| / Clickx 34
/ Clickx 34.iso / assets / software / avgas-setup-7.5.0.50.exe / guard.sys
| < prev | next > |
| MS-DOS/Windows or OS/2 Executable | 2006-09-28 | 4.0 KB |
MacOS 8.1
|
Win98
|
DOS
browse contents |
view JSON data
|
view as text| Confidence | Program | Detection | Match Type | Support |
|---|---|---|---|---|
| 100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
| 1% | dexvert | MS-DOS Driver (executable/msDOSDriver) | ext | Unsupported |
| 1% | dexvert | OS/2 Device Driver (other/os2DeviceDriver) | ext | Unsupported |
| 1% | dexvert | SYSLINUX loader (other/syslinuxLoader) | ext | Unsupported |
| 1% | dexvert | FreeDOS KEYBoard layout collection (other/freeDOSKEYBoardLayoutCollection) | ext | Unsupported |
| 1% | dexvert | MS-DOS KEYBoard Layout file (other/msDOSKEYBoardLayoutFile) | ext | Unsupported |
| 100% | file | PE32 executable for MS Windows 5.01 (native), Intel i386, 5 sections | default | |
| 99% | file | data | default | |
| 42% | TrID | Win32 Executable (generic) | default | |
| 19% | TrID | OS/2 Executable (generic) | default | |
| 18% | TrID | Generic Win/DOS Executable | default | |
| 18% | TrID | DOS Executable Generic | default (weak) | |
| 0% | TrID | VXD Driver | default (weak) | |
| 1% | dearkID | deark: exe (PE32) | default (weak) | |
| 100% | siegfried | fmt/899 Windows Portable Executable (32 bit) | default | |
| 100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
| 100% | binwalkID | Microsoft executable, portable (PE) | default | |
| 100% | xdgMime | application/x-msdownload | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 48 02 00 00 |........|....H...|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000090| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000200| d1 82 a3 f0 95 e3 cd a3 | 95 e3 cd a3 95 e3 cd a3 |........|........|
|00000210| 95 e3 cc a3 81 e3 cd a3 | 56 ec 90 a3 96 e3 cd a3 |........|V.......|
|00000220| 56 ec c2 a3 94 e3 cd a3 | 56 ec 92 a3 93 e3 cd a3 |V.......|V.......|
|00000230| 56 ec 97 a3 94 e3 cd a3 | 52 69 63 68 95 e3 cd a3 |V.......|Rich....|
|00000240| 00 00 00 00 00 00 00 00 | 50 45 00 00 4c 01 05 00 |........|PE..L...|
|00000250| 8b d8 1b 45 00 00 00 00 | 00 00 00 00 e0 00 0e 01 |...E....|........|
|00000260| 0b 01 07 0a 00 08 00 00 | 80 03 00 00 00 00 00 00 |........|........|
|00000270| 85 0c 00 00 80 04 00 00 | 00 0a 00 00 00 00 01 00 |........|........|
|00000280| 80 00 00 00 80 00 00 00 | 05 00 01 00 05 00 01 00 |........|........|
|00000290| 05 00 01 00 00 00 00 00 | 00 10 00 00 80 04 00 00 |........|........|
|000002a0| d0 76 00 00 01 00 00 00 | 00 00 04 00 00 10 00 00 |.v......|........|
|000002b0| 00 00 10 00 00 10 00 00 | 00 00 00 00 10 00 00 00 |........|........|
|000002c0| 00 00 00 00 00 00 00 00 | cc 0c 00 00 28 00 00 00 |........|....(...|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 0f 00 00 98 00 00 00 |........|........|
|000002f0| 50 0a 00 00 1c 00 00 00 | 00 00 00 00 00 00 00 00 |P.......|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| b0 0a 00 00 40 00 00 00 | 00 00 00 00 00 00 00 00 |....@...|........|
|00000320| 00 0a 00 00 50 00 00 00 | 00 00 00 00 00 00 00 00 |....P...|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 2e 74 65 78 74 00 00 00 | 64 05 00 00 80 04 00 00 |.text...|d.......|
|00000350| 80 05 00 00 80 04 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 20 00 00 68 | 2e 72 64 61 74 61 00 00 |.... ..h|.rdata..|
|00000370| 84 01 00 00 00 0a 00 00 | 00 02 00 00 00 0a 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 48 |........|....@..H|
|00000390| 2e 64 61 74 61 00 00 00 | 1c 00 00 00 00 0c 00 00 |.data...|........|
|000003a0| 80 00 00 00 00 0c 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 40 00 00 c8 | 49 4e 49 54 00 00 00 00 |....@...|INIT....|
|000003c0| 54 02 00 00 80 0c 00 00 | 80 02 00 00 80 0c 00 00 |T.......|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 e2 |........|.... ...|
|000003e0| 2e 72 65 6c 6f 63 00 00 | d6 00 00 00 00 0f 00 00 |.reloc..|........|
|000003f0| 00 01 00 00 00 0f 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 00 00 00 00 40 00 00 42 | 00 00 00 00 00 00 00 00 |....@..B|........|
|00000410| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000420| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000440| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000460| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000470| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000480| 00 00 00 00 00 00 a1 08 | 0c 01 00 c3 cc cc cc cc |........|........|
|00000490| cc cc a1 0c 0c 01 00 c3 | 5c 00 42 00 61 00 73 00 |........|\.B.a.s.|
|000004a0| 65 00 4e 00 61 00 6d 00 | 65 00 64 00 4f 00 62 00 |e.N.a.m.|e.d.O.b.|
|000004b0| 6a 00 65 00 63 00 74 00 | 73 00 5c 00 61 00 76 00 |j.e.c.t.|s.\.a.v.|
|000004c0| 67 00 61 00 73 00 5f 00 | 67 00 75 00 61 00 72 00 |g.a.s._.|g.u.a.r.|
|000004d0| 64 00 5f 00 6e 00 6f 00 | 74 00 69 00 66 00 79 00 |d._.n.o.|t.i.f.y.|
|000004e0| 37 00 00 00 cc cc cc cc | cc cc 68 84 00 00 00 68 |7.......|..h....h|
|000004f0| 70 0a 01 00 e8 7b 04 00 | 00 a1 04 0c 01 00 89 45 |p....{..|.......E|
|00000500| e4 6a 13 59 be 98 04 01 | 00 8d 7d 98 f3 a5 33 f6 |.j.Y....|..}...3.|
|00000510| 89 75 94 89 75 90 89 75 | fc 8b 45 10 39 70 04 0f |.u..u..u|..E.9p..|
|00000520| 86 96 00 00 00 8d 45 98 | 50 8d 85 6c ff ff ff 50 |......E.|P..l...P|
|00000530| ff 15 14 0a 01 00 c7 85 | 74 ff ff ff 18 00 00 00 |........|t.......|
|00000540| 89 b5 78 ff ff ff c7 45 | 80 40 02 00 00 8d 85 6c |..x....E|.@.....l|
|00000550| ff ff ff 89 85 7c ff ff | ff 89 75 84 89 75 88 8d |.....|..|..u..u..|
|00000560| 85 74 ff ff ff 50 68 03 | 00 1f 00 8d 45 94 50 ff |.t...Ph.|....E.P.|
|00000570| 15 10 0a 01 00 89 45 8c | 3b c6 75 3f 56 8d 45 90 |......E.|;.u?V.E.|
|00000580| 50 56 56 56 ff 75 94 ff | 15 0c 0a 01 00 89 45 8c |PVVV.u..|......E.|
|00000590| 3b c6 75 15 56 6a 01 ff | 75 90 ff 15 08 0a 01 00 |;.u.Vj..|u.......|
|000005a0| 8b 4d 90 ff 15 04 0a 01 | 00 ff 75 94 ff 15 00 0a |.M......|..u.....|
|000005b0| 01 00 eb 07 33 c0 40 c3 | 8b 65 e8 83 4d fc ff 8b |....3.@.|.e..M...|
|000005c0| 4d e4 e8 92 03 00 00 e8 | e3 03 00 00 c2 0c 00 cc |M.......|........|
|000005d0| cc cc cc cc 8b ff 55 8b | ec 8b 4d 0c 83 61 18 00 |......U.|..M..a..|
|000005e0| 83 61 1c 00 32 d2 ff 15 | 1c 0a 01 00 33 c0 5d c2 |.a..2...|....3.].|
|000005f0| 08 00 cc cc cc cc cc cc | 8b ff 55 8b ec 56 8b 75 |........|..U..V.u|
|00000600| 0c 8b 46 60 8b 40 0c 3d | 1f 20 10 88 74 2b 3d 23 |..F`.@.=|. ..t+=#|
|00000610| 20 10 88 75 49 e8 b8 03 | 00 00 85 c0 a3 08 0c 01 | ..uI...|........|
|00000620| 00 74 3b e8 aa 03 00 00 | 39 05 08 0c 01 00 75 2e |.t;.....|9.....u.|
|00000630| 83 25 0c 0c 01 00 00 eb | 25 e8 94 03 00 00 85 c0 |.%......|%.......|
|00000640| a3 08 0c 01 00 74 17 e8 | 86 03 00 00 39 05 08 0c |.....t..|....9...|
|00000650| 01 00 75 0a c7 05 0c 0c | 01 00 01 00 00 00 83 66 |..u.....|.......f|
|00000660| 18 00 83 66 1c 00 32 d2 | 8b ce ff 15 1c 0a 01 00 |...f..2.|........|
|00000670| 33 c0 5e 5d c2 08 00 cc | 5c 00 44 00 65 00 76 00 |3.^]....|\.D.e.v.|
|00000680| 69 00 63 00 65 00 5c 00 | 61 00 76 00 67 00 61 00 |i.c.e.\.|a.v.g.a.|
|00000690| 73 00 5f 00 67 00 75 00 | 61 00 72 00 64 00 37 00 |s._.g.u.|a.r.d.7.|
|000006a0| 00 00 00 00 5c 00 44 00 | 6f 00 73 00 44 00 65 00 |....\.D.|o.s.D.e.|
|000006b0| 76 00 69 00 63 00 65 00 | 73 00 5c 00 61 00 76 00 |v.i.c.e.|s.\.a.v.|
|000006c0| 67 00 61 00 73 00 5f 00 | 67 00 75 00 61 00 72 00 |g.a.s._.|g.u.a.r.|
|000006d0| 64 00 37 00 00 00 cc cc | cc cc cc cc 8b ff 55 8b |d.7.....|......U.|
|000006e0| ec 83 ec 10 56 8b 75 08 | 57 8b 3d 14 0a 01 00 68 |....V.u.|W.=....h|
|000006f0| 78 06 01 00 8d 45 f8 50 | c7 46 38 d4 05 01 00 c7 |x....E.P|.F8.....|
|00000700| 46 40 d4 05 01 00 c7 46 | 70 f8 05 01 00 ff d7 68 |F@.....F|p......h|
|00000710| a4 06 01 00 8d 45 f0 50 | ff d7 8d 45 08 50 33 ff |.....E.P|...E.P3.|
|00000720| 57 57 6a 22 8d 45 f8 50 | 57 56 ff 15 30 0a 01 00 |WWj".E.P|WV..0...|
|00000730| 3b c7 75 3a 8d 45 f8 50 | 8d 45 f0 50 ff 15 2c 0a |;.u:.E.P|.E.P..,.|
|00000740| 01 00 8b f0 3b f7 74 0d | ff 75 08 ff 15 24 0a 01 |....;.t.|.u...$..|
|00000750| 00 8b c6 eb 19 8b 45 08 | a3 18 0c 01 00 e8 18 00 |......E.|........|
|00000760| 00 00 68 ea 04 01 00 e8 | 72 02 00 00 33 c0 5f 5e |..h.....|r...3._^|
|00000770| c9 c2 08 00 cc cc cc cc | cc cc 6a 0c 68 80 0a 01 |........|..j.h...|
|00000780| 00 e8 ee 01 00 00 83 65 | e4 00 83 65 fc 00 fa 0f |.......e|...e....|
|00000790| 20 c0 89 45 e4 25 ff ff | fe ff 0f 22 c0 8b 0d 3c | ..E.%..|..."...<|
|000007a0| 0a 01 00 8b 51 01 a1 38 | 0a 01 00 8b 30 8b 14 96 |....Q..8|....0...|
|000007b0| 89 15 14 0c 01 00 8b 49 | 01 8b 00 c7 04 88 ac 08 |.......I|........|
|000007c0| 01 00 8b 0d 34 0a 01 00 | 8b 51 01 a1 38 0a 01 00 |....4...|.Q..8...|
|000007d0| 8b 30 8b 14 96 89 15 10 | 0c 01 00 8b 49 01 8b 00 |.0......|....I...|
|000007e0| c7 04 88 12 08 01 00 f6 | 45 e6 01 74 0b 0f 20 c0 |........|E..t.. .|
|000007f0| 0d 00 00 01 00 0f 22 c0 | fb eb 07 33 c0 40 c3 8b |......".|...3.@..|
|00000800| 65 e8 83 4d fc ff e8 a4 | 01 00 00 c3 cc cc cc cc |e..M....|........|
|00000810| cc cc 6a 14 68 90 0a 01 | 00 e8 56 01 00 00 33 f6 |..j.h...|..V...3.|
|00000820| 89 75 fc ff 15 40 0a 01 | 00 85 c0 74 62 e8 54 fc |.u...@..|...tb.T.|
|00000830| ff ff 85 c0 74 59 39 75 | 08 74 54 e8 52 fc ff ff |....tY9u|.tT.R...|
|00000840| 85 c0 74 4b 89 75 e4 89 | 75 e0 56 8d 45 e4 50 56 |..tK.u..|u.V.E.PV|
|00000850| 56 56 ff 75 08 ff 15 0c | 0a 01 00 85 c0 75 30 89 |VV.u....|.....u0.|
|00000860| 75 dc 8b 4d e4 8b b1 84 | 00 00 00 89 75 e0 ff 15 |u..M....|....u...|
|00000870| 04 0a 01 00 e8 0d fc ff | ff 3b f0 75 12 83 4d fc |........|.;.u..M.|
|00000880| ff b8 22 00 00 c0 eb 17 | 33 c0 40 c3 8b 65 e8 83 |..".....|3.@..e..|
|00000890| 4d fc ff ff 75 0c ff 75 | 08 ff 15 10 0c 01 00 e8 |M...u..u|........|
|000008a0| 0b 01 00 00 c2 08 00 cc | cc cc cc cc 6a 0c 68 a0 |........|....j.h.|
|000008b0| 0a 01 00 e8 bc 00 00 00 | 33 f6 89 75 fc ff 15 40 |........|3..u...@|
|000008c0| 0a 01 00 85 c0 74 44 e8 | ba fb ff ff 85 c0 74 3b |.....tD.|......t;|
|000008d0| 39 75 08 74 36 e8 b8 fb | ff ff 85 c0 74 2d f6 45 |9u.t6...|....t-.E|
|000008e0| 0c 23 75 06 f6 45 0d 08 | 74 21 89 75 e4 e8 94 fb |.#u..E..|t!.u....|
|000008f0| ff ff 8b 4d 14 39 01 75 | 12 83 4d fc ff b8 22 00 |...M.9.u|..M...".|
|00000900| 00 c0 eb 1d 33 c0 40 c3 | 8b 65 e8 83 4d fc ff ff |....3.@.|.e..M...|
|00000910| 75 14 ff 75 10 ff 75 0c | ff 75 08 ff 15 14 0c 01 |u..u..u.|.u......|
|00000920| 00 e8 89 00 00 00 c2 10 | 00 cc cc cc cc cc 8b ff |........|........|
|00000930| 55 8b ec 51 89 4d fc 6a | 00 ff 35 00 0c 01 00 ff |U..Q.M.j|..5.....|
|00000940| 35 04 0c 01 00 ff 75 fc | 68 f7 00 00 00 ff 15 48 |5.....u.|h......H|
|00000950| 0a 01 00 cc cc cc cc cc | cc 3b 0d 04 0c 01 00 75 |........|.;.....u|
|00000960| 09 f7 c1 00 00 ff ff 75 | 01 c3 e9 bf ff ff ff cc |.......u|........|
|00000970| cc cc cc cc 68 c6 09 01 | 00 64 a1 00 00 00 00 50 |....h...|.d.....P|
|00000980| 8b 44 24 10 89 6c 24 10 | 8d 6c 24 10 2b e0 53 56 |.D$..l$.|.l$.+.SV|
|00000990| 57 8b 45 f8 89 65 e8 50 | 8b 45 fc c7 45 fc ff ff |W.E..e.P|.E..E...|
|000009a0| ff ff 89 45 f8 8d 45 f0 | 64 a3 00 00 00 00 c3 8b |...E..E.|d.......|
|000009b0| 4d f0 64 89 0d 00 00 00 | 00 59 5f 5e 5b c9 51 c3 |M.d.....|.Y_^[.Q.|
|000009c0| cc cc cc cc cc cc ff 25 | 18 0a 01 00 cc cc cc cc |.......%|........|
|000009d0| cc cc ff 25 20 0a 01 00 | cc cc cc cc cc cc ff 25 |...% ...|.......%|
|000009e0| 28 0a 01 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |(.......|........|
|000009f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a00| 44 0d 00 00 4e 0d 00 00 | 66 0d 00 00 74 0d 00 00 |D...N...|f...t...|
|00000a10| 90 0d 00 00 9e 0d 00 00 | b6 0d 00 00 ca 0d 00 00 |........|........|
|00000a20| e0 0d 00 00 f8 0d 00 00 | 0a 0e 00 00 28 0e 00 00 |........|....(...|
|00000a30| 40 0e 00 00 52 0e 00 00 | 68 0e 00 00 84 0e 00 00 |@...R...|h.......|
|00000a40| 94 0e 00 00 a8 0e 00 00 | b6 0e 00 00 00 00 00 00 |........|........|
|00000a50| 00 00 00 00 8b d8 1b 45 | 00 00 00 00 02 00 00 00 |.......E|........|
|00000a60| 81 00 00 00 f8 0a 00 00 | f8 0a 00 00 00 00 00 00 |........|........|
|00000a70| ff ff ff ff b4 05 01 00 | b8 05 01 00 00 00 00 00 |........|........|
|00000a80| ff ff ff ff fb 07 01 00 | ff 07 01 00 00 00 00 00 |........|........|
|00000a90| ff ff ff ff 88 08 01 00 | 8c 08 01 00 00 00 00 00 |........|........|
|00000aa0| ff ff ff ff 04 09 01 00 | 08 09 01 00 00 00 00 00 |........|........|
|00000ab0| 48 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |H.......|........|
|00000ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 04 0c 01 00 |........|........|
|00000af0| 80 0b 01 00 01 00 00 00 | 52 53 44 53 ce 30 f9 18 |........|RSDS.0..|
|00000b00| 21 7f 09 42 b4 d2 f6 e1 | 7b 28 6a fc 01 00 00 00 |!..B....|{(j.....|
|00000b10| 44 3a 5c 62 75 69 6c 64 | 5c 75 73 65 72 5c 73 61 |D:\build|\user\sa|
|00000b20| 6e 64 62 6f 78 5f 32 30 | 30 36 5f 30 39 32 38 5f |ndbox_20|06_0928_|
|00000b30| 31 36 31 30 33 34 5f 74 | 72 75 6e 6b 5f 41 56 47 |161034_t|runk_AVG|
|00000b40| 5f 41 6e 74 69 5f 53 70 | 79 77 61 72 65 5c 73 6f |_Anti_Sp|yware\so|
|00000b50| 75 72 63 65 5c 65 77 69 | 64 6f 5c 68 6f 6d 65 5c |urce\ewi|do\home\|
|00000b60| 67 75 61 72 64 5c 64 72 | 76 5c 69 33 38 36 5c 67 |guard\dr|v\i386\g|
|00000b70| 75 61 72 64 2e 70 64 62 | 00 00 00 00 00 00 00 00 |uard.pdb|........|
|00000b80| c6 09 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c00| bf 44 ff ff 40 bb 00 00 | 00 00 00 00 00 00 00 00 |.D..@...|........|
|00000c10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c80| 00 00 00 00 00 8b ff 55 | 8b ec a1 04 0c 01 00 85 |.......U|........|
|00000c90| c0 b9 40 bb 00 00 74 04 | 3b c1 75 23 8b 15 44 0a |..@...t.|;.u#..D.|
|00000ca0| 01 00 b8 04 0c 01 00 c1 | e8 08 33 02 25 ff ff 00 |........|..3.%...|
|00000cb0| 00 a3 04 0c 01 00 75 07 | 8b c1 a3 04 0c 01 00 f7 |......u.|........|
|00000cc0| d0 a3 00 0c 01 00 5d e9 | 10 fa ff ff f4 0c 00 00 |......].|........|
|00000cd0| 00 00 00 00 00 00 00 00 | c6 0e 00 00 00 0a 00 00 |........|........|
|00000ce0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cf0| 00 00 00 00 44 0d 00 00 | 4e 0d 00 00 66 0d 00 00 |....D...|N...f...|
|00000d00| 74 0d 00 00 90 0d 00 00 | 9e 0d 00 00 b6 0d 00 00 |t.......|........|
|00000d10| ca 0d 00 00 e0 0d 00 00 | f8 0d 00 00 0a 0e 00 00 |........|........|
|00000d20| 28 0e 00 00 40 0e 00 00 | 52 0e 00 00 68 0e 00 00 |(...@...|R...h...|
|00000d30| 84 0e 00 00 94 0e 00 00 | a8 0e 00 00 b6 0e 00 00 |........|........|
|00000d40| 00 00 00 00 07 05 5a 77 | 43 6c 6f 73 65 00 2c 03 |......Zw|Close.,.|
|00000d50| 4f 62 66 44 65 72 65 66 | 65 72 65 6e 63 65 4f 62 |ObfDeref|erenceOb|
|00000d60| 6a 65 63 74 00 00 53 02 | 4b 65 53 65 74 45 76 65 |ject..S.|KeSetEve|
|00000d70| 6e 74 00 00 24 03 4f 62 | 52 65 66 65 72 65 6e 63 |nt..$.Ob|Referenc|
|00000d80| 65 4f 62 6a 65 63 74 42 | 79 48 61 6e 64 6c 65 00 |eObjectB|yHandle.|
|00000d90| 2a 05 5a 77 4f 70 65 6e | 45 76 65 6e 74 00 19 04 |*.ZwOpen|Event...|
|00000da0| 52 74 6c 49 6e 69 74 55 | 6e 69 63 6f 64 65 53 74 |RtlInitU|nicodeSt|
|00000db0| 72 69 6e 67 00 00 81 05 | 5f 65 78 63 65 70 74 5f |ring....|_except_|
|00000dc0| 68 61 6e 64 6c 65 72 33 | 00 00 e0 01 49 6f 66 43 |handler3|....IofC|
|00000dd0| 6f 6d 70 6c 65 74 65 52 | 65 71 75 65 73 74 00 00 |ompleteR|equest..|
|00000de0| 4f 03 50 73 47 65 74 43 | 75 72 72 65 6e 74 50 72 |O.PsGetC|urrentPr|
|00000df0| 6f 63 65 73 73 49 64 00 | 4e 01 49 6f 44 65 6c 65 |ocessId.|N.IoDele|
|00000e00| 74 65 44 65 76 69 63 65 | 00 00 8c 03 50 73 53 65 |teDevice|....PsSe|
|00000e10| 74 4c 6f 61 64 49 6d 61 | 67 65 4e 6f 74 69 66 79 |tLoadIma|geNotify|
|00000e20| 52 6f 75 74 69 6e 65 00 | 46 01 49 6f 43 72 65 61 |Routine.|F.IoCrea|
|00000e30| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|00000e40| 3d 01 49 6f 43 72 65 61 | 74 65 44 65 76 69 63 65 |=.IoCrea|teDevice|
|00000e50| 00 00 68 05 5a 77 54 65 | 72 6d 69 6e 61 74 65 50 |..h.ZwTe|rminateP|
|00000e60| 72 6f 63 65 73 73 00 00 | 4f 02 4b 65 53 65 72 76 |rocess..|O.KeServ|
|00000e70| 69 63 65 44 65 73 63 72 | 69 70 74 6f 72 54 61 62 |iceDescr|iptorTab|
|00000e80| 6c 65 00 00 2e 05 5a 77 | 4f 70 65 6e 50 72 6f 63 |le....Zw|OpenProc|
|00000e90| 65 73 73 00 05 02 4b 65 | 47 65 74 50 72 65 76 69 |ess...Ke|GetPrevi|
|00000ea0| 6f 75 73 4d 6f 64 65 00 | 63 02 4b 65 54 69 63 6b |ousMode.|c.KeTick|
|00000eb0| 43 6f 75 6e 74 00 f3 01 | 4b 65 42 75 67 43 68 65 |Count...|KeBugChe|
|00000ec0| 63 6b 45 78 00 00 6e 74 | 6f 73 6b 72 6e 6c 2e 65 |ckEx..nt|oskrnl.e|
|00000ed0| 78 65 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |xe......|........|
|00000ee0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ef0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f00| 00 00 00 00 98 00 00 00 | 87 34 93 34 f0 34 fa 34 |........|.4.4.4.4|
|00000f10| 05 35 32 35 71 35 89 35 | 9c 35 a5 35 ae 35 e8 35 |.525q5.5|.5.5.5.5|
|00000f20| 1d 36 2a 36 32 36 41 36 | 4e 36 56 36 6c 36 eb 36 |.6*626A6|N6V6l6.6|
|00000f30| f0 36 fb 36 02 37 09 37 | 10 37 2c 37 3e 37 4d 37 |.6.6.7.7|.7,7>7M7|
|00000f40| 59 37 63 37 7d 37 9f 37 | a7 37 b2 37 be 37 c4 37 |Y7c7}7.7|.7.7.7.7|
|00000f50| cc 37 d7 37 e3 37 15 38 | 25 38 57 38 70 38 9b 38 |.7.7.7.8|%8W8p8.8|
|00000f60| af 38 bf 38 1d 39 3b 39 | 41 39 4f 39 5b 39 75 39 |.8.8.9;9|A9O9[9u9|
|00000f70| c8 39 d4 39 e0 39 74 3a | 78 3a 84 3a 88 3a 94 3a |.9.9.9t:|x:.:.:.:|
|00000f80| 98 3a a4 3a a8 3a ec 3a | f0 3a 8b 3c 9e 3c a3 3c |.:.:.:.:|.:.<.<.<|
|00000f90| b2 3c bb 3c c2 3c 00 00 | 00 00 00 00 00 00 00 00 |.<.<.<..|........|
|00000fa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+