/ PC World 2008 March (DVD) / PCWorld_2008-03_DVD.iso / temadvd / outpostsecurity / OutpostSecuritySuiteProInstall.exe / {code_GetUserTempDir} / ssi / SandBox.sys / INIT

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 6c 42 06 00 00 00 00 00 | 00 00 00 00 02 4f 06 00 |lB......|.....O..|
|00000010| 90 02 00 00 5c 42 06 00 | 00 00 00 00 00 00 00 00 |....\B..|........|
|00000020| 5a 4f 06 00 80 02 00 00 | 00 00 00 00 00 00 00 00 |ZO......|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 30 4f 06 00 |........|....0O..|
|00000040| 1c 4f 06 00 4c 4f 06 00 | 00 00 00 00 04 45 06 00 |.O..LO..|.....E..|
|00000050| 14 45 06 00 24 45 06 00 | 32 45 06 00 4a 45 06 00 |.E..$E..|2E..JE..|
|00000060| 54 45 06 00 6c 45 06 00 | 7a 45 06 00 92 45 06 00 |TE..lE..|zE...E..|
|00000070| aa 45 06 00 ba 45 06 00 | d2 45 06 00 f0 45 06 00 |.E...E..|.E...E..|
|00000080| fc 45 06 00 0a 46 06 00 | 18 46 06 00 26 46 06 00 |.E...F..|.F..&F..|
|00000090| 38 46 06 00 48 46 06 00 | 58 46 06 00 64 46 06 00 |8F..HF..|XF..dF..|
|000000a0| 78 46 06 00 90 46 06 00 | a0 46 06 00 b0 46 06 00 |xF...F..|.F...F..|
|000000b0| c2 46 06 00 d2 46 06 00 | e2 46 06 00 f8 46 06 00 |.F...F..|.F...F..|
|000000c0| 12 47 06 00 2c 47 06 00 | 42 47 06 00 50 47 06 00 |.G..,G..|BG..PG..|
|000000d0| 62 47 06 00 80 47 06 00 | 98 47 06 00 ac 47 06 00 |bG...G..|.G...G..|
|000000e0| ce 47 06 00 e0 47 06 00 | f8 47 06 00 0e 48 06 00 |.G...G..|.G...H..|
|000000f0| 26 48 06 00 40 48 06 00 | 50 48 06 00 64 48 06 00 |&H..@H..|PH..dH..|
|00000100| 7a 48 06 00 94 48 06 00 | ac 48 06 00 ba 48 06 00 |zH...H..|.H...H..|
|00000110| ce 48 06 00 e4 48 06 00 | f8 48 06 00 14 49 06 00 |.H...H..|.H...I..|
|00000120| 2a 49 06 00 48 49 06 00 | 5c 49 06 00 74 49 06 00 |*I..HI..|\I..tI..|
|00000130| 90 49 06 00 a2 49 06 00 | be 49 06 00 d0 49 06 00 |.I...I..|.I...I..|
|00000140| e4 49 06 00 fc 49 06 00 | 0c 4a 06 00 e6 44 06 00 |.I...I..|.J...D..|
|00000150| 36 4a 06 00 4a 4a 06 00 | 62 4a 06 00 6c 4a 06 00 |6J..JJ..|bJ..lJ..|
|00000160| 76 4a 06 00 90 4a 06 00 | b0 4a 06 00 d0 4a 06 00 |vJ...J..|.J...J..|
|00000170| ea 4a 06 00 fa 4a 06 00 | 14 4b 06 00 32 4b 06 00 |.J...J..|.K..2K..|
|00000180| 4e 4b 06 00 58 4b 06 00 | 74 4b 06 00 90 4b 06 00 |NK..XK..|tK...K..|
|00000190| aa 4b 06 00 ba 4b 06 00 | ca 4b 06 00 d6 4b 06 00 |.K...K..|.K...K..|
|000001a0| e2 4b 06 00 f2 4b 06 00 | 08 4c 06 00 1c 4c 06 00 |.K...K..|.L...L..|
|000001b0| 38 4c 06 00 4c 4c 06 00 | 56 4c 06 00 62 4c 06 00 |8L..LL..|VL..bL..|
|000001c0| 76 4c 06 00 92 4c 06 00 | 9e 4c 06 00 b6 4c 06 00 |vL...L..|.L...L..|
|000001d0| cc 4c 06 00 d6 4c 06 00 | f0 4c 06 00 fc 4c 06 00 |.L...L..|.L...L..|
|000001e0| 10 4d 06 00 22 4d 06 00 | 3a 4d 06 00 4e 4d 06 00 |.M.."M..|:M..NM..|
|000001f0| 6a 4d 06 00 7c 4d 06 00 | 94 4d 06 00 aa 4d 06 00 |jM..|M..|.M...M..|
|00000200| c0 4d 06 00 d0 4d 06 00 | ea 4d 06 00 f8 4d 06 00 |.M...M..|.M...M..|
|00000210| 14 4e 06 00 2c 4e 06 00 | 3a 4e 06 00 4a 4e 06 00 |.N..,N..|:N..JN..|
|00000220| 5a 4e 06 00 6e 4e 06 00 | 84 4e 06 00 9e 4e 06 00 |ZN..nN..|.N...N..|
|00000230| b8 4e 06 00 ca 4e 06 00 | e8 4e 06 00 f6 4e 06 00 |.N...N..|.N...N..|
|00000240| 10 4f 06 00 d6 44 06 00 | c2 44 06 00 aa 44 06 00 |.O...D..|.D...D..|
|00000250| 92 44 06 00 1c 4a 06 00 | 80 44 06 00 00 00 00 00 |.D...J..|.D......|
|00000260| 62 03 5a 77 43 72 65 61 | 74 65 53 65 63 74 69 6f |b.ZwCrea|teSectio|
|00000270| 6e 00 d6 00 49 6e 74 65 | 72 6c 6f 63 6b 65 64 44 |n...Inte|rlockedD|
|00000280| 65 63 72 65 6d 65 6e 74 | 00 00 d9 00 49 6e 74 65 |ecrement|....Inte|
|00000290| 72 6c 6f 63 6b 65 64 49 | 6e 63 72 65 6d 65 6e 74 |rlockedI|ncrement|
|000002a0| 00 00 45 00 45 78 47 65 | 74 50 72 65 76 69 6f 75 |..E.ExGe|tPreviou|
|000002b0| 73 4d 6f 64 65 00 7c 03 | 5a 77 4f 70 65 6e 53 65 |sMode.|.|ZwOpenSe|
|000002c0| 63 74 69 6f 6e 00 ec 02 | 52 74 6c 4e 74 53 74 61 |ction...|RtlNtSta|
|000002d0| 74 75 73 54 6f 44 6f 73 | 45 72 72 6f 72 4e 6f 54 |tusToDos|ErrorNoT|
|000002e0| 65 62 00 00 60 03 5a 77 | 43 72 65 61 74 65 46 69 |eb..`.Zw|CreateFi|
|000002f0| 6c 65 00 00 f4 00 49 6f | 43 72 65 61 74 65 46 69 |le....Io|CreateFi|
|00000300| 6c 65 00 00 78 03 5a 77 | 4f 70 65 6e 46 69 6c 65 |le..x.Zw|OpenFile|
|00000310| 00 00 44 02 4f 62 66 44 | 65 72 65 66 65 72 65 6e |..D.ObfD|ereferen|
|00000320| 63 65 4f 62 6a 65 63 74 | 00 00 5b 03 5a 77 43 6c |ceObject|..[.ZwCl|
|00000330| 6f 73 65 00 a1 03 5a 77 | 57 61 69 74 46 6f 72 53 |ose...Zw|WaitForS|
|00000340| 69 6e 67 6c 65 4f 62 6a | 65 63 74 00 94 03 5a 77 |ingleObj|ect...Zw|
|00000350| 53 65 74 45 76 65 6e 74 | 00 00 82 03 5a 77 51 75 |SetEvent|....ZwQu|
|00000360| 65 72 79 44 69 72 65 63 | 74 6f 72 79 46 69 6c 65 |eryDirec|toryFile|
|00000370| 00 00 95 03 5a 77 53 65 | 74 49 6e 66 6f 72 6d 61 |....ZwSe|tInforma|
|00000380| 74 69 6f 6e 46 69 6c 65 | 00 00 64 03 5a 77 44 65 |tionFile|..d.ZwDe|
|00000390| 6c 65 74 65 46 69 6c 65 | 00 00 73 03 5a 77 4d 61 |leteFile|..s.ZwMa|
|000003a0| 6b 65 54 65 6d 70 6f 72 | 61 72 79 4f 62 6a 65 63 |keTempor|aryObjec|
|000003b0| 74 00 63 03 5a 77 43 72 | 65 61 74 65 53 79 6d 62 |t.c.ZwCr|eateSymb|
|000003c0| 6f 6c 69 63 4c 69 6e 6b | 4f 62 6a 65 63 74 00 00 |olicLink|Object..|
|000003d0| 79 03 5a 77 4f 70 65 6e | 4b 65 79 00 61 03 5a 77 |y.ZwOpen|Key.a.Zw|
|000003e0| 43 72 65 61 74 65 4b 65 | 79 00 65 03 5a 77 44 65 |CreateKe|y.e.ZwDe|
|000003f0| 6c 65 74 65 4b 65 79 00 | 86 03 5a 77 51 75 65 72 |leteKey.|..ZwQuer|
|00000400| 79 4b 65 79 00 00 8c 03 | 5a 77 51 75 65 72 79 56 |yKey....|ZwQueryV|
|00000410| 61 6c 75 65 4b 65 79 00 | 9b 03 5a 77 53 65 74 56 |alueKey.|..ZwSetV|
|00000420| 61 6c 75 65 4b 65 79 00 | 8f 03 5a 77 52 65 70 6c |alueKey.|..ZwRepl|
|00000430| 61 63 65 4b 65 79 00 00 | 92 03 5a 77 53 61 76 65 |aceKey..|..ZwSave|
|00000440| 4b 65 79 00 66 03 5a 77 | 44 65 6c 65 74 65 56 61 |Key.f.Zw|DeleteVa|
|00000450| 6c 75 65 4b 65 79 00 00 | 29 02 4e 74 53 65 74 49 |lueKey..|).NtSetI|
|00000460| 6e 66 6f 72 6d 61 74 69 | 6f 6e 46 69 6c 65 00 00 |nformati|onFile..|
|00000470| 07 02 4e 74 42 75 69 6c | 64 4e 75 6d 62 65 72 00 |..NtBuil|dNumber.|
|00000480| 71 03 5a 77 4c 6f 61 64 | 44 72 69 76 65 72 00 00 |q.ZwLoad|Driver..|
|00000490| 9d 03 5a 77 55 6e 6c 6f | 61 64 44 72 69 76 65 72 |..ZwUnlo|adDriver|
|000004a0| 00 00 7e 03 5a 77 4f 70 | 65 6e 54 68 72 65 61 64 |..~.ZwOp|enThread|
|000004b0| 00 00 7a 03 5a 77 4f 70 | 65 6e 50 72 6f 63 65 73 |..z.ZwOp|enProces|
|000004c0| 73 00 9c 03 5a 77 54 65 | 72 6d 69 6e 61 74 65 50 |s...ZwTe|rminateP|
|000004d0| 72 6f 63 65 73 73 00 00 | 57 01 4b 65 44 65 6c 61 |rocess..|W.KeDela|
|000004e0| 79 45 78 65 63 75 74 69 | 6f 6e 54 68 72 65 61 64 |yExecuti|onThread|
|000004f0| 00 00 35 03 53 65 43 72 | 65 61 74 65 43 6c 69 65 |..5.SeCr|eateClie|
|00000500| 6e 74 53 65 63 75 72 69 | 74 79 00 00 60 01 4b 65 |ntSecuri|ty..`.Ke|
|00000510| 47 65 74 43 75 72 72 65 | 6e 74 54 68 72 65 61 64 |GetCurre|ntThread|
|00000520| 00 00 4d 03 53 65 54 6f | 6b 65 6e 54 79 70 65 00 |..M.SeTo|kenType.|
|00000530| fb 00 49 6f 44 65 6c 65 | 74 65 44 65 76 69 63 65 |..IoDele|teDevice|
|00000540| 00 00 d5 00 49 6e 74 65 | 72 6c 6f 63 6b 65 64 43 |....Inte|rlockedC|
|00000550| 6f 6d 70 61 72 65 45 78 | 63 68 61 6e 67 65 00 00 |ompareEx|change..|
|00000560| 51 02 50 73 43 72 65 61 | 74 65 53 79 73 74 65 6d |Q.PsCrea|teSystem|
|00000570| 54 68 72 65 61 64 00 00 | 70 01 4b 65 49 6e 69 74 |Thread..|p.KeInit|
|00000580| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 f9 00 49 6f |ializeEv|ent...Io|
|00000590| 43 72 65 61 74 65 55 6e | 70 72 6f 74 65 63 74 65 |CreateUn|protecte|
|000005a0| 64 53 79 6d 62 6f 6c 69 | 63 4c 69 6e 6b 00 f3 00 |dSymboli|cLink...|
|000005b0| 49 6f 43 72 65 61 74 65 | 44 65 76 69 63 65 00 00 |IoCreate|Device..|
|000005c0| d0 02 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|000005d0| 53 74 72 69 6e 67 00 00 | 0c 01 49 6f 47 65 74 43 |String..|..IoGetC|
|000005e0| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 00 92 02 |urrentPr|ocess...|
|000005f0| 52 74 6c 43 6f 70 79 55 | 6e 69 63 6f 64 65 53 74 |RtlCopyU|nicodeSt|
|00000600| 72 69 6e 67 00 00 67 02 | 50 73 54 65 72 6d 69 6e |ring..g.|PsTermin|
|00000610| 61 74 65 53 79 73 74 65 | 6d 54 68 72 65 61 64 00 |ateSyste|mThread.|
|00000620| 54 01 4b 65 43 6c 65 61 | 72 45 76 65 6e 74 00 00 |T.KeClea|rEvent..|
|00000630| 8a 01 4b 65 52 65 61 64 | 53 74 61 74 65 45 76 65 |..KeRead|StateEve|
|00000640| 6e 74 00 00 d7 00 49 6e | 74 65 72 6c 6f 63 6b 65 |nt....In|terlocke|
|00000650| 64 45 78 63 68 61 6e 67 | 65 00 d8 00 49 6e 74 65 |dExchang|e...Inte|
|00000660| 72 6c 6f 63 6b 65 64 45 | 78 63 68 61 6e 67 65 41 |rlockedE|xchangeA|
|00000670| 64 64 00 00 b8 01 4b 65 | 57 61 69 74 46 6f 72 53 |dd....Ke|WaitForS|
|00000680| 69 6e 67 6c 65 4f 62 6a | 65 63 74 00 a2 01 4b 65 |ingleObj|ect...Ke|
|00000690| 53 65 74 45 76 65 6e 74 | 00 00 86 01 4b 65 51 75 |SetEvent|....KeQu|
|000006a0| 65 72 79 53 79 73 74 65 | 6d 54 69 6d 65 00 45 01 |erySyste|mTime.E.|
|000006b0| 49 6f 66 43 6f 6d 70 6c | 65 74 65 52 65 71 75 65 |IofCompl|eteReque|
|000006c0| 73 74 00 00 3d 02 4f 62 | 51 75 65 72 79 4e 61 6d |st..=.Ob|QueryNam|
|000006d0| 65 53 74 72 69 6e 67 00 | 3f 02 4f 62 52 65 66 65 |eString.|?.ObRefe|
|000006e0| 72 65 6e 63 65 4f 62 6a | 65 63 74 42 79 48 61 6e |renceObj|ectByHan|
|000006f0| 64 6c 65 00 f0 01 4d 6d | 53 65 63 74 69 6f 6e 4f |dle...Mm|SectionO|
|00000700| 62 6a 65 63 74 54 79 70 | 65 00 5b 02 50 73 4c 6f |bjectTyp|e.[.PsLo|
|00000710| 6f 6b 75 70 50 72 6f 63 | 65 73 73 42 79 50 72 6f |okupProc|essByPro|
|00000720| 63 65 73 73 49 64 00 00 | 3b 01 49 6f 54 68 72 65 |cessId..|;.IoThre|
|00000730| 61 64 54 6f 50 72 6f 63 | 65 73 73 00 5a 02 50 73 |adToProc|ess.Z.Ps|
|00000740| 49 73 54 68 72 65 61 64 | 54 65 72 6d 69 6e 61 74 |IsThread|Terminat|
|00000750| 69 6e 67 00 5d 02 50 73 | 4c 6f 6f 6b 75 70 54 68 |ing.].Ps|LookupTh|
|00000760| 72 65 61 64 42 79 54 68 | 72 65 61 64 49 64 00 00 |readByTh|readId..|
|00000770| 59 01 4b 65 44 65 74 61 | 63 68 50 72 6f 63 65 73 |Y.KeDeta|chProces|
|00000780| 73 00 20 02 4e 74 51 75 | 65 72 79 49 6e 66 6f 72 |s. .NtQu|eryInfor|
|00000790| 6d 61 74 69 6f 6e 50 72 | 6f 63 65 73 73 00 4f 01 |mationPr|ocess.O.|
|000007a0| 4b 65 41 74 74 61 63 68 | 50 72 6f 63 65 73 73 00 |KeAttach|Process.|
|000007b0| df 01 4d 6d 49 73 41 64 | 64 72 65 73 73 56 61 6c |..MmIsAd|dressVal|
|000007c0| 69 64 00 00 eb 02 52 74 | 6c 4e 74 53 74 61 74 75 |id....Rt|lNtStatu|
|000007d0| 73 54 6f 44 6f 73 45 72 | 72 6f 72 00 5e 02 50 73 |sToDosEr|ror.^.Ps|
|000007e0| 50 72 6f 63 65 73 73 54 | 79 70 65 00 68 02 50 73 |ProcessT|ype.h.Ps|
|000007f0| 54 68 72 65 61 64 54 79 | 70 65 00 00 40 02 4f 62 |ThreadTy|pe..@.Ob|
|00000800| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|00000810| 79 4e 61 6d 65 00 05 01 | 49 6f 46 69 6c 65 4f 62 |yName...|IoFileOb|
|00000820| 6a 65 63 74 54 79 70 65 | 00 00 54 02 50 73 47 65 |jectType|..T.PsGe|
|00000830| 74 43 75 72 72 65 6e 74 | 50 72 6f 63 65 73 73 49 |tCurrent|ProcessI|
|00000840| 64 00 a8 03 5f 61 6c 6c | 73 68 6c 00 db 03 73 74 |d..._all|shl...st|
|00000850| 72 6e 63 70 79 00 d9 02 | 52 74 6c 49 73 4e 61 6d |rncpy...|RtlIsNam|
|00000860| 65 4c 65 67 61 6c 44 4f | 53 38 44 6f 74 33 00 00 |eLegalDO|S8Dot3..|
|00000870| 77 02 52 74 6c 41 6e 73 | 69 53 74 72 69 6e 67 54 |w.RtlAns|iStringT|
|00000880| 6f 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |oUnicode|String..|
|00000890| 0f 03 52 74 6c 55 6e 69 | 63 6f 64 65 53 74 72 69 |..RtlUni|codeStri|
|000008a0| 6e 67 54 6f 41 6e 73 69 | 53 74 72 69 6e 67 00 00 |ngToAnsi|String..|
|000008b0| 1a 03 52 74 6c 55 70 63 | 61 73 65 55 6e 69 63 6f |..RtlUpc|aseUnico|
|000008c0| 64 65 53 74 72 69 6e 67 | 00 00 87 03 5a 77 51 75 |deString|....ZwQu|
|000008d0| 65 72 79 4f 62 6a 65 63 | 74 00 63 00 45 78 52 61 |eryObjec|t.c.ExRa|
|000008e0| 69 73 65 41 63 63 65 73 | 73 56 69 6f 6c 61 74 69 |iseAcces|sViolati|
|000008f0| 6f 6e 00 00 64 00 45 78 | 52 61 69 73 65 44 61 74 |on..d.Ex|RaiseDat|
|00000900| 61 74 79 70 65 4d 69 73 | 61 6c 69 67 6e 6d 65 6e |atypeMis|alignmen|
|00000910| 74 00 0d 01 49 6f 47 65 | 74 44 65 76 69 63 65 4f |t...IoGe|tDeviceO|
|00000920| 62 6a 65 63 74 50 6f 69 | 6e 74 65 72 00 00 e6 03 |bjectPoi|nter....|
|00000930| 77 63 73 63 68 72 00 00 | 8a 03 5a 77 51 75 65 72 |wcschr..|..ZwQuer|
|00000940| 79 53 79 6d 62 6f 6c 69 | 63 4c 69 6e 6b 4f 62 6a |ySymboli|cLinkObj|
|00000950| 65 63 74 00 7d 03 5a 77 | 4f 70 65 6e 53 79 6d 62 |ect.}.Zw|OpenSymb|
|00000960| 6f 6c 69 63 4c 69 6e 6b | 4f 62 6a 65 63 74 00 00 |olicLink|Object..|
|00000970| 1e 01 49 6f 51 75 65 72 | 79 46 69 6c 65 49 6e 66 |..IoQuer|yFileInf|
|00000980| 6f 72 6d 61 74 69 6f 6e | 00 00 44 01 49 6f 66 43 |ormation|..D.IofC|
|00000990| 61 6c 6c 44 72 69 76 65 | 72 00 e0 00 49 6f 41 6c |allDrive|r...IoAl|
|000009a0| 6c 6f 63 61 74 65 49 72 | 70 00 07 01 49 6f 46 72 |locateIr|p...IoFr|
|000009b0| 65 65 49 72 70 00 08 01 | 49 6f 46 72 65 65 4d 64 |eeIrp...|IoFreeMd|
|000009c0| 6c 00 f6 01 4d 6d 55 6e | 6c 6f 63 6b 50 61 67 65 |l...MmUn|lockPage|
|000009d0| 73 00 f8 01 4d 6d 55 6e | 6d 61 70 4c 6f 63 6b 65 |s...MmUn|mapLocke|
|000009e0| 64 50 61 67 65 73 00 00 | e7 01 4d 6d 4d 61 70 4c |dPages..|..MmMapL|
|000009f0| 6f 63 6b 65 64 50 61 67 | 65 73 00 00 11 01 49 6f |ockedPag|es....Io|
|00000a00| 47 65 74 52 65 6c 61 74 | 65 64 44 65 76 69 63 65 |GetRelat|edDevice|
|00000a10| 4f 62 6a 65 63 74 00 00 | 30 01 49 6f 53 65 74 49 |Object..|0.IoSetI|
|00000a20| 6e 66 6f 72 6d 61 74 69 | 6f 6e 00 00 a6 03 5f 61 |nformati|on...._a|
|00000a30| 6c 6c 6d 75 6c 00 aa 03 | 5f 61 75 6c 6c 64 69 76 |llmul...|_aulldiv|
|00000a40| 00 00 cc 02 52 74 6c 49 | 6d 61 67 65 4e 74 48 65 |....RtlI|mageNtHe|
|00000a50| 61 64 65 72 00 00 8b 03 | 5a 77 51 75 65 72 79 53 |ader....|ZwQueryS|
|00000a60| 79 73 74 65 6d 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |ystemInf|ormation|
|00000a70| 00 00 b4 03 5f 73 74 72 | 69 63 6d 70 00 00 9f 03 |...._str|icmp....|
|00000a80| 5a 77 55 6e 6d 61 70 56 | 69 65 77 4f 66 53 65 63 |ZwUnmapV|iewOfSec|
|00000a90| 74 69 6f 6e 00 00 74 03 | 5a 77 4d 61 70 56 69 65 |tion..t.|ZwMapVie|
|00000aa0| 77 4f 66 53 65 63 74 69 | 6f 6e 00 00 ea 03 77 63 |wOfSecti|on....wc|
|00000ab0| 73 6c 65 6e 00 00 4e 01 | 4b 65 41 64 64 53 79 73 |slen..N.|KeAddSys|
|00000ac0| 74 65 6d 53 65 72 76 69 | 63 65 54 61 62 6c 65 00 |temServi|ceTable.|
|00000ad0| ac 03 5f 61 75 6c 6c 73 | 68 72 00 00 7d 01 4b 65 |.._aulls|hr..}.Ke|
|00000ae0| 49 6e 73 65 72 74 51 75 | 65 75 65 41 70 63 00 00 |InsertQu|eueApc..|
|00000af0| 6d 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 41 70 |m.KeInit|ializeAp|
|00000b00| 63 00 36 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |c.6.ExAl|locatePo|
|00000b10| 6f 6c 57 69 74 68 54 61 | 67 00 18 01 49 6f 49 73 |olWithTa|g...IoIs|
|00000b20| 53 79 73 74 65 6d 54 68 | 72 65 61 64 00 00 9e 01 |SystemTh|read....|
|00000b30| 4b 65 53 65 72 76 69 63 | 65 44 65 73 63 72 69 70 |KeServic|eDescrip|
|00000b40| 74 6f 72 54 61 62 6c 65 | 00 00 d6 01 4d 6d 43 72 |torTable|....MmCr|
|00000b50| 65 61 74 65 53 65 63 74 | 69 6f 6e 00 fb 01 4d 6d |eateSect|ion...Mm|
|00000b60| 55 6e 6d 61 70 56 69 65 | 77 4f 66 53 65 63 74 69 |UnmapVie|wOfSecti|
|00000b70| 6f 6e 00 00 eb 01 4d 6d | 4d 61 70 56 69 65 77 4f |on....Mm|MapViewO|
|00000b80| 66 53 65 63 74 69 6f 6e | 00 00 82 01 4b 65 4e 75 |fSection|....KeNu|
|00000b90| 6d 62 65 72 50 72 6f 63 | 65 73 73 6f 72 73 00 00 |mberProc|essors..|
|00000ba0| 57 02 50 73 47 65 74 56 | 65 72 73 69 6f 6e 00 00 |W.PsGetV|ersion..|
|00000bb0| f8 02 52 74 6c 51 75 65 | 72 79 52 65 67 69 73 74 |..RtlQue|ryRegist|
|00000bc0| 72 79 56 61 6c 75 65 73 | 00 00 42 00 45 78 46 72 |ryValues|..B.ExFr|
|00000bd0| 65 65 50 6f 6f 6c 00 00 | 7b 02 52 74 6c 41 70 70 |eePool..|{.RtlApp|
|00000be0| 65 6e 64 55 6e 69 63 6f | 64 65 54 6f 53 74 72 69 |endUnico|deToStri|
|00000bf0| 6e 67 00 00 25 03 52 74 | 6c 57 72 69 74 65 52 65 |ng..%.Rt|lWriteRe|
|00000c00| 67 69 73 74 72 79 56 61 | 6c 75 65 00 b3 03 5f 73 |gistryVa|lue..._s|
|00000c10| 6e 77 70 72 69 6e 74 66 | 00 00 52 01 4b 65 42 75 |nwprintf|..R.KeBu|
|00000c20| 67 43 68 65 63 6b 45 78 | 00 00 27 00 44 62 67 42 |gCheckEx|..'.DbgB|
|00000c30| 72 65 61 6b 50 6f 69 6e | 74 00 86 02 52 74 6c 43 |reakPoin|t...RtlC|
|00000c40| 6f 6d 70 61 72 65 4d 65 | 6d 6f 72 79 00 00 0d 03 |ompareMe|mory....|
|00000c50| 52 74 6c 54 69 6d 65 54 | 6f 54 69 6d 65 46 69 65 |RtlTimeT|oTimeFie|
|00000c60| 6c 64 73 00 70 00 45 78 | 53 79 73 74 65 6d 54 69 |lds.p.Ex|SystemTi|
|00000c70| 6d 65 54 6f 4c 6f 63 61 | 6c 54 69 6d 65 00 83 03 |meToLoca|lTime...|
|00000c80| 5a 77 51 75 65 72 79 49 | 6e 66 6f 72 6d 61 74 69 |ZwQueryI|nformati|
|00000c90| 6f 6e 46 69 6c 65 00 00 | f7 01 4d 6d 55 6e 6d 61 |onFile..|..MmUnma|
|00000ca0| 70 49 6f 53 70 61 63 65 | 00 00 a7 02 52 74 6c 45 |pIoSpace|....RtlE|
|00000cb0| 6e 6c 61 72 67 65 64 49 | 6e 74 65 67 65 72 4d 75 |nlargedI|ntegerMu|
|00000cc0| 6c 74 69 70 6c 79 00 00 | 8e 03 5a 77 52 65 61 64 |ltiply..|..ZwRead|
|00000cd0| 46 69 6c 65 00 00 2a 00 | 44 62 67 50 72 69 6e 74 |File..*.|DbgPrint|
|00000ce0| 00 00 6e 74 6f 73 6b 72 | 6e 6c 2e 65 78 65 00 00 |..ntoskr|nl.exe..|
|00000cf0| 18 03 52 74 6c 55 6e 77 | 69 6e 64 00 42 00 4b 65 |..RtlUnw|ind.B.Ke|
|00000d00| 47 65 74 43 75 72 72 65 | 6e 74 49 72 71 6c 00 00 |GetCurre|ntIrql..|
|00000d10| 44 00 4b 65 51 75 65 72 | 79 50 65 72 66 6f 72 6d |D.KeQuer|yPerform|
|00000d20| 61 6e 63 65 43 6f 75 6e | 74 65 72 00 1b 00 48 61 |anceCoun|ter...Ha|
|00000d30| 6c 4d 61 6b 65 42 65 65 | 70 00 48 41 4c 2e 64 6c |lMakeBee|p.HAL.dl|
|00000d40| 6c 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |l.......|........|
|00000d50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+