| / Chip 2001 December
/ Chip Aralık 2001.iso / prog / cdcode / watch / setup.exe / Disk1 / data1.cab / EntColl / EntColl.sys
|
| Microsoft Windows Dynamic Link Library | 2001-08-15 | 3.9 KB |
MacOS 8.1
|
Win98
|
DOS
browse contents |
view JSON data
|
view as text| Confidence | Program | Detection | Match Type | Support |
|---|---|---|---|---|
| 100% | dexvert | Microsoft Windows Dynamic Link Library (executable/dll) | magic | Supported |
| 100% | dexvert | MS-DOS/Windows or OS/2 Executable (executable/exe) | magic | Supported |
| 1% | dexvert | MS-DOS Driver (executable/msDOSDriver) | ext | Unsupported |
| 1% | dexvert | OS/2 Device Driver (other/os2DeviceDriver) | ext | Unsupported |
| 1% | dexvert | SYSLINUX loader (other/syslinuxLoader) | ext | Unsupported |
| 1% | dexvert | FreeDOS KEYBoard layout collection (other/freeDOSKEYBoardLayoutCollection) | ext | Unsupported |
| 1% | dexvert | MS-DOS KEYBoard Layout file (other/msDOSKEYBoardLayoutFile) | ext | Unsupported |
| 100% | file | PE32 executable for MS Windows 4.00 (native), Intel i386 (stripped to external PDB), 3 sections | default | |
| 99% | file | data | default | |
| 34% | TrID | Win32 Dynamic Link Library (generic) | default | |
| 23% | TrID | Win32 Executable (generic) | default | |
| 10% | TrID | Windows Icons Library (generic) | default (weak) | |
| 10% | TrID | OS/2 Executable (generic) | default | |
| 10% | TrID | Generic Win/DOS Executable | default | |
| 100% | siegfried | fmt/899 Windows Portable Executable (32 bit) | default | |
| 100% | gt2 | Ist eine ausf�hrbare Win32 Datei | default | |
| 100% | binwalkID | Microsoft executable, portable (PE) | default | |
| 100% | xdgMime | application/vnd.microsoft.portable-executable | default (weak) |
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 c0 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| b5 12 0d db f1 73 63 88 | f1 73 63 88 f1 73 63 88 |.....sc.|.sc..sc.|
|00000090| f1 73 63 88 e7 73 63 88 | 19 6c 69 88 f0 73 63 88 |.sc..sc.|.li..sc.|
|000000a0| 52 69 63 68 f1 73 63 88 | 00 00 00 00 00 00 00 00 |Rich.sc.|........|
|000000b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000c0| 50 45 00 00 4c 01 03 00 | 88 5c 52 39 00 00 00 00 |PE..L...|.\R9....|
|000000d0| 27 00 00 00 e0 00 06 03 | 0b 01 06 00 40 0b 00 00 |'.......|....@...|
|000000e0| 80 00 00 00 00 00 00 00 | 2c 03 00 00 40 02 00 00 |........|,...@...|
|000000f0| 60 0b 00 00 00 00 01 00 | 20 00 00 00 20 00 00 00 |`.......| ... ...|
|00000100| 04 00 00 00 04 00 00 00 | 04 00 00 00 00 00 00 00 |........|........|
|00000110| 00 0e 00 00 40 02 00 00 | 3f c7 00 00 01 00 00 00 |....@...|?.......|
|00000120| 00 00 10 00 00 10 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|00000130| 00 00 00 00 10 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000140| 60 0b 00 00 3c 00 00 00 | 00 00 00 00 00 00 00 00 |`...<...|........|
|00000150| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000160| 80 0d 00 00 60 00 00 00 | 90 02 00 00 38 00 00 00 |....`...|....8...|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 00 00 00 00 00 00 00 00 | 40 02 00 00 4c 00 00 00 |........|@...L...|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 00 00 00 00 00 00 00 00 | 2e 74 65 78 74 00 00 00 |........|.text...|
|000001c0| 20 09 00 00 40 02 00 00 | 20 09 00 00 40 02 00 00 | ...@...| ...@...|
|000001d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 20 00 00 68 |........|.... ..h|
|000001e0| 49 4e 49 54 00 00 00 00 | 04 02 00 00 60 0b 00 00 |INIT....|....`...|
|000001f0| 20 02 00 00 60 0b 00 00 | 00 00 00 00 00 00 00 00 | ...`...|........|
|00000200| 00 00 00 00 20 00 00 e2 | 2e 72 65 6c 6f 63 00 00 |.... ...|.reloc..|
|00000210| 80 00 00 00 80 0d 00 00 | 80 00 00 00 80 0d 00 00 |........|........|
|00000220| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 42 |........|....@..B|
|00000230| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000240| 48 0d 00 00 34 0d 00 00 | 18 0d 00 00 00 00 00 00 |H...4...|........|
|00000250| 50 0c 00 00 68 0c 00 00 | 7a 0c 00 00 00 0c 00 00 |P...h...|z.......|
|00000260| 38 0c 00 00 20 0c 00 00 | be 0c 00 00 d4 0c 00 00 |8... ...|........|
|00000270| e2 0c 00 00 f6 0c 00 00 | 0e 0c 00 00 92 0c 00 00 |........|........|
|00000280| e8 0b 00 00 a8 0c 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000290| 00 00 00 00 88 5c 52 39 | 00 00 00 00 04 00 00 00 |.....\R9|........|
|000002a0| 10 01 00 00 00 00 00 00 | 00 0e 00 00 00 00 00 00 |........|........|
|000002b0| 88 5c 52 39 00 00 00 00 | 03 00 00 00 70 00 00 00 |.\R9....|....p...|
|000002c0| 00 00 00 00 10 0f 00 00 | 00 00 00 00 88 5c 52 39 |........|.....\R9|
|000002d0| 00 00 00 00 03 00 00 00 | 70 00 00 00 00 00 00 00 |........|p.......|
|000002e0| 30 16 00 00 5c 00 44 00 | 65 00 76 00 69 00 63 00 |0...\.D.|e.v.i.c.|
|000002f0| 65 00 5c 00 45 00 6e 00 | 74 00 43 00 6f 00 6c 00 |e.\.E.n.|t.C.o.l.|
|00000300| 6c 00 00 00 5c 00 44 00 | 6f 00 73 00 44 00 65 00 |l...\.D.|o.s.D.e.|
|00000310| 76 00 69 00 63 00 65 00 | 73 00 5c 00 45 00 4e 00 |v.i.c.e.|s.\.E.N.|
|00000320| 54 00 43 00 4f 00 4c 00 | 4c 00 00 00 55 8b ec 83 |T.C.O.L.|L...U...|
|00000330| ec 5c 53 56 57 6a 08 59 | be e4 02 01 00 8d 7d cc |.\SVWj.Y|......}.|
|00000340| 6a 0a f3 a5 59 8d 45 cc | be 04 03 01 00 8d 7d a4 |j...Y.E.|......}.|
|00000350| 50 8d 45 ec f3 a5 8b 3d | 58 02 01 00 33 db 50 89 |P.E....=|X...3.P.|
|00000360| 5d fc ff d7 8b 75 08 8d | 45 fc 50 53 53 8d 45 ec |]....u..|E.PSS.E.|
|00000370| 68 00 80 00 00 50 6a 14 | 56 ff 15 54 02 01 00 8b |h....Pj.|V..T....|
|00000380| d8 85 db 0f 8c 05 01 00 | 00 b8 98 04 01 00 c7 46 |........|.......F|
|00000390| 34 c0 05 01 00 89 46 70 | 89 46 40 89 46 38 8b 45 |4.....Fp|.F@.F8.E|
|000003a0| fc 83 48 1c 04 8d 45 a4 | 50 8d 45 f4 50 ff d7 8d |..H...E.|P.E.P...|
|000003b0| 45 ec 50 8d 45 f4 50 ff | 15 50 02 01 00 85 c0 7d |E.P.E.P.|.P.....}|
|000003c0| 04 8b f0 eb 36 8b 45 fc | bb 44 64 6b 20 53 6a 14 |....6.E.|.Ddk Sj.|
|000003d0| 8b 70 28 33 c0 8b fe 6a | 00 ab ab ab ab ab 8b 3d |.p(3...j|.......=|
|000003e0| 60 02 01 00 ff d7 85 c0 | 89 06 75 1f 8d 45 f4 50 |`.......|..u..E.P|
|000003f0| ff 15 64 02 01 00 be 17 | 00 00 c0 ff 75 fc ff 15 |..d.....|....u...|
|00000400| 78 02 01 00 8b c6 e9 85 | 00 00 00 53 6a 14 6a 00 |x.......|...Sj.j.|
|00000410| ff d7 85 c0 89 46 04 75 | 0a ff 36 ff 15 5c 02 01 |.....F.u|..6..\..|
|00000420| 00 eb 2e 83 66 08 00 83 | 66 0c 00 8d 46 10 50 ff |....f...|f...F.P.|
|00000430| 15 80 02 01 00 53 6a 28 | 6a 00 ff d7 8b f8 85 ff |.....Sj(|j.......|
|00000440| 75 29 ff 36 8b 3d 5c 02 | 01 00 ff d7 ff 76 04 ff |u).6.=\.|.....v..|
|00000450| d7 8d 45 f4 50 ff 15 64 | 02 01 00 ff 75 fc ff 15 |..E.P..d|....u...|
|00000460| 78 02 01 00 b8 17 00 00 | c0 eb 25 83 65 08 00 57 |x.......|..%.e..W|
|00000470| 6a 00 56 e8 9e 01 00 00 | 8b d8 85 db 7c 09 ff 45 |j.V.....|....|..E|
|00000480| 08 83 7d 08 05 7c e8 57 | ff 15 5c 02 01 00 8b c3 |..}..|.W|..\.....|
|00000490| 5f 5e 5b c9 c2 08 00 cc | 55 8b ec 83 ec 10 53 8b |_^[.....|U.....S.|
|000004a0| 5d 0c 56 33 c9 8b 73 60 | 8b 43 0c 89 4b 18 89 4b |].V3..s`|.C..K..K|
|000004b0| 1c 89 45 f8 57 0f b6 06 | 8b 7e 04 2b c1 89 4d fc |..E.W...|.~.+..M.|
|000004c0| 89 75 f0 89 7d 0c 0f 84 | b5 00 00 00 48 48 0f 84 |.u..}...|....HH..|
|000004d0| ad 00 00 00 83 e8 0c 74 | 0c c7 43 18 0d 00 00 c0 |.......t|..C.....|
|000004e0| e9 9c 00 00 00 81 7e 0c | 00 20 00 80 75 eb 68 44 |......~.|. ..u.hD|
|000004f0| 64 6b 20 6a 28 51 ff 15 | 60 02 01 00 85 c0 89 45 |dk j(Q..|`......E|
|00000500| f4 75 09 c7 43 18 17 00 | 00 c0 eb 75 85 ff 76 62 |.u..C...|...u..vb|
|00000510| eb 03 8b 75 f0 ff 75 f4 | 8b 45 08 56 ff 70 28 e8 |...u..u.|.E.V.p(.|
|00000520| f2 00 00 00 85 c0 7c 47 | 8b 4d 0c 83 f9 28 72 19 |......|G|.M...(r.|
|00000530| 8b 75 f4 8b 7d f8 83 45 | f8 28 83 45 fc 28 83 6d |.u..}..E|.(.E.(.m|
|00000540| 0c 28 6a 0a 59 f3 a5 eb | 1e 8b 75 f4 8b 7d f8 8b |.(j.Y...|..u..}..|
|00000550| c1 c1 e9 02 f3 a5 8b c8 | 8b 45 0c 01 45 fc 83 e1 |........|.E..E...|
|00000560| 03 83 65 0c 00 f3 a4 83 | 7d 0c 00 77 a5 eb 03 89 |..e.....|}..w....|
|00000570| 43 18 ff 75 f4 ff 15 5c | 02 01 00 8b 45 fc 89 43 |C..u...\|....E..C|
|00000580| 1c 8b 73 18 32 d2 8b cb | ff 15 7c 02 01 00 8b c6 |..s.2...|..|.....|
|00000590| 5f 5e 5b c9 c2 08 00 cc | 5c 00 44 00 6f 00 73 00 |_^[.....|\.D.o.s.|
|000005a0| 44 00 65 00 76 00 69 00 | 63 00 65 00 73 00 5c 00 |D.e.v.i.|c.e.s.\.|
|000005b0| 45 00 4e 00 54 00 43 00 | 4f 00 4c 00 4c 00 00 00 |E.N.T.C.|O.L.L...|
|000005c0| 55 8b ec 83 ec 30 53 8b | 5d 08 56 57 8b 43 04 6a |U....0S.|].VW.C.j|
|000005d0| 0a 59 be 98 05 01 00 8d | 7d d0 f3 a5 8b 70 28 8b |.Y......|}....p(.|
|000005e0| 3d 5c 02 01 00 ff 36 ff | d7 ff 76 04 ff d7 8d 45 |=\....6.|..v....E|
|000005f0| d0 50 8d 45 f8 50 ff 15 | 58 02 01 00 8d 45 f8 50 |.P.E.P..|X....E.P|
|00000600| ff 15 64 02 01 00 ff 73 | 04 ff 15 78 02 01 00 5f |..d....s|...x..._|
|00000610| 5e 5b c9 c2 04 00 55 8b | ec 83 ec 14 53 56 8b 35 |^[....U.|....SV.5|
|00000620| 60 02 01 00 57 bf 44 64 | 6b 20 57 6a 5c 6a 00 ff |`...W.Dd|k Wj\j..|
|00000630| d6 8b d8 85 db 75 0a b8 | 17 00 00 c0 e9 15 02 00 |.....u..|........|
|00000640| 00 57 6a 5c 6a 00 ff d6 | 85 c0 89 45 fc 75 0a be |.Wj\j...|...E.u..|
|00000650| 17 00 00 c0 e9 f4 01 00 | 00 8b 75 08 8d 4e 10 89 |........|..u..N..|
|00000660| 4d f8 ff 15 40 02 01 00 | ff 46 08 8b 4e 08 8b 36 |M...@...|.F..N..6|
|00000670| 8b 55 08 6a 05 89 4d f4 | 8d 7b 14 59 f3 a5 8b 4d |.U.j..M.|.{.Y...M|
|00000680| fc 8b 72 04 6a 05 8a d0 | 8d 79 14 59 f3 a5 8b 4d |..r.j...|.y.Y...M|
|00000690| f8 ff 15 44 02 01 00 8b | 75 f4 6a 00 89 73 28 ff |...D....|u.j..s(.|
|000006a0| 15 48 02 01 00 89 45 ec | 89 55 f0 89 53 2c 8b 45 |.H....E.|.U..S,.E|
|000006b0| ec 89 43 30 8d 45 ec 50 | ff 15 70 02 01 00 8b 45 |..C0.E.P|..p....E|
|000006c0| f0 89 43 34 8b 45 ec 89 | 43 38 a1 6c 02 01 00 8b |..C4.E..|C8.l....|
|000006d0| 48 04 89 4d f0 8b 10 89 | 55 ec 3b 48 08 75 f0 89 |H..M....|U.;H.u..|
|000006e0| 4b 3c 8b 4d fc 8b 45 ec | 33 41 14 8d 79 14 89 43 |K<.M..E.|3A..y..C|
|000006f0| 40 ff 15 68 02 01 00 8b | 4f 04 33 c8 89 4b 44 e8 |@..h....|O.3..KD.|
|00000700| 56 04 00 00 8b 4f 08 ff | 75 f4 33 c8 89 4b 48 8b |V....O..|u.3..KH.|
|00000710| 47 0c 33 45 0c 89 43 4c | 8b 47 10 89 43 50 8b c6 |G.3E..CL|.G..CP..|
|00000720| 8b 75 fc f7 d0 89 46 28 | 8d 46 2c 50 e8 2d 01 00 |.u....F(|.F,P.-..|
|00000730| 00 85 c0 89 45 0c 7c 32 | 8b 43 1c 53 33 43 18 33 |....E.|2|.C.S3C.3|
|00000740| 43 14 89 46 4c 8b 43 24 | 33 43 20 89 46 50 e8 d5 |C..FL.C$|3C .FP..|
|00000750| 03 00 00 56 e8 cf 03 00 | 00 8d 43 14 50 53 e8 99 |...V....|..C.PS..|
|00000760| 01 00 00 85 c0 89 45 0c | 7d 14 8b 3d 5c 02 01 00 |......E.|}..=\...|
|00000770| 53 ff d7 56 ff d7 8b 45 | 0c e9 d8 00 00 00 57 56 |S..V...E|......WV|
|00000780| e8 77 01 00 00 8b f8 85 | ff 7d 13 53 8b 1d 5c 02 |.w......|.}.S..\.|
|00000790| 01 00 ff d3 56 ff d3 8b | c7 e9 b8 00 00 00 8b 4d |....V...|.......M|
|000007a0| f8 ff 15 40 02 01 00 8b | 55 08 6a 05 59 8b 3a 6a |...@....|U.j.Y.:j|
|000007b0| 05 f3 a5 8b 7a 04 59 8b | f3 f3 a5 8b 4a 0c 89 4d |....z.Y.|....J..M|
|000007c0| 08 83 c1 02 89 4a 0c 8b | 4d f8 8a d0 ff 15 44 02 |.....J..|M.....D.|
|000007d0| 01 00 6a 10 8d 53 14 59 | 33 c0 8b fa 6a 05 f3 ab |..j..S.Y|3...j...|
|000007e0| 59 8b f3 8b fa 6a 05 f3 | a5 8b 75 fc 59 ff 75 fc |Y....j..|..u.Y.u.|
|000007f0| 8d 7b 28 f3 a5 ff 15 5c | 02 01 00 8b 45 08 53 89 |.{(....\|....E.S.|
|00000800| 43 3c e8 21 03 00 00 8d | 43 14 50 53 e8 eb 00 00 |C<.!....|C.PS....|
|00000810| 00 85 c0 7d 04 8b f0 eb | 34 8b 45 08 8b 7d 10 6a |...}....|4.E..}.j|
|00000820| 05 8b f3 59 40 f3 a5 53 | 89 43 3c e8 f8 02 00 00 |...Y@..S|.C<.....|
|00000830| 8d 43 14 50 53 e8 c2 00 | 00 00 85 c0 7c d7 8b 45 |.C.PS...|....|..E|
|00000840| 10 6a 05 59 8b f3 8d 78 | 14 f3 a5 33 f6 53 ff 15 |.j.Y...x|...3.S..|
|00000850| 5c 02 01 00 8b c6 5f 5e | 5b c9 c2 0c 00 cc 51 57 |\....._^|[.....QW|
|00000860| 68 44 64 6b 20 6a 20 6a | 00 ff 15 60 02 01 00 8b |hDdk j j|...`....|
|00000870| f8 85 ff 89 7c 24 04 75 | 07 b8 17 00 00 c0 eb 76 |....|$.u|.......v|
|00000880| 53 8b 5c 24 14 c1 e3 05 | 55 56 81 e3 ff 0f 00 00 |S.\$....|UV......|
|00000890| bd 00 10 00 00 2b dd 53 | ff 15 74 02 01 00 84 c0 |.....+.S|..t.....|
|000008a0| 74 f3 6a 08 8b f3 59 2b | dd f3 a5 be ff 01 00 00 |t.j...Y+|........|
|000008b0| 53 ff 15 74 02 01 00 84 | c0 75 04 2b dd eb f1 8b |S..t....|.u.+....|
|000008c0| 44 24 10 8b cb 6a 08 2b | c8 5a 8b 3c 01 31 38 83 |D$...j.+|.Z.<.18.|
|000008d0| c0 04 4a 75 f5 2b dd 4e | 75 d6 8b 74 24 10 8b 7c |..Ju.+.N|u..t$..||
|000008e0| 24 18 6a 08 59 ff 74 24 | 10 f3 a5 ff 15 5c 02 01 |$.j.Y.t$|.....\..|
|000008f0| 00 5e 5d 33 c0 5b 5f 59 | c2 08 00 cc 55 8b ec 83 |.^]3.[_Y|....U...|
|00000900| ec 10 68 44 64 6b 20 68 | 40 01 00 00 6a 00 ff 15 |..hDdk h|@...j...|
|00000910| 60 02 01 00 85 c0 89 45 | f0 75 0a b8 17 00 00 c0 |`......E|.u......|
|00000920| e9 ff 01 00 00 8b 4d 0c | 53 56 57 6a 10 8b f8 5e |......M.|SVWj...^|
|00000930| 0f b6 11 0f b6 59 01 41 | c1 e2 08 0b d3 41 c1 e2 |.....Y.A|.....A..|
|00000940| 08 0f b6 19 0b d3 41 c1 | e2 08 0f b6 19 0b d3 41 |......A.|.......A|
|00000950| 89 17 83 c7 04 4e 75 d8 | 8d 50 08 8b f0 2b f2 c7 |.....Nu.|.P...+..|
|00000960| 45 0c 40 00 00 00 8b 4c | 16 34 33 4c 16 20 33 0c |E.@....L|.43L. 3.|
|00000970| 16 33 0a 83 c2 04 8b d9 | 03 c9 c1 eb 1f 0b d9 89 |.3......|........|
|00000980| 1f 83 c7 04 ff 4d 0c 75 | dd 8b 4d 08 89 45 08 c7 |.....M.u|..M..E..|
|00000990| 45 f4 14 00 00 00 8b 11 | 8b 71 08 8b 79 0c 89 55 |E.......|.q..y..U|
|000009a0| 0c 8b 51 04 89 75 fc 8b | 71 10 89 7d f8 8b c2 8b |..Q..u..|q..}....|
|000009b0| 5d 0c f7 d0 23 c7 8b 7d | fc 23 fa 0b c7 8b 7d 0c |]...#..}|.#....}.|
|000009c0| c1 ef 1b c1 e3 05 0b fb | 8b da 03 c7 8b 7d 08 83 |........|.....}..|
|000009d0| 45 08 04 03 07 8b 7d fc | c1 e3 1e c1 ea 02 8d 84 |E.....}.|........|
|000009e0| 30 99 79 82 5a 8b 75 f8 | 0b da 8b 55 0c ff 4d f4 |0.y.Z.u.|...U..M.|
|000009f0| 89 7d f8 89 5d fc 89 45 | 0c 75 b2 c7 45 f4 14 00 |.}..]..E|.u..E...|
|00000a00| 00 00 8b 45 0c 8b 5d 0c | c1 e8 1b c1 e3 05 0b c3 |...E..].|........|
|00000a10| 8b df 8b 7d fc 33 df 33 | da 03 c3 8b 5d 08 83 45 |...}.3.3|....]..E|
|00000a20| 08 04 03 03 8b da c1 e3 | 1e c1 ea 02 8d 84 30 a1 |........|......0.|
|00000a30| eb d9 6e 8b 75 f8 0b da | 8b 55 0c ff 4d f4 89 7d |..n.u...|.U..M..}|
|00000a40| f8 89 5d fc 89 45 0c 75 | b9 c7 45 f4 14 00 00 00 |..]..E.u|..E.....|
|00000a50| 8b 45 fc 8b 5d 0c 0b c2 | 23 c7 8b 7d fc 23 fa 0b |.E..]...|#..}.#..|
|00000a60| c7 8b 7d 0c c1 ef 1b c1 | e3 05 0b fb 8b da 03 c7 |..}.....|........|
|00000a70| 8b 7d 08 83 45 08 04 03 | 07 8b 7d fc c1 e3 1e c1 |.}..E...|..}.....|
|00000a80| ea 02 8d 84 30 dc bc 1b | 8f 8b 75 f8 0b da 8b 55 |....0...|..u....U|
|00000a90| 0c ff 4d f4 89 7d f8 89 | 5d fc 89 45 0c 75 b1 c7 |..M..}..|]..E.u..|
|00000aa0| 45 f4 14 00 00 00 8b 45 | 0c 8b 5d 0c c1 e8 1b c1 |E......E|..].....|
|00000ab0| e3 05 0b c3 8b df 8b 7d | fc 33 df 33 da 03 c3 8b |.......}|.3.3....|
|00000ac0| 5d 08 83 45 08 04 03 03 | 8b da c1 e3 1e c1 ea 02 |]..E....|........|
|00000ad0| 8d 84 30 d6 c1 62 ca 8b | 75 f8 0b da 8b 55 0c ff |..0..b..|u....U..|
|00000ae0| 4d f4 89 7d f8 89 5d fc | 89 45 0c 75 b9 8b 19 ff |M..}..].|.E.u....|
|00000af0| 75 f0 03 d8 8b 41 04 03 | c2 8b 55 fc 89 41 04 8b |u....A..|..U..A..|
|00000b00| 41 08 03 c2 89 19 89 41 | 08 8b 41 0c 03 c7 89 41 |A......A|..A....A|
|00000b10| 0c 8b 41 10 03 c6 89 41 | 10 ff 15 5c 02 01 00 5f |..A....A|...\..._|
|00000b20| 5e 33 c0 5b c9 c2 08 00 | 8b 44 24 04 66 83 60 54 |^3.[....|.D$.f.`T|
|00000b30| 00 83 60 58 00 c7 00 01 | 23 45 67 c7 40 04 89 ab |..`X....|#Eg.@...|
|00000b40| cd ef c7 40 08 fe dc ba | 98 c7 40 0c 76 54 32 10 |...@....|..@.vT2.|
|00000b50| c7 40 10 f0 e1 d2 c3 c2 | 04 00 ff 25 84 02 01 00 |.@......|...%....|
|00000b60| ac 0b 00 00 00 00 00 00 | 00 00 00 00 0a 0d 00 00 |........|........|
|00000b70| 50 02 00 00 9c 0b 00 00 | 00 00 00 00 00 00 00 00 |P.......|........|
|00000b80| 5c 0d 00 00 40 02 00 00 | 00 00 00 00 00 00 00 00 |\...@...|........|
|00000b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 48 0d 00 00 |........|....H...|
|00000ba0| 34 0d 00 00 18 0d 00 00 | 00 00 00 00 50 0c 00 00 |4.......|....P...|
|00000bb0| 68 0c 00 00 7a 0c 00 00 | 00 0c 00 00 38 0c 00 00 |h...z...|....8...|
|00000bc0| 20 0c 00 00 be 0c 00 00 | d4 0c 00 00 e2 0c 00 00 | .......|........|
|00000bd0| f6 0c 00 00 0e 0c 00 00 | 92 0c 00 00 e8 0b 00 00 |........|........|
|00000be0| a8 0c 00 00 00 00 00 00 | 76 01 4b 65 49 6e 69 74 |........|v.KeInit|
|00000bf0| 69 61 6c 69 7a 65 53 70 | 69 6e 4c 6f 63 6b 00 00 |ializeSp|inLock..|
|00000c00| 42 00 45 78 46 72 65 65 | 50 6f 6f 6c 00 00 fb 00 |B.ExFree|Pool....|
|00000c10| 49 6f 44 65 6c 65 74 65 | 44 65 76 69 63 65 00 00 |IoDelete|Device..|
|00000c20| fc 00 49 6f 44 65 6c 65 | 74 65 53 79 6d 62 6f 6c |..IoDele|teSymbol|
|00000c30| 69 63 4c 69 6e 6b 00 00 | 36 00 45 78 41 6c 6c 6f |icLink..|6.ExAllo|
|00000c40| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |catePool|WithTag.|
|00000c50| f7 00 49 6f 43 72 65 61 | 74 65 53 79 6d 62 6f 6c |..IoCrea|teSymbol|
|00000c60| 69 63 4c 69 6e 6b 00 00 | f3 00 49 6f 43 72 65 61 |icLink..|..IoCrea|
|00000c70| 74 65 44 65 76 69 63 65 | 00 00 d0 02 52 74 6c 49 |teDevice|....RtlI|
|00000c80| 6e 69 74 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |nitUnico|deString|
|00000c90| 00 00 45 01 49 6f 66 43 | 6f 6d 70 6c 65 74 65 52 |..E.IofC|ompleteR|
|00000ca0| 65 71 75 65 73 74 00 00 | 60 01 4b 65 47 65 74 43 |equest..|`.KeGetC|
|00000cb0| 75 72 72 65 6e 74 54 68 | 72 65 61 64 00 00 0c 01 |urrentTh|read....|
|00000cc0| 49 6f 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |IoGetCur|rentProc|
|00000cd0| 65 73 73 00 b2 01 4b 65 | 54 69 63 6b 43 6f 75 6e |ess...Ke|TickCoun|
|00000ce0| 74 00 86 01 4b 65 51 75 | 65 72 79 53 79 73 74 65 |t...KeQu|erySyste|
|00000cf0| 6d 54 69 6d 65 00 df 01 | 4d 6d 49 73 41 64 64 72 |mTime...|MmIsAddr|
|00000d00| 65 73 73 56 61 6c 69 64 | 00 00 6e 74 6f 73 6b 72 |essValid|..ntoskr|
|00000d10| 6e 6c 2e 65 78 65 00 00 | 44 00 4b 65 51 75 65 72 |nl.exe..|D.KeQuer|
|00000d20| 79 50 65 72 66 6f 72 6d | 61 6e 63 65 43 6f 75 6e |yPerform|anceCoun|
|00000d30| 74 65 72 00 4d 00 4b 66 | 52 65 6c 65 61 73 65 53 |ter.M.Kf|ReleaseS|
|00000d40| 70 69 6e 4c 6f 63 6b 00 | 4a 00 4b 66 41 63 71 75 |pinLock.|J.KfAcqu|
|00000d50| 69 72 65 53 70 69 6e 4c | 6f 63 6b 00 48 41 4c 2e |ireSpinL|ock.HAL.|
|00000d60| 64 6c 6c 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |dll.....|........|
|00000d70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d80| 00 00 00 00 60 00 00 00 | 39 33 49 33 58 33 7b 33 |....`...|93I3X3{3|
|00000d90| 8a 33 91 33 b9 33 e0 33 | f2 33 00 34 1d 34 31 34 |.3.3.3.3|.3.4.414|
|00000da0| 46 34 57 34 60 34 8a 34 | f8 34 77 35 8a 35 d3 35 |F4W4`4.4|.4w5.5.5|
|00000db0| e1 35 f8 35 02 36 0b 36 | 20 36 64 36 93 36 a1 36 |.5.5.6.6| 6d6.6.6|
|00000dc0| ba 36 cb 36 f3 36 6c 37 | 8e 37 a3 37 ce 37 f7 37 |.6.6.6l7|.7.7.7.7|
|00000dd0| 50 38 6b 38 9a 38 b3 38 | ed 38 10 39 1b 3b 5c 3b |P8k8.8.8|.8.9.;\;|
|00000de0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e00| 01 00 00 00 10 01 00 00 | 00 00 00 00 45 6e 74 43 |........|....EntC|
|00000e10| 6f 6c 6c 2e 64 62 67 00 | 72 65 65 5c 45 6e 74 43 |oll.dbg.|ree\EntC|
|00000e20| 6f 6c 6c 2e 73 79 73 00 | 00 00 00 00 00 00 00 00 |oll.sys.|........|
|00000e30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ea0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000eb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ec0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ed0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ee0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ef0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f10| 2c 03 00 00 6b 01 00 00 | 18 00 00 00 02 00 09 d3 |,...k...|........|
|00000f20| 98 04 00 00 ff 00 00 00 | 05 00 00 00 02 00 1d d3 |........|........|
|00000f30| c0 05 00 00 56 00 00 00 | 0d 00 00 00 01 00 0c d3 |....V...|........|
|00000f40| 16 06 00 00 47 02 00 00 | 06 00 00 00 03 00 0f d3 |....G...|........|
|00000f50| 5e 08 00 00 9d 00 00 00 | 01 00 00 00 02 00 00 14 |^.......|........|
|00000f60| fc 08 00 00 2c 02 00 00 | 05 00 00 00 02 00 06 d3 |....,...|........|
|00000f70| 28 0b 00 00 32 00 00 00 | 00 00 00 00 01 00 00 00 |(...2...|........|
+--------+-------------------------+-------------------------+--------+--------+