home *** CD-ROM | disk | FTP | other *** search
Unknown | 2008-10-23 | 7.5 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 48 8b c4 48 89 58 08 48 | 89 68 10 48 89 70 18 48 |H..H.X.H|.h.H.p.H|
|00000010| 89 78 20 41 54 48 83 ec | 60 48 8b f9 48 8d 48 e0 |.x ATH..|`H..H.H.|
|00000020| 49 8b f1 4d 8b e0 48 8b | ea ff 15 19 a0 fd ff 8b |I..M..H.|........|
|00000030| 84 24 90 00 00 00 4c 8d | 5c 24 40 48 8d 54 24 48 |.$....L.|\$@H.T$H|
|00000040| 4c 89 5c 24 28 4c 8b ce | 41 b8 02 00 00 00 48 8b |L.\$(L..|A.....H.|
|00000050| cf 89 44 24 20 ff 15 25 | a0 fd ff 85 c0 8b d8 78 |..D$ ..%|.......x|
|00000060| 28 83 7e 04 04 75 1d 44 | 8b 46 0c 48 8d 54 24 48 |(.~..u.D|.F.H.T$H|
|00000070| 48 8d 0d 39 07 00 00 45 | 89 04 24 e8 26 41 fd ff |H..9...E|..$.&A..|
|00000080| 33 c0 eb 50 bb 0d 00 00 | c0 80 bc 24 98 00 00 00 |3..P....|...$....|
|00000090| 00 74 3f 48 83 c9 ff 33 | c0 c7 44 24 30 15 03 00 |.t?H...3|..D$0...|
|000000a0| 00 48 8b fd 44 8b cb 33 | d2 66 f2 af 41 b8 d3 0b |.H..D..3|.f..A...|
|000000b0| 00 80 48 f7 d1 48 83 e9 | 01 66 03 c9 66 89 4c 24 |..H..H..|.f..f.L$|
|000000c0| 28 48 8b 0d 70 0f fe ff | 48 89 6c 24 20 e8 be 2c |(H..p...|H.l$ ..,|
|000000d0| fd ff 8b c3 4c 8d 5c 24 | 60 49 8b 5b 10 49 8b 6b |....L.\$|`I.[.I.k|
|000000e0| 18 49 8b 73 20 49 8b 7b | 28 49 8b e3 41 5c c3 cc |.I.s I.{|(I..A\..|
|000000f0| 48 89 5c 24 08 48 89 74 | 24 10 57 48 83 ec 40 48 |H.\$.H.t|$.WH..@H|
|00000100| 8b d9 48 8d 4c 24 30 49 | 8b f1 49 8b f8 ff 15 35 |..H.L$0I|..I....5|
|00000110| 9f fd ff 8b 44 24 70 4c | 8d 5c 24 60 48 8d 54 24 |....D$pL|.\$`H.T$|
|00000120| 30 4c 8b ce 4c 89 5c 24 | 28 41 b8 02 00 00 00 48 |0L..L.\$|(A.....H|
|00000130| 8b cb 89 44 24 20 ff 15 | 44 9f fd ff 8b d8 33 c0 |...D$ ..|D.....3.|
|00000140| 3b d8 66 89 07 48 89 47 | 08 7c 1b 48 8d 46 0c 48 |;.f..H.G|.|.H.F.H|
|00000150| 89 47 08 0f b7 46 08 66 | 2d 02 00 66 89 07 66 89 |.G...F.f|-..f..f.|
|00000160| 47 02 33 c0 eb 27 38 44 | 24 78 74 1f 48 8b 0d c5 |G.3..'8D|$xt.H...|
|00000170| 0e fe ff 44 8b cb 33 d2 | 41 b8 d3 0b 00 80 c7 44 |...D..3.|A......D|
|00000180| 24 20 de 02 00 00 e8 b1 | 2b fd ff 8b c3 48 8b 5c |$ ......|+....H.\|
|00000190| 24 50 48 8b 74 24 58 48 | 83 c4 40 5f c3 cc cc cc |$PH.t$XH|..@_....|
|000001a0| 48 8b c4 48 83 ec 68 48 | 83 60 d0 00 48 83 60 e8 |H..H..hH|.`..H.`.|
|000001b0| 00 48 83 60 f0 00 48 89 | 48 d8 4c 8d 40 c8 48 8d |.H.`..H.|H.L.@.H.|
|000001c0| 48 08 ba 19 00 02 00 c7 | 40 c8 30 00 00 00 c7 40 |H.......|@.0....@|
|000001d0| e0 40 02 00 00 ff 15 ad | 9e fd ff 85 c0 78 71 48 |.@......|.....xqH|
|000001e0| 8d 15 aa 05 00 00 48 8d | 4c 24 20 ff 15 57 9e fd |......H.|L$ ..W..|
|000001f0| ff 48 8b 44 24 70 48 83 | 64 24 50 00 48 83 64 24 |.H.D$pH.|d$P.H.d$|
|00000200| 58 00 48 89 44 24 38 48 | 8d 44 24 20 4c 8d 44 24 |X.H.D$8H|.D$ L.D$|
|00000210| 30 48 8d 4c 24 78 ba 19 | 00 02 00 48 89 44 24 40 |0H.L$x..|...H.D$@|
|00000220| c7 44 24 30 30 00 00 00 | c7 44 24 48 40 02 00 00 |.D$00...|.D$H@...|
|00000230| ff 15 52 9e fd ff 85 c0 | 78 0b 48 8b 4c 24 78 ff |..R.....|x.H.L$x.|
|00000240| 15 d3 9d fd ff 48 8b 4c | 24 70 ff 15 c8 9d fd ff |.....H.L|$p......|
|00000250| 48 83 c4 68 c3 cc cc cc | 48 8b c4 48 89 70 08 48 |H..h....|H..H.p.H|
|00000260| 89 78 10 4c 89 60 18 4c | 89 68 20 41 56 48 83 ec |.x.L.`.L|.h AVH..|
|00000270| 60 48 8b fa 4c 8b e9 83 | 60 d8 00 e8 78 42 fe ff |`H..L...|`...xB..|
|00000280| 33 d2 41 b8 f8 00 00 00 | 4c 8d 35 b1 0c fe ff 49 |3.A.....|L.5....I|
|00000290| 8b ce e8 29 3d fd ff 66 | c7 05 a0 0c fe ff 00 eb |...)=..f|........|
|000002a0| 66 c7 05 99 0c fe ff f8 | 00 4c 89 2d 98 0c fe ff |f.......|.L.-....|
|000002b0| 33 d2 41 b8 88 02 00 00 | 48 8d 0d a1 0d fe ff e8 |3.A.....|H.......|
|000002c0| fc 3c fd ff 66 c7 05 93 | 0d fe ff 9a eb 66 c7 05 |.<..f...|.....f..|
|000002d0| 8c 0d fe ff 88 02 48 83 | 25 e2 df fd ff 00 48 8d |......H.|%.....H.|
|000002e0| 05 db df fd ff 48 89 05 | 04 10 fe ff e8 2b 94 fd |.....H..|.....+..|
|000002f0| ff 90 c7 44 24 44 05 00 | 00 00 48 8d 0d bf e0 fd |...D$D..|..H.....|
|00000300| ff 48 89 0d 30 0d fe ff | 33 d2 41 b8 70 06 00 00 |.H..0...|3.A.p...|
|00000310| e8 ab 3c fd ff e8 c6 cd | fe ff c7 44 24 40 02 00 |..<.....|...D$@..|
|00000320| 00 00 48 8b cf e8 76 fe | ff ff e8 bd d2 fe ff 48 |..H...v.|.......H|
|00000330| 8d 15 1a 04 00 00 48 8d | 4c 24 48 ff 15 07 9d fd |......H.|L$H.....|
|00000340| ff 48 8d 4c 24 48 ff 15 | bc 9f fd ff 48 89 05 ad |.H.L$H..|....H...|
|00000350| 15 fe ff e8 80 d4 fe ff | 8b f0 89 44 24 44 bf 01 |........|...D$D..|
|00000360| 00 00 00 44 8d 67 01 85 | c0 44 0f 49 e7 44 89 64 |...D.g..|.D.I.D.d|
|00000370| 24 40 85 c0 74 34 c7 44 | 24 20 32 01 00 00 44 8b |$@..t4.D|$ 2...D.|
|00000380| c8 33 d2 41 b8 c4 0b 00 | 80 48 8b 0d a8 0c fe ff |.3.A....|.H......|
|00000390| e8 a7 29 fd ff 45 85 e4 | 78 10 44 3b e7 7e 06 41 |..)..E..|x.D;.~.A|
|000003a0| 83 fc 02 75 05 e8 b2 cc | fe ff 85 f6 74 07 8b c6 |...u....|....t...|
|000003b0| e9 5f 01 00 00 e8 76 87 | fe ff 66 c7 44 24 30 04 |._....v.|..f.D$0.|
|000003c0| 00 c7 44 24 28 52 78 49 | 72 48 c7 44 24 20 80 05 |..D$(RxI|rH.D$ ..|
|000003d0| 00 00 45 33 c9 4c 8b 05 | 1c 9f fd ff 48 8b 15 d5 |..E3.L..|....H...|
|000003e0| 9c fd ff 48 8d 0d 56 e6 | fd ff ff 15 10 9f fd ff |...H..V.|........|
|000003f0| 4c 8d 1d 59 12 fe ff 4c | 89 1d 5a 12 fe ff 4c 89 |L..Y...L|..Z...L.|
|00000400| 1d 4b 12 fe ff 48 83 25 | 3b 0c fe ff 00 48 8d 05 |.K...H.%|;....H..|
|00000410| 1c 0b fe ff 48 89 05 1d | 0b fe ff 48 89 05 0e 0b |....H...|...H....|
|00000420| fe ff 48 8d 05 17 12 fe | ff 48 89 05 18 12 fe ff |..H.....|.H......|
|00000430| 48 89 05 09 12 fe ff 89 | 3d 23 13 fe ff 48 83 25 |H.......|=#...H.%|
|00000440| 23 13 fe ff 00 83 25 24 | 13 fe ff 00 45 33 c0 8b |#.....%$|....E3..|
|00000450| d7 48 8d 0d 20 13 fe ff | ff 15 fa 9b fd ff 89 3d |.H.. ...|.......=|
|00000460| bc 12 fe ff 48 83 25 bc | 12 fe ff 00 83 25 bd 12 |....H.%.|.....%..|
|00000470| fe ff 00 45 33 c0 8b d7 | 48 8d 0d b9 12 fe ff ff |...E3...|H.......|
|00000480| 15 d3 9b fd ff 8b d7 48 | 8d 0d 52 12 fe ff ff 15 |.......H|..R.....|
|00000490| 5c 9e fd ff 8b d7 48 8d | 0d 63 0e fe ff ff 15 4d |\.....H.|.c.....M|
|000004a0| 9e fd ff 4c 8b 1d 8e 0b | fe ff 33 d2 41 83 a4 93 |...L....|..3.A...|
|000004b0| 2c 02 00 00 00 48 8b c2 | 48 03 c0 49 8d 8c c3 38 |,....H..|H..I...8|
|000004c0| 02 00 00 48 89 49 08 48 | 89 09 41 83 a4 93 20 02 |...H.I.H|..A... .|
|000004d0| 00 00 00 48 03 d7 48 83 | fa 03 7c d0 49 83 a3 68 |...H..H.|..|.I..h|
|000004e0| 02 00 00 00 49 8b cd e8 | a0 00 00 00 48 8d 0d dd |....I...|....H...|
|000004f0| 0a fe ff ff 15 0f 9c fd | ff 4c 89 35 c8 0b fe ff |........|.L.5....|
|00000500| ff 15 a2 9b fd ff 48 89 | 05 9b 0a fe ff e8 72 cf |......H.|......r.|
|00000510| fe ff 33 c0 4c 8d 5c 24 | 60 49 8b 73 10 49 8b 7b |..3.L.\$|`I.s.I.{|
|00000520| 18 4d 8b 63 20 4d 8b 6b | 28 49 8b e3 41 5e c3 cc |.M.c M.k|(I..A^..|
|00000530| cc cc cc cc cc cc cc cc | 40 55 57 48 83 ec 48 48 |........|@UWH..HH|
|00000540| 8b ea 44 8b 4d 44 45 85 | c9 74 3a c7 44 24 20 32 |..D.MDE.|.t:.D$ 2|
|00000550| 01 00 00 33 d2 41 b8 c4 | 0b 00 80 48 8b 0d d6 0a |...3.A..|...H....|
|00000560| fe ff e8 d5 27 fd ff 44 | 8b 5d 40 45 85 db 78 15 |....'..D|.]@E..x.|
|00000570| bf 01 00 00 00 44 3b df | 7e 06 41 83 fb 02 75 05 |.....D;.|~.A...u.|
|00000580| e8 d7 ca fe ff 48 83 c4 | 48 5f 5d c3 48 89 5c 24 |.....H..|H_].H.\$|
|00000590| 08 57 48 83 ec 30 48 8b | d9 48 8d 15 30 02 00 00 |.WH..0H.|.H..0...|
|000005a0| 48 8d 4c 24 20 ff 15 9d | 9a fd ff 48 8d 4c 24 20 |H.L$ ...|...H.L$ |
|000005b0| ff 15 52 9d fd ff 48 8d | 7b 70 b9 1b 00 00 00 48 |..R...H.|{p.....H|
|000005c0| 89 05 02 e5 fd ff 48 8d | 05 4b db fe ff f3 48 ab |......H.|.K....H.|
|000005d0| 33 c9 48 8d 05 e7 d9 fd | ff 48 89 05 a8 0b fe ff |3.H.....|.H......|
|000005e0| 48 8d 05 39 12 fe ff 48 | 89 43 50 48 8b 5c 24 40 |H..9...H|.CPH.\$@|
|000005f0| 48 8d 05 31 36 ff ff 48 | 89 05 2a 12 fe ff 48 8d |H..16..H|..*...H.|
|00000600| 05 3f 34 ff ff c7 05 11 | 12 fe ff e0 00 00 00 48 |.?4.....|.......H|
|00000610| 89 05 1a 12 fe ff 48 8d | 05 a3 32 ff ff 48 89 0d |......H.|..2..H..|
|00000620| 1c 12 fe ff 48 89 05 0d | 12 fe ff 48 8d 05 26 28 |....H...|...H..&(|
|00000630| fd ff 48 89 0d 0f 12 fe | ff 48 89 05 30 12 fe ff |..H.....|.H..0...|
|00000640| 48 8d 05 39 c7 fc ff 48 | 89 0d 02 12 fe ff 48 89 |H..9...H|......H.|
|00000650| 05 9b 12 fe ff 48 8d 05 | 1c c7 fc ff 48 89 0d f5 |.....H..|....H...|
|00000660| 11 fe ff 48 89 05 8e 12 | fe ff 48 8d 05 73 80 fe |...H....|..H..s..|
|00000670| ff 48 89 0d e8 11 fe ff | 48 89 05 f9 11 fe ff 48 |.H......|H......H|
|00000680| 8d 05 12 80 fe ff 48 89 | 0d db 11 fe ff 48 89 05 |......H.|.....H..|
|00000690| ec 11 fe ff 48 8d 05 65 | 11 fe ff 48 89 0d 56 11 |....H..e|...H..V.|
|000006a0| fe ff 48 89 05 5f 11 fe | ff 48 89 05 50 11 fe ff |..H.._..|.H..P...|
|000006b0| 48 8d 05 59 7b fe ff 48 | 89 05 f2 08 fe ff 48 8d |H..Y{..H|......H.|
|000006c0| 05 03 7b fe ff 48 89 05 | ec 08 fe ff 48 8d 05 a5 |..{..H..|....H...|
|000006d0| 7a fe ff 48 89 05 e6 08 | fe ff 48 8d 05 77 7a fe |z..H....|..H..wz.|
|000006e0| ff 48 89 05 e0 08 fe ff | 48 83 c4 30 5f c3 cc cc |.H......|H..0_...|
|000006f0| 48 8b 05 19 db fd ff 49 | b9 32 a2 df 2d 99 2b 00 |H......I|.2..-.+.|
|00000700| 00 48 85 c0 74 05 49 3b | c1 75 2f 4c 8d 05 fe da |.H..t.I;|.u/L....|
|00000710| fd ff 48 b8 20 03 00 00 | 80 f7 ff ff 48 8b 00 49 |..H. ...|....H..I|
|00000720| 33 c0 49 b8 ff ff ff ff | ff ff 00 00 49 23 c0 49 |3.I.....|....I#.I|
|00000730| 0f 44 c1 48 89 05 d6 da | fd ff 48 f7 d0 48 89 05 |.D.H....|..H..H..|
|00000740| d4 da fd ff e9 87 a9 fc | ff cc cc cc cc cc cc cc |........|........|
|00000750| 46 00 73 00 52 00 74 00 | 6c 00 52 00 65 00 67 00 |F.s.R.t.|l.R.e.g.|
|00000760| 69 00 73 00 74 00 65 00 | 72 00 55 00 6e 00 63 00 |i.s.t.e.|r.U.n.c.|
|00000770| 50 00 72 00 6f 00 76 00 | 69 00 64 00 65 00 72 00 |P.r.o.v.|i.d.e.r.|
|00000780| 45 00 78 00 00 00 cc cc | cc cc cc cc cc cc cc cc |E.x.....|........|
|00000790| 50 00 61 00 72 00 61 00 | 6d 00 65 00 74 00 65 00 |P.a.r.a.|m.e.t.e.|
|000007a0| 72 00 73 00 00 00 cc cc | cc cc cc cc cc cc cc cc |r.s.....|........|
|000007b0| 72 65 61 64 52 65 67 69 | 73 74 72 79 76 61 6c 75 |readRegi|stryvalu|
|000007c0| 65 20 25 77 5a 20 3d 20 | 25 30 38 6c 78 0a 00 cc |e %wZ = |%08lx...|
|000007d0| 46 00 73 00 52 00 74 00 | 6c 00 54 00 65 00 61 00 |F.s.R.t.|l.T.e.a.|
|000007e0| 72 00 64 00 6f 00 77 00 | 6e 00 50 00 65 00 72 00 |r.d.o.w.|n.P.e.r.|
|000007f0| 53 00 74 00 72 00 65 00 | 61 00 6d 00 43 00 6f 00 |S.t.r.e.|a.m.C.o.|
|00000800| 6e 00 74 00 65 00 78 00 | 74 00 73 00 00 00 cc cc |n.t.e.x.|t.s.....|
|00000810| 60 87 03 00 00 00 00 00 | 00 00 00 00 1e 9c 03 00 |`.......|........|
|00000820| 10 1f 01 00 50 87 03 00 | 00 00 00 00 00 00 00 00 |....P...|........|
|00000830| c4 9c 03 00 00 1f 01 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000840| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000850| ae 9c 03 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000860| 06 8d 03 00 00 00 00 00 | 1c 8d 03 00 00 00 00 00 |........|........|
|00000870| 26 8d 03 00 00 00 00 00 | 3e 8d 03 00 00 00 00 00 |&.......|>.......|
|00000880| 5a 8d 03 00 00 00 00 00 | 70 8d 03 00 00 00 00 00 |Z.......|p.......|
|00000890| 7e 8d 03 00 00 00 00 00 | 9c 8d 03 00 00 00 00 00 |~.......|........|
|000008a0| b4 8d 03 00 00 00 00 00 | ce 8d 03 00 00 00 00 00 |........|........|
|000008b0| e2 8d 03 00 00 00 00 00 | fa 8d 03 00 00 00 00 00 |........|........|
|000008c0| 12 8e 03 00 00 00 00 00 | 2a 8e 03 00 00 00 00 00 |........|*.......|
|000008d0| 40 8e 03 00 00 00 00 00 | 52 8e 03 00 00 00 00 00 |@.......|R.......|
|000008e0| 5e 8e 03 00 00 00 00 00 | 76 8e 03 00 00 00 00 00 |^.......|v.......|
|000008f0| 8e 8e 03 00 00 00 00 00 | b2 8e 03 00 00 00 00 00 |........|........|
|00000900| c8 8e 03 00 00 00 00 00 | e0 8e 03 00 00 00 00 00 |........|........|
|00000910| f8 8e 03 00 00 00 00 00 | 0c 8f 03 00 00 00 00 00 |........|........|
|00000920| 1c 8f 03 00 00 00 00 00 | 2a 8f 03 00 00 00 00 00 |........|*.......|
|00000930| 40 8f 03 00 00 00 00 00 | 60 8f 03 00 00 00 00 00 |@.......|`.......|
|00000940| 78 8f 03 00 00 00 00 00 | 92 8f 03 00 00 00 00 00 |x.......|........|
|00000950| b4 8f 03 00 00 00 00 00 | cc 8f 03 00 00 00 00 00 |........|........|
|00000960| e8 8f 03 00 00 00 00 00 | 02 90 03 00 00 00 00 00 |........|........|
|00000970| 1a 90 03 00 00 00 00 00 | 36 90 03 00 00 00 00 00 |........|6.......|
|00000980| 46 90 03 00 00 00 00 00 | 58 90 03 00 00 00 00 00 |F.......|X.......|
|00000990| 7a 90 03 00 00 00 00 00 | 9c 90 03 00 00 00 00 00 |z.......|........|
|000009a0| be 90 03 00 00 00 00 00 | e0 90 03 00 00 00 00 00 |........|........|
|000009b0| fe 90 03 00 00 00 00 00 | 0e 91 03 00 00 00 00 00 |........|........|
|000009c0| 22 91 03 00 00 00 00 00 | 32 91 03 00 00 00 00 00 |".......|2.......|
|000009d0| 4e 91 03 00 00 00 00 00 | 62 91 03 00 00 00 00 00 |N.......|b.......|
|000009e0| 74 91 03 00 00 00 00 00 | 8c 91 03 00 00 00 00 00 |t.......|........|
|000009f0| a4 91 03 00 00 00 00 00 | b4 91 03 00 00 00 00 00 |........|........|
|00000a00| c0 91 03 00 00 00 00 00 | da 91 03 00 00 00 00 00 |........|........|
|00000a10| f8 91 03 00 00 00 00 00 | 08 92 03 00 00 00 00 00 |........|........|
|00000a20| 18 92 03 00 00 00 00 00 | 36 92 03 00 00 00 00 00 |........|6.......|
|00000a30| 4a 92 03 00 00 00 00 00 | 5a 92 03 00 00 00 00 00 |J.......|Z.......|
|00000a40| 76 92 03 00 00 00 00 00 | 94 92 03 00 00 00 00 00 |v.......|........|
|00000a50| a8 92 03 00 00 00 00 00 | c8 92 03 00 00 00 00 00 |........|........|
|00000a60| de 92 03 00 00 00 00 00 | ee 92 03 00 00 00 00 00 |........|........|
|00000a70| fa 92 03 00 00 00 00 00 | 14 93 03 00 00 00 00 00 |........|........|
|00000a80| 34 93 03 00 00 00 00 00 | 50 93 03 00 00 00 00 00 |4.......|P.......|
|00000a90| 6c 93 03 00 00 00 00 00 | 84 93 03 00 00 00 00 00 |l.......|........|
|00000aa0| 9a 93 03 00 00 00 00 00 | b2 93 03 00 00 00 00 00 |........|........|
|00000ab0| ca 93 03 00 00 00 00 00 | da 93 03 00 00 00 00 00 |........|........|
|00000ac0| f0 93 03 00 00 00 00 00 | 08 94 03 00 00 00 00 00 |........|........|
|00000ad0| 20 94 03 00 00 00 00 00 | 42 94 03 00 00 00 00 00 | .......|B.......|
|00000ae0| 52 94 03 00 00 00 00 00 | 62 94 03 00 00 00 00 00 |R.......|b.......|
|00000af0| 72 94 03 00 00 00 00 00 | 80 94 03 00 00 00 00 00 |r.......|........|
|00000b00| 8c 94 03 00 00 00 00 00 | a0 94 03 00 00 00 00 00 |........|........|
|00000b10| f0 8c 03 00 00 00 00 00 | c6 94 03 00 00 00 00 00 |........|........|
|00000b20| da 94 03 00 00 00 00 00 | ea 94 03 00 00 00 00 00 |........|........|
|00000b30| 08 95 03 00 00 00 00 00 | 28 95 03 00 00 00 00 00 |........|(.......|
|00000b40| 36 95 03 00 00 00 00 00 | 4a 95 03 00 00 00 00 00 |6.......|J.......|
|00000b50| 58 95 03 00 00 00 00 00 | 7a 95 03 00 00 00 00 00 |X.......|z.......|
|00000b60| 96 95 03 00 00 00 00 00 | b4 95 03 00 00 00 00 00 |........|........|
|00000b70| d0 95 03 00 00 00 00 00 | e2 95 03 00 00 00 00 00 |........|........|
|00000b80| fa 95 03 00 00 00 00 00 | 16 96 03 00 00 00 00 00 |........|........|
|00000b90| 28 96 03 00 00 00 00 00 | 42 96 03 00 00 00 00 00 |(.......|B.......|
|00000ba0| 60 96 03 00 00 00 00 00 | 7a 96 03 00 00 00 00 00 |`.......|z.......|
|00000bb0| 94 96 03 00 00 00 00 00 | a8 96 03 00 00 00 00 00 |........|........|
|00000bc0| ba 96 03 00 00 00 00 00 | d4 96 03 00 00 00 00 00 |........|........|
|00000bd0| ec 96 03 00 00 00 00 00 | 04 97 03 00 00 00 00 00 |........|........|
|00000be0| 1c 97 03 00 00 00 00 00 | 38 97 03 00 00 00 00 00 |........|8.......|
|00000bf0| 48 97 03 00 00 00 00 00 | 64 97 03 00 00 00 00 00 |H.......|d.......|
|00000c00| 86 97 03 00 00 00 00 00 | a6 97 03 00 00 00 00 00 |........|........|
|00000c10| b8 97 03 00 00 00 00 00 | ce 97 03 00 00 00 00 00 |........|........|
|00000c20| e2 97 03 00 00 00 00 00 | f8 97 03 00 00 00 00 00 |........|........|
|00000c30| 04 98 03 00 00 00 00 00 | 1c 98 03 00 00 00 00 00 |........|........|
|00000c40| 38 98 03 00 00 00 00 00 | 56 98 03 00 00 00 00 00 |8.......|V.......|
|00000c50| 70 98 03 00 00 00 00 00 | 88 98 03 00 00 00 00 00 |p.......|........|
|00000c60| a8 98 03 00 00 00 00 00 | c4 98 03 00 00 00 00 00 |........|........|
|00000c70| e2 98 03 00 00 00 00 00 | f2 98 03 00 00 00 00 00 |........|........|
|00000c80| 06 99 03 00 00 00 00 00 | 1a 99 03 00 00 00 00 00 |........|........|
|00000c90| 30 99 03 00 00 00 00 00 | 4a 99 03 00 00 00 00 00 |0.......|J.......|
|00000ca0| 62 99 03 00 00 00 00 00 | 7c 99 03 00 00 00 00 00 |b.......||.......|
|00000cb0| 9a 99 03 00 00 00 00 00 | b2 99 03 00 00 00 00 00 |........|........|
|00000cc0| c0 99 03 00 00 00 00 00 | cc 99 03 00 00 00 00 00 |........|........|
|00000cd0| e8 99 03 00 00 00 00 00 | 0a 9a 03 00 00 00 00 00 |........|........|
|00000ce0| 1e 9a 03 00 00 00 00 00 | 34 9a 03 00 00 00 00 00 |........|4.......|
|00000cf0| 4a 9a 03 00 00 00 00 00 | 5e 9a 03 00 00 00 00 00 |J.......|^.......|
|00000d00| 78 9a 03 00 00 00 00 00 | 92 9a 03 00 00 00 00 00 |x.......|........|
|00000d10| aa 9a 03 00 00 00 00 00 | ba 9a 03 00 00 00 00 00 |........|........|
|00000d20| ca 9a 03 00 00 00 00 00 | d4 9a 03 00 00 00 00 00 |........|........|
|00000d30| f0 9a 03 00 00 00 00 00 | 0c 9b 03 00 00 00 00 00 |........|........|
|00000d40| 26 9b 03 00 00 00 00 00 | 40 9b 03 00 00 00 00 00 |&.......|@.......|
|00000d50| 58 9b 03 00 00 00 00 00 | 78 9b 03 00 00 00 00 00 |X.......|x.......|
|00000d60| 86 9b 03 00 00 00 00 00 | 96 9b 03 00 00 00 00 00 |........|........|
|00000d70| a4 9b 03 00 00 00 00 00 | b8 9b 03 00 00 00 00 00 |........|........|
|00000d80| d0 9b 03 00 00 00 00 00 | e2 9b 03 00 00 00 00 00 |........|........|
|00000d90| fe 9b 03 00 00 00 00 00 | 0c 9c 03 00 00 00 00 00 |........|........|
|00000da0| 2c 9c 03 00 00 00 00 00 | 48 9c 03 00 00 00 00 00 |,.......|H.......|
|00000db0| 62 9c 03 00 00 00 00 00 | 7a 9c 03 00 00 00 00 00 |b.......|z.......|
|00000dc0| 98 9c 03 00 00 00 00 00 | b4 94 03 00 00 00 00 00 |........|........|
|00000dd0| e0 8c 03 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000de0| 79 06 5a 77 43 72 65 61 | 74 65 46 69 6c 65 00 00 |y.ZwCrea|teFile..|
|00000df0| ae 00 45 78 52 65 6c 65 | 61 73 65 46 61 73 74 4d |..ExRele|aseFastM|
|00000e00| 75 74 65 78 00 00 5a 00 | 45 78 41 63 71 75 69 72 |utex..Z.|ExAcquir|
|00000e10| 65 46 61 73 74 4d 75 74 | 65 78 00 00 71 06 5a 77 |eFastMut|ex..q.Zw|
|00000e20| 43 6c 6f 73 65 00 1b 04 | 4f 62 66 44 65 72 65 66 |Close...|ObfDeref|
|00000e30| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 11 04 |erenceOb|ject....|
|00000e40| 4f 62 52 65 66 65 72 65 | 6e 63 65 4f 62 6a 65 63 |ObRefere|nceObjec|
|00000e50| 74 42 79 48 61 6e 64 6c | 65 00 f8 06 5a 77 53 65 |tByHandl|e...ZwSe|
|00000e60| 74 53 65 63 75 72 69 74 | 79 4f 62 6a 65 63 74 00 |tSecurit|yObject.|
|00000e70| a8 06 5a 77 4f 70 65 6e | 46 69 6c 65 00 00 da 04 |..ZwOpen|File....|
|00000e80| 52 74 6c 43 72 65 61 74 | 65 53 65 63 75 72 69 74 |RtlCreat|eSecurit|
|00000e90| 79 44 65 73 63 72 69 70 | 74 6f 72 00 2e 05 52 74 |yDescrip|tor...Rt|
|00000ea0| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|00000eb0| 6e 67 00 00 c7 00 45 78 | 54 72 79 54 6f 41 63 71 |ng....Ex|TryToAcq|
|00000ec0| 75 69 72 65 46 61 73 74 | 4d 75 74 65 78 00 ba 02 |uireFast|Mutex...|
|00000ed0| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 45 76 65 6e |KeInitia|lizeEven|
|00000ee0| 74 00 d1 02 4b 65 4c 65 | 61 76 65 43 72 69 74 69 |t...KeLe|aveCriti|
|00000ef0| 63 61 6c 52 65 67 69 6f | 6e 00 a8 02 4b 65 45 6e |calRegio|n...KeEn|
|00000f00| 74 65 72 43 72 69 74 69 | 63 61 6c 52 65 67 69 6f |terCriti|calRegio|
|00000f10| 6e 00 cf 01 49 6f 44 65 | 6c 65 74 65 53 79 6d 62 |n...IoDe|leteSymb|
|00000f20| 6f 6c 69 63 4c 69 6e 6b | 00 00 7f 02 49 6f 66 43 |olicLink|....IofC|
|00000f30| 6f 6d 70 6c 65 74 65 52 | 65 71 75 65 73 74 00 00 |ompleteR|equest..|
|00000f40| d7 06 5a 77 51 75 65 72 | 79 56 61 6c 75 65 4b 65 |..ZwQuer|yValueKe|
|00000f50| 79 00 aa 06 5a 77 4f 70 | 65 6e 4b 65 79 00 09 07 |y...ZwOp|enKey...|
|00000f60| 5f 5f 43 5f 73 70 65 63 | 69 66 69 63 5f 68 61 6e |__C_spec|ific_han|
|00000f70| 64 6c 65 72 00 00 c2 01 | 49 6f 43 72 65 61 74 65 |dler....|IoCreate|
|00000f80| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 00 00 9d 00 |Symbolic|Link....|
|00000f90| 45 78 49 73 52 65 73 6f | 75 72 63 65 41 63 71 75 |ExIsReso|urceAcqu|
|00000fa0| 69 72 65 64 45 78 63 6c | 75 73 69 76 65 4c 69 74 |iredExcl|usiveLit|
|00000fb0| 65 00 ec 01 49 6f 47 65 | 74 43 75 72 72 65 6e 74 |e...IoGe|tCurrent|
|00000fc0| 50 72 6f 63 65 73 73 00 | 2c 03 4b 65 57 61 69 74 |Process.|,.KeWait|
|00000fd0| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 00 |ForSingl|eObject.|
|00000fe0| 6d 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |m.ExAllo|catePool|
|00000ff0| 57 69 74 68 54 61 67 00 | 85 00 45 78 46 72 65 65 |WithTag.|..ExFree|
|00001000| 50 6f 6f 6c 57 69 74 68 | 54 61 67 00 76 04 50 73 |PoolWith|Tag.v.Ps|
|00001010| 47 65 74 56 65 72 73 69 | 6f 6e 00 00 0d 03 4b 65 |GetVersi|on....Ke|
|00001020| 53 65 74 45 76 65 6e 74 | 00 00 1b 06 53 65 54 6f |SetEvent|....SeTo|
|00001030| 6b 65 6e 49 73 52 65 73 | 74 72 69 63 74 65 64 00 |kenIsRes|tricted.|
|00001040| 09 06 53 65 51 75 65 72 | 79 41 75 74 68 65 6e 74 |..SeQuer|yAuthent|
|00001050| 69 63 61 74 69 6f 6e 49 | 64 54 6f 6b 65 6e 00 00 |icationI|dToken..|
|00001060| 0c 06 53 65 51 75 65 72 | 79 53 65 73 73 69 6f 6e |..SeQuer|ySession|
|00001070| 49 64 54 6f 6b 65 6e 00 | 0a 06 53 65 51 75 65 72 |IdToken.|..SeQuer|
|00001080| 79 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 54 6f 6b 65 |yInforma|tionToke|
|00001090| 6e 00 5c 00 45 78 41 63 | 71 75 69 72 65 52 65 73 |n.\.ExAc|quireRes|
|000010a0| 6f 75 72 63 65 45 78 63 | 6c 75 73 69 76 65 4c 69 |ourceExc|lusiveLi|
|000010b0| 74 65 00 00 b4 00 45 78 | 52 65 6c 65 61 73 65 52 |te....Ex|ReleaseR|
|000010c0| 65 73 6f 75 72 63 65 4c | 69 74 65 00 90 00 45 78 |esourceL|ite...Ex|
|000010d0| 49 6e 69 74 69 61 6c 69 | 7a 65 52 65 73 6f 75 72 |Initiali|zeResour|
|000010e0| 63 65 4c 69 74 65 00 00 | 1b 01 46 73 52 74 6c 49 |ceLite..|..FsRtlI|
|000010f0| 6e 69 74 69 61 6c 69 7a | 65 46 69 6c 65 4c 6f 63 |nitializ|eFileLoc|
|00001100| 6b 00 74 00 45 78 44 65 | 6c 65 74 65 52 65 73 6f |k.t.ExDe|leteReso|
|00001110| 75 72 63 65 4c 69 74 65 | 00 00 75 01 46 73 52 74 |urceLite|..u.FsRt|
|00001120| 6c 55 6e 69 6e 69 74 69 | 61 6c 69 7a 65 46 69 6c |lUniniti|alizeFil|
|00001130| 65 4c 6f 63 6b 00 9e 02 | 4b 65 42 75 67 43 68 65 |eLock...|KeBugChe|
|00001140| 63 6b 45 78 00 00 f4 02 | 4b 65 52 65 6c 65 61 73 |ckEx....|KeReleas|
|00001150| 65 4d 75 74 65 78 00 00 | 62 00 45 78 41 63 71 75 |eMutex..|b.ExAcqu|
|00001160| 69 72 65 53 68 61 72 65 | 64 53 74 61 72 76 65 45 |ireShare|dStarveE|
|00001170| 78 63 6c 75 73 69 76 65 | 00 00 63 00 45 78 41 63 |xclusive|..c.ExAc|
|00001180| 71 75 69 72 65 53 68 61 | 72 65 64 57 61 69 74 46 |quireSha|redWaitF|
|00001190| 6f 72 45 78 63 6c 75 73 | 69 76 65 00 9e 00 45 78 |orExclus|ive...Ex|
|000011a0| 49 73 52 65 73 6f 75 72 | 63 65 41 63 71 75 69 72 |IsResour|ceAcquir|
|000011b0| 65 64 53 68 61 72 65 64 | 4c 69 74 65 00 00 b3 00 |edShared|Lite....|
|000011c0| 45 78 52 65 6c 65 61 73 | 65 52 65 73 6f 75 72 63 |ExReleas|eResourc|
|000011d0| 65 46 6f 72 54 68 72 65 | 61 64 4c 69 74 65 00 00 |eForThre|adLite..|
|000011e0| 5d 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |].ExAcqu|ireResou|
|000011f0| 72 63 65 53 68 61 72 65 | 64 4c 69 74 65 00 a8 00 |rceShare|dLite...|
|00001200| 45 78 52 61 69 73 65 53 | 74 61 74 75 73 00 85 03 |ExRaiseS|tatus...|
|00001210| 4d 6d 51 75 65 72 79 53 | 79 73 74 65 6d 53 69 7a |MmQueryS|ystemSiz|
|00001220| 65 00 23 05 52 74 6c 47 | 65 74 56 65 72 73 69 6f |e.#.RtlG|etVersio|
|00001230| 6e 00 d6 06 5a 77 51 75 | 65 72 79 53 79 73 74 65 |n...ZwQu|erySyste|
|00001240| 6d 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 00 00 bf 02 |mInforma|tion....|
|00001250| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 51 75 65 75 |KeInitia|lizeQueu|
|00001260| 65 00 06 03 4b 65 52 75 | 6e 64 6f 77 6e 51 75 65 |e...KeRu|ndownQue|
|00001270| 75 65 00 00 7f 04 50 73 | 49 73 54 68 72 65 61 64 |ue....Ps|IsThread|
|00001280| 54 65 72 6d 69 6e 61 74 | 69 6e 67 00 43 04 50 73 |Terminat|ing.C.Ps|
|00001290| 43 72 65 61 74 65 53 79 | 73 74 65 6d 54 68 72 65 |CreateSy|stemThre|
|000012a0| 61 64 00 00 02 03 4b 65 | 52 65 73 65 74 45 76 65 |ad....Ke|ResetEve|
|000012b0| 6e 74 00 00 3c 00 44 62 | 67 50 72 69 6e 74 00 00 |nt..<.Db|gPrint..|
|000012c0| a4 04 50 73 54 65 72 6d | 69 6e 61 74 65 53 79 73 |..PsTerm|inateSys|
|000012d0| 74 65 6d 54 68 72 65 61 | 64 00 13 04 4f 62 52 65 |temThrea|d...ObRe|
|000012e0| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 50 |ferenceO|bjectByP|
|000012f0| 6f 69 6e 74 65 72 00 00 | a5 04 50 73 54 68 72 65 |ointer..|..PsThre|
|00001300| 61 64 54 79 70 65 00 00 | fe 02 4b 65 52 65 6d 6f |adType..|..KeRemo|
|00001310| 76 65 51 75 65 75 65 00 | 95 02 4b 65 41 63 71 75 |veQueue.|..KeAcqu|
|00001320| 69 72 65 53 70 69 6e 4c | 6f 63 6b 52 61 69 73 65 |ireSpinL|ockRaise|
|00001330| 54 6f 44 70 63 00 f7 02 | 4b 65 52 65 6c 65 61 73 |ToDpc...|KeReleas|
|00001340| 65 53 70 69 6e 4c 6f 63 | 6b 00 c7 02 4b 65 49 6e |eSpinLoc|k...KeIn|
|00001350| 73 65 72 74 51 75 65 75 | 65 00 0e 02 49 6f 49 73 |sertQueu|e...IoIs|
|00001360| 4f 70 65 72 61 74 69 6f | 6e 53 79 6e 63 68 72 6f |Operatio|nSynchro|
|00001370| 6e 6f 75 73 00 00 d8 00 | 45 78 70 49 6e 74 65 72 |nous....|ExpInter|
|00001380| 6c 6f 63 6b 65 64 50 6f | 70 45 6e 74 72 79 53 4c |lockedPo|pEntrySL|
|00001390| 69 73 74 00 a1 00 45 78 | 51 75 65 72 79 44 65 70 |ist...Ex|QueryDep|
|000013a0| 74 68 53 4c 69 73 74 00 | d9 00 45 78 70 49 6e 74 |thSList.|..ExpInt|
|000013b0| 65 72 6c 6f 63 6b 65 64 | 50 75 73 68 45 6e 74 72 |erlocked|PushEntr|
|000013c0| 79 53 4c 69 73 74 00 00 | 81 03 4d 6d 50 72 6f 62 |ySList..|..MmProb|
|000013d0| 65 41 6e 64 4c 6f 63 6b | 50 61 67 65 73 00 96 01 |eAndLock|Pages...|
|000013e0| 49 6f 41 6c 6c 6f 63 61 | 74 65 4d 64 6c 00 e2 01 |IoAlloca|teMdl...|
|000013f0| 49 6f 46 72 65 65 4d 64 | 6c 00 2a 01 46 73 52 74 |IoFreeMd|l.*.FsRt|
|00001400| 6c 49 73 4e 74 73 74 61 | 74 75 73 45 78 70 65 63 |lIsNtsta|tusExpec|
|00001410| 74 65 64 00 75 03 4d 6d | 4d 61 70 4c 6f 63 6b 65 |ted.u.Mm|MapLocke|
|00001420| 64 50 61 67 65 73 53 70 | 65 63 69 66 79 43 61 63 |dPagesSp|ecifyCac|
|00001430| 68 65 00 00 5b 00 45 78 | 41 63 71 75 69 72 65 46 |he..[.Ex|AcquireF|
|00001440| 61 73 74 4d 75 74 65 78 | 55 6e 73 61 66 65 00 00 |astMutex|Unsafe..|
|00001450| af 00 45 78 52 65 6c 65 | 61 73 65 46 61 73 74 4d |..ExRele|aseFastM|
|00001460| 75 74 65 78 55 6e 73 61 | 66 65 00 00 5c 03 4d 6d |utexUnsa|fe..\.Mm|
|00001470| 46 6f 72 63 65 53 65 63 | 74 69 6f 6e 43 6c 6f 73 |ForceSec|tionClos|
|00001480| 65 64 00 00 5b 03 4d 6d | 46 6c 75 73 68 49 6d 61 |ed..[.Mm|FlushIma|
|00001490| 67 65 53 65 63 74 69 6f | 6e 00 e0 02 4b 65 51 75 |geSectio|n...KeQu|
|000014a0| 65 72 79 54 69 6d 65 49 | 6e 63 72 65 6d 65 6e 74 |eryTimeI|ncrement|
|000014b0| 00 00 53 03 4d 6d 43 61 | 6e 46 69 6c 65 42 65 54 |..S.MmCa|nFileBeT|
|000014c0| 72 75 6e 63 61 74 65 64 | 00 00 0a 00 43 63 46 6c |runcated|....CcFl|
|000014d0| 75 73 68 43 61 63 68 65 | 00 00 1d 00 43 63 50 75 |ushCache|....CcPu|
|000014e0| 72 67 65 43 61 63 68 65 | 53 65 63 74 69 6f 6e 00 |rgeCache|Section.|
|000014f0| c3 05 52 74 6c 55 70 63 | 61 73 65 55 6e 69 63 6f |..RtlUpc|aseUnico|
|00001500| 64 65 43 68 61 72 00 00 | f8 04 52 74 6c 45 71 75 |deChar..|..RtlEqu|
|00001510| 61 6c 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |alUnicod|eString.|
|00001520| 6f 00 45 78 43 6f 6e 76 | 65 72 74 45 78 63 6c 75 |o.ExConv|ertExclu|
|00001530| 73 69 76 65 54 6f 53 68 | 61 72 65 64 4c 69 74 65 |siveToSh|aredLite|
|00001540| 00 00 92 03 4d 6d 55 6e | 6c 6f 63 6b 50 61 67 65 |....MmUn|lockPage|
|00001550| 73 00 95 01 49 6f 41 6c | 6c 6f 63 61 74 65 49 72 |s...IoAl|locateIr|
|00001560| 70 00 7e 02 49 6f 66 43 | 61 6c 6c 44 72 69 76 65 |p.~.IofC|allDrive|
|00001570| 72 00 a8 01 49 6f 43 61 | 6e 63 65 6c 49 72 70 00 |r...IoCa|ncelIrp.|
|00001580| e1 01 49 6f 46 72 65 65 | 49 72 70 00 03 02 49 6f |..IoFree|Irp...Io|
|00001590| 47 65 74 54 6f 70 4c 65 | 76 65 6c 49 72 70 00 00 |GetTopLe|velIrp..|
|000015a0| 52 02 49 6f 53 65 74 54 | 6f 70 4c 65 76 65 6c 49 |R.IoSetT|opLevelI|
|000015b0| 72 70 00 00 b9 02 4b 65 | 49 6e 69 74 69 61 6c 69 |rp....Ke|Initiali|
|000015c0| 7a 65 44 70 63 00 c2 02 | 4b 65 49 6e 69 74 69 61 |zeDpc...|KeInitia|
|000015d0| 6c 69 7a 65 54 69 6d 65 | 72 00 9f 02 4b 65 43 61 |lizeTime|r...KeCa|
|000015e0| 6e 63 65 6c 54 69 6d 65 | 72 00 93 02 4b 65 41 63 |ncelTime|r...KeAc|
|000015f0| 71 75 69 72 65 53 70 69 | 6e 4c 6f 63 6b 41 74 44 |quireSpi|nLockAtD|
|00001600| 70 63 4c 65 76 65 6c 00 | f9 02 4b 65 52 65 6c 65 |pcLevel.|..KeRele|
|00001610| 61 73 65 53 70 69 6e 4c | 6f 63 6b 46 72 6f 6d 44 |aseSpinL|ockFromD|
|00001620| 70 63 4c 65 76 65 6c 00 | 18 03 4b 65 53 65 74 54 |pcLevel.|..KeSetT|
|00001630| 69 6d 65 72 00 00 be 02 | 4b 65 49 6e 69 74 69 61 |imer....|KeInitia|
|00001640| 6c 69 7a 65 4d 75 74 65 | 78 00 84 00 45 78 46 72 |lizeMute|x...ExFr|
|00001650| 65 65 50 6f 6f 6c 00 00 | 8d 00 45 78 49 6e 69 74 |eePool..|..ExInit|
|00001660| 69 61 6c 69 7a 65 4e 50 | 61 67 65 64 4c 6f 6f 6b |ializeNP|agedLook|
|00001670| 61 73 69 64 65 4c 69 73 | 74 00 64 03 4d 6d 47 65 |asideLis|t.d.MmGe|
|00001680| 74 53 79 73 74 65 6d 52 | 6f 75 74 69 6e 65 41 64 |tSystemR|outineAd|
|00001690| 64 72 65 73 73 00 72 00 | 45 78 44 65 6c 65 74 65 |dress.r.|ExDelete|
|000016a0| 4e 50 61 67 65 64 4c 6f | 6f 6b 61 73 69 64 65 4c |NPagedLo|okasideL|
|000016b0| 69 73 74 00 72 02 49 6f | 57 4d 49 52 65 67 69 73 |ist.r.Io|WMIRegis|
|000016c0| 74 72 61 74 69 6f 6e 43 | 6f 6e 74 72 6f 6c 00 00 |trationC|ontrol..|
|000016d0| b8 01 49 6f 43 72 65 61 | 74 65 44 65 76 69 63 65 |..IoCrea|teDevice|
|000016e0| 00 00 28 02 49 6f 52 65 | 67 69 73 74 65 72 46 69 |..(.IoRe|gisterFi|
|000016f0| 6c 65 53 79 73 74 65 6d | 00 00 5e 01 46 73 52 74 |leSystem|..^.FsRt|
|00001700| 6c 52 65 67 69 73 74 65 | 72 55 6e 63 50 72 6f 76 |lRegiste|rUncProv|
|00001710| 69 64 65 72 00 00 cd 01 | 49 6f 44 65 6c 65 74 65 |ider....|IoDelete|
|00001720| 44 65 76 69 63 65 00 00 | 5f 02 49 6f 55 6e 72 65 |Device..|_.IoUnre|
|00001730| 67 69 73 74 65 72 46 69 | 6c 65 53 79 73 74 65 6d |gisterFi|leSystem|
|00001740| 00 00 fd 00 46 73 52 74 | 6c 44 65 72 65 67 69 73 |....FsRt|lDeregis|
|00001750| 74 65 72 55 6e 63 50 72 | 6f 76 69 64 65 72 00 00 |terUncPr|ovider..|
|00001760| ea 05 53 65 43 61 70 74 | 75 72 65 53 75 62 6a 65 |..SeCapt|ureSubje|
|00001770| 63 74 43 6f 6e 74 65 78 | 74 00 0f 06 53 65 52 65 |ctContex|t...SeRe|
|00001780| 6c 65 61 73 65 53 75 62 | 6a 65 63 74 43 6f 6e 74 |leaseSub|jectCont|
|00001790| 65 78 74 00 02 02 49 6f | 47 65 74 53 74 61 63 6b |ext...Io|GetStack|
|000017a0| 4c 69 6d 69 74 73 00 00 | a3 00 45 78 51 75 65 75 |Limits..|..ExQueu|
|000017b0| 65 57 6f 72 6b 49 74 65 | 6d 00 2d 02 49 6f 52 65 |eWorkIte|m.-.IoRe|
|000017c0| 6c 65 61 73 65 43 61 6e | 63 65 6c 53 70 69 6e 4c |leaseCan|celSpinL|
|000017d0| 6f 63 6b 00 5a 01 46 73 | 52 74 6c 50 72 6f 63 65 |ock.Z.Fs|RtlProce|
|000017e0| 73 73 46 69 6c 65 4c 6f | 63 6b 00 00 fe 01 49 6f |ssFileLo|ck....Io|
|000017f0| 47 65 74 52 65 71 75 65 | 73 74 6f 72 50 72 6f 63 |GetReque|storProc|
|00001800| 65 73 73 00 06 01 46 73 | 52 74 6c 46 61 73 74 55 |ess...Fs|RtlFastU|
|00001810| 6e 6c 6f 63 6b 53 69 6e | 67 6c 65 00 c1 00 45 78 |nlockSin|gle...Ex|
|00001820| 53 65 74 52 65 73 6f 75 | 72 63 65 4f 77 6e 65 72 |SetResou|rceOwner|
|00001830| 50 6f 69 6e 74 65 72 00 | 0e 07 5f 6c 6f 63 61 6c |Pointer.|.._local|
|00001840| 5f 75 6e 77 69 6e 64 00 | 3e 05 52 74 6c 49 6e 74 |_unwind.|>.RtlInt|
|00001850| 65 67 65 72 54 6f 55 6e | 69 63 6f 64 65 53 74 72 |egerToUn|icodeStr|
|00001860| 69 6e 67 00 b4 04 52 74 | 6c 41 70 70 65 6e 64 55 |ing...Rt|lAppendU|
|00001870| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 53 74 |nicodeSt|ringToSt|
|00001880| 72 69 6e 67 00 00 01 01 | 46 73 52 74 6c 44 6f 65 |ring....|FsRtlDoe|
|00001890| 73 4e 61 6d 65 43 6f 6e | 74 61 69 6e 57 69 6c 64 |sNameCon|tainWild|
|000018a0| 43 61 72 64 73 00 25 00 | 43 63 53 65 74 46 69 6c |Cards.%.|CcSetFil|
|000018b0| 65 53 69 7a 65 73 00 00 | af 01 49 6f 43 68 65 63 |eSizes..|..IoChec|
|000018c0| 6b 53 68 61 72 65 41 63 | 63 65 73 73 00 00 4d 02 |kShareAc|cess..M.|
|000018d0| 49 6f 53 65 74 53 68 61 | 72 65 41 63 63 65 73 73 |IoSetSha|reAccess|
|000018e0| 00 00 63 02 49 6f 55 70 | 64 61 74 65 53 68 61 72 |..c.IoUp|dateShar|
|000018f0| 65 41 63 63 65 73 73 00 | 14 07 5f 73 74 72 69 63 |eAccess.|.._stric|
|00001900| 6d 70 00 00 d5 04 52 74 | 6c 43 6f 70 79 55 6e 69 |mp....Rt|lCopyUni|
|00001910| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 62 04 50 73 |codeStri|ng..b.Ps|
|00001920| 47 65 74 50 72 6f 63 65 | 73 73 49 6d 61 67 65 46 |GetProce|ssImageF|
|00001930| 69 6c 65 4e 61 6d 65 00 | 5c 05 52 74 6c 4c 65 6e |ileName.|\.RtlLen|
|00001940| 67 74 68 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |gthSecur|ityDescr|
|00001950| 69 70 74 6f 72 00 94 01 | 49 6f 41 6c 6c 6f 63 61 |iptor...|IoAlloca|
|00001960| 74 65 45 72 72 6f 72 4c | 6f 67 45 6e 74 72 79 00 |teErrorL|ogEntry.|
|00001970| 79 02 49 6f 57 72 69 74 | 65 45 72 72 6f 72 4c 6f |y.IoWrit|eErrorLo|
|00001980| 67 45 6e 74 72 79 00 00 | 1f 02 49 6f 52 61 69 73 |gEntry..|..IoRais|
|00001990| 65 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 61 6c 48 61 |eInforma|tionalHa|
|000019a0| 72 64 45 72 72 6f 72 00 | 02 01 46 73 52 74 6c 46 |rdError.|..FsRtlF|
|000019b0| 61 73 74 43 68 65 63 6b | 4c 6f 63 6b 46 6f 72 52 |astCheck|LockForR|
|000019c0| 65 61 64 00 03 01 46 73 | 52 74 6c 46 61 73 74 43 |ead...Fs|RtlFastC|
|000019d0| 68 65 63 6b 4c 6f 63 6b | 46 6f 72 57 72 69 74 65 |heckLock|ForWrite|
|000019e0| 00 00 a1 02 4b 65 43 6c | 65 61 72 45 76 65 6e 74 |....KeCl|earEvent|
|000019f0| 00 00 dc 01 49 6f 46 69 | 6c 65 4f 62 6a 65 63 74 |....IoFi|leObject|
|00001a00| 54 79 70 65 00 00 16 00 | 43 63 4d 64 6c 52 65 61 |Type....|CcMdlRea|
|00001a10| 64 43 6f 6d 70 6c 65 74 | 65 00 18 00 43 63 4d 64 |dComplet|e...CcMd|
|00001a20| 6c 57 72 69 74 65 43 6f | 6d 70 6c 65 74 65 00 00 |lWriteCo|mplete..|
|00001a30| 2b 00 43 63 55 6e 69 6e | 69 74 69 61 6c 69 7a 65 |+.CcUnin|itialize|
|00001a40| 43 61 63 68 65 4d 61 70 | 00 00 10 01 46 73 52 74 |CacheMap|....FsRt|
|00001a50| 6c 47 65 74 4e 65 78 74 | 46 69 6c 65 4c 6f 63 6b |lGetNext|FileLock|
|00001a60| 00 00 56 01 46 73 52 74 | 6c 50 6f 73 74 53 74 61 |..V.FsRt|lPostSta|
|00001a70| 63 6b 4f 76 65 72 66 6c | 6f 77 00 00 f1 00 46 73 |ckOverfl|ow....Fs|
|00001a80| 52 74 6c 43 68 65 63 6b | 4c 6f 63 6b 46 6f 72 52 |RtlCheck|LockForR|
|00001a90| 65 61 64 41 63 63 65 73 | 73 00 11 00 43 63 49 6e |eadAcces|s...CcIn|
|00001aa0| 69 74 69 61 6c 69 7a 65 | 43 61 63 68 65 4d 61 70 |itialize|CacheMap|
|00001ab0| 00 00 04 00 43 63 43 6f | 70 79 52 65 61 64 00 00 |....CcCo|pyRead..|
|00001ac0| 15 00 43 63 4d 64 6c 52 | 65 61 64 00 29 00 43 63 |..CcMdlR|ead.).Cc|
|00001ad0| 53 65 74 52 65 61 64 41 | 68 65 61 64 47 72 61 6e |SetReadA|headGran|
|00001ae0| 75 6c 61 72 69 74 79 00 | 21 00 43 63 53 65 74 41 |ularity.|!.CcSetA|
|00001af0| 64 64 69 74 69 6f 6e 61 | 6c 43 61 63 68 65 41 74 |dditiona|lCacheAt|
|00001b00| 74 72 69 62 75 74 65 73 | 00 00 0f 02 49 6f 49 73 |tributes|....IoIs|
|00001b10| 53 79 73 74 65 6d 54 68 | 72 65 61 64 00 00 31 02 |SystemTh|read..1.|
|00001b20| 49 6f 52 65 6d 6f 76 65 | 53 68 61 72 65 41 63 63 |IoRemove|ShareAcc|
|00001b30| 65 73 73 00 04 01 46 73 | 52 74 6c 46 61 73 74 55 |ess...Fs|RtlFastU|
|00001b40| 6e 6c 6f 63 6b 41 6c 6c | 00 00 c5 04 52 74 6c 43 |nlockAll|....RtlC|
|00001b50| 6f 6d 70 61 72 65 4d 65 | 6d 6f 72 79 00 00 aa 01 |ompareMe|mory....|
|00001b60| 49 6f 43 68 65 63 6b 45 | 61 42 75 66 66 65 72 56 |IoCheckE|aBufferV|
|00001b70| 61 6c 69 64 69 74 79 00 | 42 01 46 73 52 74 6c 4e |alidity.|B.FsRtlN|
|00001b80| 6f 72 6d 61 6c 69 7a 65 | 4e 74 73 74 61 74 75 73 |ormalize|Ntstatus|
|00001b90| 00 00 0f 05 52 74 6c 46 | 72 65 65 55 6e 69 63 6f |....RtlF|reeUnico|
|00001ba0| 64 65 53 74 72 69 6e 67 | 00 00 3a 04 50 72 6f 62 |deString|..:.Prob|
|00001bb0| 65 46 6f 72 52 65 61 64 | 00 00 3b 04 50 72 6f 62 |eForRead|..;.Prob|
|00001bc0| 65 46 6f 72 57 72 69 74 | 65 00 50 07 77 63 73 63 |eForWrit|e.P.wcsc|
|00001bd0| 68 72 00 00 b1 06 5a 77 | 4f 70 65 6e 53 79 6d 62 |hr....Zw|OpenSymb|
|00001be0| 6f 6c 69 63 4c 69 6e 6b | 4f 62 6a 65 63 74 00 00 |olicLink|Object..|
|00001bf0| d5 06 5a 77 51 75 65 72 | 79 53 79 6d 62 6f 6c 69 |..ZwQuer|ySymboli|
|00001c00| 63 4c 69 6e 6b 4f 62 6a | 65 63 74 00 7e 05 52 74 |cLinkObj|ect.~.Rt|
|00001c10| 6c 50 72 65 66 69 78 55 | 6e 69 63 6f 64 65 53 74 |lPrefixU|nicodeSt|
|00001c20| 72 69 6e 67 00 00 dc 04 | 52 74 6c 43 72 65 61 74 |ring....|RtlCreat|
|00001c30| 65 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |eUnicode|String..|
|00001c40| a5 06 5a 77 4f 70 65 6e | 44 69 72 65 63 74 6f 72 |..ZwOpen|Director|
|00001c50| 79 4f 62 6a 65 63 74 00 | f2 00 46 73 52 74 6c 43 |yObject.|..FsRtlC|
|00001c60| 68 65 63 6b 4c 6f 63 6b | 46 6f 72 57 72 69 74 65 |heckLock|ForWrite|
|00001c70| 41 63 63 65 73 73 00 00 | 03 00 43 63 43 61 6e 49 |Access..|..CcCanI|
|00001c80| 57 72 69 74 65 00 06 00 | 43 63 44 65 66 65 72 57 |Write...|CcDeferW|
|00001c90| 72 69 74 65 00 00 05 00 | 43 63 43 6f 70 79 57 72 |rite....|CcCopyWr|
|00001ca0| 69 74 65 00 1b 00 43 63 | 50 72 65 70 61 72 65 4d |ite...Cc|PrepareM|
|00001cb0| 64 6c 57 72 69 74 65 00 | 95 00 45 78 49 6e 74 65 |dlWrite.|..ExInte|
|00001cc0| 72 6c 6f 63 6b 65 64 41 | 64 64 55 6c 6f 6e 67 00 |rlockedA|ddUlong.|
|00001cd0| 07 00 43 63 46 61 73 74 | 43 6f 70 79 52 65 61 64 |..CcFast|CopyRead|
|00001ce0| 00 00 fd 01 49 6f 47 65 | 74 52 65 6c 61 74 65 64 |....IoGe|tRelated|
|00001cf0| 44 65 76 69 63 65 4f 62 | 6a 65 63 74 00 00 30 00 |DeviceOb|ject..0.|
|00001d00| 43 63 5a 65 72 6f 44 61 | 74 61 00 00 08 00 43 63 |CcZeroDa|ta....Cc|
|00001d10| 46 61 73 74 43 6f 70 79 | 57 72 69 74 65 00 6e 74 |FastCopy|Write.nt|
|00001d20| 6f 73 6b 72 6e 6c 2e 65 | 78 65 00 00 f0 01 49 6f |oskrnl.e|xe....Io|
|00001d30| 47 65 74 44 65 76 69 63 | 65 4f 62 6a 65 63 74 50 |GetDevic|eObjectP|
|00001d40| 6f 69 6e 74 65 72 00 00 | 5d 03 4d 6d 46 72 65 65 |ointer..|].MmFree|
|00001d50| 43 6f 6e 74 69 67 75 6f | 75 73 4d 65 6d 6f 72 79 |Contiguo|usMemory|
|00001d60| 00 00 62 03 4d 6d 47 65 | 74 50 68 79 73 69 63 61 |..b.MmGe|tPhysica|
|00001d70| 6c 41 64 64 72 65 73 73 | 00 00 4a 03 4d 6d 41 6c |lAddress|..J.MmAl|
|00001d80| 6c 6f 63 61 74 65 43 6f | 6e 74 69 67 75 6f 75 73 |locateCo|ntiguous|
|00001d90| 4d 65 6d 6f 72 79 00 00 | 41 03 4c 73 61 46 72 65 |Memory..|A.LsaFre|
|00001da0| 65 52 65 74 75 72 6e 42 | 75 66 66 65 72 00 30 00 |eReturnB|uffer.0.|
|00001db0| 47 65 74 53 65 63 75 72 | 69 74 79 55 73 65 72 49 |GetSecur|ityUserI|
|00001dc0| 6e 66 6f 00 6b 73 65 63 | 64 64 2e 73 79 73 00 00 |nfo.ksec|dd.sys..|
|00001dd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001de0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+