home *** CD-ROM | disk | FTP | other *** search
Unknown | 2003-02-16 | 2.8 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 8b c1 c7 00 a4 04 01 00 | 83 3d 44 65 01 00 00 75 |........|.=De...u|
|00000010| 05 a3 44 65 01 00 c3 cc | 53 00 65 00 74 00 74 00 |..De....|S.e.t.t.|
|00000020| 69 00 6e 00 67 00 73 00 | 52 00 6f 00 6f 00 74 00 |i.n.g.s.|R.o.o.t.|
|00000030| 00 00 55 8b ec 51 8b 4d | 08 83 65 fc 00 56 8b 75 |..U..Q.M|..e..V.u|
|00000040| 0c 83 26 00 6a 00 8d 45 | fc 50 56 68 18 6f 01 00 |..&.j..E|.PVh.o..|
|00000050| e8 29 ff ff ff 85 c0 74 | 03 83 26 00 5e c9 c2 08 |.).....t|..&.^...|
|00000060| 00 cc 8d 41 08 56 8b 30 | ba 80 1b 01 00 89 56 38 |...A.V.0|......V8|
|00000070| 8b 30 89 56 40 8b 30 83 | 61 18 f9 89 56 70 8b 00 |.0.V@.0.|a...Vp..|
|00000080| 89 50 74 83 61 18 fe 5e | c3 cc 6a 00 6a 1c e8 9d |.Pt.a..^|..j.j...|
|00000090| 98 ff ff 59 59 8b c8 85 | c9 74 0b e8 60 ff ff ff |...YY...|.t..`...|
|000000a0| c7 01 b0 04 01 00 6a 00 | 68 4c 65 01 00 ff 15 38 |......j.|hLe....8|
|000000b0| 03 01 00 c3 50 00 61 00 | 72 00 61 00 6d 00 65 00 |....P.a.|r.a.m.e.|
|000000c0| 74 00 65 00 72 00 73 00 | 00 00 00 00 4b 00 6d 00 |t.e.r.s.|....K.m.|
|000000d0| 78 00 41 00 67 00 65 00 | 6e 00 74 00 00 00 00 00 |x.A.g.e.|n.t.....|
|000000e0| 4b 00 6d 00 78 00 41 00 | 67 00 65 00 6e 00 74 00 |K.m.x.A.|g.e.n.t.|
|000000f0| 00 00 55 8b ec 83 ec 30 | 56 57 6a 40 68 19 00 02 |..U....0|VWj@h...|
|00000100| 00 33 ff 57 57 68 b4 6f | 01 00 ff 75 08 8b f1 8d |.3.WWh.o|...u....|
|00000110| 4d d0 89 7d fc e8 6e fd | ff ff 39 7d d8 7c 0f 8d |M..}..n.|..9}.|..|
|00000120| 45 fc 50 8d 45 d0 50 8b | ce e8 04 ff ff ff 6a 10 |E.P.E.P.|......j.|
|00000130| 57 68 cc 6f 01 00 6a 22 | 68 e0 6f 01 00 68 0c 01 |Wh.o..j"|h.o..h..|
|00000140| 00 00 e8 ab f8 ff ff 83 | c4 18 3b c7 74 0c 57 8b |........|..;.t.W.|
|00000150| c8 e8 3c 02 00 00 8b f0 | eb 02 33 f6 3b f7 75 26 |..<.....|..3.;.u&|
|00000160| 39 7d fc 74 09 ff 75 fc | ff 15 40 03 01 00 8b 45 |9}.t..u.|..@....E|
|00000170| d4 3b c7 74 0a 50 89 7d | d4 ff 15 d4 03 01 00 b8 |.;.t.P.}|........|
|00000180| 9a 00 00 c0 eb 66 53 8b | 5e 20 3b df 7d 2c 39 7d |.....fS.|^ ;.},9}|
|00000190| fc 74 09 ff 75 fc ff 15 | 40 03 01 00 6a 01 8b ce |.t..u...|@...j...|
|000001a0| e8 33 ab ff ff 8b 45 d4 | 3b c7 74 0a 50 89 7d d4 |.3....E.|;.t.P.}.|
|000001b0| ff 15 d4 03 01 00 8b c3 | eb 31 ff 75 fc 8d 4e 30 |........|.1.u..N0|
|000001c0| e8 43 b2 ff ff 39 7d fc | 74 09 ff 75 fc ff 15 40 |.C...9}.|t..u...@|
|000001d0| 03 01 00 e8 1c dc ff ff | 8b 45 d4 3b c7 74 0a 50 |........|.E.;.t.P|
|000001e0| 89 7d d4 ff 15 d4 03 01 | 00 33 c0 5b 5f 5e c9 c2 |.}......|.3.[_^..|
|000001f0| 04 00 53 e8 92 fe ff ff | 8b 1d 44 65 01 00 85 db |..S.....|..De....|
|00000200| 75 0a b8 9a 00 00 c0 e9 | c5 00 00 00 8b 44 24 08 |u.......|.....D$.|
|00000210| 55 8b 6c 24 10 89 43 08 | 0f b7 45 00 56 57 d1 e8 |U.l$..C.|..E.VW..|
|00000220| 8d 44 00 02 6a 01 50 e8 | 04 97 ff ff 85 c0 59 59 |.D..j.P.|......YY|
|00000230| 74 25 0f b7 4d 00 8b 75 | 04 8b d1 c1 e9 02 8b f8 |t%..M..u|........|
|00000240| f3 a5 8b ca 83 e1 03 f3 | a4 0f b7 4d 00 d1 e9 66 |........|...M...f|
|00000250| 83 24 48 00 50 eb 02 6a | 00 8d 43 0c 50 ff 15 38 |.$H.P..j|..C.P..8|
|00000260| 03 01 00 a1 4c 65 01 00 | 66 85 c0 76 47 0f b7 f0 |....Le..|f..vG...|
|00000270| 8b ee d1 ed d1 e5 8d 45 | 02 6a 01 50 e8 af 96 ff |.......E|.j.P....|
|00000280| ff 85 c0 59 59 74 29 8b | ce 8b 35 50 65 01 00 8b |...YYt).|..5Pe...|
|00000290| d1 c1 e9 02 8b f8 f3 a5 | 8b ca 83 e1 03 50 f3 a4 |........|.....P..|
|000002a0| 66 83 24 28 00 68 4c 65 | 01 00 ff 15 38 03 01 00 |f.$(.hLe|....8...|
|000002b0| 8b 6c 24 18 8b cb e8 a7 | fd ff ff 8b 03 55 ff 50 |.l$.....|.....U.P|
|000002c0| 04 8b 4b 08 83 79 04 00 | 5f 0f 95 c1 5e 88 4b 14 |..K..y..|_...^.K.|
|000002d0| 5d 5b c2 08 00 cc 43 00 | 6c 00 61 00 73 00 73 00 |][....C.|l.a.s.s.|
|000002e0| 00 00 43 00 6c 00 61 00 | 73 00 73 00 00 00 55 8b |..C.l.a.|s.s...U.|
|000002f0| ec 83 ec 58 56 e8 2c ed | ff ff 8b f0 b8 00 00 00 |...XV.,.|........|
|00000300| c0 8b ce 23 c8 3b c8 75 | 09 e8 74 ec ff ff 8b c6 |...#.;.u|..t.....|
|00000310| eb 7a 53 57 6a 40 be 19 | 00 02 00 56 33 db 53 53 |.zSWj@..|...V3.SS|
|00000320| 68 d6 71 01 00 6a 02 8d | 4d a8 e8 9f fb ff ff 6a |h.q..j..|M......j|
|00000330| 40 56 53 53 68 e2 71 01 | 00 6a 01 8d 4d d4 e8 8b |@VSSh.q.|.j..M...|
|00000340| fb ff ff 39 5d b0 7c 08 | 88 1d 54 65 01 00 eb 0b |...9].|.|..Te....|
|00000350| 39 5d dc 0f 9d c0 a2 54 | 65 01 00 ff 75 0c ff 75 |9].....T|e...u..u|
|00000360| 08 e8 8c fe ff ff 8b 35 | d4 03 01 00 8b f8 8b 45 |.......5|.......E|
|00000370| d8 3b c3 74 06 50 89 5d | d8 ff d6 8b 45 ac 3b c3 |.;.t.P.]|....E.;.|
|00000380| 74 06 50 89 5d ac ff d6 | 8b c7 5f 5b 5e c9 c2 08 |t.P.]...|.._[^...|
|00000390| 00 cc 56 57 8b f1 e8 7b | f3 ff ff 8d 7e 30 8b cf |..VW...{|....~0..|
|000003a0| e8 c1 bc ff ff 83 7e 20 | 00 c7 06 e8 04 01 00 c7 |......~ |........|
|000003b0| 07 d4 04 01 00 c7 46 34 | d0 04 01 00 c7 46 38 c0 |......F4|.....F8.|
|000003c0| 04 01 00 c7 46 3c bc 04 | 01 00 7c 0a 8b 44 24 0c |....F<..|..|..D$.|
|000003d0| 89 86 08 01 00 00 5f 8b | c6 5e c2 04 00 cc cc cc |......_.|.^......|
|000003e0| 2c 73 00 00 00 00 00 00 | 00 00 00 00 d4 79 00 00 |,s......|.....y..|
|000003f0| 30 03 00 00 1c 73 00 00 | 00 00 00 00 00 00 00 00 |0....s..|........|
|00000400| 22 7a 00 00 20 03 00 00 | 00 00 00 00 00 00 00 00 |"z.. ...|........|
|00000410| 00 00 00 00 00 00 00 00 | 00 00 00 00 f8 79 00 00 |........|.....y..|
|00000420| e2 79 00 00 0e 7a 00 00 | 00 00 00 00 72 74 00 00 |.y...z..|....rt..|
|00000430| 8e 74 00 00 aa 74 00 00 | c2 74 00 00 da 74 00 00 |.t...t..|.t...t..|
|00000440| e8 74 00 00 00 75 00 00 | 10 75 00 00 1a 75 00 00 |.t...u..|.u...u..|
|00000450| 36 75 00 00 40 75 00 00 | 4a 75 00 00 5e 75 00 00 |6u..@u..|Ju..^u..|
|00000460| 76 75 00 00 98 75 00 00 | b0 75 00 00 c0 75 00 00 |vu...u..|.u...u..|
|00000470| ca 75 00 00 e0 75 00 00 | f0 75 00 00 04 76 00 00 |.u...u..|.u...v..|
|00000480| 20 76 00 00 3c 76 00 00 | 58 76 00 00 66 76 00 00 | v..<v..|Xv..fv..|
|00000490| 86 76 00 00 98 76 00 00 | ae 76 00 00 ba 76 00 00 |.v...v..|.v...v..|
|000004a0| ca 76 00 00 e2 76 00 00 | fe 76 00 00 1e 77 00 00 |.v...v..|.v...w..|
|000004b0| 2e 77 00 00 46 77 00 00 | 5e 77 00 00 74 77 00 00 |.w..Fw..|^w..tw..|
|000004c0| 82 77 00 00 8e 77 00 00 | 9e 77 00 00 aa 77 00 00 |.w...w..|.w...w..|
|000004d0| 68 74 00 00 da 77 00 00 | f6 77 00 00 08 78 00 00 |ht...w..|.w...x..|
|000004e0| 1c 78 00 00 2e 78 00 00 | 3e 78 00 00 50 78 00 00 |.x...x..|>x..Px..|
|000004f0| 66 78 00 00 74 78 00 00 | 88 78 00 00 a2 78 00 00 |fx..tx..|.x...x..|
|00000500| b8 78 00 00 d0 78 00 00 | ec 78 00 00 06 79 00 00 |.x...x..|.x...y..|
|00000510| 22 79 00 00 30 79 00 00 | 48 79 00 00 60 79 00 00 |"y..0y..|Hy..`y..|
|00000520| 82 79 00 00 a6 79 00 00 | b8 79 00 00 ca 79 00 00 |.y...y..|.y...y..|
|00000530| 5e 74 00 00 54 74 00 00 | ba 77 00 00 48 74 00 00 |^t..Tt..|.w..Ht..|
|00000540| 2a 7a 00 00 00 00 00 00 | be 03 5f 77 63 73 6e 69 |*z......|.._wcsni|
|00000550| 63 6d 70 00 ea 03 77 63 | 73 6c 65 6e 00 00 e5 03 |cmp...wc|slen....|
|00000560| 77 63 73 63 61 74 00 00 | 5b 03 5a 77 43 6c 6f 73 |wcscat..|[.ZwClos|
|00000570| 65 00 8a 03 5a 77 51 75 | 65 72 79 53 79 6d 62 6f |e...ZwQu|erySymbo|
|00000580| 6c 69 63 4c 69 6e 6b 4f | 62 6a 65 63 74 00 7d 03 |licLinkO|bject.}.|
|00000590| 5a 77 4f 70 65 6e 53 79 | 6d 62 6f 6c 69 63 4c 69 |ZwOpenSy|mbolicLi|
|000005a0| 6e 6b 4f 62 6a 65 63 74 | 00 00 d0 02 52 74 6c 49 |nkObject|....RtlI|
|000005b0| 6e 69 74 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |nitUnico|deString|
|000005c0| 00 00 36 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |..6.ExAl|locatePo|
|000005d0| 6f 6c 57 69 74 68 54 61 | 67 00 42 00 45 78 46 72 |olWithTa|g.B.ExFr|
|000005e0| 65 65 50 6f 6f 6c 00 00 | 82 03 5a 77 51 75 65 72 |eePool..|..ZwQuer|
|000005f0| 79 44 69 72 65 63 74 6f | 72 79 46 69 6c 65 00 00 |yDirecto|ryFile..|
|00000600| 60 03 5a 77 43 72 65 61 | 74 65 46 69 6c 65 00 00 |`.ZwCrea|teFile..|
|00000610| eb 03 77 63 73 6e 63 61 | 74 00 7b 02 52 74 6c 41 |..wcsnca|t.{.RtlA|
|00000620| 70 70 65 6e 64 55 6e 69 | 63 6f 64 65 54 6f 53 74 |ppendUni|codeToSt|
|00000630| 72 69 6e 67 00 00 e8 03 | 77 63 73 63 70 79 00 00 |ring....|wcscpy..|
|00000640| e6 03 77 63 73 63 68 72 | 00 00 70 01 4b 65 49 6e |..wcschr|..p.KeIn|
|00000650| 69 74 69 61 6c 69 7a 65 | 45 76 65 6e 74 00 76 03 |itialize|Event.v.|
|00000660| 5a 77 4f 70 65 6e 44 69 | 72 65 63 74 6f 72 79 4f |ZwOpenDi|rectoryO|
|00000670| 62 6a 65 63 74 00 7a 02 | 52 74 6c 41 70 70 65 6e |bject.z.|RtlAppen|
|00000680| 64 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |dUnicode|StringTo|
|00000690| 53 74 72 69 6e 67 00 00 | 92 02 52 74 6c 43 6f 70 |String..|..RtlCop|
|000006a0| 79 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |yUnicode|String..|
|000006b0| 87 03 5a 77 51 75 65 72 | 79 4f 62 6a 65 63 74 00 |..ZwQuer|yObject.|
|000006c0| ed 03 77 63 73 6e 63 70 | 79 00 45 01 49 6f 66 43 |..wcsncp|y.E.IofC|
|000006d0| 6f 6d 70 6c 65 74 65 52 | 65 71 75 65 73 74 00 00 |ompleteR|equest..|
|000006e0| 71 03 5a 77 4c 6f 61 64 | 44 72 69 76 65 72 00 00 |q.ZwLoad|Driver..|
|000006f0| 86 01 4b 65 51 75 65 72 | 79 53 79 73 74 65 6d 54 |..KeQuer|ySystemT|
|00000700| 69 6d 65 00 84 03 5a 77 | 51 75 65 72 79 49 6e 66 |ime...Zw|QueryInf|
|00000710| 6f 72 6d 61 74 69 6f 6e | 50 72 6f 63 65 73 73 00 |ormation|Process.|
|00000720| f5 00 49 6f 43 72 65 61 | 74 65 4e 6f 74 69 66 69 |..IoCrea|teNotifi|
|00000730| 63 61 74 69 6f 6e 45 76 | 65 6e 74 00 d8 02 52 74 |cationEv|ent...Rt|
|00000740| 6c 49 6e 74 65 67 65 72 | 54 6f 55 6e 69 63 6f 64 |lInteger|ToUnicod|
|00000750| 65 53 74 72 69 6e 67 00 | a2 01 4b 65 53 65 74 45 |eString.|..KeSetE|
|00000760| 76 65 6e 74 00 00 f8 00 | 49 6f 43 72 65 61 74 65 |vent....|IoCreate|
|00000770| 53 79 6e 63 68 72 6f 6e | 69 7a 61 74 69 6f 6e 45 |Synchron|izationE|
|00000780| 76 65 6e 74 00 00 62 00 | 45 78 51 75 65 75 65 57 |vent..b.|ExQueueW|
|00000790| 6f 72 6b 49 74 65 6d 00 | 0c 01 49 6f 47 65 74 43 |orkItem.|..IoGetC|
|000007a0| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 00 bc 03 |urrentPr|ocess...|
|000007b0| 5f 77 63 73 69 63 6d 70 | 00 00 7e 03 5a 77 4f 70 |_wcsicmp|..~.ZwOp|
|000007c0| 65 6e 54 68 72 65 61 64 | 00 00 b8 01 4b 65 57 61 |enThread|....KeWa|
|000007d0| 69 74 46 6f 72 53 69 6e | 67 6c 65 4f 62 6a 65 63 |itForSin|gleObjec|
|000007e0| 74 00 b6 01 4b 65 57 61 | 69 74 46 6f 72 4d 75 6c |t...KeWa|itForMul|
|000007f0| 74 69 70 6c 65 4f 62 6a | 65 63 74 73 00 00 8c 02 |tipleObj|ects....|
|00000800| 52 74 6c 43 6f 6e 76 65 | 72 74 4c 6f 6e 67 54 6f |RtlConve|rtLongTo|
|00000810| 4c 61 72 67 65 49 6e 74 | 65 67 65 72 00 00 54 01 |LargeInt|eger..T.|
|00000820| 4b 65 43 6c 65 61 72 45 | 76 65 6e 74 00 00 55 02 |KeClearE|vent..U.|
|00000830| 50 73 47 65 74 43 75 72 | 72 65 6e 74 54 68 72 65 |PsGetCur|rentThre|
|00000840| 61 64 49 64 00 00 54 02 | 50 73 47 65 74 43 75 72 |adId..T.|PsGetCur|
|00000850| 72 65 6e 74 50 72 6f 63 | 65 73 73 49 64 00 60 01 |rentProc|essId.`.|
|00000860| 4b 65 47 65 74 43 75 72 | 72 65 6e 74 54 68 72 65 |KeGetCur|rentThre|
|00000870| 61 64 00 00 61 03 5a 77 | 43 72 65 61 74 65 4b 65 |ad..a.Zw|CreateKe|
|00000880| 79 00 2a 00 44 62 67 50 | 72 69 6e 74 00 00 9b 03 |y.*.DbgP|rint....|
|00000890| 5a 77 53 65 74 56 61 6c | 75 65 4b 65 79 00 79 03 |ZwSetVal|ueKey.y.|
|000008a0| 5a 77 4f 70 65 6e 4b 65 | 79 00 44 01 49 6f 66 43 |ZwOpenKe|y.D.IofC|
|000008b0| 61 6c 6c 44 72 69 76 65 | 72 00 e7 00 49 6f 42 75 |allDrive|r...IoBu|
|000008c0| 69 6c 64 44 65 76 69 63 | 65 49 6f 43 6f 6e 74 72 |ildDevic|eIoContr|
|000008d0| 6f 6c 52 65 71 75 65 73 | 74 00 0d 01 49 6f 47 65 |olReques|t...IoGe|
|000008e0| 74 44 65 76 69 63 65 4f | 62 6a 65 63 74 50 6f 69 |tDeviceO|bjectPoi|
|000008f0| 6e 74 65 72 00 00 8c 03 | 5a 77 51 75 65 72 79 56 |nter....|ZwQueryV|
|00000900| 61 6c 75 65 4b 65 79 00 | 7d 01 4b 65 49 6e 73 65 |alueKey.|}.KeInse|
|00000910| 72 74 51 75 65 75 65 41 | 70 63 00 00 6d 01 4b 65 |rtQueueA|pc..m.Ke|
|00000920| 49 6e 69 74 69 61 6c 69 | 7a 65 41 70 63 00 07 02 |Initiali|zeApc...|
|00000930| 4e 74 42 75 69 6c 64 4e | 75 6d 62 65 72 00 62 03 |NtBuildN|umber.b.|
|00000940| 5a 77 43 72 65 61 74 65 | 53 65 63 74 69 6f 6e 00 |ZwCreate|Section.|
|00000950| 9c 03 5a 77 54 65 72 6d | 69 6e 61 74 65 50 72 6f |..ZwTerm|inatePro|
|00000960| 63 65 73 73 00 00 ad 02 | 52 74 6c 45 71 75 61 6c |cess....|RtlEqual|
|00000970| 53 69 64 00 d3 02 52 74 | 6c 49 6e 69 74 69 61 6c |Sid...Rt|lInitial|
|00000980| 69 7a 65 53 69 64 00 00 | 85 03 5a 77 51 75 65 72 |izeSid..|..ZwQuer|
|00000990| 79 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 54 6f 6b 65 |yInforma|tionToke|
|000009a0| 6e 00 7b 03 5a 77 4f 70 | 65 6e 50 72 6f 63 65 73 |n.{.ZwOp|enProces|
|000009b0| 73 54 6f 6b 65 6e 00 00 | 44 02 4f 62 66 44 65 72 |sToken..|D.ObfDer|
|000009c0| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|000009d0| 3f 02 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |?.ObRefe|renceObj|
|000009e0| 65 63 74 42 79 48 61 6e | 64 6c 65 00 89 02 52 74 |ectByHan|dle...Rt|
|000009f0| 6c 43 6f 6d 70 61 72 65 | 55 6e 69 63 6f 64 65 53 |lCompare|UnicodeS|
|00000a00| 74 72 69 6e 67 00 9e 01 | 4b 65 53 65 72 76 69 63 |tring...|KeServic|
|00000a10| 65 44 65 73 63 72 69 70 | 74 6f 72 54 61 62 6c 65 |eDescrip|torTable|
|00000a20| 00 00 8e 03 5a 77 52 65 | 61 64 46 69 6c 65 00 00 |....ZwRe|adFile..|
|00000a30| f7 00 49 6f 43 72 65 61 | 74 65 53 79 6d 62 6f 6c |..IoCrea|teSymbol|
|00000a40| 69 63 4c 69 6e 6b 00 00 | fc 00 49 6f 44 65 6c 65 |icLink..|..IoDele|
|00000a50| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|00000a60| 28 01 49 6f 52 65 67 69 | 73 74 65 72 53 68 75 74 |(.IoRegi|sterShut|
|00000a70| 64 6f 77 6e 4e 6f 74 69 | 66 69 63 61 74 69 6f 6e |downNoti|fication|
|00000a80| 00 00 3e 01 49 6f 55 6e | 72 65 67 69 73 74 65 72 |..>.IoUn|register|
|00000a90| 53 68 75 74 64 6f 77 6e | 4e 6f 74 69 66 69 63 61 |Shutdown|Notifica|
|00000aa0| 74 69 6f 6e 00 00 fb 00 | 49 6f 44 65 6c 65 74 65 |tion....|IoDelete|
|00000ab0| 44 65 76 69 63 65 00 00 | f3 00 49 6f 43 72 65 61 |Device..|..IoCrea|
|00000ac0| 74 65 44 65 76 69 63 65 | 00 00 ce 03 6d 65 6d 6d |teDevice|....memm|
|00000ad0| 6f 76 65 00 6e 74 6f 73 | 6b 72 6e 6c 2e 65 78 65 |ove.ntos|krnl.exe|
|00000ae0| 00 00 00 00 45 78 41 63 | 71 75 69 72 65 46 61 73 |....ExAc|quireFas|
|00000af0| 74 4d 75 74 65 78 00 00 | 01 00 45 78 52 65 6c 65 |tMutex..|..ExRele|
|00000b00| 61 73 65 46 61 73 74 4d | 75 74 65 78 00 00 44 00 |aseFastM|utex..D.|
|00000b10| 4b 65 47 65 74 43 75 72 | 72 65 6e 74 49 72 71 6c |KeGetCur|rentIrql|
|00000b20| 00 00 48 41 4c 2e 64 6c | 6c 00 18 03 52 74 6c 55 |..HAL.dl|l...RtlU|
|00000b30| 6e 77 69 6e 64 00 00 00 | 00 00 00 00 00 00 00 00 |nwind...|........|
+--------+-------------------------+-------------------------+--------+--------+