/ PC Advisor 2005 August / PCADVD_121.iso / edit / Utilities / TCPView / tcpvcon.exe / BINRES / RCDRIVERNT / COFF_SYMBOLS

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00000010| 03 00 24 54 36 39 34 31 | 00 00 38 03 00 00 01 00 |..$T6941|..8.....|
|00000020| 00 00 03 00 24 54 36 39 | 36 36 00 00 48 03 00 00 |....$T69|66..H...|
|00000030| 01 00 00 00 03 00 24 54 | 36 39 39 33 00 00 70 03 |......$T|6993..p.|
|00000040| 00 00 01 00 00 00 03 00 | 24 53 47 36 38 34 37 00 |........|$SG6847.|
|00000050| 30 0c 00 00 01 00 00 00 | 03 00 24 53 47 36 38 36 |0.......|..$SG686|
|00000060| 33 00 e0 0c 00 00 01 00 | 00 00 03 00 24 53 47 36 |3.......|....$SG6|
|00000070| 38 36 30 00 b8 0c 00 00 | 01 00 00 00 03 00 24 53 |860.....|......$S|
|00000080| 47 36 38 35 37 00 98 0c | 00 00 01 00 00 00 03 00 |G6857...|........|
|00000090| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|000000a0| 03 00 24 52 30 30 30 30 | 30 30 80 13 00 00 03 00 |..$R0000|00......|
|000000b0| 00 00 03 00 2e 69 64 61 | 74 61 24 36 da 12 00 00 |.....ida|ta$6....|
|000000c0| 02 00 00 00 03 00 2e 74 | 65 78 74 00 00 00 04 0f |.......t|ext.....|
|000000d0| 00 00 01 00 00 00 03 01 | d1 00 00 00 04 00 47 00 |........|......G.|
|000000e0| 00 00 00 00 00 00 00 00 | 00 00 24 24 24 30 30 30 |........|..$$$000|
|000000f0| 30 31 0c 0f 00 00 01 00 | 20 00 03 01 0e 00 00 00 |01......| .......|
|00000100| 00 00 00 00 ae 01 00 00 | 13 00 00 00 00 00 24 24 |........|......$$|
|00000110| 24 30 30 30 30 34 d5 0f | 00 00 01 00 20 00 03 01 |$00004..|.... ...|
|00000120| 23 00 00 00 00 00 00 00 | 52 03 00 00 00 00 00 00 |#.......|R.......|
|00000130| 00 00 00 00 00 00 83 07 | 00 00 84 0f 00 00 01 00 |........|........|
|00000140| 00 00 03 00 00 00 00 00 | 90 07 00 00 8f 0f 00 00 |........|........|
|00000150| 01 00 00 00 03 00 00 00 | 00 00 9c 07 00 00 b2 0f |........|........|
|00000160| 00 00 01 00 00 00 03 00 | 5f 6c 68 5f 74 6f 70 00 |........|_lh_top.|
|00000170| 3b 0f 00 00 01 00 00 00 | 03 00 00 00 00 00 a7 07 |;.......|........|
|00000180| 00 00 96 0f 00 00 01 00 | 00 00 03 00 00 00 00 00 |........|........|
|00000190| b1 07 00 00 9d 0f 00 00 | 01 00 00 00 03 00 2e 74 |........|.......t|
|000001a0| 65 78 74 00 00 00 44 0e | 00 00 01 00 00 00 03 01 |ext...D.|........|
|000001b0| bf 00 00 00 04 00 3d 00 | 00 00 00 00 00 00 00 00 |......=.|........|
|000001c0| 00 00 00 00 00 00 bf 07 | 00 00 5c 0e 00 00 01 00 |........|..\.....|
|000001d0| 00 00 03 00 24 24 24 30 | 30 30 30 31 44 0e 00 00 |....$$$0|0001D...|
|000001e0| 01 00 20 00 03 01 0f 00 | 00 00 00 00 00 00 9c 01 |.. .....|........|
|000001f0| 00 00 14 00 00 00 00 00 | 24 24 24 30 30 30 30 33 |........|$$$00003|
|00000200| 64 0e 00 00 01 00 20 00 | 03 01 1d 00 00 00 00 00 |d..... .|........|
|00000210| 00 00 cc 01 00 00 22 00 | 00 00 00 00 00 00 00 00 |......".|........|
|00000220| ca 07 00 00 64 0e 00 00 | 01 00 20 00 03 01 24 00 |....d...|.. ...$.|
|00000230| 00 00 22 00 00 00 d2 01 | 00 00 29 00 00 00 00 00 |..".....|..).....|
|00000240| 24 24 24 30 30 30 30 35 | 86 0e 00 00 01 00 20 00 |$$$00005|...... .|
|00000250| 03 01 2b 00 00 00 00 00 | 00 00 08 02 00 00 30 00 |..+.....|......0.|
|00000260| 00 00 00 00 24 24 24 30 | 30 30 30 37 e0 0e 00 00 |....$$$0|0007....|
|00000270| 01 00 20 00 03 01 39 00 | 00 00 00 00 00 00 c2 02 |.. ...9.|........|
|00000280| 00 00 3e 00 00 00 00 00 | 24 24 24 30 30 30 30 39 |..>.....|$$$00009|
|00000290| 03 0f 00 00 01 00 20 00 | 03 01 47 00 00 00 00 00 |...... .|..G.....|
|000002a0| 00 00 04 03 00 00 00 00 | 00 00 00 00 5f 6c 75 5f |........|...._lu_|
|000002b0| 64 6f 6e 65 d2 0e 00 00 | 01 00 00 00 03 00 00 00 |done....|........|
|000002c0| 00 00 db 07 00 00 85 0e | 00 00 01 00 00 00 03 00 |........|........|
|000002d0| 00 00 00 00 e6 07 00 00 | d0 0e 00 00 01 00 00 00 |........|........|
|000002e0| 03 00 5f 6c 75 5f 74 6f | 70 00 a3 0e 00 00 01 00 |.._lu_to|p.......|
|000002f0| 00 00 03 00 5f 61 74 5f | 64 6f 6e 65 02 0f 00 00 |...._at_|done....|
|00000300| 01 00 00 00 03 00 2e 69 | 64 61 74 61 24 36 10 13 |.......i|data$6..|
|00000310| 00 00 02 00 00 00 03 00 | 68 65 61 64 65 72 00 00 |........|header..|
|00000320| 00 00 00 00 fe ff 00 00 | 02 00 00 00 00 00 5b 01 |........|......[.|
|00000330| 00 00 00 00 00 00 ff ff | 00 00 02 00 00 00 00 00 |........|........|
|00000340| 58 02 00 00 60 02 00 00 | 01 00 00 00 02 00 00 00 |X...`...|........|
|00000350| 00 00 87 02 00 00 64 02 | 00 00 01 00 00 00 02 00 |......d.|........|
|00000360| 00 00 00 00 6e 07 00 00 | 68 02 00 00 01 00 00 00 |....n...|h.......|
|00000370| 02 00 00 00 00 00 3f 01 | 00 00 6c 02 00 00 01 00 |......?.|..l.....|
|00000380| 00 00 02 00 00 00 00 00 | 7b 01 00 00 70 02 00 00 |........|{...p...|
|00000390| 01 00 00 00 02 00 00 00 | 00 00 8c 01 00 00 74 02 |........|......t.|
|000003a0| 00 00 01 00 00 00 02 00 | 00 00 00 00 a8 01 00 00 |........|........|
|000003b0| 78 02 00 00 01 00 00 00 | 02 00 00 00 00 00 c0 01 |x.......|........|
|000003c0| 00 00 7c 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |..|.....|........|
|000003d0| d9 01 00 00 80 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|000003e0| 00 00 f7 01 00 00 84 02 | 00 00 01 00 00 00 02 00 |........|........|
|000003f0| 00 00 00 00 1b 02 00 00 | 88 02 00 00 01 00 00 00 |........|........|
|00000400| 02 00 00 00 00 00 34 02 | 00 00 8c 02 00 00 01 00 |......4.|........|
|00000410| 00 00 02 00 00 00 00 00 | 6d 02 00 00 90 02 00 00 |........|m.......|
|00000420| 01 00 00 00 02 00 00 00 | 00 00 9c 02 00 00 94 02 |........|........|
|00000430| 00 00 01 00 00 00 02 00 | 00 00 00 00 bc 02 00 00 |........|........|
|00000440| 98 02 00 00 01 00 00 00 | 02 00 00 00 00 00 c8 05 |........|........|
|00000450| 00 00 98 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000460| 18 01 00 00 9c 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000470| 00 00 e8 02 00 00 a0 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000480| 00 00 00 00 04 03 00 00 | a4 02 00 00 01 00 00 00 |........|........|
|00000490| 02 00 00 00 00 00 25 03 | 00 00 a8 02 00 00 01 00 |......%.|........|
|000004a0| 00 00 02 00 00 00 00 00 | 40 03 00 00 ac 02 00 00 |........|@.......|
|000004b0| 01 00 00 00 02 00 00 00 | 00 00 5b 03 00 00 b0 02 |........|..[.....|
|000004c0| 00 00 01 00 00 00 02 00 | 00 00 00 00 7c 03 00 00 |........|....|...|
|000004d0| b4 02 00 00 01 00 00 00 | 02 00 00 00 00 00 94 03 |........|........|
|000004e0| 00 00 b8 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|000004f0| b2 03 00 00 bc 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000500| 00 00 d0 03 00 00 c0 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000510| 00 00 00 00 ee 03 00 00 | c4 02 00 00 01 00 00 00 |........|........|
|00000520| 02 00 00 00 00 00 07 04 | 00 00 c8 02 00 00 01 00 |........|........|
|00000530| 00 00 02 00 00 00 00 00 | 24 07 00 00 cc 02 00 00 |........|$.......|
|00000540| 01 00 00 00 02 00 00 00 | 00 00 09 01 00 00 d0 02 |........|........|
|00000550| 00 00 01 00 00 00 02 00 | 00 00 00 00 cb 02 00 00 |........|........|
|00000560| d4 02 00 00 01 00 00 00 | 02 00 00 00 00 00 ee 00 |........|........|
|00000570| 00 00 d8 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000580| 0a 07 00 00 dc 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000590| 00 00 13 00 00 00 7c 03 | 00 00 01 00 20 00 02 00 |......|.|.... ...|
|000005a0| 00 00 00 00 32 00 00 00 | 3a 05 00 00 01 00 20 00 |....2...|:..... .|
|000005b0| 02 00 00 00 00 00 4b 00 | 00 00 8a 07 00 00 01 00 |......K.|........|
|000005c0| 20 00 02 00 00 00 00 00 | 5a 00 00 00 b2 07 00 00 | .......|Z.......|
|000005d0| 01 00 20 00 02 00 00 00 | 00 00 70 00 00 00 58 08 |.. .....|..p...X.|
|000005e0| 00 00 01 00 20 00 02 00 | 00 00 00 00 8a 00 00 00 |.... ...|........|
|000005f0| b0 08 00 00 01 00 20 00 | 02 00 00 00 00 00 a1 00 |...... .|........|
|00000600| 00 00 3a 09 00 00 01 00 | 20 00 02 00 00 00 00 00 |..:.....| .......|
|00000610| b1 00 00 00 f2 09 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000620| 00 00 ca 00 00 00 78 0b | 00 00 01 00 20 00 02 00 |......x.|.... ...|
|00000630| 00 00 00 00 dd 00 00 00 | 58 0c 00 00 01 00 20 00 |........|X..... .|
|00000640| 02 00 00 00 00 00 04 00 | 00 00 16 0d 00 00 01 00 |........|........|
|00000650| 20 00 02 00 00 00 00 00 | 9e 04 00 00 44 0e 00 00 | .......|....D...|
|00000660| 01 00 20 00 02 00 00 00 | 00 00 af 04 00 00 86 0e |.. .....|........|
|00000670| 00 00 01 00 20 00 02 00 | 00 00 00 00 bf 04 00 00 |.... ...|........|
|00000680| e0 0e 00 00 01 00 20 00 | 02 00 00 00 00 00 69 01 |...... .|......i.|
|00000690| 00 00 0c 0f 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|000006a0| d6 04 00 00 ba 0f 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|000006b0| 00 00 90 04 00 00 d6 0f | 00 00 01 00 20 00 02 00 |........|.... ...|
|000006c0| 00 00 00 00 3c 04 00 00 | e0 0f 00 00 02 00 00 00 |....<...|........|
|000006d0| 02 00 00 00 00 00 47 07 | 00 00 f4 0f 00 00 02 00 |......G.|........|
|000006e0| 00 00 02 00 00 00 00 00 | f1 06 00 00 08 10 00 00 |........|........|
|000006f0| 02 00 00 00 02 00 65 6e | 64 00 00 00 00 00 c0 17 |......en|d.......|
|00000700| 00 00 fe ff 00 00 02 00 | f3 07 00 00 5f 44 72 69 |........|...._Dri|
|00000710| 76 65 72 45 6e 74 72 79 | 40 38 00 5f 50 72 6f 63 |verEntry|@8._Proc|
|00000720| 45 78 70 47 65 74 43 6f | 6d 70 6f 6e 65 6e 74 46 |ExpGetCo|mponentF|
|00000730| 69 6c 65 4e 61 6d 65 40 | 38 00 5f 50 72 6f 63 45 |ileName@|8._ProcE|
|00000740| 78 70 47 65 74 4f 62 6a | 65 63 74 4e 61 6d 65 40 |xpGetObj|ectName@|
|00000750| 31 32 00 5f 50 72 6f 63 | 45 78 70 4f 70 65 6e 40 |12._Proc|ExpOpen@|
|00000760| 38 00 5f 50 72 6f 63 45 | 78 70 52 65 61 64 4b 73 |8._ProcE|xpReadKs|
|00000770| 74 61 63 6b 40 31 32 00 | 5f 50 72 6f 63 45 78 70 |tack@12.|_ProcExp|
|00000780| 47 65 74 4d 75 74 61 6e | 74 4f 77 6e 65 72 40 31 |GetMutan|tOwner@1|
|00000790| 32 00 5f 50 72 6f 63 45 | 78 70 47 65 74 4b 63 6f |2._ProcE|xpGetKco|
|000007a0| 6e 74 65 78 74 40 31 32 | 00 5f 50 72 6f 63 45 78 |ntext@12|._ProcEx|
|000007b0| 70 43 6c 6f 73 65 40 34 | 00 5f 50 72 6f 63 45 78 |pClose@4|._ProcEx|
|000007c0| 70 44 65 76 69 63 65 43 | 6f 6e 74 72 6f 6c 40 33 |pDeviceC|ontrol@3|
|000007d0| 36 00 5f 50 72 6f 63 45 | 78 70 44 69 73 70 61 74 |6._ProcE|xpDispat|
|000007e0| 63 68 40 38 00 5f 50 72 | 6f 63 45 78 70 55 6e 6c |ch@8._Pr|ocExpUnl|
|000007f0| 6f 61 64 40 34 00 5f 5f | 69 6d 70 5f 5f 52 74 6c |oad@4.__|imp__Rtl|
|00000800| 46 72 65 65 41 6e 73 69 | 53 74 72 69 6e 67 40 34 |FreeAnsi|String@4|
|00000810| 00 5f 5f 69 6d 70 5f 5f | 73 74 72 6e 63 70 79 00 |.__imp__|strncpy.|
|00000820| 5f 5f 69 6d 70 5f 5f 52 | 74 6c 55 6e 69 63 6f 64 |__imp__R|tlUnicod|
|00000830| 65 53 74 72 69 6e 67 54 | 6f 41 6e 73 69 53 74 72 |eStringT|oAnsiStr|
|00000840| 69 6e 67 40 31 32 00 5f | 5f 69 6d 70 5f 5f 4f 62 |ing@12._|_imp__Ob|
|00000850| 51 75 65 72 79 4e 61 6d | 65 53 74 72 69 6e 67 40 |QueryNam|eString@|
|00000860| 31 36 00 5f 5f 65 78 63 | 65 70 74 5f 6c 69 73 74 |16.__exc|ept_list|
|00000870| 00 5f 5f 65 78 63 65 70 | 74 5f 68 61 6e 64 6c 65 |.__excep|t_handle|
|00000880| 72 33 00 5f 5f 69 6d 70 | 5f 5f 5a 77 43 6c 6f 73 |r3.__imp|__ZwClos|
|00000890| 65 40 34 00 5f 5f 69 6d | 70 5f 5f 5a 77 44 75 70 |e@4.__im|p__ZwDup|
|000008a0| 6c 69 63 61 74 65 4f 62 | 6a 65 63 74 40 32 38 00 |licateOb|ject@28.|
|000008b0| 5f 5f 69 6d 70 5f 5f 5a | 77 4f 70 65 6e 50 72 6f |__imp__Z|wOpenPro|
|000008c0| 63 65 73 73 40 31 36 00 | 5f 5f 69 6d 70 5f 5f 4b |cess@16.|__imp__K|
|000008d0| 65 44 65 74 61 63 68 50 | 72 6f 63 65 73 73 40 30 |eDetachP|rocess@0|
|000008e0| 00 5f 5f 69 6d 70 5f 40 | 4f 62 66 44 65 72 65 66 |.__imp_@|ObfDeref|
|000008f0| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 40 34 00 5f |erenceOb|ject@4._|
|00000900| 5f 69 6d 70 5f 5f 4f 62 | 52 65 66 65 72 65 6e 63 |_imp__Ob|Referenc|
|00000910| 65 4f 62 6a 65 63 74 42 | 79 48 61 6e 64 6c 65 40 |eObjectB|yHandle@|
|00000920| 32 34 00 5f 5f 69 6d 70 | 5f 5f 4b 65 41 74 74 61 |24.__imp|__KeAtta|
|00000930| 63 68 50 72 6f 63 65 73 | 73 40 34 00 5f 5f 69 6d |chProces|s@4.__im|
|00000940| 70 5f 5f 50 73 4c 6f 6f | 6b 75 70 50 72 6f 63 65 |p__PsLoo|kupProce|
|00000950| 73 73 42 79 50 72 6f 63 | 65 73 73 49 64 40 38 00 |ssByProc|essId@8.|
|00000960| 5f 5f 69 6d 70 5f 40 4b | 66 4c 6f 77 65 72 49 72 |__imp_@K|fLowerIr|
|00000970| 71 6c 40 34 00 5f 5f 69 | 6d 70 5f 5f 4d 6d 49 73 |ql@4.__i|mp__MmIs|
|00000980| 41 64 64 72 65 73 73 56 | 61 6c 69 64 40 34 00 5f |AddressV|alid@4._|
|00000990| 5f 69 6d 70 5f 40 4b 66 | 52 61 69 73 65 49 72 71 |_imp_@Kf|RaiseIrq|
|000009a0| 6c 40 34 00 5f 5f 69 6d | 70 5f 5f 4f 62 4f 70 65 |l@4.__im|p__ObOpe|
|000009b0| 6e 4f 62 6a 65 63 74 42 | 79 50 6f 69 6e 74 65 72 |nObjectB|yPointer|
|000009c0| 40 32 38 00 5f 4e 74 42 | 75 69 6c 64 4e 75 6d 62 |@28._NtB|uildNumb|
|000009d0| 65 72 00 5f 5f 69 6d 70 | 5f 5f 5a 77 4f 70 65 6e |er.__imp|__ZwOpen|
|000009e0| 50 72 6f 63 65 73 73 54 | 6f 6b 65 6e 40 31 32 00 |ProcessT|oken@12.|
|000009f0| 5f 5f 69 6d 70 5f 40 49 | 6f 66 43 6f 6d 70 6c 65 |__imp_@I|ofComple|
|00000a00| 74 65 52 65 71 75 65 73 | 74 40 38 00 5f 5f 69 6d |teReques|t@8.__im|
|00000a10| 70 5f 5f 53 65 52 65 6c | 65 61 73 65 53 75 62 6a |p__SeRel|easeSubj|
|00000a20| 65 63 74 43 6f 6e 74 65 | 78 74 40 34 00 5f 5f 69 |ectConte|xt@4.__i|
|00000a30| 6d 70 5f 5f 53 65 50 72 | 69 76 69 6c 65 67 65 43 |mp__SePr|ivilegeC|
|00000a40| 68 65 63 6b 40 31 32 00 | 5f 5f 69 6d 70 5f 5f 45 |heck@12.|__imp__E|
|00000a50| 78 47 65 74 50 72 65 76 | 69 6f 75 73 4d 6f 64 65 |xGetPrev|iousMode|
|00000a60| 40 30 00 5f 5f 69 6d 70 | 5f 5f 53 65 43 61 70 74 |@0.__imp|__SeCapt|
|00000a70| 75 72 65 53 75 62 6a 65 | 63 74 43 6f 6e 74 65 78 |ureSubje|ctContex|
|00000a80| 74 40 34 00 5f 5f 69 6d | 70 5f 5f 49 6f 44 65 6c |t@4.__im|p__IoDel|
|00000a90| 65 74 65 44 65 76 69 63 | 65 40 34 00 5f 5f 69 6d |eteDevic|e@4.__im|
|00000aa0| 70 5f 5f 49 6f 44 65 6c | 65 74 65 53 79 6d 62 6f |p__IoDel|eteSymbo|
|00000ab0| 6c 69 63 4c 69 6e 6b 40 | 34 00 5f 5f 69 6d 70 5f |licLink@|4.__imp_|
|00000ac0| 5f 52 74 6c 49 6e 69 74 | 55 6e 69 63 6f 64 65 53 |_RtlInit|UnicodeS|
|00000ad0| 74 72 69 6e 67 40 38 00 | 5f 5f 69 6d 70 5f 5f 49 |tring@8.|__imp__I|
|00000ae0| 6f 43 72 65 61 74 65 53 | 79 6d 62 6f 6c 69 63 4c |oCreateS|ymbolicL|
|00000af0| 69 6e 6b 40 38 00 5f 5f | 69 6d 70 5f 5f 49 6f 43 |ink@8.__|imp__IoC|
|00000b00| 72 65 61 74 65 44 65 76 | 69 63 65 40 32 38 00 5f |reateDev|ice@28._|
|00000b10| 5f 69 6d 70 5f 5f 45 78 | 41 6c 6c 6f 63 61 74 65 |_imp__Ex|Allocate|
|00000b20| 50 6f 6f 6c 57 69 74 68 | 54 61 67 40 31 32 00 5f |PoolWith|Tag@12._|
|00000b30| 52 74 6c 46 72 65 65 41 | 6e 73 69 53 74 72 69 6e |RtlFreeA|nsiStrin|
|00000b40| 67 40 34 00 5f 5f 49 4d | 50 4f 52 54 5f 44 45 53 |g@4.__IM|PORT_DES|
|00000b50| 43 52 49 50 54 4f 52 5f | 6e 74 6f 73 6b 72 6e 6c |CRIPTOR_|ntoskrnl|
|00000b60| 00 5f 52 74 6c 55 6e 69 | 63 6f 64 65 53 74 72 69 |._RtlUni|codeStri|
|00000b70| 6e 67 54 6f 41 6e 73 69 | 53 74 72 69 6e 67 40 31 |ngToAnsi|String@1|
|00000b80| 32 00 5f 4f 62 51 75 65 | 72 79 4e 61 6d 65 53 74 |2._ObQue|ryNameSt|
|00000b90| 72 69 6e 67 40 31 36 00 | 5f 52 74 6c 55 6e 77 69 |ring@16.|_RtlUnwi|
|00000ba0| 6e 64 40 31 36 00 5f 5f | 67 6c 6f 62 61 6c 5f 75 |nd@16.__|global_u|
|00000bb0| 6e 77 69 6e 64 32 00 5f | 5f 6c 6f 63 61 6c 5f 75 |nwind2._|_local_u|
|00000bc0| 6e 77 69 6e 64 32 00 5f | 5f 61 62 6e 6f 72 6d 61 |nwind2._|_abnorma|
|00000bd0| 6c 5f 74 65 72 6d 69 6e | 61 74 69 6f 6e 00 5f 5f |l_termin|ation.__|
|00000be0| 73 65 68 5f 6c 6f 6e 67 | 6a 6d 70 5f 75 6e 77 69 |seh_long|jmp_unwi|
|00000bf0| 6e 64 40 34 00 5f 5a 77 | 43 6c 6f 73 65 40 34 00 |nd@4._Zw|Close@4.|
|00000c00| 5f 5a 77 44 75 70 6c 69 | 63 61 74 65 4f 62 6a 65 |_ZwDupli|cateObje|
|00000c10| 63 74 40 32 38 00 5f 5a | 77 4f 70 65 6e 50 72 6f |ct@28._Z|wOpenPro|
|00000c20| 63 65 73 73 40 31 36 00 | 5f 4b 65 44 65 74 61 63 |cess@16.|_KeDetac|
|00000c30| 68 50 72 6f 63 65 73 73 | 40 30 00 40 4f 62 66 44 |hProcess|@0.@ObfD|
|00000c40| 65 72 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |ereferen|ceObject|
|00000c50| 40 34 00 5f 4f 62 52 65 | 66 65 72 65 6e 63 65 4f |@4._ObRe|ferenceO|
|00000c60| 62 6a 65 63 74 42 79 48 | 61 6e 64 6c 65 40 32 34 |bjectByH|andle@24|
|00000c70| 00 5f 4b 65 41 74 74 61 | 63 68 50 72 6f 63 65 73 |._KeAtta|chProces|
|00000c80| 73 40 34 00 5f 50 73 4c | 6f 6f 6b 75 70 50 72 6f |s@4._PsL|ookupPro|
|00000c90| 63 65 73 73 42 79 50 72 | 6f 63 65 73 73 49 64 40 |cessByPr|ocessId@|
|00000ca0| 38 00 5f 4d 6d 49 73 41 | 64 64 72 65 73 73 56 61 |8._MmIsA|ddressVa|
|00000cb0| 6c 69 64 40 34 00 5f 4f | 62 4f 70 65 6e 4f 62 6a |lid@4._O|bOpenObj|
|00000cc0| 65 63 74 42 79 50 6f 69 | 6e 74 65 72 40 32 38 00 |ectByPoi|nter@28.|
|00000cd0| 5f 5f 69 6d 70 5f 5f 4e | 74 42 75 69 6c 64 4e 75 |__imp__N|tBuildNu|
|00000ce0| 6d 62 65 72 00 5f 5a 77 | 4f 70 65 6e 50 72 6f 63 |mber._Zw|OpenProc|
|00000cf0| 65 73 73 54 6f 6b 65 6e | 40 31 32 00 40 49 6f 66 |essToken|@12.@Iof|
|00000d00| 43 6f 6d 70 6c 65 74 65 | 52 65 71 75 65 73 74 40 |Complete|Request@|
|00000d10| 38 00 5f 53 65 52 65 6c | 65 61 73 65 53 75 62 6a |8._SeRel|easeSubj|
|00000d20| 65 63 74 43 6f 6e 74 65 | 78 74 40 34 00 5f 53 65 |ectConte|xt@4._Se|
|00000d30| 50 72 69 76 69 6c 65 67 | 65 43 68 65 63 6b 40 31 |Privileg|eCheck@1|
|00000d40| 32 00 5f 45 78 47 65 74 | 50 72 65 76 69 6f 75 73 |2._ExGet|Previous|
|00000d50| 4d 6f 64 65 40 30 00 5f | 53 65 43 61 70 74 75 72 |Mode@0._|SeCaptur|
|00000d60| 65 53 75 62 6a 65 63 74 | 43 6f 6e 74 65 78 74 40 |eSubject|Context@|
|00000d70| 34 00 5f 49 6f 44 65 6c | 65 74 65 44 65 76 69 63 |4._IoDel|eteDevic|
|00000d80| 65 40 34 00 5f 49 6f 44 | 65 6c 65 74 65 53 79 6d |e@4._IoD|eleteSym|
|00000d90| 62 6f 6c 69 63 4c 69 6e | 6b 40 34 00 5f 52 74 6c |bolicLin|k@4._Rtl|
|00000da0| 49 6e 69 74 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |InitUnic|odeStrin|
|00000db0| 67 40 38 00 5f 49 6f 43 | 72 65 61 74 65 53 79 6d |g@8._IoC|reateSym|
|00000dc0| 62 6f 6c 69 63 4c 69 6e | 6b 40 38 00 5f 49 6f 43 |bolicLin|k@8._IoC|
|00000dd0| 72 65 61 74 65 44 65 76 | 69 63 65 40 32 38 00 5f |reateDev|ice@28._|
|00000de0| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|00000df0| 74 68 54 61 67 40 31 32 | 00 5f 5f 4e 55 4c 4c 5f |thTag@12|.__NULL_|
|00000e00| 49 4d 50 4f 52 54 5f 44 | 45 53 43 52 49 50 54 4f |IMPORT_D|ESCRIPTO|
|00000e10| 52 00 7f 6e 74 6f 73 6b | 72 6e 6c 5f 4e 55 4c 4c |R..ntosk|rnl_NULL|
|00000e20| 5f 54 48 55 4e 4b 5f 44 | 41 54 41 00 5f 5f 69 6d |_THUNK_D|ATA.__im|
|00000e30| 70 5f 5f 52 74 6c 55 6e | 77 69 6e 64 40 31 36 00 |p__RtlUn|wind@16.|
|00000e40| 40 4b 66 4c 6f 77 65 72 | 49 72 71 6c 40 34 00 5f |@KfLower|Irql@4._|
|00000e50| 5f 49 4d 50 4f 52 54 5f | 44 45 53 43 52 49 50 54 |_IMPORT_|DESCRIPT|
|00000e60| 4f 52 5f 48 41 4c 00 40 | 4b 66 52 61 69 73 65 49 |OR_HAL.@|KfRaiseI|
|00000e70| 72 71 6c 40 34 00 7f 48 | 41 4c 5f 4e 55 4c 4c 5f |rql@4..H|AL_NULL_|
|00000e80| 54 48 55 4e 4b 5f 44 41 | 54 41 00 5f 6c 68 5f 63 |THUNK_DA|TA._lh_c|
|00000e90| 6f 6e 74 69 6e 75 65 00 | 5f 6c 68 5f 64 69 73 6d |ontinue.|_lh_dism|
|00000ea0| 69 73 73 00 5f 6c 68 5f | 72 65 74 75 72 6e 00 5f |iss._lh_|return._|
|00000eb0| 6c 68 5f 62 61 67 69 74 | 00 5f 6c 68 5f 75 6e 77 |lh_bagit|._lh_unw|
|00000ec0| 69 6e 64 69 6e 67 00 5f | 67 75 5f 72 65 74 75 72 |inding._|gu_retur|
|00000ed0| 6e 00 5f 5f 75 6e 77 69 | 6e 64 5f 68 61 6e 64 6c |n.__unwi|nd_handl|
|00000ee0| 65 72 00 5f 75 68 5f 72 | 65 74 75 72 6e 00 5f 6c |er._uh_r|eturn._l|
|00000ef0| 75 5f 63 6f 6e 74 69 6e | 75 65 00                |u_contin|ue.     |
+--------+-------------------------+-------------------------+--------+--------+