2c 00 00 00 8e 02 0c 00  | 64........`.......L....A,....... | 
| 3eba0 |  5f 52 74 6c 47 65 74 47 72 6f 75 70 53 65 63 75    72 69 74 79 44 65 73 63 72 69 70 74 6f 72 40 31  | _RtlGetGroupSecurityDescriptor@1 | 
| 3ebc0 |  32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 2.ntdll.dll.ntdll.dll/......1099 | 
| 3ebe0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20  | 622597..............0.......60.. | 
| 3ec00 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 28 00 00 00 8d 02 0c 00 5f 52 74 6c  | ......`.......L....A(......._Rtl | 
| 3ec20 |  47 65 74 46 75 6c 6c 50 61 74 68 4e 61 6d 65 5f    55 73 74 72 45 78 40 33 32 00 6e 74 64 6c 6c 2e  | GetFullPathName_UstrEx@32.ntdll. | 
| 3ec40 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 3ec60 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a  | ............0.......55........`. | 
| 3ec80 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 23 00 00 00    8c 02 0c 00 5f 52 74 6c 47 65 74 46 75 6c 6c 50  | ......L....A#......._RtlGetFullP | 
| 3eca0 |  61 74 68 4e 61 6d 65 5f 55 40 31 36 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | athName_U@16.ntdll.dll..ntdll.dl | 
| 3ecc0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 3ece0 |  30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......45........`.......L....A | 
| 3ed00 |  19 00 00 00 8b 02 0c 00 5f 52 74 6c 47 65 74 46    72 61 6d 65 40 30 00 6e 74 64 6c 6c 2e 64 6c 6c  | ........_RtlGetFrame@0.ntdll.dll | 
| 3ed20 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 3ed40 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 32 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......62........`... | 
| 3ed60 |  ff ff 00 00 4c 01 c5 e8 8a 41 2a 00 00 00 8a 02    0c 00 5f 52 74 6c 47 65 74 45 6c 65 6d 65 6e 74  | ....L....A*......._RtlGetElement | 
| 3ed80 |  47 65 6e 65 72 69 63 54 61 62 6c 65 41 76 6c 40    38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | GenericTableAvl@8.ntdll.dll.ntdl | 
| 3eda0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3edc0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......59........`.......L. | 
| 3ede0 |  c5 e8 8a 41 27 00 00 00 89 02 0c 00 5f 52 74 6c    47 65 74 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69  | ...A'......._RtlGetElementGeneri | 
| 3ee00 |  63 54 61 62 6c 65 40 38 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | cTable@8.ntdll.dll..ntdll.dll/.. | 
| 3ee20 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 3ee40 |  20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2b 00 00 00  | ....63........`.......L....A+... | 
| 3ee60 |  88 02 0c 00 5f 52 74 6c 47 65 74 44 61 63 6c 53    65 63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f  | ...._RtlGetDaclSecurityDescripto | 
| 3ee80 |  72 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | r@16.ntdll.dll..ntdll.dll/...... | 
| 3eea0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 3eec0 |  36 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 2a 00 00 00 87 02 0c 00  | 62........`.......L....A*....... | 
| 3eee0 |  5f 52 74 6c 47 65 74 43 75 72 72 65 6e 74 50 72    6f 63 65 73 73 6f 72 4e 75 6d 62 65 72 40 30 00  | _RtlGetCurrentProcessorNumber@0. | 
| 3ef00 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 3ef20 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20  | 2597..............0.......50.... | 
| 3ef40 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1e 00 00 00 86 02 0c 00 5f 52 74 6c 47 65  | ....`.......L....A........_RtlGe | 
| 3ef60 |  74 43 75 72 72 65 6e 74 50 65 62 40 30 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | tCurrentPeb@0.ntdll.dll.ntdll.dl | 
| 3ef80 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 3efa0 |  30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......58........`.......L....A | 
| 3efc0 |  26 00 00 00 85 02 0c 00 5f 52 74 6c 47 65 74 43    75 72 72 65 6e 74 44 69 72 65 63 74 6f 72 79 5f  | &......._RtlGetCurrentDirectory_ | 
| 3efe0 |  55 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | U@8.ntdll.dll.ntdll.dll/......10 | 
| 3f000 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 39  | 99622597..............0.......69 | 
| 3f020 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 31 00 00 00 84 02 0c 00 5f 52  | ........`.......L....A1......._R | 
| 3f040 |  74 6c 47 65 74 43 72 69 74 69 63 61 6c 53 65 63    74 69 6f 6e 52 65 63 75 72 73 69 6f 6e 43 6f 75  | tlGetCriticalSectionRecursionCou | 
| 3f060 |  6e 74 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | nt@4.ntdll.dll..ntdll.dll/...... | 
| 3f080 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 3f0a0 |  36 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 2e 00 00 00 83 02 0c 00  | 66........`.......L....A........ | 
| 3f0c0 |  5f 52 74 6c 47 65 74 43 6f 6e 74 72 6f 6c 53 65    63 75 72 69 74 79 44 65 73 63 72 69 70 74 6f 72  | _RtlGetControlSecurityDescriptor | 
| 3f0e0 |  40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @12.ntdll.dll.ntdll.dll/......10 | 
| 3f100 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 35  | 99622597..............0.......65 | 
| 3f120 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 2d 00 00 00 82 02 0c 00 5f 52  | ........`.......L....A-......._R | 
| 3f140 |  74 6c 47 65 74 43 6f 6d 70 72 65 73 73 69 6f 6e    57 6f 72 6b 53 70 61 63 65 53 69 7a 65 40 31 32  | tlGetCompressionWorkSpaceSize@12 | 
| 3f160 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 3f180 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20  | 622597..............0.......54.. | 
| 3f1a0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 22 00 00 00 81 02 0c 00 5f 52 74 6c  | ......`.......L....A"......._Rtl | 
| 3f1c0 |  47 65 74 43 61 6c 6c 65 72 73 41 64 64 72 65 73    73 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | GetCallersAddress@8.ntdll.dll.nt | 
| 3f1e0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 3f200 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 33    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......63........`....... | 
| 3f220 |  4c 01 c5 e8 8a 41 2b 00 00 00 80 02 0c 00 5f 52    74 6c 47 65 74 41 63 74 69 76 65 41 63 74 69 76  | L....A+......._RtlGetActiveActiv | 
| 3f240 |  61 74 69 6f 6e 43 6f 6e 74 65 78 74 40 34 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | ationContext@4.ntdll.dll..ntdll. | 
| 3f260 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 3f280 |  20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......44........`.......L... | 
| 3f2a0 |  8a 41 18 00 00 00 7f 02 0c 00 5f 52 74 6c 47 65    74 41 63 65 40 31 32 00 6e 74 64 6c 6c 2e 64 6c  | .A........_RtlGetAce@12.ntdll.dl | 
| 3f2c0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 3f2e0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......55........`... | 
| 3f300 |  ff ff 00 00 4c 01 c5 e8 8a 41 23 00 00 00 7e 02    0c 00 5f 52 74 6c 47 65 6e 65 72 61 74 65 38 64  | ....L....A#...~..._RtlGenerate8d | 
| 3f320 |  6f 74 33 4e 61 6d 65 40 31 36 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ot3Name@16.ntdll.dll..ntdll.dll/ | 
| 3f340 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 3f360 |  20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1f 00  | ......51........`.......L....A.. | 
| 3f380 |  00 00 7d 02 0c 00 5f 52 74 6c 47 55 49 44 46 72    6f 6d 53 74 72 69 6e 67 40 38 00 6e 74 64 6c 6c  | ..}..._RtlGUIDFromString@8.ntdll | 
| 3f3a0 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 3f3c0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20  | ..............0.......56........ | 
| 3f3e0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 24 00    00 00 7c 02 0c 00 5f 52 74 6c 46 72 65 65 55 73  | `.......L....A$...|..._RtlFreeUs | 
| 3f400 |  65 72 54 68 72 65 61 64 53 74 61 63 6b 40 38 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | erThreadStack@8.ntdll.dll.ntdll. | 
| 3f420 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 3f440 |  20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......54........`.......L... | 
| 3f460 |  8a 41 22 00 00 00 7b 02 0c 00 5f 52 74 6c 46 72    65 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 40  | .A"...{..._RtlFreeUnicodeString@ | 
| 3f480 |  34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 4.ntdll.dll.ntdll.dll/......1099 | 
| 3f4a0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 39 20 20  | 622597..............0.......69.. | 
| 3f4c0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 31 00 00 00 7a 02 0c 00 5f 52 74 6c  | ......`.......L....A1...z..._Rtl | 
| 3f4e0 |  46 72 65 65 54 68 72 65 61 64 41 63 74 69 76 61    74 69 6f 6e 43 6f 6e 74 65 78 74 53 74 61 63 6b  | FreeThreadActivationContextStack | 
| 3f500 |  40 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @0.ntdll.dll..ntdll.dll/......10 | 
| 3f520 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34  | 99622597..............0.......44 | 
| 3f540 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 18 00 00 00 79 02 0c 00 5f 52  | ........`.......L....A....y..._R | 
| 3f560 |  74 6c 46 72 65 65 53 69 64 40 34 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | tlFreeSid@4.ntdll.dll.ntdll.dll/ | 
| 3f580 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 3f5a0 |  20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00  | ......50........`.......L....A.. | 
| 3f5c0 |  00 00 78 02 0c 00 5f 52 74 6c 46 72 65 65 4f 65    6d 53 74 72 69 6e 67 40 34 00 6e 74 64 6c 6c 2e  | ..x..._RtlFreeOemString@4.ntdll. | 
| 3f5e0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 3f600 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a  | ............0.......46........`. | 
| 3f620 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1a 00 00 00    77 02 0c 00 5f 52 74 6c 46 72 65 65 48 65 61 70  | ......L....A....w..._RtlFreeHeap | 
| 3f640 |  40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @12.ntdll.dll.ntdll.dll/......10 | 
| 3f660 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37  | 99622597..............0.......47 | 
| 3f680 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1b 00 00 00 76 02 0c 00 5f 52  | ........`.......L....A....v..._R | 
| 3f6a0 |  74 6c 46 72 65 65 48 61 6e 64 6c 65 40 38 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | tlFreeHandle@8.ntdll.dll..ntdll. | 
| 3f6c0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 3f6e0 |  20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......51........`.......L... | 
| 3f700 |  8a 41 1f 00 00 00 75 02 0c 00 5f 52 74 6c 46 72    65 65 41 6e 73 69 53 74 72 69 6e 67 40 34 00 6e  | .A....u..._RtlFreeAnsiString@4.n | 
| 3f720 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 3f740 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 33 20 20 20 20  | 2597..............0.......63.... | 
| 3f760 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 2b 00 00 00 74 02 0c 00 5f 52 74 6c 46 72  | ....`.......L....A+...t..._RtlFr | 
| 3f780 |  65 65 41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74    65 78 74 53 74 61 63 6b 40 34 00 6e 74 64 6c 6c  | eeActivationContextStack@4.ntdll | 
| 3f7a0 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 3f7c0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20  | ..............0.......53........ | 
| 3f7e0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 21 00    00 00 73 02 0c 00 5f 52 74 6c 46 6f 72 6d 61 74  | `.......L....A!...s..._RtlFormat | 
| 3f800 |  4d 65 73 73 61 67 65 45 78 40 34 30 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | MessageEx@40.ntdll.dll..ntdll.dl | 
| 3f820 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 3f840 |  30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......51........`.......L....A | 
| 3f860 |  1f 00 00 00 72 02 0c 00 5f 52 74 6c 46 6f 72 6d    61 74 4d 65 73 73 61 67 65 40 33 36 00 6e 74 64  | ....r..._RtlFormatMessage@36.ntd | 
| 3f880 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 3f8a0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20  | 97..............0.......61...... | 
| 3f8c0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    29 00 00 00 71 02 0c 00 5f 52 74 6c 46 6f 72 6d  | ..`.......L....A)...q..._RtlForm | 
| 3f8e0 |  61 74 43 75 72 72 65 6e 74 55 73 65 72 4b 65 79    50 61 74 68 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c  | atCurrentUserKeyPath@4.ntdll.dll | 
| 3f900 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 3f920 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......59........`... | 
| 3f940 |  ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00 70 02    0c 00 5f 52 74 6c 46 6c 75 73 68 53 65 63 75 72  | ....L....A'...p..._RtlFlushSecur | 
| 3f960 |  65 4d 65 6d 6f 72 79 43 61 63 68 65 40 38 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | eMemoryCache@8.ntdll.dll..ntdll. | 
| 3f980 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 3f9a0 |  20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......49........`.......L... | 
| 3f9c0 |  8a 41 1d 00 00 00 6f 02 0c 00 5f 52 74 6c 46 69    72 73 74 46 72 65 65 41 63 65 40 38 00 6e 74 64  | .A....o..._RtlFirstFreeAce@8.ntd | 
| 3f9e0 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 3fa00 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20  | 97..............0.......52...... | 
| 3fa20 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    20 00 00 00 6e 02 0c 00 5f 52 74 6c 46 69 72 73  | ..`.......L....A....n..._RtlFirs | 
| 3fa40 |  74 45 6e 74 72 79 53 4c 69 73 74 40 34 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | tEntrySList@4.ntdll.dll.ntdll.dl | 
| 3fa60 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 3fa80 |  30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......57........`.......L....A | 
| 3faa0 |  25 00 00 00 6d 02 0c 00 5f 52 74 6c 46 69 6e 64    53 65 74 42 69 74 73 41 6e 64 43 6c 65 61 72 40  | %...m..._RtlFindSetBitsAndClear@ | 
| 3fac0 |  31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 12.ntdll.dll..ntdll.dll/......10 | 
| 3fae0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39  | 99622597..............0.......49 | 
| 3fb00 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1d 00 00 00 6c 02 0c 00 5f 52  | ........`.......L....A....l..._R | 
| 3fb20 |  74 6c 46 69 6e 64 53 65 74 42 69 74 73 40 31 32    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | tlFindSetBits@12.ntdll.dll..ntdl | 
| 3fb40 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3fb60 |  20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......61........`.......L. | 
| 3fb80 |  c5 e8 8a 41 29 00 00 00 6b 02 0c 00 5f 52 74 6c    46 69 6e 64 4e 65 78 74 46 6f 72 77 61 72 64 52  | ...A)...k..._RtlFindNextForwardR | 
| 3fba0 |  75 6e 43 6c 65 61 72 40 31 32 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | unClear@12.ntdll.dll..ntdll.dll/ | 
| 3fbc0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 3fbe0 |  20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00  | ......59........`.......L....A'. | 
| 3fc00 |  00 00 6a 02 0c 00 5f 52 74 6c 46 69 6e 64 4d 6f    73 74 53 69 67 6e 69 66 69 63 61 6e 74 42 69 74  | ..j..._RtlFindMostSignificantBit | 
| 3fc20 |  40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @8.ntdll.dll..ntdll.dll/......10 | 
| 3fc40 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39  | 99622597..............0.......49 | 
| 3fc60 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1d 00 00 00 69 02 0c 00 5f 52  | ........`.......L....A....i..._R | 
| 3fc80 |  74 6c 46 69 6e 64 4d 65 73 73 61 67 65 40 32 30    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | tlFindMessage@20.ntdll.dll..ntdl | 
| 3fca0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 3fcc0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......56........`.......L. | 
| 3fce0 |  c5 e8 8a 41 24 00 00 00 68 02 0c 00 5f 52 74 6c    46 69 6e 64 4c 6f 6e 67 65 73 74 52 75 6e 43 6c  | ...A$...h..._RtlFindLongestRunCl | 
| 3fd00 |  65 61 72 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ear@8.ntdll.dll.ntdll.dll/...... | 
| 3fd20 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 3fd40 |  36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 28 00 00 00 67 02 0c 00  | 60........`.......L....A(...g... | 
| 3fd60 |  5f 52 74 6c 46 69 6e 64 4c 65 61 73 74 53 69 67    6e 69 66 69 63 61 6e 74 42 69 74 40 38 00 6e 74  | _RtlFindLeastSignificantBit@8.nt | 
| 3fd80 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 3fda0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 32 20 20 20 20 20 20  | 97..............0.......62...... | 
| 3fdc0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    2a 00 00 00 66 02 0c 00 5f 52 74 6c 46 69 6e 64  | ..`.......L....A*...f..._RtlFind | 
| 3fde0 |  4c 61 73 74 42 61 63 6b 77 61 72 64 52 75 6e 43    6c 65 61 72 40 31 32 00 6e 74 64 6c 6c 2e 64 6c  | LastBackwardRunClear@12.ntdll.dl | 
| 3fe00 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 3fe20 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......51........`... | 
| 3fe40 |  ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00 65 02    0c 00 5f 52 74 6c 46 69 6e 64 43 6c 65 61 72 52  | ....L....A....e..._RtlFindClearR | 
| 3fe60 |  75 6e 73 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | uns@16.ntdll.dll..ntdll.dll/.... | 
| 3fe80 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 3fea0 |  20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00 64 02  | ..57........`.......L....A%...d. | 
| 3fec0 |  0c 00 5f 52 74 6c 46 69 6e 64 43 6c 65 61 72 42    69 74 73 41 6e 64 53 65 74 40 31 32 00 6e 74 64  | .._RtlFindClearBitsAndSet@12.ntd | 
| 3fee0 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 3ff00 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 31 20 20 20 20 20 20  | 97..............0.......51...... | 
| 3ff20 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1f 00 00 00 63 02 0c 00 5f 52 74 6c 46 69 6e 64  | ..`.......L....A....c..._RtlFind | 
| 3ff40 |  43 6c 65 61 72 42 69 74 73 40 31 32 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | ClearBits@12.ntdll.dll..ntdll.dl | 
| 3ff60 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 3ff80 |  30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......61........`.......L....A | 
| 3ffa0 |  29 00 00 00 62 02 0c 00 5f 52 74 6c 46 69 6e 64    43 68 61 72 49 6e 55 6e 69 63 6f 64 65 53 74 72  | )...b..._RtlFindCharInUnicodeStr | 
| 3ffc0 |  69 6e 67 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ing@16.ntdll.dll..ntdll.dll/.... | 
| 3ffe0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 40000 |  20 20 37 32 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 34 00 00 00 61 02  | ..72........`.......L....A4...a. | 
| 40020 |  0c 00 5f 52 74 6c 46 69 6e 64 41 63 74 69 76 61    74 69 6f 6e 43 6f 6e 74 65 78 74 53 65 63 74 69  | .._RtlFindActivationContextSecti | 
| 40040 |  6f 6e 53 74 72 69 6e 67 40 32 30 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | onString@20.ntdll.dll.ntdll.dll/ | 
| 40060 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 40080 |  20 20 20 20 20 20 37 30 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 32 00  | ......70........`.......L....A2. | 
| 400a0 |  00 00 60 02 0c 00 5f 52 74 6c 46 69 6e 64 41 63    74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 53  | ..`..._RtlFindActivationContextS | 
| 400c0 |  65 63 74 69 6f 6e 47 75 69 64 40 32 30 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | ectionGuid@20.ntdll.dll.ntdll.dl | 
| 400e0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 40100 |  30 20 20 20 20 20 20 20 37 33 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......73........`.......L....A | 
| 40120 |  35 00 00 00 5f 02 0c 00 5f 52 74 6c 46 69 6e 61    6c 52 65 6c 65 61 73 65 4f 75 74 4f 66 50 72 6f  | 5..._..._RtlFinalReleaseOutOfPro | 
| 40140 |  63 65 73 73 4d 65 6d 6f 72 79 53 74 72 65 61 6d    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | cessMemoryStream@4.ntdll.dll..nt | 
| 40160 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 40180 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......53........`....... | 
| 401a0 |  4c 01 c5 e8 8a 41 21 00 00 00 5e 02 0c 00 5f 52    74 6c 46 69 6c 6c 4d 65 6d 6f 72 79 55 6c 6f 6e  | L....A!...^..._RtlFillMemoryUlon | 
| 401c0 |  67 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | g@12.ntdll.dll..ntdll.dll/...... | 
| 401e0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 40200 |  34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1c 00 00 00 5d 02 0c 00  | 48........`.......L....A....]... | 
| 40220 |  5f 52 74 6c 46 69 6c 6c 4d 65 6d 6f 72 79 40 31    32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | _RtlFillMemory@12.ntdll.dll.ntdl | 
| 40240 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 40260 |  20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......57........`.......L. | 
| 40280 |  c5 e8 8a 41 25 00 00 00 5c 02 0c 00 5f 52 74 6c    45 78 74 65 6e 64 65 64 4d 61 67 69 63 44 69 76  | ...A%...\..._RtlExtendedMagicDiv | 
| 402a0 |  69 64 65 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ide@20.ntdll.dll..ntdll.dll/.... | 
| 402c0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 402e0 |  20 20 36 34 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 2c 00 00 00 5b 02  | ..64........`.......L....A,...[. | 
| 40300 |  0c 00 5f 52 74 6c 45 78 74 65 6e 64 65 64 4c 61    72 67 65 49 6e 74 65 67 65 72 44 69 76 69 64 65  | .._RtlExtendedLargeIntegerDivide | 
| 40320 |  40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @16.ntdll.dll.ntdll.dll/......10 | 
| 40340 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 31  | 99622597..............0.......61 | 
| 40360 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 29 00 00 00 5a 02 0c 00 5f 52  | ........`.......L....A)...Z..._R | 
| 40380 |  74 6c 45 78 74 65 6e 64 65 64 49 6e 74 65 67 65    72 4d 75 6c 74 69 70 6c 79 40 31 32 00 6e 74 64  | tlExtendedIntegerMultiply@12.ntd | 
| 403a0 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 403c0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20  | 97..............0.......48...... | 
| 403e0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1c 00 00 00 59 02 0c 00 5f 52 74 6c 45 78 74 65  | ..`.......L....A....Y..._RtlExte | 
| 40400 |  6e 64 48 65 61 70 40 31 36 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ndHeap@16.ntdll.dll.ntdll.dll/.. | 
| 40420 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 40440 |  20 20 20 20 36 34 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2c 00 00 00  | ....64........`.......L....A,... | 
| 40460 |  58 02 0c 00 5f 52 74 6c 45 78 70 61 6e 64 45 6e    76 69 72 6f 6e 6d 65 6e 74 53 74 72 69 6e 67 73  | X..._RtlExpandEnvironmentStrings | 
| 40480 |  5f 55 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | _U@16.ntdll.dll.ntdll.dll/...... | 
| 404a0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 404c0 |  35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1f 00 00 00 57 02 0c 00  | 51........`.......L....A....W... | 
| 404e0 |  5f 52 74 6c 45 78 69 74 55 73 65 72 54 68 72 65    61 64 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | _RtlExitUserThread@4.ntdll.dll.. | 
| 40500 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 40520 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......55........`..... | 
| 40540 |  00 00 4c 01 c5 e8 8a 41 23 00 00 00 56 02 0c 00    5f 52 74 6c 45 72 61 73 65 55 6e 69 63 6f 64 65  | ..L....A#...V..._RtlEraseUnicode | 
| 40560 |  53 74 72 69 6e 67 40 34 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | String@4.ntdll.dll..ntdll.dll/.. | 
| 40580 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 405a0 |  20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 24 00 00 00  | ....56........`.......L....A$... | 
| 405c0 |  55 02 0c 00 5f 52 74 6c 45 71 75 61 6c 55 6e 69    63 6f 64 65 53 74 72 69 6e 67 40 31 32 00 6e 74  | U..._RtlEqualUnicodeString@12.nt | 
| 405e0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 40600 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20  | 97..............0.......49...... | 
| 40620 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1d 00 00 00 54 02 0c 00 5f 52 74 6c 45 71 75 61  | ..`.......L....A....T..._RtlEqua | 
| 40640 |  6c 53 74 72 69 6e 67 40 31 32 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | lString@12.ntdll.dll..ntdll.dll/ | 
| 40660 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 40680 |  20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 19 00  | ......45........`.......L....A.. | 
| 406a0 |  00 00 53 02 0c 00 5f 52 74 6c 45 71 75 61 6c 53    69 64 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | ..S..._RtlEqualSid@8.ntdll.dll.. | 
| 406c0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 406e0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......51........`..... | 
| 40700 |  00 00 4c 01 c5 e8 8a 41 1f 00 00 00 52 02 0c 00    5f 52 74 6c 45 71 75 61 6c 50 72 65 66 69 78 53  | ..L....A....R..._RtlEqualPrefixS | 
| 40720 |  69 64 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | id@8.ntdll.dll..ntdll.dll/...... | 
| 40740 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 40760 |  34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1a 00 00 00 51 02 0c 00  | 46........`.......L....A....Q... | 
| 40780 |  5f 52 74 6c 45 71 75 61 6c 4c 75 69 64 40 38 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | _RtlEqualLuid@8.ntdll.dll.ntdll. | 
| 407a0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 407c0 |  20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......52........`.......L... | 
| 407e0 |  8a 41 20 00 00 00 50 02 0c 00 5f 52 74 6c 45 71    75 61 6c 44 6f 6d 61 69 6e 4e 61 6d 65 40 38 00  | .A....P..._RtlEqualDomainName@8. | 
| 40800 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 40820 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20  | 2597..............0.......54.... | 
| 40840 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 22 00 00 00 4f 02 0c 00 5f 52 74 6c 45 71  | ....`.......L....A"...O..._RtlEq | 
| 40860 |  75 61 6c 43 6f 6d 70 75 74 65 72 4e 61 6d 65 40    38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | ualComputerName@8.ntdll.dll.ntdl | 
| 40880 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 408a0 |  20 20 20 20 30 20 20 20 20 20 20 20 37 36 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......76........`.......L. | 
| 408c0 |  c5 e8 8a 41 38 00 00 00 4e 02 0c 00 5f 52 74 6c    45 6e 75 6d 65 72 61 74 65 47 65 6e 65 72 69 63  | ...A8...N..._RtlEnumerateGeneric | 
| 408e0 |  54 61 62 6c 65 57 69 74 68 6f 75 74 53 70 6c 61    79 69 6e 67 41 76 6c 40 38 00 6e 74 64 6c 6c 2e  | TableWithoutSplayingAvl@8.ntdll. | 
| 40900 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 40920 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 37 33 20 20 20 20 20 20 20 20 60 0a  | ............0.......73........`. | 
| 40940 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 35 00 00 00    4d 02 0c 00 5f 52 74 6c 45 6e 75 6d 65 72 61 74  | ......L....A5...M..._RtlEnumerat | 
| 40960 |  65 47 65 6e 65 72 69 63 54 61 62 6c 65 57 69 74    68 6f 75 74 53 70 6c 61 79 69 6e 67 40 38 00 6e  | eGenericTableWithoutSplaying@8.n | 
| 40980 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 409a0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 37 33 20 20 20 20  | 2597..............0.......73.... | 
| 409c0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 35 00 00 00 4c 02 0c 00 5f 52 74 6c 45 6e  | ....`.......L....A5...L..._RtlEn | 
| 409e0 |  75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61    62 6c 65 4c 69 6b 65 41 44 69 72 65 63 74 6f 72  | umerateGenericTableLikeADirector | 
| 40a00 |  79 40 32 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | y@28.ntdll.dll..ntdll.dll/...... | 
| 40a20 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 40a40 |  36 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 29 00 00 00 4b 02 0c 00  | 61........`.......L....A)...K... | 
| 40a60 |  5f 52 74 6c 45 6e 75 6d 65 72 61 74 65 47 65 6e    65 72 69 63 54 61 62 6c 65 41 76 6c 40 38 00 6e  | _RtlEnumerateGenericTableAvl@8.n | 
| 40a80 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 40aa0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20  | 2597..............0.......58.... | 
| 40ac0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 26 00 00 00 4a 02 0c 00 5f 52 74 6c 45 6e  | ....`.......L....A&...J..._RtlEn | 
| 40ae0 |  75 6d 65 72 61 74 65 47 65 6e 65 72 69 63 54 61    62 6c 65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | umerateGenericTable@8.ntdll.dll. | 
| 40b00 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 40b20 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......53........`..... | 
| 40b40 |  00 00 4c 01 c5 e8 8a 41 21 00 00 00 49 02 0c 00    5f 52 74 6c 45 6e 75 6d 50 72 6f 63 65 73 73 48  | ..L....A!...I..._RtlEnumProcessH | 
| 40b60 |  65 61 70 73 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | eaps@8.ntdll.dll..ntdll.dll/.... | 
| 40b80 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 40ba0 |  20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00 48 02  | ..57........`.......L....A%...H. | 
| 40bc0 |  0c 00 5f 52 74 6c 45 6e 74 65 72 43 72 69 74 69    63 61 6c 53 65 63 74 69 6f 6e 40 34 00 6e 74 64  | .._RtlEnterCriticalSection@4.ntd | 
| 40be0 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 40c00 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20  | 97..............0.......61...... | 
| 40c20 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    29 00 00 00 47 02 0c 00 5f 52 74 6c 45 6e 6c 61  | ..`.......L....A)...G..._RtlEnla | 
| 40c40 |  72 67 65 64 55 6e 73 69 67 6e 65 64 4d 75 6c 74    69 70 6c 79 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c  | rgedUnsignedMultiply@8.ntdll.dll | 
| 40c60 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 40c80 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......60........`... | 
| 40ca0 |  ff ff 00 00 4c 01 c5 e8 8a 41 28 00 00 00 46 02    0c 00 5f 52 74 6c 45 6e 6c 61 72 67 65 64 55 6e  | ....L....A(...F..._RtlEnlargedUn | 
| 40cc0 |  73 69 67 6e 65 64 44 69 76 69 64 65 40 31 36 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | signedDivide@16.ntdll.dll.ntdll. | 
| 40ce0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 40d00 |  20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......60........`.......L... | 
| 40d20 |  8a 41 28 00 00 00 45 02 0c 00 5f 52 74 6c 45 6e    6c 61 72 67 65 64 49 6e 74 65 67 65 72 4d 75 6c  | .A(...E..._RtlEnlargedIntegerMul | 
| 40d40 |  74 69 70 6c 79 40 38 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | tiply@8.ntdll.dll.ntdll.dll/.... | 
| 40d60 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 40d80 |  20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 24 00 00 00 44 02  | ..56........`.......L....A$...D. | 
| 40da0 |  0c 00 5f 52 74 6c 45 6e 63 6f 64 65 53 79 73 74    65 6d 50 6f 69 6e 74 65 72 40 34 00 6e 74 64 6c  | .._RtlEncodeSystemPointer@4.ntdl | 
| 40dc0 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 40de0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20  | ..............0.......50........ | 
| 40e00 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00    00 00 43 02 0c 00 5f 52 74 6c 45 6e 63 6f 64 65  | `.......L....A....C..._RtlEncode | 
| 40e20 |  50 6f 69 6e 74 65 72 40 34 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | Pointer@4.ntdll.dll.ntdll.dll/.. | 
| 40e40 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 40e60 |  20 20 20 20 37 36 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 38 00 00 00  | ....76........`.......L....A8... | 
| 40e80 |  42 02 0c 00 5f 52 74 6c 45 6e 61 62 6c 65 45 61    72 6c 79 43 72 69 74 69 63 61 6c 53 65 63 74 69  | B..._RtlEnableEarlyCriticalSecti | 
| 40ea0 |  6f 6e 45 76 65 6e 74 43 72 65 61 74 69 6f 6e 40    30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | onEventCreation@0.ntdll.dll.ntdl | 
| 40ec0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 40ee0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......51........`.......L. | 
| 40f00 |  c5 e8 8a 41 1f 00 00 00 41 02 0c 00 5f 52 74 6c    45 6d 70 74 79 41 74 6f 6d 54 61 62 6c 65 40 38  | ...A....A..._RtlEmptyAtomTable@8 | 
| 40f20 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 40f40 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20  | 622597..............0.......60.. | 
| 40f60 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 28 00 00 00 40 02 0c 00 5f 52 74 6c  | ......`.......L....A(...@..._Rtl | 
| 40f80 |  44 75 70 6c 69 63 61 74 65 55 6e 69 63 6f 64 65    53 74 72 69 6e 67 40 31 32 00 6e 74 64 6c 6c 2e  | DuplicateUnicodeString@12.ntdll. | 
| 40fa0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 40fc0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a  | ............0.......49........`. | 
| 40fe0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1d 00 00 00    3f 02 0c 00 5f 52 74 6c 44 75 6d 70 52 65 73 6f  | ......L....A....?..._RtlDumpReso | 
| 41000 |  75 72 63 65 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | urce@4.ntdll.dll..ntdll.dll/.... | 
| 41020 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 41040 |  20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00 3e 02  | ..59........`.......L....A'...>. | 
| 41060 |  0c 00 5f 52 74 6c 44 6f 77 6e 63 61 73 65 55 6e    69 63 6f 64 65 53 74 72 69 6e 67 40 31 32 00 6e  | .._RtlDowncaseUnicodeString@12.n | 
| 41080 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 410a0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20  | 2597..............0.......56.... | 
| 410c0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 24 00 00 00 3d 02 0c 00 5f 52 74 6c 44 6f  | ....`.......L....A$...=..._RtlDo | 
| 410e0 |  77 6e 63 61 73 65 55 6e 69 63 6f 64 65 43 68 61    72 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | wncaseUnicodeChar@4.ntdll.dll.nt | 
| 41100 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 41120 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......56........`....... | 
| 41140 |  4c 01 c5 e8 8a 41 24 00 00 00 3c 02 0c 00 5f 52    74 6c 44 6f 73 53 65 61 72 63 68 50 61 74 68 5f  | L....A$...<..._RtlDosSearchPath_ | 
| 41160 |  55 73 74 72 40 33 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | Ustr@36.ntdll.dll.ntdll.dll/.... | 
| 41180 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 411a0 |  20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00 3b 02  | ..53........`.......L....A!...;. | 
| 411c0 |  0c 00 5f 52 74 6c 44 6f 73 53 65 61 72 63 68 50    61 74 68 5f 55 40 32 34 00 6e 74 64 6c 6c 2e 64  | .._RtlDosSearchPath_U@24.ntdll.d | 
| 411e0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 41200 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 38 32 20 20 20 20 20 20 20 20 60 0a  | ............0.......82........`. | 
| 41220 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 3e 00 00 00    3a 02 0c 00 5f 52 74 6c 44 6f 73 50 61 74 68 4e  | ......L....A>...:..._RtlDosPathN | 
| 41240 |  61 6d 65 54 6f 52 65 6c 61 74 69 76 65 4e 74 50    61 74 68 4e 61 6d 65 5f 55 5f 57 69 74 68 53 74  | ameToRelativeNtPathName_U_WithSt | 
| 41260 |  61 74 75 73 40 31 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | atus@16.ntdll.dll.ntdll.dll/.... | 
| 41280 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 412a0 |  20 20 37 31 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 33 00 00 00 39 02  | ..71........`.......L....A3...9. | 
| 412c0 |  0c 00 5f 52 74 6c 44 6f 73 50 61 74 68 4e 61 6d    65 54 6f 52 65 6c 61 74 69 76 65 4e 74 50 61 74  | .._RtlDosPathNameToRelativeNtPat | 
| 412e0 |  68 4e 61 6d 65 5f 55 40 31 36 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | hName_U@16.ntdll.dll..ntdll.dll/ | 
| 41300 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 41320 |  20 20 20 20 20 20 37 34 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 36 00  | ......74........`.......L....A6. | 
| 41340 |  00 00 38 02 0c 00 5f 52 74 6c 44 6f 73 50 61 74    68 4e 61 6d 65 54 6f 4e 74 50 61 74 68 4e 61 6d  | ..8..._RtlDosPathNameToNtPathNam | 
| 41360 |  65 5f 55 5f 57 69 74 68 53 74 61 74 75 73 40 31    36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | e_U_WithStatus@16.ntdll.dll.ntdl | 
| 41380 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 413a0 |  20 20 20 20 30 20 20 20 20 20 20 20 36 33 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......63........`.......L. | 
| 413c0 |  c5 e8 8a 41 2b 00 00 00 37 02 0c 00 5f 52 74 6c    44 6f 73 50 61 74 68 4e 61 6d 65 54 6f 4e 74 50  | ...A+...7..._RtlDosPathNameToNtP | 
| 413e0 |  61 74 68 4e 61 6d 65 5f 55 40 31 36 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | athName_U@16.ntdll.dll..ntdll.dl | 
| 41400 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 41420 |  30 20 20 20 20 20 20 20 37 35 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......75........`.......L....A | 
| 41440 |  37 00 00 00 36 02 0c 00 5f 52 74 6c 44 6f 73 41    70 70 6c 79 46 69 6c 65 49 73 6f 6c 61 74 69 6f  | 7...6..._RtlDosApplyFileIsolatio | 
| 41460 |  6e 52 65 64 69 72 65 63 74 69 6f 6e 5f 55 73 74    72 40 33 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | nRedirection_Ustr@36.ntdll.dll.. | 
| 41480 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 414a0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......53........`..... | 
| 414c0 |  00 00 4c 01 c5 e8 8a 41 21 00 00 00 35 02 0c 00    5f 52 74 6c 44 6f 65 73 46 69 6c 65 45 78 69 73  | ..L....A!...5..._RtlDoesFileExis | 
| 414e0 |  74 73 5f 55 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ts_U@4.ntdll.dll..ntdll.dll/.... | 
| 41500 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 41520 |  20 20 36 33 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 2b 00 00 00 34 02  | ..63........`.......L....A+...4. | 
| 41540 |  0c 00 5f 52 74 6c 44 6e 73 48 6f 73 74 4e 61 6d    65 54 6f 43 6f 6d 70 75 74 65 72 4e 61 6d 65 40  | .._RtlDnsHostNameToComputerName@ | 
| 41560 |  31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 12.ntdll.dll..ntdll.dll/......10 | 
| 41580 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38  | 99622597..............0.......58 | 
| 415a0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 26 00 00 00 33 02 0c 00 5f 52  | ........`.......L....A&...3..._R | 
| 415c0 |  74 6c 44 6c 6c 53 68 75 74 64 6f 77 6e 49 6e 50    72 6f 67 72 65 73 73 40 30 00 6e 74 64 6c 6c 2e  | tlDllShutdownInProgress@0.ntdll. | 
| 415e0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 41600 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a  | ............0.......63........`. | 
| 41620 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2b 00 00 00    32 02 0c 00 5f 52 74 6c 44 65 74 65 72 6d 69 6e  | ......L....A+...2..._RtlDetermin | 
| 41640 |  65 44 6f 73 50 61 74 68 4e 61 6d 65 54 79 70 65    5f 55 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | eDosPathNameType_U@4.ntdll.dll.. | 
| 41660 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 41680 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......60........`..... | 
| 416a0 |  00 00 4c 01 c5 e8 8a 41 28 00 00 00 31 02 0c 00    5f 52 74 6c 44 65 73 74 72 6f 79 51 75 65 72 79  | ..L....A(...1..._RtlDestroyQuery | 
| 416c0 |  44 65 62 75 67 42 75 66 66 65 72 40 34 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | DebugBuffer@4.ntdll.dll.ntdll.dl | 
| 416e0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 41700 |  30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......61........`.......L....A | 
| 41720 |  29 00 00 00 30 02 0c 00 5f 52 74 6c 44 65 73 74    72 6f 79 50 72 6f 63 65 73 73 50 61 72 61 6d 65  | )...0..._RtlDestroyProcessParame | 
| 41740 |  74 65 72 73 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ters@4.ntdll.dll..ntdll.dll/.... | 
| 41760 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 41780 |  20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00 2f 02  | ..48........`.......L....A..../. | 
| 417a0 |  0c 00 5f 52 74 6c 44 65 73 74 72 6f 79 48 65 61    70 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | .._RtlDestroyHeap@4.ntdll.dll.nt | 
| 417c0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 417e0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......55........`....... | 
| 41800 |  4c 01 c5 e8 8a 41 23 00 00 00 2e 02 0c 00 5f 52    74 6c 44 65 73 74 72 6f 79 48 61 6e 64 6c 65 54  | L....A#......._RtlDestroyHandleT | 
| 41820 |  61 62 6c 65 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | able@4.ntdll.dll..ntdll.dll/.... | 
| 41840 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 41860 |  20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 23 00 00 00 2d 02  | ..55........`.......L....A#...-. | 
| 41880 |  0c 00 5f 52 74 6c 44 65 73 74 72 6f 79 45 6e 76    69 72 6f 6e 6d 65 6e 74 40 34 00 6e 74 64 6c 6c  | .._RtlDestroyEnvironment@4.ntdll | 
| 418a0 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 418c0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20  | ..............0.......53........ | 
| 418e0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 21 00    00 00 2c 02 0c 00 5f 52 74 6c 44 65 73 74 72 6f  | `.......L....A!...,..._RtlDestro | 
| 41900 |  79 41 74 6f 6d 54 61 62 6c 65 40 34 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | yAtomTable@4.ntdll.dll..ntdll.dl | 
| 41920 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 41940 |  30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......53........`.......L....A | 
| 41960 |  21 00 00 00 2b 02 0c 00 5f 52 74 6c 44 65 72 65    67 69 73 74 65 72 57 61 69 74 45 78 40 38 00 6e  | !...+..._RtlDeregisterWaitEx@8.n | 
| 41980 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 419a0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20  | 2597..............0.......51.... | 
| 419c0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1f 00 00 00 2a 02 0c 00 5f 52 74 6c 44 65  | ....`.......L....A....*..._RtlDe | 
| 419e0 |  72 65 67 69 73 74 65 72 57 61 69 74 40 34 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | registerWait@4.ntdll.dll..ntdll. | 
| 41a00 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 41a20 |  20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......55........`.......L... | 
| 41a40 |  8a 41 23 00 00 00 29 02 0c 00 5f 52 74 6c 44 65    6c 65 74 65 54 69 6d 65 72 51 75 65 75 65 45 78  | .A#...)..._RtlDeleteTimerQueueEx | 
| 41a60 |  40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @8.ntdll.dll..ntdll.dll/......10 | 
| 41a80 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33  | 99622597..............0.......53 | 
| 41aa0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 21 00 00 00 28 02 0c 00 5f 52  | ........`.......L....A!...(..._R | 
| 41ac0 |  74 6c 44 65 6c 65 74 65 54 69 6d 65 72 51 75 65    75 65 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | tlDeleteTimerQueue@4.ntdll.dll.. | 
| 41ae0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 41b00 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......49........`..... | 
| 41b20 |  00 00 4c 01 c5 e8 8a 41 1d 00 00 00 27 02 0c 00    5f 52 74 6c 44 65 6c 65 74 65 54 69 6d 65 72 40  | ..L....A....'..._RtlDeleteTimer@ | 
| 41b40 |  31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 12.ntdll.dll..ntdll.dll/......10 | 
| 41b60 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37  | 99622597..............0.......57 | 
| 41b80 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 25 00 00 00 26 02 0c 00 5f 52  | ........`.......L....A%...&..._R | 
| 41ba0 |  74 6c 44 65 6c 65 74 65 53 65 63 75 72 69 74 79    4f 62 6a 65 63 74 40 34 00 6e 74 64 6c 6c 2e 64  | tlDeleteSecurityObject@4.ntdll.d | 
| 41bc0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 41be0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a  | ............0.......51........`. | 
| 41c00 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00    25 02 0c 00 5f 52 74 6c 44 65 6c 65 74 65 52 65  | ......L....A....%..._RtlDeleteRe | 
| 41c20 |  73 6f 75 72 63 65 40 34 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | source@4.ntdll.dll..ntdll.dll/.. | 
| 41c40 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 41c60 |  20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00  | ....57........`.......L....A%... | 
| 41c80 |  24 02 0c 00 5f 52 74 6c 44 65 6c 65 74 65 52 65    67 69 73 74 72 79 56 61 6c 75 65 40 31 32 00 6e  | $..._RtlDeleteRegistryValue@12.n | 
| 41ca0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 41cc0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20  | 2597..............0.......50.... | 
| 41ce0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1e 00 00 00 23 02 0c 00 5f 52 74 6c 44 65  | ....`.......L....A....#..._RtlDe | 
| 41d00 |  6c 65 74 65 4e 6f 53 70 6c 61 79 40 38 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | leteNoSplay@8.ntdll.dll.ntdll.dl | 
| 41d20 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 41d40 |  30 20 20 20 20 20 20 20 36 35 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......65........`.......L....A | 
| 41d60 |  2d 00 00 00 22 02 0c 00 5f 52 74 6c 44 65 6c 65    74 65 45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63  | -..."..._RtlDeleteElementGeneric | 
| 41d80 |  54 61 62 6c 65 41 76 6c 40 38 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | TableAvl@8.ntdll.dll..ntdll.dll/ | 
| 41da0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 41dc0 |  20 20 20 20 20 20 36 32 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2a 00  | ......62........`.......L....A*. | 
| 41de0 |  00 00 21 02 0c 00 5f 52 74 6c 44 65 6c 65 74 65    45 6c 65 6d 65 6e 74 47 65 6e 65 72 69 63 54 61  | ..!..._RtlDeleteElementGenericTa | 
| 41e00 |  62 6c 65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ble@8.ntdll.dll.ntdll.dll/...... | 
| 41e20 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 41e40 |  35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 26 00 00 00 20 02 0c 00  | 58........`.......L....A&....... | 
| 41e60 |  5f 52 74 6c 44 65 6c 65 74 65 43 72 69 74 69 63    61 6c 53 65 63 74 69 6f 6e 40 34 00 6e 74 64 6c  | _RtlDeleteCriticalSection@4.ntdl | 
| 41e80 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 41ea0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20  | ..............0.......60........ | 
| 41ec0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 28 00    00 00 1f 02 0c 00 5f 52 74 6c 44 65 6c 65 74 65  | `.......L....A(......._RtlDelete | 
| 41ee0 |  41 74 6f 6d 46 72 6f 6d 41 74 6f 6d 54 61 62 6c    65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | AtomFromAtomTable@8.ntdll.dll.nt | 
| 41f00 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 41f20 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......46........`....... | 
| 41f40 |  4c 01 c5 e8 8a 41 1a 00 00 00 1e 02 0c 00 5f 52    74 6c 44 65 6c 65 74 65 41 63 65 40 38 00 6e 74  | L....A........_RtlDeleteAce@8.nt | 
| 41f60 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 41f80 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 33 20 20 20 20 20 20  | 97..............0.......43...... | 
| 41fa0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    17 00 00 00 1d 02 0c 00 5f 52 74 6c 44 65 6c 65  | ..`.......L....A........_RtlDele | 
| 41fc0 |  74 65 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | te@4.ntdll.dll..ntdll.dll/...... | 
| 41fe0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 42000 |  34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1d 00 00 00 1c 02 0c 00  | 49........`.......L....A........ | 
| 42020 |  5f 52 74 6c 44 65 66 61 75 6c 74 4e 70 41 63 6c    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | _RtlDefaultNpAcl@4.ntdll.dll..nt | 
| 42040 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 42060 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......56........`....... | 
| 42080 |  4c 01 c5 e8 8a 41 24 00 00 00 1b 02 0c 00 5f 52    74 6c 44 65 63 6f 6d 70 72 65 73 73 46 72 61 67  | L....A$......._RtlDecompressFrag | 
| 420a0 |  6d 65 6e 74 40 33 32 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ment@32.ntdll.dll.ntdll.dll/.... | 
| 420c0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 420e0 |  20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00 1a 02  | ..54........`.......L....A"..... | 
| 42100 |  0c 00 5f 52 74 6c 44 65 63 6f 6d 70 72 65 73 73    42 75 66 66 65 72 40 32 34 00 6e 74 64 6c 6c 2e  | .._RtlDecompressBuffer@24.ntdll. | 
| 42120 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 42140 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a  | ............0.......56........`. | 
| 42160 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 24 00 00 00    19 02 0c 00 5f 52 74 6c 44 65 63 6f 64 65 53 79  | ......L....A$......._RtlDecodeSy | 
| 42180 |  73 74 65 6d 50 6f 69 6e 74 65 72 40 34 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | stemPointer@4.ntdll.dll.ntdll.dl | 
| 421a0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 421c0 |  30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......50........`.......L....A | 
| 421e0 |  1e 00 00 00 18 02 0c 00 5f 52 74 6c 44 65 63 6f    64 65 50 6f 69 6e 74 65 72 40 34 00 6e 74 64 6c  | ........_RtlDecodePointer@4.ntdl | 
| 42200 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 42220 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20  | ..............0.......52........ | 
| 42240 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00    00 00 17 02 0c 00 5f 52 74 6c 44 65 62 75 67 50  | `.......L....A........_RtlDebugP | 
| 42260 |  72 69 6e 74 54 69 6d 65 73 40 30 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | rintTimes@0.ntdll.dll.ntdll.dll/ | 
| 42280 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 422a0 |  20 20 20 20 20 20 36 34 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2c 00  | ......64........`.......L....A,. | 
| 422c0 |  00 00 15 02 0c 00 5f 52 74 6c 44 65 61 63 74 69    76 61 74 65 41 63 74 69 76 61 74 69 6f 6e 43 6f  | ......_RtlDeactivateActivationCo | 
| 422e0 |  6e 74 65 78 74 40 38 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ntext@8.ntdll.dll.ntdll.dll/.... | 
| 42300 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 42320 |  20 20 36 31 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 29 00 00 00 14 02  | ..61........`.......L....A)..... | 
| 42340 |  0c 00 5f 52 74 6c 44 65 4e 6f 72 6d 61 6c 69 7a    65 50 72 6f 63 65 73 73 50 61 72 61 6d 73 40 34  | .._RtlDeNormalizeProcessParams@4 | 
| 42360 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 42380 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20  | 622597..............0.......61.. | 
| 423a0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 29 00 00 00 13 02 0c 00 5f 52 74 6c  | ......`.......L....A)......._Rtl | 
| 423c0 |  43 75 74 6f 76 65 72 54 69 6d 65 54 6f 53 79 73    74 65 6d 54 69 6d 65 40 31 36 00 6e 74 64 6c 6c  | CutoverTimeToSystemTime@16.ntdll | 
| 423e0 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 42400 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20  | ..............0.......56........ | 
| 42420 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 24 00    00 00 12 02 0c 00 5f 52 74 6c 43 75 73 74 6f 6d  | `.......L....A$......._RtlCustom | 
| 42440 |  43 50 54 6f 55 6e 69 63 6f 64 65 4e 40 32 34 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | CPToUnicodeN@24.ntdll.dll.ntdll. | 
| 42460 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 42480 |  20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......54........`.......L... | 
| 424a0 |  8a 41 22 00 00 00 11 02 0c 00 5f 52 74 6c 43 72    65 61 74 65 55 73 65 72 54 68 72 65 61 64 40 34  | .A"......._RtlCreateUserThread@4 | 
| 424c0 |  30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 0.ntdll.dll.ntdll.dll/......1099 | 
| 424e0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 32 20 20  | 622597..............0.......62.. | 
| 42500 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 2a 00 00 00 10 02 0c 00 5f 52 74 6c  | ......`.......L....A*......._Rtl | 
| 42520 |  43 72 65 61 74 65 55 73 65 72 53 65 63 75 72 69    74 79 4f 62 6a 65 63 74 40 32 38 00 6e 74 64 6c  | CreateUserSecurityObject@28.ntdl | 
| 42540 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 42560 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20  | ..............0.......55........ | 
| 42580 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 23 00    00 00 0f 02 0c 00 5f 52 74 6c 43 72 65 61 74 65  | `.......L....A#......._RtlCreate | 
| 425a0 |  55 73 65 72 50 72 6f 63 65 73 73 40 34 30 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | UserProcess@40.ntdll.dll..ntdll. | 
| 425c0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 425e0 |  20 20 30 20 20 20 20 20 20 20 36 36 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......66........`.......L... | 
| 42600 |  8a 41 2e 00 00 00 0e 02 0c 00 5f 52 74 6c 43 72    65 61 74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e  | .A........_RtlCreateUnicodeStrin | 
| 42620 |  67 46 72 6f 6d 41 73 63 69 69 7a 40 38 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | gFromAsciiz@8.ntdll.dll.ntdll.dl | 
| 42640 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 42660 |  30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......56........`.......L....A | 
| 42680 |  24 00 00 00 0d 02 0c 00 5f 52 74 6c 43 72 65 61    74 65 55 6e 69 63 6f 64 65 53 74 72 69 6e 67 40  | $......._RtlCreateUnicodeString@ | 
| 426a0 |  38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 8.ntdll.dll.ntdll.dll/......1099 | 
| 426c0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20  | 622597..............0.......53.. | 
| 426e0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 21 00 00 00 0c 02 0c 00 5f 52 74 6c  | ......`.......L....A!......._Rtl | 
| 42700 |  43 72 65 61 74 65 54 69 6d 65 72 51 75 65 75 65    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | CreateTimerQueue@4.ntdll.dll..nt | 
| 42720 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 42740 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......49........`....... | 
| 42760 |  4c 01 c5 e8 8a 41 1d 00 00 00 0b 02 0c 00 5f 52    74 6c 43 72 65 61 74 65 54 69 6d 65 72 40 32 38  | L....A........_RtlCreateTimer@28 | 
| 42780 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 427a0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20  | 622597..............0.......51.. | 
| 427c0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1f 00 00 00 0a 02 0c 00 5f 52 74 6c  | ......`.......L....A........_Rtl | 
| 427e0 |  43 72 65 61 74 65 54 61 67 48 65 61 70 40 31 36    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | CreateTagHeap@16.ntdll.dll..ntdl | 
| 42800 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 42820 |  20 20 20 20 30 20 20 20 20 20 20 20 37 32 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......72........`.......L. | 
| 42840 |  c5 e8 8a 41 34 00 00 00 09 02 0c 00 5f 52 74 6c    43 72 65 61 74 65 53 79 73 74 65 6d 56 6f 6c 75  | ...A4......._RtlCreateSystemVolu | 
| 42860 |  6d 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 6f 6c    64 65 72 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | meInformationFolder@4.ntdll.dll. | 
| 42880 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 428a0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    36 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......61........`..... | 
| 428c0 |  00 00 4c 01 c5 e8 8a 41 29 00 00 00 08 02 0c 00    5f 52 74 6c 43 72 65 61 74 65 53 65 63 75 72 69  | ..L....A)......._RtlCreateSecuri | 
| 428e0 |  74 79 44 65 73 63 72 69 70 74 6f 72 40 38 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | tyDescriptor@8.ntdll.dll..ntdll. | 
| 42900 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 42920 |  20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......54........`.......L... | 
| 42940 |  8a 41 22 00 00 00 07 02 0c 00 5f 52 74 6c 43 72    65 61 74 65 52 65 67 69 73 74 72 79 4b 65 79 40  | .A"......._RtlCreateRegistryKey@ | 
| 42960 |  38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 8.ntdll.dll.ntdll.dll/......1099 | 
| 42980 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20  | 622597..............0.......59.. | 
| 429a0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 27 00 00 00 06 02 0c 00 5f 52 74 6c  | ......`.......L....A'......._Rtl | 
| 429c0 |  43 72 65 61 74 65 51 75 65 72 79 44 65 62 75 67    42 75 66 66 65 72 40 38 00 6e 74 64 6c 6c 2e 64  | CreateQueryDebugBuffer@8.ntdll.d | 
| 429e0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 42a00 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 31 20 20 20 20 20 20 20 20 60 0a  | ............0.......61........`. | 
| 42a20 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 29 00 00 00    05 02 0c 00 5f 52 74 6c 43 72 65 61 74 65 50 72  | ......L....A)......._RtlCreatePr | 
| 42a40 |  6f 63 65 73 73 50 61 72 61 6d 65 74 65 72 73 40    34 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | ocessParameters@40.ntdll.dll..nt | 
| 42a60 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 42a80 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......48........`....... | 
| 42aa0 |  4c 01 c5 e8 8a 41 1c 00 00 00 04 02 0c 00 5f 52    74 6c 43 72 65 61 74 65 48 65 61 70 40 32 34 00  | L....A........_RtlCreateHeap@24. | 
| 42ac0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 42ae0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20  | 2597..............0.......54.... | 
| 42b00 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 22 00 00 00 03 02 0c 00 5f 52 74 6c 43 72  | ....`.......L....A"......._RtlCr | 
| 42b20 |  65 61 74 65 45 6e 76 69 72 6f 6e 6d 65 6e 74 40    38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | eateEnvironment@8.ntdll.dll.ntdl | 
| 42b40 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 42b60 |  20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......61........`.......L. | 
| 42b80 |  c5 e8 8a 41 29 00 00 00 02 02 0c 00 5f 52 74 6c    43 72 65 61 74 65 42 6f 6f 74 53 74 61 74 75 73  | ...A)......._RtlCreateBootStatus | 
| 42ba0 |  44 61 74 61 46 69 6c 65 40 30 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | DataFile@0.ntdll.dll..ntdll.dll/ | 
| 42bc0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 42be0 |  20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00  | ......52........`.......L....A.. | 
| 42c00 |  00 00 01 02 0c 00 5f 52 74 6c 43 72 65 61 74 65    41 74 6f 6d 54 61 62 6c 65 40 38 00 6e 74 64 6c  | ......_RtlCreateAtomTable@8.ntdl | 
| 42c20 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 42c40 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20  | ..............0.......52........ | 
| 42c60 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00    00 00 00 02 0c 00 5f 52 74 6c 43 72 65 61 74 65  | `.......L....A........_RtlCreate | 
| 42c80 |  41 6e 64 53 65 74 53 44 40 32 30 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | AndSetSD@20.ntdll.dll.ntdll.dll/ | 
| 42ca0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 42cc0 |  20 20 20 20 20 20 36 31 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 29 00  | ......61........`.......L....A). | 
| 42ce0 |  00 00 ff 01 0c 00 5f 52 74 6c 43 72 65 61 74 65    41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78  | ......_RtlCreateActivationContex | 
| 42d00 |  74 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | t@24.ntdll.dll..ntdll.dll/...... | 
| 42d20 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 42d40 |  34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1b 00 00 00 fe 01 0c 00  | 47........`.......L....A........ | 
| 42d60 |  5f 52 74 6c 43 72 65 61 74 65 41 63 6c 40 31 32    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | _RtlCreateAcl@12.ntdll.dll..ntdl | 
| 42d80 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 42da0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......54........`.......L. | 
| 42dc0 |  c5 e8 8a 41 22 00 00 00 fd 01 0c 00 5f 52 74 6c    43 6f 70 79 55 6e 69 63 6f 64 65 53 74 72 69 6e  | ...A"......._RtlCopyUnicodeStrin | 
| 42de0 |  67 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | g@8.ntdll.dll.ntdll.dll/......10 | 
| 42e00 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37  | 99622597..............0.......47 | 
| 42e20 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1b 00 00 00 fc 01 0c 00 5f 52  | ........`.......L....A........_R | 
| 42e40 |  74 6c 43 6f 70 79 53 74 72 69 6e 67 40 38 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | tlCopyString@8.ntdll.dll..ntdll. | 
| 42e60 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 42e80 |  20 20 30 20 20 20 20 20 20 20 36 33 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......63........`.......L... | 
| 42ea0 |  8a 41 2b 00 00 00 fb 01 0c 00 5f 52 74 6c 43 6f    70 79 53 69 64 41 6e 64 41 74 74 72 69 62 75 74  | .A+......._RtlCopySidAndAttribut | 
| 42ec0 |  65 73 41 72 72 61 79 40 32 38 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | esArray@28.ntdll.dll..ntdll.dll/ | 
| 42ee0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 42f00 |  20 20 20 20 20 20 34 35 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 19 00  | ......45........`.......L....A.. | 
| 42f20 |  00 00 fa 01 0c 00 5f 52 74 6c 43 6f 70 79 53 69    64 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | ......_RtlCopySid@12.ntdll.dll.. | 
| 42f40 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 42f60 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......59........`..... | 
| 42f80 |  00 00 4c 01 c5 e8 8a 41 27 00 00 00 f9 01 0c 00    5f 52 74 6c 43 6f 70 79 53 65 63 75 72 69 74 79  | ..L....A'......._RtlCopySecurity | 
| 42fa0 |  44 65 73 63 72 69 70 74 6f 72 40 38 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | Descriptor@8.ntdll.dll..ntdll.dl | 
| 42fc0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 42fe0 |  30 20 20 20 20 20 20 20 36 38 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......68........`.......L....A | 
| 43000 |  30 00 00 00 f8 01 0c 00 5f 52 74 6c 43 6f 70 79    4f 75 74 4f 66 50 72 6f 63 65 73 73 4d 65 6d 6f  | 0......._RtlCopyOutOfProcessMemo | 
| 43020 |  72 79 53 74 72 65 61 6d 54 6f 40 32 34 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | ryStreamTo@24.ntdll.dll.ntdll.dl | 
| 43040 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 43060 |  30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......56........`.......L....A | 
| 43080 |  24 00 00 00 f7 01 0c 00 5f 52 74 6c 43 6f 70 79    4d 65 6d 6f 72 79 53 74 72 65 61 6d 54 6f 40 32  | $......._RtlCopyMemoryStreamTo@2 | 
| 430a0 |  34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 4.ntdll.dll.ntdll.dll/......1099 | 
| 430c0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20  | 622597..............0.......54.. | 
| 430e0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 22 00 00 00 f6 01 0c 00 5f 52 74 6c  | ......`.......L....A"......._Rtl | 
| 43100 |  43 6f 70 79 4d 61 70 70 65 64 4d 65 6d 6f 72 79    40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | CopyMappedMemory@12.ntdll.dll.nt | 
| 43120 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 43140 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 34    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......64........`....... | 
| 43160 |  4c 01 c5 e8 8a 41 2c 00 00 00 f5 01 0c 00 5f 52    74 6c 43 6f 70 79 4c 75 69 64 41 6e 64 41 74 74  | L....A,......._RtlCopyLuidAndAtt | 
| 43180 |  72 69 62 75 74 65 73 41 72 72 61 79 40 31 32 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | ributesArray@12.ntdll.dll.ntdll. | 
| 431a0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 431c0 |  20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......45........`.......L... | 
| 431e0 |  8a 41 19 00 00 00 f4 01 0c 00 5f 52 74 6c 43 6f    70 79 4c 75 69 64 40 38 00 6e 74 64 6c 6c 2e 64  | .A........_RtlCopyLuid@8.ntdll.d | 
| 43200 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 43220 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 33 20 20 20 20 20 20 20 20 60 0a  | ............0.......63........`. | 
| 43240 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2b 00 00 00    f2 01 0c 00 5f 52 74 6c 43 6f 6e 76 65 72 74 55  | ......L....A+......._RtlConvertU | 
| 43260 |  6c 6f 6e 67 54 6f 4c 61 72 67 65 49 6e 74 65 67    65 72 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | longToLargeInteger@4.ntdll.dll.. | 
| 43280 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 432a0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......60........`..... | 
| 432c0 |  00 00 4c 01 c5 e8 8a 41 28 00 00 00 f1 01 0c 00    5f 52 74 6c 43 6f 6e 76 65 72 74 55 69 4c 69 73  | ..L....A(......._RtlConvertUiLis | 
| 432e0 |  74 54 6f 41 70 69 4c 69 73 74 40 31 32 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | tToApiList@12.ntdll.dll.ntdll.dl | 
| 43300 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 43320 |  30 20 20 20 20 20 20 20 37 32 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......72........`.......L....A | 
| 43340 |  34 00 00 00 f0 01 0c 00 5f 52 74 6c 43 6f 6e 76    65 72 74 54 6f 41 75 74 6f 49 6e 68 65 72 69 74  | 4......._RtlConvertToAutoInherit | 
| 43360 |  53 65 63 75 72 69 74 79 4f 62 6a 65 63 74 40 32    34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | SecurityObject@24.ntdll.dll.ntdl | 
| 43380 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 433a0 |  20 20 20 20 30 20 20 20 20 20 20 20 36 33 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......63........`.......L. | 
| 433c0 |  c5 e8 8a 41 2b 00 00 00 ef 01 0c 00 5f 52 74 6c    43 6f 6e 76 65 72 74 53 69 64 54 6f 55 6e 69 63  | ...A+......._RtlConvertSidToUnic | 
| 433e0 |  6f 64 65 53 74 72 69 6e 67 40 31 32 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | odeString@12.ntdll.dll..ntdll.dl | 
| 43400 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 43420 |  30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......61........`.......L....A | 
| 43440 |  29 00 00 00 ee 01 0c 00 5f 52 74 6c 43 6f 6e 76    65 72 74 53 68 61 72 65 64 54 6f 45 78 63 6c 75  | )......._RtlConvertSharedToExclu | 
| 43460 |  73 69 76 65 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | sive@4.ntdll.dll..ntdll.dll/.... | 
| 43480 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 434a0 |  20 20 36 32 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 2a 00 00 00 ec 01  | ..62........`.......L....A*..... | 
| 434c0 |  0c 00 5f 52 74 6c 43 6f 6e 76 65 72 74 4c 6f 6e    67 54 6f 4c 61 72 67 65 49 6e 74 65 67 65 72 40  | .._RtlConvertLongToLargeInteger@ | 
| 434e0 |  34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 4.ntdll.dll.ntdll.dll/......1099 | 
| 43500 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20  | 622597..............0.......61.. | 
| 43520 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 29 00 00 00 eb 01 0c 00 5f 52 74 6c  | ......`.......L....A)......._Rtl | 
| 43540 |  43 6f 6e 76 65 72 74 45 78 63 6c 75 73 69 76 65    54 6f 53 68 61 72 65 64 40 34 00 6e 74 64 6c 6c  | ConvertExclusiveToShared@4.ntdll | 
| 43560 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 43580 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 36 34 20 20 20 20 20 20 20 20  | ..............0.......64........ | 
| 435a0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2c 00    00 00 ea 01 0c 00 5f 52 74 6c 43 6f 6e 73 6f 6c  | `.......L....A,......._RtlConsol | 
| 435c0 |  65 4d 75 6c 74 69 42 79 74 65 54 6f 55 6e 69 63    6f 64 65 4e 40 32 34 00 6e 74 64 6c 6c 2e 64 6c  | eMultiByteToUnicodeN@24.ntdll.dl | 
| 435e0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 43600 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 34 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......64........`... | 
| 43620 |  ff ff 00 00 4c 01 c5 e8 8a 41 2c 00 00 00 e9 01    0c 00 5f 52 74 6c 43 6f 6d 70 75 74 65 50 72 69  | ....L....A,......._RtlComputePri | 
| 43640 |  76 61 74 69 7a 65 64 44 6c 6c 4e 61 6d 65 5f 55    40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | vatizedDllName_U@12.ntdll.dll.nt | 
| 43660 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 43680 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 30    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......60........`....... | 
| 436a0 |  4c 01 c5 e8 8a 41 28 00 00 00 e8 01 0c 00 5f 52    74 6c 43 6f 6d 70 75 74 65 49 6d 70 6f 72 74 54  | L....A(......._RtlComputeImportT | 
| 436c0 |  61 62 6c 65 48 61 73 68 40 31 32 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ableHash@12.ntdll.dll.ntdll.dll/ | 
| 436e0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 43700 |  20 20 20 20 20 20 35 30 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00  | ......50........`.......L....A.. | 
| 43720 |  00 00 e7 01 0c 00 5f 52 74 6c 43 6f 6d 70 75 74    65 43 72 63 33 32 40 31 32 00 6e 74 64 6c 6c 2e  | ......_RtlComputeCrc32@12.ntdll. | 
| 43740 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 43760 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a  | ............0.......52........`. | 
| 43780 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00    e6 01 0c 00 5f 52 74 6c 43 6f 6d 70 72 65 73 73  | ......L....A........_RtlCompress | 
| 437a0 |  42 75 66 66 65 72 40 33 32 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | Buffer@32.ntdll.dll.ntdll.dll/.. | 
| 437c0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 437e0 |  20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00  | ....58........`.......L....A&... | 
| 43800 |  e5 01 0c 00 5f 52 74 6c 43 6f 6d 70 61 72 65 55    6e 69 63 6f 64 65 53 74 72 69 6e 67 40 31 32 00  | ...._RtlCompareUnicodeString@12. | 
| 43820 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 43840 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20  | 2597..............0.......51.... | 
| 43860 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1f 00 00 00 e4 01 0c 00 5f 52 74 6c 43 6f  | ....`.......L....A........_RtlCo | 
| 43880 |  6d 70 61 72 65 53 74 72 69 6e 67 40 31 32 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | mpareString@12.ntdll.dll..ntdll. | 
| 438a0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 438c0 |  20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......56........`.......L... | 
| 438e0 |  8a 41 24 00 00 00 e3 01 0c 00 5f 52 74 6c 43 6f    6d 70 61 72 65 4d 65 6d 6f 72 79 55 6c 6f 6e 67  | .A$......._RtlCompareMemoryUlong | 
| 43900 |  40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @12.ntdll.dll.ntdll.dll/......10 | 
| 43920 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31  | 99622597..............0.......51 | 
| 43940 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1f 00 00 00 e2 01 0c 00 5f 52  | ........`.......L....A........_R | 
| 43960 |  74 6c 43 6f 6d 70 61 72 65 4d 65 6d 6f 72 79 40    31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | tlCompareMemory@12.ntdll.dll..nt | 
| 43980 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 439a0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......48........`....... | 
| 439c0 |  4c 01 c5 e8 8a 41 1c 00 00 00 e1 01 0c 00 5f 52    74 6c 43 6f 6d 70 61 63 74 48 65 61 70 40 38 00  | L....A........_RtlCompactHeap@8. | 
| 439e0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 43a00 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20  | 2597..............0.......55.... | 
| 43a20 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 23 00 00 00 e0 01 0c 00 5f 52 74 6c 43 6f  | ....`.......L....A#......._RtlCo | 
| 43a40 |  6d 6d 69 74 4d 65 6d 6f 72 79 53 74 72 65 61 6d    40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | mmitMemoryStream@8.ntdll.dll..nt | 
| 43a60 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 43a80 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......54........`....... | 
| 43aa0 |  4c 01 c5 e8 8a 41 22 00 00 00 df 01 0c 00 5f 52    74 6c 43 6c 6f 6e 65 4d 65 6d 6f 72 79 53 74 72  | L....A"......._RtlCloneMemoryStr | 
| 43ac0 |  65 61 6d 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | eam@8.ntdll.dll.ntdll.dll/...... | 
| 43ae0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 43b00 |  34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1b 00 00 00 de 01 0c 00  | 47........`.......L....A........ | 
| 43b20 |  5f 52 74 6c 43 6c 65 61 72 42 69 74 73 40 31 32    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | _RtlClearBits@12.ntdll.dll..ntdl | 
| 43b40 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 43b60 |  20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......49........`.......L. | 
| 43b80 |  c5 e8 8a 41 1d 00 00 00 dd 01 0c 00 5f 52 74 6c    43 6c 65 61 72 41 6c 6c 42 69 74 73 40 34 00 6e  | ...A........_RtlClearAllBits@4.n | 
| 43ba0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 43bc0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20  | 2597..............0.......53.... | 
| 43be0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 21 00 00 00 dc 01 0c 00 5f 52 74 6c 43 68  | ....`.......L....A!......._RtlCh | 
| 43c00 |  65 63 6b 52 65 67 69 73 74 72 79 4b 65 79 40 38    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | eckRegistryKey@8.ntdll.dll..ntdl | 
| 43c20 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 43c40 |  20 20 20 20 30 20 20 20 20 20 20 20 36 30 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......60........`.......L. | 
| 43c60 |  c5 e8 8a 41 28 00 00 00 db 01 0c 00 5f 52 74 6c    43 68 65 63 6b 50 72 6f 63 65 73 73 50 61 72 61  | ...A(......._RtlCheckProcessPara | 
| 43c80 |  6d 65 74 65 72 73 40 31 36 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | meters@16.ntdll.dll.ntdll.dll/.. | 
| 43ca0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 43cc0 |  20 20 20 20 36 39 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 31 00 00 00  | ....69........`.......L....A1... | 
| 43ce0 |  da 01 0c 00 5f 52 74 6c 43 68 65 63 6b 46 6f 72    4f 72 70 68 61 6e 65 64 43 72 69 74 69 63 61 6c  | ...._RtlCheckForOrphanedCritical | 
| 43d00 |  53 65 63 74 69 6f 6e 73 40 34 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | Sections@4.ntdll.dll..ntdll.dll/ | 
| 43d20 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 43d40 |  20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1f 00  | ......51........`.......L....A.. | 
| 43d60 |  00 00 d9 01 0c 00 5f 52 74 6c 43 68 61 72 54 6f    49 6e 74 65 67 65 72 40 31 32 00 6e 74 64 6c 6c  | ......_RtlCharToInteger@12.ntdll | 
| 43d80 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 43da0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20  | ..............0.......57........ | 
| 43dc0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00    00 00 d8 01 0c 00 5f 52 74 6c 43 61 70 74 75 72  | `.......L....A%......._RtlCaptur | 
| 43de0 |  65 53 74 61 63 6b 43 6f 6e 74 65 78 74 40 31 32    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | eStackContext@12.ntdll.dll..ntdl | 
| 43e00 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 43e20 |  20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......59........`.......L. | 
| 43e40 |  c5 e8 8a 41 27 00 00 00 d7 01 0c 00 5f 52 74 6c    43 61 70 74 75 72 65 53 74 61 63 6b 42 61 63 6b  | ...A'......._RtlCaptureStackBack | 
| 43e60 |  54 72 61 63 65 40 31 36 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | Trace@16.ntdll.dll..ntdll.dll/.. | 
| 43e80 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 43ea0 |  20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00  | ....51........`.......L....A.... | 
| 43ec0 |  d6 01 0c 00 5f 52 74 6c 43 61 70 74 75 72 65 43    6f 6e 74 65 78 74 40 34 00 6e 74 64 6c 6c 2e 64  | ...._RtlCaptureContext@4.ntdll.d | 
| 43ee0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 43f00 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a  | ............0.......48........`. | 
| 43f20 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00    d5 01 0c 00 5f 52 74 6c 43 61 6e 63 65 6c 54 69  | ......L....A........_RtlCancelTi | 
| 43f40 |  6d 65 72 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | mer@8.ntdll.dll.ntdll.dll/...... | 
| 43f60 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 43f80 |  34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 18 00 00 00 d4 01 0c 00  | 44........`.......L....A........ | 
| 43fa0 |  5f 52 74 6c 41 73 73 65 72 74 40 31 36 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | _RtlAssert@16.ntdll.dll.ntdll.dl | 
| 43fc0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 43fe0 |  30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......48........`.......L....A | 
| 44000 |  1c 00 00 00 d3 01 0c 00 5f 52 74 6c 41 72 65 42    69 74 73 53 65 74 40 31 32 00 6e 74 64 6c 6c 2e  | ........_RtlAreBitsSet@12.ntdll. | 
| 44020 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 44040 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a  | ............0.......50........`. | 
| 44060 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00    d2 01 0c 00 5f 52 74 6c 41 72 65 42 69 74 73 43  | ......L....A........_RtlAreBitsC | 
| 44080 |  6c 65 61 72 40 31 32 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | lear@12.ntdll.dll.ntdll.dll/.... | 
| 440a0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 440c0 |  20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00 d1 01  | ..58........`.......L....A&..... | 
| 440e0 |  0c 00 5f 52 74 6c 41 72 65 41 6e 79 41 63 63 65    73 73 65 73 47 72 61 6e 74 65 64 40 38 00 6e 74  | .._RtlAreAnyAccessesGranted@8.nt | 
| 44100 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 44120 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20  | 97..............0.......58...... | 
| 44140 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    26 00 00 00 d0 01 0c 00 5f 52 74 6c 41 72 65 41  | ..`.......L....A&......._RtlAreA | 
| 44160 |  6c 6c 41 63 63 65 73 73 65 73 47 72 61 6e 74 65    64 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | llAccessesGranted@8.ntdll.dll.nt | 
| 44180 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 441a0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......54........`....... | 
| 441c0 |  4c 01 c5 e8 8a 41 22 00 00 00 cf 01 0c 00 5f 52    74 6c 41 70 70 6c 79 52 58 61 63 74 4e 6f 46 6c  | L....A"......._RtlApplyRXactNoFl | 
| 441e0 |  75 73 68 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ush@4.ntdll.dll.ntdll.dll/...... | 
| 44200 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 44220 |  34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1b 00 00 00 ce 01 0c 00  | 47........`.......L....A........ | 
| 44240 |  5f 52 74 6c 41 70 70 6c 79 52 58 61 63 74 40 34    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | _RtlApplyRXact@4.ntdll.dll..ntdl | 
| 44260 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 44280 |  20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......61........`.......L. | 
| 442a0 |  c5 e8 8a 41 29 00 00 00 cd 01 0c 00 5f 52 74 6c    41 70 70 6c 69 63 61 74 69 6f 6e 56 65 72 69 66  | ...A)......._RtlApplicationVerif | 
| 442c0 |  69 65 72 53 74 6f 70 40 34 30 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ierStop@40.ntdll.dll..ntdll.dll/ | 
| 442e0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 44300 |  20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 26 00  | ......58........`.......L....A&. | 
| 44320 |  00 00 cc 01 0c 00 5f 52 74 6c 41 70 70 65 6e 64    55 6e 69 63 6f 64 65 54 6f 53 74 72 69 6e 67 40  | ......_RtlAppendUnicodeToString@ | 
| 44340 |  38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 8.ntdll.dll.ntdll.dll/......1099 | 
| 44360 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 34 20 20  | 622597..............0.......64.. | 
| 44380 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 2c 00 00 00 cb 01 0c 00 5f 52 74 6c  | ......`.......L....A,......._Rtl | 
| 443a0 |  41 70 70 65 6e 64 55 6e 69 63 6f 64 65 53 74 72    69 6e 67 54 6f 53 74 72 69 6e 67 40 38 00 6e 74  | AppendUnicodeStringToString@8.nt | 
| 443c0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 443e0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20  | 97..............0.......57...... | 
| 44400 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    25 00 00 00 ca 01 0c 00 5f 52 74 6c 41 70 70 65  | ..`.......L....A%......._RtlAppe | 
| 44420 |  6e 64 53 74 72 69 6e 67 54 6f 53 74 72 69 6e 67    40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | ndStringToString@8.ntdll.dll..nt | 
| 44440 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 44460 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......55........`....... | 
| 44480 |  4c 01 c5 e8 8a 41 23 00 00 00 c9 01 0c 00 5f 52    74 6c 41 70 70 65 6e 64 50 61 74 68 45 6c 65 6d  | L....A#......._RtlAppendPathElem | 
| 444a0 |  65 6e 74 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ent@12.ntdll.dll..ntdll.dll/.... | 
| 444c0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 444e0 |  20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00 c8 01  | ..57........`.......L....A%..... | 
| 44500 |  0c 00 5f 52 74 6c 41 70 70 65 6e 64 41 73 63 69    69 7a 54 6f 53 74 72 69 6e 67 40 38 00 6e 74 64  | .._RtlAppendAsciizToString@8.ntd | 
| 44520 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 44540 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 33 20 20 20 20 20 20  | 97..............0.......63...... | 
| 44560 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    2b 00 00 00 c7 01 0c 00 5f 52 74 6c 41 6e 73 69  | ..`.......L....A+......._RtlAnsi | 
| 44580 |  53 74 72 69 6e 67 54 6f 55 6e 69 63 6f 64 65 53    74 72 69 6e 67 40 31 32 00 6e 74 64 6c 6c 2e 64  | StringToUnicodeString@12.ntdll.d | 
| 445a0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 445c0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a  | ............0.......60........`. | 
| 445e0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 28 00 00 00    c6 01 0c 00 5f 52 74 6c 41 6e 73 69 53 74 72 69  | ......L....A(......._RtlAnsiStri | 
| 44600 |  6e 67 54 6f 55 6e 69 63 6f 64 65 53 69 7a 65 40    34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | ngToUnicodeSize@4.ntdll.dll.ntdl | 
| 44620 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 44640 |  20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......58........`.......L. | 
| 44660 |  c5 e8 8a 41 26 00 00 00 c5 01 0c 00 5f 52 74 6c    41 6e 73 69 43 68 61 72 54 6f 55 6e 69 63 6f 64  | ...A&......._RtlAnsiCharToUnicod | 
| 44680 |  65 43 68 61 72 40 34 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | eChar@4.ntdll.dll.ntdll.dll/.... | 
| 446a0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 446c0 |  20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00 c4 01  | ..50........`.......L....A...... | 
| 446e0 |  0c 00 5f 52 74 6c 41 6c 6c 6f 63 61 74 65 48 65    61 70 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | .._RtlAllocateHeap@12.ntdll.dll. | 
| 44700 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 44720 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......51........`..... | 
| 44740 |  00 00 4c 01 c5 e8 8a 41 1f 00 00 00 c3 01 0c 00    5f 52 74 6c 41 6c 6c 6f 63 61 74 65 48 61 6e 64  | ..L....A........_RtlAllocateHand | 
| 44760 |  6c 65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | le@8.ntdll.dll..ntdll.dll/...... | 
| 44780 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 447a0 |  36 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 2a 00 00 00 c2 01 0c 00  | 62........`.......L....A*....... | 
| 447c0 |  5f 52 74 6c 41 6c 6c 6f 63 61 74 65 41 6e 64 49    6e 69 74 69 61 6c 69 7a 65 53 69 64 40 34 34 00  | _RtlAllocateAndInitializeSid@44. | 
| 447e0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 44800 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 37 20 20 20 20  | 2597..............0.......67.... | 
| 44820 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 2f 00 00 00 c1 01 0c 00 5f 52 74 6c 41 6c  | ....`.......L....A/......._RtlAl | 
| 44840 |  6c 6f 63 61 74 65 41 63 74 69 76 61 74 69 6f 6e    43 6f 6e 74 65 78 74 53 74 61 63 6b 40 34 00 6e  | locateActivationContextStack@4.n | 
| 44860 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 44880 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20  | 2597..............0.......53.... | 
| 448a0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 21 00 00 00 c0 01 0c 00 5f 52 74 6c 41 64  | ....`.......L....A!......._RtlAd | 
| 448c0 |  6a 75 73 74 50 72 69 76 69 6c 65 67 65 40 31 36    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | justPrivilege@16.ntdll.dll..ntdl | 
| 448e0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 44900 |  20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......59........`.......L. | 
| 44920 |  c5 e8 8a 41 27 00 00 00 bf 01 0c 00 5f 52 74 6c    41 64 64 72 65 73 73 49 6e 53 65 63 74 69 6f 6e  | ...A'......._RtlAddressInSection | 
| 44940 |  54 61 62 6c 65 40 31 32 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | Table@12.ntdll.dll..ntdll.dll/.. | 
| 44960 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 44980 |  20 20 20 20 36 34 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2c 00 00 00  | ....64........`.......L....A,... | 
| 449a0 |  be 01 0c 00 5f 52 74 6c 41 64 64 56 65 63 74 6f    72 65 64 45 78 63 65 70 74 69 6f 6e 48 61 6e 64  | ...._RtlAddVectoredExceptionHand | 
| 449c0 |  6c 65 72 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ler@8.ntdll.dll.ntdll.dll/...... | 
| 449e0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 44a00 |  36 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 2b 00 00 00 bd 01 0c 00  | 63........`.......L....A+....... | 
| 44a20 |  5f 52 74 6c 41 64 64 56 65 63 74 6f 72 65 64 43    6f 6e 74 69 6e 75 65 48 61 6e 64 6c 65 72 40 38  | _RtlAddVectoredContinueHandler@8 | 
| 44a40 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 44a60 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20  | 622597..............0.......55.. | 
| 44a80 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 23 00 00 00 bc 01 0c 00 5f 52 74 6c  | ......`.......L....A#......._Rtl | 
| 44aa0 |  41 64 64 52 65 66 4d 65 6d 6f 72 79 53 74 72 65    61 6d 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | AddRefMemoryStream@4.ntdll.dll.. | 
| 44ac0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 44ae0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    36 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......60........`..... | 
| 44b00 |  00 00 4c 01 c5 e8 8a 41 28 00 00 00 bb 01 0c 00    5f 52 74 6c 41 64 64 52 65 66 41 63 74 69 76 61  | ..L....A(......._RtlAddRefActiva | 
| 44b20 |  74 69 6f 6e 43 6f 6e 74 65 78 74 40 34 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | tionContext@4.ntdll.dll.ntdll.dl | 
| 44b40 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 44b60 |  30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......52........`.......L....A | 
| 44b80 |  20 00 00 00 ba 01 0c 00 5f 52 74 6c 41 64 64 43    6f 6d 70 6f 75 6e 64 41 63 65 40 32 34 00 6e 74  | ........_RtlAddCompoundAce@24.nt | 
| 44ba0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 44bc0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20  | 97..............0.......61...... | 
| 44be0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    29 00 00 00 b9 01 0c 00 5f 52 74 6c 41 64 64 41  | ..`.......L....A)......._RtlAddA | 
| 44c00 |  75 64 69 74 41 63 63 65 73 73 4f 62 6a 65 63 74    41 63 65 40 33 36 00 6e 74 64 6c 6c 2e 64 6c 6c  | uditAccessObjectAce@36.ntdll.dll | 
| 44c20 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 44c40 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......57........`... | 
| 44c60 |  ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00 b8 01    0c 00 5f 52 74 6c 41 64 64 41 75 64 69 74 41 63  | ....L....A%......._RtlAddAuditAc | 
| 44c80 |  63 65 73 73 41 63 65 45 78 40 32 38 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | cessAceEx@28.ntdll.dll..ntdll.dl | 
| 44ca0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 44cc0 |  30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......55........`.......L....A | 
| 44ce0 |  23 00 00 00 b7 01 0c 00 5f 52 74 6c 41 64 64 41    75 64 69 74 41 63 63 65 73 73 41 63 65 40 32 34  | #......._RtlAddAuditAccessAce@24 | 
| 44d00 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 44d20 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 33 20 20  | 622597..............0.......63.. | 
| 44d40 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 2b 00 00 00 b6 01 0c 00 5f 52 74 6c  | ......`.......L....A+......._Rtl | 
| 44d60 |  41 64 64 41 74 74 72 69 62 75 74 65 41 63 74 69    6f 6e 54 6f 52 58 61 63 74 40 33 32 00 6e 74 64  | AddAttributeActionToRXact@32.ntd | 
| 44d80 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 44da0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20  | 97..............0.......56...... | 
| 44dc0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    24 00 00 00 b5 01 0c 00 5f 52 74 6c 41 64 64 41  | ..`.......L....A$......._RtlAddA | 
| 44de0 |  74 6f 6d 54 6f 41 74 6f 6d 54 61 62 6c 65 40 31    32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | tomToAtomTable@12.ntdll.dll.ntdl | 
| 44e00 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 44e20 |  20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......54........`.......L. | 
| 44e40 |  c5 e8 8a 41 22 00 00 00 b4 01 0c 00 5f 52 74 6c    41 64 64 41 63 74 69 6f 6e 54 6f 52 58 61 63 74  | ...A"......._RtlAddActionToRXact | 
| 44e60 |  40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @24.ntdll.dll.ntdll.dll/......10 | 
| 44e80 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34  | 99622597..............0.......44 | 
| 44ea0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 18 00 00 00 b3 01 0c 00 5f 52  | ........`.......L....A........_R | 
| 44ec0 |  74 6c 41 64 64 41 63 65 40 32 30 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | tlAddAce@20.ntdll.dll.ntdll.dll/ | 
| 44ee0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 44f00 |  20 20 20 20 20 20 36 32 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2a 00  | ......62........`.......L....A*. | 
| 44f20 |  00 00 b2 01 0c 00 5f 52 74 6c 41 64 64 41 63 63    65 73 73 44 65 6e 69 65 64 4f 62 6a 65 63 74 41  | ......_RtlAddAccessDeniedObjectA | 
| 44f40 |  63 65 40 32 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ce@28.ntdll.dll.ntdll.dll/...... | 
| 44f60 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 44f80 |  35 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 26 00 00 00 b1 01 0c 00  | 58........`.......L....A&....... | 
| 44fa0 |  5f 52 74 6c 41 64 64 41 63 63 65 73 73 44 65 6e    69 65 64 41 63 65 45 78 40 32 30 00 6e 74 64 6c  | _RtlAddAccessDeniedAceEx@20.ntdl | 
| 44fc0 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 44fe0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20  | ..............0.......56........ | 
| 45000 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 24 00    00 00 b0 01 0c 00 5f 52 74 6c 41 64 64 41 63 63  | `.......L....A$......._RtlAddAcc | 
| 45020 |  65 73 73 44 65 6e 69 65 64 41 63 65 40 31 36 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | essDeniedAce@16.ntdll.dll.ntdll. | 
| 45040 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 45060 |  20 20 30 20 20 20 20 20 20 20 36 33 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......63........`.......L... | 
| 45080 |  8a 41 2b 00 00 00 af 01 0c 00 5f 52 74 6c 41 64    64 41 63 63 65 73 73 41 6c 6c 6f 77 65 64 4f 62  | .A+......._RtlAddAccessAllowedOb | 
| 450a0 |  6a 65 63 74 41 63 65 40 32 38 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | jectAce@28.ntdll.dll..ntdll.dll/ | 
| 450c0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 450e0 |  20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00  | ......59........`.......L....A'. | 
| 45100 |  00 00 ae 01 0c 00 5f 52 74 6c 41 64 64 41 63 63    65 73 73 41 6c 6c 6f 77 65 64 41 63 65 45 78 40  | ......_RtlAddAccessAllowedAceEx@ | 
| 45120 |  32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 20.ntdll.dll..ntdll.dll/......10 | 
| 45140 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37  | 99622597..............0.......57 | 
| 45160 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 25 00 00 00 ad 01 0c 00 5f 52  | ........`.......L....A%......._R | 
| 45180 |  74 6c 41 64 64 41 63 63 65 73 73 41 6c 6c 6f 77    65 64 41 63 65 40 31 36 00 6e 74 64 6c 6c 2e 64  | tlAddAccessAllowedAce@16.ntdll.d | 
| 451a0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 451c0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 35 20 20 20 20 20 20 20 20 60 0a  | ............0.......65........`. | 
| 451e0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2d 00 00 00    ab 01 0c 00 5f 52 74 6c 41 63 74 69 76 61 74 65  | ......L....A-......._RtlActivate | 
| 45200 |  41 63 74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78    74 45 78 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c  | ActivationContextEx@16.ntdll.dll | 
| 45220 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 45240 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 33 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......63........`... | 
| 45260 |  ff ff 00 00 4c 01 c5 e8 8a 41 2b 00 00 00 aa 01    0c 00 5f 52 74 6c 41 63 74 69 76 61 74 65 41 63  | ....L....A+......._RtlActivateAc | 
| 45280 |  74 69 76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 40    31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | tivationContext@12.ntdll.dll..nt | 
| 452a0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 452c0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......58........`....... | 
| 452e0 |  4c 01 c5 e8 8a 41 26 00 00 00 a9 01 0c 00 5f 52    74 6c 41 63 71 75 69 72 65 52 65 73 6f 75 72 63  | L....A&......._RtlAcquireResourc | 
| 45300 |  65 53 68 61 72 65 64 40 38 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | eShared@8.ntdll.dll.ntdll.dll/.. | 
| 45320 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 45340 |  20 20 20 20 36 31 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 29 00 00 00  | ....61........`.......L....A)... | 
| 45360 |  a8 01 0c 00 5f 52 74 6c 41 63 71 75 69 72 65 52    65 73 6f 75 72 63 65 45 78 63 6c 75 73 69 76 65  | ...._RtlAcquireResourceExclusive | 
| 45380 |  40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @8.ntdll.dll..ntdll.dll/......10 | 
| 453a0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34  | 99622597..............0.......54 | 
| 453c0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 22 00 00 00 a7 01 0c 00 5f 52  | ........`.......L....A"......._R | 
| 453e0 |  74 6c 41 63 71 75 69 72 65 50 72 69 76 69 6c 65    67 65 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | tlAcquirePrivilege@16.ntdll.dll. | 
| 45400 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 45420 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......51........`..... | 
| 45440 |  00 00 4c 01 c5 e8 8a 41 1f 00 00 00 a6 01 0c 00    5f 52 74 6c 41 63 71 75 69 72 65 50 65 62 4c 6f  | ..L....A........_RtlAcquirePebLo | 
| 45460 |  63 6b 40 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ck@0.ntdll.dll..ntdll.dll/...... | 
| 45480 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 454a0 |  36 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 2a 00 00 00 a5 01 0c 00  | 62........`.......L....A*....... | 
| 454c0 |  5f 52 74 6c 41 62 73 6f 6c 75 74 65 54 6f 53 65    6c 66 52 65 6c 61 74 69 76 65 53 44 40 31 32 00  | _RtlAbsoluteToSelfRelativeSD@12. | 
| 454e0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 45500 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20  | 2597..............0.......47.... | 
| 45520 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1b 00 00 00 a4 01 0c 00 5f 52 74 6c 41 62  | ....`.......L....A........_RtlAb | 
| 45540 |  6f 72 74 52 58 61 63 74 40 34 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ortRXact@4.ntdll.dll..ntdll.dll/ | 
| 45560 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 45580 |  20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1d 00  | ......49........`.......L....A.. | 
| 455a0 |  00 00 a2 01 0c 00 5f 50 66 78 52 65 6d 6f 76 65    50 72 65 66 69 78 40 38 00 6e 74 64 6c 6c 2e 64  | ......_PfxRemovePrefix@8.ntdll.d | 
| 455c0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 455e0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a  | ............0.......50........`. | 
| 45600 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00    a1 01 0c 00 5f 50 66 78 49 6e 73 65 72 74 50 72  | ......L....A........_PfxInsertPr | 
| 45620 |  65 66 69 78 40 31 32 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | efix@12.ntdll.dll.ntdll.dll/.... | 
| 45640 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 45660 |  20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1b 00 00 00 a0 01  | ..47........`.......L....A...... | 
| 45680 |  0c 00 5f 50 66 78 49 6e 69 74 69 61 6c 69 7a 65    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | .._PfxInitialize@4.ntdll.dll..nt | 
| 456a0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 456c0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......47........`....... | 
| 456e0 |  4c 01 c5 e8 8a 41 1b 00 00 00 9f 01 0c 00 5f 50    66 78 46 69 6e 64 50 72 65 66 69 78 40 38 00 6e  | L....A........_PfxFindPrefix@8.n | 
| 45700 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 45720 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20  | 2597..............0.......50.... | 
| 45740 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1e 00 00 00 9e 01 0c 00 5f 4e 74 59 69 65  | ....`.......L....A........_NtYie | 
| 45760 |  6c 64 45 78 65 63 75 74 69 6f 6e 40 30 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | ldExecution@0.ntdll.dll.ntdll.dl | 
| 45780 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 457a0 |  30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......55........`.......L....A | 
| 457c0 |  23 00 00 00 9d 01 0c 00 5f 4e 74 57 72 69 74 65    56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 32 30  | #......._NtWriteVirtualMemory@20 | 
| 457e0 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 45800 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20  | 622597..............0.......53.. | 
| 45820 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 21 00 00 00 9c 01 0c 00 5f 4e 74 57  | ......`.......L....A!......._NtW | 
| 45840 |  72 69 74 65 52 65 71 75 65 73 74 44 61 74 61 40    32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | riteRequestData@24.ntdll.dll..nt | 
| 45860 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 45880 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......52........`....... | 
| 458a0 |  4c 01 c5 e8 8a 41 20 00 00 00 9b 01 0c 00 5f 4e    74 57 72 69 74 65 46 69 6c 65 47 61 74 68 65 72  | L....A........_NtWriteFileGather | 
| 458c0 |  40 33 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @36.ntdll.dll.ntdll.dll/......10 | 
| 458e0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36  | 99622597..............0.......46 | 
| 45900 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1a 00 00 00 9a 01 0c 00 5f 4e  | ........`.......L....A........_N | 
| 45920 |  74 57 72 69 74 65 46 69 6c 65 40 33 36 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | tWriteFile@36.ntdll.dll.ntdll.dl | 
| 45940 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 45960 |  30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......52........`.......L....A | 
| 45980 |  20 00 00 00 99 01 0c 00 5f 4e 74 57 61 69 74 4c    6f 77 45 76 65 6e 74 50 61 69 72 40 34 00 6e 74  | ........_NtWaitLowEventPair@4.nt | 
| 459a0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 459c0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20  | 97..............0.......53...... | 
| 459e0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    21 00 00 00 98 01 0c 00 5f 4e 74 57 61 69 74 48  | ..`.......L....A!......._NtWaitH | 
| 45a00 |  69 67 68 45 76 65 6e 74 50 61 69 72 40 34 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | ighEventPair@4.ntdll.dll..ntdll. | 
| 45a20 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 45a40 |  20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......56........`.......L... | 
| 45a60 |  8a 41 24 00 00 00 97 01 0c 00 5f 4e 74 57 61 69    74 46 6f 72 53 69 6e 67 6c 65 4f 62 6a 65 63 74  | .A$......._NtWaitForSingleObject | 
| 45a80 |  40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @12.ntdll.dll.ntdll.dll/......10 | 
| 45aa0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39  | 99622597..............0.......59 | 
| 45ac0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 27 00 00 00 95 01 0c 00 5f 4e  | ........`.......L....A'......._N | 
| 45ae0 |  74 57 61 69 74 46 6f 72 4d 75 6c 74 69 70 6c 65    4f 62 6a 65 63 74 73 40 32 30 00 6e 74 64 6c 6c  | tWaitForMultipleObjects@20.ntdll | 
| 45b00 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 45b20 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 36 31 20 20 20 20 20 20 20 20  | ..............0.......61........ | 
| 45b40 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 29 00    00 00 96 01 0c 00 5f 4e 74 57 61 69 74 46 6f 72  | `.......L....A)......._NtWaitFor | 
| 45b60 |  4d 75 6c 74 69 70 6c 65 4f 62 6a 65 63 74 73 33    32 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | MultipleObjects32@20.ntdll.dll.. | 
| 45b80 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 45ba0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......54........`..... | 
| 45bc0 |  00 00 4c 01 c5 e8 8a 41 22 00 00 00 94 01 0c 00    5f 4e 74 57 61 69 74 46 6f 72 4b 65 79 65 64 45  | ..L....A"......._NtWaitForKeyedE | 
| 45be0 |  76 65 6e 74 40 31 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | vent@16.ntdll.dll.ntdll.dll/.... | 
| 45c00 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 45c20 |  20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00 93 01  | ..54........`.......L....A"..... | 
| 45c40 |  0c 00 5f 4e 74 57 61 69 74 46 6f 72 44 65 62 75    67 45 76 65 6e 74 40 31 36 00 6e 74 64 6c 6c 2e  | .._NtWaitForDebugEvent@16.ntdll. | 
| 45c60 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 45c80 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a  | ............0.......46........`. | 
| 45ca0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1a 00 00 00    92 01 0c 00 5f 4e 74 56 64 6d 43 6f 6e 74 72 6f  | ......L....A........_NtVdmContro | 
| 45cc0 |  6c 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | l@8.ntdll.dll.ntdll.dll/......10 | 
| 45ce0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34  | 99622597..............0.......54 | 
| 45d00 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 22 00 00 00 91 01 0c 00 5f 4e  | ........`.......L....A"......._N | 
| 45d20 |  74 55 6e 6d 61 70 56 69 65 77 4f 66 53 65 63 74    69 6f 6e 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | tUnmapViewOfSection@8.ntdll.dll. | 
| 45d40 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 45d60 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......56........`..... | 
| 45d80 |  00 00 4c 01 c5 e8 8a 41 24 00 00 00 90 01 0c 00    5f 4e 74 55 6e 6c 6f 63 6b 56 69 72 74 75 61 6c  | ..L....A$......._NtUnlockVirtual | 
| 45da0 |  4d 65 6d 6f 72 79 40 31 36 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | Memory@16.ntdll.dll.ntdll.dll/.. | 
| 45dc0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 45de0 |  20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1b 00 00 00  | ....47........`.......L....A.... | 
| 45e00 |  8f 01 0c 00 5f 4e 74 55 6e 6c 6f 63 6b 46 69 6c    65 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | ...._NtUnlockFile@20.ntdll.dll.. | 
| 45e20 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 45e40 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......47........`..... | 
| 45e60 |  00 00 4c 01 c5 e8 8a 41 1b 00 00 00 8e 01 0c 00    5f 4e 74 55 6e 6c 6f 61 64 4b 65 79 45 78 40 38  | ..L....A........_NtUnloadKeyEx@8 | 
| 45e80 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 45ea0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 35 20 20  | 622597..............0.......45.. | 
| 45ec0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 19 00 00 00 8c 01 0c 00 5f 4e 74 55  | ......`.......L....A........_NtU | 
| 45ee0 |  6e 6c 6f 61 64 4b 65 79 40 34 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | nloadKey@4.ntdll.dll..ntdll.dll/ | 
| 45f00 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 45f20 |  20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1a 00  | ......46........`.......L....A.. | 
| 45f40 |  00 00 8d 01 0c 00 5f 4e 74 55 6e 6c 6f 61 64 4b    65 79 32 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | ......_NtUnloadKey2@8.ntdll.dll. | 
| 45f60 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 45f80 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......48........`..... | 
| 45fa0 |  00 00 4c 01 c5 e8 8a 41 1c 00 00 00 8b 01 0c 00    5f 4e 74 55 6e 6c 6f 61 64 44 72 69 76 65 72 40  | ..L....A........_NtUnloadDriver@ | 
| 45fc0 |  34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 4.ntdll.dll.ntdll.dll/......1099 | 
| 45fe0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20  | 622597..............0.......54.. | 
| 46000 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 22 00 00 00 8a 01 0c 00 5f 4e 74 54  | ......`.......L....A"......._NtT | 
| 46020 |  72 61 6e 73 6c 61 74 65 46 69 6c 65 50 61 74 68    40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | ranslateFilePath@16.ntdll.dll.nt | 
| 46040 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 46060 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......47........`....... | 
| 46080 |  4c 01 c5 e8 8a 41 1b 00 00 00 89 01 0c 00 5f 4e    74 54 72 61 63 65 45 76 65 6e 74 40 31 36 00 6e  | L....A........_NtTraceEvent@16.n | 
| 460a0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 460c0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20  | 2597..............0.......45.... | 
| 460e0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 19 00 00 00 88 01 0c 00 5f 4e 74 54 65 73  | ....`.......L....A........_NtTes | 
| 46100 |  74 41 6c 65 72 74 40 30 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | tAlert@0.ntdll.dll..ntdll.dll/.. | 
| 46120 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 46140 |  20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00  | ....51........`.......L....A.... | 
| 46160 |  87 01 0c 00 5f 4e 74 54 65 72 6d 69 6e 61 74 65    54 68 72 65 61 64 40 38 00 6e 74 64 6c 6c 2e 64  | ...._NtTerminateThread@8.ntdll.d | 
| 46180 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 461a0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a  | ............0.......52........`. | 
| 461c0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00    86 01 0c 00 5f 4e 74 54 65 72 6d 69 6e 61 74 65  | ......L....A........_NtTerminate | 
| 461e0 |  50 72 6f 63 65 73 73 40 38 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | Process@8.ntdll.dll.ntdll.dll/.. | 
| 46200 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 46220 |  20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00  | ....54........`.......L....A"... | 
| 46240 |  85 01 0c 00 5f 4e 74 54 65 72 6d 69 6e 61 74 65    4a 6f 62 4f 62 6a 65 63 74 40 38 00 6e 74 64 6c  | ...._NtTerminateJobObject@8.ntdl | 
| 46260 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 46280 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 35 20 20 20 20 20 20 20 20  | ..............0.......55........ | 
| 462a0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 23 00    00 00 84 01 0c 00 5f 4e 74 53 79 73 74 65 6d 44  | `.......L....A#......._NtSystemD | 
| 462c0 |  65 62 75 67 43 6f 6e 74 72 6f 6c 40 32 34 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | ebugControl@24.ntdll.dll..ntdll. | 
| 462e0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 46300 |  20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......49........`.......L... | 
| 46320 |  8a 41 1d 00 00 00 83 01 0c 00 5f 4e 74 53 75 73    70 65 6e 64 54 68 72 65 61 64 40 38 00 6e 74 64  | .A........_NtSuspendThread@8.ntd | 
| 46340 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 46360 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20  | 97..............0.......50...... | 
| 46380 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1e 00 00 00 82 01 0c 00 5f 4e 74 53 75 73 70 65  | ..`.......L....A........_NtSuspe | 
| 463a0 |  6e 64 50 72 6f 63 65 73 73 40 34 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ndProcess@4.ntdll.dll.ntdll.dll/ | 
| 463c0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 463e0 |  20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1b 00  | ......47........`.......L....A.. | 
| 46400 |  00 00 81 01 0c 00 5f 4e 74 53 74 6f 70 50 72 6f    66 69 6c 65 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c  | ......_NtStopProfile@4.ntdll.dll | 
| 46420 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 46440 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......48........`... | 
| 46460 |  ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00 80 01    0c 00 5f 4e 74 53 74 61 72 74 50 72 6f 66 69 6c  | ....L....A........_NtStartProfil | 
| 46480 |  65 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | e@4.ntdll.dll.ntdll.dll/......10 | 
| 464a0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 35  | 99622597..............0.......65 | 
| 464c0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 2d 00 00 00 7f 01 0c 00 5f 4e  | ........`.......L....A-......._N | 
| 464e0 |  74 53 69 67 6e 61 6c 41 6e 64 57 61 69 74 46 6f    72 53 69 6e 67 6c 65 4f 62 6a 65 63 74 40 31 36  | tSignalAndWaitForSingleObject@16 | 
| 46500 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 46520 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20  | 622597..............0.......50.. | 
| 46540 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1e 00 00 00 7e 01 0c 00 5f 4e 74 53  | ......`.......L....A....~..._NtS | 
| 46560 |  68 75 74 64 6f 77 6e 53 79 73 74 65 6d 40 34 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | hutdownSystem@4.ntdll.dll.ntdll. | 
| 46580 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 465a0 |  20 20 30 20 20 20 20 20 20 20 36 31 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......61........`.......L... | 
| 465c0 |  8a 41 29 00 00 00 7d 01 0c 00 5f 4e 74 53 65 74    56 6f 6c 75 6d 65 49 6e 66 6f 72 6d 61 74 69 6f  | .A)...}..._NtSetVolumeInformatio | 
| 465e0 |  6e 46 69 6c 65 40 32 30 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | nFile@20.ntdll.dll..ntdll.dll/.. | 
| 46600 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 46620 |  20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00  | ....48........`.......L....A.... | 
| 46640 |  7c 01 0c 00 5f 4e 74 53 65 74 56 61 6c 75 65 4b    65 79 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | |..._NtSetValueKey@24.ntdll.dll. | 
| 46660 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 46680 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......47........`..... | 
| 466a0 |  00 00 4c 01 c5 e8 8a 41 1b 00 00 00 7b 01 0c 00    5f 4e 74 53 65 74 55 75 69 64 53 65 65 64 40 34  | ..L....A....{..._NtSetUuidSeed@4 | 
| 466c0 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 466e0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20  | 622597..............0.......55.. | 
| 46700 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 23 00 00 00 7a 01 0c 00 5f 4e 74 53  | ......`.......L....A#...z..._NtS | 
| 46720 |  65 74 54 69 6d 65 72 52 65 73 6f 6c 75 74 69 6f    6e 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | etTimerResolution@12.ntdll.dll.. | 
| 46740 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 46760 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......45........`..... | 
| 46780 |  00 00 4c 01 c5 e8 8a 41 19 00 00 00 79 01 0c 00    5f 4e 74 53 65 74 54 69 6d 65 72 40 32 38 00 6e  | ..L....A....y..._NtSetTimer@28.n | 
| 467a0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 467c0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20  | 2597..............0.......59.... | 
| 467e0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 27 00 00 00 78 01 0c 00 5f 4e 74 53 65 74  | ....`.......L....A'...x..._NtSet | 
| 46800 |  54 68 72 65 61 64 45 78 65 63 75 74 69 6f 6e 53    74 61 74 65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c  | ThreadExecutionState@8.ntdll.dll | 
| 46820 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 46840 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......49........`... | 
| 46860 |  ff ff 00 00 4c 01 c5 e8 8a 41 1d 00 00 00 77 01    0c 00 5f 4e 74 53 65 74 53 79 73 74 65 6d 54 69  | ....L....A....w..._NtSetSystemTi | 
| 46880 |  6d 65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | me@8.ntdll.dll..ntdll.dll/...... | 
| 468a0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 468c0 |  35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 24 00 00 00 76 01 0c 00  | 56........`.......L....A$...v... | 
| 468e0 |  5f 4e 74 53 65 74 53 79 73 74 65 6d 50 6f 77 65    72 53 74 61 74 65 40 31 32 00 6e 74 64 6c 6c 2e  | _NtSetSystemPowerState@12.ntdll. | 
| 46900 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 46920 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a  | ............0.......57........`. | 
| 46940 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00    75 01 0c 00 5f 4e 74 53 65 74 53 79 73 74 65 6d  | ......L....A%...u..._NtSetSystem | 
| 46960 |  49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 32 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | Information@12.ntdll.dll..ntdll. | 
| 46980 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 469a0 |  20 20 30 20 20 20 20 20 20 20 36 34 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......64........`.......L... | 
| 469c0 |  8a 41 2c 00 00 00 74 01 0c 00 5f 4e 74 53 65 74    53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e  | .A,...t..._NtSetSystemEnvironmen | 
| 469e0 |  74 56 61 6c 75 65 45 78 40 32 30 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | tValueEx@20.ntdll.dll.ntdll.dll/ | 
| 46a00 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 46a20 |  20 20 20 20 20 20 36 31 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 29 00  | ......61........`.......L....A). | 
| 46a40 |  00 00 73 01 0c 00 5f 4e 74 53 65 74 53 79 73 74    65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c  | ..s..._NtSetSystemEnvironmentVal | 
| 46a60 |  75 65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ue@8.ntdll.dll..ntdll.dll/...... | 
| 46a80 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 46aa0 |  35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 22 00 00 00 72 01 0c 00  | 54........`.......L....A"...r... | 
| 46ac0 |  5f 4e 74 53 65 74 53 65 63 75 72 69 74 79 4f 62    6a 65 63 74 40 31 32 00 6e 74 64 6c 6c 2e 64 6c  | _NtSetSecurityObject@12.ntdll.dl | 
| 46ae0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 46b00 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......60........`... | 
| 46b20 |  ff ff 00 00 4c 01 c5 e8 8a 41 28 00 00 00 71 01    0c 00 5f 4e 74 53 65 74 51 75 6f 74 61 49 6e 66  | ....L....A(...q..._NtSetQuotaInf | 
| 46b40 |  6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40 31 36 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | ormationFile@16.ntdll.dll.ntdll. | 
| 46b60 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 46b80 |  20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......59........`.......L... | 
| 46ba0 |  8a 41 27 00 00 00 70 01 0c 00 5f 4e 74 53 65 74    4c 6f 77 57 61 69 74 48 69 67 68 45 76 65 6e 74  | .A'...p..._NtSetLowWaitHighEvent | 
| 46bc0 |  50 61 69 72 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | Pair@4.ntdll.dll..ntdll.dll/.... | 
| 46be0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 46c00 |  20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00 6f 01  | ..51........`.......L....A....o. | 
| 46c20 |  0c 00 5f 4e 74 53 65 74 4c 6f 77 45 76 65 6e 74    50 61 69 72 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c  | .._NtSetLowEventPair@4.ntdll.dll | 
| 46c40 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 46c60 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......50........`... | 
| 46c80 |  ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00 6e 01    0c 00 5f 4e 74 53 65 74 4c 64 74 45 6e 74 72 69  | ....L....A....n..._NtSetLdtEntri | 
| 46ca0 |  65 73 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | es@24.ntdll.dll.ntdll.dll/...... | 
| 46cc0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 46ce0 |  35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 20 00 00 00 6d 01 0c 00  | 52........`.......L....A....m... | 
| 46d00 |  5f 4e 74 53 65 74 49 6f 43 6f 6d 70 6c 65 74 69    6f 6e 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | _NtSetIoCompletion@20.ntdll.dll. | 
| 46d20 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 46d40 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......54........`..... | 
| 46d60 |  00 00 4c 01 c5 e8 8a 41 22 00 00 00 6c 01 0c 00    5f 4e 74 53 65 74 49 6e 74 65 72 76 61 6c 50 72  | ..L....A"...l..._NtSetIntervalPr | 
| 46d80 |  6f 66 69 6c 65 40 38 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ofile@8.ntdll.dll.ntdll.dll/.... | 
| 46da0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 46dc0 |  20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 24 00 00 00 6b 01  | ..56........`.......L....A$...k. | 
| 46de0 |  0c 00 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74    69 6f 6e 54 6f 6b 65 6e 40 31 36 00 6e 74 64 6c  | .._NtSetInformationToken@16.ntdl | 
| 46e00 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 46e20 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20  | ..............0.......57........ | 
| 46e40 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00    00 00 6a 01 0c 00 5f 4e 74 53 65 74 49 6e 66 6f  | `.......L....A%...j..._NtSetInfo | 
| 46e60 |  72 6d 61 74 69 6f 6e 54 68 72 65 61 64 40 31 36    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | rmationThread@16.ntdll.dll..ntdl | 
| 46e80 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 46ea0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......58........`.......L. | 
| 46ec0 |  c5 e8 8a 41 26 00 00 00 69 01 0c 00 5f 4e 74 53    65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 72 6f  | ...A&...i..._NtSetInformationPro | 
| 46ee0 |  63 65 73 73 40 31 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | cess@16.ntdll.dll.ntdll.dll/.... | 
| 46f00 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 46f20 |  20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00 68 01  | ..57........`.......L....A%...h. | 
| 46f40 |  0c 00 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74    69 6f 6e 4f 62 6a 65 63 74 40 31 36 00 6e 74 64  | .._NtSetInformationObject@16.ntd | 
| 46f60 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 46f80 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20  | 97..............0.......54...... | 
| 46fa0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    22 00 00 00 67 01 0c 00 5f 4e 74 53 65 74 49 6e  | ..`.......L....A"...g..._NtSetIn | 
| 46fc0 |  66 6f 72 6d 61 74 69 6f 6e 4b 65 79 40 31 36 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | formationKey@16.ntdll.dll.ntdll. | 
| 46fe0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 47000 |  20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......60........`.......L... | 
| 47020 |  8a 41 28 00 00 00 66 01 0c 00 5f 4e 74 53 65 74    49 6e 66 6f 72 6d 61 74 69 6f 6e 4a 6f 62 4f 62  | .A(...f..._NtSetInformationJobOb | 
| 47040 |  6a 65 63 74 40 31 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ject@16.ntdll.dll.ntdll.dll/.... | 
| 47060 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 47080 |  20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 23 00 00 00 65 01  | ..55........`.......L....A#...e. | 
| 470a0 |  0c 00 5f 4e 74 53 65 74 49 6e 66 6f 72 6d 61 74    69 6f 6e 46 69 6c 65 40 32 30 00 6e 74 64 6c 6c  | .._NtSetInformationFile@20.ntdll | 
| 470c0 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 470e0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 36 32 20 20 20 20 20 20 20 20  | ..............0.......62........ | 
| 47100 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2a 00    00 00 64 01 0c 00 5f 4e 74 53 65 74 49 6e 66 6f  | `.......L....A*...d..._NtSetInfo | 
| 47120 |  72 6d 61 74 69 6f 6e 44 65 62 75 67 4f 62 6a 65    63 74 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | rmationDebugObject@20.ntdll.dll. | 
| 47140 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 47160 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......59........`..... | 
| 47180 |  00 00 4c 01 c5 e8 8a 41 27 00 00 00 63 01 0c 00    5f 4e 74 53 65 74 48 69 67 68 57 61 69 74 4c 6f  | ..L....A'...c..._NtSetHighWaitLo | 
| 471a0 |  77 45 76 65 6e 74 50 61 69 72 40 34 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | wEventPair@4.ntdll.dll..ntdll.dl | 
| 471c0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 471e0 |  30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......52........`.......L....A | 
| 47200 |  20 00 00 00 62 01 0c 00 5f 4e 74 53 65 74 48 69    67 68 45 76 65 6e 74 50 61 69 72 40 34 00 6e 74  | ....b..._NtSetHighEventPair@4.nt | 
| 47220 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 47240 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20  | 97..............0.......57...... | 
| 47260 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    25 00 00 00 61 01 0c 00 5f 4e 74 53 65 74 45 76  | ..`.......L....A%...a..._NtSetEv | 
| 47280 |  65 6e 74 42 6f 6f 73 74 50 72 69 6f 72 69 74 79    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | entBoostPriority@4.ntdll.dll..nt | 
| 472a0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 472c0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 34    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......44........`....... | 
| 472e0 |  4c 01 c5 e8 8a 41 18 00 00 00 60 01 0c 00 5f 4e    74 53 65 74 45 76 65 6e 74 40 38 00 6e 74 64 6c  | L....A....`..._NtSetEvent@8.ntdl | 
| 47300 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 47320 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20  | ..............0.......46........ | 
| 47340 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1a 00    00 00 5f 01 0c 00 5f 4e 74 53 65 74 45 61 46 69  | `.......L....A...._..._NtSetEaFi | 
| 47360 |  6c 65 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | le@16.ntdll.dll.ntdll.dll/...... | 
| 47380 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 473a0 |  35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 23 00 00 00 5e 01 0c 00  | 55........`.......L....A#...^... | 
| 473c0 |  5f 4e 74 53 65 74 44 72 69 76 65 72 45 6e 74 72    79 4f 72 64 65 72 40 38 00 6e 74 64 6c 6c 2e 64  | _NtSetDriverEntryOrder@8.ntdll.d | 
| 473e0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 47400 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 36 20 20 20 20 20 20 20 20 60 0a  | ............0.......56........`. | 
| 47420 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 24 00 00 00    5d 01 0c 00 5f 4e 74 53 65 74 44 65 66 61 75 6c  | ......L....A$...]..._NtSetDefaul | 
| 47440 |  74 55 49 4c 61 6e 67 75 61 67 65 40 34 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | tUILanguage@4.ntdll.dll.ntdll.dl | 
| 47460 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 47480 |  30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......52........`.......L....A | 
| 474a0 |  20 00 00 00 5c 01 0c 00 5f 4e 74 53 65 74 44 65    66 61 75 6c 74 4c 6f 63 61 6c 65 40 38 00 6e 74  | ....\..._NtSetDefaultLocale@8.nt | 
| 474c0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 474e0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20  | 97..............0.......59...... | 
| 47500 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    27 00 00 00 5b 01 0c 00 5f 4e 74 53 65 74 44 65  | ..`.......L....A'...[..._NtSetDe | 
| 47520 |  66 61 75 6c 74 48 61 72 64 45 72 72 6f 72 50 6f    72 74 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | faultHardErrorPort@4.ntdll.dll.. | 
| 47540 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 47560 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......56........`..... | 
| 47580 |  00 00 4c 01 c5 e8 8a 41 24 00 00 00 5a 01 0c 00    5f 4e 74 53 65 74 44 65 62 75 67 46 69 6c 74 65  | ..L....A$...Z..._NtSetDebugFilte | 
| 475a0 |  72 53 74 61 74 65 40 31 32 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | rState@12.ntdll.dll.ntdll.dll/.. | 
| 475c0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 475e0 |  20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00  | ....52........`.......L....A.... | 
| 47600 |  59 01 0c 00 5f 4e 74 53 65 74 43 6f 6e 74 65 78    74 54 68 72 65 61 64 40 38 00 6e 74 64 6c 6c 2e  | Y..._NtSetContextThread@8.ntdll. | 
| 47620 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 47640 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a  | ............0.......50........`. | 
| 47660 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00    58 01 0c 00 5f 4e 74 53 65 74 42 6f 6f 74 4f 70  | ......L....A....X..._NtSetBootOp | 
| 47680 |  74 69 6f 6e 73 40 38 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | tions@8.ntdll.dll.ntdll.dll/.... | 
| 476a0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 476c0 |  20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00 57 01  | ..53........`.......L....A!...W. | 
| 476e0 |  0c 00 5f 4e 74 53 65 74 42 6f 6f 74 45 6e 74 72    79 4f 72 64 65 72 40 38 00 6e 74 64 6c 6c 2e 64  | .._NtSetBootEntryOrder@8.ntdll.d | 
| 47700 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 47720 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a  | ............0.......54........`. | 
| 47740 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00    56 01 0c 00 5f 4e 74 53 65 63 75 72 65 43 6f 6e  | ......L....A"...V..._NtSecureCon | 
| 47760 |  6e 65 63 74 50 6f 72 74 40 33 36 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | nectPort@36.ntdll.dll.ntdll.dll/ | 
| 47780 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 477a0 |  20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1f 00  | ......51........`.......L....A.. | 
| 477c0 |  00 00 55 01 0c 00 5f 4e 74 53 61 76 65 4d 65 72    67 65 64 4b 65 79 73 40 31 32 00 6e 74 64 6c 6c  | ..U..._NtSaveMergedKeys@12.ntdll | 
| 477e0 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 47800 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20  | ..............0.......46........ | 
| 47820 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1a 00    00 00 54 01 0c 00 5f 4e 74 53 61 76 65 4b 65 79  | `.......L....A....T..._NtSaveKey | 
| 47840 |  45 78 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | Ex@12.ntdll.dll.ntdll.dll/...... | 
| 47860 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 47880 |  34 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 17 00 00 00 53 01 0c 00  | 43........`.......L....A....S... | 
| 478a0 |  5f 4e 74 53 61 76 65 4b 65 79 40 38 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | _NtSaveKey@8.ntdll.dll..ntdll.dl | 
| 478c0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 478e0 |  30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......48........`.......L....A | 
| 47900 |  1c 00 00 00 52 01 0c 00 5f 4e 74 52 65 73 75 6d    65 54 68 72 65 61 64 40 38 00 6e 74 64 6c 6c 2e  | ....R..._NtResumeThread@8.ntdll. | 
| 47920 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 47940 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a  | ............0.......49........`. | 
| 47960 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1d 00 00 00    51 01 0c 00 5f 4e 74 52 65 73 75 6d 65 50 72 6f  | ......L....A....Q..._NtResumePro | 
| 47980 |  63 65 73 73 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | cess@4.ntdll.dll..ntdll.dll/.... | 
| 479a0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 479c0 |  20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1b 00 00 00 50 01  | ..47........`.......L....A....P. | 
| 479e0 |  0c 00 5f 4e 74 52 65 73 74 6f 72 65 4b 65 79 40    31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | .._NtRestoreKey@12.ntdll.dll..nt | 
| 47a00 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 47a20 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......52........`....... | 
| 47a40 |  4c 01 c5 e8 8a 41 20 00 00 00 4f 01 0c 00 5f 4e    74 52 65 73 65 74 57 72 69 74 65 57 61 74 63 68  | L....A....O..._NtResetWriteWatch | 
| 47a60 |  40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @12.ntdll.dll.ntdll.dll/......10 | 
| 47a80 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36  | 99622597..............0.......46 | 
| 47aa0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1a 00 00 00 4e 01 0c 00 5f 4e  | ........`.......L....A....N..._N | 
| 47ac0 |  74 52 65 73 65 74 45 76 65 6e 74 40 38 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | tResetEvent@8.ntdll.dll.ntdll.dl | 
| 47ae0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 47b00 |  30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......56........`.......L....A | 
| 47b20 |  24 00 00 00 4d 01 0c 00 5f 4e 74 52 65 71 75 65    73 74 57 61 6b 65 75 70 4c 61 74 65 6e 63 79 40  | $...M..._NtRequestWakeupLatency@ | 
| 47b40 |  34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 4.ntdll.dll.ntdll.dll/......1099 | 
| 47b60 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20  | 622597..............0.......57.. | 
| 47b80 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 25 00 00 00 4c 01 0c 00 5f 4e 74 52  | ......`.......L....A%...L..._NtR | 
| 47ba0 |  65 71 75 65 73 74 57 61 69 74 52 65 70 6c 79 50    6f 72 74 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c  | equestWaitReplyPort@12.ntdll.dll | 
| 47bc0 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 47be0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 37 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......47........`... | 
| 47c00 |  ff ff 00 00 4c 01 c5 e8 8a 41 1b 00 00 00 4b 01    0c 00 5f 4e 74 52 65 71 75 65 73 74 50 6f 72 74  | ....L....A....K..._NtRequestPort | 
| 47c20 |  40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @8.ntdll.dll..ntdll.dll/......10 | 
| 47c40 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35  | 99622597..............0.......55 | 
| 47c60 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 23 00 00 00 4a 01 0c 00 5f 4e  | ........`.......L....A#...J..._N | 
| 47c80 |  74 52 65 71 75 65 73 74 44 65 76 69 63 65 57 61    6b 65 75 70 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c  | tRequestDeviceWakeup@4.ntdll.dll | 
| 47ca0 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 47cc0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......54........`... | 
| 47ce0 |  ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00 49 01    0c 00 5f 4e 74 52 65 70 6c 79 57 61 69 74 52 65  | ....L....A"...I..._NtReplyWaitRe | 
| 47d00 |  70 6c 79 50 6f 72 74 40 38 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | plyPort@8.ntdll.dll.ntdll.dll/.. | 
| 47d20 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 47d40 |  20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00  | ....59........`.......L....A'... | 
| 47d60 |  48 01 0c 00 5f 4e 74 52 65 70 6c 79 57 61 69 74    52 65 63 65 69 76 65 50 6f 72 74 45 78 40 32 30  | H..._NtReplyWaitReceivePortEx@20 | 
| 47d80 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 47da0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20  | 622597..............0.......57.. | 
| 47dc0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 25 00 00 00 47 01 0c 00 5f 4e 74 52  | ......`.......L....A%...G..._NtR | 
| 47de0 |  65 70 6c 79 57 61 69 74 52 65 63 65 69 76 65 50    6f 72 74 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c  | eplyWaitReceivePort@16.ntdll.dll | 
| 47e00 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 47e20 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 35 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......45........`... | 
| 47e40 |  ff ff 00 00 4c 01 c5 e8 8a 41 19 00 00 00 46 01    0c 00 5f 4e 74 52 65 70 6c 79 50 6f 72 74 40 38  | ....L....A....F..._NtReplyPort@8 | 
| 47e60 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 47e80 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20  | 622597..............0.......47.. | 
| 47ea0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1b 00 00 00 45 01 0c 00 5f 4e 74 52  | ......`.......L....A....E..._NtR | 
| 47ec0 |  65 70 6c 61 63 65 4b 65 79 40 31 32 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | eplaceKey@12.ntdll.dll..ntdll.dl | 
| 47ee0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 47f00 |  30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......45........`.......L....A | 
| 47f20 |  19 00 00 00 44 01 0c 00 5f 4e 74 52 65 6e 61 6d    65 4b 65 79 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c  | ....D..._NtRenameKey@8.ntdll.dll | 
| 47f40 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 47f60 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......54........`... | 
| 47f80 |  ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00 43 01    0c 00 5f 4e 74 52 65 6d 6f 76 65 50 72 6f 63 65  | ....L....A"...C..._NtRemoveProce | 
| 47fa0 |  73 73 44 65 62 75 67 40 38 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ssDebug@8.ntdll.dll.ntdll.dll/.. | 
| 47fc0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 47fe0 |  20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 23 00 00 00  | ....55........`.......L....A#... | 
| 48000 |  42 01 0c 00 5f 4e 74 52 65 6d 6f 76 65 49 6f 43    6f 6d 70 6c 65 74 69 6f 6e 40 32 30 00 6e 74 64  | B..._NtRemoveIoCompletion@20.ntd | 
| 48020 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 48040 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20  | 97..............0.......53...... | 
| 48060 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    21 00 00 00 41 01 0c 00 5f 4e 74 52 65 6c 65 61  | ..`.......L....A!...A..._NtRelea | 
| 48080 |  73 65 53 65 6d 61 70 68 6f 72 65 40 31 32 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | seSemaphore@12.ntdll.dll..ntdll. | 
| 480a0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 480c0 |  20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......49........`.......L... | 
| 480e0 |  8a 41 1d 00 00 00 40 01 0c 00 5f 4e 74 52 65 6c    65 61 73 65 4d 75 74 61 6e 74 40 38 00 6e 74 64  | .A....@..._NtReleaseMutant@8.ntd | 
| 48100 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 48120 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20  | 97..............0.......54...... | 
| 48140 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    22 00 00 00 3f 01 0c 00 5f 4e 74 52 65 6c 65 61  | ..`.......L....A"...?..._NtRelea | 
| 48160 |  73 65 4b 65 79 65 64 45 76 65 6e 74 40 31 36 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | seKeyedEvent@16.ntdll.dll.ntdll. | 
| 48180 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 481a0 |  20 20 30 20 20 20 20 20 20 20 36 33 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......63........`.......L... | 
| 481c0 |  8a 41 2b 00 00 00 3e 01 0c 00 5f 4e 74 52 65 67    69 73 74 65 72 54 68 72 65 61 64 54 65 72 6d 69  | .A+...>..._NtRegisterThreadTermi | 
| 481e0 |  6e 61 74 65 50 6f 72 74 40 34 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | natePort@4.ntdll.dll..ntdll.dll/ | 
| 48200 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 48220 |  20 20 20 20 20 20 35 34 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 22 00  | ......54........`.......L....A". | 
| 48240 |  00 00 3d 01 0c 00 5f 4e 74 52 65 61 64 56 69 72    74 75 61 6c 4d 65 6d 6f 72 79 40 32 30 00 6e 74  | ..=..._NtReadVirtualMemory@20.nt | 
| 48260 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 48280 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20  | 97..............0.......52...... | 
| 482a0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    20 00 00 00 3c 01 0c 00 5f 4e 74 52 65 61 64 52  | ..`.......L....A....<..._NtReadR | 
| 482c0 |  65 71 75 65 73 74 44 61 74 61 40 32 34 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | equestData@24.ntdll.dll.ntdll.dl | 
| 482e0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 48300 |  30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......52........`.......L....A | 
| 48320 |  20 00 00 00 3b 01 0c 00 5f 4e 74 52 65 61 64 46    69 6c 65 53 63 61 74 74 65 72 40 33 36 00 6e 74  | ....;..._NtReadFileScatter@36.nt | 
| 48340 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 48360 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 35 20 20 20 20 20 20  | 97..............0.......45...... | 
| 48380 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    19 00 00 00 3a 01 0c 00 5f 4e 74 52 65 61 64 46  | ..`.......L....A....:..._NtReadF | 
| 483a0 |  69 6c 65 40 33 36 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ile@36.ntdll.dll..ntdll.dll/.... | 
| 483c0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 483e0 |  20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00 39 01  | ..51........`.......L....A....9. | 
| 48400 |  0c 00 5f 4e 74 52 61 69 73 65 48 61 72 64 45 72    72 6f 72 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c  | .._NtRaiseHardError@24.ntdll.dll | 
| 48420 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 48440 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......51........`... | 
| 48460 |  ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00 38 01    0c 00 5f 4e 74 52 61 69 73 65 45 78 63 65 70 74  | ....L....A....8..._NtRaiseExcept | 
| 48480 |  69 6f 6e 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ion@12.ntdll.dll..ntdll.dll/.... | 
| 484a0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 484c0 |  20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00 37 01  | ..51........`.......L....A....7. | 
| 484e0 |  0c 00 5f 4e 74 51 75 65 75 65 41 70 63 54 68 72    65 61 64 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c  | .._NtQueueApcThread@20.ntdll.dll | 
| 48500 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 48520 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 33 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......63........`... | 
| 48540 |  ff ff 00 00 4c 01 c5 e8 8a 41 2b 00 00 00 36 01    0c 00 5f 4e 74 51 75 65 72 79 56 6f 6c 75 6d 65  | ....L....A+...6..._NtQueryVolume | 
| 48560 |  49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c 65 40    32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | InformationFile@20.ntdll.dll..nt | 
| 48580 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 485a0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......55........`....... | 
| 485c0 |  4c 01 c5 e8 8a 41 23 00 00 00 35 01 0c 00 5f 4e    74 51 75 65 72 79 56 69 72 74 75 61 6c 4d 65 6d  | L....A#...5..._NtQueryVirtualMem | 
| 485e0 |  6f 72 79 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ory@24.ntdll.dll..ntdll.dll/.... | 
| 48600 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 48620 |  20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00 34 01  | ..50........`.......L....A....4. | 
| 48640 |  0c 00 5f 4e 74 51 75 65 72 79 56 61 6c 75 65 4b    65 79 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | .._NtQueryValueKey@24.ntdll.dll. | 
| 48660 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 48680 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......57........`..... | 
| 486a0 |  00 00 4c 01 c5 e8 8a 41 25 00 00 00 33 01 0c 00    5f 4e 74 51 75 65 72 79 54 69 6d 65 72 52 65 73  | ..L....A%...3..._NtQueryTimerRes | 
| 486c0 |  6f 6c 75 74 69 6f 6e 40 31 32 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | olution@12.ntdll.dll..ntdll.dll/ | 
| 486e0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 48700 |  20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1b 00  | ......47........`.......L....A.. | 
| 48720 |  00 00 32 01 0c 00 5f 4e 74 51 75 65 72 79 54 69    6d 65 72 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c  | ..2..._NtQueryTimer@20.ntdll.dll | 
| 48740 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 48760 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......51........`... | 
| 48780 |  ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00 31 01    0c 00 5f 4e 74 51 75 65 72 79 53 79 73 74 65 6d  | ....L....A....1..._NtQuerySystem | 
| 487a0 |  54 69 6d 65 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | Time@4.ntdll.dll..ntdll.dll/.... | 
| 487c0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 487e0 |  20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00 30 01  | ..59........`.......L....A'...0. | 
| 48800 |  0c 00 5f 4e 74 51 75 65 72 79 53 79 73 74 65 6d    49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 36 00 6e  | .._NtQuerySystemInformation@16.n | 
| 48820 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 48840 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 36 20 20 20 20  | 2597..............0.......66.... | 
| 48860 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 2e 00 00 00 2f 01 0c 00 5f 4e 74 51 75 65  | ....`.......L....A..../..._NtQue | 
| 48880 |  72 79 53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d    65 6e 74 56 61 6c 75 65 45 78 40 32 30 00 6e 74  | rySystemEnvironmentValueEx@20.nt | 
| 488a0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 488c0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 34 20 20 20 20 20 20  | 97..............0.......64...... | 
| 488e0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    2c 00 00 00 2e 01 0c 00 5f 4e 74 51 75 65 72 79  | ..`.......L....A,......._NtQuery | 
| 48900 |  53 79 73 74 65 6d 45 6e 76 69 72 6f 6e 6d 65 6e    74 56 61 6c 75 65 40 31 36 00 6e 74 64 6c 6c 2e  | SystemEnvironmentValue@16.ntdll. | 
| 48920 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 48940 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 30 20 20 20 20 20 20 20 20 60 0a  | ............0.......60........`. | 
| 48960 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 28 00 00 00    2d 01 0c 00 5f 4e 74 51 75 65 72 79 53 79 6d 62  | ......L....A(...-..._NtQuerySymb | 
| 48980 |  6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63 74 40 31    32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | olicLinkObject@12.ntdll.dll.ntdl | 
| 489a0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 489c0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......51........`.......L. | 
| 489e0 |  c5 e8 8a 41 1f 00 00 00 2c 01 0c 00 5f 4e 74 51    75 65 72 79 53 65 6d 61 70 68 6f 72 65 40 32 30  | ...A....,..._NtQuerySemaphore@20 | 
| 48a00 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 48a20 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20  | 622597..............0.......56.. | 
| 48a40 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 24 00 00 00 2b 01 0c 00 5f 4e 74 51  | ......`.......L....A$...+..._NtQ | 
| 48a60 |  75 65 72 79 53 65 63 75 72 69 74 79 4f 62 6a 65    63 74 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | uerySecurityObject@20.ntdll.dll. | 
| 48a80 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 48aa0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......49........`..... | 
| 48ac0 |  00 00 4c 01 c5 e8 8a 41 1d 00 00 00 2a 01 0c 00    5f 4e 74 51 75 65 72 79 53 65 63 74 69 6f 6e 40  | ..L....A....*..._NtQuerySection@ | 
| 48ae0 |  32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 20.ntdll.dll..ntdll.dll/......10 | 
| 48b00 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 32  | 99622597..............0.......62 | 
| 48b20 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 2a 00 00 00 29 01 0c 00 5f 4e  | ........`.......L....A*...)..._N | 
| 48b40 |  74 51 75 65 72 79 51 75 6f 74 61 49 6e 66 6f 72    6d 61 74 69 6f 6e 46 69 6c 65 40 33 36 00 6e 74  | tQueryQuotaInformationFile@36.nt | 
| 48b60 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 48b80 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 33 20 20 20 20 20 20  | 97..............0.......63...... | 
| 48ba0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    2b 00 00 00 28 01 0c 00 5f 4e 74 51 75 65 72 79  | ..`.......L....A+...(..._NtQuery | 
| 48bc0 |  50 6f 72 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 50    72 6f 63 65 73 73 40 30 00 6e 74 64 6c 6c 2e 64  | PortInformationProcess@0.ntdll.d | 
| 48be0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 48c00 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 39 20 20 20 20 20 20 20 20 60 0a  | ............0.......59........`. | 
| 48c20 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00    27 01 0c 00 5f 4e 74 51 75 65 72 79 50 65 72 66  | ......L....A'...'..._NtQueryPerf | 
| 48c40 |  6f 72 6d 61 6e 63 65 43 6f 75 6e 74 65 72 40 38    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | ormanceCounter@8.ntdll.dll..ntdl | 
| 48c60 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 48c80 |  20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......55........`.......L. | 
| 48ca0 |  c5 e8 8a 41 23 00 00 00 26 01 0c 00 5f 4e 74 51    75 65 72 79 4f 70 65 6e 53 75 62 4b 65 79 73 45  | ...A#...&..._NtQueryOpenSubKeysE | 
| 48cc0 |  78 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | x@16.ntdll.dll..ntdll.dll/...... | 
| 48ce0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 48d00 |  35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 20 00 00 00 25 01 0c 00  | 52........`.......L....A....%... | 
| 48d20 |  5f 4e 74 51 75 65 72 79 4f 70 65 6e 53 75 62 4b    65 79 73 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | _NtQueryOpenSubKeys@8.ntdll.dll. | 
| 48d40 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 48d60 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......48........`..... | 
| 48d80 |  00 00 4c 01 c5 e8 8a 41 1c 00 00 00 24 01 0c 00    5f 4e 74 51 75 65 72 79 4f 62 6a 65 63 74 40 32  | ..L....A....$..._NtQueryObject@2 | 
| 48da0 |  30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 0.ntdll.dll.ntdll.dll/......1099 | 
| 48dc0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20  | 622597..............0.......48.. | 
| 48de0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1c 00 00 00 23 01 0c 00 5f 4e 74 51  | ......`.......L....A....#..._NtQ | 
| 48e00 |  75 65 72 79 4d 75 74 61 6e 74 40 32 30 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | ueryMutant@20.ntdll.dll.ntdll.dl | 
| 48e20 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 48e40 |  30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......58........`.......L....A | 
| 48e60 |  26 00 00 00 22 01 0c 00 5f 4e 74 51 75 65 72 79    4d 75 6c 74 69 70 6c 65 56 61 6c 75 65 4b 65 79  | &..."..._NtQueryMultipleValueKey | 
| 48e80 |  40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @24.ntdll.dll.ntdll.dll/......10 | 
| 48ea0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35  | 99622597..............0.......45 | 
| 48ec0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 19 00 00 00 21 01 0c 00 5f 4e  | ........`.......L....A....!..._N | 
| 48ee0 |  74 51 75 65 72 79 4b 65 79 40 32 30 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | tQueryKey@20.ntdll.dll..ntdll.dl | 
| 48f00 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 48f20 |  30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......54........`.......L....A | 
| 48f40 |  22 00 00 00 20 01 0c 00 5f 4e 74 51 75 65 72 79    49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 32 30 00  | "......._NtQueryIoCompletion@20. | 
| 48f60 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 48f80 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20  | 2597..............0.......56.... | 
| 48fa0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 24 00 00 00 1f 01 0c 00 5f 4e 74 51 75 65  | ....`.......L....A$......._NtQue | 
| 48fc0 |  72 79 49 6e 74 65 72 76 61 6c 50 72 6f 66 69 6c    65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | ryIntervalProfile@8.ntdll.dll.nt | 
| 48fe0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 49000 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 38    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......58........`....... | 
| 49020 |  4c 01 c5 e8 8a 41 26 00 00 00 1e 01 0c 00 5f 4e    74 51 75 65 72 79 49 6e 73 74 61 6c 6c 55 49 4c  | L....A&......._NtQueryInstallUIL | 
| 49040 |  61 6e 67 75 61 67 65 40 34 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | anguage@4.ntdll.dll.ntdll.dll/.. | 
| 49060 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 49080 |  20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00  | ....58........`.......L....A&... | 
| 490a0 |  1d 01 0c 00 5f 4e 74 51 75 65 72 79 49 6e 66 6f    72 6d 61 74 69 6f 6e 54 6f 6b 65 6e 40 32 30 00  | ...._NtQueryInformationToken@20. | 
| 490c0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 490e0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 39 20 20 20 20  | 2597..............0.......59.... | 
| 49100 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 27 00 00 00 1c 01 0c 00 5f 4e 74 51 75 65  | ....`.......L....A'......._NtQue | 
| 49120 |  72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 54 68 72    65 61 64 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c  | ryInformationThread@20.ntdll.dll | 
| 49140 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 49160 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......60........`... | 
| 49180 |  ff ff 00 00 4c 01 c5 e8 8a 41 28 00 00 00 1b 01    0c 00 5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d  | ....L....A(......._NtQueryInform | 
| 491a0 |  61 74 69 6f 6e 50 72 6f 63 65 73 73 40 32 30 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | ationProcess@20.ntdll.dll.ntdll. | 
| 491c0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 491e0 |  20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......57........`.......L... | 
| 49200 |  8a 41 25 00 00 00 1a 01 0c 00 5f 4e 74 51 75 65    72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 50 6f 72  | .A%......._NtQueryInformationPor | 
| 49220 |  74 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | t@20.ntdll.dll..ntdll.dll/...... | 
| 49240 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 49260 |  36 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 2a 00 00 00 19 01 0c 00  | 62........`.......L....A*....... | 
| 49280 |  5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74    69 6f 6e 4a 6f 62 4f 62 6a 65 63 74 40 32 30 00  | _NtQueryInformationJobObject@20. | 
| 492a0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 492c0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20  | 2597..............0.......57.... | 
| 492e0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 25 00 00 00 18 01 0c 00 5f 4e 74 51 75 65  | ....`.......L....A%......._NtQue | 
| 49300 |  72 79 49 6e 66 6f 72 6d 61 74 69 6f 6e 46 69 6c    65 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | ryInformationFile@20.ntdll.dll.. | 
| 49320 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 49340 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......57........`..... | 
| 49360 |  00 00 4c 01 c5 e8 8a 41 25 00 00 00 17 01 0c 00    5f 4e 74 51 75 65 72 79 49 6e 66 6f 72 6d 61 74  | ..L....A%......._NtQueryInformat | 
| 49380 |  69 6f 6e 41 74 6f 6d 40 32 30 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ionAtom@20.ntdll.dll..ntdll.dll/ | 
| 493a0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 493c0 |  20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00  | ......59........`.......L....A'. | 
| 493e0 |  00 00 16 01 0c 00 5f 4e 74 51 75 65 72 79 46 75    6c 6c 41 74 74 72 69 62 75 74 65 73 46 69 6c 65  | ......_NtQueryFullAttributesFile | 
| 49400 |  40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @8.ntdll.dll..ntdll.dll/......10 | 
| 49420 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37  | 99622597..............0.......47 | 
| 49440 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1b 00 00 00 15 01 0c 00 5f 4e  | ........`.......L....A........_N | 
| 49460 |  74 51 75 65 72 79 45 76 65 6e 74 40 32 30 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | tQueryEvent@20.ntdll.dll..ntdll. | 
| 49480 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 494a0 |  20 20 30 20 20 20 20 20 20 20 34 38 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......48........`.......L... | 
| 494c0 |  8a 41 1c 00 00 00 14 01 0c 00 5f 4e 74 51 75 65    72 79 45 61 46 69 6c 65 40 33 36 00 6e 74 64 6c  | .A........_NtQueryEaFile@36.ntdl | 
| 494e0 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 49500 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20  | ..............0.......57........ | 
| 49520 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00    00 00 13 01 0c 00 5f 4e 74 51 75 65 72 79 44 72  | `.......L....A%......._NtQueryDr | 
| 49540 |  69 76 65 72 45 6e 74 72 79 4f 72 64 65 72 40 38    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | iverEntryOrder@8.ntdll.dll..ntdl | 
| 49560 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 49580 |  20 20 20 20 30 20 20 20 20 20 20 20 35 37 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......57........`.......L. | 
| 495a0 |  c5 e8 8a 41 25 00 00 00 12 01 0c 00 5f 4e 74 51    75 65 72 79 44 69 72 65 63 74 6f 72 79 4f 62 6a  | ...A%......._NtQueryDirectoryObj | 
| 495c0 |  65 63 74 40 32 38 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ect@28.ntdll.dll..ntdll.dll/.... | 
| 495e0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 49600 |  20 20 35 35 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 23 00 00 00 11 01  | ..55........`.......L....A#..... | 
| 49620 |  0c 00 5f 4e 74 51 75 65 72 79 44 69 72 65 63 74    6f 72 79 46 69 6c 65 40 34 34 00 6e 74 64 6c 6c  | .._NtQueryDirectoryFile@44.ntdll | 
| 49640 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 49660 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20  | ..............0.......58........ | 
| 49680 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 26 00    00 00 10 01 0c 00 5f 4e 74 51 75 65 72 79 44 65  | `.......L....A&......._NtQueryDe | 
| 496a0 |  66 61 75 6c 74 55 49 4c 61 6e 67 75 61 67 65 40    34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | faultUILanguage@4.ntdll.dll.ntdl | 
| 496c0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 496e0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......54........`.......L. | 
| 49700 |  c5 e8 8a 41 22 00 00 00 0f 01 0c 00 5f 4e 74 51    75 65 72 79 44 65 66 61 75 6c 74 4c 6f 63 61 6c  | ...A"......._NtQueryDefaultLocal | 
| 49720 |  65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | e@8.ntdll.dll.ntdll.dll/......10 | 
| 49740 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37  | 99622597..............0.......57 | 
| 49760 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 25 00 00 00 0e 01 0c 00 5f 4e  | ........`.......L....A%......._N | 
| 49780 |  74 51 75 65 72 79 44 65 62 75 67 46 69 6c 74 65    72 53 74 61 74 65 40 38 00 6e 74 64 6c 6c 2e 64  | tQueryDebugFilterState@8.ntdll.d | 
| 497a0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 497c0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a  | ............0.......52........`. | 
| 497e0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00    0d 01 0c 00 5f 4e 74 51 75 65 72 79 42 6f 6f 74  | ......L....A........_NtQueryBoot | 
| 49800 |  4f 70 74 69 6f 6e 73 40 38 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | Options@8.ntdll.dll.ntdll.dll/.. | 
| 49820 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 49840 |  20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 23 00 00 00  | ....55........`.......L....A#... | 
| 49860 |  0c 01 0c 00 5f 4e 74 51 75 65 72 79 42 6f 6f 74    45 6e 74 72 79 4f 72 64 65 72 40 38 00 6e 74 64  | ...._NtQueryBootEntryOrder@8.ntd | 
| 49880 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 498a0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20  | 97..............0.......55...... | 
| 498c0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    23 00 00 00 0b 01 0c 00 5f 4e 74 51 75 65 72 79  | ..`.......L....A#......._NtQuery | 
| 498e0 |  41 74 74 72 69 62 75 74 65 73 46 69 6c 65 40 38    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | AttributesFile@8.ntdll.dll..ntdl | 
| 49900 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 49920 |  20 20 20 20 30 20 20 20 20 20 20 20 34 36 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......46........`.......L. | 
| 49940 |  c5 e8 8a 41 1a 00 00 00 0a 01 0c 00 5f 4e 74 50    75 6c 73 65 45 76 65 6e 74 40 38 00 6e 74 64 6c  | ...A........_NtPulseEvent@8.ntdl | 
| 49960 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 49980 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20  | ..............0.......57........ | 
| 499a0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00    00 00 09 01 0c 00 5f 4e 74 50 72 6f 74 65 63 74  | `.......L....A%......._NtProtect | 
| 499c0 |  56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 32 30    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | VirtualMemory@20.ntdll.dll..ntdl | 
| 499e0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 49a00 |  20 20 20 20 30 20 20 20 20 20 20 20 36 34 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......64........`.......L. | 
| 49a20 |  c5 e8 8a 41 2c 00 00 00 08 01 0c 00 5f 4e 74 50    72 69 76 69 6c 65 67 65 64 53 65 72 76 69 63 65  | ...A,......._NtPrivilegedService | 
| 49a40 |  41 75 64 69 74 41 6c 61 72 6d 40 32 30 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | AuditAlarm@20.ntdll.dll.ntdll.dl | 
| 49a60 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 49a80 |  30 20 20 20 20 20 20 20 36 32 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......62........`.......L....A | 
| 49aa0 |  2a 00 00 00 07 01 0c 00 5f 4e 74 50 72 69 76 69    6c 65 67 65 4f 62 6a 65 63 74 41 75 64 69 74 41  | *......._NtPrivilegeObjectAuditA | 
| 49ac0 |  6c 61 72 6d 40 32 34 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | larm@24.ntdll.dll.ntdll.dll/.... | 
| 49ae0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 49b00 |  20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00 06 01  | ..51........`.......L....A...... | 
| 49b20 |  0c 00 5f 4e 74 50 72 69 76 69 6c 65 67 65 43 68    65 63 6b 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c  | .._NtPrivilegeCheck@12.ntdll.dll | 
| 49b40 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 49b60 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......53........`... | 
| 49b80 |  ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00 05 01    0c 00 5f 4e 74 50 6f 77 65 72 49 6e 66 6f 72 6d  | ....L....A!......._NtPowerInform | 
| 49ba0 |  61 74 69 6f 6e 40 32 30 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ation@20.ntdll.dll..ntdll.dll/.. | 
| 49bc0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 49be0 |  20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00  | ....52........`.......L....A.... | 
| 49c00 |  04 01 0c 00 5f 4e 74 50 6c 75 67 50 6c 61 79 43    6f 6e 74 72 6f 6c 40 31 32 00 6e 74 64 6c 6c 2e  | ...._NtPlugPlayControl@12.ntdll. | 
| 49c20 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 49c40 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a  | ............0.......46........`. | 
| 49c60 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1a 00 00 00    03 01 0c 00 5f 4e 74 4f 70 65 6e 54 69 6d 65 72  | ......L....A........_NtOpenTimer | 
| 49c80 |  40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @12.ntdll.dll.ntdll.dll/......10 | 
| 49ca0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34  | 99622597..............0.......54 | 
| 49cc0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 22 00 00 00 02 01 0c 00 5f 4e  | ........`.......L....A"......._N | 
| 49ce0 |  74 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b 65 6e    45 78 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | tOpenThreadTokenEx@20.ntdll.dll. | 
| 49d00 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 49d20 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......52........`..... | 
| 49d40 |  00 00 4c 01 c5 e8 8a 41 20 00 00 00 01 01 0c 00    5f 4e 74 4f 70 65 6e 54 68 72 65 61 64 54 6f 6b  | ..L....A........_NtOpenThreadTok | 
| 49d60 |  65 6e 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | en@16.ntdll.dll.ntdll.dll/...... | 
| 49d80 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 49da0 |  34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1b 00 00 00 00 01 0c 00  | 47........`.......L....A........ | 
| 49dc0 |  5f 4e 74 4f 70 65 6e 54 68 72 65 61 64 40 31 36    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | _NtOpenThread@16.ntdll.dll..ntdl | 
| 49de0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 49e00 |  20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......59........`.......L. | 
| 49e20 |  c5 e8 8a 41 27 00 00 00 ff 00 0c 00 5f 4e 74 4f    70 65 6e 53 79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f  | ...A'......._NtOpenSymbolicLinkO | 
| 49e40 |  62 6a 65 63 74 40 31 32 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | bject@12.ntdll.dll..ntdll.dll/.. | 
| 49e60 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 49e80 |  20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00  | ....50........`.......L....A.... | 
| 49ea0 |  fe 00 0c 00 5f 4e 74 4f 70 65 6e 53 65 6d 61 70    68 6f 72 65 40 31 32 00 6e 74 64 6c 6c 2e 64 6c  | ...._NtOpenSemaphore@12.ntdll.dl | 
| 49ec0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 49ee0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 38 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......48........`... | 
| 49f00 |  ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00 fd 00    0c 00 5f 4e 74 4f 70 65 6e 53 65 63 74 69 6f 6e  | ....L....A........_NtOpenSection | 
| 49f20 |  40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @12.ntdll.dll.ntdll.dll/......10 | 
| 49f40 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35  | 99622597..............0.......55 | 
| 49f60 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 23 00 00 00 fc 00 0c 00 5f 4e  | ........`.......L....A#......._N | 
| 49f80 |  74 4f 70 65 6e 50 72 6f 63 65 73 73 54 6f 6b 65    6e 45 78 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c  | tOpenProcessTokenEx@16.ntdll.dll | 
| 49fa0 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 49fc0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......53........`... | 
| 49fe0 |  ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00 fb 00    0c 00 5f 4e 74 4f 70 65 6e 50 72 6f 63 65 73 73  | ....L....A!......._NtOpenProcess | 
| 4a000 |  54 6f 6b 65 6e 40 31 32 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | Token@12.ntdll.dll..ntdll.dll/.. | 
| 4a020 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 4a040 |  20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00  | ....48........`.......L....A.... | 
| 4a060 |  fa 00 0c 00 5f 4e 74 4f 70 65 6e 50 72 6f 63 65    73 73 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | ...._NtOpenProcess@16.ntdll.dll. | 
| 4a080 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 4a0a0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......57........`..... | 
| 4a0c0 |  00 00 4c 01 c5 e8 8a 41 25 00 00 00 f9 00 0c 00    5f 4e 74 4f 70 65 6e 4f 62 6a 65 63 74 41 75 64  | ..L....A%......._NtOpenObjectAud | 
| 4a0e0 |  69 74 41 6c 61 72 6d 40 34 38 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | itAlarm@48.ntdll.dll..ntdll.dll/ | 
| 4a100 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 4a120 |  20 20 20 20 20 20 34 37 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1b 00  | ......47........`.......L....A.. | 
| 4a140 |  00 00 f8 00 0c 00 5f 4e 74 4f 70 65 6e 4d 75 74    61 6e 74 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c  | ......_NtOpenMutant@12.ntdll.dll | 
| 4a160 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 4a180 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......51........`... | 
| 4a1a0 |  ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00 f7 00    0c 00 5f 4e 74 4f 70 65 6e 4b 65 79 65 64 45 76  | ....L....A........_NtOpenKeyedEv | 
| 4a1c0 |  65 6e 74 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ent@12.ntdll.dll..ntdll.dll/.... | 
| 4a1e0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 4a200 |  20 20 34 34 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 18 00 00 00 f6 00  | ..44........`.......L....A...... | 
| 4a220 |  0c 00 5f 4e 74 4f 70 65 6e 4b 65 79 40 31 32 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | .._NtOpenKey@12.ntdll.dll.ntdll. | 
| 4a240 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 4a260 |  20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......50........`.......L... | 
| 4a280 |  8a 41 1e 00 00 00 f5 00 0c 00 5f 4e 74 4f 70 65    6e 4a 6f 62 4f 62 6a 65 63 74 40 31 32 00 6e 74  | .A........_NtOpenJobObject@12.nt | 
| 4a2a0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 4a2c0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20  | 97..............0.......53...... | 
| 4a2e0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    21 00 00 00 f4 00 0c 00 5f 4e 74 4f 70 65 6e 49  | ..`.......L....A!......._NtOpenI | 
| 4a300 |  6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 31 32 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | oCompletion@12.ntdll.dll..ntdll. | 
| 4a320 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 4a340 |  20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......45........`.......L... | 
| 4a360 |  8a 41 19 00 00 00 f3 00 0c 00 5f 4e 74 4f 70 65    6e 46 69 6c 65 40 32 34 00 6e 74 64 6c 6c 2e 64  | .A........_NtOpenFile@24.ntdll.d | 
| 4a380 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 4a3a0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a  | ............0.......50........`. | 
| 4a3c0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00    f2 00 0c 00 5f 4e 74 4f 70 65 6e 45 76 65 6e 74  | ......L....A........_NtOpenEvent | 
| 4a3e0 |  50 61 69 72 40 31 32 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | Pair@12.ntdll.dll.ntdll.dll/.... | 
| 4a400 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 4a420 |  20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1a 00 00 00 f1 00  | ..46........`.......L....A...... | 
| 4a440 |  0c 00 5f 4e 74 4f 70 65 6e 45 76 65 6e 74 40 31    32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | .._NtOpenEvent@12.ntdll.dll.ntdl | 
| 4a460 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4a480 |  20 20 20 20 30 20 20 20 20 20 20 20 35 36 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......56........`.......L. | 
| 4a4a0 |  c5 e8 8a 41 24 00 00 00 f0 00 0c 00 5f 4e 74 4f    70 65 6e 44 69 72 65 63 74 6f 72 79 4f 62 6a 65  | ...A$......._NtOpenDirectoryObje | 
| 4a4c0 |  63 74 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ct@12.ntdll.dll.ntdll.dll/...... | 
| 4a4e0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4a500 |  36 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 29 00 00 00 ef 00 0c 00  | 61........`.......L....A)....... | 
| 4a520 |  5f 4e 74 4e 6f 74 69 66 79 43 68 61 6e 67 65 4d    75 6c 74 69 70 6c 65 4b 65 79 73 40 34 38 00 6e  | _NtNotifyChangeMultipleKeys@48.n | 
| 4a540 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 4a560 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20  | 2597..............0.......52.... | 
| 4a580 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 20 00 00 00 ee 00 0c 00 5f 4e 74 4e 6f 74  | ....`.......L....A........_NtNot | 
| 4a5a0 |  69 66 79 43 68 61 6e 67 65 4b 65 79 40 34 30 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | ifyChangeKey@40.ntdll.dll.ntdll. | 
| 4a5c0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 4a5e0 |  20 20 30 20 20 20 20 20 20 20 36 32 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......62........`.......L... | 
| 4a600 |  8a 41 2a 00 00 00 ed 00 0c 00 5f 4e 74 4e 6f 74    69 66 79 43 68 61 6e 67 65 44 69 72 65 63 74 6f  | .A*......._NtNotifyChangeDirecto | 
| 4a620 |  72 79 46 69 6c 65 40 33 36 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ryFile@36.ntdll.dll.ntdll.dll/.. | 
| 4a640 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 4a660 |  20 20 20 20 35 33 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00  | ....53........`.......L....A!... | 
| 4a680 |  ec 00 0c 00 5f 4e 74 4d 6f 64 69 66 79 44 72 69    76 65 72 45 6e 74 72 79 40 34 00 6e 74 64 6c 6c  | ...._NtModifyDriverEntry@4.ntdll | 
| 4a6a0 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 4a6c0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 31 20 20 20 20 20 20 20 20  | ..............0.......51........ | 
| 4a6e0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1f 00    00 00 eb 00 0c 00 5f 4e 74 4d 6f 64 69 66 79 42  | `.......L....A........_NtModifyB | 
| 4a700 |  6f 6f 74 45 6e 74 72 79 40 34 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ootEntry@4.ntdll.dll..ntdll.dll/ | 
| 4a720 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 4a740 |  20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 21 00  | ......53........`.......L....A!. | 
| 4a760 |  00 00 ea 00 0c 00 5f 4e 74 4d 61 70 56 69 65 77    4f 66 53 65 63 74 69 6f 6e 40 34 30 00 6e 74 64  | ......_NtMapViewOfSection@40.ntd | 
| 4a780 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 4a7a0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 34 20 20 20 20 20 20  | 97..............0.......64...... | 
| 4a7c0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    2c 00 00 00 e9 00 0c 00 5f 4e 74 4d 61 70 55 73  | ..`.......L....A,......._NtMapUs | 
| 4a7e0 |  65 72 50 68 79 73 69 63 61 6c 50 61 67 65 73 53    63 61 74 74 65 72 40 31 32 00 6e 74 64 6c 6c 2e  | erPhysicalPagesScatter@12.ntdll. | 
| 4a800 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 4a820 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a  | ............0.......57........`. | 
| 4a840 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00    e8 00 0c 00 5f 4e 74 4d 61 70 55 73 65 72 50 68  | ......L....A%......._NtMapUserPh | 
| 4a860 |  79 73 69 63 61 6c 50 61 67 65 73 40 31 32 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | ysicalPages@12.ntdll.dll..ntdll. | 
| 4a880 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 4a8a0 |  20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......55........`.......L... | 
| 4a8c0 |  8a 41 23 00 00 00 e7 00 0c 00 5f 4e 74 4d 61 6b    65 54 65 6d 70 6f 72 61 72 79 4f 62 6a 65 63 74  | .A#......._NtMakeTemporaryObject | 
| 4a8e0 |  40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @4.ntdll.dll..ntdll.dll/......10 | 
| 4a900 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 35  | 99622597..............0.......55 | 
| 4a920 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 23 00 00 00 e6 00 0c 00 5f 4e  | ........`.......L....A#......._N | 
| 4a940 |  74 4d 61 6b 65 50 65 72 6d 61 6e 65 6e 74 4f 62    6a 65 63 74 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c  | tMakePermanentObject@4.ntdll.dll | 
| 4a960 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 4a980 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......54........`... | 
| 4a9a0 |  ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00 e5 00    0c 00 5f 4e 74 4c 6f 63 6b 56 69 72 74 75 61 6c  | ....L....A"......._NtLockVirtual | 
| 4a9c0 |  4d 65 6d 6f 72 79 40 31 36 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | Memory@16.ntdll.dll.ntdll.dll/.. | 
| 4a9e0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 4aa00 |  20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00  | ....51........`.......L....A.... | 
| 4aa20 |  e4 00 0c 00 5f 4e 74 4c 6f 63 6b 52 65 67 69 73    74 72 79 4b 65 79 40 34 00 6e 74 64 6c 6c 2e 64  | ...._NtLockRegistryKey@4.ntdll.d | 
| 4aa40 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 4aa60 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 31 20 20 20 20 20 20 20 20 60 0a  | ............0.......61........`. | 
| 4aa80 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 29 00 00 00    e3 00 0c 00 5f 4e 74 4c 6f 63 6b 50 72 6f 64 75  | ......L....A)......._NtLockProdu | 
| 4aaa0 |  63 74 41 63 74 69 76 61 74 69 6f 6e 4b 65 79 73    40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | ctActivationKeys@8.ntdll.dll..nt | 
| 4aac0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 4aae0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 35    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......45........`....... | 
| 4ab00 |  4c 01 c5 e8 8a 41 19 00 00 00 e2 00 0c 00 5f 4e    74 4c 6f 63 6b 46 69 6c 65 40 34 30 00 6e 74 64  | L....A........_NtLockFile@40.ntd | 
| 4ab20 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 4ab40 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20  | 97..............0.......46...... | 
| 4ab60 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1a 00 00 00 e1 00 0c 00 5f 4e 74 4c 6f 61 64 4b  | ..`.......L....A........_NtLoadK | 
| 4ab80 |  65 79 45 78 40 31 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | eyEx@16.ntdll.dll.ntdll.dll/.... | 
| 4aba0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 4abc0 |  20 20 34 33 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 17 00 00 00 df 00  | ..43........`.......L....A...... | 
| 4abe0 |  0c 00 5f 4e 74 4c 6f 61 64 4b 65 79 40 38 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | .._NtLoadKey@8.ntdll.dll..ntdll. | 
| 4ac00 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 4ac20 |  20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......45........`.......L... | 
| 4ac40 |  8a 41 19 00 00 00 e0 00 0c 00 5f 4e 74 4c 6f 61    64 4b 65 79 32 40 31 32 00 6e 74 64 6c 6c 2e 64  | .A........_NtLoadKey2@12.ntdll.d | 
| 4ac60 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 4ac80 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 36 20 20 20 20 20 20 20 20 60 0a  | ............0.......46........`. | 
| 4aca0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1a 00 00 00    de 00 0c 00 5f 4e 74 4c 6f 61 64 44 72 69 76 65  | ......L....A........_NtLoadDrive | 
| 4acc0 |  72 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | r@4.ntdll.dll.ntdll.dll/......10 | 
| 4ace0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36  | 99622597..............0.......46 | 
| 4ad00 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1a 00 00 00 dd 00 0c 00 5f 4e  | ........`.......L....A........_N | 
| 4ad20 |  74 4c 69 73 74 65 6e 50 6f 72 74 40 38 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | tListenPort@8.ntdll.dll.ntdll.dl | 
| 4ad40 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 4ad60 |  30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......59........`.......L....A | 
| 4ad80 |  27 00 00 00 dc 00 0c 00 5f 4e 74 49 73 53 79 73    74 65 6d 52 65 73 75 6d 65 41 75 74 6f 6d 61 74  | '......._NtIsSystemResumeAutomat | 
| 4ada0 |  69 63 40 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ic@0.ntdll.dll..ntdll.dll/...... | 
| 4adc0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4ade0 |  35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1e 00 00 00 db 00 0c 00  | 50........`.......L....A........ | 
| 4ae00 |  5f 4e 74 49 73 50 72 6f 63 65 73 73 49 6e 4a 6f    62 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | _NtIsProcessInJob@8.ntdll.dll.nt | 
| 4ae20 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 4ae40 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......56........`....... | 
| 4ae60 |  4c 01 c5 e8 8a 41 24 00 00 00 da 00 0c 00 5f 4e    74 49 6e 69 74 69 61 74 65 50 6f 77 65 72 41 63  | L....A$......._NtInitiatePowerAc | 
| 4ae80 |  74 69 6f 6e 40 31 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | tion@16.ntdll.dll.ntdll.dll/.... | 
| 4aea0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 4aec0 |  20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00 d9 00  | ..54........`.......L....A"..... | 
| 4aee0 |  0c 00 5f 4e 74 49 6e 69 74 69 61 6c 69 7a 65 52    65 67 69 73 74 72 79 40 34 00 6e 74 64 6c 6c 2e  | .._NtInitializeRegistry@4.ntdll. | 
| 4af00 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 4af20 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 34 20 20 20 20 20 20 20 20 60 0a  | ............0.......54........`. | 
| 4af40 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00    d8 00 0c 00 5f 4e 74 49 6d 70 65 72 73 6f 6e 61  | ......L....A"......._NtImpersona | 
| 4af60 |  74 65 54 68 72 65 61 64 40 31 32 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | teThread@12.ntdll.dll.ntdll.dll/ | 
| 4af80 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 4afa0 |  20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00  | ......59........`.......L....A'. | 
| 4afc0 |  00 00 d7 00 0c 00 5f 4e 74 49 6d 70 65 72 73 6f    6e 61 74 65 43 6c 69 65 6e 74 4f 66 50 6f 72 74  | ......_NtImpersonateClientOfPort | 
| 4afe0 |  40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @8.ntdll.dll..ntdll.dll/......10 | 
| 4b000 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 31  | 99622597..............0.......61 | 
| 4b020 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 29 00 00 00 d6 00 0c 00 5f 4e  | ........`.......L....A)......._N | 
| 4b040 |  74 49 6d 70 65 72 73 6f 6e 61 74 65 41 6e 6f 6e    79 6d 6f 75 73 54 6f 6b 65 6e 40 34 00 6e 74 64  | tImpersonateAnonymousToken@4.ntd | 
| 4b060 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 4b080 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 30 20 20 20 20 20 20  | 97..............0.......50...... | 
| 4b0a0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1e 00 00 00 d5 00 0c 00 5f 4e 74 47 65 74 57 72  | ..`.......L....A........_NtGetWr | 
| 4b0c0 |  69 74 65 57 61 74 63 68 40 32 38 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | iteWatch@28.ntdll.dll.ntdll.dll/ | 
| 4b0e0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 4b100 |  20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1c 00  | ......48........`.......L....A.. | 
| 4b120 |  00 00 d4 00 0c 00 5f 4e 74 47 65 74 54 69 63 6b    43 6f 75 6e 74 40 30 00 6e 74 64 6c 6c 2e 64 6c  | ......_NtGetTickCount@0.ntdll.dl | 
| 4b140 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 4b160 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 33 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......53........`... | 
| 4b180 |  ff ff 00 00 4c 01 c5 e8 8a 41 21 00 00 00 d3 00    0c 00 5f 4e 74 47 65 74 50 6c 75 67 50 6c 61 79  | ....L....A!......._NtGetPlugPlay | 
| 4b1a0 |  45 76 65 6e 74 40 31 36 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | Event@16.ntdll.dll..ntdll.dll/.. | 
| 4b1c0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 4b1e0 |  20 20 20 20 35 35 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 23 00 00 00  | ....55........`.......L....A#... | 
| 4b200 |  d2 00 0c 00 5f 4e 74 47 65 74 44 65 76 69 63 65    50 6f 77 65 72 53 74 61 74 65 40 38 00 6e 74 64  | ...._NtGetDevicePowerState@8.ntd | 
| 4b220 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 4b240 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20  | 97..............0.......61...... | 
| 4b260 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    29 00 00 00 d1 00 0c 00 5f 4e 74 47 65 74 43 75  | ..`.......L....A)......._NtGetCu | 
| 4b280 |  72 72 65 6e 74 50 72 6f 63 65 73 73 6f 72 4e 75    6d 62 65 72 40 30 00 6e 74 64 6c 6c 2e 64 6c 6c  | rrentProcessorNumber@0.ntdll.dll | 
| 4b2a0 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 4b2c0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......52........`... | 
| 4b2e0 |  ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00 d0 00    0c 00 5f 4e 74 47 65 74 43 6f 6e 74 65 78 74 54  | ....L....A........_NtGetContextT | 
| 4b300 |  68 72 65 61 64 40 38 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | hread@8.ntdll.dll.ntdll.dll/.... | 
| 4b320 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 4b340 |  20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00 cf 00  | ..50........`.......L....A...... | 
| 4b360 |  0c 00 5f 4e 74 46 73 43 6f 6e 74 72 6f 6c 46 69    6c 65 40 34 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | .._NtFsControlFile@40.ntdll.dll. | 
| 4b380 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 4b3a0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......54........`..... | 
| 4b3c0 |  00 00 4c 01 c5 e8 8a 41 22 00 00 00 ce 00 0c 00    5f 4e 74 46 72 65 65 56 69 72 74 75 61 6c 4d 65  | ..L....A"......._NtFreeVirtualMe | 
| 4b3e0 |  6d 6f 72 79 40 31 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | mory@16.ntdll.dll.ntdll.dll/.... | 
| 4b400 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 4b420 |  20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00 cd 00  | ..58........`.......L....A&..... | 
| 4b440 |  0c 00 5f 4e 74 46 72 65 65 55 73 65 72 50 68 79    73 69 63 61 6c 50 61 67 65 73 40 31 32 00 6e 74  | .._NtFreeUserPhysicalPages@12.nt | 
| 4b460 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 4b480 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20  | 97..............0.......52...... | 
| 4b4a0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    20 00 00 00 cc 00 0c 00 5f 4e 74 46 6c 75 73 68  | ..`.......L....A........_NtFlush | 
| 4b4c0 |  57 72 69 74 65 42 75 66 66 65 72 40 30 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | WriteBuffer@0.ntdll.dll.ntdll.dl | 
| 4b4e0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 4b500 |  30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......55........`.......L....A | 
| 4b520 |  23 00 00 00 cb 00 0c 00 5f 4e 74 46 6c 75 73 68    56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 31 36  | #......._NtFlushVirtualMemory@16 | 
| 4b540 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 4b560 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20  | 622597..............0.......44.. | 
| 4b580 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 18 00 00 00 ca 00 0c 00 5f 4e 74 46  | ......`.......L....A........_NtF | 
| 4b5a0 |  6c 75 73 68 4b 65 79 40 34 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | lushKey@4.ntdll.dll.ntdll.dll/.. | 
| 4b5c0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 4b5e0 |  20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00  | ....58........`.......L....A&... | 
| 4b600 |  c9 00 0c 00 5f 4e 74 46 6c 75 73 68 49 6e 73 74    72 75 63 74 69 6f 6e 43 61 63 68 65 40 31 32 00  | ...._NtFlushInstructionCache@12. | 
| 4b620 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 4b640 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20  | 2597..............0.......52.... | 
| 4b660 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 20 00 00 00 c8 00 0c 00 5f 4e 74 46 6c 75  | ....`.......L....A........_NtFlu | 
| 4b680 |  73 68 42 75 66 66 65 72 73 46 69 6c 65 40 38 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | shBuffersFile@8.ntdll.dll.ntdll. | 
| 4b6a0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 4b6c0 |  20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......45........`.......L... | 
| 4b6e0 |  8a 41 19 00 00 00 c7 00 0c 00 5f 4e 74 46 69 6e    64 41 74 6f 6d 40 31 32 00 6e 74 64 6c 6c 2e 64  | .A........_NtFindAtom@12.ntdll.d | 
| 4b700 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 4b720 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a  | ............0.......48........`. | 
| 4b740 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00    c6 00 0c 00 5f 4e 74 46 69 6c 74 65 72 54 6f 6b  | ......L....A........_NtFilterTok | 
| 4b760 |  65 6e 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | en@24.ntdll.dll.ntdll.dll/...... | 
| 4b780 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4b7a0 |  34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1d 00 00 00 c5 00 0c 00  | 49........`.......L....A........ | 
| 4b7c0 |  5f 4e 74 45 78 74 65 6e 64 53 65 63 74 69 6f 6e    40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | _NtExtendSection@8.ntdll.dll..nt | 
| 4b7e0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 4b800 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......54........`....... | 
| 4b820 |  4c 01 c5 e8 8a 41 22 00 00 00 c4 00 0c 00 5f 4e    74 45 6e 75 6d 65 72 61 74 65 56 61 6c 75 65 4b  | L....A"......._NtEnumerateValueK | 
| 4b840 |  65 79 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ey@24.ntdll.dll.ntdll.dll/...... | 
| 4b860 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4b880 |  37 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 33 00 00 00 c3 00 0c 00  | 71........`.......L....A3....... | 
| 4b8a0 |  5f 4e 74 45 6e 75 6d 65 72 61 74 65 53 79 73 74    65 6d 45 6e 76 69 72 6f 6e 6d 65 6e 74 56 61 6c  | _NtEnumerateSystemEnvironmentVal | 
| 4b8c0 |  75 65 73 45 78 40 31 32 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | uesEx@12.ntdll.dll..ntdll.dll/.. | 
| 4b8e0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 4b900 |  20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1d 00 00 00  | ....49........`.......L....A.... | 
| 4b920 |  c2 00 0c 00 5f 4e 74 45 6e 75 6d 65 72 61 74 65    4b 65 79 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c  | ...._NtEnumerateKey@24.ntdll.dll | 
| 4b940 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 4b960 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......58........`... | 
| 4b980 |  ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00 c1 00    0c 00 5f 4e 74 45 6e 75 6d 65 72 61 74 65 44 72  | ....L....A&......._NtEnumerateDr | 
| 4b9a0 |  69 76 65 72 45 6e 74 72 69 65 73 40 38 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | iverEntries@8.ntdll.dll.ntdll.dl | 
| 4b9c0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 4b9e0 |  30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......56........`.......L....A | 
| 4ba00 |  24 00 00 00 c0 00 0c 00 5f 4e 74 45 6e 75 6d 65    72 61 74 65 42 6f 6f 74 45 6e 74 72 69 65 73 40  | $......._NtEnumerateBootEntries@ | 
| 4ba20 |  38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 8.ntdll.dll.ntdll.dll/......1099 | 
| 4ba40 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20  | 622597..............0.......51.. | 
| 4ba60 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1f 00 00 00 bf 00 0c 00 5f 4e 74 44  | ......`.......L....A........_NtD | 
| 4ba80 |  75 70 6c 69 63 61 74 65 54 6f 6b 65 6e 40 32 34    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | uplicateToken@24.ntdll.dll..ntdl | 
| 4baa0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4bac0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......52........`.......L. | 
| 4bae0 |  c5 e8 8a 41 20 00 00 00 be 00 0c 00 5f 4e 74 44    75 70 6c 69 63 61 74 65 4f 62 6a 65 63 74 40 32  | ...A........_NtDuplicateObject@2 | 
| 4bb00 |  38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 8.ntdll.dll.ntdll.dll/......1099 | 
| 4bb20 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20  | 622597..............0.......49.. | 
| 4bb40 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1d 00 00 00 bd 00 0c 00 5f 4e 74 44  | ......`.......L....A........_NtD | 
| 4bb60 |  69 73 70 6c 61 79 53 74 72 69 6e 67 40 34 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | isplayString@4.ntdll.dll..ntdll. | 
| 4bb80 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 4bba0 |  20 20 30 20 20 20 20 20 20 20 35 36 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......56........`.......L... | 
| 4bbc0 |  8a 41 24 00 00 00 bc 00 0c 00 5f 4e 74 44 65 76    69 63 65 49 6f 43 6f 6e 74 72 6f 6c 46 69 6c 65  | .A$......._NtDeviceIoControlFile | 
| 4bbe0 |  40 34 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @40.ntdll.dll.ntdll.dll/......10 | 
| 4bc00 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30  | 99622597..............0.......50 | 
| 4bc20 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1e 00 00 00 bb 00 0c 00 5f 4e  | ........`.......L....A........_N | 
| 4bc40 |  74 44 65 6c 65 74 65 56 61 6c 75 65 4b 65 79 40    38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | tDeleteValueKey@8.ntdll.dll.ntdl | 
| 4bc60 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4bc80 |  20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......59........`.......L. | 
| 4bca0 |  c5 e8 8a 41 27 00 00 00 ba 00 0c 00 5f 4e 74 44    65 6c 65 74 65 4f 62 6a 65 63 74 41 75 64 69 74  | ...A'......._NtDeleteObjectAudit | 
| 4bcc0 |  41 6c 61 72 6d 40 31 32 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | Alarm@12.ntdll.dll..ntdll.dll/.. | 
| 4bce0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 4bd00 |  20 20 20 20 34 35 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 19 00 00 00  | ....45........`.......L....A.... | 
| 4bd20 |  b9 00 0c 00 5f 4e 74 44 65 6c 65 74 65 4b 65 79    40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | ...._NtDeleteKey@4.ntdll.dll..nt | 
| 4bd40 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 4bd60 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 36    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......46........`....... | 
| 4bd80 |  4c 01 c5 e8 8a 41 1a 00 00 00 b8 00 0c 00 5f 4e    74 44 65 6c 65 74 65 46 69 6c 65 40 34 00 6e 74  | L....A........_NtDeleteFile@4.nt | 
| 4bda0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 4bdc0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20  | 97..............0.......53...... | 
| 4bde0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    21 00 00 00 b7 00 0c 00 5f 4e 74 44 65 6c 65 74  | ..`.......L....A!......._NtDelet | 
| 4be00 |  65 44 72 69 76 65 72 45 6e 74 72 79 40 34 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | eDriverEntry@4.ntdll.dll..ntdll. | 
| 4be20 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 4be40 |  20 20 30 20 20 20 20 20 20 20 35 31 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......51........`.......L... | 
| 4be60 |  8a 41 1f 00 00 00 b6 00 0c 00 5f 4e 74 44 65 6c    65 74 65 42 6f 6f 74 45 6e 74 72 79 40 34 00 6e  | .A........_NtDeleteBootEntry@4.n | 
| 4be80 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 4bea0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20  | 2597..............0.......46.... | 
| 4bec0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1a 00 00 00 b5 00 0c 00 5f 4e 74 44 65 6c  | ....`.......L....A........_NtDel | 
| 4bee0 |  65 74 65 41 74 6f 6d 40 34 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | eteAtom@4.ntdll.dll.ntdll.dll/.. | 
| 4bf00 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 4bf20 |  20 20 20 20 35 30 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00  | ....50........`.......L....A.... | 
| 4bf40 |  b4 00 0c 00 5f 4e 74 44 65 6c 61 79 45 78 65 63    75 74 69 6f 6e 40 38 00 6e 74 64 6c 6c 2e 64 6c  | ...._NtDelayExecution@8.ntdll.dl | 
| 4bf60 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 4bf80 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......50........`... | 
| 4bfa0 |  ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00 b3 00    0c 00 5f 4e 74 44 65 62 75 67 43 6f 6e 74 69 6e  | ....L....A........_NtDebugContin | 
| 4bfc0 |  75 65 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ue@12.ntdll.dll.ntdll.dll/...... | 
| 4bfe0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4c000 |  35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 22 00 00 00 b2 00 0c 00  | 54........`.......L....A"....... | 
| 4c020 |  5f 4e 74 44 65 62 75 67 41 63 74 69 76 65 50 72    6f 63 65 73 73 40 38 00 6e 74 64 6c 6c 2e 64 6c  | _NtDebugActiveProcess@8.ntdll.dl | 
| 4c040 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 4c060 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 34 36 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......46........`... | 
| 4c080 |  ff ff 00 00 4c 01 c5 e8 8a 41 1a 00 00 00 b1 00    0c 00 5f 4e 74 43 75 72 72 65 6e 74 54 65 62 40  | ....L....A........_NtCurrentTeb@ | 
| 4c0a0 |  30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 0.ntdll.dll.ntdll.dll/......1099 | 
| 4c0c0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20  | 622597..............0.......55.. | 
| 4c0e0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 23 00 00 00 b0 00 0c 00 5f 4e 74 43  | ......`.......L....A#......._NtC | 
| 4c100 |  72 65 61 74 65 57 61 69 74 61 62 6c 65 50 6f 72    74 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | reateWaitablePort@20.ntdll.dll.. | 
| 4c120 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 4c140 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......48........`..... | 
| 4c160 |  00 00 4c 01 c5 e8 8a 41 1c 00 00 00 af 00 0c 00    5f 4e 74 43 72 65 61 74 65 54 6f 6b 65 6e 40 35  | ..L....A........_NtCreateToken@5 | 
| 4c180 |  32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 2.ntdll.dll.ntdll.dll/......1099 | 
| 4c1a0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20  | 622597..............0.......48.. | 
| 4c1c0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1c 00 00 00 ae 00 0c 00 5f 4e 74 43  | ......`.......L....A........_NtC | 
| 4c1e0 |  72 65 61 74 65 54 69 6d 65 72 40 31 36 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | reateTimer@16.ntdll.dll.ntdll.dl | 
| 4c200 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 4c220 |  30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......49........`.......L....A | 
| 4c240 |  1d 00 00 00 ad 00 0c 00 5f 4e 74 43 72 65 61 74    65 54 68 72 65 61 64 40 33 32 00 6e 74 64 6c 6c  | ........_NtCreateThread@32.ntdll | 
| 4c260 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 4c280 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 36 31 20 20 20 20 20 20 20 20  | ..............0.......61........ | 
| 4c2a0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 29 00    00 00 ac 00 0c 00 5f 4e 74 43 72 65 61 74 65 53  | `.......L....A)......._NtCreateS | 
| 4c2c0 |  79 6d 62 6f 6c 69 63 4c 69 6e 6b 4f 62 6a 65 63    74 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | ymbolicLinkObject@16.ntdll.dll.. | 
| 4c2e0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 4c300 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......52........`..... | 
| 4c320 |  00 00 4c 01 c5 e8 8a 41 20 00 00 00 ab 00 0c 00    5f 4e 74 43 72 65 61 74 65 53 65 6d 61 70 68 6f  | ..L....A........_NtCreateSemapho | 
| 4c340 |  72 65 40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | re@20.ntdll.dll.ntdll.dll/...... | 
| 4c360 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4c380 |  35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1e 00 00 00 aa 00 0c 00  | 50........`.......L....A........ | 
| 4c3a0 |  5f 4e 74 43 72 65 61 74 65 53 65 63 74 69 6f 6e    40 32 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | _NtCreateSection@28.ntdll.dll.nt | 
| 4c3c0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 4c3e0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......50........`....... | 
| 4c400 |  4c 01 c5 e8 8a 41 1e 00 00 00 a9 00 0c 00 5f 4e    74 43 72 65 61 74 65 50 72 6f 66 69 6c 65 40 33  | L....A........_NtCreateProfile@3 | 
| 4c420 |  36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 6.ntdll.dll.ntdll.dll/......1099 | 
| 4c440 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 32 20 20  | 622597..............0.......52.. | 
| 4c460 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 20 00 00 00 a8 00 0c 00 5f 4e 74 43  | ......`.......L....A........_NtC | 
| 4c480 |  72 65 61 74 65 50 72 6f 63 65 73 73 45 78 40 33    36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | reateProcessEx@36.ntdll.dll.ntdl | 
| 4c4a0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4c4c0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......50........`.......L. | 
| 4c4e0 |  c5 e8 8a 41 1e 00 00 00 a7 00 0c 00 5f 4e 74 43    72 65 61 74 65 50 72 6f 63 65 73 73 40 33 32 00  | ...A........_NtCreateProcess@32. | 
| 4c500 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 4c520 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20  | 2597..............0.......47.... | 
| 4c540 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1b 00 00 00 a6 00 0c 00 5f 4e 74 43 72 65  | ....`.......L....A........_NtCre | 
| 4c560 |  61 74 65 50 6f 72 74 40 32 30 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | atePort@20.ntdll.dll..ntdll.dll/ | 
| 4c580 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 4c5a0 |  20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 21 00  | ......53........`.......L....A!. | 
| 4c5c0 |  00 00 a5 00 0c 00 5f 4e 74 43 72 65 61 74 65 50    61 67 69 6e 67 46 69 6c 65 40 31 36 00 6e 74 64  | ......_NtCreatePagingFile@16.ntd | 
| 4c5e0 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 4c600 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 36 20 20 20 20 20 20  | 97..............0.......56...... | 
| 4c620 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    24 00 00 00 a4 00 0c 00 5f 4e 74 43 72 65 61 74  | ..`.......L....A$......._NtCreat | 
| 4c640 |  65 4e 61 6d 65 64 50 69 70 65 46 69 6c 65 40 35    36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | eNamedPipeFile@56.ntdll.dll.ntdl | 
| 4c660 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4c680 |  20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......49........`.......L. | 
| 4c6a0 |  c5 e8 8a 41 1d 00 00 00 a3 00 0c 00 5f 4e 74 43    72 65 61 74 65 4d 75 74 61 6e 74 40 31 36 00 6e  | ...A........_NtCreateMutant@16.n | 
| 4c6c0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 4c6e0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 35 20 20 20 20  | 2597..............0.......55.... | 
| 4c700 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 23 00 00 00 a2 00 0c 00 5f 4e 74 43 72 65  | ....`.......L....A#......._NtCre | 
| 4c720 |  61 74 65 4d 61 69 6c 73 6c 6f 74 46 69 6c 65 40    33 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | ateMailslotFile@32.ntdll.dll..nt | 
| 4c740 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 4c760 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......53........`....... | 
| 4c780 |  4c 01 c5 e8 8a 41 21 00 00 00 a1 00 0c 00 5f 4e    74 43 72 65 61 74 65 4b 65 79 65 64 45 76 65 6e  | L....A!......._NtCreateKeyedEven | 
| 4c7a0 |  74 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | t@16.ntdll.dll..ntdll.dll/...... | 
| 4c7c0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4c7e0 |  34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1a 00 00 00 a0 00 0c 00  | 46........`.......L....A........ | 
| 4c800 |  5f 4e 74 43 72 65 61 74 65 4b 65 79 40 32 38 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | _NtCreateKey@28.ntdll.dll.ntdll. | 
| 4c820 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 4c840 |  20 20 30 20 20 20 20 20 20 20 34 39 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......49........`.......L... | 
| 4c860 |  8a 41 1d 00 00 00 9f 00 0c 00 5f 4e 74 43 72 65    61 74 65 4a 6f 62 53 65 74 40 31 32 00 6e 74 64  | .A........_NtCreateJobSet@12.ntd | 
| 4c880 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 4c8a0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20  | 97..............0.......52...... | 
| 4c8c0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    20 00 00 00 9e 00 0c 00 5f 4e 74 43 72 65 61 74  | ..`.......L....A........_NtCreat | 
| 4c8e0 |  65 4a 6f 62 4f 62 6a 65 63 74 40 31 32 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | eJobObject@12.ntdll.dll.ntdll.dl | 
| 4c900 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 4c920 |  30 20 20 20 20 20 20 20 35 35 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......55........`.......L....A | 
| 4c940 |  23 00 00 00 9d 00 0c 00 5f 4e 74 43 72 65 61 74    65 49 6f 43 6f 6d 70 6c 65 74 69 6f 6e 40 31 36  | #......._NtCreateIoCompletion@16 | 
| 4c960 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 4c980 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 37 20 20  | 622597..............0.......47.. | 
| 4c9a0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1b 00 00 00 9c 00 0c 00 5f 4e 74 43  | ......`.......L....A........_NtC | 
| 4c9c0 |  72 65 61 74 65 46 69 6c 65 40 34 34 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | reateFile@44.ntdll.dll..ntdll.dl | 
| 4c9e0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 4ca00 |  30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......52........`.......L....A | 
| 4ca20 |  20 00 00 00 9b 00 0c 00 5f 4e 74 43 72 65 61 74    65 45 76 65 6e 74 50 61 69 72 40 31 32 00 6e 74  | ........_NtCreateEventPair@12.nt | 
| 4ca40 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 4ca60 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 38 20 20 20 20 20 20  | 97..............0.......48...... | 
| 4ca80 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1c 00 00 00 9a 00 0c 00 5f 4e 74 43 72 65 61 74  | ..`.......L....A........_NtCreat | 
| 4caa0 |  65 45 76 65 6e 74 40 32 30 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | eEvent@20.ntdll.dll.ntdll.dll/.. | 
| 4cac0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 4cae0 |  20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00  | ....58........`.......L....A&... | 
| 4cb00 |  99 00 0c 00 5f 4e 74 43 72 65 61 74 65 44 69 72    65 63 74 6f 72 79 4f 62 6a 65 63 74 40 31 32 00  | ...._NtCreateDirectoryObject@12. | 
| 4cb20 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 4cb40 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20  | 2597..............0.......54.... | 
| 4cb60 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 22 00 00 00 98 00 0c 00 5f 4e 74 43 72 65  | ....`.......L....A"......._NtCre | 
| 4cb80 |  61 74 65 44 65 62 75 67 4f 62 6a 65 63 74 40 31    36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | ateDebugObject@16.ntdll.dll.ntdl | 
| 4cba0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4cbc0 |  20 20 20 20 30 20 20 20 20 20 20 20 34 34 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......44........`.......L. | 
| 4cbe0 |  c5 e8 8a 41 18 00 00 00 97 00 0c 00 5f 4e 74 43    6f 6e 74 69 6e 75 65 40 38 00 6e 74 64 6c 6c 2e  | ...A........_NtContinue@8.ntdll. | 
| 4cc00 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 4cc20 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a  | ............0.......48........`. | 
| 4cc40 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00    96 00 0c 00 5f 4e 74 43 6f 6e 6e 65 63 74 50 6f  | ......L....A........_NtConnectPo | 
| 4cc60 |  72 74 40 33 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | rt@32.ntdll.dll.ntdll.dll/...... | 
| 4cc80 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4cca0 |  34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1b 00 00 00 95 00 0c 00  | 47........`.......L....A........ | 
| 4ccc0 |  5f 4e 74 43 6f 6d 70 72 65 73 73 4b 65 79 40 34    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | _NtCompressKey@4.ntdll.dll..ntdl | 
| 4cce0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4cd00 |  20 20 20 20 30 20 20 20 20 20 20 20 35 35 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......55........`.......L. | 
| 4cd20 |  c5 e8 8a 41 23 00 00 00 94 00 0c 00 5f 4e 74 43    6f 6d 70 6c 65 74 65 43 6f 6e 6e 65 63 74 50 6f  | ...A#......._NtCompleteConnectPo | 
| 4cd40 |  72 74 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | rt@4.ntdll.dll..ntdll.dll/...... | 
| 4cd60 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4cd80 |  35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1e 00 00 00 93 00 0c 00  | 50........`.......L....A........ | 
| 4cda0 |  5f 4e 74 43 6f 6d 70 61 72 65 54 6f 6b 65 6e 73    40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | _NtCompareTokens@12.ntdll.dll.nt | 
| 4cdc0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 4cde0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 37    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......47........`....... | 
| 4ce00 |  4c 01 c5 e8 8a 41 1b 00 00 00 92 00 0c 00 5f 4e    74 43 6f 6d 70 61 63 74 4b 65 79 73 40 38 00 6e  | L....A........_NtCompactKeys@8.n | 
| 4ce20 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 4ce40 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20  | 2597..............0.......58.... | 
| 4ce60 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 26 00 00 00 91 00 0c 00 5f 4e 74 43 6c 6f  | ....`.......L....A&......._NtClo | 
| 4ce80 |  73 65 4f 62 6a 65 63 74 41 75 64 69 74 41 6c 61    72 6d 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | seObjectAuditAlarm@12.ntdll.dll. | 
| 4cea0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 4cec0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......41........`..... | 
| 4cee0 |  00 00 4c 01 c5 e8 8a 41 15 00 00 00 90 00 0c 00    5f 4e 74 43 6c 6f 73 65 40 34 00 6e 74 64 6c 6c  | ..L....A........_NtClose@4.ntdll | 
| 4cf00 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 4cf20 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 34 36 20 20 20 20 20 20 20 20  | ..............0.......46........ | 
| 4cf40 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1a 00    00 00 8f 00 0c 00 5f 4e 74 43 6c 65 61 72 45 76  | `.......L....A........_NtClearEv | 
| 4cf60 |  65 6e 74 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ent@4.ntdll.dll.ntdll.dll/...... | 
| 4cf80 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4cfa0 |  34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1b 00 00 00 8e 00 0c 00  | 47........`.......L....A........ | 
| 4cfc0 |  5f 4e 74 43 61 6e 63 65 6c 54 69 6d 65 72 40 38    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | _NtCancelTimer@8.ntdll.dll..ntdl | 
| 4cfe0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4d000 |  20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......48........`.......L. | 
| 4d020 |  c5 e8 8a 41 1c 00 00 00 8d 00 0c 00 5f 4e 74 43    61 6e 63 65 6c 49 6f 46 69 6c 65 40 38 00 6e 74  | ...A........_NtCancelIoFile@8.nt | 
| 4d040 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 4d060 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 31 20 20 20 20 20 20  | 97..............0.......61...... | 
| 4d080 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    29 00 00 00 8c 00 0c 00 5f 4e 74 43 61 6e 63 65  | ..`.......L....A)......._NtCance | 
| 4d0a0 |  6c 44 65 76 69 63 65 57 61 6b 65 75 70 52 65 71    75 65 73 74 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c  | lDeviceWakeupRequest@4.ntdll.dll | 
| 4d0c0 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 4d0e0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......51........`... | 
| 4d100 |  ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00 8b 00    0c 00 5f 4e 74 43 61 6c 6c 62 61 63 6b 52 65 74  | ....L....A........_NtCallbackRet | 
| 4d120 |  75 72 6e 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | urn@12.ntdll.dll..ntdll.dll/.... | 
| 4d140 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 4d160 |  20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 28 00 00 00 8a 00  | ..60........`.......L....A(..... | 
| 4d180 |  0c 00 5f 4e 74 41 73 73 69 67 6e 50 72 6f 63 65    73 73 54 6f 4a 6f 62 4f 62 6a 65 63 74 40 38 00  | .._NtAssignProcessToJobObject@8. | 
| 4d1a0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 4d1c0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20  | 2597..............0.......57.... | 
| 4d1e0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 25 00 00 00 89 00 0c 00 5f 4e 74 41 72 65  | ....`.......L....A%......._NtAre | 
| 4d200 |  4d 61 70 70 65 64 46 69 6c 65 73 54 68 65 53 61    6d 65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | MappedFilesTheSame@8.ntdll.dll.. | 
| 4d220 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 4d240 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 35 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......55........`..... | 
| 4d260 |  00 00 4c 01 c5 e8 8a 41 23 00 00 00 88 00 0c 00    5f 4e 74 41 70 70 68 65 6c 70 43 61 63 68 65 43  | ..L....A#......._NtApphelpCacheC | 
| 4d280 |  6f 6e 74 72 6f 6c 40 38 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ontrol@8.ntdll.dll..ntdll.dll/.. | 
| 4d2a0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 4d2c0 |  20 20 20 20 35 38 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00  | ....58........`.......L....A&... | 
| 4d2e0 |  87 00 0c 00 5f 4e 74 41 6c 6c 6f 63 61 74 65 56    69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 32 34 00  | ...._NtAllocateVirtualMemory@24. | 
| 4d300 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 4d320 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 30 20 20 20 20  | 2597..............0.......50.... | 
| 4d340 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1e 00 00 00 86 00 0c 00 5f 4e 74 41 6c 6c  | ....`.......L....A........_NtAll | 
| 4d360 |  6f 63 61 74 65 55 75 69 64 73 40 31 36 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | ocateUuids@16.ntdll.dll.ntdll.dl | 
| 4d380 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 4d3a0 |  30 20 20 20 20 20 20 20 36 32 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......62........`.......L....A | 
| 4d3c0 |  2a 00 00 00 85 00 0c 00 5f 4e 74 41 6c 6c 6f 63    61 74 65 55 73 65 72 50 68 79 73 69 63 61 6c 50  | *......._NtAllocateUserPhysicalP | 
| 4d3e0 |  61 67 65 73 40 31 32 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ages@12.ntdll.dll.ntdll.dll/.... | 
| 4d400 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 4d420 |  20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00 84 00  | ..59........`.......L....A'..... | 
| 4d440 |  0c 00 5f 4e 74 41 6c 6c 6f 63 61 74 65 4c 6f 63    61 6c 6c 79 55 6e 69 71 75 65 49 64 40 34 00 6e  | .._NtAllocateLocallyUniqueId@4.n | 
| 4d460 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 4d480 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 37 20 20 20 20  | 2597..............0.......47.... | 
| 4d4a0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1b 00 00 00 83 00 0c 00 5f 4e 74 41 6c 65  | ....`.......L....A........_NtAle | 
| 4d4c0 |  72 74 54 68 72 65 61 64 40 34 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | rtThread@4.ntdll.dll..ntdll.dll/ | 
| 4d4e0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 4d500 |  20 20 20 20 20 20 35 33 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 21 00  | ......53........`.......L....A!. | 
| 4d520 |  00 00 82 00 0c 00 5f 4e 74 41 6c 65 72 74 52 65    73 75 6d 65 54 68 72 65 61 64 40 38 00 6e 74 64  | ......_NtAlertResumeThread@8.ntd | 
| 4d540 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 4d560 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 38 20 20 20 20 20 20  | 97..............0.......58...... | 
| 4d580 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    26 00 00 00 81 00 0c 00 5f 4e 74 41 64 6a 75 73  | ..`.......L....A&......._NtAdjus | 
| 4d5a0 |  74 50 72 69 76 69 6c 65 67 65 73 54 6f 6b 65 6e    40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | tPrivilegesToken@24.ntdll.dll.nt | 
| 4d5c0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 4d5e0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......54........`....... | 
| 4d600 |  4c 01 c5 e8 8a 41 22 00 00 00 80 00 0c 00 5f 4e    74 41 64 6a 75 73 74 47 72 6f 75 70 73 54 6f 6b  | L....A"......._NtAdjustGroupsTok | 
| 4d620 |  65 6e 40 32 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | en@24.ntdll.dll.ntdll.dll/...... | 
| 4d640 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4d660 |  35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1e 00 00 00 7f 00 0c 00  | 50........`.......L....A........ | 
| 4d680 |  5f 4e 74 41 64 64 44 72 69 76 65 72 45 6e 74 72    79 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | _NtAddDriverEntry@8.ntdll.dll.nt | 
| 4d6a0 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 4d6c0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 38    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......48........`....... | 
| 4d6e0 |  4c 01 c5 e8 8a 41 1c 00 00 00 7e 00 0c 00 5f 4e    74 41 64 64 42 6f 6f 74 45 6e 74 72 79 40 38 00  | L....A....~..._NtAddBootEntry@8. | 
| 4d700 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 4d720 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 34 20 20 20 20  | 2597..............0.......44.... | 
| 4d740 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 18 00 00 00 7d 00 0c 00 5f 4e 74 41 64 64  | ....`.......L....A....}..._NtAdd | 
| 4d760 |  41 74 6f 6d 40 31 32 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | Atom@12.ntdll.dll.ntdll.dll/.... | 
| 4d780 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 4d7a0 |  20 20 38 35 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 41 00 00 00 7c 00  | ..85........`.......L....AA...|. | 
| 4d7c0 |  0c 00 5f 4e 74 41 63 63 65 73 73 43 68 65 63 6b    42 79 54 79 70 65 52 65 73 75 6c 74 4c 69 73 74  | .._NtAccessCheckByTypeResultList | 
| 4d7e0 |  41 6e 64 41 75 64 69 74 41 6c 61 72 6d 42 79 48    61 6e 64 6c 65 40 36 38 00 6e 74 64 6c 6c 2e 64  | AndAuditAlarmByHandle@68.ntdll.d | 
| 4d800 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 4d820 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 37 37 20 20 20 20 20 20 20 20 60 0a  | ............0.......77........`. | 
| 4d840 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 39 00 00 00    7b 00 0c 00 5f 4e 74 41 63 63 65 73 73 43 68 65  | ......L....A9...{..._NtAccessChe | 
| 4d860 |  63 6b 42 79 54 79 70 65 52 65 73 75 6c 74 4c 69    73 74 41 6e 64 41 75 64 69 74 41 6c 61 72 6d 40  | ckByTypeResultListAndAuditAlarm@ | 
| 4d880 |  36 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 64.ntdll.dll..ntdll.dll/......10 | 
| 4d8a0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 34  | 99622597..............0.......64 | 
| 4d8c0 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 2c 00 00 00 7a 00 0c 00 5f 4e  | ........`.......L....A,...z..._N | 
| 4d8e0 |  74 41 63 63 65 73 73 43 68 65 63 6b 42 79 54 79    70 65 52 65 73 75 6c 74 4c 69 73 74 40 34 34 00  | tAccessCheckByTypeResultList@44. | 
| 4d900 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 4d920 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 37 20 20 20 20  | 2597..............0.......67.... | 
| 4d940 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 2f 00 00 00 79 00 0c 00 5f 4e 74 41 63 63  | ....`.......L....A/...y..._NtAcc | 
| 4d960 |  65 73 73 43 68 65 63 6b 42 79 54 79 70 65 41 6e    64 41 75 64 69 74 41 6c 61 72 6d 40 36 34 00 6e  | essCheckByTypeAndAuditAlarm@64.n | 
| 4d980 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 4d9a0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20  | 2597..............0.......54.... | 
| 4d9c0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 22 00 00 00 78 00 0c 00 5f 4e 74 41 63 63  | ....`.......L....A"...x..._NtAcc | 
| 4d9e0 |  65 73 73 43 68 65 63 6b 42 79 54 79 70 65 40 34    34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | essCheckByType@44.ntdll.dll.ntdl | 
| 4da00 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4da20 |  20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......61........`.......L. | 
| 4da40 |  c5 e8 8a 41 29 00 00 00 77 00 0c 00 5f 4e 74 41    63 63 65 73 73 43 68 65 63 6b 41 6e 64 41 75 64  | ...A)...w..._NtAccessCheckAndAud | 
| 4da60 |  69 74 41 6c 61 72 6d 40 34 34 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | itAlarm@44.ntdll.dll..ntdll.dll/ | 
| 4da80 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 4daa0 |  20 20 20 20 20 20 34 38 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1c 00  | ......48........`.......L....A.. | 
| 4dac0 |  00 00 76 00 0c 00 5f 4e 74 41 63 63 65 73 73 43    68 65 63 6b 40 33 32 00 6e 74 64 6c 6c 2e 64 6c  | ..v..._NtAccessCheck@32.ntdll.dl | 
| 4dae0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 4db00 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 34 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......54........`... | 
| 4db20 |  ff ff 00 00 4c 01 c5 e8 8a 41 22 00 00 00 75 00    0c 00 5f 4e 74 41 63 63 65 70 74 43 6f 6e 6e 65  | ....L....A"...u..._NtAcceptConne | 
| 4db40 |  63 74 50 6f 72 74 40 32 34 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ctPort@24.ntdll.dll.ntdll.dll/.. | 
| 4db60 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 4db80 |  20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00  | ....51........`.......L....A.... | 
| 4dba0 |  74 00 0a 00 5f 4e 6c 73 4d 62 4f 65 6d 43 6f 64    65 50 61 67 65 54 61 67 00 6e 74 64 6c 6c 2e 64  | t..._NlsMbOemCodePageTag.ntdll.d | 
| 4dbc0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 4dbe0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a  | ............0.......48........`. | 
| 4dc00 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00    73 00 0a 00 5f 4e 6c 73 4d 62 43 6f 64 65 50 61  | ......L....A....s..._NlsMbCodePa | 
| 4dc20 |  67 65 54 61 67 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | geTag.ntdll.dll.ntdll.dll/...... | 
| 4dc40 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4dc60 |  34 37 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1b 00 00 00 72 00 0a 00  | 47........`.......L....A....r... | 
| 4dc80 |  5f 4e 6c 73 41 6e 73 69 43 6f 64 65 50 61 67 65    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | _NlsAnsiCodePage.ntdll.dll..ntdl | 
| 4dca0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4dcc0 |  20 20 20 20 30 20 20 20 20 20 20 20 36 34 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......64........`.......L. | 
| 4dce0 |  c5 e8 8a 41 2c 00 00 00 71 00 0c 00 5f 4c 64 72    56 65 72 69 66 79 49 6d 61 67 65 4d 61 74 63 68  | ...A,...q..._LdrVerifyImageMatch | 
| 4dd00 |  65 73 43 68 65 63 6b 73 75 6d 40 31 36 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | esChecksum@16.ntdll.dll.ntdll.dl | 
| 4dd20 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 4dd40 |  30 20 20 20 20 20 20 20 35 33 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......53........`.......L....A | 
| 4dd60 |  21 00 00 00 70 00 0c 00 5f 4c 64 72 55 6e 6c 6f    63 6b 4c 6f 61 64 65 72 4c 6f 63 6b 40 38 00 6e  | !...p..._LdrUnlockLoaderLock@8.n | 
| 4dd80 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 4dda0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 36 20 20 20 20  | 2597..............0.......46.... | 
| 4ddc0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 1a 00 00 00 6f 00 0c 00 5f 4c 64 72 55 6e  | ....`.......L....A....o..._LdrUn | 
| 4dde0 |  6c 6f 61 64 44 6c 6c 40 34 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | loadDll@4.ntdll.dll.ntdll.dll/.. | 
| 4de00 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 4de20 |  20 20 20 20 36 36 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2e 00 00 00  | ....66........`.......L....A.... | 
| 4de40 |  6e 00 0c 00 5f 4c 64 72 55 6e 6c 6f 61 64 41 6c    74 65 72 6e 61 74 65 52 65 73 6f 75 72 63 65 4d  | n..._LdrUnloadAlternateResourceM | 
| 4de60 |  6f 64 75 6c 65 40 34 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | odule@4.ntdll.dll.ntdll.dll/.... | 
| 4de80 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 4dea0 |  20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00 6d 00  | ..51........`.......L....A....m. | 
| 4dec0 |  0c 00 5f 4c 64 72 53 68 75 74 64 6f 77 6e 54 68    72 65 61 64 40 30 00 6e 74 64 6c 6c 2e 64 6c 6c  | .._LdrShutdownThread@0.ntdll.dll | 
| 4dee0 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 4df00 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......52........`... | 
| 4df20 |  ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00 6c 00    0c 00 5f 4c 64 72 53 68 75 74 64 6f 77 6e 50 72  | ....L....A....l..._LdrShutdownPr | 
| 4df40 |  6f 63 65 73 73 40 30 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ocess@0.ntdll.dll.ntdll.dll/.... | 
| 4df60 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 4df80 |  20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00 6b 00  | ..57........`.......L....A%...k. | 
| 4dfa0 |  0c 00 5f 4c 64 72 53 65 74 44 6c 6c 4d 61 6e 69    66 65 73 74 50 72 6f 62 65 72 40 34 00 6e 74 64  | .._LdrSetDllManifestProber@4.ntd | 
| 4dfc0 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 4dfe0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 37 32 20 20 20 20 20 20  | 97..............0.......72...... | 
| 4e000 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    34 00 00 00 6a 00 0c 00 5f 4c 64 72 53 65 74 41  | ..`.......L....A4...j..._LdrSetA | 
| 4e020 |  70 70 43 6f 6d 70 61 74 44 6c 6c 52 65 64 69 72    65 63 74 69 6f 6e 43 61 6c 6c 62 61 63 6b 40 31  | ppCompatDllRedirectionCallback@1 | 
| 4e040 |  32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 2.ntdll.dll.ntdll.dll/......1099 | 
| 4e060 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 37 20 20  | 622597..............0.......67.. | 
| 4e080 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 2f 00 00 00 69 00 0c 00 5f 4c 64 72  | ......`.......L....A/...i..._Ldr | 
| 4e0a0 |  51 75 65 72 79 50 72 6f 63 65 73 73 4d 6f 64 75    6c 65 49 6e 66 6f 72 6d 61 74 69 6f 6e 40 31 32  | QueryProcessModuleInformation@12 | 
| 4e0c0 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 4e0e0 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20  | 622597..............0.......61.. | 
| 4e100 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 29 00 00 00 68 00 0c 00 5f 4c 64 72  | ......`.......L....A)...h..._Ldr | 
| 4e120 |  51 75 65 72 79 49 6d 61 67 65 46 69 6c 65 4b 65    79 4f 70 74 69 6f 6e 40 32 34 00 6e 74 64 6c 6c  | QueryImageFileKeyOption@24.ntdll | 
| 4e140 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 4e160 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 37 30 20 20 20 20 20 20 20 20  | ..............0.......70........ | 
| 4e180 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 32 00    00 00 67 00 0c 00 5f 4c 64 72 51 75 65 72 79 49  | `.......L....A2...g..._LdrQueryI | 
| 4e1a0 |  6d 61 67 65 46 69 6c 65 45 78 65 63 75 74 69 6f    6e 4f 70 74 69 6f 6e 73 45 78 40 32 38 00 6e 74  | mageFileExecutionOptionsEx@28.nt | 
| 4e1c0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 4e1e0 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 38 20 20 20 20 20 20  | 97..............0.......68...... | 
| 4e200 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    30 00 00 00 66 00 0c 00 5f 4c 64 72 51 75 65 72  | ..`.......L....A0...f..._LdrQuer | 
| 4e220 |  79 49 6d 61 67 65 46 69 6c 65 45 78 65 63 75 74    69 6f 6e 4f 70 74 69 6f 6e 73 40 32 34 00 6e 74  | yImageFileExecutionOptions@24.nt | 
| 4e240 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 4e260 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 36 30 20 20 20 20 20 20  | 97..............0.......60...... | 
| 4e280 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    28 00 00 00 65 00 0c 00 5f 4c 64 72 50 72 6f 63  | ..`.......L....A(...e..._LdrProc | 
| 4e2a0 |  65 73 73 52 65 6c 6f 63 61 74 69 6f 6e 42 6c 6f    63 6b 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | essRelocationBlock@16.ntdll.dll. | 
| 4e2c0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 4e2e0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    36 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......61........`..... | 
| 4e300 |  00 00 4c 01 c5 e8 8a 41 29 00 00 00 64 00 0c 00    5f 4c 64 72 4f 70 65 6e 49 6d 61 67 65 46 69 6c  | ..L....A)...d..._LdrOpenImageFil | 
| 4e320 |  65 4f 70 74 69 6f 6e 73 4b 65 79 40 31 32 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | eOptionsKey@12.ntdll.dll..ntdll. | 
| 4e340 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 4e360 |  20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......52........`.......L... | 
| 4e380 |  8a 41 20 00 00 00 63 00 0c 00 5f 4c 64 72 4c 6f    63 6b 4c 6f 61 64 65 72 4c 6f 63 6b 40 31 32 00  | .A....c..._LdrLockLoaderLock@12. | 
| 4e3a0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 4e3c0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 35 20 20 20 20  | 2597..............0.......45.... | 
| 4e3e0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 19 00 00 00 62 00 0c 00 5f 4c 64 72 4c 6f  | ....`.......L....A....b..._LdrLo | 
| 4e400 |  61 64 44 6c 6c 40 31 36 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | adDll@16.ntdll.dll..ntdll.dll/.. | 
| 4e420 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 4e440 |  20 20 20 20 36 34 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 2c 00 00 00  | ....64........`.......L....A,... | 
| 4e460 |  61 00 0c 00 5f 4c 64 72 4c 6f 61 64 41 6c 74 65    72 6e 61 74 65 52 65 73 6f 75 72 63 65 4d 6f 64  | a..._LdrLoadAlternateResourceMod | 
| 4e480 |  75 6c 65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ule@8.ntdll.dll.ntdll.dll/...... | 
| 4e4a0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4e4c0 |  35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 21 00 00 00 60 00 0c 00  | 53........`.......L....A!...`... | 
| 4e4e0 |  5f 4c 64 72 49 6e 69 74 69 61 6c 69 7a 65 54 68    75 6e 6b 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c  | _LdrInitializeThunk@16.ntdll.dll | 
| 4e500 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 4e520 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 38 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......58........`... | 
| 4e540 |  ff ff 00 00 4c 01 c5 e8 8a 41 26 00 00 00 5f 00    0c 00 5f 4c 64 72 49 6e 69 74 53 68 69 6d 45 6e  | ....L....A&..._..._LdrInitShimEn | 
| 4e560 |  67 69 6e 65 44 79 6e 61 6d 69 63 40 34 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | gineDynamic@4.ntdll.dll.ntdll.dl | 
| 4e580 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 4e5a0 |  30 20 20 20 20 20 20 20 35 32 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......52........`.......L....A | 
| 4e5c0 |  20 00 00 00 5e 00 0c 00 5f 4c 64 72 48 6f 74 50    61 74 63 68 52 6f 75 74 69 6e 65 40 34 00 6e 74  | ....^..._LdrHotPatchRoutine@4.nt | 
| 4e5e0 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 4e600 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20  | 97..............0.......57...... | 
| 4e620 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    25 00 00 00 5d 00 0c 00 5f 4c 64 72 47 65 74 50  | ..`.......L....A%...]..._LdrGetP | 
| 4e640 |  72 6f 63 65 64 75 72 65 41 64 64 72 65 73 73 40    31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | rocedureAddress@16.ntdll.dll..nt | 
| 4e660 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 4e680 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......52........`....... | 
| 4e6a0 |  4c 01 c5 e8 8a 41 20 00 00 00 5c 00 0c 00 5f 4c    64 72 47 65 74 44 6c 6c 48 61 6e 64 6c 65 45 78  | L....A....\..._LdrGetDllHandleEx | 
| 4e6c0 |  40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @20.ntdll.dll.ntdll.dll/......10 | 
| 4e6e0 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 30  | 99622597..............0.......50 | 
| 4e700 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1e 00 00 00 5b 00 0c 00 5f 4c  | ........`.......L....A....[..._L | 
| 4e720 |  64 72 47 65 74 44 6c 6c 48 61 6e 64 6c 65 40 31    36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | drGetDllHandle@16.ntdll.dll.ntdl | 
| 4e740 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4e760 |  20 20 20 20 30 20 20 20 20 20 20 20 36 36 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......66........`.......L. | 
| 4e780 |  c5 e8 8a 41 2e 00 00 00 5a 00 0c 00 5f 4c 64 72    46 6c 75 73 68 41 6c 74 65 72 6e 61 74 65 52 65  | ...A....Z..._LdrFlushAlternateRe | 
| 4e7a0 |  73 6f 75 72 63 65 4d 6f 64 75 6c 65 73 40 30 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | sourceModules@0.ntdll.dll.ntdll. | 
| 4e7c0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 4e7e0 |  20 20 30 20 20 20 20 20 20 20 35 32 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......52........`.......L... | 
| 4e800 |  8a 41 20 00 00 00 59 00 0c 00 5f 4c 64 72 46 69    6e 64 52 65 73 6f 75 72 63 65 5f 55 40 31 36 00  | .A....Y..._LdrFindResource_U@16. | 
| 4e820 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 4e840 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20  | 2597..............0.......54.... | 
| 4e860 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 22 00 00 00 58 00 0c 00 5f 4c 64 72 46 69  | ....`.......L....A"...X..._LdrFi | 
| 4e880 |  6e 64 52 65 73 6f 75 72 63 65 45 78 5f 55 40 32    30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | ndResourceEx_U@20.ntdll.dll.ntdl | 
| 4e8a0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4e8c0 |  20 20 20 20 30 20 20 20 20 20 20 20 36 31 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......61........`.......L. | 
| 4e8e0 |  c5 e8 8a 41 29 00 00 00 57 00 0c 00 5f 4c 64 72    46 69 6e 64 52 65 73 6f 75 72 63 65 44 69 72 65  | ...A)...W..._LdrFindResourceDire | 
| 4e900 |  63 74 6f 72 79 5f 55 40 31 36 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ctory_U@16.ntdll.dll..ntdll.dll/ | 
| 4e920 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 4e940 |  20 20 20 20 20 20 35 36 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 24 00  | ......56........`.......L....A$. | 
| 4e960 |  00 00 56 00 0c 00 5f 4c 64 72 46 69 6e 64 45 6e    74 72 79 46 6f 72 41 64 64 72 65 73 73 40 38 00  | ..V..._LdrFindEntryForAddress@8. | 
| 4e980 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 4e9a0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 33 20 20 20 20  | 2597..............0.......63.... | 
| 4e9c0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 2b 00 00 00 55 00 0c 00 5f 4c 64 72 46 69  | ....`.......L....A+...U..._LdrFi | 
| 4e9e0 |  6e 64 43 72 65 61 74 65 50 72 6f 63 65 73 73 4d    61 6e 69 66 65 73 74 40 32 30 00 6e 74 64 6c 6c  | ndCreateProcessManifest@20.ntdll | 
| 4ea00 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 4ea20 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 36 30 20 20 20 20 20 20 20 20  | ..............0.......60........ | 
| 4ea40 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 28 00    00 00 54 00 0c 00 5f 4c 64 72 45 6e 75 6d 65 72  | `.......L....A(...T..._LdrEnumer | 
| 4ea60 |  61 74 65 4c 6f 61 64 65 64 4d 6f 64 75 6c 65 73    40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | ateLoadedModules@12.ntdll.dll.nt | 
| 4ea80 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 4eaa0 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 31    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......51........`....... | 
| 4eac0 |  4c 01 c5 e8 8a 41 1f 00 00 00 53 00 0c 00 5f 4c    64 72 45 6e 75 6d 52 65 73 6f 75 72 63 65 73 40  | L....A....S..._LdrEnumResources@ | 
| 4eae0 |  32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 20.ntdll.dll..ntdll.dll/......10 | 
| 4eb00 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 34  | 99622597..............0.......64 | 
| 4eb20 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 2c 00 00 00 52 00 0c 00 5f 4c  | ........`.......L....A,...R..._L | 
| 4eb40 |  64 72 44 69 73 61 62 6c 65 54 68 72 65 61 64 43    61 6c 6c 6f 75 74 73 46 6f 72 44 6c 6c 40 34 00  | drDisableThreadCalloutsForDll@4. | 
| 4eb60 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 4eb80 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 31 20 20 20 20  | 2597..............0.......61.... | 
| 4eba0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 29 00 00 00 51 00 0c 00 5f 4c 64 72 44 65  | ....`.......L....A)...Q..._LdrDe | 
| 4ebc0 |  73 74 72 6f 79 4f 75 74 4f 66 50 72 6f 63 65 73    73 49 6d 61 67 65 40 34 00 6e 74 64 6c 6c 2e 64  | stroyOutOfProcessImage@4.ntdll.d | 
| 4ebe0 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 4ec00 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 36 31 20 20 20 20 20 20 20 20 60 0a  | ............0.......61........`. | 
| 4ec20 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 29 00 00 00    50 00 0c 00 5f 4c 64 72 43 72 65 61 74 65 4f 75  | ......L....A)...P..._LdrCreateOu | 
| 4ec40 |  74 4f 66 50 72 6f 63 65 73 73 49 6d 61 67 65 40    32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | tOfProcessImage@20.ntdll.dll..nt | 
| 4ec60 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 4ec80 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 36 32    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......62........`....... | 
| 4eca0 |  4c 01 c5 e8 8a 41 2a 00 00 00 4f 00 0c 00 5f 4c    64 72 41 6c 74 65 72 6e 61 74 65 52 65 73 6f 75  | L....A*...O..._LdrAlternateResou | 
| 4ecc0 |  72 63 65 73 45 6e 61 62 6c 65 64 40 30 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | rcesEnabled@0.ntdll.dll.ntdll.dl | 
| 4ece0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 4ed00 |  30 20 20 20 20 20 20 20 34 36 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......46........`.......L....A | 
| 4ed20 |  1a 00 00 00 4e 00 0c 00 5f 4c 64 72 41 64 64 52    65 66 44 6c 6c 40 38 00 6e 74 64 6c 6c 2e 64 6c  | ....N..._LdrAddRefDll@8.ntdll.dl | 
| 4ed40 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 4ed60 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 32 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......52........`... | 
| 4ed80 |  ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00 4d 00    0c 00 5f 4c 64 72 41 63 63 65 73 73 52 65 73 6f  | ....L....A....M..._LdrAccessReso | 
| 4eda0 |  75 72 63 65 40 31 36 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | urce@16.ntdll.dll.ntdll.dll/.... | 
| 4edc0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 4ede0 |  20 20 36 34 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 2c 00 00 00 4c 00  | ..64........`.......L....A,...L. | 
| 4ee00 |  0c 00 5f 4c 64 72 41 63 63 65 73 73 4f 75 74 4f    66 50 72 6f 63 65 73 73 52 65 73 6f 75 72 63 65  | .._LdrAccessOutOfProcessResource | 
| 4ee20 |  40 32 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @20.ntdll.dll.ntdll.dll/......10 | 
| 4ee40 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39  | 99622597..............0.......59 | 
| 4ee60 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 27 00 00 00 4b 00 0c 00 5f 4b  | ........`.......L....A'...K..._K | 
| 4ee80 |  69 55 73 65 72 45 78 63 65 70 74 69 6f 6e 44 69    73 70 61 74 63 68 65 72 40 38 00 6e 74 64 6c 6c  | iUserExceptionDispatcher@8.ntdll | 
| 4eea0 |  2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | .dll..ntdll.dll/......1099622597 | 
| 4eec0 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 39 20 20 20 20 20 20 20 20  | ..............0.......59........ | 
| 4eee0 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 27 00    00 00 4a 00 0c 00 5f 4b 69 55 73 65 72 43 61 6c  | `.......L....A'...J..._KiUserCal | 
| 4ef00 |  6c 62 61 63 6b 44 69 73 70 61 74 63 68 65 72 40    31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74  | lbackDispatcher@12.ntdll.dll..nt | 
| 4ef20 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 4ef40 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 34    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......54........`....... | 
| 4ef60 |  4c 01 c5 e8 8a 41 22 00 00 00 49 00 0c 00 5f 4b    69 55 73 65 72 41 70 63 44 69 73 70 61 74 63 68  | L....A"...I..._KiUserApcDispatch | 
| 4ef80 |  65 72 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | er@16.ntdll.dll.ntdll.dll/...... | 
| 4efa0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4efc0 |  36 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 2c 00 00 00 48 00 0c 00  | 64........`.......L....A,...H... | 
| 4efe0 |  5f 4b 69 52 61 69 73 65 55 73 65 72 45 78 63 65    70 74 69 6f 6e 44 69 73 70 61 74 63 68 65 72 40  | _KiRaiseUserExceptionDispatcher@ | 
| 4f000 |  30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 0.ntdll.dll.ntdll.dll/......1099 | 
| 4f020 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 34 39 20 20  | 622597..............0.......49.. | 
| 4f040 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1d 00 00 00 47 00 0c 00 5f 4b 69 49  | ......`.......L....A....G..._KiI | 
| 4f060 |  6e 74 53 79 73 74 65 6d 43 61 6c 6c 40 30 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | ntSystemCall@0.ntdll.dll..ntdll. | 
| 4f080 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 4f0a0 |  20 20 30 20 20 20 20 20 20 20 35 33 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......53........`.......L... | 
| 4f0c0 |  8a 41 21 00 00 00 46 00 0c 00 5f 4b 69 46 61 73    74 53 79 73 74 65 6d 43 61 6c 6c 52 65 74 40 30  | .A!...F..._KiFastSystemCallRet@0 | 
| 4f0e0 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 4f100 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 30 20 20  | 622597..............0.......50.. | 
| 4f120 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1e 00 00 00 45 00 0c 00 5f 4b 69 46  | ......`.......L....A....E..._KiF | 
| 4f140 |  61 73 74 53 79 73 74 65 6d 43 61 6c 6c 40 30 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | astSystemCall@0.ntdll.dll.ntdll. | 
| 4f160 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 4f180 |  20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......57........`.......L... | 
| 4f1a0 |  8a 41 25 00 00 00 41 00 0c 00 5f 45 74 77 70 53    65 74 48 57 43 6f 6e 66 69 67 46 75 6e 63 74 69  | .A%...A..._EtwpSetHWConfigFuncti | 
| 4f1c0 |  6f 6e 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | on@8.ntdll.dll..ntdll.dll/...... | 
| 4f1e0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4f200 |  35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 21 00 00 00 40 00 0c 00  | 53........`.......L....A!...@... | 
| 4f220 |  5f 45 74 77 70 47 65 74 54 72 61 63 65 42 75 66    66 65 72 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c  | _EtwpGetTraceBuffer@16.ntdll.dll | 
| 4f240 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 4f260 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......50........`... | 
| 4f280 |  ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00 3f 00    0c 00 5f 45 74 77 55 70 64 61 74 65 54 72 61 63  | ....L....A....?..._EtwUpdateTrac | 
| 4f2a0 |  65 57 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | eW@16.ntdll.dll.ntdll.dll/...... | 
| 4f2c0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4f2e0 |  35 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1e 00 00 00 3e 00 0c 00  | 50........`.......L....A....>... | 
| 4f300 |  5f 45 74 77 55 70 64 61 74 65 54 72 61 63 65 41    40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | _EtwUpdateTraceA@16.ntdll.dll.nt | 
| 4f320 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 4f340 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 37    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......57........`....... | 
| 4f360 |  4c 01 c5 e8 8a 41 25 00 00 00 3d 00 0c 00 5f 45    74 77 55 6e 72 65 67 69 73 74 65 72 54 72 61 63  | L....A%...=..._EtwUnregisterTrac | 
| 4f380 |  65 47 75 69 64 73 40 38 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | eGuids@8.ntdll.dll..ntdll.dll/.. | 
| 4f3a0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 4f3c0 |  20 20 20 20 35 32 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00 00 00  | ....52........`.......L....A.... | 
| 4f3e0 |  3c 00 0c 00 5f 45 74 77 54 72 61 63 65 4d 65 73    73 61 67 65 56 61 40 32 34 00 6e 74 64 6c 6c 2e  | <..._EtwTraceMessageVa@24.ntdll. | 
| 4f400 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 4f420 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a  | ............0.......47........`. | 
| 4f440 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1b 00 00 00    3b 00 08 00 5f 45 74 77 54 72 61 63 65 4d 65 73  | ......L....A....;..._EtwTraceMes | 
| 4f460 |  73 61 67 65 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | sage.ntdll.dll..ntdll.dll/...... | 
| 4f480 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4f4a0 |  35 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 24 00 00 00 3a 00 0c 00  | 56........`.......L....A$...:... | 
| 4f4c0 |  5f 45 74 77 54 72 61 63 65 45 76 65 6e 74 49 6e    73 74 61 6e 63 65 40 32 30 00 6e 74 64 6c 6c 2e  | _EtwTraceEventInstance@20.ntdll. | 
| 4f4e0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 4f500 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 38 20 20 20 20 20 20 20 20 60 0a  | ............0.......48........`. | 
| 4f520 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1c 00 00 00    39 00 0c 00 5f 45 74 77 54 72 61 63 65 45 76 65  | ......L....A....9..._EtwTraceEve | 
| 4f540 |  6e 74 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | nt@12.ntdll.dll.ntdll.dll/...... | 
| 4f560 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4f580 |  34 38 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1c 00 00 00 38 00 0c 00  | 48........`.......L....A....8... | 
| 4f5a0 |  5f 45 74 77 53 74 6f 70 54 72 61 63 65 57 40 31    36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | _EtwStopTraceW@16.ntdll.dll.ntdl | 
| 4f5c0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4f5e0 |  20 20 20 20 30 20 20 20 20 20 20 20 34 38 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......48........`.......L. | 
| 4f600 |  c5 e8 8a 41 1c 00 00 00 37 00 0c 00 5f 45 74 77    53 74 6f 70 54 72 61 63 65 41 40 31 36 00 6e 74  | ...A....7..._EtwStopTraceA@16.nt | 
| 4f620 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 4f640 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20  | 97..............0.......49...... | 
| 4f660 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1d 00 00 00 36 00 0c 00 5f 45 74 77 53 74 61 72  | ..`.......L....A....6..._EtwStar | 
| 4f680 |  74 54 72 61 63 65 57 40 31 32 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | tTraceW@12.ntdll.dll..ntdll.dll/ | 
| 4f6a0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 4f6c0 |  20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1d 00  | ......49........`.......L....A.. | 
| 4f6e0 |  00 00 35 00 0c 00 5f 45 74 77 53 74 61 72 74 54    72 61 63 65 41 40 31 32 00 6e 74 64 6c 6c 2e 64  | ..5..._EtwStartTraceA@12.ntdll.d | 
| 4f700 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 4f720 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a  | ............0.......57........`. | 
| 4f740 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00    34 00 0c 00 5f 45 74 77 52 65 67 69 73 74 65 72  | ......L....A%...4..._EtwRegister | 
| 4f760 |  54 72 61 63 65 47 75 69 64 73 57 40 33 32 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | TraceGuidsW@32.ntdll.dll..ntdll. | 
| 4f780 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 4f7a0 |  20 20 30 20 20 20 20 20 20 20 35 37 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......57........`.......L... | 
| 4f7c0 |  8a 41 25 00 00 00 33 00 0c 00 5f 45 74 77 52 65    67 69 73 74 65 72 54 72 61 63 65 47 75 69 64 73  | .A%...3..._EtwRegisterTraceGuids | 
| 4f7e0 |  41 40 33 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | A@32.ntdll.dll..ntdll.dll/...... | 
| 4f800 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 4f820 |  35 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 27 00 00 00 32 00 0c 00  | 59........`.......L....A'...2... | 
| 4f840 |  5f 45 74 77 52 65 63 65 69 76 65 4e 6f 74 69 66    69 63 61 74 69 6f 6e 73 57 40 31 36 00 6e 74 64  | _EtwReceiveNotificationsW@16.ntd | 
| 4f860 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 4f880 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 35 39 20 20 20 20 20 20  | 97..............0.......59...... | 
| 4f8a0 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    27 00 00 00 31 00 0c 00 5f 45 74 77 52 65 63 65  | ..`.......L....A'...1..._EtwRece | 
| 4f8c0 |  69 76 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 73    41 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | iveNotificationsA@16.ntdll.dll.. | 
| 4f8e0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 4f900 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    34 39 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......49........`..... | 
| 4f920 |  00 00 4c 01 c5 e8 8a 41 1d 00 00 00 30 00 0c 00    5f 45 74 77 51 75 65 72 79 54 72 61 63 65 57 40  | ..L....A....0..._EtwQueryTraceW@ | 
| 4f940 |  31 36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 16.ntdll.dll..ntdll.dll/......10 | 
| 4f960 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 34 39  | 99622597..............0.......49 | 
| 4f980 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 1d 00 00 00 2f 00 0c 00 5f 45  | ........`.......L....A..../..._E | 
| 4f9a0 |  74 77 51 75 65 72 79 54 72 61 63 65 41 40 31 36    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | twQueryTraceA@16.ntdll.dll..ntdl | 
| 4f9c0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4f9e0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 33 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......53........`.......L. | 
| 4fa00 |  c5 e8 8a 41 21 00 00 00 2e 00 0c 00 5f 45 74 77    51 75 65 72 79 41 6c 6c 54 72 61 63 65 73 57 40  | ...A!......._EtwQueryAllTracesW@ | 
| 4fa20 |  31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | 12.ntdll.dll..ntdll.dll/......10 | 
| 4fa40 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 33  | 99622597..............0.......53 | 
| 4fa60 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 21 00 00 00 2d 00 0c 00 5f 45  | ........`.......L....A!...-..._E | 
| 4fa80 |  74 77 51 75 65 72 79 41 6c 6c 54 72 61 63 65 73    41 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | twQueryAllTracesA@12.ntdll.dll.. | 
| 4faa0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 4fac0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    36 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......63........`..... | 
| 4fae0 |  00 00 4c 01 c5 e8 8a 41 2b 00 00 00 2c 00 0c 00    5f 45 74 77 4e 6f 74 69 66 69 63 61 74 69 6f 6e  | ..L....A+...,..._EtwNotification | 
| 4fb00 |  52 65 67 69 73 74 72 61 74 69 6f 6e 57 40 32 30    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | RegistrationW@20.ntdll.dll..ntdl | 
| 4fb20 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4fb40 |  20 20 20 20 30 20 20 20 20 20 20 20 36 33 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......63........`.......L. | 
| 4fb60 |  c5 e8 8a 41 2b 00 00 00 2b 00 0c 00 5f 45 74 77    4e 6f 74 69 66 69 63 61 74 69 6f 6e 52 65 67 69  | ...A+...+..._EtwNotificationRegi | 
| 4fb80 |  73 74 72 61 74 69 6f 6e 41 40 32 30 00 6e 74 64    6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c  | strationA@20.ntdll.dll..ntdll.dl | 
| 4fba0 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 4fbc0 |  30 20 20 20 20 20 20 20 35 37 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......57........`.......L....A | 
| 4fbe0 |  25 00 00 00 2a 00 0c 00 5f 45 74 77 47 65 74 54    72 61 63 65 4c 6f 67 67 65 72 48 61 6e 64 6c 65  | %...*..._EtwGetTraceLoggerHandle | 
| 4fc00 |  40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | @4.ntdll.dll..ntdll.dll/......10 | 
| 4fc20 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 36  | 99622597..............0.......56 | 
| 4fc40 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 24 00 00 00 29 00 0c 00 5f 45  | ........`.......L....A$...)..._E | 
| 4fc60 |  74 77 47 65 74 54 72 61 63 65 45 6e 61 62 6c 65    4c 65 76 65 6c 40 38 00 6e 74 64 6c 6c 2e 64 6c  | twGetTraceEnableLevel@8.ntdll.dl | 
| 4fc80 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 4fca0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 36 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......56........`... | 
| 4fcc0 |  ff ff 00 00 4c 01 c5 e8 8a 41 24 00 00 00 28 00    0c 00 5f 45 74 77 47 65 74 54 72 61 63 65 45 6e  | ....L....A$...(..._EtwGetTraceEn | 
| 4fce0 |  61 62 6c 65 46 6c 61 67 73 40 38 00 6e 74 64 6c    6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ableFlags@8.ntdll.dll.ntdll.dll/ | 
| 4fd00 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 4fd20 |  20 20 20 20 20 20 34 39 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1d 00  | ......49........`.......L....A.. | 
| 4fd40 |  00 00 27 00 0c 00 5f 45 74 77 46 6c 75 73 68 54    72 61 63 65 57 40 31 36 00 6e 74 64 6c 6c 2e 64  | ..'..._EtwFlushTraceW@16.ntdll.d | 
| 4fd60 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 4fd80 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 34 39 20 20 20 20 20 20 20 20 60 0a  | ............0.......49........`. | 
| 4fda0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1d 00 00 00    26 00 0c 00 5f 45 74 77 46 6c 75 73 68 54 72 61  | ......L....A....&..._EtwFlushTra | 
| 4fdc0 |  63 65 41 40 31 36 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | ceA@16.ntdll.dll..ntdll.dll/.... | 
| 4fde0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 4fe00 |  20 20 35 37 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00 25 00  | ..57........`.......L....A%...%. | 
| 4fe20 |  0c 00 5f 45 74 77 45 6e 75 6d 65 72 61 74 65 54    72 61 63 65 47 75 69 64 73 40 31 32 00 6e 74 64  | .._EtwEnumerateTraceGuids@12.ntd | 
| 4fe40 |  6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | ll.dll..ntdll.dll/......10996225 | 
| 4fe60 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 39 20 20 20 20 20 20  | 97..............0.......49...... | 
| 4fe80 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1d 00 00 00 24 00 0c 00 5f 45 74 77 45 6e 61 62  | ..`.......L....A....$..._EtwEnab | 
| 4fea0 |  6c 65 54 72 61 63 65 40 32 34 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | leTrace@24.ntdll.dll..ntdll.dll/ | 
| 4fec0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 4fee0 |  20 20 20 20 20 20 35 38 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 26 00  | ......58........`.......L....A&. | 
| 4ff00 |  00 00 23 00 0c 00 5f 45 74 77 43 72 65 61 74 65    54 72 61 63 65 49 6e 73 74 61 6e 63 65 49 64 40  | ..#..._EtwCreateTraceInstanceId@ | 
| 4ff20 |  38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 8.ntdll.dll.ntdll.dll/......1099 | 
| 4ff40 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20  | 622597..............0.......51.. | 
| 4ff60 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1f 00 00 00 22 00 0c 00 5f 45 74 77  | ......`.......L....A...."..._Etw | 
| 4ff80 |  43 6f 6e 74 72 6f 6c 54 72 61 63 65 57 40 32 30    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | ControlTraceW@20.ntdll.dll..ntdl | 
| 4ffa0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 4ffc0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......51........`.......L. | 
| 4ffe0 |  c5 e8 8a 41 1f 00 00 00 21 00 0c 00 5f 45 74 77    43 6f 6e 74 72 6f 6c 54 72 61 63 65 41 40 32 30  | ...A....!..._EtwControlTraceA@20 | 
| 50000 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 50020 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20  | 622597..............0.......51.. | 
| 50040 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 1f 00 00 00 20 00 0c 00 5f 44 62 67  | ......`.......L....A........_Dbg | 
| 50060 |  55 73 65 72 42 72 65 61 6b 50 6f 69 6e 74 40 30    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | UserBreakPoint@0.ntdll.dll..ntdl | 
| 50080 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 500a0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 34 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......54........`.......L. | 
| 500c0 |  c5 e8 8a 41 22 00 00 00 1f 00 0c 00 5f 44 62 67    55 69 57 61 69 74 53 74 61 74 65 43 68 61 6e 67  | ...A"......._DbgUiWaitStateChang | 
| 500e0 |  65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74    64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30  | e@8.ntdll.dll.ntdll.dll/......10 | 
| 50100 |  39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20    20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 32  | 99622597..............0.......52 | 
| 50120 |  20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00    4c 01 c5 e8 8a 41 20 00 00 00 1e 00 0c 00 5f 44  | ........`.......L....A........_D | 
| 50140 |  62 67 55 69 53 74 6f 70 44 65 62 75 67 67 69 6e    67 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74  | bgUiStopDebugging@4.ntdll.dll.nt | 
| 50160 |  64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30    39 39 36 32 32 35 39 37 20 20 20 20 20 20 20 20  | dll.dll/......1099622597........ | 
| 50180 |  20 20 20 20 20 20 30 20 20 20 20 20 20 20 35 39    20 20 20 20 20 20 20 20 60 0a 00 00 ff ff 00 00  | ......0.......59........`....... | 
| 501a0 |  4c 01 c5 e8 8a 41 27 00 00 00 1d 00 0c 00 5f 44    62 67 55 69 53 65 74 54 68 72 65 61 64 44 65 62  | L....A'......._DbgUiSetThreadDeb | 
| 501c0 |  75 67 4f 62 6a 65 63 74 40 34 00 6e 74 64 6c 6c    2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f  | ugObject@4.ntdll.dll..ntdll.dll/ | 
| 501e0 |  20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37    20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20  | ......1099622597..............0. | 
| 50200 |  20 20 20 20 20 20 35 32 20 20 20 20 20 20 20 20    60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 20 00  | ......52........`.......L....A.. | 
| 50220 |  00 00 1c 00 0c 00 5f 44 62 67 55 69 52 65 6d 6f    74 65 42 72 65 61 6b 69 6e 40 34 00 6e 74 64 6c  | ......_DbgUiRemoteBreakin@4.ntdl | 
| 50240 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 50260 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 35 37 20 20 20 20 20 20 20 20  | ..............0.......57........ | 
| 50280 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00    00 00 1b 00 0c 00 5f 44 62 67 55 69 49 73 73 75  | `.......L....A%......._DbgUiIssu | 
| 502a0 |  65 52 65 6d 6f 74 65 42 72 65 61 6b 69 6e 40 34    00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c  | eRemoteBreakin@4.ntdll.dll..ntdl | 
| 502c0 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 502e0 |  20 20 20 20 30 20 20 20 20 20 20 20 35 39 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......59........`.......L. | 
| 50300 |  c5 e8 8a 41 27 00 00 00 1a 00 0c 00 5f 44 62 67    55 69 47 65 74 54 68 72 65 61 64 44 65 62 75 67  | ...A'......._DbgUiGetThreadDebug | 
| 50320 |  4f 62 6a 65 63 74 40 30 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | Object@0.ntdll.dll..ntdll.dll/.. | 
| 50340 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 50360 |  20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00  | ....57........`.......L....A%... | 
| 50380 |  19 00 0c 00 5f 44 62 67 55 69 44 65 62 75 67 41    63 74 69 76 65 50 72 6f 63 65 73 73 40 34 00 6e  | ...._DbgUiDebugActiveProcess@4.n | 
| 503a0 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 503c0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 36 36 20 20 20 20  | 2597..............0.......66.... | 
| 503e0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 2e 00 00 00 18 00 0c 00 5f 44 62 67 55 69  | ....`.......L....A........_DbgUi | 
| 50400 |  43 6f 6e 76 65 72 74 53 74 61 74 65 43 68 61 6e    67 65 53 74 72 75 63 74 75 72 65 40 38 00 6e 74  | ConvertStateChangeStructure@8.nt | 
| 50420 |  64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | dll.dll.ntdll.dll/......10996225 | 
| 50440 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 37 20 20 20 20 20 20  | 97..............0.......47...... | 
| 50460 |  20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41    1b 00 00 00 17 00 0c 00 5f 44 62 67 55 69 43 6f  | ..`.......L....A........_DbgUiCo | 
| 50480 |  6e 74 69 6e 75 65 40 38 00 6e 74 64 6c 6c 2e 64    6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | ntinue@8.ntdll.dll..ntdll.dll/.. | 
| 504a0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 504c0 |  20 20 20 20 35 31 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00  | ....51........`.......L....A.... | 
| 504e0 |  16 00 0c 00 5f 44 62 67 55 69 43 6f 6e 6e 65 63    74 54 6f 44 62 67 40 30 00 6e 74 64 6c 6c 2e 64  | ...._DbgUiConnectToDbg@0.ntdll.d | 
| 50500 |  6c 6c 00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | ll..ntdll.dll/......1099622597.. | 
| 50520 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 35 37 20 20 20 20 20 20 20 20 60 0a  | ............0.......57........`. | 
| 50540 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 25 00 00 00    15 00 0c 00 5f 44 62 67 53 65 74 44 65 62 75 67  | ......L....A%......._DbgSetDebug | 
| 50560 |  46 69 6c 74 65 72 53 74 61 74 65 40 31 32 00 6e    74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e  | FilterState@12.ntdll.dll..ntdll. | 
| 50580 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 505a0 |  20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......58........`.......L... | 
| 505c0 |  8a 41 26 00 00 00 14 00 0c 00 5f 44 62 67 51 75    65 72 79 44 65 62 75 67 46 69 6c 74 65 72 53 74  | .A&......._DbgQueryDebugFilterSt | 
| 505e0 |  61 74 65 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ate@8.ntdll.dll.ntdll.dll/...... | 
| 50600 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 50620 |  34 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 18 00 00 00 13 00 0c 00  | 44........`.......L....A........ | 
| 50640 |  5f 44 62 67 50 72 6f 6d 70 74 40 31 32 00 6e 74    64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c  | _DbgPrompt@12.ntdll.dll.ntdll.dl | 
| 50660 |  6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35    39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20  | l/......1099622597.............. | 
| 50680 |  30 20 20 20 20 20 20 20 35 34 20 20 20 20 20 20    20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41  | 0.......54........`.......L....A | 
| 506a0 |  22 00 00 00 12 00 08 00 5f 44 62 67 50 72 69 6e    74 52 65 74 75 72 6e 43 6f 6e 74 72 6f 6c 43 00  | "......._DbgPrintReturnControlC. | 
| 506c0 |  6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | ntdll.dll.ntdll.dll/......109962 | 
| 506e0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 34 32 20 20 20 20  | 2597..............0.......42.... | 
| 50700 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 16 00 00 00 11 00 08 00 5f 44 62 67 50 72  | ....`.......L....A........_DbgPr | 
| 50720 |  69 6e 74 45 78 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | intEx.ntdll.dll.ntdll.dll/...... | 
| 50740 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 50760 |  34 30 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 14 00 00 00 10 00 08 00  | 40........`.......L....A........ | 
| 50780 |  5f 44 62 67 50 72 69 6e 74 00 6e 74 64 6c 6c 2e    64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20  | _DbgPrint.ntdll.dll.ntdll.dll/.. | 
| 507a0 |  20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20    20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20  | ....1099622597..............0... | 
| 507c0 |  20 20 20 20 34 37 20 20 20 20 20 20 20 20 60 0a    00 00 ff ff 00 00 4c 01 c5 e8 8a 41 1b 00 00 00  | ....47........`.......L....A.... | 
| 507e0 |  0f 00 0c 00 5f 44 62 67 42 72 65 61 6b 50 6f 69    6e 74 40 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | ...._DbgBreakPoint@0.ntdll.dll.. | 
| 50800 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 50820 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 33 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......53........`..... | 
| 50840 |  00 00 4c 01 c5 e8 8a 41 21 00 00 00 0e 00 0c 00    5f 43 73 72 53 65 74 50 72 69 6f 72 69 74 79 43  | ..L....A!......._CsrSetPriorityC | 
| 50860 |  6c 61 73 73 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | lass@8.ntdll.dll..ntdll.dll/.... | 
| 50880 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 508a0 |  20 20 35 31 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1f 00 00 00 0d 00  | ..51........`.......L....A...... | 
| 508c0 |  0c 00 5f 43 73 72 50 72 6f 62 65 46 6f 72 57 72    69 74 65 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c  | .._CsrProbeForWrite@12.ntdll.dll | 
| 508e0 |  00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | ..ntdll.dll/......1099622597.... | 
| 50900 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......50........`... | 
| 50920 |  ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00 0c 00    0c 00 5f 43 73 72 50 72 6f 62 65 46 6f 72 52 65  | ....L....A........_CsrProbeForRe | 
| 50940 |  61 64 40 31 32 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | ad@12.ntdll.dll.ntdll.dll/...... | 
| 50960 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 50980 |  34 36 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1a 00 00 00 0b 00 0c 00  | 46........`.......L....A........ | 
| 509a0 |  5f 43 73 72 4e 65 77 54 68 72 65 61 64 40 30 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | _CsrNewThread@0.ntdll.dll.ntdll. | 
| 509c0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 509e0 |  20 20 30 20 20 20 20 20 20 20 36 30 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......60........`.......L... | 
| 50a00 |  8a 41 28 00 00 00 0a 00 0c 00 5f 43 73 72 49 64    65 6e 74 69 66 79 41 6c 65 72 74 61 62 6c 65 54  | .A(......._CsrIdentifyAlertableT | 
| 50a20 |  68 72 65 61 64 40 30 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | hread@0.ntdll.dll.ntdll.dll/.... | 
| 50a40 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 50a60 |  20 20 34 39 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1d 00 00 00 09 00  | ..49........`.......L....A...... | 
| 50a80 |  0c 00 5f 43 73 72 47 65 74 50 72 6f 63 65 73 73    49 64 40 30 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | .._CsrGetProcessId@0.ntdll.dll.. | 
| 50aa0 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 50ac0 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......54........`..... | 
| 50ae0 |  00 00 4c 01 c5 e8 8a 41 22 00 00 00 08 00 0c 00    5f 43 73 72 46 72 65 65 43 61 70 74 75 72 65 42  | ..L....A"......._CsrFreeCaptureB | 
| 50b00 |  75 66 66 65 72 40 34 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | uffer@4.ntdll.dll.ntdll.dll/.... | 
| 50b20 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 50b40 |  20 20 35 39 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 27 00 00 00 07 00  | ..59........`.......L....A'..... | 
| 50b60 |  0c 00 5f 43 73 72 43 6c 69 65 6e 74 43 6f 6e 6e    65 63 74 54 6f 53 65 72 76 65 72 40 32 30 00 6e  | .._CsrClientConnectToServer@20.n | 
| 50b80 |  74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c 6c 2e    64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32  | tdll.dll..ntdll.dll/......109962 | 
| 50ba0 |  32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 30 20 20 20 20 20 20 20 35 34 20 20 20 20  | 2597..............0.......54.... | 
| 50bc0 |  20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8    8a 41 22 00 00 00 06 00 0c 00 5f 43 73 72 43 6c  | ....`.......L....A"......._CsrCl | 
| 50be0 |  69 65 6e 74 43 61 6c 6c 53 65 72 76 65 72 40 31    36 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c  | ientCallServer@16.ntdll.dll.ntdl | 
| 50c00 |  6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39    36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20  | l.dll/......1099622597.......... | 
| 50c20 |  20 20 20 20 30 20 20 20 20 20 20 20 35 31 20 20    20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01  | ....0.......51........`.......L. | 
| 50c40 |  c5 e8 8a 41 1f 00 00 00 05 00 0c 00 5f 43 73 72    43 61 70 74 75 72 65 54 69 6d 65 6f 75 74 40 38  | ...A........_CsrCaptureTimeout@8 | 
| 50c60 |  00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | .ntdll.dll..ntdll.dll/......1099 | 
| 50c80 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20  | 622597..............0.......58.. | 
| 50ca0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 26 00 00 00 04 00 0c 00 5f 43 73 72  | ......`.......L....A&......._Csr | 
| 50cc0 |  43 61 70 74 75 72 65 4d 65 73 73 61 67 65 53 74    72 69 6e 67 40 32 30 00 6e 74 64 6c 6c 2e 64 6c  | CaptureMessageString@20.ntdll.dl | 
| 50ce0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 50d00 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 37 38 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......78........`... | 
| 50d20 |  ff ff 00 00 4c 01 c5 e8 8a 41 3a 00 00 00 03 00    0c 00 5f 43 73 72 43 61 70 74 75 72 65 4d 65 73  | ....L....A:......._CsrCaptureMes | 
| 50d40 |  73 61 67 65 4d 75 6c 74 69 55 6e 69 63 6f 64 65    53 74 72 69 6e 67 73 49 6e 50 6c 61 63 65 40 31  | sageMultiUnicodeStringsInPlace@1 | 
| 50d60 |  32 00 6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c    6c 2e 64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39  | 2.ntdll.dll.ntdll.dll/......1099 | 
| 50d80 |  36 32 32 35 39 37 20 20 20 20 20 20 20 20 20 20    20 20 20 20 30 20 20 20 20 20 20 20 35 38 20 20  | 622597..............0.......58.. | 
| 50da0 |  20 20 20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01    c5 e8 8a 41 26 00 00 00 02 00 0c 00 5f 43 73 72  | ......`.......L....A&......._Csr | 
| 50dc0 |  43 61 70 74 75 72 65 4d 65 73 73 61 67 65 42 75    66 66 65 72 40 31 36 00 6e 74 64 6c 6c 2e 64 6c  | CaptureMessageBuffer@16.ntdll.dl | 
| 50de0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 50e00 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 36 30 20 20 20 20 20 20 20 20 60 0a 00 00  | ..........0.......60........`... | 
| 50e20 |  ff ff 00 00 4c 01 c5 e8 8a 41 28 00 00 00 01 00    0c 00 5f 43 73 72 41 6c 6c 6f 63 61 74 65 4d 65  | ....L....A(......._CsrAllocateMe | 
| 50e40 |  73 73 61 67 65 50 6f 69 6e 74 65 72 40 31 32 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | ssagePointer@12.ntdll.dll.ntdll. | 
| 50e60 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 50e80 |  20 20 30 20 20 20 20 20 20 20 35 38 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......58........`.......L... | 
| 50ea0 |  8a 41 26 00 00 00 00 00 0c 00 5f 43 73 72 41 6c    6c 6f 63 61 74 65 43 61 70 74 75 72 65 42 75 66  | .A&......._CsrAllocateCaptureBuf | 
| 50ec0 |  66 65 72 40 38 00 6e 74 64 6c 6c 2e 64 6c 6c 00    6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20  | fer@8.ntdll.dll.ntdll.dll/...... | 
| 50ee0 |  31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20    20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20  | 1099622597..............0....... | 
| 50f00 |  35 31 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff    00 00 4c 01 c5 e8 8a 41 1f 00 00 00 a3 03 0c 00  | 51........`.......L....A........ | 
| 50f20 |  40 52 74 6c 55 73 68 6f 72 74 42 79 74 65 53 77    61 70 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | @RtlUshortByteSwap@4.ntdll.dll.. | 
| 50f40 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 50f60 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    35 34 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......54........`..... | 
| 50f80 |  00 00 4c 01 c5 e8 8a 41 22 00 00 00 85 03 0c 00    40 52 74 6c 55 6c 6f 6e 67 6c 6f 6e 67 42 79 74  | ..L....A".......@RtlUlonglongByt | 
| 50fa0 |  65 53 77 61 70 40 38 00 6e 74 64 6c 6c 2e 64 6c    6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | eSwap@8.ntdll.dll.ntdll.dll/.... | 
| 50fc0 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 50fe0 |  20 20 35 30 20 20 20 20 20 20 20 20 60 0a 00 00    ff ff 00 00 4c 01 c5 e8 8a 41 1e 00 00 00 84 03  | ..50........`.......L....A...... | 
| 51000 |  0c 00 40 52 74 6c 55 6c 6f 6e 67 42 79 74 65 53    77 61 70 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | ..@RtlUlongByteSwap@4.ntdll.dll. | 
| 51020 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 51040 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    36 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......62........`..... | 
| 51060 |  00 00 4c 01 c5 e8 8a 41 2a 00 00 00 c9 02 0c 00    40 52 74 6c 49 6e 74 65 72 6c 6f 63 6b 65 64 50  | ..L....A*.......@RtlInterlockedP | 
| 51080 |  75 73 68 4c 69 73 74 53 4c 69 73 74 40 31 36 00    6e 74 64 6c 6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e  | ushListSList@16.ntdll.dll.ntdll. | 
| 510a0 |  64 6c 6c 2f 20 20 20 20 20 20 31 30 39 39 36 32    32 35 39 37 20 20 20 20 20 20 20 20 20 20 20 20  | dll/......1099622597............ | 
| 510c0 |  20 20 30 20 20 20 20 20 20 20 37 34 20 20 20 20    20 20 20 20 60 0a 00 00 ff ff 00 00 4c 01 c5 e8  | ..0.......74........`.......L... | 
| 510e0 |  8a 41 36 00 00 00 16 02 0c 00 40 52 74 6c 44 65    61 63 74 69 76 61 74 65 41 63 74 69 76 61 74 69  | .A6.......@RtlDeactivateActivati | 
| 51100 |  6f 6e 43 6f 6e 74 65 78 74 55 6e 73 61 66 65 46    61 73 74 40 34 00 6e 74 64 6c 6c 2e 64 6c 6c 00  | onContextUnsafeFast@4.ntdll.dll. | 
| 51120 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 51140 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    37 32 20 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......72........`..... | 
| 51160 |  00 00 4c 01 c5 e8 8a 41 34 00 00 00 ac 01 0c 00    40 52 74 6c 41 63 74 69 76 61 74 65 41 63 74 69  | ..L....A4.......@RtlActivateActi | 
| 51180 |  76 61 74 69 6f 6e 43 6f 6e 74 65 78 74 55 6e 73    61 66 65 46 61 73 74 40 38 00 6e 74 64 6c 6c 2e  | vationContextUnsafeFast@8.ntdll. | 
| 511a0 |  64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20    20 20 20 20 31 30 39 39 36 32 32 35 39 37 20 20  | dll.ntdll.dll/......1099622597.. | 
| 511c0 |  20 20 20 20 20 20 20 20 20 20 20 20 30 20 20 20    20 20 20 20 31 32 37 20 20 20 20 20 20 20 60 0a  | ............0.......127.......`. | 
| 511e0 |  00 00 ff ff 00 00 4c 01 c5 e8 8a 41 6b 00 00 00    f3 01 0c 00 3f 52 74 6c 43 6f 6e 76 65 72 74 56  | ......L....Ak.......?RtlConvertV | 
| 51200 |  61 72 69 61 6e 74 54 6f 50 72 6f 70 65 72 74 79    40 40 59 47 50 41 55 74 61 67 53 45 52 49 41 4c  | ariantToProperty@@YGPAUtagSERIAL | 
| 51220 |  49 5a 45 44 50 52 4f 50 45 52 54 59 56 41 4c 55    45 40 40 50 42 55 74 61 67 50 52 4f 50 56 41 52  | IZEDPROPERTYVALUE@@PBUtagPROPVAR | 
| 51240 |  49 41 4e 54 40 40 47 50 41 55 31 40 50 41 4b 4b    45 32 40 5a 00 6e 74 64 6c 6c 2e 64 6c 6c 00 0a  | IANT@@GPAU1@PAKKE2@Z.ntdll.dll.. | 
| 51260 |  6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20 20 20    31 30 39 39 36 32 32 35 39 37 20 20 20 20 20 20  | ntdll.dll/......1099622597...... | 
| 51280 |  20 20 20 20 20 20 20 20 30 20 20 20 20 20 20 20    31 33 38 20 20 20 20 20 20 20 60 0a 00 00 ff ff  | ........0.......138.......`..... | 
| 512a0 |  00 00 4c 01 c5 e8 8a 41 76 00 00 00 ed 01 0c 00    3f 52 74 6c 43 6f 6e 76 65 72 74 50 72 6f 70 65  | ..L....Av.......?RtlConvertPrope | 
| 512c0 |  72 74 79 54 6f 56 61 72 69 61 6e 74 40 40 59 47    45 50 42 55 74 61 67 53 45 52 49 41 4c 49 5a 45  | rtyToVariant@@YGEPBUtagSERIALIZE | 
| 512e0 |  44 50 52 4f 50 45 52 54 59 56 41 4c 55 45 40 40    47 50 41 55 74 61 67 50 52 4f 50 56 41 52 49 41  | DPROPERTYVALUE@@GPAUtagPROPVARIA | 
| 51300 |  4e 54 40 40 50 41 56 50 4d 65 6d 6f 72 79 41 6c    6c 6f 63 61 74 6f 72 40 40 40 5a 00 6e 74 64 6c  | NT@@PAVPMemoryAllocator@@@Z.ntdl | 
| 51320 |  6c 2e 64 6c 6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f    20 20 20 20 20 20 31 30 39 39 36 32 32 35 39 37  | l.dll.ntdll.dll/......1099622597 | 
| 51340 |  20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20    20 20 20 20 20 20 39 36 20 20 20 20 20 20 20 20  | ..............0.......96........ | 
| 51360 |  60 0a 00 00 ff ff 00 00 4c 01 c5 e8 8a 41 4c 00    00 00 a3 01 0c 00 3f 50 72 6f 70 65 72 74 79 4c  | `.......L....AL.......?PropertyL | 
| 51380 |  65 6e 67 74 68 41 73 56 61 72 69 61 6e 74 40 40    59 47 4b 50 42 55 74 61 67 53 45 52 49 41 4c 49  | engthAsVariant@@YGKPBUtagSERIALI | 
| 513a0 |  5a 45 44 50 52 4f 50 45 52 54 59 56 41 4c 55 45    40 40 4b 47 45 40 5a 00 6e 74 64 6c 6c 2e 64 6c  | ZEDPROPERTYVALUE@@KGE@Z.ntdll.dl | 
| 513c0 |  6c 00 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20    20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20  | l.ntdll.dll/......1099622597.... | 
| 513e0 |  20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20    20 20 32 37 35 20 20 20 20 20 20 20 60 0a 4c 01  | ..........0.......275.......`.L. | 
| 51400 |  03 00 c5 e8 8a 41 d4 00 00 00 02 00 00 00 00 00    00 01 2e 64 65 62 75 67 24 53 00 00 00 00 00 00  | .....A.............debug$S...... | 
| 51420 |  00 00 40 00 00 00 8c 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 40 00 10 42 2e 69 64 61 74 61  | ..@...................@..B.idata | 
| 51440 |  24 35 00 00 00 00 00 00 00 00 04 00 00 00 cc 00    00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00  | $5............................@. | 
| 51460 |  30 c0 2e 69 64 61 74 61 24 34 00 00 00 00 00 00    00 00 04 00 00 00 d0 00 00 00 00 00 00 00 00 00  | 0..idata$4...................... | 
| 51480 |  00 00 00 00 00 00 40 00 30 c0 02 00 00 00 10 00    09 00 00 00 00 00 09 6e 74 64 6c 6c 2e 64 6c 6c  | ......@.0..............ntdll.dll | 
| 514a0 |  28 00 13 10 07 00 00 00 03 00 00 00 00 00 00 00    07 00 0a 00 c3 0f 12 4d 69 63 72 6f 73 6f 66 74  | (......................Microsoft | 
| 514c0 |  20 28 52 29 20 4c 49 4e 4b 00 00 00 00 00 00 00    00 00 40 63 6f 6d 70 2e 69 64 c3 0f 5d 00 ff ff  | .(R).LINK.........@comp.id..]... | 
| 514e0 |  00 00 03 00 00 00 00 00 04 00 00 00 00 00 00 00    02 00 00 00 02 00 1b 00 00 00 7f 6e 74 64 6c 6c  | ...........................ntdll | 
| 51500 |  5f 4e 55 4c 4c 5f 54 48 55 4e 4b 5f 44 41 54 41    00 0a 6e 74 64 6c 6c 2e 64 6c 6c 2f 20 20 20 20  | _NULL_THUNK_DATA..ntdll.dll/.... | 
| 51520 |  20 20 31 30 39 39 36 32 32 35 39 37 20 20 20 20    20 20 20 20 20 20 20 20 20 20 30 20 20 20 20 20  | ..1099622597..............0..... | 
| 51540 |  20 20 32 34 39 20 20 20 20 20 20 20 60 0a 4c 01    02 00 c5 e8 8a 41 b8 00 00 00 02 00 00 00 00 00  | ..249.......`.L......A.......... | 
| 51560 |  00 01 2e 64 65 62 75 67 24 53 00 00 00 00 00 00    00 00 40 00 00 00 64 00 00 00 00 00 00 00 00 00  | ...debug$S........@...d......... | 
| 51580 |  00 00 00 00 00 00 40 00 10 42 2e 69 64 61 74 61    24 33 00 00 00 00 00 00 00 00 14 00 00 00 a4 00  | ......@..B.idata$3.............. | 
| 515a0 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00    30 c0 02 00 00 00 10 00 09 00 00 00 00 00 09 6e  | ..............@.0..............n | 
| 515c0 |  74 64 6c 6c 2e 64 6c 6c 28 00 13 10 07 00 00 00    03 00 00 00 00 00 00 00 07 00 0a 00 c3 0f 12 4d  | tdll.dll(......................M | 
| 515e0 |  69 63 72 6f 73 6f 66 74 20 28 52 29 20 4c 49 4e    4b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | icrosoft.(R).LINK............... | 
| 51600 |  00 00 00 00 00 00 40 63 6f 6d 70 2e 69 64 c3 0f    5d 00 ff ff 00 00 03 00 00 00 00 00 04 00 00 00  | ......@comp.id..]............... | 
| 51620 |  00 00 00 00 02 00 00 00 02 00 1d 00 00 00 5f 5f    4e 55 4c 4c 5f 49 4d 50 4f 52 54 5f 44 45 53 43  | ..............__NULL_IMPORT_DESC | 
| 51640 |  52 49 50 54 4f 52 00 0a 6e 74 64 6c 6c 2e 64 6c    6c 2f 20 20 20 20 20 20 31 30 39 39 36 32 32 35  | RIPTOR..ntdll.dll/......10996225 | 
| 51660 |  39 37 20 20 20 20 20 20 20 20 20 20 20 20 20 20    30 20 20 20 20 20 20 20 34 38 36 20 20 20 20 20  | 97..............0.......486..... | 
| 51680 |  20 20 60 0a 4c 01 03 00 c5 e8 8a 41 08 01 00 00    08 00 00 00 00 00 00 01 2e 64 65 62 75 67 24 53  | ..`.L......A.............debug$S | 
| 516a0 |  00 00 00 00 00 00 00 00 40 00 00 00 8c 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42  | ........@...................@..B | 
| 516c0 |  2e 69 64 61 74 61 24 32 00 00 00 00 00 00 00 00    14 00 00 00 cc 00 00 00 e0 00 00 00 00 00 00 00  | .idata$2........................ | 
| 516e0 |  03 00 00 00 40 00 30 c0 2e 69 64 61 74 61 24 36    00 00 00 00 00 00 00 00 0a 00 00 00 fe 00 00 00  | ....@.0..idata$6................ | 
| 51700 |  e0 00 00 00 00 00 00 00 00 00 00 00 40 00 20 c0    02 00 00 00 10 00 09 00 00 00 00 00 09 6e 74 64  | ............@................ntd | 
| 51720 |  6c 6c 2e 64 6c 6c 28 00 13 10 07 00 00 00 03 00    00 00 00 00 00 00 07 00 0a 00 c3 0f 12 4d 69 63  | ll.dll(......................Mic | 
| 51740 |  72 6f 73 6f 66 74 20 28 52 29 20 4c 49 4e 4b 00    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | rosoft.(R).LINK................. | 
| 51760 |  00 00 00 00 0c 00 00 00 03 00 00 00 07 00 00 00    00 00 04 00 00 00 07 00 10 00 00 00 05 00 00 00  | ................................ | 
| 51780 |  07 00 6e 74 64 6c 6c 2e 64 6c 6c 00 40 63 6f 6d    70 2e 69 64 c3 0f 5d 00 ff ff 00 00 03 00 00 00  | ..ntdll.dll.@comp.id..]......... | 
| 517a0 |  00 00 04 00 00 00 00 00 00 00 02 00 00 00 02 00    2e 69 64 61 74 61 24 32 40 00 00 c0 02 00 00 00  | .................idata$2@....... | 
| 517c0 |  68 00 2e 69 64 61 74 61 24 36 00 00 00 00 03 00    00 00 03 00 2e 69 64 61 74 61 24 34 40 00 00 c0  | h..idata$6...........idata$4@... | 
| 517e0 |  00 00 00 00 68 00 2e 69 64 61 74 61 24 35 40 00    00 c0 00 00 00 00 68 00 00 00 00 00 1e 00 00 00  | ....h..idata$5@.......h......... | 
| 51800 |  00 00 00 00 00 00 00 00 02 00 00 00 00 00 37 00    00 00 00 00 00 00 00 00 00 00 02 00 4e 00 00 00  | ..............7.............N... | 
| 51820 |  5f 5f 49 4d 50 4f 52 54 5f 44 45 53 43 52 49 50    54 4f 52 5f 6e 74 64 6c 6c 00 5f 5f 4e 55 4c 4c  | __IMPORT_DESCRIPTOR_ntdll.__NULL | 
| 51840 |  5f 49 4d 50 4f 52 54 5f 44 45 53 43 52 49 50 54    4f 52 00 7f 6e 74 64 6c 6c 5f 4e 55 4c 4c 5f 54  | _IMPORT_DESCRIPTOR..ntdll_NULL_T | 
| 51860 |  48 55 4e 4b 5f 44 41 54 41 00 2f 30 20 20 20 20    20 20 20 20 20 20 20 20 20 20 31 30 39 39 36 32  | HUNK_DATA./0..............109962 | 
| 51880 |  31 32 39 37 20 20 20 20 20 20 20 20 20 20 20 20    20 20 31 30 30 36 36 36 20 20 31 34 37 35 39 20  | 1297..............100666..14759. | 
| 518a0 |  20 20 20 20 60 0a 4c 01 10 00 b1 e3 8a 41 c4 33    00 00 42 00 00 00 00 00 00 00 2e 64 65 62 75 67  | ....`.L......A.3..B........debug | 
| 518c0 |  24 53 00 00 00 00 00 00 00 00 41 09 00 00 94 02    00 00 d5 0b 00 00 00 00 00 00 06 00 00 00 40 00  | $S........A...................@. | 
| 518e0 |  10 42 2e 72 64 61 74 61 00 00 00 00 00 00 00 00    00 00 08 00 00 00 11 0c 00 00 19 0c 00 00 00 00  | .B.rdata........................ | 
| 51900 |  00 00 01 00 00 00 40 10 30 40 2e 72 64 61 74 61    00 00 00 00 00 00 00 00 00 00 04 00 00 00 23 0c  | ......@.0@.rdata..............#. | 
| 51920 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 10    30 40 2e 72 64 61 74 61 00 00 00 00 00 00 00 00  | ..............@.0@.rdata........ | 
| 51940 |  00 00 08 00 00 00 27 0c 00 00 2f 0c 00 00 00 00    00 00 01 00 00 00 40 10 30 40 2e 72 64 61 74 61  | ......'.../...........@.0@.rdata | 
| 51960 |  00 00 00 00 00 00 00 00 00 00 06 00 00 00 39 0c    00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 10  | ..............9...............@. | 
| 51980 |  30 40 2e 72 64 61 74 61 00 00 00 00 00 00 00 00    00 00 08 00 00 00 3f 0c 00 00 47 0c 00 00 00 00  | 0@.rdata..............?...G..... | 
| 519a0 |  00 00 01 00 00 00 40 10 30 40 2e 72 64 61 74 61    00 00 00 00 00 00 00 00 00 00 04 00 00 00 51 0c  | ......@.0@.rdata..............Q. | 
| 519c0 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 10    30 40 2e 74 65 78 74 00 00 00 00 00 00 00 00 00  | ..............@.0@.text......... | 
| 519e0 |  00 00 2a 00 00 00 55 0c 00 00 7f 0c 00 00 89 0c    00 00 01 00 07 00 20 10 10 60 2e 64 65 62 75 67  | ..*...U..................`.debug | 
| 51a00 |  24 53 00 00 00 00 00 00 00 00 cc 00 00 00 b3 0c    00 00 7f 0d 00 00 00 00 00 00 03 00 00 00 40 10  | $S............................@. | 
| 51a20 |  10 42 2e 74 65 78 74 00 00 00 00 00 00 00 00 00    00 00 22 02 00 00 9d 0d 00 00 bf 0f 00 00 4b 10  | .B.text..........."...........K. | 
| 51a40 |  00 00 0e 00 49 00 20 10 10 60 2e 64 65 62 75 67    24 53 00 00 00 00 00 00 00 00 4c 01 00 00 01 12  | ....I....`.debug$S........L..... | 
| 51a60 |  00 00 4d 13 00 00 00 00 00 00 05 00 00 00 40 10    10 42 2e 62 73 73 00 00 00 00 00 00 00 00 00 00  | ..M...........@..B.bss.......... | 
| 51a80 |  00 00 4c 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 80 00 40 c0 2e 64 65 62 75 67  | ..L.....................@..debug | 
| 51aa0 |  24 54 00 00 00 00 00 00 00 00 64 1f 00 00 7f 13    00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00  | $T........d...................@. | 
| 51ac0 |  10 42 2e 64 65 62 75 67 24 53 00 00 00 00 00 00    00 00 33 00 00 00 e3 32 00 00 16 33 00 00 00 00  | .B.debug$S........3....2...3.... | 
| 51ae0 |  00 00 02 00 00 00 40 10 10 42 2e 64 65 62 75 67    24 53 00 00 00 00 00 00 00 00 35 00 00 00 2a 33  | ......@..B.debug$S........5...*3 | 
| 51b00 |  00 00 5f 33 00 00 00 00 00 00 02 00 00 00 40 10    10 42 2e 64 65 62 75 67 24 53 00 00 00 00 00 00  | .._3..........@..B.debug$S...... | 
| 51b20 |  00 00 3d 00 00 00 73 33 00 00 b0 33 00 00 00 00    00 00 02 00 00 00 40 10 10 42 04 00 00 00 f1 00  | ..=...s3...3..........@..B...... | 
| 51b40 |  00 00 80 00 00 00 44 00 01 11 00 00 00 00 64 3a    5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73  | ......D.......d:\dnsrv\base\crts | 
| 51b60 |  5c 63 72 74 77 33 32 5c 6d 69 73 63 5c 6e 74 5c    6f 62 6a 5c 69 33 38 36 5c 65 68 33 76 61 6c 69  | \crtw32\misc\nt\obj\i386\eh3vali | 
| 51b80 |  64 5f 75 73 65 72 2e 6f 62 6a 00 94 38 00 16 11    00 60 00 00 06 00 0d 00 0a 00 c3 0f 0d 00 0a 00  | d_user.obj..8....`.............. | 
| 51ba0 |  c3 0f 4d 69 63 72 6f 73 6f 66 74 20 28 52 29 20    4f 70 74 69 6d 69 7a 69 6e 67 20 43 6f 6d 70 69  | ..Microsoft.(R).Optimizing.Compi | 
| 51bc0 |  6c 65 72 00 00 00 f3 00 00 00 e4 00 00 00 24 54    30 20 24 65 62 70 20 3d 20 24 65 69 70 20 24 54  | ler...........$T0.$ebp.=.$eip.$T | 
| 51be0 |  30 20 34 20 2b 20 5e 20 3d 20 24 65 62 70 20 24    54 30 20 5e 20 3d 20 24 65 73 70 20 24 54 30 20  | 0.4.+.^.=.$ebp.$T0.^.=.$esp.$T0. | 
| 51c00 |  38 20 2b 20 3d 20 24 4c 20 24 54 30 20 2e 63 62    53 61 76 65 64 52 65 67 73 20 2d 20 3d 20 24 50  | 8.+.=.$L.$T0..cbSavedRegs.-.=.$P | 
| 51c20 |  20 24 54 30 20 34 20 2b 20 2e 63 62 50 61 72 61    6d 73 20 2b 20 3d 00 24 54 30 20 24 65 62 70 20  | .$T0.4.+..cbParams.+.=.$T0.$ebp. | 
| 51c40 |  3d 20 24 65 69 70 20 24 54 30 20 34 20 2b 20 5e    20 3d 20 24 65 62 70 20 24 54 30 20 5e 20 3d 20  | =.$eip.$T0.4.+.^.=.$ebp.$T0.^.=. | 
| 51c60 |  24 65 73 70 20 24 54 30 20 38 20 2b 20 3d 20 24    4c 20 24 54 30 20 2e 63 62 53 61 76 65 64 52 65  | $esp.$T0.8.+.=.$L.$T0..cbSavedRe | 
| 51c80 |  67 73 20 2d 20 3d 20 24 50 20 24 54 30 20 34 20    2b 20 2e 63 62 50 61 72 61 6d 73 20 2b 20 3d 20  | gs.-.=.$P.$T0.4.+..cbParams.+.=. | 
| 51ca0 |  24 65 62 78 20 24 54 30 20 34 30 20 2d 20 5e 20    3d 00 f1 00 00 00 00 00 00 00 1d 00 07 11 7f 10  | $ebx.$T0.40.-.^.=............... | 
| 51cc0 |  00 00 02 00 43 4f 52 5f 56 45 52 53 49 4f 4e 5f    4d 41 4a 4f 52 5f 56 32 00 19 00 0c 11 7c 10 00  | ....COR_VERSION_MAJOR_V2.....|.. | 
| 51ce0 |  00 00 00 00 00 00 00 72 67 56 61 6c 69 64 50 61    67 65 73 00 18 00 0c 11 74 00 00 00 00 00 00 00  | .......rgValidPages.....t....... | 
| 51d00 |  00 00 6e 56 61 6c 69 64 50 61 67 65 73 00 17 00    0c 11 12 00 00 00 00 00 00 00 00 00 6c 4d 6f 64  | ..nValidPages...............lMod | 
| 51d20 |  69 66 79 69 6e 67 00 1f 00 07 11 7a 10 00 00 00    00 4d 65 6d 6f 72 79 42 61 73 69 63 49 6e 66 6f  | ifying.....z.....MemoryBasicInfo | 
| 51d40 |  72 6d 61 74 69 6f 6e 00 19 00 08 11 82 10 00 00    46 4c 4f 41 54 49 4e 47 5f 53 41 56 45 5f 41 52  | rmation.........FLOATING_SAVE_AR | 
| 51d60 |  45 41 00 1a 00 08 11 8a 10 00 00 50 49 4d 41 47    45 5f 4e 54 5f 48 45 41 44 45 52 53 33 32 00 0e  | EA.........PIMAGE_NT_HEADERS32.. | 
| 51d80 |  00 08 11 66 10 00 00 5f 4e 54 5f 54 49 42 00 1c    00 08 11 68 10 00 00 45 58 43 45 50 54 49 4f 4e  | ...f..._NT_TIB.....h...EXCEPTION | 
| 51da0 |  5f 44 49 53 50 4f 53 49 54 49 4f 4e 00 0c 00 08    11 22 00 00 00 55 4c 4f 4e 47 00 16 00 08 11 59  | _DISPOSITION....."...ULONG.....Y | 
| 51dc0 |  10 00 00 5f 55 4e 49 43 4f 44 45 5f 53 54 52 49    4e 47 00 18 00 08 11 89 10 00 00 5f 45 58 43 45  | ..._UNICODE_STRING........._EXCE | 
| 51de0 |  50 54 49 4f 4e 5f 52 45 43 4f 52 44 00 0f 00 08    11 13 00 00 00 4c 4f 4e 47 4c 4f 4e 47 00 19 00  | PTION_RECORD.........LONGLONG... | 
| 51e00 |  08 11 86 10 00 00 50 45 58 43 45 50 54 49 4f 4e    5f 52 4f 55 54 49 4e 45 00 0f 00 08 11 12 00 00  | ......PEXCEPTION_ROUTINE........ | 
| 51e20 |  00 4c 4f 4e 47 5f 50 54 52 00 0d 00 08 11 22 00    00 00 53 49 5a 45 5f 54 00 0e 00 08 11 20 00 00  | .LONG_PTR....."...SIZE_T........ | 
| 51e40 |  00 42 4f 4f 4c 45 41 4e 00 15 00 08 11 59 10 00    00 55 4e 49 43 4f 44 45 5f 53 54 52 49 4e 47 00  | .BOOLEAN.....Y...UNICODE_STRING. | 
| 51e60 |  13 00 08 11 0a 10 00 00 4c 49 53 54 5f 45 4e 54    52 59 33 32 00 13 00 08 11 0a 10 00 00 4c 49 53  | ........LIST_ENTRY32.........LIS | 
| 51e80 |  54 5f 45 4e 54 52 59 33 32 00 0e 00 08 11 75 00    00 00 44 57 4f 52 44 33 32 00 20 00 08 11 2c 10  | T_ENTRY32.....u...DWORD32.....,. | 
| 51ea0 |  00 00 5f 4d 45 4d 4f 52 59 5f 42 41 53 49 43 5f    49 4e 46 4f 52 4d 41 54 49 4f 4e 00 1f 00 08 11  | .._MEMORY_BASIC_INFORMATION..... | 
| 51ec0 |  85 10 00 00 50 49 4d 41 47 45 5f 4f 50 54 49 4f    4e 41 4c 5f 48 45 41 44 45 52 33 32 00 10 00 08  | ....PIMAGE_OPTIONAL_HEADER32.... | 
| 51ee0 |  11 23 00 00 00 55 4c 4f 4e 47 4c 4f 4e 47 00 1d    00 08 11 39 10 00 00 5f 49 4d 41 47 45 5f 4f 50  | .#...ULONGLONG.....9..._IMAGE_OP | 
| 51f00 |  54 49 4f 4e 41 4c 5f 48 45 41 44 45 52 00 0d 00    08 11 22 04 00 00 50 55 4c 4f 4e 47 00 0d 00 08  | TIONAL_HEADER....."...PULONG.... | 
| 51f20 |  11 74 00 00 00 4c 4f 4e 47 33 32 00 18 00 08 11    84 10 00 00 50 49 4d 41 47 45 5f 4e 54 5f 48 45  | .t...LONG32.........PIMAGE_NT_HE | 
| 51f40 |  41 44 45 52 53 00 1f 00 08 11 2c 10 00 00 4d 45    4d 4f 52 59 5f 42 41 53 49 43 5f 49 4e 46 4f 52  | ADERS.....,...MEMORY_BASIC_INFOR | 
| 51f60 |  4d 41 54 49 4f 4e 00 1c 00 08 11 83 10 00 00 50    49 4d 41 47 45 5f 53 45 43 54 49 4f 4e 5f 48 45  | MATION.........PIMAGE_SECTION_HE | 
| 51f80 |  41 44 45 52 00 19 00 08 11 5b 10 00 00 5f 49 4d    41 47 45 5f 46 49 4c 45 5f 48 45 41 44 45 52 00  | ADER.....[..._IMAGE_FILE_HEADER. | 
| 51fa0 |  18 00 08 11 41 10 00 00 5f 53 43 4f 50 45 54 41    42 4c 45 5f 45 4e 54 52 59 00 1a 00 08 11 82 10  | ....A..._SCOPETABLE_ENTRY....... | 
| 51fc0 |  00 00 5f 46 4c 4f 41 54 49 4e 47 5f 53 41 56 45    5f 41 52 45 41 00 12 00 08 11 12 10 00 00 50 4c  | .._FLOATING_SAVE_AREA.........PL | 
| 51fe0 |  49 53 54 5f 45 4e 54 52 59 00 0e 00 08 11 21 00    00 00 77 63 68 61 72 5f 74 00 15 00 08 11 21 10  | IST_ENTRY.....!...wchar_t.....!. | 
| 52000 |  00 00 5f 4c 41 52 47 45 5f 49 4e 54 45 47 45 52    00 23 00 08 11 7f 10 00 00 52 65 70 6c 61 63 65  | .._LARGE_INTEGER.#.......Replace | 
| 52020 |  73 43 6f 72 48 64 72 4e 75 6d 65 72 69 63 44 65    66 69 6e 65 73 00 16 00 08 11 0f 10 00 00 5f 55  | sCorHdrNumericDefines........._U | 
| 52040 |  4c 41 52 47 45 5f 49 4e 54 45 47 45 52 00 0c 00    08 11 21 04 00 00 50 57 53 54 52 00 0e 00 08 11  | LARGE_INTEGER.....!...PWSTR..... | 
| 52060 |  12 00 00 00 53 53 49 5a 45 5f 54 00 0e 00 08 11    7d 10 00 00 50 43 55 57 53 54 52 00 14 00 08 11  | ....SSIZE_T.....}...PCUWSTR..... | 
| 52080 |  21 10 00 00 4c 41 52 47 45 5f 49 4e 54 45 47 45    52 00 0c 00 08 11 13 00 00 00 49 4e 54 36 34 00  | !...LARGE_INTEGER.........INT64. | 
| 520a0 |  0d 00 08 11 21 00 00 00 55 53 48 4f 52 54 00 0e    00 08 11 23 00 00 00 55 4c 4f 4e 47 36 34 00 0c  | ....!...USHORT.....#...ULONG64.. | 
| 520c0 |  00 08 11 03 04 00 00 50 56 4f 49 44 00 1c 00 08    11 48 10 00 00 5f 49 4d 41 47 45 5f 53 45 43 54  | .......PVOID.....H..._IMAGE_SECT | 
| 520e0 |  49 4f 4e 5f 48 45 41 44 45 52 00 0c 00 08 11 70    00 00 00 43 43 48 41 52 00 15 00 08 11 0f 10 00  | ION_HEADER.....p...CCHAR........ | 
| 52100 |  00 55 4c 41 52 47 45 5f 49 4e 54 45 47 45 52 00    10 00 08 11 22 00 00 00 44 57 4f 52 44 5f 50 54  | .ULARGE_INTEGER....."...DWORD_PT | 
| 52120 |  52 00 22 00 08 11 34 10 00 00 5f 45 48 33 5f 45    58 43 45 50 54 49 4f 4e 5f 52 45 47 49 53 54 52  | R."...4..._EH3_EXCEPTION_REGISTR | 
| 52140 |  41 54 49 4f 4e 00 18 00 08 11 7b 10 00 00 50 53    43 4f 50 45 54 41 42 4c 45 5f 45 4e 54 52 59 00  | ATION.....{...PSCOPETABLE_ENTRY. | 
| 52160 |  0c 00 08 11 20 00 00 00 55 43 48 41 52 00 20 00    08 11 7a 10 00 00 5f 4d 45 4d 4f 52 59 5f 49 4e  | ........UCHAR.....z..._MEMORY_IN | 
| 52180 |  46 4f 52 4d 41 54 49 4f 4e 5f 43 4c 41 53 53 00    14 00 08 11 78 10 00 00 50 4c 49 53 54 5f 45 4e  | FORMATION_CLASS.....x...PLIST_EN | 
| 521a0 |  54 52 59 36 34 00 1e 00 08 11 39 10 00 00 49 4d    41 47 45 5f 4f 50 54 49 4f 4e 41 4c 5f 48 45 41  | TRY64.....9...IMAGE_OPTIONAL_HEA | 
| 521c0 |  44 45 52 33 32 00 0f 00 08 11 77 10 00 00 5f 43    4f 4e 54 45 58 54 00 1f 00 08 11 73 10 00 00 5f  | DER32.....w..._CONTEXT.....s..._ | 
| 521e0 |  4b 53 50 49 4e 5f 4c 4f 43 4b 5f 51 55 45 55 45    5f 4e 55 4d 42 45 52 00 0e 00 08 11 74 00 00 00  | KSPIN_LOCK_QUEUE_NUMBER.....t... | 
| 52200 |  49 4e 54 5f 50 54 52 00 0c 00 08 11 24 10 00 00    5f 4c 55 49 44 00 25 00 08 11 71 10 00 00 5f 45  | INT_PTR.....$..._LUID.%...q..._E | 
| 52220 |  58 43 45 50 54 49 4f 4e 5f 52 45 47 49 53 54 52    41 54 49 4f 4e 5f 52 45 43 4f 52 44 00 0c 00 08  | XCEPTION_REGISTRATION_RECORD.... | 
| 52240 |  11 22 00 00 00 44 57 4f 52 44 00 22 00 08 11 30    10 00 00 50 45 48 33 5f 45 58 43 45 50 54 49 4f  | ."...DWORD."...0...PEH3_EXCEPTIO | 
| 52260 |  4e 5f 52 45 47 49 53 54 52 41 54 49 4f 4e 00 18    00 08 11 3f 10 00 00 5f 49 4d 41 47 45 5f 44 4f  | N_REGISTRATION.....?..._IMAGE_DO | 
| 52280 |  53 5f 48 45 41 44 45 52 00 0d 00 08 11 75 00 00    00 55 49 4e 54 33 32 00 0d 00 08 11 66 10 00 00  | S_HEADER.....u...UINT32.....f... | 
| 522a0 |  4e 54 5f 54 49 42 00 0e 00 08 11 01 10 00 00 4c    50 43 56 4f 49 44 00 0e 00 08 11 75 00 00 00 55  | NT_TIB.........LPCVOID.....u...U | 
| 522c0 |  4c 4f 4e 47 33 32 00 0e 00 08 11 23 00 00 00 44    57 4f 52 44 36 34 00 0c 00 08 11 71 00 00 00 57  | LONG32.....#...DWORD64.....q...W | 
| 522e0 |  43 48 41 52 00 0f 00 08 11 75 00 00 00 55 49 4e    54 5f 50 54 52 00 0b 00 08 11 12 00 00 00 4c 4f  | CHAR.....u...UINT_PTR.........LO | 
| 52300 |  4e 47 00 1b 00 08 11 5e 10 00 00 49 4d 41 47 45    5f 44 41 54 41 5f 44 49 52 45 43 54 4f 52 59 00  | NG.....^...IMAGE_DATA_DIRECTORY. | 
| 52320 |  1d 00 08 11 60 10 00 00 50 49 4d 41 47 45 5f 4f    50 54 49 4f 4e 41 4c 5f 48 45 41 44 45 52 00 0d  | ....`...PIMAGE_OPTIONAL_HEADER.. | 
| 52340 |  00 08 11 21 04 00 00 50 55 57 53 54 52 00 0d 00    08 11 23 00 00 00 55 49 4e 54 36 34 00 12 00 08  | ...!...PUWSTR.....#...UINT64.... | 
| 52360 |  11 14 10 00 00 5f 4c 49 53 54 5f 45 4e 54 52 59    00 0d 00 08 11 13 00 00 00 4c 4f 4e 47 36 34 00  | ....._LIST_ENTRY.........LONG64. | 
| 52380 |  20 00 08 11 5f 10 00 00 50 4d 45 4d 4f 52 59 5f    42 41 53 49 43 5f 49 4e 46 4f 52 4d 41 54 49 4f  | ...._...PMEMORY_BASIC_INFORMATIO | 
| 523a0 |  4e 00 1c 00 08 11 5e 10 00 00 5f 49 4d 41 47 45    5f 44 41 54 41 5f 44 49 52 45 43 54 4f 52 59 00  | N.....^..._IMAGE_DATA_DIRECTORY. | 
| 523c0 |  18 00 08 11 1a 10 00 00 5f 49 4d 41 47 45 5f 4e    54 5f 48 45 41 44 45 52 53 00 0c 00 08 11 74 00  | ........_IMAGE_NT_HEADERS.....t. | 
| 523e0 |  00 00 49 4e 54 33 32 00 14 00 08 11 5c 10 00 00    50 4c 49 53 54 5f 45 4e 54 52 59 33 32 00 13 00  | ..INT32.....\...PLIST_ENTRY32... | 
| 52400 |  08 11 06 10 00 00 4c 49 53 54 5f 45 4e 54 52 59    36 34 00 13 00 08 11 06 10 00 00 4c 49 53 54 5f  | ......LIST_ENTRY64.........LIST_ | 
| 52420 |  45 4e 54 52 59 36 34 00 18 00 08 11 5b 10 00 00    49 4d 41 47 45 5f 46 49 4c 45 5f 48 45 41 44 45  | ENTRY64.....[...IMAGE_FILE_HEADE | 
| 52440 |  52 00 10 00 08 11 22 00 00 00 55 4c 4f 4e 47 5f    50 54 52 00 18 00 08 11 55 10 00 00 50 49 4d 41  | R....."...ULONG_PTR.....U...PIMA | 
| 52460 |  47 45 5f 44 4f 53 5f 48 45 41 44 45 52 00 0b 00    08 11 24 10 00 00 4c 55 49 44 00 a7 01 00 00 33  | GE_DOS_HEADER.....$...LUID.....3 | 
| 52480 |  00 00 00 0b 00 ab 01 00 00 33 00 00 00 0a 00 c2    01 00 00 34 00 00 00 0b 00 c6 01 00 00 34 00 00  | .........3.........4.........4.. | 
| 524a0 |  00 0a 00 dc 01 00 00 32 00 00 00 0b 00 e0 01 00    00 32 00 00 00 0a 00 02 00 04 00 00 00 00 00 04  | .......2.........2.............. | 
| 524c0 |  00 00 00 0c 00 00 00 06 00 2f 00 00 00 04 00 06    00 00 00 00 00 04 00 00 00 12 00 00 00 06 00 5c  | ........./.....................\ | 
| 524e0 |  00 2f 00 00 00 02 00 04 00 00 00 00 00 04 00 00    00 18 00 00 00 06 00 5c 00 00 00 8b ff 55 8b ec  | ./.....................\.....U.. | 
| 52500 |  8d 45 10 50 ff 75 10 ff 75 0c 6a 00 ff 75 08 6a    ff e8 00 00 00 00 85 c0 7c 05 8b 45 10 eb 02 33  | .E.P.u..u.j..u.j........|..E...3 | 
| 52520 |  c0 5d c2 0c 00 17 00 00 00 23 00 00 00 14 00 21    00 00 00 00 00 00 00 00 00 0f 00 02 00 00 00 ff  | .].......#.....!................ | 
| 52540 |  7f 05 00 00 00 09 00 1f 00 00 00 0a 00 24 00 00    00 0d 00 26 00 00 00 0f 00 04 00 00 00 f5 00 00  | .............$.....&............ | 
| 52560 |  00 24 00 00 00 00 00 00 00 00 00 00 00 2a 00 00    00 00 00 00 00 0c 00 00 00 00 00 00 00 00 00 00  | .$...........*.................. | 
| 52580 |  00 05 00 00 00 04 00 00 00 f1 00 00 00 00 00 00    00 35 00 10 11 00 00 00 00 00 00 00 00 00 00 00  | .................5.............. | 
| 525a0 |  00 2a 00 00 00 05 00 00 00 26 00 00 00 52 10 00    00 00 00 00 00 00 00 01 45 48 5f 56 69 72 74 75  | .*.......&...R..........EH_Virtu | 
| 525c0 |  61 6c 51 75 65 72 79 00 14 00 0b 11 08 00 00 00    2d 10 00 00 6c 70 41 64 64 72 65 73 73 00 13 00  | alQuery.........-...lpAddress... | 
| 525e0 |  0b 11 0c 00 00 00 2a 10 00 00 6c 70 42 75 66 66    65 72 00 13 00 0b 11 10 00 00 00 22 00 00 00 64  | ......*...lpBuffer........."...d | 
| 52600 |  77 4c 65 6e 67 74 68 00 17 00 0b 11 10 00 00 00    22 00 00 00 52 65 74 75 72 6e 4c 65 6e 67 74 68  | wLength........."...ReturnLength | 
| 52620 |  00 02 00 06 00 0c 00 00 00 21 00 00 00 07 00 58    00 00 00 21 00 00 00 0b 00 5c 00 00 00 21 00 00  | .........!.....X...!.....\...!.. | 
| 52640 |  00 0a 00 8b ff 55 8b ec 83 ec 20 53 56 8b 75 08    8b 5e 08 f6 c3 03 75 1c 64 a1 04 00 00 00 89 45  | .....U.....SV.u..^....u.d......E | 
| 52660 |  08 64 a1 08 00 00 00 89 45 fc 3b 5d fc 72 0c 3b    5d 08 73 07 33 c0 e9 e6 01 00 00 57 8b 7e 0c 83  | .d......E.;].r.;].s.3......W.~.. | 
| 52680 |  ff ff 75 08 33 c0 40 e9 d4 01 00 00 33 d2 89 55    08 8b c3 8b 08 83 f9 ff 74 04 3b ca 73 64 83 78  | ..u.3.@.....3..U........t.;.sd.x | 
| 526a0 |  04 00 74 03 ff 45 08 42 83 c0 0c 3b d7 76 e4 83    7d 08 00 74 0c 8b 46 f8 3b 45 fc 72 45 3b c6 73  | ..t..E.B...;.v..}..t..F.;E.rE;.s | 
| 526c0 |  41 8b 0d 00 00 00 00 8b f3 81 e6 00 f0 ff ff 33    c0 85 c9 7e 0e 39 34 85 00 00 00 00 74 2b 40 3b  | A..............3...~.94.....t+@; | 
| 526e0 |  c1 7c f2 8d 45 08 50 6a 1c 8d 45 e0 50 6a 00 53    83 cf ff 57 e8 00 00 00 00 85 c0 7c 7c 8b 45 08  | .|..E.Pj..E.Pj.S...W.......||.E. | 
| 52700 |  eb 79 33 c0 e9 57 01 00 00 85 c0 0f 8e 73 ff ff    ff 33 d2 bb 00 00 00 00 42 8b fb 87 17 85 d2 0f  | .y3..W.......s...3......B....... | 
| 52720 |  85 5f ff ff ff 39 34 85 00 00 00 00 74 2a 8d 41    ff 85 c0 7c 10 39 34 85 00 00 00 00 74 03 48 79  | ._...94.....t*.A...|.94.....t.Hy | 
| 52740 |  f4 85 c0 7d 11 83 f9 10 7d 07 41 89 0d 00 00 00    00 8d 41 ff eb 02 74 18 33 d2 85 c0 7c 12 8d 0c  | ...}....}.A.......A...t.3...|... | 
| 52760 |  95 00 00 00 00 8b 39 42 3b d0 89 31 8b f7 7e ee    33 c0 87 03 e9 0b ff ff ff 33 c0 85 c0 0f 84 db  | ......9B;..1..~.3........3...... | 
| 52780 |  00 00 00 81 7d f8 00 00 00 01 0f 85 ce 00 00 00    f6 45 f4 cc 74 5a 8b 4d e4 66 81 39 4d 5a 0f 85  | ....}............E..tZ.M.f.9MZ.. | 
| 527a0 |  ba 00 00 00 8b 41 3c 03 c1 81 38 50 45 00 00 0f    85 a9 00 00 00 66 81 78 18 0b 01 0f 85 9d 00 00  | .....A<...8PE........f.x........ | 
| 527c0 |  00 2b d9 66 83 78 06 00 0f b7 48 14 8d 4c 01 18    0f 86 88 00 00 00 8b 41 0c 3b d8 72 13 8b 51 08  | .+.f.x....H..L.........A.;.r..Q. | 
| 527e0 |  03 d0 3b da 73 0a f6 41 27 80 0f 85 12 ff ff ff    33 c0 40 8b c8 ba 00 00 00 00 87 0a 85 c9 75 60  | ..;.s..A'.......3.@...........u` | 
| 52800 |  8b 0d 00 00 00 00 85 c9 8b d1 7e 13 8d 04 8d fc    ff ff ff 39 30 74 08 4a 83 e8 04 85 d2 7f f4 85  | ..........~........90t.J........ | 
| 52820 |  d2 75 2d 6a 0f 5b 3b cb 7f 02 8b d9 33 d2 85 db    7c 12 8d 04 95 00 00 00 00 8b 38 42 3b d3 89 30  | .u-j.[;.....3...|.........8B;..0 | 
| 52840 |  8b f7 7e ee 83 f9 10 7d 07 41 89 0d 00 00 00 00    33 c0 b9 00 00 00 00 87 01 e9 26 fe ff ff 8b c7  | ..~....}.A......3.........&..... | 
| 52860 |  5f 5e 5b c9 c3 80 00 00 00 34 00 00 00 06 00 95    00 00 00 33 00 00 00 06 00 b2 00 00 00 23 00 00  | _^[......4.........3.........#.. | 
| 52880 |  00 14 00 d1 00 00 00 32 00 00 00 06 00 e5 00 00    00 33 00 00 00 06 00 f5 00 00 00 33 00 00 00 06  | .......2.........3.........3.... | 
| 528a0 |  00 0a 01 00 00 34 00 00 00 06 00 1e 01 00 00 33    00 00 00 06 00 b3 01 00 00 32 00 00 00 06 00 bf  | .....4.........3.........2...... | 
| 528c0 |  01 00 00 34 00 00 00 06 00 cc 01 00 00 33 00 00    00 06 00 f2 01 00 00 33 00 00 00 06 00 09 02 00  | ...4.........3.........3........ | 
| 528e0 |  00 34 00 00 00 06 00 10 02 00 00 32 00 00 00 06    00 2d 00 00 00 00 00 00 00 00 00 d5 00 02 00 00  | .4.........2.....-.............. | 
| 52900 |  00 ff 7f 0a 00 00 00 13 00 10 00 00 00 14 00 13    00 00 00 15 00 15 00 00 00 1c 00 1b 00 00 00 1d  | ................................ | 
| 52920 |  00 1e 00 00 00 1e 00 24 00 00 00 1f 00 27 00 00    00 22 00 31 00 00 00 23 00 39 00 00 00 28 00 41  | .......$.....'...".1...#.9...(.A | 
| 52940 |  00 00 00 29 00 49 00 00 00 30 00 50 00 00 00 33    00 52 00 00 00 34 00 5b 00 00 00 36 00 61 00 00  | ...).I...0.P...3.R...4.[...6.a.. | 
| 52960 |  00 37 00 64 00 00 00 31 00 6c 00 00 00 40 00 7c    00 00 00 41 00 7e 00 00 00 4b 00 92 00 00 00 4d  | .7.d...1.l...@.|...A.~...K.....M | 
| 52980 |  00 a0 00 00 00 7b 00 bf 00 00 00 35 00 c6 00 00    00 51 00 e2 00 00 00 53 00 eb 00 00 00 56 00 f2  | .....{.....5.....Q.....S.....V.. | 
| 529a0 |  00 00 00 57 00 fb 00 00 00 56 00 fe 00 00 00 59    00 02 01 00 00 5c 00 07 01 00 00 5d 00 0e 01 00  | ...W.....V.....Y.....\.....].... | 
| 529c0 |  00 5e 00 11 01 00 00 60 00 13 01 00 00 64 00 15    01 00 00 67 00 22 01 00 00 6b 00 27 01 00 00 6c  | .^.....`.....d.....g."...k.'...l | 
| 529e0 |  00 29 01 00 00 6d 00 2d 01 00 00 6f 00 31 01 00    00 71 00 36 01 00 00 7b 00 4d 01 00 00 81 00 53  | .)...m.-...o.1...q.6...{.M.....S | 
| 52a00 |  01 00 00 92 00 5b 01 00 00 93 00 61 01 00 00 95    00 66 01 00 00 96 00 6c 01 00 00 97 00 72 01 00  | .....[.....a.....f.....l.....r.. | 
| 52a20 |  00 9a 00 78 01 00 00 9b 00 7e 01 00 00 a3 00 80    01 00 00 a6 00 93 01 00 00 aa 00 a3 01 00 00 ae  | ...x.....~...................... | 
| 52a40 |  00 a7 01 00 00 af 00 ad 01 00 00 be 00 bb 01 00    00 c0 00 bd 01 00 00 c1 00 d0 01 00 00 c2 00 dc  | ................................ | 
| 52a60 |  01 00 00 c4 00 e0 01 00 00 c8 00 e9 01 00 00 c9    00 f6 01 00 00 cb 00 fb 01 00 00 cc 00 fd 01 00  | ................................ | 
| 52a80 |  00 cd 00 01 02 00 00 cf 00 06 02 00 00 d0 00 0d    02 00 00 d2 00 16 02 00 00 d4 00 1b 02 00 00 7c  | ...............................| | 
| 52aa0 |  00 20 02 00 00 d5 00 04 00 00 00 f5 00 00 00 84    00 00 00 00 00 00 00 00 00 00 00 22 02 00 00 20  | ...........................".... | 
| 52ac0 |  00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 0a    00 00 00 04 00 00 00 09 00 00 00 17 02 00 00 20  | ................................ | 
| 52ae0 |  00 00 00 04 00 00 00 00 00 00 00 69 00 00 00 01    00 04 00 00 00 00 00 0a 00 00 00 15 02 00 00 20  | ...........i.................... | 
| 52b00 |  00 00 00 04 00 00 00 00 00 00 00 69 00 00 00 00    00 08 00 00 00 00 00 39 00 00 00 e5 01 00 00 20  | ...........i...........9........ | 
| 52b20 |  00 00 00 04 00 00 00 00 00 00 00 69 00 00 00 00    00 0c 00 00 00 00 00 f1 00 00 00 00 00 00 00 34  | ...........i...................4 | 
| 52b40 |  00 10 11 00 00 00 00 00 00 00 00 00 00 00 00 22    02 00 00 0a 00 00 00 20 02 00 00 54 10 00 00 00  | ..............."...........T.... | 
| 52b60 |  00 00 00 00 00 01 5f 56 61 6c 69 64 61 74 65 45    48 33 52 4e 00 16 00 05 11 00 00 00 00 00 00 00  | ......_ValidateEH3RN............ | 
| 52b80 |  65 78 69 74 5f 73 75 63 63 65 73 73 00 0e 00 0b    11 08 00 00 00 2f 10 00 00 70 52 4e 00 0e 00 0b  | exit_success........./...pRN.... | 
| 52ba0 |  11 e0 ff ff ff 2c 10 00 00 6d 62 69 00 14 00 0b    11 08 00 00 00 03 04 00 00 53 74 61 63 6b 42 61  | .....,...mbi.............StackBa | 
| 52bc0 |  73 65 00 13 00 0b 11 08 00 00 00 74 00 00 00 6e    46 69 6c 74 65 72 73 00 15 00 0b 11 fc ff ff ff  | se.........t...nFilters......... | 
| 52be0 |  03 04 00 00 53 74 61 63 6b 4c 69 6d 69 74 00 02    00 06 00 0c 00 00 00 2d 00 00 00 07 00 b8 00 00  | ....StackLimit.........-........ | 
| 52c00 |  00 2d 00 00 00 0b 00 bc 00 00 00 2d 00 00 00 0a    00 d2 00 00 00 2f 00 00 00 0b 00 d6 00 00 00 2f  | .-.........-........./........./ | 
| 52c20 |  00 00 00 0a 00 04 00 00 00 0a 00 01 10 03 00 00    00 01 00 f2 f1 0a 00 02 10 00 10 00 00 0a 00 00  | ................................ | 
| 52c40 |  00 0a 00 02 10 00 10 00 00 0c 00 00 00 22 00 05    15 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00  | .............".................. | 
| 52c60 |  00 00 00 4c 49 53 54 5f 45 4e 54 52 59 36 34 00    f1 0a 00 02 10 03 10 00 00 0a 00 00 00 22 00 03  | ...LIST_ENTRY64..............".. | 
| 52c80 |  12 0d 15 03 00 23 00 00 00 00 00 46 6c 69 6e 6b    00 0d 15 03 00 23 00 00 00 08 00 42 6c 69 6e 6b  | .....#.....Flink.....#.....Blink | 
| 52ca0 |  00 22 00 05 15 02 00 00 00 05 10 00 00 00 00 00    00 00 00 00 00 10 00 4c 49 53 54 5f 45 4e 54 52  | .".....................LIST_ENTR | 
| 52cc0 |  59 36 34 00 f1 22 00 05 15 00 00 80 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 4c 49 53 54 5f  | Y64..".....................LIST_ | 
| 52ce0 |  45 4e 54 52 59 33 32 00 f1 0a 00 02 10 07 10 00    00 0a 00 00 00 22 00 03 12 0d 15 03 00 22 00 00  | ENTRY32..............".......".. | 
| 52d00 |  00 00 00 46 6c 69 6e 6b 00 0d 15 03 00 22 00 00    00 04 00 42 6c 69 6e 6b 00 22 00 05 15 02 00 00  | ...Flink.....".....Blink."...... | 
| 52d20 |  00 09 10 00 00 00 00 00 00 00 00 00 00 08 00 4c    49 53 54 5f 45 4e 54 52 59 33 32 00 f1 1e 00 06  | ...............LIST_ENTRY32..... | 
| 52d40 |  15 00 00 80 00 00 00 00 00 00 00 5f 55 4c 41 52    47 45 5f 49 4e 54 45 47 45 52 00 f2 f1 2a 00 03  | ..........._ULARGE_INTEGER...*.. | 
| 52d60 |  12 0d 15 03 00 22 00 00 00 00 00 4c 6f 77 50 61    72 74 00 f2 f1 0d 15 03 00 22 00 00 00 04 00 48  | .....".....LowPart.......".....H | 
| 52d80 |  69 67 68 50 61 72 74 00 f1 1e 00 05 15 02 00 00    00 0c 10 00 00 00 00 00 00 00 00 00 00 08 00 5f  | ighPart........................_ | 
| 52da0 |  5f 75 6e 6e 61 6d 65 64 00 4a 00 03 12 0d 15 03    00 22 00 00 00 00 00 4c 6f 77 50 61 72 74 00 f2  | _unnamed.J.......".....LowPart.. | 
| 52dc0 |  f1 0d 15 03 00 22 00 00 00 04 00 48 69 67 68 50    61 72 74 00 f1 0d 15 03 00 0d 10 00 00 00 00 75  | .....".....HighPart............u | 
| 52de0 |  00 0d 15 03 00 23 00 00 00 00 00 51 75 61 64 50    61 72 74 00 f1 1e 00 06 15 04 00 00 00 0e 10 00  | .....#.....QuadPart............. | 
| 52e00 |  00 08 00 5f 55 4c 41 52 47 45 5f 49 4e 54 45 47    45 52 00 f2 f1 22 00 05 15 00 00 80 00 00 00 00  | ..._ULARGE_INTEGER...".......... | 
| 52e20 |  00 00 00 00 00 00 00 00 00 00 00 5f 4c 49 53 54    5f 45 4e 54 52 59 00 f2 f1 0a 00 02 10 10 10 00  | ..........._LIST_ENTRY.......... | 
| 52e40 |  00 0a 00 00 00 0a 00 02 10 10 10 00 00 0a 00 00    00 22 00 03 12 0d 15 03 00 12 10 00 00 00 00 46  | .................".............F | 
| 52e60 |  6c 69 6e 6b 00 0d 15 03 00 12 10 00 00 04 00 42    6c 69 6e 6b 00 22 00 05 15 02 00 00 00 13 10 00  | link...........Blink.".......... | 
| 52e80 |  00 00 00 00 00 00 00 00 00 08 00 5f 4c 49 53 54    5f 45 4e 54 52 59 00 f2 f1 26 00 05 15 00 00 80  | ..........._LIST_ENTRY...&...... | 
| 52ea0 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5f    49 4d 41 47 45 5f 4e 54 5f 48 45 41 44 45 52 53  | ..............._IMAGE_NT_HEADERS | 
| 52ec0 |  00 0a 00 02 10 15 10 00 00 0a 00 00 00 2a 00 05    15 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00  | .............*.................. | 
| 52ee0 |  00 00 00 5f 49 4d 41 47 45 5f 46 49 4c 45 5f 48    45 41 44 45 52 00 f3 f2 f1 2e 00 05 15 00 00 80  | ..._IMAGE_FILE_HEADER........... | 
| 52f00 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5f    49 4d 41 47 45 5f 4f 50 54 49 4f 4e 41 4c 5f 48  | ..............._IMAGE_OPTIONAL_H | 
| 52f20 |  45 41 44 45 52 00 f3 f2 f1 4a 00 03 12 0d 15 03    00 22 00 00 00 00 00 53 69 67 6e 61 74 75 72 65  | EADER....J.......".....Signature | 
| 52f40 |  00 0d 15 03 00 17 10 00 00 04 00 46 69 6c 65 48    65 61 64 65 72 00 f3 f2 f1 0d 15 03 00 18 10 00  | ...........FileHeader........... | 
| 52f60 |  00 18 00 4f 70 74 69 6f 6e 61 6c 48 65 61 64 65    72 00 f3 f2 f1 26 00 05 15 03 00 00 00 19 10 00  | ...OptionalHeader....&.......... | 
| 52f80 |  00 00 00 00 00 00 00 00 00 f8 00 5f 49 4d 41 47    45 5f 4e 54 5f 48 45 41 44 45 52 53 00 0a 00 01  | ..........._IMAGE_NT_HEADERS.... | 
| 52fa0 |  10 70 00 00 00 02 00 f2 f1 0a 00 02 10 1b 10 00    00 0a 00 00 00 1e 00 06 15 00 00 80 00 00 00 00  | .p.............................. | 
| 52fc0 |  00 00 00 5f 4c 41 52 47 45 5f 49 4e 54 45 47 45    52 00 f3 f2 f1 2a 00 03 12 0d 15 03 00 22 00 00  | ..._LARGE_INTEGER....*.......".. | 
| 52fe0 |  00 00 00 4c 6f 77 50 61 72 74 00 f2 f1 0d 15 03    00 12 00 00 00 04 00 48 69 67 68 50 61 72 74 00  | ...LowPart.............HighPart. | 
| 53000 |  f1 1e 00 05 15 02 00 00 00 1e 10 00 00 00 00 00    00 00 00 00 00 08 00 5f 5f 75 6e 6e 61 6d 65 64  | .......................__unnamed | 
| 53020 |  00 4a 00 03 12 0d 15 03 00 22 00 00 00 00 00 4c    6f 77 50 61 72 74 00 f2 f1 0d 15 03 00 12 00 00  | .J.......".....LowPart.......... | 
| 53040 |  00 04 00 48 69 67 68 50 61 72 74 00 f1 0d 15 03    00 1f 10 00 00 00 00 75 00 0d 15 03 00 13 00 00  | ...HighPart............u........ | 
| 53060 |  00 00 00 51 75 61 64 50 61 72 74 00 f1 1e 00 06    15 04 00 00 00 20 10 00 00 08 00 5f 4c 41 52 47  | ...QuadPart................_LARG | 
| 53080 |  45 5f 49 4e 54 45 47 45 52 00 f3 f2 f1 1a 00 05    15 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00  | E_INTEGER....................... | 
| 530a0 |  00 00 00 5f 4c 55 49 44 00 2a 00 03 12 0d 15 03    00 22 00 00 00 00 00 4c 6f 77 50 61 72 74 00 f2  | ..._LUID.*.......".....LowPart.. | 
| 530c0 |  f1 0d 15 03 00 12 00 00 00 04 00 48 69 67 68 50    61 72 74 00 f1 1a 00 05 15 02 00 00 00 23 10 00  | ...........HighPart..........#.. | 
| 530e0 |  00 00 00 00 00 00 00 00 00 08 00 5f 4c 55 49 44    00 0a 00 01 10 13 00 00 00 02 00 f2 f1 0a 00 02  | ..........._LUID................ | 
| 53100 |  10 25 10 00 00 0a 00 00 00 0a 00 01 10 21 00 00    00 01 00 f2 f1 0a 00 02 10 27 10 00 00 0a 00 00  | .%...........!...........'...... | 
| 53120 |  00 2e 00 05 15 00 00 80 00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 5f 4d 45 4d 4f 52 59 5f 42  | ......................._MEMORY_B | 
| 53140 |  41 53 49 43 5f 49 4e 46 4f 52 4d 41 54 49 4f 4e    00 0a 00 02 10 29 10 00 00 0a 00 00 00 9e 00 03  | ASIC_INFORMATION.....).......... | 
| 53160 |  12 0d 15 03 00 03 04 00 00 00 00 42 61 73 65 41    64 64 72 65 73 73 00 f2 f1 0d 15 03 00 03 04 00  | ...........BaseAddress.......... | 
| 53180 |  00 04 00 41 6c 6c 6f 63 61 74 69 6f 6e 42 61 73    65 00 f3 f2 f1 0d 15 03 00 22 00 00 00 08 00 41  | ...AllocationBase........".....A | 
| 531a0 |  6c 6c 6f 63 61 74 69 6f 6e 50 72 6f 74 65 63 74    00 0d 15 03 00 22 00 00 00 0c 00 52 65 67 69 6f  | llocationProtect.....".....Regio | 
| 531c0 |  6e 53 69 7a 65 00 f3 f2 f1 0d 15 03 00 22 00 00    00 10 00 53 74 61 74 65 00 0d 15 03 00 22 00 00  | nSize........".....State.....".. | 
| 531e0 |  00 14 00 50 72 6f 74 65 63 74 00 f2 f1 0d 15 03    00 22 00 00 00 18 00 54 79 70 65 00 f1 2e 00 05  | ...Protect.......".....Type..... | 
| 53200 |  15 07 00 00 00 2b 10 00 00 00 00 00 00 00 00 00    00 1c 00 5f 4d 45 4d 4f 52 59 5f 42 41 53 49 43  | .....+............._MEMORY_BASIC | 
| 53220 |  5f 49 4e 46 4f 52 4d 41 54 49 4f 4e 00 0a 00 02    10 00 10 00 00 0a 00 00 00 32 00 05 15 00 00 80  | _INFORMATION.............2...... | 
| 53240 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5f    45 48 33 5f 45 58 43 45 50 54 49 4f 4e 5f 52 45  | ..............._EH3_EXCEPTION_RE | 
| 53260 |  47 49 53 54 52 41 54 49 4f 4e 00 f2 f1 0a 00 02    10 2e 10 00 00 0a 00 00 00 0a 00 02 10 2e 10 00  | GISTRATION...................... | 
| 53280 |  00 0a 00 00 00 26 00 05 15 00 00 80 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 5f 53 43 4f 50  | .....&....................._SCOP | 
| 532a0 |  45 54 41 42 4c 45 5f 45 4e 54 52 59 00 0a 00 02    10 31 10 00 00 0a 00 00 00 5a 00 03 12 0d 15 03  | ETABLE_ENTRY.....1.......Z...... | 
| 532c0 |  00 30 10 00 00 00 00 4e 65 78 74 00 f1 0d 15 03    00 03 04 00 00 04 00 45 78 63 65 70 74 69 6f 6e  | .0.....Next............Exception | 
| 532e0 |  48 61 6e 64 6c 65 72 00 f1 0d 15 03 00 32 10 00    00 08 00 53 63 6f 70 65 54 61 62 6c 65 00 f3 f2  | Handler......2.....ScopeTable... | 
| 53300 |  f1 0d 15 03 00 22 00 00 00 0c 00 54 72 79 4c 65    76 65 6c 00 f1 32 00 05 15 04 00 00 00 33 10 00  | .....".....TryLevel..2.......3.. | 
| 53320 |  00 00 00 00 00 00 00 00 00 10 00 5f 45 48 33 5f    45 58 43 45 50 54 49 4f 4e 5f 52 45 47 49 53 54  | ..........._EH3_EXCEPTION_REGIST | 
| 53340 |  52 41 54 49 4f 4e 00 f2 f1 0a 00 02 10 18 10 00    00 0a 00 00 00 2a 00 05 15 00 00 80 00 00 00 00  | RATION...............*.......... | 
| 53360 |  00 00 00 00 00 00 00 00 00 00 00 5f 49 4d 41 47    45 5f 44 41 54 41 5f 44 49 52 45 43 54 4f 52 59  | ..........._IMAGE_DATA_DIRECTORY | 
| 53380 |  00 0e 00 03 15 36 10 00 00 11 00 00 00 80 00 00    f1 66 03 03 12 0d 15 03 00 21 00 00 00 00 00 4d  | .....6...........f.......!.....M | 
| 533a0 |  61 67 69 63 00 0d 15 03 00 20 00 00 00 02 00 4d    61 6a 6f 72 4c 69 6e 6b 65 72 56 65 72 73 69 6f  | agic...........MajorLinkerVersio | 
| 533c0 |  6e 00 f3 f2 f1 0d 15 03 00 20 00 00 00 03 00 4d    69 6e 6f 72 4c 69 6e 6b 65 72 56 65 72 73 69 6f  | n..............MinorLinkerVersio | 
| 533e0 |  6e 00 f3 f2 f1 0d 15 03 00 22 00 00 00 04 00 53    69 7a 65 4f 66 43 6f 64 65 00 f3 f2 f1 0d 15 03  | n........".....SizeOfCode....... | 
| 53400 |  00 22 00 00 00 08 00 53 69 7a 65 4f 66 49 6e 69    74 69 61 6c 69 7a 65 64 44 61 74 61 00 0d 15 03  | .".....SizeOfInitializedData.... | 
| 53420 |  00 22 00 00 00 0c 00 53 69 7a 65 4f 66 55 6e 69    6e 69 74 69 61 6c 69 7a 65 64 44 61 74 61 00 f2  | .".....SizeOfUninitializedData.. | 
| 53440 |  f1 0d 15 03 00 22 00 00 00 10 00 41 64 64 72 65    73 73 4f 66 45 6e 74 72 79 50 6f 69 6e 74 00 f2  | .....".....AddressOfEntryPoint.. | 
| 53460 |  f1 0d 15 03 00 22 00 00 00 14 00 42 61 73 65 4f    66 43 6f 64 65 00 f3 f2 f1 0d 15 03 00 22 00 00  | .....".....BaseOfCode........".. | 
| 53480 |  00 18 00 42 61 73 65 4f 66 44 61 74 61 00 f3 f2    f1 0d 15 03 00 22 00 00 00 1c 00 49 6d 61 67 65  | ...BaseOfData........".....Image | 
| 534a0 |  42 61 73 65 00 0d 15 03 00 22 00 00 00 20 00 53    65 63 74 69 6f 6e 41 6c 69 67 6e 6d 65 6e 74 00  | Base.....".....SectionAlignment. | 
| 534c0 |  f1 0d 15 03 00 22 00 00 00 24 00 46 69 6c 65 41    6c 69 67 6e 6d 65 6e 74 00 0d 15 03 00 21 00 00  | ....."...$.FileAlignment.....!.. | 
| 534e0 |  00 28 00 4d 61 6a 6f 72 4f 70 65 72 61 74 69 6e    67 53 79 73 74 65 6d 56 65 72 73 69 6f 6e 00 f2  | .(.MajorOperatingSystemVersion.. | 
| 53500 |  f1 0d 15 03 00 21 00 00 00 2a 00 4d 69 6e 6f 72    4f 70 65 72 61 74 69 6e 67 53 79 73 74 65 6d 56  | .....!...*.MinorOperatingSystemV | 
| 53520 |  65 72 73 69 6f 6e 00 f2 f1 0d 15 03 00 21 00 00    00 2c 00 4d 61 6a 6f 72 49 6d 61 67 65 56 65 72  | ersion.......!...,.MajorImageVer | 
| 53540 |  73 69 6f 6e 00 0d 15 03 00 21 00 00 00 2e 00 4d    69 6e 6f 72 49 6d 61 67 65 56 65 72 73 69 6f 6e  | sion.....!.....MinorImageVersion | 
| 53560 |  00 0d 15 03 00 21 00 00 00 30 00 4d 61 6a 6f 72    53 75 62 73 79 73 74 65 6d 56 65 72 73 69 6f 6e  | .....!...0.MajorSubsystemVersion | 
| 53580 |  00 0d 15 03 00 21 00 00 00 32 00 4d 69 6e 6f 72    53 75 62 73 79 73 74 65 6d 56 65 72 73 69 6f 6e  | .....!...2.MinorSubsystemVersion | 
| 535a0 |  00 0d 15 03 00 22 00 00 00 34 00 57 69 6e 33 32    56 65 72 73 69 6f 6e 56 61 6c 75 65 00 0d 15 03  | ....."...4.Win32VersionValue.... | 
| 535c0 |  00 22 00 00 00 38 00 53 69 7a 65 4f 66 49 6d 61    67 65 00 f2 f1 0d 15 03 00 22 00 00 00 3c 00 53  | ."...8.SizeOfImage......."...<.S | 
| 535e0 |  69 7a 65 4f 66 48 65 61 64 65 72 73 00 0d 15 03    00 22 00 00 00 40 00 43 68 65 63 6b 53 75 6d 00  | izeOfHeaders....."...@.CheckSum. | 
| 53600 |  f1 0d 15 03 00 21 00 00 00 44 00 53 75 62 73 79    73 74 65 6d 00 0d 15 03 00 21 00 00 00 46 00 44  | .....!...D.Subsystem.....!...F.D | 
| 53620 |  6c 6c 43 68 61 72 61 63 74 65 72 69 73 74 69 63    73 00 f3 f2 f1 0d 15 03 00 22 00 00 00 48 00 53  | llCharacteristics........"...H.S | 
| 53640 |  69 7a 65 4f 66 53 74 61 63 6b 52 65 73 65 72 76    65 00 f3 f2 f1 0d 15 03 00 22 00 00 00 4c 00 53  | izeOfStackReserve........"...L.S | 
| 53660 |  69 7a 65 4f 66 53 74 61 63 6b 43 6f 6d 6d 69 74    00 0d 15 03 00 22 00 00 00 50 00 53 69 7a 65 4f  | izeOfStackCommit....."...P.SizeO | 
| 53680 |  66 48 65 61 70 52 65 73 65 72 76 65 00 0d 15 03    00 22 00 00 00 54 00 53 69 7a 65 4f 66 48 65 61  | fHeapReserve....."...T.SizeOfHea | 
| 536a0 |  70 43 6f 6d 6d 69 74 00 f1 0d 15 03 00 22 00 00    00 58 00 4c 6f 61 64 65 72 46 6c 61 67 73 00 f2  | pCommit......"...X.LoaderFlags.. | 
| 536c0 |  f1 0d 15 03 00 22 00 00 00 5c 00 4e 75 6d 62 65    72 4f 66 52 76 61 41 6e 64 53 69 7a 65 73 00 f2  | ....."...\.NumberOfRvaAndSizes.. | 
| 536e0 |  f1 0d 15 03 00 37 10 00 00 60 00 44 61 74 61 44    69 72 65 63 74 6f 72 79 00 2e 00 05 15 1f 00 00  | .....7...`.DataDirectory........ | 
| 53700 |  00 38 10 00 00 00 00 00 00 00 00 00 00 e0 00 5f    49 4d 41 47 45 5f 4f 50 54 49 4f 4e 41 4c 5f 48  | .8............._IMAGE_OPTIONAL_H | 
| 53720 |  45 41 44 45 52 00 f3 f2 f1 26 00 05 15 00 00 80    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5f  | EADER....&....................._ | 
| 53740 |  49 4d 41 47 45 5f 44 4f 53 5f 48 45 41 44 45 52    00 0a 00 02 10 3a 10 00 00 0a 00 00 00 0e 00 03  | IMAGE_DOS_HEADER.....:.......... | 
| 53760 |  15 21 00 00 00 11 00 00 00 08 00 00 f1 0e 00 03    15 21 00 00 00 11 00 00 00 14 00 00 f1 6e 01 03  | .!...............!...........n.. | 
| 53780 |  12 0d 15 03 00 21 00 00 00 00 00 65 5f 6d 61 67    69 63 00 f2 f1 0d 15 03 00 21 00 00 00 02 00 65  | .....!.....e_magic.......!.....e | 
| 537a0 |  5f 63 62 6c 70 00 f3 f2 f1 0d 15 03 00 21 00 00    00 04 00 65 5f 63 70 00 f1 0d 15 03 00 21 00 00  | _cblp........!.....e_cp......!.. | 
| 537c0 |  00 06 00 65 5f 63 72 6c 63 00 f3 f2 f1 0d 15 03    00 21 00 00 00 08 00 65 5f 63 70 61 72 68 64 72  | ...e_crlc........!.....e_cparhdr | 
| 537e0 |  00 0d 15 03 00 21 00 00 00 0a 00 65 5f 6d 69 6e    61 6c 6c 6f 63 00 f3 f2 f1 0d 15 03 00 21 00 00  | .....!.....e_minalloc........!.. | 
| 53800 |  00 0c 00 65 5f 6d 61 78 61 6c 6c 6f 63 00 f3 f2    f1 0d 15 03 00 21 00 00 00 0e 00 65 5f 73 73 00  | ...e_maxalloc........!.....e_ss. | 
| 53820 |  f1 0d 15 03 00 21 00 00 00 10 00 65 5f 73 70 00    f1 0d 15 03 00 21 00 00 00 12 00 65 5f 63 73 75  | .....!.....e_sp......!.....e_csu | 
| 53840 |  6d 00 f3 f2 f1 0d 15 03 00 21 00 00 00 14 00 65    5f 69 70 00 f1 0d 15 03 00 21 00 00 00 16 00 65  | m........!.....e_ip......!.....e | 
| 53860 |  5f 63 73 00 f1 0d 15 03 00 21 00 00 00 18 00 65    5f 6c 66 61 72 6c 63 00 f1 0d 15 03 00 21 00 00  | _cs......!.....e_lfarlc......!.. | 
| 53880 |  00 1a 00 65 5f 6f 76 6e 6f 00 f3 f2 f1 0d 15 03    00 3c 10 00 00 1c 00 65 5f 72 65 73 00 0d 15 03  | ...e_ovno........<.....e_res.... | 
| 538a0 |  00 21 00 00 00 24 00 65 5f 6f 65 6d 69 64 00 f2    f1 0d 15 03 00 21 00 00 00 26 00 65 5f 6f 65 6d  | .!...$.e_oemid.......!...&.e_oem | 
| 538c0 |  69 6e 66 6f 00 0d 15 03 00 3d 10 00 00 28 00 65    5f 72 65 73 32 00 f3 f2 f1 0d 15 03 00 12 00 00  | info.....=...(.e_res2........... | 
| 538e0 |  00 3c 00 65 5f 6c 66 61 6e 65 77 00 f1 26 00 05    15 13 00 00 00 3e 10 00 00 00 00 00 00 00 00 00  | .<.e_lfanew..&.......>.......... | 
| 53900 |  00 40 00 5f 49 4d 41 47 45 5f 44 4f 53 5f 48 45    41 44 45 52 00 4e 00 03 12 0d 15 03 00 22 00 00  | .@._IMAGE_DOS_HEADER.N.......".. | 
| 53920 |  00 00 00 45 6e 63 6c 6f 73 69 6e 67 4c 65 76 65    6c 00 f3 f2 f1 0d 15 03 00 03 04 00 00 04 00 46  | ...EnclosingLevel..............F | 
| 53940 |  69 6c 74 65 72 46 75 6e 63 00 f3 f2 f1 0d 15 03    00 03 04 00 00 08 00 48 61 6e 64 6c 65 72 46 75  | ilterFunc..............HandlerFu | 
| 53960 |  6e 63 00 f2 f1 26 00 05 15 03 00 00 00 40 10 00    00 00 00 00 00 00 00 00 00 0c 00 5f 53 43 4f 50  | nc...&.......@............._SCOP | 
| 53980 |  45 54 41 42 4c 45 5f 45 4e 54 52 59 00 2a 00 05    15 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00  | ETABLE_ENTRY.*.................. | 
| 539a0 |  00 00 00 5f 49 4d 41 47 45 5f 53 45 43 54 49 4f    4e 5f 48 45 41 44 45 52 00 0a 00 02 10 42 10 00  | ..._IMAGE_SECTION_HEADER.....B.. | 
| 539c0 |  00 0a 00 00 00 0e 00 03 15 20 00 00 00 11 00 00    00 08 00 00 f1 36 00 03 12 0d 15 03 00 22 00 00  | .....................6.......".. | 
| 539e0 |  00 00 00 50 68 79 73 69 63 61 6c 41 64 64 72 65    73 73 00 f2 f1 0d 15 03 00 22 00 00 00 00 00 56  | ...PhysicalAddress.......".....V | 
| 53a00 |  69 72 74 75 61 6c 53 69 7a 65 00 f2 f1 16 00 06    15 02 00 00 00 45 10 00 00 04 00 5f 5f 75 6e 6e  | irtualSize...........E.....__unn | 
| 53a20 |  61 6d 65 64 00 0e 01 03 12 0d 15 03 00 44 10 00    00 00 00 4e 61 6d 65 00 f1 0d 15 03 00 46 10 00  | amed.........D.....Name......F.. | 
| 53a40 |  00 08 00 4d 69 73 63 00 f1 0d 15 03 00 22 00 00    00 0c 00 56 69 72 74 75 61 6c 41 64 64 72 65 73  | ...Misc......".....VirtualAddres | 
| 53a60 |  73 00 f3 f2 f1 0d 15 03 00 22 00 00 00 10 00 53    69 7a 65 4f 66 52 61 77 44 61 74 61 00 0d 15 03  | s........".....SizeOfRawData.... | 
| 53a80 |  00 22 00 00 00 14 00 50 6f 69 6e 74 65 72 54 6f    52 61 77 44 61 74 61 00 f1 0d 15 03 00 22 00 00  | .".....PointerToRawData......".. | 
| 53aa0 |  00 18 00 50 6f 69 6e 74 65 72 54 6f 52 65 6c 6f    63 61 74 69 6f 6e 73 00 f1 0d 15 03 00 22 00 00  | ...PointerToRelocations......".. | 
| 53ac0 |  00 1c 00 50 6f 69 6e 74 65 72 54 6f 4c 69 6e 65    6e 75 6d 62 65 72 73 00 f1 0d 15 03 00 21 00 00  | ...PointerToLinenumbers......!.. | 
| 53ae0 |  00 20 00 4e 75 6d 62 65 72 4f 66 52 65 6c 6f 63    61 74 69 6f 6e 73 00 f2 f1 0d 15 03 00 21 00 00  | ...NumberOfRelocations.......!.. | 
| 53b00 |  00 22 00 4e 75 6d 62 65 72 4f 66 4c 69 6e 65 6e    75 6d 62 65 72 73 00 f2 f1 0d 15 03 00 22 00 00  | .".NumberOfLinenumbers.......".. | 
| 53b20 |  00 24 00 43 68 61 72 61 63 74 65 72 69 73 74 69    63 73 00 f2 f1 2a 00 05 15 0a 00 00 00 47 10 00  | .$.Characteristics...*.......G.. | 
| 53b40 |  00 00 00 00 00 00 00 00 00 28 00 5f 49 4d 41 47    45 5f 53 45 43 54 49 4f 4e 5f 48 45 41 44 45 52  | .........(._IMAGE_SECTION_HEADER | 
| 53b60 |  00 12 00 01 12 03 00 00 00 75 04 00 00 75 00 00    00 75 00 00 00 0e 00 08 10 20 00 00 00 00 00 03  | .........u...u...u.............. | 
| 53b80 |  00 49 10 00 00 12 00 01 12 03 00 00 00 23 04 00    00 23 00 00 00 23 00 00 00 0e 00 08 10 20 00 00  | .I...........#...#...#.......... | 
| 53ba0 |  00 00 00 03 00 4b 10 00 00 12 00 01 12 03 00 00    00 74 04 00 00 74 00 00 00 74 00 00 00 0e 00 08  | .....K...........t...t...t...... | 
| 53bc0 |  10 20 00 00 00 00 00 03 00 4d 10 00 00 12 00 01    12 03 00 00 00 13 04 00 00 13 00 00 00 13 00 00  | .........M...................... | 
| 53be0 |  00 0e 00 08 10 20 00 00 00 00 00 03 00 4f 10 00    00 12 00 01 12 03 00 00 00 2d 10 00 00 2a 10 00  | .............O...........-...*.. | 
| 53c00 |  00 22 00 00 00 0e 00 08 10 22 00 00 00 07 00 03    00 51 10 00 00 0a 00 01 12 01 00 00 00 2f 10 00  | .".......".......Q.........../.. | 
| 53c20 |  00 0e 00 08 10 74 00 00 00 00 00 01 00 53 10 00    00 0a 00 02 10 3a 10 00 00 0a 00 00 00 26 00 05  | .....t.......S.......:.......&.. | 
| 53c40 |  15 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00    00 00 00 5f 55 4e 49 43 4f 44 45 5f 53 54 52 49  | ..................._UNICODE_STRI | 
| 53c60 |  4e 47 00 f2 f1 0a 00 01 10 56 10 00 00 01 00 f2    f1 42 00 03 12 0d 15 03 00 21 00 00 00 00 00 4c  | NG.......V.......B.......!.....L | 
| 53c80 |  65 6e 67 74 68 00 f3 f2 f1 0d 15 03 00 21 00 00    00 02 00 4d 61 78 69 6d 75 6d 4c 65 6e 67 74 68  | ength........!.....MaximumLength | 
| 53ca0 |  00 0d 15 03 00 21 04 00 00 04 00 42 75 66 66 65    72 00 f3 f2 f1 26 00 05 15 03 00 00 00 58 10 00  | .....!.....Buffer....&.......X.. | 
| 53cc0 |  00 00 00 00 00 00 00 00 00 08 00 5f 55 4e 49 43    4f 44 45 5f 53 54 52 49 4e 47 00 f2 f1 c2 00 03  | ..........._UNICODE_STRING...... | 
| 53ce0 |  12 0d 15 03 00 21 00 00 00 00 00 4d 61 63 68 69    6e 65 00 f2 f1 0d 15 03 00 21 00 00 00 02 00 4e  | .....!.....Machine.......!.....N | 
| 53d00 |  75 6d 62 65 72 4f 66 53 65 63 74 69 6f 6e 73 00    f1 0d 15 03 00 22 00 00 00 04 00 54 69 6d 65 44  | umberOfSections......".....TimeD | 
| 53d20 |  61 74 65 53 74 61 6d 70 00 0d 15 03 00 22 00 00    00 08 00 50 6f 69 6e 74 65 72 54 6f 53 79 6d 62  | ateStamp.....".....PointerToSymb | 
| 53d40 |  6f 6c 54 61 62 6c 65 00 f1 0d 15 03 00 22 00 00    00 0c 00 4e 75 6d 62 65 72 4f 66 53 79 6d 62 6f  | olTable......".....NumberOfSymbo | 
| 53d60 |  6c 73 00 f2 f1 0d 15 03 00 21 00 00 00 10 00 53    69 7a 65 4f 66 4f 70 74 69 6f 6e 61 6c 48 65 61  | ls.......!.....SizeOfOptionalHea | 
| 53d80 |  64 65 72 00 f1 0d 15 03 00 21 00 00 00 12 00 43    68 61 72 61 63 74 65 72 69 73 74 69 63 73 00 f2  | der......!.....Characteristics.. | 
| 53da0 |  f1 2a 00 05 15 07 00 00 00 5a 10 00 00 00 00 00    00 00 00 00 00 14 00 5f 49 4d 41 47 45 5f 46 49  | .*.......Z............._IMAGE_FI | 
| 53dc0 |  4c 45 5f 48 45 41 44 45 52 00 f3 f2 f1 0a 00 02    10 07 10 00 00 0a 00 00 00 2e 00 03 12 0d 15 03  | LE_HEADER....................... | 
| 53de0 |  00 22 00 00 00 00 00 56 69 72 74 75 61 6c 41 64    64 72 65 73 73 00 f3 f2 f1 0d 15 03 00 22 00 00  | .".....VirtualAddress........".. | 
| 53e00 |  00 04 00 53 69 7a 65 00 f1 2a 00 05 15 02 00 00    00 5d 10 00 00 00 00 00 00 00 00 00 00 08 00 5f  | ...Size..*.......]............._ | 
| 53e20 |  49 4d 41 47 45 5f 44 41 54 41 5f 44 49 52 45 43    54 4f 52 59 00 0a 00 02 10 29 10 00 00 0a 00 00  | IMAGE_DATA_DIRECTORY.....)...... | 
| 53e40 |  00 0a 00 02 10 18 10 00 00 0a 00 00 00 1e 00 05    15 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00  | ................................ | 
| 53e60 |  00 00 00 5f 4e 54 5f 54 49 42 00 f2 f1 36 00 05    15 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00  | ..._NT_TIB...6.................. | 
| 53e80 |  00 00 00 5f 45 58 43 45 50 54 49 4f 4e 5f 52 45    47 49 53 54 52 41 54 49 4f 4e 5f 52 45 43 4f 52  | ..._EXCEPTION_REGISTRATION_RECOR | 
| 53ea0 |  44 00 f3 f2 f1 0a 00 02 10 62 10 00 00 0a 00 00    00 0a 00 02 10 61 10 00 00 0a 00 00 00 b6 00 03  | D........b...........a.......... | 
| 53ec0 |  12 0d 15 03 00 63 10 00 00 00 00 45 78 63 65 70    74 69 6f 6e 4c 69 73 74 00 0d 15 03 00 03 04 00  | .....c.....ExceptionList........ | 
| 53ee0 |  00 04 00 53 74 61 63 6b 42 61 73 65 00 0d 15 03    00 03 04 00 00 08 00 53 74 61 63 6b 4c 69 6d 69  | ...StackBase...........StackLimi | 
| 53f00 |  74 00 f3 f2 f1 0d 15 03 00 03 04 00 00 0c 00 53    75 62 53 79 73 74 65 6d 54 69 62 00 f1 0d 15 03  | t..............SubSystemTib..... | 
| 53f20 |  00 03 04 00 00 10 00 46 69 62 65 72 44 61 74 61    00 0d 15 03 00 22 00 00 00 10 00 56 65 72 73 69  | .......FiberData.....".....Versi | 
| 53f40 |  6f 6e 00 f2 f1 0d 15 03 00 03 04 00 00 14 00 41    72 62 69 74 72 61 72 79 55 73 65 72 50 6f 69 6e  | on.............ArbitraryUserPoin | 
| 53f60 |  74 65 72 00 f1 0d 15 03 00 64 10 00 00 18 00 53    65 6c 66 00 f1 1e 00 05 15 08 00 00 00 65 10 00  | ter......d.....Self..........e.. | 
| 53f80 |  00 00 00 00 00 00 00 00 00 1c 00 5f 4e 54 5f 54    49 42 00 f2 f1 86 00 03 12 02 15 03 00 00 00 45  | ..........._NT_TIB.............E | 
| 53fa0 |  78 63 65 70 74 69 6f 6e 43 6f 6e 74 69 6e 75 65    45 78 65 63 75 74 69 6f 6e 00 f3 f2 f1 02 15 03  | xceptionContinueExecution....... | 
| 53fc0 |  00 01 00 45 78 63 65 70 74 69 6f 6e 43 6f 6e 74    69 6e 75 65 53 65 61 72 63 68 00 f2 f1 02 15 03  | ...ExceptionContinueSearch...... | 
| 53fe0 |  00 02 00 45 78 63 65 70 74 69 6f 6e 4e 65 73 74    65 64 45 78 63 65 70 74 69 6f 6e 00 f1 02 15 03  | ...ExceptionNestedException..... | 
| 54000 |  00 03 00 45 78 63 65 70 74 69 6f 6e 43 6f 6c 6c    69 64 65 64 55 6e 77 69 6e 64 00 f2 f1 26 00 07  | ...ExceptionCollidedUnwind...&.. | 
| 54020 |  15 04 00 00 00 74 00 00 00 67 10 00 00 5f 45 58    43 45 50 54 49 4f 4e 5f 44 49 53 50 4f 53 49 54  | .....t...g..._EXCEPTION_DISPOSIT | 
| 54040 |  49 4f 4e 00 f1 26 00 05 15 00 00 80 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 5f 45 58 43 45  | ION..&....................._EXCE | 
| 54060 |  50 54 49 4f 4e 5f 52 45 43 4f 52 44 00 0a 00 02    10 69 10 00 00 0a 00 00 00 1e 00 05 15 00 00 80  | PTION_RECORD.....i.............. | 
| 54080 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 5f    43 4f 4e 54 45 58 54 00 f1 0a 00 02 10 6b 10 00  | ..............._CONTEXT......k.. | 
| 540a0 |  00 0a 00 00 00 16 00 01 12 04 00 00 00 6a 10 00    00 03 04 00 00 6c 10 00 00 03 04 00 00 0e 00 08  | .............j.......l.......... | 
| 540c0 |  10 68 10 00 00 00 00 04 00 6d 10 00 00 0a 00 02    10 6e 10 00 00 0a 00 00 00 26 00 03 12 0d 15 03  | .h.......m.......n.......&...... | 
| 540e0 |  00 63 10 00 00 00 00 4e 65 78 74 00 f1 0d 15 03    00 6f 10 00 00 04 00 48 61 6e 64 6c 65 72 00 f2  | .c.....Next......o.....Handler.. | 
| 54100 |  f1 36 00 05 15 02 00 00 00 70 10 00 00 00 00 00    00 00 00 00 00 08 00 5f 45 58 43 45 50 54 49 4f  | .6.......p............._EXCEPTIO | 
| 54120 |  4e 5f 52 45 47 49 53 54 52 41 54 49 4f 4e 5f 52    45 43 4f 52 44 00 f3 f2 f1 3a 02 03 12 02 15 03  | N_REGISTRATION_RECORD....:...... | 
| 54140 |  00 00 00 4c 6f 63 6b 51 75 65 75 65 44 69 73 70    61 74 63 68 65 72 4c 6f 63 6b 00 f2 f1 02 15 03  | ...LockQueueDispatcherLock...... | 
| 54160 |  00 01 00 4c 6f 63 6b 51 75 65 75 65 55 6e 75 73    65 64 53 70 61 72 65 31 00 02 15 03 00 02 00 4c  | ...LockQueueUnusedSpare1.......L | 
| 54180 |  6f 63 6b 51 75 65 75 65 50 66 6e 4c 6f 63 6b 00    f1 02 15 03 00 03 00 4c 6f 63 6b 51 75 65 75 65  | ockQueuePfnLock........LockQueue | 
| 541a0 |  53 79 73 74 65 6d 53 70 61 63 65 4c 6f 63 6b 00    f1 02 15 03 00 04 00 4c 6f 63 6b 51 75 65 75 65  | SystemSpaceLock........LockQueue | 
| 541c0 |  56 61 63 62 4c 6f 63 6b 00 02 15 03 00 05 00 4c    6f 63 6b 51 75 65 75 65 4d 61 73 74 65 72 4c 6f  | VacbLock.......LockQueueMasterLo | 
| 541e0 |  63 6b 00 f2 f1 02 15 03 00 06 00 4c 6f 63 6b 51    75 65 75 65 4e 6f 6e 50 61 67 65 64 50 6f 6f 6c  | ck.........LockQueueNonPagedPool | 
| 54200 |  4c 6f 63 6b 00 02 15 03 00 07 00 4c 6f 63 6b 51    75 65 75 65 49 6f 43 61 6e 63 65 6c 4c 6f 63 6b  | Lock.......LockQueueIoCancelLock | 
| 54220 |  00 02 15 03 00 08 00 4c 6f 63 6b 51 75 65 75 65    57 6f 72 6b 51 75 65 75 65 4c 6f 63 6b 00 f3 f2  | .......LockQueueWorkQueueLock... | 
| 54240 |  f1 02 15 03 00 09 00 4c 6f 63 6b 51 75 65 75 65    49 6f 56 70 62 4c 6f 63 6b 00 f3 f2 f1 02 15 03  | .......LockQueueIoVpbLock....... | 
| 54260 |  00 0a 00 4c 6f 63 6b 51 75 65 75 65 49 6f 44 61    74 61 62 61 73 65 4c 6f 63 6b 00 f2 f1 02 15 03  | ...LockQueueIoDatabaseLock...... | 
| 54280 |  00 0b 00 4c 6f 63 6b 51 75 65 75 65 49 6f 43 6f    6d 70 6c 65 74 69 6f 6e 4c 6f 63 6b 00 02 15 03  | ...LockQueueIoCompletionLock.... | 
| 542a0 |  00 0c 00 4c 6f 63 6b 51 75 65 75 65 4e 74 66 73    53 74 72 75 63 74 4c 6f 63 6b 00 f2 f1 02 15 03  | ...LockQueueNtfsStructLock...... | 
| 542c0 |  00 0d 00 4c 6f 63 6b 51 75 65 75 65 41 66 64 57    6f 72 6b 51 75 65 75 65 4c 6f 63 6b 00 02 15 03  | ...LockQueueAfdWorkQueueLock.... | 
| 542e0 |  00 0e 00 4c 6f 63 6b 51 75 65 75 65 42 63 62 4c    6f 63 6b 00 f1 02 15 03 00 0f 00 4c 6f 63 6b 51  | ...LockQueueBcbLock........LockQ | 
| 54300 |  75 65 75 65 4d 6d 4e 6f 6e 50 61 67 65 64 50 6f    6f 6c 4c 6f 63 6b 00 f2 f1 02 15 03 00 10 00 4c  | ueueMmNonPagedPoolLock.........L | 
| 54320 |  6f 63 6b 51 75 65 75 65 55 6e 75 73 65 64 53 70    61 72 65 31 36 00 f3 f2 f1 02 15 03 00 11 00 4c  | ockQueueUnusedSpare16..........L | 
| 54340 |  6f 63 6b 51 75 65 75 65 54 69 6d 65 72 54 61 62    6c 65 4c 6f 63 6b 00 f2 f1 02 15 03 00 21 00 4c  | ockQueueTimerTableLock.......!.L | 
| 54360 |  6f 63 6b 51 75 65 75 65 4d 61 78 69 6d 75 6d 4c    6f 63 6b 00 f1 2a 00 07 15 13 00 00 00 74 00 00  | ockQueueMaximumLock..*.......t.. | 
| 54380 |  00 72 10 00 00 5f 4b 53 50 49 4e 5f 4c 4f 43 4b    5f 51 55 45 55 45 5f 4e 55 4d 42 45 52 00 f3 f2  | .r..._KSPIN_LOCK_QUEUE_NUMBER... | 
| 543a0 |  f1 2a 00 05 15 00 00 80 00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 5f 46 4c 4f 41 54 49 4e 47  | .*....................._FLOATING | 
| 543c0 |  5f 53 41 56 45 5f 41 52 45 41 00 f2 f1 0e 00 03    15 20 00 00 00 11 00 00 00 00 02 00 f1 ae 01 03  | _SAVE_AREA...................... | 
| 543e0 |  12 0d 15 03 00 22 00 00 00 00 00 43 6f 6e 74 65    78 74 46 6c 61 67 73 00 f1 0d 15 03 00 22 00 00  | .....".....ContextFlags......".. | 
| 54400 |  00 04 00 44 72 30 00 f2 f1 0d 15 03 00 22 00 00    00 08 00 44 72 31 00 f2 f1 0d 15 03 00 22 00 00  | ...Dr0.......".....Dr1.......".. | 
| 54420 |  00 0c 00 44 72 32 00 f2 f1 0d 15 03 00 22 00 00    00 10 00 44 72 33 00 f2 f1 0d 15 03 00 22 00 00  | ...Dr2.......".....Dr3.......".. | 
| 54440 |  00 14 00 44 72 36 00 f2 f1 0d 15 03 00 22 00 00    00 18 00 44 72 37 00 f2 f1 0d 15 03 00 74 10 00  | ...Dr6.......".....Dr7.......t.. | 
| 54460 |  00 1c 00 46 6c 6f 61 74 53 61 76 65 00 0d 15 03    00 22 00 00 00 8c 00 53 65 67 47 73 00 0d 15 03  | ...FloatSave.....".....SegGs.... | 
| 54480 |  00 22 00 00 00 90 00 53 65 67 46 73 00 0d 15 03    00 22 00 00 00 94 00 53 65 67 45 73 00 0d 15 03  | .".....SegFs.....".....SegEs.... | 
| 544a0 |  00 22 00 00 00 98 00 53 65 67 44 73 00 0d 15 03    00 22 00 00 00 9c 00 45 64 69 00 f2 f1 0d 15 03  | .".....SegDs.....".....Edi...... | 
| 544c0 |  00 22 00 00 00 a0 00 45 73 69 00 f2 f1 0d 15 03    00 22 00 00 00 a4 00 45 62 78 00 f2 f1 0d 15 03  | .".....Esi.......".....Ebx...... | 
| 544e0 |  00 22 00 00 00 a8 00 45 64 78 00 f2 f1 0d 15 03    00 22 00 00 00 ac 00 45 63 78 00 f2 f1 0d 15 03  | .".....Edx.......".....Ecx...... | 
| 54500 |  00 22 00 00 00 b0 00 45 61 78 00 f2 f1 0d 15 03    00 22 00 00 00 b4 00 45 62 70 00 f2 f1 0d 15 03  | .".....Eax.......".....Ebp...... | 
| 54520 |  00 22 00 00 00 b8 00 45 69 70 00 f2 f1 0d 15 03    00 22 00 00 00 bc 00 53 65 67 43 73 00 0d 15 03  | .".....Eip.......".....SegCs.... | 
| 54540 |  00 22 00 00 00 c0 00 45 46 6c 61 67 73 00 f3 f2    f1 0d 15 03 00 22 00 00 00 c4 00 45 73 70 00 f2  | .".....EFlags........".....Esp.. | 
| 54560 |  f1 0d 15 03 00 22 00 00 00 c8 00 53 65 67 53 73    00 0d 15 03 00 75 10 00 00 cc 00 45 78 74 65 6e  | .....".....SegSs.....u.....Exten | 
| 54580 |  64 65 64 52 65 67 69 73 74 65 72 73 00 1e 00 05    15 19 00 00 00 76 10 00 00 00 00 00 00 00 00 00  | dedRegisters.........v.......... | 
| 545a0 |  00 cc 02 5f 43 4f 4e 54 45 58 54 00 f1 0a 00 02    10 03 10 00 00 0a 00 00 00 6e 00 03 12 02 15 03  | ..._CONTEXT..............n...... | 
| 545c0 |  00 00 00 4d 65 6d 6f 72 79 42 61 73 69 63 49 6e    66 6f 72 6d 61 74 69 6f 6e 00 f3 f2 f1 02 15 03  | ...MemoryBasicInformation....... | 
| 545e0 |  00 01 00 4d 65 6d 6f 72 79 57 6f 72 6b 69 6e 67    53 65 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 00 f2  | ...MemoryWorkingSetInformation.. | 
| 54600 |  f1 02 15 03 00 02 00 4d 65 6d 6f 72 79 4d 61 70    70 65 64 46 69 6c 65 6e 61 6d 65 49 6e 66 6f 72  | .......MemoryMappedFilenameInfor | 
| 54620 |  6d 61 74 69 6f 6e 00 f2 f1 2a 00 07 15 03 00 00    00 74 00 00 00 79 10 00 00 5f 4d 45 4d 4f 52 59  | mation...*.......t...y..._MEMORY | 
| 54640 |  5f 49 4e 46 4f 52 4d 41 54 49 4f 4e 5f 43 4c 41    53 53 00 f2 f1 0a 00 02 10 31 10 00 00 0a 00 00  | _INFORMATION_CLASS.......1...... | 
| 54660 |  00 0e 00 03 15 03 04 00 00 11 00 00 00 40 00 00    f1 0a 00 02 10 27 10 00 00 0a 00 00 00 a6 02 03  | .............@.......'.......... | 
| 54680 |  12 02 15 03 00 01 00 43 4f 4d 49 4d 41 47 45 5f    46 4c 41 47 53 5f 49 4c 4f 4e 4c 59 00 02 15 03  | .......COMIMAGE_FLAGS_ILONLY.... | 
| 546a0 |  00 02 00 43 4f 4d 49 4d 41 47 45 5f 46 4c 41 47    53 5f 33 32 42 49 54 52 45 51 55 49 52 45 44 00  | ...COMIMAGE_FLAGS_32BITREQUIRED. | 
| 546c0 |  f1 02 15 03 00 04 00 43 4f 4d 49 4d 41 47 45 5f    46 4c 41 47 53 5f 49 4c 5f 4c 49 42 52 41 52 59  | .......COMIMAGE_FLAGS_IL_LIBRARY | 
| 546e0 |  00 02 15 03 00 08 00 43 4f 4d 49 4d 41 47 45 5f    46 4c 41 47 53 5f 53 54 52 4f 4e 47 4e 41 4d 45  | .......COMIMAGE_FLAGS_STRONGNAME | 
| 54700 |  53 49 47 4e 45 44 00 f2 f1 02 15 03 00 04 80 00    00 01 00 43 4f 4d 49 4d 41 47 45 5f 46 4c 41 47  | SIGNED.............COMIMAGE_FLAG | 
| 54720 |  53 5f 54 52 41 43 4b 44 45 42 55 47 44 41 54 41    00 02 15 03 00 02 00 43 4f 52 5f 56 45 52 53 49  | S_TRACKDEBUGDATA.......COR_VERSI | 
| 54740 |  4f 4e 5f 4d 41 4a 4f 52 5f 56 32 00 f1 02 15 03    00 02 00 43 4f 52 5f 56 45 52 53 49 4f 4e 5f 4d  | ON_MAJOR_V2........COR_VERSION_M | 
| 54760 |  41 4a 4f 52 00 02 15 03 00 00 00 43 4f 52 5f 56    45 52 53 49 4f 4e 5f 4d 49 4e 4f 52 00 02 15 03  | AJOR.......COR_VERSION_MINOR.... | 
| 54780 |  00 08 00 43 4f 52 5f 44 45 4c 45 54 45 44 5f 4e    41 4d 45 5f 4c 45 4e 47 54 48 00 f2 f1 02 15 03  | ...COR_DELETED_NAME_LENGTH...... | 
| 547a0 |  00 08 00 43 4f 52 5f 56 54 41 42 4c 45 47 41 50    5f 4e 41 4d 45 5f 4c 45 4e 47 54 48 00 02 15 03  | ...COR_VTABLEGAP_NAME_LENGTH.... | 
| 547c0 |  00 01 00 4e 41 54 49 56 45 5f 54 59 50 45 5f 4d    41 58 5f 43 42 00 f3 f2 f1 02 15 03 00 ff 00 43  | ...NATIVE_TYPE_MAX_CB..........C | 
| 547e0 |  4f 52 5f 49 4c 4d 45 54 48 4f 44 5f 53 45 43 54    5f 53 4d 41 4c 4c 5f 4d 41 58 5f 44 41 54 41 53  | OR_ILMETHOD_SECT_SMALL_MAX_DATAS | 
| 54800 |  49 5a 45 00 f1 02 15 03 00 01 00 49 4d 41 47 45    5f 43 4f 52 5f 4d 49 48 5f 4d 45 54 48 4f 44 52  | IZE........IMAGE_COR_MIH_METHODR | 
| 54820 |  56 41 00 f2 f1 02 15 03 00 02 00 49 4d 41 47 45    5f 43 4f 52 5f 4d 49 48 5f 45 48 52 56 41 00 f2  | VA.........IMAGE_COR_MIH_EHRVA.. | 
| 54840 |  f1 02 15 03 00 08 00 49 4d 41 47 45 5f 43 4f 52    5f 4d 49 48 5f 42 41 53 49 43 42 4c 4f 43 4b 00  | .......IMAGE_COR_MIH_BASICBLOCK. | 
| 54860 |  f1 02 15 03 00 01 00 43 4f 52 5f 56 54 41 42 4c    45 5f 33 32 42 49 54 00 f1 02 15 03 00 02 00 43  | .......COR_VTABLE_32BIT........C | 
| 54880 |  4f 52 5f 56 54 41 42 4c 45 5f 36 34 42 49 54 00    f1 02 15 03 00 04 00 43 4f 52 5f 56 54 41 42 4c  | OR_VTABLE_64BIT........COR_VTABL | 
| 548a0 |  45 5f 46 52 4f 4d 5f 55 4e 4d 41 4e 41 47 45 44    00 02 15 03 00 10 00 43 4f 52 5f 56 54 41 42 4c  | E_FROM_UNMANAGED.......COR_VTABL | 
| 548c0 |  45 5f 43 41 4c 4c 5f 4d 4f 53 54 5f 44 45 52 49    56 45 44 00 f1 02 15 03 00 20 00 49 4d 41 47 45  | E_CALL_MOST_DERIVED........IMAGE | 
| 548e0 |  5f 43 4f 52 5f 45 41 54 4a 5f 54 48 55 4e 4b 5f    53 49 5a 45 00 02 15 03 00 00 04 4d 41 58 5f 43  | _COR_EATJ_THUNK_SIZE.......MAX_C | 
| 54900 |  4c 41 53 53 5f 4e 41 4d 45 00 f3 f2 f1 02 15 03    00 00 04 4d 41 58 5f 50 41 43 4b 41 47 45 5f 4e  | LASS_NAME..........MAX_PACKAGE_N | 
| 54920 |  41 4d 45 00 f1 2e 00 07 15 16 00 00 00 74 00 00    00 7e 10 00 00 52 65 70 6c 61 63 65 73 43 6f 72  | AME..........t...~...ReplacesCor | 
| 54940 |  48 64 72 4e 75 6d 65 72 69 63 44 65 66 69 6e 65    73 00 f3 f2 f1 0e 00 03 15 20 00 00 00 11 00 00  | HdrNumericDefines............... | 
| 54960 |  00 50 00 00 f1 d6 00 03 12 0d 15 03 00 22 00 00    00 00 00 43 6f 6e 74 72 6f 6c 57 6f 72 64 00 f2  | .P...........".....ControlWord.. | 
| 54980 |  f1 0d 15 03 00 22 00 00 00 04 00 53 74 61 74 75    73 57 6f 72 64 00 f3 f2 f1 0d 15 03 00 22 00 00  | .....".....StatusWord........".. | 
| 549a0 |  00 08 00 54 61 67 57 6f 72 64 00 f2 f1 0d 15 03    00 22 00 00 00 0c 00 45 72 72 6f 72 4f 66 66 73  | ...TagWord.......".....ErrorOffs | 
| 549c0 |  65 74 00 f2 f1 0d 15 03 00 22 00 00 00 10 00 45    72 72 6f 72 53 65 6c 65 63 74 6f 72 00 0d 15 03  | et.......".....ErrorSelector.... | 
| 549e0 |  00 22 00 00 00 14 00 44 61 74 61 4f 66 66 73 65    74 00 f3 f2 f1 0d 15 03 00 22 00 00 00 18 00 44  | .".....DataOffset........".....D | 
| 54a00 |  61 74 61 53 65 6c 65 63 74 6f 72 00 f1 0d 15 03    00 80 10 00 00 1c 00 52 65 67 69 73 74 65 72 41  | ataSelector............RegisterA | 
| 54a20 |  72 65 61 00 f1 0d 15 03 00 22 00 00 00 6c 00 43    72 30 4e 70 78 53 74 61 74 65 00 f2 f1 2a 00 05  | rea......"...l.Cr0NpxState...*.. | 
| 54a40 |  15 09 00 00 00 81 10 00 00 00 00 00 00 00 00 00    00 70 00 5f 46 4c 4f 41 54 49 4e 47 5f 53 41 56  | .................p._FLOATING_SAV | 
| 54a60 |  45 5f 41 52 45 41 00 f2 f1 0a 00 02 10 42 10 00    00 0a 00 00 00 0a 00 02 10 15 10 00 00 0a 00 00  | E_AREA.......B.................. | 
| 54a80 |  00 0a 00 02 10 18 10 00 00 0a 00 00 00 0a 00 02    10 6e 10 00 00 0a 00 00 00 0e 00 03 15 22 00 00  | .................n...........".. | 
| 54aa0 |  00 11 00 00 00 3c 00 00 f1 aa 00 03 12 0d 15 03    00 12 00 00 00 00 00 45 78 63 65 70 74 69 6f 6e  | .....<.................Exception | 
| 54ac0 |  43 6f 64 65 00 0d 15 03 00 22 00 00 00 04 00 45    78 63 65 70 74 69 6f 6e 46 6c 61 67 73 00 f3 f2  | Code.....".....ExceptionFlags... | 
| 54ae0 |  f1 0d 15 03 00 6a 10 00 00 08 00 45 78 63 65 70    74 69 6f 6e 52 65 63 6f 72 64 00 f2 f1 0d 15 03  | .....j.....ExceptionRecord...... | 
| 54b00 |  00 03 04 00 00 0c 00 45 78 63 65 70 74 69 6f 6e    41 64 64 72 65 73 73 00 f1 0d 15 03 00 22 00 00  | .......ExceptionAddress......".. | 
| 54b20 |  00 10 00 4e 75 6d 62 65 72 50 61 72 61 6d 65 74    65 72 73 00 f1 0d 15 03 00 87 10 00 00 14 00 45  | ...NumberParameters............E | 
| 54b40 |  78 63 65 70 74 69 6f 6e 49 6e 66 6f 72 6d 61 74    69 6f 6e 00 f1 26 00 05 15 06 00 00 00 88 10 00  | xceptionInformation..&.......... | 
| 54b60 |  00 00 00 00 00 00 00 00 00 50 00 5f 45 58 43 45    50 54 49 4f 4e 5f 52 45 43 4f 52 44 00 0a 00 02  | .........P._EXCEPTION_RECORD.... | 
| 54b80 |  10 15 10 00 00 0a 00 00 00 04 00 00 00 f1 00 00    00 00 00 00 00 25 00 0d 11 59 10 00 00 00 00 00  | .....................%...Y...... | 
| 54ba0 |  00 00 00 52 74 6c 4e 74 50 61 74 68 53 65 70 65    72 61 74 6f 72 53 74 72 69 6e 67 00 14 00 00 00  | ...RtlNtPathSeperatorString..... | 
| 54bc0 |  15 00 00 00 0b 00 18 00 00 00 15 00 00 00 0a 00    04 00 00 00 f1 00 00 00 00 00 00 00 27 00 0d 11  | ............................'... | 
| 54be0 |  59 10 00 00 00 00 00 00 00 00 52 74 6c 44 6f 73    50 61 74 68 53 65 70 65 72 61 74 6f 72 73 53 74  | Y.........RtlDosPathSeperatorsSt | 
| 54c00 |  72 69 6e 67 00 14 00 00 00 0f 00 00 00 0b 00 18    00 00 00 0f 00 00 00 0a 00 04 00 00 00 f1 00 00  | ring............................ | 
| 54c20 |  00 00 00 00 00 2f 00 0d 11 59 10 00 00 00 00 00    00 00 00 52 74 6c 41 6c 74 65 72 6e 61 74 65 44  | ...../...Y.........RtlAlternateD | 
| 54c40 |  6f 73 50 61 74 68 53 65 70 65 72 61 74 6f 72 53    74 72 69 6e 67 00 14 00 00 00 09 00 00 00 0b 00  | osPathSeperatorString........... | 
| 54c60 |  18 00 00 00 09 00 00 00 0a 00 2e 66 69 6c 65 00    00 00 1d 00 00 00 fe ff 00 00 67 02 2e 2e 5c 69  | ...........file...........g...\i | 
| 54c80 |  33 38 36 5c 65 68 33 76 61 6c 69 64 5f 75 73 65    72 2e 63 00 00 00 00 00 00 00 00 00 00 00 00 00  | 386\eh3valid_user.c............. | 
| 54ca0 |  40 63 6f 6d 70 2e 69 64 c3 0f 5f 00 ff ff 00 00    03 00 40 66 65 61 74 2e 30 30 01 00 00 00 ff ff  | @comp.id.._.......@feat.00...... | 
| 54cc0 |  00 00 03 00 2e 64 65 62 75 67 24 53 00 00 00 00    01 00 00 00 03 01 41 09 00 00 06 00 00 00 00 00  | .....debug$S..........A......... | 
| 54ce0 |  00 00 00 00 00 00 00 00 2e 72 64 61 74 61 00 00    00 00 00 00 02 00 00 00 03 01 08 00 00 00 01 00  | .........rdata.................. | 
| 54d00 |  00 00 6b 45 b4 d9 00 00 02 00 00 00 00 00 00 00    04 00 00 00 00 00 00 00 02 00 00 00 02 00 2e 72  | ..kE...........................r | 
| 54d20 |  64 61 74 61 00 00 00 00 00 00 03 00 00 00 03 01    04 00 00 00 00 00 00 00 68 bf 51 f8 00 00 02 00  | data....................h.Q..... | 
| 54d40 |  00 00 00 00 00 00 28 00 00 00 00 00 00 00 03 00    00 00 02 00 2e 72 64 61 74 61 00 00 00 00 00 00  | ......(..............rdata...... | 
| 54d60 |  04 00 00 00 03 01 08 00 00 00 01 00 00 00 e7 ed    13 52 00 00 02 00 00 00 00 00 00 00 49 00 00 00  | .................R..........I... | 
| 54d80 |  00 00 00 00 04 00 00 00 02 00 2e 72 64 61 74 61    00 00 00 00 00 00 05 00 00 00 03 01 06 00 00 00  | ...........rdata................ | 
| 54da0 |  00 00 00 00 e4 77 1d 83 00 00 02 00 00 00 00 00    00 00 65 00 00 00 00 00 00 00 05 00 00 00 02 00  | .....w............e............. | 
| 54dc0 |  2e 72 64 61 74 61 00 00 00 00 00 00 06 00 00 00    03 01 08 00 00 00 01 00 00 00 6b 45 b4 d9 00 00  | .rdata....................kE.... | 
| 54de0 |  02 00 00 00 00 00 00 00 8c 00 00 00 00 00 00 00    06 00 00 00 02 00 2e 72 64 61 74 61 00 00 00 00  | .......................rdata.... | 
| 54e00 |  00 00 07 00 00 00 03 01 04 00 00 00 00 00 00 00    1a b0 db 81 00 00 02 00 00 00 00 00 00 00 a6 00  | ................................ | 
| 54e20 |  00 00 00 00 00 00 07 00 00 00 02 00 2e 74 65 78    74 00 00 00 00 00 00 00 08 00 00 00 03 01 2a 00  | .............text.............*. | 
| 54e40 |  00 00 01 00 07 00 0c 11 96 04 00 00 02 00 00 00    2e 64 65 62 75 67 24 53 00 00 00 00 09 00 00 00  | .................debug$S........ | 
| 54e60 |  03 01 cc 00 00 00 03 00 00 00 00 00 00 00 08 00    05 00 00 00 2e 66 69 6c 65 00 00 00 00 00 00 00  | .....................file....... | 
| 54e80 |  fe ff 00 00 67 03 64 3a 5c 64 6e 73 72 76 5c 62    61 73 65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c  | ....g.d:\dnsrv\base\crts\crtw32\ | 
| 54ea0 |  6d 69 73 63 5c 69 33 38 36 5c 65 68 33 76 61 6c    69 64 2e 63 00 00 00 00 00 00 00 00 00 00 00 00  | misc\i386\eh3valid.c............ | 
| 54ec0 |  c7 00 00 00 00 00 00 00 08 00 20 00 02 01 24 00    00 00 2a 00 00 00 89 0c 00 00 00 00 00 00 00 00  | ..............$...*............. | 
| 54ee0 |  00 00 00 00 db 00 00 00 00 00 00 00 00 00 20 00    02 00 2e 62 66 00 00 00 00 00 00 00 00 00 08 00  | ...................bf........... | 
| 54f00 |  00 00 65 01 00 00 00 00 24 00 00 00 00 00 00 00    00 00 00 00 00 00 2e 6c 66 00 00 00 00 00 07 00  | ..e.....$..............lf....... | 
| 54f20 |  00 00 08 00 00 00 65 00 2e 65 66 00 00 00 00 00    2a 00 00 00 08 00 00 00 65 01 00 00 00 00 33 00  | ......e..ef.....*.......e.....3. | 
| 54f40 |  00 00 00 00 00 00 00 00 00 00 00 00 2e 74 65 78    74 00 00 00 00 00 00 00 0a 00 00 00 03 01 22 02  | .............text.............". | 
| 54f60 |  00 00 0e 00 49 00 31 fe 4f f8 00 00 01 00 00 00    2e 64 65 62 75 67 24 53 00 00 00 00 0b 00 00 00  | ....I.1.O........debug$S........ | 
| 54f80 |  03 01 4c 01 00 00 05 00 00 00 00 00 00 00 0a 00    05 00 00 00 00 00 00 00 f4 00 00 00 00 00 00 00  | ..L............................. | 
| 54fa0 |  0a 00 20 00 02 01 35 00 00 00 22 02 00 00 4b 10    00 00 00 00 00 00 00 00 00 00 00 00 04 01 00 00  | ......5..."...K................. | 
| 54fc0 |  ad 01 00 00 0a 00 00 00 03 00 2e 62 73 73 00 00    00 00 00 00 00 00 0c 00 00 00 03 01 4c 00 00 00  | ...........bss..............L... | 
| 54fe0 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 18 01 00 00 48 00 00 00 0c 00 00 00 03 00  | ......................H......... | 
| 55000 |  00 00 00 00 24 01 00 00 08 00 00 00 0c 00 00 00    03 00 00 00 00 00 32 01 00 00 00 00 00 00 0c 00  | ....$.................2......... | 
| 55020 |  00 00 03 00 2e 62 66 00 00 00 00 00 00 00 00 00    0a 00 00 00 65 01 00 00 00 00 86 00 00 00 00 00  | .....bf.............e........... | 
| 55040 |  00 00 00 00 00 00 00 00 2e 6c 66 00 00 00 00 00    49 00 00 00 0a 00 00 00 65 00 2e 65 66 00 00 00  | .........lf.....I.......e..ef... | 
| 55060 |  00 00 22 02 00 00 0a 00 00 00 65 01 00 00 00 00    5b 01 00 00 00 00 00 00 00 00 00 00 00 00 2e 64  | ..".......e.....[..............d | 
| 55080 |  65 62 75 67 24 54 00 00 00 00 0d 00 00 00 03 01    64 1f 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | ebug$T..........d............... | 
| 550a0 |  00 00 2e 64 65 62 75 67 24 53 00 00 00 00 0e 00    00 00 03 01 33 00 00 00 02 00 00 00 00 00 00 00  | ...debug$S..........3........... | 
| 550c0 |  06 00 05 00 00 00 2e 64 65 62 75 67 24 53 00 00    00 00 0f 00 00 00 03 01 35 00 00 00 02 00 00 00  | .......debug$S..........5....... | 
| 550e0 |  00 00 00 00 04 00 05 00 00 00 2e 64 65 62 75 67    24 53 00 00 00 00 10 00 00 00 03 01 3d 00 00 00  | ...........debug$S..........=... | 
| 55100 |  02 00 00 00 00 00 00 00 02 00 05 00 00 00 3f 01    00 00 5f 52 74 6c 41 6c 74 65 72 6e 61 74 65 44  | ..............?..._RtlAlternateD | 
| 55120 |  6f 73 50 61 74 68 53 65 70 65 72 61 74 6f 72 53    74 72 69 6e 67 00 3f 3f 5f 43 40 5f 31 33 43 47  | osPathSeperatorString.??_C@_13CG | 
| 55140 |  4f 4b 4a 50 49 4c 40 3f 24 41 41 3f 31 3f 24 41    41 3f 24 41 41 40 00 5f 52 74 6c 44 6f 73 50 61  | OKJPIL@?$AA?1?$AA?$AA@._RtlDosPa | 
| 55160 |  74 68 53 65 70 65 72 61 74 6f 72 73 53 74 72 69    6e 67 00 3f 3f 5f 43 40 5f 31 35 4d 4e 43 41 43  | thSeperatorsString.??_C@_15MNCAC | 
| 55180 |  4a 4c 49 40 3f 24 41 41 3f 32 3f 24 41 41 3f 31    3f 24 41 41 3f 24 41 41 40 00 5f 52 74 6c 4e 74  | JLI@?$AA?2?$AA?1?$AA?$AA@._RtlNt | 
| 551a0 |  50 61 74 68 53 65 70 65 72 61 74 6f 72 53 74 72    69 6e 67 00 3f 3f 5f 43 40 5f 31 33 46 50 47 41  | PathSeperatorString.??_C@_13FPGA | 
| 551c0 |  4a 41 50 4a 40 3f 24 41 41 3f 32 3f 24 41 41 3f    24 41 41 40 00 5f 45 48 5f 56 69 72 74 75 61 6c  | JAPJ@?$AA?2?$AA?$AA@._EH_Virtual | 
| 551e0 |  51 75 65 72 79 40 31 32 00 5f 4e 74 51 75 65 72    79 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 40 32  | Query@12._NtQueryVirtualMemory@2 | 
| 55200 |  34 00 5f 5f 56 61 6c 69 64 61 74 65 45 48 33 52    4e 00 24 65 78 69 74 5f 73 75 63 63 65 73 73 24  | 4.__ValidateEH3RN.$exit_success$ | 
| 55220 |  33 36 34 37 39 00 5f 6c 4d 6f 64 69 66 79 69 6e    67 00 5f 72 67 56 61 6c 69 64 50 61 67 65 73 00  | 36479._lModifying._rgValidPages. | 
| 55240 |  5f 6e 56 61 6c 69 64 50 61 67 65 73 00 0a 2f 35    31 20 20 20 20 20 20 20 20 20 20 20 20 20 31 30  | _nValidPages../51.............10 | 
| 55260 |  39 39 36 32 31 32 39 35 20 20 20 20 20 20 20 20    20 20 20 20 20 20 31 30 30 36 36 36 20 20 36 38  | 99621295..............100666..68 | 
| 55280 |  32 33 20 20 20 20 20 20 60 0a 4c 01 06 00 af e3    8a 41 5c 10 00 00 85 00 00 00 00 00 00 00 2e 74  | 23......`.L......A\............t | 
| 552a0 |  65 78 74 00 00 00 00 00 00 00 00 00 00 00 15 01    00 00 04 01 00 00 19 02 00 00 55 02 00 00 06 00  | ext.......................U..... | 
| 552c0 |  67 00 20 00 30 60 2e 64 61 74 61 00 00 00 00 00    00 00 00 00 00 00 10 00 00 00 bf 04 00 00 00 00  | g...0`.data..................... | 
| 552e0 |  00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 64    65 62 75 67 24 53 00 00 00 00 00 00 00 00 b5 04  | ..........@.0..debug$S.......... | 
| 55300 |  00 00 cf 04 00 00 84 09 00 00 00 00 00 00 2e 00    00 00 40 00 10 42 2e 64 65 62 75 67 24 54 00 00  | ..................@..B.debug$T.. | 
| 55320 |  00 00 00 00 00 00 d4 04 00 00 50 0b 00 00 00 00    00 00 00 00 00 00 00 00 00 00 40 00 10 42 2e 64  | ..........P...............@..B.d | 
| 55340 |  65 62 75 67 24 46 00 00 00 00 00 00 00 00 20 00    00 00 24 10 00 00 44 10 00 00 00 00 00 00 02 00  | ebug$F............$...D......... | 
| 55360 |  00 00 40 00 10 42 2e 73 78 64 61 74 61 00 00 00    00 00 00 00 00 00 04 00 00 00 58 10 00 00 00 00  | ..@..B.sxdata.............X..... | 
| 55380 |  00 00 00 00 00 00 00 00 00 00 00 02 30 00 55 8b    ec 53 56 57 55 6a 00 6a 00 68 00 00 00 00 ff 75  | ............0.U..SVWUj.j.h.....u | 
| 553a0 |  08 e8 00 00 00 00 5d 5f 5e 5b 8b e5 5d c3 8b 4c    24 04 f7 41 04 06 00 00 00 b8 01 00 00 00 74 28  | ......]_^[..]..L$..A..........t( | 
| 553c0 |  8b 44 24 14 55 8b 68 10 8b 50 28 52 8b 50 24 52    e8 14 00 00 00 83 c4 08 5d 8b 44 24 08 8b 54 24  | .D$.U.h..P(R.P$R........].D$..T$ | 
| 553e0 |  10 89 02 b8 03 00 00 00 c3 53 56 57 8b 44 24 10    55 50 6a fe 68 00 00 00 00 64 ff 35 00 00 00 00  | .........SVW.D$.UPj.h....d.5.... | 
| 55400 |  64 89 25 00 00 00 00 8b 44 24 24 8b 58 08 8b 70    0c 83 fe ff 74 35 83 7c 24 28 ff 74 06 3b 74 24  | d.%.....D$$.X..p....t5.|$(.t.;t$ | 
| 55420 |  28 76 28 8d 34 76 8b 0c b3 89 4c 24 08 89 48 0c    83 7c b3 04 00 75 12 68 01 01 00 00 8b 44 b3 08  | (v(.4v....L$..H..|...u.h.....D.. | 
| 55440 |  e8 40 00 00 00 ff 54 b3 08 eb bc 64 8f 05 00 00    00 00 83 c4 10 5f 5e 5b c3 33 c0 64 8b 0d 00 00  | .@....T....d........._^[.3.d.... | 
| 55460 |  00 00 81 79 04 00 00 00 00 75 10 8b 51 0c 8b 52    0c 39 51 08 75 05 b8 01 00 00 00 c3 53 51 bb 00  | ...y.....u..Q..R.9Q.u.......SQ.. | 
| 55480 |  00 00 00 eb 0a 53 51 bb 00 00 00 00 8b 4d 08 89    4b 08 89 43 04 89 6b 0c 55 51 50 58 59 5d 59 5b  | .....SQ......M..K..C..k.UQPXY]Y[ | 
| 554a0 |  c2 04 00 0c 00 00 00 12 00 00 00 06 00 14 00 00    00 10 00 00 00 14 00 67 00 00 00 44 00 00 00 06  | .......................g...D.... | 
| 554c0 |  00 d7 00 00 00 44 00 00 00 06 00 f1 00 00 00 15    00 00 00 06 00 fa 00 00 00 15 00 00 00 06 00 2f  | .....D........................./ | 
| 554e0 |  00 00 00 00 00 36 00 00 00 00 00 00 00 00 00 ff    7f 07 00 00 00 01 00 09 00 00 00 02 00 0b 00 00  | .....6.......................... | 
| 55500 |  00 03 00 10 00 00 00 04 00 13 00 00 00 06 00 18    00 00 00 08 00 3d 00 00 00 00 00 44 00 00 00 00  | .....................=.....D.... | 
| 55520 |  00 20 00 00 00 01 00 24 00 00 00 02 00 2b 00 00    00 03 00 30 00 00 00 04 00 32 00 00 00 0a 00 36  | .......$.....+.....0.....2.....6 | 
| 55540 |  00 00 00 0b 00 37 00 00 00 0c 00 3a 00 00 00 0d    00 3d 00 00 00 0e 00 3e 00 00 00 0f 00 41 00 00  | .....7.....:.....=.....>.....A.. | 
| 55560 |  00 10 00 42 00 00 00 11 00 47 00 00 00 12 00 4a    00 00 00 13 00 4b 00 00 00 15 00 4f 00 00 00 18  | ...B.....G.....J.....K.....O.... | 
| 55580 |  00 53 00 00 00 19 00 55 00 00 00 1b 00 5a 00 00    00 1d 00 4b 00 00 00 00 00 52 00 00 00 00 00 5b  | .S.....U.....Z.....K.....R.....[ | 
| 555a0 |  00 00 00 02 00 5c 00 00 00 03 00 5d 00 00 00 04    00 5e 00 00 00 06 00 62 00 00 00 09 00 63 00 00  | .....\.....].....^.....b.....c.. | 
| 555c0 |  00 0a 00 64 00 00 00 0b 00 66 00 00 00 0c 00 6b    00 00 00 0d 00 72 00 00 00 0e 00 79 00 00 00 11  | ...d.....f.....k.....r.....y.... | 
| 555e0 |  00 7d 00 00 00 12 00 80 00 00 00 13 00 83 00 00    00 15 00 86 00 00 00 16 00 88 00 00 00 17 00 8d  | .}.............................. | 
| 55600 |  00 00 00 18 00 8f 00 00 00 19 00 93 00 00 00 1a    00 95 00 00 00 1d 00 98 00 00 00 1f 00 9b 00 00  | ................................ | 
| 55620 |  00 20 00 9f 00 00 00 21 00 a2 00 00 00 23 00 a7    00 00 00 24 00 a9 00 00 00 26 00 ae 00 00 00 27  | .......!.....#.....$.....&.....' | 
| 55640 |  00 b2 00 00 00 28 00 b7 00 00 00 2a 00 bb 00 00    00 2e 00 bd 00 00 00 30 00 c4 00 00 00 31 00 c7  | .....(.....*...........0.....1.. | 
| 55660 |  00 00 00 33 00 c8 00 00 00 34 00 c9 00 00 00 35    00 ca 00 00 00 36 00 59 00 00 00 00 00 60 00 00  | ...3.....4.....5.....6.Y.....`.. | 
| 55680 |  00 00 00 cb 00 00 00 02 00 cd 00 00 00 04 00 d4    00 00 00 05 00 db 00 00 00 06 00 dd 00 00 00 08  | ................................ | 
| 556a0 |  00 e0 00 00 00 09 00 e3 00 00 00 0a 00 e6 00 00    00 0b 00 e8 00 00 00 0d 00 ed 00 00 00 0f 00 67  | ...............................g | 
| 556c0 |  00 00 00 00 00 ee 00 00 00 01 00 ef 00 00 00 02    00 f0 00 00 00 03 00 f5 00 00 00 04 00 6e 00 00  | .............................n.. | 
| 556e0 |  00 00 00 f7 00 00 00 01 00 f8 00 00 00 02 00 f9    00 00 00 03 00 fe 00 00 00 04 00 01 01 00 00 06  | ................................ | 
| 55700 |  00 04 01 00 00 07 00 07 01 00 00 08 00 0a 01 00    00 09 00 0b 01 00 00 0a 00 0c 01 00 00 0b 00 0d  | ................................ | 
| 55720 |  01 00 00 0e 00 0e 01 00 00 0f 00 0f 01 00 00 10    00 10 01 00 00 11 00 11 01 00 00 12 00 12 01 00  | ................................ | 
| 55740 |  00 14 00 75 00 00 00 00 00 20 05 93 19 00 00 00    00 00 00 00 00 00 00 00 00 04 00 00 00 f1 00 00  | ...u............................ | 
| 55760 |  00 00 00 00 00 3b 00 01 11 00 00 00 00 64 3a 5c    64 6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73 5c  | .....;.......d:\dnsrv\base\crts\ | 
| 55780 |  63 72 74 77 33 32 5c 6d 69 73 63 5c 6e 74 5c 6f    62 6a 5c 69 33 38 36 5c 65 78 73 75 70 2e 6f 62  | crtw32\misc\nt\obj\i386\exsup.ob | 
| 557a0 |  6a 00 34 00 16 11 03 00 00 00 03 00 00 00 00 00    00 00 07 00 0a 00 c3 0f 4d 69 63 72 6f 73 6f 66  | j.4.....................Microsof | 
| 557c0 |  74 20 28 52 29 20 4d 61 63 72 6f 20 41 73 73 65    6d 62 6c 65 72 00 00 00 32 00 10 11 00 00 00 00  | t.(R).Macro.Assembler...2....... | 
| 557e0 |  00 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00    09 00 00 00 01 10 00 00 00 00 00 00 00 00 00 5f  | ..............................._ | 
| 55800 |  4e 4c 47 5f 4e 6f 74 69 66 79 31 00 02 00 06 00    19 00 05 11 00 00 00 00 00 00 00 5f 5f 4e 4c 47  | NLG_Notify1................__NLG | 
| 55820 |  5f 44 69 73 70 61 74 63 68 32 00 3c 00 10 11 00    00 00 00 00 00 00 00 00 00 00 00 23 00 00 00 00  | _Dispatch2.<...............#.... | 
| 55840 |  00 00 00 23 00 00 00 03 10 00 00 00 00 00 00 00    00 00 5f 5f 61 62 6e 6f 72 6d 61 6c 5f 74 65 72  | ...#..............__abnormal_ter | 
| 55860 |  6d 69 6e 61 74 69 6f 6e 00 02 00 06 00 36 00 0f    11 00 00 00 00 00 00 00 00 00 00 00 00 3b 00 00  | mination.....6...............;.. | 
| 55880 |  00 00 00 00 00 3b 00 00 00 05 10 00 00 00 00 00    00 00 00 00 5f 5f 75 6e 77 69 6e 64 5f 68 61 6e  | .....;..............__unwind_han | 
| 558a0 |  64 6c 65 72 00 02 00 06 00 0f 00 08 11 07 10 00    00 5f 4a 4d 50 5f 42 55 46 00 14 00 05 11 00 00  | dler............._JMP_BUF....... | 
| 558c0 |  00 00 00 00 00 5f 67 75 5f 72 65 74 75 72 6e 00    18 00 05 11 00 00 00 00 00 00 00 5f 5f 4e 4c 47  | ....._gu_return............__NLG | 
| 558e0 |  5f 44 69 73 70 61 74 63 68 00 35 00 10 11 00 00    00 00 00 00 00 00 00 00 00 00 70 00 00 00 00 00  | _Dispatch.5...............p..... | 
| 55900 |  00 00 70 00 00 00 09 10 00 00 00 00 00 00 00 00    00 5f 5f 6c 6f 63 61 6c 5f 75 6e 77 69 6e 64 32  | ..p..............__local_unwind2 | 
| 55920 |  00 02 00 06 00 36 00 10 11 00 00 00 00 00 00 00    00 00 00 00 00 20 00 00 00 00 00 00 00 20 00 00  | .....6.......................... | 
| 55940 |  00 0b 10 00 00 00 00 00 00 00 00 00 5f 5f 67 6c    6f 62 61 6c 5f 75 6e 77 69 6e 64 32 00 02 00 06  | ............__global_unwind2.... | 
| 55960 |  00 17 00 05 11 00 00 00 00 00 00 00 5f 5f 4e 4c    47 5f 52 65 74 75 72 6e 32 00 12 00 05 11 00 00  | ............__NLG_Return2....... | 
| 55980 |  00 00 00 00 00 5f 6c 75 5f 64 6f 6e 65 00 1e 00    0d 11 0d 10 00 00 00 00 00 00 00 00 5f 5f 4e 4c  | ....._lu_done...............__NL | 
| 559a0 |  47 5f 44 65 73 74 69 6e 61 74 69 6f 6e 00 31 00    10 11 00 00 00 00 00 00 00 00 00 00 00 00 1e 00  | G_Destination.1................. | 
| 559c0 |  00 00 00 00 00 00 1e 00 00 00 0f 10 00 00 00 00    00 00 00 00 00 5f 4e 4c 47 5f 4e 6f 74 69 66 79  | ....................._NLG_Notify | 
| 559e0 |  00 13 00 0b 11 08 00 00 00 22 00 00 00 64 77 49    6e 43 6f 64 65 00 02 00 06 00 1c 00 08 11 11 10  | ........."...dwInCode........... | 
| 55a00 |  00 00 5f 45 58 43 45 50 54 49 4f 4e 5f 52 45 43    4f 52 44 5f 43 52 54 00 14 00 05 11 00 00 00 00  | .._EXCEPTION_RECORD_CRT......... | 
| 55a20 |  00 00 00 5f 63 6f 6e 74 69 6e 75 65 5f 00 2e 00    0f 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | ..._continue_................... | 
| 55a40 |  00 00 00 00 00 00 00 00 00 00 13 10 00 00 00 00    00 00 00 00 00 24 24 24 30 30 30 30 31 00 02 00  | .....................$$$00001... | 
| 55a60 |  06 00 2e 00 0f 11 00 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 10  | ................................ | 
| 55a80 |  00 00 00 00 00 00 00 00 00 24 24 24 30 30 30 31    31 00 02 00 06 00 14 00 05 11 00 00 00 00 00 00  | .........$$$00011............... | 
| 55aa0 |  00 5f 75 68 5f 72 65 74 75 72 6e 00 2e 00 0f 11    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | ._uh_return..................... | 
| 55ac0 |  00 00 00 00 00 00 00 00 17 10 00 00 00 00 00 00    00 00 00 24 24 24 30 30 30 30 33 00 02 00 06 00  | ...................$$$00003..... | 
| 55ae0 |  25 00 08 11 19 10 00 00 5f 45 58 43 45 50 54 49    4f 4e 5f 52 45 47 49 53 54 52 41 54 49 4f 4e 5f  | %......._EXCEPTION_REGISTRATION_ | 
| 55b00 |  43 4f 4d 4d 4f 4e 00 12 00 05 11 00 00 00 00 00    00 00 5f 5f 4e 4c 47 5f 47 6f 00 18 00 08 11 1b  | COMMON............__NLG_Go...... | 
| 55b20 |  10 00 00 5f 53 43 4f 50 45 54 41 42 4c 45 5f 45    4e 54 52 59 00 16 00 05 11 00 00 00 00 00 00 00  | ..._SCOPETABLE_ENTRY............ | 
| 55b40 |  5f 6c 75 5f 63 6f 6e 74 69 6e 75 65 00 11 00 05    11 00 00 00 00 00 00 00 5f 6c 75 5f 74 6f 70 00  | _lu_continue............_lu_top. | 
| 55b60 |  2e 00 0f 11 00 00 00 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 1d 10 00 00  | ................................ | 
| 55b80 |  00 00 00 00 00 00 00 24 24 24 30 30 30 30 35 00    02 00 06 00 1e 00 08 11 1f 10 00 00 5f 45 58 43  | .......$$$00005............._EXC | 
| 55ba0 |  45 50 54 49 4f 4e 5f 52 45 47 49 53 54 52 41 54    49 4f 4e 00 12 00 05 11 00 00 00 00 00 00 00 5f  | EPTION_REGISTRATION............_ | 
| 55bc0 |  61 74 5f 64 6f 6e 65 00 10 00 08 11 0d 10 00 00    5f 4e 4c 47 5f 49 4e 46 4f 00 2e 00 0f 11 00 00  | at_done........._NLG_INFO....... | 
| 55be0 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 21 10 00 00 00 00 00 00 00 00  | ......................!......... | 
| 55c00 |  00 24 24 24 30 30 30 30 37 00 02 00 06 00 9f 00    00 00 67 00 00 00 0b 00 a3 00 00 00 67 00 00 00  | .$$$00007.........g.........g... | 
| 55c20 |  0a 00 bb 00 00 00 11 00 00 00 0b 00 bf 00 00 00    11 00 00 00 0a 00 f2 00 00 00 60 00 00 00 0b 00  | ..........................`..... | 
| 55c40 |  f6 00 00 00 60 00 00 00 0a 00 34 01 00 00 44 00    00 00 0b 00 38 01 00 00 44 00 00 00 0a 00 65 01  | ....`.....4...D.....8...D.....e. | 
| 55c60 |  00 00 12 00 00 00 0b 00 69 01 00 00 12 00 00 00    0a 00 7b 01 00 00 13 00 00 00 0b 00 7f 01 00 00  | ........i.........{............. | 
| 55c80 |  13 00 00 00 0a 00 b1 01 00 00 52 00 00 00 0b 00    b5 01 00 00 52 00 00 00 0a 00 ec 01 00 00 36 00  | ..........R.........R.........6. | 
| 55ca0 |  00 00 0b 00 f0 01 00 00 36 00 00 00 0a 00 0c 02    00 00 14 00 00 00 0b 00 10 02 00 00 14 00 00 00  | ........6....................... | 
| 55cc0 |  0a 00 25 02 00 00 7c 00 00 00 0b 00 29 02 00 00    7c 00 00 00 0a 00 3d 02 00 00 15 00 00 00 0b 00  | ..%...|.....)...|.....=......... | 
| 55ce0 |  41 02 00 00 15 00 00 00 0a 00 75 02 00 00 6e 00    00 00 0b 00 79 02 00 00 6e 00 00 00 0a 00 c3 02  | A.........u...n.....y...n....... | 
| 55d00 |  00 00 7d 00 00 00 0b 00 c7 02 00 00 7d 00 00 00    0a 00 f5 02 00 00 2f 00 00 00 0b 00 f9 02 00 00  | ..}.........}........./......... | 
| 55d20 |  2f 00 00 00 0a 00 29 03 00 00 75 00 00 00 0b 00    2d 03 00 00 75 00 00 00 0a 00 41 03 00 00 7e 00  | /.....)...u.....-...u.....A...~. | 
| 55d40 |  00 00 0b 00 45 03 00 00 7e 00 00 00 0a 00 73 03    00 00 3d 00 00 00 0b 00 77 03 00 00 3d 00 00 00  | ....E...~.....s...=.....w...=... | 
| 55d60 |  0a 00 b2 03 00 00 7f 00 00 00 0b 00 b6 03 00 00    7f 00 00 00 0a 00 e0 03 00 00 80 00 00 00 0b 00  | ................................ | 
| 55d80 |  e4 03 00 00 80 00 00 00 0a 00 f8 03 00 00 81 00    00 00 0b 00 fc 03 00 00 81 00 00 00 0a 00 27 04  | ..............................'. | 
| 55da0 |  00 00 4b 00 00 00 0b 00 2b 04 00 00 4b 00 00 00    0a 00 5f 04 00 00 82 00 00 00 0b 00 63 04 00 00  | ..K.....+...K....._.........c... | 
| 55dc0 |  82 00 00 00 0a 00 a1 04 00 00 59 00 00 00 0b 00    a5 04 00 00 59 00 00 00 0a 00 04 00 00 00 06 00  | ..........Y.........Y........... | 
| 55de0 |  0e 00 00 00 f2 f1 0e 00 08 10 03 00 00 00 00 00    00 00 02 10 00 00 06 00 01 12 00 00 00 00 0e 00  | ................................ | 
| 55e00 |  08 10 03 00 00 00 aa 00 00 00 04 10 00 00 06 00    01 12 00 00 00 00 0e 00 08 10 03 00 00 00 05 00  | ................................ | 
| 55e20 |  00 00 06 10 00 00 06 00 01 12 00 00 00 00 1e 00    05 15 00 00 01 00 08 10 00 00 00 00 00 00 00 00  | ................................ | 
| 55e40 |  00 00 40 00 5f 4a 4d 50 5f 42 55 46 00 f3 06 01    03 12 0d 15 03 00 22 00 00 00 00 00 73 61 76 65  | ..@._JMP_BUF..........".....save | 
| 55e60 |  64 5f 65 62 70 00 0d 15 03 00 22 00 00 00 04 00    73 61 76 65 64 5f 65 62 78 00 0d 15 03 00 22 00  | d_ebp.....".....saved_ebx.....". | 
| 55e80 |  00 00 08 00 73 61 76 65 64 5f 65 64 69 00 0d 15    03 00 22 00 00 00 0c 00 73 61 76 65 64 5f 65 73  | ....saved_edi.....".....saved_es | 
| 55ea0 |  69 00 0d 15 03 00 22 00 00 00 10 00 73 61 76 65    64 5f 65 73 70 00 0d 15 03 00 22 00 00 00 14 00  | i.....".....saved_esp....."..... | 
| 55ec0 |  73 61 76 65 64 5f 72 65 74 75 72 6e 00 f1 0d 15    03 00 22 00 00 00 18 00 73 61 76 65 64 5f 78 72  | saved_return......".....saved_xr | 
| 55ee0 |  65 67 69 73 74 72 61 74 69 6f 6e 00 f2 f1 0d 15    03 00 22 00 00 00 1c 00 73 61 76 65 64 5f 74 72  | egistration.......".....saved_tr | 
| 55f00 |  79 6c 65 76 65 6c 00 f3 f2 f1 0d 15 03 00 22 00    00 00 20 00 76 65 72 73 69 6f 6e 5f 63 6f 6f 6b  | ylevel........".....version_cook | 
| 55f20 |  69 65 00 f3 f2 f1 0d 15 03 00 22 00 00 00 24 00    75 6e 77 69 6e 64 5f 66 75 6e 63 00 f2 f1 0d 15  | ie........"...$.unwind_func..... | 
| 55f40 |  03 00 22 00 00 00 28 00 75 6e 77 69 6e 64 5f 64    61 74 61 00 f2 f1 0e 00 08 10 03 00 00 00 47 00  | .."...(.unwind_data...........G. | 
| 55f60 |  00 00 0a 10 00 00 06 00 01 12 00 00 00 00 0e 00    08 10 03 00 00 00 c3 00 00 00 0c 10 00 00 06 00  | ................................ | 
| 55f80 |  01 12 00 00 00 00 1e 00 05 15 00 00 01 00 0e 10    00 00 00 00 00 00 00 00 00 00 10 00 5f 4e 4c 47  | ............................_NLG | 
| 55fa0 |  5f 49 4e 46 4f 00 5e 00 03 12 0d 15 03 00 22 00    00 00 00 00 64 77 53 69 67 00 0d 15 03 00 22 00  | _INFO.^.......".....dwSig.....". | 
| 55fc0 |  00 00 04 00 75 6f 66 66 44 65 73 74 69 6e 61 74    69 6f 6e 00 f2 f1 0d 15 03 00 22 00 00 00 08 00  | ....uoffDestination......."..... | 
| 55fe0 |  64 77 43 6f 64 65 00 f3 f2 f1 0d 15 03 00 22 00    00 00 0c 00 75 6f 66 66 46 72 61 6d 65 50 6f 69  | dwCode........".....uoffFramePoi | 
| 56000 |  6e 74 65 72 00 f1 0e 00 08 10 03 00 00 00 00 00    01 00 10 10 00 00 0a 00 01 12 01 00 00 00 22 00  | nter..........................". | 
| 56020 |  00 00 2a 00 05 15 00 00 01 00 12 10 00 00 00 00    00 00 00 00 00 00 50 00 5f 45 58 43 45 50 54 49  | ..*...................P._EXCEPTI | 
| 56040 |  4f 4e 5f 52 45 43 4f 52 44 5f 43 52 54 00 ae 00    03 12 0d 15 03 00 22 00 00 00 00 00 65 78 63 65  | ON_RECORD_CRT.........".....exce | 
| 56060 |  70 74 69 6f 6e 5f 6e 75 6d 62 65 72 00 f1 0d 15    03 00 22 00 00 00 04 00 65 78 63 65 70 74 69 6f  | ption_number......".....exceptio | 
| 56080 |  6e 5f 66 6c 61 67 73 00 f2 f1 0d 15 03 00 22 00    00 00 08 00 65 78 63 65 70 74 69 6f 6e 5f 72 65  | n_flags.......".....exception_re | 
| 560a0 |  63 6f 72 64 00 f1 0d 15 03 00 22 00 00 00 0c 00    65 78 63 65 70 74 69 6f 6e 5f 61 64 64 72 65 73  | cord......".....exception_addres | 
| 560c0 |  73 00 0d 15 03 00 22 00 00 00 10 00 6e 75 6d 62    65 72 5f 70 61 72 61 6d 65 74 65 72 73 00 0d 15  | s.....".....number_parameters... | 
| 560e0 |  03 00 22 00 00 00 14 00 65 78 63 65 70 74 69 6f    6e 5f 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 0e 00  | ..".....exception_information... | 
| 56100 |  08 10 03 00 00 00 a2 00 00 00 14 10 00 00 06 00    01 12 00 00 00 00 0e 00 08 10 03 00 00 00 36 00  | ..............................6. | 
| 56120 |  00 00 16 10 00 00 06 00 01 12 00 00 00 00 0e 00    08 10 03 00 00 00 e4 00 00 00 18 10 00 00 06 00  | ................................ | 
| 56140 |  01 12 00 00 00 00 36 00 05 15 00 00 01 00 1a 10    00 00 00 00 00 00 00 00 00 00 10 00 5f 45 58 43  | ......6....................._EXC | 
| 56160 |  45 50 54 49 4f 4e 5f 52 45 47 49 53 54 52 41 54    49 4f 4e 5f 43 4f 4d 4d 4f 4e 00 f1 61 67 2e 00  | EPTION_REGISTRATION_COMMON..ag.. | 
| 56180 |  03 12 0d 15 03 00 22 00 00 00 08 00 73 63 6f 70    65 74 61 62 6c 65 00 f3 f2 f1 0d 15 03 00 22 00  | ......".....scopetable........". | 
| 561a0 |  00 00 0c 00 74 72 79 6c 65 76 65 6c 00 f1 26 00    05 15 00 00 01 00 1c 10 00 00 00 00 00 00 00 00  | ....trylevel..&................. | 
| 561c0 |  00 00 0c 00 5f 53 43 4f 50 45 54 41 42 4c 45 5f    45 4e 54 52 59 00 4e 00 03 12 0d 15 03 00 22 00  | ...._SCOPETABLE_ENTRY.N.......". | 
| 561e0 |  00 00 00 00 65 6e 63 6c 6f 73 69 6e 67 5f 6c 65    76 65 6c 00 f2 f1 0d 15 03 00 22 00 00 00 04 00  | ....enclosing_level......."..... | 
| 56200 |  66 69 6c 74 65 72 00 f3 f2 f1 0d 15 03 00 22 00    00 00 08 00 73 70 65 63 69 66 69 63 5f 68 61 6e  | filter........".....specific_han | 
| 56220 |  64 6c 65 72 00 f1 0e 00 08 10 03 00 00 00 26 00    00 00 1e 10 00 00 06 00 01 12 00 00 00 00 2e 00  | dler..........&................. | 
| 56240 |  05 15 00 00 01 00 20 10 00 00 00 00 00 00 00 00    00 00 08 00 5f 45 58 43 45 50 54 49 4f 4e 5f 52  | ...................._EXCEPTION_R | 
| 56260 |  45 47 49 53 54 52 41 54 49 4f 4e 00 f2 f1 26 00    03 12 0d 15 03 00 22 00 00 00 00 00 70 72 65 76  | EGISTRATION...&.......".....prev | 
| 56280 |  00 f1 0d 15 03 00 22 00 00 00 04 00 68 61 6e 64    6c 65 72 00 f2 f1 0e 00 08 10 03 00 00 00 89 00  | ......".....handler............. | 
| 562a0 |  00 00 22 10 00 00 06 00 01 12 00 00 00 00 00 00    00 00 70 00 00 00 00 00 00 00 02 00 03 03 00 00  | .."...............p............. | 
| 562c0 |  00 00 23 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 52 00 00 00 07 00 10 00 00 00 60 00 00 00  | ..#...............R.........`... | 
| 562e0 |  07 00 44 00 00 00 2e 66 69 6c 65 00 00 00 17 00    00 00 fe ff 00 00 67 03 64 3a 5c 64 6e 73 72 76  | ..D....file...........g.d:\dnsrv | 
| 56300 |  5c 62 61 73 65 5c 63 72 74 73 5c 63 72 74 77 33    32 5c 6d 69 73 63 5c 69 33 38 36 5c 65 78 73 75  | \base\crts\crtw32\misc\i386\exsu | 
| 56320 |  70 2e 61 73 6d 00 00 00 00 00 00 00 00 00 40 63    6f 6d 70 2e 69 64 c3 0f 0f 00 ff ff 00 00 03 00  | p.asm.........@comp.id.......... | 
| 56340 |  40 66 65 61 74 2e 30 30 01 00 00 00 ff ff 00 00    03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00  | @feat.00...........text......... | 
| 56360 |  00 00 03 01 15 01 00 00 06 00 67 00 00 00 00 00    00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00  | ..........g............data..... | 
| 56380 |  00 00 02 00 00 00 03 01 10 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 2e 64 65 62 75 67  | ...........................debug | 
| 563a0 |  24 53 00 00 00 00 03 00 00 00 03 01 b5 04 00 00    2e 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64  | $S.............................d | 
| 563c0 |  65 62 75 67 24 54 00 00 00 00 04 00 00 00 03 01    d4 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | ebug$T.......................... | 
| 563e0 |  00 00 2e 64 65 62 75 67 24 46 00 00 00 00 05 00    00 00 03 01 20 00 00 00 02 00 00 00 00 00 00 00  | ...debug$F...................... | 
| 56400 |  00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00    00 00 00 00 00 00 02 00 00 00 00 00 12 00 00 00  | ................................ | 
| 56420 |  0d 01 00 00 01 00 00 00 02 00 00 00 00 00 22 00    00 00 18 00 00 00 01 00 00 00 06 00 00 00 00 00  | .............."................. | 
| 56440 |  2d 00 00 00 0d 01 00 00 01 00 00 00 02 00 00 00    00 00 3c 00 00 00 bb 00 00 00 01 00 00 00 02 00  | -.................<............. | 
| 56460 |  00 00 00 00 4a 00 00 00 00 00 00 00 02 00 00 00    02 00 00 00 00 00 5c 00 00 00 00 00 00 00 ff ff  | ....J.................\......... | 
| 56480 |  00 00 02 00 2e 66 69 6c 65 00 00 00 1b 00 00 00    fe ff 00 00 67 03 64 3a 5c 64 6e 73 72 76 5c 62  | .....file...........g.d:\dnsrv\b | 
| 564a0 |  61 73 65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c    68 5c 70 76 65 72 73 69 6f 6e 2e 69 6e 63 00 00  | ase\crts\crtw32\h\pversion.inc.. | 
| 564c0 |  00 00 00 00 00 00 00 00 00 00 00 00 2e 66 69 6c    65 00 00 00 1f 00 00 00 fe ff 00 00 67 03 64 3a  | .............file...........g.d: | 
| 564e0 |  5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73    5c 63 72 74 77 33 32 5c 6d 69 73 63 5c 69 33 38  | \dnsrv\base\crts\crtw32\misc\i38 | 
| 56500 |  36 5c 65 78 73 75 70 2e 61 73 6d 00 00 00 00 00    00 00 00 00 2e 66 69 6c 65 00 00 00 23 00 00 00  | 6\exsup.asm..........file...#... | 
| 56520 |  fe ff 00 00 67 03 64 3a 5c 64 6e 73 72 76 5c 62    61 73 65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c  | ....g.d:\dnsrv\base\crts\crtw32\ | 
| 56540 |  68 5c 63 6d 61 63 72 6f 73 2e 69 6e 63 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 2e 66 69 6c  | h\cmacros.inc................fil | 
| 56560 |  65 00 00 00 27 00 00 00 fe ff 00 00 67 03 64 3a    5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73  | e...'.......g.d:\dnsrv\base\crts | 
| 56580 |  5c 63 72 74 77 33 32 5c 6d 69 73 63 5c 69 33 38    36 5c 65 78 73 75 70 2e 61 73 6d 00 00 00 00 00  | \crtw32\misc\i386\exsup.asm..... | 
| 565a0 |  00 00 00 00 2e 66 69 6c 65 00 00 00 2b 00 00 00    fe ff 00 00 67 03 64 3a 5c 64 6e 73 72 76 5c 62  | .....file...+.......g.d:\dnsrv\b | 
| 565c0 |  61 73 65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c    68 5c 65 78 73 75 70 2e 69 6e 63 00 00 00 00 00  | ase\crts\crtw32\h\exsup.inc..... | 
| 565e0 |  00 00 00 00 00 00 00 00 00 00 00 00 2e 66 69 6c    65 00 00 00 00 00 00 00 fe ff 00 00 67 03 64 3a  | .............file...........g.d: | 
| 56600 |  5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73    5c 63 72 74 77 33 32 5c 6d 69 73 63 5c 69 33 38  | \dnsrv\base\crts\crtw32\misc\i38 | 
| 56620 |  36 5c 65 78 73 75 70 2e 61 73 6d 00 00 00 00 00    00 00 00 00 24 24 24 30 30 30 30 31 00 00 00 00  | 6\exsup.asm.........$$$00001.... | 
| 56640 |  01 00 20 00 03 01 31 00 00 00 00 00 00 00 2e 02    00 00 00 00 00 00 00 00 2e 62 66 00 00 00 00 00  | ......1..................bf..... | 
| 56660 |  00 00 00 00 01 00 00 00 65 01 00 00 00 00 7c 00    00 00 00 00 00 00 00 00 00 00 00 00 2e 6c 66 00  | ........e.....|..............lf. | 
| 56680 |  00 00 00 00 01 00 00 00 01 00 00 00 65 00 2e 65    66 00 00 00 00 00 00 00 00 00 01 00 00 00 65 01  | ............e..ef.............e. | 
| 566a0 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 6a 00 00 00 00 00 00 00 01 00  | ......................j......... | 
| 566c0 |  20 00 02 01 38 00 00 00 20 00 00 00 34 02 00 00    00 00 00 00 00 00 2e 62 66 00 00 00 00 00 00 00  | ....8.......4..........bf....... | 
| 566e0 |  00 00 01 00 00 00 65 01 00 00 00 00 7e 00 00 00    00 00 00 00 00 00 00 00 00 00 2e 6c 66 00 00 00  | ......e.....~..............lf... | 
| 56700 |  00 00 08 00 00 00 01 00 00 00 65 00 2e 65 66 00    00 00 00 00 20 00 00 00 01 00 00 00 65 01 00 00  | ..........e..ef.............e... | 
| 56720 |  00 00 86 00 00 00 00 00 00 00 00 00 00 00 00 00    24 24 24 30 30 30 30 33 20 00 00 00 01 00 20 00  | ................$$$00003........ | 
| 56740 |  03 01 3f 00 00 00 00 00 00 00 64 02 00 00 00 00    00 00 00 00 2e 62 66 00 00 00 00 00 20 00 00 00  | ..?.......d..........bf......... | 
| 56760 |  01 00 00 00 65 01 00 00 00 00 96 00 00 00 00 00    00 00 00 00 00 00 00 00 2e 6c 66 00 00 00 00 00  | ....e....................lf..... | 
| 56780 |  01 00 00 00 01 00 00 00 65 00 2e 65 66 00 00 00    00 00 20 00 00 00 01 00 00 00 65 01 00 00 00 00  | ........e..ef.............e..... | 
| 567a0 |  86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 7b 00 00 00 20 00 00 00 01 00 20 00 03 01  | ..................{............. | 
| 567c0 |  46 00 00 00 3b 00 00 00 6a 02 00 00 00 00 00 00    00 00 2e 62 66 00 00 00 00 00 20 00 00 00 01 00  | F...;...j..........bf........... | 
| 567e0 |  00 00 65 01 00 00 00 00 97 00 00 00 00 00 00 00    00 00 00 00 00 00 2e 6c 66 00 00 00 00 00 14 00  | ..e....................lf....... | 
| 56800 |  00 00 01 00 00 00 65 00 2e 65 66 00 00 00 00 00    5b 00 00 00 01 00 00 00 65 01 00 00 00 00 b4 00  | ......e..ef.....[.......e....... | 
| 56820 |  00 00 00 00 00 00 00 00 00 00 00 00 24 24 24 30    30 30 30 35 5b 00 00 00 01 00 20 00 03 01 4d 00  | ............$$$00005[.........M. | 
| 56840 |  00 00 00 00 00 00 e2 02 00 00 00 00 00 00 00 00    2e 62 66 00 00 00 00 00 5b 00 00 00 01 00 00 00  | .................bf.....[....... | 
| 56860 |  65 01 00 00 00 00 cc 00 00 00 00 00 00 00 00 00    00 00 00 00 2e 6c 66 00 00 00 00 00 01 00 00 00  | e....................lf......... | 
| 56880 |  01 00 00 00 65 00 2e 65 66 00 00 00 00 00 5b 00    00 00 01 00 00 00 65 01 00 00 00 00 b4 00 00 00  | ....e..ef.....[.......e......... | 
| 568a0 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 8c 00    00 00 5b 00 00 00 01 00 20 00 02 01 54 00 00 00  | ..................[.........T... | 
| 568c0 |  70 00 00 00 e8 02 00 00 00 00 00 00 00 00 2e 62    66 00 00 00 00 00 5b 00 00 00 01 00 00 00 65 01  | p..............bf.....[.......e. | 
| 568e0 |  00 00 00 00 cd 00 00 00 00 00 00 00 00 00 00 00    00 00 2e 6c 66 00 00 00 00 00 25 00 00 00 01 00  | ...................lf.....%..... | 
| 56900 |  00 00 65 00 2e 65 66 00 00 00 00 00 cb 00 00 00    01 00 00 00 65 01 00 00 00 00 03 01 00 00 00 00  | ..e..ef.............e........... | 
| 56920 |  00 00 00 00 00 00 00 00 24 24 24 30 30 30 30 37    cb 00 00 00 01 00 20 00 03 01 5b 00 00 00 00 00  | ........$$$00007..........[..... | 
| 56940 |  00 00 c6 03 00 00 00 00 00 00 00 00 2e 62 66 00    00 00 00 00 cb 00 00 00 01 00 00 00 65 01 00 00  | .............bf.............e... | 
| 56960 |  00 00 09 01 00 00 00 00 00 00 00 00 00 00 00 00    2e 6c 66 00 00 00 00 00 01 00 00 00 01 00 00 00  | .................lf............. | 
| 56980 |  65 00 2e 65 66 00 00 00 00 00 cb 00 00 00 01 00    00 00 65 01 00 00 00 00 03 01 00 00 00 00 00 00  | e..ef.............e............. | 
| 569a0 |  00 00 00 00 00 00 00 00 00 00 9c 00 00 00 cb 00    00 00 01 00 20 00 02 01 62 00 00 00 23 00 00 00  | ........................b...#... | 
| 569c0 |  cc 03 00 00 00 00 00 00 00 00 2e 62 66 00 00 00    00 00 cb 00 00 00 01 00 00 00 65 01 00 00 00 00  | ...........bf.............e..... | 
| 569e0 |  0a 01 00 00 00 00 00 00 00 00 00 00 00 00 2e 6c    66 00 00 00 00 00 0b 00 00 00 01 00 00 00 65 00  | ...............lf.............e. | 
| 56a00 |  2e 65 66 00 00 00 00 00 ee 00 00 00 01 00 00 00    65 01 00 00 00 00 19 01 00 00 00 00 00 00 00 00  | .ef.............e............... | 
| 56a20 |  00 00 00 00 00 00 00 00 b3 00 00 00 ee 00 00 00    01 00 20 00 02 01 69 00 00 00 09 00 00 00 0e 04  | ......................i......... | 
| 56a40 |  00 00 00 00 00 00 00 00 2e 62 66 00 00 00 00 00    ee 00 00 00 01 00 00 00 65 01 00 00 00 00 26 01  | .........bf.............e.....&. | 
| 56a60 |  00 00 00 00 00 00 00 00 00 00 00 00 2e 6c 66 00    00 00 00 00 05 00 00 00 01 00 00 00 65 00 2e 65  | .............lf.............e..e | 
| 56a80 |  66 00 00 00 00 00 f7 00 00 00 01 00 00 00 65 01    00 00 00 00 2a 01 00 00 00 00 00 00 00 00 00 00  | f.............e.....*........... | 
| 56aa0 |  00 00 00 00 00 00 c1 00 00 00 f7 00 00 00 01 00    20 00 02 01 70 00 00 00 1e 00 00 00 2c 04 00 00  | ....................p.......,... | 
| 56ac0 |  00 00 00 00 00 00 2e 62 66 00 00 00 00 00 f7 00    00 00 01 00 00 00 65 01 00 00 00 00 2d 01 00 00  | .......bf.............e.....-... | 
| 56ae0 |  00 00 00 00 00 00 00 00 00 00 2e 6c 66 00 00 00    00 00 11 00 00 00 01 00 00 00 65 00 2e 65 66 00  | ...........lf.............e..ef. | 
| 56b00 |  00 00 00 00 15 01 00 00 01 00 00 00 65 01 00 00    00 00 41 01 00 00 00 00 00 00 00 00 00 00 00 00  | ............e.....A............. | 
| 56b20 |  24 24 24 30 30 30 31 31 15 01 00 00 01 00 20 00    03 01 77 00 00 00 00 00 00 00 92 04 00 00 00 00  | $$$00011..........w............. | 
| 56b40 |  00 00 00 00 2e 62 66 00 00 00 00 00 15 01 00 00    01 00 00 00 65 01 00 00 00 00 46 01 00 00 00 00  | .....bf.............e.....F..... | 
| 56b60 |  00 00 00 00 00 00 00 00 2e 6c 66 00 00 00 00 00    01 00 00 00 01 00 00 00 65 00 2e 65 66 00 00 00  | .........lf.............e..ef... | 
| 56b80 |  00 00 15 01 00 00 01 00 00 00 65 01 00 00 00 00    41 01 00 00 00 00 00 00 00 00 00 00 00 00 5f 6c  | ..........e.....A............._l | 
| 56ba0 |  75 5f 64 6f 6e 65 bd 00 00 00 01 00 00 00 06 00    00 00 00 00 ce 00 00 00 95 00 00 00 01 00 00 00  | u_done.......................... | 
| 56bc0 |  06 00 00 00 00 00 d9 00 00 00 5a 00 00 00 01 00    00 00 06 00 5f 5f 4e 4c 47 5f 47 6f 01 01 00 00  | ..........Z.........__NLG_Go.... | 
| 56be0 |  01 00 00 00 06 00 00 00 00 00 e4 00 00 00 bb 00    00 00 01 00 00 00 06 00 5f 6c 75 5f 74 6f 70 00  | ........................_lu_top. | 
| 56c00 |  79 00 00 00 01 00 00 00 06 00 5f 61 74 5f 64 6f    6e 65 ed 00 00 00 01 00 00 00 06 00 2e 73 78 64  | y........._at_done...........sxd | 
| 56c20 |  61 74 61 00 00 00 00 00 06 00 00 00 03 01 04 00    00 00 00 00 00 00 00 00 00 00 06 00 00 00 00 00  | ata............................. | 
| 56c40 |  f1 00 00 00 5f 52 74 6c 55 6e 77 69 6e 64 40 31    36 00 5f 5f 4e 4c 47 5f 44 69 73 70 61 74 63 68  | ...._RtlUnwind@16.__NLG_Dispatch | 
| 56c60 |  32 00 5f 67 75 5f 72 65 74 75 72 6e 00 5f 5f 4e    4c 47 5f 44 69 73 70 61 74 63 68 00 5f 5f 4e 4c  | 2._gu_return.__NLG_Dispatch.__NL | 
| 56c80 |  47 5f 52 65 74 75 72 6e 32 00 5f 5f 4e 4c 47 5f    44 65 73 74 69 6e 61 74 69 6f 6e 00 5f 5f 65 78  | G_Return2.__NLG_Destination.__ex | 
| 56ca0 |  63 65 70 74 5f 6c 69 73 74 00 5f 5f 67 6c 6f 62    61 6c 5f 75 6e 77 69 6e 64 32 00 5f 5f 75 6e 77  | cept_list.__global_unwind2.__unw | 
| 56cc0 |  69 6e 64 5f 68 61 6e 64 6c 65 72 00 5f 5f 6c 6f    63 61 6c 5f 75 6e 77 69 6e 64 32 00 5f 5f 61 62  | ind_handler.__local_unwind2.__ab | 
| 56ce0 |  6e 6f 72 6d 61 6c 5f 74 65 72 6d 69 6e 61 74 69    6f 6e 00 5f 5f 4e 4c 47 5f 4e 6f 74 69 66 79 31  | normal_termination.__NLG_Notify1 | 
| 56d00 |  00 5f 5f 4e 4c 47 5f 4e 6f 74 69 66 79 00 5f 63    6f 6e 74 69 6e 75 65 5f 00 5f 75 68 5f 72 65 74  | .__NLG_Notify._continue_._uh_ret | 
| 56d20 |  75 72 6e 00 5f 6c 75 5f 63 6f 6e 74 69 6e 75 65    00 0a 2f 39 34 20 20 20 20 20 20 20 20 20 20 20  | urn._lu_continue../94........... | 
| 56d40 |  20 20 31 30 39 39 36 32 31 32 35 34 20 20 20 20    20 20 20 20 20 20 20 20 20 20 31 30 30 36 36 36  | ..1099621254..............100666 | 
| 56d60 |  20 20 34 30 34 39 20 20 20 20 20 20 60 0a 4c 01    04 00 86 e3 8a 41 a8 0a 00 00 43 00 00 00 00 00  | ..4049......`.L......A....C..... | 
| 56d80 |  00 00 2e 74 65 78 74 00 00 00 00 00 00 00 00 00    00 00 b6 00 00 00 b4 00 00 00 6a 01 00 00 88 01  | ...text...................j..... | 
| 56da0 |  00 00 03 00 3d 00 20 00 30 60 2e 64 61 74 61 00    00 00 b6 00 00 00 00 00 00 00 00 00 00 00 00 00  | ....=...0`.data................. | 
| 56dc0 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00    30 c0 2e 64 65 62 75 67 24 53 b6 00 00 00 00 00  | ..............@.0..debug$S...... | 
| 56de0 |  00 00 69 02 00 00 f6 02 00 00 60 05 00 00 00 00    00 00 12 00 00 00 40 00 10 42 2e 64 65 62 75 67  | ..i.......`...........@..B.debug | 
| 56e00 |  24 54 1f 03 00 00 00 00 00 00 94 04 00 00 14 06    00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00  | $T............................@. | 
| 56e20 |  10 42 56 43 31 30 58 43 30 30 55 8b ec 83 ec 08    53 56 57 55 fc 8b 5d 0c 8b 45 08 f7 40 04 06 00  | .BVC10XC00U.....SVWU..]..E..@... | 
| 56e40 |  00 00 75 77 89 45 f8 8b 45 10 89 45 fc 8d 45 f8    89 43 14 8b 73 0c 8b 7b 08 83 fe ff 74 56 8d 0c  | ..uw.E..E..E..E..C..s..{....tV.. | 
| 56e60 |  76 83 7c 8f 04 00 74 3a 56 55 8b 6b 10 ff 54 8f    04 5d 5e 8b 5d 0c 0b c0 74 28 78 31 8b 7b 08 53  | v.|...t:VU.k..T..]^.]...t(x1.{.S | 
| 56e80 |  e8 00 00 00 00 83 c4 04 8b 6b 10 56 53 e8 00 00    00 00 83 c4 08 8d 0c 76 8b 04 8f 89 43 0c ff 54  | .........k.VS..........v....C..T | 
| 56ea0 |  8f 08 8b 7b 08 8d 0c 76 8b 34 8f eb ac b8 00 00    00 00 eb 1c b8 01 00 00 00 eb 15 55 8b 6b 10 6a  | ...{...v.4.................U.k.j | 
| 56ec0 |  ff 53 e8 00 00 00 00 83 c4 08 5d b8 01 00 00 00    5d 5f 5e 5b 8b e5 5d c3 5f 00 00 00 0e 00 00 00  | .S........].....]_^[..]._....... | 
| 56ee0 |  14 00 6c 00 00 00 0f 00 00 00 14 00 a1 00 00 00    0f 00 00 00 14 00 28 00 00 00 00 00 2f 00 00 00  | ..l...................(...../... | 
| 56f00 |  00 00 08 00 00 00 ff 7f 12 00 00 00 04 00 13 00    00 00 06 00 16 00 00 00 07 00 19 00 00 00 09 00  | ................................ | 
| 56f20 |  20 00 00 00 0a 00 22 00 00 00 0f 00 25 00 00 00    10 00 28 00 00 00 11 00 2b 00 00 00 12 00 2e 00  | ......".....%.....(.....+....... | 
| 56f40 |  00 00 13 00 31 00 00 00 15 00 34 00 00 00 16 00    37 00 00 00 18 00 3a 00 00 00 19 00 3c 00 00 00  | ....1.....4.....7.....:.....<... | 
| 56f60 |  1a 00 3f 00 00 00 1b 00 44 00 00 00 1c 00 46 00    00 00 1f 00 47 00 00 00 20 00 48 00 00 00 22 00  | ..?.....D.....F.....G.....H...". | 
| 56f80 |  4b 00 00 00 23 00 4f 00 00 00 25 00 50 00 00 00    26 00 51 00 00 00 28 00 54 00 00 00 2b 00 56 00  | K...#.O...%.P...&.Q...(.T...+.V. | 
| 56fa0 |  00 00 2c 00 58 00 00 00 2d 00 5a 00 00 00 31 00    5d 00 00 00 33 00 5e 00 00 00 34 00 63 00 00 00  | ..,.X...-.Z...1.]...3.^...4.c... | 
| 56fc0 |  35 00 66 00 00 00 38 00 69 00 00 00 3b 00 6a 00    00 00 3c 00 6b 00 00 00 3d 00 70 00 00 00 3e 00  | 5.f...8.i...;.j...<.k...=.p...>. | 
| 56fe0 |  73 00 00 00 40 00 76 00 00 00 44 00 79 00 00 00    45 00 7c 00 00 00 46 00 80 00 00 00 4b 00 83 00  | s...@.v...D.y...E.|...F.....K... | 
| 57000 |  00 00 4c 00 86 00 00 00 4d 00 89 00 00 00 4e 00    8b 00 00 00 51 00 90 00 00 00 52 00 92 00 00 00  | ..L.....M.....N.....Q.....R..... | 
| 57020 |  55 00 97 00 00 00 56 00 99 00 00 00 59 00 9a 00    00 00 5a 00 9d 00 00 00 5b 00 9f 00 00 00 5c 00  | U.....V.....Y.....Z.....[.....\. | 
| 57040 |  a0 00 00 00 5d 00 a5 00 00 00 5e 00 a8 00 00 00    5f 00 a9 00 00 00 61 00 ae 00 00 00 64 00 36 00  | ....].....^....._.....a.....d.6. | 
| 57060 |  00 00 00 00 04 00 00 00 f1 00 00 00 00 00 00 00    3c 00 01 11 00 00 00 00 64 3a 5c 64 6e 73 72 76  | ................<.......d:\dnsrv | 
| 57080 |  5c 62 61 73 65 5c 63 72 74 73 5c 63 72 74 77 33    32 5c 6d 69 73 63 5c 6e 74 5c 6f 62 6a 5c 69 33  | \base\crts\crtw32\misc\nt\obj\i3 | 
| 570a0 |  38 36 5c 65 78 73 75 70 32 2e 6f 62 6a 00 34 00    16 11 03 00 00 00 03 00 00 00 00 00 00 00 07 00  | 86\exsup2.obj.4................. | 
| 570c0 |  0a 00 c3 0f 4d 69 63 72 6f 73 6f 66 74 20 28 52    29 20 4d 61 63 72 6f 20 41 73 73 65 6d 62 6c 65  | ....Microsoft.(R).Macro.Assemble | 
| 570e0 |  72 00 00 00 37 00 10 11 00 00 00 00 00 00 00 00    00 00 00 00 ae 00 00 00 00 00 00 00 ae 00 00 00  | r...7........................... | 
| 57100 |  00 10 00 00 00 00 00 00 00 00 00 5f 5f 65 78 63    65 70 74 5f 68 61 6e 64 6c 65 72 32 00 02 00 06  | ...........__except_handler2.... | 
| 57120 |  00 0f 00 08 11 02 10 00 00 5f 4a 4d 50 5f 42 55    46 00 16 00 05 11 00 00 00 00 00 00 00 5f 6c 68  | ........._JMP_BUF............_lh | 
| 57140 |  5f 63 6f 6e 74 69 6e 75 65 00 1e 00 08 11 05 10    00 00 5f 45 58 43 45 50 54 49 4f 4e 5f 50 4f 49  | _continue........._EXCEPTION_POI | 
| 57160 |  4e 54 45 52 53 5f 43 52 54 00 1c 00 08 11 07 10    00 00 5f 45 58 43 45 50 54 49 4f 4e 5f 52 45 43  | NTERS_CRT........._EXCEPTION_REC | 
| 57180 |  4f 52 44 5f 43 52 54 00 15 00 05 11 00 00 00 00    00 00 00 5f 6c 68 5f 64 69 73 6d 69 73 73 00 2e  | ORD_CRT............_lh_dismiss.. | 
| 571a0 |  00 0f 11 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 09 10 00 00 00  | ................................ | 
| 571c0 |  00 00 00 00 00 00 24 24 24 30 30 30 30 31 00 02    00 06 00 14 00 05 11 00 00 00 00 00 00 00 5f 6c  | ......$$$00001................_l | 
| 571e0 |  68 5f 72 65 74 75 72 6e 00 2e 00 0f 11 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | h_return........................ | 
| 57200 |  00 00 00 00 00 0b 10 00 00 00 00 00 00 00 00 00    24 24 24 30 30 30 30 33 00 02 00 06 00 11 00 05  | ................$$$00003........ | 
| 57220 |  11 00 00 00 00 00 00 00 5f 6c 68 5f 74 6f 70 00    18 00 08 11 0d 10 00 00 5f 53 43 4f 50 45 54 41  | ........_lh_top........._SCOPETA | 
| 57240 |  42 4c 45 5f 45 4e 54 52 59 00 13 00 05 11 00 00    00 00 00 00 00 5f 6c 68 5f 62 61 67 69 74 00 17  | BLE_ENTRY............_lh_bagit.. | 
| 57260 |  00 05 11 00 00 00 00 00 00 00 5f 6c 68 5f 75 6e    77 69 6e 64 69 6e 67 00 21 00 08 11 0f 10 00 00  | .........._lh_unwinding.!....... | 
| 57280 |  5f 43 38 5f 45 58 43 45 50 54 49 4f 4e 5f 52 45    47 49 53 54 52 41 54 49 4f 4e 00 1e 00 08 11 11  | _C8_EXCEPTION_REGISTRATION...... | 
| 572a0 |  10 00 00 5f 45 58 43 45 50 54 49 4f 4e 5f 52 45    47 49 53 54 52 41 54 49 4f 4e 00 10 00 08 11 13  | ..._EXCEPTION_REGISTRATION...... | 
| 572c0 |  10 00 00 5f 4e 4c 47 5f 49 4e 46 4f 00 00 a0 00    00 00 2f 00 00 00 0b 00 a4 00 00 00 2f 00 00 00  | ..._NLG_INFO....../........./... | 
| 572e0 |  0a 00 d2 00 00 00 3d 00 00 00 0b 00 d6 00 00 00    3d 00 00 00 0a 00 28 01 00 00 3e 00 00 00 0b 00  | ......=.........=.....(...>..... | 
| 57300 |  2c 01 00 00 3e 00 00 00 0a 00 5b 01 00 00 28 00    00 00 0b 00 5f 01 00 00 28 00 00 00 0a 00 73 01  | ,...>.....[...(....._...(.....s. | 
| 57320 |  00 00 3f 00 00 00 0b 00 77 01 00 00 3f 00 00 00    0a 00 a5 01 00 00 36 00 00 00 0b 00 a9 01 00 00  | ..?.....w...?.........6......... | 
| 57340 |  36 00 00 00 0a 00 bd 01 00 00 40 00 00 00 0b 00    c1 01 00 00 40 00 00 00 0a 00 ea 01 00 00 41 00  | 6.........@.........@.........A. | 
| 57360 |  00 00 0b 00 ee 01 00 00 41 00 00 00 0a 00 ff 01    00 00 42 00 00 00 0b 00 03 02 00 00 42 00 00 00  | ........A.........B.........B... | 
| 57380 |  0a 00 04 00 00 00 0e 00 08 10 03 00 00 00 e4 00    00 00 01 10 00 00 06 00 01 12 00 00 00 00 1e 00  | ................................ | 
| 573a0 |  05 15 00 00 01 00 03 10 00 00 00 00 00 00 00 00    00 00 40 00 5f 4a 4d 50 5f 42 55 46 00 f3 06 01  | ..................@._JMP_BUF.... | 
| 573c0 |  03 12 0d 15 03 00 22 00 00 00 00 00 73 61 76 65    64 5f 65 62 70 00 0d 15 03 00 22 00 00 00 04 00  | ......".....saved_ebp....."..... | 
| 573e0 |  73 61 76 65 64 5f 65 62 78 00 0d 15 03 00 22 00    00 00 08 00 73 61 76 65 64 5f 65 64 69 00 0d 15  | saved_ebx.....".....saved_edi... | 
| 57400 |  03 00 22 00 00 00 0c 00 73 61 76 65 64 5f 65 73    69 00 0d 15 03 00 22 00 00 00 10 00 73 61 76 65  | ..".....saved_esi.....".....save | 
| 57420 |  64 5f 65 73 70 00 0d 15 03 00 22 00 00 00 14 00    73 61 76 65 64 5f 72 65 74 75 72 6e 00 f1 0d 15  | d_esp.....".....saved_return.... | 
| 57440 |  03 00 22 00 00 00 18 00 73 61 76 65 64 5f 78 72    65 67 69 73 74 72 61 74 69 6f 6e 00 f2 f1 0d 15  | ..".....saved_xregistration..... | 
| 57460 |  03 00 22 00 00 00 1c 00 73 61 76 65 64 5f 74 72    79 6c 65 76 65 6c 00 f3 f2 f1 0d 15 03 00 22 00  | ..".....saved_trylevel........". | 
| 57480 |  00 00 20 00 76 65 72 73 69 6f 6e 5f 63 6f 6f 6b    69 65 00 f3 f2 f1 0d 15 03 00 22 00 00 00 24 00  | ....version_cookie........"...$. | 
| 574a0 |  75 6e 77 69 6e 64 5f 66 75 6e 63 00 f2 f1 0d 15    03 00 22 00 00 00 28 00 75 6e 77 69 6e 64 5f 64  | unwind_func......."...(.unwind_d | 
| 574c0 |  61 74 61 00 f2 f1 06 00 0e 00 00 00 f2 f1 2e 00    05 15 00 00 01 00 06 10 00 00 00 00 00 00 00 00  | ata............................. | 
| 574e0 |  00 00 08 00 5f 45 58 43 45 50 54 49 4f 4e 5f 50    4f 49 4e 54 45 52 53 5f 43 52 54 00 f2 f1 32 00  | ...._EXCEPTION_POINTERS_CRT...2. | 
| 57500 |  03 12 0d 15 03 00 22 00 00 00 00 00 65 70 5f 78    72 65 63 6f 72 64 00 f3 f2 f1 0d 15 03 00 22 00  | ......".....ep_xrecord........". | 
| 57520 |  00 00 04 00 65 70 5f 63 6f 6e 74 65 78 74 00 f3    f2 f1 2a 00 05 15 00 00 01 00 08 10 00 00 00 00  | ....ep_context....*............. | 
| 57540 |  00 00 00 00 00 00 50 00 5f 45 58 43 45 50 54 49    4f 4e 5f 52 45 43 4f 52 44 5f 43 52 54 00 ae 00  | ......P._EXCEPTION_RECORD_CRT... | 
| 57560 |  03 12 0d 15 03 00 22 00 00 00 00 00 65 78 63 65    70 74 69 6f 6e 5f 6e 75 6d 62 65 72 00 f1 0d 15  | ......".....exception_number.... | 
| 57580 |  03 00 22 00 00 00 04 00 65 78 63 65 70 74 69 6f    6e 5f 66 6c 61 67 73 00 f2 f1 0d 15 03 00 22 00  | ..".....exception_flags.......". | 
| 575a0 |  00 00 08 00 65 78 63 65 70 74 69 6f 6e 5f 72 65    63 6f 72 64 00 f1 0d 15 03 00 22 00 00 00 0c 00  | ....exception_record......"..... | 
| 575c0 |  65 78 63 65 70 74 69 6f 6e 5f 61 64 64 72 65 73    73 00 0d 15 03 00 22 00 00 00 10 00 6e 75 6d 62  | exception_address.....".....numb | 
| 575e0 |  65 72 5f 70 61 72 61 6d 65 74 65 72 73 00 0d 15    03 00 22 00 00 00 14 00 65 78 63 65 70 74 69 6f  | er_parameters.....".....exceptio | 
| 57600 |  6e 5f 69 6e 66 6f 72 6d 61 74 69 6f 6e 00 0e 00    08 10 03 00 00 00 c3 00 00 00 0a 10 00 00 06 00  | n_information................... | 
| 57620 |  01 12 00 00 00 00 0e 00 08 10 03 00 00 00 05 00    00 00 0c 10 00 00 06 00 01 12 00 00 00 00 26 00  | ..............................&. | 
| 57640 |  05 15 00 00 01 00 0e 10 00 00 00 00 00 00 00 00    00 00 0c 00 5f 53 43 4f 50 45 54 41 42 4c 45 5f  | ...................._SCOPETABLE_ | 
| 57660 |  45 4e 54 52 59 00 4e 00 03 12 0d 15 03 00 22 00    00 00 00 00 65 6e 63 6c 6f 73 69 6e 67 5f 6c 65  | ENTRY.N.......".....enclosing_le | 
| 57680 |  76 65 6c 00 f2 f1 0d 15 03 00 22 00 00 00 04 00    66 69 6c 74 65 72 00 f3 f2 f1 0d 15 03 00 22 00  | vel.......".....filter........". | 
| 576a0 |  00 00 08 00 73 70 65 63 69 66 69 63 5f 68 61 6e    64 6c 65 72 00 f1 32 00 05 15 00 00 01 00 10 10  | ....specific_handler..2......... | 
| 576c0 |  00 00 00 00 00 00 00 00 00 00 18 00 5f 43 38 5f    45 58 43 45 50 54 49 4f 4e 5f 52 45 47 49 53 54  | ............_C8_EXCEPTION_REGIST | 
| 576e0 |  52 41 54 49 4f 4e 00 f1 f2 f1 52 00 03 12 0d 15    03 00 22 00 00 00 08 00 73 63 6f 70 65 74 61 62  | RATION....R.......".....scopetab | 
| 57700 |  6c 65 00 f3 f2 f1 0d 15 03 00 22 00 00 00 0c 00    74 72 79 6c 65 76 65 6c 00 f1 0d 15 03 00 22 00  | le........".....trylevel......". | 
| 57720 |  00 00 10 00 5f 65 62 70 00 f1 0d 15 03 00 22 00    00 00 14 00 78 70 6f 69 6e 74 65 72 73 00 2e 00  | ...._ebp......".....xpointers... | 
| 57740 |  05 15 00 00 01 00 12 10 00 00 00 00 00 00 00 00    00 00 08 00 5f 45 58 43 45 50 54 49 4f 4e 5f 52  | ...................._EXCEPTION_R | 
| 57760 |  45 47 49 53 54 52 41 54 49 4f 4e 00 f2 f1 26 00    03 12 0d 15 03 00 22 00 00 00 00 00 70 72 65 76  | EGISTRATION...&.......".....prev | 
| 57780 |  00 f1 0d 15 03 00 22 00 00 00 04 00 68 61 6e 64    6c 65 72 00 f2 f1 1e 00 05 15 00 00 01 00 14 10  | ......".....handler............. | 
| 577a0 |  00 00 00 00 00 00 00 00 00 00 10 00 5f 4e 4c 47    5f 49 4e 46 4f 00 5e 00 03 12 0d 15 03 00 22 00  | ............_NLG_INFO.^.......". | 
| 577c0 |  00 00 00 00 64 77 53 69 67 00 0d 15 03 00 22 00    00 00 04 00 75 6f 66 66 44 65 73 74 69 6e 61 74  | ....dwSig.....".....uoffDestinat | 
| 577e0 |  69 6f 6e 00 f2 f1 0d 15 03 00 22 00 00 00 08 00    64 77 43 6f 64 65 00 f3 f2 f1 0d 15 03 00 22 00  | ion.......".....dwCode........". | 
| 57800 |  00 00 0c 00 75 6f 66 66 46 72 61 6d 65 50 6f 69    6e 74 65 72 00 f1 2e 66 69 6c 65 00 00 00 10 00  | ....uoffFramePointer...file..... | 
| 57820 |  00 00 fe ff 00 00 67 03 64 3a 5c 64 6e 73 72 76    5c 62 61 73 65 5c 63 72 74 73 5c 63 72 74 77 33  | ......g.d:\dnsrv\base\crts\crtw3 | 
| 57840 |  32 5c 6d 69 73 63 5c 69 33 38 36 5c 65 78 73 75    70 32 2e 61 73 6d 00 00 00 00 00 00 00 00 40 63  | 2\misc\i386\exsup2.asm........@c | 
| 57860 |  6f 6d 70 2e 69 64 c3 0f 0f 00 ff ff 00 00 03 00    40 66 65 61 74 2e 30 30 01 00 00 00 ff ff 00 00  | omp.id..........@feat.00........ | 
| 57880 |  03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00    00 00 03 01 b6 00 00 00 03 00 3d 00 00 00 00 00  | ...text...................=..... | 
| 578a0 |  00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00    00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00  | .......data..................... | 
| 578c0 |  00 00 00 00 00 00 00 00 00 00 2e 64 65 62 75 67    24 53 00 00 00 00 03 00 00 00 03 01 69 02 00 00  | ...........debug$S..........i... | 
| 578e0 |  12 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64    65 62 75 67 24 54 00 00 00 00 04 00 00 00 03 01  | ...............debug$T.......... | 
| 57900 |  94 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00  | ................................ | 
| 57920 |  00 00 02 00 00 00 00 00 15 00 00 00 00 00 00 00    00 00 00 00 02 00 2e 66 69 6c 65 00 00 00 14 00  | .......................file..... | 
| 57940 |  00 00 fe ff 00 00 67 03 64 3a 5c 64 6e 73 72 76    5c 62 61 73 65 5c 63 72 74 73 5c 63 72 74 77 33  | ......g.d:\dnsrv\base\crts\crtw3 | 
| 57960 |  32 5c 68 5c 70 76 65 72 73 69 6f 6e 2e 69 6e 63    00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 66  | 2\h\pversion.inc...............f | 
| 57980 |  69 6c 65 00 00 00 18 00 00 00 fe ff 00 00 67 03    64 3a 5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72  | ile...........g.d:\dnsrv\base\cr | 
| 579a0 |  74 73 5c 63 72 74 77 33 32 5c 6d 69 73 63 5c 69    33 38 36 5c 65 78 73 75 70 32 2e 61 73 6d 00 00  | ts\crtw32\misc\i386\exsup2.asm.. | 
| 579c0 |  00 00 00 00 00 00 2e 66 69 6c 65 00 00 00 1c 00    00 00 fe ff 00 00 67 03 64 3a 5c 64 6e 73 72 76  | .......file...........g.d:\dnsrv | 
| 579e0 |  5c 62 61 73 65 5c 63 72 74 73 5c 63 72 74 77 33    32 5c 68 5c 63 6d 61 63 72 6f 73 2e 69 6e 63 00  | \base\crts\crtw32\h\cmacros.inc. | 
| 57a00 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 66    69 6c 65 00 00 00 20 00 00 00 fe ff 00 00 67 03  | ...............file...........g. | 
| 57a20 |  64 3a 5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72    74 73 5c 63 72 74 77 33 32 5c 6d 69 73 63 5c 69  | d:\dnsrv\base\crts\crtw32\misc\i | 
| 57a40 |  33 38 36 5c 65 78 73 75 70 32 2e 61 73 6d 00 00    00 00 00 00 00 00 2e 66 69 6c 65 00 00 00 24 00  | 386\exsup2.asm.........file...$. | 
| 57a60 |  00 00 fe ff 00 00 67 03 64 3a 5c 64 6e 73 72 76    5c 62 61 73 65 5c 63 72 74 73 5c 63 72 74 77 33  | ......g.d:\dnsrv\base\crts\crtw3 | 
| 57a80 |  32 5c 68 5c 65 78 73 75 70 2e 69 6e 63 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 66  | 2\h\exsup.inc..................f | 
| 57aa0 |  69 6c 65 00 00 00 00 00 00 00 fe ff 00 00 67 03    64 3a 5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72  | ile...........g.d:\dnsrv\base\cr | 
| 57ac0 |  74 73 5c 63 72 74 77 33 32 5c 6d 69 73 63 5c 69    33 38 36 5c 65 78 73 75 70 32 2e 61 73 6d 00 00  | ts\crtw32\misc\i386\exsup2.asm.. | 
| 57ae0 |  00 00 00 00 00 00 24 24 24 30 30 30 30 31 08 00    00 00 01 00 20 00 03 01 2a 00 00 00 00 00 00 00  | ......$$$00001..........*....... | 
| 57b00 |  88 01 00 00 2f 00 00 00 00 00 2e 62 66 00 00 00    00 00 08 00 00 00 01 00 00 00 65 01 00 00 00 00  | ..../......bf.............e..... | 
| 57b20 |  95 00 00 00 00 00 00 00 31 00 00 00 00 00 2e 6c    66 00 00 00 00 00 01 00 00 00 01 00 00 00 65 00  | ........1......lf.............e. | 
| 57b40 |  2e 65 66 00 00 00 00 00 08 00 00 00 01 00 00 00    65 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | .ef.............e............... | 
| 57b60 |  00 00 00 00 00 00 00 00 25 00 00 00 08 00 00 00    01 00 20 00 02 01 31 00 00 00 ae 00 00 00 8e 01  | ........%.............1......... | 
| 57b80 |  00 00 36 00 00 00 00 00 2e 62 66 00 00 00 00 00    08 00 00 00 01 00 00 00 65 01 00 00 00 00 9b 00  | ..6......bf.............e....... | 
| 57ba0 |  00 00 00 00 00 00 38 00 00 00 00 00 2e 6c 66 00    00 00 00 00 3b 00 00 00 01 00 00 00 65 00 2e 65  | ......8......lf.....;.......e..e | 
| 57bc0 |  66 00 00 00 00 00 b6 00 00 00 01 00 00 00 65 01    00 00 00 00 ff 00 00 00 00 00 00 00 00 00 00 00  | f.............e................. | 
| 57be0 |  00 00 24 24 24 30 30 30 30 33 b6 00 00 00 01 00    20 00 03 01 38 00 00 00 00 00 00 00 f0 02 00 00  | ..$$$00003..........8........... | 
| 57c00 |  00 00 00 00 00 00 2e 62 66 00 00 00 00 00 b6 00    00 00 01 00 00 00 65 01 00 00 00 00 01 01 00 00  | .......bf.............e......... | 
| 57c20 |  00 00 00 00 00 00 00 00 00 00 2e 6c 66 00 00 00    00 00 01 00 00 00 01 00 00 00 65 00 2e 65 66 00  | ...........lf.............e..ef. | 
| 57c40 |  00 00 00 00 b6 00 00 00 01 00 00 00 65 01 00 00    00 00 ff 00 00 00 00 00 00 00 00 00 00 00 00 00  | ............e................... | 
| 57c60 |  00 00 00 00 37 00 00 00 80 00 00 00 01 00 00 00    06 00 00 00 00 00 44 00 00 00 8b 00 00 00 01 00  | ....7.................D......... | 
| 57c80 |  00 00 06 00 00 00 00 00 50 00 00 00 ae 00 00 00    01 00 00 00 06 00 5f 6c 68 5f 74 6f 70 00 37 00  | ........P............._lh_top.7. | 
| 57ca0 |  00 00 01 00 00 00 06 00 00 00 00 00 5b 00 00 00    92 00 00 00 01 00 00 00 06 00 00 00 00 00 65 00  | ............[.................e. | 
| 57cc0 |  00 00 99 00 00 00 01 00 00 00 06 00 73 00 00 00    5f 5f 67 6c 6f 62 61 6c 5f 75 6e 77 69 6e 64 32  | ............s...__global_unwind2 | 
| 57ce0 |  00 5f 5f 6c 6f 63 61 6c 5f 75 6e 77 69 6e 64 32    00 5f 5f 65 78 63 65 70 74 5f 68 61 6e 64 6c 65  | .__local_unwind2.__except_handle | 
| 57d00 |  72 32 00 5f 6c 68 5f 63 6f 6e 74 69 6e 75 65 00    5f 6c 68 5f 64 69 73 6d 69 73 73 00 5f 6c 68 5f  | r2._lh_continue._lh_dismiss._lh_ | 
| 57d20 |  72 65 74 75 72 6e 00 5f 6c 68 5f 62 61 67 69 74    00 5f 6c 68 5f 75 6e 77 69 6e 64 69 6e 67 00 0a  | return._lh_bagit._lh_unwinding.. | 
| 57d40 |  2f 31 33 38 20 20 20 20 20 20 20 20 20 20 20 20    31 30 39 39 36 32 31 32 35 34 20 20 20 20 20 20  | /138............1099621254...... | 
| 57d60 |  20 20 20 20 20 20 20 20 31 30 30 36 36 36 20 20    34 37 34 39 20 20 20 20 20 20 60 0a 4c 01 05 00  | ........100666..4749......`.L... | 
| 57d80 |  86 e3 8a 41 a8 0c 00 00 49 00 00 00 00 00 00 00    2e 74 65 78 74 00 00 00 00 00 00 00 00 00 00 00  | ...A....I........text........... | 
| 57da0 |  09 01 00 00 dc 00 00 00 e6 01 00 00 22 02 00 00    06 00 6a 00 20 00 30 60 2e 64 61 74 61 00 00 00  | ............".....j...0`.data... | 
| 57dc0 |  09 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 40 00 30 c0  | ............................@.0. | 
| 57de0 |  2e 64 65 62 75 67 24 53 09 01 00 00 00 00 00 00    8b 02 00 00 9e 04 00 00 2a 07 00 00 00 00 00 00  | .debug$S................*....... | 
| 57e00 |  14 00 00 00 40 00 10 42 2e 64 65 62 75 67 24 54    94 03 00 00 00 00 00 00 9c 04 00 00 f2 07 00 00  | ....@..B.debug$T................ | 
| 57e20 |  00 00 00 00 00 00 00 00 00 00 00 00 40 00 10 42    2e 64 65 62 75 67 24 46 30 08 00 00 00 00 00 00  | ............@..B.debug$F0....... | 
| 57e40 |  10 00 00 00 8e 0c 00 00 9e 0c 00 00 00 00 00 00    01 00 00 00 40 00 10 42 56 43 32 30 58 43 30 30  | ....................@..BVC20XC00 | 
| 57e60 |  55 8b ec 83 ec 08 53 56 57 55 fc 8b 5d 0c 8b 45    08 f7 40 04 06 00 00 00 0f 85 ab 00 00 00 89 45  | U.....SVWU..]..E..@............E | 
| 57e80 |  f8 8b 45 10 89 45 fc 8d 45 f8 89 43 fc 8b 73 0c    8b 7b 08 53 e8 00 00 00 00 83 c4 04 0b c0 74 7b  | ..E..E..E..C..s..{.S..........t{ | 
| 57ea0 |  83 fe ff 74 7d 8d 0c 76 8b 44 8f 04 0b c0 74 59    56 55 8d 6b 10 33 db 33 c9 33 d2 33 f6 33 ff ff  | ...t}..v.D....tYVU.k.3.3.3.3.3.. | 
| 57ec0 |  d0 5d 5e 8b 5d 0c 0b c0 74 3f 78 48 8b 7b 08 53    e8 00 00 00 00 83 c4 04 8d 6b 10 56 53 e8 00 00  | .]^.]...t?xH.{.S.........k.VS... | 
| 57ee0 |  00 00 83 c4 08 8d 0c 76 6a 01 8b 44 8f 08 e8 00    00 00 00 8b 04 8f 89 43 0c 8b 44 8f 08 33 db 33  | .......vj..D...........C..D..3.3 | 
| 57f00 |  c9 33 d2 33 f6 33 ff ff d0 8b 7b 08 8d 0c 76 8b    34 8f eb 8c b8 00 00 00 00 eb 23 8b 45 08 83 48  | .3.3.3....{...v.4.........#.E..H | 
| 57f20 |  04 08 b8 01 00 00 00 eb 15 55 8d 6b 10 6a ff 53    e8 00 00 00 00 83 c4 08 5d b8 01 00 00 00 5d 5f  | .........U.k.j.S........].....]_ | 
| 57f40 |  5e 5b 8b e5 5d c3 55 8b 4c 24 08 8b 29 8b 41 1c    50 8b 41 18 50 e8 00 00 00 00 83 c4 08 5d c2 04  | ^[..].U.L$..).A.P.A.P........].. | 
| 57f60 |  00 00 3d 00 00 00 13 00 00 00 14 00 79 00 00 00    10 00 00 00 14 00 86 00 00 00 11 00 00 00 14 00  | ..=.........y................... | 
| 57f80 |  97 00 00 00 12 00 00 00 14 00 d9 00 00 00 11 00    00 00 14 00 fe 00 00 00 11 00 00 00 14 00 2d 00  | ..............................-. | 
| 57fa0 |  00 00 00 00 08 00 00 00 08 00 09 00 00 00 09 00    0b 00 00 00 0a 00 0e 00 00 00 0b 00 0f 00 00 00  | ................................ | 
| 57fc0 |  0c 00 10 00 00 00 0d 00 11 00 00 00 0e 00 12 00    00 00 13 00 13 00 00 00 15 00 16 00 00 00 16 00  | ................................ | 
| 57fe0 |  19 00 00 00 18 00 20 00 00 00 19 00 26 00 00 00    1e 00 29 00 00 00 1f 00 2c 00 00 00 20 00 2f 00  | ............&.....).....,...../. | 
| 58000 |  00 00 21 00 32 00 00 00 22 00 35 00 00 00 24 00    38 00 00 00 25 00 3b 00 00 00 27 00 3c 00 00 00  | ..!.2...".5...$.8...%.;...'.<... | 
| 58020 |  28 00 41 00 00 00 29 00 44 00 00 00 2a 00 46 00    00 00 2b 00 48 00 00 00 2e 00 4b 00 00 00 2f 00  | (.A...).D...*.F...+.H.....K.../. | 
| 58040 |  4d 00 00 00 30 00 50 00 00 00 31 00 54 00 00 00    32 00 56 00 00 00 33 00 58 00 00 00 36 00 59 00  | M...0.P...1.T...2.V...3.X...6.Y. | 
| 58060 |  00 00 37 00 5a 00 00 00 39 00 5d 00 00 00 3a 00    5f 00 00 00 3b 00 61 00 00 00 3c 00 63 00 00 00  | ..7.Z...9.]...:._...;.a...<.c... | 
| 58080 |  3d 00 65 00 00 00 3e 00 67 00 00 00 40 00 69 00    00 00 42 00 6a 00 00 00 43 00 6b 00 00 00 44 00  | =.e...>.g...@.i...B.j...C.k...D. | 
| 580a0 |  6e 00 00 00 47 00 70 00 00 00 48 00 72 00 00 00    49 00 74 00 00 00 4d 00 77 00 00 00 4f 00 78 00  | n...G.p...H.r...I.t...M.w...O.x. | 
| 580c0 |  00 00 50 00 7d 00 00 00 51 00 80 00 00 00 54 00    83 00 00 00 57 00 84 00 00 00 58 00 85 00 00 00  | ..P.}...Q.....T.....W.....X..... | 
| 580e0 |  59 00 8a 00 00 00 5a 00 8d 00 00 00 5b 00 90 00    00 00 5d 00 92 00 00 00 5e 00 96 00 00 00 5f 00  | Y.....Z.....[.....].....^....._. | 
| 58100 |  9b 00 00 00 64 00 9e 00 00 00 65 00 a1 00 00 00    66 00 a5 00 00 00 67 00 a7 00 00 00 68 00 a9 00  | ....d.....e.....f.....g.....h... | 
| 58120 |  00 00 69 00 ab 00 00 00 6a 00 ad 00 00 00 6b 00    af 00 00 00 6c 00 b1 00 00 00 71 00 b4 00 00 00  | ..i.....j.....k.....l.....q..... | 
| 58140 |  72 00 b7 00 00 00 73 00 ba 00 00 00 74 00 bc 00    00 00 77 00 c1 00 00 00 78 00 c3 00 00 00 7b 00  | r.....s.....t.....w.....x.....{. | 
| 58160 |  c6 00 00 00 7c 00 ca 00 00 00 7e 00 cf 00 00 00    7f 00 d1 00 00 00 82 00 d2 00 00 00 83 00 d5 00  | ....|.....~..................... | 
| 58180 |  00 00 84 00 d7 00 00 00 85 00 d8 00 00 00 86 00    dd 00 00 00 87 00 e0 00 00 00 88 00 e1 00 00 00  | ................................ | 
| 581a0 |  8a 00 e6 00 00 00 8d 00 e7 00 00 00 8e 00 e8 00    00 00 8f 00 e9 00 00 00 90 00 ea 00 00 00 91 00  | ................................ | 
| 581c0 |  ec 00 00 00 92 00 ed 00 00 00 93 00 34 00 00 00    00 00 ee 00 00 00 01 00 ef 00 00 00 02 00 f3 00  | ............4................... | 
| 581e0 |  00 00 03 00 f5 00 00 00 04 00 f8 00 00 00 05 00    f9 00 00 00 06 00 fc 00 00 00 07 00 fd 00 00 00  | ................................ | 
| 58200 |  08 00 02 01 00 00 09 00 05 01 00 00 0a 00 06 01    00 00 0b 00 3b 00 00 00 00 00 04 00 00 00 f1 00  | ....................;........... | 
| 58220 |  00 00 00 00 00 00 3c 00 01 11 00 00 00 00 64 3a    5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73  | ......<.......d:\dnsrv\base\crts | 
| 58240 |  5c 63 72 74 77 33 32 5c 6d 69 73 63 5c 6e 74 5c    6f 62 6a 5c 69 33 38 36 5c 65 78 73 75 70 33 2e  | \crtw32\misc\nt\obj\i386\exsup3. | 
| 58260 |  6f 62 6a 00 34 00 16 11 03 00 00 00 03 00 00 00    00 00 00 00 07 00 0a 00 c3 0f 4d 69 63 72 6f 73  | obj.4.....................Micros | 
| 58280 |  6f 66 74 20 28 52 29 20 4d 61 63 72 6f 20 41 73    73 65 6d 62 6c 65 72 00 00 00 0f 00 08 11 00 10  | oft.(R).Macro.Assembler......... | 
| 582a0 |  00 00 5f 4a 4d 50 5f 42 55 46 00 36 00 10 11 00    00 00 00 00 00 00 00 00 00 00 00 e6 00 00 00 00  | .._JMP_BUF.6.................... | 
| 582c0 |  00 00 00 e6 00 00 00 03 10 00 00 00 00 00 00 00    00 00 5f 65 78 63 65 70 74 5f 68 61 6e 64 6c 65  | .................._except_handle | 
| 582e0 |  72 33 00 02 00 06 00 16 00 05 11 00 00 00 00 00    00 00 5f 6c 68 5f 63 6f 6e 74 69 6e 75 65 00 1e  | r3................_lh_continue.. | 
| 58300 |  00 08 11 05 10 00 00 5f 45 58 43 45 50 54 49 4f    4e 5f 50 4f 49 4e 54 45 52 53 5f 43 52 54 00 1c  | ......._EXCEPTION_POINTERS_CRT.. | 
| 58320 |  00 08 11 09 10 00 00 5f 45 58 43 45 50 54 49 4f    4e 5f 52 45 43 4f 52 44 5f 43 52 54 00 15 00 05  | ......._EXCEPTION_RECORD_CRT.... | 
| 58340 |  11 00 00 00 00 00 00 00 5f 6c 68 5f 64 69 73 6d    69 73 73 00 14 00 05 11 00 00 00 00 00 00 00 5f  | ........_lh_dismiss............_ | 
| 58360 |  6c 68 5f 72 65 74 75 72 6e 00 2e 00 0f 11 00 00    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | lh_return....................... | 
| 58380 |  00 00 00 00 00 00 0b 10 00 00 00 00 00 00 00 00    00 24 24 24 30 30 30 30 33 00 02 00 06 00 11 00  | .................$$$00003....... | 
| 583a0 |  05 11 00 00 00 00 00 00 00 5f 6c 68 5f 74 6f 70    00 18 00 08 11 0d 10 00 00 5f 53 43 4f 50 45 54  | ........._lh_top........._SCOPET | 
| 583c0 |  41 42 4c 45 5f 45 4e 54 52 59 00 13 00 05 11 00    00 00 00 00 00 00 5f 6c 68 5f 62 61 67 69 74 00  | ABLE_ENTRY............_lh_bagit. | 
| 583e0 |  3c 00 10 11 00 00 00 00 00 00 00 00 00 00 00 00    1b 00 00 00 00 00 00 00 1b 00 00 00 0f 10 00 00  | <............................... | 
| 58400 |  00 00 00 00 00 00 00 5f 5f 73 65 68 5f 6c 6f 6e    67 6a 6d 70 5f 75 6e 77 69 6e 64 40 34 00 02 00  | .......__seh_longjmp_unwind@4... | 
| 58420 |  06 00 17 00 05 11 00 00 00 00 00 00 00 5f 6c 68    5f 75 6e 77 69 6e 64 69 6e 67 00 1e 00 08 11 11  | ............._lh_unwinding...... | 
| 58440 |  10 00 00 5f 45 58 43 45 50 54 49 4f 4e 5f 52 45    47 49 53 54 52 41 54 49 4f 4e 00 13 00 05 11 00  | ..._EXCEPTION_REGISTRATION...... | 
| 58460 |  00 00 00 00 00 00 5f 6c 68 5f 61 62 6f 72 74 00    10 00 08 11 07 10 00 00 5f 4e 4c 47 5f 49 4e 46  | ......_lh_abort........._NLG_INF | 
| 58480 |  4f 00 21 00 08 11 13 10 00 00 5f 43 39 5f 45 58    43 45 50 54 49 4f 4e 5f 52 45 47 49 53 54 52 41  | O.!......._C9_EXCEPTION_REGISTRA | 
| 584a0 |  54 49 4f 4e 00 00 b1 00 00 00 2d 00 00 00 0b 00    b5 00 00 00 2d 00 00 00 0a 00 d1 00 00 00 42 00  | TION......-.........-.........B. | 
| 584c0 |  00 00 0b 00 d5 00 00 00 42 00 00 00 0a 00 27 01    00 00 43 00 00 00 0b 00 2b 01 00 00 43 00 00 00  | ........B.....'...C.....+...C... | 
| 584e0 |  0a 00 3e 01 00 00 44 00 00 00 0b 00 42 01 00 00    44 00 00 00 0a 00 70 01 00 00 3b 00 00 00 0b 00  | ..>...D.....B...D.....p...;..... | 
| 58500 |  74 01 00 00 3b 00 00 00 0a 00 88 01 00 00 45 00    00 00 0b 00 8c 01 00 00 45 00 00 00 0a 00 b5 01  | t...;.........E.........E....... | 
| 58520 |  00 00 46 00 00 00 0b 00 b9 01 00 00 46 00 00 00    0a 00 e6 01 00 00 34 00 00 00 0b 00 ea 01 00 00  | ..F.........F.........4......... | 
| 58540 |  34 00 00 00 0a 00 0c 02 00 00 47 00 00 00 0b 00    10 02 00 00 47 00 00 00 0a 00 45 02 00 00 48 00  | 4.........G.........G.....E...H. | 
| 58560 |  00 00 0b 00 49 02 00 00 48 00 00 00 0a 00 04 00    00 00 1e 00 05 15 00 00 01 00 01 10 00 00 00 00  | ....I...H....................... | 
| 58580 |  00 00 00 00 00 00 40 00 5f 4a 4d 50 5f 42 55 46    00 f3 06 01 03 12 0d 15 03 00 22 00 00 00 00 00  | ......@._JMP_BUF.........."..... | 
| 585a0 |  73 61 76 65 64 5f 65 62 70 00 0d 15 03 00 22 00    00 00 04 00 73 61 76 65 64 5f 65 62 78 00 0d 15  | saved_ebp.....".....saved_ebx... | 
| 585c0 |  03 00 22 00 00 00 08 00 73 61 76 65 64 5f 65 64    69 00 0d 15 03 00 22 00 00 00 0c 00 73 61 76 65  | ..".....saved_edi.....".....save | 
| 585e0 |  64 5f 65 73 69 00 0d 15 03 00 22 00 00 00 10 00    73 61 76 65 64 5f 65 73 70 00 0d 15 03 00 22 00  | d_esi.....".....saved_esp.....". | 
| 58600 |  00 00 14 00 73 61 76 65 64 5f 72 65 74 75 72 6e    00 f1 0d 15 03 00 22 00 00 00 18 00 73 61 76 65  | ....saved_return......".....save | 
| 58620 |  64 5f 78 72 65 67 69 73 74 72 61 74 69 6f 6e 00    f2 f1 0d 15 03 00 22 00 00 00 1c 00 73 61 76 65  | d_xregistration.......".....save | 
| 58640 |  64 5f 74 72 79 6c 65 76 65 6c 00 f3 f2 f1 0d 15    03 00 22 00 00 00 20 00 76 65 72 73 69 6f 6e 5f  | d_trylevel........".....version_ | 
| 58660 |  63 6f 6f 6b 69 65 00 f3 f2 f1 0d 15 03 00 22 00    00 00 24 00 75 6e 77 69 6e 64 5f 66 75 6e 63 00  | cookie........"...$.unwind_func. | 
| 58680 |  f2 f1 0d 15 03 00 22 00 00 00 28 00 75 6e 77 69    6e 64 5f 64 61 74 61 00 f2 f1 06 00 0e 00 00 00  | ......"...(.unwind_data......... | 
| 586a0 |  f2 f1 0e 00 08 10 03 00 00 00 00 00 00 00 04 10    00 00 06 00 01 12 00 00 00 00 2e 00 05 15 00 00  | ................................ | 
| 586c0 |  01 00 06 10 00 00 00 00 00 00 00 00 00 00 08 00    5f 45 58 43 45 50 54 49 4f 4e 5f 50 4f 49 4e 54  | ................_EXCEPTION_POINT | 
| 586e0 |  45 52 53 5f 43 52 54 00 f2 f1 32 00 03 12 0d 15    03 00 22 00 00 00 00 00 65 70 5f 78 72 65 63 6f  | ERS_CRT...2.......".....ep_xreco | 
| 58700 |  72 64 00 f3 f2 f1 0d 15 03 00 22 00 00 00 04 00    65 70 5f 63 6f 6e 74 65 78 74 00 f3 f2 f1 1e 00  | rd........".....ep_context...... | 
| 58720 |  05 15 00 00 01 00 08 10 00 00 00 00 00 00 00 00    00 00 10 00 5f 4e 4c 47 5f 49 4e 46 4f 00 5e 00  | ...................._NLG_INFO.^. | 
| 58740 |  03 12 0d 15 03 00 22 00 00 00 00 00 64 77 53 69    67 00 0d 15 03 00 22 00 00 00 04 00 75 6f 66 66  | ......".....dwSig.....".....uoff | 
| 58760 |  44 65 73 74 69 6e 61 74 69 6f 6e 00 f2 f1 0d 15    03 00 22 00 00 00 08 00 64 77 43 6f 64 65 00 f3  | Destination.......".....dwCode.. | 
| 58780 |  f2 f1 0d 15 03 00 22 00 00 00 0c 00 75 6f 66 66    46 72 61 6d 65 50 6f 69 6e 74 65 72 00 f1 2a 00  | ......".....uoffFramePointer..*. | 
| 587a0 |  05 15 00 00 01 00 0a 10 00 00 00 00 00 00 00 00    00 00 50 00 5f 45 58 43 45 50 54 49 4f 4e 5f 52  | ..................P._EXCEPTION_R | 
| 587c0 |  45 43 4f 52 44 5f 43 52 54 00 ae 00 03 12 0d 15    03 00 22 00 00 00 00 00 65 78 63 65 70 74 69 6f  | ECORD_CRT.........".....exceptio | 
| 587e0 |  6e 5f 6e 75 6d 62 65 72 00 f1 0d 15 03 00 22 00    00 00 04 00 65 78 63 65 70 74 69 6f 6e 5f 66 6c  | n_number......".....exception_fl | 
| 58800 |  61 67 73 00 f2 f1 0d 15 03 00 22 00 00 00 08 00    65 78 63 65 70 74 69 6f 6e 5f 72 65 63 6f 72 64  | ags.......".....exception_record | 
| 58820 |  00 f1 0d 15 03 00 22 00 00 00 0c 00 65 78 63 65    70 74 69 6f 6e 5f 61 64 64 72 65 73 73 00 0d 15  | ......".....exception_address... | 
| 58840 |  03 00 22 00 00 00 10 00 6e 75 6d 62 65 72 5f 70    61 72 61 6d 65 74 65 72 73 00 0d 15 03 00 22 00  | ..".....number_parameters.....". | 
| 58860 |  00 00 14 00 65 78 63 65 70 74 69 6f 6e 5f 69 6e    66 6f 72 6d 61 74 69 6f 6e 00 0e 00 08 10 03 00  | ....exception_information....... | 
| 58880 |  00 00 05 00 00 00 0c 10 00 00 06 00 01 12 00 00    00 00 26 00 05 15 00 00 01 00 0e 10 00 00 00 00  | ..................&............. | 
| 588a0 |  00 00 00 00 00 00 0c 00 5f 53 43 4f 50 45 54 41    42 4c 45 5f 45 4e 54 52 59 00 4e 00 03 12 0d 15  | ........_SCOPETABLE_ENTRY.N..... | 
| 588c0 |  03 00 22 00 00 00 00 00 65 6e 63 6c 6f 73 69 6e    67 5f 6c 65 76 65 6c 00 f2 f1 0d 15 03 00 22 00  | ..".....enclosing_level.......". | 
| 588e0 |  00 00 04 00 66 69 6c 74 65 72 00 f3 f2 f1 0d 15    03 00 22 00 00 00 08 00 73 70 65 63 69 66 69 63  | ....filter........".....specific | 
| 58900 |  5f 68 61 6e 64 6c 65 72 00 f1 0e 00 08 10 03 00    00 00 e4 00 00 00 10 10 00 00 06 00 01 12 00 00  | _handler........................ | 
| 58920 |  00 00 2e 00 05 15 00 00 01 00 12 10 00 00 00 00    00 00 00 00 00 00 08 00 5f 45 58 43 45 50 54 49  | ........................_EXCEPTI | 
| 58940 |  4f 4e 5f 52 45 47 49 53 54 52 41 54 49 4f 4e 00    f2 f1 26 00 03 12 0d 15 03 00 22 00 00 00 00 00  | ON_REGISTRATION...&......."..... | 
| 58960 |  70 72 65 76 00 f1 0d 15 03 00 22 00 00 00 04 00    68 61 6e 64 6c 65 72 00 f2 f1 32 00 05 15 00 00  | prev......".....handler...2..... | 
| 58980 |  01 00 14 10 00 00 00 00 00 00 00 00 00 00 10 00    5f 43 39 5f 45 58 43 45 50 54 49 4f 4e 5f 52 45  | ................_C9_EXCEPTION_RE | 
| 589a0 |  47 49 53 54 52 41 54 49 4f 4e 00 f1 f2 f1 5a 00    03 12 0d 15 03 00 22 00 00 00 00 00 65 72 5f 70  | GISTRATION....Z.......".....er_p | 
| 589c0 |  72 65 76 00 f2 f1 0d 15 03 00 22 00 00 00 04 00    65 72 5f 68 61 6e 64 6c 65 72 00 f3 f2 f1 0d 15  | rev.......".....er_handler...... | 
| 589e0 |  03 00 22 00 00 00 08 00 73 63 6f 70 65 74 61 62    6c 65 00 f3 f2 f1 0d 15 03 00 22 00 00 00 0c 00  | ..".....scopetable........"..... | 
| 58a00 |  74 72 79 6c 65 76 65 6c 00 f1 00 00 00 00 e6 00    00 00 00 00 00 00 03 00 0a 17 00 00 00 00 2d 00  | trylevel......................-. | 
| 58a20 |  00 00 07 00 2e 66 69 6c 65 00 00 00 15 00 00 00    fe ff 00 00 67 03 64 3a 5c 64 6e 73 72 76 5c 62  | .....file...........g.d:\dnsrv\b | 
| 58a40 |  61 73 65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c    6d 69 73 63 5c 69 33 38 36 5c 65 78 73 75 70 33  | ase\crts\crtw32\misc\i386\exsup3 | 
| 58a60 |  2e 61 73 6d 00 00 00 00 00 00 00 00 40 63 6f 6d    70 2e 69 64 c3 0f 0f 00 ff ff 00 00 03 00 40 66  | .asm........@comp.id..........@f | 
| 58a80 |  65 61 74 2e 30 30 01 00 00 00 ff ff 00 00 03 00    2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00  | eat.00...........text........... | 
| 58aa0 |  03 01 09 01 00 00 06 00 6a 00 00 00 00 00 00 00    00 00 00 00 2e 64 61 74 61 00 00 00 00 00 00 00  | ........j............data....... | 
| 58ac0 |  02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 2e 64 65 62 75 67 24 53  | .........................debug$S | 
| 58ae0 |  00 00 00 00 03 00 00 00 03 01 8b 02 00 00 14 00    00 00 00 00 00 00 00 00 00 00 00 00 2e 64 65 62  | .............................deb | 
| 58b00 |  75 67 24 54 00 00 00 00 04 00 00 00 03 01 9c 04    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | ug$T............................ | 
| 58b20 |  2e 64 65 62 75 67 24 46 00 00 00 00 05 00 00 00    03 01 10 00 00 00 01 00 00 00 00 00 00 00 00 00  | .debug$F........................ | 
| 58b40 |  00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00    00 00 00 00 02 00 00 00 00 00 15 00 00 00 00 00  | ................................ | 
| 58b60 |  00 00 00 00 00 00 02 00 00 00 00 00 25 00 00 00    00 00 00 00 00 00 00 00 02 00 00 00 00 00 32 00  | ............%.................2. | 
| 58b80 |  00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00    42 00 00 00 00 00 00 00 00 00 00 00 02 00 2e 66  | ................B..............f | 
| 58ba0 |  69 6c 65 00 00 00 19 00 00 00 fe ff 00 00 67 03    64 3a 5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72  | ile...........g.d:\dnsrv\base\cr | 
| 58bc0 |  74 73 5c 63 72 74 77 33 32 5c 68 5c 70 76 65 72    73 69 6f 6e 2e 69 6e 63 00 00 00 00 00 00 00 00  | ts\crtw32\h\pversion.inc........ | 
| 58be0 |  00 00 00 00 00 00 2e 66 69 6c 65 00 00 00 1d 00    00 00 fe ff 00 00 67 03 64 3a 5c 64 6e 73 72 76  | .......file...........g.d:\dnsrv | 
| 58c00 |  5c 62 61 73 65 5c 63 72 74 73 5c 63 72 74 77 33    32 5c 6d 69 73 63 5c 69 33 38 36 5c 65 78 73 75  | \base\crts\crtw32\misc\i386\exsu | 
| 58c20 |  70 33 2e 61 73 6d 00 00 00 00 00 00 00 00 2e 66    69 6c 65 00 00 00 21 00 00 00 fe ff 00 00 67 03  | p3.asm.........file...!.......g. | 
| 58c40 |  64 3a 5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72    74 73 5c 63 72 74 77 33 32 5c 68 5c 63 6d 61 63  | d:\dnsrv\base\crts\crtw32\h\cmac | 
| 58c60 |  72 6f 73 2e 69 6e 63 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 2e 66 69 6c 65 00 00 00 25 00  | ros.inc................file...%. | 
| 58c80 |  00 00 fe ff 00 00 67 03 64 3a 5c 64 6e 73 72 76    5c 62 61 73 65 5c 63 72 74 73 5c 63 72 74 77 33  | ......g.d:\dnsrv\base\crts\crtw3 | 
| 58ca0 |  32 5c 6d 69 73 63 5c 69 33 38 36 5c 65 78 73 75    70 33 2e 61 73 6d 00 00 00 00 00 00 00 00 2e 66  | 2\misc\i386\exsup3.asm.........f | 
| 58cc0 |  69 6c 65 00 00 00 29 00 00 00 fe ff 00 00 67 03    64 3a 5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72  | ile...).......g.d:\dnsrv\base\cr | 
| 58ce0 |  74 73 5c 63 72 74 77 33 32 5c 68 5c 65 78 73 75    70 2e 69 6e 63 00 00 00 00 00 00 00 00 00 00 00  | ts\crtw32\h\exsup.inc........... | 
| 58d00 |  00 00 00 00 00 00 2e 66 69 6c 65 00 00 00 00 00    00 00 fe ff 00 00 67 03 64 3a 5c 64 6e 73 72 76  | .......file...........g.d:\dnsrv | 
| 58d20 |  5c 62 61 73 65 5c 63 72 74 73 5c 63 72 74 77 33    32 5c 6d 69 73 63 5c 69 33 38 36 5c 65 78 73 75  | \base\crts\crtw32\misc\i386\exsu | 
| 58d40 |  70 33 2e 61 73 6d 00 00 00 00 00 00 00 00 00 00    00 00 54 00 00 00 08 00 00 00 01 00 20 00 02 01  | p3.asm............T............. | 
| 58d60 |  2f 00 00 00 e6 00 00 00 22 02 00 00 34 00 00 00    00 00 2e 62 66 00 00 00 00 00 08 00 00 00 01 00  | /......."...4......bf........... | 
| 58d80 |  00 00 65 01 00 00 00 00 ac 00 00 00 00 00 00 00    36 00 00 00 00 00 2e 6c 66 00 00 00 00 00 5d 00  | ..e.............6......lf.....]. | 
| 58da0 |  00 00 01 00 00 00 65 00 2e 65 66 00 00 00 00 00    ee 00 00 00 01 00 00 00 65 01 00 00 00 00 3f 01  | ......e..ef.............e.....?. | 
| 58dc0 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    66 00 00 00 ee 00 00 00 01 00 20 00 02 01 36 00  | ................f.............6. | 
| 58de0 |  00 00 1b 00 00 00 50 04 00 00 3b 00 00 00 00 00    2e 62 66 00 00 00 00 00 ee 00 00 00 01 00 00 00  | ......P...;......bf............. | 
| 58e00 |  65 01 00 00 00 00 43 01 00 00 00 00 00 00 3d 00    00 00 00 00 2e 6c 66 00 00 00 00 00 0c 00 00 00  | e.....C.......=......lf......... | 
| 58e20 |  01 00 00 00 65 00 2e 65 66 00 00 00 00 00 09 01    00 00 01 00 00 00 65 01 00 00 00 00 4e 01 00 00  | ....e..ef.............e.....N... | 
| 58e40 |  00 00 00 00 00 00 00 00 00 00 24 24 24 30 30 30    30 33 09 01 00 00 01 00 20 00 03 01 3d 00 00 00  | ..........$$$00003..........=... | 
| 58e60 |  00 00 00 00 98 04 00 00 00 00 00 00 00 00 2e 62    66 00 00 00 00 00 09 01 00 00 01 00 00 00 65 01  | ...............bf.............e. | 
| 58e80 |  00 00 00 00 51 01 00 00 00 00 00 00 00 00 00 00    00 00 2e 6c 66 00 00 00 00 00 01 00 00 00 01 00  | ....Q..............lf........... | 
| 58ea0 |  00 00 65 00 2e 65 66 00 00 00 00 00 09 01 00 00    01 00 00 00 65 01 00 00 00 00 4e 01 00 00 00 00  | ..e..ef.............e.....N..... | 
| 58ec0 |  00 00 00 00 00 00 00 00 00 00 00 00 7d 00 00 00    b1 00 00 00 01 00 00 00 06 00 00 00 00 00 8a 00  | ............}................... | 
| 58ee0 |  00 00 bc 00 00 00 01 00 00 00 06 00 00 00 00 00    96 00 00 00 e6 00 00 00 01 00 00 00 06 00 5f 6c  | .............................._l | 
| 58f00 |  68 5f 74 6f 70 00 48 00 00 00 01 00 00 00 06 00    00 00 00 00 a1 00 00 00 ca 00 00 00 01 00 00 00  | h_top.H......................... | 
| 58f20 |  06 00 00 00 00 00 ab 00 00 00 d1 00 00 00 01 00    00 00 06 00 00 00 00 00 b9 00 00 00 c3 00 00 00  | ................................ | 
| 58f40 |  01 00 00 00 06 00 c3 00 00 00 5f 5f 67 6c 6f 62    61 6c 5f 75 6e 77 69 6e 64 32 00 5f 5f 6c 6f 63  | ..........__global_unwind2.__loc | 
| 58f60 |  61 6c 5f 75 6e 77 69 6e 64 32 00 5f 5f 4e 4c 47    5f 4e 6f 74 69 66 79 00 5f 5f 56 61 6c 69 64 61  | al_unwind2.__NLG_Notify.__Valida | 
| 58f80 |  74 65 45 48 33 52 4e 00 5f 5f 4e 4c 47 5f 44 65    73 74 69 6e 61 74 69 6f 6e 00 5f 5f 65 78 63 65  | teEH3RN.__NLG_Destination.__exce | 
| 58fa0 |  70 74 5f 68 61 6e 64 6c 65 72 33 00 5f 5f 73 65    68 5f 6c 6f 6e 67 6a 6d 70 5f 75 6e 77 69 6e 64  | pt_handler3.__seh_longjmp_unwind | 
| 58fc0 |  40 34 00 5f 6c 68 5f 63 6f 6e 74 69 6e 75 65 00    5f 6c 68 5f 64 69 73 6d 69 73 73 00 5f 6c 68 5f  | @4._lh_continue._lh_dismiss._lh_ | 
| 58fe0 |  72 65 74 75 72 6e 00 5f 6c 68 5f 62 61 67 69 74    00 5f 6c 68 5f 75 6e 77 69 6e 64 69 6e 67 00 5f  | return._lh_bagit._lh_unwinding._ | 
| 59000 |  6c 68 5f 61 62 6f 72 74 00 0a 2f 31 38 32 20 20    20 20 20 20 20 20 20 20 20 20 31 30 39 39 36 32  | lh_abort../182............109962 | 
| 59020 |  31 32 36 30 20 20 20 20 20 20 20 20 20 20 20 20    20 20 31 30 30 36 36 36 20 20 33 31 30 38 20 20  | 1260..............100666..3108.. | 
| 59040 |  20 20 20 20 60 0a 4c 01 07 00 8c e3 8a 41 47 09    00 00 25 00 00 00 00 00 00 00 2e 64 65 62 75 67  | ....`.L......AG...%........debug | 
| 59060 |  24 53 00 00 00 00 00 00 00 00 71 02 00 00 2c 01    00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00  | $S........q...,...............@. | 
| 59080 |  10 42 2e 74 65 78 74 00 00 00 00 00 00 00 00 00    00 00 42 00 00 00 9d 03 00 00 df 03 00 00 fd 03  | .B.text...........B............. | 
| 590a0 |  00 00 03 00 07 00 20 10 10 60 2e 64 65 62 75 67    24 53 00 00 00 00 00 00 00 00 04 01 00 00 27 04  | .........`.debug$S............'. | 
| 590c0 |  00 00 2b 05 00 00 00 00 00 00 0b 00 00 00 40 10    10 42 2e 72 64 61 74 61 00 00 00 00 00 00 00 00  | ..+...........@..B.rdata........ | 
| 590e0 |  00 00 0c 00 00 00 99 05 00 00 a5 05 00 00 00 00    00 00 02 00 00 00 40 10 40 40 2e 73 78 64 61 74  | ......................@.@@.sxdat | 
| 59100 |  61 00 00 00 00 00 00 00 00 00 04 00 00 00 b9 05    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02  | a............................... | 
| 59120 |  30 00 2e 64 65 62 75 67 24 46 00 00 00 00 00 00    00 00 10 00 00 00 bd 05 00 00 cd 05 00 00 00 00  | 0..debug$F...................... | 
| 59140 |  00 00 01 00 00 00 40 10 10 42 2e 64 65 62 75 67    24 54 00 00 00 00 00 00 00 00 70 03 00 00 d7 05  | ......@..B.debug$T........p..... | 
| 59160 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00    10 42 04 00 00 00 f1 00 00 00 7a 00 00 00 3e 00  | ..............@..B........z...>. | 
| 59180 |  01 11 00 00 00 00 64 3a 5c 64 6e 73 72 76 5c 62    61 73 65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c  | ......d:\dnsrv\base\crts\crtw32\ | 
| 591a0 |  6d 69 73 63 5c 6e 74 5c 6f 62 6a 5c 69 33 38 36    5c 73 65 68 73 75 70 70 2e 6f 62 6a 00 00 38 00  | misc\nt\obj\i386\sehsupp.obj..8. | 
| 591c0 |  16 11 00 60 00 00 06 00 0d 00 0a 00 c3 0f 0d 00    0a 00 c3 0f 4d 69 63 72 6f 73 6f 66 74 20 28 52  | ...`................Microsoft.(R | 
| 591e0 |  29 20 4f 70 74 69 6d 69 7a 69 6e 67 20 43 6f 6d    70 69 6c 65 72 00 00 00 00 00 f3 00 00 00 ed 00  | ).Optimizing.Compiler........... | 
| 59200 |  00 00 24 54 30 20 24 65 62 70 20 3d 20 24 65 69    70 20 24 54 30 20 34 20 2b 20 5e 20 3d 20 24 65  | ..$T0.$ebp.=.$eip.$T0.4.+.^.=.$e | 
| 59220 |  62 70 20 24 54 30 20 5e 20 3d 20 24 65 73 70 20    24 54 30 20 38 20 2b 20 3d 20 24 4c 20 24 54 30  | bp.$T0.^.=.$esp.$T0.8.+.=.$L.$T0 | 
| 59240 |  20 2e 63 62 53 61 76 65 64 52 65 67 73 20 2d 20    3d 20 24 50 20 24 54 30 20 34 20 2b 20 2e 63 62  | ..cbSavedRegs.-.=.$P.$T0.4.+..cb | 
| 59260 |  50 61 72 61 6d 73 20 2b 20 3d 00 24 54 30 20 24    65 62 70 20 3d 20 24 54 32 20 24 65 73 70 20 3d  | Params.+.=.$T0.$ebp.=.$T2.$esp.= | 
| 59280 |  20 24 54 31 20 2e 72 61 53 65 61 72 63 68 53 74    61 72 74 20 3d 20 24 65 69 70 20 24 54 31 20 5e  | .$T1..raSearchStart.=.$eip.$T1.^ | 
| 592a0 |  20 3d 20 24 65 62 70 20 24 65 62 70 20 3d 20 24    65 73 70 20 24 54 31 20 34 20 2b 20 3d 20 24 4c  | .=.$ebp.$ebp.=.$esp.$T1.4.+.=.$L | 
| 592c0 |  20 24 54 30 20 2e 63 62 53 61 76 65 64 52 65 67    73 20 2d 20 3d 20 24 50 20 24 54 30 20 34 20 2b  | .$T0..cbSavedRegs.-.=.$P.$T0.4.+ | 
| 592e0 |  20 2e 63 62 50 61 72 61 6d 73 20 2b 20 3d 00 00    00 00 f1 00 00 00 00 00 00 00 1d 00 07 11 0d 10  | ..cbParams.+.=.................. | 
| 59300 |  00 00 02 00 43 4f 52 5f 56 45 52 53 49 4f 4e 5f    4d 41 4a 4f 52 5f 56 32 00 0f 00 08 11 13 00 00  | ....COR_VERSION_MAJOR_V2........ | 
| 59320 |  00 4c 4f 4e 47 4c 4f 4e 47 00 0d 00 08 11 22 00    00 00 53 49 5a 45 5f 54 00 10 00 08 11 23 00 00  | .LONGLONG....."...SIZE_T.....#.. | 
| 59340 |  00 55 4c 4f 4e 47 4c 4f 4e 47 00 0b 00 08 11 74    00 00 00 42 4f 4f 4c 00 0e 00 08 11 21 00 00 00  | .ULONGLONG.....t...BOOL.....!... | 
| 59360 |  77 63 68 61 72 5f 74 00 23 00 08 11 0d 10 00 00    52 65 70 6c 61 63 65 73 43 6f 72 48 64 72 4e 75  | wchar_t.#.......ReplacesCorHdrNu | 
| 59380 |  6d 65 72 69 63 44 65 66 69 6e 65 73 00 0e 00 08    11 0b 10 00 00 50 43 55 57 53 54 52 00 0c 00 08  | mericDefines.........PCUWSTR.... | 
| 593a0 |  11 03 04 00 00 50 56 4f 49 44 00 0c 00 08 11 22    00 00 00 44 57 4f 52 44 00 0c 00 08 11 71 00 00  | .....PVOID....."...DWORD.....q.. | 
| 593c0 |  00 57 43 48 41 52 00 0b 00 08 11 12 00 00 00 4c    4f 4e 47 00 0d 00 08 11 21 04 00 00 50 55 57 53  | .WCHAR.........LONG.....!...PUWS | 
| 593e0 |  54 52 00 6a 0c 68 00 00 00 00 e8 00 00 00 00 83    65 fc 00 8b 45 08 8b 00 33 c0 40 89 45 e4 eb 19  | TR.j.h..........e...E...3.@.E... | 
| 59400 |  8b 45 ec 8b 00 8b 00 33 c9 3d 05 00 00 c0 0f 94    c1 8b c1 c3 8b 65 e8 33 c0 83 4d fc ff e8 00 00  | .E.....3.=...........e.3..M..... | 
| 59420 |  00 00 c2 04 00 03 00 00 00 19 00 00 00 06 00 08    00 00 00 16 00 00 00 14 00 3b 00 00 00 14 00 00  | .........................;...... | 
| 59440 |  00 14 00 0e 00 00 00 00 00 0c 00 00 00 03 00 10    00 00 00 05 00 15 00 00 00 06 00 1d 00 00 00 0a  | ................................ | 
| 59460 |  00 34 00 00 00 0c 00 3a 00 00 00 10 00 04 00 00    00 f5 00 00 00 44 00 00 00 00 00 00 00 00 00 00  | .4.....:.............D.......... | 
| 59480 |  00 42 00 00 00 1c 00 00 00 04 00 00 00 00 00 00    00 00 00 00 00 0c 00 08 00 05 00 00 00 1d 00 00  | .B.............................. | 
| 594a0 |  00 14 00 00 00 1c 00 00 00 04 00 00 00 00 00 00    00 69 00 00 00 00 00 08 00 01 00 00 00 f1 00 00  | .................i.............. | 
| 594c0 |  00 00 00 00 00 35 00 10 11 00 00 00 00 00 00 00    00 00 00 00 00 42 00 00 00 0c 00 00 00 3a 00 00  | .....5...............B.......:.. | 
| 594e0 |  00 0a 10 00 00 00 00 00 00 00 00 01 5f 72 74 5f    70 72 6f 62 65 5f 72 65 61 64 34 00 11 00 05 11  | ............_rt_probe_read4..... | 
| 59500 |  00 00 00 00 00 00 00 24 4c 32 33 34 36 30 00 11    00 05 11 00 00 00 00 00 00 00 24 4c 32 33 34 37  | .......$L23460............$L2347 | 
| 59520 |  31 00 11 00 05 11 00 00 00 00 00 00 00 24 4c 32    33 34 37 33 00 11 00 05 11 00 00 00 00 00 00 00  | 1............$L23473............ | 
| 59540 |  24 4c 32 33 34 35 39 00 0e 00 0b 11 08 00 00 00    22 04 00 00 70 74 72 00 13 00 0b 11 e4 ff ff ff  | $L23459........."...ptr......... | 
| 59560 |  74 00 00 00 72 65 61 64 61 62 6c 65 00 02 00 06    00 0c 00 00 00 0e 00 00 00 07 00 78 00 00 00 0e  | t...readable...............x.... | 
| 59580 |  00 00 00 0b 00 7c 00 00 00 0e 00 00 00 0a 00 93    00 00 00 10 00 00 00 0b 00 97 00 00 00 10 00 00  | .....|.......................... | 
| 595a0 |  00 0a 00 a6 00 00 00 11 00 00 00 0b 00 aa 00 00    00 11 00 00 00 0a 00 b9 00 00 00 12 00 00 00 0b  | ................................ | 
| 595c0 |  00 bd 00 00 00 12 00 00 00 0a 00 cc 00 00 00 13    00 00 00 0b 00 d0 00 00 00 13 00 00 00 0a 00 ff  | ................................ | 
| 595e0 |  ff ff ff 00 00 00 00 00 00 00 00 04 00 00 00 13    00 00 00 06 00 08 00 00 00 10 00 00 00 06 00 15  | ................................ | 
| 59600 |  00 00 00 1d 00 00 00 14 00 00 00 00 00 00 00 00    00 00 08 00 00 00 00 0e 00 00 00 07 00 04 00 00  | ................................ | 
| 59620 |  00 0a 00 01 10 03 00 00 00 01 00 f2 f1 0a 00 02    10 00 10 00 00 0a 00 00 00 0a 00 02 10 00 10 00  | ................................ | 
| 59640 |  00 0c 00 00 00 0a 00 01 10 70 00 00 00 02 00 f2    f1 0a 00 02 10 03 10 00 00 0a 00 00 00 0a 00 01  | .........p...................... | 
| 59660 |  10 13 00 00 00 02 00 f2 f1 0a 00 02 10 05 10 00    00 0a 00 00 00 0a 00 01 10 21 00 00 00 01 00 f2  | .........................!...... | 
| 59680 |  f1 0a 00 02 10 07 10 00 00 0a 00 00 00 0a 00 01    12 01 00 00 00 22 04 00 00 0e 00 08 10 74 00 00  | .....................".......t.. | 
| 596a0 |  00 07 00 01 00 09 10 00 00 0a 00 02 10 07 10 00    00 0a 00 00 00 a6 02 03 12 02 15 03 00 01 00 43  | ...............................C | 
| 596c0 |  4f 4d 49 4d 41 47 45 5f 46 4c 41 47 53 5f 49 4c    4f 4e 4c 59 00 02 15 03 00 02 00 43 4f 4d 49 4d  | OMIMAGE_FLAGS_ILONLY.......COMIM | 
| 596e0 |  41 47 45 5f 46 4c 41 47 53 5f 33 32 42 49 54 52    45 51 55 49 52 45 44 00 f1 02 15 03 00 04 00 43  | AGE_FLAGS_32BITREQUIRED........C | 
| 59700 |  4f 4d 49 4d 41 47 45 5f 46 4c 41 47 53 5f 49 4c    5f 4c 49 42 52 41 52 59 00 02 15 03 00 08 00 43  | OMIMAGE_FLAGS_IL_LIBRARY.......C | 
| 59720 |  4f 4d 49 4d 41 47 45 5f 46 4c 41 47 53 5f 53 54    52 4f 4e 47 4e 41 4d 45 53 49 47 4e 45 44 00 f2  | OMIMAGE_FLAGS_STRONGNAMESIGNED.. | 
| 59740 |  f1 02 15 03 00 04 80 00 00 01 00 43 4f 4d 49 4d    41 47 45 5f 46 4c 41 47 53 5f 54 52 41 43 4b 44  | ...........COMIMAGE_FLAGS_TRACKD | 
| 59760 |  45 42 55 47 44 41 54 41 00 02 15 03 00 02 00 43    4f 52 5f 56 45 52 53 49 4f 4e 5f 4d 41 4a 4f 52  | EBUGDATA.......COR_VERSION_MAJOR | 
| 59780 |  5f 56 32 00 f1 02 15 03 00 02 00 43 4f 52 5f 56    45 52 53 49 4f 4e 5f 4d 41 4a 4f 52 00 02 15 03  | _V2........COR_VERSION_MAJOR.... | 
| 597a0 |  00 00 00 43 4f 52 5f 56 45 52 53 49 4f 4e 5f 4d    49 4e 4f 52 00 02 15 03 00 08 00 43 4f 52 5f 44  | ...COR_VERSION_MINOR.......COR_D | 
| 597c0 |  45 4c 45 54 45 44 5f 4e 41 4d 45 5f 4c 45 4e 47    54 48 00 f2 f1 02 15 03 00 08 00 43 4f 52 5f 56  | ELETED_NAME_LENGTH.........COR_V | 
| 597e0 |  54 41 42 4c 45 47 41 50 5f 4e 41 4d 45 5f 4c 45    4e 47 54 48 00 02 15 03 00 01 00 4e 41 54 49 56  | TABLEGAP_NAME_LENGTH.......NATIV | 
| 59800 |  45 5f 54 59 50 45 5f 4d 41 58 5f 43 42 00 f3 f2    f1 02 15 03 00 ff 00 43 4f 52 5f 49 4c 4d 45 54  | E_TYPE_MAX_CB..........COR_ILMET | 
| 59820 |  48 4f 44 5f 53 45 43 54 5f 53 4d 41 4c 4c 5f 4d    41 58 5f 44 41 54 41 53 49 5a 45 00 f1 02 15 03  | HOD_SECT_SMALL_MAX_DATASIZE..... | 
| 59840 |  00 01 00 49 4d 41 47 45 5f 43 4f 52 5f 4d 49 48    5f 4d 45 54 48 4f 44 52 56 41 00 f2 f1 02 15 03  | ...IMAGE_COR_MIH_METHODRVA...... | 
| 59860 |  00 02 00 49 4d 41 47 45 5f 43 4f 52 5f 4d 49 48    5f 45 48 52 56 41 00 f2 f1 02 15 03 00 08 00 49  | ...IMAGE_COR_MIH_EHRVA.........I | 
| 59880 |  4d 41 47 45 5f 43 4f 52 5f 4d 49 48 5f 42 41 53    49 43 42 4c 4f 43 4b 00 f1 02 15 03 00 01 00 43  | MAGE_COR_MIH_BASICBLOCK........C | 
| 598a0 |  4f 52 5f 56 54 41 42 4c 45 5f 33 32 42 49 54 00    f1 02 15 03 00 02 00 43 4f 52 5f 56 54 41 42 4c  | OR_VTABLE_32BIT........COR_VTABL | 
| 598c0 |  45 5f 36 34 42 49 54 00 f1 02 15 03 00 04 00 43    4f 52 5f 56 54 41 42 4c 45 5f 46 52 4f 4d 5f 55  | E_64BIT........COR_VTABLE_FROM_U | 
| 598e0 |  4e 4d 41 4e 41 47 45 44 00 02 15 03 00 10 00 43    4f 52 5f 56 54 41 42 4c 45 5f 43 41 4c 4c 5f 4d  | NMANAGED.......COR_VTABLE_CALL_M | 
| 59900 |  4f 53 54 5f 44 45 52 49 56 45 44 00 f1 02 15 03    00 20 00 49 4d 41 47 45 5f 43 4f 52 5f 45 41 54  | OST_DERIVED........IMAGE_COR_EAT | 
| 59920 |  4a 5f 54 48 55 4e 4b 5f 53 49 5a 45 00 02 15 03    00 00 04 4d 41 58 5f 43 4c 41 53 53 5f 4e 41 4d  | J_THUNK_SIZE.......MAX_CLASS_NAM | 
| 59940 |  45 00 f3 f2 f1 02 15 03 00 00 04 4d 41 58 5f 50    41 43 4b 41 47 45 5f 4e 41 4d 45 00 f1 2e 00 07  | E..........MAX_PACKAGE_NAME..... | 
| 59960 |  15 16 00 00 00 74 00 00 00 0c 10 00 00 52 65 70    6c 61 63 65 73 43 6f 72 48 64 72 4e 75 6d 65 72  | .....t.......ReplacesCorHdrNumer | 
| 59980 |  69 63 44 65 66 69 6e 65 73 00 f3 f2 f1 2e 66 69    6c 65 00 00 00 0a 00 00 00 fe ff 00 00 67 01 2e  | icDefines.....file...........g.. | 
| 599a0 |  2e 5c 69 33 38 36 5c 73 65 68 73 75 70 70 2e 63    00 40 63 6f 6d 70 2e 69 64 c3 0f 5f 00 ff ff 00  | .\i386\sehsupp.c.@comp.id.._.... | 
| 599c0 |  00 03 00 40 66 65 61 74 2e 30 30 01 00 00 00 ff    ff 00 00 03 00 2e 64 65 62 75 67 24 53 00 00 00  | ...@feat.00...........debug$S... | 
| 599e0 |  00 01 00 00 00 03 01 71 02 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 00 2e 74 65 78 74 00 00  | .......q..................text.. | 
| 59a00 |  00 00 00 00 00 02 00 00 00 03 01 42 00 00 00 03    00 07 00 b9 26 8b 7e 00 00 01 00 00 00 2e 64 65  | ...........B........&.~.......de | 
| 59a20 |  62 75 67 24 53 00 00 00 00 03 00 00 00 03 01 04    01 00 00 0b 00 00 00 00 00 00 00 02 00 05 00 00  | bug$S........................... | 
| 59a40 |  00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff 00    00 67 03 64 3a 5c 64 6e 73 72 76 5c 62 61 73 65  | ..file...........g.d:\dnsrv\base | 
| 59a60 |  5c 63 72 74 73 5c 63 72 74 77 33 32 5c 6d 69 73    63 5c 69 33 38 36 5c 73 65 68 73 75 70 70 2e 63  | \crts\crtw32\misc\i386\sehsupp.c | 
| 59a80 |  00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 00    00 00 00 00 00 02 00 20 00 02 01 1a 00 00 00 42  | ...............................B | 
| 59aa0 |  00 00 00 fd 03 00 00 00 00 00 00 00 00 24 4c 32    33 34 36 30 00 31 00 00 00 02 00 00 00 03 00 24  | .............$L23460.1.........$ | 
| 59ac0 |  4c 32 33 34 37 31 00 30 00 00 00 02 00 00 00 03    00 24 4c 32 33 34 37 33 00 1d 00 00 00 02 00 00  | L23471.0.........$L23473........ | 
| 59ae0 |  00 03 00 24 4c 32 33 34 35 39 00 1d 00 00 00 02    00 00 00 03 00 00 00 00 00 17 00 00 00 00 00 00  | ...$L23459...................... | 
| 59b00 |  00 00 00 20 00 02 00 00 00 00 00 24 00 00 00 00    00 00 00 00 00 20 00 02 00 00 00 00 00 36 00 00  | ...........$.................6.. | 
| 59b20 |  00 00 00 00 00 00 00 20 00 02 00 2e 72 64 61 74    61 00 00 00 00 00 00 04 00 00 00 03 01 0c 00 00  | ............rdata............... | 
| 59b40 |  00 02 00 00 00 90 39 2a 84 02 00 05 00 00 00 24    54 32 33 34 36 36 00 00 00 00 00 04 00 00 00 03  | ......9*.......$T23466.......... | 
| 59b60 |  00 2e 62 66 00 00 00 00 00 00 00 00 00 02 00 00    00 65 01 00 00 00 00 2b 00 00 00 00 00 00 00 00  | ..bf.............e.....+........ | 
| 59b80 |  00 00 00 00 00 2e 6c 66 00 00 00 00 00 07 00 00    00 02 00 00 00 65 00 2e 65 66 00 00 00 00 00 42  | ......lf.............e..ef.....B | 
| 59ba0 |  00 00 00 02 00 00 00 65 01 00 00 00 00 3b 00 00    00 00 00 00 00 00 00 00 00 00 00 2e 73 78 64 61  | .......e.....;..............sxda | 
| 59bc0 |  74 61 00 00 00 00 00 05 00 00 00 03 01 04 00 00    00 00 00 00 00 ad a7 c7 67 00 00 00 00 00 00 2e  | ta......................g....... | 
| 59be0 |  64 65 62 75 67 24 46 00 00 00 00 06 00 00 00 03    01 10 00 00 00 01 00 00 00 00 00 00 00 02 00 05  | debug$F......................... | 
| 59c00 |  00 00 00 2e 64 65 62 75 67 24 54 00 00 00 00 07    00 00 00 03 01 70 03 00 00 00 00 00 00 00 00 00  | ....debug$T..........p.......... | 
| 59c20 |  00 00 00 00 00 00 00 43 00 00 00 5f 5f 72 74 5f    70 72 6f 62 65 5f 72 65 61 64 34 40 34 00 5f 5f  | .......C...__rt_probe_read4@4.__ | 
| 59c40 |  53 45 48 5f 65 70 69 6c 6f 67 00 5f 5f 65 78 63    65 70 74 5f 68 61 6e 64 6c 65 72 33 00 5f 5f 53  | SEH_epilog.__except_handler3.__S | 
| 59c60 |  45 48 5f 70 72 6f 6c 6f 67 00 2f 32 32 37 20 20    20 20 20 20 20 20 20 20 20 20 31 30 39 39 36 32  | EH_prolog./227............109962 | 
| 59c80 |  31 32 35 35 20 20 20 20 20 20 20 20 20 20 20 20    20 20 31 30 30 36 36 36 20 20 32 33 39 32 20 20  | 1255..............100666..2392.. | 
| 59ca0 |  20 20 20 20 60 0a 4c 01 04 00 87 e3 8a 41 56 05    00 00 37 00 00 00 00 00 00 00 2e 74 65 78 74 00  | ....`.L......AV...7........text. | 
| 59cc0 |  00 00 00 00 00 00 00 00 00 00 38 00 00 00 b4 00    00 00 ec 00 00 00 f6 00 00 00 01 00 14 00 20 00  | ..........8..................... | 
| 59ce0 |  30 60 2e 64 61 74 61 00 00 00 38 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | 0`.data...8..................... | 
| 59d00 |  00 00 00 00 00 00 40 00 30 c0 2e 64 65 62 75 67    24 53 38 00 00 00 00 00 00 00 5c 01 00 00 6e 01  | ......@.0..debug$S8.......\...n. | 
| 59d20 |  00 00 ca 02 00 00 00 00 00 00 08 00 00 00 40 00    10 42 2e 64 65 62 75 67 24 54 94 01 00 00 00 00  | ..............@..B.debug$T...... | 
| 59d40 |  00 00 3c 02 00 00 1a 03 00 00 00 00 00 00 00 00    00 00 00 00 00 00 40 00 10 42 8b 54 24 04 89 2a  | ..<...................@..B.T$..* | 
| 59d60 |  89 5a 04 89 7a 08 89 72 0c 89 62 10 8b 04 24 89    42 14 64 a1 00 00 00 00 89 42 18 83 f8 ff 75 09  | .Z..z..r..b...$.B.d......B....u. | 
| 59d80 |  c7 42 1c ff ff ff ff eb 06 8b 40 0c 89 42 1c 2b    c0 c3 1a 00 00 00 0e 00 00 00 06 00 27 00 00 00  | .B........@..B.+............'... | 
| 59da0 |  00 00 00 00 00 00 01 00 04 00 00 00 02 00 06 00    00 00 03 00 09 00 00 00 04 00 0c 00 00 00 05 00  | ................................ | 
| 59dc0 |  0f 00 00 00 06 00 12 00 00 00 08 00 15 00 00 00    09 00 18 00 00 00 0b 00 1e 00 00 00 0c 00 21 00  | ..............................!. | 
| 59de0 |  00 00 0e 00 24 00 00 00 0f 00 26 00 00 00 10 00    2d 00 00 00 11 00 2f 00 00 00 14 00 32 00 00 00  | ....$.....&.....-...../.....2... | 
| 59e00 |  15 00 35 00 00 00 18 00 37 00 00 00 19 00 2e 00    00 00 00 00 04 00 00 00 f1 00 00 00 00 00 00 00  | ..5.....7....................... | 
| 59e20 |  3c 00 01 11 00 00 00 00 64 3a 5c 64 6e 73 72 76    5c 62 61 73 65 5c 63 72 74 73 5c 63 72 74 77 33  | <.......d:\dnsrv\base\crts\crtw3 | 
| 59e40 |  32 5c 6d 69 73 63 5c 6e 74 5c 6f 62 6a 5c 69 33    38 36 5c 73 65 74 6a 6d 70 2e 6f 62 6a 00 34 00  | 2\misc\nt\obj\i386\setjmp.obj.4. | 
| 59e60 |  16 11 03 00 00 00 03 00 00 00 00 00 00 00 07 00    0a 00 c3 0f 4d 69 63 72 6f 73 6f 66 74 20 28 52  | ....................Microsoft.(R | 
| 59e80 |  29 20 4d 61 63 72 6f 20 41 73 73 65 6d 62 6c 65    72 00 00 00 0f 00 08 11 00 10 00 00 5f 4a 4d 50  | ).Macro.Assembler..........._JMP | 
| 59ea0 |  5f 42 55 46 00 2e 00 0f 11 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | _BUF............................ | 
| 59ec0 |  00 02 10 00 00 00 00 00 00 00 00 00 24 24 24 30    30 30 30 32 00 02 00 06 00 1e 00 08 11 04 10 00  | ............$$$00002............ | 
| 59ee0 |  00 5f 45 58 43 45 50 54 49 4f 4e 5f 52 45 47 49    53 54 52 41 54 49 4f 4e 00 1b 00 05 11 00 00 00  | ._EXCEPTION_REGISTRATION........ | 
| 59f00 |  00 00 00 00 5f 73 6a 5f 73 61 76 65 5f 74 72 79    6c 65 76 65 6c 00 12 00 05 11 00 00 00 00 00 00  | ...._sj_save_trylevel........... | 
| 59f20 |  00 5f 73 6a 5f 64 6f 6e 65 00 10 00 08 11 07 10    00 00 5f 4e 4c 47 5f 49 4e 46 4f 00 2e 00 10 11  | ._sj_done........._NLG_INFO..... | 
| 59f40 |  00 00 00 00 00 00 00 00 00 00 00 00 38 00 00 00    00 00 00 00 38 00 00 00 09 10 00 00 00 00 00 00  | ............8.......8........... | 
| 59f60 |  00 00 00 5f 5f 73 65 74 6a 6d 70 00 02 00 06 00    b1 00 00 00 2e 00 00 00 0b 00 b5 00 00 00 2e 00  | ...__setjmp..................... | 
| 59f80 |  00 00 0a 00 e9 00 00 00 35 00 00 00 0b 00 ed 00    00 00 35 00 00 00 0a 00 06 01 00 00 36 00 00 00  | ........5.........5.........6... | 
| 59fa0 |  0b 00 0a 01 00 00 36 00 00 00 0a 00 48 01 00 00    27 00 00 00 0b 00 4c 01 00 00 27 00 00 00 0a 00  | ......6.....H...'.....L...'..... | 
| 59fc0 |  04 00 00 00 1e 00 05 15 00 00 01 00 01 10 00 00    00 00 00 00 00 00 00 00 40 00 5f 4a 4d 50 5f 42  | ........................@._JMP_B | 
| 59fe0 |  55 46 00 f3 06 01 03 12 0d 15 03 00 22 00 00 00    00 00 73 61 76 65 64 5f 65 62 70 00 0d 15 03 00  | UF..........".....saved_ebp..... | 
| 5a000 |  22 00 00 00 04 00 73 61 76 65 64 5f 65 62 78 00    0d 15 03 00 22 00 00 00 08 00 73 61 76 65 64 5f  | ".....saved_ebx.....".....saved_ | 
| 5a020 |  65 64 69 00 0d 15 03 00 22 00 00 00 0c 00 73 61    76 65 64 5f 65 73 69 00 0d 15 03 00 22 00 00 00  | edi.....".....saved_esi....."... | 
| 5a040 |  10 00 73 61 76 65 64 5f 65 73 70 00 0d 15 03 00    22 00 00 00 14 00 73 61 76 65 64 5f 72 65 74 75  | ..saved_esp.....".....saved_retu | 
| 5a060 |  72 6e 00 f1 0d 15 03 00 22 00 00 00 18 00 73 61    76 65 64 5f 78 72 65 67 69 73 74 72 61 74 69 6f  | rn......".....saved_xregistratio | 
| 5a080 |  6e 00 f2 f1 0d 15 03 00 22 00 00 00 1c 00 73 61    76 65 64 5f 74 72 79 6c 65 76 65 6c 00 f3 f2 f1  | n.......".....saved_trylevel.... | 
| 5a0a0 |  0d 15 03 00 22 00 00 00 20 00 76 65 72 73 69 6f    6e 5f 63 6f 6f 6b 69 65 00 f3 f2 f1 0d 15 03 00  | ....".....version_cookie........ | 
| 5a0c0 |  22 00 00 00 24 00 75 6e 77 69 6e 64 5f 66 75 6e    63 00 f2 f1 0d 15 03 00 22 00 00 00 28 00 75 6e  | "...$.unwind_func......."...(.un | 
| 5a0e0 |  77 69 6e 64 5f 64 61 74 61 00 f2 f1 0e 00 08 10    03 00 00 00 a0 00 00 00 03 10 00 00 06 00 01 12  | wind_data....................... | 
| 5a100 |  00 00 00 00 2e 00 05 15 00 00 01 00 05 10 00 00    00 00 00 00 00 00 00 00 08 00 5f 45 58 43 45 50  | .........................._EXCEP | 
| 5a120 |  54 49 4f 4e 5f 52 45 47 49 53 54 52 41 54 49 4f    4e 00 f2 f1 26 00 03 12 0d 15 03 00 22 00 00 00  | TION_REGISTRATION...&......."... | 
| 5a140 |  00 00 70 72 65 76 00 f1 0d 15 03 00 22 00 00 00    04 00 68 61 6e 64 6c 65 72 00 f2 f1 06 00 0e 00  | ..prev......".....handler....... | 
| 5a160 |  00 00 f2 f1 1e 00 05 15 00 00 01 00 08 10 00 00    00 00 00 00 00 00 00 00 10 00 5f 4e 4c 47 5f 49  | .........................._NLG_I | 
| 5a180 |  4e 46 4f 00 5e 00 03 12 0d 15 03 00 22 00 00 00    00 00 64 77 53 69 67 00 0d 15 03 00 22 00 00 00  | NFO.^.......".....dwSig....."... | 
| 5a1a0 |  04 00 75 6f 66 66 44 65 73 74 69 6e 61 74 69 6f    6e 00 f2 f1 0d 15 03 00 22 00 00 00 08 00 64 77  | ..uoffDestination.......".....dw | 
| 5a1c0 |  43 6f 64 65 00 f3 f2 f1 0d 15 03 00 22 00 00 00    0c 00 75 6f 66 66 46 72 61 6d 65 50 6f 69 6e 74  | Code........".....uoffFramePoint | 
| 5a1e0 |  65 72 00 f1 0e 00 08 10 03 00 00 00 7f 00 00 00    0a 10 00 00 06 00 01 12 00 00 00 00 2e 66 69 6c  | er...........................fil | 
| 5a200 |  65 00 00 00 0f 00 00 00 fe ff 00 00 67 03 64 3a    5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73  | e...........g.d:\dnsrv\base\crts | 
| 5a220 |  5c 63 72 74 77 33 32 5c 6d 69 73 63 5c 69 33 38    36 5c 73 65 74 6a 6d 70 2e 61 73 6d 00 00 00 00  | \crtw32\misc\i386\setjmp.asm.... | 
| 5a240 |  00 00 00 00 40 63 6f 6d 70 2e 69 64 c3 0f 0f 00    ff ff 00 00 03 00 40 66 65 61 74 2e 30 30 01 00  | ....@comp.id..........@feat.00.. | 
| 5a260 |  00 00 ff ff 00 00 03 00 2e 74 65 78 74 00 00 00    00 00 00 00 01 00 00 00 03 01 38 00 00 00 01 00  | .........text.............8..... | 
| 5a280 |  14 00 00 00 00 00 00 00 00 00 00 00 2e 64 61 74    61 00 00 00 00 00 00 00 02 00 00 00 03 01 00 00  | .............data............... | 
| 5a2a0 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    2e 64 65 62 75 67 24 53 00 00 00 00 03 00 00 00  | .................debug$S........ | 
| 5a2c0 |  03 01 5c 01 00 00 08 00 00 00 00 00 00 00 00 00    00 00 00 00 2e 64 65 62 75 67 24 54 00 00 00 00  | ..\..................debug$T.... | 
| 5a2e0 |  04 00 00 00 03 01 3c 02 00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 04 00 00 00  | ......<......................... | 
| 5a300 |  00 00 00 00 00 00 00 00 02 00 2e 66 69 6c 65 00    00 00 13 00 00 00 fe ff 00 00 67 03 64 3a 5c 64  | ...........file...........g.d:\d | 
| 5a320 |  6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73 5c 63    72 74 77 33 32 5c 68 5c 70 76 65 72 73 69 6f 6e  | nsrv\base\crts\crtw32\h\pversion | 
| 5a340 |  2e 69 6e 63 00 00 00 00 00 00 00 00 00 00 00 00    00 00 2e 66 69 6c 65 00 00 00 17 00 00 00 fe ff  | .inc...............file......... | 
| 5a360 |  00 00 67 03 64 3a 5c 64 6e 73 72 76 5c 62 61 73    65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c 6d 69  | ..g.d:\dnsrv\base\crts\crtw32\mi | 
| 5a380 |  73 63 5c 69 33 38 36 5c 73 65 74 6a 6d 70 2e 61    73 6d 00 00 00 00 00 00 00 00 2e 66 69 6c 65 00  | sc\i386\setjmp.asm.........file. | 
| 5a3a0 |  00 00 1b 00 00 00 fe ff 00 00 67 03 64 3a 5c 64    6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73 5c 63  | ..........g.d:\dnsrv\base\crts\c | 
| 5a3c0 |  72 74 77 33 32 5c 68 5c 63 6d 61 63 72 6f 73 2e    69 6e 63 00 00 00 00 00 00 00 00 00 00 00 00 00  | rtw32\h\cmacros.inc............. | 
| 5a3e0 |  00 00 2e 66 69 6c 65 00 00 00 1f 00 00 00 fe ff    00 00 67 03 64 3a 5c 64 6e 73 72 76 5c 62 61 73  | ...file...........g.d:\dnsrv\bas | 
| 5a400 |  65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c 6d 69    73 63 5c 69 33 38 36 5c 73 65 74 6a 6d 70 2e 61  | e\crts\crtw32\misc\i386\setjmp.a | 
| 5a420 |  73 6d 00 00 00 00 00 00 00 00 2e 66 69 6c 65 00    00 00 23 00 00 00 fe ff 00 00 67 03 64 3a 5c 64  | sm.........file...#.......g.d:\d | 
| 5a440 |  6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73 5c 63    72 74 77 33 32 5c 68 5c 65 78 73 75 70 2e 69 6e  | nsrv\base\crts\crtw32\h\exsup.in | 
| 5a460 |  63 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 2e 66 69 6c 65 00 00 00 00 00 00 00 fe ff  | c..................file......... | 
| 5a480 |  00 00 67 03 64 3a 5c 64 6e 73 72 76 5c 62 61 73    65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c 6d 69  | ..g.d:\dnsrv\base\crts\crtw32\mi | 
| 5a4a0 |  73 63 5c 69 33 38 36 5c 73 65 74 6a 6d 70 2e 61    73 6d 00 00 00 00 00 00 00 00 5f 5f 73 65 74 6a  | sc\i386\setjmp.asm........__setj | 
| 5a4c0 |  6d 70 00 00 00 00 01 00 20 00 02 01 29 00 00 00    38 00 00 00 f6 00 00 00 2e 00 00 00 00 00 2e 62  | mp..........)...8..............b | 
| 5a4e0 |  66 00 00 00 00 00 00 00 00 00 01 00 00 00 65 01    00 00 00 00 4e 00 00 00 00 00 00 00 30 00 00 00  | f.............e.....N.......0... | 
| 5a500 |  00 00 2e 6c 66 00 00 00 00 00 13 00 00 00 01 00    00 00 65 00 2e 65 66 00 00 00 00 00 38 00 00 00  | ...lf.............e..ef.....8... | 
| 5a520 |  01 00 00 00 65 01 00 00 00 00 67 00 00 00 00 00    00 00 00 00 00 00 00 00 24 24 24 30 30 30 30 32  | ....e.....g.............$$$00002 | 
| 5a540 |  38 00 00 00 01 00 20 00 03 01 30 00 00 00 00 00    00 00 68 01 00 00 00 00 00 00 00 00 2e 62 66 00  | 8.........0.......h..........bf. | 
| 5a560 |  00 00 00 00 38 00 00 00 01 00 00 00 65 01 00 00    00 00 6b 00 00 00 00 00 00 00 00 00 00 00 00 00  | ....8.......e.....k............. | 
| 5a580 |  2e 6c 66 00 00 00 00 00 01 00 00 00 01 00 00 00    65 00 2e 65 66 00 00 00 00 00 38 00 00 00 01 00  | .lf.............e..ef.....8..... | 
| 5a5a0 |  00 00 65 01 00 00 00 00 67 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 12 00 00 00 2f 00  | ..e.....g...................../. | 
| 5a5c0 |  00 00 01 00 00 00 06 00 5f 73 6a 5f 64 6f 6e 65    35 00 00 00 01 00 00 00 06 00 24 00 00 00 5f 5f  | ........_sj_done5.........$...__ | 
| 5a5e0 |  65 78 63 65 70 74 5f 6c 69 73 74 00 5f 73 6a 5f    73 61 76 65 5f 74 72 79 6c 65 76 65 6c 00 2f 32  | except_list._sj_save_trylevel./2 | 
| 5a600 |  37 31 20 20 20 20 20 20 20 20 20 20 20 20 31 30    39 39 36 32 31 32 35 35 20 20 20 20 20 20 20 20  | 71............1099621255........ | 
| 5a620 |  20 20 20 20 20 20 31 30 30 36 36 36 20 20 32 38    36 31 20 20 20 20 20 20 60 0a 4c 01 04 00 87 e3  | ......100666..2861......`.L..... | 
| 5a640 |  8a 41 ba 06 00 00 3a 00 00 00 00 00 00 00 2e 74    65 78 74 00 00 00 00 00 00 00 00 00 00 00 7b 00  | .A....:........text...........{. | 
| 5a660 |  00 00 b4 00 00 00 30 01 00 00 3a 01 00 00 01 00    2c 00 20 00 30 60 2e 64 61 74 61 00 00 00 7b 00  | ......0...:.....,...0`.data...{. | 
| 5a680 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 40 00 30 c0 2e 64  | ..........................@.0..d | 
| 5a6a0 |  65 62 75 67 24 53 7b 00 00 00 00 00 00 00 b0 01    00 00 42 02 00 00 f2 03 00 00 00 00 00 00 0e 00  | ebug$S{...........B............. | 
| 5a6c0 |  00 00 40 00 10 42 2e 64 65 62 75 67 24 54 2b 02    00 00 00 00 00 00 3c 02 00 00 7e 04 00 00 00 00  | ..@..B.debug$T+.......<...~..... | 
| 5a6e0 |  00 00 00 00 00 00 00 00 00 00 40 00 10 42 8b 54    24 04 89 2a 89 5a 04 89 7a 08 89 72 0c 89 62 10  | ..........@..B.T$..*.Z..z..r..b. | 
| 5a700 |  8b 04 24 89 42 14 c7 42 20 30 32 43 56 c7 42 24    00 00 00 00 64 a1 00 00 00 00 89 42 18 83 f8 ff  | ..$.B..B.02CV.B$....d......B.... | 
| 5a720 |  75 09 c7 42 1c ff ff ff ff eb 3b 8b 4c 24 08 0b    c9 74 0a 8b 44 24 0c 89 42 24 49 75 08 8b 40 0c  | u..B......;.L$...t..D$..B$Iu..@. | 
| 5a740 |  89 42 1c eb 21 8b 44 24 10 89 42 1c 49 74 17 56    57 8d 74 24 1c 8d 7a 28 83 f9 06 76 05 b9 06 00  | .B..!.D$..B.It.VW.t$..z(...v.... | 
| 5a760 |  00 00 f3 a5 5f 5e 2b c0 c3 00 28 00 00 00 0e 00    00 00 06 00 27 00 00 00 00 00 00 00 00 00 01 00  | ...._^+...(.........'........... | 
| 5a780 |  04 00 00 00 02 00 06 00 00 00 03 00 09 00 00 00    04 00 0c 00 00 00 05 00 0f 00 00 00 06 00 12 00  | ................................ | 
| 5a7a0 |  00 00 08 00 15 00 00 00 09 00 18 00 00 00 0b 00    1f 00 00 00 0c 00 26 00 00 00 0e 00 2c 00 00 00  | ......................&.....,... | 
| 5a7c0 |  0f 00 2f 00 00 00 11 00 32 00 00 00 12 00 34 00    00 00 13 00 3b 00 00 00 14 00 3d 00 00 00 17 00  | ../.....2.....4.....;.....=..... | 
| 5a7e0 |  41 00 00 00 18 00 43 00 00 00 19 00 45 00 00 00    1b 00 49 00 00 00 1c 00 4c 00 00 00 1d 00 4d 00  | A.....C.....E.....I.....L.....M. | 
| 5a800 |  00 00 1e 00 4f 00 00 00 25 00 52 00 00 00 26 00    55 00 00 00 27 00 57 00 00 00 2a 00 5b 00 00 00  | ....O...%.R...&.U...'.W...*.[... | 
| 5a820 |  2b 00 5e 00 00 00 2c 00 5f 00 00 00 2d 00 61 00    00 00 2f 00 62 00 00 00 30 00 63 00 00 00 31 00  | +.^...,._...-.a.../.b...0.c...1. | 
| 5a840 |  67 00 00 00 32 00 6a 00 00 00 33 00 6d 00 00 00    34 00 6f 00 00 00 35 00 74 00 00 00 38 00 76 00  | g...2.j...3.m...4.o...5.t...8.v. | 
| 5a860 |  00 00 39 00 77 00 00 00 3a 00 78 00 00 00 3d 00    7a 00 00 00 3e 00 2e 00 00 00 00 00 04 00 00 00  | ..9.w...:.x...=.z...>........... | 
| 5a880 |  f1 00 00 00 00 00 00 00 3d 00 01 11 00 00 00 00    64 3a 5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72  | ........=.......d:\dnsrv\base\cr | 
| 5a8a0 |  74 73 5c 63 72 74 77 33 32 5c 6d 69 73 63 5c 6e    74 5c 6f 62 6a 5c 69 33 38 36 5c 73 65 74 6a 6d  | ts\crtw32\misc\nt\obj\i386\setjm | 
| 5a8c0 |  70 33 2e 6f 62 6a 00 34 00 16 11 03 00 00 00 03    00 00 00 00 00 00 00 07 00 0a 00 c3 0f 4d 69 63  | p3.obj.4.....................Mic | 
| 5a8e0 |  72 6f 73 6f 66 74 20 28 52 29 20 4d 61 63 72 6f    20 41 73 73 65 6d 62 6c 65 72 00 00 00 1b 00 05  | rosoft.(R).Macro.Assembler...... | 
| 5a900 |  11 00 00 00 00 00 00 00 5f 73 33 5f 73 61 76 65    5f 74 72 79 6c 65 76 65 6c 00 0f 00 08 11 01 10  | ........_s3_save_trylevel....... | 
| 5a920 |  00 00 5f 4a 4d 50 5f 42 55 46 00 2f 00 10 11 00    00 00 00 00 00 00 00 00 00 00 00 7b 00 00 00 00  | .._JMP_BUF./...............{.... | 
| 5a940 |  00 00 00 7b 00 00 00 03 10 00 00 00 00 00 00 00    00 00 5f 5f 73 65 74 6a 6d 70 33 00 02 00 06 00  | ...{..............__setjmp3..... | 
| 5a960 |  12 00 05 11 00 00 00 00 00 00 00 5f 73 33 5f 64    6f 6e 65 00 1e 00 05 11 00 00 00 00 00 00 00 5f  | ..........._s3_done............_ | 
| 5a980 |  73 33 5f 64 65 66 61 75 6c 74 5f 74 72 79 6c 65    76 65 6c 00 2e 00 0f 11 00 00 00 00 00 00 00 00  | s3_default_trylevel............. | 
| 5a9a0 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    05 10 00 00 00 00 00 00 00 00 00 24 24 24 30 30  | ...........................$$$00 | 
| 5a9c0 |  30 30 32 00 02 00 06 00 17 00 05 11 00 00 00 00    00 00 00 5f 73 33 5f 67 65 74 5f 63 6f 75 6e 74  | 002................_s3_get_count | 
| 5a9e0 |  00 17 00 05 11 00 00 00 00 00 00 00 5f 73 33 5f    73 61 76 65 5f 64 61 74 61 00 1e 00 08 11 07 10  | ............_s3_save_data....... | 
| 5aa00 |  00 00 5f 45 58 43 45 50 54 49 4f 4e 5f 52 45 47    49 53 54 52 41 54 49 4f 4e 00 10 00 08 11 09 10  | .._EXCEPTION_REGISTRATION....... | 
| 5aa20 |  00 00 5f 4e 4c 47 5f 49 4e 46 4f 00 85 00 00 00    35 00 00 00 0b 00 89 00 00 00 35 00 00 00 0a 00  | .._NLG_INFO.....5.........5..... | 
| 5aa40 |  cf 00 00 00 27 00 00 00 0b 00 d3 00 00 00 27 00    00 00 0a 00 e8 00 00 00 36 00 00 00 0b 00 ec 00  | ....'.........'.........6....... | 
| 5aa60 |  00 00 36 00 00 00 0a 00 fc 00 00 00 37 00 00 00    0b 00 00 01 00 00 37 00 00 00 0a 00 38 01 00 00  | ..6.........7.........7.....8... | 
| 5aa80 |  2e 00 00 00 0b 00 3c 01 00 00 2e 00 00 00 0a 00    50 01 00 00 38 00 00 00 0b 00 54 01 00 00 38 00  | ......<.........P...8.....T...8. | 
| 5aaa0 |  00 00 0a 00 69 01 00 00 39 00 00 00 0b 00 6d 01    00 00 39 00 00 00 0a 00 04 00 00 00 06 00 0e 00  | ....i...9.....m...9............. | 
| 5aac0 |  00 00 f2 f1 1e 00 05 15 00 00 01 00 02 10 00 00    00 00 00 00 00 00 00 00 40 00 5f 4a 4d 50 5f 42  | ........................@._JMP_B | 
| 5aae0 |  55 46 00 f3 06 01 03 12 0d 15 03 00 22 00 00 00    00 00 73 61 76 65 64 5f 65 62 70 00 0d 15 03 00  | UF..........".....saved_ebp..... | 
| 5ab00 |  22 00 00 00 04 00 73 61 76 65 64 5f 65 62 78 00    0d 15 03 00 22 00 00 00 08 00 73 61 76 65 64 5f  | ".....saved_ebx.....".....saved_ | 
| 5ab20 |  65 64 69 00 0d 15 03 00 22 00 00 00 0c 00 73 61    76 65 64 5f 65 73 69 00 0d 15 03 00 22 00 00 00  | edi.....".....saved_esi....."... | 
| 5ab40 |  10 00 73 61 76 65 64 5f 65 73 70 00 0d 15 03 00    22 00 00 00 14 00 73 61 76 65 64 5f 72 65 74 75  | ..saved_esp.....".....saved_retu | 
| 5ab60 |  72 6e 00 f1 0d 15 03 00 22 00 00 00 18 00 73 61    76 65 64 5f 78 72 65 67 69 73 74 72 61 74 69 6f  | rn......".....saved_xregistratio | 
| 5ab80 |  6e 00 f2 f1 0d 15 03 00 22 00 00 00 1c 00 73 61    76 65 64 5f 74 72 79 6c 65 76 65 6c 00 f3 f2 f1  | n.......".....saved_trylevel.... | 
| 5aba0 |  0d 15 03 00 22 00 00 00 20 00 76 65 72 73 69 6f    6e 5f 63 6f 6f 6b 69 65 00 f3 f2 f1 0d 15 03 00  | ....".....version_cookie........ | 
| 5abc0 |  22 00 00 00 24 00 75 6e 77 69 6e 64 5f 66 75 6e    63 00 f2 f1 0d 15 03 00 22 00 00 00 28 00 75 6e  | "...$.unwind_func......."...(.un | 
| 5abe0 |  77 69 6e 64 5f 64 61 74 61 00 f2 f1 0e 00 08 10    03 00 00 00 3f 00 00 00 04 10 00 00 06 00 01 12  | wind_data...........?........... | 
| 5ac00 |  00 00 00 00 0e 00 08 10 03 00 00 00 60 00 00 00    06 10 00 00 06 00 01 12 00 00 00 00 2e 00 05 15  | ............`................... | 
| 5ac20 |  00 00 01 00 08 10 00 00 00 00 00 00 00 00 00 00    08 00 5f 45 58 43 45 50 54 49 4f 4e 5f 52 45 47  | .................._EXCEPTION_REG | 
| 5ac40 |  49 53 54 52 41 54 49 4f 4e 00 f2 f1 26 00 03 12    0d 15 03 00 22 00 00 00 00 00 70 72 65 76 00 f1  | ISTRATION...&.......".....prev.. | 
| 5ac60 |  0d 15 03 00 22 00 00 00 04 00 68 61 6e 64 6c 65    72 00 f2 f1 1e 00 05 15 00 00 01 00 0a 10 00 00  | ....".....handler............... | 
| 5ac80 |  00 00 00 00 00 00 00 00 10 00 5f 4e 4c 47 5f 49    4e 46 4f 00 5e 00 03 12 0d 15 03 00 22 00 00 00  | .........._NLG_INFO.^......."... | 
| 5aca0 |  00 00 64 77 53 69 67 00 0d 15 03 00 22 00 00 00    04 00 75 6f 66 66 44 65 73 74 69 6e 61 74 69 6f  | ..dwSig.....".....uoffDestinatio | 
| 5acc0 |  6e 00 f2 f1 0d 15 03 00 22 00 00 00 08 00 64 77    43 6f 64 65 00 f3 f2 f1 0d 15 03 00 22 00 00 00  | n.......".....dwCode........"... | 
| 5ace0 |  0c 00 75 6f 66 66 46 72 61 6d 65 50 6f 69 6e 74    65 72 00 f1 2e 66 69 6c 65 00 00 00 0f 00 00 00  | ..uoffFramePointer...file....... | 
| 5ad00 |  fe ff 00 00 67 03 64 3a 5c 64 6e 73 72 76 5c 62    61 73 65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c  | ....g.d:\dnsrv\base\crts\crtw32\ | 
| 5ad20 |  6d 69 73 63 5c 69 33 38 36 5c 73 65 74 6a 6d 70    33 2e 61 73 6d 00 00 00 00 00 00 00 40 63 6f 6d  | misc\i386\setjmp3.asm.......@com | 
| 5ad40 |  70 2e 69 64 c3 0f 0f 00 ff ff 00 00 03 00 40 66    65 61 74 2e 30 30 01 00 00 00 ff ff 00 00 03 00  | p.id..........@feat.00.......... | 
| 5ad60 |  2e 74 65 78 74 00 00 00 00 00 00 00 01 00 00 00    03 01 7b 00 00 00 01 00 2c 00 00 00 00 00 00 00  | .text.............{.....,....... | 
| 5ad80 |  00 00 00 00 2e 64 61 74 61 00 00 00 00 00 00 00    02 00 00 00 03 01 00 00 00 00 00 00 00 00 00 00  | .....data....................... | 
| 5ada0 |  00 00 00 00 00 00 00 00 2e 64 65 62 75 67 24 53    00 00 00 00 03 00 00 00 03 01 b0 01 00 00 0e 00  | .........debug$S................ | 
| 5adc0 |  00 00 00 00 00 00 00 00 00 00 00 00 2e 64 65 62    75 67 24 54 00 00 00 00 04 00 00 00 03 01 3c 02  | .............debug$T..........<. | 
| 5ade0 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00  | ................................ | 
| 5ae00 |  02 00 2e 66 69 6c 65 00 00 00 13 00 00 00 fe ff    00 00 67 03 64 3a 5c 64 6e 73 72 76 5c 62 61 73  | ...file...........g.d:\dnsrv\bas | 
| 5ae20 |  65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c 68 5c    70 76 65 72 73 69 6f 6e 2e 69 6e 63 00 00 00 00  | e\crts\crtw32\h\pversion.inc.... | 
| 5ae40 |  00 00 00 00 00 00 00 00 00 00 2e 66 69 6c 65 00    00 00 17 00 00 00 fe ff 00 00 67 03 64 3a 5c 64  | ...........file...........g.d:\d | 
| 5ae60 |  6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73 5c 63    72 74 77 33 32 5c 6d 69 73 63 5c 69 33 38 36 5c  | nsrv\base\crts\crtw32\misc\i386\ | 
| 5ae80 |  73 65 74 6a 6d 70 33 2e 61 73 6d 00 00 00 00 00    00 00 2e 66 69 6c 65 00 00 00 1b 00 00 00 fe ff  | setjmp3.asm........file......... | 
| 5aea0 |  00 00 67 03 64 3a 5c 64 6e 73 72 76 5c 62 61 73    65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c 68 5c  | ..g.d:\dnsrv\base\crts\crtw32\h\ | 
| 5aec0 |  63 6d 61 63 72 6f 73 2e 69 6e 63 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 2e 66 69 6c 65 00  | cmacros.inc................file. | 
| 5aee0 |  00 00 1f 00 00 00 fe ff 00 00 67 03 64 3a 5c 64    6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73 5c 63  | ..........g.d:\dnsrv\base\crts\c | 
| 5af00 |  72 74 77 33 32 5c 6d 69 73 63 5c 69 33 38 36 5c    73 65 74 6a 6d 70 33 2e 61 73 6d 00 00 00 00 00  | rtw32\misc\i386\setjmp3.asm..... | 
| 5af20 |  00 00 2e 66 69 6c 65 00 00 00 23 00 00 00 fe ff    00 00 67 03 64 3a 5c 64 6e 73 72 76 5c 62 61 73  | ...file...#.......g.d:\dnsrv\bas | 
| 5af40 |  65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c 68 5c    65 78 73 75 70 2e 69 6e 63 00 00 00 00 00 00 00  | e\crts\crtw32\h\exsup.inc....... | 
| 5af60 |  00 00 00 00 00 00 00 00 00 00 2e 66 69 6c 65 00    00 00 00 00 00 00 fe ff 00 00 67 03 64 3a 5c 64  | ...........file...........g.d:\d | 
| 5af80 |  6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73 5c 63    72 74 77 33 32 5c 6d 69 73 63 5c 69 33 38 36 5c  | nsrv\base\crts\crtw32\misc\i386\ | 
| 5afa0 |  73 65 74 6a 6d 70 33 2e 61 73 6d 00 00 00 00 00    00 00 00 00 00 00 12 00 00 00 00 00 00 00 01 00  | setjmp3.asm..................... | 
| 5afc0 |  20 00 02 01 29 00 00 00 7b 00 00 00 3a 01 00 00    2e 00 00 00 00 00 2e 62 66 00 00 00 00 00 00 00  | ....)...{...:..........bf....... | 
| 5afe0 |  00 00 01 00 00 00 65 01 00 00 00 00 4e 00 00 00    00 00 00 00 30 00 00 00 00 00 2e 6c 66 00 00 00  | ......e.....N.......0......lf... | 
| 5b000 |  00 00 2b 00 00 00 01 00 00 00 65 00 2e 65 66 00    00 00 00 00 7b 00 00 00 01 00 00 00 65 01 00 00  | ..+.......e..ef.....{.......e... | 
| 5b020 |  00 00 8c 00 00 00 00 00 00 00 00 00 00 00 00 00    24 24 24 30 30 30 30 32 7b 00 00 00 01 00 20 00  | ................$$$00002{....... | 
| 5b040 |  03 01 30 00 00 00 00 00 00 00 3c 02 00 00 00 00    00 00 00 00 2e 62 66 00 00 00 00 00 7b 00 00 00  | ..0.......<..........bf.....{... | 
| 5b060 |  01 00 00 00 65 01 00 00 00 00 8f 00 00 00 00 00    00 00 00 00 00 00 00 00 2e 6c 66 00 00 00 00 00  | ....e....................lf..... | 
| 5b080 |  01 00 00 00 01 00 00 00 65 00 2e 65 66 00 00 00    00 00 7b 00 00 00 01 00 00 00 65 01 00 00 00 00  | ........e..ef.....{.......e..... | 
| 5b0a0 |  8c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 1c 00 00 00 57 00 00 00 01 00 00 00 06 00  | ......................W......... | 
| 5b0c0 |  5f 73 33 5f 64 6f 6e 65 78 00 00 00 01 00 00 00    06 00 00 00 00 00 2e 00 00 00 4f 00 00 00 01 00  | _s3_donex.................O..... | 
| 5b0e0 |  00 00 06 00 00 00 00 00 43 00 00 00 3d 00 00 00    01 00 00 00 06 00 00 00 00 00 51 00 00 00 74 00  | ........C...=.............Q...t. | 
| 5b100 |  00 00 01 00 00 00 06 00 5f 00 00 00 5f 5f 65 78    63 65 70 74 5f 6c 69 73 74 00 5f 5f 73 65 74 6a  | ........_...__except_list.__setj | 
| 5b120 |  6d 70 33 00 5f 73 33 5f 73 61 76 65 5f 74 72 79    6c 65 76 65 6c 00 5f 73 33 5f 64 65 66 61 75 6c  | mp3._s3_save_trylevel._s3_defaul | 
| 5b140 |  74 5f 74 72 79 6c 65 76 65 6c 00 5f 73 33 5f 67    65 74 5f 63 6f 75 6e 74 00 5f 73 33 5f 73 61 76  | t_trylevel._s3_get_count._s3_sav | 
| 5b160 |  65 5f 64 61 74 61 00 0a 2f 33 31 36 20 20 20 20    20 20 20 20 20 20 20 20 31 30 39 39 36 32 31 32  | e_data../316............10996212 | 
| 5b180 |  35 35 20 20 20 20 20 20 20 20 20 20 20 20 20 20    31 30 30 36 36 36 20 20 31 34 36 33 20 20 20 20  | 55..............100666..1463.... | 
| 5b1a0 |  20 20 60 0a 4c 01 04 00 87 e3 8a 41 5c 02 00 00    2e 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00  | ..`.L......A\............text... | 
| 5b1c0 |  00 00 00 00 00 00 00 00 05 00 00 00 b4 00 00 00    ba 00 00 00 c4 00 00 00 01 00 03 00 20 00 30 60  | ..............................0` | 
| 5b1e0 |  2e 64 61 74 61 00 00 00 05 00 00 00 00 00 00 00    04 00 00 00 d6 00 00 00 00 00 00 00 00 00 00 00  | .data........................... | 
| 5b200 |  00 00 00 00 40 00 30 c0 2e 64 65 62 75 67 24 53    09 00 00 00 00 00 00 00 0a 01 00 00 da 00 00 00  | ....@.0..debug$S................ | 
| 5b220 |  e4 01 00 00 00 00 00 00 06 00 00 00 40 00 10 42    2e 64 65 62 75 67 24 54 13 01 00 00 00 00 00 00  | ............@..B.debug$T........ | 
| 5b240 |  3c 00 00 00 20 02 00 00 00 00 00 00 00 00 00 00    00 00 00 00 40 00 10 42 e9 00 00 00 00 00 01 00  | <...................@..B........ | 
| 5b260 |  00 00 0e 00 00 00 14 00 20 00 00 00 00 00 00 00    00 00 01 00 27 00 00 00 00 00 01 00 00 00 04 00  | ....................'........... | 
| 5b280 |  00 00 f1 00 00 00 00 00 00 00 3e 00 01 11 00 00    00 00 64 3a 5c 64 6e 73 72 76 5c 62 61 73 65 5c  | ..........>.......d:\dnsrv\base\ | 
| 5b2a0 |  63 72 74 73 5c 63 72 74 77 33 32 5c 6d 69 73 63    5c 6e 74 5c 6f 62 6a 5c 69 33 38 36 5c 73 65 74  | crts\crtw32\misc\nt\obj\i386\set | 
| 5b2c0 |  6a 6d 70 65 78 2e 6f 62 6a 00 34 00 16 11 03 00    00 00 03 00 00 00 00 00 00 00 07 00 0a 00 c3 0f  | jmpex.obj.4..................... | 
| 5b2e0 |  4d 69 63 72 6f 73 6f 66 74 20 28 52 29 20 4d 61    63 72 6f 20 41 73 73 65 6d 62 6c 65 72 00 00 00  | Microsoft.(R).Macro.Assembler... | 
| 5b300 |  31 00 10 11 00 00 00 00 00 00 00 00 00 00 00 00    05 00 00 00 00 00 00 00 05 00 00 00 00 10 00 00  | 1............................... | 
| 5b320 |  00 00 00 00 00 00 00 5f 5f 6c 6f 6e 67 6a 6d 70    65 78 00 02 00 06 00 1b 00 0d 11 22 00 00 00 00  | .......__longjmpex.........".... | 
| 5b340 |  00 00 00 00 00 5f 5f 73 65 74 6a 6d 70 65 78 75    73 65 64 00 2e 00 0f 11 00 00 00 00 00 00 00 00  | .....__setjmpexused............. | 
| 5b360 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    02 10 00 00 00 00 00 00 00 00 00 24 24 24 30 30  | ...........................$$$00 | 
| 5b380 |  30 30 32 00 02 00 06 00 a2 00 00 00 20 00 00 00    0b 00 a6 00 00 00 20 00 00 00 0a 00 c1 00 00 00  | 002............................. | 
| 5b3a0 |  0f 00 00 00 0b 00 c5 00 00 00 0f 00 00 00 0a 00    f6 00 00 00 27 00 00 00 0b 00 fa 00 00 00 27 00  | ....................'.........'. | 
| 5b3c0 |  00 00 0a 00 04 00 00 00 0e 00 08 10 03 00 00 00    1c 00 00 00 01 10 00 00 06 00 01 12 00 00 00 00  | ................................ | 
| 5b3e0 |  0e 00 08 10 03 00 00 00 3d 00 00 00 03 10 00 00    06 00 01 12 00 00 00 00 06 00 0e 00 00 00 f2 f1  | ........=....................... | 
| 5b400 |  2e 66 69 6c 65 00 00 00 10 00 00 00 fe ff 00 00    67 03 64 3a 5c 64 6e 73 72 76 5c 62 61 73 65 5c  | .file...........g.d:\dnsrv\base\ | 
| 5b420 |  63 72 74 73 5c 63 72 74 77 33 32 5c 6d 69 73 63    5c 69 33 38 36 5c 73 65 74 6a 6d 70 65 78 2e 61  | crts\crtw32\misc\i386\setjmpex.a | 
| 5b440 |  73 6d 00 00 00 00 00 00 40 63 6f 6d 70 2e 69 64    c3 0f 0f 00 ff ff 00 00 03 00 40 66 65 61 74 2e  | sm......@comp.id..........@feat. | 
| 5b460 |  30 30 01 00 00 00 ff ff 00 00 03 00 2e 74 65 78    74 00 00 00 00 00 00 00 01 00 00 00 03 01 05 00  | 00...........text............... | 
| 5b480 |  00 00 01 00 03 00 00 00 00 00 00 00 00 00 00 00    2e 64 61 74 61 00 00 00 00 00 00 00 02 00 00 00  | .................data........... | 
| 5b4a0 |  03 01 04 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 00 00 2e 64 65 62 75 67 24 53 00 00 00 00  | .....................debug$S.... | 
| 5b4c0 |  03 00 00 00 03 01 0a 01 00 00 06 00 00 00 00 00    00 00 00 00 00 00 00 00 2e 64 65 62 75 67 24 54  | .........................debug$T | 
| 5b4e0 |  00 00 00 00 04 00 00 00 03 01 3c 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 5f 6c 6f 6e  | ..........<................._lon | 
| 5b500 |  67 6a 6d 70 00 00 00 00 00 00 00 00 02 00 00 00    00 00 04 00 00 00 00 00 00 00 02 00 00 00 02 00  | gjmp............................ | 
| 5b520 |  2e 66 69 6c 65 00 00 00 14 00 00 00 fe ff 00 00    67 03 64 3a 5c 64 6e 73 72 76 5c 62 61 73 65 5c  | .file...........g.d:\dnsrv\base\ | 
| 5b540 |  63 72 74 73 5c 63 72 74 77 33 32 5c 68 5c 70 76    65 72 73 69 6f 6e 2e 69 6e 63 00 00 00 00 00 00  | crts\crtw32\h\pversion.inc...... | 
| 5b560 |  00 00 00 00 00 00 00 00 2e 66 69 6c 65 00 00 00    18 00 00 00 fe ff 00 00 67 03 64 3a 5c 64 6e 73  | .........file...........g.d:\dns | 
| 5b580 |  72 76 5c 62 61 73 65 5c 63 72 74 73 5c 63 72 74    77 33 32 5c 6d 69 73 63 5c 69 33 38 36 5c 73 65  | rv\base\crts\crtw32\misc\i386\se | 
| 5b5a0 |  74 6a 6d 70 65 78 2e 61 73 6d 00 00 00 00 00 00    2e 66 69 6c 65 00 00 00 1c 00 00 00 fe ff 00 00  | tjmpex.asm.......file........... | 
| 5b5c0 |  67 03 64 3a 5c 64 6e 73 72 76 5c 62 61 73 65 5c    63 72 74 73 5c 63 72 74 77 33 32 5c 68 5c 63 6d  | g.d:\dnsrv\base\crts\crtw32\h\cm | 
| 5b5e0 |  61 63 72 6f 73 2e 69 6e 63 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 2e 66 69 6c 65 00 00 00  | acros.inc................file... | 
| 5b600 |  00 00 00 00 fe ff 00 00 67 03 64 3a 5c 64 6e 73    72 76 5c 62 61 73 65 5c 63 72 74 73 5c 63 72 74  | ........g.d:\dnsrv\base\crts\crt | 
| 5b620 |  77 33 32 5c 6d 69 73 63 5c 69 33 38 36 5c 73 65    74 6a 6d 70 65 78 2e 61 73 6d 00 00 00 00 00 00  | w32\misc\i386\setjmpex.asm...... | 
| 5b640 |  00 00 00 00 13 00 00 00 00 00 00 00 01 00 20 00    02 01 22 00 00 00 05 00 00 00 c4 00 00 00 27 00  | .................."...........'. | 
| 5b660 |  00 00 00 00 2e 62 66 00 00 00 00 00 00 00 00 00    01 00 00 00 65 01 00 00 00 00 30 00 00 00 00 00  | .....bf.............e.....0..... | 
| 5b680 |  00 00 29 00 00 00 00 00 2e 6c 66 00 00 00 00 00    02 00 00 00 01 00 00 00 65 00 2e 65 66 00 00 00  | ..)......lf.............e..ef... | 
| 5b6a0 |  00 00 05 00 00 00 01 00 00 00 65 01 00 00 00 00    31 00 00 00 00 00 00 00 00 00 00 00 00 00 24 24  | ..........e.....1.............$$ | 
| 5b6c0 |  24 30 30 30 30 32 05 00 00 00 01 00 20 00 03 01    29 00 00 00 00 00 00 00 d0 00 00 00 00 00 00 00  | $00002..........)............... | 
| 5b6e0 |  00 00 2e 62 66 00 00 00 00 00 05 00 00 00 01 00    00 00 65 01 00 00 00 00 34 00 00 00 00 00 00 00  | ...bf.............e.....4....... | 
| 5b700 |  00 00 00 00 00 00 2e 6c 66 00 00 00 00 00 01 00    00 00 01 00 00 00 65 00 2e 65 66 00 00 00 00 00  | .......lf.............e..ef..... | 
| 5b720 |  05 00 00 00 01 00 00 00 65 01 00 00 00 00 31 00    00 00 00 00 00 00 00 00 00 00 00 00 1f 00 00 00  | ........e.....1................. | 
| 5b740 |  5f 5f 73 65 74 6a 6d 70 65 78 75 73 65 64 00 5f    5f 6c 6f 6e 67 6a 6d 70 65 78 00 0a 2f 33 36 32  | __setjmpexused.__longjmpex../362 | 
| 5b760 |  20 20 20 20 20 20 20 20 20 20 20 20 31 30 39 39    36 32 31 32 35 34 20 20 20 20 20 20 20 20 20 20  | ............1099621254.......... | 
| 5b780 |  20 20 20 20 31 30 30 36 36 36 20 20 33 31 38 30    20 20 20 20 20 20 60 0a 4c 01 04 00 86 e3 8a 41  | ....100666..3180......`.L......A | 
| 5b7a0 |  f0 06 00 00 45 00 00 00 00 00 00 00 2e 74 65 78    74 00 00 00 00 00 00 00 00 00 00 00 79 00 00 00  | ....E........text...........y... | 
| 5b7c0 |  b4 00 00 00 2e 01 00 00 60 01 00 00 05 00 2e 00    20 00 30 60 2e 64 61 74 61 00 00 00 79 00 00 00  | ........`.........0`.data...y... | 
| 5b7e0 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 40 00 30 c0 2e 64 65 62  | ........................@.0..deb | 
| 5b800 |  75 67 24 53 79 00 00 00 00 00 00 00 af 01 00 00    74 02 00 00 24 04 00 00 00 00 00 00 0c 00 00 00  | ug$Sy...........t...$........... | 
| 5b820 |  40 00 10 42 2e 64 65 62 75 67 24 54 28 02 00 00    00 00 00 00 54 02 00 00 9c 04 00 00 00 00 00 00  | @..B.debug$T(.......T........... | 
| 5b840 |  00 00 00 00 00 00 00 00 40 00 10 42 8b 5c 24 04    8b 2b 8b 73 18 64 3b 35 00 00 00 00 74 09 56 e8  | ........@..B.\$..+.s.d;5....t.V. | 
| 5b860 |  00 00 00 00 83 c4 04 83 fe 00 74 30 8d 43 20 50    e8 00 00 00 00 0b c0 74 16 8b 43 20 3d 30 32 43  | ..........t0.C.P.......t..C.=02C | 
| 5b880 |  56 75 0c 8b 43 24 0b c0 74 12 53 ff d0 eb 0d 8b    43 1c 50 56 e8 00 00 00 00 83 c4 08 6a 00 8b 43  | Vu..C$..t.S.....C.PV........j..C | 
| 5b8a0 |  14 e8 00 00 00 00 8b d3 8b 5a 04 8b 7a 08 8b 72    0c 8b 44 24 08 83 f8 01 83 d0 00 8b 62 10 83 c4  | .........Z..z..r..D$........b... | 
| 5b8c0 |  04 ff 62 14 c3 00 0c 00 00 00 0f 00 00 00 06 00    14 00 00 00 10 00 00 00 14 00 25 00 00 00 12 00  | ..b.......................%..... | 
| 5b8e0 |  00 00 14 00 49 00 00 00 11 00 00 00 14 00 56 00    00 00 13 00 00 00 14 00 2d 00 00 00 00 00 34 00  | ....I.........V.........-.....4. | 
| 5b900 |  00 00 00 00 00 00 00 00 01 00 04 00 00 00 05 00    06 00 00 00 0a 00 09 00 00 00 0b 00 10 00 00 00  | ................................ | 
| 5b920 |  0c 00 12 00 00 00 0e 00 13 00 00 00 0f 00 18 00    00 00 10 00 1b 00 00 00 13 00 1e 00 00 00 14 00  | ................................ | 
| 5b940 |  20 00 00 00 18 00 23 00 00 00 19 00 24 00 00 00    1a 00 29 00 00 00 1b 00 2b 00 00 00 1c 00 2d 00  | ......#.....$.....).....+.....-. | 
| 5b960 |  00 00 1d 00 30 00 00 00 1e 00 35 00 00 00 1f 00    37 00 00 00 23 00 3a 00 00 00 24 00 3c 00 00 00  | ....0.....5.....7...#.:...$.<... | 
| 5b980 |  25 00 3e 00 00 00 26 00 3f 00 00 00 27 00 41 00    00 00 28 00 43 00 00 00 2d 00 46 00 00 00 2e 00  | %.>...&.?...'.A...(.C...-.F..... | 
| 5b9a0 |  47 00 00 00 2f 00 48 00 00 00 30 00 4d 00 00 00    31 00 50 00 00 00 34 00 52 00 00 00 35 00 55 00  | G.../.H...0.M...1.P...4.R...5.U. | 
| 5b9c0 |  00 00 36 00 5a 00 00 00 38 00 5c 00 00 00 39 00    5f 00 00 00 3a 00 62 00 00 00 3b 00 65 00 00 00  | ..6.Z...8.\...9._...:.b...;.e... | 
| 5b9e0 |  3d 00 69 00 00 00 3e 00 6c 00 00 00 3f 00 6f 00    00 00 41 00 72 00 00 00 42 00 75 00 00 00 43 00  | =.i...>.l...?.o...A.r...B.u...C. | 
| 5ba00 |  78 00 00 00 44 00 3b 00 00 00 00 00 04 00 00 00    f1 00 00 00 00 00 00 00 3d 00 01 11 00 00 00 00  | x...D.;.................=....... | 
| 5ba20 |  64 3a 5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72    74 73 5c 63 72 74 77 33 32 5c 6d 69 73 63 5c 6e  | d:\dnsrv\base\crts\crtw32\misc\n | 
| 5ba40 |  74 5c 6f 62 6a 5c 69 33 38 36 5c 6c 6f 6e 67 6a    6d 70 2e 6f 62 6a 00 34 00 16 11 03 00 00 00 03  | t\obj\i386\longjmp.obj.4........ | 
| 5ba60 |  00 00 00 00 00 00 00 07 00 0a 00 c3 0f 4d 69 63    72 6f 73 6f 66 74 20 28 52 29 20 4d 61 63 72 6f  | .............Microsoft.(R).Macro | 
| 5ba80 |  20 41 73 73 65 6d 62 6c 65 72 00 00 00 18 00 05    11 00 00 00 00 00 00 00 5f 6c 6a 5f 6f 6c 64 5f  | .Assembler.............._lj_old_ | 
| 5baa0 |  75 6e 77 69 6e 64 00 0f 00 08 11 01 10 00 00 5f    4a 4d 50 5f 42 55 46 00 2e 00 0f 11 00 00 00 00  | unwind........._JMP_BUF......... | 
| 5bac0 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 00 00 05 10 00 00 00 00 00 00 00 00 00 24  | ...............................$ | 
| 5bae0 |  24 24 30 30 30 30 31 00 02 00 06 00 2e 00 0f 11    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | $$00001......................... | 
| 5bb00 |  00 00 00 00 00 00 00 00 07 10 00 00 00 00 00 00    00 00 00 24 24 24 30 30 30 30 33 00 02 00 06 00  | ...................$$$00003..... | 
| 5bb20 |  1a 00 05 11 00 00 00 00 00 00 00 5f 6c 6a 5f 6c    6f 63 61 6c 5f 75 6e 77 69 6e 64 00 17 00 05 11  | ..........._lj_local_unwind..... | 
| 5bb40 |  00 00 00 00 00 00 00 5f 6c 6a 5f 6e 6f 5f 75 6e    77 69 6e 64 00 1e 00 08 11 09 10 00 00 5f 45 58  | ......._lj_no_unwind........._EX | 
| 5bb60 |  43 45 50 54 49 4f 4e 5f 52 45 47 49 53 54 52 41    54 49 4f 4e 00 10 00 08 11 03 10 00 00 5f 4e 4c  | CEPTION_REGISTRATION........._NL | 
| 5bb80 |  47 5f 49 4e 46 4f 00 2e 00 10 11 00 00 00 00 00    00 00 00 00 00 00 00 79 00 00 00 00 00 00 00 79  | G_INFO.................y.......y | 
| 5bba0 |  00 00 00 0b 10 00 00 00 00 00 00 00 00 00 5f 6c    6f 6e 67 6a 6d 70 00 02 00 06 00 00 85 00 00 00  | .............._longjmp.......... | 
| 5bbc0 |  42 00 00 00 0b 00 89 00 00 00 42 00 00 00 0a 00    cc 00 00 00 2d 00 00 00 0b 00 d0 00 00 00 2d 00  | B.........B.........-.........-. | 
| 5bbe0 |  00 00 0a 00 00 01 00 00 3b 00 00 00 0b 00 04 01    00 00 3b 00 00 00 0a 00 18 01 00 00 43 00 00 00  | ........;.........;.........C... | 
| 5bc00 |  0b 00 1c 01 00 00 43 00 00 00 0a 00 34 01 00 00    44 00 00 00 0b 00 38 01 00 00 44 00 00 00 0a 00  | ......C.....4...D.....8...D..... | 
| 5bc20 |  9b 01 00 00 34 00 00 00 0b 00 9f 01 00 00 34 00    00 00 0a 00 04 00 00 00 06 00 0e 00 00 00 f2 f1  | ....4.........4................. | 
| 5bc40 |  1e 00 05 15 00 00 01 00 02 10 00 00 00 00 00 00    00 00 00 00 40 00 5f 4a 4d 50 5f 42 55 46 00 f3  | ....................@._JMP_BUF.. | 
| 5bc60 |  06 01 03 12 0d 15 03 00 22 00 00 00 00 00 73 61    76 65 64 5f 65 62 70 00 0d 15 03 00 22 00 00 00  | ........".....saved_ebp....."... | 
| 5bc80 |  04 00 73 61 76 65 64 5f 65 62 78 00 0d 15 03 00    22 00 00 00 08 00 73 61 76 65 64 5f 65 64 69 00  | ..saved_ebx.....".....saved_edi. | 
| 5bca0 |  0d 15 03 00 22 00 00 00 0c 00 73 61 76 65 64 5f    65 73 69 00 0d 15 03 00 22 00 00 00 10 00 73 61  | ....".....saved_esi.....".....sa | 
| 5bcc0 |  76 65 64 5f 65 73 70 00 0d 15 03 00 22 00 00 00    14 00 73 61 76 65 64 5f 72 65 74 75 72 6e 00 f1  | ved_esp.....".....saved_return.. | 
| 5bce0 |  0d 15 03 00 22 00 00 00 18 00 73 61 76 65 64 5f    78 72 65 67 69 73 74 72 61 74 69 6f 6e 00 f2 f1  | ....".....saved_xregistration... | 
| 5bd00 |  0d 15 03 00 22 00 00 00 1c 00 73 61 76 65 64 5f    74 72 79 6c 65 76 65 6c 00 f3 f2 f1 0d 15 03 00  | ....".....saved_trylevel........ | 
| 5bd20 |  22 00 00 00 20 00 76 65 72 73 69 6f 6e 5f 63 6f    6f 6b 69 65 00 f3 f2 f1 0d 15 03 00 22 00 00 00  | ".....version_cookie........"... | 
| 5bd40 |  24 00 75 6e 77 69 6e 64 5f 66 75 6e 63 00 f2 f1    0d 15 03 00 22 00 00 00 28 00 75 6e 77 69 6e 64  | $.unwind_func......."...(.unwind | 
| 5bd60 |  5f 64 61 74 61 00 f2 f1 1e 00 05 15 00 00 01 00    04 10 00 00 00 00 00 00 00 00 00 00 10 00 5f 4e  | _data........................._N | 
| 5bd80 |  4c 47 5f 49 4e 46 4f 00 5e 00 03 12 0d 15 03 00    22 00 00 00 00 00 64 77 53 69 67 00 0d 15 03 00  | LG_INFO.^.......".....dwSig..... | 
| 5bda0 |  22 00 00 00 04 00 75 6f 66 66 44 65 73 74 69 6e    61 74 69 6f 6e 00 f2 f1 0d 15 03 00 22 00 00 00  | ".....uoffDestination......."... | 
| 5bdc0 |  08 00 64 77 43 6f 64 65 00 f3 f2 f1 0d 15 03 00    22 00 00 00 0c 00 75 6f 66 66 46 72 61 6d 65 50  | ..dwCode........".....uoffFrameP | 
| 5bde0 |  6f 69 6e 74 65 72 00 f1 0e 00 08 10 03 00 00 00    3f 00 00 00 06 10 00 00 06 00 01 12 00 00 00 00  | ointer..........?............... | 
| 5be00 |  0e 00 08 10 03 00 00 00 81 00 00 00 08 10 00 00    06 00 01 12 00 00 00 00 2e 00 05 15 00 00 01 00  | ................................ | 
| 5be20 |  0a 10 00 00 00 00 00 00 00 00 00 00 08 00 5f 45    58 43 45 50 54 49 4f 4e 5f 52 45 47 49 53 54 52  | .............._EXCEPTION_REGISTR | 
| 5be40 |  41 54 49 4f 4e 00 f2 f1 26 00 03 12 0d 15 03 00    22 00 00 00 00 00 70 72 65 76 00 f1 0d 15 03 00  | ATION...&.......".....prev...... | 
| 5be60 |  22 00 00 00 04 00 68 61 6e 64 6c 65 72 00 f2 f1    0e 00 08 10 03 00 00 00 60 00 00 00 0c 10 00 00  | ".....handler...........`....... | 
| 5be80 |  06 00 01 12 00 00 00 00 2e 66 69 6c 65 00 00 00    15 00 00 00 fe ff 00 00 67 03 64 3a 5c 64 6e 73  | .........file...........g.d:\dns | 
| 5bea0 |  72 76 5c 62 61 73 65 5c 63 72 74 73 5c 63 72 74    77 33 32 5c 6d 69 73 63 5c 69 33 38 36 5c 6c 6f  | rv\base\crts\crtw32\misc\i386\lo | 
| 5bec0 |  6e 67 6a 6d 70 2e 61 73 6d 00 00 00 00 00 00 00    40 63 6f 6d 70 2e 69 64 c3 0f 0f 00 ff ff 00 00  | ngjmp.asm.......@comp.id........ | 
| 5bee0 |  03 00 40 66 65 61 74 2e 30 30 01 00 00 00 ff ff    00 00 03 00 2e 74 65 78 74 00 00 00 00 00 00 00  | ..@feat.00...........text....... | 
| 5bf00 |  01 00 00 00 03 01 79 00 00 00 05 00 2e 00 00 00    00 00 00 00 00 00 00 00 2e 64 61 74 61 00 00 00  | ......y..................data... | 
| 5bf20 |  00 00 00 00 02 00 00 00 03 01 00 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 2e 64 65 62  | .............................deb | 
| 5bf40 |  75 67 24 53 00 00 00 00 03 00 00 00 03 01 af 01    00 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00  | ug$S............................ | 
| 5bf60 |  2e 64 65 62 75 67 24 54 00 00 00 00 04 00 00 00    03 01 54 02 00 00 00 00 00 00 00 00 00 00 00 00  | .debug$T..........T............. | 
| 5bf80 |  00 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00    00 00 00 00 02 00 00 00 00 00 16 00 00 00 00 00  | ................................ | 
| 5bfa0 |  00 00 00 00 00 00 02 00 00 00 00 00 24 00 00 00    00 00 00 00 00 00 00 00 02 00 00 00 00 00 35 00  | ............$.................5. | 
| 5bfc0 |  00 00 00 00 00 00 00 00 00 00 02 00 00 00 00 00    45 00 00 00 00 00 00 00 00 00 00 00 02 00 00 00  | ................E............... | 
| 5bfe0 |  00 00 58 00 00 00 00 00 00 00 00 00 00 00 02 00    00 00 00 00 65 00 00 00 04 00 00 00 00 00 00 00  | ..X.................e........... | 
| 5c000 |  02 00 2e 66 69 6c 65 00 00 00 19 00 00 00 fe ff    00 00 67 03 64 3a 5c 64 6e 73 72 76 5c 62 61 73  | ...file...........g.d:\dnsrv\bas | 
| 5c020 |  65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c 68 5c    70 76 65 72 73 69 6f 6e 2e 69 6e 63 00 00 00 00  | e\crts\crtw32\h\pversion.inc.... | 
| 5c040 |  00 00 00 00 00 00 00 00 00 00 2e 66 69 6c 65 00    00 00 1d 00 00 00 fe ff 00 00 67 03 64 3a 5c 64  | ...........file...........g.d:\d | 
| 5c060 |  6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73 5c 63    72 74 77 33 32 5c 6d 69 73 63 5c 69 33 38 36 5c  | nsrv\base\crts\crtw32\misc\i386\ | 
| 5c080 |  6c 6f 6e 67 6a 6d 70 2e 61 73 6d 00 00 00 00 00    00 00 2e 66 69 6c 65 00 00 00 21 00 00 00 fe ff  | longjmp.asm........file...!..... | 
| 5c0a0 |  00 00 67 03 64 3a 5c 64 6e 73 72 76 5c 62 61 73    65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c 68 5c  | ..g.d:\dnsrv\base\crts\crtw32\h\ | 
| 5c0c0 |  63 6d 61 63 72 6f 73 2e 69 6e 63 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 2e 66 69 6c 65 00  | cmacros.inc................file. | 
| 5c0e0 |  00 00 25 00 00 00 fe ff 00 00 67 03 64 3a 5c 64    6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73 5c 63  | ..%.......g.d:\dnsrv\base\crts\c | 
| 5c100 |  72 74 77 33 32 5c 6d 69 73 63 5c 69 33 38 36 5c    6c 6f 6e 67 6a 6d 70 2e 61 73 6d 00 00 00 00 00  | rtw32\misc\i386\longjmp.asm..... | 
| 5c120 |  00 00 2e 66 69 6c 65 00 00 00 29 00 00 00 fe ff    00 00 67 03 64 3a 5c 64 6e 73 72 76 5c 62 61 73  | ...file...).......g.d:\dnsrv\bas | 
| 5c140 |  65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c 68 5c    65 78 73 75 70 2e 69 6e 63 00 00 00 00 00 00 00  | e\crts\crtw32\h\exsup.inc....... | 
| 5c160 |  00 00 00 00 00 00 00 00 00 00 2e 66 69 6c 65 00    00 00 00 00 00 00 fe ff 00 00 67 03 64 3a 5c 64  | ...........file...........g.d:\d | 
| 5c180 |  6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73 5c 63    72 74 77 33 32 5c 6d 69 73 63 5c 69 33 38 36 5c  | nsrv\base\crts\crtw32\misc\i386\ | 
| 5c1a0 |  6c 6f 6e 67 6a 6d 70 2e 61 73 6d 00 00 00 00 00    00 00 24 24 24 30 30 30 30 31 00 00 00 00 01 00  | longjmp.asm.......$$$00001...... | 
| 5c1c0 |  20 00 03 01 2f 00 00 00 00 00 00 00 60 01 00 00    34 00 00 00 00 00 2e 62 66 00 00 00 00 00 00 00  | ..../.......`...4......bf....... | 
| 5c1e0 |  00 00 01 00 00 00 65 01 00 00 00 00 56 00 00 00    00 00 00 00 36 00 00 00 00 00 2e 6c 66 00 00 00  | ......e.....V.......6......lf... | 
| 5c200 |  00 00 01 00 00 00 01 00 00 00 65 00 2e 65 66 00    00 00 00 00 00 00 00 00 01 00 00 00 65 01 00 00  | ..........e..ef.............e... | 
| 5c220 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    5f 6c 6f 6e 67 6a 6d 70 00 00 00 00 01 00 20 00  | ................_longjmp........ | 
| 5c240 |  02 01 36 00 00 00 79 00 00 00 66 01 00 00 3b 00    00 00 00 00 2e 62 66 00 00 00 00 00 00 00 00 00  | ..6...y...f...;......bf......... | 
| 5c260 |  01 00 00 00 65 01 00 00 00 00 57 00 00 00 00 00    00 00 3d 00 00 00 00 00 2e 6c 66 00 00 00 00 00  | ....e.....W.......=......lf..... | 
| 5c280 |  2c 00 00 00 01 00 00 00 65 00 2e 65 66 00 00 00    00 00 79 00 00 00 01 00 00 00 65 01 00 00 00 00  | ,.......e..ef.....y.......e..... | 
| 5c2a0 |  9b 00 00 00 00 00 00 00 00 00 00 00 00 00 24 24    24 30 30 30 30 33 79 00 00 00 01 00 20 00 03 01  | ..............$$$00003y......... | 
| 5c2c0 |  3d 00 00 00 00 00 00 00 6e 02 00 00 00 00 00 00    00 00 2e 62 66 00 00 00 00 00 79 00 00 00 01 00  | =.......n..........bf.....y..... | 
| 5c2e0 |  00 00 65 01 00 00 00 00 9d 00 00 00 00 00 00 00    00 00 00 00 00 00 2e 6c 66 00 00 00 00 00 01 00  | ..e....................lf....... | 
| 5c300 |  00 00 01 00 00 00 65 00 2e 65 66 00 00 00 00 00    79 00 00 00 01 00 00 00 65 01 00 00 00 00 9b 00  | ......e..ef.....y.......e....... | 
| 5c320 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    74 00 00 00 43 00 00 00 01 00 00 00 06 00 00 00  | ................t...C........... | 
| 5c340 |  00 00 83 00 00 00 1b 00 00 00 01 00 00 00 06 00    00 00 00 00 94 00 00 00 50 00 00 00 01 00 00 00  | ........................P....... | 
| 5c360 |  06 00 a2 00 00 00 5f 5f 4e 4c 47 5f 44 65 73 74    69 6e 61 74 69 6f 6e 00 5f 5f 65 78 63 65 70 74  | ......__NLG_Destination.__except | 
| 5c380 |  5f 6c 69 73 74 00 5f 5f 67 6c 6f 62 61 6c 5f 75    6e 77 69 6e 64 32 00 5f 5f 6c 6f 63 61 6c 5f 75  | _list.__global_unwind2.__local_u | 
| 5c3a0 |  6e 77 69 6e 64 32 00 5f 5f 72 74 5f 70 72 6f 62    65 5f 72 65 61 64 34 40 34 00 5f 5f 4e 4c 47 5f  | nwind2.__rt_probe_read4@4.__NLG_ | 
| 5c3c0 |  4e 6f 74 69 66 79 00 5f 5f 73 65 74 6a 6d 70 65    78 75 73 65 64 00 5f 6c 6a 5f 6f 6c 64 5f 75 6e  | Notify.__setjmpexused._lj_old_un | 
| 5c3e0 |  77 69 6e 64 00 5f 6c 6a 5f 6c 6f 63 61 6c 5f 75    6e 77 69 6e 64 00 5f 6c 6a 5f 6e 6f 5f 75 6e 77  | wind._lj_local_unwind._lj_no_unw | 
| 5c400 |  69 6e 64 00 2f 34 30 37 20 20 20 20 20 20 20 20    20 20 20 20 31 30 39 39 36 32 31 32 36 30 20 20  | ind./407............1099621260.. | 
| 5c420 |  20 20 20 20 20 20 20 20 20 20 20 20 31 30 30 34    34 34 20 20 32 36 39 35 20 20 20 20 20 20 60 0a  | ............100444..2695......`. | 
| 5c440 |  4c 01 03 00 fc 0d 76 40 2f 09 00 00 0e 00 00 00    00 00 00 00 2e 64 65 62 75 67 24 53 00 00 00 00  | L.....v@/............debug$S.... | 
| 5c460 |  00 00 00 00 fd 01 00 00 8c 00 00 00 89 02 00 00    00 00 00 00 08 00 00 00 40 00 10 42 2e 72 64 61  | ........................@..B.rda | 
| 5c480 |  74 61 00 00 00 00 00 00 00 00 00 00 48 00 00 00    d9 02 00 00 21 03 00 00 00 00 00 00 03 00 00 00  | ta..........H.......!........... | 
| 5c4a0 |  40 00 40 40 2e 64 65 62 75 67 24 54 00 00 00 00    00 00 00 00 f0 05 00 00 3f 03 00 00 00 00 00 00  | @.@@.debug$T............?....... | 
| 5c4c0 |  00 00 00 00 00 00 00 00 40 00 10 42 04 00 00 00    f1 00 00 00 00 00 00 00 3e 00 01 11 00 00 00 00  | ........@..B............>....... | 
| 5c4e0 |  44 3a 5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72    74 73 5c 63 72 74 77 33 32 5c 6d 69 73 63 5c 6e  | D:\dnsrv\base\crts\crtw32\misc\n | 
| 5c500 |  74 5c 6f 62 6a 5c 69 33 38 36 5c 6c 6f 61 64 63    66 67 2e 6f 62 6a 00 00 38 00 16 11 00 40 00 00  | t\obj\i386\loadcfg.obj..8....@.. | 
| 5c520 |  06 00 0d 00 0a 00 c3 0f 0d 00 0a 00 c3 0f 4d 69    63 72 6f 73 6f 66 74 20 28 52 29 20 4f 70 74 69  | ..............Microsoft.(R).Opti | 
| 5c540 |  6d 69 7a 69 6e 67 20 43 6f 6d 70 69 6c 65 72 00    00 00 1e 00 0d 11 22 00 00 00 00 00 00 00 00 00  | mizing.Compiler......."......... | 
| 5c560 |  5f 5f 73 65 63 75 72 69 74 79 5f 63 6f 6f 6b 69    65 00 24 00 0d 11 07 10 00 00 00 00 00 00 00 00  | __security_cookie.$............. | 
| 5c580 |  5f 5f 73 61 66 65 5f 73 65 5f 68 61 6e 64 6c 65    72 5f 74 61 62 6c 65 00 24 00 0d 11 20 00 00 00  | __safe_se_handler_table.$....... | 
| 5c5a0 |  00 00 00 00 00 00 5f 5f 73 61 66 65 5f 73 65 5f    68 61 6e 64 6c 65 72 5f 63 6f 75 6e 74 00 1e 00  | ......__safe_se_handler_count... | 
| 5c5c0 |  0d 11 0d 10 00 00 00 00 00 00 00 00 5f 6c 6f 61    64 5f 63 6f 6e 66 69 67 5f 75 73 65 64 00 1d 00  | ............_load_config_used... | 
| 5c5e0 |  07 11 09 10 00 00 02 00 43 4f 52 5f 56 45 52 53    49 4f 4e 5f 4d 41 4a 4f 52 5f 56 32 00 24 00 08  | ........COR_VERSION_MAJOR_V2.$.. | 
| 5c600 |  11 0d 10 00 00 49 4d 41 47 45 5f 4c 4f 41 44 5f    43 4f 4e 46 49 47 5f 44 49 52 45 43 54 4f 52 59  | .....IMAGE_LOAD_CONFIG_DIRECTORY | 
| 5c620 |  33 32 00 0f 00 08 11 13 00 00 00 4c 4f 4e 47 4c    4f 4e 47 00 0d 00 08 11 22 00 00 00 53 49 5a 45  | 32.........LONGLONG....."...SIZE | 
| 5c640 |  5f 54 00 10 00 08 11 23 00 00 00 55 4c 4f 4e 47    4c 4f 4e 47 00 24 00 08 11 0d 10 00 00 49 4d 41  | _T.....#...ULONGLONG.$.......IMA | 
| 5c660 |  47 45 5f 4c 4f 41 44 5f 43 4f 4e 46 49 47 5f 44    49 52 45 43 54 4f 52 59 33 32 00 23 00 08 11 09  | GE_LOAD_CONFIG_DIRECTORY32.#.... | 
| 5c680 |  10 00 00 52 65 70 6c 61 63 65 73 43 6f 72 48 64    72 4e 75 6d 65 72 69 63 44 65 66 69 6e 65 73 00  | ...ReplacesCorHdrNumericDefines. | 
| 5c6a0 |  0c 00 08 11 03 04 00 00 50 56 4f 49 44 00 0c 00    08 11 22 00 00 00 44 57 4f 52 44 00 0b 00 08 11  | ........PVOID....."...DWORD..... | 
| 5c6c0 |  12 00 00 00 4c 4f 4e 47 00 8e 00 00 00 0b 00 00    00 0b 00 92 00 00 00 0b 00 00 00 0a 00 ae 00 00  | ....LONG........................ | 
| 5c6e0 |  00 0a 00 00 00 0b 00 b2 00 00 00 0a 00 00 00 0a    00 d4 00 00 00 09 00 00 00 0b 00 d8 00 00 00 09  | ................................ | 
| 5c700 |  00 00 00 0a 00 fa 00 00 00 08 00 00 00 0b 00 fe    00 00 00 08 00 00 00 0a 00 48 00 00 00 00 00 00  | .........................H...... | 
| 5c720 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | ................................ | 
| 5c740 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | ................................ | 
| 5c760 |  00 3c 00 00 00 0b 00 00 00 06 00 40 00 00 00 0a    00 00 00 06 00 44 00 00 00 09 00 00 00 06 00 04  | .<.........@.........D.......... | 
| 5c780 |  00 00 00 0a 00 01 10 03 00 00 00 01 00 f2 f1 0a    00 02 10 00 10 00 00 0a 00 00 00 0a 00 02 10 00  | ................................ | 
| 5c7a0 |  10 00 00 0c 00 00 00 0a 00 01 10 70 00 00 00 02    00 f2 f1 0a 00 02 10 03 10 00 00 0a 00 00 00 0a  | ...........p.................... | 
| 5c7c0 |  00 01 10 13 00 00 00 02 00 f2 f1 0a 00 02 10 05    10 00 00 0a 00 00 00 0e 00 03 15 03 04 00 00 11  | ................................ | 
| 5c7e0 |  00 00 00 00 00 00 f1 a6 02 03 12 02 15 03 00 01    00 43 4f 4d 49 4d 41 47 45 5f 46 4c 41 47 53 5f  | .................COMIMAGE_FLAGS_ | 
| 5c800 |  49 4c 4f 4e 4c 59 00 02 15 03 00 02 00 43 4f 4d    49 4d 41 47 45 5f 46 4c 41 47 53 5f 33 32 42 49  | ILONLY.......COMIMAGE_FLAGS_32BI | 
| 5c820 |  54 52 45 51 55 49 52 45 44 00 f1 02 15 03 00 04    00 43 4f 4d 49 4d 41 47 45 5f 46 4c 41 47 53 5f  | TREQUIRED........COMIMAGE_FLAGS_ | 
| 5c840 |  49 4c 5f 4c 49 42 52 41 52 59 00 02 15 03 00 08    00 43 4f 4d 49 4d 41 47 45 5f 46 4c 41 47 53 5f  | IL_LIBRARY.......COMIMAGE_FLAGS_ | 
| 5c860 |  53 54 52 4f 4e 47 4e 41 4d 45 53 49 47 4e 45 44    00 f2 f1 02 15 03 00 04 80 00 00 01 00 43 4f 4d  | STRONGNAMESIGNED.............COM | 
| 5c880 |  49 4d 41 47 45 5f 46 4c 41 47 53 5f 54 52 41 43    4b 44 45 42 55 47 44 41 54 41 00 02 15 03 00 02  | IMAGE_FLAGS_TRACKDEBUGDATA...... | 
| 5c8a0 |  00 43 4f 52 5f 56 45 52 53 49 4f 4e 5f 4d 41 4a    4f 52 5f 56 32 00 f1 02 15 03 00 02 00 43 4f 52  | .COR_VERSION_MAJOR_V2........COR | 
| 5c8c0 |  5f 56 45 52 53 49 4f 4e 5f 4d 41 4a 4f 52 00 02    15 03 00 00 00 43 4f 52 5f 56 45 52 53 49 4f 4e  | _VERSION_MAJOR.......COR_VERSION | 
| 5c8e0 |  5f 4d 49 4e 4f 52 00 02 15 03 00 08 00 43 4f 52    5f 44 45 4c 45 54 45 44 5f 4e 41 4d 45 5f 4c 45  | _MINOR.......COR_DELETED_NAME_LE | 
| 5c900 |  4e 47 54 48 00 f2 f1 02 15 03 00 08 00 43 4f 52    5f 56 54 41 42 4c 45 47 41 50 5f 4e 41 4d 45 5f  | NGTH.........COR_VTABLEGAP_NAME_ | 
| 5c920 |  4c 45 4e 47 54 48 00 02 15 03 00 01 00 4e 41 54    49 56 45 5f 54 59 50 45 5f 4d 41 58 5f 43 42 00  | LENGTH.......NATIVE_TYPE_MAX_CB. | 
| 5c940 |  f3 f2 f1 02 15 03 00 ff 00 43 4f 52 5f 49 4c 4d    45 54 48 4f 44 5f 53 45 43 54 5f 53 4d 41 4c 4c  | .........COR_ILMETHOD_SECT_SMALL | 
| 5c960 |  5f 4d 41 58 5f 44 41 54 41 53 49 5a 45 00 f1 02    15 03 00 01 00 49 4d 41 47 45 5f 43 4f 52 5f 4d  | _MAX_DATASIZE........IMAGE_COR_M | 
| 5c980 |  49 48 5f 4d 45 54 48 4f 44 52 56 41 00 f2 f1 02    15 03 00 02 00 49 4d 41 47 45 5f 43 4f 52 5f 4d  | IH_METHODRVA.........IMAGE_COR_M | 
| 5c9a0 |  49 48 5f 45 48 52 56 41 00 f2 f1 02 15 03 00 08    00 49 4d 41 47 45 5f 43 4f 52 5f 4d 49 48 5f 42  | IH_EHRVA.........IMAGE_COR_MIH_B | 
| 5c9c0 |  41 53 49 43 42 4c 4f 43 4b 00 f1 02 15 03 00 01    00 43 4f 52 5f 56 54 41 42 4c 45 5f 33 32 42 49  | ASICBLOCK........COR_VTABLE_32BI | 
| 5c9e0 |  54 00 f1 02 15 03 00 02 00 43 4f 52 5f 56 54 41    42 4c 45 5f 36 34 42 49 54 00 f1 02 15 03 00 04  | T........COR_VTABLE_64BIT....... | 
| 5ca00 |  00 43 4f 52 5f 56 54 41 42 4c 45 5f 46 52 4f 4d    5f 55 4e 4d 41 4e 41 47 45 44 00 02 15 03 00 10  | .COR_VTABLE_FROM_UNMANAGED...... | 
| 5ca20 |  00 43 4f 52 5f 56 54 41 42 4c 45 5f 43 41 4c 4c    5f 4d 4f 53 54 5f 44 45 52 49 56 45 44 00 f1 02  | .COR_VTABLE_CALL_MOST_DERIVED... | 
| 5ca40 |  15 03 00 20 00 49 4d 41 47 45 5f 43 4f 52 5f 45    41 54 4a 5f 54 48 55 4e 4b 5f 53 49 5a 45 00 02  | .....IMAGE_COR_EATJ_THUNK_SIZE.. | 
| 5ca60 |  15 03 00 00 04 4d 41 58 5f 43 4c 41 53 53 5f 4e    41 4d 45 00 f3 f2 f1 02 15 03 00 00 04 4d 41 58  | .....MAX_CLASS_NAME..........MAX | 
| 5ca80 |  5f 50 41 43 4b 41 47 45 5f 4e 41 4d 45 00 f1 2e    00 07 15 16 00 00 00 74 00 00 00 08 10 00 00 52  | _PACKAGE_NAME..........t.......R | 
| 5caa0 |  65 70 6c 61 63 65 73 43 6f 72 48 64 72 4e 75 6d    65 72 69 63 44 65 66 69 6e 65 73 00 f3 f2 f1 32  | eplacesCorHdrNumericDefines....2 | 
| 5cac0 |  00 05 15 00 00 80 00 00 00 00 00 00 00 00 00 00    00 00 00 00 00 49 4d 41 47 45 5f 4c 4f 41 44 5f  | .....................IMAGE_LOAD_ | 
| 5cae0 |  43 4f 4e 46 49 47 5f 44 49 52 45 43 54 4f 52 59    33 32 00 0a 00 01 10 0a 10 00 00 01 00 f2 f1 3a  | CONFIG_DIRECTORY32.............: | 
| 5cb00 |  02 03 12 0d 15 03 00 22 00 00 00 00 00 53 69 7a    65 00 f1 0d 15 03 00 22 00 00 00 04 00 54 69 6d  | .......".....Size......".....Tim | 
| 5cb20 |  65 44 61 74 65 53 74 61 6d 70 00 0d 15 03 00 21    00 00 00 08 00 4d 61 6a 6f 72 56 65 72 73 69 6f  | eDateStamp.....!.....MajorVersio | 
| 5cb40 |  6e 00 f1 0d 15 03 00 21 00 00 00 0a 00 4d 69 6e    6f 72 56 65 72 73 69 6f 6e 00 f1 0d 15 03 00 22  | n......!.....MinorVersion......" | 
| 5cb60 |  00 00 00 0c 00 47 6c 6f 62 61 6c 46 6c 61 67 73    43 6c 65 61 72 00 f1 0d 15 03 00 22 00 00 00 10  | .....GlobalFlagsClear......".... | 
| 5cb80 |  00 47 6c 6f 62 61 6c 46 6c 61 67 73 53 65 74 00    f3 f2 f1 0d 15 03 00 22 00 00 00 14 00 43 72 69  | .GlobalFlagsSet........".....Cri | 
| 5cba0 |  74 69 63 61 6c 53 65 63 74 69 6f 6e 44 65 66 61    75 6c 74 54 69 6d 65 6f 75 74 00 0d 15 03 00 22  | ticalSectionDefaultTimeout....." | 
| 5cbc0 |  00 00 00 18 00 44 65 43 6f 6d 6d 69 74 46 72 65    65 42 6c 6f 63 6b 54 68 72 65 73 68 6f 6c 64 00  | .....DeCommitFreeBlockThreshold. | 
| 5cbe0 |  f3 f2 f1 0d 15 03 00 22 00 00 00 1c 00 44 65 43    6f 6d 6d 69 74 54 6f 74 61 6c 46 72 65 65 54 68  | .......".....DeCommitTotalFreeTh | 
| 5cc00 |  72 65 73 68 6f 6c 64 00 f3 f2 f1 0d 15 03 00 22    00 00 00 20 00 4c 6f 63 6b 50 72 65 66 69 78 54  | reshold........".....LockPrefixT | 
| 5cc20 |  61 62 6c 65 00 f2 f1 0d 15 03 00 22 00 00 00 24    00 4d 61 78 69 6d 75 6d 41 6c 6c 6f 63 61 74 69  | able......."...$.MaximumAllocati | 
| 5cc40 |  6f 6e 53 69 7a 65 00 0d 15 03 00 22 00 00 00 28    00 56 69 72 74 75 61 6c 4d 65 6d 6f 72 79 54 68  | onSize....."...(.VirtualMemoryTh | 
| 5cc60 |  72 65 73 68 6f 6c 64 00 f3 f2 f1 0d 15 03 00 22    00 00 00 2c 00 50 72 6f 63 65 73 73 48 65 61 70  | reshold........"...,.ProcessHeap | 
| 5cc80 |  46 6c 61 67 73 00 f1 0d 15 03 00 22 00 00 00 30    00 50 72 6f 63 65 73 73 41 66 66 69 6e 69 74 79  | Flags......"...0.ProcessAffinity | 
| 5cca0 |  4d 61 73 6b 00 f2 f1 0d 15 03 00 21 00 00 00 34    00 43 53 44 56 65 72 73 69 6f 6e 00 f3 f2 f1 0d  | Mask.......!...4.CSDVersion..... | 
| 5ccc0 |  15 03 00 21 00 00 00 36 00 52 65 73 65 72 76 65    64 31 00 0d 15 03 00 22 00 00 00 38 00 45 64 69  | ...!...6.Reserved1....."...8.Edi | 
| 5cce0 |  74 4c 69 73 74 00 f1 0d 15 03 00 22 00 00 00 3c    00 53 65 63 75 72 69 74 79 43 6f 6f 6b 69 65 00  | tList......"...<.SecurityCookie. | 
| 5cd00 |  f3 f2 f1 0d 15 03 00 22 00 00 00 40 00 53 45 48    61 6e 64 6c 65 72 54 61 62 6c 65 00 f3 f2 f1 0d  | ......."...@.SEHandlerTable..... | 
| 5cd20 |  15 03 00 22 00 00 00 44 00 53 45 48 61 6e 64 6c    65 72 43 6f 75 6e 74 00 f3 f2 f1 32 00 05 15 14  | ..."...D.SEHandlerCount....2.... | 
| 5cd40 |  00 00 00 0c 10 00 00 00 00 00 00 00 00 00 00 48    00 49 4d 41 47 45 5f 4c 4f 41 44 5f 43 4f 4e 46  | ...............H.IMAGE_LOAD_CONF | 
| 5cd60 |  49 47 5f 44 49 52 45 43 54 4f 52 59 33 32 00 2e    66 69 6c 65 00 00 00 00 00 00 00 fe ff 00 00 67  | IG_DIRECTORY32..file...........g | 
| 5cd80 |  01 2e 2e 5c 69 33 38 36 5c 6c 6f 61 64 63 66 67    2e 63 00 40 63 6f 6d 70 2e 69 64 c3 0f 5f 00 ff  | ...\i386\loadcfg.c.@comp.id.._.. | 
| 5cda0 |  ff 00 00 03 00 40 66 65 61 74 2e 30 30 01 00 00    00 ff ff 00 00 03 00 2e 64 65 62 75 67 24 53 00  | .....@feat.00...........debug$S. | 
| 5cdc0 |  00 00 00 01 00 00 00 03 01 fd 01 00 00 08 00 00    00 00 00 00 00 00 00 00 00 00 00 2e 72 64 61 74  | ............................rdat | 
| 5cde0 |  61 00 00 00 00 00 00 02 00 00 00 03 01 48 00 00    00 03 00 00 00 dd f8 83 46 00 00 00 00 00 00 00  | a............H..........F....... | 
| 5ce00 |  00 00 00 04 00 00 00 00 00 00 00 02 00 00 00 02    00 00 00 00 00 17 00 00 00 00 00 00 00 00 00 00  | ................................ | 
| 5ce20 |  00 02 00 00 00 00 00 30 00 00 00 00 00 00 00 00    00 00 00 02 00 00 00 00 00 49 00 00 00 00 00 00  | .......0.................I...... | 
| 5ce40 |  00 00 00 00 00 02 00 2e 64 65 62 75 67 24 54 00    00 00 00 03 00 00 00 03 01 f0 05 00 00 00 00 00  | ........debug$T................. | 
| 5ce60 |  00 00 00 00 00 00 00 00 00 00 00 5c 00 00 00 5f    5f 6c 6f 61 64 5f 63 6f 6e 66 69 67 5f 75 73 65  | ...........\...__load_config_use | 
| 5ce80 |  64 00 5f 5f 5f 73 61 66 65 5f 73 65 5f 68 61 6e    64 6c 65 72 5f 63 6f 75 6e 74 00 5f 5f 5f 73 61  | d.___safe_se_handler_count.___sa | 
| 5cea0 |  66 65 5f 73 65 5f 68 61 6e 64 6c 65 72 5f 74 61    62 6c 65 00 5f 5f 5f 73 65 63 75 72 69 74 79 5f  | fe_se_handler_table.___security_ | 
| 5cec0 |  63 6f 6f 6b 69 65 00 0a 2f 34 35 38 20 20 20 20    20 20 20 20 20 20 20 20 31 30 39 39 36 32 31 38  | cookie../458............10996218 | 
| 5cee0 |  33 36 20 20 20 20 20 20 20 20 20 20 20 20 20 20    31 30 30 34 34 34 20 20 31 35 39 39 20 20 20 20  | 36..............100444..1599.... | 
| 5cf00 |  20 20 60 0a 4c 01 04 00 60 0f 76 40 b2 03 00 00    21 00 00 00 00 00 00 00 2e 74 65 78 74 00 00 00  | ..`.L...`.v@....!........text... | 
| 5cf20 |  00 00 00 00 00 00 00 00 75 00 00 00 b4 00 00 00    00 00 00 00 2a 01 00 00 00 00 26 00 20 00 50 60  | ........u...........*.....&...P` | 
| 5cf40 |  2e 64 61 74 61 00 00 00 75 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | .data...u....................... | 
| 5cf60 |  00 00 00 00 40 00 50 c0 2e 64 65 62 75 67 24 53    75 00 00 00 00 00 00 00 1c 01 00 00 0e 02 00 00  | ....@.P..debug$Su............... | 
| 5cf80 |  2a 03 00 00 00 00 00 00 0a 00 00 00 40 00 10 42    2e 64 65 62 75 67 24 54 91 01 00 00 00 00 00 00  | *...........@..B.debug$T........ | 
| 5cfa0 |  24 00 00 00 8e 03 00 00 00 00 00 00 00 00 00 00    00 00 00 00 40 00 10 42 55 8b ec 83 ec 20 83 e4  | $...................@..BU....... | 
| 5cfc0 |  f0 d9 c0 d9 54 24 18 df 7c 24 10 df 6c 24 10 8b    54 24 18 8b 44 24 10 85 c0 74 3c de e9 85 d2 79  | ....T$..|$..l$..T$..D$...t<....y | 
| 5cfe0 |  1e d9 1c 24 8b 0c 24 81 f1 00 00 00 80 81 c1 ff    ff ff 7f 83 d0 00 8b 54 24 14 83 d2 00 eb 2c d9  | ...$..$................T$.....,. | 
| 5d000 |  1c 24 8b 0c 24 81 c1 ff ff ff 7f 83 d8 00 8b 54    24 14 83 da 00 eb 14 8b 54 24 14 f7 c2 ff ff ff  | .$..$..........T$.......T$...... | 
| 5d020 |  7f 75 b8 d9 5c 24 18 d9 5c 24 18 c9 c3 00 16 00    00 00 00 00 00 00 00 00 06 00 01 00 00 00 07 00  | .u..\$..\$...................... | 
| 5d040 |  03 00 00 00 08 00 06 00 00 00 09 00 09 00 00 00    0b 00 0b 00 00 00 0c 00 0f 00 00 00 0d 00 13 00  | ................................ | 
| 5d060 |  00 00 0e 00 17 00 00 00 0f 00 1b 00 00 00 10 00    1f 00 00 00 11 00 21 00 00 00 12 00 23 00 00 00  | ......................!.....#... | 
| 5d080 |  15 00 25 00 00 00 17 00 27 00 00 00 18 00 29 00    00 00 19 00 2c 00 00 00 1a 00 2f 00 00 00 1b 00  | ..%.....'.....).....,...../..... | 
| 5d0a0 |  35 00 00 00 1c 00 3b 00 00 00 1d 00 3e 00 00 00    1e 00 42 00 00 00 1f 00 45 00 00 00 20 00 47 00  | 5.....;.....>.....B.....E.....G. | 
| 5d0c0 |  00 00 23 00 4a 00 00 00 24 00 4d 00 00 00 25 00    53 00 00 00 26 00 56 00 00 00 27 00 5a 00 00 00  | ..#.J...$.M...%.S...&.V...'.Z... | 
| 5d0e0 |  28 00 5d 00 00 00 29 00 5f 00 00 00 2c 00 63 00    00 00 2d 00 69 00 00 00 2e 00 6b 00 00 00 2f 00  | (.]...)._...,.c...-.i.....k.../. | 
| 5d100 |  6f 00 00 00 30 00 73 00 00 00 33 00 74 00 00 00    34 00 04 00 00 00 f1 00 00 00 00 00 00 00 3a 00  | o...0.s...3.t...4.............:. | 
| 5d120 |  01 11 00 00 00 00 44 3a 5c 64 6e 73 72 76 5c 62    61 73 65 5c 63 72 74 73 5c 66 70 77 33 32 5c 74  | ......D:\dnsrv\base\crts\fpw32\t | 
| 5d140 |  72 61 6e 5c 6e 74 5c 6f 62 6a 5c 69 33 38 36 5c    66 74 6f 6c 32 2e 6f 62 6a 00 34 00 16 11 03 00  | ran\nt\obj\i386\ftol2.obj.4..... | 
| 5d160 |  00 00 05 00 00 00 00 00 00 00 07 00 0a 00 c3 0f    4d 69 63 72 6f 73 6f 66 74 20 28 52 29 20 4d 61  | ................Microsoft.(R).Ma | 
| 5d180 |  63 72 6f 20 41 73 73 65 6d 62 6c 65 72 00 00 00    2c 00 10 11 00 00 00 00 00 00 00 00 00 00 00 00  | cro.Assembler...,............... | 
| 5d1a0 |  75 00 00 00 04 00 00 00 75 00 00 00 01 10 00 00    00 00 00 00 00 00 00 5f 66 74 6f 6c 32 00 21 00  | u.......u.............._ftol2.!. | 
| 5d1c0 |  05 11 00 00 00 00 00 00 00 61 72 67 5f 69 73 5f    6e 6f 74 5f 69 6e 74 65 67 65 72 5f 51 6e 61 4e  | .........arg_is_not_integer_QnaN | 
| 5d1e0 |  00 12 00 05 11 00 00 00 00 00 00 00 70 6f 73 69    74 69 76 65 00 1e 00 05 11 00 00 00 00 00 00 00  | ............positive............ | 
| 5d200 |  69 6e 74 65 67 65 72 5f 51 6e 61 4e 5f 6f 72 5f    7a 65 72 6f 00 13 00 05 11 00 00 00 00 00 00 00  | integer_QnaN_or_zero............ | 
| 5d220 |  6c 6f 63 61 6c 65 78 69 74 00 02 00 06 00 9e 00    00 00 16 00 00 00 0b 00 a2 00 00 00 16 00 00 00  | localexit....................... | 
| 5d240 |  0a 00 b0 00 00 00 1d 00 00 00 0b 00 b4 00 00 00    1d 00 00 00 0a 00 d3 00 00 00 1e 00 00 00 0b 00  | ................................ | 
| 5d260 |  d7 00 00 00 1e 00 00 00 0a 00 e7 00 00 00 1f 00    00 00 0b 00 eb 00 00 00 1f 00 00 00 0a 00 07 01  | ................................ | 
| 5d280 |  00 00 20 00 00 00 0b 00 0b 01 00 00 20 00 00 00    0a 00 04 00 00 00 06 00 0e 00 00 00 f2 f1 0e 00  | ................................ | 
| 5d2a0 |  08 10 03 00 00 00 00 00 00 00 02 10 00 00 06 00    01 12 00 00 00 00 2e 66 69 6c 65 00 00 00 0e 00  | .......................file..... | 
| 5d2c0 |  00 00 fe ff 00 00 67 03 44 3a 5c 64 6e 73 72 76    5c 62 61 73 65 5c 63 72 74 73 5c 66 70 77 33 32  | ......g.D:\dnsrv\base\crts\fpw32 | 
| 5d2e0 |  5c 74 72 61 6e 5c 69 33 38 36 5c 66 74 6f 6c 32    2e 61 73 6d 00 00 00 00 00 00 00 00 00 00 40 63  | \tran\i386\ftol2.asm..........@c | 
| 5d300 |  6f 6d 70 2e 69 64 c3 0f 0f 00 ff ff 00 00 03 00    40 66 65 61 74 2e 30 30 01 00 00 00 ff ff 00 00  | omp.id..........@feat.00........ | 
| 5d320 |  03 00 2e 74 65 78 74 00 00 00 00 00 00 00 01 00    00 00 03 01 75 00 00 00 00 00 26 00 00 00 00 00  | ...text.............u.....&..... | 
| 5d340 |  00 00 00 00 00 00 2e 64 61 74 61 00 00 00 00 00    00 00 02 00 00 00 03 01 00 00 00 00 00 00 00 00  | .......data..................... | 
| 5d360 |  00 00 00 00 00 00 00 00 00 00 2e 64 65 62 75 67    24 53 00 00 00 00 03 00 00 00 03 01 1c 01 00 00  | ...........debug$S.............. | 
| 5d380 |  0a 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 64    65 62 75 67 24 54 00 00 00 00 04 00 00 00 03 01  | ...............debug$T.......... | 
| 5d3a0 |  24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00    00 00 2e 66 69 6c 65 00 00 00 12 00 00 00 fe ff  | $..................file......... | 
| 5d3c0 |  00 00 67 03 44 3a 5c 64 6e 73 72 76 5c 62 61 73    65 5c 63 72 74 73 5c 63 72 74 77 33 32 5c 68 5c  | ..g.D:\dnsrv\base\crts\crtw32\h\ | 
| 5d3e0 |  63 72 75 6e 74 69 6d 65 2e 69 6e 63 00 00 00 00    00 00 00 00 00 00 00 00 00 00 2e 66 69 6c 65 00  | cruntime.inc...............file. | 
| 5d400 |  00 00 00 00 00 00 fe ff 00 00 67 03 44 3a 5c 64    6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73 5c 66  | ..........g.D:\dnsrv\base\crts\f | 
| 5d420 |  70 77 33 32 5c 74 72 61 6e 5c 69 33 38 36 5c 66    74 6f 6c 32 2e 61 73 6d 00 00 00 00 00 00 00 00  | pw32\tran\i386\ftol2.asm........ | 
| 5d440 |  00 00 5f 5f 66 74 6f 6c 32 00 00 00 00 00 01 00    20 00 02 01 18 00 00 00 75 00 00 00 2a 01 00 00  | ..__ftol2...............u...*... | 
| 5d460 |  00 00 00 00 00 00 2e 62 66 00 00 00 00 00 00 00    00 00 01 00 00 00 65 01 00 00 00 00 19 00 00 00  | .......bf.............e......... | 
| 5d480 |  00 00 00 00 00 00 00 00 00 00 2e 6c 66 00 00 00    00 00 26 00 00 00 01 00 00 00 65 00 2e 65 66 00  | ...........lf.....&.......e..ef. | 
| 5d4a0 |  00 00 00 00 75 00 00 00 01 00 00 00 65 01 00 00    00 00 4d 00 00 00 00 00 00 00 00 00 00 00 00 00  | ....u.......e.....M............. | 
| 5d4c0 |  00 00 00 00 04 00 00 00 23 00 00 00 01 00 00 00    06 00 70 6f 73 69 74 69 76 65 47 00 00 00 01 00  | ........#.........positiveG..... | 
| 5d4e0 |  00 00 06 00 00 00 00 00 1c 00 00 00 5f 00 00 00    01 00 00 00 06 00 00 00 00 00 31 00 00 00 73 00  | ............_.............1...s. | 
| 5d500 |  00 00 01 00 00 00 06 00 3b 00 00 00 61 72 67 5f    69 73 5f 6e 6f 74 5f 69 6e 74 65 67 65 72 5f 51  | ........;...arg_is_not_integer_Q | 
| 5d520 |  6e 61 4e 00 69 6e 74 65 67 65 72 5f 51 6e 61 4e    5f 6f 72 5f 7a 65 72 6f 00 6c 6f 63 61 6c 65 78  | naN.integer_QnaN_or_zero.localex | 
| 5d540 |  69 74 00 0a 2f 35 30 37 20 20 20 20 20 20 20 20    20 20 20 20 31 30 39 39 36 32 30 39 33 35 20 20  | it../507............1099620935.. | 
| 5d560 |  20 20 20 20 20 20 20 20 20 20 20 20 31 30 30 34    34 34 20 20 31 34 32 34 20 20 20 20 20 20 60 0a  | ............100444..1424......`. | 
| 5d580 |  4c 01 04 00 5b 0d 76 40 0e 03 00 00 21 00 00 00    00 00 00 00 2e 74 65 78 74 00 00 00 00 00 00 00  | L...[.v@....!........text....... | 
| 5d5a0 |  00 00 00 00 4c 00 00 00 b4 00 00 00 00 01 00 00    0a 01 00 00 01 00 1e 00 20 00 30 60 2e 64 61 74  | ....L.....................0`.dat | 
| 5d5c0 |  61 00 00 00 4c 00 00 00 00 00 00 00 00 00 00 00    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | a...L........................... | 
| 5d5e0 |  40 00 30 c0 2e 64 65 62 75 67 24 53 4c 00 00 00    00 00 00 00 f4 00 00 00 be 01 00 00 b2 02 00 00  | @.0..debug$SL................... | 
| 5d600 |  00 00 00 00 04 00 00 00 40 00 10 42 2e 64 65 62    75 67 24 54 40 01 00 00 00 00 00 00 34 00 00 00  | ........@..B.debug$T@.......4... | 
| 5d620 |  da 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00    40 00 10 42 68 00 00 00 00 64 a1 00 00 00 00 50  | ................@..Bh....d.....P | 
| 5d640 |  8b 44 24 10 89 6c 24 10 8d 6c 24 10 2b e0 53 56    57 8b 45 f8 89 65 e8 50 8b 45 fc c7 45 fc ff ff  | .D$..l$..l$.+.SVW.E..e.P.E..E... | 
| 5d660 |  ff ff 89 45 f8 8d 45 f0 64 a3 00 00 00 00 c3 8b    4d f0 64 89 0d 00 00 00 00 59 5f 5e 5b c9 51 c3  | ...E..E.d.......M.d......Y_^[.Q. | 
| 5d680 |  01 00 00 00 0e 00 00 00 06 00 13 00 00 00 00 00    00 00 00 00 01 00 05 00 00 00 02 00 0b 00 00 00  | ................................ | 
| 5d6a0 |  03 00 0c 00 00 00 04 00 10 00 00 00 05 00 14 00    00 00 06 00 18 00 00 00 07 00 1a 00 00 00 08 00  | ................................ | 
| 5d6c0 |  1b 00 00 00 09 00 1c 00 00 00 0a 00 1d 00 00 00    0b 00 20 00 00 00 0c 00 23 00 00 00 0d 00 24 00  | ........................#.....$. | 
| 5d6e0 |  00 00 0e 00 27 00 00 00 0f 00 2e 00 00 00 10 00    31 00 00 00 11 00 34 00 00 00 12 00 3a 00 00 00  | ....'...........1.....4.....:... | 
| 5d700 |  13 00 1a 00 00 00 00 00 3b 00 00 00 01 00 3e 00    00 00 02 00 45 00 00 00 03 00 46 00 00 00 04 00  | ........;.....>.....E.....F..... | 
| 5d720 |  47 00 00 00 05 00 48 00 00 00 06 00 49 00 00 00    07 00 4a 00 00 00 08 00 4b 00 00 00 09 00 04 00  | G.....H.....I.....J.....K....... | 
| 5d740 |  00 00 f1 00 00 00 00 00 00 00 40 00 01 11 00 00    00 00 44 3a 5c 64 6e 73 72 76 5c 62 61 73 65 5c  | ..........@.......D:\dnsrv\base\ | 
| 5d760 |  63 72 74 73 5c 63 72 74 77 33 32 5c 68 65 6c 70    65 72 5c 6e 74 5c 6f 62 6a 5c 69 33 38 36 5c 73  | crts\crtw32\helper\nt\obj\i386\s | 
| 5d780 |  65 68 70 72 6f 6c 67 2e 6f 62 6a 00 34 00 16 11    03 00 00 00 01 00 00 00 00 00 00 00 07 00 0a 00  | ehprolg.obj.4................... | 
| 5d7a0 |  c3 0f 4d 69 63 72 6f 73 6f 66 74 20 28 52 29 20    4d 61 63 72 6f 20 41 73 73 65 6d 62 6c 65 72 00  | ..Microsoft.(R).Macro.Assembler. | 
| 5d7c0 |  00 00 32 00 10 11 00 00 00 00 00 00 00 00 00 00    00 00 3b 00 00 00 00 00 00 00 3b 00 00 00 00 10  | ..2...............;.......;..... | 
| 5d7e0 |  00 00 00 00 00 00 00 00 00 5f 5f 53 45 48 5f 70    72 6f 6c 6f 67 00 02 00 06 00 32 00 10 11 00 00  | .........__SEH_prolog.....2..... | 
| 5d800 |  00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00    00 00 11 00 00 00 02 10 00 00 00 00 00 00 00 00  | ................................ | 
| 5d820 |  00 5f 5f 53 45 48 5f 65 70 69 6c 6f 67 00 02 00    06 00 a4 00 00 00 13 00 00 00 0b 00 a8 00 00 00  | .__SEH_epilog................... | 
| 5d840 |  13 00 00 00 0a 00 dc 00 00 00 1a 00 00 00 0b 00    e0 00 00 00 1a 00 00 00 0a 00 04 00 00 00 0e 00  | ................................ | 
| 5d860 |  08 10 03 00 00 00 74 00 00 00 01 10 00 00 06 00    01 12 00 00 00 00 0e 00 08 10 03 00 00 00 b6 00  | ......t......................... | 
| 5d880 |  00 00 03 10 00 00 06 00 01 12 00 00 00 00 2e 66    69 6c 65 00 00 00 0f 00 00 00 fe ff 00 00 67 03  | ...............file...........g. | 
| 5d8a0 |  44 3a 5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72    74 73 5c 63 72 74 77 33 32 5c 68 65 6c 70 65 72  | D:\dnsrv\base\crts\crtw32\helper | 
| 5d8c0 |  5c 69 33 38 36 5c 73 65 68 70 72 6f 6c 67 2e 61    73 6d 00 00 00 00 40 63 6f 6d 70 2e 69 64 c3 0f  | \i386\sehprolg.asm....@comp.id.. | 
| 5d8e0 |  0f 00 ff ff 00 00 03 00 40 66 65 61 74 2e 30 30    01 00 00 00 ff ff 00 00 03 00 2e 74 65 78 74 00  | ........@feat.00...........text. | 
| 5d900 |  00 00 00 00 00 00 01 00 00 00 03 01 4c 00 00 00    01 00 1e 00 00 00 00 00 00 00 00 00 00 00 2e 64  | ............L..................d | 
| 5d920 |  61 74 61 00 00 00 00 00 00 00 02 00 00 00 03 01    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  | ata............................. | 
| 5d940 |  00 00 2e 64 65 62 75 67 24 53 00 00 00 00 03 00    00 00 03 01 f4 00 00 00 04 00 00 00 00 00 00 00  | ...debug$S...................... | 
| 5d960 |  00 00 00 00 00 00 2e 64 65 62 75 67 24 54 00 00    00 00 04 00 00 00 03 01 34 00 00 00 00 00 00 00  | .......debug$T..........4....... | 
| 5d980 |  00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00    00 00 00 00 00 00 00 00 00 00 02 00 2e 66 69 6c  | .............................fil | 
| 5d9a0 |  65 00 00 00 00 00 00 00 fe ff 00 00 67 03 64 3a    5c 64 6e 73 72 76 5c 62 61 73 65 5c 63 72 74 73  | e...........g.d:\dnsrv\base\crts | 
| 5d9c0 |  5c 63 72 74 77 33 32 5c 6d 69 73 63 5c 69 33 38    36 5c 73 65 68 70 72 6f 6c 67 2e 61 73 6d 00 00  | \crtw32\misc\i386\sehprolg.asm.. | 
| 5d9e0 |  00 00 00 00 00 00 00 00 16 00 00 00 00 00 00 00    01 00 20 00 02 01 15 00 00 00 3b 00 00 00 0a 01  | ..........................;..... | 
| 5da00 |  00 00 1a 00 00 00 00 00 2e 62 66 00 00 00 00 00    00 00 00 00 01 00 00 00 65 01 00 00 00 00 20 00  | .........bf.............e....... | 
| 5da20 |  00 00 00 00 00 00 1c 00 00 00 00 00 2e 6c 66 00    00 00 00 00 14 00 00 00 01 00 00 00 65 00 2e 65  | .............lf.............e..e | 
| 5da40 |  66 00 00 00 00 00 3b 00 00 00 01 00 00 00 65 01    00 00 00 00 33 00 00 00 00 00 00 00 00 00 00 00  | f.....;.......e.....3........... | 
| 5da60 |  00 00 00 00 00 00 23 00 00 00 3b 00 00 00 01 00    20 00 02 01 1c 00 00 00 11 00 00 00 82 01 00 00  | ......#...;..................... | 
| 5da80 |  00 00 00 00 00 00 2e 62 66 00 00 00 00 00 3b 00    00 00 01 00 00 00 65 01 00 00 00 00 37 00 00 00  | .......bf.....;.......e.....7... | 
| 5daa0 |  00 00 00 00 00 00 00 00 00 00 2e 6c 66 00 00 00    00 00 0a 00 00 00 01 00 00 00 65 00 2e 65 66 00  | ...........lf.............e..ef. | 
| 5dac0 |  00 00 00 00 4c 00 00 00 01 00 00 00 65 01 00 00    00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00  | ....L.......e.....@............. | 
| 5dae0 |  30 00 00 00 5f 5f 65 78 63 65 70 74 5f 68 61 6e    64 6c 65 72 33 00 5f 5f 53 45 48 5f 70 72 6f 6c  | 0...__except_handler3.__SEH_prol | 
| 5db00 |  6f 67 00 5f 5f 53 45 48 5f 65 70 69 6c 6f 67 00  | og.__SEH_epilog. |