home *** CD-ROM | disk | FTP | other *** search
| Unknown | 2003-07-08 | 4.4 KB |
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 8b c1 c7 00 14 05 01 00 | 8b 0d c0 b6 01 00 85 c9 |........|........|
|00000010| 75 05 a3 c0 b6 01 00 c3 | 53 00 65 00 74 00 74 00 |u.......|S.e.t.t.|
|00000020| 69 00 6e 00 67 00 73 00 | 52 00 6f 00 6f 00 74 00 |i.n.g.s.|R.o.o.t.|
|00000030| 00 00 00 00 53 65 74 74 | 69 6e 67 73 52 6f 6f 74 |....Sett|ingsRoot|
|00000040| 20 6c 6f 61 64 65 64 20 | 66 72 6f 6d 20 72 65 67 | loaded |from reg|
|00000050| 69 73 74 72 79 2c 20 72 | 65 73 75 6c 74 69 6e 67 |istry, r|esulting|
|00000060| 20 76 61 6c 75 65 3a 20 | 5b 00 00 00 5d 0a 00 51 | value: |[...]..Q|
|00000070| 8b 4c 24 08 56 8b 74 24 | 10 6a 00 8d 44 24 08 50 |.L$.V.t$|.j..D$.P|
|00000080| 56 68 58 c5 01 00 c7 44 | 24 14 00 00 00 00 c7 06 |VhX....D|$.......|
|00000090| 00 00 00 00 e8 c9 fe ff | ff 85 c0 74 0b c7 06 00 |........|...t....|
|000000a0| 00 00 00 5e 59 c2 08 00 | 8b 0d f0 b6 01 00 68 74 |...^Y...|......ht|
|000000b0| c5 01 00 68 20 05 01 00 | 51 68 d8 b6 01 00 e8 1d |...h ...|Qh......|
|000000c0| ce ff ff 8b 16 a1 f0 b6 | 01 00 52 68 30 05 01 00 |........|..Rh0...|
|000000d0| 50 68 d8 b6 01 00 e8 05 | ce ff ff 8b 0d f0 b6 01 |Ph......|........|
|000000e0| 00 68 ac c5 01 00 68 20 | 05 01 00 51 68 d8 b6 01 |.h....h |...Qh...|
|000000f0| 00 e8 ea cd ff ff 83 c4 | 30 5e 59 c2 08 00 8b 51 |........|0^Y....Q|
|00000100| 08 b8 80 08 01 00 89 42 | 38 8b 51 08 89 42 40 83 |.......B|8.Q..B@.|
|00000110| 61 18 f9 8b 51 08 89 42 | 70 8b 51 08 89 42 74 83 |a...Q..B|p.Q..Bt.|
|00000120| 61 18 fe c3 a1 44 b6 01 | 00 50 6a 1c 6a 00 ff 15 |a....D..|.Pj.j...|
|00000130| ac 04 01 00 85 c0 74 1b | c7 00 14 05 01 00 8b 0d |......t.|........|
|00000140| c0 b6 01 00 85 c9 75 05 | a3 c0 b6 01 00 c7 00 3c |......u.|.......<|
|00000150| 05 01 00 6a 00 68 c8 b6 | 01 00 ff 15 00 04 01 00 |...j.h..|........|
|00000160| c3 00 00 00 50 00 61 00 | 72 00 61 00 6d 00 65 00 |....P.a.|r.a.m.e.|
|00000170| 74 00 65 00 72 00 73 00 | 00 00 00 00 4b 00 6d 00 |t.e.r.s.|....K.m.|
|00000180| 78 00 41 00 67 00 65 00 | 6e 00 74 00 4c 00 6f 00 |x.A.g.e.|n.t.L.o.|
|00000190| 67 00 00 00 49 6e 20 44 | 72 69 76 65 72 45 6e 74 |g...In D|riverEnt|
|000001a0| 72 79 0a 00 4b 00 6d 00 | 78 00 41 00 67 00 65 00 |ry..K.m.|x.A.g.e.|
|000001b0| 6e 00 74 00 00 00 00 00 | 4b 00 6d 00 78 00 41 00 |n.t.....|K.m.x.A.|
|000001c0| 67 00 65 00 6e 00 74 00 | 00 00 00 00 45 72 72 6f |g.e.n.t.|....Erro|
|000001d0| 72 20 63 6f 6e 73 74 72 | 75 63 74 69 6e 67 20 64 |r constr|ucting d|
|000001e0| 65 76 69 63 65 20 4b 6d | 78 41 67 65 6e 74 44 65 |evice Km|xAgentDe|
|000001f0| 76 69 63 65 00 00 00 00 | 0a 00 00 00 45 72 72 6f |vice....|....Erro|
|00000200| 72 20 63 72 65 61 74 69 | 6e 67 20 64 65 76 69 63 |r creati|ng devic|
|00000210| 65 20 4b 6d 78 41 67 65 | 6e 74 44 65 76 69 63 65 |e KmxAge|ntDevice|
|00000220| 2c 20 73 74 61 74 75 73 | 20 00 00 00 0a 00 00 00 |, status| .......|
|00000230| 45 72 72 6f 72 20 49 6f | 52 65 67 69 73 74 65 72 |Error Io|Register|
|00000240| 46 73 52 65 67 69 73 74 | 72 61 74 69 6f 6e 43 68 |FsRegist|rationCh|
|00000250| 61 6e 67 65 20 63 61 6c | 6c 0a 00 83 ec 30 53 55 |ange cal|l....0SU|
|00000260| 56 8b 74 24 40 6a 40 68 | 19 00 02 00 33 db 53 53 |V.t$@j@h|....3.SS|
|00000270| 68 a4 c6 01 00 8b e9 56 | 8d 4c 24 28 89 5c 24 24 |h......V|.L$(.\$$|
|00000280| e8 e7 fb ff ff 39 5c 24 | 18 7c 11 8d 44 24 0c 50 |.....9\$|.|..D$.P|
|00000290| 8d 4c 24 14 51 8b cd e8 | d3 fd ff ff 68 bc c6 01 |.L$.Q...|....h...|
|000002a0| 00 68 d8 b6 01 00 56 e8 | 8a cf ff ff 8b 15 f0 b6 |.h....V.|........|
|000002b0| 01 00 68 d4 c6 01 00 68 | 20 05 01 00 52 68 d8 b6 |..h....h| ...Rh..|
|000002c0| 01 00 e8 19 cc ff ff 6a | 10 53 68 e4 c6 01 00 6a |.......j|.Sh....j|
|000002d0| 22 68 f8 c6 01 00 68 60 | 01 00 00 e8 f6 f6 ff ff |"h....h`|........|
|000002e0| 83 c4 28 3b c3 74 0e 53 | 8b c8 e8 13 04 00 00 8b |..(;.t.S|........|
|000002f0| f0 3b f3 75 68 8b 44 24 | 0c 3b c3 74 07 50 ff 15 |.;.uh.D$|.;.t.P..|
|00000300| a4 04 01 00 a1 f0 b6 01 | 00 68 0c c7 01 00 68 20 |........|.h....h |
|00000310| 05 01 00 50 68 d8 b6 01 | 00 e8 c2 cb ff ff 8b 0d |...Ph...|........|
|00000320| f0 b6 01 00 68 38 c7 01 | 00 68 20 05 01 00 51 68 |....h8..|.h ...Qh|
|00000330| d8 b6 01 00 e8 a7 cb ff | ff 8b 44 24 34 83 c4 20 |........|..D$4.. |
|00000340| 3b c3 74 0b 50 89 5c 24 | 18 ff 15 a0 04 01 00 5e |;.t.P.\$|.......^|
|00000350| 5d b8 9a 00 00 c0 5b 83 | c4 30 c2 04 00 57 8b 7e |].....[.|.0...W.~|
|00000360| 20 3b fb 0f 8d 9f 00 00 | 00 8b 44 24 10 3b c3 74 | ;......|..D$.;.t|
|00000370| 07 50 ff 15 a4 04 01 00 | 8b 15 f0 b6 01 00 68 3c |.P......|......h<|
|00000380| c7 01 00 68 20 05 01 00 | 52 68 d8 b6 01 00 e8 4d |...h ...|Rh.....M|
|00000390| cb ff ff a1 f4 b6 01 00 | 83 c4 10 3b c3 b8 28 05 |........|...;..(.|
|000003a0| 01 00 74 05 b8 24 05 01 | 00 57 50 a1 f0 b6 01 00 |..t..$..|.WP.....|
|000003b0| 50 68 d8 b6 01 00 e8 25 | cb ff ff 8b 0d f0 b6 01 |Ph.....%|........|
|000003c0| 00 68 6c c7 01 00 68 20 | 05 01 00 51 68 d8 b6 01 |.hl...h |...Qh...|
|000003d0| 00 e8 0a cb ff ff 83 c4 | 20 8b ce e8 70 42 ff ff |........| ...pB..|
|000003e0| 56 e8 fe f2 ff ff 8b 44 | 24 1c 83 c4 04 3b c3 74 |V......D|$....;.t|
|000003f0| 0b 50 89 5c 24 1c ff 15 | a0 04 01 00 8b c7 5f 5e |.P.\$...|......_^|
|00000400| 5d 5b 83 c4 30 c2 04 00 | 8b 54 24 10 52 8d 4e 30 |][..0...|.T$.R.N0|
|00000410| e8 1e 55 ff ff 8b 44 24 | 10 3b c3 74 07 50 ff 15 |..U...D$|.;.t.P..|
|00000420| a4 04 01 00 8b 45 08 68 | 56 09 01 00 50 ff 15 30 |.....E.h|V...P..0|
|00000430| 03 01 00 85 c0 7d 1d a1 | f0 b6 01 00 68 70 c7 01 |.....}..|....hp..|
|00000440| 00 68 20 05 01 00 50 68 | d8 b6 01 00 e8 8f ca ff |.h ...Ph|........|
|00000450| ff 83 c4 10 e8 e1 a8 ff | ff 8b 44 24 18 3b c3 74 |........|..D$.;.t|
|00000460| 0b 50 89 5c 24 1c ff 15 | a0 04 01 00 5f 5e 5d 33 |.P.\$...|...._^]3|
|00000470| c0 5b 83 c4 30 c2 04 00 | a1 44 b6 01 00 53 56 57 |.[..0...|.D...SVW|
|00000480| 8b 3d ac 04 01 00 50 6a | 1c 6a 00 ff d7 85 c0 74 |.=....Pj|.j.....t|
|00000490| 1b c7 00 14 05 01 00 8b | 0d c0 b6 01 00 85 c9 75 |........|.......u|
|000004a0| 05 a3 c0 b6 01 00 c7 00 | 3c 05 01 00 8b 35 00 04 |........|<....5..|
|000004b0| 01 00 6a 00 68 c8 b6 01 | 00 ff d6 8b 1d c0 b6 01 |..j.h...|........|
|000004c0| 00 85 db 75 0b 5f 5e b8 | 9a 00 00 c0 5b c2 08 00 |...u._^.|....[...|
|000004d0| 8b 4c 24 10 55 8b 6c 24 | 18 89 4b 08 0f b7 45 00 |.L$.U.l$|..K...E.|
|000004e0| d1 e8 8d 44 00 02 85 c0 | 74 40 8b 15 44 b6 01 00 |...D....|t@..D...|
|000004f0| 52 50 6a 01 ff d7 85 c0 | 74 30 0f b7 4d 00 8b 75 |RPj.....|t0..M..u|
|00000500| 04 8b d1 c1 e9 02 8b f8 | f3 a5 8b ca 83 e1 03 f3 |........|........|
|00000510| a4 0f b7 4d 00 50 8d 53 | 0c d1 e9 52 66 c7 04 48 |...M.P.S|...Rf..H|
|00000520| 00 00 ff 15 00 04 01 00 | eb 08 6a 00 8d 43 0c 50 |........|..j..C.P|
|00000530| ff d6 a1 c8 b6 01 00 66 | 85 c0 76 52 0f b7 f0 8b |.......f|..vR....|
|00000540| ee d1 ed d1 e5 8d 45 02 | 85 c0 74 3e 8b 0d 44 b6 |......E.|..t>..D.|
|00000550| 01 00 51 50 6a 01 ff 15 | ac 04 01 00 85 c0 74 2a |..QPj...|......t*|
|00000560| 8b ce 8b 35 cc b6 01 00 | 8b d1 c1 e9 02 8b f8 f3 |...5....|........|
|00000570| a5 8b ca 83 e1 03 50 f3 | a4 68 c8 b6 01 00 66 c7 |......P.|.h....f.|
|00000580| 04 28 00 00 ff 15 00 04 | 01 00 8b 6c 24 18 8b 4b |.(......|...l$..K|
|00000590| 08 b8 80 08 01 00 89 41 | 38 8b 53 08 89 42 40 83 |.......A|8.S..B@.|
|000005a0| 63 18 f9 8b 4b 08 89 41 | 70 8b 53 08 89 42 74 8b |c...K..A|p.S..Bt.|
|000005b0| 7b 18 8b 03 83 e7 fe 55 | 8b cb 89 7b 18 ff 50 04 |{......U|...{..P.|
|000005c0| 8b 4b 08 8b 51 04 5d 85 | d2 5f 0f 95 c2 5e 88 53 |.K..Q.].|._...^.S|
|000005d0| 14 5b c2 08 00 00 00 00 | 43 00 6c 00 61 00 73 00 |.[......|C.l.a.s.|
|000005e0| 73 00 00 00 43 00 6c 00 | 61 00 73 00 73 00 00 00 |s...C.l.|a.s.s...|
|000005f0| 83 ec 58 56 e8 a3 e5 ff | ff 8b f0 25 00 00 00 c0 |..XV....|...%....|
|00000600| 3d 00 00 00 c0 75 0e e8 | ec e4 ff ff 8b c6 5e 83 |=....u..|......^.|
|00000610| c4 58 c2 08 00 6a 40 68 | 19 00 02 00 6a 00 6a 00 |.X...j@h|....j.j.|
|00000620| 68 18 cb 01 00 6a 02 8d | 4c 24 48 e8 82 f8 ff ff |h....j..|L$H.....|
|00000630| 6a 40 68 19 00 02 00 6a | 00 6a 00 68 24 cb 01 00 |j@h....j|.j.h$...|
|00000640| 6a 01 8d 4c 24 1c e8 67 | f8 ff ff 8b 44 24 38 85 |j..L$..g|....D$8.|
|00000650| c0 7c 09 c6 05 d0 b6 01 | 00 00 eb 0f 8b 44 24 0c |.|......|.....D$.|
|00000660| 85 c0 0f 9d c1 88 0d d0 | b6 01 00 8b 54 24 64 8b |........|....T$d.|
|00000670| 44 24 60 57 52 50 e8 fd | fd ff ff 8b 35 a0 04 01 |D$`WRP..|....5...|
|00000680| 00 8b f8 8b 44 24 0c 85 | c0 74 0b 50 c7 44 24 10 |....D$..|.t.P.D$.|
|00000690| 00 00 00 00 ff d6 8b 44 | 24 38 85 c0 74 0b 50 c7 |.......D|$8..t.P.|
|000006a0| 44 24 3c 00 00 00 00 ff | d6 8b c7 5f 5e 83 c4 58 |D$<.....|..._^..X|
|000006b0| c2 08 00 cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|000006c0| 46 61 69 6c 65 64 20 74 | 6f 20 63 72 65 61 74 65 |Failed t|o create|
|000006d0| 20 64 65 76 69 63 65 20 | 4b 6d 78 41 67 65 6e 74 | device |KmxAgent|
|000006e0| 44 65 76 69 63 65 20 75 | 6e 69 74 20 6e 75 6d 62 |Device u|nit numb|
|000006f0| 65 72 20 00 20 73 74 61 | 74 75 73 20 00 00 00 00 |er . sta|tus ....|
|00000700| 0a 00 56 57 8b f1 e8 ef | ef ff ff 8d 7e 30 8b cf |..VW....|....~0..|
|00000710| e8 0e 6f ff ff 8b 46 20 | 85 c0 c7 06 88 05 01 00 |..o...F |........|
|00000720| c7 07 64 05 01 00 c7 46 | 34 50 05 01 00 c7 46 38 |..d....F|4P....F8|
|00000730| 48 05 01 00 0f 8d b2 00 | 00 00 a1 f0 b6 01 00 68 |H.......|.......h|
|00000740| 00 cc 01 00 68 20 05 01 | 00 50 68 d8 b6 01 00 e8 |....h ..|.Ph.....|
|00000750| 8c c7 ff ff a1 f4 b6 01 | 00 83 c4 10 85 c0 b8 28 |........|.......(|
|00000760| 05 01 00 74 05 b8 24 05 | 01 00 8b 4c 24 0c 8b 15 |...t..$.|...L$...|
|00000770| f0 b6 01 00 51 50 52 68 | d8 b6 01 00 e8 5f c7 ff |....QPRh|....._..|
|00000780| ff a1 f0 b6 01 00 68 34 | cc 01 00 68 20 05 01 00 |......h4|...h ...|
|00000790| 50 68 d8 b6 01 00 e8 45 | c7 ff ff a1 f4 b6 01 00 |Ph.....E|........|
|000007a0| 8b 4e 20 83 c4 20 85 c0 | b8 28 05 01 00 74 05 b8 |.N .. ..|.(...t..|
|000007b0| 24 05 01 00 51 8b 0d f0 | b6 01 00 50 51 68 d8 b6 |$...Q...|...PQh..|
|000007c0| 01 00 e8 19 c7 ff ff 8b | 15 f0 b6 01 00 68 40 cc |........|.....h@.|
|000007d0| 01 00 68 20 05 01 00 52 | 68 d8 b6 01 00 e8 fe c6 |..h ...R|h.......|
|000007e0| ff ff 83 c4 20 5f 8b c6 | 5e c2 04 00 8b 44 24 0c |.... _..|^....D$.|
|000007f0| 89 86 5c 01 00 00 5f 8b | c6 5e c2 04 00 cc cc cc |..\..._.|.^......|
|00000800| 8c cd 00 00 00 00 00 00 | 00 00 00 00 8c d6 00 00 |........|........|
|00000810| 30 03 00 00 7c cd 00 00 | 00 00 00 00 00 00 00 00 |0...|...|........|
|00000820| da d6 00 00 20 03 00 00 | 00 00 00 00 00 00 00 00 |.... ...|........|
|00000830| 00 00 00 00 00 00 00 00 | 00 00 00 00 ae d6 00 00 |........|........|
|00000840| 9a d6 00 00 c4 d6 00 00 | 00 00 00 00 58 cf 00 00 |........|....X...|
|00000850| 7a cf 00 00 90 cf 00 00 | 9a cf 00 00 aa cf 00 00 |z.......|........|
|00000860| c8 cf 00 00 dc cf 00 00 | ec cf 00 00 08 d0 00 00 |........|........|
|00000870| 28 d0 00 00 3c d0 00 00 | 58 d0 00 00 62 d0 00 00 |(...<...|X...b...|
|00000880| 70 d0 00 00 8c d0 00 00 | 96 d0 00 00 aa d0 00 00 |p.......|........|
|00000890| bc d0 00 00 d4 d0 00 00 | f6 d0 00 00 12 d1 00 00 |........|........|
|000008a0| 2e d1 00 00 4a d1 00 00 | 54 d1 00 00 6c d1 00 00 |....J...|T...l...|
|000008b0| 82 d1 00 00 8e d1 00 00 | 9c d1 00 00 ac d1 00 00 |........|........|
|000008c0| c4 d1 00 00 e0 d1 00 00 | 00 d2 00 00 10 d2 00 00 |........|........|
|000008d0| 28 d2 00 00 40 d2 00 00 | 4e d2 00 00 5e d2 00 00 |(...@...|N...^...|
|000008e0| 6c d2 00 00 80 d2 00 00 | 9a d2 00 00 b0 d2 00 00 |l.......|........|
|000008f0| c0 d2 00 00 da d2 00 00 | ec d2 00 00 08 d3 00 00 |........|........|
|00000900| 1e d3 00 00 32 d3 00 00 | 48 d3 00 00 52 d3 00 00 |....2...|H...R...|
|00000910| 6c d3 00 00 86 d3 00 00 | a2 d3 00 00 40 cf 00 00 |l.......|....@...|
|00000920| d6 d3 00 00 e8 d3 00 00 | fc d3 00 00 0c d4 00 00 |........|........|
|00000930| 16 d4 00 00 20 d4 00 00 | 2e d4 00 00 3a d4 00 00 |.... ...|....:...|
|00000940| 52 d4 00 00 6a d4 00 00 | 78 d4 00 00 82 d4 00 00 |R...j...|x.......|
|00000950| 92 d4 00 00 9e d4 00 00 | ae d4 00 00 ce d4 00 00 |........|........|
|00000960| ea d4 00 00 f6 d4 00 00 | 0a d5 00 00 14 d5 00 00 |........|........|
|00000970| 1e d5 00 00 2c d5 00 00 | 3a d5 00 00 4c d5 00 00 |....,...|:...L...|
|00000980| 60 d5 00 00 72 d5 00 00 | 86 d5 00 00 98 d5 00 00 |`...r...|........|
|00000990| a4 d5 00 00 b4 d5 00 00 | c4 d5 00 00 dc d5 00 00 |........|........|
|000009a0| f4 d5 00 00 16 d6 00 00 | 3a d6 00 00 4c d6 00 00 |........|:...L...|
|000009b0| 5e d6 00 00 6c d6 00 00 | 80 d6 00 00 36 cf 00 00 |^...l...|....6...|
|000009c0| 28 cf 00 00 be d3 00 00 | 10 cf 00 00 00 00 00 00 |(.......|........|
|000009d0| 3a 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |:.ExAllo|catePool|
|000009e0| 57 69 74 68 54 61 67 00 | 47 00 45 78 46 72 65 65 |WithTag.|G.ExFree|
|000009f0| 50 6f 6f 6c 00 00 18 04 | 5a 77 43 6c 6f 73 65 00 |Pool....|ZwClose.|
|00000a00| 64 03 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |d.RtlIni|tUnicode|
|00000a10| 53 74 72 69 6e 67 00 00 | 65 01 49 6f 52 65 67 69 |String..|e.IoRegi|
|00000a20| 73 74 65 72 46 73 52 65 | 67 69 73 74 72 61 74 69 |sterFsRe|gistrati|
|00000a30| 6f 6e 43 68 61 6e 67 65 | 00 00 95 01 49 6f 66 43 |onChange|....IofC|
|00000a40| 6f 6d 70 6c 65 74 65 52 | 65 71 75 65 73 74 00 00 |ompleteR|equest..|
|00000a50| b6 04 77 63 73 63 70 79 | 00 00 31 04 5a 77 4c 6f |..wcscpy|..1.ZwLo|
|00000a60| 61 64 44 72 69 76 65 72 | 00 00 b7 02 4f 62 52 65 |adDriver|....ObRe|
|00000a70| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 50 |ferenceO|bjectByP|
|00000a80| 6f 69 6e 74 65 72 00 00 | 45 00 45 78 45 76 65 6e |ointer..|E.ExEven|
|00000a90| 74 4f 62 6a 65 63 74 54 | 79 70 65 00 a6 01 4b 65 |tObjectT|ype...Ke|
|00000aa0| 43 6c 65 61 72 45 76 65 | 6e 74 00 00 1e 01 49 6f |ClearEve|nt....Io|
|00000ab0| 43 72 65 61 74 65 4e 6f | 74 69 66 69 63 61 74 69 |CreateNo|tificati|
|00000ac0| 6f 6e 45 76 65 6e 74 00 | 22 01 49 6f 43 72 65 61 |onEvent.|".IoCrea|
|00000ad0| 74 65 53 79 6e 63 68 72 | 6f 6e 69 7a 61 74 69 6f |teSynchr|onizatio|
|00000ae0| 6e 45 76 65 6e 74 00 00 | db 01 4b 65 51 75 65 72 |nEvent..|..KeQuer|
|00000af0| 79 53 79 73 74 65 6d 54 | 69 6d 65 00 49 04 5a 77 |ySystemT|ime.I.Zw|
|00000b00| 51 75 65 72 79 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |QueryInf|ormation|
|00000b10| 50 72 6f 63 65 73 73 00 | b8 04 77 63 73 6c 65 6e |Process.|..wcslen|
|00000b20| 00 00 f9 01 4b 65 53 65 | 74 45 76 65 6e 74 00 00 |....KeSe|tEvent..|
|00000b30| 6e 03 52 74 6c 49 6e 74 | 65 67 65 72 54 6f 55 6e |n.RtlInt|egerToUn|
|00000b40| 69 63 6f 64 65 53 74 72 | 69 6e 67 00 b3 04 77 63 |icodeStr|ing...wc|
|00000b50| 73 63 61 74 00 00 c2 01 | 4b 65 49 6e 69 74 69 61 |scat....|KeInitia|
|00000b60| 6c 69 7a 65 45 76 65 6e | 74 00 68 00 45 78 51 75 |lizeEven|t.h.ExQu|
|00000b70| 65 75 65 57 6f 72 6b 49 | 74 65 6d 00 ba 02 4f 62 |eueWorkI|tem...Ob|
|00000b80| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|00000b90| 63 74 00 00 fd 02 52 74 | 6c 41 70 70 65 6e 64 55 |ct....Rt|lAppendU|
|00000ba0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 53 74 |nicodeSt|ringToSt|
|00000bb0| 72 69 6e 67 00 00 fe 02 | 52 74 6c 41 70 70 65 6e |ring....|RtlAppen|
|00000bc0| 64 55 6e 69 63 6f 64 65 | 54 6f 53 74 72 69 6e 67 |dUnicode|ToString|
|00000bd0| 00 00 44 01 49 6f 47 65 | 74 52 65 6c 61 74 65 64 |..D.IoGe|tRelated|
|00000be0| 44 65 76 69 63 65 4f 62 | 6a 65 63 74 00 00 b5 02 |DeviceOb|ject....|
|00000bf0| 4f 62 52 65 66 65 72 65 | 6e 63 65 4f 62 6a 65 63 |ObRefere|nceObjec|
|00000c00| 74 42 79 48 61 6e 64 6c | 65 00 b9 04 77 63 73 6e |tByHandl|e...wcsn|
|00000c10| 63 61 74 00 17 03 52 74 | 6c 43 6f 70 79 55 6e 69 |cat...Rt|lCopyUni|
|00000c20| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 3a 01 49 6f |codeStri|ng..:.Io|
|00000c30| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|00000c40| 73 00 8a 04 5f 77 63 73 | 69 63 6d 70 00 00 54 04 |s..._wcs|icmp..T.|
|00000c50| 5a 77 52 65 61 64 46 69 | 6c 65 00 00 1d 04 5a 77 |ZwReadFi|le....Zw|
|00000c60| 43 72 65 61 74 65 46 69 | 6c 65 00 00 12 02 4b 65 |CreateFi|le....Ke|
|00000c70| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|00000c80| 65 63 74 00 10 02 4b 65 | 57 61 69 74 46 6f 72 4d |ect...Ke|WaitForM|
|00000c90| 75 6c 74 69 70 6c 65 4f | 62 6a 65 63 74 73 00 00 |ultipleO|bjects..|
|00000ca0| 10 03 52 74 6c 43 6f 6e | 76 65 72 74 4c 6f 6e 67 |..RtlCon|vertLong|
|00000cb0| 54 6f 4c 61 72 67 65 49 | 6e 74 65 67 65 72 00 00 |ToLargeI|nteger..|
|00000cc0| 3e 04 5a 77 4f 70 65 6e | 54 68 72 65 61 64 00 00 |>.ZwOpen|Thread..|
|00000cd0| d4 02 50 73 47 65 74 43 | 75 72 72 65 6e 74 50 72 |..PsGetC|urrentPr|
|00000ce0| 6f 63 65 73 73 49 64 00 | d5 02 50 73 47 65 74 43 |ocessId.|..PsGetC|
|00000cf0| 75 72 72 65 6e 74 54 68 | 72 65 61 64 49 64 00 00 |urrentTh|readId..|
|00000d00| 15 03 52 74 6c 43 6f 70 | 79 53 69 64 00 00 7d 03 |..RtlCop|ySid..}.|
|00000d10| 52 74 6c 4c 65 6e 67 74 | 68 53 69 64 00 00 35 03 |RtlLengt|hSid..5.|
|00000d20| 52 74 6c 45 71 75 61 6c | 53 69 64 00 68 03 52 74 |RtlEqual|Sid.h.Rt|
|00000d30| 6c 49 6e 69 74 69 61 6c | 69 7a 65 53 69 64 00 00 |lInitial|izeSid..|
|00000d40| 4a 04 5a 77 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |J.ZwQuer|yInforma|
|00000d50| 74 69 6f 6e 54 6f 6b 65 | 6e 00 3b 04 5a 77 4f 70 |tionToke|n.;.ZwOp|
|00000d60| 65 6e 50 72 6f 63 65 73 | 73 54 6f 6b 65 6e 00 00 |enProces|sToken..|
|00000d70| 79 02 4e 74 42 75 69 6c | 64 4e 75 6d 62 65 72 00 |y.NtBuil|dNumber.|
|00000d80| 60 04 5a 77 53 65 74 49 | 6e 66 6f 72 6d 61 74 69 |`.ZwSetI|nformati|
|00000d90| 6f 6e 50 72 6f 63 65 73 | 73 00 1f 04 5a 77 43 72 |onProces|s...ZwCr|
|00000da0| 65 61 74 65 53 65 63 74 | 69 6f 6e 00 f5 01 4b 65 |eateSect|ion...Ke|
|00000db0| 53 65 72 76 69 63 65 44 | 65 73 63 72 69 70 74 6f |ServiceD|escripto|
|00000dc0| 72 54 61 62 6c 65 00 00 | 68 04 5a 77 54 65 72 6d |rTable..|h.ZwTerm|
|00000dd0| 69 6e 61 74 65 50 72 6f | 63 65 73 73 00 00 50 01 |inatePro|cess..P.|
|00000de0| 49 6f 49 73 53 79 73 74 | 65 6d 54 68 72 65 61 64 |IoIsSyst|emThread|
|00000df0| 00 00 b2 01 4b 65 47 65 | 74 43 75 72 72 65 6e 74 |....KeGe|tCurrent|
|00000e00| 54 68 72 65 61 64 00 00 | bb 04 77 63 73 6e 63 70 |Thread..|..wcsncp|
|00000e10| 79 00 92 03 52 74 6c 50 | 72 65 66 69 78 55 6e 69 |y...RtlP|refixUni|
|00000e20| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 0d 03 52 74 |codeStri|ng....Rt|
|00000e30| 6c 43 6f 6d 70 61 72 65 | 55 6e 69 63 6f 64 65 53 |lCompare|UnicodeS|
|00000e40| 74 72 69 6e 67 00 50 04 | 5a 77 51 75 65 72 79 53 |tring.P.|ZwQueryS|
|00000e50| 79 6d 62 6f 6c 69 63 4c | 69 6e 6b 4f 62 6a 65 63 |ymbolicL|inkObjec|
|00000e60| 74 00 3d 04 5a 77 4f 70 | 65 6e 53 79 6d 62 6f 6c |t.=.ZwOp|enSymbol|
|00000e70| 69 63 4c 69 6e 6b 4f 62 | 6a 65 63 74 00 00 36 04 |icLinkOb|ject..6.|
|00000e80| 5a 77 4f 70 65 6e 44 69 | 72 65 63 74 6f 72 79 4f |ZwOpenDi|rectoryO|
|00000e90| 62 6a 65 63 74 00 e7 01 | 4b 65 52 65 6c 65 61 73 |bject...|KeReleas|
|00000ea0| 65 4d 75 74 65 78 00 00 | 61 03 52 74 6c 49 6e 69 |eMutex..|a.RtlIni|
|00000eb0| 74 41 6e 73 69 53 74 72 | 69 6e 67 00 2a 00 44 62 |tAnsiStr|ing.*.Db|
|00000ec0| 67 42 72 65 61 6b 50 6f | 69 6e 74 00 9c 04 6d 65 |gBreakPo|int...me|
|00000ed0| 6d 6d 6f 76 65 00 a3 04 | 73 74 72 63 68 72 00 00 |mmove...|strchr..|
|00000ee0| 89 04 5f 76 73 6e 70 72 | 69 6e 74 66 00 00 2d 00 |.._vsnpr|intf..-.|
|00000ef0| 44 62 67 50 72 69 6e 74 | 00 00 fa 00 49 6e 74 65 |DbgPrint|....Inte|
|00000f00| 72 6c 6f 63 6b 65 64 49 | 6e 63 72 65 6d 65 6e 74 |rlockedI|ncrement|
|00000f10| 00 00 f7 00 49 6e 74 65 | 72 6c 6f 63 6b 65 64 44 |....Inte|rlockedD|
|00000f20| 65 63 72 65 6d 65 6e 74 | 00 00 1e 04 5a 77 43 72 |ecrement|....ZwCr|
|00000f30| 65 61 74 65 4b 65 79 00 | b4 04 77 63 73 63 68 72 |eateKey.|..wcschr|
|00000f40| 00 00 66 04 5a 77 53 65 | 74 56 61 6c 75 65 4b 65 |..f.ZwSe|tValueKe|
|00000f50| 79 00 39 04 5a 77 4f 70 | 65 6e 4b 65 79 00 94 01 |y.9.ZwOp|enKey...|
|00000f60| 49 6f 66 43 61 6c 6c 44 | 72 69 76 65 72 00 0b 01 |IofCallD|river...|
|00000f70| 49 6f 42 75 69 6c 64 44 | 65 76 69 63 65 49 6f 43 |IoBuildD|eviceIoC|
|00000f80| 6f 6e 74 72 6f 6c 52 65 | 71 75 65 73 74 00 3d 01 |ontrolRe|quest.=.|
|00000f90| 49 6f 47 65 74 44 65 76 | 69 63 65 4f 62 6a 65 63 |IoGetDev|iceObjec|
|00000fa0| 74 50 6f 69 6e 74 65 72 | 00 00 8c 04 5f 77 63 73 |tPointer|...._wcs|
|00000fb0| 6e 69 63 6d 70 00 b3 02 | 4f 62 51 75 65 72 79 4e |nicmp...|ObQueryN|
|00000fc0| 61 6d 65 53 74 72 69 6e | 67 00 a8 04 73 74 72 6e |ameStrin|g...strn|
|00000fd0| 63 6d 70 00 a9 04 73 74 | 72 6e 63 70 79 00 23 04 |cmp...st|rncpy.#.|
|00000fe0| 5a 77 44 65 6c 65 74 65 | 4b 65 79 00 4c 04 5a 77 |ZwDelete|Key.L.Zw|
|00000ff0| 51 75 65 72 79 4b 65 79 | 00 00 29 04 5a 77 45 6e |QueryKey|..).ZwEn|
|00001000| 75 6d 65 72 61 74 65 4b | 65 79 00 00 24 04 5a 77 |umerateK|ey..$.Zw|
|00001010| 44 65 6c 65 74 65 56 61 | 6c 75 65 4b 65 79 00 00 |DeleteVa|lueKey..|
|00001020| 52 04 5a 77 51 75 65 72 | 79 56 61 6c 75 65 4b 65 |R.ZwQuer|yValueKe|
|00001030| 79 00 cf 01 4b 65 49 6e | 73 65 72 74 51 75 65 75 |y...KeIn|sertQueu|
|00001040| 65 41 70 63 00 00 bf 01 | 4b 65 49 6e 69 74 69 61 |eApc....|KeInitia|
|00001050| 6c 69 7a 65 41 70 63 00 | 32 01 49 6f 46 72 65 65 |lizeApc.|2.IoFree|
|00001060| 49 72 70 00 03 01 49 6f | 41 6c 6c 6f 63 61 74 65 |Irp...Io|Allocate|
|00001070| 49 72 70 00 1d 01 49 6f | 43 72 65 61 74 65 46 69 |Irp...Io|CreateFi|
|00001080| 6c 65 00 00 21 01 49 6f | 43 72 65 61 74 65 53 79 |le..!.Io|CreateSy|
|00001090| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 27 01 49 6f |mbolicLi|nk..'.Io|
|000010a0| 44 65 6c 65 74 65 53 79 | 6d 62 6f 6c 69 63 4c 69 |DeleteSy|mbolicLi|
|000010b0| 6e 6b 00 00 68 01 49 6f | 52 65 67 69 73 74 65 72 |nk..h.Io|Register|
|000010c0| 53 68 75 74 64 6f 77 6e | 4e 6f 74 69 66 69 63 61 |Shutdown|Notifica|
|000010d0| 74 69 6f 6e 00 00 8a 01 | 49 6f 55 6e 72 65 67 69 |tion....|IoUnregi|
|000010e0| 73 74 65 72 53 68 75 74 | 64 6f 77 6e 4e 6f 74 69 |sterShut|downNoti|
|000010f0| 66 69 63 61 74 69 6f 6e | 00 00 25 01 49 6f 44 65 |fication|..%.IoDe|
|00001100| 6c 65 74 65 44 65 76 69 | 63 65 00 00 1b 01 49 6f |leteDevi|ce....Io|
|00001110| 43 72 65 61 74 65 44 65 | 76 69 63 65 00 00 6e 04 |CreateDe|vice..n.|
|00001120| 5a 77 57 72 69 74 65 46 | 69 6c 65 00 c5 01 4b 65 |ZwWriteF|ile...Ke|
|00001130| 49 6e 69 74 69 61 6c 69 | 7a 65 4d 75 74 65 78 00 |Initiali|zeMutex.|
|00001140| c6 03 52 74 6c 55 6e 77 | 69 6e 64 00 6e 74 6f 73 |..RtlUnw|ind.ntos|
|00001150| 6b 72 6e 6c 2e 65 78 65 | 00 00 44 00 4b 65 47 65 |krnl.exe|..D.KeGe|
|00001160| 74 43 75 72 72 65 6e 74 | 49 72 71 6c 00 00 00 00 |tCurrent|Irql....|
|00001170| 45 78 41 63 71 75 69 72 | 65 46 61 73 74 4d 75 74 |ExAcquir|eFastMut|
|00001180| 65 78 00 00 01 00 45 78 | 52 65 6c 65 61 73 65 46 |ex....Ex|ReleaseF|
|00001190| 61 73 74 4d 75 74 65 78 | 00 00 48 41 4c 2e 64 6c |astMutex|..HAL.dl|
|000011a0| 6c 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |l.......|........|
|000011b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+
