============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 00 00 00 00 DA AA 5B 30 00 00 00 00 A4 81 00 00 01 00 00 00 26 00 00 00 26 00 00 00 28 80 00 00 ....┌¬[0....ñü..☺...&...&...(Ç.. 00000020 C0 80 00 00 58 81 00 00 12 47 00 00 59 34 00 00 E4 24 00 00 E5 39 00 00 AD 27 00 00 3F 3C 00 00 └Ç..Xü..↕G..Y4..Σ$..σ9..¡'..?<.. 00000040 E0 40 00 00 EE 3F 00 00 85 59 00 00 8C 4D 00 00 D2 1D 00 00 10 49 00 00 7B 49 00 00 48 5B 00 00 α@..ε?..àY..îM..╥↔..►I..{I..H[.. 00000060 14 3F 00 00 B8 41 00 00 CB 5B 00 00 DB 13 00 00 99 4C 00 00 01 46 00 00 CE 45 00 00 5D 44 00 00 ¶?..╕A..╦[..█‼..ÖL..☺F..╬E..]D.. 00000080 D8 44 00 00 E2 5A 00 00 AD 48 00 00 33 1E 00 00 52 46 00 00 5C 12 00 00 5E 3A 00 00 89 4D 00 00 ╪D..ΓZ..¡H..3▲..RF..\↕..^:..ëM.. 000000A0 1B 3A 00 00 8F 27 00 00 B5 1D 00 00 03 4A 00 00 BF 44 00 00 5E 45 00 00 2D 22 00 00 0B 26 00 00 ←:..Å'..╡↔..♥J..┐D..^E..-"..♂&.. 000000C0 AF 81 00 00 C8 81 00 00 E0 81 00 00 F2 81 00 00 0A 82 00 00 1B 82 00 00 2C 82 00 00 42 82 00 00 »ü..╚ü..αü..≥ü..◙é..←é..,é..Bé.. 000000E0 52 82 00 00 60 82 00 00 70 82 00 00 88 82 00 00 9E 82 00 00 B3 82 00 00 C6 82 00 00 D8 82 00 00 Ré..`é..pé..êé..₧é..│é..╞é..╪é.. 00000100 E9 82 00 00 F8 82 00 00 07 83 00 00 19 83 00 00 2E 83 00 00 47 83 00 00 60 83 00 00 78 83 00 00 Θé..°é..•â..↓â...â..Gâ..`â..xâ.. 00000120 86 83 00 00 99 83 00 00 B1 83 00 00 C1 83 00 00 D9 83 00 00 F2 83 00 00 07 84 00 00 20 84 00 00 åâ..Öâ..▒â..┴â..┘â..≥â..•ä.. ä.. 00000140 34 84 00 00 53 84 00 00 68 84 00 00 79 84 00 00 89 84 00 00 9C 84 00 00 00 00 01 00 02 00 03 00 4ä..Sä..hä..yä..ëä..£ä....☺.☻.♥. 00000160 04 00 05 00 06 00 07 00 08 00 09 00 0A 00 0B 00 0C 00 0D 00 0E 00 0F 00 10 00 11 00 12 00 13 00 ♦.♣.♠.•.◘.○.◙.♂.♀.♪.♫.☼.►.◄.↕.‼. 00000180 14 00 15 00 16 00 17 00 18 00 19 00 1A 00 1B 00 1C 00 1D 00 1E 00 1F 00 20 00 21 00 22 00 23 00 ¶.§.▬.↨.↑.↓.→.←.∟.↔.▲.▼. .!.".#. 000001A0 24 00 25 00 43 53 52 53 52 56 2E 64 6C 6C 00 43 73 72 41 64 64 53 74 61 74 69 63 53 65 72 76 65 $.%.CSRSRV.dll.CsrAddStaticServe 000001C0 72 54 68 72 65 61 64 00 43 73 72 43 61 6C 6C 53 65 72 76 65 72 46 72 6F 6D 53 65 72 76 65 72 00 rThread.CsrCallServerFromServer. 000001E0 43 73 72 43 6C 69 65 6E 74 43 61 6C 6C 62 61 63 6B 00 43 73 72 43 6F 6D 70 75 74 65 50 72 69 6F CsrClientCallback.CsrComputePrio 00000200 72 69 74 79 43 6C 61 73 73 00 43 73 72 43 6F 6E 6E 65 63 74 54 6F 55 73 65 72 00 43 73 72 43 72 rityClass.CsrConnectToUser.CsrCr 00000220 65 61 74 65 50 72 6F 63 65 73 73 00 43 73 72 43 72 65 61 74 65 52 65 6D 6F 74 65 54 68 72 65 61 eateProcess.CsrCreateRemoteThrea 00000240 64 00 43 73 72 43 72 65 61 74 65 54 68 72 65 61 64 00 43 73 72 43 72 65 61 74 65 57 61 69 74 00 d.CsrCreateThread.CsrCreateWait. 00000260 43 73 72 44 65 62 75 67 50 72 6F 63 65 73 73 00 43 73 72 44 65 6C 61 79 65 64 54 68 72 65 61 64 CsrDebugProcess.CsrDelayedThread 00000280 43 6C 65 61 6E 75 70 00 43 73 72 44 65 72 65 66 65 72 65 6E 63 65 50 72 6F 63 65 73 73 00 43 73 Cleanup.CsrDereferenceProcess.Cs 000002A0 72 44 65 72 65 66 65 72 65 6E 63 65 54 68 72 65 61 64 00 43 73 72 44 65 72 65 66 65 72 65 6E 63 rDereferenceThread.CsrDereferenc 000002C0 65 57 61 69 74 00 43 73 72 44 65 73 74 72 6F 79 50 72 6F 63 65 73 73 00 43 73 72 44 65 73 74 72 eWait.CsrDestroyProcess.CsrDestr 000002E0 6F 79 54 68 72 65 61 64 00 43 73 72 44 65 73 74 72 6F 79 57 61 69 74 00 43 73 72 47 65 74 41 70 oyThread.CsrDestroyWait.CsrGetAp 00000300 69 50 6F 72 74 73 00 43 73 72 47 65 74 50 72 6F 63 65 73 73 4C 75 69 64 00 43 73 72 49 6D 70 65 iPorts.CsrGetProcessLuid.CsrImpe 00000320 72 73 6F 6E 61 74 65 43 6C 69 65 6E 74 00 43 73 72 4C 6F 63 61 74 65 54 68 72 65 61 64 49 6E 50 rsonateClient.CsrLocateThreadInP 00000340 72 6F 63 65 73 73 00 43 73 72 4C 6F 63 6B 50 72 6F 63 65 73 73 42 79 43 6C 69 65 6E 74 49 64 00 rocess.CsrLockProcessByClientId. 00000360 43 73 72 4C 6F 63 6B 54 68 72 65 61 64 42 79 43 6C 69 65 6E 74 49 64 00 43 73 72 4E 6F 74 69 66 CsrLockThreadByClientId.CsrNotif 00000380 79 57 61 69 74 00 43 73 72 52 65 66 65 72 65 6E 63 65 54 68 72 65 61 64 00 43 73 72 52 65 67 69 yWait.CsrReferenceThread.CsrRegi 000003A0 73 74 65 72 43 6C 65 61 6E 75 70 45 76 65 6E 74 00 43 73 72 52 65 76 65 72 74 54 6F 53 65 6C 66 sterCleanupEvent.CsrRevertToSelf 000003C0 00 43 73 72 53 65 72 76 65 72 49 6E 69 74 69 61 6C 69 7A 61 74 69 6F 6E 00 43 73 72 53 65 74 42 .CsrServerInitialization.CsrSetB 000003E0 61 63 6B 67 72 6F 75 6E 64 50 72 69 6F 72 69 74 79 00 43 73 72 53 65 74 43 61 6C 6C 69 6E 67 53 ackgroundPriority.CsrSetCallingS 00000400 70 6F 6F 6C 65 72 00 43 73 72 53 65 74 46 6F 72 65 67 72 6F 75 6E 64 50 72 69 6F 72 69 74 79 00 pooler.CsrSetForegroundPriority. 00000420 43 73 72 53 65 74 4C 61 73 74 51 6C 70 63 45 72 72 6F 72 00 43 73 72 53 65 74 51 75 69 63 6B 54 CsrSetLastQlpcError.CsrSetQuickT 00000440 68 72 65 61 64 43 72 65 61 74 65 52 6F 75 74 69 6E 65 00 43 73 72 53 68 75 74 64 6F 77 6E 50 72 hreadCreateRoutine.CsrShutdownPr 00000460 6F 63 65 73 73 65 73 00 43 73 72 55 6E 6C 6F 63 6B 50 72 6F 63 65 73 73 00 43 73 72 55 6E 6C 6F ocesses.CsrUnlockProcess.CsrUnlo 00000480 63 6B 54 68 72 65 61 64 00 43 73 72 70 49 6E 69 74 69 61 6C 69 7A 65 44 6C 6C 73 00 43 73 72 70 ckThread.CsrpInitializeDlls.Csrp 000004A0 50 72 6F 63 65 73 73 41 70 69 52 65 71 75 65 73 74 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ProcessApiRequest............... 000004C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000004E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000500 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000520 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000540 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000560 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000580 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................