PC Active 2009 June

home *** CD-ROM | disk | FTP | other *** search
/ PC Active 2009 June / PC Active NR.226.iso / Software / firewalls / zaZA_Setup_en.exe / VSDATANT.SYS / INIT < prev next >
Unknown | 2009-02-16 | 8.0 KB
open in:
MacOS 8.1 |
Win98 |
DOS
view JSON data |
view as text

This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence	Program	Detection	Match Type	Support
`100%`	file	data	default
hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 00 00 00 | 48 89 54 24 10 48 89 4c |........|H.T$.H.L|
|00000010| 24 08 53 48 81 ec 30 01 | 00 00 83 64 24 2c 00 48 |$.SH..0.|...d$,.H|
|00000020| 8d 15 2a 02 00 00 48 8d | 4c 24 40 c6 44 24 20 80 |..*...H.|L$@.D$ .|
|00000030| c6 44 24 21 01 66 c7 44 | 24 22 10 00 c6 44 24 24 |.D$!.f.D|$"...D$$|
|00000040| 00 c6 44 24 25 01 66 c7 | 44 24 26 10 00 c7 44 24 |..D$%.f.|D$&...D$|
|00000050| 28 56 53 4c 57 ff 15 ad | 95 fd ff 48 8d 15 0e 02 |(VSLW...|...H....|
|00000060| 00 00 48 8d 4c 24 50 ff | 15 9b 95 fd ff 48 8d 15 |..H.L$P.|.....H..|
|00000070| 3c 02 00 00 48 8d 4c 24 | 30 ff 15 89 95 fd ff 48 |<...H.L$|0......H|
|00000080| 8b 9c 24 40 01 00 00 48 | 8d 4c 24 60 33 d2 41 b8 |..$@...H|.L$`3.A.|
|00000090| c8 00 00 00 48 89 1d 3d | 85 ff ff e8 10 ed fc ff |....H..=|........|
|000000a0| 83 64 24 68 00 48 83 25 | 53 85 ff ff 00 f3 0f 6f |.d$h.H.%|S......o|
|000000b0| 44 24 50 f3 0f 6f 4c 24 | 30 48 83 25 1f 85 ff ff |D$P..oL$|0H.%....|
|000000c0| 00 48 8d 05 c0 b1 f9 ff | 4c 8d 0d 31 85 ff ff f3 |.H......|L..1....|
|000000d0| 0f 7f 44 24 70 f3 0f 6f | 44 24 40 f3 0f 7f 8c 24 |..D$p..o|D$@....$|
|000000e0| 80 00 00 00 48 89 84 24 | 20 01 00 00 48 8d 05 bd |....H..$| ...H...|
|000000f0| b1 f9 ff 4c 8d 44 24 60 | f3 0f 7f 84 24 90 00 00 |...L.D$`|....$...|
|00000100| 00 48 89 84 24 b0 00 00 | 00 48 8d 05 0c b6 f9 ff |.H..$...|.H......|
|00000110| 48 8b d3 48 89 84 24 b8 | 00 00 00 48 8d 05 62 b5 |H..H..$.|...H..b.|
|00000120| f9 ff 48 8b cb 48 89 84 | 24 c0 00 00 00 48 8d 05 |..H..H..|$....H..|
|00000130| 50 b4 f9 ff c6 44 24 60 | 8b 48 89 84 24 c8 00 00 |P....D$`|.H..$...|
|00000140| 00 48 8d 05 44 b7 f9 ff | 66 c7 44 24 62 c8 00 48 |.H..D...|f.D$b..H|
|00000150| 89 84 24 d0 00 00 00 48 | 8d 05 a6 b9 f9 ff c6 44 |..$....H|.......D|
|00000160| 24 61 01 48 89 84 24 f0 | 00 00 00 48 8d 05 be b6 |$a.H..$.|...H....|
|00000170| f9 ff c6 44 24 64 06 48 | 89 84 24 d8 00 00 00 48 |...D$d.H|..$....H|
|00000180| 8d 05 d6 b9 f9 ff c6 44 | 24 65 00 48 89 84 24 e8 |.......D|$e.H..$.|
|00000190| 00 00 00 48 8d 05 56 84 | ff ff c6 44 24 66 01 48 |...H..V.|...D$f.H|
|000001a0| 89 05 52 84 ff ff 48 89 | 05 43 84 ff ff c6 44 24 |..R...H.|.C....D$|
|000001b0| 67 00 ff 15 d0 8e fd ff | 85 c0 8b d8 75 19 48 8b |g.......|....u.H.|
|000001c0| 0d 3b 84 ff ff 48 8d 54 | 24 20 ff 15 a0 8e fd ff |.;...H.T|$ ......|
|000001d0| 48 89 05 c9 0b fe ff 8b | c3 48 81 c4 30 01 00 00 |H.......|.H..0...|
|000001e0| 5b c3 cc cc cc cc cc cc | 48 8b 05 11 cf fd ff 49 |[.......|H......I|
|000001f0| b9 32 a2 df 2d 99 2b 00 | 00 48 85 c0 74 05 49 3b |.2..-.+.|.H..t.I;|
|00000200| c1 75 2f 4c 8d 05 f6 ce | fd ff 48 b8 20 03 00 00 |.u/L....|..H. ...|
|00000210| 80 f7 ff ff 48 8b 00 49 | 33 c0 49 b8 ff ff ff ff |....H..I|3.I.....|
|00000220| ff ff 00 00 49 23 c0 49 | 0f 44 c1 48 89 05 ce ce |....I#.I|.D.H....|
|00000230| fd ff 48 f7 d0 48 89 05 | cc ce fd ff e9 3f 93 fa |..H..H..|.....?..|
|00000240| ff cc cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000250| 56 00 73 00 64 00 61 00 | 74 00 61 00 6e 00 74 00 |V.s.d.a.|t.a.n.t.|
|00000260| 00 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000270| 5a 00 6f 00 6e 00 65 00 | 20 00 41 00 6c 00 61 00 |Z.o.n.e.| .A.l.a.|
|00000280| 72 00 6d 00 20 00 46 00 | 69 00 72 00 65 00 77 00 |r.m. .F.|i.r.e.w.|
|00000290| 61 00 6c 00 6c 00 20 00 | 44 00 72 00 69 00 76 00 |a.l.l. .|D.r.i.v.|
|000002a0| 65 00 72 00 00 00 cc cc | cc cc cc cc cc cc cc cc |e.r.....|........|
|000002b0| 7b 00 41 00 43 00 33 00 | 30 00 42 00 46 00 42 00 |{.A.C.3.|0.B.F.B.|
|000002c0| 35 00 2d 00 38 00 33 00 | 34 00 42 00 2d 00 34 00 |5.-.8.3.|4.B.-.4.|
|000002d0| 36 00 64 00 32 00 2d 00 | 42 00 39 00 31 00 32 00 |6.d.2.-.|B.9.1.2.|
|000002e0| 2d 00 36 00 43 00 45 00 | 37 00 31 00 36 00 38 00 |-.6.C.E.|7.1.6.8.|
|000002f0| 34 00 45 00 42 00 32 00 | 44 00 7d 00 00 00 cc cc |4.E.B.2.|D.}.....|
|00000300| c0 d5 06 00 00 00 00 00 | 00 00 00 00 0a e7 06 00 |........|........|
|00000310| 48 62 04 00 b8 d3 06 00 | 00 00 00 00 00 00 00 00 |Hb......|........|
|00000320| 34 e7 06 00 40 60 04 00 | c8 d3 06 00 00 00 00 00 |4...@`..|........|
|00000330| 00 00 00 00 62 ea 06 00 | 50 60 04 00 c8 d4 06 00 |....b...|P`......|
|00000340| 00 00 00 00 00 00 00 00 | 94 ed 06 00 50 61 04 00 |........|....Pa..|
|00000350| 78 d3 06 00 00 00 00 00 | 00 00 00 00 5c ee 06 00 |x.......|....\...|
|00000360| 00 60 04 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |.`......|........|
|00000370| 00 00 00 00 00 00 00 00 | 34 ee 06 00 00 00 00 00 |........|4.......|
|00000380| 1e ee 06 00 00 00 00 00 | 02 ee 06 00 00 00 00 00 |........|........|
|00000390| e4 ed 06 00 00 00 00 00 | c4 ed 06 00 00 00 00 00 |........|........|
|000003a0| a2 ed 06 00 00 00 00 00 | 48 ee 06 00 00 00 00 00 |........|H.......|
|000003b0| 00 00 00 00 00 00 00 00 | 18 e7 06 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 3c e7 06 00 00 00 00 00 |........|<.......|
|000003d0| 58 e7 06 00 00 00 00 00 | 78 e7 06 00 00 00 00 00 |X.......|x.......|
|000003e0| 90 e7 06 00 00 00 00 00 | b0 e7 06 00 00 00 00 00 |........|........|
|000003f0| d0 e7 06 00 00 00 00 00 | ec e7 06 00 00 00 00 00 |........|........|
|00000400| 10 e8 06 00 00 00 00 00 | 2c e8 06 00 00 00 00 00 |........|,.......|
|00000410| 3e e8 06 00 00 00 00 00 | 60 e8 06 00 00 00 00 00 |>.......|`.......|
|00000420| 76 e8 06 00 00 00 00 00 | 8c e8 06 00 00 00 00 00 |v.......|........|
|00000430| a8 e8 06 00 00 00 00 00 | ce e8 06 00 00 00 00 00 |........|........|
|00000440| e8 e8 06 00 00 00 00 00 | 00 e9 06 00 00 00 00 00 |........|........|
|00000450| 28 e9 06 00 00 00 00 00 | 3a e9 06 00 00 00 00 00 |(.......|:.......|
|00000460| 50 e9 06 00 00 00 00 00 | 62 e9 06 00 00 00 00 00 |P.......|b.......|
|00000470| 78 e9 06 00 00 00 00 00 | 92 e9 06 00 00 00 00 00 |x.......|........|
|00000480| ae e9 06 00 00 00 00 00 | c0 e9 06 00 00 00 00 00 |........|........|
|00000490| da e9 06 00 00 00 00 00 | 4e ea 06 00 00 00 00 00 |........|N.......|
|000004a0| 34 ea 06 00 00 00 00 00 | 1e ea 06 00 00 00 00 00 |4.......|........|
|000004b0| 08 ea 06 00 00 00 00 00 | f2 e9 06 00 00 00 00 00 |........|........|
|000004c0| 00 00 00 00 00 00 00 00 | 6c ea 06 00 00 00 00 00 |........|l.......|
|000004d0| 86 ea 06 00 00 00 00 00 | 9e ea 06 00 00 00 00 00 |........|........|
|000004e0| b8 ea 06 00 00 00 00 00 | cc ea 06 00 00 00 00 00 |........|........|
|000004f0| ec ea 06 00 00 00 00 00 | 06 eb 06 00 00 00 00 00 |........|........|
|00000500| 18 eb 06 00 00 00 00 00 | 2e eb 06 00 00 00 00 00 |........|........|
|00000510| 48 eb 06 00 00 00 00 00 | 5a eb 06 00 00 00 00 00 |H.......|Z.......|
|00000520| 72 eb 06 00 00 00 00 00 | 90 eb 06 00 00 00 00 00 |r.......|........|
|00000530| a4 eb 06 00 00 00 00 00 | c4 eb 06 00 00 00 00 00 |........|........|
|00000540| e6 eb 06 00 00 00 00 00 | 06 ec 06 00 00 00 00 00 |........|........|
|00000550| 18 ec 06 00 00 00 00 00 | 36 ec 06 00 00 00 00 00 |........|6.......|
|00000560| 5a ec 06 00 00 00 00 00 | 78 ec 06 00 00 00 00 00 |Z.......|x.......|
|00000570| a2 ec 06 00 00 00 00 00 | ba ec 06 00 00 00 00 00 |........|........|
|00000580| d8 ec 06 00 00 00 00 00 | f4 ec 06 00 00 00 00 00 |........|........|
|00000590| 0e ed 06 00 00 00 00 00 | 30 ed 06 00 00 00 00 00 |........|0.......|
|000005a0| 4e ed 06 00 00 00 00 00 | 62 ed 06 00 00 00 00 00 |N.......|b.......|
|000005b0| 78 ed 06 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |x.......|........|
|000005c0| 8a e1 06 00 00 00 00 00 | a0 e1 06 00 00 00 00 00 |........|........|
|000005d0| b8 e1 06 00 00 00 00 00 | cc e1 06 00 00 00 00 00 |........|........|
|000005e0| de e1 06 00 00 00 00 00 | ee e1 06 00 00 00 00 00 |........|........|
|000005f0| fa e1 06 00 00 00 00 00 | 04 e2 06 00 00 00 00 00 |........|........|
|00000600| 10 e2 06 00 00 00 00 00 | 20 e2 06 00 00 00 00 00 |........| .......|
|00000610| 2e e2 06 00 00 00 00 00 | 38 e2 06 00 00 00 00 00 |........|8.......|
|00000620| 54 e2 06 00 00 00 00 00 | 74 e2 06 00 00 00 00 00 |T.......|t.......|
|00000630| 7e e2 06 00 00 00 00 00 | 96 e2 06 00 00 00 00 00 |~.......|........|
|00000640| a0 e2 06 00 00 00 00 00 | b8 e2 06 00 00 00 00 00 |........|........|
|00000650| cc e2 06 00 00 00 00 00 | da e2 06 00 00 00 00 00 |........|........|
|00000660| f2 e2 06 00 00 00 00 00 | fe e2 06 00 00 00 00 00 |........|........|
|00000670| 12 e3 06 00 00 00 00 00 | 2c e3 06 00 00 00 00 00 |........|,.......|
|00000680| 42 e3 06 00 00 00 00 00 | 4e e3 06 00 00 00 00 00 |B.......|N.......|
|00000690| 64 e3 06 00 00 00 00 00 | 70 e3 06 00 00 00 00 00 |d.......|p.......|
|000006a0| 7e e3 06 00 00 00 00 00 | 90 e3 06 00 00 00 00 00 |~.......|........|
|000006b0| a6 e3 06 00 00 00 00 00 | b6 e3 06 00 00 00 00 00 |........|........|
|000006c0| d4 e3 06 00 00 00 00 00 | e6 e3 06 00 00 00 00 00 |........|........|
|000006d0| f8 e3 06 00 00 00 00 00 | 0c e4 06 00 00 00 00 00 |........|........|
|000006e0| 28 e4 06 00 00 00 00 00 | 3c e4 06 00 00 00 00 00 |(.......|<.......|
|000006f0| 7a e1 06 00 00 00 00 00 | 58 e4 06 00 00 00 00 00 |z.......|X.......|
|00000700| 68 e4 06 00 00 00 00 00 | 7e e4 06 00 00 00 00 00 |h.......|~.......|
|00000710| 92 e4 06 00 00 00 00 00 | ac e4 06 00 00 00 00 00 |........|........|
|00000720| c2 e4 06 00 00 00 00 00 | ce e4 06 00 00 00 00 00 |........|........|
|00000730| d8 e4 06 00 00 00 00 00 | e8 e4 06 00 00 00 00 00 |........|........|
|00000740| 00 e5 06 00 00 00 00 00 | 14 e5 06 00 00 00 00 00 |........|........|
|00000750| 28 e5 06 00 00 00 00 00 | 46 e5 06 00 00 00 00 00 |(.......|F.......|
|00000760| 5e e5 06 00 00 00 00 00 | 80 e5 06 00 00 00 00 00 |^.......|........|
|00000770| 9c e5 06 00 00 00 00 00 | ae e5 06 00 00 00 00 00 |........|........|
|00000780| bc e5 06 00 00 00 00 00 | c8 e5 06 00 00 00 00 00 |........|........|
|00000790| de e5 06 00 00 00 00 00 | f6 e5 06 00 00 00 00 00 |........|........|
|000007a0| 0e e6 06 00 00 00 00 00 | 1e e6 06 00 00 00 00 00 |........|........|
|000007b0| 34 e6 06 00 00 00 00 00 | 44 e6 06 00 00 00 00 00 |4.......|D.......|
|000007c0| 68 e6 06 00 00 00 00 00 | 78 e6 06 00 00 00 00 00 |h.......|x.......|
|000007d0| 8a e6 06 00 00 00 00 00 | 9e e6 06 00 00 00 00 00 |........|........|
|000007e0| c0 e6 06 00 00 00 00 00 | de e6 06 00 00 00 00 00 |........|........|
|000007f0| fa e6 06 00 00 00 00 00 | 64 e1 06 00 00 00 00 00 |........|d.......|
|00000800| 42 e1 06 00 00 00 00 00 | 28 e1 06 00 00 00 00 00 |B.......|(.......|
|00000810| 12 e1 06 00 00 00 00 00 | fc e0 06 00 00 00 00 00 |........|........|
|00000820| e2 e0 06 00 00 00 00 00 | c6 e0 06 00 00 00 00 00 |........|........|
|00000830| a4 e0 06 00 00 00 00 00 | 92 e0 06 00 00 00 00 00 |........|........|
|00000840| 82 e0 06 00 00 00 00 00 | 60 e0 06 00 00 00 00 00 |........|`.......|
|00000850| 46 e0 06 00 00 00 00 00 | 32 e0 06 00 00 00 00 00 |F.......|2.......|
|00000860| 20 e0 06 00 00 00 00 00 | 04 e0 06 00 00 00 00 00 | .......|........|
|00000870| e8 df 06 00 00 00 00 00 | cc df 06 00 00 00 00 00 |........|........|
|00000880| aa df 06 00 00 00 00 00 | 92 df 06 00 00 00 00 00 |........|........|
|00000890| 7a df 06 00 00 00 00 00 | 62 df 06 00 00 00 00 00 |z.......|b.......|
|000008a0| 4e df 06 00 00 00 00 00 | 40 df 06 00 00 00 00 00 |N.......|@.......|
|000008b0| 20 df 06 00 00 00 00 00 | 16 df 06 00 00 00 00 00 | .......|........|
|000008c0| 06 df 06 00 00 00 00 00 | e8 de 06 00 00 00 00 00 |........|........|
|000008d0| da de 06 00 00 00 00 00 | be de 06 00 00 00 00 00 |........|........|
|000008e0| a6 de 06 00 00 00 00 00 | 88 de 06 00 00 00 00 00 |........|........|
|000008f0| 78 de 06 00 00 00 00 00 | 64 de 06 00 00 00 00 00 |x.......|d.......|
|00000900| 46 de 06 00 00 00 00 00 | 34 de 06 00 00 00 00 00 |F.......|4.......|
|00000910| 24 de 06 00 00 00 00 00 | 0a de 06 00 00 00 00 00 |$.......|........|
|00000920| f8 dd 06 00 00 00 00 00 | e0 dd 06 00 00 00 00 00 |........|........|
|00000930| c8 dd 06 00 00 00 00 00 | aa dd 06 00 00 00 00 00 |........|........|
|00000940| 8e dd 06 00 00 00 00 00 | 6e dd 06 00 00 00 00 00 |........|n.......|
|00000950| 4c dd 06 00 00 00 00 00 | 38 dd 06 00 00 00 00 00 |L.......|8.......|
|00000960| 26 dd 06 00 00 00 00 00 | 1c dd 06 00 00 00 00 00 |&.......|........|
|00000970| fe dc 06 00 00 00 00 00 | de dc 06 00 00 00 00 00 |........|........|
|00000980| c6 dc 06 00 00 00 00 00 | a8 dc 06 00 00 00 00 00 |........|........|
|00000990| 98 dc 06 00 00 00 00 00 | 80 dc 06 00 00 00 00 00 |........|........|
|000009a0| 68 dc 06 00 00 00 00 00 | 50 dc 06 00 00 00 00 00 |h.......|P.......|
|000009b0| 38 dc 06 00 00 00 00 00 | 1c dc 06 00 00 00 00 00 |8.......|........|
|000009c0| 12 dc 06 00 00 00 00 00 | 04 dc 06 00 00 00 00 00 |........|........|
|000009d0| ee db 06 00 00 00 00 00 | d4 db 06 00 00 00 00 00 |........|........|
|000009e0| c4 db 06 00 00 00 00 00 | a4 db 06 00 00 00 00 00 |........|........|
|000009f0| 8c db 06 00 00 00 00 00 | 82 db 06 00 00 00 00 00 |........|........|
|00000a00| 76 db 06 00 00 00 00 00 | 5a db 06 00 00 00 00 00 |v.......|Z.......|
|00000a10| 38 db 06 00 00 00 00 00 | 10 db 06 00 00 00 00 00 |8.......|........|
|00000a20| 24 db 06 00 00 00 00 00 | fe da 06 00 00 00 00 00 |$.......|........|
|00000a30| f0 da 06 00 00 00 00 00 | da da 06 00 00 00 00 00 |........|........|
|00000a40| c6 da 06 00 00 00 00 00 | a4 da 06 00 00 00 00 00 |........|........|
|00000a50| 90 da 06 00 00 00 00 00 | 48 e4 06 00 00 00 00 00 |........|H.......|
|00000a60| 78 da 06 00 00 00 00 00 | 68 ee 06 00 00 00 00 00 |x.......|h.......|
|00000a70| 00 00 00 00 00 00 00 00 | 6d 00 45 78 41 6c 6c 6f |........|m.ExAllo|
|00000a80| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |catePool|WithTag.|
|00000a90| 85 00 45 78 46 72 65 65 | 50 6f 6f 6c 57 69 74 68 |..ExFree|PoolWith|
|00000aa0| 54 61 67 00 ef 02 4b 65 | 52 65 6c 65 61 73 65 49 |Tag...Ke|ReleaseI|
|00000ab0| 6e 53 74 61 63 6b 51 75 | 65 75 65 64 53 70 69 6e |nStackQu|euedSpin|
|00000ac0| 4c 6f 63 6b 00 00 1d 02 | 49 6f 51 75 65 75 65 57 |Lock....|IoQueueW|
|00000ad0| 6f 72 6b 49 74 65 6d 45 | 78 00 12 03 4b 65 53 65 |orkItemE|x...KeSe|
|00000ae0| 74 50 72 69 6f 72 69 74 | 79 54 68 72 65 61 64 00 |tPriorit|yThread.|
|00000af0| 0d 03 4b 65 53 65 74 45 | 76 65 6e 74 00 00 e5 01 |..KeSetE|vent....|
|00000b00| 49 6f 46 72 65 65 57 6f | 72 6b 49 74 65 6d 00 00 |IoFreeWo|rkItem..|
|00000b10| ba 02 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 45 76 |..KeInit|ializeEv|
|00000b20| 65 6e 74 00 f7 02 4b 65 | 52 65 6c 65 61 73 65 53 |ent...Ke|ReleaseS|
|00000b30| 70 69 6e 4c 6f 63 6b 00 | 8c 02 4b 65 41 63 71 75 |pinLock.|..KeAcqu|
|00000b40| 69 72 65 49 6e 53 74 61 | 63 6b 51 75 65 75 65 64 |ireInSta|ckQueued|
|00000b50| 53 70 69 6e 4c 6f 63 6b | 00 00 52 03 4d 6d 42 75 |SpinLock|..R.MmBu|
|00000b60| 69 6c 64 4d 64 6c 46 6f | 72 4e 6f 6e 50 61 67 65 |ildMdlFo|rNonPage|
|00000b70| 64 50 6f 6f 6c 00 e2 01 | 49 6f 46 72 65 65 4d 64 |dPool...|IoFreeMd|
|00000b80| 6c 00 2b 07 69 73 70 72 | 69 6e 74 00 43 04 50 73 |l.+.ispr|int.C.Ps|
|00000b90| 43 72 65 61 74 65 53 79 | 73 74 65 6d 54 68 72 65 |CreateSy|stemThre|
|00000ba0| 61 64 00 00 75 03 4d 6d | 4d 61 70 4c 6f 63 6b 65 |ad..u.Mm|MapLocke|
|00000bb0| 64 50 61 67 65 73 53 70 | 65 63 69 66 79 43 61 63 |dPagesSp|ecifyCac|
|00000bc0| 68 65 00 00 38 00 44 62 | 67 42 72 65 61 6b 50 6f |he..8.Db|gBreakPo|
|00000bd0| 69 6e 74 00 a4 04 50 73 | 54 65 72 6d 69 6e 61 74 |int...Ps|Terminat|
|00000be0| 65 53 79 73 74 65 6d 54 | 68 72 65 61 64 00 99 01 |eSystemT|hread...|
|00000bf0| 49 6f 41 6c 6c 6f 63 61 | 74 65 57 6f 72 6b 49 74 |IoAlloca|teWorkIt|
|00000c00| 65 6d 00 00 1d 07 5f 76 | 73 6e 70 72 69 6e 74 66 |em...._v|snprintf|
|00000c10| 00 00 71 06 5a 77 43 6c | 6f 73 65 00 11 04 4f 62 |..q.ZwCl|ose...Ob|
|00000c20| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|00000c30| 79 48 61 6e 64 6c 65 00 | 2c 03 4b 65 57 61 69 74 |yHandle.|,.KeWait|
|00000c40| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 00 |ForSingl|eObject.|
|00000c50| 50 04 50 73 47 65 74 43 | 75 72 72 65 6e 74 54 68 |P.PsGetC|urrentTh|
|00000c60| 72 65 61 64 49 64 00 00 | 4b 04 50 73 47 65 74 43 |readId..|K.PsGetC|
|00000c70| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 49 64 00 |urrentPr|ocessId.|
|00000c80| 1b 04 4f 62 66 44 65 72 | 65 66 65 72 65 6e 63 65 |..ObfDer|eference|
|00000c90| 4f 62 6a 65 63 74 00 00 | 96 01 49 6f 41 6c 6c 6f |Object..|..IoAllo|
|00000ca0| 63 61 74 65 4d 64 6c 00 | 95 02 4b 65 41 63 71 75 |cateMdl.|..KeAcqu|
|00000cb0| 69 72 65 53 70 69 6e 4c | 6f 63 6b 52 61 69 73 65 |ireSpinL|ockRaise|
|00000cc0| 54 6f 44 70 63 00 2e 05 | 52 74 6c 49 6e 69 74 55 |ToDpc...|RtlInitU|
|00000cd0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 f9 02 |nicodeSt|ring....|
|00000ce0| 4b 65 52 65 6c 65 61 73 | 65 53 70 69 6e 4c 6f 63 |KeReleas|eSpinLoc|
|00000cf0| 6b 46 72 6f 6d 44 70 63 | 4c 65 76 65 6c 00 93 02 |kFromDpc|Level...|
|00000d00| 4b 65 41 63 71 75 69 72 | 65 53 70 69 6e 4c 6f 63 |KeAcquir|eSpinLoc|
|00000d10| 6b 41 74 44 70 63 4c 65 | 76 65 6c 00 3a 07 73 70 |kAtDpcLe|vel.:.sp|
|00000d20| 72 69 6e 74 66 00 a3 00 | 45 78 51 75 65 75 65 57 |rintf...|ExQueueW|
|00000d30| 6f 72 6b 49 74 65 6d 00 | be 02 4b 65 49 6e 69 74 |orkItem.|..KeInit|
|00000d40| 69 61 6c 69 7a 65 4d 75 | 74 65 78 00 8d 00 45 78 |ializeMu|tex...Ex|
|00000d50| 49 6e 69 74 69 61 6c 69 | 7a 65 4e 50 61 67 65 64 |Initiali|zeNPaged|
|00000d60| 4c 6f 6f 6b 61 73 69 64 | 65 4c 69 73 74 00 d9 00 |Lookasid|eList...|
|00000d70| 45 78 70 49 6e 74 65 72 | 6c 6f 63 6b 65 64 50 75 |ExpInter|lockedPu|
|00000d80| 73 68 45 6e 74 72 79 53 | 4c 69 73 74 00 00 d6 06 |shEntryS|List....|
|00000d90| 5a 77 51 75 65 72 79 53 | 79 73 74 65 6d 49 6e 66 |ZwQueryS|ystemInf|
|00000da0| 6f 72 6d 61 74 69 6f 6e | 00 00 d8 00 45 78 70 49 |ormation|....ExpI|
|00000db0| 6e 74 65 72 6c 6f 63 6b | 65 64 50 6f 70 45 6e 74 |nterlock|edPopEnt|
|00000dc0| 72 79 53 4c 69 73 74 00 | f8 04 52 74 6c 45 71 75 |rySList.|..RtlEqu|
|00000dd0| 61 6c 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |alUnicod|eString.|
|00000de0| f2 06 5a 77 53 65 74 49 | 6e 66 6f 72 6d 61 74 69 |..ZwSetI|nformati|
|00000df0| 6f 6e 46 69 6c 65 00 00 | f4 02 4b 65 52 65 6c 65 |onFile..|..KeRele|
|00000e00| 61 73 65 4d 75 74 65 78 | 00 00 a2 02 4b 65 44 65 |aseMutex|....KeDe|
|00000e10| 6c 61 79 45 78 65 63 75 | 74 69 6f 6e 54 68 72 65 |layExecu|tionThre|
|00000e20| 61 64 00 00 79 06 5a 77 | 43 72 65 61 74 65 46 69 |ad..y.Zw|CreateFi|
|00000e30| 6c 65 00 00 6a 00 45 78 | 41 6c 6c 6f 63 61 74 65 |le..j.Ex|Allocate|
|00000e40| 50 6f 6f 6c 00 00 98 00 | 45 78 49 6e 74 65 72 6c |Pool....|ExInterl|
|00000e50| 6f 63 6b 65 64 49 6e 73 | 65 72 74 54 61 69 6c 4c |ockedIns|ertTailL|
|00000e60| 69 73 74 00 a1 00 45 78 | 51 75 65 72 79 44 65 70 |ist...Ex|QueryDep|
|00000e70| 74 68 53 4c 69 73 74 00 | 76 04 50 73 47 65 74 56 |thSList.|v.PsGetV|
|00000e80| 65 72 73 69 6f 6e 00 00 | 9b 00 45 78 49 6e 74 65 |ersion..|..ExInte|
|00000e90| 72 6c 6f 63 6b 65 64 52 | 65 6d 6f 76 65 48 65 61 |rlockedR|emoveHea|
|00000ea0| 64 4c 69 73 74 00 d5 04 | 52 74 6c 43 6f 70 79 55 |dList...|RtlCopyU|
|00000eb0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 2a 03 |nicodeSt|ring..*.|
|00000ec0| 4b 65 57 61 69 74 46 6f | 72 4d 75 6c 74 69 70 6c |KeWaitFo|rMultipl|
|00000ed0| 65 4f 62 6a 65 63 74 73 | 00 00 07 07 5a 77 57 72 |eObjects|....ZwWr|
|00000ee0| 69 74 65 46 69 6c 65 00 | 72 00 45 78 44 65 6c 65 |iteFile.|r.ExDele|
|00000ef0| 74 65 4e 50 61 67 65 64 | 4c 6f 6f 6b 61 73 69 64 |teNPaged|Lookasid|
|00000f00| 65 4c 69 73 74 00 d7 02 | 4b 65 50 75 6c 73 65 45 |eList...|KePulseE|
|00000f10| 76 65 6e 74 00 00 29 07 | 69 73 64 69 67 69 74 00 |vent..).|isdigit.|
|00000f20| b1 04 52 74 6c 41 6e 73 | 69 53 74 72 69 6e 67 54 |..RtlAns|iStringT|
|00000f30| 6f 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |oUnicode|String..|
|00000f40| da 06 5a 77 52 65 61 64 | 46 69 6c 65 00 00 2a 05 |..ZwRead|File..*.|
|00000f50| 52 74 6c 49 6e 69 74 41 | 6e 73 69 53 74 72 69 6e |RtlInitA|nsiStrin|
|00000f60| 67 00 0f 05 52 74 6c 46 | 72 65 65 55 6e 69 63 6f |g...RtlF|reeUnico|
|00000f70| 64 65 53 74 72 69 6e 67 | 00 00 79 02 49 6f 57 72 |deString|..y.IoWr|
|00000f80| 69 74 65 45 72 72 6f 72 | 4c 6f 67 45 6e 74 72 79 |iteError|LogEntry|
|00000f90| 00 00 cf 01 49 6f 44 65 | 6c 65 74 65 53 79 6d 62 |....IoDe|leteSymb|
|00000fa0| 6f 6c 69 63 4c 69 6e 6b | 00 00 2c 02 49 6f 52 65 |olicLink|..,.IoRe|
|00000fb0| 67 69 73 74 65 72 53 68 | 75 74 64 6f 77 6e 4e 6f |gisterSh|utdownNo|
|00000fc0| 74 69 66 69 63 61 74 69 | 6f 6e 00 00 be 01 49 6f |tificati|on....Io|
|00000fd0| 43 72 65 61 74 65 4e 6f | 74 69 66 69 63 61 74 69 |CreateNo|tificati|
|00000fe0| 6f 6e 45 76 65 6e 74 00 | d5 06 5a 77 51 75 65 72 |onEvent.|..ZwQuer|
|00000ff0| 79 53 79 6d 62 6f 6c 69 | 63 4c 69 6e 6b 4f 62 6a |ySymboli|cLinkObj|
|00001000| 65 63 74 00 fd 01 49 6f | 47 65 74 52 65 6c 61 74 |ect...Io|GetRelat|
|00001010| 65 64 44 65 76 69 63 65 | 4f 62 6a 65 63 74 00 00 |edDevice|Object..|
|00001020| cd 01 49 6f 44 65 6c 65 | 74 65 44 65 76 69 63 65 |..IoDele|teDevice|
|00001030| 00 00 8a 00 45 78 47 65 | 74 50 72 65 76 69 6f 75 |....ExGe|tPreviou|
|00001040| 73 4d 6f 64 65 00 83 05 | 52 74 6c 51 75 65 72 79 |sMode...|RtlQuery|
|00001050| 52 65 67 69 73 74 72 79 | 56 61 6c 75 65 73 00 00 |Registry|Values..|
|00001060| 97 04 50 73 53 65 74 43 | 72 65 61 74 65 54 68 72 |..PsSetC|reateThr|
|00001070| 65 61 64 4e 6f 74 69 66 | 79 52 6f 75 74 69 6e 65 |eadNotif|yRoutine|
|00001080| 00 00 fc 06 5a 77 53 65 | 74 56 61 6c 75 65 4b 65 |....ZwSe|tValueKe|
|00001090| 79 00 d0 01 49 6f 44 65 | 74 61 63 68 44 65 76 69 |y...IoDe|tachDevi|
|000010a0| 63 65 00 00 95 04 50 73 | 53 65 74 43 72 65 61 74 |ce....Ps|SetCreat|
|000010b0| 65 50 72 6f 63 65 73 73 | 4e 6f 74 69 66 79 52 6f |eProcess|NotifyRo|
|000010c0| 75 74 69 6e 65 00 b1 06 | 5a 77 4f 70 65 6e 53 79 |utine...|ZwOpenSy|
|000010d0| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 4f 62 6a 65 63 74 |mbolicLi|nkObject|
|000010e0| 00 00 94 01 49 6f 41 6c | 6c 6f 63 61 74 65 45 72 |....IoAl|locateEr|
|000010f0| 72 6f 72 4c 6f 67 45 6e | 74 72 79 00 9b 03 4d 6d |rorLogEn|try...Mm|
|00001100| 55 73 65 72 50 72 6f 62 | 65 41 64 64 72 65 73 73 |UserProb|eAddress|
|00001110| 00 00 ec 01 49 6f 47 65 | 74 43 75 72 72 65 6e 74 |....IoGe|tCurrent|
|00001120| 50 72 6f 63 65 73 73 00 | 9e 01 49 6f 41 74 74 61 |Process.|..IoAtta|
|00001130| 63 68 44 65 76 69 63 65 | 42 79 50 6f 69 6e 74 65 |chDevice|ByPointe|
|00001140| 72 00 b4 04 52 74 6c 41 | 70 70 65 6e 64 55 6e 69 |r...RtlA|ppendUni|
|00001150| 63 6f 64 65 53 74 72 69 | 6e 67 54 6f 53 74 72 69 |codeStri|ngToStri|
|00001160| 6e 67 00 00 7f 02 49 6f | 66 43 6f 6d 70 6c 65 74 |ng....Io|fComplet|
|00001170| 65 52 65 71 75 65 73 74 | 00 00 ac 06 5a 77 4f 70 |eRequest|....ZwOp|
|00001180| 65 6e 50 72 6f 63 65 73 | 73 00 1c 04 4f 62 66 52 |enProces|s...ObfR|
|00001190| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|000011a0| c2 01 49 6f 43 72 65 61 | 74 65 53 79 6d 62 6f 6c |..IoCrea|teSymbol|
|000011b0| 69 63 4c 69 6e 6b 00 00 | 68 03 4d 6d 49 73 41 64 |icLink..|h.MmIsAd|
|000011c0| 64 72 65 73 73 56 61 6c | 69 64 00 00 b8 01 49 6f |dressVal|id....Io|
|000011d0| 43 72 65 61 74 65 44 65 | 76 69 63 65 00 00 7e 02 |CreateDe|vice..~.|
|000011e0| 49 6f 66 43 61 6c 6c 44 | 72 69 76 65 72 00 aa 06 |IofCallD|river...|
|000011f0| 5a 77 4f 70 65 6e 4b 65 | 79 00 2c 07 69 73 73 70 |ZwOpenKe|y.,.issp|
|00001200| 61 63 65 00 12 07 5f 73 | 6e 70 72 69 6e 74 66 00 |ace..._s|nprintf.|
|00001210| 78 06 5a 77 43 72 65 61 | 74 65 45 76 65 6e 74 00 |x.ZwCrea|teEvent.|
|00001220| 13 07 5f 73 6e 77 70 72 | 69 6e 74 66 00 00 57 07 |.._snwpr|intf..W.|
|00001230| 77 63 73 6e 63 70 79 00 | b5 04 52 74 6c 41 70 70 |wcsncpy.|..RtlApp|
|00001240| 65 6e 64 55 6e 69 63 6f | 64 65 54 6f 53 74 72 69 |endUnico|deToStri|
|00001250| 6e 67 00 00 b7 05 52 74 | 6c 55 6e 69 63 6f 64 65 |ng....Rt|lUnicode|
|00001260| 53 74 72 69 6e 67 54 6f | 41 6e 73 69 53 74 72 69 |StringTo|AnsiStri|
|00001270| 6e 67 00 00 55 07 77 63 | 73 6e 63 61 74 00 f9 03 |ng..U.wc|sncat...|
|00001280| 4e 74 57 61 69 74 46 6f | 72 53 69 6e 67 6c 65 4f |NtWaitFo|rSingleO|
|00001290| 62 6a 65 63 74 00 43 07 | 73 74 72 6e 63 70 79 00 |bject.C.|strncpy.|
|000012a0| c1 06 5a 77 51 75 65 72 | 79 44 69 72 65 63 74 6f |..ZwQuer|yDirecto|
|000012b0| 72 79 46 69 6c 65 00 00 | 0b 05 52 74 6c 46 72 65 |ryFile..|..RtlFre|
|000012c0| 65 41 6e 73 69 53 74 72 | 69 6e 67 00 a8 06 5a 77 |eAnsiStr|ing...Zw|
|000012d0| 4f 70 65 6e 46 69 6c 65 | 00 00 c3 05 52 74 6c 55 |OpenFile|....RtlU|
|000012e0| 70 63 61 73 65 55 6e 69 | 63 6f 64 65 43 68 61 72 |pcaseUni|codeChar|
|000012f0| 00 00 20 07 5f 77 63 73 | 69 63 6d 70 00 00 74 03 |.. ._wcs|icmp..t.|
|00001300| 4d 6d 4d 61 70 4c 6f 63 | 6b 65 64 50 61 67 65 73 |MmMapLoc|kedPages|
|00001310| 00 00 c5 00 45 78 53 79 | 73 74 65 6d 54 69 6d 65 |....ExSy|stemTime|
|00001320| 54 6f 4c 6f 63 61 6c 54 | 69 6d 65 00 ad 05 52 74 |ToLocalT|ime...Rt|
|00001330| 6c 54 69 6d 65 54 6f 54 | 69 6d 65 46 69 65 6c 64 |lTimeToT|imeField|
|00001340| 73 00 3c 00 44 62 67 50 | 72 69 6e 74 00 00 94 03 |s.<.DbgP|rint....|
|00001350| 4d 6d 55 6e 6d 61 70 4c | 6f 63 6b 65 64 50 61 67 |MmUnmapL|ockedPag|
|00001360| 65 73 00 00 14 07 5f 73 | 74 72 69 63 6d 70 00 00 |es...._s|tricmp..|
|00001370| 7c 06 5a 77 43 72 65 61 | 74 65 4b 65 79 00 d7 06 ||.ZwCrea|teKey...|
|00001380| 5a 77 51 75 65 72 79 56 | 61 6c 75 65 4b 65 79 00 |ZwQueryV|alueKey.|
|00001390| 81 03 4d 6d 50 72 6f 62 | 65 41 6e 64 4c 6f 63 6b |..MmProb|eAndLock|
|000013a0| 50 61 67 65 73 00 92 03 | 4d 6d 55 6e 6c 6f 63 6b |Pages...|MmUnlock|
|000013b0| 50 61 67 65 73 00 82 04 | 50 73 4c 6f 6f 6b 75 70 |Pages...|PsLookup|
|000013c0| 50 72 6f 63 65 73 73 42 | 79 50 72 6f 63 65 73 73 |ProcessB|yProcess|
|000013d0| 49 64 00 00 a7 02 4b 65 | 44 65 74 61 63 68 50 72 |Id....Ke|DetachPr|
|000013e0| 6f 63 65 73 73 00 9c 02 | 4b 65 41 74 74 61 63 68 |ocess...|KeAttach|
|000013f0| 50 72 6f 63 65 73 73 00 | c5 04 52 74 6c 43 6f 6d |Process.|..RtlCom|
|00001400| 70 61 72 65 4d 65 6d 6f | 72 79 00 00 c9 06 5a 77 |pareMemo|ry....Zw|
|00001410| 51 75 65 72 79 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |QueryInf|ormation|
|00001420| 50 72 6f 63 65 73 73 00 | 9e 03 4e 6c 73 4d 62 43 |Process.|..NlsMbC|
|00001430| 6f 64 65 50 61 67 65 54 | 61 67 00 00 16 07 5f 73 |odePageT|ag...._s|
|00001440| 74 72 6e 69 63 6d 70 00 | a1 02 4b 65 43 6c 65 61 |trnicmp.|..KeClea|
|00001450| 72 45 76 65 6e 74 00 00 | a8 00 45 78 52 61 69 73 |rEvent..|..ExRais|
|00001460| 65 53 74 61 74 75 73 00 | ae 00 45 78 52 65 6c 65 |eStatus.|..ExRele|
|00001470| 61 73 65 46 61 73 74 4d | 75 74 65 78 00 00 e3 02 |aseFastM|utex....|
|00001480| 4b 65 52 65 61 64 53 74 | 61 74 65 45 76 65 6e 74 |KeReadSt|ateEvent|
|00001490| 00 00 c4 05 52 74 6c 55 | 70 63 61 73 65 55 6e 69 |....RtlU|pcaseUni|
|000014a0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 5a 00 45 78 |codeStri|ng..Z.Ex|
|000014b0| 41 63 71 75 69 72 65 46 | 61 73 74 4d 75 74 65 78 |AcquireF|astMutex|
|000014c0| 00 00 22 07 5f 77 63 73 | 6e 69 63 6d 70 00 46 07 |.."._wcs|nicmp.F.|
|000014d0| 73 74 72 73 74 72 00 00 | d2 06 5a 77 51 75 65 72 |strstr..|..ZwQuer|
|000014e0| 79 4f 62 6a 65 63 74 00 | 67 03 4d 6d 48 69 67 68 |yObject.|g.MmHigh|
|000014f0| 65 73 74 55 73 65 72 41 | 64 64 72 65 73 73 00 00 |estUserA|ddress..|
|00001500| 88 06 5a 77 44 65 6c 65 | 74 65 56 61 6c 75 65 4b |..ZwDele|teValueK|
|00001510| 65 79 00 00 c7 04 52 74 | 6c 43 6f 6d 70 61 72 65 |ey....Rt|lCompare|
|00001520| 53 74 72 69 6e 67 00 00 | d8 05 52 74 6c 78 41 6e |String..|..RtlxAn|
|00001530| 73 69 53 74 72 69 6e 67 | 54 6f 55 6e 69 63 6f 64 |siString|ToUnicod|
|00001540| 65 53 69 7a 65 00 72 04 | 50 73 47 65 74 54 68 72 |eSize.r.|PsGetThr|
|00001550| 65 61 64 50 72 6f 63 65 | 73 73 49 64 00 00 6c 03 |eadProce|ssId..l.|
|00001560| 4d 6d 49 73 4e 6f 6e 50 | 61 67 65 64 53 79 73 74 |MmIsNonP|agedSyst|
|00001570| 65 6d 41 64 64 72 65 73 | 73 56 61 6c 69 64 00 00 |emAddres|sValid..|
|00001580| 84 04 50 73 4c 6f 6f 6b | 75 70 54 68 72 65 61 64 |..PsLook|upThread|
|00001590| 42 79 54 68 72 65 61 64 | 49 64 00 00 8f 06 5a 77 |ByThread|Id....Zw|
|000015a0| 45 6e 75 6d 65 72 61 74 | 65 4b 65 79 00 00 d0 06 |Enumerat|eKey....|
|000015b0| 5a 77 51 75 65 72 79 4b | 65 79 00 00 4e 07 76 73 |ZwQueryK|ey..N.vs|
|000015c0| 70 72 69 6e 74 66 00 00 | ff 06 5a 77 54 65 72 6d |printf..|..ZwTerm|
|000015d0| 69 6e 61 74 65 50 72 6f | 63 65 73 73 00 00 35 00 |inatePro|cess..5.|
|000015e0| 43 6d 52 65 67 69 73 74 | 65 72 43 61 6c 6c 62 61 |CmRegist|erCallba|
|000015f0| 63 6b 45 78 00 00 0e 04 | 4f 62 4f 70 65 6e 4f 62 |ckEx....|ObOpenOb|
|00001600| 6a 65 63 74 42 79 50 6f | 69 6e 74 65 72 00 85 04 |jectByPo|inter...|
|00001610| 50 73 50 72 6f 63 65 73 | 73 54 79 70 65 00 15 04 |PsProces|sType...|
|00001620| 4f 62 52 65 67 69 73 74 | 65 72 43 61 6c 6c 62 61 |ObRegist|erCallba|
|00001630| 63 6b 73 00 70 04 50 73 | 47 65 74 54 68 72 65 61 |cks.p.Ps|GetThrea|
|00001640| 64 49 64 00 96 04 50 73 | 53 65 74 43 72 65 61 74 |dId...Ps|SetCreat|
|00001650| 65 50 72 6f 63 65 73 73 | 4e 6f 74 69 66 79 52 6f |eProcess|NotifyRo|
|00001660| 75 74 69 6e 65 45 78 00 | a5 04 50 73 54 68 72 65 |utineEx.|..PsThre|
|00001670| 61 64 54 79 70 65 00 00 | 61 04 50 73 47 65 74 50 |adType..|a.PsGetP|
|00001680| 72 6f 63 65 73 73 49 64 | 00 00 0f 04 4f 62 51 75 |rocessId|....ObQu|
|00001690| 65 72 79 4e 61 6d 65 53 | 74 72 69 6e 67 00 8e 00 |eryNameS|tring...|
|000016a0| 45 78 49 6e 69 74 69 61 | 6c 69 7a 65 50 61 67 65 |ExInitia|lizePage|
|000016b0| 64 4c 6f 6f 6b 61 73 69 | 64 65 4c 69 73 74 00 00 |dLookasi|deList..|
|000016c0| 36 00 43 6d 53 65 74 43 | 61 6c 6c 62 61 63 6b 4f |6.CmSetC|allbackO|
|000016d0| 62 6a 65 63 74 43 6f 6e | 74 65 78 74 00 00 90 00 |bjectCon|text....|
|000016e0| 45 78 49 6e 69 74 69 61 | 6c 69 7a 65 52 65 73 6f |ExInitia|lizeReso|
|000016f0| 75 72 63 65 4c 69 74 65 | 00 00 9e 02 4b 65 42 75 |urceLite|....KeBu|
|00001700| 67 43 68 65 63 6b 45 78 | 00 00 6e 74 6f 73 6b 72 |gCheckEx|..ntoskr|
|00001710| 6e 6c 2e 65 78 65 00 00 | 4a 00 4b 65 51 75 65 72 |nl.exe..|J.KeQuer|
|00001720| 79 50 65 72 66 6f 72 6d | 61 6e 63 65 43 6f 75 6e |yPerform|anceCoun|
|00001730| 74 65 72 00 48 41 4c 2e | 64 6c 6c 00 97 00 4e 64 |ter.HAL.|dll...Nd|
|00001740| 69 73 46 72 65 65 4e 65 | 74 42 75 66 66 65 72 4c |isFreeNe|tBufferL|
|00001750| 69 73 74 50 6f 6f 6c 00 | 07 00 4e 64 69 73 41 64 |istPool.|..NdisAd|
|00001760| 76 61 6e 63 65 4e 65 74 | 42 75 66 66 65 72 44 61 |vanceNet|BufferDa|
|00001770| 74 61 53 74 61 72 74 00 | 90 00 4e 64 69 73 46 72 |taStart.|..NdisFr|
|00001780| 65 65 47 65 6e 65 72 69 | 63 4f 62 6a 65 63 74 00 |eeGeneri|cObject.|
|00001790| 89 01 4e 64 69 73 52 65 | 74 72 65 61 74 4e 65 74 |..NdisRe|treatNet|
|000017a0| 42 75 66 66 65 72 44 61 | 74 61 53 74 61 72 74 00 |BufferDa|taStart.|
|000017b0| 18 00 4e 64 69 73 41 6c | 6c 6f 63 61 74 65 4e 65 |..NdisAl|locateNe|
|000017c0| 74 42 75 66 66 65 72 4c | 69 73 74 50 6f 6f 6c 00 |tBufferL|istPool.|
|000017d0| 0e 00 4e 64 69 73 41 6c | 6c 6f 63 61 74 65 47 65 |..NdisAl|locateGe|
|000017e0| 6e 65 72 69 63 4f 62 6a | 65 63 74 00 13 00 4e 64 |nericObj|ect...Nd|
|000017f0| 69 73 41 6c 6c 6f 63 61 | 74 65 4d 65 6d 6f 72 79 |isAlloca|teMemory|
|00001800| 57 69 74 68 54 61 67 50 | 72 69 6f 72 69 74 79 00 |WithTagP|riority.|
|00001810| 84 00 4e 64 69 73 46 52 | 65 67 69 73 74 65 72 46 |..NdisFR|egisterF|
|00001820| 69 6c 74 65 72 44 72 69 | 76 65 72 00 93 00 4e 64 |ilterDri|ver...Nd|
|00001830| 69 73 46 72 65 65 4d 65 | 6d 6f 72 79 00 00 89 00 |isFreeMe|mory....|
|00001840| 4e 64 69 73 46 53 65 6e | 64 4e 65 74 42 75 66 66 |NdisFSen|dNetBuff|
|00001850| 65 72 4c 69 73 74 73 43 | 6f 6d 70 6c 65 74 65 00 |erListsC|omplete.|
|00001860| 8a 00 4e 64 69 73 46 53 | 65 74 41 74 74 72 69 62 |..NdisFS|etAttrib|
|00001870| 75 74 65 73 00 00 7f 00 | 4e 64 69 73 46 49 6e 64 |utes....|NdisFInd|
|00001880| 69 63 61 74 65 53 74 61 | 74 75 73 00 87 00 4e 64 |icateSta|tus...Nd|
|00001890| 69 73 46 52 65 74 75 72 | 6e 4e 65 74 42 75 66 66 |isFRetur|nNetBuff|
|000018a0| 65 72 4c 69 73 74 73 00 | 7e 00 4e 64 69 73 46 49 |erLists.|~.NdisFI|
|000018b0| 6e 64 69 63 61 74 65 52 | 65 63 65 69 76 65 4e 65 |ndicateR|eceiveNe|
|000018c0| 74 42 75 66 66 65 72 4c | 69 73 74 73 00 00 88 00 |tBufferL|ists....|
|000018d0| 4e 64 69 73 46 53 65 6e | 64 4e 65 74 42 75 66 66 |NdisFSen|dNetBuff|
|000018e0| 65 72 4c 69 73 74 73 00 | 95 00 4e 64 69 73 46 72 |erLists.|..NdisFr|
|000018f0| 65 65 4e 65 74 42 75 66 | 66 65 72 4c 69 73 74 00 |eeNetBuf|ferList.|
|00001900| 15 00 4e 64 69 73 41 6c | 6c 6f 63 61 74 65 4e 65 |..NdisAl|locateNe|
|00001910| 74 42 75 66 66 65 72 41 | 6e 64 4e 65 74 42 75 66 |tBufferA|ndNetBuf|
|00001920| 66 65 72 4c 69 73 74 00 | 9a 00 4e 64 69 73 46 72 |ferList.|..NdisFr|
|00001930| 65 65 50 61 63 6b 65 74 | 00 00 1c 00 4e 64 69 73 |eePacket|....Ndis|
|00001940| 41 6c 6c 6f 63 61 74 65 | 50 61 63 6b 65 74 00 00 |Allocate|Packet..|
|00001950| b8 00 4e 64 69 73 47 65 | 74 56 65 72 73 69 6f 6e |..NdisGe|tVersion|
|00001960| 00 00 9b 00 4e 64 69 73 | 46 72 65 65 50 61 63 6b |....Ndis|FreePack|
|00001970| 65 74 50 6f 6f 6c 00 00 | 1d 00 4e 64 69 73 41 6c |etPool..|..NdisAl|
|00001980| 6c 6f 63 61 74 65 50 61 | 63 6b 65 74 50 6f 6f 6c |locatePa|cketPool|
|00001990| 00 00 a5 01 4e 64 69 73 | 55 6e 63 68 61 69 6e 42 |....Ndis|UnchainB|
|000019a0| 75 66 66 65 72 41 74 46 | 72 6f 6e 74 00 00 62 01 |ufferAtF|ront..b.|
|000019b0| 4e 64 69 73 4f 70 65 6e | 41 64 61 70 74 65 72 00 |NdisOpen|Adapter.|
|000019c0| 0a 00 4e 64 69 73 41 6c | 6c 6f 63 61 74 65 42 75 |..NdisAl|locateBu|
|000019d0| 66 66 65 72 50 6f 6f 6c | 00 00 80 01 4e 64 69 73 |fferPool|....Ndis|
|000019e0| 52 65 67 69 73 74 65 72 | 50 72 6f 74 6f 63 6f 6c |Register|Protocol|
|000019f0| 00 00 11 00 4e 64 69 73 | 41 6c 6c 6f 63 61 74 65 |....Ndis|Allocate|
|00001a00| 4d 65 6d 6f 72 79 00 00 | 8c 00 4e 64 69 73 46 72 |Memory..|..NdisFr|
|00001a10| 65 65 42 75 66 66 65 72 | 50 6f 6f 6c 00 00 09 00 |eeBuffer|Pool....|
|00001a20| 4e 64 69 73 41 6c 6c 6f | 63 61 74 65 42 75 66 66 |NdisAllo|cateBuff|
|00001a30| 65 72 00 00 69 00 4e 64 | 69 73 44 65 72 65 67 69 |er..i.Nd|isDeregi|
|00001a40| 73 74 65 72 50 72 6f 74 | 6f 63 6f 6c 00 00 38 00 |sterProt|ocol..8.|
|00001a50| 4e 64 69 73 43 6c 6f 73 | 65 41 64 61 70 74 65 72 |NdisClos|eAdapter|
|00001a60| 00 00 4e 44 49 53 2e 53 | 59 53 00 00 68 00 46 77 |..NDIS.S|YS..h.Fw|
|00001a70| 70 73 46 72 65 65 4e 65 | 74 42 75 66 66 65 72 4c |psFreeNe|tBufferL|
|00001a80| 69 73 74 30 00 00 1f 00 | 46 77 70 6d 46 69 6c 74 |ist0....|FwpmFilt|
|00001a90| 65 72 44 65 6c 65 74 65 | 42 79 49 64 30 00 5d 00 |erDelete|ById0.].|
|00001aa0| 46 77 70 73 43 6c 61 73 | 73 69 66 79 4f 70 74 69 |FwpsClas|sifyOpti|
|00001ab0| 6f 6e 53 65 74 30 00 00 | 13 00 46 77 70 6d 45 6e |onSet0..|..FwpmEn|
|00001ac0| 67 69 6e 65 43 6c 6f 73 | 65 30 00 00 6e 00 46 77 |gineClos|e0..n.Fw|
|00001ad0| 70 73 49 6e 6a 65 63 74 | 54 72 61 6e 73 70 6f 72 |psInject|Transpor|
|00001ae0| 74 53 65 6e 64 41 73 79 | 6e 63 30 00 78 00 46 77 |tSendAsy|nc0.x.Fw|
|00001af0| 70 73 53 74 72 65 61 6d | 49 6e 6a 65 63 74 41 73 |psStream|InjectAs|
|00001b00| 79 6e 63 30 00 00 1d 00 | 46 77 70 6d 46 69 6c 74 |ync0....|FwpmFilt|
|00001b10| 65 72 41 64 64 30 00 00 | 71 00 46 77 70 73 50 65 |erAdd0..|q.FwpsPe|
|00001b20| 6e 64 4f 70 65 72 61 74 | 69 6f 6e 30 00 00 5f 00 |ndOperat|ion0.._.|
|00001b30| 46 77 70 73 43 6f 6d 70 | 6c 65 74 65 4f 70 65 72 |FwpsComp|leteOper|
|00001b40| 61 74 69 6f 6e 30 00 00 | 16 00 46 77 70 6d 45 6e |ation0..|..FwpmEn|
|00001b50| 67 69 6e 65 4f 70 65 6e | 30 00 59 00 46 77 70 73 |gineOpen|0.Y.Fwps|
|00001b60| 43 61 6c 6c 6f 75 74 52 | 65 67 69 73 74 65 72 30 |CalloutR|egister0|
|00001b70| 00 00 75 00 46 77 70 73 | 52 65 66 65 72 65 6e 63 |..u.Fwps|Referenc|
|00001b80| 65 4e 65 74 42 75 66 66 | 65 72 4c 69 73 74 30 00 |eNetBuff|erList0.|
|00001b90| 04 00 46 77 70 6d 42 66 | 65 53 74 61 74 65 47 65 |..FwpmBf|eStateGe|
|00001ba0| 74 30 00 00 05 00 46 77 | 70 6d 42 66 65 53 74 61 |t0....Fw|pmBfeSta|
|00001bb0| 74 65 53 75 62 73 63 72 | 69 62 65 43 68 61 6e 67 |teSubscr|ibeChang|
|00001bc0| 65 73 30 00 57 00 46 77 | 70 73 41 6c 6c 6f 63 61 |es0.W.Fw|psAlloca|
|00001bd0| 74 65 43 6c 6f 6e 65 4e | 65 74 42 75 66 66 65 72 |teCloneN|etBuffer|
|00001be0| 4c 69 73 74 30 00 62 00 | 46 77 70 73 44 65 72 65 |List0.b.|FwpsDere|
|00001bf0| 66 65 72 65 6e 63 65 4e | 65 74 42 75 66 66 65 72 |ferenceN|etBuffer|
|00001c00| 4c 69 73 74 30 00 08 00 | 46 77 70 6d 43 61 6c 6c |List0...|FwpmCall|
|00001c10| 6f 75 74 41 64 64 30 00 | 61 00 46 77 70 73 43 6f |outAdd0.|a.FwpsCo|
|00001c20| 70 79 53 74 72 65 61 6d | 44 61 74 61 54 6f 42 75 |pyStream|DataToBu|
|00001c30| 66 66 65 72 30 00 6d 00 | 46 77 70 73 49 6e 6a 65 |ffer0.m.|FwpsInje|
|00001c40| 63 74 54 72 61 6e 73 70 | 6f 72 74 52 65 63 65 69 |ctTransp|ortRecei|
|00001c50| 76 65 41 73 79 6e 63 30 | 00 00 6f 00 46 77 70 73 |veAsync0|..o.Fwps|
|00001c60| 49 6e 6a 65 63 74 69 6f | 6e 48 61 6e 64 6c 65 43 |Injectio|nHandleC|
|00001c70| 72 65 61 74 65 30 00 00 | 58 00 46 77 70 73 41 6c |reate0..|X.FwpsAl|
|00001c80| 6c 6f 63 61 74 65 4e 65 | 74 42 75 66 66 65 72 41 |locateNe|tBufferA|
|00001c90| 6e 64 4e 65 74 42 75 66 | 66 65 72 4c 69 73 74 30 |ndNetBuf|ferList0|
|00001ca0| 00 00 5e 00 46 77 70 73 | 43 6c 6f 6e 65 53 74 72 |..^.Fwps|CloneStr|
|00001cb0| 65 61 6d 44 61 74 61 30 | 00 00 70 00 46 77 70 73 |eamData0|..p.Fwps|
|00001cc0| 49 6e 6a 65 63 74 69 6f | 6e 48 61 6e 64 6c 65 44 |Injectio|nHandleD|
|00001cd0| 65 73 74 72 6f 79 30 00 | 4a 00 46 77 70 6d 53 75 |estroy0.|J.FwpmSu|
|00001ce0| 62 4c 61 79 65 72 44 65 | 6c 65 74 65 42 79 4b 65 |bLayerDe|leteByKe|
|00001cf0| 79 30 00 00 0a 00 46 77 | 70 6d 43 61 6c 6c 6f 75 |y0....Fw|pmCallou|
|00001d00| 74 44 65 6c 65 74 65 42 | 79 49 64 30 00 00 73 00 |tDeleteB|yId0..s.|
|00001d10| 46 77 70 73 51 75 65 72 | 79 50 61 63 6b 65 74 49 |FwpsQuer|yPacketI|
|00001d20| 6e 6a 65 63 74 69 6f 6e | 53 74 61 74 65 30 00 00 |njection|State0..|
|00001d30| 66 00 46 77 70 73 46 72 | 65 65 43 6c 6f 6e 65 4e |f.FwpsFr|eeCloneN|
|00001d40| 65 74 42 75 66 66 65 72 | 4c 69 73 74 30 00 48 00 |etBuffer|List0.H.|
|00001d50| 46 77 70 6d 53 75 62 4c | 61 79 65 72 41 64 64 30 |FwpmSubL|ayerAdd0|
|00001d60| 00 00 77 00 46 77 70 73 | 53 74 72 65 61 6d 43 6f |..w.Fwps|StreamCo|
|00001d70| 6e 74 69 6e 75 65 30 00 | 64 00 46 77 70 73 46 6c |ntinue0.|d.FwpsFl|
|00001d80| 6f 77 41 73 73 6f 63 69 | 61 74 65 43 6f 6e 74 65 |owAssoci|ateConte|
|00001d90| 78 74 30 00 66 77 70 6b | 63 6c 6e 74 2e 73 79 73 |xt0.fwpk|clnt.sys|
|00001da0| 00 00 58 00 46 6c 74 47 | 65 74 46 69 6c 65 4e 61 |..X.FltG|etFileNa|
|00001db0| 6d 65 49 6e 66 6f 72 6d | 61 74 69 6f 6e 55 6e 73 |meInform|ationUns|
|00001dc0| 61 66 65 00 a9 00 46 6c | 74 52 65 6c 65 61 73 65 |afe...Fl|tRelease|
|00001dd0| 46 69 6c 65 4e 61 6d 65 | 49 6e 66 6f 72 6d 61 74 |FileName|Informat|
|00001de0| 69 6f 6e 00 93 00 46 6c | 74 50 61 72 73 65 46 69 |ion...Fl|tParseFi|
|00001df0| 6c 65 4e 61 6d 65 49 6e | 66 6f 72 6d 61 74 69 6f |leNameIn|formatio|
|00001e00| 6e 00 57 00 46 6c 74 47 | 65 74 46 69 6c 65 4e 61 |n.W.FltG|etFileNa|
|00001e10| 6d 65 49 6e 66 6f 72 6d | 61 74 69 6f 6e 00 cd 00 |meInform|ation...|
|00001e20| 46 6c 74 55 6e 72 65 67 | 69 73 74 65 72 46 69 6c |FltUnreg|isterFil|
|00001e30| 74 65 72 00 a5 00 46 6c | 74 52 65 67 69 73 74 65 |ter...Fl|tRegiste|
|00001e40| 72 46 69 6c 74 65 72 00 | c4 00 46 6c 74 53 74 61 |rFilter.|..FltSta|
|00001e50| 72 74 46 69 6c 74 65 72 | 69 6e 67 00 46 4c 54 4d |rtFilter|ing.FLTM|
|00001e60| 47 52 2e 53 59 53 00 00 | 09 07 5f 5f 43 5f 73 70 |GR.SYS..|..__C_sp|
|00001e70| 65 63 69 66 69 63 5f 68 | 61 6e 64 6c 65 72 00 00 |ecific_h|andler..|
|00001e80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001e90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ea0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001eb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ec0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ed0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ee0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ef0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001f00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001f10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001f20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001f30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001f40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001f50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001f60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001f70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001f80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001f90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+