home *** CD-ROM | disk | FTP | other *** search
Unknown | 2003-10-01 | 2.8 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 5c 00 44 00 65 00 76 00 | 69 00 63 00 65 00 5c 00 |\.D.e.v.|i.c.e.\.|
|00000010| 57 00 73 00 4b 00 72 00 | 6e 00 6c 00 61 00 62 00 |W.s.K.r.|n.l.a.b.|
|00000020| 00 00 00 00 5c 00 44 00 | 6f 00 73 00 44 00 65 00 |....\.D.|o.s.D.e.|
|00000030| 76 00 69 00 63 00 65 00 | 73 00 5c 00 57 00 73 00 |v.i.c.e.|s.\.W.s.|
|00000040| 4b 00 72 00 6e 00 6c 00 | 61 00 62 00 00 00 55 8b |K.r.n.l.|a.b...U.|
|00000050| ec 6a ff 68 68 06 01 00 | 68 c0 73 01 00 64 a1 00 |.j.hh...|h.s..d..|
|00000060| 00 00 00 50 64 89 25 00 | 00 00 00 83 ec 74 53 56 |...Pd.%.|.....tSV|
|00000070| 57 89 65 e8 b9 08 00 00 | 00 be 20 95 01 00 8d 7d |W.e.....|.. ....}|
|00000080| c4 f3 a5 66 a5 b9 0a 00 | 00 00 be 44 95 01 00 8d |...f....|...D....|
|00000090| 7d 98 f3 a5 66 a5 c7 45 | fc 00 00 00 00 8b 75 08 |}...f..E|......u.|
|000000a0| 89 35 78 92 01 00 a1 90 | 03 01 00 66 81 38 65 05 |.5x.....|...f.8e.|
|000000b0| 7d 0a c7 05 10 74 01 00 | 38 00 00 00 8d 4d c4 51 |}....t..|8....M.Q|
|000000c0| 8d 55 90 52 8b 3d d0 02 | 01 00 ff d7 8d 45 8c 50 |.U.R.=..|.....E.P|
|000000d0| 6a 00 6a 00 68 24 a0 00 | 00 8d 4d 90 51 6a 14 56 |j.j.h$..|..M.Qj.V|
|000000e0| ff 15 44 03 01 00 89 45 | 88 85 c0 0f 8c 90 02 00 |..D....E|........|
|000000f0| 00 8d 55 98 52 8d 45 80 | 50 ff d7 8d 4d 90 51 8d |..U.R.E.|P...M.Q.|
|00000100| 55 80 52 ff 15 b0 03 01 | 00 8b f8 89 7d 88 85 ff |U.R.....|....}...|
|00000110| 7d 26 8b 45 8c 50 ff 15 | 3c 03 01 00 c7 45 fc ff |}&.E.P..|<....E..|
|00000120| ff ff ff 8b c7 8b 4d f0 | 64 89 0d 00 00 00 00 5f |......M.|d......_|
|00000130| 5e 5b 8b e5 5d c2 08 00 | 8b 4d 8c 8b 51 28 c7 02 |^[..]...|.M..Q(..|
|00000140| 01 00 00 00 c7 46 38 d3 | 6c 01 00 b8 20 40 01 00 |.....F8.|l... @..|
|00000150| 89 46 3c c7 46 40 d0 27 | 01 00 89 46 44 89 46 48 |.F<.F@.'|...FD.FH|
|00000160| c7 46 4c 90 5f 01 00 c7 | 46 50 a0 61 01 00 89 46 |.FL._...|FP.a...F|
|00000170| 54 89 46 58 89 46 5c 89 | 46 60 89 46 64 c7 46 68 |T.FX.F\.|F`.Fd.Fh|
|00000180| 40 65 01 00 c7 46 6c 20 | 56 01 00 c7 46 70 10 46 |@e...Fl |V...Fp.F|
|00000190| 01 00 89 46 74 c7 46 78 | f0 64 01 00 89 46 7c 89 |...Ft.Fx|.d...F|.|
|000001a0| 86 80 00 00 00 89 86 84 | 00 00 00 89 86 88 00 00 |........|........|
|000001b0| 00 89 86 8c 00 00 00 89 | 86 90 00 00 00 89 86 94 |........|........|
|000001c0| 00 00 00 89 86 98 00 00 | 00 89 86 9c 00 00 00 89 |........|........|
|000001d0| 86 a0 00 00 00 89 86 a4 | 00 00 00 c7 46 28 10 74 |........|....F(.t|
|000001e0| 01 00 68 40 92 01 00 8b | 1d ac 03 01 00 ff d3 68 |..h@....|.......h|
|000001f0| e0 94 01 00 ff d3 33 ff | 89 bd 7c ff ff ff 81 ff |......3.|..|.....|
|00000200| 80 00 00 00 73 10 8b c7 | 6b c0 38 05 40 76 01 00 |....s...|k.8.@v..|
|00000210| 50 ff d3 47 eb e2 6a 20 | 68 41 46 50 58 6a 08 6a |P..G..j |hAFPXj.j|
|00000220| 00 6a 00 6a 00 68 c0 74 | 01 00 8b 3d a8 03 01 00 |.j.j.h.t|...=....|
|00000230| ff d7 6a 40 68 41 46 50 | 48 68 d4 00 00 00 6a 00 |..j@hAFP|Hh....j.|
|00000240| 6a 00 6a 00 68 20 75 01 | 00 ff d7 6a 20 68 41 46 |j.j.h u.|...j hAF|
|00000250| 50 50 68 08 01 00 00 6a | 00 6a 00 6a 00 68 e0 75 |PPh....j|.j.j.h.u|
|00000260| 01 00 ff d7 6a 20 68 41 | 46 50 4d 6a 20 6a 00 6a |....j hA|FPMj j.j|
|00000270| 00 6a 00 68 80 75 01 00 | ff d7 68 80 00 00 00 68 |.j.h.u..|..h....h|
|00000280| 41 46 50 53 6a 08 6a 00 | 6a 00 8b 0d 54 03 01 00 |AFPSj.j.|j...T...|
|00000290| 51 68 80 94 01 00 ff d7 | e8 f3 7c ff ff a3 b4 74 |Qh......|..|....t|
|000002a0| 01 00 b9 80 00 00 00 33 | c0 bf 80 92 01 00 f3 ab |.......3|........|
|000002b0| e8 4f ab ff ff 8b 55 8c | 52 ff 15 a4 03 01 00 68 |.O....U.|R......h|
|000002c0| 40 57 01 00 56 ff 15 a0 | 03 01 00 8b f8 89 7d 88 |@W..V...|......}.|
|000002d0| 85 ff 0f 8d 8d 00 00 00 | 68 40 92 01 00 8b 1d 9c |........|h@......|
|000002e0| 03 01 00 ff d3 68 e0 94 | 01 00 ff d3 33 f6 89 b5 |.....h..|....3...|
|000002f0| 7c ff ff ff 81 fe 80 00 | 00 00 73 10 8b c6 6b c0 ||.......|..s...k.|
|00000300| 38 05 40 76 01 00 50 ff | d3 46 eb e2 68 80 94 01 |8.@v..P.|.F..h...|
|00000310| 00 8b 35 98 03 01 00 ff | d6 68 80 75 01 00 ff d6 |..5.....|.h.u....|
|00000320| 68 e0 75 01 00 ff d6 68 | 20 75 01 00 ff d6 68 c0 |h.u....h| u....h.|
|00000330| 74 01 00 ff d6 8d 4d 80 | 51 ff 15 94 03 01 00 8b |t.....M.|Q.......|
|00000340| 55 8c 52 ff 15 3c 03 01 | 00 c7 45 fc ff ff ff ff |U.R..<..|..E.....|
|00000350| 8b c7 8b 4d f0 64 89 0d | 00 00 00 00 5f 5e 5b 8b |...M.d..|...._^[.|
|00000360| e5 5d c2 08 00 c7 45 fc | ff ff ff ff 33 c0 8b 4d |.]....E.|....3..M|
|00000370| f0 64 89 0d 00 00 00 00 | 5f 5e 5b 8b e5 5d c2 08 |.d......|_^[..]..|
|00000380| 00 c7 45 fc ff ff ff ff | 8b 4d f0 64 89 0d 00 00 |..E.....|.M.d....|
|00000390| 00 00 5f 5e 5b 8b e5 5d | c2 08 00 b8 01 00 00 00 |.._^[..]|........|
|000003a0| c3 8b 65 e8 c7 45 fc ff | ff ff ff b8 9a 00 00 c0 |..e..E..|........|
|000003b0| 8b 4d f0 64 89 0d 00 00 | 00 00 5f 5e 5b 8b e5 5d |.M.d....|.._^[..]|
|000003c0| c2 08 00 cc 0c 99 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 1a a0 00 00 a0 02 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 24 9a 00 00 |........|....$...|
|000003f0| 42 9a 00 00 60 9a 00 00 | 76 9a 00 00 90 9a 00 00 |B...`...|v.......|
|00000400| a4 9a 00 00 ae 9a 00 00 | ca 9a 00 00 e2 9a 00 00 |........|........|
|00000410| fa 9a 00 00 12 9b 00 00 | 2e 9b 00 00 4a 9b 00 00 |........|....J...|
|00000420| 62 9b 00 00 76 9b 00 00 | 8e 9b 00 00 aa 9b 00 00 |b...v...|........|
|00000430| c6 9b 00 00 d6 9b 00 00 | ea 9b 00 00 f4 9b 00 00 |........|........|
|00000440| 0e 9c 00 00 26 9c 00 00 | 3e 9c 00 00 4e 9c 00 00 |....&...|>...N...|
|00000450| 6c 9c 00 00 84 9c 00 00 | 9e 9c 00 00 ac 9c 00 00 |l.......|........|
|00000460| ce 9c 00 00 da 9c 00 00 | e8 9c 00 00 00 9d 00 00 |........|........|
|00000470| 10 9d 00 00 26 9d 00 00 | 3a 9d 00 00 4a 9d 00 00 |....&...|:...J...|
|00000480| 54 9d 00 00 6a 9d 00 00 | 74 9d 00 00 86 9d 00 00 |T...j...|t.......|
|00000490| a4 9d 00 00 b6 9d 00 00 | c8 9d 00 00 de 9d 00 00 |........|........|
|000004a0| f6 9d 00 00 0e 9e 00 00 | 2c 9e 00 00 3c 9e 00 00 |........|,...<...|
|000004b0| 56 9e 00 00 6c 9e 00 00 | 78 9e 00 00 88 9e 00 00 |V...l...|x.......|
|000004c0| 96 9e 00 00 a8 9e 00 00 | b4 9e 00 00 c8 9e 00 00 |........|........|
|000004d0| e8 9e 00 00 fa 9e 00 00 | 04 9f 00 00 22 9f 00 00 |........|...."...|
|000004e0| 32 9f 00 00 4a 9f 00 00 | 68 9f 00 00 80 9f 00 00 |2...J...|h.......|
|000004f0| a2 9f 00 00 c4 9f 00 00 | e6 9f 00 00 02 a0 00 00 |........|........|
|00000500| 00 00 00 00 5e 00 45 78 | 49 6e 74 65 72 6c 6f 63 |....^.Ex|Interloc|
|00000510| 6b 65 64 50 6f 70 45 6e | 74 72 79 53 4c 69 73 74 |kedPopEn|trySList|
|00000520| 00 00 60 00 45 78 49 6e | 74 65 72 6c 6f 63 6b 65 |..`.ExIn|terlocke|
|00000530| 64 50 75 73 68 45 6e 74 | 72 79 53 4c 69 73 74 00 |dPushEnt|rySList.|
|00000540| b4 03 52 74 6c 54 69 6d | 65 54 6f 54 69 6d 65 46 |..RtlTim|eToTimeF|
|00000550| 69 65 6c 64 73 00 78 00 | 45 78 53 79 73 74 65 6d |ields.x.|ExSystem|
|00000560| 54 69 6d 65 54 6f 4c 6f | 63 61 6c 54 69 6d 65 00 |TimeToLo|calTime.|
|00000570| dd 01 4b 65 51 75 65 72 | 79 53 79 73 74 65 6d 54 |..KeQuer|ySystemT|
|00000580| 69 6d 65 00 1d 04 5a 77 | 43 6c 6f 73 65 00 4e 04 |ime...Zw|Close.N.|
|00000590| 5a 77 51 75 65 72 79 49 | 6e 66 6f 72 6d 61 74 69 |ZwQueryI|nformati|
|000005a0| 6f 6e 50 72 6f 63 65 73 | 73 00 b4 02 4f 62 4f 70 |onProces|s...ObOp|
|000005b0| 65 6e 4f 62 6a 65 63 74 | 42 79 50 6f 69 6e 74 65 |enObject|ByPointe|
|000005c0| 72 00 45 01 49 6f 47 65 | 74 52 65 71 75 65 73 74 |r.E.IoGe|tRequest|
|000005d0| 6f 72 50 72 6f 63 65 73 | 73 00 ca 03 52 74 6c 55 |orProces|s...RtlU|
|000005e0| 70 63 61 73 65 55 6e 69 | 63 6f 64 65 43 68 61 72 |pcaseUni|codeChar|
|000005f0| 00 00 55 04 5a 77 51 75 | 65 72 79 53 79 6d 62 6f |..U.ZwQu|erySymbo|
|00000600| 6c 69 63 4c 69 6e 6b 4f | 62 6a 65 63 74 00 42 04 |licLinkO|bject.B.|
|00000610| 5a 77 4f 70 65 6e 53 79 | 6d 62 6f 6c 69 63 4c 69 |ZwOpenSy|mbolicLi|
|00000620| 6e 6b 4f 62 6a 65 63 74 | 00 00 66 03 52 74 6c 49 |nkObject|..f.RtlI|
|00000630| 6e 69 74 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |nitUnico|deString|
|00000640| 00 00 7f 04 5f 65 78 63 | 65 70 74 5f 68 61 6e 64 |...._exc|ept_hand|
|00000650| 6c 65 72 33 00 00 bc 02 | 4f 62 66 44 65 72 65 66 |ler3....|ObfDeref|
|00000660| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 44 01 |erenceOb|ject..D.|
|00000670| 49 6f 47 65 74 52 65 6c | 61 74 65 64 44 65 76 69 |IoGetRel|atedDevi|
|00000680| 63 65 4f 62 6a 65 63 74 | 00 00 b7 02 4f 62 52 65 |ceObject|....ObRe|
|00000690| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 48 |ferenceO|bjectByH|
|000006a0| 61 6e 64 6c 65 00 22 04 | 5a 77 43 72 65 61 74 65 |andle.".|ZwCreate|
|000006b0| 46 69 6c 65 00 00 b5 02 | 4f 62 51 75 65 72 79 4e |File....|ObQueryN|
|000006c0| 61 6d 65 53 74 72 69 6e | 67 00 a8 04 73 74 72 63 |ameStrin|g...strc|
|000006d0| 68 72 00 00 03 04 53 65 | 52 65 6c 65 61 73 65 53 |hr....Se|ReleaseS|
|000006e0| 75 62 6a 65 63 74 43 6f | 6e 74 65 78 74 00 d4 01 |ubjectCo|ntext...|
|000006f0| 4b 65 4c 65 61 76 65 43 | 72 69 74 69 63 61 6c 52 |KeLeaveC|riticalR|
|00000700| 65 67 69 6f 6e 00 73 00 | 45 78 52 65 6c 65 61 73 |egion.s.|ExReleas|
|00000710| 65 52 65 73 6f 75 72 63 | 65 4c 69 74 65 00 e1 03 |eResourc|eLite...|
|00000720| 53 65 41 63 63 65 73 73 | 43 68 65 63 6b 00 33 00 |SeAccess|Check.3.|
|00000730| 45 78 41 63 71 75 69 72 | 65 52 65 73 6f 75 72 63 |ExAcquir|eResourc|
|00000740| 65 53 68 61 72 65 64 4c | 69 74 65 00 af 01 4b 65 |eSharedL|ite...Ke|
|00000750| 45 6e 74 65 72 43 72 69 | 74 69 63 61 6c 52 65 67 |EnterCri|ticalReg|
|00000760| 69 6f 6e 00 ea 03 53 65 | 43 61 70 74 75 72 65 53 |ion...Se|CaptureS|
|00000770| 75 62 6a 65 63 74 43 6f | 6e 74 65 78 74 00 47 00 |ubjectCo|ntext.G.|
|00000780| 45 78 46 72 65 65 50 6f | 6f 6c 00 00 32 00 45 78 |ExFreePo|ol..2.Ex|
|00000790| 41 63 71 75 69 72 65 52 | 65 73 6f 75 72 63 65 45 |AcquireR|esourceE|
|000007a0| 78 63 6c 75 73 69 76 65 | 4c 69 74 65 00 00 32 01 |xclusive|Lite..2.|
|000007b0| 49 6f 46 72 65 65 49 72 | 70 00 fb 01 4b 65 53 65 |IoFreeIr|p...KeSe|
|000007c0| 74 45 76 65 6e 74 00 00 | 14 02 4b 65 57 61 69 74 |tEvent..|..KeWait|
|000007d0| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 00 |ForSingl|eObject.|
|000007e0| 96 01 49 6f 66 43 61 6c | 6c 44 72 69 76 65 72 00 |..IofCal|lDriver.|
|000007f0| b4 01 4b 65 47 65 74 43 | 75 72 72 65 6e 74 54 68 |..KeGetC|urrentTh|
|00000800| 72 65 61 64 00 00 c4 01 | 4b 65 49 6e 69 74 69 61 |read....|KeInitia|
|00000810| 6c 69 7a 65 45 76 65 6e | 74 00 03 01 49 6f 41 6c |lizeEven|t...IoAl|
|00000820| 6c 6f 63 61 74 65 49 72 | 70 00 ad 04 73 74 72 6e |locateIr|p...strn|
|00000830| 63 6d 70 00 3a 01 49 6f | 47 65 74 43 75 72 72 65 |cmp.:.Io|GetCurre|
|00000840| 6e 74 50 72 6f 63 65 73 | 73 00 ae 04 73 74 72 6e |ntProces|s...strn|
|00000850| 63 70 79 00 25 01 49 6f | 44 65 6c 65 74 65 44 65 |cpy.%.Io|DeleteDe|
|00000860| 76 69 63 65 00 00 09 01 | 49 6f 41 74 74 61 63 68 |vice....|IoAttach|
|00000870| 44 65 76 69 63 65 54 6f | 44 65 76 69 63 65 53 74 |DeviceTo|DeviceSt|
|00000880| 61 63 6b 00 1b 01 49 6f | 43 72 65 61 74 65 44 65 |ack...Io|CreateDe|
|00000890| 76 69 63 65 00 00 28 01 | 49 6f 44 65 74 61 63 68 |vice..(.|IoDetach|
|000008a0| 44 65 76 69 63 65 00 00 | 97 01 49 6f 66 43 6f 6d |Device..|..IofCom|
|000008b0| 70 6c 65 74 65 52 65 71 | 75 65 73 74 00 00 d6 02 |pleteReq|uest....|
|000008c0| 50 73 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |PsGetCur|rentProc|
|000008d0| 65 73 73 49 64 00 3a 00 | 45 78 41 6c 6c 6f 63 61 |essId.:.|ExAlloca|
|000008e0| 74 65 50 6f 6f 6c 57 69 | 74 68 54 61 67 00 d6 03 |tePoolWi|thTag...|
|000008f0| 52 74 6c 56 61 6c 69 64 | 53 65 63 75 72 69 74 79 |RtlValid|Security|
|00000900| 44 65 73 63 72 69 70 74 | 6f 72 00 00 cf 02 50 72 |Descript|or....Pr|
|00000910| 6f 62 65 46 6f 72 57 72 | 69 74 65 00 69 00 45 78 |obeForWr|ite.i.Ex|
|00000920| 52 61 69 73 65 41 63 63 | 65 73 73 56 69 6f 6c 61 |RaiseAcc|essViola|
|00000930| 74 69 6f 6e 00 00 6f 02 | 4d 6d 55 73 65 72 50 72 |tion..o.|MmUserPr|
|00000940| 6f 62 65 41 64 64 72 65 | 73 73 00 00 2d 00 44 62 |obeAddre|ss..-.Db|
|00000950| 67 50 72 69 6e 74 00 00 | 6b 04 5a 77 53 65 74 56 |gPrint..|k.ZwSetV|
|00000960| 61 6c 75 65 4b 65 79 00 | 23 04 5a 77 43 72 65 61 |alueKey.|#.ZwCrea|
|00000970| 74 65 4b 65 79 00 57 04 | 5a 77 51 75 65 72 79 56 |teKey.W.|ZwQueryV|
|00000980| 61 6c 75 65 4b 65 79 00 | 3e 04 5a 77 4f 70 65 6e |alueKey.|>.ZwOpen|
|00000990| 4b 65 79 00 50 02 4d 6d | 4d 61 70 4c 6f 63 6b 65 |Key.P.Mm|MapLocke|
|000009a0| 64 50 61 67 65 73 00 00 | c0 03 52 74 6c 55 6e 69 |dPages..|..RtlUni|
|000009b0| 63 6f 64 65 53 74 72 69 | 6e 67 54 6f 41 6e 73 69 |codeStri|ngToAnsi|
|000009c0| 53 74 72 69 6e 67 00 00 | 68 00 45 78 51 75 65 75 |String..|h.ExQueu|
|000009d0| 65 57 6f 72 6b 49 74 65 | 6d 00 a1 04 6d 65 6d 6d |eWorkIte|m...memm|
|000009e0| 6f 76 65 00 bf 03 52 74 | 6c 55 6e 69 63 6f 64 65 |ove...Rt|lUnicode|
|000009f0| 53 74 72 69 6e 67 54 6f | 41 6e 73 69 53 69 7a 65 |StringTo|AnsiSize|
|00000a00| 00 00 7b 02 4e 74 42 75 | 69 6c 64 4e 75 6d 62 65 |..{.NtBu|ildNumbe|
|00000a10| 72 00 27 01 49 6f 44 65 | 6c 65 74 65 53 79 6d 62 |r.'.IoDe|leteSymb|
|00000a20| 6f 6c 69 63 4c 69 6e 6b | 00 00 3e 00 45 78 44 65 |olicLink|..>.ExDe|
|00000a30| 6c 65 74 65 4e 50 61 67 | 65 64 4c 6f 6f 6b 61 73 |leteNPag|edLookas|
|00000a40| 69 64 65 4c 69 73 74 00 | 41 00 45 78 44 65 6c 65 |ideList.|A.ExDele|
|00000a50| 74 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |teResour|ceLite..|
|00000a60| 66 01 49 6f 52 65 67 69 | 73 74 65 72 46 73 52 65 |f.IoRegi|sterFsRe|
|00000a70| 67 69 73 74 72 61 74 69 | 6f 6e 43 68 61 6e 67 65 |gistrati|onChange|
|00000a80| 00 00 69 01 49 6f 52 65 | 67 69 73 74 65 72 53 68 |..i.IoRe|gisterSh|
|00000a90| 75 74 64 6f 77 6e 4e 6f | 74 69 66 69 63 61 74 69 |utdownNo|tificati|
|00000aa0| 6f 6e 00 00 4d 00 45 78 | 49 6e 69 74 69 61 6c 69 |on..M.Ex|Initiali|
|00000ab0| 7a 65 4e 50 61 67 65 64 | 4c 6f 6f 6b 61 73 69 64 |zeNPaged|Lookasid|
|00000ac0| 65 4c 69 73 74 00 50 00 | 45 78 49 6e 69 74 69 61 |eList.P.|ExInitia|
|00000ad0| 6c 69 7a 65 52 65 73 6f | 75 72 63 65 4c 69 74 65 |lizeReso|urceLite|
|00000ae0| 00 00 21 01 49 6f 43 72 | 65 61 74 65 53 79 6d 62 |..!.IoCr|eateSymb|
|00000af0| 6f 6c 69 63 4c 69 6e 6b | 00 00 6e 74 6f 73 6b 72 |olicLink|..ntoskr|
|00000b00| 6e 6c 2e 65 78 65 00 00 | 00 00 00 00 00 00 00 00 |nl.exe..|........|
|00000b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+