home *** CD-ROM | disk | FTP | other *** search
Unknown | 2008-06-03 | 4.0 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 00 8b c1 | c7 00 f4 e2 01 00 83 3d |........|.......=|
|00000010| 20 06 02 00 00 75 05 a3 | 20 06 02 00 c3 cc cc cc | ....u..| .......|
|00000020| cc cc 8b 51 08 b8 06 11 | 01 00 89 42 38 8b 51 08 |...Q....|...B8.Q.|
|00000030| 89 42 40 8b 51 08 83 61 | 18 f9 89 42 70 8b 51 08 |.B@.Q..a|...Bp.Q.|
|00000040| 89 42 78 8b 51 08 83 49 | 18 01 89 82 80 00 00 00 |.Bx.Q..I|........|
|00000050| 8b 41 08 c7 40 34 06 30 | 02 00 c3 cc cc cc cc cc |.A..@4.0|........|
|00000060| 8b ff 56 8b f1 e8 9c ff | ff ff c7 46 1c 04 e3 01 |..V.....|...F....|
|00000070| 00 8d 4e 28 c7 06 1c e3 | 01 00 c7 46 1c 10 e3 01 |..N(....|...F....|
|00000080| 00 e8 66 23 ff ff 33 c0 | 8d 4e 7c 88 46 74 89 46 |..f#..3.|.N|.Ft.F|
|00000090| 70 66 89 46 6c 66 89 46 | 6e e8 ca 5c ff ff 8d 8e |pf.Flf.F|n..\....|
|000000a0| b0 00 00 00 e8 31 68 ff | ff 8d 8e e8 00 00 00 e8 |.....1h.|........|
|000000b0| 0a e7 fe ff 8d 8e 78 01 | 00 00 e8 67 f7 fe ff 8b |......x.|...g....|
|000000c0| c6 5e c3 cc 24 00 73 00 | 79 00 73 00 74 00 65 00 |.^..$.s.|y.s.t.e.|
|000000d0| 6d 00 73 00 65 00 63 00 | 75 00 72 00 69 00 74 00 |m.s.e.c.|u.r.i.t.|
|000000e0| 79 00 00 00 24 00 73 00 | 79 00 73 00 74 00 65 00 |y...$.s.|y.s.t.e.|
|000000f0| 6d 00 73 00 65 00 63 00 | 75 00 72 00 69 00 74 00 |m.s.e.c.|u.r.i.t.|
|00000100| 79 00 00 00 cc cc cc cc | cc cc 6a 20 68 30 e3 01 |y.......|..j h0..|
|00000110| 00 e8 26 76 ff ff 8b f1 | 89 75 e0 c6 46 68 01 33 |..&v....|.u..Fh.3|
|00000120| ff 89 be 08 02 00 00 89 | be 0c 02 00 00 ff 15 98 |........|........|
|00000130| e0 01 00 89 46 78 89 7e | 20 89 7e 24 8d 9e e0 00 |....Fx.~| .~$....|
|00000140| 00 00 89 3b 89 be e4 00 | 00 00 89 7d fc 6a 10 57 |...;....|...}.j.W|
|00000150| 68 c4 40 02 00 68 00 80 | 00 00 68 e4 40 02 00 6a |h.@..h..|..h.@..j|
|00000160| 38 e8 34 f2 ff ff 83 c4 | 18 89 45 dc 3b c7 74 0a |8.4.....|..E.;.t.|
|00000170| 57 8b c8 e8 da 02 00 00 | eb 02 33 c0 89 46 20 3b |W.......|..3..F ;|
|00000180| c7 0f 85 a1 00 00 00 c7 | 45 e4 9a 00 00 c0 57 ff |........|E.....W.|
|00000190| 15 00 e0 01 00 53 68 8c | e2 01 00 57 57 68 9c e2 |.....Sh.|...WWh..|
|000001a0| 01 00 ff 15 04 e0 01 00 | 89 45 e4 3b c7 0f 85 15 |........|.E.;....|
|000001b0| 01 00 00 39 3b 0f 84 0d | 01 00 00 8d 9e e4 00 00 |...9;...|........|
|000001c0| 00 53 68 7c e2 01 00 57 | 57 68 9c e2 01 00 ff 15 |.Sh|...W|Wh......|
|000001d0| 04 e0 01 00 89 45 e4 3b | c7 0f 85 e9 00 00 00 39 |.....E.;|.......9|
|000001e0| 3b 0f 84 e1 00 00 00 8d | 8e b0 00 00 00 e8 78 6c |;.......|......xl|
|000001f0| ff ff 8d 8e e8 00 00 00 | e8 d1 ee fe ff 85 c0 74 |........|.......t|
|00000200| 1b 8d 8e 78 01 00 00 e8 | 26 07 ff ff 85 c0 74 0c |...x....|&.....t.|
|00000210| 8d 4e 7c e8 26 5b ff ff | 85 c0 75 2e c7 45 e4 01 |.N|.&[..|..u..E..|
|00000220| 00 00 c0 e9 a0 00 00 00 | 8b 48 28 89 4d e4 3b cf |........|.H(.M.;.|
|00000230| 0f 8d 58 ff ff ff 8b c8 | 89 4d d8 89 4d d4 8b 01 |..X.....|.M..M...|
|00000240| 6a 01 ff 50 04 89 7e 20 | eb 7e 89 be 0c 02 00 00 |j..P..~ |.~......|
|00000250| 8d 5e 28 8b cb e8 fa 08 | ff ff 8b 03 8b cb ff 50 |.^(.....|.......P|
|00000260| 1c 89 45 e4 3d 3a 00 00 | c0 75 25 8b 46 08 89 45 |..E.=:..|.u%.F..E|
|00000270| d0 8d 8e 0c 02 00 00 51 | 56 68 7e 15 01 00 50 68 |.......Q|Vh~...Ph|
|00000280| f4 fb 01 00 6a 01 6a 02 | ff 15 10 e1 01 00 eb 14 |....j.j.|........|
|00000290| 3b c7 7c 34 8b 13 57 57 | 8d 86 08 02 00 00 50 8b |;.|4..WW|......P.|
|000002a0| cb ff 52 08 89 45 e4 ff | 76 08 e8 1f 40 ff ff 8b |..R..E..|v...@...|
|000002b0| c8 e8 5a 3e ff ff 57 57 | 57 8d 46 1c 50 68 5c e2 |..Z>..WW|W.F.Ph\.|
|000002c0| 01 00 ff 15 08 e0 01 00 | 83 4d fc ff e8 10 00 00 |........|.M......|
|000002d0| 00 8b 45 e4 e8 9e 74 ff | ff c2 04 00 33 ff 8b 75 |..E...t.|....3..u|
|000002e0| e0 39 7d e4 74 07 8b 06 | 8b ce ff 50 08 c3 cc cc |.9}.t...|...P....|
|000002f0| cc cc cc cc 68 44 64 6b | 20 68 10 02 00 00 6a 00 |....hDdk| h....j.|
|00000300| ff 15 70 e1 01 00 85 c0 | 74 07 8b c8 e8 4f fd ff |..p.....|t....O..|
|00000310| ff 6a 00 68 28 06 02 00 | ff 15 2c e0 01 00 c3 cc |.j.h(...|..,.....|
|00000320| cc cc cc cc 8b ff 55 8b | ec 51 53 e8 c4 ff ff ff |......U.|.QS.....|
|00000330| 8b 1d 20 06 02 00 85 db | 89 5d fc 75 0a b8 9a 00 |.. .....|.].u....|
|00000340| 00 c0 e9 c2 00 00 00 8b | 45 08 56 8b 75 0c 89 43 |........|E.V.u..C|
|00000350| 08 0f b7 06 57 d1 e8 8d | 44 00 02 6a 01 50 e8 c5 |....W...|D..j.P..|
|00000360| cc fe ff 85 c0 59 59 74 | 26 0f b7 0e 8b 76 04 8b |.....YYt|&....v..|
|00000370| d1 c1 e9 02 8b f8 f3 a5 | 8b ca 83 e1 03 f3 a4 8b |........|........|
|00000380| 4d 0c 0f b7 09 d1 e9 66 | 83 24 48 00 50 eb 02 6a |M......f|.$H.P..j|
|00000390| 00 8d 43 0c 50 ff 15 2c | e0 01 00 a1 28 06 02 00 |..C.P..,|....(...|
|000003a0| 66 85 c0 76 46 0f b7 f0 | 8b de d1 eb d1 e3 8d 43 |f..vF...|.......C|
|000003b0| 02 6a 01 50 e8 6f cc fe | ff 85 c0 59 59 74 29 8b |.j.P.o..|...YYt).|
|000003c0| ce 8b 35 2c 06 02 00 8b | d1 c1 e9 02 8b f8 f3 a5 |..5,....|........|
|000003d0| 8b ca 83 e1 03 50 f3 a4 | 66 83 24 03 00 68 28 06 |.....P..|f.$..h(.|
|000003e0| 02 00 ff 15 2c e0 01 00 | 8b 5d fc 8b cb e8 30 fc |....,...|.]....0.|
|000003f0| ff ff ff 75 0c 8b 03 ff | 50 04 8b 4b 08 83 79 04 |...u....|P..K..y.|
|00000400| 00 5f 0f 95 c1 88 4b 14 | 5e 5b c9 c2 08 00 cc cc |._....K.|^[......|
|00000410| cc cc cc cc 8b ff 55 8b | ec 56 57 e8 78 88 ff ff |......U.|.VW.x...|
|00000420| be 00 00 00 c0 8b f8 23 | c6 3b c6 74 13 ff 75 0c |.......#|.;.t..u.|
|00000430| ff 75 08 e8 ec fe ff ff | 8b f8 23 c6 3b c6 75 05 |.u......|..#.;.u.|
|00000440| e8 a6 87 ff ff 8b c7 5f | 5e 5d c2 08 00 cc cc cc |......._|^]......|
|00000450| cc cc 8b ff 55 8b ec 56 | 8b f1 e8 5b ec ff ff 8b |....U..V|...[....|
|00000460| 45 08 83 66 34 00 89 46 | 30 c7 06 40 e3 01 00 8b |E..f4..F|0..@....|
|00000470| c6 5e 5d c2 04 00 cc cc | cc cc cc 8b ff 55 8b ec |.^].....|.....U..|
|00000480| a1 5c 05 02 00 85 c0 b9 | 40 bb 00 00 74 04 3b c1 |.\......|@...t.;.|
|00000490| 75 23 8b 15 08 e1 01 00 | b8 5c 05 02 00 c1 e8 08 |u#......|.\......|
|000004a0| 33 02 25 ff ff 00 00 a3 | 5c 05 02 00 75 07 8b c1 |3.%.....|\...u...|
|000004b0| a3 5c 05 02 00 f7 d0 a3 | 58 05 02 00 5d e9 52 ff |.\......|X...].R.|
|000004c0| ff ff cc cc 34 45 01 00 | 00 00 00 00 00 00 00 00 |....4E..|........|
|000004d0| 06 4c 01 00 20 e0 00 00 | 14 45 01 00 00 00 00 00 |.L.. ...|.E......|
|000004e0| 00 00 00 00 62 4c 01 00 | 00 e0 00 00 24 45 01 00 |....bL..|....$E..|
|000004f0| 00 00 00 00 00 00 00 00 | ac 4c 01 00 10 e0 00 00 |........|.L......|
|00000500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000510| 00 00 00 00 50 4c 01 00 | 38 4c 01 00 1c 4c 01 00 |....PL..|8L...L..|
|00000520| 00 00 00 00 92 4c 01 00 | 78 4c 01 00 6c 4c 01 00 |.....L..|xL..lL..|
|00000530| 00 00 00 00 74 47 01 00 | 88 47 01 00 ac 47 01 00 |....tG..|.G...G..|
|00000540| b6 47 01 00 ce 47 01 00 | e4 47 01 00 f0 47 01 00 |.G...G..|.G...G..|
|00000550| 00 48 01 00 20 48 01 00 | 36 48 01 00 46 48 01 00 |.H.. H..|6H..FH..|
|00000560| 56 48 01 00 66 48 01 00 | 7e 48 01 00 90 48 01 00 |VH..fH..|~H...H..|
|00000570| 9c 48 01 00 b8 48 01 00 | d0 48 01 00 ea 48 01 00 |.H...H..|.H...H..|
|00000580| fe 48 01 00 0e 49 01 00 | 30 49 01 00 4a 49 01 00 |.H...I..|0I..JI..|
|00000590| 54 49 01 00 60 49 01 00 | 74 49 01 00 82 49 01 00 |TI..`I..|tI...I..|
|000005a0| 8c 49 01 00 9a 49 01 00 | b0 49 01 00 5c 47 01 00 |.I...I..|.I..\G..|
|000005b0| d4 49 01 00 e8 49 01 00 | 04 4a 01 00 0e 4a 01 00 |.I...I..|.J...J..|
|000005c0| 18 4a 01 00 2e 4a 01 00 | 48 4a 01 00 60 4a 01 00 |.J...J..|HJ..`J..|
|000005d0| 7c 4a 01 00 8c 4a 01 00 | aa 4a 01 00 b4 4a 01 00 ||J...J..|.J...J..|
|000005e0| be 4a 01 00 d6 4a 01 00 | f2 4a 01 00 0e 4b 01 00 |.J...J..|.J...K..|
|000005f0| 28 4b 01 00 44 4b 01 00 | 58 4b 01 00 66 4b 01 00 |(K..DK..|XK..fK..|
|00000600| 78 4b 01 00 86 4b 01 00 | 96 4b 01 00 ac 4b 01 00 |xK...K..|.K...K..|
|00000610| be 4b 01 00 ca 4b 01 00 | d8 4b 01 00 e8 4b 01 00 |.K...K..|.K...K..|
|00000620| f6 4b 01 00 3a 47 01 00 | 1e 47 01 00 06 47 01 00 |.K..:G..|.G...G..|
|00000630| ea 46 01 00 da 46 01 00 | d0 46 01 00 b8 46 01 00 |.F...F..|.F...F..|
|00000640| a4 46 01 00 c2 49 01 00 | ba 4c 01 00 d6 4c 01 00 |.F...I..|.L...L..|
|00000650| e8 4c 01 00 00 4d 01 00 | 18 4d 01 00 3a 4d 01 00 |.L...M..|.M..:M..|
|00000660| 5e 4d 01 00 70 4d 01 00 | 88 4d 01 00 9c 4d 01 00 |^M..pM..|.M...M..|
|00000670| ac 4d 01 00 ba 4d 01 00 | c8 4d 01 00 e2 4d 01 00 |.M...M..|.M...M..|
|00000680| fa 4d 01 00 8c 46 01 00 | 00 00 00 00 45 00 45 78 |.M...F..|....E.Ex|
|00000690| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|000006a0| 54 61 67 00 57 00 45 78 | 46 72 65 65 50 6f 6f 6c |Tag.W.Ex|FreePool|
|000006b0| 57 69 74 68 54 61 67 00 | 51 02 4b 65 49 6e 69 74 |WithTag.|Q.KeInit|
|000006c0| 69 61 6c 69 7a 65 53 70 | 69 6e 4c 6f 63 6b 00 00 |ializeSp|inLock..|
|000006d0| 5e 05 5a 77 43 6c 6f 73 | 65 00 7f 00 45 78 52 61 |^.ZwClos|e...ExRa|
|000006e0| 69 73 65 53 74 61 74 75 | 73 00 8f 02 4b 65 53 65 |iseStatu|s...KeSe|
|000006f0| 72 76 69 63 65 44 65 73 | 63 72 69 70 74 6f 72 54 |rviceDes|criptorT|
|00000700| 61 62 6c 65 00 00 75 03 | 4f 62 66 44 65 72 65 66 |able..u.|ObfDeref|
|00000710| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 94 01 |erenceOb|ject....|
|00000720| 49 6f 47 65 74 44 65 76 | 69 63 65 4f 62 6a 65 63 |IoGetDev|iceObjec|
|00000730| 74 50 6f 69 6e 74 65 72 | 00 00 c6 01 49 6f 52 65 |tPointer|....IoRe|
|00000740| 67 69 73 74 65 72 50 6c | 75 67 50 6c 61 79 4e 6f |gisterPl|ugPlayNo|
|00000750| 74 69 66 69 63 61 74 69 | 6f 6e 00 00 98 03 50 73 |tificati|on....Ps|
|00000760| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|00000770| 73 49 64 00 df 05 5f 65 | 78 63 65 70 74 5f 68 61 |sId..._e|xcept_ha|
|00000780| 6e 64 6c 65 72 33 00 00 | ef 01 49 6f 55 6e 72 65 |ndler3..|..IoUnre|
|00000790| 67 69 73 74 65 72 50 6c | 75 67 50 6c 61 79 4e 6f |gisterPl|ugPlayNo|
|000007a0| 74 69 66 69 63 61 74 69 | 6f 6e 00 00 20 06 77 63 |tificati|on.. .wc|
|000007b0| 73 6c 65 6e 00 00 6c 04 | 52 74 6c 49 6e 69 74 55 |slen..l.|RtlInitU|
|000007c0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 0b 02 |nicodeSt|ring....|
|000007d0| 49 6f 66 43 6f 6d 70 6c | 65 74 65 52 65 71 75 65 |IofCompl|eteReque|
|000007e0| 73 74 00 00 89 01 49 6f | 46 72 65 65 4d 64 6c 00 |st....Io|FreeMdl.|
|000007f0| 10 03 4d 6d 55 6e 6c 6f | 63 6b 50 61 67 65 73 00 |..MmUnlo|ckPages.|
|00000800| f5 02 4d 6d 4d 61 70 4c | 6f 63 6b 65 64 50 61 67 |..MmMapL|ockedPag|
|00000810| 65 73 53 70 65 63 69 66 | 79 43 61 63 68 65 00 00 |esSpecif|yCache..|
|00000820| 01 03 4d 6d 50 72 6f 62 | 65 41 6e 64 4c 6f 63 6b |..MmProb|eAndLock|
|00000830| 50 61 67 65 73 00 4a 01 | 49 6f 41 6c 6c 6f 63 61 |Pages.J.|IoAlloca|
|00000840| 74 65 4d 64 6c 00 8a 03 | 50 72 6f 62 65 46 6f 72 |teMdl...|ProbeFor|
|00000850| 57 72 69 74 65 00 89 03 | 50 72 6f 62 65 46 6f 72 |Write...|ProbeFor|
|00000860| 52 65 61 64 00 00 ae 02 | 4b 65 57 61 69 74 46 6f |Read....|KeWaitFo|
|00000870| 72 53 69 6e 67 6c 65 4f | 62 6a 65 63 74 00 7e 02 |rSingleO|bject.~.|
|00000880| 4b 65 52 65 6c 65 61 73 | 65 4d 75 74 65 78 00 00 |KeReleas|eMutex..|
|00000890| f0 05 5f 77 63 73 69 63 | 6d 70 00 00 9f 05 5a 77 |.._wcsic|mp....Zw|
|000008a0| 51 75 65 72 79 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |QueryInf|ormation|
|000008b0| 50 72 6f 63 65 73 73 00 | 9c 03 50 73 47 65 74 43 |Process.|..PsGetC|
|000008c0| 75 72 72 65 6e 74 54 68 | 72 65 61 64 49 64 00 00 |urrentTh|readId..|
|000008d0| 94 00 45 78 53 79 73 74 | 65 6d 54 69 6d 65 54 6f |..ExSyst|emTimeTo|
|000008e0| 4c 6f 63 61 6c 54 69 6d | 65 00 6b 02 4b 65 51 75 |LocalTim|e.k.KeQu|
|000008f0| 65 72 79 53 79 73 74 65 | 6d 54 69 6d 65 00 89 05 |erySyste|mTime...|
|00000900| 5a 77 4f 70 65 6e 50 72 | 6f 63 65 73 73 00 fa 03 |ZwOpenPr|ocess...|
|00000910| 52 74 6c 41 70 70 65 6e | 64 55 6e 69 63 6f 64 65 |RtlAppen|dUnicode|
|00000920| 53 74 72 69 6e 67 54 6f | 53 74 72 69 6e 67 00 00 |StringTo|String..|
|00000930| 0b 04 52 74 6c 43 6f 6d | 70 61 72 65 55 6e 69 63 |..RtlCom|pareUnic|
|00000940| 6f 64 65 53 74 72 69 6e | 67 00 1c 06 77 63 73 63 |odeStrin|g...wcsc|
|00000950| 68 72 00 00 f2 05 5f 77 | 63 73 6e 69 63 6d 70 00 |hr...._w|csnicmp.|
|00000960| 6d 05 5a 77 44 65 6c 65 | 74 65 56 61 6c 75 65 4b |m.ZwDele|teValueK|
|00000970| 65 79 00 00 6c 05 5a 77 | 44 65 6c 65 74 65 4b 65 |ey..l.Zw|DeleteKe|
|00000980| 79 00 02 06 6d 65 6d 6d | 6f 76 65 00 93 02 4b 65 |y...memm|ove...Ke|
|00000990| 53 65 74 45 76 65 6e 74 | 00 00 4b 01 49 6f 41 6c |SetEvent|..K.IoAl|
|000009a0| 6c 6f 63 61 74 65 57 6f | 72 6b 49 74 65 6d 00 00 |locateWo|rkItem..|
|000009b0| 8a 01 49 6f 46 72 65 65 | 57 6f 72 6b 49 74 65 6d |..IoFree|WorkItem|
|000009c0| 00 00 b8 01 49 6f 51 75 | 65 75 65 57 6f 72 6b 49 |....IoQu|eueWorkI|
|000009d0| 74 65 6d 00 e9 02 4d 6d | 49 73 41 64 64 72 65 73 |tem...Mm|IsAddres|
|000009e0| 73 56 61 6c 69 64 00 00 | a8 05 5a 77 51 75 65 72 |sValid..|..ZwQuer|
|000009f0| 79 53 79 73 74 65 6d 49 | 6e 66 6f 72 6d 61 74 69 |ySystemI|nformati|
|00000a00| 6f 6e 00 00 23 06 77 63 | 73 6e 63 70 79 00 22 06 |on..#.wc|sncpy.".|
|00000a10| 77 63 73 6e 63 6d 70 00 | c6 05 5a 77 54 65 72 6d |wcsncmp.|..ZwTerm|
|00000a20| 69 6e 61 74 65 50 72 6f | 63 65 73 73 00 00 a8 02 |inatePro|cess....|
|00000a30| 4b 65 55 6e 73 74 61 63 | 6b 44 65 74 61 63 68 50 |KeUnstac|kDetachP|
|00000a40| 72 6f 63 65 73 73 00 00 | a1 02 4b 65 53 74 61 63 |rocess..|..KeStac|
|00000a50| 6b 41 74 74 61 63 68 50 | 72 6f 63 65 73 73 00 00 |kAttachP|rocess..|
|00000a60| 6d 03 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |m.ObRefe|renceObj|
|00000a70| 65 63 74 42 79 48 61 6e | 64 6c 65 00 cd 03 50 73 |ectByHan|dle...Ps|
|00000a80| 50 72 6f 63 65 73 73 54 | 79 70 65 00 ca 03 50 73 |ProcessT|ype...Ps|
|00000a90| 4c 6f 6f 6b 75 70 50 72 | 6f 63 65 73 73 42 79 50 |LookupPr|ocessByP|
|00000aa0| 72 6f 63 65 73 73 49 64 | 00 00 0e 06 73 74 72 6e |rocessId|....strn|
|00000ab0| 63 6d 70 00 14 06 74 6f | 6c 6f 77 65 72 00 84 05 |cmp...to|lower...|
|00000ac0| 5a 77 4f 70 65 6e 44 69 | 72 65 63 74 6f 72 79 4f |ZwOpenDi|rectoryO|
|00000ad0| 62 6a 65 63 74 00 8d 05 | 5a 77 4f 70 65 6e 53 79 |bject...|ZwOpenSy|
|00000ae0| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 4f 62 6a 65 63 74 |mbolicLi|nkObject|
|00000af0| 00 00 a7 05 5a 77 51 75 | 65 72 79 53 79 6d 62 6f |....ZwQu|erySymbo|
|00000b00| 6c 69 63 4c 69 6e 6b 4f | 62 6a 65 63 74 00 99 05 |licLinkO|bject...|
|00000b10| 5a 77 51 75 65 72 79 44 | 69 72 65 63 74 6f 72 79 |ZwQueryD|irectory|
|00000b20| 4f 62 6a 65 63 74 00 00 | fb 03 52 74 6c 41 70 70 |Object..|..RtlApp|
|00000b30| 65 6e 64 55 6e 69 63 6f | 64 65 54 6f 53 74 72 69 |endUnico|deToStri|
|00000b40| 6e 67 00 00 6b 03 4f 62 | 51 75 65 72 79 4e 61 6d |ng..k.Ob|QueryNam|
|00000b50| 65 53 74 72 69 6e 67 00 | 77 05 5a 77 46 6c 75 73 |eString.|w.ZwFlus|
|00000b60| 68 4b 65 79 00 00 a9 05 | 5a 77 51 75 65 72 79 56 |hKey....|ZwQueryV|
|00000b70| 61 6c 75 65 4b 65 79 00 | a3 05 5a 77 51 75 65 72 |alueKey.|..ZwQuer|
|00000b80| 79 4b 65 79 00 00 c3 05 | 5a 77 53 65 74 56 61 6c |yKey....|ZwSetVal|
|00000b90| 75 65 4b 65 79 00 75 05 | 5a 77 45 6e 75 6d 65 72 |ueKey.u.|ZwEnumer|
|00000ba0| 61 74 65 56 61 6c 75 65 | 4b 65 79 00 74 05 5a 77 |ateValue|Key.t.Zw|
|00000bb0| 45 6e 75 6d 65 72 61 74 | 65 4b 65 79 00 00 88 05 |Enumerat|eKey....|
|00000bc0| 5a 77 4f 70 65 6e 4b 65 | 79 00 65 05 5a 77 43 72 |ZwOpenKe|y.e.ZwCr|
|00000bd0| 65 61 74 65 4b 65 79 00 | c1 03 50 73 47 65 74 56 |eateKey.|..PsGetV|
|00000be0| 65 72 73 69 6f 6e 00 00 | a5 02 4b 65 54 69 63 6b |ersion..|..KeTick|
|00000bf0| 43 6f 75 6e 74 00 26 02 | 4b 65 42 75 67 43 68 65 |Count.&.|KeBugChe|
|00000c00| 63 6b 45 78 00 00 6e 74 | 6f 73 6b 72 6e 6c 2e 65 |ckEx..nt|oskrnl.e|
|00000c10| 78 65 00 00 48 41 4c 2e | 64 6c 6c 00 05 00 5f 43 |xe..HAL.|dll..._C|
|00000c20| 6f 52 65 67 69 73 74 65 | 72 43 6c 61 73 73 4f 62 |oRegiste|rClassOb|
|00000c30| 6a 65 63 74 40 32 30 00 | 02 00 5f 43 6f 43 72 65 |ject@20.|.._CoCre|
|00000c40| 61 74 65 49 6e 73 74 61 | 6e 63 65 40 32 30 00 00 |ateInsta|nce@20..|
|00000c50| 04 00 5f 43 6f 49 6e 69 | 74 69 61 6c 69 7a 65 40 |.._CoIni|tialize@|
|00000c60| 34 00 4b 43 4f 4d 2e 53 | 59 53 00 00 02 00 53 63 |4.KCOM.S|YS....Sc|
|00000c70| 61 6e 45 76 65 6e 74 00 | 01 00 49 73 52 65 67 69 |anEvent.|..IsRegi|
|00000c80| 73 74 72 79 50 6f 72 74 | 43 6f 6e 6e 65 63 74 65 |stryPort|Connecte|
|00000c90| 64 00 00 00 49 73 50 72 | 6f 63 65 73 73 50 6f 72 |d...IsPr|ocessPor|
|00000ca0| 74 43 6f 6e 6e 65 63 74 | 65 64 00 00 69 6b 66 69 |tConnect|ed..ikfi|
|00000cb0| 6c 65 73 65 63 2e 53 59 | 53 00 f5 03 52 74 6c 41 |lesec.SY|S...RtlA|
|00000cc0| 6e 73 69 43 68 61 72 54 | 6f 55 6e 69 63 6f 64 65 |nsiCharT|oUnicode|
|00000cd0| 43 68 61 72 00 00 76 01 | 49 6f 44 65 6c 65 74 65 |Char..v.|IoDelete|
|00000ce0| 44 65 76 69 63 65 00 00 | 6c 01 49 6f 43 72 65 61 |Device..|l.IoCrea|
|00000cf0| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|00000d00| 78 01 49 6f 44 65 6c 65 | 74 65 53 79 6d 62 6f 6c |x.IoDele|teSymbol|
|00000d10| 69 63 4c 69 6e 6b 00 00 | c7 01 49 6f 52 65 67 69 |icLink..|..IoRegi|
|00000d20| 73 74 65 72 53 68 75 74 | 64 6f 77 6e 4e 6f 74 69 |sterShut|downNoti|
|00000d30| 66 69 63 61 74 69 6f 6e | 00 00 f0 01 49 6f 55 6e |fication|....IoUn|
|00000d40| 72 65 67 69 73 74 65 72 | 53 68 75 74 64 6f 77 6e |register|Shutdown|
|00000d50| 4e 6f 74 69 66 69 63 61 | 74 69 6f 6e 00 00 63 01 |Notifica|tion..c.|
|00000d60| 49 6f 43 72 65 61 74 65 | 44 65 76 69 63 65 00 00 |IoCreate|Device..|
|00000d70| 15 04 52 74 6c 43 6f 70 | 79 55 6e 69 63 6f 64 65 |..RtlCop|yUnicode|
|00000d80| 53 74 72 69 6e 67 00 00 | 4e 02 4b 65 49 6e 69 74 |String..|N.KeInit|
|00000d90| 69 61 6c 69 7a 65 4d 75 | 74 65 78 00 63 05 5a 77 |ializeMu|tex.c.Zw|
|00000da0| 43 72 65 61 74 65 46 69 | 6c 65 00 00 ab 05 5a 77 |CreateFi|le....Zw|
|00000db0| 52 65 61 64 46 69 6c 65 | 00 00 cd 05 5a 77 57 72 |ReadFile|....ZwWr|
|00000dc0| 69 74 65 46 69 6c 65 00 | 9d 05 5a 77 51 75 65 72 |iteFile.|..ZwQuer|
|00000dd0| 79 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 46 69 6c 65 |yInforma|tionFile|
|00000de0| 00 00 ba 05 5a 77 53 65 | 74 49 6e 66 6f 72 6d 61 |....ZwSe|tInforma|
|00000df0| 74 69 6f 6e 46 69 6c 65 | 00 00 4a 02 4b 65 49 6e |tionFile|..J.KeIn|
|00000e00| 69 74 69 61 6c 69 7a 65 | 45 76 65 6e 74 00 00 00 |itialize|Event...|
|00000e10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ea0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000eb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ec0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ed0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ee0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ef0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+