home *** CD-ROM | disk | FTP | other *** search
Unknown | 2005-04-19 | 4.0 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 24 ef 03 00 00 00 00 00 | 00 00 00 00 a0 fb 03 00 |$.......|........|
|00000010| 20 03 00 00 a4 ee 03 00 | 00 00 00 00 00 00 00 00 | .......|........|
|00000020| 48 fc 03 00 a0 02 00 00 | 1c ef 03 00 00 00 00 00 |H.......|........|
|00000030| 00 00 00 00 66 fc 03 00 | 18 03 00 00 c4 ee 03 00 |....f...|........|
|00000040| 00 00 00 00 00 00 00 00 | 42 fe 03 00 c0 02 00 00 |........|B.......|
|00000050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000060| 00 00 00 00 32 fc 03 00 | 1c fc 03 00 04 fc 03 00 |....2...|........|
|00000070| f6 fb 03 00 e2 fb 03 00 | ce fb 03 00 ba fb 03 00 |........|........|
|00000080| 00 00 00 00 26 fe 03 00 | e2 fd 03 00 ce fd 03 00 |....&...|........|
|00000090| f4 fd 03 00 a2 fd 03 00 | 8c fd 03 00 b8 fd 03 00 |........|........|
|000000a0| 6e fd 03 00 54 fd 03 00 | 7a fd 03 00 28 fd 03 00 |n...T...|z...(...|
|000000b0| 12 fd 03 00 3e fd 03 00 | ea fc 03 00 d2 fc 03 00 |....>...|........|
|000000c0| fc fc 03 00 9e fc 03 00 | 86 fc 03 00 b8 fc 03 00 |........|........|
|000000d0| 6e fc 03 00 06 fe 03 00 | 00 00 00 00 50 fc 03 00 |n.......|....P...|
|000000e0| 00 00 00 00 40 f4 03 00 | 4e f4 03 00 6e f4 03 00 |....@...|N...n...|
|000000f0| 82 f4 03 00 28 f4 03 00 | 9e f4 03 00 b0 f4 03 00 |....(...|........|
|00000100| c2 f4 03 00 dc f4 03 00 | ee f4 03 00 00 f5 03 00 |........|........|
|00000110| 10 f5 03 00 26 f5 03 00 | 3e f5 03 00 5a f5 03 00 |....&...|>...Z...|
|00000120| 70 f5 03 00 8c f5 03 00 | 9a f5 03 00 b0 f5 03 00 |p.......|........|
|00000130| c8 f5 03 00 e2 f5 03 00 | f8 f5 03 00 14 f6 03 00 |........|........|
|00000140| 30 f6 03 00 40 f6 03 00 | 62 f6 03 00 84 f6 03 00 |0...@...|b.......|
|00000150| a6 f6 03 00 be f6 03 00 | d6 f6 03 00 ea f6 03 00 |........|........|
|00000160| 0a f7 03 00 16 f7 03 00 | 26 f7 03 00 30 f7 03 00 |........|&...0...|
|00000170| 46 f7 03 00 56 f7 03 00 | 70 f7 03 00 7c f7 03 00 |F...V...|p...|...|
|00000180| 90 f7 03 00 9c f7 03 00 | ac f7 03 00 c2 f7 03 00 |........|........|
|00000190| dc f7 03 00 ea f7 03 00 | fc f7 03 00 0a f8 03 00 |........|........|
|000001a0| 14 f4 03 00 f8 f3 03 00 | 32 f8 03 00 7e f8 03 00 |........|2...~...|
|000001b0| e0 f3 03 00 1e f4 03 00 | 96 f8 03 00 ae f8 03 00 |........|........|
|000001c0| c0 f8 03 00 dc f8 03 00 | ee f8 03 00 0c f9 03 00 |........|........|
|000001d0| 1c f9 03 00 36 f9 03 00 | 46 f9 03 00 64 f9 03 00 |....6...|F...d...|
|000001e0| 78 f9 03 00 84 f9 03 00 | 9e f9 03 00 ae f9 03 00 |x.......|........|
|000001f0| c4 f9 03 00 d8 f9 03 00 | ee f9 03 00 08 fa 03 00 |........|........|
|00000200| 14 fa 03 00 22 fa 03 00 | 32 fa 03 00 52 fa 03 00 |...."...|2...R...|
|00000210| 5c fa 03 00 6c fa 03 00 | 7c fa 03 00 98 fa 03 00 |\...l...||.......|
|00000220| b4 fa 03 00 c2 fa 03 00 | d0 fa 03 00 dc fa 03 00 |........|........|
|00000230| e8 fa 03 00 f2 fa 03 00 | 02 fb 03 00 0c fb 03 00 |........|........|
|00000240| 16 fb 03 00 2e fb 03 00 | 4c fb 03 00 60 fb 03 00 |........|L...`...|
|00000250| 82 fb 03 00 96 fb 03 00 | ae fb 03 00 da f1 03 00 |........|........|
|00000260| c6 f1 03 00 b6 f1 03 00 | 9e f1 03 00 88 f1 03 00 |........|........|
|00000270| 72 f1 03 00 5a f1 03 00 | 46 f1 03 00 a6 f3 03 00 |r...Z...|F.......|
|00000280| d2 f3 03 00 ba f3 03 00 | 50 f3 03 00 86 f3 03 00 |........|P.......|
|00000290| 6e f3 03 00 fe f2 03 00 | 2e f3 03 00 16 f3 03 00 |n.......|........|
|000002a0| ca f2 03 00 e6 f2 03 00 | d4 f2 03 00 88 f2 03 00 |........|........|
|000002b0| b0 f2 03 00 a0 f2 03 00 | 50 f2 03 00 7e f2 03 00 |........|P...~...|
|000002c0| 70 f2 03 00 fc f1 03 00 | 32 f2 03 00 1a f2 03 00 |p.......|2.......|
|000002d0| 4c f8 03 00 ea f1 03 00 | 62 f8 03 00 1c f8 03 00 |L.......|b.......|
|000002e0| 2c f1 03 00 26 f8 03 00 | 00 00 00 00 67 02 50 73 |,...&...|....g.Ps|
|000002f0| 54 65 72 6d 69 6e 61 74 | 65 53 79 73 74 65 6d 54 |Terminat|eSystemT|
|00000300| 68 72 65 61 64 00 86 01 | 4b 65 51 75 65 72 79 53 |hread...|KeQueryS|
|00000310| 79 73 74 65 6d 54 69 6d | 65 00 b8 01 4b 65 57 61 |ystemTim|e...KeWa|
|00000320| 69 74 46 6f 72 53 69 6e | 67 6c 65 4f 62 6a 65 63 |itForSin|gleObjec|
|00000330| 74 00 a7 01 4b 65 53 65 | 74 50 72 69 6f 72 69 74 |t...KeSe|tPriorit|
|00000340| 79 54 68 72 65 61 64 00 | 60 01 4b 65 47 65 74 43 |yThread.|`.KeGetC|
|00000350| 75 72 72 65 6e 74 54 68 | 72 65 61 64 00 00 51 02 |urrentTh|read..Q.|
|00000360| 50 73 43 72 65 61 74 65 | 53 79 73 74 65 6d 54 68 |PsCreate|SystemTh|
|00000370| 72 65 61 64 00 00 57 02 | 50 73 47 65 74 56 65 72 |read..W.|PsGetVer|
|00000380| 73 69 6f 6e 00 00 70 01 | 4b 65 49 6e 69 74 69 61 |sion..p.|KeInitia|
|00000390| 6c 69 7a 65 45 76 65 6e | 74 00 85 01 4b 65 50 75 |lizeEven|t...KePu|
|000003a0| 6c 73 65 45 76 65 6e 74 | 00 00 92 01 4b 65 52 65 |lseEvent|....KeRe|
|000003b0| 6c 65 61 73 65 4d 75 74 | 65 78 00 00 39 00 45 78 |leaseMut|ex..9.Ex|
|000003c0| 44 65 6c 65 74 65 4e 50 | 61 67 65 64 4c 6f 6f 6b |DeleteNP|agedLook|
|000003d0| 61 73 69 64 65 4c 69 73 | 74 00 d6 00 49 6e 74 65 |asideLis|t...Inte|
|000003e0| 72 6c 6f 63 6b 65 64 44 | 65 63 72 65 6d 65 6e 74 |rlockedD|ecrement|
|000003f0| 00 00 59 00 45 78 49 6e | 74 65 72 6c 6f 63 6b 65 |..Y.ExIn|terlocke|
|00000400| 64 50 75 73 68 45 6e 74 | 72 79 53 4c 69 73 74 00 |dPushEnt|rySList.|
|00000410| 78 00 45 78 66 49 6e 74 | 65 72 6c 6f 63 6b 65 64 |x.ExfInt|erlocked|
|00000420| 52 65 6d 6f 76 65 48 65 | 61 64 4c 69 73 74 00 00 |RemoveHe|adList..|
|00000430| a2 03 5a 77 57 72 69 74 | 65 46 69 6c 65 00 d2 03 |..ZwWrit|eFile...|
|00000440| 73 70 72 69 6e 74 66 00 | 95 03 5a 77 53 65 74 49 |sprintf.|..ZwSetI|
|00000450| 6e 66 6f 72 6d 61 74 69 | 6f 6e 46 69 6c 65 00 00 |nformati|onFile..|
|00000460| 60 03 5a 77 43 72 65 61 | 74 65 46 69 6c 65 00 00 |`.ZwCrea|teFile..|
|00000470| 57 01 4b 65 44 65 6c 61 | 79 45 78 65 63 75 74 69 |W.KeDela|yExecuti|
|00000480| 6f 6e 54 68 72 65 61 64 | 00 00 5b 03 5a 77 43 6c |onThread|..[.ZwCl|
|00000490| 6f 73 65 00 62 00 45 78 | 51 75 65 75 65 57 6f 72 |ose.b.Ex|QueueWor|
|000004a0| 6b 49 74 65 6d 00 92 02 | 52 74 6c 43 6f 70 79 55 |kItem...|RtlCopyU|
|000004b0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 d0 02 |nicodeSt|ring....|
|000004c0| 52 74 6c 49 6e 69 74 55 | 6e 69 63 6f 64 65 53 74 |RtlInitU|nicodeSt|
|000004d0| 72 69 6e 67 00 00 76 01 | 4b 65 49 6e 69 74 69 61 |ring..v.|KeInitia|
|000004e0| 6c 69 7a 65 53 70 69 6e | 4c 6f 63 6b 00 00 47 00 |lizeSpin|Lock..G.|
|000004f0| 45 78 49 6e 69 74 69 61 | 6c 69 7a 65 4e 50 61 67 |ExInitia|lizeNPag|
|00000500| 65 64 4c 6f 6f 6b 61 73 | 69 64 65 4c 69 73 74 00 |edLookas|ideList.|
|00000510| 57 00 45 78 49 6e 74 65 | 72 6c 6f 63 6b 65 64 50 |W.ExInte|rlockedP|
|00000520| 6f 70 45 6e 74 72 79 53 | 4c 69 73 74 00 00 d9 00 |opEntryS|List....|
|00000530| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 49 6e 63 72 65 |Interloc|kedIncre|
|00000540| 6d 65 6e 74 00 00 75 00 | 45 78 66 49 6e 74 65 72 |ment..u.|ExfInter|
|00000550| 6c 6f 63 6b 65 64 49 6e | 73 65 72 74 54 61 69 6c |lockedIn|sertTail|
|00000560| 4c 69 73 74 00 00 73 01 | 4b 65 49 6e 69 74 69 61 |List..s.|KeInitia|
|00000570| 6c 69 7a 65 4d 75 74 65 | 78 00 af 02 52 74 6c 45 |lizeMute|x...RtlE|
|00000580| 71 75 61 6c 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |qualUnic|odeStrin|
|00000590| 67 00 42 00 45 78 46 72 | 65 65 50 6f 6f 6c 00 00 |g.B.ExFr|eePool..|
|000005a0| 36 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |6.ExAllo|catePool|
|000005b0| 57 69 74 68 54 61 67 00 | 8b 03 5a 77 51 75 65 72 |WithTag.|..ZwQuer|
|000005c0| 79 53 79 73 74 65 6d 49 | 6e 66 6f 72 6d 61 74 69 |ySystemI|nformati|
|000005d0| 6f 6e 00 00 c4 03 69 73 | 64 69 67 69 74 00 db 03 |on....is|digit...|
|000005e0| 73 74 72 6e 63 70 79 00 | c3 02 52 74 6c 46 72 65 |strncpy.|..RtlFre|
|000005f0| 65 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |eUnicode|String..|
|00000600| 8e 03 5a 77 52 65 61 64 | 46 69 6c 65 00 00 77 02 |..ZwRead|File..w.|
|00000610| 52 74 6c 41 6e 73 69 53 | 74 72 69 6e 67 54 6f 55 |RtlAnsiS|tringToU|
|00000620| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 cd 02 |nicodeSt|ring....|
|00000630| 52 74 6c 49 6e 69 74 41 | 6e 73 69 53 74 72 69 6e |RtlInitA|nsiStrin|
|00000640| 67 00 11 01 49 6f 47 65 | 74 52 65 6c 61 74 65 64 |g...IoGe|tRelated|
|00000650| 44 65 76 69 63 65 4f 62 | 6a 65 63 74 00 00 fb 00 |DeviceOb|ject....|
|00000660| 49 6f 44 65 6c 65 74 65 | 44 65 76 69 63 65 00 00 |IoDelete|Device..|
|00000670| e3 00 49 6f 41 74 74 61 | 63 68 44 65 76 69 63 65 |..IoAtta|chDevice|
|00000680| 00 00 e4 00 49 6f 41 74 | 74 61 63 68 44 65 76 69 |....IoAt|tachDevi|
|00000690| 63 65 42 79 50 6f 69 6e | 74 65 72 00 f3 00 49 6f |ceByPoin|ter...Io|
|000006a0| 43 72 65 61 74 65 44 65 | 76 69 63 65 00 00 fd 00 |CreateDe|vice....|
|000006b0| 49 6f 44 65 74 61 63 68 | 44 65 76 69 63 65 00 00 |IoDetach|Device..|
|000006c0| 44 01 49 6f 66 43 61 6c | 6c 44 72 69 76 65 72 00 |D.IofCal|lDriver.|
|000006d0| 45 01 49 6f 66 43 6f 6d | 70 6c 65 74 65 52 65 71 |E.IofCom|pleteReq|
|000006e0| 75 65 73 74 00 00 44 02 | 4f 62 66 44 65 72 65 66 |uest..D.|ObfDeref|
|000006f0| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 3f 02 |erenceOb|ject..?.|
|00000700| 4f 62 52 65 66 65 72 65 | 6e 63 65 4f 62 6a 65 63 |ObRefere|nceObjec|
|00000710| 74 42 79 48 61 6e 64 6c | 65 00 45 02 4f 62 66 52 |tByHandl|e.E.ObfR|
|00000720| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|00000730| f5 00 49 6f 43 72 65 61 | 74 65 4e 6f 74 69 66 69 |..IoCrea|teNotifi|
|00000740| 63 61 74 69 6f 6e 45 76 | 65 6e 74 00 a2 01 4b 65 |cationEv|ent...Ke|
|00000750| 53 65 74 45 76 65 6e 74 | 00 00 d7 00 49 6e 74 65 |SetEvent|....Inte|
|00000760| 72 6c 6f 63 6b 65 64 45 | 78 63 68 61 6e 67 65 00 |rlockedE|xchange.|
|00000770| 41 01 49 6f 57 72 69 74 | 65 45 72 72 6f 72 4c 6f |A.IoWrit|eErrorLo|
|00000780| 67 45 6e 74 72 79 00 00 | df 00 49 6f 41 6c 6c 6f |gEntry..|..IoAllo|
|00000790| 63 61 74 65 45 72 72 6f | 72 4c 6f 67 45 6e 74 72 |cateErro|rLogEntr|
|000007a0| 79 00 0c 01 49 6f 47 65 | 74 43 75 72 72 65 6e 74 |y...IoGe|tCurrent|
|000007b0| 50 72 6f 63 65 73 73 00 | 8a 03 5a 77 51 75 65 72 |Process.|..ZwQuer|
|000007c0| 79 53 79 6d 62 6f 6c 69 | 63 4c 69 6e 6b 4f 62 6a |ySymboli|cLinkObj|
|000007d0| 65 63 74 00 7d 03 5a 77 | 4f 70 65 6e 53 79 6d 62 |ect.}.Zw|OpenSymb|
|000007e0| 6f 6c 69 63 4c 69 6e 6b | 4f 62 6a 65 63 74 00 00 |olicLink|Object..|
|000007f0| 7a 03 5a 77 4f 70 65 6e | 50 72 6f 63 65 73 73 00 |z.ZwOpen|Process.|
|00000800| 28 01 49 6f 52 65 67 69 | 73 74 65 72 53 68 75 74 |(.IoRegi|sterShut|
|00000810| 64 6f 77 6e 4e 6f 74 69 | 66 69 63 61 74 69 6f 6e |downNoti|fication|
|00000820| 00 00 64 02 50 73 53 65 | 74 43 72 65 61 74 65 54 |..d.PsSe|tCreateT|
|00000830| 68 72 65 61 64 4e 6f 74 | 69 66 79 52 6f 75 74 69 |hreadNot|ifyRouti|
|00000840| 6e 65 00 00 63 02 50 73 | 53 65 74 43 72 65 61 74 |ne..c.Ps|SetCreat|
|00000850| 65 50 72 6f 63 65 73 73 | 4e 6f 74 69 66 79 52 6f |eProcess|NotifyRo|
|00000860| 75 74 69 6e 65 00 fc 00 | 49 6f 44 65 6c 65 74 65 |utine...|IoDelete|
|00000870| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 00 00 f7 00 |Symbolic|Link....|
|00000880| 49 6f 43 72 65 61 74 65 | 53 79 6d 62 6f 6c 69 63 |IoCreate|Symbolic|
|00000890| 4c 69 6e 6b 00 00 c0 02 | 52 74 6c 46 72 65 65 41 |Link....|RtlFreeA|
|000008a0| 6e 73 69 53 74 72 69 6e | 67 00 0f 03 52 74 6c 55 |nsiStrin|g...RtlU|
|000008b0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 41 6e |nicodeSt|ringToAn|
|000008c0| 73 69 53 74 72 69 6e 67 | 00 00 08 01 49 6f 46 72 |siString|....IoFr|
|000008d0| 65 65 4d 64 6c 00 f6 01 | 4d 6d 55 6e 6c 6f 63 6b |eeMdl...|MmUnlock|
|000008e0| 50 61 67 65 73 00 ed 03 | 77 63 73 6e 63 70 79 00 |Pages...|wcsncpy.|
|000008f0| ed 01 4d 6d 50 72 6f 62 | 65 41 6e 64 4c 6f 63 6b |..MmProb|eAndLock|
|00000900| 50 61 67 65 73 00 e1 00 | 49 6f 41 6c 6c 6f 63 61 |Pages...|IoAlloca|
|00000910| 74 65 4d 64 6c 00 1e 02 | 4e 74 51 75 65 72 79 49 |teMdl...|NtQueryI|
|00000920| 6e 66 6f 72 6d 61 74 69 | 6f 6e 41 74 6f 6d 00 00 |nformati|onAtom..|
|00000930| bc 03 5f 77 63 73 69 63 | 6d 70 00 00 df 01 4d 6d |.._wcsic|mp....Mm|
|00000940| 49 73 41 64 64 72 65 73 | 73 56 61 6c 69 64 00 00 |IsAddres|sValid..|
|00000950| 2a 00 44 62 67 50 72 69 | 6e 74 00 00 09 02 4e 74 |*.DbgPri|nt....Nt|
|00000960| 43 6f 6e 6e 65 63 74 50 | 6f 72 74 00 0d 03 52 74 |ConnectP|ort...Rt|
|00000970| 6c 54 69 6d 65 54 6f 54 | 69 6d 65 46 69 65 6c 64 |lTimeToT|imeField|
|00000980| 73 00 70 00 45 78 53 79 | 73 74 65 6d 54 69 6d 65 |s.p.ExSy|stemTime|
|00000990| 54 6f 4c 6f 63 61 6c 54 | 69 6d 65 00 bb 03 5f 76 |ToLocalT|ime..._v|
|000009a0| 73 6e 70 72 69 6e 74 66 | 00 00 8c 03 5a 77 51 75 |snprintf|....ZwQu|
|000009b0| 65 72 79 56 61 6c 75 65 | 4b 65 79 00 61 03 5a 77 |eryValue|Key.a.Zw|
|000009c0| 43 72 65 61 74 65 4b 65 | 79 00 ae 02 52 74 6c 45 |CreateKe|y...RtlE|
|000009d0| 71 75 61 6c 53 74 72 69 | 6e 67 00 00 dc 03 73 74 |qualStri|ng....st|
|000009e0| 72 72 63 68 72 00 b4 03 | 5f 73 74 72 69 63 6d 70 |rrchr...|_stricmp|
|000009f0| 00 00 40 02 4f 62 52 65 | 66 65 72 65 6e 63 65 4f |..@.ObRe|ferenceO|
|00000a00| 62 6a 65 63 74 42 79 4e | 61 6d 65 00 02 01 49 6f |bjectByN|ame...Io|
|00000a10| 44 72 69 76 65 72 4f 62 | 6a 65 63 74 54 79 70 65 |DriverOb|jectType|
|00000a20| 00 00 9e 01 4b 65 53 65 | 72 76 69 63 65 44 65 73 |....KeSe|rviceDes|
|00000a30| 63 72 69 70 74 6f 72 54 | 61 62 6c 65 00 00 54 02 |criptorT|able..T.|
|00000a40| 50 73 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |PsGetCur|rentProc|
|00000a50| 65 73 73 49 64 00 55 02 | 50 73 47 65 74 43 75 72 |essId.U.|PsGetCur|
|00000a60| 72 65 6e 74 54 68 72 65 | 61 64 49 64 00 00 59 01 |rentThre|adId..Y.|
|00000a70| 4b 65 44 65 74 61 63 68 | 50 72 6f 63 65 73 73 00 |KeDetach|Process.|
|00000a80| 84 03 5a 77 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |..ZwQuer|yInforma|
|00000a90| 74 69 6f 6e 50 72 6f 63 | 65 73 73 00 4f 01 4b 65 |tionProc|ess.O.Ke|
|00000aa0| 41 74 74 61 63 68 50 72 | 6f 63 65 73 73 00 5b 02 |AttachPr|ocess.[.|
|00000ab0| 50 73 4c 6f 6f 6b 75 70 | 50 72 6f 63 65 73 73 42 |PsLookup|ProcessB|
|00000ac0| 79 50 72 6f 63 65 73 73 | 49 64 00 00 1a 02 4e 74 |yProcess|Id....Nt|
|00000ad0| 4f 70 65 6e 50 72 6f 63 | 65 73 73 00 89 02 52 74 |OpenProc|ess...Rt|
|00000ae0| 6c 43 6f 6d 70 61 72 65 | 55 6e 69 63 6f 64 65 53 |lCompare|UnicodeS|
|00000af0| 74 72 69 6e 67 00 07 02 | 4e 74 42 75 69 6c 64 4e |tring...|NtBuildN|
|00000b00| 75 6d 62 65 72 00 28 03 | 52 74 6c 78 41 6e 73 69 |umber.(.|RtlxAnsi|
|00000b10| 53 74 72 69 6e 67 54 6f | 55 6e 69 63 6f 64 65 53 |StringTo|UnicodeS|
|00000b20| 69 7a 65 00 ff 01 4e 6c | 73 4d 62 43 6f 64 65 50 |ize...Nl|sMbCodeP|
|00000b30| 61 67 65 54 61 67 00 00 | b2 03 5f 73 6e 70 72 69 |ageTag..|.._snpri|
|00000b40| 6e 74 66 00 1a 03 52 74 | 6c 55 70 63 61 73 65 55 |ntf...Rt|lUpcaseU|
|00000b50| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 87 03 |nicodeSt|ring....|
|00000b60| 5a 77 51 75 65 72 79 4f | 62 6a 65 63 74 00 f8 01 |ZwQueryO|bject...|
|00000b70| 4d 6d 55 6e 6d 61 70 4c | 6f 63 6b 65 64 50 61 67 |MmUnmapL|ockedPag|
|00000b80| 65 73 00 00 e7 01 4d 6d | 4d 61 70 4c 6f 63 6b 65 |es....Mm|MapLocke|
|00000b90| 64 50 61 67 65 73 00 00 | 6f 03 5a 77 46 72 65 65 |dPages..|o.ZwFree|
|00000ba0| 56 69 72 74 75 61 6c 4d | 65 6d 6f 72 79 00 59 03 |VirtualM|emory.Y.|
|00000bb0| 5a 77 41 6c 6c 6f 63 61 | 74 65 56 69 72 74 75 61 |ZwAlloca|teVirtua|
|00000bc0| 6c 4d 65 6d 6f 72 79 00 | 07 01 49 6f 46 72 65 65 |lMemory.|..IoFree|
|00000bd0| 49 72 70 00 eb 00 49 6f | 43 61 6e 63 65 6c 49 72 |Irp...Io|CancelIr|
|00000be0| 70 00 e0 00 49 6f 41 6c | 6c 6f 63 61 74 65 49 72 |p...IoAl|locateIr|
|00000bf0| 70 00 e7 00 49 6f 42 75 | 69 6c 64 44 65 76 69 63 |p...IoBu|ildDevic|
|00000c00| 65 49 6f 43 6f 6e 74 72 | 6f 6c 52 65 71 75 65 73 |eIoContr|olReques|
|00000c10| 74 00 da 03 73 74 72 6e | 63 6d 70 00 f4 00 49 6f |t...strn|cmp...Io|
|00000c20| 43 72 65 61 74 65 46 69 | 6c 65 00 00 54 01 4b 65 |CreateFi|le..T.Ke|
|00000c30| 43 6c 65 61 72 45 76 65 | 6e 74 00 00 d3 01 4d 6d |ClearEve|nt....Mm|
|00000c40| 42 75 69 6c 64 4d 64 6c | 46 6f 72 4e 6f 6e 50 61 |BuildMdl|ForNonPa|
|00000c50| 67 65 64 50 6f 6f 6c 00 | 0d 01 49 6f 47 65 74 44 |gedPool.|..IoGetD|
|00000c60| 65 76 69 63 65 4f 62 6a | 65 63 74 50 6f 69 6e 74 |eviceObj|ectPoint|
|00000c70| 65 72 00 00 b3 03 5f 73 | 6e 77 70 72 69 6e 74 66 |er...._s|nwprintf|
|00000c80| 00 00 b2 01 4b 65 54 69 | 63 6b 43 6f 75 6e 74 00 |....KeTi|ckCount.|
|00000c90| 79 03 5a 77 4f 70 65 6e | 4b 65 79 00 be 03 5f 77 |y.ZwOpen|Key..._w|
|00000ca0| 63 73 6e 69 63 6d 70 00 | ea 03 77 63 73 6c 65 6e |csnicmp.|..wcslen|
|00000cb0| 00 00 9b 03 5a 77 53 65 | 74 56 61 6c 75 65 4b 65 |....ZwSe|tValueKe|
|00000cc0| 79 00 de 03 73 74 72 73 | 74 72 00 00 e1 03 74 6f |y...strs|tr....to|
|00000cd0| 75 70 70 65 72 00 19 03 | 52 74 6c 55 70 63 61 73 |upper...|RtlUpcas|
|00000ce0| 65 55 6e 69 63 6f 64 65 | 43 68 61 72 00 00 d5 00 |eUnicode|Char....|
|00000cf0| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 43 6f 6d 70 61 |Interloc|kedCompa|
|00000d00| 72 65 45 78 63 68 61 6e | 67 65 00 00 8a 01 4b 65 |reExchan|ge....Ke|
|00000d10| 52 65 61 64 53 74 61 74 | 65 45 76 65 6e 74 00 00 |ReadStat|eEvent..|
|00000d20| e0 01 4d 6d 49 73 4e 6f | 6e 50 61 67 65 64 53 79 |..MmIsNo|nPagedSy|
|00000d30| 73 74 65 6d 41 64 64 72 | 65 73 73 56 61 6c 69 64 |stemAddr|essValid|
|00000d40| 00 00 88 02 52 74 6c 43 | 6f 6d 70 61 72 65 53 74 |....RtlC|ompareSt|
|00000d50| 72 69 6e 67 00 00 c7 03 | 69 73 73 70 61 63 65 00 |ring....|isspace.|
|00000d60| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 18 03 |ntoskrnl|.exe....|
|00000d70| 52 74 6c 55 6e 77 69 6e | 64 00 42 00 4b 65 47 65 |RtlUnwin|d.B.KeGe|
|00000d80| 74 43 75 72 72 65 6e 74 | 49 72 71 6c 00 00 4d 00 |tCurrent|Irql..M.|
|00000d90| 4b 66 52 65 6c 65 61 73 | 65 53 70 69 6e 4c 6f 63 |KfReleas|eSpinLoc|
|00000da0| 6b 00 4a 00 4b 66 41 63 | 71 75 69 72 65 53 70 69 |k.J.KfAc|quireSpi|
|00000db0| 6e 4c 6f 63 6b 00 4b 00 | 4b 66 4c 6f 77 65 72 49 |nLock.K.|KfLowerI|
|00000dc0| 72 71 6c 00 46 00 4b 65 | 52 61 69 73 65 49 72 71 |rql.F.Ke|RaiseIrq|
|00000dd0| 6c 54 6f 44 70 63 4c 65 | 76 65 6c 00 01 00 45 78 |lToDpcLe|vel...Ex|
|00000de0| 52 65 6c 65 61 73 65 46 | 61 73 74 4d 75 74 65 78 |ReleaseF|astMutex|
|00000df0| 00 00 00 00 45 78 41 63 | 71 75 69 72 65 46 61 73 |....ExAc|quireFas|
|00000e00| 74 4d 75 74 65 78 00 00 | 48 41 4c 2e 64 6c 6c 00 |tMutex..|HAL.dll.|
|00000e10| 0d 00 54 64 69 43 6f 70 | 79 42 75 66 66 65 72 54 |..TdiCop|yBufferT|
|00000e20| 6f 4d 64 6c 00 00 54 44 | 49 2e 53 59 53 00 f9 00 |oMdl..TD|I.SYS...|
|00000e30| 4e 64 69 73 52 65 61 64 | 43 6f 6e 66 69 67 75 72 |NdisRead|Configur|
|00000e40| 61 74 69 6f 6e 00 96 00 | 4e 64 69 73 49 6e 69 74 |ation...|NdisInit|
|00000e50| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 27 00 |UnicodeS|tring.'.|
|00000e60| 4e 64 69 73 41 6c 6c 6f | 63 61 74 65 42 75 66 66 |NdisAllo|cateBuff|
|00000e70| 65 72 50 6f 6f 6c 00 00 | 2c 00 4e 64 69 73 41 6c |erPool..|,.NdisAl|
|00000e80| 6c 6f 63 61 74 65 50 61 | 63 6b 65 74 50 6f 6f 6c |locatePa|cketPool|
|00000e90| 00 00 03 01 4e 64 69 73 | 52 65 67 69 73 74 65 72 |....Ndis|Register|
|00000ea0| 50 72 6f 74 6f 63 6f 6c | 00 00 72 00 4e 64 69 73 |Protocol|..r.Ndis|
|00000eb0| 46 72 65 65 4d 65 6d 6f | 72 79 00 00 07 01 4e 64 |FreeMemo|ry....Nd|
|00000ec0| 69 73 52 65 6c 65 61 73 | 65 53 70 69 6e 4c 6f 63 |isReleas|eSpinLoc|
|00000ed0| 6b 00 24 00 4e 64 69 73 | 41 63 71 75 69 72 65 53 |k.$.Ndis|AcquireS|
|00000ee0| 70 69 6e 4c 6f 63 6b 00 | 70 00 4e 64 69 73 46 72 |pinLock.|p.NdisFr|
|00000ef0| 65 65 42 75 66 66 65 72 | 50 6f 6f 6c 00 00 74 00 |eeBuffer|Pool..t.|
|00000f00| 4e 64 69 73 46 72 65 65 | 50 61 63 6b 65 74 50 6f |NdisFree|PacketPo|
|00000f10| 6f 6c 00 00 67 00 4e 64 | 69 73 44 65 72 65 67 69 |ol..g.Nd|isDeregi|
|00000f20| 73 74 65 72 50 72 6f 74 | 6f 63 6f 6c 00 00 0e 01 |sterProt|ocol....|
|00000f30| 4e 64 69 73 53 65 6e 64 | 00 00 73 00 4e 64 69 73 |NdisSend|..s.Ndis|
|00000f40| 46 72 65 65 50 61 63 6b | 65 74 00 00 26 00 4e 64 |FreePack|et..&.Nd|
|00000f50| 69 73 41 6c 6c 6f 63 61 | 74 65 42 75 66 66 65 72 |isAlloca|teBuffer|
|00000f60| 00 00 2b 00 4e 64 69 73 | 41 6c 6c 6f 63 61 74 65 |..+.Ndis|Allocate|
|00000f70| 50 61 63 6b 65 74 00 00 | 29 00 4e 64 69 73 41 6c |Packet..|).NdisAl|
|00000f80| 6c 6f 63 61 74 65 4d 65 | 6d 6f 72 79 00 00 17 01 |locateMe|mory....|
|00000f90| 4e 64 69 73 54 72 61 6e | 73 66 65 72 44 61 74 61 |NdisTran|sferData|
|00000fa0| 00 00 6f 00 4e 64 69 73 | 46 72 65 65 42 75 66 66 |..o.Ndis|FreeBuff|
|00000fb0| 65 72 00 00 f4 00 4e 64 | 69 73 51 75 65 72 79 42 |er....Nd|isQueryB|
|00000fc0| 75 66 66 65 72 00 7c 00 | 4e 64 69 73 47 65 74 46 |uffer.|.|NdisGetF|
|00000fd0| 69 72 73 74 42 75 66 66 | 65 72 46 72 6f 6d 50 61 |irstBuff|erFromPa|
|00000fe0| 63 6b 65 74 00 00 19 01 | 4e 64 69 73 55 6e 63 68 |cket....|NdisUnch|
|00000ff0| 61 69 6e 42 75 66 66 65 | 72 41 74 46 72 6f 6e 74 |ainBuffe|rAtFront|
|00001000| 00 00 4e 44 49 53 2e 53 | 59 53 00 00 00 00 00 00 |..NDIS.S|YS......|
|00001010| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+