/ Personal Computer World 2007 December / PCWDEC07.iso / Software / Freeware / Sophos Anti-Rootkit 1.3.1 / sarsfx.exe / MEMSWEEP.sys

< prev

next >

MacOS 8.1

Win98

DOS

browse contents

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 60 02 00 00 |........|....`...|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000090| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000120| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000200| d7 84 4d cb 93 e5 23 98 | 93 e5 23 98 93 e5 23 98 |..M...#.|..#...#.|
|00000210| 10 ed 2c 98 92 e5 23 98 | 93 e5 22 98 b3 e5 23 98 |..,...#.|.."...#.|
|00000220| ca c6 30 98 96 e5 23 98 | 1d ed 7c 98 96 e5 23 98 |..0...#.|..|...#.|
|00000230| 10 ed 7d 98 92 e5 23 98 | 10 ed 79 98 92 e5 23 98 |..}...#.|..y...#.|
|00000240| 52 69 63 68 93 e5 23 98 | 00 00 00 00 00 00 00 00 |Rich..#.|........|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 50 45 00 00 4c 01 06 00 | fc 63 c1 46 00 00 00 00 |PE..L...|.c.F....|
|00000270| 00 00 00 00 e0 00 0e 01 | 0b 01 07 0a 80 0a 00 00 |........|........|
|00000280| 80 07 00 00 00 00 00 00 | d0 0c 00 00 80 04 00 00 |........|........|
|00000290| 80 0a 00 00 00 00 01 00 | 80 00 00 00 80 00 00 00 |........|........|
|000002a0| 05 00 00 00 05 00 00 00 | 05 00 00 00 00 00 00 00 |........|........|
|000002b0| 80 16 00 00 80 04 00 00 | f3 2d 00 00 01 00 00 00 |........|.-......|
|000002c0| 00 00 04 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|000002d0| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 78 0d 00 00 3c 00 00 00 | 00 11 00 00 10 04 00 00 |x...<...|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 80 15 00 00 84 00 00 00 | 10 0b 00 00 1c 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 40 0b 00 00 40 00 00 00 |........|@...@...|
|00000330| 00 00 00 00 00 00 00 00 | 80 0a 00 00 88 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|00000360| b0 05 00 00 80 04 00 00 | 00 06 00 00 80 04 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 68 |........|.... ..h|
|00000380| 2e 72 64 61 74 61 00 00 | 64 01 00 00 80 0a 00 00 |.rdata..|d.......|
|00000390| 80 01 00 00 80 0a 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 40 00 00 48 | 2e 64 61 74 61 00 00 00 |....@..H|.data...|
|000003b0| 30 00 00 00 00 0c 00 00 | 80 00 00 00 00 0c 00 00 |0.......|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 c8 |........|....@...|
|000003d0| 49 4e 49 54 00 00 00 00 | 76 04 00 00 80 0c 00 00 |INIT....|v.......|
|000003e0| 80 04 00 00 80 0c 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 20 00 00 e2 | 2e 72 73 72 63 00 00 00 |.... ...|.rsrc...|
|00000400| 10 04 00 00 00 11 00 00 | 80 04 00 00 00 11 00 00 |........|........|
|00000410| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 42 |........|....@..B|
|00000420| 2e 72 65 6c 6f 63 00 00 | c4 00 00 00 80 15 00 00 |.reloc..|........|
|00000430| 00 01 00 00 80 15 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000440| 00 00 00 00 40 00 00 42 | 00 00 00 00 00 00 00 00 |....@..B|........|
|00000450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000460| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000470| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000480| 56 e8 ee 04 00 00 8b 4c | 24 0c f6 d8 1b c0 83 61 |V......L|$......a|
|00000490| 1c 00 25 de ff ff 3f 05 | 22 00 00 c0 8b f0 32 d2 |..%...?.|".....2.|
|000004a0| 89 71 18 ff 15 00 0b 01 | 00 8b c6 5e c2 08 00 cc |.q......|...^....|
|000004b0| 8b 4c 24 08 83 61 1c 00 | 83 61 18 00 32 d2 ff 15 |.L$..a..|.a..2...|
|000004c0| 00 0b 01 00 33 c0 c2 08 | 00 cc 5c 00 44 00 6f 00 |....3...|..\.D.o.|
|000004d0| 73 00 44 00 65 00 76 00 | 69 00 63 00 65 00 73 00 |s.D.e.v.|i.c.e.s.|
|000004e0| 5c 00 4d 00 65 00 6d 00 | 53 00 77 00 65 00 65 00 |\.M.e.m.|S.w.e.e.|
|000004f0| 70 00 32 00 00 00 55 8b | ec 51 51 68 ca 04 01 00 |p.2...U.|.QQh....|
|00000500| 8d 45 f8 50 ff 15 8c 0a | 01 00 8d 45 f8 50 ff 15 |.E.P....|...E.P..|
|00000510| c0 0a 01 00 8b 45 08 8b | 40 04 85 c0 74 07 50 ff |.....E..|@...t.P.|
|00000520| 15 f8 0a 01 00 e8 38 04 | 00 00 c9 c2 04 00 53 56 |......8.|......SV|
|00000530| 48 57 8b f0 ba ff 0f 00 | 00 23 f2 8b f9 23 fa 03 |HW......|.#...#..|
|00000540| f7 c1 ee 0c c1 e8 0c 8d | 74 06 01 81 e1 00 f0 ff |........|t.......|
|00000550| ff 33 db 85 f6 8b f9 76 | 16 57 ff 15 98 0a 01 00 |.3.....v|.W......|
|00000560| 84 c0 74 11 81 c7 00 10 | 00 00 43 3b de 72 ea b0 |..t.....|..C;.r..|
|00000570| 01 5f 5e 5b c3 32 c0 eb | f8 cc 6a 44 68 30 0b 01 |._^[.2..|..jDh0..|
|00000580| 00 e8 5e 04 00 00 83 65 | e0 00 83 65 d8 00 8b 5d |..^....e|...e...]|
|00000590| 0c 8b 43 60 8b 78 0c c6 | 45 e7 00 81 ff 04 28 bb |..C`.x..|E.....(.|
|000005a0| 87 0f 84 2f 01 00 00 81 | ff 08 28 bb 87 0f 84 c2 |.../....|..(.....|
|000005b0| 00 00 00 81 ff 0c 28 bb | 87 0f 84 9d 00 00 00 81 |......(.|........|
|000005c0| ff 10 28 bb 87 74 0c c7 | 45 e0 10 00 00 c0 e9 10 |..(..t..|E.......|
|000005d0| 02 00 00 83 78 08 0c 72 | 0a 8b 40 04 89 45 d4 85 |....x..r|..@..E..|
|000005e0| c0 75 0c c7 45 e0 0d 00 | 00 c0 e9 f4 01 00 00 8b |.u..E...|........|
|000005f0| 73 0c 8d 7d bc a5 a5 a5 | e8 cf 03 00 00 3b 45 bc |s..}....|.....;E.|
|00000600| 74 29 8d 45 dc 50 ff 75 | bc e8 b8 03 00 00 85 c0 |t).E.P.u|........|
|00000610| 74 0c c7 45 e0 01 00 00 | c0 e9 c5 01 00 00 ff 75 |t..E....|.......u|
|00000620| dc ff 15 b8 0a 01 00 c6 | 45 e7 01 b1 01 ff 15 84 |........|E.......|
|00000630| 0a 01 00 88 45 e6 8d 45 | d8 50 ff 75 d4 ff 73 0c |....E..E|.P.u..s.|
|00000640| ff 75 c4 ff 75 c0 e8 75 | 03 00 00 89 45 e0 8a 4d |.u..u..u|....E..M|
|00000650| e6 ff 15 80 0a 01 00 e9 | 87 01 00 00 8b 43 0c 8b |........|.....C..|
|00000660| 0d b0 0a 01 00 8b 09 89 | 08 c7 45 d8 04 00 00 00 |........|..E.....|
|00000670| e9 6e 01 00 00 83 78 08 | 10 0f 82 64 ff ff ff 8b |.n....x.|...d....|
|00000680| 73 0c 8d 7d ac a5 a5 a5 | a5 e8 3e 03 00 00 3b 45 |s..}....|..>...;E|
|00000690| ac 74 24 8d 45 dc 50 ff | 75 ac e8 27 03 00 00 89 |.t$.E.P.|u..'....|
|000006a0| 45 e0 85 c0 0f 85 68 ff | ff ff ff 75 dc ff 15 b8 |E.....h.|...u....|
|000006b0| 0a 01 00 c6 45 e7 01 8b | 45 b4 8b 4d b0 e8 6c fe |....E...|E..M..l.|
|000006c0| ff ff 84 c0 0f 85 19 01 | 00 00 c7 45 e0 05 00 00 |........|...E....|
|000006d0| c0 e9 0d 01 00 00 83 78 | 08 08 0f 82 03 ff ff ff |.......x|........|
|000006e0| 8b 78 04 89 7d d4 85 ff | 0f 84 f5 fe ff ff 8b 43 |.x..}...|.......C|
|000006f0| 0c 8b 08 89 4d c8 8b 70 | 04 89 75 cc e8 cb 02 00 |....M..p|..u.....|
|00000700| 00 3b 45 c8 74 24 8d 45 | dc 50 ff 75 c8 e8 b4 02 |.;E.t$.E|.P.u....|
|00000710| 00 00 89 45 e0 85 c0 0f | 85 f5 fe ff ff ff 75 dc |...E....|......u.|
|00000720| ff 15 b8 0a 01 00 c6 45 | e7 01 33 c0 50 50 50 57 |.......E|..3.PPPW|
|00000730| 56 ff 15 ac 0a 01 00 8b | d8 89 5d d0 85 db 75 0c |V.......|..]...u.|
|00000740| c7 45 e0 01 00 00 c0 e9 | 94 00 00 00 83 65 fc 00 |.E......|.....e..|
|00000750| 83 23 00 8d 47 ff 8b d6 | b9 ff 0f 00 00 23 d1 8b |.#..G...|.....#..|
|00000760| f0 23 f1 03 f2 c1 ee 0c | c1 e8 0c 03 f0 8d 04 b5 |.#......|........|
|00000770| 20 00 00 00 66 89 43 04 | 33 c0 66 89 43 06 8b 75 | ...f.C.|3.f.C..u|
|00000780| cc 8b ce 81 e1 00 f0 ff | ff 89 4b 10 89 53 18 89 |........|..K..S..|
|00000790| 7b 14 50 50 53 ff 15 a8 | 0a 01 00 8b cf 8b 45 0c |{.PPS...|......E.|
|000007a0| 8b 78 0c 8b c1 c1 e9 02 | f3 a5 8b c8 83 e1 03 f3 |.x......|........|
|000007b0| a4 8b 45 d4 89 45 d8 53 | ff 15 a4 0a 01 00 83 4d |..E..E.S|.......M|
|000007c0| fc ff eb 15 33 c0 40 c3 | 8b 65 e8 c7 45 e0 05 00 |....3.@.|.e..E...|
|000007d0| 00 c0 83 4d fc ff 8b 5d | d0 53 ff 15 a0 0a 01 00 |...M...]|.S......|
|000007e0| 8b 5d 0c 80 7d e7 00 74 | 06 ff 15 9c 0a 01 00 8b |.]..}..t|........|
|000007f0| 45 d8 89 43 1c 8b 75 e0 | 89 73 18 32 d2 8b cb ff |E..C..u.|.s.2....|
|00000800| 15 00 0b 01 00 8b c6 e8 | 13 02 00 00 c2 08 00 cc |........|........|
|00000810| 55 8b ec 83 ec 30 57 6a | 02 8d 45 f4 50 8d 45 d0 |U....0Wj|..E.P.E.|
|00000820| 50 c6 45 f4 00 c6 45 f5 | 00 c6 45 f6 00 c6 45 f7 |P.E...E.|..E...E.|
|00000830| 00 c6 45 f8 00 c6 45 f9 | 05 e8 a0 01 00 00 33 ff |..E...E.|......3.|
|00000840| 3b c7 0f 8c 17 01 00 00 | 57 8d 45 d0 50 e8 86 01 |;.......|W.E.P...|
|00000850| 00 00 c7 00 20 00 00 00 | 6a 01 8d 45 d0 50 e8 75 |.... ...|j..E.P.u|
|00000860| 01 00 00 c7 00 20 02 00 | 00 6a 01 8d 45 f4 50 8d |..... ..|.j..E.P.|
|00000870| 45 e4 50 e8 66 01 00 00 | 3b c7 0f 8c df 00 00 00 |E.P.f...|;.......|
|00000880| 57 8d 45 e4 50 e8 4e 01 | 00 00 6a 01 68 14 0c 01 |W.E.P.N.|..j.h...|
|00000890| 00 c7 00 12 00 00 00 ff | 15 e0 0a 01 00 3b c7 0f |........|.....;..|
|000008a0| 8c ba 00 00 00 53 56 8b | 35 dc 0a 01 00 8d 45 e4 |.....SV.|5.....E.|
|000008b0| 50 ff d6 8b d8 8d 45 d0 | 50 ff d6 68 4d 4d 53 57 |P.....E.|P..hMMSW|
|000008c0| 8d 74 03 20 56 57 ff 15 | d8 0a 01 00 8b d8 3b df |.t. VW..|......;.|
|000008d0| 75 0a b8 9a 00 00 c0 e9 | 81 00 00 00 6a 02 56 53 |u.......|....j.VS|
|000008e0| ff 15 d4 0a 01 00 8b f0 | 3b f7 7c 38 8b 35 d0 0a |........|;.|8.5..|
|000008f0| 01 00 8d 45 d0 50 bf 00 | 00 00 10 57 6a 02 53 ff |...E.P..|...Wj.S.|
|00000900| d6 85 c0 89 45 fc 7d 0c | 53 ff 15 cc 0a 01 00 8b |....E.}.|S.......|
|00000910| 45 fc eb 49 8d 45 e4 50 | 57 6a 02 53 ff d6 8b f0 |E..I.E.P|Wj.S....|
|00000920| 85 f6 7d 0b 53 ff 15 cc | 0a 01 00 8b c6 eb 2e 6a |..}.S...|.......j|
|00000930| 00 53 6a 01 be 14 0c 01 | 00 56 ff 15 c8 0a 01 00 |.Sj.....|.V......|
|00000940| 8b f8 85 ff 7d 09 53 ff | 15 cc 0a 01 00 eb 0c 89 |....}.S.|........|
|00000950| 35 28 0c 01 00 89 1d 2c | 0c 01 00 8b c7 5e 5b 5f |5(.....,|.....^[_|
|00000960| c9 c3 a1 2c 0c 01 00 85 | c0 74 07 50 ff 15 cc 0a |...,....|.t.P....|
|00000970| 01 00 c3 cc 55 8b ec 83 | ec 18 53 8d 45 e8 50 ff |....U...|..S.E.P.|
|00000980| 15 f4 0a 01 00 8d 45 fc | 50 8d 45 f8 50 6a 01 68 |......E.|P.E.Pj.h|
|00000990| 00 0c 01 00 33 c0 50 50 | 68 00 00 00 10 50 8d 45 |....3.PP|h....P.E|
|000009a0| e8 50 ff 35 28 0c 01 00 | ff 15 f0 0a 01 00 8a d8 |.P.5(...|........|
|000009b0| 8d 45 e8 50 ff 15 ec 0a | 01 00 8a c3 5b c9 c3 cc |.E.P....|....[...|
|000009c0| ff 25 b4 0a 01 00 ff 25 | bc 0a 01 00 ff 25 fc 0a |.%.....%|.....%..|
|000009d0| 01 00 ff 25 c4 0a 01 00 | ff 25 e4 0a 01 00 ff 25 |...%....|.%.....%|
|000009e0| e8 0a 01 00 68 d2 09 01 | 00 64 a1 00 00 00 00 50 |....h...|.d.....P|
|000009f0| 8b 44 24 10 89 6c 24 10 | 8d 6c 24 10 2b e0 53 56 |.D$..l$.|.l$.+.SV|
|00000a00| 57 8b 45 f8 89 65 e8 50 | 8b 45 fc c7 45 fc ff ff |W.E..e.P|.E..E...|
|00000a10| ff ff 89 45 f8 8d 45 f0 | 64 a3 00 00 00 00 c3 8b |...E..E.|d.......|
|00000a20| 4d f0 64 89 0d 00 00 00 | 00 59 5f 5e 5b c9 51 c3 |M.d.....|.Y_^[.Q.|
|00000a30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a80| d2 10 00 00 e0 10 00 00 | 00 00 00 00 7c 0e 00 00 |........|....|...|
|00000a90| 94 0e 00 00 ac 0e 00 00 | be 0e 00 00 d2 0e 00 00 |........|........|
|00000aa0| e4 0e 00 00 f0 0e 00 00 | 00 0f 00 00 16 0f 00 00 |........|........|
|00000ab0| 26 0f 00 00 40 0f 00 00 | 5c 0f 00 00 6e 0f 00 00 |&...@...|\...n...|
|00000ac0| 64 0e 00 00 a4 0f 00 00 | b8 0f 00 00 d8 0f 00 00 |d.......|........|
|00000ad0| e6 0f 00 00 00 10 00 00 | 10 10 00 00 28 10 00 00 |........|....(...|
|00000ae0| 38 10 00 00 56 10 00 00 | 6c 10 00 00 80 10 00 00 |8...V...|l.......|
|00000af0| 9a 10 00 00 aa 10 00 00 | 52 0e 00 00 8c 0f 00 00 |........|R.......|
|00000b00| 3c 0e 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |<.......|........|
|00000b10| 00 00 00 00 fc 63 c1 46 | 00 00 00 00 02 00 00 00 |.....c.F|........|
|00000b20| 49 00 00 00 88 0b 00 00 | 88 0b 00 00 00 00 00 00 |I.......|........|
|00000b30| ff ff ff ff c4 07 01 00 | c8 07 01 00 00 00 00 10 |........|........|
|00000b40| 48 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |H.......|........|
|00000b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 10 0c 01 00 |........|........|
|00000b80| e0 0b 01 00 01 00 00 00 | 52 53 44 53 a9 3c 1f ea |........|RSDS.<..|
|00000b90| 93 06 02 4c 96 2b 4e 6f | cb 29 6b 54 01 00 00 00 |...L.+No|.)kT....|
|00000ba0| 43 3a 5c 72 6f 6f 74 6b | 69 74 5c 6d 65 6d 73 77 |C:\rootk|it\memsw|
|00000bb0| 65 65 70 5c 62 75 69 6c | 64 5c 66 72 65 65 5c 69 |eep\buil|d\free\i|
|00000bc0| 33 38 36 5c 4d 45 4d 53 | 57 45 45 50 2e 70 64 62 |386\MEMS|WEEP.pdb|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| d2 09 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c00| 00 00 00 80 00 00 00 40 | 00 00 00 20 00 00 00 10 |.......@|... ....|
|00000c10| 4e e6 40 bb 00 00 00 00 | 00 00 00 00 00 00 00 00 |N.@.....|........|
|00000c20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c80| 5c 00 44 00 65 00 76 00 | 69 00 63 00 65 00 5c 00 |\.D.e.v.|i.c.e.\.|
|00000c90| 4d 00 65 00 6d 00 53 00 | 77 00 65 00 65 00 70 00 |M.e.m.S.|w.e.e.p.|
|00000ca0| 32 00 00 00 5c 00 44 00 | 6f 00 73 00 44 00 65 00 |2...\.D.|o.s.D.e.|
|00000cb0| 76 00 69 00 63 00 65 00 | 73 00 5c 00 4d 00 65 00 |v.i.c.e.|s.\.M.e.|
|00000cc0| 6d 00 53 00 77 00 65 00 | 65 00 70 00 32 00 00 00 |m.S.w.e.|e.p.2...|
|00000cd0| 55 8b ec 83 ec 14 e8 35 | fb ff ff 85 c0 0f 8c 8e |U......5|........|
|00000ce0| 00 00 00 56 8b 75 08 57 | 8b 3d 8c 0a 01 00 68 80 |...V.u.W|.=....h.|
|00000cf0| 0c 01 00 8d 45 f4 50 c7 | 46 34 f6 04 01 00 c7 46 |....E.P.|F4.....F|
|00000d00| 38 80 04 01 00 c7 46 40 | b0 04 01 00 c7 46 70 7a |8.....F@|.....Fpz|
|00000d10| 05 01 00 ff d7 8d 45 fc | 50 6a 00 6a 00 6a 22 8d |......E.|Pj.j.j".|
|00000d20| 45 f4 50 6a 00 56 ff 15 | 94 0a 01 00 8b f0 85 f6 |E.Pj.V..|........|
|00000d30| 7c 32 68 a4 0c 01 00 8d | 45 ec 50 ff d7 8d 45 ec ||2h.....|E.P...E.|
|00000d40| 50 ff 15 c0 0a 01 00 8d | 45 f4 50 8d 45 ec 50 ff |P.......|E.P.E.P.|
|00000d50| 15 90 0a 01 00 8b f0 85 | f6 7d 12 ff 75 fc ff 15 |........|.}..u...|
|00000d60| f8 0a 01 00 e8 f9 fb ff | ff 8b c6 eb 02 33 c0 5f |........|.....3._|
|00000d70| 5e c9 c2 08 00 cc cc cc | c0 0d 00 00 00 00 00 00 |^.......|........|
|00000d80| 00 00 00 00 c4 10 00 00 | 8c 0a 00 00 b4 0d 00 00 |........|........|
|00000d90| 00 00 00 00 00 00 00 00 | ee 10 00 00 80 0a 00 00 |........|........|
|00000da0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000db0| 00 00 00 00 d2 10 00 00 | e0 10 00 00 00 00 00 00 |........|........|
|00000dc0| 7c 0e 00 00 94 0e 00 00 | ac 0e 00 00 be 0e 00 00 ||.......|........|
|00000dd0| d2 0e 00 00 e4 0e 00 00 | f0 0e 00 00 00 0f 00 00 |........|........|
|00000de0| 16 0f 00 00 26 0f 00 00 | 40 0f 00 00 5c 0f 00 00 |....&...|@...\...|
|00000df0| 6e 0f 00 00 64 0e 00 00 | a4 0f 00 00 b8 0f 00 00 |n...d...|........|
|00000e00| d8 0f 00 00 e6 0f 00 00 | 00 10 00 00 10 10 00 00 |........|........|
|00000e10| 28 10 00 00 38 10 00 00 | 56 10 00 00 6c 10 00 00 |(...8...|V...l...|
|00000e20| 80 10 00 00 9a 10 00 00 | aa 10 00 00 52 0e 00 00 |........|....R...|
|00000e30| 8c 0f 00 00 3c 0e 00 00 | 00 00 00 00 97 01 49 6f |....<...|......Io|
|00000e40| 66 43 6f 6d 70 6c 65 74 | 65 52 65 71 75 65 73 74 |fComplet|eRequest|
|00000e50| 00 00 25 01 49 6f 44 65 | 6c 65 74 65 44 65 76 69 |..%.IoDe|leteDevi|
|00000e60| 63 65 00 00 27 01 49 6f | 44 65 6c 65 74 65 53 79 |ce..'.Io|DeleteSy|
|00000e70| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 66 03 52 74 |mbolicLi|nk..f.Rt|
|00000e80| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|00000e90| 6e 67 00 00 21 01 49 6f | 43 72 65 61 74 65 53 79 |ng..!.Io|CreateSy|
|00000ea0| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 1b 01 49 6f |mbolicLi|nk....Io|
|00000eb0| 43 72 65 61 74 65 44 65 | 76 69 63 65 00 00 47 02 |CreateDe|vice..G.|
|00000ec0| 4d 6d 49 73 41 64 64 72 | 65 73 73 56 61 6c 69 64 |MmIsAddr|essValid|
|00000ed0| 00 00 ad 01 4b 65 44 65 | 74 61 63 68 50 72 6f 63 |....KeDe|tachProc|
|00000ee0| 65 73 73 00 33 01 49 6f | 46 72 65 65 4d 64 6c 00 |ess.3.Io|FreeMdl.|
|00000ef0| 67 02 4d 6d 55 6e 6c 6f | 63 6b 50 61 67 65 73 00 |g.MmUnlo|ckPages.|
|00000f00| 59 02 4d 6d 50 72 6f 62 | 65 41 6e 64 4c 6f 63 6b |Y.MmProb|eAndLock|
|00000f10| 50 61 67 65 73 00 04 01 | 49 6f 41 6c 6c 6f 63 61 |Pages...|IoAlloca|
|00000f20| 74 65 4d 64 6c 00 db 02 | 50 73 49 6e 69 74 69 61 |teMdl...|PsInitia|
|00000f30| 6c 53 79 73 74 65 6d 50 | 72 6f 63 65 73 73 00 00 |lSystemP|rocess..|
|00000f40| 4e 04 5a 77 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |N.ZwQuer|yInforma|
|00000f50| 74 69 6f 6e 50 72 6f 63 | 65 73 73 00 a4 01 4b 65 |tionProc|ess...Ke|
|00000f60| 41 74 74 61 63 68 50 72 | 6f 63 65 73 73 00 de 02 |AttachPr|ocess...|
|00000f70| 50 73 4c 6f 6f 6b 75 70 | 50 72 6f 63 65 73 73 42 |PsLookup|ProcessB|
|00000f80| 79 50 72 6f 63 65 73 73 | 49 64 00 00 d6 02 50 73 |yProcess|Id....Ps|
|00000f90| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|00000fa0| 73 49 64 00 7f 04 5f 65 | 78 63 65 70 74 5f 68 61 |sId..._e|xcept_ha|
|00000fb0| 6e 64 6c 65 72 33 00 00 | a5 03 52 74 6c 53 65 74 |ndler3..|..RtlSet|
|00000fc0| 44 61 63 6c 53 65 63 75 | 72 69 74 79 44 65 73 63 |DaclSecu|rityDesc|
|00000fd0| 72 69 70 74 6f 72 00 00 | 47 00 45 78 46 72 65 65 |riptor..|G.ExFree|
|00000fe0| 50 6f 6f 6c 00 00 f5 02 | 52 74 6c 41 64 64 41 63 |Pool....|RtlAddAc|
|00000ff0| 63 65 73 73 41 6c 6c 6f | 77 65 64 41 63 65 00 00 |cessAllo|wedAce..|
|00001000| 1a 03 52 74 6c 43 72 65 | 61 74 65 41 63 6c 00 00 |..RtlCre|ateAcl..|
|00001010| 3a 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |:.ExAllo|catePool|
|00001020| 57 69 74 68 54 61 67 00 | 7f 03 52 74 6c 4c 65 6e |WithTag.|..RtlLen|
|00001030| 67 74 68 53 69 64 00 00 | 1e 03 52 74 6c 43 72 65 |gthSid..|..RtlCre|
|00001040| 61 74 65 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |ateSecur|ityDescr|
|00001050| 69 70 74 6f 72 00 ae 03 | 52 74 6c 53 75 62 41 75 |iptor...|RtlSubAu|
|00001060| 74 68 6f 72 69 74 79 53 | 69 64 00 00 6a 03 52 74 |thorityS|id..j.Rt|
|00001070| 6c 49 6e 69 74 69 61 6c | 69 7a 65 53 69 64 00 00 |lInitial|izeSid..|
|00001080| 03 04 53 65 52 65 6c 65 | 61 73 65 53 75 62 6a 65 |..SeRele|aseSubje|
|00001090| 63 74 43 6f 6e 74 65 78 | 74 00 e1 03 53 65 41 63 |ctContex|t...SeAc|
|000010a0| 63 65 73 73 43 68 65 63 | 6b 00 ea 03 53 65 43 61 |cessChec|k...SeCa|
|000010b0| 70 74 75 72 65 53 75 62 | 6a 65 63 74 43 6f 6e 74 |ptureSub|jectCont|
|000010c0| 65 78 74 00 6e 74 6f 73 | 6b 72 6e 6c 2e 65 78 65 |ext.ntos|krnl.exe|
|000010d0| 00 00 50 00 4b 66 4c 6f | 77 65 72 49 72 71 6c 00 |..P.KfLo|werIrql.|
|000010e0| 51 00 4b 66 52 61 69 73 | 65 49 72 71 6c 00 48 41 |Q.KfRais|eIrql.HA|
|000010f0| 4c 2e 64 6c 6c 00 00 00 | 00 00 00 00 00 00 00 00 |L.dll...|........|
|00001100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001110| 10 00 00 00 18 00 00 80 | 00 00 00 00 00 00 00 00 |........|........|
|00001120| 00 00 00 00 00 00 01 00 | 01 00 00 00 30 00 00 80 |........|....0...|
|00001130| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 01 00 |........|........|
|00001140| 09 04 00 00 48 00 00 00 | 60 11 00 00 b0 03 00 00 |....H...|`.......|
|00001150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001160| b0 03 34 00 00 00 56 00 | 53 00 5f 00 56 00 45 00 |..4...V.|S._.V.E.|
|00001170| 52 00 53 00 49 00 4f 00 | 4e 00 5f 00 49 00 4e 00 |R.S.I.O.|N._.I.N.|
|00001180| 46 00 4f 00 00 00 00 00 | bd 04 ef fe 00 00 01 00 |F.O.....|........|
|00001190| 00 00 01 00 00 00 00 00 | 03 00 00 00 5a 00 00 00 |........|....Z...|
|000011a0| 3f 00 00 00 00 00 00 00 | 04 00 04 00 01 00 00 00 |?.......|........|
|000011b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 0e 03 00 00 |........|........|
|000011c0| 01 00 53 00 74 00 72 00 | 69 00 6e 00 67 00 46 00 |..S.t.r.|i.n.g.F.|
|000011d0| 69 00 6c 00 65 00 49 00 | 6e 00 66 00 6f 00 00 00 |i.l.e.I.|n.f.o...|
|000011e0| ea 02 00 00 01 00 30 00 | 38 00 30 00 39 00 30 00 |......0.|8.0.9.0.|
|000011f0| 34 00 42 00 30 00 00 00 | 36 00 0b 00 01 00 43 00 |4.B.0...|6.....C.|
|00001200| 6f 00 6d 00 70 00 61 00 | 6e 00 79 00 4e 00 61 00 |o.m.p.a.|n.y.N.a.|
|00001210| 6d 00 65 00 00 00 00 00 | 53 00 6f 00 70 00 68 00 |m.e.....|S.o.p.h.|
|00001220| 6f 00 73 00 20 00 50 00 | 6c 00 63 00 00 00 00 00 |o.s. .P.|l.c.....|
|00001230| 56 00 17 00 01 00 46 00 | 69 00 6c 00 65 00 44 00 |V.....F.|i.l.e.D.|
|00001240| 65 00 73 00 63 00 72 00 | 69 00 70 00 74 00 69 00 |e.s.c.r.|i.p.t.i.|
|00001250| 6f 00 6e 00 00 00 00 00 | 4d 00 65 00 6d 00 73 00 |o.n.....|M.e.m.s.|
|00001260| 77 00 65 00 65 00 70 00 | 20 00 6b 00 65 00 72 00 |w.e.e.p.| .k.e.r.|
|00001270| 6e 00 65 00 6c 00 20 00 | 64 00 72 00 69 00 76 00 |n.e.l. .|d.r.i.v.|
|00001280| 65 00 72 00 00 00 00 00 | 28 00 04 00 01 00 46 00 |e.r.....|(.....F.|
|00001290| 69 00 6c 00 65 00 56 00 | 65 00 72 00 73 00 69 00 |i.l.e.V.|e.r.s.i.|
|000012a0| 6f 00 6e 00 00 00 00 00 | 31 00 2e 00 30 00 00 00 |o.n.....|1...0...|
|000012b0| 32 00 09 00 01 00 49 00 | 6e 00 74 00 65 00 72 00 |2.....I.|n.t.e.r.|
|000012c0| 6e 00 61 00 6c 00 4e 00 | 61 00 6d 00 65 00 00 00 |n.a.l.N.|a.m.e...|
|000012d0| 4d 00 45 00 4d 00 53 00 | 57 00 45 00 45 00 50 00 |M.E.M.S.|W.E.E.P.|
|000012e0| 00 00 00 00 72 00 27 00 | 01 00 4c 00 65 00 67 00 |....r.'.|..L.e.g.|
|000012f0| 61 00 6c 00 43 00 6f 00 | 70 00 79 00 72 00 69 00 |a.l.C.o.|p.y.r.i.|
|00001300| 67 00 68 00 74 00 00 00 | a9 00 20 00 31 00 39 00 |g.h.t...|.. .1.9.|
|00001310| 38 00 39 00 2d 00 32 00 | 30 00 30 00 35 00 20 00 |8.9.-.2.|0.0.5. .|
|00001320| 53 00 6f 00 70 00 68 00 | 6f 00 73 00 20 00 50 00 |S.o.p.h.|o.s. .P.|
|00001330| 6c 00 63 00 2c 00 20 00 | 77 00 77 00 77 00 2e 00 |l.c.,. .|w.w.w...|
|00001340| 73 00 6f 00 70 00 68 00 | 6f 00 73 00 2e 00 63 00 |s.o.p.h.|o.s...c.|
|00001350| 6f 00 6d 00 00 00 00 00 | a6 00 3f 00 01 00 4c 00 |o.m.....|..?...L.|
|00001360| 65 00 67 00 61 00 6c 00 | 54 00 72 00 61 00 64 00 |e.g.a.l.|T.r.a.d.|
|00001370| 65 00 6d 00 61 00 72 00 | 6b 00 73 00 00 00 00 00 |e.m.a.r.|k.s.....|
|00001380| 53 00 57 00 45 00 45 00 | 50 00 ae 00 2c 00 20 00 |S.W.E.E.|P...,. .|
|00001390| 49 00 6e 00 74 00 65 00 | 72 00 43 00 68 00 65 00 |I.n.t.e.|r.C.h.e.|
|000013a0| 63 00 6b 00 ae 00 2c 00 | 20 00 61 00 6e 00 64 00 |c.k...,.| .a.n.d.|
|000013b0| 20 00 53 00 41 00 56 00 | 49 00 ae 00 2c 00 20 00 | .S.A.V.|I...,. .|
|000013c0| 61 00 72 00 65 00 20 00 | 74 00 72 00 61 00 64 00 |a.r.e. .|t.r.a.d.|
|000013d0| 65 00 6d 00 61 00 72 00 | 6b 00 73 00 20 00 6f 00 |e.m.a.r.|k.s. .o.|
|000013e0| 66 00 20 00 53 00 6f 00 | 70 00 68 00 6f 00 73 00 |f. .S.o.|p.h.o.s.|
|000013f0| ae 00 20 00 50 00 6c 00 | 63 00 2e 00 00 00 00 00 |.. .P.l.|c.......|
|00001400| 42 00 0d 00 01 00 4f 00 | 72 00 69 00 67 00 69 00 |B.....O.|r.i.g.i.|
|00001410| 6e 00 61 00 6c 00 46 00 | 69 00 6c 00 65 00 6e 00 |n.a.l.F.|i.l.e.n.|
|00001420| 61 00 6d 00 65 00 00 00 | 4d 00 45 00 4d 00 53 00 |a.m.e...|M.E.M.S.|
|00001430| 57 00 45 00 45 00 50 00 | 2e 00 53 00 59 00 53 00 |W.E.E.P.|..S.Y.S.|
|00001440| 00 00 00 00 44 00 12 00 | 01 00 50 00 72 00 6f 00 |....D...|..P.r.o.|
|00001450| 64 00 75 00 63 00 74 00 | 4e 00 61 00 6d 00 65 00 |d.u.c.t.|N.a.m.e.|
|00001460| 00 00 00 00 53 00 6f 00 | 70 00 68 00 6f 00 73 00 |....S.o.|p.h.o.s.|
|00001470| 20 00 41 00 6e 00 74 00 | 69 00 2d 00 56 00 69 00 | .A.n.t.|i.-.V.i.|
|00001480| 72 00 75 00 73 00 00 00 | 42 00 0f 00 01 00 50 00 |r.u.s...|B.....P.|
|00001490| 72 00 6f 00 64 00 75 00 | 63 00 74 00 56 00 65 00 |r.o.d.u.|c.t.V.e.|
|000014a0| 72 00 73 00 69 00 6f 00 | 6e 00 00 00 33 00 20 00 |r.s.i.o.|n...3. .|
|000014b0| 28 00 42 00 75 00 69 00 | 6c 00 64 00 20 00 31 00 |(.B.u.i.|l.d. .1.|
|000014c0| 35 00 30 00 31 00 29 00 | 00 00 00 00 44 00 00 00 |5.0.1.).|....D...|
|000014d0| 01 00 56 00 61 00 72 00 | 46 00 69 00 6c 00 65 00 |..V.a.r.|F.i.l.e.|
|000014e0| 49 00 6e 00 66 00 6f 00 | 00 00 00 00 24 00 04 00 |I.n.f.o.|....$...|
|000014f0| 00 00 54 00 72 00 61 00 | 6e 00 73 00 6c 00 61 00 |..T.r.a.|n.s.l.a.|
|00001500| 74 00 69 00 6f 00 6e 00 | 00 00 00 00 09 08 b0 04 |t.i.o.n.|........|
|00001510| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001520| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001530| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001550| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001580| 00 00 00 00 84 00 00 00 | a5 34 c0 34 fc 34 06 35 |........|.4.4.4.5|
|00001590| 10 35 21 35 5c 35 7d 35 | 23 36 2f 36 53 36 61 36 |.5!5\5}5|#6/6S6a6|
|000015a0| af 36 22 37 33 37 97 37 | ba 37 dc 37 eb 37 01 38 |.6"737.7|.7.7.7.8|
|000015b0| 8d 38 99 38 a9 38 c8 38 | e2 38 ee 38 0b 39 27 39 |.8.8.8.8|.8.8.9'9|
|000015c0| 35 39 3c 39 49 39 51 39 | 57 39 63 39 6e 39 81 39 |59<9I9Q9|W9c9n9.9|
|000015d0| 90 39 a4 39 aa 39 b6 39 | c2 39 c8 39 ce 39 d4 39 |.9.9.9.9|.9.9.9.9|
|000015e0| da 39 e0 39 e5 39 34 3b | 38 3b 7c 3b 80 3b ea 3c |.9.9.94;|8;|;.;.<|
|000015f0| ef 3c fa 3c 01 3d 08 3d | 0f 3d 28 3d 33 3d 43 3d |.<.<.=.=|.=(=3=C=|
|00001600| 51 3d 60 3d 00 00 00 00 | 00 00 00 00 00 00 00 00 |Q=`=....|........|
|00001610| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001620| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001630| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001640| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001650| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001660| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001670| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+