/ PC Open 43 / pcopen43.iso / Utili / TaskInfo / bin / TskInf21.sys

< prev

next >

MacOS 8.1

Win98

DOS

browse contents

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 b8 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 5b 17 0d db 1f 76 63 88 | 1f 76 63 88 1f 76 63 88 |[....vc.|.vc..vc.|
|00000090| 1f 76 63 88 06 76 63 88 | e0 56 69 88 1e 76 63 88 |.vc..vc.|.Vi..vc.|
|000000a0| 52 69 63 68 1f 76 63 88 | 00 00 00 00 00 00 00 00 |Rich.vc.|........|
|000000b0| 00 00 00 00 00 00 00 00 | 50 45 00 00 4c 01 04 00 |........|PE..L...|
|000000c0| 81 e6 7f 38 40 11 00 00 | 62 00 00 00 e0 00 06 01 |...8@...|b.......|
|000000d0| 0b 01 06 00 00 0d 00 00 | c0 01 00 00 00 00 00 00 |........|........|
|000000e0| ba 04 00 00 60 02 00 00 | 80 0d 00 00 00 00 01 00 |....`...|........|
|000000f0| 20 00 00 00 20 00 00 00 | 04 00 00 00 04 00 00 00 | ... ...|........|
|00000100| 04 00 00 00 00 00 00 00 | 20 11 00 00 60 02 00 00 |........| ...`...|
|00000110| 29 06 01 00 01 00 00 00 | 00 00 10 00 00 10 00 00 |).......|........|
|00000120| 00 00 10 00 00 10 00 00 | 00 00 00 00 10 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 40 0e 00 00 28 00 00 00 |........|@...(...|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 20 10 00 00 98 00 00 00 |........| .......|
|00000160| b0 02 00 00 54 00 00 00 | 00 00 00 00 00 00 00 00 |....T...|........|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 60 02 00 00 48 00 00 00 | 00 00 00 00 00 00 00 00 |`...H...|........|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 2e 74 65 78 74 00 00 00 | 1e 0b 00 00 60 02 00 00 |.text...|....`...|
|000001c0| 20 0b 00 00 60 02 00 00 | 00 00 00 00 00 00 00 00 | ...`...|........|
|000001d0| 00 00 00 00 20 00 00 68 | 2e 64 61 74 61 00 00 00 |.... ..h|.data...|
|000001e0| a8 00 00 00 80 0d 00 00 | c0 00 00 00 80 0d 00 00 |........|........|
|000001f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 c8 |........|....@...|
|00000200| 49 4e 49 54 00 00 00 00 | dc 01 00 00 40 0e 00 00 |INIT....|....@...|
|00000210| e0 01 00 00 40 0e 00 00 | 00 00 00 00 00 00 00 00 |....@...|........|
|00000220| 00 00 00 00 20 00 00 e2 | 2e 72 65 6c 6f 63 00 00 |.... ...|.reloc..|
|00000230| fe 00 00 00 20 10 00 00 | 00 01 00 00 20 10 00 00 |.... ...|.... ...|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 42 |........|....@..B|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| 48 0f 00 00 b0 0e 00 00 | c6 0e 00 00 d8 0e 00 00 |H.......|........|
|00000270| f0 0e 00 00 02 0f 00 00 | 1a 0f 00 00 30 0f 00 00 |........|....0...|
|00000280| 52 0f 00 00 6a 0f 00 00 | 86 0f 00 00 96 0f 00 00 |R...j...|........|
|00000290| aa 0f 00 00 ca 0f 00 00 | de 0f 00 00 f0 0f 00 00 |........|........|
|000002a0| 10 10 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002b0| 00 00 00 00 81 e6 7f 38 | 00 00 00 00 01 00 00 00 |.......8|........|
|000002c0| 6f 0e 00 00 00 00 00 00 | 20 11 00 00 00 00 00 00 |o.......| .......|
|000002d0| 81 e6 7f 38 00 00 00 00 | 04 00 00 00 10 01 00 00 |...8....|........|
|000002e0| 00 00 00 00 90 1f 00 00 | 00 00 00 00 81 e6 7f 38 |........|.......8|
|000002f0| 00 00 00 00 03 00 00 00 | 30 01 00 00 00 00 00 00 |........|0.......|
|00000300| a0 20 00 00 00 00 00 00 | ff ff ff ff 9b 03 01 00 |. ......|........|
|00000310| 9f 03 01 00 00 00 00 00 | ff ff ff ff 0a 04 01 00 |........|........|
|00000320| 0e 04 01 00 00 00 00 00 | ff ff ff ff 07 09 01 00 |........|........|
|00000330| 0b 09 01 00 ff ff ff ff | ac 09 01 00 b0 09 01 00 |........|........|
|00000340| ff ff ff ff 8f 0b 01 00 | 93 0b 01 00 55 8b ec 6a |........|....U..j|
|00000350| ff 68 08 03 01 00 68 9c | 0c 01 00 64 a1 00 00 00 |.h....h.|...d....|
|00000360| 00 50 64 89 25 00 00 00 | 00 83 ec 0c 53 56 57 89 |.Pd.%...|....SVW.|
|00000370| 65 e8 8b 75 0c 85 f6 74 | 2d 8b 55 08 85 d2 74 26 |e..u...t|-.U...t&|
|00000380| 83 65 fc 00 33 c0 89 45 | e4 3b 45 10 73 14 8a 0c |.e..3..E|.;E.s...|
|00000390| 30 88 0c 10 84 c9 74 0a | 40 eb eb 6a 01 58 c3 8b |0.....t.|@..j.X..|
|000003a0| 65 e8 83 4d fc ff 8b 4d | f0 64 89 0d 00 00 00 00 |e..M...M|.d......|
|000003b0| 5f 5e 5b c9 c2 0c 00 cc | 55 8b ec 6a ff 68 18 03 |_^[.....|U..j.h..|
|000003c0| 01 00 68 9c 0c 01 00 64 | a1 00 00 00 00 50 64 89 |..h....d|.....Pd.|
|000003d0| 25 00 00 00 00 83 ec 0c | 53 56 57 89 65 e8 8b 75 |%.......|SVW.e..u|
|000003e0| 0c 85 f6 74 30 8b 55 08 | 85 d2 74 29 83 65 fc 00 |...t0.U.|..t).e..|
|000003f0| 33 c9 89 4d e4 3b 4d 10 | 73 17 66 8b 04 4e 66 89 |3..M.;M.|s.f..Nf.|
|00000400| 04 4a 66 85 c0 74 0a 41 | eb e8 6a 01 58 c3 8b 65 |.Jf..t.A|..j.X..e|
|00000410| e8 83 4d fc ff 8b 4d f0 | 64 89 0d 00 00 00 00 5f |..M...M.|d......_|
|00000420| 5e 5b c9 c2 0c 00 0f b6 | 44 24 08 8b 4c 24 0c 53 |^[......|D$..L$.S|
|00000430| 8a d8 8b d1 8a fb 57 8b | 7c 24 0c 8b c3 c1 e0 10 |......W.||$......|
|00000440| 66 8b c3 c1 e9 02 f3 ab | 8b ca 83 e1 03 f3 aa 5f |f.......|......._|
|00000450| 5b c2 0c 00 8b 44 24 04 | 8b 4c 24 08 8b 40 04 8b |[....D$.|.L$..@..|
|00000460| 04 88 c2 08 00 cc ff 25 | 64 02 01 00 5c 00 44 00 |.......%|d...\.D.|
|00000470| 65 00 76 00 69 00 63 00 | 65 00 5c 00 74 00 73 00 |e.v.i.c.|e.\.t.s.|
|00000480| 6b 00 69 00 6e 00 66 00 | 32 00 31 00 00 00 00 00 |k.i.n.f.|2.1.....|
|00000490| 5c 00 44 00 6f 00 73 00 | 44 00 65 00 76 00 69 00 |\.D.o.s.|D.e.v.i.|
|000004a0| 63 00 65 00 73 00 5c 00 | 74 00 73 00 6b 00 69 00 |c.e.s.\.|t.s.k.i.|
|000004b0| 6e 00 66 00 32 00 31 00 | 00 00 55 8b ec 83 ec 14 |n.f.2.1.|..U.....|
|000004c0| 53 8b 1d 74 02 01 00 56 | 8b 75 08 57 8d 45 f4 33 |S..t...V|.u.W.E.3|
|000004d0| ff 68 6c 04 01 00 50 89 | 7d fc c7 46 38 58 05 01 |.hl...P.|}..F8X..|
|000004e0| 00 c7 46 40 7c 05 01 00 | c7 46 70 0c 0b 01 00 c7 |..F@|...|.Fp.....|
|000004f0| 46 34 ca 05 01 00 ff d3 | 8d 45 fc 50 57 57 8d 45 |F4......|.E.PWW.E|
|00000500| f4 6a 22 50 6a 0c 56 ff | 15 70 02 01 00 3b c7 7c |.j"Pj.V.|.p...;.||
|00000510| 3f 8b 45 fc 68 90 04 01 | 00 8b 48 28 33 c0 8b f9 |?.E.h...|..H(3...|
|00000520| ab ab ab 8b 45 fc 89 31 | 89 41 04 8d 45 ec 50 ff |....E..1|.A..E.P.|
|00000530| d3 8d 45 f4 50 8d 45 ec | 50 ff 15 6c 02 01 00 8b |..E.P.E.|P..l....|
|00000540| f8 85 ff 7d 09 ff 76 04 | ff 15 68 02 01 00 8b c7 |...}..v.|..h.....|
|00000550| 5f 5e 5b c9 c2 08 00 cc | 8b 44 24 04 8b 4c 24 08 |_^[.....|.D$..L$.|
|00000560| 32 d2 8b 40 28 ff 40 08 | 83 61 18 00 83 61 1c 00 |2..@(.@.|.a...a..|
|00000570| ff 15 78 02 01 00 33 c0 | c2 08 00 cc e8 e5 fe ff |..x...3.|........|
|00000580| ff 8b 44 24 04 8b 4c 24 | 08 32 d2 8b 40 28 ff 48 |..D$..L$|.2..@(.H|
|00000590| 08 83 61 1c 00 ff 15 78 | 02 01 00 33 c0 c2 08 00 |..a....x|...3....|
|000005a0| 5c 00 44 00 6f 00 73 00 | 44 00 65 00 76 00 69 00 |\.D.o.s.|D.e.v.i.|
|000005b0| 63 00 65 00 73 00 5c 00 | 74 00 73 00 6b 00 69 00 |c.e.s.\.|t.s.k.i.|
|000005c0| 6e 00 66 00 32 00 31 00 | 00 00 55 8b ec 51 51 8d |n.f.2.1.|..U..QQ.|
|000005d0| 45 f8 68 a0 05 01 00 50 | ff 15 74 02 01 00 8d 45 |E.h....P|..t....E|
|000005e0| f8 50 ff 15 7c 02 01 00 | 8b 45 08 ff 70 04 ff 15 |.P..|...|.E..p...|
|000005f0| 68 02 01 00 c9 c2 04 00 | 5c 00 44 00 6f 00 73 00 |h.......|\.D.o.s.|
|00000600| 44 00 65 00 76 00 69 00 | 63 00 65 00 73 00 5c 00 |D.e.v.i.|c.e.s.\.|
|00000610| 41 00 3a 00 00 00 55 8b | ec 83 ec 50 53 56 57 6a |A.:...U.|...PSVWj|
|00000620| 01 ff 75 08 e8 2b fe ff | ff 6a 07 be f8 05 01 00 |..u..+..|.j......|
|00000630| 59 8d 7d b0 f3 a5 66 a5 | 33 f6 89 45 fc 33 ff bb |Y.}...f.|3..E.3..|
|00000640| c0 0d 01 00 6a 01 8b cf | 58 d3 e0 8b 4d fc 85 c1 |....j...|X...M...|
|00000650| 0f 84 86 00 00 00 8d 47 | 41 66 89 45 c8 8d 45 b0 |.......G|Af.E..E.|
|00000660| 50 8d 45 f0 50 ff 15 74 | 02 01 00 56 56 8d 45 f0 |P.E.P..t|...VV.E.|
|00000670| 6a 21 6a 01 89 45 d8 6a | 03 56 8d 45 e8 56 50 8d |j!j..E.j|.V.E.VP.|
|00000680| 45 d0 50 8d 45 08 68 00 | 00 10 00 50 c7 45 d0 18 |E.P.E.h.|...P.E..|
|00000690| 00 00 00 89 75 d4 c7 45 | dc 40 00 00 00 89 75 e0 |....u..E|.@....u.|
|000006a0| 89 75 e4 ff 15 88 02 01 | 00 85 c0 7c 31 8d 45 f8 |.u......|...|1.E.|
|000006b0| 56 50 56 56 6a 01 ff 75 | 08 ff 15 84 02 01 00 85 |VPVVj..u|........|
|000006c0| c0 7c 0e 8b 4d f8 8b 41 | 04 89 03 ff 15 80 02 01 |.|..M..A|........|
|000006d0| 00 ff 75 08 ff 15 60 02 | 01 00 eb 02 89 33 83 c3 |..u...`.|.....3..|
|000006e0| 04 47 81 fb 28 0e 01 00 | 0f 8c 56 ff ff ff 5f 5e |.G..(...|..V..._^|
|000006f0| 5b c9 c2 04 00 cc 55 8b | ec 6a ff 68 28 03 01 00 |[.....U.|.j.h(...|
|00000700| 68 9c 0c 01 00 64 a1 00 | 00 00 00 50 64 89 25 00 |h....d..|...Pd.%.|
|00000710| 00 00 00 81 ec 64 08 00 | 00 53 56 57 89 65 e8 6a |.....d..|.SVW.e.j|
|00000720| 01 8b 75 08 56 e8 2a fd | ff ff 89 45 e0 6a 02 56 |..u.V.*.|...E.j.V|
|00000730| e8 1f fd ff ff 89 85 c0 | f7 ff ff 6a 03 56 e8 11 |........|...j.V..|
|00000740| fd ff ff 89 45 dc 6a 04 | 56 e8 06 fd ff ff 89 85 |....E.j.|V.......|
|00000750| b4 f7 ff ff 6a 05 56 e8 | f8 fc ff ff 89 45 d4 6a |....j.V.|.....E.j|
|00000760| 06 56 e8 ed fc ff ff 8b | f8 89 7d e4 6a 07 56 e8 |.V......|..}.j.V.|
|00000770| e0 fc ff ff 89 85 c4 f7 | ff ff e8 e7 fc ff ff 89 |........|........|
|00000780| 45 cc 8d b5 cc f7 ff ff | 89 75 d0 33 db 8b 85 c4 |E.......|.u.3....|
|00000790| f7 ff ff 89 18 89 1f 89 | 5f 04 8b 85 b4 f7 ff ff |........|_.......|
|000007a0| 88 18 53 8d 45 d8 50 53 | 53 68 00 00 1f 00 ff 75 |..S.E.PS|Sh.....u|
|000007b0| e0 ff 15 84 02 01 00 3b | c3 0f 8c 4b 02 00 00 8b |.......;|...K....|
|000007c0| 45 d8 3b 45 cc 74 0e 50 | e8 a5 05 00 00 3b c3 0f |E.;E.t.P|.....;..|
|000007d0| 8c 2c 02 00 00 53 8d 85 | bc f7 ff ff 50 53 53 68 |.,...S..|....PSSh|
|000007e0| 00 00 1f 00 ff b5 c0 f7 | ff ff ff 15 84 02 01 00 |........|........|
|000007f0| 89 85 b8 f7 ff ff 8b 45 | d8 3b 45 cc 74 05 e8 69 |.......E|.;E.t..i|
|00000800| 05 00 00 39 9d b8 f7 ff | ff 0f 8c f2 01 00 00 8b |...9....|........|
|00000810| 85 bc f7 ff ff 3b 45 dc | 0f 85 d7 01 00 00 89 85 |.....;E.|........|
|00000820| a8 f7 ff ff 66 83 38 05 | 0f 85 c7 01 00 00 89 9d |....f.8.|........|
|00000830| a0 f7 ff ff 66 83 78 02 | 70 0f 85 b6 01 00 00 89 |....f.x.|p.......|
|00000840| 9d a4 f7 ff ff 83 c0 04 | 89 85 90 f7 ff ff 8b 08 |........|........|
|00000850| c7 85 8c f7 ff ff c0 0d | 01 00 8b 95 8c f7 ff ff |........|........|
|00000860| 39 0a 74 1b ff 85 a4 f7 | ff ff 83 85 8c f7 ff ff |9.t.....|........|
|00000870| 04 81 bd 8c f7 ff ff 28 | 0e 01 00 7c dd eb 57 8b |.......(|...|..W.|
|00000880| 85 a4 f7 ff ff 83 c0 41 | 66 89 85 cc f7 ff ff 66 |.......A|f......f|
|00000890| c7 85 ce f7 ff ff 3a 00 | 66 89 9d d0 f7 ff ff c7 |......:.|f.......|
|000008a0| 85 c8 f7 ff ff 06 00 00 | 00 8d 85 cc f7 ff ff 50 |........|.......P|
|000008b0| 8d 85 ac f7 ff ff 50 ff | 15 74 02 01 00 8d b5 ac |......P.|.t......|
|000008c0| f7 ff ff 89 75 d0 c7 85 | a0 f7 ff ff 01 00 00 00 |....u...|........|
|000008d0| 8b 85 90 f7 ff ff 39 9d | a0 f7 ff ff 75 46 89 5d |......9.|....uF.]|
|000008e0| fc 8d 8d c8 f7 ff ff 51 | 68 00 04 00 00 8d 8d cc |.......Q|h.......|
|000008f0| f7 ff ff 51 ff 30 e8 6b | 04 00 00 89 85 b8 f7 ff |...Q.0.k|........|
|00000900| ff 83 4d fc ff eb 1d 6a | 01 58 c3 8b 65 e8 c7 85 |..M....j|.X..e...|
|00000910| b8 f7 ff ff e9 00 00 c0 | 83 4d fc ff 33 db 8b 7d |........|.M..3..}|
|00000920| e4 8b 75 d0 c7 45 fc 01 | 00 00 00 39 9d b8 f7 ff |..u..E..|...9....|
|00000930| ff 7c 73 8b 85 a8 f7 ff | ff 66 8b 40 30 66 3b c3 |.|s.....|.f.@0f;.|
|00000940| 74 64 0f b7 c8 ba 00 08 | 00 00 8b 85 c8 f7 ff ff |td......|........|
|00000950| 2b d0 3b ca 72 02 8b ca | 89 8d 9c f7 ff ff 0f b7 |+.;.r...|........|
|00000960| c9 d1 e9 51 8b 8d a8 f7 | ff ff ff 71 34 d1 e8 8d |...Q....|...q4...|
|00000970| 84 45 ca f7 ff ff 50 e8 | 3c fa ff ff 8b 85 9c f7 |.E....P.|<.......|
|00000980| ff ff 66 01 06 66 01 46 | 02 8b 85 a8 f7 ff ff 8b |..f..f.F|........|
|00000990| 48 38 89 0f 8b 40 3c 89 | 47 04 8b 85 c4 f7 ff ff |H8...@<.|G.......|
|000009a0| c7 00 01 00 00 00 83 4d | fc ff eb 10 6a 01 58 c3 |.......M|....j.X.|
|000009b0| 8b 65 e8 83 4d fc ff 33 | db 8b 75 d0 39 9d b8 f7 |.e..M..3|..u.9...|
|000009c0| ff ff 7c 31 6a 01 56 8d | 85 94 f7 ff ff 50 ff 15 |..|1j.V.|.....P..|
|000009d0| 90 02 01 00 ff 75 d4 ff | b5 98 f7 ff ff ff b5 b4 |.....u..|........|
|000009e0| f7 ff ff e8 64 f9 ff ff | 8d 85 94 f7 ff ff 50 ff |....d...|......P.|
|000009f0| 15 8c 02 01 00 8b 8d bc | f7 ff ff ff 15 80 02 01 |........|........|
|00000a00| 00 8b 4d d8 ff 15 80 02 | 01 00 8b 4d f0 64 89 0d |..M.....|...M.d..|
|00000a10| 00 00 00 00 5f 5e 5b c9 | c2 04 00 cc 55 8b ec 83 |...._^[.|....U...|
|00000a20| ec 28 53 56 57 6a 01 ff | 75 08 e8 25 fa ff ff 6a |.(SVWj..|u..%...j|
|00000a30| 02 ff 75 08 e8 1b fa ff | ff 6a 03 8b f0 ff 75 08 |..u.....|.j....u.|
|00000a40| e8 0f fa ff ff 8b f8 33 | db 57 53 56 e8 d5 f9 ff |.......3|.WSV....|
|00000a50| ff 83 ff 30 75 4a 6a 28 | 8d 45 d8 53 50 e8 c4 f9 |...0uJj(|.E.SP...|
|00000a60| ff ff 8b 45 d8 89 06 8b | 45 dc 89 46 08 8b 45 e0 |...E....|E..F..E.|
|00000a70| 89 46 10 8b 45 e8 89 46 | 18 8b 45 ec 89 46 1c 8b |.F..E..F|..E..F..|
|00000a80| 45 f0 89 46 20 8b 45 f4 | 89 46 24 8b 45 f8 89 46 |E..F .E.|.F$.E..F|
|00000a90| 28 8b 45 fc 89 5e 04 89 | 5e 0c 89 5e 14 89 46 2c |(.E..^..|^..^..F,|
|00000aa0| 5f 5e 5b c9 c2 04 00 cc | c2 04 00 cc 6a 01 ff 74 |_^[.....|....j..t|
|00000ab0| 24 08 e8 9d f9 ff ff c7 | 00 a7 01 00 00 c2 04 00 |$.......|........|
|00000ac0| 6a 01 ff 74 24 08 e8 89 | f9 ff ff 83 20 00 c2 04 |j..t$...|.... ...|
|00000ad0| 00 cc 8b 44 24 04 83 40 | 04 04 8b 48 04 8b 09 83 |...D$..@|...H....|
|00000ae0| f9 02 77 08 50 ff 14 8d | 80 0d 01 00 c2 04 00 cc |..w.P...|........|
|00000af0| 8b 44 24 04 83 40 04 04 | 8b 48 04 8b 09 85 c9 77 |.D$..@..|.H.....w|
|00000b00| 08 50 ff 14 8d 8c 0d 01 | 00 c2 04 00 55 8b ec 6a |.P......|....U..j|
|00000b10| ff 68 40 03 01 00 68 9c | 0c 01 00 64 a1 00 00 00 |.h@...h.|...d....|
|00000b20| 00 50 64 89 25 00 00 00 | 00 83 ec 34 53 56 57 89 |.Pd.%...|...4SVW.|
|00000b30| 65 e8 8b 75 0c 8b 46 60 | 81 78 0c 0c 20 ff 80 75 |e..u..F`|.x.. ..u|
|00000b40| 6b 83 66 18 00 8b 4e 0c | 89 4d e4 83 78 04 04 73 |k.f...N.|.M..x..s|
|00000b50| 09 c7 46 18 23 00 00 c0 | eb 59 89 4d d4 8b 01 3b |..F.#...|.Y.M...;|
|00000b60| 05 a0 0d 01 00 77 45 8b | 46 64 89 45 d8 e8 f4 f8 |.....wE.|Fd.E....|
|00000b70| ff ff 89 45 dc 83 65 fc | 00 8b 45 d4 8b 00 8d 4d |...E..e.|..E....M|
|00000b80| d0 51 ff 14 85 90 0d 01 | 00 83 4d fc ff eb 0e 6a |.Q......|..M....j|
|00000b90| 01 58 c3 8b 65 e8 83 4d | fc ff 8b 75 0c c7 46 1c |.X..e..M|...u..F.|
|00000ba0| 04 00 00 00 8b 45 e4 83 | 20 00 eb 07 c7 46 18 10 |.....E..| ....F..|
|00000bb0| 00 00 c0 8b 7e 18 32 d2 | 8b ce ff 15 78 02 01 00 |....~.2.|....x...|
|00000bc0| 8b c7 8b 4d f0 64 89 0d | 00 00 00 00 5f 5e 5b c9 |...M.d..|...._^[.|
|00000bd0| c2 08 00 cc 55 8b ec 53 | 56 57 55 6a 00 6a 00 68 |....U..S|VWUj.j.h|
|00000be0| ec 0b 01 00 ff 75 08 e8 | 8c 01 00 00 5d 5f 5e 5b |.....u..|....]_^[|
|00000bf0| 8b e5 5d c3 8b 4c 24 04 | f7 41 04 06 00 00 00 b8 |..]..L$.|.A......|
|00000c00| 01 00 00 00 74 0f 8b 44 | 24 08 8b 54 24 10 89 02 |....t..D|$..T$...|
|00000c10| b8 03 00 00 00 c3 53 56 | 57 8b 44 24 10 50 6a fe |......SV|W.D$.Pj.|
|00000c20| 68 f4 0b 01 00 64 ff 35 | 00 00 00 00 64 89 25 00 |h....d.5|....d.%.|
|00000c30| 00 00 00 8b 44 24 20 8b | 58 08 8b 70 0c 83 fe ff |....D$ .|X..p....|
|00000c40| 74 20 3b 74 24 24 74 1a | 8d 34 76 8b 0c b3 89 4c |t ;t$$t.|.4v....L|
|00000c50| 24 08 89 48 0c 83 7c b3 | 04 00 75 04 ff 54 b3 08 |$..H..|.|..u..T..|
|00000c60| eb d1 64 8f 05 00 00 00 | 00 83 c4 0c 5f 5e 5b c3 |..d.....|...._^[.|
|00000c70| 33 c0 64 8b 0d 00 00 00 | 00 81 79 04 f4 0b 01 00 |3.d.....|..y.....|
|00000c80| 75 10 8b 51 0c 8b 52 0c | 39 51 08 75 05 b8 01 00 |u..Q..R.|9Q.u....|
|00000c90| 00 00 c3 cc 56 43 32 30 | 58 43 30 30 55 8b ec 83 |....VC20|XC00U...|
|00000ca0| ec 08 53 56 57 55 fc 8b | 5d 0c 8b 45 08 f7 40 04 |..SVWU..|]..E..@.|
|00000cb0| 06 00 00 00 75 77 89 45 | f8 8b 45 10 89 45 fc 8d |....uw.E|..E..E..|
|00000cc0| 45 f8 89 43 fc 8b 73 0c | 8b 7b 08 83 fe ff 74 56 |E..C..s.|.{....tV|
|00000cd0| 8d 0c 76 83 7c 8f 04 00 | 74 3a 56 55 8d 6b 10 ff |..v.|...|t:VU.k..|
|00000ce0| 54 8f 04 5d 5e 8b 5d 0c | 0b c0 74 28 78 31 8b 7b |T..]^.].|..t(x1.{|
|00000cf0| 08 53 e8 dd fe ff ff 83 | c4 04 8d 6b 10 56 53 e8 |.S......|...k.VS.|
|00000d00| 12 ff ff ff 83 c4 08 8d | 0c 76 8b 04 8f 89 43 0c |........|.v....C.|
|00000d10| ff 54 8f 08 8b 7b 08 8d | 0c 76 8b 34 8f eb ac b8 |.T...{..|.v.4....|
|00000d20| 00 00 00 00 eb 1c b8 01 | 00 00 00 eb 15 55 8d 6b |........|.....U.k|
|00000d30| 10 6a ff 53 e8 dd fe ff | ff 83 c4 08 5d b8 01 00 |.j.S....|....]...|
|00000d40| 00 00 5d 5f 5e 5b 8b e5 | 5d c3 55 8b 4c 24 08 8b |..]_^[..|].U.L$..|
|00000d50| 29 8b 41 1c 50 8b 41 18 | 50 e8 b8 fe ff ff 83 c4 |).A.P.A.|P.......|
|00000d60| 08 5d c2 04 00 cc ff 25 | 94 02 01 00 ff 25 98 02 |.].....%|.....%..|
|00000d70| 01 00 ff 25 9c 02 01 00 | ff 25 a0 02 01 00 00 00 |...%....|.%......|
|00000d80| f6 06 01 00 1c 0a 01 00 | 16 06 01 00 a8 0a 01 00 |........|........|
|00000d90| ac 0a 01 00 c0 0a 01 00 | f0 0a 01 00 d2 0a 01 00 |........|........|
|00000da0| 03 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000db0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000dc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000dd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000de0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e40| 68 0e 00 00 00 00 00 00 | 00 00 00 00 02 10 00 00 |h.......|........|
|00000e50| 60 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |`.......|........|
|00000e60| 00 00 00 00 00 00 00 00 | 48 0f 00 00 b0 0e 00 00 |........|H.......|
|00000e70| c6 0e 00 00 d8 0e 00 00 | f0 0e 00 00 02 0f 00 00 |........|........|
|00000e80| 1a 0f 00 00 30 0f 00 00 | 52 0f 00 00 6a 0f 00 00 |....0...|R...j...|
|00000e90| 86 0f 00 00 96 0f 00 00 | aa 0f 00 00 ca 0f 00 00 |........|........|
|00000ea0| de 0f 00 00 f0 0f 00 00 | 10 10 00 00 00 00 00 00 |........|........|
|00000eb0| 0c 01 49 6f 47 65 74 43 | 75 72 72 65 6e 74 50 72 |..IoGetC|urrentPr|
|00000ec0| 6f 63 65 73 73 00 fb 00 | 49 6f 44 65 6c 65 74 65 |ocess...|IoDelete|
|00000ed0| 44 65 76 69 63 65 00 00 | f7 00 49 6f 43 72 65 61 |Device..|..IoCrea|
|00000ee0| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|00000ef0| f3 00 49 6f 43 72 65 61 | 74 65 44 65 76 69 63 65 |..IoCrea|teDevice|
|00000f00| 00 00 d0 02 52 74 6c 49 | 6e 69 74 55 6e 69 63 6f |....RtlI|nitUnico|
|00000f10| 64 65 53 74 72 69 6e 67 | 00 00 45 01 49 6f 66 43 |deString|..E.IofC|
|00000f20| 6f 6d 70 6c 65 74 65 52 | 65 71 75 65 73 74 00 00 |ompleteR|equest..|
|00000f30| fc 00 49 6f 44 65 6c 65 | 74 65 53 79 6d 62 6f 6c |..IoDele|teSymbol|
|00000f40| 69 63 4c 69 6e 6b 00 00 | 5b 03 5a 77 43 6c 6f 73 |icLink..|[.ZwClos|
|00000f50| 65 00 44 02 4f 62 66 44 | 65 72 65 66 65 72 65 6e |e.D.ObfD|ereferen|
|00000f60| 63 65 4f 62 6a 65 63 74 | 00 00 3f 02 4f 62 52 65 |ceObject|..?.ObRe|
|00000f70| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 48 |ferenceO|bjectByH|
|00000f80| 61 6e 64 6c 65 00 60 03 | 5a 77 43 72 65 61 74 65 |andle.`.|ZwCreate|
|00000f90| 46 69 6c 65 00 00 c0 02 | 52 74 6c 46 72 65 65 41 |File....|RtlFreeA|
|00000fa0| 6e 73 69 53 74 72 69 6e | 67 00 0f 03 52 74 6c 55 |nsiStrin|g...RtlU|
|00000fb0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 41 6e |nicodeSt|ringToAn|
|00000fc0| 73 69 53 74 72 69 6e 67 | 00 00 3d 02 4f 62 51 75 |siString|..=.ObQu|
|00000fd0| 65 72 79 4e 61 6d 65 53 | 74 72 69 6e 67 00 59 01 |eryNameS|tring.Y.|
|00000fe0| 4b 65 44 65 74 61 63 68 | 50 72 6f 63 65 73 73 00 |KeDetach|Process.|
|00000ff0| 4f 01 4b 65 41 74 74 61 | 63 68 50 72 6f 63 65 73 |O.KeAtta|chProces|
|00001000| 73 00 6e 74 6f 73 6b 72 | 6e 6c 2e 65 78 65 00 00 |s.ntoskr|nl.exe..|
|00001010| 18 03 52 74 6c 55 6e 77 | 69 6e 64 00 00 00 00 00 |..RtlUnw|ind.....|
|00001020| 00 00 00 00 98 00 00 00 | 0c 33 10 33 1c 33 20 33 |........|.3.3.3 3|
|00001030| 2c 33 30 33 38 33 3c 33 | 44 33 48 33 52 33 57 33 |,30383<3|D3H3R3W3|
|00001040| be 33 c3 33 68 34 c3 34 | d2 34 dd 34 e4 34 eb 34 |.3.3h4.4|.4.4.4.4|
|00001050| f2 34 09 35 15 35 3b 35 | 4a 35 72 35 97 35 d3 35 |.4.5.5;5|J5r5.5.5|
|00001060| da 35 e4 35 f0 35 2c 36 | 40 36 67 36 a5 36 bb 36 |.5.5.5,6|@6g6.6.6|
|00001070| cd 36 d6 36 e4 36 fc 36 | 01 37 b3 37 ec 37 56 38 |.6.6.6.6|.7.7.7V8|
|00001080| 77 38 b9 38 d0 39 f1 39 | fd 39 06 3a e8 3a 05 3b |w8.8.9.9|.9.:.:.;|
|00001090| 12 3b 17 3b 61 3b 85 3b | bc 3b e0 3b 21 3c 7c 3c |.;.;a;.;|.;.;!<|<|
|000010a0| 68 3d 6e 3d 74 3d 7a 3d | 80 3d 84 3d 88 3d 8c 3d |h=n=t=z=|.=.=.=.=|
|000010b0| 90 3d 94 3d 98 3d 9c 3d | 00 00 00 00 00 00 00 00 |.=.=.=.=|........|
|000010c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000010f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001100| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001110| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001120| 62 00 00 00 20 00 00 00 | 00 00 00 00 00 00 00 00 |b... ...|........|
|00001130| 60 02 00 00 60 0f 00 00 | 80 0d 00 00 20 04 00 00 |`...`...|.... ...|
|00001140| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00001150| 03 00 24 54 36 33 33 39 | 00 00 08 03 00 00 01 00 |..$T6339|........|
|00001160| 00 00 03 00 24 54 36 33 | 36 36 00 00 18 03 00 00 |....$T63|66......|
|00001170| 01 00 00 00 03 00 24 53 | 47 36 30 34 33 00 90 04 |......$S|G6043...|
|00001180| 00 00 01 00 00 00 03 00 | 24 53 47 36 30 33 37 00 |........|$SG6037.|
|00001190| 6c 04 00 00 01 00 00 00 | 03 00 24 53 47 36 30 36 |l.......|..$SG606|
|000011a0| 38 00 a0 05 00 00 01 00 | 00 00 03 00 24 53 47 36 |8.......|....$SG6|
|000011b0| 31 30 32 00 f8 05 00 00 | 01 00 00 00 03 00 24 54 |102.....|......$T|
|000011c0| 36 34 33 32 00 00 28 03 | 00 00 01 00 00 00 03 00 |6432..(.|........|
|000011d0| 24 54 36 34 35 37 00 00 | 40 03 00 00 01 00 00 00 |$T6457..|@.......|
|000011e0| 03 00 2e 69 64 61 74 61 | 24 36 02 10 00 00 03 00 |...idata|$6......|
|000011f0| 00 00 03 00 2e 74 65 78 | 74 00 00 00 94 0c 00 00 |.....tex|t.......|
|00001200| 01 00 00 00 03 01 d1 00 | 00 00 04 00 47 00 00 00 |........|....G...|
|00001210| 00 00 00 00 00 00 00 00 | 24 24 24 30 30 30 30 31 |........|$$$00001|
|00001220| 9c 0c 00 00 01 00 20 00 | 03 01 0e 00 00 00 00 00 |...... .|........|
|00001230| 00 00 ae 01 00 00 13 00 | 00 00 00 00 24 24 24 30 |........|....$$$0|
|00001240| 30 30 30 34 65 0d 00 00 | 01 00 20 00 03 01 23 00 |0004e...|.. ...#.|
|00001250| 00 00 00 00 00 00 52 03 | 00 00 00 00 00 00 00 00 |......R.|........|
|00001260| 00 00 00 00 fb 06 00 00 | 14 0d 00 00 01 00 00 00 |........|........|
|00001270| 03 00 00 00 00 00 08 07 | 00 00 1f 0d 00 00 01 00 |........|........|
|00001280| 00 00 03 00 00 00 00 00 | 14 07 00 00 42 0d 00 00 |........|....B...|
|00001290| 01 00 00 00 03 00 5f 6c | 68 5f 74 6f 70 00 cb 0c |......_l|h_top...|
|000012a0| 00 00 01 00 00 00 03 00 | 00 00 00 00 1f 07 00 00 |........|........|
|000012b0| 26 0d 00 00 01 00 00 00 | 03 00 00 00 00 00 29 07 |&.......|......).|
|000012c0| 00 00 2d 0d 00 00 01 00 | 00 00 03 00 2e 74 65 78 |..-.....|.....tex|
|000012d0| 74 00 00 00 d4 0b 00 00 | 01 00 00 00 03 01 bf 00 |t.......|........|
|000012e0| 00 00 04 00 3d 00 00 00 | 00 00 00 00 00 00 00 00 |....=...|........|
|000012f0| 00 00 00 00 37 07 00 00 | ec 0b 00 00 01 00 00 00 |....7...|........|
|00001300| 03 00 24 24 24 30 30 30 | 30 31 d4 0b 00 00 01 00 |..$$$000|01......|
|00001310| 20 00 03 01 0f 00 00 00 | 00 00 00 00 9c 01 00 00 | .......|........|
|00001320| 14 00 00 00 00 00 24 24 | 24 30 30 30 30 33 f4 0b |......$$|$00003..|
|00001330| 00 00 01 00 20 00 03 01 | 1d 00 00 00 00 00 00 00 |.... ...|........|
|00001340| cc 01 00 00 22 00 00 00 | 00 00 00 00 00 00 42 07 |...."...|......B.|
|00001350| 00 00 f4 0b 00 00 01 00 | 20 00 03 01 24 00 00 00 |........| ...$...|
|00001360| 22 00 00 00 d2 01 00 00 | 29 00 00 00 00 00 24 24 |".......|).....$$|
|00001370| 24 30 30 30 30 35 16 0c | 00 00 01 00 20 00 03 01 |$00005..|.... ...|
|00001380| 2b 00 00 00 00 00 00 00 | 08 02 00 00 30 00 00 00 |+.......|....0...|
|00001390| 00 00 24 24 24 30 30 30 | 30 37 70 0c 00 00 01 00 |..$$$000|07p.....|
|000013a0| 20 00 03 01 39 00 00 00 | 00 00 00 00 c2 02 00 00 | ...9...|........|
|000013b0| 3e 00 00 00 00 00 24 24 | 24 30 30 30 30 39 93 0c |>.....$$|$00009..|
|000013c0| 00 00 01 00 20 00 03 01 | 47 00 00 00 00 00 00 00 |.... ...|G.......|
|000013d0| 04 03 00 00 00 00 00 00 | 00 00 5f 6c 75 5f 64 6f |........|.._lu_do|
|000013e0| 6e 65 62 0c 00 00 01 00 | 00 00 03 00 00 00 00 00 |neb.....|........|
|000013f0| 53 07 00 00 15 0c 00 00 | 01 00 00 00 03 00 00 00 |S.......|........|
|00001400| 00 00 5e 07 00 00 60 0c | 00 00 01 00 00 00 03 00 |..^...`.|........|
|00001410| 5f 6c 75 5f 74 6f 70 00 | 33 0c 00 00 01 00 00 00 |_lu_top.|3.......|
|00001420| 03 00 5f 61 74 5f 64 6f | 6e 65 92 0c 00 00 01 00 |.._at_do|ne......|
|00001430| 00 00 03 00 68 65 61 64 | 65 72 00 00 00 00 00 00 |....head|er......|
|00001440| fe ff 00 00 02 00 00 00 | 00 00 87 02 00 00 00 00 |........|........|
|00001450| 00 00 ff ff 00 00 02 00 | 00 00 00 00 9f 03 00 00 |........|........|
|00001460| 60 02 00 00 01 00 00 00 | 02 00 00 00 00 00 db 02 |`.......|........|
|00001470| 00 00 64 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |..d.....|........|
|00001480| f8 02 00 00 68 02 00 00 | 01 00 00 00 02 00 00 00 |....h...|........|
|00001490| 00 00 10 03 00 00 6c 02 | 00 00 01 00 00 00 02 00 |......l.|........|
|000014a0| 00 00 00 00 2e 03 00 00 | 70 02 00 00 01 00 00 00 |........|p.......|
|000014b0| 02 00 00 00 00 00 47 03 | 00 00 74 02 00 00 01 00 |......G.|..t.....|
|000014c0| 00 00 02 00 00 00 00 00 | 65 03 00 00 78 02 00 00 |........|e...x...|
|000014d0| 01 00 00 00 02 00 00 00 | 00 00 81 03 00 00 7c 02 |........|......|.|
|000014e0| 00 00 01 00 00 00 02 00 | 00 00 00 00 b0 03 00 00 |........|........|
|000014f0| 80 02 00 00 01 00 00 00 | 02 00 00 00 00 00 ce 03 |........|........|
|00001500| 00 00 84 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00001510| f2 03 00 00 88 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00001520| 00 00 09 04 00 00 8c 02 | 00 00 01 00 00 00 02 00 |........|........|
|00001530| 00 00 00 00 24 04 00 00 | 90 02 00 00 01 00 00 00 |....$...|........|
|00001540| 02 00 00 00 00 00 66 06 | 00 00 94 02 00 00 01 00 |......f.|........|
|00001550| 00 00 02 00 00 00 00 00 | 82 06 00 00 98 02 00 00 |........|........|
|00001560| 01 00 00 00 02 00 00 00 | 00 00 9b 06 00 00 9c 02 |........|........|
|00001570| 00 00 01 00 00 00 02 00 | 00 00 00 00 e7 06 00 00 |........|........|
|00001580| a0 02 00 00 01 00 00 00 | 02 00 00 00 00 00 cd 06 |........|........|
|00001590| 00 00 a4 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|000015a0| 2e 00 00 00 4c 03 00 00 | 01 00 20 00 02 00 00 00 |....L...|.. .....|
|000015b0| 00 00 4c 00 00 00 b8 03 | 00 00 01 00 20 00 02 00 |..L.....|.... ...|
|000015c0| 00 00 00 00 7f 00 00 00 | 26 04 00 00 01 00 20 00 |........|&..... .|
|000015d0| 02 00 00 00 00 00 d4 00 | 00 00 54 04 00 00 01 00 |........|..T.....|
|000015e0| 20 00 02 00 00 00 00 00 | c3 00 00 00 54 04 00 00 | .......|....T...|
|000015f0| 01 00 20 00 02 00 00 00 | 00 00 fd 00 00 00 66 04 |.. .....|......f.|
|00001600| 00 00 01 00 20 00 02 00 | 00 00 00 00 04 00 00 00 |.... ...|........|
|00001610| ba 04 00 00 01 00 20 00 | 02 00 00 00 00 00 0f 01 |...... .|........|
|00001620| 00 00 58 05 00 00 01 00 | 20 00 02 00 00 00 00 00 |..X.....| .......|
|00001630| 1d 01 00 00 7c 05 00 00 | 01 00 20 00 02 00 00 00 |....|...|.. .....|
|00001640| 00 00 2c 01 00 00 ca 05 | 00 00 01 00 20 00 02 00 |..,.....|.... ...|
|00001650| 00 00 00 00 3c 01 00 00 | 16 06 00 00 01 00 20 00 |....<...|...... .|
|00001660| 02 00 00 00 00 00 5b 01 | 00 00 f6 06 00 00 01 00 |......[.|........|
|00001670| 20 00 02 00 00 00 00 00 | 72 01 00 00 1c 0a 00 00 | .......|r.......|
|00001680| 01 00 20 00 02 00 00 00 | 00 00 8e 01 00 00 a8 0a |.. .....|........|
|00001690| 00 00 01 00 20 00 02 00 | 00 00 00 00 9a 01 00 00 |.... ...|........|
|000016a0| ac 0a 00 00 01 00 20 00 | 02 00 00 00 00 00 ad 01 |...... .|........|
|000016b0| 00 00 c0 0a 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|000016c0| bf 01 00 00 d2 0a 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|000016d0| 00 00 d5 01 00 00 f0 0a | 00 00 01 00 20 00 02 00 |........|.... ...|
|000016e0| 00 00 00 00 eb 01 00 00 | 0c 0b 00 00 01 00 20 00 |........|...... .|
|000016f0| 02 00 00 00 00 00 cd 04 | 00 00 d4 0b 00 00 01 00 |........|........|
|00001700| 20 00 02 00 00 00 00 00 | de 04 00 00 16 0c 00 00 | .......|........|
|00001710| 01 00 20 00 02 00 00 00 | 00 00 ee 04 00 00 70 0c |.. .....|......p.|
|00001720| 00 00 01 00 20 00 02 00 | 00 00 00 00 95 02 00 00 |.... ...|........|
|00001730| 9c 0c 00 00 01 00 20 00 | 02 00 00 00 00 00 05 05 |...... .|........|
|00001740| 00 00 4a 0d 00 00 01 00 | 20 00 02 00 00 00 00 00 |..J.....| .......|
|00001750| 4b 04 00 00 66 0d 00 00 | 01 00 20 00 02 00 00 00 |K...f...|.. .....|
|00001760| 00 00 61 04 00 00 6c 0d | 00 00 01 00 20 00 02 00 |..a...l.|.... ...|
|00001770| 00 00 00 00 74 04 00 00 | 72 0d 00 00 01 00 20 00 |....t...|r..... .|
|00001780| 02 00 00 00 00 00 bf 04 | 00 00 78 0d 00 00 01 00 |........|..x.....|
|00001790| 20 00 02 00 00 00 00 00 | 3f 02 00 00 80 0d 00 00 | .......|?.......|
|000017a0| 02 00 00 00 02 00 00 00 | 00 00 27 02 00 00 8c 0d |........|..'.....|
|000017b0| 00 00 02 00 00 00 02 00 | 00 00 00 00 16 02 00 00 |........|........|
|000017c0| 90 0d 00 00 02 00 00 00 | 02 00 00 00 00 00 02 02 |........|........|
|000017d0| 00 00 a0 0d 00 00 02 00 | 00 00 02 00 00 00 00 00 |........|........|
|000017e0| 57 02 00 00 c0 0d 00 00 | 02 00 00 00 02 00 00 00 |W.......|........|
|000017f0| 00 00 a2 04 00 00 40 0e | 00 00 03 00 00 00 02 00 |......@.|........|
|00001800| 00 00 00 00 b4 06 00 00 | 54 0e 00 00 03 00 00 00 |........|T.......|
|00001810| 02 00 65 6e 64 00 00 00 | 00 00 20 11 00 00 fe ff |..end...|.. .....|
|00001820| 00 00 02 00 6b 07 00 00 | 5f 44 72 69 76 65 72 45 |....k...|_DriverE|
|00001830| 6e 74 72 79 40 38 00 5f | 53 79 73 44 70 53 6c 65 |ntry@8._|SysDpSle|
|00001840| 65 70 4f 6e 40 34 00 5f | 6d 75 6c 64 69 76 40 31 |epOn@4._|muldiv@1|
|00001850| 32 00 5f 46 52 57 44 53 | 74 72 63 70 79 6e 40 31 |2._FRWDS|trcpyn@1|
|00001860| 32 00 5f 46 52 57 44 53 | 74 72 6c 65 6e 40 34 00 |2._FRWDS|trlen@4.|
|00001870| 5f 46 52 57 44 57 53 74 | 72 63 70 79 6e 40 31 32 |_FRWDWSt|rcpyn@12|
|00001880| 00 5f 46 52 57 44 57 53 | 74 72 6c 65 6e 40 34 00 |._FRWDWS|trlen@4.|
|00001890| 5f 46 52 57 44 43 6f 70 | 79 4d 65 6d 6f 72 79 40 |_FRWDCop|yMemory@|
|000018a0| 31 32 00 5f 46 52 57 44 | 46 69 6c 6c 4d 65 6d 6f |12._FRWD|FillMemo|
|000018b0| 72 79 40 31 32 00 5f 46 | 52 57 44 5a 65 72 6f 4d |ry@12._F|RWDZeroM|
|000018c0| 65 6d 6f 72 79 40 38 00 | 5f 46 52 57 44 46 72 65 |emory@8.|_FRWDFre|
|000018d0| 65 4d 65 6d 40 34 00 5f | 46 52 57 44 41 6c 6c 6f |eMem@4._|FRWDAllo|
|000018e0| 63 4d 65 6d 40 34 00 5f | 47 65 74 56 61 6c 75 65 |cMem@4._|GetValue|
|000018f0| 50 61 72 61 6d 40 38 00 | 5f 47 65 74 50 6f 69 6e |Param@8.|_GetPoin|
|00001900| 74 65 72 50 61 72 61 6d | 40 38 00 5f 67 65 74 5f |terParam|@8._get_|
|00001910| 63 75 72 72 65 6e 74 5f | 74 68 72 65 61 64 40 34 |current_|thread@4|
|00001920| 00 5f 47 65 74 43 75 72 | 72 50 72 6f 63 65 73 73 |._GetCur|rProcess|
|00001930| 40 30 00 5f 54 53 4b 49 | 4e 46 4f 70 65 6e 40 38 |@0._TSKI|NFOpen@8|
|00001940| 00 5f 54 53 4b 49 4e 46 | 43 6c 6f 73 65 40 38 00 |._TSKINF|Close@8.|
|00001950| 5f 54 53 4b 49 4e 46 55 | 6e 6c 6f 61 64 40 34 00 |_TSKINFU|nload@4.|
|00001960| 5f 73 79 73 5f 70 72 65 | 70 61 72 65 5f 6c 6f 67 |_sys_pre|pare_log|
|00001970| 69 63 61 6c 5f 64 72 69 | 76 65 72 73 40 34 00 5f |ical_dri|vers@4._|
|00001980| 73 79 73 5f 67 65 74 5f | 6f 62 6a 65 63 74 5f 6e |sys_get_|object_n|
|00001990| 61 6d 65 40 34 00 5f 73 | 79 73 5f 67 65 74 5f 70 |ame@4._s|ys_get_p|
|000019a0| 72 6f 63 65 73 73 5f 63 | 6f 75 6e 74 65 72 73 40 |rocess_c|ounters@|
|000019b0| 34 00 5f 76 64 63 5f 74 | 65 73 74 40 34 00 5f 76 |4._vdc_t|est@4._v|
|000019c0| 64 63 5f 67 65 74 5f 76 | 65 72 73 69 6f 6e 40 34 |dc_get_v|ersion@4|
|000019d0| 00 5f 76 64 63 5f 67 65 | 74 5f 73 74 61 74 75 73 |._vdc_ge|t_status|
|000019e0| 40 34 00 5f 76 64 63 5f | 75 73 65 72 5f 66 75 6e |@4._vdc_|user_fun|
|000019f0| 63 74 69 6f 6e 73 40 34 | 00 5f 76 64 63 5f 74 65 |ctions@4|._vdc_te|
|00001a00| 73 74 5f 66 75 6e 63 74 | 69 6f 6e 73 40 34 00 5f |st_funct|ions@4._|
|00001a10| 54 53 4b 49 4e 46 44 65 | 76 69 63 65 43 6f 6e 74 |TSKINFDe|viceCont|
|00001a20| 72 6f 6c 40 38 00 5f 4d | 41 58 5f 54 53 4b 49 4e |rol@8._M|AX_TSKIN|
|00001a30| 46 5f 57 33 32 5f 41 50 | 49 00 5f 54 53 4b 49 4e |F_W32_AP|I._TSKIN|
|00001a40| 46 5f 57 33 32 5f 50 72 | 6f 63 00 5f 54 41 53 4b |F_W32_Pr|oc._TASK|
|00001a50| 49 4e 46 4f 5f 57 33 32 | 5f 54 65 73 74 5f 50 72 |INFO_W32|_Test_Pr|
|00001a60| 6f 63 00 5f 54 41 53 4b | 49 4e 46 4f 5f 57 33 32 |oc._TASK|INFO_W32|
|00001a70| 5f 55 73 65 72 5f 50 72 | 6f 63 00 5f 4c 6f 67 69 |_User_Pr|oc._Logi|
|00001a80| 63 61 6c 44 72 69 76 65 | 73 00 5f 5f 69 6d 70 5f |calDrive|s.__imp_|
|00001a90| 5f 4b 65 44 65 6c 61 79 | 45 78 65 63 75 74 69 6f |_KeDelay|Executio|
|00001aa0| 6e 54 68 72 65 61 64 40 | 31 32 00 5f 5f 65 78 63 |nThread@|12.__exc|
|00001ab0| 65 70 74 5f 6c 69 73 74 | 00 5f 5f 65 78 63 65 70 |ept_list|.__excep|
|00001ac0| 74 5f 68 61 6e 64 6c 65 | 72 33 00 5f 5f 69 6d 70 |t_handle|r3.__imp|
|00001ad0| 5f 5f 45 78 46 72 65 65 | 50 6f 6f 6c 40 34 00 5f |__ExFree|Pool@4._|
|00001ae0| 5f 69 6d 70 5f 5f 45 78 | 41 6c 6c 6f 63 61 74 65 |_imp__Ex|Allocate|
|00001af0| 50 6f 6f 6c 57 69 74 68 | 54 61 67 40 31 32 00 5f |PoolWith|Tag@12._|
|00001b00| 5f 69 6d 70 5f 5f 49 6f | 47 65 74 43 75 72 72 65 |_imp__Io|GetCurre|
|00001b10| 6e 74 50 72 6f 63 65 73 | 73 40 30 00 5f 5f 69 6d |ntProces|s@0.__im|
|00001b20| 70 5f 5f 49 6f 44 65 6c | 65 74 65 44 65 76 69 63 |p__IoDel|eteDevic|
|00001b30| 65 40 34 00 5f 5f 69 6d | 70 5f 5f 49 6f 43 72 65 |e@4.__im|p__IoCre|
|00001b40| 61 74 65 53 79 6d 62 6f | 6c 69 63 4c 69 6e 6b 40 |ateSymbo|licLink@|
|00001b50| 38 00 5f 5f 69 6d 70 5f | 5f 49 6f 43 72 65 61 74 |8.__imp_|_IoCreat|
|00001b60| 65 44 65 76 69 63 65 40 | 32 38 00 5f 5f 69 6d 70 |eDevice@|28.__imp|
|00001b70| 5f 5f 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |__RtlIni|tUnicode|
|00001b80| 53 74 72 69 6e 67 40 38 | 00 5f 5f 69 6d 70 5f 40 |String@8|.__imp_@|
|00001b90| 49 6f 66 43 6f 6d 70 6c | 65 74 65 52 65 71 75 65 |IofCompl|eteReque|
|00001ba0| 73 74 40 38 00 5f 5f 69 | 6d 70 5f 5f 49 6f 44 65 |st@8.__i|mp__IoDe|
|00001bb0| 6c 65 74 65 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |leteSymb|olicLink|
|00001bc0| 40 34 00 5f 5f 69 6d 70 | 5f 5f 5a 77 43 6c 6f 73 |@4.__imp|__ZwClos|
|00001bd0| 65 40 34 00 5f 5f 69 6d | 70 5f 40 4f 62 66 44 65 |e@4.__im|p_@ObfDe|
|00001be0| 72 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 40 |referenc|eObject@|
|00001bf0| 34 00 5f 5f 69 6d 70 5f | 5f 4f 62 52 65 66 65 72 |4.__imp_|_ObRefer|
|00001c00| 65 6e 63 65 4f 62 6a 65 | 63 74 42 79 48 61 6e 64 |enceObje|ctByHand|
|00001c10| 6c 65 40 32 34 00 5f 5f | 69 6d 70 5f 5f 5a 77 43 |le@24.__|imp__ZwC|
|00001c20| 72 65 61 74 65 46 69 6c | 65 40 34 34 00 5f 5f 69 |reateFil|e@44.__i|
|00001c30| 6d 70 5f 5f 52 74 6c 46 | 72 65 65 41 6e 73 69 53 |mp__RtlF|reeAnsiS|
|00001c40| 74 72 69 6e 67 40 34 00 | 5f 5f 69 6d 70 5f 5f 52 |tring@4.|__imp__R|
|00001c50| 74 6c 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 54 |tlUnicod|eStringT|
|00001c60| 6f 41 6e 73 69 53 74 72 | 69 6e 67 40 31 32 00 5f |oAnsiStr|ing@12._|
|00001c70| 4f 62 51 75 65 72 79 4e | 61 6d 65 53 74 72 69 6e |ObQueryN|ameStrin|
|00001c80| 67 40 31 36 00 5f 4b 65 | 44 65 74 61 63 68 50 72 |g@16._Ke|DetachPr|
|00001c90| 6f 63 65 73 73 40 30 00 | 5f 4b 65 41 74 74 61 63 |ocess@0.|_KeAttac|
|00001ca0| 68 50 72 6f 63 65 73 73 | 40 34 00 5f 4b 65 44 65 |hProcess|@4._KeDe|
|00001cb0| 6c 61 79 45 78 65 63 75 | 74 69 6f 6e 54 68 72 65 |layExecu|tionThre|
|00001cc0| 61 64 40 31 32 00 5f 5f | 49 4d 50 4f 52 54 5f 44 |ad@12.__|IMPORT_D|
|00001cd0| 45 53 43 52 49 50 54 4f | 52 5f 6e 74 6f 73 6b 72 |ESCRIPTO|R_ntoskr|
|00001ce0| 6e 6c 00 5f 52 74 6c 55 | 6e 77 69 6e 64 40 31 36 |nl._RtlU|nwind@16|
|00001cf0| 00 5f 5f 67 6c 6f 62 61 | 6c 5f 75 6e 77 69 6e 64 |.__globa|l_unwind|
|00001d00| 32 00 5f 5f 6c 6f 63 61 | 6c 5f 75 6e 77 69 6e 64 |2.__loca|l_unwind|
|00001d10| 32 00 5f 5f 61 62 6e 6f | 72 6d 61 6c 5f 74 65 72 |2.__abno|rmal_ter|
|00001d20| 6d 69 6e 61 74 69 6f 6e | 00 5f 5f 73 65 68 5f 6c |mination|.__seh_l|
|00001d30| 6f 6e 67 6a 6d 70 5f 75 | 6e 77 69 6e 64 40 34 00 |ongjmp_u|nwind@4.|
|00001d40| 5f 45 78 46 72 65 65 50 | 6f 6f 6c 40 34 00 5f 45 |_ExFreeP|ool@4._E|
|00001d50| 78 41 6c 6c 6f 63 61 74 | 65 50 6f 6f 6c 57 69 74 |xAllocat|ePoolWit|
|00001d60| 68 54 61 67 40 31 32 00 | 5f 49 6f 47 65 74 43 75 |hTag@12.|_IoGetCu|
|00001d70| 72 72 65 6e 74 50 72 6f | 63 65 73 73 40 30 00 5f |rrentPro|cess@0._|
|00001d80| 49 6f 44 65 6c 65 74 65 | 44 65 76 69 63 65 40 34 |IoDelete|Device@4|
|00001d90| 00 5f 49 6f 43 72 65 61 | 74 65 53 79 6d 62 6f 6c |._IoCrea|teSymbol|
|00001da0| 69 63 4c 69 6e 6b 40 38 | 00 5f 49 6f 43 72 65 61 |icLink@8|._IoCrea|
|00001db0| 74 65 44 65 76 69 63 65 | 40 32 38 00 5f 52 74 6c |teDevice|@28._Rtl|
|00001dc0| 49 6e 69 74 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |InitUnic|odeStrin|
|00001dd0| 67 40 38 00 40 49 6f 66 | 43 6f 6d 70 6c 65 74 65 |g@8.@Iof|Complete|
|00001de0| 52 65 71 75 65 73 74 40 | 38 00 5f 49 6f 44 65 6c |Request@|8._IoDel|
|00001df0| 65 74 65 53 79 6d 62 6f | 6c 69 63 4c 69 6e 6b 40 |eteSymbo|licLink@|
|00001e00| 34 00 5f 5a 77 43 6c 6f | 73 65 40 34 00 40 4f 62 |4._ZwClo|se@4.@Ob|
|00001e10| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|00001e20| 63 74 40 34 00 5f 4f 62 | 52 65 66 65 72 65 6e 63 |ct@4._Ob|Referenc|
|00001e30| 65 4f 62 6a 65 63 74 42 | 79 48 61 6e 64 6c 65 40 |eObjectB|yHandle@|
|00001e40| 32 34 00 5f 5a 77 43 72 | 65 61 74 65 46 69 6c 65 |24._ZwCr|eateFile|
|00001e50| 40 34 34 00 5f 52 74 6c | 46 72 65 65 41 6e 73 69 |@44._Rtl|FreeAnsi|
|00001e60| 53 74 72 69 6e 67 40 34 | 00 5f 52 74 6c 55 6e 69 |String@4|._RtlUni|
|00001e70| 63 6f 64 65 53 74 72 69 | 6e 67 54 6f 41 6e 73 69 |codeStri|ngToAnsi|
|00001e80| 53 74 72 69 6e 67 40 31 | 32 00 5f 5f 69 6d 70 5f |String@1|2.__imp_|
|00001e90| 5f 4f 62 51 75 65 72 79 | 4e 61 6d 65 53 74 72 69 |_ObQuery|NameStri|
|00001ea0| 6e 67 40 31 36 00 5f 5f | 69 6d 70 5f 5f 4b 65 44 |ng@16.__|imp__KeD|
|00001eb0| 65 74 61 63 68 50 72 6f | 63 65 73 73 40 30 00 5f |etachPro|cess@0._|
|00001ec0| 5f 69 6d 70 5f 5f 4b 65 | 41 74 74 61 63 68 50 72 |_imp__Ke|AttachPr|
|00001ed0| 6f 63 65 73 73 40 34 00 | 5f 5f 4e 55 4c 4c 5f 49 |ocess@4.|__NULL_I|
|00001ee0| 4d 50 4f 52 54 5f 44 45 | 53 43 52 49 50 54 4f 52 |MPORT_DE|SCRIPTOR|
|00001ef0| 00 7f 6e 74 6f 73 6b 72 | 6e 6c 5f 4e 55 4c 4c 5f |..ntoskr|nl_NULL_|
|00001f00| 54 48 55 4e 4b 5f 44 41 | 54 41 00 5f 5f 69 6d 70 |THUNK_DA|TA.__imp|
|00001f10| 5f 5f 52 74 6c 55 6e 77 | 69 6e 64 40 31 36 00 5f |__RtlUnw|ind@16._|
|00001f20| 6c 68 5f 63 6f 6e 74 69 | 6e 75 65 00 5f 6c 68 5f |lh_conti|nue._lh_|
|00001f30| 64 69 73 6d 69 73 73 00 | 5f 6c 68 5f 72 65 74 75 |dismiss.|_lh_retu|
|00001f40| 72 6e 00 5f 6c 68 5f 62 | 61 67 69 74 00 5f 6c 68 |rn._lh_b|agit._lh|
|00001f50| 5f 75 6e 77 69 6e 64 69 | 6e 67 00 5f 67 75 5f 72 |_unwindi|ng._gu_r|
|00001f60| 65 74 75 72 6e 00 5f 5f | 75 6e 77 69 6e 64 5f 68 |eturn.__|unwind_h|
|00001f70| 61 6e 64 6c 65 72 00 5f | 75 68 5f 72 65 74 75 72 |andler._|uh_retur|
|00001f80| 6e 00 5f 6c 75 5f 63 6f | 6e 74 69 6e 75 65 00 00 |n._lu_co|ntinue..|
|00001f90| 01 00 00 00 10 01 00 00 | 00 00 00 00 62 69 6e 5c |........|....bin\|
|00001fa0| 69 33 38 36 5c 66 72 65 | 65 5c 54 73 6b 49 6e 66 |i386\fre|e\TskInf|
|00001fb0| 32 31 2e 73 79 73 00 00 | 00 00 00 00 00 00 00 00 |21.sys..|........|
|00001fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002000| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002010| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002030| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002060| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002070| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002080| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002090| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000020a0| 4c 03 00 00 6b 00 00 00 | 08 00 00 00 03 00 26 d3 |L...k...|......&.|
|000020b0| b8 03 00 00 6e 00 00 00 | 08 00 00 00 03 00 26 d3 |....n...|......&.|
|000020c0| 26 04 00 00 2e 00 00 00 | 00 00 00 00 03 00 00 02 |&.......|........|
|000020d0| 54 04 00 00 11 00 00 00 | 00 00 00 00 02 00 00 00 |T.......|........|
|000020e0| 54 04 00 00 11 00 00 00 | 00 00 00 00 02 00 00 00 |T.......|........|
|000020f0| 66 04 00 00 06 00 00 00 | 00 00 00 00 00 00 00 00 |f.......|........|
|00002100| ba 04 00 00 9d 00 00 00 | 06 00 00 00 02 00 12 d3 |........|........|
|00002110| 58 05 00 00 23 00 00 00 | 00 00 00 00 02 00 00 00 |X...#...|........|
|00002120| 7c 05 00 00 24 00 00 00 | 00 00 00 00 02 00 00 00 ||...$...|........|
|00002130| ca 05 00 00 2e 00 00 00 | 03 00 00 00 01 00 05 d0 |........|........|
|00002140| 16 06 00 00 df 00 00 00 | 15 00 00 00 01 00 09 d3 |........|........|
|00002150| f6 06 00 00 25 03 00 00 | 1e 02 00 00 01 00 29 d3 |....%...|......).|
|00002160| 1c 0a 00 00 8b 00 00 00 | 0b 00 00 00 01 00 09 d3 |........|........|
|00002170| a8 0a 00 00 03 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00002180| ac 0a 00 00 14 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|00002190| c0 0a 00 00 11 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|000021a0| d2 0a 00 00 1d 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|000021b0| f0 0a 00 00 1c 00 00 00 | 00 00 00 00 01 00 00 00 |........|........|
|000021c0| 0c 0b 00 00 c7 00 00 00 | 12 00 00 00 02 00 26 d3 |........|......&.|
+--------+-------------------------+-------------------------+--------+--------+