home *** CD-ROM | disk | FTP | other *** search
Unknown | 2004-05-17 | 3.8 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 68 b8 03 00 00 00 00 00 | 00 00 00 00 0a c4 03 00 |h.......|........|
|00000010| 24 03 00 00 e4 b7 03 00 | 00 00 00 00 00 00 00 00 |$.......|........|
|00000020| b2 c4 03 00 a0 02 00 00 | 60 b8 03 00 00 00 00 00 |........|`.......|
|00000030| 00 00 00 00 d0 c4 03 00 | 1c 03 00 00 04 b8 03 00 |........|........|
|00000040| 00 00 00 00 00 00 00 00 | c0 c6 03 00 c0 02 00 00 |........|........|
|00000050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000060| 00 00 00 00 9a c4 03 00 | 8c c4 03 00 76 c4 03 00 |........|....v...|
|00000070| 60 c4 03 00 4c c4 03 00 | 38 c4 03 00 24 c4 03 00 |`...L...|8...$...|
|00000080| 00 00 00 00 aa c6 03 00 | 58 c6 03 00 46 c6 03 00 |........|X...F...|
|00000090| 78 c6 03 00 20 c6 03 00 | 0a c6 03 00 34 c6 03 00 |x... ...|....4...|
|000000a0| de c5 03 00 cc c5 03 00 | f4 c5 03 00 a6 c5 03 00 |........|........|
|000000b0| 90 c5 03 00 c0 c5 03 00 | 7a c5 03 00 50 c5 03 00 |........|z...P...|
|000000c0| 38 c5 03 00 62 c5 03 00 | 04 c5 03 00 f0 c4 03 00 |8...b...|........|
|000000d0| 1e c5 03 00 d8 c4 03 00 | 94 c6 03 00 00 00 00 00 |........|........|
|000000e0| ba c4 03 00 00 00 00 00 | 58 bd 03 00 6a bd 03 00 |........|X...j...|
|000000f0| 84 bd 03 00 46 bd 03 00 | 96 bd 03 00 a8 bd 03 00 |....F...|........|
|00000100| b8 bd 03 00 ce bd 03 00 | e6 bd 03 00 02 be 03 00 |........|........|
|00000110| 18 be 03 00 34 be 03 00 | 4c be 03 00 66 be 03 00 |....4...|L...f...|
|00000120| 7c be 03 00 8a be 03 00 | a6 be 03 00 c2 be 03 00 ||.......|........|
|00000130| da be 03 00 ea be 03 00 | 0c bf 03 00 2e bf 03 00 |........|........|
|00000140| 50 bf 03 00 68 bf 03 00 | 80 bf 03 00 94 bf 03 00 |P...h...|........|
|00000150| b4 bf 03 00 c4 bf 03 00 | d8 bf 03 00 ee bf 03 00 |........|........|
|00000160| 08 c0 03 00 14 c0 03 00 | 22 c0 03 00 34 c0 03 00 |........|"...4...|
|00000170| 50 c0 03 00 5c c0 03 00 | 78 c0 03 00 90 c0 03 00 |P...\...|x.......|
|00000180| a8 c0 03 00 ba c0 03 00 | d6 c0 03 00 e8 c0 03 00 |........|........|
|00000190| 06 c1 03 00 16 bd 03 00 | f6 bc 03 00 3a c1 03 00 |........|....:...|
|000001a0| 76 c1 03 00 e8 bc 03 00 | 2a bd 03 00 8a c1 03 00 |v.......|*.......|
|000001b0| 96 c1 03 00 b0 c1 03 00 | c0 c1 03 00 d6 c1 03 00 |........|........|
|000001c0| ea c1 03 00 f6 c1 03 00 | 0c c2 03 00 1c c2 03 00 |........|........|
|000001d0| 2c c2 03 00 42 c2 03 00 | 5c c2 03 00 6a c2 03 00 |,...B...|\...j...|
|000001e0| 86 c2 03 00 92 c2 03 00 | a0 c2 03 00 b0 c2 03 00 |........|........|
|000001f0| d0 c2 03 00 da c2 03 00 | ea c2 03 00 fc c2 03 00 |........|........|
|00000200| 0c c3 03 00 28 c3 03 00 | 36 c3 03 00 42 c3 03 00 |....(...|6...B...|
|00000210| 52 c3 03 00 5c c3 03 00 | 66 c3 03 00 7e c3 03 00 |R...\...|f...~...|
|00000220| 9c c3 03 00 b0 c3 03 00 | d2 c3 03 00 ec c3 03 00 |........|........|
|00000230| 00 c4 03 00 18 c4 03 00 | f6 ba 03 00 e2 ba 03 00 |........|........|
|00000240| d2 ba 03 00 ba ba 03 00 | a4 ba 03 00 8e ba 03 00 |........|........|
|00000250| 76 ba 03 00 62 ba 03 00 | bc bc 03 00 d0 bc 03 00 |v...b...|........|
|00000260| c6 bc 03 00 70 bc 03 00 | a8 bc 03 00 88 bc 03 00 |....p...|........|
|00000270| 18 bc 03 00 52 bc 03 00 | 30 bc 03 00 d6 bb 03 00 |....R...|0.......|
|00000280| 00 bc 03 00 e8 bb 03 00 | a4 bb 03 00 cc bb 03 00 |........|........|
|00000290| bc bb 03 00 6c bb 03 00 | 9a bb 03 00 8c bb 03 00 |....l...|........|
|000002a0| 18 bb 03 00 4e bb 03 00 | 36 bb 03 00 48 c1 03 00 |....N...|6...H...|
|000002b0| 06 bb 03 00 58 c1 03 00 | 16 c1 03 00 48 ba 03 00 |....X...|....H...|
|000002c0| 20 c1 03 00 00 00 00 00 | 67 02 50 73 54 65 72 6d | .......|g.PsTerm|
|000002d0| 69 6e 61 74 65 53 79 73 | 74 65 6d 54 68 72 65 61 |inateSys|temThrea|
|000002e0| 64 00 86 01 4b 65 51 75 | 65 72 79 53 79 73 74 65 |d...KeQu|erySyste|
|000002f0| 6d 54 69 6d 65 00 b8 01 | 4b 65 57 61 69 74 46 6f |mTime...|KeWaitFo|
|00000300| 72 53 69 6e 67 6c 65 4f | 62 6a 65 63 74 00 a7 01 |rSingleO|bject...|
|00000310| 4b 65 53 65 74 50 72 69 | 6f 72 69 74 79 54 68 72 |KeSetPri|orityThr|
|00000320| 65 61 64 00 60 01 4b 65 | 47 65 74 43 75 72 72 65 |ead.`.Ke|GetCurre|
|00000330| 6e 74 54 68 72 65 61 64 | 00 00 51 02 50 73 43 72 |ntThread|..Q.PsCr|
|00000340| 65 61 74 65 53 79 73 74 | 65 6d 54 68 72 65 61 64 |eateSyst|emThread|
|00000350| 00 00 57 02 50 73 47 65 | 74 56 65 72 73 69 6f 6e |..W.PsGe|tVersion|
|00000360| 00 00 70 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |..p.KeIn|itialize|
|00000370| 45 76 65 6e 74 00 85 01 | 4b 65 50 75 6c 73 65 45 |Event...|KePulseE|
|00000380| 76 65 6e 74 00 00 92 01 | 4b 65 52 65 6c 65 61 73 |vent....|KeReleas|
|00000390| 65 4d 75 74 65 78 00 00 | 39 00 45 78 44 65 6c 65 |eMutex..|9.ExDele|
|000003a0| 74 65 4e 50 61 67 65 64 | 4c 6f 6f 6b 61 73 69 64 |teNPaged|Lookasid|
|000003b0| 65 4c 69 73 74 00 d6 00 | 49 6e 74 65 72 6c 6f 63 |eList...|Interloc|
|000003c0| 6b 65 64 44 65 63 72 65 | 6d 65 6e 74 00 00 59 00 |kedDecre|ment..Y.|
|000003d0| 45 78 49 6e 74 65 72 6c | 6f 63 6b 65 64 50 75 73 |ExInterl|ockedPus|
|000003e0| 68 45 6e 74 72 79 53 4c | 69 73 74 00 78 00 45 78 |hEntrySL|ist.x.Ex|
|000003f0| 66 49 6e 74 65 72 6c 6f | 63 6b 65 64 52 65 6d 6f |fInterlo|ckedRemo|
|00000400| 76 65 48 65 61 64 4c 69 | 73 74 00 00 a2 03 5a 77 |veHeadLi|st....Zw|
|00000410| 57 72 69 74 65 46 69 6c | 65 00 d2 03 73 70 72 69 |WriteFil|e...spri|
|00000420| 6e 74 66 00 95 03 5a 77 | 53 65 74 49 6e 66 6f 72 |ntf...Zw|SetInfor|
|00000430| 6d 61 74 69 6f 6e 46 69 | 6c 65 00 00 60 03 5a 77 |mationFi|le..`.Zw|
|00000440| 43 72 65 61 74 65 46 69 | 6c 65 00 00 5b 03 5a 77 |CreateFi|le..[.Zw|
|00000450| 43 6c 6f 73 65 00 62 00 | 45 78 51 75 65 75 65 57 |Close.b.|ExQueueW|
|00000460| 6f 72 6b 49 74 65 6d 00 | 92 02 52 74 6c 43 6f 70 |orkItem.|..RtlCop|
|00000470| 79 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |yUnicode|String..|
|00000480| d0 02 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|00000490| 53 74 72 69 6e 67 00 00 | 76 01 4b 65 49 6e 69 74 |String..|v.KeInit|
|000004a0| 69 61 6c 69 7a 65 53 70 | 69 6e 4c 6f 63 6b 00 00 |ializeSp|inLock..|
|000004b0| 47 00 45 78 49 6e 69 74 | 69 61 6c 69 7a 65 4e 50 |G.ExInit|ializeNP|
|000004c0| 61 67 65 64 4c 6f 6f 6b | 61 73 69 64 65 4c 69 73 |agedLook|asideLis|
|000004d0| 74 00 57 00 45 78 49 6e | 74 65 72 6c 6f 63 6b 65 |t.W.ExIn|terlocke|
|000004e0| 64 50 6f 70 45 6e 74 72 | 79 53 4c 69 73 74 00 00 |dPopEntr|ySList..|
|000004f0| d9 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 49 6e 63 |..Interl|ockedInc|
|00000500| 72 65 6d 65 6e 74 00 00 | 75 00 45 78 66 49 6e 74 |rement..|u.ExfInt|
|00000510| 65 72 6c 6f 63 6b 65 64 | 49 6e 73 65 72 74 54 61 |erlocked|InsertTa|
|00000520| 69 6c 4c 69 73 74 00 00 | 73 01 4b 65 49 6e 69 74 |ilList..|s.KeInit|
|00000530| 69 61 6c 69 7a 65 4d 75 | 74 65 78 00 c4 03 69 73 |ializeMu|tex...is|
|00000540| 64 69 67 69 74 00 db 03 | 73 74 72 6e 63 70 79 00 |digit...|strncpy.|
|00000550| c3 02 52 74 6c 46 72 65 | 65 55 6e 69 63 6f 64 65 |..RtlFre|eUnicode|
|00000560| 53 74 72 69 6e 67 00 00 | 8e 03 5a 77 52 65 61 64 |String..|..ZwRead|
|00000570| 46 69 6c 65 00 00 77 02 | 52 74 6c 41 6e 73 69 53 |File..w.|RtlAnsiS|
|00000580| 74 72 69 6e 67 54 6f 55 | 6e 69 63 6f 64 65 53 74 |tringToU|nicodeSt|
|00000590| 72 69 6e 67 00 00 cd 02 | 52 74 6c 49 6e 69 74 41 |ring....|RtlInitA|
|000005a0| 6e 73 69 53 74 72 69 6e | 67 00 11 01 49 6f 47 65 |nsiStrin|g...IoGe|
|000005b0| 74 52 65 6c 61 74 65 64 | 44 65 76 69 63 65 4f 62 |tRelated|DeviceOb|
|000005c0| 6a 65 63 74 00 00 fb 00 | 49 6f 44 65 6c 65 74 65 |ject....|IoDelete|
|000005d0| 44 65 76 69 63 65 00 00 | e3 00 49 6f 41 74 74 61 |Device..|..IoAtta|
|000005e0| 63 68 44 65 76 69 63 65 | 00 00 e4 00 49 6f 41 74 |chDevice|....IoAt|
|000005f0| 74 61 63 68 44 65 76 69 | 63 65 42 79 50 6f 69 6e |tachDevi|ceByPoin|
|00000600| 74 65 72 00 f3 00 49 6f | 43 72 65 61 74 65 44 65 |ter...Io|CreateDe|
|00000610| 76 69 63 65 00 00 fd 00 | 49 6f 44 65 74 61 63 68 |vice....|IoDetach|
|00000620| 44 65 76 69 63 65 00 00 | 44 01 49 6f 66 43 61 6c |Device..|D.IofCal|
|00000630| 6c 44 72 69 76 65 72 00 | 45 01 49 6f 66 43 6f 6d |lDriver.|E.IofCom|
|00000640| 70 6c 65 74 65 52 65 71 | 75 65 73 74 00 00 44 02 |pleteReq|uest..D.|
|00000650| 4f 62 66 44 65 72 65 66 | 65 72 65 6e 63 65 4f 62 |ObfDeref|erenceOb|
|00000660| 6a 65 63 74 00 00 3f 02 | 4f 62 52 65 66 65 72 65 |ject..?.|ObRefere|
|00000670| 6e 63 65 4f 62 6a 65 63 | 74 42 79 48 61 6e 64 6c |nceObjec|tByHandl|
|00000680| 65 00 45 02 4f 62 66 52 | 65 66 65 72 65 6e 63 65 |e.E.ObfR|eference|
|00000690| 4f 62 6a 65 63 74 00 00 | f5 00 49 6f 43 72 65 61 |Object..|..IoCrea|
|000006a0| 74 65 4e 6f 74 69 66 69 | 63 61 74 69 6f 6e 45 76 |teNotifi|cationEv|
|000006b0| 65 6e 74 00 41 01 49 6f | 57 72 69 74 65 45 72 72 |ent.A.Io|WriteErr|
|000006c0| 6f 72 4c 6f 67 45 6e 74 | 72 79 00 00 df 00 49 6f |orLogEnt|ry....Io|
|000006d0| 41 6c 6c 6f 63 61 74 65 | 45 72 72 6f 72 4c 6f 67 |Allocate|ErrorLog|
|000006e0| 45 6e 74 72 79 00 0c 01 | 49 6f 47 65 74 43 75 72 |Entry...|IoGetCur|
|000006f0| 72 65 6e 74 50 72 6f 63 | 65 73 73 00 42 00 45 78 |rentProc|ess.B.Ex|
|00000700| 46 72 65 65 50 6f 6f 6c | 00 00 8a 03 5a 77 51 75 |FreePool|....ZwQu|
|00000710| 65 72 79 53 79 6d 62 6f | 6c 69 63 4c 69 6e 6b 4f |erySymbo|licLinkO|
|00000720| 62 6a 65 63 74 00 7d 03 | 5a 77 4f 70 65 6e 53 79 |bject.}.|ZwOpenSy|
|00000730| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 4f 62 6a 65 63 74 |mbolicLi|nkObject|
|00000740| 00 00 36 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |..6.ExAl|locatePo|
|00000750| 6f 6c 57 69 74 68 54 61 | 67 00 7a 03 5a 77 4f 70 |olWithTa|g.z.ZwOp|
|00000760| 65 6e 50 72 6f 63 65 73 | 73 00 28 01 49 6f 52 65 |enProces|s.(.IoRe|
|00000770| 67 69 73 74 65 72 53 68 | 75 74 64 6f 77 6e 4e 6f |gisterSh|utdownNo|
|00000780| 74 69 66 69 63 61 74 69 | 6f 6e 00 00 64 02 50 73 |tificati|on..d.Ps|
|00000790| 53 65 74 43 72 65 61 74 | 65 54 68 72 65 61 64 4e |SetCreat|eThreadN|
|000007a0| 6f 74 69 66 79 52 6f 75 | 74 69 6e 65 00 00 63 02 |otifyRou|tine..c.|
|000007b0| 50 73 53 65 74 43 72 65 | 61 74 65 50 72 6f 63 65 |PsSetCre|ateProce|
|000007c0| 73 73 4e 6f 74 69 66 79 | 52 6f 75 74 69 6e 65 00 |ssNotify|Routine.|
|000007d0| fc 00 49 6f 44 65 6c 65 | 74 65 53 79 6d 62 6f 6c |..IoDele|teSymbol|
|000007e0| 69 63 4c 69 6e 6b 00 00 | f7 00 49 6f 43 72 65 61 |icLink..|..IoCrea|
|000007f0| 74 65 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 00 00 |teSymbol|icLink..|
|00000800| c0 02 52 74 6c 46 72 65 | 65 41 6e 73 69 53 74 72 |..RtlFre|eAnsiStr|
|00000810| 69 6e 67 00 0f 03 52 74 | 6c 55 6e 69 63 6f 64 65 |ing...Rt|lUnicode|
|00000820| 53 74 72 69 6e 67 54 6f | 41 6e 73 69 53 74 72 69 |StringTo|AnsiStri|
|00000830| 6e 67 00 00 09 02 4e 74 | 43 6f 6e 6e 65 63 74 50 |ng....Nt|ConnectP|
|00000840| 6f 72 74 00 df 01 4d 6d | 49 73 41 64 64 72 65 73 |ort...Mm|IsAddres|
|00000850| 73 56 61 6c 69 64 00 00 | 0d 03 52 74 6c 54 69 6d |sValid..|..RtlTim|
|00000860| 65 54 6f 54 69 6d 65 46 | 69 65 6c 64 73 00 70 00 |eToTimeF|ields.p.|
|00000870| 45 78 53 79 73 74 65 6d | 54 69 6d 65 54 6f 4c 6f |ExSystem|TimeToLo|
|00000880| 63 61 6c 54 69 6d 65 00 | 2a 00 44 62 67 50 72 69 |calTime.|*.DbgPri|
|00000890| 6e 74 00 00 bb 03 5f 76 | 73 6e 70 72 69 6e 74 66 |nt...._v|snprintf|
|000008a0| 00 00 ae 02 52 74 6c 45 | 71 75 61 6c 53 74 72 69 |....RtlE|qualStri|
|000008b0| 6e 67 00 00 8b 03 5a 77 | 51 75 65 72 79 53 79 73 |ng....Zw|QuerySys|
|000008c0| 74 65 6d 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 00 00 |temInfor|mation..|
|000008d0| b4 03 5f 73 74 72 69 63 | 6d 70 00 00 9e 01 4b 65 |.._stric|mp....Ke|
|000008e0| 53 65 72 76 69 63 65 44 | 65 73 63 72 69 70 74 6f |ServiceD|escripto|
|000008f0| 72 54 61 62 6c 65 00 00 | 54 02 50 73 47 65 74 43 |rTable..|T.PsGetC|
|00000900| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 49 64 00 |urrentPr|ocessId.|
|00000910| 55 02 50 73 47 65 74 43 | 75 72 72 65 6e 74 54 68 |U.PsGetC|urrentTh|
|00000920| 72 65 61 64 49 64 00 00 | 59 01 4b 65 44 65 74 61 |readId..|Y.KeDeta|
|00000930| 63 68 50 72 6f 63 65 73 | 73 00 84 03 5a 77 51 75 |chProces|s...ZwQu|
|00000940| 65 72 79 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 50 72 |eryInfor|mationPr|
|00000950| 6f 63 65 73 73 00 4f 01 | 4b 65 41 74 74 61 63 68 |ocess.O.|KeAttach|
|00000960| 50 72 6f 63 65 73 73 00 | 5b 02 50 73 4c 6f 6f 6b |Process.|[.PsLook|
|00000970| 75 70 50 72 6f 63 65 73 | 73 42 79 50 72 6f 63 65 |upProces|sByProce|
|00000980| 73 73 49 64 00 00 1a 02 | 4e 74 4f 70 65 6e 50 72 |ssId....|NtOpenPr|
|00000990| 6f 63 65 73 73 00 dc 03 | 73 74 72 72 63 68 72 00 |ocess...|strrchr.|
|000009a0| 89 02 52 74 6c 43 6f 6d | 70 61 72 65 55 6e 69 63 |..RtlCom|pareUnic|
|000009b0| 6f 64 65 53 74 72 69 6e | 67 00 61 03 5a 77 43 72 |odeStrin|g.a.ZwCr|
|000009c0| 65 61 74 65 4b 65 79 00 | 07 02 4e 74 42 75 69 6c |eateKey.|..NtBuil|
|000009d0| 64 4e 75 6d 62 65 72 00 | 28 03 52 74 6c 78 41 6e |dNumber.|(.RtlxAn|
|000009e0| 73 69 53 74 72 69 6e 67 | 54 6f 55 6e 69 63 6f 64 |siString|ToUnicod|
|000009f0| 65 53 69 7a 65 00 ff 01 | 4e 6c 73 4d 62 43 6f 64 |eSize...|NlsMbCod|
|00000a00| 65 50 61 67 65 54 61 67 | 00 00 b2 03 5f 73 6e 70 |ePageTag|...._snp|
|00000a10| 72 69 6e 74 66 00 1a 03 | 52 74 6c 55 70 63 61 73 |rintf...|RtlUpcas|
|00000a20| 65 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |eUnicode|String..|
|00000a30| 87 03 5a 77 51 75 65 72 | 79 4f 62 6a 65 63 74 00 |..ZwQuer|yObject.|
|00000a40| f8 01 4d 6d 55 6e 6d 61 | 70 4c 6f 63 6b 65 64 50 |..MmUnma|pLockedP|
|00000a50| 61 67 65 73 00 00 e7 01 | 4d 6d 4d 61 70 4c 6f 63 |ages....|MmMapLoc|
|00000a60| 6b 65 64 50 61 67 65 73 | 00 00 08 01 49 6f 46 72 |kedPages|....IoFr|
|00000a70| 65 65 4d 64 6c 00 ed 01 | 4d 6d 50 72 6f 62 65 41 |eeMdl...|MmProbeA|
|00000a80| 6e 64 4c 6f 63 6b 50 61 | 67 65 73 00 e1 00 49 6f |ndLockPa|ges...Io|
|00000a90| 41 6c 6c 6f 63 61 74 65 | 4d 64 6c 00 f6 01 4d 6d |Allocate|Mdl...Mm|
|00000aa0| 55 6e 6c 6f 63 6b 50 61 | 67 65 73 00 6f 03 5a 77 |UnlockPa|ges.o.Zw|
|00000ab0| 46 72 65 65 56 69 72 74 | 75 61 6c 4d 65 6d 6f 72 |FreeVirt|ualMemor|
|00000ac0| 79 00 59 03 5a 77 41 6c | 6c 6f 63 61 74 65 56 69 |y.Y.ZwAl|locateVi|
|00000ad0| 72 74 75 61 6c 4d 65 6d | 6f 72 79 00 a2 01 4b 65 |rtualMem|ory...Ke|
|00000ae0| 53 65 74 45 76 65 6e 74 | 00 00 0d 01 49 6f 47 65 |SetEvent|....IoGe|
|00000af0| 74 44 65 76 69 63 65 4f | 62 6a 65 63 74 50 6f 69 |tDeviceO|bjectPoi|
|00000b00| 6e 74 65 72 00 00 07 01 | 49 6f 46 72 65 65 49 72 |nter....|IoFreeIr|
|00000b10| 70 00 eb 00 49 6f 43 61 | 6e 63 65 6c 49 72 70 00 |p...IoCa|ncelIrp.|
|00000b20| e0 00 49 6f 41 6c 6c 6f | 63 61 74 65 49 72 70 00 |..IoAllo|cateIrp.|
|00000b30| e7 00 49 6f 42 75 69 6c | 64 44 65 76 69 63 65 49 |..IoBuil|dDeviceI|
|00000b40| 6f 43 6f 6e 74 72 6f 6c | 52 65 71 75 65 73 74 00 |oControl|Request.|
|00000b50| da 03 73 74 72 6e 63 6d | 70 00 f4 00 49 6f 43 72 |..strncm|p...IoCr|
|00000b60| 65 61 74 65 46 69 6c 65 | 00 00 8c 03 5a 77 51 75 |eateFile|....ZwQu|
|00000b70| 65 72 79 56 61 6c 75 65 | 4b 65 79 00 54 01 4b 65 |eryValue|Key.T.Ke|
|00000b80| 43 6c 65 61 72 45 76 65 | 6e 74 00 00 d3 01 4d 6d |ClearEve|nt....Mm|
|00000b90| 42 75 69 6c 64 4d 64 6c | 46 6f 72 4e 6f 6e 50 61 |BuildMdl|ForNonPa|
|00000ba0| 67 65 64 50 6f 6f 6c 00 | b2 01 4b 65 54 69 63 6b |gedPool.|..KeTick|
|00000bb0| 43 6f 75 6e 74 00 79 03 | 5a 77 4f 70 65 6e 4b 65 |Count.y.|ZwOpenKe|
|00000bc0| 79 00 9b 03 5a 77 53 65 | 74 56 61 6c 75 65 4b 65 |y...ZwSe|tValueKe|
|00000bd0| 79 00 de 03 73 74 72 73 | 74 72 00 00 e1 03 74 6f |y...strs|tr....to|
|00000be0| 75 70 70 65 72 00 19 03 | 52 74 6c 55 70 63 61 73 |upper...|RtlUpcas|
|00000bf0| 65 55 6e 69 63 6f 64 65 | 43 68 61 72 00 00 d5 00 |eUnicode|Char....|
|00000c00| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 43 6f 6d 70 61 |Interloc|kedCompa|
|00000c10| 72 65 45 78 63 68 61 6e | 67 65 00 00 8a 01 4b 65 |reExchan|ge....Ke|
|00000c20| 52 65 61 64 53 74 61 74 | 65 45 76 65 6e 74 00 00 |ReadStat|eEvent..|
|00000c30| e0 01 4d 6d 49 73 4e 6f | 6e 50 61 67 65 64 53 79 |..MmIsNo|nPagedSy|
|00000c40| 73 74 65 6d 41 64 64 72 | 65 73 73 56 61 6c 69 64 |stemAddr|essValid|
|00000c50| 00 00 57 01 4b 65 44 65 | 6c 61 79 45 78 65 63 75 |..W.KeDe|layExecu|
|00000c60| 74 69 6f 6e 54 68 72 65 | 61 64 00 00 88 02 52 74 |tionThre|ad....Rt|
|00000c70| 6c 43 6f 6d 70 61 72 65 | 53 74 72 69 6e 67 00 00 |lCompare|String..|
|00000c80| c7 03 69 73 73 70 61 63 | 65 00 6e 74 6f 73 6b 72 |..isspac|e.ntoskr|
|00000c90| 6e 6c 2e 65 78 65 00 00 | 18 03 52 74 6c 55 6e 77 |nl.exe..|..RtlUnw|
|00000ca0| 69 6e 64 00 42 00 4b 65 | 47 65 74 43 75 72 72 65 |ind.B.Ke|GetCurre|
|00000cb0| 6e 74 49 72 71 6c 00 00 | 4d 00 4b 66 52 65 6c 65 |ntIrql..|M.KfRele|
|00000cc0| 61 73 65 53 70 69 6e 4c | 6f 63 6b 00 4a 00 4b 66 |aseSpinL|ock.J.Kf|
|00000cd0| 41 63 71 75 69 72 65 53 | 70 69 6e 4c 6f 63 6b 00 |AcquireS|pinLock.|
|00000ce0| 01 00 45 78 52 65 6c 65 | 61 73 65 46 61 73 74 4d |..ExRele|aseFastM|
|00000cf0| 75 74 65 78 00 00 00 00 | 45 78 41 63 71 75 69 72 |utex....|ExAcquir|
|00000d00| 65 46 61 73 74 4d 75 74 | 65 78 00 00 4b 00 4b 66 |eFastMut|ex..K.Kf|
|00000d10| 4c 6f 77 65 72 49 72 71 | 6c 00 46 00 4b 65 52 61 |LowerIrq|l.F.KeRa|
|00000d20| 69 73 65 49 72 71 6c 54 | 6f 44 70 63 4c 65 76 65 |iseIrqlT|oDpcLeve|
|00000d30| 6c 00 48 41 4c 2e 64 6c | 6c 00 0d 00 54 64 69 43 |l.HAL.dl|l...TdiC|
|00000d40| 6f 70 79 42 75 66 66 65 | 72 54 6f 4d 64 6c 00 00 |opyBuffe|rToMdl..|
|00000d50| 54 44 49 2e 53 59 53 00 | f9 00 4e 64 69 73 52 65 |TDI.SYS.|..NdisRe|
|00000d60| 61 64 43 6f 6e 66 69 67 | 75 72 61 74 69 6f 6e 00 |adConfig|uration.|
|00000d70| 3e 00 4e 64 69 73 43 6c | 6f 73 65 41 64 61 70 74 |>.NdisCl|oseAdapt|
|00000d80| 65 72 00 00 27 00 4e 64 | 69 73 41 6c 6c 6f 63 61 |er..'.Nd|isAlloca|
|00000d90| 74 65 42 75 66 66 65 72 | 50 6f 6f 6c 00 00 2c 00 |teBuffer|Pool..,.|
|00000da0| 4e 64 69 73 41 6c 6c 6f | 63 61 74 65 50 61 63 6b |NdisAllo|catePack|
|00000db0| 65 74 50 6f 6f 6c 00 00 | 03 01 4e 64 69 73 52 65 |etPool..|..NdisRe|
|00000dc0| 67 69 73 74 65 72 50 72 | 6f 74 6f 63 6f 6c 00 00 |gisterPr|otocol..|
|00000dd0| 72 00 4e 64 69 73 46 72 | 65 65 4d 65 6d 6f 72 79 |r.NdisFr|eeMemory|
|00000de0| 00 00 96 00 4e 64 69 73 | 49 6e 69 74 55 6e 69 63 |....Ndis|InitUnic|
|00000df0| 6f 64 65 53 74 72 69 6e | 67 00 70 00 4e 64 69 73 |odeStrin|g.p.Ndis|
|00000e00| 46 72 65 65 42 75 66 66 | 65 72 50 6f 6f 6c 00 00 |FreeBuff|erPool..|
|00000e10| 74 00 4e 64 69 73 46 72 | 65 65 50 61 63 6b 65 74 |t.NdisFr|eePacket|
|00000e20| 50 6f 6f 6c 00 00 67 00 | 4e 64 69 73 44 65 72 65 |Pool..g.|NdisDere|
|00000e30| 67 69 73 74 65 72 50 72 | 6f 74 6f 63 6f 6c 00 00 |gisterPr|otocol..|
|00000e40| 0e 01 4e 64 69 73 53 65 | 6e 64 00 00 73 00 4e 64 |..NdisSe|nd..s.Nd|
|00000e50| 69 73 46 72 65 65 50 61 | 63 6b 65 74 00 00 26 00 |isFreePa|cket..&.|
|00000e60| 4e 64 69 73 41 6c 6c 6f | 63 61 74 65 42 75 66 66 |NdisAllo|cateBuff|
|00000e70| 65 72 00 00 2b 00 4e 64 | 69 73 41 6c 6c 6f 63 61 |er..+.Nd|isAlloca|
|00000e80| 74 65 50 61 63 6b 65 74 | 00 00 29 00 4e 64 69 73 |tePacket|..).Ndis|
|00000e90| 41 6c 6c 6f 63 61 74 65 | 4d 65 6d 6f 72 79 00 00 |Allocate|Memory..|
|00000ea0| 17 01 4e 64 69 73 54 72 | 61 6e 73 66 65 72 44 61 |..NdisTr|ansferDa|
|00000eb0| 74 61 00 00 6f 00 4e 64 | 69 73 46 72 65 65 42 75 |ta..o.Nd|isFreeBu|
|00000ec0| 66 66 65 72 00 00 f4 00 | 4e 64 69 73 51 75 65 72 |ffer....|NdisQuer|
|00000ed0| 79 42 75 66 66 65 72 00 | 7c 00 4e 64 69 73 47 65 |yBuffer.||.NdisGe|
|00000ee0| 74 46 69 72 73 74 42 75 | 66 66 65 72 46 72 6f 6d |tFirstBu|fferFrom|
|00000ef0| 50 61 63 6b 65 74 00 00 | 19 01 4e 64 69 73 55 6e |Packet..|..NdisUn|
|00000f00| 63 68 61 69 6e 42 75 66 | 66 65 72 41 74 46 72 6f |chainBuf|ferAtFro|
|00000f10| 6e 74 00 00 07 01 4e 64 | 69 73 52 65 6c 65 61 73 |nt....Nd|isReleas|
|00000f20| 65 53 70 69 6e 4c 6f 63 | 6b 00 24 00 4e 64 69 73 |eSpinLoc|k.$.Ndis|
|00000f30| 41 63 71 75 69 72 65 53 | 70 69 6e 4c 6f 63 6b 00 |AcquireS|pinLock.|
|00000f40| 4e 44 49 53 2e 53 59 53 | 00 00 00 00 00 00 00 00 |NDIS.SYS|........|
|00000f50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+