home *** CD-ROM | disk | FTP | other *** search
Unknown | 2002-05-10 | 3.7 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 56 57 8b 7c 24 0c 8b 37 | 8b 54 24 10 56 8b cf e8 |VW.|$..7|.T$.V...|
|00000010| c4 45 ff ff 3b c6 75 ee | 8b c6 5f 5e c2 08 00 cc |.E..;.u.|.._^....|
|00000020| 5c 00 3f 00 3f 00 5c 00 | 43 00 44 00 49 00 44 00 |\.?.?.\.|C.D.I.D.|
|00000030| 52 00 56 00 00 00 55 8b | ec 83 ec 0c 56 57 68 43 |R.V...U.|....VWhC|
|00000040| 64 69 20 68 c8 00 00 00 | 6a 01 66 c7 45 f4 14 00 |di h....|j.f.E...|
|00000050| 66 c7 45 f6 16 00 c7 45 | f8 a0 d8 01 00 ff 15 ec |f.E....E|........|
|00000060| 03 01 00 8b f0 85 f6 75 | 07 b8 9a 00 00 c0 eb 32 |.......u|.......2|
|00000070| 8d 45 fc 50 8b 45 08 68 | c6 00 00 00 56 ff 70 04 |.E.P.E.h|....V.p.|
|00000080| ff 15 f0 03 01 00 8b f8 | 56 85 ff 75 0d 8d 45 f4 |........|V..u..E.|
|00000090| 50 ff 15 f4 03 01 00 8b | f8 56 ff 15 f8 03 01 00 |P.......|.V......|
|000000a0| 8b c7 5f 5e c9 c2 04 00 | a1 f0 31 01 00 68 c4 32 |.._^....|..1..h.2|
|000000b0| 01 00 83 c0 34 50 e8 45 | ff ff ff a3 00 32 01 00 |....4P.E|.....2..|
|000000c0| a1 f0 31 01 00 83 c0 70 | 68 40 32 01 00 50 e8 2d |..1....p|h@2..P.-|
|000000d0| ff ff ff a3 04 32 01 00 | ff 74 24 04 e8 55 ff ff |.....2..|.t$..U..|
|000000e0| ff c2 04 00 57 6a 18 59 | 33 c0 bf e0 31 01 00 6a |....Wj.Y|3...1..j|
|000000f0| 64 f3 ab 8b 44 24 0c 68 | 10 32 01 00 68 08 32 01 |d...D$.h|.2..h.2.|
|00000100| 00 66 c7 05 e0 31 01 00 | 10 cd 66 c7 05 e2 31 01 |.f...1..|..f...1.|
|00000110| 00 60 00 a3 f0 31 01 00 | ff 15 a4 02 01 00 ff 15 |.`...1..|........|
|00000120| 4c 03 01 00 6a 00 6a 00 | 68 f8 31 01 00 68 fc 31 |L...j.j.|h.1..h.1|
|00000130| 01 00 a3 f4 31 01 00 e8 | a2 44 ff ff e8 2f a1 ff |....1...|.D.../..|
|00000140| ff a3 24 32 01 00 c7 05 | 2c 32 01 00 28 32 01 00 |..$2....|,2..(2..|
|00000150| a1 2c 32 01 00 a3 28 32 | 01 00 c7 05 38 32 01 00 |.,2...(2|....82..|
|00000160| 34 32 01 00 a1 38 32 01 | 00 a3 34 32 01 00 c7 05 |42...82.|..42....|
|00000170| e4 31 01 00 01 00 00 00 | 5f c2 08 00 b0 01 c2 04 |.1......|_.......|
|00000180| 00 cc 56 8b 74 24 08 57 | 6a 08 59 33 c0 8b fe f3 |..V.t$.W|j.Y3....|
|00000190| ab 8b 46 08 66 c7 06 11 | cd 89 46 10 8b 46 0c 66 |..F.f...|..F..F.f|
|000001a0| c7 46 02 20 00 89 46 14 | ff 35 f0 31 01 00 89 35 |.F. ..F.|.5.1...5|
|000001b0| 20 32 01 00 e8 bb 32 ff | ff 89 46 04 6a 01 8b 44 | 2....2.|..F.j..D|
|000001c0| 24 20 c6 40 40 01 c6 40 | 59 01 c6 40 49 01 c6 40 |$ .@@..@|Y..@I..@|
|000001d0| 4f 01 c6 40 53 01 8b 44 | 24 24 80 20 00 58 5f 5e |O..@S..D|$$. .X_^|
|000001e0| c2 18 00 cc 55 8b ec 83 | ec 4c 56 57 ff 75 0c ff |....U...|.LVW.u..|
|000001f0| 75 08 e8 ed fe ff ff 6a | 13 33 c0 59 8d 7d b4 6a |u......j|.3.Y.}.j|
|00000200| 01 f3 ab 58 c7 45 b4 4c | 00 00 00 c7 45 c8 02 da |...X.E.L|....E...|
|00000210| 01 00 c7 45 bc fc d9 01 | 00 c7 45 c0 d0 34 01 00 |...E....|..E..4..|
|00000220| c7 45 d8 20 00 00 00 c7 | 45 dc 30 00 00 00 c7 45 |.E. ....|E.0....E|
|00000230| e0 14 00 00 00 88 45 f0 | 88 45 ee 88 45 ec 88 45 |......E.|.E..E..E|
|00000240| ef 89 45 e4 89 45 b8 8d | 45 b4 68 e0 31 01 00 50 |..E..E..|E.h.1..P|
|00000250| ff 75 0c ff 75 08 e8 01 | 36 ff ff 8b f0 85 f6 74 |.u..u...|6......t|
|00000260| 0d ff 45 b8 83 7d b8 0f | 7c dd 85 f6 75 0b ff 35 |..E..}..||...u..5|
|00000270| 20 32 01 00 e8 2f fe ff | ff 8b c6 5f 5e c9 c2 08 | 2.../..|..._^...|
|00000280| 00 cc 5c 00 44 00 65 00 | 76 00 69 00 63 00 65 00 |..\.D.e.|v.i.c.e.|
|00000290| 5c 00 53 00 63 00 73 00 | 69 00 50 00 6f 00 72 00 |\.S.c.s.|i.P.o.r.|
|000002a0| 74 00 25 00 64 00 00 00 | 00 00 5c 00 44 00 6f 00 |t.%.d...|..\.D.o.|
|000002b0| 73 00 44 00 65 00 76 00 | 69 00 63 00 65 00 73 00 |s.D.e.v.|i.c.e.s.|
|000002c0| 5c 00 53 00 63 00 73 00 | 69 00 25 00 64 00 3a 00 |\.S.c.s.|i.%.d.:.|
|000002d0| 00 00 55 8b ec 83 ec 70 | 53 8b 5d 0c 56 57 33 ff |..U....p|S.].VW3.|
|000002e0| 89 7d fc ff 75 fc 8d 45 | c0 68 02 db 01 00 50 ff |.}..u..E|.h....P.|
|000002f0| 15 60 03 01 00 83 c4 0c | 8d 45 c0 50 8d 45 f0 50 |.`......|.E.P.E.P|
|00000300| ff 15 e4 02 01 00 8b 75 | 14 8d 45 f0 56 57 57 6a |.......u|..E.VWWj|
|00000310| 04 50 6a 54 53 ff 15 d8 | 03 01 00 3b c7 74 03 ff |.PjTS...|...;.t..|
|00000320| 45 fc 3d 35 00 00 c0 74 | ba 3b c7 0f 85 e8 00 00 |E.=5...t|.;......|
|00000330| 00 8b 06 6a 15 59 8b 70 | 28 33 c0 8b fe f3 ab 8d |...j.Y.p|(3......|
|00000340| 46 08 66 c7 06 21 cd 66 | c7 46 02 54 00 89 46 0c |F.f..!.f|.F.T..F.|
|00000350| 89 00 8b 45 14 6a 01 8b | 00 83 66 18 00 89 46 04 |...E.j..|..f...F.|
|00000360| 8b 45 08 5f 89 46 30 6a | 00 8d 46 1c 57 50 89 7e |.E._.F0j|..F.WP.~|
|00000370| 10 ff 15 2c 03 01 00 8b | 45 fc 83 66 48 00 80 66 |...,....|E..fH..f|
|00000380| 51 00 80 66 52 00 89 46 | 34 8b 45 14 c7 46 3c 18 |Q..fR..F|4.E..F<.|
|00000390| 00 00 00 c7 46 40 00 00 | 01 00 89 7e 44 89 7e 4c |....F@..|...~D.~L|
|000003a0| c6 46 50 01 c7 43 38 6e | b5 01 00 c7 43 40 b0 b5 |.FP..C8n|....C@..|
|000003b0| 01 00 c7 43 70 d8 b3 01 | 00 c7 43 74 c0 1a 01 00 |...Cp...|..Ct....|
|000003c0| 8b 00 80 48 1d 20 c7 43 | 34 ee b5 01 00 ff 76 38 |...H. .C|4.....v8|
|000003d0| 8d 45 90 68 2a db 01 00 | 50 ff 15 60 03 01 00 83 |.E.h*...|P..`....|
|000003e0| c4 0c 8d 45 90 50 8d 45 | f8 50 ff 15 e4 02 01 00 |...E.P.E|.P......|
|000003f0| 8d 45 f0 50 8d 45 f8 50 | ff 15 f4 03 01 00 85 c0 |.E.P.E.P|........|
|00000400| 74 03 ff 46 38 3d 35 00 | 00 c0 74 c1 ff 15 e0 03 |t..F8=5.|..t.....|
|00000410| 01 00 83 c0 10 ff 00 33 | c0 5f 5e 5b c9 c2 10 00 |.......3|._^[....|
|00000420| fc dc 00 00 00 00 00 00 | 00 00 00 00 58 e6 00 00 |........|....X...|
|00000430| a0 02 00 00 dc dc 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000440| 00 e7 00 00 80 02 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000450| 00 00 00 00 00 00 00 00 | 00 00 00 00 ec e6 00 00 |........|........|
|00000460| d4 e6 00 00 c6 e6 00 00 | b0 e6 00 00 9a e6 00 00 |........|........|
|00000470| 86 e6 00 00 72 e6 00 00 | 00 00 00 00 ee de 00 00 |....r...|........|
|00000480| 2c df 00 00 42 df 00 00 | 5a df 00 00 72 df 00 00 |,...B...|Z...r...|
|00000490| 7c df 00 00 94 df 00 00 | a0 df 00 00 aa df 00 00 ||.......|........|
|000004a0| bc df 00 00 d0 df 00 00 | e6 df 00 00 fe df 00 00 |........|........|
|000004b0| 16 e0 00 00 36 e0 00 00 | 4e e0 00 00 6c e0 00 00 |....6...|N...l...|
|000004c0| 80 e0 00 00 98 e0 00 00 | aa e0 00 00 b4 e0 00 00 |........|........|
|000004d0| c6 e0 00 00 de e0 00 00 | f4 e0 00 00 08 e1 00 00 |........|........|
|000004e0| 20 e1 00 00 30 e1 00 00 | 4c e1 00 00 60 e1 00 00 | ...0...|L...`...|
|000004f0| 70 e1 00 00 88 e1 00 00 | a2 e1 00 00 ba e1 00 00 |p.......|........|
|00000500| ca e1 00 00 ea e1 00 00 | 06 e2 00 00 1a e2 00 00 |........|........|
|00000510| 36 e2 00 00 4e e2 00 00 | 6c e2 00 00 8e e2 00 00 |6...N...|l.......|
|00000520| a6 e2 00 00 06 df 00 00 | 16 df 00 00 fa e2 00 00 |........|........|
|00000530| 10 e3 00 00 20 e3 00 00 | 2a e3 00 00 38 e3 00 00 |.... ...|*...8...|
|00000540| 44 e3 00 00 56 e3 00 00 | 68 e3 00 00 7e e3 00 00 |D...V...|h...~...|
|00000550| 94 e3 00 00 ae e3 00 00 | bc e3 00 00 d4 e3 00 00 |........|........|
|00000560| e4 e3 00 00 00 e4 00 00 | 1c e4 00 00 38 e4 00 00 |........|....8...|
|00000570| 54 e4 00 00 70 e4 00 00 | 88 e4 00 00 aa e4 00 00 |T...p...|........|
|00000580| cc e4 00 00 e8 e4 00 00 | 06 e5 00 00 2a e5 00 00 |........|....*...|
|00000590| 48 e5 00 00 5c e5 00 00 | 7e e5 00 00 8c e5 00 00 |H...\...|~.......|
|000005a0| a6 e5 00 00 b8 e5 00 00 | d0 e5 00 00 e2 e5 00 00 |........|........|
|000005b0| fa e5 00 00 12 e6 00 00 | 24 e6 00 00 38 e6 00 00 |........|$...8...|
|000005c0| 66 e6 00 00 d8 de 00 00 | c0 de 00 00 ac de 00 00 |f.......|........|
|000005d0| 94 de 00 00 86 de 00 00 | 68 de 00 00 c6 e2 00 00 |........|h.......|
|000005e0| e4 e2 00 00 00 00 00 00 | d5 00 49 6e 74 65 72 6c |........|..Interl|
|000005f0| 6f 63 6b 65 64 43 6f 6d | 70 61 72 65 45 78 63 68 |ockedCom|pareExch|
|00000600| 61 6e 67 65 00 00 42 00 | 45 78 46 72 65 65 50 6f |ange..B.|ExFreePo|
|00000610| 6f 6c 00 00 f7 00 49 6f | 43 72 65 61 74 65 53 79 |ol....Io|CreateSy|
|00000620| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 3d 02 4f 62 |mbolicLi|nk..=.Ob|
|00000630| 51 75 65 72 79 4e 61 6d | 65 53 74 72 69 6e 67 00 |QueryNam|eString.|
|00000640| 36 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |6.ExAllo|catePool|
|00000650| 57 69 74 68 54 61 67 00 | 45 01 49 6f 66 43 6f 6d |WithTag.|E.IofCom|
|00000660| 70 6c 65 74 65 52 65 71 | 75 65 73 74 00 00 fc 00 |pleteReq|uest....|
|00000670| 49 6f 44 65 6c 65 74 65 | 53 79 6d 62 6f 6c 69 63 |IoDelete|Symbolic|
|00000680| 4c 69 6e 6b 00 00 57 02 | 50 73 47 65 74 56 65 72 |Link..W.|PsGetVer|
|00000690| 73 69 6f 6e 00 00 0c 01 | 49 6f 47 65 74 43 75 72 |sion....|IoGetCur|
|000006a0| 72 65 6e 74 50 72 6f 63 | 65 73 73 00 d1 02 52 74 |rentProc|ess...Rt|
|000006b0| 6c 49 6e 69 74 69 61 6c | 69 7a 65 42 69 74 4d 61 |lInitial|izeBitMa|
|000006c0| 70 00 80 01 4b 65 4c 65 | 61 76 65 43 72 69 74 69 |p...KeLe|aveCriti|
|000006d0| 63 61 6c 52 65 67 69 6f | 6e 00 5b 01 4b 65 45 6e |calRegio|n.[.KeEn|
|000006e0| 74 65 72 43 72 69 74 69 | 63 61 6c 52 65 67 69 6f |terCriti|calRegio|
|000006f0| 6e 00 dc 03 73 74 72 72 | 63 68 72 00 d6 00 49 6e |n...strr|chr...In|
|00000700| 74 65 72 6c 6f 63 6b 65 | 64 44 65 63 72 65 6d 65 |terlocke|dDecreme|
|00000710| 6e 74 00 00 b4 03 5f 73 | 74 72 69 63 6d 70 00 00 |nt...._s|tricmp..|
|00000720| db 03 73 74 72 6e 63 70 | 79 00 ae 02 52 74 6c 45 |..strncp|y...RtlE|
|00000730| 71 75 61 6c 53 74 72 69 | 6e 67 00 00 cd 02 52 74 |qualStri|ng....Rt|
|00000740| 6c 49 6e 69 74 41 6e 73 | 69 53 74 72 69 6e 67 00 |lInitAns|iString.|
|00000750| d7 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 45 78 63 |..Interl|ockedExc|
|00000760| 68 61 6e 67 65 00 87 02 | 52 74 6c 43 6f 6d 70 61 |hange...|RtlCompa|
|00000770| 72 65 4d 65 6d 6f 72 79 | 55 6c 6f 6e 67 00 c3 02 |reMemory|Ulong...|
|00000780| 52 74 6c 46 72 65 65 55 | 6e 69 63 6f 64 65 53 74 |RtlFreeU|nicodeSt|
|00000790| 72 69 6e 67 00 00 77 02 | 52 74 6c 41 6e 73 69 53 |ring..w.|RtlAnsiS|
|000007a0| 74 72 69 6e 67 54 6f 55 | 6e 69 63 6f 64 65 53 74 |tringToU|nicodeSt|
|000007b0| 72 69 6e 67 00 00 92 02 | 52 74 6c 43 6f 70 79 55 |ring....|RtlCopyU|
|000007c0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 28 03 |nicodeSt|ring..(.|
|000007d0| 52 74 6c 78 41 6e 73 69 | 53 74 72 69 6e 67 54 6f |RtlxAnsi|StringTo|
|000007e0| 55 6e 69 63 6f 64 65 53 | 69 7a 65 00 ff 01 4e 6c |UnicodeS|ize...Nl|
|000007f0| 73 4d 62 43 6f 64 65 50 | 61 67 65 54 61 67 00 00 |sMbCodeP|ageTag..|
|00000800| d0 02 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|00000810| 53 74 72 69 6e 67 00 00 | 59 01 4b 65 44 65 74 61 |String..|Y.KeDeta|
|00000820| 63 68 50 72 6f 63 65 73 | 73 00 5b 03 5a 77 43 6c |chProces|s.[.ZwCl|
|00000830| 6f 73 65 00 4f 01 4b 65 | 41 74 74 61 63 68 50 72 |ose.O.Ke|AttachPr|
|00000840| 6f 63 65 73 73 00 44 02 | 4f 62 66 44 65 72 65 66 |ocess.D.|ObfDeref|
|00000850| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 45 02 |erenceOb|ject..E.|
|00000860| 4f 62 66 52 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |ObfRefer|enceObje|
|00000870| 63 74 00 00 69 03 5a 77 | 44 75 70 6c 69 63 61 74 |ct..i.Zw|Duplicat|
|00000880| 65 4f 62 6a 65 63 74 00 | 3c 02 4f 62 4f 70 65 6e |eObject.|<.ObOpen|
|00000890| 4f 62 6a 65 63 74 42 79 | 50 6f 69 6e 74 65 72 00 |ObjectBy|Pointer.|
|000008a0| 5e 02 50 73 50 72 6f 63 | 65 73 73 54 79 70 65 00 |^.PsProc|essType.|
|000008b0| 3f 02 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |?.ObRefe|renceObj|
|000008c0| 65 63 74 42 79 48 61 6e | 64 6c 65 00 05 01 49 6f |ectByHan|dle...Io|
|000008d0| 46 69 6c 65 4f 62 6a 65 | 63 74 54 79 70 65 00 00 |FileObje|ctType..|
|000008e0| 60 03 5a 77 43 72 65 61 | 74 65 46 69 6c 65 00 00 |`.ZwCrea|teFile..|
|000008f0| 36 02 4f 62 46 69 6e 64 | 48 61 6e 64 6c 65 46 6f |6.ObFind|HandleFo|
|00000900| 72 4f 62 6a 65 63 74 00 | 1e 01 49 6f 51 75 65 72 |rObject.|..IoQuer|
|00000910| 79 46 69 6c 65 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |yFileInf|ormation|
|00000920| 00 00 b8 01 4b 65 57 61 | 69 74 46 6f 72 53 69 6e |....KeWa|itForSin|
|00000930| 67 6c 65 4f 62 6a 65 63 | 74 00 44 01 49 6f 66 43 |gleObjec|t.D.IofC|
|00000940| 61 6c 6c 44 72 69 76 65 | 72 00 e9 00 49 6f 42 75 |allDrive|r...IoBu|
|00000950| 69 6c 64 53 79 6e 63 68 | 72 6f 6e 6f 75 73 46 73 |ildSynch|ronousFs|
|00000960| 64 52 65 71 75 65 73 74 | 00 00 11 01 49 6f 47 65 |dRequest|....IoGe|
|00000970| 74 52 65 6c 61 74 65 64 | 44 65 76 69 63 65 4f 62 |tRelated|DeviceOb|
|00000980| 6a 65 63 74 00 00 70 01 | 4b 65 49 6e 69 74 69 61 |ject..p.|KeInitia|
|00000990| 6c 69 7a 65 45 76 65 6e | 74 00 4a 00 45 78 49 6e |lizeEven|t.J.ExIn|
|000009a0| 69 74 69 61 6c 69 7a 65 | 52 65 73 6f 75 72 63 65 |itialize|Resource|
|000009b0| 4c 69 74 65 00 00 3c 00 | 45 78 44 65 6c 65 74 65 |Lite..<.|ExDelete|
|000009c0| 52 65 73 6f 75 72 63 65 | 4c 69 74 65 00 00 2f 00 |Resource|Lite../.|
|000009d0| 45 78 41 63 71 75 69 72 | 65 52 65 73 6f 75 72 63 |ExAcquir|eResourc|
|000009e0| 65 53 68 61 72 65 64 4c | 69 74 65 00 2e 00 45 78 |eSharedL|ite...Ex|
|000009f0| 41 63 71 75 69 72 65 52 | 65 73 6f 75 72 63 65 45 |AcquireR|esourceE|
|00000a00| 78 63 6c 75 73 69 76 65 | 4c 69 74 65 00 00 6d 00 |xclusive|Lite..m.|
|00000a10| 45 78 52 65 6c 65 61 73 | 65 52 65 73 6f 75 72 63 |ExReleas|eResourc|
|00000a20| 65 4c 69 74 65 00 e7 00 | 49 6f 42 75 69 6c 64 44 |eLite...|IoBuildD|
|00000a30| 65 76 69 63 65 49 6f 43 | 6f 6e 74 72 6f 6c 52 65 |eviceIoC|ontrolRe|
|00000a40| 71 75 65 73 74 00 41 02 | 4f 62 52 65 66 65 72 65 |quest.A.|ObRefere|
|00000a50| 6e 63 65 4f 62 6a 65 63 | 74 42 79 50 6f 69 6e 74 |nceObjec|tByPoint|
|00000a60| 65 72 00 00 3b 02 4f 62 | 4f 70 65 6e 4f 62 6a 65 |er..;.Ob|OpenObje|
|00000a70| 63 74 42 79 4e 61 6d 65 | 00 00 02 01 49 6f 44 72 |ctByName|....IoDr|
|00000a80| 69 76 65 72 4f 62 6a 65 | 63 74 54 79 70 65 00 00 |iverObje|ctType..|
|00000a90| 71 03 5a 77 4c 6f 61 64 | 44 72 69 76 65 72 00 00 |q.ZwLoad|Driver..|
|00000aa0| e8 03 77 63 73 63 70 79 | 00 00 78 03 5a 77 4f 70 |..wcscpy|..x.ZwOp|
|00000ab0| 65 6e 46 69 6c 65 00 00 | df 03 73 77 70 72 69 6e |enFile..|..swprin|
|00000ac0| 74 66 00 00 84 02 52 74 | 6c 43 6c 65 61 72 41 6c |tf....Rt|lClearAl|
|00000ad0| 6c 42 69 74 73 00 40 01 | 49 6f 56 65 72 69 66 79 |lBits.@.|IoVerify|
|00000ae0| 56 6f 6c 75 6d 65 00 00 | 2e 01 49 6f 53 65 74 44 |Volume..|..IoSetD|
|00000af0| 65 76 69 63 65 54 6f 56 | 65 72 69 66 79 00 60 01 |eviceToV|erify.`.|
|00000b00| 4b 65 47 65 74 43 75 72 | 72 65 6e 74 54 68 72 65 |KeGetCur|rentThre|
|00000b10| 61 64 00 00 57 01 4b 65 | 44 65 6c 61 79 45 78 65 |ad..W.Ke|DelayExe|
|00000b20| 63 75 74 69 6f 6e 54 68 | 72 65 61 64 00 00 01 03 |cutionTh|read....|
|00000b30| 52 74 6c 53 65 74 42 69 | 74 73 00 00 af 02 52 74 |RtlSetBi|ts....Rt|
|00000b40| 6c 45 71 75 61 6c 55 6e | 69 63 6f 64 65 53 74 72 |lEqualUn|icodeStr|
|00000b50| 69 6e 67 00 21 03 52 74 | 6c 55 70 70 65 72 43 68 |ing.!.Rt|lUpperCh|
|00000b60| 61 72 00 00 8a 03 5a 77 | 51 75 65 72 79 53 79 6d |ar....Zw|QuerySym|
|00000b70| 62 6f 6c 69 63 4c 69 6e | 6b 4f 62 6a 65 63 74 00 |bolicLin|kObject.|
|00000b80| 7d 03 5a 77 4f 70 65 6e | 53 79 6d 62 6f 6c 69 63 |}.ZwOpen|Symbolic|
|00000b90| 4c 69 6e 6b 4f 62 6a 65 | 63 74 00 00 0d 01 49 6f |LinkObje|ct....Io|
|00000ba0| 47 65 74 44 65 76 69 63 | 65 4f 62 6a 65 63 74 50 |GetDevic|eObjectP|
|00000bb0| 6f 69 6e 74 65 72 00 00 | 11 03 52 74 6c 55 6e 69 |ointer..|..RtlUni|
|00000bc0| 63 6f 64 65 53 74 72 69 | 6e 67 54 6f 49 6e 74 65 |codeStri|ngToInte|
|00000bd0| 67 65 72 00 84 03 5a 77 | 51 75 65 72 79 49 6e 66 |ger...Zw|QueryInf|
|00000be0| 6f 72 6d 61 74 69 6f 6e | 50 72 6f 63 65 73 73 00 |ormation|Process.|
|00000bf0| 76 03 5a 77 4f 70 65 6e | 44 69 72 65 63 74 6f 72 |v.ZwOpen|Director|
|00000c00| 79 4f 62 6a 65 63 74 00 | f9 00 49 6f 43 72 65 61 |yObject.|..IoCrea|
|00000c10| 74 65 55 6e 70 72 6f 74 | 65 63 74 65 64 53 79 6d |teUnprot|ectedSym|
|00000c20| 62 6f 6c 69 63 4c 69 6e | 6b 00 7a 02 52 74 6c 41 |bolicLin|k.z.RtlA|
|00000c30| 70 70 65 6e 64 55 6e 69 | 63 6f 64 65 53 74 72 69 |ppendUni|codeStri|
|00000c40| 6e 67 54 6f 53 74 72 69 | 6e 67 00 00 7b 02 52 74 |ngToStri|ng..{.Rt|
|00000c50| 6c 41 70 70 65 6e 64 55 | 6e 69 63 6f 64 65 54 6f |lAppendU|nicodeTo|
|00000c60| 53 74 72 69 6e 67 00 00 | 43 00 45 78 46 72 65 65 |String..|C.ExFree|
|00000c70| 54 6f 50 61 67 65 64 4c | 6f 6f 6b 61 73 69 64 65 |ToPagedL|ookaside|
|00000c80| 4c 69 73 74 00 00 32 00 | 45 78 41 6c 6c 6f 63 61 |List..2.|ExAlloca|
|00000c90| 74 65 46 72 6f 6d 50 61 | 67 65 64 4c 6f 6f 6b 61 |teFromPa|gedLooka|
|00000ca0| 73 69 64 65 4c 69 73 74 | 00 00 3a 00 45 78 44 65 |sideList|..:.ExDe|
|00000cb0| 6c 65 74 65 50 61 67 65 | 64 4c 6f 6f 6b 61 73 69 |letePage|dLookasi|
|00000cc0| 64 65 4c 69 73 74 00 00 | 40 00 45 78 45 76 65 6e |deList..|@.ExEven|
|00000cd0| 74 4f 62 6a 65 63 74 54 | 79 70 65 00 48 00 45 78 |tObjectT|ype.H.Ex|
|00000ce0| 49 6e 69 74 69 61 6c 69 | 7a 65 50 61 67 65 64 4c |Initiali|zePagedL|
|00000cf0| 6f 6f 6b 61 73 69 64 65 | 4c 69 73 74 00 00 a2 01 |ookaside|List....|
|00000d00| 4b 65 53 65 74 45 76 65 | 6e 74 00 00 67 02 50 73 |KeSetEve|nt..g.Ps|
|00000d10| 54 65 72 6d 69 6e 61 74 | 65 53 79 73 74 65 6d 54 |Terminat|eSystemT|
|00000d20| 68 72 65 61 64 00 62 00 | 45 78 51 75 65 75 65 57 |hread.b.|ExQueueW|
|00000d30| 6f 72 6b 49 74 65 6d 00 | 51 02 50 73 43 72 65 61 |orkItem.|Q.PsCrea|
|00000d40| 74 65 53 79 73 74 65 6d | 54 68 72 65 61 64 00 00 |teSystem|Thread..|
|00000d50| fb 00 49 6f 44 65 6c 65 | 74 65 44 65 76 69 63 65 |..IoDele|teDevice|
|00000d60| 00 00 76 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |..v.KeIn|itialize|
|00000d70| 53 70 69 6e 4c 6f 63 6b | 00 00 d9 00 49 6e 74 65 |SpinLock|....Inte|
|00000d80| 72 6c 6f 63 6b 65 64 49 | 6e 63 72 65 6d 65 6e 74 |rlockedI|ncrement|
|00000d90| 00 00 f3 00 49 6f 43 72 | 65 61 74 65 44 65 76 69 |....IoCr|eateDevi|
|00000da0| 63 65 00 00 e7 01 4d 6d | 4d 61 70 4c 6f 63 6b 65 |ce....Mm|MapLocke|
|00000db0| 64 50 61 67 65 73 00 00 | 0b 01 49 6f 47 65 74 43 |dPages..|..IoGetC|
|00000dc0| 6f 6e 66 69 67 75 72 61 | 74 69 6f 6e 49 6e 66 6f |onfigura|tionInfo|
|00000dd0| 72 6d 61 74 69 6f 6e 00 | 6e 74 6f 73 6b 72 6e 6c |rmation.|ntoskrnl|
|00000de0| 2e 65 78 65 00 00 18 03 | 52 74 6c 55 6e 77 69 6e |.exe....|RtlUnwin|
|00000df0| 64 00 4d 00 4b 66 52 65 | 6c 65 61 73 65 53 70 69 |d.M.KfRe|leaseSpi|
|00000e00| 6e 4c 6f 63 6b 00 4a 00 | 4b 66 41 63 71 75 69 72 |nLock.J.|KfAcquir|
|00000e10| 65 53 70 69 6e 4c 6f 63 | 6b 00 01 00 45 78 52 65 |eSpinLoc|k...ExRe|
|00000e20| 6c 65 61 73 65 46 61 73 | 74 4d 75 74 65 78 00 00 |leaseFas|tMutex..|
|00000e30| 00 00 45 78 41 63 71 75 | 69 72 65 46 61 73 74 4d |..ExAcqu|ireFastM|
|00000e40| 75 74 65 78 00 00 4b 00 | 4b 66 4c 6f 77 65 72 49 |utex..K.|KfLowerI|
|00000e50| 72 71 6c 00 46 00 4b 65 | 52 61 69 73 65 49 72 71 |rql.F.Ke|RaiseIrq|
|00000e60| 6c 54 6f 44 70 63 4c 65 | 76 65 6c 00 42 00 4b 65 |lToDpcLe|vel.B.Ke|
|00000e70| 47 65 74 43 75 72 72 65 | 6e 74 49 72 71 6c 00 00 |GetCurre|ntIrql..|
|00000e80| 48 41 4c 2e 64 6c 6c 00 | 00 00 00 00 00 00 00 00 |HAL.dll.|........|
|00000e90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+