home *** CD-ROM | disk | FTP | other *** search
Unknown | 2002-08-29 | 4.6 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 55 8b ec 83 ec 0c 53 56 | 57 68 21 10 00 00 e8 21 |U.....SV|Wh!....!|
|00000010| f4 ff ff 33 c0 6a 1c 59 | bf 80 2f 01 00 f3 ab a1 |...3.j.Y|../.....|
|00000020| 58 26 01 00 a3 88 2f 01 | 00 33 c0 6a 35 59 33 f6 |X&..../.|.3.j5Y3.|
|00000030| bf 00 30 01 00 f3 ab 8b | 45 08 a3 04 30 01 00 8b |..0.....|E...0...|
|00000040| 45 0c c7 05 80 2f 01 00 | 70 00 00 00 c7 05 ac 2f |E..../..|p....../|
|00000050| 01 00 18 b0 01 00 c7 05 | b0 2f 01 00 44 b0 01 00 |........|./..D...|
|00000060| c7 05 84 2f 01 00 00 ce | 01 00 89 35 90 2f 01 00 |.../....|...5./..|
|00000070| 89 35 94 2f 01 00 89 35 | 98 2f 01 00 89 35 9c 2f |.5./...5|./...5./|
|00000080| 01 00 89 35 a0 2f 01 00 | 89 35 a4 2f 01 00 89 35 |...5./..|.5./...5|
|00000090| b8 2f 01 00 66 c7 05 00 | 30 01 00 01 09 66 c7 05 |./..f...|0....f..|
|000000a0| 02 30 01 00 d4 00 8b 08 | 89 0d 1c 30 01 00 8b 40 |.0......|...0...@|
|000000b0| 04 a3 20 30 01 00 b8 08 | 30 01 00 68 6c 30 01 00 |.. 0....|0..hl0..|
|000000c0| a3 0c 30 01 00 a3 08 30 | 01 00 ff 15 0c 26 01 00 |..0....0|.....&..|
|000000d0| b8 f6 af 01 00 a3 a8 30 | 01 00 a3 b0 30 01 00 b8 |.......0|....0...|
|000000e0| 14 b0 01 00 a3 b8 30 01 | 00 a3 c0 30 01 00 33 c0 |......0.|...0..3.|
|000000f0| b9 da af 01 00 40 56 89 | 0d a4 30 01 00 89 0d ac |.....@V.|..0.....|
|00000100| 30 01 00 b9 0e b0 01 00 | 50 68 58 30 01 00 89 0d |0.......|PhX0....|
|00000110| b4 30 01 00 89 0d bc 30 | 01 00 a3 4c 30 01 00 89 |.0.....0|...L0...|
|00000120| 35 50 30 01 00 89 35 54 | 30 01 00 ff 15 40 25 01 |5P0...5T|0....@%.|
|00000130| 00 b8 24 30 01 00 a3 28 | 30 01 00 a3 24 30 01 00 |..$0...(|0...$0..|
|00000140| b8 34 30 01 00 a3 38 30 | 01 00 a3 34 30 01 00 c7 |.40...80|...40...|
|00000150| 05 cc 30 01 00 bc 08 01 | 00 89 35 d0 30 01 00 89 |..0.....|..5.0...|
|00000160| 35 c4 30 01 00 ff 15 54 | 26 01 00 2b c6 74 22 48 |5.0....T|&..+.t"H|
|00000170| 48 74 0d 6a 08 59 6a 20 | 89 0d 44 30 01 00 eb 20 |Ht.j.Yj |..D0... |
|00000180| 6a 18 59 6a 48 c7 05 44 | 30 01 00 12 00 00 00 eb |j.YjH..D|0.......|
|00000190| 0f 6a 04 59 6a 0a c7 05 | 44 30 01 00 02 00 00 00 |.j.Yj...|D0......|
|000001a0| 8b 3d 50 26 01 00 58 51 | 68 55 64 66 63 6a 38 6a |.=P&..XQ|hUdfcj8j|
|000001b0| 10 56 a3 40 30 01 00 2b | 05 44 30 01 00 56 68 c0 |.V.@0..+|.D0..Vh.|
|000001c0| 2e 01 00 8b d8 ff d7 53 | 68 55 64 66 46 68 88 00 |.......S|hUdfFh..|
|000001d0| 00 00 6a 10 56 56 68 20 | 2f 01 00 ff d7 8b 3d 4c |..j.VVh |/.....=L|
|000001e0| 26 01 00 53 68 55 64 66 | 78 6a 28 6a 10 56 56 68 |&..ShUdf|xj(j.VVh|
|000001f0| 40 2e 01 00 ff d7 33 c0 | 66 8b c3 66 d1 e8 50 68 |@.....3.|f..f..Ph|
|00000200| 55 64 66 69 68 d4 00 00 | 00 6a 10 56 56 68 c0 2d |Udfih...|.j.VVh.-|
|00000210| 01 00 ff d7 53 68 55 64 | 66 64 68 d0 00 00 00 6a |....ShUd|fdh....j|
|00000220| 10 56 56 68 40 2d 01 00 | ff d7 53 68 55 64 66 6c |.VVh@-..|..ShUdfl|
|00000230| 6a 5c 6a 10 56 56 68 c0 | 2c 01 00 ff d7 33 c0 8d |j\j.VVh.|,....3..|
|00000240| 7d f4 ab ab ab 68 70 2f | 01 00 8d 45 f4 50 56 c6 |}....hp/|...E.PV.|
|00000250| 45 f9 01 c6 45 f8 07 66 | c7 45 f6 b6 07 e8 f0 36 |E...E..f|.E.....6|
|00000260| ff ff 5f 5e 5b c9 c2 08 | 00 cc 5c 00 55 00 64 00 |.._^[...|..\.U.d.|
|00000270| 66 00 73 00 43 00 64 00 | 52 00 6f 00 6d 00 00 00 |f.s.C.d.|R.o.m...|
|00000280| 00 00 5c 00 55 00 64 00 | 66 00 73 00 44 00 69 00 |..\.U.d.|f.s.D.i.|
|00000290| 73 00 6b 00 00 00 6a 20 | 68 f8 29 01 00 e8 42 47 |s.k...j |h.)...BG|
|000002a0| ff ff 33 c0 8d 7d e0 ab | ab 68 6a dc 01 00 8d 45 |..3..}..|.hj....E|
|000002b0| d8 50 8b 3d 60 26 01 00 | ff d7 8d 45 e0 50 33 c0 |.P.=`&..|...E.P3.|
|000002c0| 50 50 6a 03 8d 4d d8 51 | 50 8b 75 08 56 8b 1d ac |PPj..M.Q|P.u.V...|
|000002d0| 25 01 00 ff d3 85 c0 0f | 8c c2 00 00 00 68 82 dc |%.......|.....h..|
|000002e0| 01 00 8d 45 d8 50 ff d7 | 8d 45 e4 50 33 ff 57 57 |...E.P..|.E.P3.WW|
|000002f0| 6a 08 8d 45 d8 50 57 56 | ff d3 8b d8 3b df 7d 10 |j..E.PWV|....;.}.|
|00000300| 8b 4d e0 ff 15 b8 24 01 | 00 8b c3 e9 8f 00 00 00 |.M....$.|........|
|00000310| 89 7d fc 89 7d d4 8d 45 | e0 50 56 e8 e0 fc ff ff |.}..}..E|.PV.....|
|00000320| b8 98 1a 01 00 89 86 a4 | 00 00 00 89 86 80 00 00 |........|........|
|00000330| 00 89 46 7c 89 46 70 89 | 46 6c 89 46 68 89 46 60 |..F|.Fp.|Fl.Fh.F`|
|00000340| 89 46 50 89 46 4c 89 46 | 48 89 46 44 89 46 40 89 |.FP.FL.F|H.FD.F@.|
|00000350| 46 38 c7 46 28 80 2f 01 | 00 ff 75 e0 8b 35 5c 26 |F8.F(./.|..u..5\&|
|00000360| 01 00 ff d6 ff 75 e4 ff | d6 eb 2e 8b 45 ec 8b 00 |.....u..|....E...|
|00000370| 8b 00 89 45 d0 50 ff 15 | 5c 25 01 00 f6 d8 1b c0 |...E.P..|\%......|
|00000380| f7 d8 c3 8b 65 e8 8b 4d | e0 8b 35 b8 24 01 00 ff |....e..M|..5.$...|
|00000390| d6 8b 4d e4 ff d6 8b 7d | d0 83 4d fc ff 8b c7 e8 |..M....}|..M.....|
|000003a0| 79 46 ff ff c2 08 00 cc | fc dd 00 00 00 00 00 00 |yF......|........|
|000003b0| 00 00 00 00 d8 eb 00 00 | 98 24 00 00 e4 dd 00 00 |........|.$......|
|000003c0| 00 00 00 00 00 00 00 00 | 62 ec 00 00 80 24 00 00 |........|b....$..|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 3a ec 00 00 | 26 ec 00 00 10 ec 00 00 |....:...|&.......|
|000003f0| fa eb 00 00 4e ec 00 00 | 00 00 00 00 82 e0 00 00 |....N...|........|
|00000400| 90 e0 00 00 9c e0 00 00 | b8 e0 00 00 ca e0 00 00 |........|........|
|00000410| e6 e0 00 00 fc e0 00 00 | 14 e1 00 00 2e e1 00 00 |........|........|
|00000420| 46 e1 00 00 60 e1 00 00 | 74 e1 00 00 8c e1 00 00 |F...`...|t.......|
|00000430| a4 e1 00 00 ba e1 00 00 | d0 e1 00 00 e8 e1 00 00 |........|........|
|00000440| 04 e2 00 00 1e e2 00 00 | 34 e2 00 00 4c e2 00 00 |........|4...L...|
|00000450| 64 e2 00 00 7a e2 00 00 | 98 e2 00 00 ae e2 00 00 |d...z...|........|
|00000460| c6 e2 00 00 da e2 00 00 | ea e2 00 00 fc e2 00 00 |........|........|
|00000470| 14 e3 00 00 36 e3 00 00 | 4e e3 00 00 68 e3 00 00 |....6...|N...h...|
|00000480| 7e e3 00 00 92 e3 00 00 | a8 e3 00 00 c2 e3 00 00 |~.......|........|
|00000490| e2 e3 00 00 ec e3 00 00 | f8 e3 00 00 08 e4 00 00 |........|........|
|000004a0| 20 e4 00 00 40 e4 00 00 | 54 e4 00 00 6e e4 00 00 | ...@...|T...n...|
|000004b0| 7e e4 00 00 8c e4 00 00 | 98 e4 00 00 a4 e4 00 00 |~.......|........|
|000004c0| c6 e4 00 00 e0 e4 00 00 | f6 e4 00 00 06 e5 00 00 |........|........|
|000004d0| 26 e5 00 00 42 e5 00 00 | 56 e5 00 00 6c e5 00 00 |&...B...|V...l...|
|000004e0| 8c e5 00 00 ae e5 00 00 | ce e5 00 00 ec e5 00 00 |........|........|
|000004f0| 00 e6 00 00 26 e6 00 00 | 66 e0 00 00 56 e6 00 00 |....&...|f...V...|
|00000500| 70 e6 00 00 7a e6 00 00 | 8c e6 00 00 a2 e6 00 00 |p...z...|........|
|00000510| ba e6 00 00 cc e6 00 00 | e0 e6 00 00 f8 e6 00 00 |........|........|
|00000520| 12 e7 00 00 28 e7 00 00 | 4e e7 00 00 68 e7 00 00 |....(...|N...h...|
|00000530| 74 e7 00 00 90 e7 00 00 | ac e7 00 00 b8 e7 00 00 |t.......|........|
|00000540| c4 e7 00 00 d2 e7 00 00 | ee e7 00 00 0c e8 00 00 |........|........|
|00000550| 20 e8 00 00 42 e8 00 00 | 58 e8 00 00 76 e8 00 00 | ...B...|X...v...|
|00000560| 8e e8 00 00 a4 e8 00 00 | c4 e8 00 00 ee e8 00 00 |........|........|
|00000570| 06 e9 00 00 22 e9 00 00 | 3e e9 00 00 5a e9 00 00 |...."...|>...Z...|
|00000580| 74 e9 00 00 88 e9 00 00 | aa e9 00 00 ca e9 00 00 |t.......|........|
|00000590| e2 e9 00 00 02 ea 00 00 | 18 ea 00 00 2c ea 00 00 |........|....,...|
|000005a0| 40 ea 00 00 54 ea 00 00 | 6a ea 00 00 80 ea 00 00 |@...T...|j.......|
|000005b0| 9c ea 00 00 be ea 00 00 | e0 ea 00 00 f4 ea 00 00 |........|........|
|000005c0| 04 eb 00 00 1c eb 00 00 | 34 eb 00 00 54 eb 00 00 |........|4...T...|
|000005d0| 66 eb 00 00 7e eb 00 00 | 94 eb 00 00 aa eb 00 00 |f...~...|........|
|000005e0| be eb 00 00 e6 eb 00 00 | 5c e0 00 00 40 e0 00 00 |........|\...@...|
|000005f0| 28 e0 00 00 14 e0 00 00 | 42 e6 00 00 04 e0 00 00 |(.......|B.......|
|00000600| 00 00 00 00 74 00 45 78 | 52 61 69 73 65 53 74 61 |....t.Ex|RaiseSta|
|00000610| 74 75 73 00 4d 00 45 78 | 46 72 65 65 50 6f 6f 6c |tus.M.Ex|FreePool|
|00000620| 57 69 74 68 54 61 67 00 | 40 00 45 78 41 6c 6c 6f |WithTag.|@.ExAllo|
|00000630| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |catePool|WithTag.|
|00000640| cb 00 46 73 52 74 6c 4c | 6f 6f 6b 75 70 4c 61 72 |..FsRtlL|ookupLar|
|00000650| 67 65 4d 63 62 45 6e 74 | 72 79 00 00 64 05 5f 61 |geMcbEnt|ry..d._a|
|00000660| 6c 6c 6d 75 6c 00 fb 00 | 46 73 52 74 6c 55 6e 69 |llmul...|FsRtlUni|
|00000670| 6e 69 74 69 61 6c 69 7a | 65 4c 61 72 67 65 4d 63 |nitializ|eLargeMc|
|00000680| 62 00 26 00 43 63 55 6e | 70 69 6e 44 61 74 61 00 |b.&.CcUn|pinData.|
|00000690| 11 00 43 63 4d 61 70 44 | 61 74 61 00 78 00 45 78 |..CcMapD|ata.x.Ex|
|000006a0| 52 65 6c 65 61 73 65 46 | 61 73 74 4d 75 74 65 78 |ReleaseF|astMutex|
|000006b0| 55 6e 73 61 66 65 00 00 | 22 00 43 63 53 65 74 46 |Unsafe..|".CcSetF|
|000006c0| 69 6c 65 53 69 7a 65 73 | 00 00 36 00 45 78 41 63 |ileSizes|..6.ExAc|
|000006d0| 71 75 69 72 65 46 61 73 | 74 4d 75 74 65 78 55 6e |quireFas|tMutexUn|
|000006e0| 73 61 66 65 00 00 fe 01 | 4b 65 47 65 74 43 75 72 |safe....|KeGetCur|
|000006f0| 72 65 6e 74 54 68 72 65 | 61 64 00 00 95 00 46 73 |rentThre|ad....Fs|
|00000700| 52 74 6c 41 64 64 4c 61 | 72 67 65 4d 63 62 45 6e |RtlAddLa|rgeMcbEn|
|00000710| 74 72 79 00 bd 00 46 73 | 52 74 6c 49 6e 69 74 69 |try...Fs|RtlIniti|
|00000720| 61 6c 69 7a 65 4c 61 72 | 67 65 4d 63 62 00 25 03 |alizeLar|geMcb.%.|
|00000730| 4f 62 66 44 65 72 65 66 | 65 72 65 6e 63 65 4f 62 |ObfDeref|erenceOb|
|00000740| 6a 65 63 74 00 00 25 00 | 43 63 55 6e 69 6e 69 74 |ject..%.|CcUninit|
|00000750| 69 61 6c 69 7a 65 43 61 | 63 68 65 4d 61 70 00 00 |ializeCa|cheMap..|
|00000760| 13 00 43 63 4d 64 6c 52 | 65 61 64 43 6f 6d 70 6c |..CcMdlR|eadCompl|
|00000770| 65 74 65 00 7a 00 45 78 | 52 65 6c 65 61 73 65 52 |ete.z.Ex|ReleaseR|
|00000780| 65 73 6f 75 72 63 65 4c | 69 74 65 00 61 05 5f 61 |esourceL|ite.a._a|
|00000790| 62 6e 6f 72 6d 61 6c 5f | 74 65 72 6d 69 6e 61 74 |bnormal_|terminat|
|000007a0| 69 6f 6e 00 1a 00 43 63 | 50 75 72 67 65 43 61 63 |ion...Cc|PurgeCac|
|000007b0| 68 65 53 65 63 74 69 6f | 6e 00 8e 02 4d 6d 46 6c |heSectio|n...MmFl|
|000007c0| 75 73 68 49 6d 61 67 65 | 53 65 63 74 69 6f 6e 00 |ushImage|Section.|
|000007d0| 0f 00 43 63 49 6e 69 74 | 69 61 6c 69 7a 65 43 61 |..CcInit|ializeCa|
|000007e0| 63 68 65 4d 61 70 00 00 | 3e 01 49 6f 43 72 65 61 |cheMap..|>.IoCrea|
|000007f0| 74 65 53 74 72 65 61 6d | 46 69 6c 65 4f 62 6a 65 |teStream|FileObje|
|00000800| 63 74 00 00 e2 00 46 73 | 52 74 6c 4e 6f 74 69 66 |ct....Fs|RtlNotif|
|00000810| 79 56 6f 6c 75 6d 65 45 | 76 65 6e 74 00 00 9d 01 |yVolumeE|vent....|
|00000820| 49 6f 52 65 6d 6f 76 65 | 53 68 61 72 65 41 63 63 |IoRemove|ShareAcc|
|00000830| 65 73 73 00 9c 01 49 6f | 52 65 6c 65 61 73 65 56 |ess...Io|ReleaseV|
|00000840| 70 62 53 70 69 6e 4c 6f | 63 6b 00 00 18 01 49 6f |pbSpinLo|ck....Io|
|00000850| 41 63 71 75 69 72 65 56 | 70 62 53 70 69 6e 4c 6f |AcquireV|pbSpinLo|
|00000860| 63 6b 00 00 da 00 46 73 | 52 74 6c 4e 6f 74 69 66 |ck....Fs|RtlNotif|
|00000870| 79 43 6c 65 61 6e 75 70 | 00 00 e6 00 46 73 52 74 |yCleanup|....FsRt|
|00000880| 6c 4f 70 6c 6f 63 6b 49 | 73 46 61 73 74 49 6f 50 |lOplockI|sFastIoP|
|00000890| 6f 73 73 69 62 6c 65 00 | af 00 46 73 52 74 6c 46 |ossible.|..FsRtlF|
|000008a0| 61 73 74 55 6e 6c 6f 63 | 6b 41 6c 6c 00 00 70 01 |astUnloc|kAll..p.|
|000008b0| 49 6f 47 65 74 52 65 71 | 75 65 73 74 6f 72 50 72 |IoGetReq|uestorPr|
|000008c0| 6f 63 65 73 73 00 a2 00 | 46 73 52 74 6c 43 68 65 |ocess...|FsRtlChe|
|000008d0| 63 6b 4f 70 6c 6f 63 6b | 00 00 ee 01 4b 65 42 75 |ckOplock|....KeBu|
|000008e0| 67 43 68 65 63 6b 45 78 | 00 00 6f 00 45 78 51 75 |gCheckEx|..o.ExQu|
|000008f0| 65 75 65 57 6f 72 6b 49 | 74 65 6d 00 20 02 4b 65 |eueWorkI|tem. .Ke|
|00000900| 4c 65 61 76 65 43 72 69 | 74 69 63 61 6c 52 65 67 |LeaveCri|ticalReg|
|00000910| 69 6f 6e 00 37 00 45 78 | 41 63 71 75 69 72 65 52 |ion.7.Ex|AcquireR|
|00000920| 65 73 6f 75 72 63 65 45 | 78 63 6c 75 73 69 76 65 |esourceE|xclusive|
|00000930| 4c 69 74 65 00 00 f9 01 | 4b 65 45 6e 74 65 72 43 |Lite....|KeEnterC|
|00000940| 72 69 74 69 63 61 6c 52 | 65 67 69 6f 6e 00 8e 04 |riticalR|egion...|
|00000950| 52 74 6c 55 70 63 61 73 | 65 55 6e 69 63 6f 64 65 |RtlUpcas|eUnicode|
|00000960| 53 74 72 69 6e 67 00 00 | c1 01 49 6f 55 70 64 61 |String..|..IoUpda|
|00000970| 74 65 53 68 61 72 65 41 | 63 63 65 73 73 00 af 01 |teShareA|ccess...|
|00000980| 49 6f 53 65 74 53 68 61 | 72 65 41 63 63 65 73 73 |IoSetSha|reAccess|
|00000990| 00 00 34 01 49 6f 43 68 | 65 63 6b 53 68 61 72 65 |..4.IoCh|eckShare|
|000009a0| 41 63 63 65 73 73 00 00 | a5 00 46 73 52 74 6c 43 |Access..|..FsRtlC|
|000009b0| 75 72 72 65 6e 74 42 61 | 74 63 68 4f 70 6c 6f 63 |urrentBa|tchOploc|
|000009c0| 6b 00 ac 00 46 73 52 74 | 6c 44 6f 65 73 4e 61 6d |k...FsRt|lDoesNam|
|000009d0| 65 43 6f 6e 74 61 69 6e | 57 69 6c 64 43 61 72 64 |eContain|WildCard|
|000009e0| 73 00 91 05 6d 65 6d 6d | 6f 76 65 00 81 05 5f 77 |s...memm|ove..._w|
|000009f0| 63 73 6e 69 63 6d 70 00 | da 01 49 6f 66 43 61 6c |csnicmp.|..IofCal|
|00000a00| 6c 44 72 69 76 65 72 00 | 64 02 4b 65 57 61 69 74 |lDriver.|d.KeWait|
|00000a10| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 00 |ForSingl|eObject.|
|00000a20| 28 01 49 6f 42 75 69 6c | 64 44 65 76 69 63 65 49 |(.IoBuil|dDeviceI|
|00000a30| 6f 43 6f 6e 74 72 6f 6c | 52 65 71 75 65 73 74 00 |oControl|Request.|
|00000a40| 0f 02 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 45 76 |..KeInit|ializeEv|
|00000a50| 65 6e 74 00 d8 00 46 73 | 52 74 6c 4e 6f 72 6d 61 |ent...Fs|RtlNorma|
|00000a60| 6c 69 7a 65 4e 74 73 74 | 61 74 75 73 00 00 f1 01 |lizeNtst|atus....|
|00000a70| 4b 65 43 6c 65 61 72 45 | 76 65 6e 74 00 00 4d 02 |KeClearE|vent..M.|
|00000a80| 4b 65 53 65 74 45 76 65 | 6e 74 00 00 5a 01 49 6f |KeSetEve|nt..Z.Io|
|00000a90| 46 72 65 65 49 72 70 00 | 5b 01 49 6f 46 72 65 65 |FreeIrp.|[.IoFree|
|00000aa0| 4d 64 6c 00 79 00 45 78 | 52 65 6c 65 61 73 65 52 |Mdl.y.Ex|ReleaseR|
|00000ab0| 65 73 6f 75 72 63 65 46 | 6f 72 54 68 72 65 61 64 |esourceF|orThread|
|00000ac0| 4c 69 74 65 00 00 c7 00 | 46 73 52 74 6c 49 73 4e |Lite....|FsRtlIsN|
|00000ad0| 74 73 74 61 74 75 73 45 | 78 70 65 63 74 65 64 00 |tstatusE|xpected.|
|00000ae0| b2 02 4d 6d 50 72 6f 62 | 65 41 6e 64 4c 6f 63 6b |..MmProb|eAndLock|
|00000af0| 50 61 67 65 73 00 1f 01 | 49 6f 41 6c 6c 6f 63 61 |Pages...|IoAlloca|
|00000b00| 74 65 4d 64 6c 00 2a 01 | 49 6f 42 75 69 6c 64 53 |teMdl.*.|IoBuildS|
|00000b10| 79 6e 63 68 72 6f 6e 6f | 75 73 46 73 64 52 65 71 |ynchrono|usFsdReq|
|00000b20| 75 65 73 74 00 00 89 02 | 4d 6d 42 75 69 6c 64 4d |uest....|MmBuildM|
|00000b30| 64 6c 46 6f 72 4e 6f 6e | 50 61 67 65 64 50 6f 6f |dlForNon|PagedPoo|
|00000b40| 6c 00 29 01 49 6f 42 75 | 69 6c 64 50 61 72 74 69 |l.).IoBu|ildParti|
|00000b50| 61 6c 4d 64 6c 00 7f 01 | 49 6f 4d 61 6b 65 41 73 |alMdl...|IoMakeAs|
|00000b60| 73 6f 63 69 61 74 65 64 | 49 72 70 00 a6 02 4d 6d |sociated|Irp...Mm|
|00000b70| 4d 61 70 4c 6f 63 6b 65 | 64 50 61 67 65 73 53 70 |MapLocke|dPagesSp|
|00000b80| 65 63 69 66 79 43 61 63 | 68 65 00 00 dd 00 46 73 |ecifyCac|he....Fs|
|00000b90| 52 74 6c 4e 6f 74 69 66 | 79 46 75 6c 6c 43 68 61 |RtlNotif|yFullCha|
|00000ba0| 6e 67 65 44 69 72 65 63 | 74 6f 72 79 00 00 ca 00 |ngeDirec|tory....|
|00000bb0| 46 73 52 74 6c 4c 65 67 | 61 6c 41 6e 73 69 43 68 |FsRtlLeg|alAnsiCh|
|00000bc0| 61 72 61 63 74 65 72 41 | 72 72 61 79 00 00 38 00 |aracterA|rray..8.|
|00000bd0| 45 78 41 63 71 75 69 72 | 65 52 65 73 6f 75 72 63 |ExAcquir|eResourc|
|00000be0| 65 53 68 61 72 65 64 4c | 69 74 65 00 e5 00 46 73 |eSharedL|ite...Fs|
|00000bf0| 52 74 6c 4f 70 6c 6f 63 | 6b 46 73 63 74 72 6c 00 |RtlOploc|kFsctrl.|
|00000c00| 29 00 43 63 57 61 69 74 | 46 6f 72 43 75 72 72 65 |).CcWait|ForCurre|
|00000c10| 6e 74 4c 61 7a 79 57 72 | 69 74 65 72 41 63 74 69 |ntLazyWr|iterActi|
|00000c20| 76 69 74 79 00 00 1d 03 | 4f 62 52 65 66 65 72 65 |vity....|ObRefere|
|00000c30| 6e 63 65 4f 62 6a 65 63 | 74 42 79 48 61 6e 64 6c |nceObjec|tByHandl|
|00000c40| 65 00 55 01 49 6f 46 69 | 6c 65 4f 62 6a 65 63 74 |e.U.IoFi|leObject|
|00000c50| 54 79 70 65 00 00 cc 04 | 53 65 53 69 6e 67 6c 65 |Type....|SeSingle|
|00000c60| 50 72 69 76 69 6c 65 67 | 65 43 68 65 63 6b 00 00 |Privileg|eCheck..|
|00000c70| 62 05 5f 61 6c 6c 64 69 | 76 00 49 01 49 6f 44 65 |b._alldi|v.I.IoDe|
|00000c80| 6c 65 74 65 44 65 76 69 | 63 65 00 00 26 03 4f 62 |leteDevi|ce..&.Ob|
|00000c90| 66 52 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |fReferen|ceObject|
|00000ca0| 00 00 15 02 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |....KeIn|itialize|
|00000cb0| 53 70 69 6e 4c 6f 63 6b | 00 00 38 01 49 6f 43 72 |SpinLock|..8.IoCr|
|00000cc0| 65 61 74 65 44 65 76 69 | 63 65 00 00 ae 03 52 74 |eateDevi|ce....Rt|
|00000cd0| 6c 43 6f 6d 70 61 72 65 | 4d 65 6d 6f 72 79 00 00 |lCompare|Memory..|
|00000ce0| ec 00 46 73 52 74 6c 50 | 72 6f 63 65 73 73 46 69 |..FsRtlP|rocessFi|
|00000cf0| 6c 65 4c 6f 63 6b 00 00 | 94 04 52 74 6c 55 70 63 |leLock..|..RtlUpc|
|00000d00| 61 73 65 55 6e 69 63 6f | 64 65 54 6f 4f 65 6d 4e |aseUnico|deToOemN|
|00000d10| 00 00 c4 00 46 73 52 74 | 6c 49 73 46 61 74 44 62 |....FsRt|lIsFatDb|
|00000d20| 63 73 4c 65 67 61 6c 00 | 83 04 52 74 6c 55 6e 69 |csLegal.|..RtlUni|
|00000d30| 63 6f 64 65 53 74 72 69 | 6e 67 54 6f 43 6f 75 6e |codeStri|ngToCoun|
|00000d40| 74 65 64 4f 65 6d 53 74 | 72 69 6e 67 00 00 c6 00 |tedOemSt|ring....|
|00000d50| 46 73 52 74 6c 49 73 4e | 61 6d 65 49 6e 45 78 70 |FsRtlIsN|ameInExp|
|00000d60| 72 65 73 73 69 6f 6e 00 | 6b 04 52 74 6c 53 70 6c |ression.|k.RtlSpl|
|00000d70| 61 79 00 00 14 01 49 6e | 74 65 72 6c 6f 63 6b 65 |ay....In|terlocke|
|00000d80| 64 50 6f 70 45 6e 74 72 | 79 53 4c 69 73 74 00 00 |dPopEntr|ySList..|
|00000d90| 15 01 49 6e 74 65 72 6c | 6f 63 6b 65 64 50 75 73 |..Interl|ockedPus|
|00000da0| 68 45 6e 74 72 79 53 4c | 69 73 74 00 c7 03 52 74 |hEntrySL|ist...Rt|
|00000db0| 6c 44 65 6c 65 74 65 00 | 12 00 43 63 4d 64 6c 52 |lDelete.|..CcMdlR|
|00000dc0| 65 61 64 00 01 00 43 63 | 43 6f 70 79 52 65 61 64 |ead...Cc|CopyRead|
|00000dd0| 00 00 24 00 43 63 53 65 | 74 52 65 61 64 41 68 65 |..$.CcSe|tReadAhe|
|00000de0| 61 64 47 72 61 6e 75 6c | 61 72 69 74 79 00 a0 00 |adGranul|arity...|
|00000df0| 46 73 52 74 6c 43 68 65 | 63 6b 4c 6f 63 6b 46 6f |FsRtlChe|ckLockFo|
|00000e00| 72 52 65 61 64 41 63 63 | 65 73 73 00 b3 01 49 6f |rReadAcc|ess...Io|
|00000e10| 53 65 74 54 6f 70 4c 65 | 76 65 6c 49 72 70 00 00 |SetTopLe|velIrp..|
|00000e20| 3a 00 45 78 41 63 71 75 | 69 72 65 53 68 61 72 65 |:.ExAcqu|ireShare|
|00000e30| 64 53 74 61 72 76 65 45 | 78 63 6c 75 73 69 76 65 |dStarveE|xclusive|
|00000e40| 00 00 f4 00 46 73 52 74 | 6c 52 65 73 65 74 4c 61 |....FsRt|lResetLa|
|00000e50| 72 67 65 4d 63 62 00 00 | e1 00 46 73 52 74 6c 4e |rgeMcb..|..FsRtlN|
|00000e60| 6f 74 69 66 79 55 6e 69 | 6e 69 74 69 61 6c 69 7a |otifyUni|nitializ|
|00000e70| 65 53 79 6e 63 00 46 00 | 45 78 44 65 6c 65 74 65 |eSync.F.|ExDelete|
|00000e80| 52 65 73 6f 75 72 63 65 | 4c 69 74 65 00 00 72 04 |Resource|Lite..r.|
|00000e90| 52 74 6c 54 69 6d 65 46 | 69 65 6c 64 73 54 6f 54 |RtlTimeF|ieldsToT|
|00000ea0| 69 6d 65 00 3b 04 52 74 | 6c 4c 6f 6f 6b 75 70 45 |ime.;.Rt|lLookupE|
|00000eb0| 6c 65 6d 65 6e 74 47 65 | 6e 65 72 69 63 54 61 62 |lementGe|nericTab|
|00000ec0| 6c 65 00 00 db 03 52 74 | 6c 45 6e 75 6d 65 72 61 |le....Rt|lEnumera|
|00000ed0| 74 65 47 65 6e 65 72 69 | 63 54 61 62 6c 65 57 69 |teGeneri|cTableWi|
|00000ee0| 74 68 6f 75 74 53 70 6c | 61 79 69 6e 67 00 98 00 |thoutSpl|aying...|
|00000ef0| 46 73 52 74 6c 41 6c 6c | 6f 63 61 74 65 46 69 6c |FsRtlAll|ocateFil|
|00000f00| 65 4c 6f 63 6b 00 56 00 | 45 78 49 6e 69 74 69 61 |eLock.V.|ExInitia|
|00000f10| 6c 69 7a 65 52 65 73 6f | 75 72 63 65 4c 69 74 65 |lizeReso|urceLite|
|00000f20| 00 00 13 04 52 74 6c 49 | 6e 69 74 69 61 6c 69 7a |....RtlI|nitializ|
|00000f30| 65 47 65 6e 65 72 69 63 | 54 61 62 6c 65 00 df 00 |eGeneric|Table...|
|00000f40| 46 73 52 74 6c 4e 6f 74 | 69 66 79 49 6e 69 74 69 |FsRtlNot|ifyIniti|
|00000f50| 61 6c 69 7a 65 53 79 6e | 63 00 fd 00 46 73 52 74 |alizeSyn|c...FsRt|
|00000f60| 6c 55 6e 69 6e 69 74 69 | 61 6c 69 7a 65 4f 70 6c |lUniniti|alizeOpl|
|00000f70| 6f 63 6b 00 b3 00 46 73 | 52 74 6c 46 72 65 65 46 |ock...Fs|RtlFreeF|
|00000f80| 69 6c 65 4c 6f 63 6b 00 | f7 00 46 73 52 74 6c 54 |ileLock.|..FsRtlT|
|00000f90| 65 61 72 64 6f 77 6e 50 | 65 72 53 74 72 65 61 6d |eardownP|erStream|
|00000fa0| 43 6f 6e 74 65 78 74 73 | 00 00 ca 03 52 74 6c 44 |Contexts|....RtlD|
|00000fb0| 65 6c 65 74 65 45 6c 65 | 6d 65 6e 74 47 65 6e 65 |eleteEle|mentGene|
|00000fc0| 72 69 63 54 61 62 6c 65 | 00 00 f8 00 46 73 52 74 |ricTable|....FsRt|
|00000fd0| 6c 54 72 75 6e 63 61 74 | 65 4c 61 72 67 65 4d 63 |lTruncat|eLargeMc|
|00000fe0| 62 00 18 04 52 74 6c 49 | 6e 73 65 72 74 45 6c 65 |b...RtlI|nsertEle|
|00000ff0| 6d 65 6e 74 47 65 6e 65 | 72 69 63 54 61 62 6c 65 |mentGene|ricTable|
|00001000| 00 00 db 01 49 6f 66 43 | 6f 6d 70 6c 65 74 65 52 |....IofC|ompleteR|
|00001010| 65 71 75 65 73 74 00 00 | 73 01 49 6f 47 65 74 53 |equest..|s.IoGetS|
|00001020| 74 61 63 6b 4c 69 6d 69 | 74 73 00 00 74 01 49 6f |tackLimi|ts..t.Io|
|00001030| 47 65 74 54 6f 70 4c 65 | 76 65 6c 49 72 70 00 00 |GetTopLe|velIrp..|
|00001040| 8a 01 49 6f 52 61 69 73 | 65 48 61 72 64 45 72 72 |..IoRais|eHardErr|
|00001050| 6f 72 00 00 a8 01 49 6f | 53 65 74 44 65 76 69 63 |or....Io|SetDevic|
|00001060| 65 54 6f 56 65 72 69 66 | 79 00 68 01 49 6f 47 65 |eToVerif|y.h.IoGe|
|00001070| 74 44 65 76 69 63 65 54 | 6f 56 65 72 69 66 79 00 |tDeviceT|oVerify.|
|00001080| 7b 01 49 6f 49 73 4f 70 | 65 72 61 74 69 6f 6e 53 |{.IoIsOp|erationS|
|00001090| 79 6e 63 68 72 6f 6e 6f | 75 73 00 00 55 00 45 78 |ynchrono|us..U.Ex|
|000010a0| 49 6e 69 74 69 61 6c 69 | 7a 65 50 61 67 65 64 4c |Initiali|zePagedL|
|000010b0| 6f 6f 6b 61 73 69 64 65 | 4c 69 73 74 00 00 54 00 |ookaside|List..T.|
|000010c0| 45 78 49 6e 69 74 69 61 | 6c 69 7a 65 4e 50 61 67 |ExInitia|lizeNPag|
|000010d0| 65 64 4c 6f 6f 6b 61 73 | 69 64 65 4c 69 73 74 00 |edLookas|ideList.|
|000010e0| b6 02 4d 6d 51 75 65 72 | 79 53 79 73 74 65 6d 53 |..MmQuer|ySystemS|
|000010f0| 69 7a 65 00 a3 00 46 73 | 52 74 6c 43 6f 70 79 52 |ize...Fs|RtlCopyR|
|00001100| 65 61 64 00 94 01 49 6f | 52 65 67 69 73 74 65 72 |ead...Io|Register|
|00001110| 46 69 6c 65 53 79 73 74 | 65 6d 00 00 11 04 52 74 |FileSyst|em....Rt|
|00001120| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|00001130| 6e 67 00 00 aa 01 49 6f | 53 65 74 48 61 72 64 45 |ng....Io|SetHardE|
|00001140| 72 72 6f 72 4f 72 56 65 | 72 69 66 79 44 65 76 69 |rrorOrVe|rifyDevi|
|00001150| 63 65 00 00 c4 01 49 6f | 56 65 72 69 66 79 56 6f |ce....Io|VerifyVo|
|00001160| 6c 75 6d 65 00 00 fc 00 | 46 73 52 74 6c 55 6e 69 |lume....|FsRtlUni|
|00001170| 6e 69 74 69 61 6c 69 7a | 65 4d 63 62 00 00 be 00 |nitializ|eMcb....|
|00001180| 46 73 52 74 6c 49 6e 69 | 74 69 61 6c 69 7a 65 4d |FsRtlIni|tializeM|
|00001190| 63 62 00 00 f1 00 46 73 | 52 74 6c 52 65 6d 6f 76 |cb....Fs|RtlRemov|
|000011a0| 65 4d 63 62 45 6e 74 72 | 79 00 96 00 46 73 52 74 |eMcbEntr|y...FsRt|
|000011b0| 6c 41 64 64 4d 63 62 45 | 6e 74 72 79 00 00 ce 00 |lAddMcbE|ntry....|
|000011c0| 46 73 52 74 6c 4c 6f 6f | 6b 75 70 4c 61 73 74 4d |FsRtlLoo|kupLastM|
|000011d0| 63 62 45 6e 74 72 79 00 | 6e 74 6f 73 6b 72 6e 6c |cbEntry.|ntoskrnl|
|000011e0| 2e 65 78 65 00 00 6e 05 | 5f 65 78 63 65 70 74 5f |.exe..n.|_except_|
|000011f0| 68 61 6e 64 6c 65 72 33 | 00 00 01 00 45 78 52 65 |handler3|....ExRe|
|00001200| 6c 65 61 73 65 46 61 73 | 74 4d 75 74 65 78 00 00 |leaseFas|tMutex..|
|00001210| 00 00 45 78 41 63 71 75 | 69 72 65 46 61 73 74 4d |..ExAcqu|ireFastM|
|00001220| 75 74 65 78 00 00 4f 00 | 4b 66 52 65 6c 65 61 73 |utex..O.|KfReleas|
|00001230| 65 53 70 69 6e 4c 6f 63 | 6b 00 4c 00 4b 66 41 63 |eSpinLoc|k.L.KfAc|
|00001240| 71 75 69 72 65 53 70 69 | 6e 4c 6f 63 6b 00 40 00 |quireSpi|nLock.@.|
|00001250| 4b 65 47 65 74 43 75 72 | 72 65 6e 74 49 72 71 6c |KeGetCur|rentIrql|
|00001260| 00 00 48 41 4c 2e 64 6c | 6c 00 00 00 00 00 00 00 |..HAL.dl|l.......|
|00001270| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+