/ Personal Computer World 2008 February / PCWFEB08.iso / Software / Freeware / PC Tools ThreatFire 3.0.12 / tfinstall.exe / {sys} / Drivers / TfFsMon.sys / INIT

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 00 8b ff | 55 8b ec 83 ec 0c 53 56 |........|U.....SV|
|00000010| 8b 35 24 90 01 00 57 6a | 09 59 33 c0 bf 48 a1 01 |.5$...Wj|.Y3..H..|
|00000020| 00 f3 ab 68 ea d7 01 00 | 8d 45 f4 33 db 50 89 5d |...h....|.E.3.P.]|
|00000030| fc ff d6 8b 3d 5c 90 01 | 00 8d 45 f4 50 ff d7 a3 |....=\..|..E.P...|
|00000040| 48 a1 01 00 68 aa d7 01 | 00 8d 45 f4 50 ff d6 8d |H...h...|..E.P...|
|00000050| 45 f4 50 ff d7 a3 4c a1 | 01 00 68 72 d7 01 00 8d |E.P...L.|..hr....|
|00000060| 45 f4 50 ff d6 8d 45 f4 | 50 ff d7 a3 50 a1 01 00 |E.P...E.|P...P...|
|00000070| 68 44 d7 01 00 8d 45 f4 | 50 ff d6 8d 45 f4 50 ff |hD....E.|P...E.P.|
|00000080| d7 a3 54 a1 01 00 68 0a | d7 01 00 8d 45 f4 50 ff |..T...h.|....E.P.|
|00000090| d6 8d 45 f4 50 ff d7 a3 | 58 a1 01 00 68 de d6 01 |..E.P...|X...h...|
|000000a0| 00 8d 45 f4 50 ff d6 8d | 45 f4 50 ff d7 a3 5c a1 |..E.P...|E.P...\.|
|000000b0| 01 00 68 a4 d6 01 00 8d | 45 f4 50 ff d6 8d 45 f4 |..h.....|E.P...E.|
|000000c0| 50 ff d7 a3 60 a1 01 00 | 68 88 d6 01 00 8d 45 f4 |P...`...|h.....E.|
|000000d0| 50 ff d6 8d 45 f4 50 ff | d7 a3 64 a1 01 00 68 40 |P...E.P.|..d...h@|
|000000e0| d6 01 00 8d 45 f4 50 ff | d6 8d 45 f4 50 ff d7 39 |....E.P.|..E.P..9|
|000000f0| 1d 48 a1 01 00 a3 68 a1 | 01 00 74 34 39 1d 4c a1 |.H....h.|..t49.L.|
|00000100| 01 00 74 2c 39 1d 50 a1 | 01 00 74 24 39 1d 54 a1 |..t,9.P.|..t$9.T.|
|00000110| 01 00 74 1c 39 1d 58 a1 | 01 00 74 14 39 1d 5c a1 |..t.9.X.|..t.9.\.|
|00000120| 01 00 74 0c 39 1d 60 a1 | 01 00 74 04 3b c3 75 07 |..t.9.`.|..t.;.u.|
|00000130| c7 45 fc 01 00 00 c0 8b | 45 fc 5f 5e 5b c9 c3 cc |.E......|E._^[...|
|00000140| cc cc cc cc 8b ff 55 8b | ec 81 ec 18 01 00 00 a1 |......U.|........|
|00000150| b0 a0 01 00 33 c5 89 45 | fc a1 64 a1 01 00 85 c0 |....3..E|..d.....|
|00000160| 74 2b 8d 8d e8 fe ff ff | 51 c7 85 e8 fe ff ff 14 |t+......|Q.......|
|00000170| 01 00 00 ff d0 8b 85 ec | fe ff ff a3 6c a1 01 00 |........|....l...|
|00000180| 8b 85 f0 fe ff ff a3 70 | a1 01 00 eb 14 6a 00 6a |.......p|.....j.j|
|00000190| 00 68 70 a1 01 00 68 6c | a1 01 00 ff 15 58 90 01 |.hp...hl|.....X..|
|000001a0| 00 8b 4d fc 33 cd e8 26 | af ff ff c9 c3 cc cc cc |..M.3..&|........|
|000001b0| cc cc 8b ff 55 8b ec 83 | ec 50 53 57 e8 45 fe ff |....U...|.PSW.E..|
|000001c0| ff 33 db 3b c3 0f 8c 28 | 04 00 00 56 e8 73 ff ff |.3.;...(|...V.s..|
|000001d0| ff 8b 75 0c 56 e8 2c 3e | ff ff 0f b7 06 53 50 e8 |..u.V.,>|.....SP.|
|000001e0| aa 40 ff ff 3b c3 a3 d4 | a0 01 00 0f 84 fc 03 00 |.@..;...|........|
|000001f0| 00 66 89 1d d0 a0 01 00 | 66 8b 06 56 68 d0 a0 01 |.f......|f..Vh...|
|00000200| 00 66 a3 d2 a0 01 00 ff | 15 dc 90 01 00 8b 75 08 |.f......|......u.|
|00000210| 53 68 d4 00 00 00 89 35 | 74 a1 01 00 e8 6d 40 ff |Sh.....5|t....m@.|
|00000220| ff 3b c3 a3 44 a1 01 00 | 0f 84 bf 03 00 00 89 58 |.;..D...|.......X|
|00000230| 04 a1 44 a1 01 00 66 c7 | 00 32 00 a1 44 a1 01 00 |..D...f.|.2..D...|
|00000240| 66 89 58 02 33 c0 40 53 | 50 68 88 a1 01 00 a3 7c |f.X.3.@S|Ph.....||
|00000250| a1 01 00 89 1d 80 a1 01 | 00 89 1d 84 a1 01 00 ff |........|........|
|00000260| 15 7c 90 01 00 8b 3d 24 | 90 01 00 68 e4 d8 01 00 |.|....=$|...h....|
|00000270| 8d 45 f0 50 ff d7 68 78 | a1 01 00 53 68 00 01 00 |.E.P..hx|...Sh...|
|00000280| 00 6a 08 8d 45 f0 50 53 | 56 ff 15 54 91 01 00 3d |.j..E.PS|V..T...=|
|00000290| 3a 00 00 c0 75 24 68 b6 | d8 01 00 8d 45 f0 50 ff |:...u$h.|....E.P.|
|000002a0| d7 68 78 a1 01 00 53 68 | 00 01 00 00 6a 08 8d 45 |.hx...Sh|....j..E|
|000002b0| f0 50 53 56 ff 15 54 91 | 01 00 3b c3 0f 8c 30 03 |.PSV..T.|..;...0.|
|000002c0| 00 00 68 8e d8 01 00 8d | 45 e8 50 89 1d a0 a1 01 |..h.....|E.P.....|
|000002d0| 00 c7 05 9c a1 01 00 01 | 00 00 00 ff d7 8d 45 f0 |........|......E.|
|000002e0| 50 8d 45 e8 50 ff 15 70 | 91 01 00 3b c3 7d 15 8b |P.E.P..p|...;.}..|
|000002f0| f8 ff 35 78 a1 01 00 ff | 15 30 91 01 00 8b c7 e9 |..5x....|.0......|
|00000300| ee 02 00 00 68 4e 58 46 | 53 e8 58 3f ff ff e8 69 |....hNXF|S.X?...i|
|00000310| 3f ff ff 6a 1c 59 8d 56 | 38 53 b8 72 75 01 00 8b |?..j.Y.V|8S.ru...|
|00000320| fa f3 ab 6a 70 5f 57 c7 | 02 4a 70 01 00 c7 46 44 |...jp_W.|.Jp...FD|
|00000330| 78 57 01 00 c7 46 48 00 | 57 01 00 c7 86 80 00 00 |xW...FH.|W.......|
|00000340| 00 ca 57 01 00 c7 46 40 | 78 5a 01 00 c7 46 50 c2 |..W...F@|xZ...FP.|
|00000350| 5b 01 00 c7 46 6c 76 c1 | 01 00 c7 46 70 e0 b8 01 |[...Flv.|...Fp...|
|00000360| 00 e8 28 3f ff ff 8b f0 | 3b f3 75 0a bf 9a 00 00 |..(?....|;.u.....|
|00000370| c0 e9 7b ff ff ff 57 53 | 56 e8 b6 ad ff ff 89 3e |..{...WS|V......>|
|00000380| 8b 7d 08 c7 46 04 06 b0 | 01 00 c7 46 08 5c b0 01 |.}..F...|...F.\..|
|00000390| 00 c7 46 0c d0 b0 01 00 | c7 46 10 62 b1 01 00 c7 |..F.....|.F.b....|
|000003a0| 46 14 b0 b1 01 00 c7 46 | 18 fe b1 01 00 c7 46 1c |F......F|......F.|
|000003b0| 58 b2 01 00 c7 46 20 ac | b2 01 00 c7 46 24 fa b2 |X....F .|....F$..|
|000003c0| 01 00 c7 46 28 48 b3 01 | 00 c7 46 34 a2 b3 01 00 |...F(H..|..F4....|
|000003d0| c7 46 38 ca b3 01 00 c7 | 46 40 18 b4 01 00 c7 46 |.F8.....|F@.....F|
|000003e0| 44 98 74 01 00 c7 46 48 | 6c b4 01 00 c7 46 4c fa |D.t...FH|l....FL.|
|000003f0| b4 01 00 c7 46 50 44 b5 | 01 00 c7 46 54 a0 b5 01 |....FPD.|...FT...|
|00000400| 00 c7 46 58 e0 74 01 00 | c7 46 5c 28 75 01 00 c7 |..FX.t..|.F\(u...|
|00000410| 46 60 38 b6 01 00 89 77 | 28 8b 15 48 a1 01 00 83 |F`8....w|(..H....|
|00000420| c4 0c 3b d3 74 54 b8 86 | 76 01 00 b9 7c 76 01 00 |..;.tT..|v...|v..|
|00000430| 89 45 bc 89 45 c4 89 45 | cc 89 45 d4 89 45 dc 89 |.E..E..E|..E..E..|
|00000440| 45 e4 8d 45 b0 50 57 c7 | 45 b0 38 00 00 00 89 4d |E..E.PW.|E.8....M|
|00000450| b8 89 4d c0 89 4d c8 89 | 4d d0 89 4d d8 89 4d e0 |..M..M..|M..M..M.|
|00000460| ff d2 3b c3 89 45 f8 7d | 11 56 89 5f 28 e8 42 3e |..;..E.}|.V._(.B>|
|00000470| ff ff 8b 7d f8 e9 77 fe | ff ff 8b 3d 7c 90 01 00 |...}..w.|...=|...|
|00000480| b8 c8 a1 01 00 a3 cc a1 | 01 00 a3 c8 a1 01 00 33 |........|.......3|
|00000490| c0 40 53 50 68 dc a1 01 | 00 a3 d0 a1 01 00 89 1d |.@SPh...|........|
|000004a0| d4 a1 01 00 89 1d d8 a1 | 01 00 ff d7 b9 7a d8 01 |........|.....z..|
|000004b0| 00 8b c1 8d 50 02 89 55 | f8 66 8b 10 40 40 66 3b |....P..U|.f..@@f;|
|000004c0| d3 75 f6 2b 45 f8 53 d1 | f8 03 c0 50 51 68 f0 a1 |.u.+E.S.|...PQh..|
|000004d0| 01 00 e8 0f 41 ff ff b8 | fc a1 01 00 a3 00 a2 01 |....A...|........|
|000004e0| 00 a3 fc a1 01 00 33 c0 | 40 53 50 68 10 a2 01 00 |......3.|@SPh....|
|000004f0| a3 04 a2 01 00 89 1d 08 | a2 01 00 89 1d 0c a2 01 |........|........|
|00000500| 00 ff d7 8b 3d 6c 91 01 | 00 b8 74 a2 01 00 68 3c |....=l..|..t...h<|
|00000510| a2 01 00 89 1d 38 a2 01 | 00 a3 78 a2 01 00 a3 74 |.....8..|..x....t|
|00000520| a2 01 00 ff d7 68 7c a2 | 01 00 ff d7 e8 5f e2 ff |.....h|.|....._..|
|00000530| ff 68 96 bf 01 00 ff 75 | 08 ff 15 68 91 01 00 8b |.h.....u|...h....|
|00000540| f8 3b fb 7d 11 8b 45 08 | 56 89 58 28 e8 63 3d ff |.;.}..E.|V.X(.c=.|
|00000550| ff e9 9b fd ff ff 8b 3d | 24 90 01 00 68 5a d8 01 |.......=|$...hZ..|
|00000560| 00 8d 45 f0 50 ff d7 8b | 35 d4 90 01 00 8d 45 0c |..E.P...|5.....E.|
|00000570| 50 8d 45 fc 50 68 80 00 | 00 00 8d 45 f0 50 ff d6 |P.E.Ph..|...E.P..|
|00000580| 85 c0 7c 13 6a 01 ff 75 | 0c e8 08 ea ff ff 8b 4d |..|.j..u|.......M|
|00000590| fc ff 15 2c 90 01 00 68 | 38 d8 01 00 8d 45 f0 50 |...,...h|8....E.P|
|000005a0| ff d7 8d 45 0c 50 8d 45 | fc 50 68 80 00 00 00 8d |...E.P.E|.Ph.....|
|000005b0| 45 f0 50 ff d6 85 c0 7c | 13 6a 01 ff 75 0c e8 d3 |E.P....||.j..u...|
|000005c0| e9 ff ff 8b 4d fc ff 15 | 2c 90 01 00 a1 78 a1 01 |....M...|,....x..|
|000005d0| 00 81 60 1c 7f ff ff ff | 89 1d a4 a1 01 00 89 1d |..`.....|........|
|000005e0| a8 a1 01 00 e8 bb 5b ff | ff 33 c0 eb 05 b8 9a 00 |......[.|.3......|
|000005f0| 00 c0 5e 5f 5b c9 c2 08 | 00 cc cc cc cc cc 8b ff |..^_[...|........|
|00000600| 55 8b ec a1 b0 a0 01 00 | 85 c0 b9 4e e6 40 bb 74 |U.......|...N.@.t|
|00000610| 04 3b c1 75 1e 8b 15 3c | 90 01 00 b8 b0 a0 01 00 |.;.u...<|........|
|00000620| c1 e8 08 33 02 a3 b0 a0 | 01 00 75 07 8b c1 a3 b0 |...3....|..u.....|
|00000630| a0 01 00 f7 d0 a3 b4 a0 | 01 00 5d e9 72 fb ff ff |........|..].r...|
|00000640| 49 00 6f 00 43 00 72 00 | 65 00 61 00 74 00 65 00 |I.o.C.r.|e.a.t.e.|
|00000650| 46 00 69 00 6c 00 65 00 | 53 00 70 00 65 00 63 00 |F.i.l.e.|S.p.e.c.|
|00000660| 69 00 66 00 79 00 44 00 | 65 00 76 00 69 00 63 00 |i.f.y.D.|e.v.i.c.|
|00000670| 65 00 4f 00 62 00 6a 00 | 65 00 63 00 74 00 48 00 |e.O.b.j.|e.c.t.H.|
|00000680| 69 00 6e 00 74 00 00 00 | 52 00 74 00 6c 00 47 00 |i.n.t...|R.t.l.G.|
|00000690| 65 00 74 00 56 00 65 00 | 72 00 73 00 69 00 6f 00 |e.t.V.e.|r.s.i.o.|
|000006a0| 6e 00 00 00 49 00 6f 00 | 47 00 65 00 74 00 41 00 |n...I.o.|G.e.t.A.|
|000006b0| 74 00 74 00 61 00 63 00 | 68 00 65 00 64 00 44 00 |t.t.a.c.|h.e.d.D.|
|000006c0| 65 00 76 00 69 00 63 00 | 65 00 52 00 65 00 66 00 |e.v.i.c.|e.R.e.f.|
|000006d0| 65 00 72 00 65 00 6e 00 | 63 00 65 00 00 00 49 00 |e.r.e.n.|c.e...I.|
|000006e0| 6f 00 47 00 65 00 74 00 | 44 00 69 00 73 00 6b 00 |o.G.e.t.|D.i.s.k.|
|000006f0| 44 00 65 00 76 00 69 00 | 63 00 65 00 4f 00 62 00 |D.e.v.i.|c.e.O.b.|
|00000700| 6a 00 65 00 63 00 74 00 | 00 00 49 00 6f 00 47 00 |j.e.c.t.|..I.o.G.|
|00000710| 65 00 74 00 44 00 65 00 | 76 00 69 00 63 00 65 00 |e.t.D.e.|v.i.c.e.|
|00000720| 41 00 74 00 74 00 61 00 | 63 00 68 00 6d 00 65 00 |A.t.t.a.|c.h.m.e.|
|00000730| 6e 00 74 00 42 00 61 00 | 73 00 65 00 52 00 65 00 |n.t.B.a.|s.e.R.e.|
|00000740| 66 00 00 00 49 00 6f 00 | 47 00 65 00 74 00 4c 00 |f...I.o.|G.e.t.L.|
|00000750| 6f 00 77 00 65 00 72 00 | 44 00 65 00 76 00 69 00 |o.w.e.r.|D.e.v.i.|
|00000760| 63 00 65 00 4f 00 62 00 | 6a 00 65 00 63 00 74 00 |c.e.O.b.|j.e.c.t.|
|00000770| 00 00 49 00 6f 00 45 00 | 6e 00 75 00 6d 00 65 00 |..I.o.E.|n.u.m.e.|
|00000780| 72 00 61 00 74 00 65 00 | 44 00 65 00 76 00 69 00 |r.a.t.e.|D.e.v.i.|
|00000790| 63 00 65 00 4f 00 62 00 | 6a 00 65 00 63 00 74 00 |c.e.O.b.|j.e.c.t.|
|000007a0| 4c 00 69 00 73 00 74 00 | 00 00 49 00 6f 00 41 00 |L.i.s.t.|..I.o.A.|
|000007b0| 74 00 74 00 61 00 63 00 | 68 00 44 00 65 00 76 00 |t.t.a.c.|h.D.e.v.|
|000007c0| 69 00 63 00 65 00 54 00 | 6f 00 44 00 65 00 76 00 |i.c.e.T.|o.D.e.v.|
|000007d0| 69 00 63 00 65 00 53 00 | 74 00 61 00 63 00 6b 00 |i.c.e.S.|t.a.c.k.|
|000007e0| 53 00 61 00 66 00 65 00 | 00 00 46 00 73 00 52 00 |S.a.f.e.|..F.s.R.|
|000007f0| 74 00 6c 00 52 00 65 00 | 67 00 69 00 73 00 74 00 |t.l.R.e.|g.i.s.t.|
|00000800| 65 00 72 00 46 00 69 00 | 6c 00 65 00 53 00 79 00 |e.r.F.i.|l.e.S.y.|
|00000810| 73 00 74 00 65 00 6d 00 | 46 00 69 00 6c 00 74 00 |s.t.e.m.|F.i.l.t.|
|00000820| 65 00 72 00 43 00 61 00 | 6c 00 6c 00 62 00 61 00 |e.r.C.a.|l.l.b.a.|
|00000830| 63 00 6b 00 73 00 00 00 | 5c 00 44 00 65 00 76 00 |c.k.s...|\.D.e.v.|
|00000840| 69 00 63 00 65 00 5c 00 | 52 00 61 00 77 00 43 00 |i.c.e.\.|R.a.w.C.|
|00000850| 64 00 52 00 6f 00 6d 00 | 00 00 5c 00 44 00 65 00 |d.R.o.m.|..\.D.e.|
|00000860| 76 00 69 00 63 00 65 00 | 5c 00 52 00 61 00 77 00 |v.i.c.e.|\.R.a.w.|
|00000870| 44 00 69 00 73 00 6b 00 | 00 00 69 00 6e 00 64 00 |D.i.s.k.|..i.n.d.|
|00000880| 65 00 78 00 2e 00 64 00 | 61 00 74 00 00 00 5c 00 |e.x...d.|a.t...\.|
|00000890| 44 00 6f 00 73 00 44 00 | 65 00 76 00 69 00 63 00 |D.o.s.D.|e.v.i.c.|
|000008a0| 65 00 73 00 5c 00 54 00 | 66 00 46 00 73 00 4d 00 |e.s.\.T.|f.F.s.M.|
|000008b0| 6f 00 6e 00 00 00 5c 00 | 46 00 69 00 6c 00 65 00 |o.n...\.|F.i.l.e.|
|000008c0| 53 00 79 00 73 00 74 00 | 65 00 6d 00 5c 00 54 00 |S.y.s.t.|e.m.\.T.|
|000008d0| 66 00 46 00 73 00 4d 00 | 6f 00 6e 00 43 00 44 00 |f.F.s.M.|o.n.C.D.|
|000008e0| 4f 00 00 00 5c 00 46 00 | 69 00 6c 00 65 00 53 00 |O...\.F.|i.l.e.S.|
|000008f0| 79 00 73 00 74 00 65 00 | 6d 00 5c 00 46 00 69 00 |y.s.t.e.|m.\.F.i.|
|00000900| 6c 00 74 00 65 00 72 00 | 73 00 5c 00 54 00 66 00 |l.t.e.r.|s.\.T.f.|
|00000910| 46 00 73 00 4d 00 6f 00 | 6e 00 00 00 70 d9 00 00 |F.s.M.o.|n...p...|
|00000920| 00 00 00 00 00 00 00 00 | 38 e2 00 00 18 90 00 00 |........|8.......|
|00000930| 58 d9 00 00 00 00 00 00 | 00 00 00 00 ae e2 00 00 |X.......|........|
|00000940| 00 90 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000950| 00 00 00 00 00 00 00 00 | 82 e2 00 00 6e e2 00 00 |........|....n...|
|00000960| 5a e2 00 00 46 e2 00 00 | 98 e2 00 00 00 00 00 00 |Z...F...|........|
|00000970| dc da 00 00 e6 da 00 00 | f6 da 00 00 08 db 00 00 |........|........|
|00000980| 20 db 00 00 2c db 00 00 | 44 db 00 00 62 db 00 00 | ...,...|D...b...|
|00000990| 70 db 00 00 7a db 00 00 | 88 db 00 00 a0 db 00 00 |p...z...|........|
|000009a0| b8 db 00 00 cc db 00 00 | d8 db 00 00 f0 db 00 00 |........|........|
|000009b0| 0c dc 00 00 1c dc 00 00 | 38 dc 00 00 52 dc 00 00 |........|8...R...|
|000009c0| 62 dc 00 00 7e dc 00 00 | 8c dc 00 00 a4 dc 00 00 |b...~...|........|
|000009d0| bc dc 00 00 dc dc 00 00 | f0 dc 00 00 10 dd 00 00 |........|........|
|000009e0| 28 dd 00 00 3c dd 00 00 | 58 dd 00 00 6a dd 00 00 |(...<...|X...j...|
|000009f0| 7e dd 00 00 88 dd 00 00 | a2 dd 00 00 c0 dd 00 00 |~.......|........|
|00000a00| da dd 00 00 f2 dd 00 00 | 0a de 00 00 18 de 00 00 |........|........|
|00000a10| 22 de 00 00 2c de 00 00 | 36 de 00 00 52 de 00 00 |"...,...|6...R...|
|00000a20| 64 de 00 00 7a de 00 00 | 8a de 00 00 aa de 00 00 |d...z...|........|
|00000a30| c6 de 00 00 e2 de 00 00 | fa de 00 00 0a df 00 00 |........|........|
|00000a40| 18 df 00 00 30 df 00 00 | 48 df 00 00 60 df 00 00 |....0...|H...`...|
|00000a50| 82 df 00 00 9a df 00 00 | b4 df 00 00 d2 df 00 00 |........|........|
|00000a60| ea df 00 00 fa df 00 00 | 04 e0 00 00 18 e0 00 00 |........|........|
|00000a70| 2c e0 00 00 42 e0 00 00 | 5e e0 00 00 76 e0 00 00 |,...B...|^...v...|
|00000a80| 8c e0 00 00 9e e0 00 00 | ac e0 00 00 be e0 00 00 |........|........|
|00000a90| d0 e0 00 00 e2 e0 00 00 | f6 e0 00 00 02 e1 00 00 |........|........|
|00000aa0| 18 e1 00 00 28 e1 00 00 | 4a e1 00 00 60 e1 00 00 |....(...|J...`...|
|00000ab0| 72 e1 00 00 94 e1 00 00 | a8 e1 00 00 b8 e1 00 00 |r.......|........|
|00000ac0| d2 e1 00 00 f4 e1 00 00 | 10 e2 00 00 28 e2 00 00 |........|....(...|
|00000ad0| 40 de 00 00 b6 e2 00 00 | 00 00 00 00 5e 05 5a 77 |@.......|....^.Zw|
|00000ae0| 43 6c 6f 73 65 00 2d 00 | 44 62 67 42 72 65 61 6b |Close.-.|DbgBreak|
|00000af0| 50 6f 69 6e 74 00 a9 05 | 5a 77 51 75 65 72 79 56 |Point...|ZwQueryV|
|00000b00| 61 6c 75 65 4b 65 79 00 | 6c 04 52 74 6c 49 6e 69 |alueKey.|l.RtlIni|
|00000b10| 74 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |tUnicode|String..|
|00000b20| 88 05 5a 77 4f 70 65 6e | 4b 65 79 00 75 03 4f 62 |..ZwOpen|Key.u.Ob|
|00000b30| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|00000b40| 63 74 00 00 ca 03 50 73 | 4c 6f 6f 6b 75 70 50 72 |ct....Ps|LookupPr|
|00000b50| 6f 63 65 73 73 42 79 50 | 72 6f 63 65 73 73 49 64 |ocessByP|rocessId|
|00000b60| 00 00 93 02 4b 65 53 65 | 74 45 76 65 6e 74 00 00 |....KeSe|tEvent..|
|00000b70| 01 06 6d 65 6d 63 70 79 | 00 00 a5 02 4b 65 54 69 |..memcpy|....KeTi|
|00000b80| 63 6b 43 6f 75 6e 74 00 | 98 03 50 73 47 65 74 43 |ckCount.|..PsGetC|
|00000b90| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 49 64 00 |urrentPr|ocessId.|
|00000ba0| 45 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |E.ExAllo|catePool|
|00000bb0| 57 69 74 68 54 61 67 00 | 57 00 45 78 46 72 65 65 |WithTag.|W.ExFree|
|00000bc0| 50 6f 6f 6c 57 69 74 68 | 54 61 67 00 16 06 74 6f |PoolWith|Tag...to|
|00000bd0| 77 6c 6f 77 65 72 00 00 | f1 04 52 74 6c 55 70 63 |wlower..|..RtlUpc|
|00000be0| 61 73 65 55 6e 69 63 6f | 64 65 43 68 61 72 00 00 |aseUnico|deChar..|
|00000bf0| 2d 04 52 74 6c 44 6f 77 | 6e 63 61 73 65 55 6e 69 |-.RtlDow|ncaseUni|
|00000c00| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 c1 03 50 73 |codeStri|ng....Ps|
|00000c10| 47 65 74 56 65 72 73 69 | 6f 6e 00 00 e5 02 4d 6d |GetVersi|on....Mm|
|00000c20| 47 65 74 53 79 73 74 65 | 6d 52 6f 75 74 69 6e 65 |GetSyste|mRoutine|
|00000c30| 41 64 64 72 65 73 73 00 | e5 03 50 73 54 65 72 6d |Address.|..PsTerm|
|00000c40| 69 6e 61 74 65 53 79 73 | 74 65 6d 54 68 72 65 61 |inateSys|temThrea|
|00000c50| 64 00 27 02 4b 65 43 61 | 6e 63 65 6c 54 69 6d 65 |d.'.KeCa|ncelTime|
|00000c60| 72 00 ac 02 4b 65 57 61 | 69 74 46 6f 72 4d 75 6c |r...KeWa|itForMul|
|00000c70| 74 69 70 6c 65 4f 62 6a | 65 63 74 73 00 00 9d 02 |tipleObj|ects....|
|00000c80| 4b 65 53 65 74 54 69 6d | 65 72 00 00 6d 02 4b 65 |KeSetTim|er..m.Ke|
|00000c90| 51 75 65 72 79 54 69 6d | 65 49 6e 63 72 65 6d 65 |QueryTim|eIncreme|
|00000ca0| 6e 74 00 00 ae 02 4b 65 | 57 61 69 74 46 6f 72 53 |nt....Ke|WaitForS|
|00000cb0| 69 6e 67 6c 65 4f 62 6a | 65 63 74 00 a0 00 45 78 |ingleObj|ect...Ex|
|00000cc0| 66 49 6e 74 65 72 6c 6f | 63 6b 65 64 49 6e 73 65 |fInterlo|ckedInse|
|00000cd0| 72 74 54 61 69 6c 4c 69 | 73 74 00 00 4a 02 4b 65 |rtTailLi|st..J.Ke|
|00000ce0| 49 6e 69 74 69 61 6c 69 | 7a 65 45 76 65 6e 74 00 |Initiali|zeEvent.|
|00000cf0| a3 00 45 78 66 49 6e 74 | 65 72 6c 6f 63 6b 65 64 |..ExfInt|erlocked|
|00000d00| 52 65 6d 6f 76 65 48 65 | 61 64 4c 69 73 74 00 00 |RemoveHe|adList..|
|00000d10| 91 03 50 73 43 72 65 61 | 74 65 53 79 73 74 65 6d |..PsCrea|teSystem|
|00000d20| 54 68 72 65 61 64 00 00 | 53 02 4b 65 49 6e 69 74 |Thread..|S.KeInit|
|00000d30| 69 61 6c 69 7a 65 54 69 | 6d 65 72 00 6d 03 4f 62 |ializeTi|mer.m.Ob|
|00000d40| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|00000d50| 79 48 61 6e 64 6c 65 00 | 7e 02 4b 65 52 65 6c 65 |yHandle.|~.KeRele|
|00000d60| 61 73 65 4d 75 74 65 78 | 00 00 4e 02 4b 65 49 6e |aseMutex|..N.KeIn|
|00000d70| 69 74 69 61 6c 69 7a 65 | 4d 75 74 65 78 00 03 06 |itialize|Mutex...|
|00000d80| 6d 65 6d 73 65 74 00 00 | 2b 02 4b 65 44 65 6c 61 |memset..|+.KeDela|
|00000d90| 79 45 78 65 63 75 74 69 | 6f 6e 54 68 72 65 61 64 |yExecuti|onThread|
|00000da0| 00 00 1a 04 52 74 6c 43 | 72 65 61 74 65 53 65 63 |....RtlC|reateSec|
|00000db0| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 00 |urityDes|criptor.|
|00000dc0| 9d 05 5a 77 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |..ZwQuer|yInforma|
|00000dd0| 74 69 6f 6e 46 69 6c 65 | 00 00 ba 05 5a 77 53 65 |tionFile|....ZwSe|
|00000de0| 74 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 46 69 6c 65 |tInforma|tionFile|
|00000df0| 00 00 6e 05 5a 77 44 65 | 76 69 63 65 49 6f 43 6f |..n.ZwDe|viceIoCo|
|00000e00| 6e 74 72 6f 6c 46 69 6c | 65 00 86 05 5a 77 4f 70 |ntrolFil|e...ZwOp|
|00000e10| 65 6e 46 69 6c 65 00 00 | 22 06 77 63 73 6e 63 6d |enFile..|".wcsncm|
|00000e20| 70 00 1c 06 77 63 73 63 | 68 72 00 00 21 06 77 63 |p...wcsc|hr..!.wc|
|00000e30| 73 6e 63 61 74 00 23 06 | 77 63 73 6e 63 70 79 00 |sncat.#.|wcsncpy.|
|00000e40| 8a 01 49 6f 46 72 65 65 | 57 6f 72 6b 49 74 65 6d |..IoFree|WorkItem|
|00000e50| 00 00 b8 01 49 6f 51 75 | 65 75 65 57 6f 72 6b 49 |....IoQu|eueWorkI|
|00000e60| 74 65 6d 00 4b 01 49 6f | 41 6c 6c 6f 63 61 74 65 |tem.K.Io|Allocate|
|00000e70| 57 6f 72 6b 49 74 65 6d | 00 00 0a 02 49 6f 66 43 |WorkItem|....IofC|
|00000e80| 61 6c 6c 44 72 69 76 65 | 72 00 53 01 49 6f 42 75 |allDrive|r.S.IoBu|
|00000e90| 69 6c 64 44 65 76 69 63 | 65 49 6f 43 6f 6e 74 72 |ildDevic|eIoContr|
|00000ea0| 6f 6c 52 65 71 75 65 73 | 74 00 94 01 49 6f 47 65 |olReques|t...IoGe|
|00000eb0| 74 44 65 76 69 63 65 4f | 62 6a 65 63 74 50 6f 69 |tDeviceO|bjectPoi|
|00000ec0| 6e 74 65 72 00 00 fb 03 | 52 74 6c 41 70 70 65 6e |nter....|RtlAppen|
|00000ed0| 64 55 6e 69 63 6f 64 65 | 54 6f 53 74 72 69 6e 67 |dUnicode|ToString|
|00000ee0| 00 00 15 04 52 74 6c 43 | 6f 70 79 55 6e 69 63 6f |....RtlC|opyUnico|
|00000ef0| 64 65 53 74 72 69 6e 67 | 00 00 c3 05 5a 77 53 65 |deString|....ZwSe|
|00000f00| 74 56 61 6c 75 65 4b 65 | 79 00 65 05 5a 77 43 72 |tValueKe|y.e.ZwCr|
|00000f10| 65 61 74 65 4b 65 79 00 | 60 02 4b 65 4c 65 61 76 |eateKey.|`.KeLeav|
|00000f20| 65 43 72 69 74 69 63 61 | 6c 52 65 67 69 6f 6e 00 |eCritica|lRegion.|
|00000f30| 88 00 45 78 52 65 6c 65 | 61 73 65 52 65 73 6f 75 |..ExRele|aseResou|
|00000f40| 72 63 65 4c 69 74 65 00 | 3a 04 52 74 6c 45 71 75 |rceLite.|:.RtlEqu|
|00000f50| 61 6c 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |alUnicod|eString.|
|00000f60| 38 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |8.ExAcqu|ireResou|
|00000f70| 72 63 65 45 78 63 6c 75 | 73 69 76 65 4c 69 74 65 |rceExclu|siveLite|
|00000f80| 00 00 31 02 4b 65 45 6e | 74 65 72 43 72 69 74 69 |..1.KeEn|terCriti|
|00000f90| 63 61 6c 52 65 67 69 6f | 6e 00 a0 01 49 6f 47 65 |calRegio|n...IoGe|
|00000fa0| 74 52 65 71 75 65 73 74 | 6f 72 50 72 6f 63 65 73 |tRequest|orProces|
|00000fb0| 73 49 64 00 39 00 45 78 | 41 63 71 75 69 72 65 52 |sId.9.Ex|AcquireR|
|00000fc0| 65 73 6f 75 72 63 65 53 | 68 61 72 65 64 4c 69 74 |esourceS|haredLit|
|00000fd0| 65 00 9c 03 50 73 47 65 | 74 43 75 72 72 65 6e 74 |e...PsGe|tCurrent|
|00000fe0| 54 68 72 65 61 64 49 64 | 00 00 29 02 4b 65 43 6c |ThreadId|..).KeCl|
|00000ff0| 65 61 72 45 76 65 6e 74 | 00 00 24 06 77 63 73 72 |earEvent|..$.wcsr|
|00001000| 63 68 72 00 6b 02 4b 65 | 51 75 65 72 79 53 79 73 |chr.k.Ke|QuerySys|
|00001010| 74 65 6d 54 69 6d 65 00 | ca 00 46 73 52 74 6c 44 |temTime.|..FsRtlD|
|00001020| 69 73 73 65 63 74 4e 61 | 6d 65 00 00 0b 02 49 6f |issectNa|me....Io|
|00001030| 66 43 6f 6d 70 6c 65 74 | 65 52 65 71 75 65 73 74 |fComplet|eRequest|
|00001040| 00 00 9e 01 49 6f 47 65 | 74 52 65 6c 61 74 65 64 |....IoGe|tRelated|
|00001050| 44 65 76 69 63 65 4f 62 | 6a 65 63 74 00 00 ca 05 |DeviceOb|ject....|
|00001060| 5a 77 55 6e 6d 61 70 56 | 69 65 77 4f 66 53 65 63 |ZwUnmapV|iewOfSec|
|00001070| 74 69 6f 6e 00 00 80 05 | 5a 77 4d 61 70 56 69 65 |tion....|ZwMapVie|
|00001080| 77 4f 66 53 65 63 74 69 | 6f 6e 00 00 66 05 5a 77 |wOfSecti|on..f.Zw|
|00001090| 43 72 65 61 74 65 53 65 | 63 74 69 6f 6e 00 ab 05 |CreateSe|ction...|
|000010a0| 5a 77 52 65 61 64 46 69 | 6c 65 00 00 76 01 49 6f |ZwReadFi|le..v.Io|
|000010b0| 44 65 6c 65 74 65 44 65 | 76 69 63 65 00 00 79 01 |DeleteDe|vice..y.|
|000010c0| 49 6f 44 65 74 61 63 68 | 44 65 76 69 63 65 00 00 |IoDetach|Device..|
|000010d0| 7a 00 45 78 51 75 65 75 | 65 57 6f 72 6b 49 74 65 |z.ExQueu|eWorkIte|
|000010e0| 6d 00 6b 03 4f 62 51 75 | 65 72 79 4e 61 6d 65 53 |m.k.ObQu|eryNameS|
|000010f0| 74 72 69 6e 67 00 88 01 | 49 6f 46 72 65 65 49 72 |tring...|IoFreeIr|
|00001100| 70 00 39 02 4b 65 47 65 | 74 43 75 72 72 65 6e 74 |p.9.KeGe|tCurrent|
|00001110| 54 68 72 65 61 64 00 00 | 49 01 49 6f 41 6c 6c 6f |Thread..|I.IoAllo|
|00001120| 63 61 74 65 49 72 70 00 | fa 03 52 74 6c 41 70 70 |cateIrp.|..RtlApp|
|00001130| 65 6e 64 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |endUnico|deString|
|00001140| 54 6f 53 74 72 69 6e 67 | 00 00 76 03 4f 62 66 52 |ToString|..v.ObfR|
|00001150| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|00001160| 63 01 49 6f 43 72 65 61 | 74 65 44 65 76 69 63 65 |c.IoCrea|teDevice|
|00001170| 00 00 8d 01 49 6f 47 65 | 74 42 61 73 65 46 69 6c |....IoGe|tBaseFil|
|00001180| 65 53 79 73 74 65 6d 44 | 65 76 69 63 65 4f 62 6a |eSystemD|eviceObj|
|00001190| 65 63 74 00 83 01 49 6f | 46 69 6c 65 4f 62 6a 65 |ect...Io|FileObje|
|000011a0| 63 74 54 79 70 65 00 00 | 63 05 5a 77 43 72 65 61 |ctType..|c.ZwCrea|
|000011b0| 74 65 46 69 6c 65 00 00 | 0b 04 52 74 6c 43 6f 6d |teFile..|..RtlCom|
|000011c0| 70 61 72 65 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |pareUnic|odeStrin|
|000011d0| 67 00 c4 01 49 6f 52 65 | 67 69 73 74 65 72 46 73 |g...IoRe|gisterFs|
|000011e0| 52 65 67 69 73 74 72 61 | 74 69 6f 6e 43 68 61 6e |Registra|tionChan|
|000011f0| 67 65 00 00 60 00 45 78 | 49 6e 69 74 69 61 6c 69 |ge..`.Ex|Initiali|
|00001200| 7a 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |zeResour|ceLite..|
|00001210| 6c 01 49 6f 43 72 65 61 | 74 65 53 79 6d 62 6f 6c |l.IoCrea|teSymbol|
|00001220| 69 63 4c 69 6e 6b 00 00 | 26 02 4b 65 42 75 67 43 |icLink..|&.KeBugC|
|00001230| 68 65 63 6b 45 78 00 00 | 6e 74 6f 73 6b 72 6e 6c |heckEx..|ntoskrnl|
|00001240| 2e 65 78 65 00 00 40 00 | 4b 65 47 65 74 43 75 72 |.exe..@.|KeGetCur|
|00001250| 72 65 6e 74 49 72 71 6c | 00 00 4f 00 4b 66 52 65 |rentIrql|..O.KfRe|
|00001260| 6c 65 61 73 65 53 70 69 | 6e 4c 6f 63 6b 00 4c 00 |leaseSpi|nLock.L.|
|00001270| 4b 66 41 63 71 75 69 72 | 65 53 70 69 6e 4c 6f 63 |KfAcquir|eSpinLoc|
|00001280| 6b 00 01 00 45 78 52 65 | 6c 65 61 73 65 46 61 73 |k...ExRe|leaseFas|
|00001290| 74 4d 75 74 65 78 00 00 | 00 00 45 78 41 63 71 75 |tMutex..|..ExAcqu|
|000012a0| 69 72 65 46 61 73 74 4d | 75 74 65 78 00 00 48 41 |ireFastM|utex..HA|
|000012b0| 4c 2e 64 6c 6c 00 f0 04 | 52 74 6c 55 6e 77 69 6e |L.dll...|RtlUnwin|
|000012c0| 64 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |d.......|........|
|000012d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000012f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000013f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+