home *** CD-ROM | disk | FTP | other *** search
Unknown | 2006-08-03 | 3.0 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| a1 00 b0 02 00 85 c0 b9 | 4e e6 40 bb 74 04 3b c1 |........|N.@.t.;.|
|00000010| 75 19 a1 88 91 02 00 8b | 00 35 00 b0 02 00 a3 00 |u.......|.5......|
|00000020| b0 02 00 75 06 89 0d 00 | b0 02 00 e9 c4 3f fe ff |...u....|.....?..|
|00000030| a4 e0 01 00 00 00 00 00 | 00 00 00 00 3e e2 01 00 |........|....>...|
|00000040| 24 90 01 00 9c e0 01 00 | 00 00 00 00 00 00 00 00 |$.......|........|
|00000050| 60 e2 01 00 1c 90 01 00 | 80 e0 01 00 00 00 00 00 |`.......|........|
|00000060| 00 00 00 00 f8 ea 01 00 | 00 90 01 00 00 00 00 00 |........|........|
|00000070| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000080| c8 ea 01 00 b4 ea 01 00 | a0 ea 01 00 8a ea 01 00 |........|........|
|00000090| 74 ea 01 00 dc ea 01 00 | 00 00 00 00 4c e2 01 00 |t.......|....L...|
|000000a0| 00 00 00 00 c8 e2 01 00 | d4 e2 01 00 ee e2 01 00 |........|........|
|000000b0| 04 e3 01 00 14 e3 01 00 | 2c e3 01 00 48 e3 01 00 |........|,...H...|
|000000c0| 5c e3 01 00 70 e3 01 00 | 8a e3 01 00 9e e3 01 00 |\...p...|........|
|000000d0| b6 e3 01 00 c8 e3 01 00 | e0 e3 01 00 f8 e3 01 00 |........|........|
|000000e0| 0c e4 01 00 24 e4 01 00 | 36 e4 01 00 4a e4 01 00 |....$...|6...J...|
|000000f0| 6c e4 01 00 8a e4 01 00 | 9e e4 01 00 a8 e4 01 00 |l.......|........|
|00000100| c2 e4 01 00 da e4 01 00 | f0 e4 01 00 0c e5 01 00 |........|........|
|00000110| 24 e5 01 00 34 e5 01 00 | 4c e5 01 00 62 e5 01 00 |$...4...|L...b...|
|00000120| 80 e5 01 00 8e e5 01 00 | 9e e5 01 00 b6 e5 01 00 |........|........|
|00000130| c2 e5 01 00 d2 e5 01 00 | f6 e5 01 00 14 e6 01 00 |........|........|
|00000140| 2c e6 01 00 80 e2 01 00 | 5e e6 01 00 b4 e2 01 00 |,.......|^.......|
|00000150| 9e e6 01 00 ba e6 01 00 | ca e6 01 00 e6 e6 01 00 |........|........|
|00000160| fe e6 01 00 16 e7 01 00 | 38 e7 01 00 50 e7 01 00 |........|8...P...|
|00000170| 6e e7 01 00 86 e7 01 00 | a4 e7 01 00 c2 e7 01 00 |n.......|........|
|00000180| e4 e7 01 00 02 e8 01 00 | 1e e8 01 00 2a e8 01 00 |........|....*...|
|00000190| 3a e8 01 00 5a e8 01 00 | 70 e8 01 00 80 e8 01 00 |:...Z...|p.......|
|000001a0| 9a e8 01 00 b0 e8 01 00 | ca e8 01 00 ec e8 01 00 |........|........|
|000001b0| 0c e9 01 00 20 e9 01 00 | 34 e9 01 00 50 e9 01 00 |.... ...|4...P...|
|000001c0| 70 e9 01 00 82 e9 01 00 | 92 e9 01 00 ae e9 01 00 |p.......|........|
|000001d0| ca e9 01 00 d6 e9 01 00 | ec e9 01 00 fc e9 01 00 |........|........|
|000001e0| 14 ea 01 00 22 ea 01 00 | 3a ea 01 00 4e ea 01 00 |...."...|:...N...|
|000001f0| 5a ea 01 00 68 e2 01 00 | 80 e6 01 00 9c e2 01 00 |Z...h...|........|
|00000200| 2e e2 01 00 46 e6 01 00 | 20 e2 01 00 00 eb 01 00 |....F...| .......|
|00000210| 16 eb 01 00 32 eb 01 00 | 46 eb 01 00 00 00 00 00 |....2...|F.......|
|00000220| 7f 02 4b 65 54 69 63 6b | 43 6f 75 6e 74 00 07 02 |..KeTick|Count...|
|00000230| 4b 65 42 75 67 43 68 65 | 63 6b 45 78 00 00 6e 74 |KeBugChe|ckEx..nt|
|00000240| 6f 73 6b 72 6e 6c 2e 65 | 78 65 00 00 2a 00 54 64 |oskrnl.e|xe..*.Td|
|00000250| 69 4d 61 70 55 73 65 72 | 52 65 71 75 65 73 74 00 |iMapUser|Request.|
|00000260| 54 44 49 2e 53 59 53 00 | d1 04 52 74 6c 57 72 69 |TDI.SYS.|..RtlWri|
|00000270| 74 65 52 65 67 69 73 74 | 72 79 56 61 6c 75 65 00 |teRegist|ryValue.|
|00000280| ca 03 52 74 6c 41 70 70 | 65 6e 64 55 6e 69 63 6f |..RtlApp|endUnico|
|00000290| 64 65 54 6f 53 74 72 69 | 6e 67 00 00 42 00 45 78 |deToStri|ng..B.Ex|
|000002a0| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|000002b0| 54 61 67 00 4f 00 45 78 | 46 72 65 65 50 6f 6f 6c |Tag.O.Ex|FreePool|
|000002c0| 57 69 74 68 54 61 67 00 | 31 00 44 62 67 50 72 69 |WithTag.|1.DbgPri|
|000002d0| 6e 74 00 00 88 04 52 74 | 6c 51 75 65 72 79 52 65 |nt....Rt|lQueryRe|
|000002e0| 67 69 73 74 72 79 56 61 | 6c 75 65 73 00 00 f1 01 |gistryVa|lues....|
|000002f0| 49 6f 66 43 6f 6d 70 6c | 65 74 65 52 65 71 75 65 |IofCompl|eteReque|
|00000300| 73 74 00 00 61 03 50 72 | 6f 62 65 46 6f 72 57 72 |st..a.Pr|obeForWr|
|00000310| 69 74 65 00 4c 03 4f 62 | 66 44 65 72 65 66 65 72 |ite.L.Ob|fDerefer|
|00000320| 65 6e 63 65 4f 62 6a 65 | 63 74 00 00 44 03 4f 62 |enceObje|ct..D.Ob|
|00000330| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|00000340| 79 48 61 6e 64 6c 65 00 | 4c 00 45 78 45 76 65 6e |yHandle.|L.ExEven|
|00000350| 74 4f 62 6a 65 63 74 54 | 79 70 65 00 47 02 4b 65 |tObjectT|ype.G.Ke|
|00000360| 51 75 65 72 79 53 79 73 | 74 65 6d 54 69 6d 65 00 |QuerySys|temTime.|
|00000370| 0c 02 4b 65 44 65 6c 61 | 79 45 78 65 63 75 74 69 |..KeDela|yExecuti|
|00000380| 6f 6e 54 68 72 65 61 64 | 00 00 54 00 45 78 47 65 |onThread|..T.ExGe|
|00000390| 74 50 72 65 76 69 6f 75 | 73 4d 6f 64 65 00 6f 03 |tPreviou|sMode.o.|
|000003a0| 50 73 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |PsGetCur|rentProc|
|000003b0| 65 73 73 49 64 00 5e 01 | 49 6f 44 65 6c 65 74 65 |essId.^.|IoDelete|
|000003c0| 44 65 76 69 63 65 00 00 | 60 01 49 6f 44 65 6c 65 |Device..|`.IoDele|
|000003d0| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|000003e0| 3b 04 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |;.RtlIni|tUnicode|
|000003f0| 53 74 72 69 6e 67 00 00 | 29 02 4b 65 49 6e 69 74 |String..|).KeInit|
|00000400| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 54 01 49 6f |ializeEv|ent.T.Io|
|00000410| 43 72 65 61 74 65 53 79 | 6d 62 6f 6c 69 63 4c 69 |CreateSy|mbolicLi|
|00000420| 6e 6b 00 00 4b 01 49 6f | 43 72 65 61 74 65 44 65 |nk..K.Io|CreateDe|
|00000430| 76 69 63 65 00 00 42 03 | 4f 62 51 75 65 72 79 4e |vice..B.|ObQueryN|
|00000440| 61 6d 65 53 74 72 69 6e | 67 00 c9 03 52 74 6c 41 |ameStrin|g...RtlA|
|00000450| 70 70 65 6e 64 55 6e 69 | 63 6f 64 65 53 74 72 69 |ppendUni|codeStri|
|00000460| 6e 67 54 6f 53 74 72 69 | 6e 67 00 00 46 03 4f 62 |ngToStri|ng..F.Ob|
|00000470| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|00000480| 79 50 6f 69 6e 74 65 72 | 00 00 6a 01 49 6f 46 69 |yPointer|..j.IoFi|
|00000490| 6c 65 4f 62 6a 65 63 74 | 54 79 70 65 00 00 2b 05 |leObject|Type..+.|
|000004a0| 5a 77 43 6c 6f 73 65 00 | 80 02 4b 65 55 6e 73 74 |ZwClose.|..KeUnst|
|000004b0| 61 63 6b 44 65 74 61 63 | 68 50 72 6f 63 65 73 73 |ackDetac|hProcess|
|000004c0| 00 00 3b 03 4f 62 46 69 | 6e 64 48 61 6e 64 6c 65 |..;.ObFi|ndHandle|
|000004d0| 46 6f 72 4f 62 6a 65 63 | 74 00 df 02 4d 6d 53 65 |ForObjec|t...MmSe|
|000004e0| 63 74 69 6f 6e 4f 62 6a | 65 63 74 54 79 70 65 00 |ctionObj|ectType.|
|000004f0| 6c 05 5a 77 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |l.ZwQuer|yInforma|
|00000500| 74 69 6f 6e 50 72 6f 63 | 65 73 73 00 41 03 4f 62 |tionProc|ess.A.Ob|
|00000510| 4f 70 65 6e 4f 62 6a 65 | 63 74 42 79 50 6f 69 6e |OpenObje|ctByPoin|
|00000520| 74 65 72 00 9d 03 50 73 | 50 72 6f 63 65 73 73 54 |ter...Ps|ProcessT|
|00000530| 79 70 65 00 7b 02 4b 65 | 53 74 61 63 6b 41 74 74 |ype.{.Ke|StackAtt|
|00000540| 61 63 68 50 72 6f 63 65 | 73 73 00 00 77 01 49 6f |achProce|ss..w.Io|
|00000550| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|00000560| 73 00 9a 03 50 73 4c 6f | 6f 6b 75 70 50 72 6f 63 |s...PsLo|okupProc|
|00000570| 65 73 73 42 79 50 72 6f | 63 65 73 73 49 64 00 00 |essByPro|cessId..|
|00000580| 6d 02 4b 65 53 65 74 45 | 76 65 6e 74 00 00 0a 02 |m.KeSetE|vent....|
|00000590| 4b 65 43 6c 65 61 72 45 | 76 65 6e 74 00 00 86 02 |KeClearE|vent....|
|000005a0| 4b 65 57 61 69 74 46 6f | 72 53 69 6e 67 6c 65 4f |KeWaitFo|rSingleO|
|000005b0| 62 6a 65 63 74 00 55 05 | 5a 77 4f 70 65 6e 4b 65 |bject.U.|ZwOpenKe|
|000005c0| 79 00 60 03 50 72 6f 62 | 65 46 6f 72 52 65 61 64 |y.`.Prob|eForRead|
|000005d0| 00 00 3e 00 45 78 41 6c | 6c 6f 63 61 74 65 46 72 |..>.ExAl|locateFr|
|000005e0| 6f 6d 50 61 67 65 64 4c | 6f 6f 6b 61 73 69 64 65 |omPagedL|ookaside|
|000005f0| 4c 69 73 74 00 00 50 00 | 45 78 46 72 65 65 54 6f |List..P.|ExFreeTo|
|00000600| 50 61 67 65 64 4c 6f 6f | 6b 61 73 69 64 65 4c 69 |PagedLoo|kasideLi|
|00000610| 73 74 00 00 c0 04 52 74 | 6c 55 70 63 61 73 65 55 |st....Rt|lUpcaseU|
|00000620| 6e 69 63 6f 64 65 43 68 | 61 72 00 00 86 04 52 74 |nicodeCh|ar....Rt|
|00000630| 6c 50 72 65 66 69 78 55 | 6e 69 63 6f 64 65 53 74 |lPrefixU|nicodeSt|
|00000640| 72 69 6e 67 00 00 72 03 | 50 73 47 65 74 43 75 72 |ring..r.|PsGetCur|
|00000650| 72 65 6e 74 54 68 72 65 | 61 64 49 64 00 00 57 00 |rentThre|adId..W.|
|00000660| 45 78 49 6e 69 74 69 61 | 6c 69 7a 65 50 61 67 65 |ExInitia|lizePage|
|00000670| 64 4c 6f 6f 6b 61 73 69 | 64 65 4c 69 73 74 00 00 |dLookasi|deList..|
|00000680| 47 00 45 78 44 65 6c 65 | 74 65 50 61 67 65 64 4c |G.ExDele|tePagedL|
|00000690| 6f 6f 6b 61 73 69 64 65 | 4c 69 73 74 00 00 69 02 |ookaside|List..i.|
|000006a0| 4b 65 53 65 72 76 69 63 | 65 44 65 73 63 72 69 70 |KeServic|eDescrip|
|000006b0| 74 6f 72 54 61 62 6c 65 | 00 00 76 00 45 78 52 61 |torTable|..v.ExRa|
|000006c0| 69 73 65 53 74 61 74 75 | 73 00 58 00 45 78 49 6e |iseStatu|s.X.ExIn|
|000006d0| 69 74 69 61 6c 69 7a 65 | 52 65 73 6f 75 72 63 65 |itialize|Resource|
|000006e0| 4c 69 74 65 00 00 3d 02 | 4b 65 4c 65 61 76 65 43 |Lite..=.|KeLeaveC|
|000006f0| 72 69 74 69 63 61 6c 52 | 65 67 69 6f 6e 00 7c 00 |riticalR|egion.|.|
|00000700| 45 78 52 65 6c 65 61 73 | 65 52 65 73 6f 75 72 63 |ExReleas|eResourc|
|00000710| 65 4c 69 74 65 00 38 00 | 45 78 41 63 71 75 69 72 |eLite.8.|ExAcquir|
|00000720| 65 52 65 73 6f 75 72 63 | 65 45 78 63 6c 75 73 69 |eResourc|eExclusi|
|00000730| 76 65 4c 69 74 65 00 00 | 12 02 4b 65 45 6e 74 65 |veLite..|..KeEnte|
|00000740| 72 43 72 69 74 69 63 61 | 6c 52 65 67 69 6f 6e 00 |rCritica|lRegion.|
|00000750| 39 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |9.ExAcqu|ireResou|
|00000760| 72 63 65 53 68 61 72 65 | 64 4c 69 74 65 00 48 00 |rceShare|dLite.H.|
|00000770| 45 78 44 65 6c 65 74 65 | 52 65 73 6f 75 72 63 65 |ExDelete|Resource|
|00000780| 4c 69 74 65 00 00 67 00 | 45 78 49 6e 74 65 72 6c |Lite..g.|ExInterl|
|00000790| 6f 63 6b 65 64 50 6f 70 | 45 6e 74 72 79 53 4c 69 |ockedPop|EntrySLi|
|000007a0| 73 74 00 00 69 00 45 78 | 49 6e 74 65 72 6c 6f 63 |st..i.Ex|Interloc|
|000007b0| 6b 65 64 50 75 73 68 45 | 6e 74 72 79 53 4c 69 73 |kedPushE|ntrySLis|
|000007c0| 74 00 56 00 45 78 49 6e | 69 74 69 61 6c 69 7a 65 |t.V.ExIn|itialize|
|000007d0| 4e 50 61 67 65 64 4c 6f | 6f 6b 61 73 69 64 65 4c |NPagedLo|okasideL|
|000007e0| 69 73 74 00 46 00 45 78 | 44 65 6c 65 74 65 4e 50 |ist.F.Ex|DeleteNP|
|000007f0| 61 67 65 64 4c 6f 6f 6b | 61 73 69 64 65 4c 69 73 |agedLook|asideLis|
|00000800| 74 00 bc 02 4d 6d 47 65 | 74 53 79 73 74 65 6d 52 |t...MmGe|tSystemR|
|00000810| 6f 75 74 69 6e 65 41 64 | 64 72 65 73 73 00 70 01 |outineAd|dress.p.|
|00000820| 49 6f 46 72 65 65 4d 64 | 6c 00 e7 02 4d 6d 55 6e |IoFreeMd|l...MmUn|
|00000830| 6c 6f 63 6b 50 61 67 65 | 73 00 cc 02 4d 6d 4d 61 |lockPage|s...MmMa|
|00000840| 70 4c 6f 63 6b 65 64 50 | 61 67 65 73 53 70 65 63 |pLockedP|agesSpec|
|00000850| 69 66 79 43 61 63 68 65 | 00 00 d8 02 4d 6d 50 72 |ifyCache|....MmPr|
|00000860| 6f 62 65 41 6e 64 4c 6f | 63 6b 50 61 67 65 73 00 |obeAndLo|ckPages.|
|00000870| 32 01 49 6f 41 6c 6c 6f | 63 61 74 65 4d 64 6c 00 |2.IoAllo|cateMdl.|
|00000880| 45 03 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |E.ObRefe|renceObj|
|00000890| 65 63 74 42 79 4e 61 6d | 65 00 66 01 49 6f 44 72 |ectByNam|e.f.IoDr|
|000008a0| 69 76 65 72 4f 62 6a 65 | 63 74 54 79 70 65 00 00 |iverObje|ctType..|
|000008b0| da 03 52 74 6c 43 6f 6d | 70 61 72 65 55 6e 69 63 |..RtlCom|pareUnic|
|000008c0| 6f 64 65 53 74 72 69 6e | 67 00 88 02 4b 65 66 52 |odeStrin|g...KefR|
|000008d0| 65 6c 65 61 73 65 53 70 | 69 6e 4c 6f 63 6b 46 72 |eleaseSp|inLockFr|
|000008e0| 6f 6d 44 70 63 4c 65 76 | 65 6c 00 00 87 02 4b 65 |omDpcLev|el....Ke|
|000008f0| 66 41 63 71 75 69 72 65 | 53 70 69 6e 4c 6f 63 6b |fAcquire|SpinLock|
|00000900| 41 74 44 70 63 4c 65 76 | 65 6c 00 00 c0 02 4d 6d |AtDpcLev|el....Mm|
|00000910| 49 73 41 64 64 72 65 73 | 73 56 61 6c 69 64 00 00 |IsAddres|sValid..|
|00000920| d7 03 52 74 6c 43 6f 6d | 70 61 72 65 4d 65 6d 6f |..RtlCom|pareMemo|
|00000930| 72 79 00 00 85 01 49 6f | 47 65 74 52 65 6c 61 74 |ry....Io|GetRelat|
|00000940| 65 64 44 65 76 69 63 65 | 4f 62 6a 65 63 74 00 00 |edDevice|Object..|
|00000950| 3b 01 49 6f 42 75 69 6c | 64 44 65 76 69 63 65 49 |;.IoBuil|dDeviceI|
|00000960| 6f 43 6f 6e 74 72 6f 6c | 52 65 71 75 65 73 74 00 |oControl|Request.|
|00000970| 71 00 45 78 51 75 65 75 | 65 57 6f 72 6b 49 74 65 |q.ExQueu|eWorkIte|
|00000980| 6d 00 f0 01 49 6f 66 43 | 61 6c 6c 44 72 69 76 65 |m...IofC|allDrive|
|00000990| 72 00 7b 01 49 6f 47 65 | 74 44 65 76 69 63 65 4f |r.{.IoGe|tDeviceO|
|000009a0| 62 6a 65 63 74 50 6f 69 | 6e 74 65 72 00 00 4b 04 |bjectPoi|nter..K.|
|000009b0| 52 74 6c 49 6e 74 65 67 | 65 72 54 6f 55 6e 69 63 |RtlInteg|erToUnic|
|000009c0| 6f 64 65 53 74 72 69 6e | 67 00 6f 01 49 6f 46 72 |odeStrin|g.o.IoFr|
|000009d0| 65 65 49 72 70 00 19 02 | 4b 65 47 65 74 43 75 72 |eeIrp...|KeGetCur|
|000009e0| 72 65 6e 74 54 68 72 65 | 61 64 00 00 31 01 49 6f |rentThre|ad..1.Io|
|000009f0| 41 6c 6c 6f 63 61 74 65 | 49 72 70 00 65 05 5a 77 |Allocate|Irp.e.Zw|
|00000a00| 51 75 65 72 79 44 69 72 | 65 63 74 6f 72 79 46 69 |QueryDir|ectoryFi|
|00000a10| 6c 65 00 00 53 05 5a 77 | 4f 70 65 6e 46 69 6c 65 |le..S.Zw|OpenFile|
|00000a20| 00 00 f3 01 4b 64 44 65 | 62 75 67 67 65 72 4e 6f |....KdDe|buggerNo|
|00000a30| 74 50 72 65 73 65 6e 74 | 00 00 f2 01 4b 64 44 65 |tPresent|....KdDe|
|00000a40| 62 75 67 67 65 72 45 6e | 61 62 6c 65 64 00 bf 04 |buggerEn|abled...|
|00000a50| 52 74 6c 55 6e 77 69 6e | 64 00 bb 04 52 74 6c 55 |RtlUnwin|d...RtlU|
|00000a60| 6e 69 63 6f 64 65 54 6f | 4d 75 6c 74 69 42 79 74 |nicodeTo|MultiByt|
|00000a70| 65 4e 00 00 01 00 45 78 | 52 65 6c 65 61 73 65 46 |eN....Ex|ReleaseF|
|00000a80| 61 73 74 4d 75 74 65 78 | 00 00 00 00 45 78 41 63 |astMutex|....ExAc|
|00000a90| 71 75 69 72 65 46 61 73 | 74 4d 75 74 65 78 00 00 |quireFas|tMutex..|
|00000aa0| 40 00 4b 65 47 65 74 43 | 75 72 72 65 6e 74 49 72 |@.KeGetC|urrentIr|
|00000ab0| 71 6c 00 00 4f 00 4b 66 | 52 65 6c 65 61 73 65 53 |ql..O.Kf|ReleaseS|
|00000ac0| 70 69 6e 4c 6f 63 6b 00 | 4c 00 4b 66 41 63 71 75 |pinLock.|L.KfAcqu|
|00000ad0| 69 72 65 53 70 69 6e 4c | 6f 63 6b 00 42 00 4b 65 |ireSpinL|ock.B.Ke|
|00000ae0| 51 75 65 72 79 50 65 72 | 66 6f 72 6d 61 6e 63 65 |QueryPer|formance|
|00000af0| 43 6f 75 6e 74 65 72 00 | 48 41 4c 2e 64 6c 6c 00 |Counter.|HAL.dll.|
|00000b00| e9 02 4d 6d 55 6e 6d 61 | 70 4c 6f 63 6b 65 64 50 |..MmUnma|pLockedP|
|00000b10| 61 67 65 73 00 00 75 05 | 5a 77 51 75 65 72 79 53 |ages..u.|ZwQueryS|
|00000b20| 79 73 74 65 6d 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |ystemInf|ormation|
|00000b30| 00 00 21 01 49 6e 69 74 | 53 61 66 65 42 6f 6f 74 |..!.Init|SafeBoot|
|00000b40| 4d 6f 64 65 00 00 6e 02 | 4b 65 53 65 74 45 76 65 |Mode..n.|KeSetEve|
|00000b50| 6e 74 42 6f 6f 73 74 50 | 72 69 6f 72 69 74 79 00 |ntBoostP|riority.|
|00000b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+