home *** CD-ROM | disk | FTP | other *** search
Unknown | 2006-11-09 | 3.9 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 54 76 3b 00 00 00 00 00 | 00 00 00 00 a4 80 3b 00 |Tv;.....|......;.|
|00000010| 18 01 03 00 3c 76 3b 00 | 00 00 00 00 00 00 00 00 |....<v;.|........|
|00000020| da 80 3b 00 00 01 03 00 | 00 00 00 00 00 00 00 00 |..;.....|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 64 85 3b 00 |........|....d.;.|
|00000040| 3a 85 3b 00 c6 80 3b 00 | b2 80 3b 00 48 85 3b 00 |:.;...;.|..;.H.;.|
|00000050| 00 00 00 00 32 79 3b 00 | 50 79 3b 00 68 79 3b 00 |....2y;.|Py;.hy;.|
|00000060| 72 79 3b 00 82 79 3b 00 | 92 79 3b 00 a0 79 3b 00 |ry;..y;.|.y;..y;.|
|00000070| b8 79 3b 00 c2 79 3b 00 | cc 79 3b 00 e0 79 3b 00 |.y;..y;.|.y;..y;.|
|00000080| ea 79 3b 00 f4 79 3b 00 | 14 7a 3b 00 1e 7a 3b 00 |.y;..y;.|.z;..z;.|
|00000090| 40 7a 3b 00 60 7a 3b 00 | 6a 7a 3b 00 82 7a 3b 00 |@z;.`z;.|jz;..z;.|
|000000a0| 9a 7a 3b 00 b0 7a 3b 00 | c8 7a 3b 00 d4 7a 3b 00 |.z;..z;.|.z;..z;.|
|000000b0| de 7a 3b 00 00 7b 3b 00 | 10 7b 3b 00 26 7b 3b 00 |.z;..{;.|.{;.&{;.|
|000000c0| 38 7b 3b 00 50 7b 3b 00 | 68 7b 3b 00 7a 7b 3b 00 |8{;.P{;.|h{;.z{;.|
|000000d0| 96 7b 3b 00 b6 7b 3b 00 | c6 7b 3b 00 e2 7b 3b 00 |.{;..{;.|.{;..{;.|
|000000e0| fe 7b 3b 00 0c 7c 3b 00 | 20 7c 3b 00 34 7c 3b 00 |.{;..|;.| |;.4|;.|
|000000f0| 4c 7c 3b 00 68 7c 3b 00 | 80 7c 3b 00 9a 7c 3b 00 |L|;.h|;.|.|;..|;.|
|00000100| b6 7c 3b 00 d2 7c 3b 00 | ea 7c 3b 00 f4 7c 3b 00 |.|;..|;.|.|;..|;.|
|00000110| 06 7d 3b 00 12 7d 3b 00 | 30 7d 3b 00 46 7d 3b 00 |.};..};.|0};.F};.|
|00000120| 5e 7d 3b 00 78 7d 3b 00 | 82 7d 3b 00 98 7d 3b 00 |^};.x};.|.};..};.|
|00000130| a2 7d 3b 00 b6 7d 3b 00 | d0 7d 3b 00 ec 7d 3b 00 |.};..};.|.};..};.|
|00000140| 00 7e 3b 00 0a 7e 3b 00 | 14 7e 3b 00 28 7e 3b 00 |.~;..~;.|.~;.(~;.|
|00000150| 34 7e 3b 00 4e 7e 3b 00 | 66 7e 3b 00 70 7e 3b 00 |4~;.N~;.|f~;.p~;.|
|00000160| 7a 7e 3b 00 8a 7e 3b 00 | 9a 7e 3b 00 ae 7e 3b 00 |z~;..~;.|.~;..~;.|
|00000170| be 7e 3b 00 d0 7e 3b 00 | dc 7e 3b 00 ec 7e 3b 00 |.~;..~;.|.~;..~;.|
|00000180| 08 7f 3b 00 18 7f 3b 00 | 38 7f 3b 00 4c 7f 3b 00 |..;...;.|8.;.L.;.|
|00000190| 66 7f 3b 00 78 7f 3b 00 | 96 7f 3b 00 1a 79 3b 00 |f.;.x.;.|..;..y;.|
|000001a0| d2 7f 3b 00 f2 7f 3b 00 | 10 80 3b 00 2a 80 3b 00 |..;...;.|..;.*.;.|
|000001b0| 3a 80 3b 00 4a 80 3b 00 | 60 80 3b 00 74 80 3b 00 |:.;.J.;.|`.;.t.;.|
|000001c0| 8c 80 3b 00 10 79 3b 00 | 06 79 3b 00 f0 78 3b 00 |..;..y;.|.y;..x;.|
|000001d0| e2 80 3b 00 fa 80 3b 00 | 12 81 3b 00 2e 81 3b 00 |..;...;.|..;...;.|
|000001e0| 42 81 3b 00 4c 81 3b 00 | 62 81 3b 00 6c 81 3b 00 |B.;.L.;.|b.;.l.;.|
|000001f0| 88 81 3b 00 a0 81 3b 00 | aa 81 3b 00 c6 81 3b 00 |..;...;.|..;...;.|
|00000200| d0 81 3b 00 da 81 3b 00 | f6 81 3b 00 02 82 3b 00 |..;...;.|..;...;.|
|00000210| 0c 82 3b 00 24 82 3b 00 | 44 82 3b 00 50 82 3b 00 |..;.$.;.|D.;.P.;.|
|00000220| 60 82 3b 00 70 82 3b 00 | 92 82 3b 00 a0 82 3b 00 |`.;.p.;.|..;...;.|
|00000230| b6 82 3b 00 c2 82 3b 00 | de 82 3b 00 f6 82 3b 00 |..;...;.|..;...;.|
|00000240| 0a 83 3b 00 1a 83 3b 00 | 2e 83 3b 00 40 83 3b 00 |..;...;.|..;.@.;.|
|00000250| 4e 83 3b 00 5a 83 3b 00 | 66 83 3b 00 70 83 3b 00 |N.;.Z.;.|f.;.p.;.|
|00000260| 8e 83 3b 00 b0 83 3b 00 | ba 83 3b 00 c4 83 3b 00 |..;...;.|..;...;.|
|00000270| cc 83 3b 00 e2 83 3b 00 | fc 83 3b 00 08 84 3b 00 |..;...;.|..;...;.|
|00000280| 20 84 3b 00 3a 84 3b 00 | 4a 84 3b 00 62 84 3b 00 | .;.:.;.|J.;.b.;.|
|00000290| 70 84 3b 00 7a 84 3b 00 | 94 84 3b 00 aa 84 3b 00 |p.;.z.;.|..;...;.|
|000002a0| c0 84 3b 00 da 84 3b 00 | f4 84 3b 00 14 85 3b 00 |..;...;.|..;...;.|
|000002b0| 2c 85 3b 00 ce 78 3b 00 | b4 7f 3b 00 c4 78 3b 00 |,.;..x;.|..;..x;.|
|000002c0| 00 00 00 00 95 05 73 74 | 72 6c 65 6e 00 00 79 00 |......st|rlen..y.|
|000002d0| 45 78 52 65 6c 65 61 73 | 65 52 65 73 6f 75 72 63 |ExReleas|eResourc|
|000002e0| 65 46 6f 72 54 68 72 65 | 61 64 4c 69 74 65 00 00 |eForThre|adLite..|
|000002f0| fb 01 4b 65 47 65 74 43 | 75 72 72 65 6e 74 54 68 |..KeGetC|urrentTh|
|00000300| 72 65 61 64 00 00 93 05 | 73 74 72 63 6d 70 00 00 |read....|strcmp..|
|00000310| 8f 05 73 70 72 69 6e 74 | 66 00 1d 02 4b 65 4c 65 |..sprint|f...KeLe|
|00000320| 61 76 65 43 72 69 74 69 | 63 61 6c 52 65 67 69 6f |aveCriti|calRegio|
|00000330| 6e 00 38 00 45 78 41 63 | 71 75 69 72 65 52 65 73 |n.8.ExAc|quireRes|
|00000340| 6f 75 72 63 65 53 68 61 | 72 65 64 4c 69 74 65 00 |ourceSha|redLite.|
|00000350| f6 01 4b 65 45 6e 74 65 | 72 43 72 69 74 69 63 61 |..KeEnte|rCritica|
|00000360| 6c 52 65 67 69 6f 6e 00 | ee 04 5a 77 43 6c 6f 73 |lRegion.|..ZwClos|
|00000370| 65 00 74 00 45 78 52 61 | 69 73 65 53 74 61 74 75 |e.t.ExRa|iseStatu|
|00000380| 73 00 4c 05 5a 77 53 65 | 74 56 61 6c 75 65 4b 65 |s.L.ZwSe|tValueKe|
|00000390| 79 00 f5 04 5a 77 43 72 | 65 61 74 65 4b 65 79 00 |y...ZwCr|eateKey.|
|000003a0| 0b 04 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|000003b0| 53 74 72 69 6e 67 00 00 | a7 05 77 63 73 63 70 79 |String..|..wcscpy|
|000003c0| 00 00 a9 05 77 63 73 6c | 65 6e 00 00 68 05 5f 65 |....wcsl|en..h._e|
|000003d0| 78 63 65 70 74 5f 68 61 | 6e 64 6c 65 72 33 00 00 |xcept_ha|ndler3..|
|000003e0| ac 05 77 63 73 6e 63 70 | 79 00 94 05 73 74 72 63 |..wcsncp|y...strc|
|000003f0| 70 79 00 00 59 00 45 78 | 49 6e 74 65 72 6c 6f 63 |py..Y.Ex|Interloc|
|00000400| 6b 65 64 41 64 64 4c 61 | 72 67 65 49 6e 74 65 67 |kedAddLa|rgeInteg|
|00000410| 65 72 00 00 91 05 73 74 | 72 63 61 74 00 00 9a 03 |er....st|rcat....|
|00000420| 52 74 6c 41 70 70 65 6e | 64 55 6e 69 63 6f 64 65 |RtlAppen|dUnicode|
|00000430| 53 74 72 69 6e 67 54 6f | 53 74 72 69 6e 67 00 00 |StringTo|String..|
|00000440| 7c 04 52 74 6c 55 6e 69 | 63 6f 64 65 53 74 72 69 ||.RtlUni|codeStri|
|00000450| 6e 67 54 6f 41 6e 73 69 | 53 74 72 69 6e 67 00 00 |ngToAnsi|String..|
|00000460| 98 05 73 74 72 6e 63 70 | 79 00 43 03 50 73 47 65 |..strncp|y.C.PsGe|
|00000470| 74 43 75 72 72 65 6e 74 | 50 72 6f 63 65 73 73 49 |tCurrent|ProcessI|
|00000480| 64 00 21 03 4f 62 66 44 | 65 72 65 66 65 72 65 6e |d.!.ObfD|ereferen|
|00000490| 63 65 4f 62 6a 65 63 74 | 00 00 22 03 4f 62 66 52 |ceObject|..".ObfR|
|000004a0| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|000004b0| 46 03 50 73 47 65 74 43 | 75 72 72 65 6e 74 54 68 |F.PsGetC|urrentTh|
|000004c0| 72 65 61 64 49 64 00 00 | 30 00 44 62 67 50 72 69 |readId..|0.DbgPri|
|000004d0| 6e 74 00 00 8b 05 6d 65 | 6d 6d 6f 76 65 00 37 00 |nt....me|mmove.7.|
|000004e0| 45 78 41 63 71 75 69 72 | 65 52 65 73 6f 75 72 63 |ExAcquir|eResourc|
|000004f0| 65 45 78 63 6c 75 73 69 | 76 65 4c 69 74 65 00 00 |eExclusi|veLite..|
|00000500| 3f 02 4b 65 52 65 73 65 | 74 45 76 65 6e 74 00 00 |?.KeRese|tEvent..|
|00000510| da 01 49 6f 66 43 6f 6d | 70 6c 65 74 65 52 65 71 |..IofCom|pleteReq|
|00000520| 75 65 73 74 00 00 49 01 | 49 6f 44 65 6c 65 74 65 |uest..I.|IoDelete|
|00000530| 44 65 76 69 63 65 00 00 | 4b 01 49 6f 44 65 6c 65 |Device..|K.IoDele|
|00000540| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|00000550| 41 01 49 6f 43 72 65 61 | 74 65 53 79 6d 62 6f 6c |A.IoCrea|teSymbol|
|00000560| 69 63 4c 69 6e 6b 00 00 | 38 01 49 6f 43 72 65 61 |icLink..|8.IoCrea|
|00000570| 74 65 44 65 76 69 63 65 | 00 00 6f 01 49 6f 47 65 |teDevice|..o.IoGe|
|00000580| 74 52 65 6c 61 74 65 64 | 44 65 76 69 63 65 4f 62 |tRelated|DeviceOb|
|00000590| 6a 65 63 74 00 00 35 05 | 5a 77 51 75 65 72 79 56 |ject..5.|ZwQueryV|
|000005a0| 6f 6c 75 6d 65 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |olumeInf|ormation|
|000005b0| 46 69 6c 65 00 00 f3 04 | 5a 77 43 72 65 61 74 65 |File....|ZwCreate|
|000005c0| 46 69 6c 65 00 00 9b 03 | 52 74 6c 41 70 70 65 6e |File....|RtlAppen|
|000005d0| 64 55 6e 69 63 6f 64 65 | 54 6f 53 74 72 69 6e 67 |dUnicode|ToString|
|000005e0| 00 00 5e 02 4b 65 57 61 | 69 74 46 6f 72 4d 75 6c |..^.KeWa|itForMul|
|000005f0| 74 69 70 6c 65 4f 62 6a | 65 63 74 73 00 00 49 02 |tipleObj|ects..I.|
|00000600| 4b 65 53 65 74 45 76 65 | 6e 74 00 00 0c 02 4b 65 |KeSetEve|nt....Ke|
|00000610| 49 6e 69 74 69 61 6c 69 | 7a 65 45 76 65 6e 74 00 |Initiali|zeEvent.|
|00000620| 97 02 4d 6d 49 73 41 64 | 64 72 65 73 73 56 61 6c |..MmIsAd|dressVal|
|00000630| 69 64 00 00 60 02 4b 65 | 57 61 69 74 46 6f 72 53 |id..`.Ke|WaitForS|
|00000640| 69 6e 67 6c 65 4f 62 6a | 65 63 74 00 3d 01 49 6f |ingleObj|ect.=.Io|
|00000650| 43 72 65 61 74 65 4e 6f | 74 69 66 69 63 61 74 69 |CreateNo|tificati|
|00000660| 6f 6e 45 76 65 6e 74 00 | 12 02 4b 65 49 6e 69 74 |onEvent.|..KeInit|
|00000670| 69 61 6c 69 7a 65 53 70 | 69 6e 4c 6f 63 6b 00 00 |ializeSp|inLock..|
|00000680| ab 03 52 74 6c 43 6f 6d | 70 61 72 65 55 6e 69 63 |..RtlCom|pareUnic|
|00000690| 6f 64 65 53 74 72 69 6e | 67 00 32 05 5a 77 51 75 |odeStrin|g.2.ZwQu|
|000006a0| 65 72 79 53 79 6d 62 6f | 6c 69 63 4c 69 6e 6b 4f |erySymbo|licLinkO|
|000006b0| 62 6a 65 63 74 00 19 05 | 5a 77 4f 70 65 6e 53 79 |bject...|ZwOpenSy|
|000006c0| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 4f 62 6a 65 63 74 |mbolicLi|nkObject|
|000006d0| 00 00 b5 03 52 74 6c 43 | 6f 70 79 55 6e 69 63 6f |....RtlC|opyUnico|
|000006e0| 64 65 53 74 72 69 6e 67 | 00 00 8a 05 6d 65 6d 63 |deString|....memc|
|000006f0| 70 79 00 00 34 05 5a 77 | 51 75 65 72 79 56 61 6c |py..4.Zw|QueryVal|
|00000700| 75 65 4b 65 79 00 14 05 | 5a 77 4f 70 65 6e 4b 65 |ueKey...|ZwOpenKe|
|00000710| 79 00 9d 04 52 74 6c 78 | 55 6e 69 63 6f 64 65 53 |y...Rtlx|UnicodeS|
|00000720| 74 72 69 6e 67 54 6f 41 | 6e 73 69 53 69 7a 65 00 |tringToA|nsiSize.|
|00000730| ca 02 4e 6c 73 4d 62 4f | 65 6d 43 6f 64 65 50 61 |..NlsMbO|emCodePa|
|00000740| 67 65 54 61 67 00 f3 03 | 52 74 6c 46 72 65 65 55 |geTag...|RtlFreeU|
|00000750| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 88 04 |nicodeSt|ring....|
|00000760| 52 74 6c 55 70 63 61 73 | 65 55 6e 69 63 6f 64 65 |RtlUpcas|eUnicode|
|00000770| 53 74 72 69 6e 67 00 00 | 9d 05 74 6f 6c 6f 77 65 |String..|..tolowe|
|00000780| 72 00 03 05 5a 77 45 6e | 75 6d 65 72 61 74 65 56 |r...ZwEn|umerateV|
|00000790| 61 6c 75 65 4b 65 79 00 | a4 05 77 63 73 63 61 74 |alueKey.|..wcscat|
|000007a0| 00 00 17 03 4f 62 51 75 | 65 72 79 4e 61 6d 65 53 |....ObQu|eryNameS|
|000007b0| 74 72 69 6e 67 00 28 05 | 5a 77 51 75 65 72 79 49 |tring.(.|ZwQueryI|
|000007c0| 6e 66 6f 72 6d 61 74 69 | 6f 6e 46 69 6c 65 00 00 |nformati|onFile..|
|000007d0| 19 03 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |..ObRefe|renceObj|
|000007e0| 65 63 74 42 79 48 61 6e | 64 6c 65 00 55 01 49 6f |ectByHan|dle.U.Io|
|000007f0| 46 69 6c 65 4f 62 6a 65 | 63 74 54 79 70 65 00 00 |FileObje|ctType..|
|00000800| 7e 05 5f 77 63 73 75 70 | 72 00 a5 05 77 63 73 63 |~._wcsup|r...wcsc|
|00000810| 68 72 00 00 ef 03 52 74 | 6c 46 72 65 65 41 6e 73 |hr....Rt|lFreeAns|
|00000820| 69 53 74 72 69 6e 67 00 | a0 05 74 6f 77 75 70 70 |iString.|..towupp|
|00000830| 65 72 00 00 25 05 5a 77 | 51 75 65 72 79 44 69 72 |er..%.Zw|QueryDir|
|00000840| 65 63 74 6f 72 79 4f 62 | 6a 65 63 74 00 00 10 05 |ectoryOb|ject....|
|00000850| 5a 77 4f 70 65 6e 44 69 | 72 65 63 74 6f 72 79 4f |ZwOpenDi|rectoryO|
|00000860| 62 6a 65 63 74 00 a6 05 | 77 63 73 63 6d 70 00 00 |bject...|wcscmp..|
|00000870| d3 02 4e 74 43 6c 6f 73 | 65 00 35 03 50 72 6f 62 |..NtClos|e.5.Prob|
|00000880| 65 46 6f 72 52 65 61 64 | 00 00 36 03 50 72 6f 62 |eForRead|..6.Prob|
|00000890| 65 46 6f 72 57 72 69 74 | 65 00 52 00 45 78 47 65 |eForWrit|e.R.ExGe|
|000008a0| 74 50 72 65 76 69 6f 75 | 73 4d 6f 64 65 00 3b 01 |tPreviou|sMode.;.|
|000008b0| 49 6f 43 72 65 61 74 65 | 46 69 6c 65 00 00 6c 05 |IoCreate|File..l.|
|000008c0| 5f 6c 6f 63 61 6c 5f 75 | 6e 77 69 6e 64 32 00 00 |_local_u|nwind2..|
|000008d0| 5b 01 49 6f 46 72 65 65 | 4d 64 6c 00 d9 01 49 6f |[.IoFree|Mdl...Io|
|000008e0| 66 43 61 6c 6c 44 72 69 | 76 65 72 00 85 02 4d 6d |fCallDri|ver...Mm|
|000008f0| 42 75 69 6c 64 4d 64 6c | 46 6f 72 4e 6f 6e 50 61 |BuildMdl|ForNonPa|
|00000900| 67 65 64 50 6f 6f 6c 00 | 1f 01 49 6f 41 6c 6c 6f |gedPool.|..IoAllo|
|00000910| 63 61 74 65 4d 64 6c 00 | 28 01 49 6f 42 75 69 6c |cateMdl.|(.IoBuil|
|00000920| 64 44 65 76 69 63 65 49 | 6f 43 6f 6e 74 72 6f 6c |dDeviceI|oControl|
|00000930| 52 65 71 75 65 73 74 00 | 4d 00 45 78 46 72 65 65 |Request.|M.ExFree|
|00000940| 50 6f 6f 6c 57 69 74 68 | 54 61 67 00 a8 02 4d 6d |PoolWith|Tag...Mm|
|00000950| 4d 61 70 56 69 65 77 49 | 6e 53 79 73 74 65 6d 53 |MapViewI|nSystemS|
|00000960| 70 61 63 65 00 00 f6 04 | 5a 77 43 72 65 61 74 65 |pace....|ZwCreate|
|00000970| 53 65 63 74 69 6f 6e 00 | 8f 03 52 74 6c 41 62 73 |Section.|..RtlAbs|
|00000980| 6f 6c 75 74 65 54 6f 53 | 65 6c 66 52 65 6c 61 74 |oluteToS|elfRelat|
|00000990| 69 76 65 53 44 00 31 04 | 52 74 6c 4c 65 6e 67 74 |iveSD.1.|RtlLengt|
|000009a0| 68 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |hSecurit|yDescrip|
|000009b0| 74 6f 72 00 93 04 52 74 | 6c 56 61 6c 69 64 53 65 |tor...Rt|lValidSe|
|000009c0| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|000009d0| 00 00 5f 04 52 74 6c 53 | 65 74 44 61 63 6c 53 65 |.._.RtlS|etDaclSe|
|000009e0| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|000009f0| 00 00 ba 03 52 74 6c 43 | 72 65 61 74 65 53 65 63 |....RtlC|reateSec|
|00000a00| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 00 |urityDes|criptor.|
|00000a10| 90 03 52 74 6c 41 64 64 | 41 63 63 65 73 73 41 6c |..RtlAdd|AccessAl|
|00000a20| 6c 6f 77 65 64 41 63 65 | 00 00 b6 03 52 74 6c 43 |lowedAce|....RtlC|
|00000a30| 72 65 61 74 65 41 63 6c | 00 00 32 04 52 74 6c 4c |reateAcl|..2.RtlL|
|00000a40| 65 6e 67 74 68 53 69 64 | 00 00 68 04 52 74 6c 53 |engthSid|..h.RtlS|
|00000a50| 75 62 41 75 74 68 6f 72 | 69 74 79 53 69 64 00 00 |ubAuthor|itySid..|
|00000a60| 10 04 52 74 6c 49 6e 69 | 74 69 61 6c 69 7a 65 53 |..RtlIni|tializeS|
|00000a70| 69 64 00 00 40 00 45 78 | 41 6c 6c 6f 63 61 74 65 |id..@.Ex|Allocate|
|00000a80| 50 6f 6f 6c 57 69 74 68 | 54 61 67 00 30 04 52 74 |PoolWith|Tag.0.Rt|
|00000a90| 6c 4c 65 6e 67 74 68 52 | 65 71 75 69 72 65 64 53 |lLengthR|equiredS|
|00000aa0| 69 64 00 00 6e 74 6f 73 | 6b 72 6e 6c 2e 65 78 65 |id..ntos|krnl.exe|
|00000ab0| 00 00 4f 00 4b 66 52 65 | 6c 65 61 73 65 53 70 69 |..O.KfRe|leaseSpi|
|00000ac0| 6e 4c 6f 63 6b 00 4c 00 | 4b 66 41 63 71 75 69 72 |nLock.L.|KfAcquir|
|00000ad0| 65 53 70 69 6e 4c 6f 63 | 6b 00 48 41 4c 2e 64 6c |eSpinLoc|k.HAL.dl|
|00000ae0| 6c 00 7a 00 45 78 52 65 | 6c 65 61 73 65 52 65 73 |l.z.ExRe|leaseRes|
|00000af0| 6f 75 72 63 65 4c 69 74 | 65 00 46 00 45 78 44 65 |ourceLit|e.F.ExDe|
|00000b00| 6c 65 74 65 52 65 73 6f | 75 72 63 65 4c 69 74 65 |leteReso|urceLite|
|00000b10| 00 00 56 00 45 78 49 6e | 69 74 69 61 6c 69 7a 65 |..V.ExIn|itialize|
|00000b20| 52 65 73 6f 75 72 63 65 | 4c 69 74 65 00 00 0f 02 |Resource|Lite....|
|00000b30| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 4d 75 74 65 |KeInitia|lizeMute|
|00000b40| 78 00 97 05 73 74 72 6e | 63 6d 70 00 62 01 49 6f |x...strn|cmp.b.Io|
|00000b50| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|00000b60| 73 00 ab 05 77 63 73 6e | 63 6d 70 00 96 04 52 74 |s...wcsn|cmp...Rt|
|00000b70| 6c 56 6f 6c 75 6d 65 44 | 65 76 69 63 65 54 6f 44 |lVolumeD|eviceToD|
|00000b80| 6f 73 4e 61 6d 65 00 00 | 24 05 5a 77 51 75 65 72 |osName..|$.ZwQuer|
|00000b90| 79 44 69 72 65 63 74 6f | 72 79 46 69 6c 65 00 00 |yDirecto|ryFile..|
|00000ba0| 8c 05 6d 65 6d 73 65 74 | 00 00 45 02 4b 65 53 65 |..memset|..E.KeSe|
|00000bb0| 72 76 69 63 65 44 65 73 | 63 72 69 70 74 6f 72 54 |rviceDes|criptorT|
|00000bc0| 61 62 6c 65 00 00 92 05 | 73 74 72 63 68 72 00 00 |able....|strchr..|
|00000bd0| 99 05 73 74 72 72 63 68 | 72 00 33 05 5a 77 51 75 |..strrch|r.3.ZwQu|
|00000be0| 65 72 79 53 79 73 74 65 | 6d 49 6e 66 6f 72 6d 61 |erySyste|mInforma|
|00000bf0| 74 69 6f 6e 00 00 a3 05 | 76 73 70 72 69 6e 74 66 |tion....|vsprintf|
|00000c00| 00 00 aa 05 77 63 73 6e | 63 61 74 00 43 05 5a 77 |....wcsn|cat.C.Zw|
|00000c10| 53 65 74 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 46 69 |SetInfor|mationFi|
|00000c20| 6c 65 00 00 97 03 52 74 | 6c 41 6e 73 69 53 74 72 |le....Rt|lAnsiStr|
|00000c30| 69 6e 67 54 6f 55 6e 69 | 63 6f 64 65 53 74 72 69 |ingToUni|codeStri|
|00000c40| 6e 67 00 00 5a 01 49 6f | 46 72 65 65 49 72 70 00 |ng..Z.Io|FreeIrp.|
|00000c50| 1e 01 49 6f 41 6c 6c 6f | 63 61 74 65 49 72 70 00 |..IoAllo|cateIrp.|
|00000c60| 0a 04 52 74 6c 49 6e 69 | 74 53 74 72 69 6e 67 00 |..RtlIni|tString.|
|00000c70| 54 00 45 78 49 6e 69 74 | 69 61 6c 69 7a 65 4e 50 |T.ExInit|ializeNP|
|00000c80| 61 67 65 64 4c 6f 6f 6b | 61 73 69 64 65 4c 69 73 |agedLook|asideLis|
|00000c90| 74 00 56 05 5a 77 57 72 | 69 74 65 46 69 6c 65 00 |t.V.ZwWr|iteFile.|
|00000ca0| 15 03 4f 62 4f 70 65 6e | 4f 62 6a 65 63 74 42 79 |..ObOpen|ObjectBy|
|00000cb0| 4e 61 6d 65 00 00 9c 05 | 73 77 70 72 69 6e 74 66 |Name....|swprintf|
|00000cc0| 00 00 2a 05 5a 77 51 75 | 65 72 79 49 6e 66 6f 72 |..*.ZwQu|eryInfor|
|00000cd0| 6d 61 74 69 6f 6e 50 72 | 6f 63 65 73 73 00 16 03 |mationPr|ocess...|
|00000ce0| 4f 62 4f 70 65 6e 4f 62 | 6a 65 63 74 42 79 50 6f |ObOpenOb|jectByPo|
|00000cf0| 69 6e 74 65 72 00 bc 01 | 49 6f 54 68 72 65 61 64 |inter...|IoThread|
|00000d00| 54 6f 50 72 6f 63 65 73 | 73 00 18 05 5a 77 4f 70 |ToProces|s...ZwOp|
|00000d10| 65 6e 53 65 63 74 69 6f | 6e 00 fc 04 5a 77 44 65 |enSectio|n...ZwDe|
|00000d20| 6c 65 74 65 56 61 6c 75 | 65 4b 65 79 00 00 02 05 |leteValu|eKey....|
|00000d30| 5a 77 45 6e 75 6d 65 72 | 61 74 65 4b 65 79 00 00 |ZwEnumer|ateKey..|
|00000d40| 2e 05 5a 77 51 75 65 72 | 79 4b 65 79 00 00 7b 05 |..ZwQuer|yKey..{.|
|00000d50| 5f 77 63 73 6e 69 63 6d | 70 00 9f 05 74 6f 77 6c |_wcsnicm|p...towl|
|00000d60| 6f 77 65 72 00 00 9e 05 | 74 6f 75 70 70 65 72 00 |ower....|toupper.|
|00000d70| 7f 03 50 73 53 65 74 4c | 6f 61 64 49 6d 61 67 65 |..PsSetL|oadImage|
|00000d80| 4e 6f 74 69 66 79 52 6f | 75 74 69 6e 65 00 7b 03 |NotifyRo|utine.{.|
|00000d90| 50 73 53 65 74 43 72 65 | 61 74 65 50 72 6f 63 65 |PsSetCre|ateProce|
|00000da0| 73 73 4e 6f 74 69 66 79 | 52 6f 75 74 69 6e 65 00 |ssNotify|Routine.|
|00000db0| 5e 05 5f 61 6c 6c 6d 75 | 6c 00 5c 05 5f 61 6c 6c |^._allmu|l.\._all|
|00000dc0| 64 69 76 00 6a 05 5f 69 | 74 6f 61 00 07 05 5a 77 |div.j._i|toa...Zw|
|00000dd0| 46 72 65 65 56 69 72 74 | 75 61 6c 4d 65 6d 6f 72 |FreeVirt|ualMemor|
|00000de0| 79 00 e9 04 5a 77 41 6c | 6c 6f 63 61 74 65 56 69 |y...ZwAl|locateVi|
|00000df0| 72 74 75 61 6c 4d 65 6d | 6f 72 79 00 b0 04 53 65 |rtualMem|ory...Se|
|00000e00| 45 78 70 6f 72 74 73 00 | 3d 03 50 73 43 72 65 61 |Exports.|=.PsCrea|
|00000e10| 74 65 53 79 73 74 65 6d | 54 68 72 65 61 64 00 00 |teSystem|Thread..|
|00000e20| 87 03 50 73 54 65 72 6d | 69 6e 61 74 65 53 79 73 |..PsTerm|inateSys|
|00000e30| 74 65 6d 54 68 72 65 61 | 64 00 f2 04 5a 77 43 72 |temThrea|d...ZwCr|
|00000e40| 65 61 74 65 45 76 65 6e | 74 00 55 05 5a 77 57 61 |eateEven|t.U.ZwWa|
|00000e50| 69 74 46 6f 72 53 69 6e | 67 6c 65 4f 62 6a 65 63 |itForSin|gleObjec|
|00000e60| 74 00 12 05 5a 77 4f 70 | 65 6e 46 69 6c 65 00 00 |t...ZwOp|enFile..|
|00000e70| ad 05 77 63 73 72 63 68 | 72 00 e7 04 5a 77 41 64 |..wcsrch|r...ZwAd|
|00000e80| 6a 75 73 74 50 72 69 76 | 69 6c 65 67 65 73 54 6f |justPriv|ilegesTo|
|00000e90| 6b 65 6e 00 16 05 5a 77 | 4f 70 65 6e 50 72 6f 63 |ken...Zw|OpenProc|
|00000ea0| 65 73 73 54 6f 6b 65 6e | 00 00 48 05 5a 77 53 65 |essToken|..H.ZwSe|
|00000eb0| 74 53 65 63 75 72 69 74 | 79 4f 62 6a 65 63 74 00 |tSecurit|yObject.|
|00000ec0| bd 04 53 65 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |..SeQuer|yInforma|
|00000ed0| 74 69 6f 6e 54 6f 6b 65 | 6e 00 72 03 50 73 52 65 |tionToke|n.r.PsRe|
|00000ee0| 66 65 72 65 6e 63 65 50 | 72 69 6d 61 72 79 54 6f |ferenceP|rimaryTo|
|00000ef0| 6b 65 6e 00 71 03 50 73 | 52 65 66 65 72 65 6e 63 |ken.q.Ps|Referenc|
|00000f00| 65 49 6d 70 65 72 73 6f | 6e 61 74 69 6f 6e 54 6f |eImperso|nationTo|
|00000f10| 6b 65 6e 00 31 05 5a 77 | 51 75 65 72 79 53 65 63 |ken.1.Zw|QuerySec|
|00000f20| 75 72 69 74 79 4f 62 6a | 65 63 74 00 36 05 5a 77 |urityObj|ect.6.Zw|
|00000f30| 52 65 61 64 46 69 6c 65 | 00 00 4d 00 4b 66 4c 6f |ReadFile|..M.KfLo|
|00000f40| 77 65 72 49 72 71 6c 00 | 42 00 4b 65 51 75 65 72 |werIrql.|B.KeQuer|
|00000f50| 79 50 65 72 66 6f 72 6d | 61 6e 63 65 43 6f 75 6e |yPerform|anceCoun|
|00000f60| 74 65 72 00 4e 00 4b 66 | 52 61 69 73 65 49 72 71 |ter.N.Kf|RaiseIrq|
|00000f70| 6c 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |l.......|........|
+--------+-------------------------+-------------------------+--------+--------+