home *** CD-ROM | disk | FTP | other *** search
Unknown | 2001-08-17 | 4.3 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 33 c0 c2 08 00 cc 56 33 | f6 56 68 ac 42 02 00 ff |3.....V3|.Vh.B...|
|00000010| 15 f0 38 02 00 b8 a4 42 | 02 00 a3 a8 42 02 00 a3 |..8....B|....B...|
|00000020| a4 42 02 00 e8 77 cc ff | ff 56 56 e8 24 e6 fb ff |.B...w..|.VV.$...|
|00000030| 50 56 56 6a 01 56 e8 93 | e5 fb ff 33 c0 5e c2 04 |PVVj.V..|...3.^..|
|00000040| 00 cc cc cc b0 4d 05 00 | 00 00 00 00 00 00 00 00 |.....M..|........|
|00000050| a2 5c 05 00 30 37 01 00 | 80 4d 05 00 00 00 00 00 |.\..07..|.M......|
|00000060| 00 00 00 00 8e 5d 05 00 | 00 37 01 00 00 00 00 00 |.....]..|.7......|
|00000070| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000080| 72 5d 05 00 5a 5d 05 00 | 44 5d 05 00 34 5d 05 00 |r]..Z]..|D]..4]..|
|00000090| 1e 5d 05 00 08 5d 05 00 | f4 5c 05 00 e0 5c 05 00 |.]...]..|.\...\..|
|000000a0| c4 5c 05 00 b0 5c 05 00 | 80 5d 05 00 00 00 00 00 |.\...\..|.]......|
|000000b0| f2 50 05 00 10 51 05 00 | 32 51 05 00 50 51 05 00 |.P...Q..|2Q..PQ..|
|000000c0| 72 51 05 00 8a 51 05 00 | 9a 51 05 00 aa 51 05 00 |rQ...Q..|.Q...Q..|
|000000d0| ca 51 05 00 d4 51 05 00 | e8 51 05 00 fa 51 05 00 |.Q...Q..|.Q...Q..|
|000000e0| 06 52 05 00 1e 52 05 00 | 36 52 05 00 40 52 05 00 |.R...R..|6R..@R..|
|000000f0| 4a 52 05 00 5e 52 05 00 | 78 52 05 00 8c 52 05 00 |JR..^R..|xR...R..|
|00000100| ac 52 05 00 c6 52 05 00 | e2 52 05 00 f8 52 05 00 |.R...R..|.R...R..|
|00000110| 18 53 05 00 2c 53 05 00 | 42 53 05 00 52 53 05 00 |.S..,S..|BS..RS..|
|00000120| 66 53 05 00 82 53 05 00 | a4 53 05 00 b2 53 05 00 |fS...S..|.S...S..|
|00000130| ce 53 05 00 e6 53 05 00 | f8 53 05 00 04 54 05 00 |.S...S..|.S...T..|
|00000140| 0e 54 05 00 26 54 05 00 | 42 54 05 00 5e 54 05 00 |.T..&T..|BT..^T..|
|00000150| 76 54 05 00 92 54 05 00 | a0 54 05 00 be 54 05 00 |vT...T..|.T...T..|
|00000160| ce 54 05 00 ec 54 05 00 | fc 54 05 00 12 55 05 00 |.T...T..|.T...U..|
|00000170| 22 55 05 00 34 55 05 00 | 42 55 05 00 5e 55 05 00 |"U..4U..|BU..^U..|
|00000180| 72 55 05 00 7e 55 05 00 | 90 55 05 00 a2 55 05 00 |rU..~U..|.U...U..|
|00000190| b0 55 05 00 c2 55 05 00 | e0 55 05 00 f2 55 05 00 |.U...U..|.U...U..|
|000001a0| 06 56 05 00 12 56 05 00 | 2c 56 05 00 3c 56 05 00 |.V...V..|,V..<V..|
|000001b0| 4c 56 05 00 6e 56 05 00 | 90 56 05 00 de 50 05 00 |LV..nV..|.V...P..|
|000001c0| c8 56 05 00 de 56 05 00 | f0 56 05 00 0a 57 05 00 |.V...V..|.V...W..|
|000001d0| 22 57 05 00 44 57 05 00 | 5a 57 05 00 72 57 05 00 |"W..DW..|ZW..rW..|
|000001e0| 86 57 05 00 9c 57 05 00 | b0 57 05 00 c4 57 05 00 |.W...W..|.W...W..|
|000001f0| e0 57 05 00 f8 57 05 00 | 16 58 05 00 26 58 05 00 |.W...W..|.X..&X..|
|00000200| 3c 58 05 00 52 58 05 00 | 6e 58 05 00 86 58 05 00 |<X..RX..|nX...X..|
|00000210| a0 58 05 00 b0 58 05 00 | c4 58 05 00 de 58 05 00 |.X...X..|.X...X..|
|00000220| f8 58 05 00 0c 59 05 00 | 22 59 05 00 32 59 05 00 |.X...Y..|"Y..2Y..|
|00000230| 4a 59 05 00 6a 59 05 00 | 88 59 05 00 9c 59 05 00 |JY..jY..|.Y...Y..|
|00000240| ac 59 05 00 bc 59 05 00 | c8 59 05 00 d8 59 05 00 |.Y...Y..|.Y...Y..|
|00000250| ee 59 05 00 fe 59 05 00 | 18 5a 05 00 32 5a 05 00 |.Y...Y..|.Z..2Z..|
|00000260| 52 5a 05 00 72 5a 05 00 | 86 5a 05 00 9a 5a 05 00 |RZ..rZ..|.Z...Z..|
|00000270| b4 5a 05 00 c8 5a 05 00 | dc 5a 05 00 f4 5a 05 00 |.Z...Z..|.Z...Z..|
|00000280| 16 5b 05 00 34 5b 05 00 | 40 5b 05 00 50 5b 05 00 |.[..4[..|@[..P[..|
|00000290| 5a 5b 05 00 76 5b 05 00 | 90 5b 05 00 a8 5b 05 00 |Z[..v[..|.[...[..|
|000002a0| c2 5b 05 00 d6 5b 05 00 | e8 5b 05 00 0c 5c 05 00 |.[...[..|.[...\..|
|000002b0| 20 5c 05 00 30 5c 05 00 | 44 5c 05 00 64 5c 05 00 | \..0\..|D\..d\..|
|000002c0| 7c 5c 05 00 8e 5c 05 00 | d0 50 05 00 b8 50 05 00 ||\...\..|.P...P..|
|000002d0| a2 50 05 00 8a 50 05 00 | 72 50 05 00 64 50 05 00 |.P...P..|rP..dP..|
|000002e0| 4c 50 05 00 40 50 05 00 | 34 50 05 00 18 50 05 00 |LP..@P..|4P...P..|
|000002f0| b0 56 05 00 fc 4f 05 00 | 00 00 00 00 14 01 49 6e |.V...O..|......In|
|00000300| 74 65 72 6c 6f 63 6b 65 | 64 50 6f 70 45 6e 74 72 |terlocke|dPopEntr|
|00000310| 79 53 4c 69 73 74 00 00 | 15 01 49 6e 74 65 72 6c |ySList..|..Interl|
|00000320| 6f 63 6b 65 64 50 75 73 | 68 45 6e 74 72 79 53 4c |ockedPus|hEntrySL|
|00000330| 69 73 74 00 a0 03 52 74 | 6c 41 73 73 65 72 74 00 |ist...Rt|lAssert.|
|00000340| 30 00 44 62 67 50 72 69 | 6e 74 00 00 40 00 45 78 |0.DbgPri|nt..@.Ex|
|00000350| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|00000360| 54 61 67 00 4c 00 45 78 | 46 72 65 65 50 6f 6f 6c |Tag.L.Ex|FreePool|
|00000370| 00 00 10 01 49 6e 74 65 | 72 6c 6f 63 6b 65 64 44 |....Inte|rlockedD|
|00000380| 65 63 72 65 6d 65 6e 74 | 00 00 13 01 49 6e 74 65 |ecrement|....Inte|
|00000390| 72 6c 6f 63 6b 65 64 49 | 6e 63 72 65 6d 65 6e 74 |rlockedI|ncrement|
|000003a0| 00 00 da 01 49 6f 66 43 | 6f 6d 70 6c 65 74 65 52 |....IofC|ompleteR|
|000003b0| 65 71 75 65 73 74 00 00 | 60 02 4b 65 57 61 69 74 |equest..|`.KeWait|
|000003c0| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 00 |ForSingl|eObject.|
|000003d0| 49 02 4b 65 53 65 74 45 | 76 65 6e 74 00 00 0c 02 |I.KeSetE|vent....|
|000003e0| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 45 76 65 6e |KeInitia|lizeEven|
|000003f0| 74 00 44 00 45 78 44 65 | 6c 65 74 65 4e 50 61 67 |t.D.ExDe|leteNPag|
|00000400| 65 64 4c 6f 6f 6b 61 73 | 69 64 65 4c 69 73 74 00 |edLookas|ideList.|
|00000410| 54 00 45 78 49 6e 69 74 | 69 61 6c 69 7a 65 4e 50 |T.ExInit|ializeNP|
|00000420| 61 67 65 64 4c 6f 6f 6b | 61 73 69 64 65 4c 69 73 |agedLook|asideLis|
|00000430| 74 00 45 00 45 78 44 65 | 6c 65 74 65 50 61 67 65 |t.E.ExDe|letePage|
|00000440| 64 4c 6f 6f 6b 61 73 69 | 64 65 4c 69 73 74 00 00 |dLookasi|deList..|
|00000450| 55 00 45 78 49 6e 69 74 | 69 61 6c 69 7a 65 50 61 |U.ExInit|ializePa|
|00000460| 67 65 64 4c 6f 6f 6b 61 | 73 69 64 65 4c 69 73 74 |gedLooka|sideList|
|00000470| 00 00 12 02 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |....KeIn|itialize|
|00000480| 53 70 69 6e 4c 6f 63 6b | 00 00 35 03 50 72 6f 62 |SpinLock|..5.Prob|
|00000490| 65 46 6f 72 52 65 61 64 | 00 00 d9 01 49 6f 66 43 |eForRead|....IofC|
|000004a0| 61 6c 6c 44 72 69 76 65 | 72 00 2a 01 49 6f 42 75 |allDrive|r.*.IoBu|
|000004b0| 69 6c 64 53 79 6e 63 68 | 72 6f 6e 6f 75 73 46 73 |ildSynch|ronousFs|
|000004c0| 64 52 65 71 75 65 73 74 | 00 00 ee 04 5a 77 43 6c |dRequest|....ZwCl|
|000004d0| 6f 73 65 00 4d 00 45 78 | 46 72 65 65 50 6f 6f 6c |ose.M.Ex|FreePool|
|000004e0| 57 69 74 68 54 61 67 00 | 34 05 5a 77 51 75 65 72 |WithTag.|4.ZwQuer|
|000004f0| 79 56 61 6c 75 65 4b 65 | 79 00 14 05 5a 77 4f 70 |yValueKe|y...ZwOp|
|00000500| 65 6e 4b 65 79 00 0b 04 | 52 74 6c 49 6e 69 74 55 |enKey...|RtlInitU|
|00000510| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 f3 03 |nicodeSt|ring....|
|00000520| 52 74 6c 46 72 65 65 55 | 6e 69 63 6f 64 65 53 74 |RtlFreeU|nicodeSt|
|00000530| 72 69 6e 67 00 00 a4 05 | 77 63 73 63 61 74 00 00 |ring....|wcscat..|
|00000540| a7 05 77 63 73 63 70 79 | 00 00 66 04 52 74 6c 53 |..wcscpy|..f.RtlS|
|00000550| 74 72 69 6e 67 46 72 6f | 6d 47 55 49 44 00 c2 04 |tringFro|mGUID...|
|00000560| 53 65 52 65 6c 65 61 73 | 65 53 75 62 6a 65 63 74 |SeReleas|eSubject|
|00000570| 43 6f 6e 74 65 78 74 00 | a1 04 53 65 41 73 73 69 |Context.|..SeAssi|
|00000580| 67 6e 53 65 63 75 72 69 | 74 79 00 00 6c 01 49 6f |gnSecuri|ty..l.Io|
|00000590| 47 65 74 46 69 6c 65 4f | 62 6a 65 63 74 47 65 6e |GetFileO|bjectGen|
|000005a0| 65 72 69 63 4d 61 70 70 | 69 6e 67 00 a8 04 53 65 |ericMapp|ing...Se|
|000005b0| 43 61 70 74 75 72 65 53 | 75 62 6a 65 63 74 43 6f |CaptureS|ubjectCo|
|000005c0| 6e 74 65 78 74 00 6f 01 | 49 6f 47 65 74 52 65 6c |ntext.o.|IoGetRel|
|000005d0| 61 74 65 64 44 65 76 69 | 63 65 4f 62 6a 65 63 74 |atedDevi|ceObject|
|000005e0| 00 00 22 03 4f 62 66 52 | 65 66 65 72 65 6e 63 65 |..".ObfR|eference|
|000005f0| 4f 62 6a 65 63 74 00 00 | 28 01 49 6f 42 75 69 6c |Object..|(.IoBuil|
|00000600| 64 44 65 76 69 63 65 49 | 6f 43 6f 6e 74 72 6f 6c |dDeviceI|oControl|
|00000610| 52 65 71 75 65 73 74 00 | 52 00 45 78 47 65 74 50 |Request.|R.ExGetP|
|00000620| 72 65 76 69 6f 75 73 4d | 6f 64 65 00 03 05 5a 77 |reviousM|ode...Zw|
|00000630| 45 6e 75 6d 65 72 61 74 | 65 56 61 6c 75 65 4b 65 |Enumerat|eValueKe|
|00000640| 79 00 4c 05 5a 77 53 65 | 74 56 61 6c 75 65 4b 65 |y.L.ZwSe|tValueKe|
|00000650| 79 00 a8 03 52 74 6c 43 | 6f 6d 70 61 72 65 4d 65 |y...RtlC|ompareMe|
|00000660| 6d 6f 72 79 00 00 1a 04 | 52 74 6c 49 6e 74 65 67 |mory....|RtlInteg|
|00000670| 65 72 54 6f 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |erToUnic|odeStrin|
|00000680| 67 00 9a 03 52 74 6c 41 | 70 70 65 6e 64 55 6e 69 |g...RtlA|ppendUni|
|00000690| 63 6f 64 65 53 74 72 69 | 6e 67 54 6f 53 74 72 69 |codeStri|ngToStri|
|000006a0| 6e 67 00 00 f5 04 5a 77 | 43 72 65 61 74 65 4b 65 |ng....Zw|CreateKe|
|000006b0| 79 00 9b 03 52 74 6c 41 | 70 70 65 6e 64 55 6e 69 |y...RtlA|ppendUni|
|000006c0| 63 6f 64 65 54 6f 53 74 | 72 69 6e 67 00 00 b5 03 |codeToSt|ring....|
|000006d0| 52 74 6c 43 6f 70 79 55 | 6e 69 63 6f 64 65 53 74 |RtlCopyU|nicodeSt|
|000006e0| 72 69 6e 67 00 00 6f 00 | 45 78 51 75 65 75 65 57 |ring..o.|ExQueueW|
|000006f0| 6f 72 6b 49 74 65 6d 00 | 9c 05 73 77 70 72 69 6e |orkItem.|..swprin|
|00000700| 74 66 00 00 a9 05 77 63 | 73 6c 65 6e 00 00 1d 02 |tf....wc|slen....|
|00000710| 4b 65 4c 65 61 76 65 43 | 72 69 74 69 63 61 6c 52 |KeLeaveC|riticalR|
|00000720| 65 67 69 6f 6e 00 78 00 | 45 78 52 65 6c 65 61 73 |egion.x.|ExReleas|
|00000730| 65 46 61 73 74 4d 75 74 | 65 78 55 6e 73 61 66 65 |eFastMut|exUnsafe|
|00000740| 00 00 36 00 45 78 41 63 | 71 75 69 72 65 46 61 73 |..6.ExAc|quireFas|
|00000750| 74 4d 75 74 65 78 55 6e | 73 61 66 65 00 00 f6 01 |tMutexUn|safe....|
|00000760| 4b 65 45 6e 74 65 72 43 | 72 69 74 69 63 61 6c 52 |KeEnterC|riticalR|
|00000770| 65 67 69 6f 6e 00 a7 01 | 49 6f 53 65 74 44 65 76 |egion...|IoSetDev|
|00000780| 69 63 65 49 6e 74 65 72 | 66 61 63 65 53 74 61 74 |iceInter|faceStat|
|00000790| 65 00 54 02 4b 65 53 65 | 74 54 69 6d 65 72 00 00 |e.T.KeSe|tTimer..|
|000007a0| 78 01 49 6f 49 6e 76 61 | 6c 69 64 61 74 65 44 65 |x.IoInva|lidateDe|
|000007b0| 76 69 63 65 52 65 6c 61 | 74 69 6f 6e 73 00 36 03 |viceRela|tions.6.|
|000007c0| 50 72 6f 62 65 46 6f 72 | 57 72 69 74 65 00 3f 00 |ProbeFor|Write.?.|
|000007d0| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|000007e0| 74 68 51 75 6f 74 61 54 | 61 67 00 00 2d 00 44 62 |thQuotaT|ag..-.Db|
|000007f0| 67 42 72 65 61 6b 50 6f | 69 6e 74 00 67 01 49 6f |gBreakPo|int.g.Io|
|00000800| 47 65 74 44 65 76 69 63 | 65 50 72 6f 70 65 72 74 |GetDevic|ePropert|
|00000810| 79 00 ed 01 4b 65 42 75 | 67 43 68 65 63 6b 45 78 |y...KeBu|gCheckEx|
|00000820| 00 00 02 05 5a 77 45 6e | 75 6d 65 72 61 74 65 4b |....ZwEn|umerateK|
|00000830| 65 79 00 00 2e 05 5a 77 | 51 75 65 72 79 4b 65 79 |ey....Zw|QueryKey|
|00000840| 00 00 92 01 49 6f 52 65 | 67 69 73 74 65 72 44 65 |....IoRe|gisterDe|
|00000850| 76 69 63 65 49 6e 74 65 | 72 66 61 63 65 00 f4 03 |viceInte|rface...|
|00000860| 52 74 6c 47 55 49 44 46 | 72 6f 6d 53 74 72 69 6e |RtlGUIDF|romStrin|
|00000870| 67 00 79 05 5f 77 63 73 | 69 63 6d 70 00 00 49 01 |g.y._wcs|icmp..I.|
|00000880| 49 6f 44 65 6c 65 74 65 | 44 65 76 69 63 65 00 00 |IoDelete|Device..|
|00000890| 38 01 49 6f 43 72 65 61 | 74 65 44 65 76 69 63 65 |8.IoCrea|teDevice|
|000008a0| 00 00 fb 04 5a 77 44 65 | 6c 65 74 65 4b 65 79 00 |....ZwDe|leteKey.|
|000008b0| 4c 01 49 6f 44 65 74 61 | 63 68 44 65 76 69 63 65 |L.IoDeta|chDevice|
|000008c0| 00 00 25 01 49 6f 41 74 | 74 61 63 68 44 65 76 69 |..%.IoAt|tachDevi|
|000008d0| 63 65 54 6f 44 65 76 69 | 63 65 53 74 61 63 6b 00 |ceToDevi|ceStack.|
|000008e0| 0b 02 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 44 70 |..KeInit|ializeDp|
|000008f0| 63 00 13 02 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |c...KeIn|itialize|
|00000900| 54 69 6d 65 72 00 7b 05 | 5f 77 63 73 6e 69 63 6d |Timer.{.|_wcsnicm|
|00000910| 70 00 c6 04 53 65 53 69 | 6e 67 6c 65 50 72 69 76 |p...SeSi|nglePriv|
|00000920| 69 6c 65 67 65 43 68 65 | 63 6b 00 00 ee 01 4b 65 |ilegeChe|ck....Ke|
|00000930| 43 61 6e 63 65 6c 54 69 | 6d 65 72 00 55 02 4b 65 |CancelTi|mer.U.Ke|
|00000940| 53 65 74 54 69 6d 65 72 | 45 78 00 00 5c 00 45 78 |SetTimer|Ex..\.Ex|
|00000950| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 43 6f 6d 70 61 |Interloc|kedCompa|
|00000960| 72 65 45 78 63 68 61 6e | 67 65 36 34 00 00 62 02 |reExchan|ge64..b.|
|00000970| 4b 65 66 52 65 6c 65 61 | 73 65 53 70 69 6e 4c 6f |KefRelea|seSpinLo|
|00000980| 63 6b 46 72 6f 6d 44 70 | 63 4c 65 76 65 6c 00 00 |ckFromDp|cLevel..|
|00000990| 61 02 4b 65 66 41 63 71 | 75 69 72 65 53 70 69 6e |a.KefAcq|uireSpin|
|000009a0| 4c 6f 63 6b 41 74 44 70 | 63 4c 65 76 65 6c 00 00 |LockAtDp|cLevel..|
|000009b0| 29 02 4b 65 51 75 65 72 | 79 54 69 6d 65 49 6e 63 |).KeQuer|yTimeInc|
|000009c0| 72 65 6d 65 6e 74 00 00 | 14 02 4b 65 49 6e 69 74 |rement..|..KeInit|
|000009d0| 69 61 6c 69 7a 65 54 69 | 6d 65 72 45 78 00 35 02 |ializeTi|merEx.5.|
|000009e0| 4b 65 52 65 6c 65 61 73 | 65 4d 75 74 65 78 00 00 |KeReleas|eMutex..|
|000009f0| 57 02 4b 65 53 79 6e 63 | 68 72 6f 6e 69 7a 65 45 |W.KeSync|hronizeE|
|00000a00| 78 65 63 75 74 69 6f 6e | 00 00 7a 00 45 78 52 65 |xecution|..z.ExRe|
|00000a10| 6c 65 61 73 65 52 65 73 | 6f 75 72 63 65 4c 69 74 |leaseRes|ourceLit|
|00000a20| 65 00 37 00 45 78 41 63 | 71 75 69 72 65 52 65 73 |e.7.ExAc|quireRes|
|00000a30| 6f 75 72 63 65 45 78 63 | 6c 75 73 69 76 65 4c 69 |ourceExc|lusiveLi|
|00000a40| 74 65 00 00 4c 02 4b 65 | 53 65 74 49 6d 70 6f 72 |te..L.Ke|SetImpor|
|00000a50| 74 61 6e 63 65 44 70 63 | 00 00 21 03 4f 62 66 44 |tanceDpc|..!.ObfD|
|00000a60| 65 72 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |ereferen|ceObject|
|00000a70| 00 00 3d 02 4b 65 52 65 | 6d 6f 76 65 51 75 65 75 |..=.KeRe|moveQueu|
|00000a80| 65 44 70 63 00 00 36 02 | 4b 65 52 65 6c 65 61 73 |eDpc..6.|KeReleas|
|00000a90| 65 53 65 6d 61 70 68 6f | 72 65 00 00 1a 02 4b 65 |eSemapho|re....Ke|
|00000aa0| 49 6e 73 65 72 74 51 75 | 65 75 65 44 70 63 00 00 |InsertQu|eueDpc..|
|00000ab0| 4a 00 45 78 45 76 65 6e | 74 4f 62 6a 65 63 74 54 |J.ExEven|tObjectT|
|00000ac0| 79 70 65 00 19 03 4f 62 | 52 65 66 65 72 65 6e 63 |ype...Ob|Referenc|
|00000ad0| 65 4f 62 6a 65 63 74 42 | 79 48 61 6e 64 6c 65 00 |eObjectB|yHandle.|
|00000ae0| 7d 00 45 78 53 65 6d 61 | 70 68 6f 72 65 4f 62 6a |}.ExSema|phoreObj|
|00000af0| 65 63 74 54 79 70 65 00 | 38 00 45 78 41 63 71 75 |ectType.|8.ExAcqu|
|00000b00| 69 72 65 52 65 73 6f 75 | 72 63 65 53 68 61 72 65 |ireResou|rceShare|
|00000b10| 64 4c 69 74 65 00 27 03 | 50 6f 43 61 6c 6c 44 72 |dLite.'.|PoCallDr|
|00000b20| 69 76 65 72 00 00 33 03 | 50 6f 53 74 61 72 74 4e |iver..3.|PoStartN|
|00000b30| 65 78 74 50 6f 77 65 72 | 49 72 70 00 fb 01 4b 65 |extPower|Irp...Ke|
|00000b40| 47 65 74 43 75 72 72 65 | 6e 74 54 68 72 65 61 64 |GetCurre|ntThread|
|00000b50| 00 00 56 00 45 78 49 6e | 69 74 69 61 6c 69 7a 65 |..V.ExIn|itialize|
|00000b60| 52 65 73 6f 75 72 63 65 | 4c 69 74 65 00 00 46 00 |Resource|Lite..F.|
|00000b70| 45 78 44 65 6c 65 74 65 | 52 65 73 6f 75 72 63 65 |ExDelete|Resource|
|00000b80| 4c 69 74 65 00 00 ab 03 | 52 74 6c 43 6f 6d 70 61 |Lite....|RtlCompa|
|00000b90| 72 65 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |reUnicod|eString.|
|00000ba0| 3b 01 49 6f 43 72 65 61 | 74 65 46 69 6c 65 00 00 |;.IoCrea|teFile..|
|00000bb0| 39 04 52 74 6c 4d 61 70 | 47 65 6e 65 72 69 63 4d |9.RtlMap|GenericM|
|00000bc0| 61 73 6b 00 cd 04 53 65 | 55 6e 6c 6f 63 6b 53 75 |ask...Se|UnlockSu|
|00000bd0| 62 6a 65 63 74 43 6f 6e | 74 65 78 74 00 00 b7 04 |bjectCon|text....|
|00000be0| 53 65 4f 70 65 6e 4f 62 | 6a 65 63 74 41 75 64 69 |SeOpenOb|jectAudi|
|00000bf0| 74 41 6c 61 72 6d 00 00 | b2 04 53 65 46 72 65 65 |tAlarm..|..SeFree|
|00000c00| 50 72 69 76 69 6c 65 67 | 65 73 00 00 a0 04 53 65 |Privileg|es....Se|
|00000c10| 41 70 70 65 6e 64 50 72 | 69 76 69 6c 65 67 65 73 |AppendPr|ivileges|
|00000c20| 00 00 9f 04 53 65 41 63 | 63 65 73 73 43 68 65 63 |....SeAc|cessChec|
|00000c30| 6b 00 b5 04 53 65 4c 6f | 63 6b 53 75 62 6a 65 63 |k...SeLo|ckSubjec|
|00000c40| 74 43 6f 6e 74 65 78 74 | 00 00 be 04 53 65 51 75 |tContext|....SeQu|
|00000c50| 65 72 79 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |erySecur|ityDescr|
|00000c60| 69 70 74 6f 72 49 6e 66 | 6f 00 c4 04 53 65 53 65 |iptorInf|o...SeSe|
|00000c70| 74 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |tSecurit|yDescrip|
|00000c80| 74 6f 72 49 6e 66 6f 00 | a1 02 4d 6d 4d 61 70 4c |torInfo.|..MmMapL|
|00000c90| 6f 63 6b 65 64 50 61 67 | 65 73 00 00 ef 01 4b 65 |ockedPag|es....Ke|
|00000ca0| 43 6c 65 61 72 45 76 65 | 6e 74 00 00 74 00 45 78 |ClearEve|nt..t.Ex|
|00000cb0| 52 61 69 73 65 53 74 61 | 74 75 73 00 5b 01 49 6f |RaiseSta|tus.[.Io|
|00000cc0| 46 72 65 65 4d 64 6c 00 | bd 02 4d 6d 55 6e 6c 6f |FreeMdl.|..MmUnlo|
|00000cd0| 63 6b 50 61 67 65 73 00 | ae 02 4d 6d 50 72 6f 62 |ckPages.|..MmProb|
|00000ce0| 65 41 6e 64 4c 6f 63 6b | 50 61 67 65 73 00 1f 01 |eAndLock|Pages...|
|00000cf0| 49 6f 41 6c 6c 6f 63 61 | 74 65 4d 64 6c 00 99 01 |IoAlloca|teMdl...|
|00000d00| 49 6f 52 65 6c 65 61 73 | 65 43 61 6e 63 65 6c 53 |IoReleas|eCancelS|
|00000d10| 70 69 6e 4c 6f 63 6b 00 | 16 01 49 6f 41 63 71 75 |pinLock.|..IoAcqu|
|00000d20| 69 72 65 43 61 6e 63 65 | 6c 53 70 69 6e 4c 6f 63 |ireCance|lSpinLoc|
|00000d30| 6b 00 8d 00 45 78 66 49 | 6e 74 65 72 6c 6f 63 6b |k...ExfI|nterlock|
|00000d40| 65 64 52 65 6d 6f 76 65 | 48 65 61 64 4c 69 73 74 |edRemove|HeadList|
|00000d50| 00 00 8a 00 45 78 66 49 | 6e 74 65 72 6c 6f 63 6b |....ExfI|nterlock|
|00000d60| 65 64 49 6e 73 65 72 74 | 54 61 69 6c 4c 69 73 74 |edInsert|TailList|
|00000d70| 00 00 6e 02 4c 64 72 41 | 63 63 65 73 73 52 65 73 |..n.LdrA|ccessRes|
|00000d80| 6f 75 72 63 65 00 71 02 | 4c 64 72 46 69 6e 64 52 |ource.q.|LdrFindR|
|00000d90| 65 73 6f 75 72 63 65 5f | 55 00 81 01 49 6f 4f 70 |esource_|U...IoOp|
|00000da0| 65 6e 44 65 76 69 63 65 | 52 65 67 69 73 74 72 79 |enDevice|Registry|
|00000db0| 4b 65 79 00 0f 02 4b 65 | 49 6e 69 74 69 61 6c 69 |Key...Ke|Initiali|
|00000dc0| 7a 65 4d 75 74 65 78 00 | 55 01 49 6f 46 69 6c 65 |zeMutex.|U.IoFile|
|00000dd0| 4f 62 6a 65 63 74 54 79 | 70 65 00 00 65 01 49 6f |ObjectTy|pe..e.Io|
|00000de0| 47 65 74 44 65 76 69 63 | 65 49 6e 74 65 72 66 61 |GetDevic|eInterfa|
|00000df0| 63 65 73 00 1c 01 49 6f | 41 6c 6c 6f 63 61 74 65 |ces...Io|Allocate|
|00000e00| 44 72 69 76 65 72 4f 62 | 6a 65 63 74 45 78 74 65 |DriverOb|jectExte|
|00000e10| 6e 73 69 6f 6e 00 6b 01 | 49 6f 47 65 74 44 72 69 |nsion.k.|IoGetDri|
|00000e20| 76 65 72 4f 62 6a 65 63 | 74 45 78 74 65 6e 73 69 |verObjec|tExtensi|
|00000e30| 6f 6e 00 00 5a 01 49 6f | 46 72 65 65 49 72 70 00 |on..Z.Io|FreeIrp.|
|00000e40| 1e 01 49 6f 41 6c 6c 6f | 63 61 74 65 49 72 70 00 |..IoAllo|cateIrp.|
|00000e50| 8b 05 6d 65 6d 6d 6f 76 | 65 00 1a 01 49 6f 41 6c |..memmov|e...IoAl|
|00000e60| 6c 6f 63 61 74 65 41 64 | 61 70 74 65 72 43 68 61 |locateAd|apterCha|
|00000e70| 6e 6e 65 6c 00 00 34 03 | 50 6f 55 6e 72 65 67 69 |nnel..4.|PoUnregi|
|00000e80| 73 74 65 72 53 79 73 74 | 65 6d 53 74 61 74 65 00 |sterSyst|emState.|
|00000e90| 2c 03 50 6f 52 65 67 69 | 73 74 65 72 53 79 73 74 |,.PoRegi|sterSyst|
|00000ea0| 65 6d 53 74 61 74 65 00 | 7e 01 49 6f 49 73 57 64 |emState.|~.IoIsWd|
|00000eb0| 6d 56 65 72 73 69 6f 6e | 41 76 61 69 6c 61 62 6c |mVersion|Availabl|
|00000ec0| 65 00 2d 03 50 6f 52 65 | 71 75 65 73 74 50 6f 77 |e.-.PoRe|questPow|
|00000ed0| 65 72 49 72 70 00 30 03 | 50 6f 53 65 74 50 6f 77 |erIrp.0.|PoSetPow|
|00000ee0| 65 72 53 74 61 74 65 00 | 80 01 49 6f 4f 70 65 6e |erState.|..IoOpen|
|00000ef0| 44 65 76 69 63 65 49 6e | 74 65 72 66 61 63 65 52 |DeviceIn|terfaceR|
|00000f00| 65 67 69 73 74 72 79 4b | 65 79 00 00 2d 02 4b 65 |egistryK|ey..-.Ke|
|00000f10| 52 65 61 64 53 74 61 74 | 65 4d 75 74 65 78 00 00 |ReadStat|eMutex..|
|00000f20| 3f 02 4b 65 52 65 73 65 | 74 45 76 65 6e 74 00 00 |?.KeRese|tEvent..|
|00000f30| 27 02 4b 65 51 75 65 72 | 79 53 79 73 74 65 6d 54 |'.KeQuer|ySystemT|
|00000f40| 69 6d 65 00 a2 02 4d 6d | 4d 61 70 4c 6f 63 6b 65 |ime...Mm|MapLocke|
|00000f50| 64 50 61 67 65 73 53 70 | 65 63 69 66 79 43 61 63 |dPagesSp|ecifyCac|
|00000f60| 68 65 00 00 41 01 49 6f | 43 72 65 61 74 65 53 79 |he..A.Io|CreateSy|
|00000f70| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 3a 01 49 6f |mbolicLi|nk..:.Io|
|00000f80| 43 72 65 61 74 65 44 72 | 69 76 65 72 00 00 68 05 |CreateDr|iver..h.|
|00000f90| 5f 65 78 63 65 70 74 5f | 68 61 6e 64 6c 65 72 33 |_except_|handler3|
|00000fa0| 00 00 6e 74 6f 73 6b 72 | 6e 6c 2e 65 78 65 00 00 |..ntoskr|nl.exe..|
|00000fb0| 40 00 4b 65 47 65 74 43 | 75 72 72 65 6e 74 49 72 |@.KeGetC|urrentIr|
|00000fc0| 71 6c 00 00 42 00 4b 65 | 51 75 65 72 79 50 65 72 |ql..B.Ke|QueryPer|
|00000fd0| 66 6f 72 6d 61 6e 63 65 | 43 6f 75 6e 74 65 72 00 |formance|Counter.|
|00000fe0| 4f 00 4b 66 52 65 6c 65 | 61 73 65 53 70 69 6e 4c |O.KfRele|aseSpinL|
|00000ff0| 6f 63 6b 00 4c 00 4b 66 | 41 63 71 75 69 72 65 53 |ock.L.Kf|AcquireS|
|00001000| 70 69 6e 4c 6f 63 6b 00 | 01 00 45 78 52 65 6c 65 |pinLock.|..ExRele|
|00001010| 61 73 65 46 61 73 74 4d | 75 74 65 78 00 00 00 00 |aseFastM|utex....|
|00001020| 45 78 41 63 71 75 69 72 | 65 46 61 73 74 4d 75 74 |ExAcquir|eFastMut|
|00001030| 65 78 00 00 34 00 49 6f | 4d 61 70 54 72 61 6e 73 |ex..4.Io|MapTrans|
|00001040| 66 65 72 00 33 00 49 6f | 46 72 65 65 4d 61 70 52 |fer.3.Io|FreeMapR|
|00001050| 65 67 69 73 74 65 72 73 | 00 00 31 00 49 6f 46 6c |egisters|..1.IoFl|
|00001060| 75 73 68 41 64 61 70 74 | 65 72 42 75 66 66 65 72 |ushAdapt|erBuffer|
|00001070| 73 00 4d 00 4b 66 4c 6f | 77 65 72 49 72 71 6c 00 |s.M.KfLo|werIrql.|
|00001080| 4e 00 4b 66 52 61 69 73 | 65 49 72 71 6c 00 48 41 |N.KfRais|eIrql.HA|
|00001090| 4c 2e 64 6c 6c 00 00 00 | 00 00 00 00 00 00 00 00 |L.dll...|........|
|000010a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+