home *** CD-ROM | disk | FTP | other *** search
Unknown | 1998-08-17 | 3.7 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 0c 24 02 00 00 00 00 00 | 00 00 00 00 90 31 02 00 |.$......|.....1..|
|00000010| bc 71 00 00 f0 23 02 00 | 00 00 00 00 00 00 00 00 |.q...#..|........|
|00000020| d2 31 02 00 a0 71 00 00 | fc 23 02 00 00 00 00 00 |.1...q..|.#......|
|00000030| 00 00 00 00 30 32 02 00 | ac 71 00 00 00 00 00 00 |....02..|.q......|
|00000040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| be 31 02 00 aa 31 02 00 | 00 00 00 00 fc 31 02 00 |.1...1..|.....1..|
|00000060| da 31 02 00 0c 32 02 00 | 00 00 00 00 d0 26 02 00 |.1...2..|.....&..|
|00000070| f0 26 02 00 08 27 02 00 | 2a 27 02 00 3a 27 02 00 |.&...'..|*'..:'..|
|00000080| b8 26 02 00 4e 27 02 00 | 5a 27 02 00 76 27 02 00 |.&..N'..|Z'..v'..|
|00000090| 86 27 02 00 9e 27 02 00 | ac 27 02 00 c4 27 02 00 |.'...'..|.'...'..|
|000000a0| ea 27 02 00 fa 27 02 00 | 14 28 02 00 2c 28 02 00 |.'...'..|.(..,(..|
|000000b0| 44 28 02 00 62 28 02 00 | 6a 28 02 00 80 28 02 00 |D(..b(..|j(...(..|
|000000c0| 94 28 02 00 ae 28 02 00 | c6 28 02 00 d0 28 02 00 |.(...(..|.(...(..|
|000000d0| e4 28 02 00 08 29 02 00 | 1e 29 02 00 3c 29 02 00 |.(...)..|.)..<)..|
|000000e0| 54 29 02 00 68 29 02 00 | 7e 29 02 00 96 29 02 00 |T)..h)..|~)...)..|
|000000f0| b0 29 02 00 c6 29 02 00 | e0 29 02 00 f6 29 02 00 |.)...)..|.)...)..|
|00000100| 0e 2a 02 00 24 2a 02 00 | 44 2a 02 00 5a 2a 02 00 |.*..$*..|D*..Z*..|
|00000110| 74 2a 02 00 90 2a 02 00 | a6 2a 02 00 c0 2a 02 00 |t*...*..|.*...*..|
|00000120| d6 2a 02 00 e4 2a 02 00 | fa 2a 02 00 0e 2b 02 00 |.*...*..|.*...+..|
|00000130| 2e 2b 02 00 38 2b 02 00 | 56 2b 02 00 72 2b 02 00 |.+..8+..|V+..r+..|
|00000140| 7a 2b 02 00 8e 2b 02 00 | a8 2b 02 00 be 2b 02 00 |z+...+..|.+...+..|
|00000150| d2 2b 02 00 ec 2b 02 00 | 02 2c 02 00 18 2c 02 00 |.+...+..|.,...,..|
|00000160| 74 26 02 00 88 26 02 00 | aa 26 02 00 6a 2c 02 00 |t&...&..|.&..j,..|
|00000170| 84 2c 02 00 9e 2c 02 00 | bc 2c 02 00 e8 2c 02 00 |.,...,..|.,...,..|
|00000180| 08 2d 02 00 18 2d 02 00 | 24 2d 02 00 44 2d 02 00 |.-...-..|$-..D-..|
|00000190| 54 2d 02 00 76 2d 02 00 | 96 2d 02 00 a2 2d 02 00 |T-..v-..|.-...-..|
|000001a0| b2 2d 02 00 d2 2d 02 00 | ea 2d 02 00 fc 2d 02 00 |.-...-..|.-...-..|
|000001b0| 10 2e 02 00 28 2e 02 00 | 3e 2e 02 00 5a 2e 02 00 |....(...|>...Z...|
|000001c0| 78 2e 02 00 92 2e 02 00 | ac 2e 02 00 bc 2e 02 00 |x.......|........|
|000001d0| de 2e 02 00 e8 2e 02 00 | 08 2f 02 00 1a 2f 02 00 |........|./.../..|
|000001e0| 2c 2f 02 00 44 2f 02 00 | 5c 2f 02 00 66 2f 02 00 |,/..D/..|\/..f/..|
|000001f0| 72 2f 02 00 84 2f 02 00 | 96 2f 02 00 a8 2f 02 00 |r/.../..|./.../..|
|00000200| c0 2f 02 00 dc 2f 02 00 | f8 2f 02 00 08 30 02 00 |./.../..|./...0..|
|00000210| 1c 30 02 00 34 30 02 00 | 50 30 02 00 6e 30 02 00 |.0..40..|P0..n0..|
|00000220| 78 30 02 00 92 30 02 00 | b2 30 02 00 d0 30 02 00 |x0...0..|.0...0..|
|00000230| e4 30 02 00 02 31 02 00 | 18 31 02 00 32 31 02 00 |.0...1..|.1..21..|
|00000240| 42 31 02 00 50 31 02 00 | 64 31 02 00 76 31 02 00 |B1..P1..|d1..v1..|
|00000250| 9e 31 02 00 5a 26 02 00 | 38 26 02 00 2c 26 02 00 |.1..Z&..|8&..,&..|
|00000260| 14 26 02 00 60 2c 02 00 | 3e 2c 02 00 56 2c 02 00 |.&..`,..|>,..V,..|
|00000270| 00 00 00 00 d5 02 52 74 | 6c 49 6e 69 74 55 6e 69 |......Rt|lInitUni|
|00000280| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 c3 03 5f 77 |codeStri|ng...._w|
|00000290| 63 73 6e 69 63 6d 70 00 | 7a 00 45 78 66 69 33 38 |csnicmp.|z.Exfi38|
|000002a0| 36 49 6e 74 65 72 6c 6f | 63 6b 65 64 44 65 63 72 |6Interlo|ckedDecr|
|000002b0| 65 6d 65 6e 74 4c 6f 6e | 67 00 8e 02 52 74 6c 43 |ementLon|g...RtlC|
|000002c0| 6f 6d 70 61 72 65 55 6e | 69 63 6f 64 65 53 74 72 |ompareUn|icodeStr|
|000002d0| 69 6e 67 00 8b 02 52 74 | 6c 43 6f 6d 70 61 72 65 |ing...Rt|lCompare|
|000002e0| 4d 65 6d 6f 72 79 00 00 | 7c 00 45 78 66 69 33 38 |Memory..||.Exfi38|
|000002f0| 36 49 6e 74 65 72 6c 6f | 63 6b 65 64 49 6e 63 72 |6Interlo|ckedIncr|
|00000300| 65 6d 65 6e 74 4c 6f 6e | 67 00 43 00 45 78 46 72 |ementLon|g.C.ExFr|
|00000310| 65 65 50 6f 6f 6c 00 00 | b4 02 52 74 6c 45 71 75 |eePool..|..RtlEqu|
|00000320| 61 6c 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |alUnicod|eString.|
|00000330| 75 00 45 78 66 49 6e 74 | 65 72 6c 6f 63 6b 65 64 |u.ExfInt|erlocked|
|00000340| 49 6e 73 65 72 74 48 65 | 61 64 4c 69 73 74 00 00 |InsertHe|adList..|
|00000350| 6e 00 45 78 52 65 6c 65 | 61 73 65 52 65 73 6f 75 |n.ExRele|aseResou|
|00000360| 72 63 65 4c 69 74 65 00 | 2e 00 45 78 41 63 71 75 |rceLite.|..ExAcqu|
|00000370| 69 72 65 52 65 73 6f 75 | 72 63 65 45 78 63 6c 75 |ireResou|rceExclu|
|00000380| 73 69 76 65 4c 69 74 65 | 00 00 68 00 45 78 52 61 |siveLite|..h.ExRa|
|00000390| 69 73 65 53 74 61 74 75 | 73 00 87 01 4b 65 51 75 |iseStatu|s...KeQu|
|000003a0| 65 72 79 53 79 73 74 65 | 6d 54 69 6d 65 00 09 01 |erySyste|mTime...|
|000003b0| 49 6f 46 72 65 65 4d 64 | 6c 00 d4 01 4d 6d 42 75 |IoFreeMd|l...MmBu|
|000003c0| 69 6c 64 4d 64 6c 46 6f | 72 4e 6f 6e 50 61 67 65 |ildMdlFo|rNonPage|
|000003d0| 64 50 6f 6f 6c 00 e2 00 | 49 6f 41 6c 6c 6f 63 61 |dPool...|IoAlloca|
|000003e0| 74 65 4d 64 6c 00 36 00 | 45 78 41 6c 6c 6f 63 61 |teMdl.6.|ExAlloca|
|000003f0| 74 65 50 6f 6f 6c 57 69 | 74 68 54 61 67 00 a3 01 |tePoolWi|thTag...|
|00000400| 4b 65 53 65 74 45 76 65 | 6e 74 00 00 c8 02 52 74 |KeSetEve|nt....Rt|
|00000410| 6c 46 72 65 65 55 6e 69 | 63 6f 64 65 53 74 72 69 |lFreeUni|codeStri|
|00000420| 6e 67 00 00 f5 02 52 74 | 6c 4f 65 6d 53 74 72 69 |ng....Rt|lOemStri|
|00000430| 6e 67 54 6f 43 6f 75 6e | 74 65 64 55 6e 69 63 6f |ngToCoun|tedUnico|
|00000440| 64 65 53 74 72 69 6e 67 | 00 00 d4 02 52 74 6c 49 |deString|....RtlI|
|00000450| 6e 69 74 53 74 72 69 6e | 67 00 db 02 52 74 6c 49 |nitStrin|g...RtlI|
|00000460| 6e 73 65 72 74 55 6e 69 | 63 6f 64 65 50 72 65 66 |nsertUni|codePref|
|00000470| 69 78 00 00 97 02 52 74 | 6c 43 6f 70 79 55 6e 69 |ix....Rt|lCopyUni|
|00000480| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 c3 02 52 74 |codeStri|ng....Rt|
|00000490| 6c 46 69 6e 64 55 6e 69 | 63 6f 64 65 50 72 65 66 |lFindUni|codePref|
|000004a0| 69 78 00 00 f7 02 52 74 | 6c 4f 65 6d 53 74 72 69 |ix....Rt|lOemStri|
|000004b0| 6e 67 54 6f 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |ngToUnic|odeStrin|
|000004c0| 67 00 d6 03 72 61 6e 64 | 00 00 fc 01 4d 6d 55 6e |g...rand|....MmUn|
|000004d0| 6d 61 70 4c 6f 63 6b 65 | 64 50 61 67 65 73 00 00 |mapLocke|dPages..|
|000004e0| e9 00 49 6f 42 75 69 6c | 64 50 61 72 74 69 61 6c |..IoBuil|dPartial|
|000004f0| 4d 64 6c 00 01 03 52 74 | 6c 52 65 6d 6f 76 65 55 |Mdl...Rt|lRemoveU|
|00000500| 6e 69 63 6f 64 65 50 72 | 65 66 69 78 00 00 77 01 |nicodePr|efix..w.|
|00000510| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 53 70 69 6e |KeInitia|lizeSpin|
|00000520| 4c 6f 63 6b 00 00 d3 03 | 6d 65 6d 6d 6f 76 65 00 |Lock....|memmove.|
|00000530| c5 02 52 74 6c 46 72 65 | 65 41 6e 73 69 53 74 72 |..RtlFre|eAnsiStr|
|00000540| 69 6e 67 00 22 03 52 74 | 6c 55 70 63 61 73 65 55 |ing.".Rt|lUpcaseU|
|00000550| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 4f 65 |nicodeSt|ringToOe|
|00000560| 6d 53 74 72 69 6e 67 00 | d6 02 52 74 6c 49 6e 69 |mString.|..RtlIni|
|00000570| 74 69 61 6c 69 7a 65 42 | 69 74 4d 61 70 00 2f 00 |tializeB|itMap./.|
|00000580| 45 78 41 63 71 75 69 72 | 65 52 65 73 6f 75 72 63 |ExAcquir|eResourc|
|00000590| 65 53 68 61 72 65 64 4c | 69 74 65 00 81 01 4b 65 |eSharedL|ite...Ke|
|000005a0| 4c 65 61 76 65 43 72 69 | 74 69 63 61 6c 52 65 67 |LeaveCri|ticalReg|
|000005b0| 69 6f 6e 00 34 01 49 6f | 53 65 74 54 6f 70 4c 65 |ion.4.Io|SetTopLe|
|000005c0| 76 65 6c 49 72 70 00 00 | 46 01 49 6f 66 43 6f 6d |velIrp..|F.IofCom|
|000005d0| 70 6c 65 74 65 52 65 71 | 75 65 73 74 00 00 5c 01 |pleteReq|uest..\.|
|000005e0| 4b 65 45 6e 74 65 72 43 | 72 69 74 69 63 61 6c 52 |KeEnterC|riticalR|
|000005f0| 65 67 69 6f 6e 00 2a 01 | 49 6f 52 65 6c 65 61 73 |egion.*.|IoReleas|
|00000600| 65 43 61 6e 63 65 6c 53 | 70 69 6e 4c 6f 63 6b 00 |eCancelS|pinLock.|
|00000610| d8 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 45 78 63 |..Interl|ockedExc|
|00000620| 68 61 6e 67 65 00 db 00 | 49 6f 41 63 71 75 69 72 |hange...|IoAcquir|
|00000630| 65 43 61 6e 63 65 6c 53 | 70 69 6e 4c 6f 63 6b 00 |eCancelS|pinLock.|
|00000640| 2c 01 49 6f 52 65 6d 6f | 76 65 53 68 61 72 65 41 |,.IoRemo|veShareA|
|00000650| 63 63 65 73 73 00 db 01 | 4d 6d 46 6f 72 63 65 53 |ccess...|MmForceS|
|00000660| 65 63 74 69 6f 6e 43 6c | 6f 73 65 64 00 00 da 01 |ectionCl|osed....|
|00000670| 4d 6d 46 6c 75 73 68 49 | 6d 61 67 65 53 65 63 74 |MmFlushI|mageSect|
|00000680| 69 6f 6e 00 23 01 49 6f | 52 61 69 73 65 49 6e 66 |ion.#.Io|RaiseInf|
|00000690| 6f 72 6d 61 74 69 6f 6e | 61 6c 48 61 72 64 45 72 |ormation|alHardEr|
|000006a0| 72 6f 72 00 0f 03 52 74 | 6c 54 69 6d 65 46 69 65 |ror...Rt|lTimeFie|
|000006b0| 6c 64 73 54 6f 54 69 6d | 65 00 5f 00 45 78 4c 6f |ldsToTim|e._.ExLo|
|000006c0| 63 61 6c 54 69 6d 65 54 | 6f 53 79 73 74 65 6d 54 |calTimeT|oSystemT|
|000006d0| 69 6d 65 00 04 03 52 74 | 6c 53 65 63 6f 6e 64 73 |ime...Rt|lSeconds|
|000006e0| 53 69 6e 63 65 31 39 38 | 30 54 6f 54 69 6d 65 00 |Since198|0ToTime.|
|000006f0| 12 03 52 74 6c 54 69 6d | 65 54 6f 54 69 6d 65 46 |..RtlTim|eToTimeF|
|00000700| 69 65 6c 64 73 00 71 00 | 45 78 53 79 73 74 65 6d |ields.q.|ExSystem|
|00000710| 54 69 6d 65 54 6f 4c 6f | 63 61 6c 54 69 6d 65 00 |TimeToLo|calTime.|
|00000720| f0 00 49 6f 43 68 65 63 | 6b 53 68 61 72 65 41 63 |..IoChec|kShareAc|
|00000730| 63 65 73 73 00 00 52 01 | 4b 65 42 75 67 43 68 65 |cess..R.|KeBugChe|
|00000740| 63 6b 00 00 61 01 4b 65 | 47 65 74 43 75 72 72 65 |ck..a.Ke|GetCurre|
|00000750| 6e 74 54 68 72 65 61 64 | 00 00 32 01 49 6f 53 65 |ntThread|..2.IoSe|
|00000760| 74 53 68 61 72 65 41 63 | 63 65 73 73 00 00 96 00 |tShareAc|cess....|
|00000770| 46 73 52 74 6c 44 6f 65 | 73 4e 61 6d 65 43 6f 6e |FsRtlDoe|sNameCon|
|00000780| 74 61 69 6e 57 69 6c 64 | 43 61 72 64 73 00 eb 03 |tainWild|Cards...|
|00000790| 77 63 73 63 68 72 00 00 | 18 03 52 74 6c 55 6e 69 |wcschr..|..RtlUni|
|000007a0| 63 6f 64 65 53 74 72 69 | 6e 67 54 6f 4f 65 6d 53 |codeStri|ngToOemS|
|000007b0| 74 72 69 6e 67 00 4b 00 | 45 78 49 6e 69 74 69 61 |tring.K.|ExInitia|
|000007c0| 6c 69 7a 65 52 65 73 6f | 75 72 63 65 4c 69 74 65 |lizeReso|urceLite|
|000007d0| 00 00 d8 03 73 72 61 6e | 64 00 e9 01 4d 6d 4d 61 |....sran|d...MmMa|
|000007e0| 70 4c 6f 63 6b 65 64 50 | 61 67 65 73 00 00 b7 00 |pLockedP|ages....|
|000007f0| 46 73 52 74 6c 4e 6f 72 | 6d 61 6c 69 7a 65 4e 74 |FsRtlNor|malizeNt|
|00000800| 73 74 61 74 75 73 00 00 | f0 01 4d 6d 50 72 6f 62 |status..|..MmProb|
|00000810| 65 41 6e 64 4c 6f 63 6b | 50 61 67 65 73 00 c7 02 |eAndLock|Pages...|
|00000820| 52 74 6c 46 72 65 65 4f | 65 6d 53 74 72 69 6e 67 |RtlFreeO|emString|
|00000830| 00 00 a9 00 46 73 52 74 | 6c 49 73 4e 61 6d 65 49 |....FsRt|lIsNameI|
|00000840| 6e 45 78 70 72 65 73 73 | 69 6f 6e 00 06 02 4e 6c |nExpress|ion...Nl|
|00000850| 73 4f 65 6d 4c 65 61 64 | 42 79 74 65 49 6e 66 6f |sOemLead|ByteInfo|
|00000860| 00 00 05 02 4e 6c 73 4d | 62 4f 65 6d 43 6f 64 65 |....NlsM|bOemCode|
|00000870| 50 61 67 65 54 61 67 00 | 15 03 52 74 6c 55 6e 69 |PageTag.|..RtlUni|
|00000880| 63 6f 64 65 53 74 72 69 | 6e 67 54 6f 43 6f 75 6e |codeStri|ngToCoun|
|00000890| 74 65 64 4f 65 6d 53 74 | 72 69 6e 67 00 00 42 01 |tedOemSt|ring..B.|
|000008a0| 49 6f 57 72 69 74 65 45 | 72 72 6f 72 4c 6f 67 45 |IoWriteE|rrorLogE|
|000008b0| 6e 74 72 79 00 00 ef 03 | 77 63 73 6c 65 6e 00 00 |ntry....|wcslen..|
|000008c0| ed 03 77 63 73 63 70 79 | 00 00 e0 00 49 6f 41 6c |..wcscpy|....IoAl|
|000008d0| 6c 6f 63 61 74 65 45 72 | 72 6f 72 4c 6f 67 45 6e |locateEr|rorLogEn|
|000008e0| 74 72 79 00 aa 00 46 73 | 52 74 6c 49 73 4e 74 73 |try...Fs|RtlIsNts|
|000008f0| 74 61 74 75 73 45 78 70 | 65 63 74 65 64 00 30 03 |tatusExp|ected.0.|
|00000900| 52 74 6c 78 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |RtlxUnic|odeStrin|
|00000910| 67 54 6f 4f 65 6d 53 69 | 7a 65 00 00 21 03 52 74 |gToOemSi|ze..!.Rt|
|00000920| 6c 55 70 63 61 73 65 55 | 6e 69 63 6f 64 65 53 74 |lUpcaseU|nicodeSt|
|00000930| 72 69 6e 67 54 6f 43 6f | 75 6e 74 65 64 4f 65 6d |ringToCo|untedOem|
|00000940| 53 74 72 69 6e 67 00 00 | ac 00 46 73 52 74 6c 4c |String..|..FsRtlL|
|00000950| 65 67 61 6c 41 6e 73 69 | 43 68 61 72 61 63 74 65 |egalAnsi|Characte|
|00000960| 72 41 72 72 61 79 00 00 | 27 00 44 62 67 42 72 65 |rArray..|'.DbgBre|
|00000970| 61 6b 50 6f 69 6e 74 00 | 2a 00 44 62 67 50 72 69 |akPoint.|*.DbgPri|
|00000980| 6e 74 00 00 76 00 45 78 | 66 49 6e 74 65 72 6c 6f |nt..v.Ex|fInterlo|
|00000990| 63 6b 65 64 49 6e 73 65 | 72 74 54 61 69 6c 4c 69 |ckedInse|rtTailLi|
|000009a0| 73 74 00 00 45 01 49 6f | 66 43 61 6c 6c 44 72 69 |st..E.Io|fCallDri|
|000009b0| 76 65 72 00 bb 01 4b 65 | 66 52 65 6c 65 61 73 65 |ver...Ke|fRelease|
|000009c0| 53 70 69 6e 4c 6f 63 6b | 46 72 6f 6d 44 70 63 4c |SpinLock|FromDpcL|
|000009d0| 65 76 65 6c 00 00 ba 01 | 4b 65 66 41 63 71 75 69 |evel....|KefAcqui|
|000009e0| 72 65 53 70 69 6e 4c 6f | 63 6b 41 74 44 70 63 4c |reSpinLo|ckAtDpcL|
|000009f0| 65 76 65 6c 00 00 08 01 | 49 6f 46 72 65 65 49 72 |evel....|IoFreeIr|
|00000a00| 70 00 e1 00 49 6f 41 6c | 6c 6f 63 61 74 65 49 72 |p...IoAl|locateIr|
|00000a10| 70 00 79 00 45 78 66 49 | 6e 74 65 72 6c 6f 63 6b |p.y.ExfI|nterlock|
|00000a20| 65 64 52 65 6d 6f 76 65 | 48 65 61 64 4c 69 73 74 |edRemove|HeadList|
|00000a30| 00 00 b9 01 4b 65 57 61 | 69 74 46 6f 72 53 69 6e |....KeWa|itForSin|
|00000a40| 67 6c 65 4f 62 6a 65 63 | 74 00 63 00 45 78 51 75 |gleObjec|t.c.ExQu|
|00000a50| 65 75 65 57 6f 72 6b 49 | 74 65 6d 00 15 01 49 6f |eueWorkI|tem...Io|
|00000a60| 47 65 74 54 6f 70 4c 65 | 76 65 6c 49 72 70 00 00 |GetTopLe|velIrp..|
|00000a70| d5 01 4d 6d 43 61 6e 46 | 69 6c 65 42 65 54 72 75 |..MmCanF|ileBeTru|
|00000a80| 6e 63 61 74 65 64 00 00 | 0d 01 49 6f 47 65 74 43 |ncated..|..IoGetC|
|00000a90| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 00 c9 00 |urrentPr|ocess...|
|00000aa0| 46 73 52 74 6c 52 65 67 | 69 73 74 65 72 55 6e 63 |FsRtlReg|isterUnc|
|00000ab0| 50 72 6f 76 69 64 65 72 | 00 00 92 00 46 73 52 74 |Provider|....FsRt|
|00000ac0| 6c 44 65 72 65 67 69 73 | 74 65 72 55 6e 63 50 72 |lDeregis|terUncPr|
|00000ad0| 6f 76 69 64 65 72 00 00 | 4c 03 53 65 52 65 6c 65 |ovider..|L.SeRele|
|00000ae0| 61 73 65 53 75 62 6a 65 | 63 74 43 6f 6e 74 65 78 |aseSubje|ctContex|
|00000af0| 74 00 37 03 53 65 43 61 | 70 74 75 72 65 53 75 62 |t.7.SeCa|ptureSub|
|00000b00| 6a 65 63 74 43 6f 6e 74 | 65 78 74 00 fa 01 4d 6d |jectCont|ext...Mm|
|00000b10| 55 6e 6c 6f 63 6b 50 61 | 67 65 73 00 7f 02 52 74 |UnlockPa|ges...Rt|
|00000b20| 6c 41 70 70 65 6e 64 55 | 6e 69 63 6f 64 65 53 74 |lAppendU|nicodeSt|
|00000b30| 72 69 6e 67 54 6f 53 74 | 72 69 6e 67 00 00 f2 03 |ringToSt|ring....|
|00000b40| 77 63 73 6e 63 70 79 00 | 48 03 53 65 51 75 65 72 |wcsncpy.|H.SeQuer|
|00000b50| 79 41 75 74 68 65 6e 74 | 69 63 61 74 69 6f 6e 49 |yAuthent|icationI|
|00000b60| 64 54 6f 6b 65 6e 00 00 | f4 00 49 6f 43 72 65 61 |dToken..|..IoCrea|
|00000b70| 74 65 44 65 76 69 63 65 | 00 00 fc 00 49 6f 44 65 |teDevice|....IoDe|
|00000b80| 6c 65 74 65 44 65 76 69 | 63 65 00 00 3d 00 45 78 |leteDevi|ce..=.Ex|
|00000b90| 44 65 6c 65 74 65 52 65 | 73 6f 75 72 63 65 4c 69 |DeleteRe|sourceLi|
|00000ba0| 74 65 00 00 86 03 5a 77 | 51 75 65 72 79 44 65 66 |te....Zw|QueryDef|
|00000bb0| 61 75 6c 74 4c 6f 63 61 | 6c 65 00 00 60 03 5a 77 |aultLoca|le..`.Zw|
|00000bc0| 43 6c 6f 73 65 00 7e 03 | 5a 77 4f 70 65 6e 4b 65 |Close.~.|ZwOpenKe|
|00000bd0| 79 00 91 03 5a 77 51 75 | 65 72 79 56 61 6c 75 65 |y...ZwQu|eryValue|
|00000be0| 4b 65 79 00 5a 01 4b 65 | 44 65 74 61 63 68 50 72 |Key.Z.Ke|DetachPr|
|00000bf0| 6f 63 65 73 73 00 50 01 | 4b 65 41 74 74 61 63 68 |ocess.P.|KeAttach|
|00000c00| 50 72 6f 63 65 73 73 00 | 49 02 4f 62 66 44 65 72 |Process.|I.ObfDer|
|00000c10| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|00000c20| 12 01 49 6f 47 65 74 52 | 65 6c 61 74 65 64 44 65 |..IoGetR|elatedDe|
|00000c30| 76 69 63 65 4f 62 6a 65 | 63 74 00 00 44 02 4f 62 |viceObje|ct..D.Ob|
|00000c40| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|00000c50| 79 48 61 6e 64 6c 65 00 | 65 03 5a 77 43 72 65 61 |yHandle.|e.ZwCrea|
|00000c60| 74 65 46 69 6c 65 00 00 | 71 01 4b 65 49 6e 69 74 |teFile..|q.KeInit|
|00000c70| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 59 02 50 73 |ializeEv|ent.Y.Ps|
|00000c80| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|00000c90| 73 49 64 00 e5 01 4d 6d | 4c 6f 63 6b 50 61 67 61 |sId...Mm|LockPaga|
|00000ca0| 62 6c 65 44 61 74 61 53 | 65 63 74 69 6f 6e 00 00 |bleDataS|ection..|
|00000cb0| f9 01 4d 6d 55 6e 6c 6f | 63 6b 50 61 67 61 62 6c |..MmUnlo|ckPagabl|
|00000cc0| 65 49 6d 61 67 65 53 65 | 63 74 69 6f 6e 00 d7 03 |eImageSe|ction...|
|00000cd0| 73 70 72 69 6e 74 66 00 | 7e 02 52 74 6c 41 70 70 |sprintf.|~.RtlApp|
|00000ce0| 65 6e 64 53 74 72 69 6e | 67 54 6f 53 74 72 69 6e |endStrin|gToStrin|
|00000cf0| 67 00 7c 02 52 74 6c 41 | 6e 73 69 53 74 72 69 6e |g.|.RtlA|nsiStrin|
|00000d00| 67 54 6f 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |gToUnico|deString|
|00000d10| 00 00 2d 03 52 74 6c 78 | 41 6e 73 69 53 74 72 69 |..-.Rtlx|AnsiStri|
|00000d20| 6e 67 54 6f 55 6e 69 63 | 6f 64 65 53 69 7a 65 00 |ngToUnic|odeSize.|
|00000d30| d2 02 52 74 6c 49 6e 69 | 74 41 6e 73 69 53 74 72 |..RtlIni|tAnsiStr|
|00000d40| 69 6e 67 00 d9 02 52 74 | 6c 49 6e 69 74 69 61 6c |ing...Rt|lInitial|
|00000d50| 69 7a 65 55 6e 69 63 6f | 64 65 50 72 65 66 69 78 |izeUnico|dePrefix|
|00000d60| 00 00 a7 00 46 73 52 74 | 6c 49 73 46 61 74 44 62 |....FsRt|lIsFatDb|
|00000d70| 63 73 4c 65 67 61 6c 00 | bb 02 52 74 6c 46 69 6e |csLegal.|..RtlFin|
|00000d80| 64 43 6c 65 61 72 42 69 | 74 73 41 6e 64 53 65 74 |dClearBi|tsAndSet|
|00000d90| 00 00 8a 02 52 74 6c 43 | 6c 65 61 72 42 69 74 73 |....RtlC|learBits|
|00000da0| 00 00 af 01 4b 65 53 65 | 74 54 69 6d 65 72 00 00 |....KeSe|tTimer..|
|00000db0| 78 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 54 69 |x.KeInit|ializeTi|
|00000dc0| 6d 65 72 00 70 01 4b 65 | 49 6e 69 74 69 61 6c 69 |mer.p.Ke|Initiali|
|00000dd0| 7a 65 44 70 63 00 58 01 | 4b 65 44 65 6c 61 79 45 |zeDpc.X.|KeDelayE|
|00000de0| 78 65 63 75 74 69 6f 6e | 54 68 72 65 61 64 00 00 |xecution|Thread..|
|00000df0| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 1d 03 |ntoskrnl|.exe....|
|00000e00| 52 74 6c 55 6e 77 69 6e | 64 00 4d 00 4b 66 52 65 |RtlUnwin|d.M.KfRe|
|00000e10| 6c 65 61 73 65 53 70 69 | 6e 4c 6f 63 6b 00 4a 00 |leaseSpi|nLock.J.|
|00000e20| 4b 66 41 63 71 75 69 72 | 65 53 70 69 6e 4c 6f 63 |KfAcquir|eSpinLoc|
|00000e30| 6b 00 48 41 4c 2e 64 6c | 6c 00 24 00 54 64 69 52 |k.HAL.dl|l.$.TdiR|
|00000e40| 65 67 69 73 74 65 72 4e | 6f 74 69 66 69 63 61 74 |egisterN|otificat|
|00000e50| 69 6f 6e 48 61 6e 64 6c | 65 72 00 00 1d 00 54 64 |ionHandl|er....Td|
|00000e60| 69 49 6e 69 74 69 61 6c | 69 7a 65 00 1c 00 54 64 |iInitial|ize...Td|
|00000e70| 69 44 65 72 65 67 69 73 | 74 65 72 4e 6f 74 69 66 |iDeregis|terNotif|
|00000e80| 69 63 61 74 69 6f 6e 48 | 61 6e 64 6c 65 72 00 00 |icationH|andler..|
|00000e90| 54 44 49 2e 53 59 53 00 | 00 00 00 00 00 00 00 00 |TDI.SYS.|........|
+--------+-------------------------+-------------------------+--------+--------+