home *** CD-ROM | disk | FTP | other *** search
Unknown | 2007-03-09 | 4.4 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| e8 98 05 00 00 00 00 00 | 00 00 00 00 e8 a6 05 00 |........|........|
|00000010| 24 03 00 00 64 98 05 00 | 00 00 00 00 00 00 00 00 |$...d...|........|
|00000020| 90 a7 05 00 a0 02 00 00 | e0 98 05 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 ae a7 05 00 | 1c 03 00 00 84 98 05 00 |........|........|
|00000040| 00 00 00 00 00 00 00 00 | a2 a9 05 00 c0 02 00 00 |........|........|
|00000050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000060| 00 00 00 00 7a a7 05 00 | 64 a7 05 00 4c a7 05 00 |....z...|d...L...|
|00000070| 3e a7 05 00 2a a7 05 00 | 16 a7 05 00 02 a7 05 00 |>...*...|........|
|00000080| 00 00 00 00 8a a9 05 00 | 38 a9 05 00 22 a9 05 00 |........|8..."...|
|00000090| 4e a9 05 00 fe a8 05 00 | ea a8 05 00 10 a9 05 00 |N.......|........|
|000000a0| be a8 05 00 a8 a8 05 00 | d4 a8 05 00 8a a8 05 00 |........|........|
|000000b0| 74 a8 05 00 96 a8 05 00 | 5e a8 05 00 32 a8 05 00 |t.......|^...2...|
|000000c0| 18 a8 05 00 4c a8 05 00 | 00 a8 05 00 ce a7 05 00 |....L...|........|
|000000d0| b6 a7 05 00 e6 a7 05 00 | 6e a9 05 00 00 00 00 00 |........|n.......|
|000000e0| 98 a7 05 00 00 00 00 00 | 7c 9e 05 00 94 9e 05 00 |........||.......|
|000000f0| a2 9e 05 00 c2 9e 05 00 | d6 9e 05 00 72 9e 05 00 |........|....r...|
|00000100| e4 9e 05 00 00 9f 05 00 | 18 9f 05 00 28 9f 05 00 |........|....(...|
|00000110| 32 9f 05 00 3e 9f 05 00 | 4a 9f 05 00 62 9f 05 00 |2...>...|J...b...|
|00000120| 76 9f 05 00 8a 9f 05 00 | a6 9f 05 00 b8 9f 05 00 |v.......|........|
|00000130| ca 9f 05 00 e4 9f 05 00 | f6 9f 05 00 08 a0 05 00 |........|........|
|00000140| 18 a0 05 00 2e a0 05 00 | 44 a0 05 00 30 9e 05 00 |........|D...0...|
|00000150| 56 9e 05 00 3e 9e 05 00 | a8 a0 05 00 be a0 05 00 |V...>...|........|
|00000160| da a0 05 00 f6 a0 05 00 | 06 a1 05 00 12 a1 05 00 |........|........|
|00000170| 34 a1 05 00 4e a1 05 00 | 5e a1 05 00 80 a1 05 00 |4...N...|^.......|
|00000180| a2 a1 05 00 c4 a1 05 00 | dc a1 05 00 f4 a1 05 00 |........|........|
|00000190| 04 a2 05 00 10 a2 05 00 | 1a a2 05 00 32 a2 05 00 |........|....2...|
|000001a0| 4a a2 05 00 62 a2 05 00 | 70 a2 05 00 80 a2 05 00 |J...b...|p.......|
|000001b0| 90 a2 05 00 a8 a2 05 00 | bc a2 05 00 dc a2 05 00 |........|........|
|000001c0| 60 a0 05 00 76 a0 05 00 | 0c a3 05 00 8e a0 05 00 |`...v...|........|
|000001d0| e4 9d 05 00 54 a3 05 00 | 6e a3 05 00 7a a3 05 00 |....T...|n...z...|
|000001e0| 88 a3 05 00 9a a3 05 00 | a8 a3 05 00 c2 a3 05 00 |........|........|
|000001f0| d8 a3 05 00 f4 a3 05 00 | 06 a4 05 00 22 a4 05 00 |........|...."...|
|00000200| 34 a4 05 00 52 a4 05 00 | 60 a4 05 00 76 a4 05 00 |4...R...|`...v...|
|00000210| 8a a4 05 00 96 a4 05 00 | ac a4 05 00 bc a4 05 00 |........|........|
|00000220| cc a4 05 00 e2 a4 05 00 | fc a4 05 00 08 a5 05 00 |........|........|
|00000230| 16 a5 05 00 26 a5 05 00 | 46 a5 05 00 50 a5 05 00 |....&...|F...P...|
|00000240| 60 a5 05 00 7c a5 05 00 | 98 a5 05 00 a6 a5 05 00 |`...|...|........|
|00000250| b2 a5 05 00 bc a5 05 00 | da a5 05 00 ee a5 05 00 |........|........|
|00000260| 02 a6 05 00 0c a6 05 00 | 20 a6 05 00 42 a6 05 00 |........| ...B...|
|00000270| 4e a6 05 00 62 a6 05 00 | 6e a6 05 00 8a a6 05 00 |N...b...|n.......|
|00000280| a4 a6 05 00 be a6 05 00 | ce a6 05 00 de a6 05 00 |........|........|
|00000290| f6 a6 05 00 de 9b 05 00 | ca 9b 05 00 ba 9b 05 00 |........|........|
|000002a0| a2 9b 05 00 8c 9b 05 00 | 76 9b 05 00 5a 9b 05 00 |........|v...Z...|
|000002b0| 46 9b 05 00 18 9e 05 00 | 04 9e 05 00 8c 9d 05 00 |F.......|........|
|000002c0| cc 9d 05 00 ae 9d 05 00 | 44 9d 05 00 74 9d 05 00 |........|D...t...|
|000002d0| 5c 9d 05 00 0e 9d 05 00 | 32 9d 05 00 28 9d 05 00 |\.......|2...(...|
|000002e0| dc 9c 05 00 fe 9c 05 00 | e6 9c 05 00 90 9c 05 00 |........|........|
|000002f0| ce 9c 05 00 ae 9c 05 00 | 48 9c 05 00 78 9c 05 00 |........|H...x...|
|00000300| 5a 9c 05 00 06 9c 05 00 | 2c 9c 05 00 1e 9c 05 00 |Z.......|,.......|
|00000310| 20 a3 05 00 ee 9b 05 00 | 3e a3 05 00 e8 a2 05 00 | .......|>.......|
|00000320| 2c 9b 05 00 f2 a2 05 00 | 00 00 00 00 67 02 50 73 |,.......|....g.Ps|
|00000330| 54 65 72 6d 69 6e 61 74 | 65 53 79 73 74 65 6d 54 |Terminat|eSystemT|
|00000340| 68 72 65 61 64 00 86 01 | 4b 65 51 75 65 72 79 53 |hread...|KeQueryS|
|00000350| 79 73 74 65 6d 54 69 6d | 65 00 b6 01 4b 65 57 61 |ystemTim|e...KeWa|
|00000360| 69 74 46 6f 72 4d 75 6c | 74 69 70 6c 65 4f 62 6a |itForMul|tipleObj|
|00000370| 65 63 74 73 00 00 a7 01 | 4b 65 53 65 74 50 72 69 |ects....|KeSetPri|
|00000380| 6f 72 69 74 79 54 68 72 | 65 61 64 00 60 01 4b 65 |orityThr|ead.`.Ke|
|00000390| 47 65 74 43 75 72 72 65 | 6e 74 54 68 72 65 61 64 |GetCurre|ntThread|
|000003a0| 00 00 51 02 50 73 43 72 | 65 61 74 65 53 79 73 74 |..Q.PsCr|eateSyst|
|000003b0| 65 6d 54 68 72 65 61 64 | 00 00 57 02 50 73 47 65 |emThread|..W.PsGe|
|000003c0| 74 56 65 72 73 69 6f 6e | 00 00 70 01 4b 65 49 6e |tVersion|..p.KeIn|
|000003d0| 69 74 69 61 6c 69 7a 65 | 45 76 65 6e 74 00 85 01 |itialize|Event...|
|000003e0| 4b 65 50 75 6c 73 65 45 | 76 65 6e 74 00 00 44 02 |KePulseE|vent..D.|
|000003f0| 4f 62 66 44 65 72 65 66 | 65 72 65 6e 63 65 4f 62 |ObfDeref|erenceOb|
|00000400| 6a 65 63 74 00 00 b8 01 | 4b 65 57 61 69 74 46 6f |ject....|KeWaitFo|
|00000410| 72 53 69 6e 67 6c 65 4f | 62 6a 65 63 74 00 a2 01 |rSingleO|bject...|
|00000420| 4b 65 53 65 74 45 76 65 | 6e 74 00 00 3f 02 4f 62 |KeSetEve|nt..?.Ob|
|00000430| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|00000440| 79 48 61 6e 64 6c 65 00 | 92 01 4b 65 52 65 6c 65 |yHandle.|..KeRele|
|00000450| 61 73 65 4d 75 74 65 78 | 00 00 39 00 45 78 44 65 |aseMutex|..9.ExDe|
|00000460| 6c 65 74 65 4e 50 61 67 | 65 64 4c 6f 6f 6b 61 73 |leteNPag|edLookas|
|00000470| 69 64 65 4c 69 73 74 00 | d6 00 49 6e 74 65 72 6c |ideList.|..Interl|
|00000480| 6f 63 6b 65 64 44 65 63 | 72 65 6d 65 6e 74 00 00 |ockedDec|rement..|
|00000490| 59 00 45 78 49 6e 74 65 | 72 6c 6f 63 6b 65 64 50 |Y.ExInte|rlockedP|
|000004a0| 75 73 68 45 6e 74 72 79 | 53 4c 69 73 74 00 78 00 |ushEntry|SList.x.|
|000004b0| 45 78 66 49 6e 74 65 72 | 6c 6f 63 6b 65 64 52 65 |ExfInter|lockedRe|
|000004c0| 6d 6f 76 65 48 65 61 64 | 4c 69 73 74 00 00 a2 03 |moveHead|List....|
|000004d0| 5a 77 57 72 69 74 65 46 | 69 6c 65 00 d2 03 73 70 |ZwWriteF|ile...sp|
|000004e0| 72 69 6e 74 66 00 95 03 | 5a 77 53 65 74 49 6e 66 |rintf...|ZwSetInf|
|000004f0| 6f 72 6d 61 74 69 6f 6e | 46 69 6c 65 00 00 60 03 |ormation|File..`.|
|00000500| 5a 77 43 72 65 61 74 65 | 46 69 6c 65 00 00 57 01 |ZwCreate|File..W.|
|00000510| 4b 65 44 65 6c 61 79 45 | 78 65 63 75 74 69 6f 6e |KeDelayE|xecution|
|00000520| 54 68 72 65 61 64 00 00 | 5b 03 5a 77 43 6c 6f 73 |Thread..|[.ZwClos|
|00000530| 65 00 62 00 45 78 51 75 | 65 75 65 57 6f 72 6b 49 |e.b.ExQu|eueWorkI|
|00000540| 74 65 6d 00 92 02 52 74 | 6c 43 6f 70 79 55 6e 69 |tem...Rt|lCopyUni|
|00000550| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 d0 02 52 74 |codeStri|ng....Rt|
|00000560| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|00000570| 6e 67 00 00 76 01 4b 65 | 49 6e 69 74 69 61 6c 69 |ng..v.Ke|Initiali|
|00000580| 7a 65 53 70 69 6e 4c 6f | 63 6b 00 00 47 00 45 78 |zeSpinLo|ck..G.Ex|
|00000590| 49 6e 69 74 69 61 6c 69 | 7a 65 4e 50 61 67 65 64 |Initiali|zeNPaged|
|000005a0| 4c 6f 6f 6b 61 73 69 64 | 65 4c 69 73 74 00 57 00 |Lookasid|eList.W.|
|000005b0| 45 78 49 6e 74 65 72 6c | 6f 63 6b 65 64 50 6f 70 |ExInterl|ockedPop|
|000005c0| 45 6e 74 72 79 53 4c 69 | 73 74 00 00 d9 00 49 6e |EntrySLi|st....In|
|000005d0| 74 65 72 6c 6f 63 6b 65 | 64 49 6e 63 72 65 6d 65 |terlocke|dIncreme|
|000005e0| 6e 74 00 00 75 00 45 78 | 66 49 6e 74 65 72 6c 6f |nt..u.Ex|fInterlo|
|000005f0| 63 6b 65 64 49 6e 73 65 | 72 74 54 61 69 6c 4c 69 |ckedInse|rtTailLi|
|00000600| 73 74 00 00 73 01 4b 65 | 49 6e 69 74 69 61 6c 69 |st..s.Ke|Initiali|
|00000610| 7a 65 4d 75 74 65 78 00 | af 02 52 74 6c 45 71 75 |zeMutex.|..RtlEqu|
|00000620| 61 6c 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |alUnicod|eString.|
|00000630| 42 00 45 78 46 72 65 65 | 50 6f 6f 6c 00 00 36 00 |B.ExFree|Pool..6.|
|00000640| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|00000650| 74 68 54 61 67 00 8b 03 | 5a 77 51 75 65 72 79 53 |thTag...|ZwQueryS|
|00000660| 79 73 74 65 6d 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |ystemInf|ormation|
|00000670| 00 00 c4 03 69 73 64 69 | 67 69 74 00 c3 02 52 74 |....isdi|git...Rt|
|00000680| 6c 46 72 65 65 55 6e 69 | 63 6f 64 65 53 74 72 69 |lFreeUni|codeStri|
|00000690| 6e 67 00 00 8e 03 5a 77 | 52 65 61 64 46 69 6c 65 |ng....Zw|ReadFile|
|000006a0| 00 00 77 02 52 74 6c 41 | 6e 73 69 53 74 72 69 6e |..w.RtlA|nsiStrin|
|000006b0| 67 54 6f 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |gToUnico|deString|
|000006c0| 00 00 cd 02 52 74 6c 49 | 6e 69 74 41 6e 73 69 53 |....RtlI|nitAnsiS|
|000006d0| 74 72 69 6e 67 00 b2 01 | 4b 65 54 69 63 6b 43 6f |tring...|KeTickCo|
|000006e0| 75 6e 74 00 7b 02 52 74 | 6c 41 70 70 65 6e 64 55 |unt.{.Rt|lAppendU|
|000006f0| 6e 69 63 6f 64 65 54 6f | 53 74 72 69 6e 67 00 00 |nicodeTo|String..|
|00000700| 54 02 50 73 47 65 74 43 | 75 72 72 65 6e 74 50 72 |T.PsGetC|urrentPr|
|00000710| 6f 63 65 73 73 49 64 00 | 27 00 44 62 67 42 72 65 |ocessId.|'.DbgBre|
|00000720| 61 6b 50 6f 69 6e 74 00 | c7 03 69 73 73 70 61 63 |akPoint.|..isspac|
|00000730| 65 00 b4 03 5f 73 74 72 | 69 63 6d 70 00 00 e4 03 |e..._str|icmp....|
|00000740| 76 73 70 72 69 6e 74 66 | 00 00 55 02 50 73 47 65 |vsprintf|..U.PsGe|
|00000750| 74 43 75 72 72 65 6e 74 | 54 68 72 65 61 64 49 64 |tCurrent|ThreadId|
|00000760| 00 00 df 01 4d 6d 49 73 | 41 64 64 72 65 73 73 56 |....MmIs|AddressV|
|00000770| 61 6c 69 64 00 00 45 00 | 45 78 47 65 74 50 72 65 |alid..E.|ExGetPre|
|00000780| 76 69 6f 75 73 4d 6f 64 | 65 00 11 01 49 6f 47 65 |viousMod|e...IoGe|
|00000790| 74 52 65 6c 61 74 65 64 | 44 65 76 69 63 65 4f 62 |tRelated|DeviceOb|
|000007a0| 6a 65 63 74 00 00 fb 00 | 49 6f 44 65 6c 65 74 65 |ject....|IoDelete|
|000007b0| 44 65 76 69 63 65 00 00 | e3 00 49 6f 41 74 74 61 |Device..|..IoAtta|
|000007c0| 63 68 44 65 76 69 63 65 | 00 00 e4 00 49 6f 41 74 |chDevice|....IoAt|
|000007d0| 74 61 63 68 44 65 76 69 | 63 65 42 79 50 6f 69 6e |tachDevi|ceByPoin|
|000007e0| 74 65 72 00 f3 00 49 6f | 43 72 65 61 74 65 44 65 |ter...Io|CreateDe|
|000007f0| 76 69 63 65 00 00 fd 00 | 49 6f 44 65 74 61 63 68 |vice....|IoDetach|
|00000800| 44 65 76 69 63 65 00 00 | 44 01 49 6f 66 43 61 6c |Device..|D.IofCal|
|00000810| 6c 44 72 69 76 65 72 00 | 45 01 49 6f 66 43 6f 6d |lDriver.|E.IofCom|
|00000820| 70 6c 65 74 65 52 65 71 | 75 65 73 74 00 00 45 02 |pleteReq|uest..E.|
|00000830| 4f 62 66 52 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |ObfRefer|enceObje|
|00000840| 63 74 00 00 f5 00 49 6f | 43 72 65 61 74 65 4e 6f |ct....Io|CreateNo|
|00000850| 74 69 66 69 63 61 74 69 | 6f 6e 45 76 65 6e 74 00 |tificati|onEvent.|
|00000860| d7 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 45 78 63 |..Interl|ockedExc|
|00000870| 68 61 6e 67 65 00 41 01 | 49 6f 57 72 69 74 65 45 |hange.A.|IoWriteE|
|00000880| 72 72 6f 72 4c 6f 67 45 | 6e 74 72 79 00 00 df 00 |rrorLogE|ntry....|
|00000890| 49 6f 41 6c 6c 6f 63 61 | 74 65 45 72 72 6f 72 4c |IoAlloca|teErrorL|
|000008a0| 6f 67 45 6e 74 72 79 00 | 0c 01 49 6f 47 65 74 43 |ogEntry.|..IoGetC|
|000008b0| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 00 8a 03 |urrentPr|ocess...|
|000008c0| 5a 77 51 75 65 72 79 53 | 79 6d 62 6f 6c 69 63 4c |ZwQueryS|ymbolicL|
|000008d0| 69 6e 6b 4f 62 6a 65 63 | 74 00 7d 03 5a 77 4f 70 |inkObjec|t.}.ZwOp|
|000008e0| 65 6e 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 4f 62 |enSymbol|icLinkOb|
|000008f0| 6a 65 63 74 00 00 9b 03 | 5a 77 53 65 74 56 61 6c |ject....|ZwSetVal|
|00000900| 75 65 4b 65 79 00 79 03 | 5a 77 4f 70 65 6e 4b 65 |ueKey.y.|ZwOpenKe|
|00000910| 79 00 7a 02 52 74 6c 41 | 70 70 65 6e 64 55 6e 69 |y.z.RtlA|ppendUni|
|00000920| 63 6f 64 65 53 74 72 69 | 6e 67 54 6f 53 74 72 69 |codeStri|ngToStri|
|00000930| 6e 67 00 00 f8 02 52 74 | 6c 51 75 65 72 79 52 65 |ng....Rt|lQueryRe|
|00000940| 67 69 73 74 72 79 56 61 | 6c 75 65 73 00 00 7a 03 |gistryVa|lues..z.|
|00000950| 5a 77 4f 70 65 6e 50 72 | 6f 63 65 73 73 00 28 01 |ZwOpenPr|ocess.(.|
|00000960| 49 6f 52 65 67 69 73 74 | 65 72 53 68 75 74 64 6f |IoRegist|erShutdo|
|00000970| 77 6e 4e 6f 74 69 66 69 | 63 61 74 69 6f 6e 00 00 |wnNotifi|cation..|
|00000980| 64 02 50 73 53 65 74 43 | 72 65 61 74 65 54 68 72 |d.PsSetC|reateThr|
|00000990| 65 61 64 4e 6f 74 69 66 | 79 52 6f 75 74 69 6e 65 |eadNotif|yRoutine|
|000009a0| 00 00 63 02 50 73 53 65 | 74 43 72 65 61 74 65 50 |..c.PsSe|tCreateP|
|000009b0| 72 6f 63 65 73 73 4e 6f | 74 69 66 79 52 6f 75 74 |rocessNo|tifyRout|
|000009c0| 69 6e 65 00 fc 00 49 6f | 44 65 6c 65 74 65 53 79 |ine...Io|DeleteSy|
|000009d0| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 f7 00 49 6f |mbolicLi|nk....Io|
|000009e0| 43 72 65 61 74 65 53 79 | 6d 62 6f 6c 69 63 4c 69 |CreateSy|mbolicLi|
|000009f0| 6e 6b 00 00 07 02 4e 74 | 42 75 69 6c 64 4e 75 6d |nk....Nt|BuildNum|
|00000a00| 62 65 72 00 b2 03 5f 73 | 6e 70 72 69 6e 74 66 00 |ber..._s|nprintf.|
|00000a10| ce 03 6d 65 6d 6d 6f 76 | 65 00 19 03 52 74 6c 55 |..memmov|e...RtlU|
|00000a20| 70 63 61 73 65 55 6e 69 | 63 6f 64 65 43 68 61 72 |pcaseUni|codeChar|
|00000a30| 00 00 2f 02 4e 74 57 61 | 69 74 46 6f 72 53 69 6e |../.NtWa|itForSin|
|00000a40| 67 6c 65 4f 62 6a 65 63 | 74 00 82 03 5a 77 51 75 |gleObjec|t...ZwQu|
|00000a50| 65 72 79 44 69 72 65 63 | 74 6f 72 79 46 69 6c 65 |eryDirec|toryFile|
|00000a60| 00 00 78 03 5a 77 4f 70 | 65 6e 46 69 6c 65 00 00 |..x.ZwOp|enFile..|
|00000a70| 5f 03 5a 77 43 72 65 61 | 74 65 45 76 65 6e 74 00 |_.ZwCrea|teEvent.|
|00000a80| f4 00 49 6f 43 72 65 61 | 74 65 46 69 6c 65 00 00 |..IoCrea|teFile..|
|00000a90| 29 02 4e 74 53 65 74 49 | 6e 66 6f 72 6d 61 74 69 |).NtSetI|nformati|
|00000aa0| 6f 6e 46 69 6c 65 00 00 | c0 02 52 74 6c 46 72 65 |onFile..|..RtlFre|
|00000ab0| 65 41 6e 73 69 53 74 72 | 69 6e 67 00 0f 03 52 74 |eAnsiStr|ing...Rt|
|00000ac0| 6c 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |lUnicode|StringTo|
|00000ad0| 41 6e 73 69 53 74 72 69 | 6e 67 00 00 bc 03 5f 77 |AnsiStri|ng...._w|
|00000ae0| 63 73 69 63 6d 70 00 00 | ed 03 77 63 73 6e 63 70 |csicmp..|..wcsncp|
|00000af0| 79 00 1e 02 4e 74 51 75 | 65 72 79 49 6e 66 6f 72 |y...NtQu|eryInfor|
|00000b00| 6d 61 74 69 6f 6e 41 74 | 6f 6d 00 00 86 02 52 74 |mationAt|om....Rt|
|00000b10| 6c 43 6f 6d 70 61 72 65 | 4d 65 6d 6f 72 79 00 00 |lCompare|Memory..|
|00000b20| d5 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 43 6f 6d |..Interl|ockedCom|
|00000b30| 70 61 72 65 45 78 63 68 | 61 6e 67 65 00 00 0d 03 |pareExch|ange....|
|00000b40| 52 74 6c 54 69 6d 65 54 | 6f 54 69 6d 65 46 69 65 |RtlTimeT|oTimeFie|
|00000b50| 6c 64 73 00 70 00 45 78 | 53 79 73 74 65 6d 54 69 |lds.p.Ex|SystemTi|
|00000b60| 6d 65 54 6f 4c 6f 63 61 | 6c 54 69 6d 65 00 2a 00 |meToLoca|lTime.*.|
|00000b70| 44 62 67 50 72 69 6e 74 | 00 00 bb 03 5f 76 73 6e |DbgPrint|...._vsn|
|00000b80| 70 72 69 6e 74 66 00 00 | 8c 03 5a 77 51 75 65 72 |printf..|..ZwQuer|
|00000b90| 79 56 61 6c 75 65 4b 65 | 79 00 61 03 5a 77 43 72 |yValueKe|y.a.ZwCr|
|00000ba0| 65 61 74 65 4b 65 79 00 | 40 02 4f 62 52 65 66 65 |eateKey.|@.ObRefe|
|00000bb0| 72 65 6e 63 65 4f 62 6a | 65 63 74 42 79 4e 61 6d |renceObj|ectByNam|
|00000bc0| 65 00 02 01 49 6f 44 72 | 69 76 65 72 4f 62 6a 65 |e...IoDr|iverObje|
|00000bd0| 63 74 54 79 70 65 00 00 | 9e 01 4b 65 53 65 72 76 |ctType..|..KeServ|
|00000be0| 69 63 65 44 65 73 63 72 | 69 70 74 6f 72 54 61 62 |iceDescr|iptorTab|
|00000bf0| 6c 65 00 00 59 01 4b 65 | 44 65 74 61 63 68 50 72 |le..Y.Ke|DetachPr|
|00000c00| 6f 63 65 73 73 00 84 03 | 5a 77 51 75 65 72 79 49 |ocess...|ZwQueryI|
|00000c10| 6e 66 6f 72 6d 61 74 69 | 6f 6e 50 72 6f 63 65 73 |nformati|onProces|
|00000c20| 73 00 4f 01 4b 65 41 74 | 74 61 63 68 50 72 6f 63 |s.O.KeAt|tachProc|
|00000c30| 65 73 73 00 5b 02 50 73 | 4c 6f 6f 6b 75 70 50 72 |ess.[.Ps|LookupPr|
|00000c40| 6f 63 65 73 73 42 79 50 | 72 6f 63 65 73 73 49 64 |ocessByP|rocessId|
|00000c50| 00 00 65 03 5a 77 44 65 | 6c 65 74 65 4b 65 79 00 |..e.ZwDe|leteKey.|
|00000c60| f8 01 4d 6d 55 6e 6d 61 | 70 4c 6f 63 6b 65 64 50 |..MmUnma|pLockedP|
|00000c70| 61 67 65 73 00 00 e7 01 | 4d 6d 4d 61 70 4c 6f 63 |ages....|MmMapLoc|
|00000c80| 6b 65 64 50 61 67 65 73 | 00 00 08 01 49 6f 46 72 |kedPages|....IoFr|
|00000c90| 65 65 4d 64 6c 00 ed 01 | 4d 6d 50 72 6f 62 65 41 |eeMdl...|MmProbeA|
|00000ca0| 6e 64 4c 6f 63 6b 50 61 | 67 65 73 00 e1 00 49 6f |ndLockPa|ges...Io|
|00000cb0| 41 6c 6c 6f 63 61 74 65 | 4d 64 6c 00 f6 01 4d 6d |Allocate|Mdl...Mm|
|00000cc0| 55 6e 6c 6f 63 6b 50 61 | 67 65 73 00 6f 03 5a 77 |UnlockPa|ges.o.Zw|
|00000cd0| 46 72 65 65 56 69 72 74 | 75 61 6c 4d 65 6d 6f 72 |FreeVirt|ualMemor|
|00000ce0| 79 00 59 03 5a 77 41 6c | 6c 6f 63 61 74 65 56 69 |y.Y.ZwAl|locateVi|
|00000cf0| 72 74 75 61 6c 4d 65 6d | 6f 72 79 00 07 01 49 6f |rtualMem|ory...Io|
|00000d00| 46 72 65 65 49 72 70 00 | eb 00 49 6f 43 61 6e 63 |FreeIrp.|..IoCanc|
|00000d10| 65 6c 49 72 70 00 e0 00 | 49 6f 41 6c 6c 6f 63 61 |elIrp...|IoAlloca|
|00000d20| 74 65 49 72 70 00 e7 00 | 49 6f 42 75 69 6c 64 44 |teIrp...|IoBuildD|
|00000d30| 65 76 69 63 65 49 6f 43 | 6f 6e 74 72 6f 6c 52 65 |eviceIoC|ontrolRe|
|00000d40| 71 75 65 73 74 00 da 03 | 73 74 72 6e 63 6d 70 00 |quest...|strncmp.|
|00000d50| 54 01 4b 65 43 6c 65 61 | 72 45 76 65 6e 74 00 00 |T.KeClea|rEvent..|
|00000d60| d3 01 4d 6d 42 75 69 6c | 64 4d 64 6c 46 6f 72 4e |..MmBuil|dMdlForN|
|00000d70| 6f 6e 50 61 67 65 64 50 | 6f 6f 6c 00 0d 01 49 6f |onPagedP|ool...Io|
|00000d80| 47 65 74 44 65 76 69 63 | 65 4f 62 6a 65 63 74 50 |GetDevic|eObjectP|
|00000d90| 6f 69 6e 74 65 72 00 00 | b3 03 5f 73 6e 77 70 72 |ointer..|.._snwpr|
|00000da0| 69 6e 74 66 00 00 be 03 | 5f 77 63 73 6e 69 63 6d |intf....|_wcsnicm|
|00000db0| 70 00 ea 03 77 63 73 6c | 65 6e 00 00 28 03 52 74 |p...wcsl|en..(.Rt|
|00000dc0| 6c 78 41 6e 73 69 53 74 | 72 69 6e 67 54 6f 55 6e |lxAnsiSt|ringToUn|
|00000dd0| 69 63 6f 64 65 53 69 7a | 65 00 ff 01 4e 6c 73 4d |icodeSiz|e...NlsM|
|00000de0| 62 43 6f 64 65 50 61 67 | 65 54 61 67 00 00 66 03 |bCodePag|eTag..f.|
|00000df0| 5a 77 44 65 6c 65 74 65 | 56 61 6c 75 65 4b 65 79 |ZwDelete|ValueKey|
|00000e00| 00 00 de 03 73 74 72 73 | 74 72 00 00 8a 01 4b 65 |....strs|tr....Ke|
|00000e10| 52 65 61 64 53 74 61 74 | 65 45 76 65 6e 74 00 00 |ReadStat|eEvent..|
|00000e20| e0 01 4d 6d 49 73 4e 6f | 6e 50 61 67 65 64 53 79 |..MmIsNo|nPagedSy|
|00000e30| 73 74 65 6d 41 64 64 72 | 65 73 73 56 61 6c 69 64 |stemAddr|essValid|
|00000e40| 00 00 e3 03 74 6f 77 75 | 70 70 65 72 00 00 88 02 |....towu|pper....|
|00000e50| 52 74 6c 43 6f 6d 70 61 | 72 65 53 74 72 69 6e 67 |RtlCompa|reString|
|00000e60| 00 00 b6 03 5f 73 74 72 | 6e 69 63 6d 70 00 5d 02 |...._str|nicmp.].|
|00000e70| 50 73 4c 6f 6f 6b 75 70 | 54 68 72 65 61 64 42 79 |PsLookup|ThreadBy|
|00000e80| 54 68 72 65 61 64 49 64 | 00 00 89 02 52 74 6c 43 |ThreadId|....RtlC|
|00000e90| 6f 6d 70 61 72 65 55 6e | 69 63 6f 64 65 53 74 72 |ompareUn|icodeStr|
|00000ea0| 69 6e 67 00 1a 03 52 74 | 6c 55 70 63 61 73 65 55 |ing...Rt|lUpcaseU|
|00000eb0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 87 03 |nicodeSt|ring....|
|00000ec0| 5a 77 51 75 65 72 79 4f | 62 6a 65 63 74 00 67 00 |ZwQueryO|bject.g.|
|00000ed0| 45 78 52 61 69 73 65 53 | 74 61 74 75 73 00 db 03 |ExRaiseS|tatus...|
|00000ee0| 73 74 72 6e 63 70 79 00 | 6e 74 6f 73 6b 72 6e 6c |strncpy.|ntoskrnl|
|00000ef0| 2e 65 78 65 00 00 18 03 | 52 74 6c 55 6e 77 69 6e |.exe....|RtlUnwin|
|00000f00| 64 00 42 00 4b 65 47 65 | 74 43 75 72 72 65 6e 74 |d.B.KeGe|tCurrent|
|00000f10| 49 72 71 6c 00 00 4d 00 | 4b 66 52 65 6c 65 61 73 |Irql..M.|KfReleas|
|00000f20| 65 53 70 69 6e 4c 6f 63 | 6b 00 4a 00 4b 66 41 63 |eSpinLoc|k.J.KfAc|
|00000f30| 71 75 69 72 65 53 70 69 | 6e 4c 6f 63 6b 00 4b 00 |quireSpi|nLock.K.|
|00000f40| 4b 66 4c 6f 77 65 72 49 | 72 71 6c 00 46 00 4b 65 |KfLowerI|rql.F.Ke|
|00000f50| 52 61 69 73 65 49 72 71 | 6c 54 6f 44 70 63 4c 65 |RaiseIrq|lToDpcLe|
|00000f60| 76 65 6c 00 01 00 45 78 | 52 65 6c 65 61 73 65 46 |vel...Ex|ReleaseF|
|00000f70| 61 73 74 4d 75 74 65 78 | 00 00 00 00 45 78 41 63 |astMutex|....ExAc|
|00000f80| 71 75 69 72 65 46 61 73 | 74 4d 75 74 65 78 00 00 |quireFas|tMutex..|
|00000f90| 48 41 4c 2e 64 6c 6c 00 | 0d 00 54 64 69 43 6f 70 |HAL.dll.|..TdiCop|
|00000fa0| 79 42 75 66 66 65 72 54 | 6f 4d 64 6c 00 00 54 44 |yBufferT|oMdl..TD|
|00000fb0| 49 2e 53 59 53 00 f9 00 | 4e 64 69 73 52 65 61 64 |I.SYS...|NdisRead|
|00000fc0| 43 6f 6e 66 69 67 75 72 | 61 74 69 6f 6e 00 96 00 |Configur|ation...|
|00000fd0| 4e 64 69 73 49 6e 69 74 | 55 6e 69 63 6f 64 65 53 |NdisInit|UnicodeS|
|00000fe0| 74 72 69 6e 67 00 67 00 | 4e 64 69 73 44 65 72 65 |tring.g.|NdisDere|
|00000ff0| 67 69 73 74 65 72 50 72 | 6f 74 6f 63 6f 6c 00 00 |gisterPr|otocol..|
|00001000| 03 01 4e 64 69 73 52 65 | 67 69 73 74 65 72 50 72 |..NdisRe|gisterPr|
|00001010| 6f 74 6f 63 6f 6c 00 00 | 27 00 4e 64 69 73 41 6c |otocol..|'.NdisAl|
|00001020| 6c 6f 63 61 74 65 42 75 | 66 66 65 72 50 6f 6f 6c |locateBu|fferPool|
|00001030| 00 00 2c 00 4e 64 69 73 | 41 6c 6c 6f 63 61 74 65 |..,.Ndis|Allocate|
|00001040| 50 61 63 6b 65 74 50 6f | 6f 6c 00 00 72 00 4e 64 |PacketPo|ol..r.Nd|
|00001050| 69 73 46 72 65 65 4d 65 | 6d 6f 72 79 00 00 70 00 |isFreeMe|mory..p.|
|00001060| 4e 64 69 73 46 72 65 65 | 42 75 66 66 65 72 50 6f |NdisFree|BufferPo|
|00001070| 6f 6c 00 00 74 00 4e 64 | 69 73 46 72 65 65 50 61 |ol..t.Nd|isFreePa|
|00001080| 63 6b 65 74 50 6f 6f 6c | 00 00 0e 01 4e 64 69 73 |cketPool|....Ndis|
|00001090| 53 65 6e 64 00 00 73 00 | 4e 64 69 73 46 72 65 65 |Send..s.|NdisFree|
|000010a0| 50 61 63 6b 65 74 00 00 | 26 00 4e 64 69 73 41 6c |Packet..|&.NdisAl|
|000010b0| 6c 6f 63 61 74 65 42 75 | 66 66 65 72 00 00 2b 00 |locateBu|ffer..+.|
|000010c0| 4e 64 69 73 41 6c 6c 6f | 63 61 74 65 50 61 63 6b |NdisAllo|catePack|
|000010d0| 65 74 00 00 29 00 4e 64 | 69 73 41 6c 6c 6f 63 61 |et..).Nd|isAlloca|
|000010e0| 74 65 4d 65 6d 6f 72 79 | 00 00 17 01 4e 64 69 73 |teMemory|....Ndis|
|000010f0| 54 72 61 6e 73 66 65 72 | 44 61 74 61 00 00 6f 00 |Transfer|Data..o.|
|00001100| 4e 64 69 73 46 72 65 65 | 42 75 66 66 65 72 00 00 |NdisFree|Buffer..|
|00001110| f4 00 4e 64 69 73 51 75 | 65 72 79 42 75 66 66 65 |..NdisQu|eryBuffe|
|00001120| 72 00 07 01 4e 64 69 73 | 52 65 6c 65 61 73 65 53 |r...Ndis|ReleaseS|
|00001130| 70 69 6e 4c 6f 63 6b 00 | 24 00 4e 64 69 73 41 63 |pinLock.|$.NdisAc|
|00001140| 71 75 69 72 65 53 70 69 | 6e 4c 6f 63 6b 00 7c 00 |quireSpi|nLock.|.|
|00001150| 4e 64 69 73 47 65 74 46 | 69 72 73 74 42 75 66 66 |NdisGetF|irstBuff|
|00001160| 65 72 46 72 6f 6d 50 61 | 63 6b 65 74 00 00 19 01 |erFromPa|cket....|
|00001170| 4e 64 69 73 55 6e 63 68 | 61 69 6e 42 75 66 66 65 |NdisUnch|ainBuffe|
|00001180| 72 41 74 46 72 6f 6e 74 | 00 00 2f 00 4e 64 69 73 |rAtFront|../.Ndis|
|00001190| 41 6c 6c 6f 63 61 74 65 | 53 70 69 6e 4c 6f 63 6b |Allocate|SpinLock|
|000011a0| 00 00 4e 44 49 53 2e 53 | 59 53 00 00 00 00 00 00 |..NDIS.S|YS......|
|000011b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+