home *** CD-ROM | disk | FTP | other *** search
Unknown | 1997-05-23 | 6.1 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 64 d3 1b 00 00 00 00 00 | 00 00 00 00 1c eb 1b 00 |d.......|........|
|00000010| c8 02 00 00 5c d3 1b 00 | 00 00 00 00 00 00 00 00 |....\...|........|
|00000020| 46 eb 1b 00 c0 02 00 00 | 00 00 00 00 00 00 00 00 |F.......|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 2a eb 1b 00 |........|....*...|
|00000040| 00 00 00 00 0c d7 1b 00 | 4a d7 1b 00 6c d7 1b 00 |........|J...l...|
|00000050| 78 d7 1b 00 90 d7 1b 00 | a8 d7 1b 00 c4 d7 1b 00 |x.......|........|
|00000060| dc d7 1b 00 e8 d7 1b 00 | f4 d7 1b 00 00 d8 1b 00 |........|........|
|00000070| 1e d8 1b 00 38 d8 1b 00 | 52 d8 1b 00 6a d8 1b 00 |....8...|R...j...|
|00000080| 80 d8 1b 00 9a d8 1b 00 | ba d8 1b 00 ca d8 1b 00 |........|........|
|00000090| e4 d8 1b 00 fe d8 1b 00 | 0c d9 1b 00 20 d9 1b 00 |........|.... ...|
|000000a0| 3e d9 1b 00 48 d9 1b 00 | 58 d9 1b 00 70 d9 1b 00 |>...H...|X...p...|
|000000b0| 7e d9 1b 00 8a d9 1b 00 | a0 d9 1b 00 aa d9 1b 00 |~.......|........|
|000000c0| b4 d9 1b 00 c8 d9 1b 00 | e2 d9 1b 00 f8 d9 1b 00 |........|........|
|000000d0| 10 da 1b 00 20 da 1b 00 | 2e da 1b 00 48 da 1b 00 |.... ...|....H...|
|000000e0| 60 da 1b 00 72 da 1b 00 | 8c da 1b 00 a4 da 1b 00 |`...r...|........|
|000000f0| c0 da 1b 00 d8 da 1b 00 | f6 da 1b 00 02 db 1b 00 |........|........|
|00000100| 1e db 1b 00 32 db 1b 00 | 46 db 1b 00 62 db 1b 00 |....2...|F...b...|
|00000110| 6e db 1b 00 80 db 1b 00 | 8e db 1b 00 a6 db 1b 00 |n.......|........|
|00000120| be db 1b 00 d6 db 1b 00 | ea db 1b 00 04 dc 1b 00 |........|........|
|00000130| 20 dc 1b 00 30 dc 1b 00 | 48 dc 1b 00 56 dc 1b 00 | ...0...|H...V...|
|00000140| 68 dc 1b 00 76 dc 1b 00 | 90 dc 1b 00 a6 dc 1b 00 |h...v...|........|
|00000150| c2 dc 1b 00 dc dc 1b 00 | ee dc 1b 00 06 dd 1b 00 |........|........|
|00000160| 20 dd 1b 00 36 dd 1b 00 | 46 dd 1b 00 56 dd 1b 00 | ...6...|F...V...|
|00000170| 74 dd 1b 00 7e dd 1b 00 | 90 dd 1b 00 a8 dd 1b 00 |t...~...|........|
|00000180| be dd 1b 00 d6 dd 1b 00 | e8 dd 1b 00 f4 dd 1b 00 |........|........|
|00000190| 04 de 1b 00 16 de 1b 00 | 24 de 1b 00 2e de 1b 00 |........|$.......|
|000001a0| 3e de 1b 00 50 de 1b 00 | 62 de 1b 00 72 de 1b 00 |>...P...|b...r...|
|000001b0| 8a de 1b 00 a4 de 1b 00 | be de 1b 00 d8 de 1b 00 |........|........|
|000001c0| e4 de 1b 00 fa de 1b 00 | 10 df 1b 00 30 df 1b 00 |........|....0...|
|000001d0| 4c df 1b 00 6a df 1b 00 | 80 df 1b 00 8a df 1b 00 |L...j...|........|
|000001e0| a6 df 1b 00 b0 df 1b 00 | ba df 1b 00 c4 df 1b 00 |........|........|
|000001f0| ce df 1b 00 e0 df 1b 00 | fa df 1b 00 16 e0 1b 00 |........|........|
|00000200| 2c e0 1b 00 42 e0 1b 00 | 5e e0 1b 00 74 e0 1b 00 |,...B...|^...t...|
|00000210| 1a d7 1b 00 32 d7 1b 00 | b6 e0 1b 00 c0 e0 1b 00 |....2...|........|
|00000220| d6 e0 1b 00 fa e0 1b 00 | 0a e1 1b 00 1e e1 1b 00 |........|........|
|00000230| 3c e1 1b 00 5a e1 1b 00 | 6a e1 1b 00 84 e1 1b 00 |<...Z...|j.......|
|00000240| a0 e1 1b 00 bc e1 1b 00 | dc e1 1b 00 fc e1 1b 00 |........|........|
|00000250| 06 e2 1b 00 14 e2 1b 00 | 24 e2 1b 00 3c e2 1b 00 |........|$...<...|
|00000260| 56 e2 1b 00 72 e2 1b 00 | 8e e2 1b 00 a2 e2 1b 00 |V...r...|........|
|00000270| ba e2 1b 00 d8 e2 1b 00 | ec e2 1b 00 06 e3 1b 00 |........|........|
|00000280| 24 e3 1b 00 3e e3 1b 00 | 5a e3 1b 00 6c e3 1b 00 |$...>...|Z...l...|
|00000290| 80 e3 1b 00 92 e3 1b 00 | a6 e3 1b 00 bc e3 1b 00 |........|........|
|000002a0| d4 e3 1b 00 e2 e3 1b 00 | f6 e3 1b 00 18 e4 1b 00 |........|........|
|000002b0| 30 e4 1b 00 4c e4 1b 00 | 62 e4 1b 00 70 e4 1b 00 |0...L...|b...p...|
|000002c0| 80 e4 1b 00 a2 e4 1b 00 | ba e4 1b 00 d0 e4 1b 00 |........|........|
|000002d0| ec e4 1b 00 04 e5 1b 00 | 18 e5 1b 00 28 e5 1b 00 |........|....(...|
|000002e0| 36 e5 1b 00 56 e5 1b 00 | 74 e5 1b 00 8c e5 1b 00 |6...V...|t.......|
|000002f0| 9e e5 1b 00 b2 e5 1b 00 | c8 e5 1b 00 e8 e5 1b 00 |........|........|
|00000300| 02 e6 1b 00 22 e6 1b 00 | 3a e6 1b 00 52 e6 1b 00 |...."...|:...R...|
|00000310| 62 e6 1b 00 7c e6 1b 00 | 9a e6 1b 00 ba e6 1b 00 |b...|...|........|
|00000320| ce e6 1b 00 da e6 1b 00 | ea e6 1b 00 f8 e6 1b 00 |........|........|
|00000330| 16 e7 1b 00 26 e7 1b 00 | 32 e7 1b 00 52 e7 1b 00 |....&...|2...R...|
|00000340| 72 e7 1b 00 92 e7 1b 00 | b2 e7 1b 00 cc e7 1b 00 |r.......|........|
|00000350| e2 e7 1b 00 f8 e7 1b 00 | 0e e8 1b 00 28 e8 1b 00 |........|....(...|
|00000360| 40 e8 1b 00 54 e8 1b 00 | 6e e8 1b 00 8c e8 1b 00 |@...T...|n.......|
|00000370| a6 e8 1b 00 ba e8 1b 00 | ce e8 1b 00 e4 e8 1b 00 |........|........|
|00000380| fc e8 1b 00 14 e9 1b 00 | 30 e9 1b 00 4e e9 1b 00 |........|0...N...|
|00000390| 68 e9 1b 00 80 e9 1b 00 | 92 e9 1b 00 a6 e9 1b 00 |h.......|........|
|000003a0| bc e9 1b 00 da e9 1b 00 | f0 e9 1b 00 00 ea 1b 00 |........|........|
|000003b0| 16 ea 1b 00 2a ea 1b 00 | 4a ea 1b 00 5e ea 1b 00 |....*...|J...^...|
|000003c0| 76 ea 1b 00 90 ea 1b 00 | ae ea 1b 00 be ea 1b 00 |v.......|........|
|000003d0| cc ea 1b 00 e0 ea 1b 00 | f2 ea 1b 00 0a eb 1b 00 |........|........|
|000003e0| 8e e0 1b 00 ac e0 1b 00 | 00 00 00 00 45 00 45 78 |........|....E.Ex|
|000003f0| 46 72 65 65 50 6f 6f 6c | 00 00 36 00 45 78 41 6c |FreePool|..6.ExAl|
|00000400| 6c 6f 63 61 74 65 50 6f | 6f 6c 57 69 74 68 54 61 |locatePo|olWithTa|
|00000410| 67 00 4e 01 4b 65 45 6e | 74 65 72 43 72 69 74 69 |g.N.KeEn|terCriti|
|00000420| 63 61 6c 52 65 67 69 6f | 6e 00 2f 00 45 78 41 63 |calRegio|n./.ExAc|
|00000430| 71 75 69 72 65 52 65 73 | 6f 75 72 63 65 45 78 63 |quireRes|ourceExc|
|00000440| 6c 75 73 69 76 65 4c 69 | 74 65 00 00 9b 03 5f 4f |lusiveLi|te...._O|
|00000450| 74 73 4d 6f 76 65 00 00 | 6d 00 45 78 52 65 6c 65 |tsMove..|m.ExRele|
|00000460| 61 73 65 52 65 73 6f 75 | 72 63 65 4c 69 74 65 00 |aseResou|rceLite.|
|00000470| 6e 01 4b 65 4c 65 61 76 | 65 43 72 69 74 69 63 61 |n.KeLeav|eCritica|
|00000480| 6c 52 65 67 69 6f 6e 00 | 4c 00 45 78 49 6e 69 74 |lRegion.|L.ExInit|
|00000490| 69 61 6c 69 7a 65 52 65 | 73 6f 75 72 63 65 4c 69 |ializeRe|sourceLi|
|000004a0| 74 65 00 00 3f 00 45 78 | 44 65 6c 65 74 65 52 65 |te..?.Ex|DeleteRe|
|000004b0| 73 6f 75 72 63 65 4c 69 | 74 65 00 00 2a 00 44 62 |sourceLi|te..*.Db|
|000004c0| 67 50 72 69 6e 74 00 00 | fc 03 76 73 70 72 69 6e |gPrint..|..vsprin|
|000004d0| 74 66 00 00 b4 03 5f 4f | 74 73 5a 65 72 6f 00 00 |tf...._O|tsZero..|
|000004e0| 63 00 45 78 52 61 69 73 | 65 44 61 74 61 74 79 70 |c.ExRais|eDatatyp|
|000004f0| 65 4d 69 73 61 6c 69 67 | 6e 6d 65 6e 74 00 62 00 |eMisalig|nment.b.|
|00000500| 45 78 52 61 69 73 65 41 | 63 63 65 73 73 56 69 6f |ExRaiseA|ccessVio|
|00000510| 6c 61 74 69 6f 6e 00 00 | 3f 03 5a 77 41 6c 6c 6f |lation..|?.ZwAllo|
|00000520| 63 61 74 65 56 69 72 74 | 75 61 6c 4d 65 6d 6f 72 |cateVirt|ualMemor|
|00000530| 79 00 db 01 4d 6d 53 65 | 63 75 72 65 56 69 72 74 |y...MmSe|cureVirt|
|00000540| 75 61 6c 4d 65 6d 6f 72 | 79 00 55 03 5a 77 46 72 |ualMemor|y.U.ZwFr|
|00000550| 65 65 56 69 72 74 75 61 | 6c 4d 65 6d 6f 72 79 00 |eeVirtua|lMemory.|
|00000560| e6 01 4d 6d 55 6e 73 65 | 63 75 72 65 56 69 72 74 |..MmUnse|cureVirt|
|00000570| 75 61 6c 4d 65 6d 6f 72 | 79 00 dc 00 49 6f 42 75 |ualMemor|y...IoBu|
|00000580| 69 6c 64 44 65 76 69 63 | 65 49 6f 43 6f 6e 74 72 |ildDevic|eIoContr|
|00000590| 6f 6c 52 65 71 75 65 73 | 74 00 39 01 49 6f 66 43 |olReques|t.9.IofC|
|000005a0| 61 6c 6c 44 72 69 76 65 | 72 00 cf 02 52 74 6c 4d |allDrive|r...RtlM|
|000005b0| 75 6c 74 69 42 79 74 65 | 54 6f 55 6e 69 63 6f 64 |ultiByte|ToUnicod|
|000005c0| 65 4e 00 00 fc 02 52 74 | 6c 55 6e 69 63 6f 64 65 |eN....Rt|lUnicode|
|000005d0| 54 6f 4d 75 6c 74 69 42 | 79 74 65 4e 00 00 b7 03 |ToMultiB|yteN....|
|000005e0| 5f 4f 74 73 73 74 72 63 | 6d 70 00 00 c8 01 4d 6d |_Otsstrc|mp....Mm|
|000005f0| 47 72 6f 77 4b 65 72 6e | 65 6c 53 74 61 63 6b 00 |GrowKern|elStack.|
|00000600| 95 01 4b 65 53 65 74 4b | 65 72 6e 65 6c 53 74 61 |..KeSetK|ernelSta|
|00000610| 63 6b 53 77 61 70 45 6e | 61 62 6c 65 00 00 02 04 |ckSwapEn|able....|
|00000620| 77 63 73 6c 65 6e 00 00 | 37 02 50 72 6f 62 65 46 |wcslen..|7.ProbeF|
|00000630| 6f 72 57 72 69 74 65 00 | b6 02 52 74 6c 49 6e 69 |orWrite.|..RtlIni|
|00000640| 74 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |tUnicode|String..|
|00000650| 6c 03 5a 77 51 75 65 72 | 79 4b 65 79 00 00 5f 03 |l.ZwQuer|yKey.._.|
|00000660| 5a 77 4f 70 65 6e 4b 65 | 79 00 52 03 5a 77 45 6e |ZwOpenKe|y.R.ZwEn|
|00000670| 75 6d 65 72 61 74 65 56 | 61 6c 75 65 4b 65 79 00 |umerateV|alueKey.|
|00000680| 00 04 77 63 73 63 70 79 | 00 00 41 03 5a 77 43 6c |..wcscpy|..A.ZwCl|
|00000690| 6f 73 65 00 75 01 4b 65 | 51 75 65 72 79 53 79 73 |ose.u.Ke|QuerySys|
|000006a0| 74 65 6d 54 69 6d 65 00 | 70 00 45 78 53 79 73 74 |temTime.|p.ExSyst|
|000006b0| 65 6d 54 69 6d 65 54 6f | 4c 6f 63 61 6c 54 69 6d |emTimeTo|LocalTim|
|000006c0| 65 00 f4 02 52 74 6c 54 | 69 6d 65 54 6f 54 69 6d |e...RtlT|imeToTim|
|000006d0| 65 46 69 65 6c 64 73 00 | 8a 03 5f 4f 74 73 43 53 |eFields.|.._OtsCS|
|000006e0| 70 65 63 69 66 69 63 48 | 61 6e 64 6c 65 72 00 00 |pecificH|andler..|
|000006f0| 46 03 5a 77 43 72 65 61 | 74 65 46 69 6c 65 00 00 |F.ZwCrea|teFile..|
|00000700| 5e 03 5a 77 4f 70 65 6e | 46 69 6c 65 00 00 69 03 |^.ZwOpen|File..i.|
|00000710| 5a 77 51 75 65 72 79 49 | 6e 66 6f 72 6d 61 74 69 |ZwQueryI|nformati|
|00000720| 6f 6e 46 69 6c 65 00 00 | 7b 03 5a 77 53 65 74 49 |onFile..|{.ZwSetI|
|00000730| 6e 66 6f 72 6d 61 74 69 | 6f 6e 46 69 6c 65 00 00 |nformati|onFile..|
|00000740| c0 01 4d 6d 43 72 65 61 | 74 65 53 65 63 74 69 6f |..MmCrea|teSectio|
|00000750| 6e 00 d4 01 4d 6d 4d 61 | 70 56 69 65 77 49 6e 53 |n...MmMa|pViewInS|
|00000760| 79 73 74 65 6d 53 70 61 | 63 65 00 00 2e 02 4f 62 |ystemSpa|ce....Ob|
|00000770| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|00000780| 63 74 00 00 e4 01 4d 6d | 55 6e 6d 61 70 56 69 65 |ct....Mm|UnmapVie|
|00000790| 77 49 6e 53 79 73 74 65 | 6d 53 70 61 63 65 00 00 |wInSyste|mSpace..|
|000007a0| ae 02 52 74 6c 47 65 74 | 44 65 66 61 75 6c 74 43 |..RtlGet|DefaultC|
|000007b0| 6f 64 65 50 61 67 65 00 | b1 01 4c 64 72 46 69 6e |odePage.|..LdrFin|
|000007c0| 64 52 65 73 6f 75 72 63 | 65 44 69 72 65 63 74 6f |dResourc|eDirecto|
|000007d0| 72 79 5f 55 00 00 d3 03 | 5f 77 63 73 6e 69 63 6d |ry_U....|_wcsnicm|
|000007e0| 70 00 5f 02 52 74 6c 41 | 70 70 65 6e 64 55 6e 69 |p._.RtlA|ppendUni|
|000007f0| 63 6f 64 65 54 6f 53 74 | 72 69 6e 67 00 00 b2 01 |codeToSt|ring....|
|00000800| 4c 64 72 46 69 6e 64 52 | 65 73 6f 75 72 63 65 5f |LdrFindR|esource_|
|00000810| 55 00 af 01 4c 64 72 41 | 63 63 65 73 73 52 65 73 |U...LdrA|ccessRes|
|00000820| 6f 75 72 63 65 00 f8 02 | 52 74 6c 55 6e 69 63 6f |ource...|RtlUnico|
|00000830| 64 65 53 74 72 69 6e 67 | 54 6f 49 6e 74 65 67 65 |deString|ToIntege|
|00000840| 72 00 f7 03 73 77 70 72 | 69 6e 74 66 00 00 72 03 |r...swpr|intf..r.|
|00000850| 5a 77 51 75 65 72 79 56 | 61 6c 75 65 4b 65 79 00 |ZwQueryV|alueKey.|
|00000860| 74 03 5a 77 52 65 61 64 | 46 69 6c 65 00 00 b4 02 |t.ZwRead|File....|
|00000870| 52 74 6c 49 6e 69 74 43 | 6f 64 65 50 61 67 65 54 |RtlInitC|odePageT|
|00000880| 61 62 6c 65 00 00 7f 02 | 52 74 6c 43 75 73 74 6f |able....|RtlCusto|
|00000890| 6d 43 50 54 6f 55 6e 69 | 63 6f 64 65 4e 00 fb 02 |mCPToUni|codeN...|
|000008a0| 52 74 6c 55 6e 69 63 6f | 64 65 54 6f 43 75 73 74 |RtlUnico|deToCust|
|000008b0| 6f 6d 43 50 4e 00 5d 01 | 4b 65 49 6e 69 74 69 61 |omCPN.].|KeInitia|
|000008c0| 6c 69 7a 65 45 76 65 6e | 74 00 6f 00 45 78 53 79 |lizeEven|t.o.ExSy|
|000008d0| 73 74 65 6d 45 78 63 65 | 70 74 69 6f 6e 46 69 6c |stemExce|ptionFil|
|000008e0| 74 65 72 00 29 02 4f 62 | 52 65 66 65 72 65 6e 63 |ter.).Ob|Referenc|
|000008f0| 65 4f 62 6a 65 63 74 42 | 79 48 61 6e 64 6c 65 00 |eObjectB|yHandle.|
|00000900| 74 01 4b 65 50 75 6c 73 | 65 45 76 65 6e 74 00 00 |t.KePuls|eEvent..|
|00000910| a7 01 4b 65 57 61 69 74 | 46 6f 72 53 69 6e 67 6c |..KeWait|ForSingl|
|00000920| 65 4f 62 6a 65 63 74 00 | 91 01 4b 65 53 65 74 45 |eObject.|..KeSetE|
|00000930| 76 65 6e 74 00 00 4c 02 | 50 73 52 65 76 65 72 74 |vent..L.|PsRevert|
|00000940| 54 6f 53 65 6c 66 00 00 | 39 03 53 65 54 6f 6b 65 |ToSelf..|9.SeToke|
|00000950| 6e 54 79 70 65 00 21 03 | 53 65 43 72 65 61 74 65 |nType.!.|SeCreate|
|00000960| 43 6c 69 65 6e 74 53 65 | 63 75 72 69 74 79 00 00 |ClientSe|curity..|
|00000970| 27 03 53 65 49 6d 70 65 | 72 73 6f 6e 61 74 65 43 |'.SeImpe|rsonateC|
|00000980| 6c 69 65 6e 74 00 a5 01 | 4b 65 57 61 69 74 46 6f |lient...|KeWaitFo|
|00000990| 72 4d 75 6c 74 69 70 6c | 65 4f 62 6a 65 63 74 73 |rMultipl|eObjects|
|000009a0| 00 00 4a 01 4b 65 44 65 | 6c 61 79 45 78 65 63 75 |..J.KeDe|layExecu|
|000009b0| 74 69 6f 6e 54 68 72 65 | 61 64 00 00 9d 03 5f 4f |tionThre|ad...._O|
|000009c0| 74 73 52 65 6d 61 69 6e | 64 65 72 33 32 00 8d 03 |tsRemain|der32...|
|000009d0| 5f 4f 74 73 44 69 76 69 | 64 65 33 32 55 6e 73 69 |_OtsDivi|de32Unsi|
|000009e0| 67 6e 65 64 00 00 9e 03 | 5f 4f 74 73 52 65 6d 61 |gned....|_OtsRema|
|000009f0| 69 6e 64 65 72 33 32 55 | 6e 73 69 67 6e 65 64 00 |inder32U|nsigned.|
|00000a00| 9a 02 52 74 6c 46 69 6c | 6c 4d 65 6d 6f 72 79 55 |..RtlFil|lMemoryU|
|00000a10| 6c 6f 6e 67 00 00 8b 03 | 5f 4f 74 73 44 69 76 69 |long....|_OtsDivi|
|00000a20| 64 65 33 32 00 00 8e 03 | 5f 4f 74 73 44 69 76 69 |de32....|_OtsDivi|
|00000a30| 64 65 36 34 00 00 a3 03 | 5f 4f 74 73 53 74 72 69 |de64....|_OtsStri|
|00000a40| 6e 67 43 6f 6d 70 61 72 | 65 45 71 6c 53 61 6d 65 |ngCompar|eEqlSame|
|00000a50| 4c 65 6e 00 e3 03 6d 65 | 6d 63 6d 70 00 00 95 03 |Len...me|mcmp....|
|00000a60| 5f 4f 74 73 46 69 65 6c | 64 49 6e 73 65 72 74 00 |_OtsFiel|dInsert.|
|00000a70| 26 02 4f 62 4f 70 65 6e | 4f 62 6a 65 63 74 42 79 |&.ObOpen|ObjectBy|
|00000a80| 50 6f 69 6e 74 65 72 00 | 5a 03 5a 77 4d 61 70 56 |Pointer.|Z.ZwMapV|
|00000a90| 69 65 77 4f 66 53 65 63 | 74 69 6f 6e 00 00 85 03 |iewOfSec|tion....|
|00000aa0| 5a 77 55 6e 6d 61 70 56 | 69 65 77 4f 66 53 65 63 |ZwUnmapV|iewOfSec|
|00000ab0| 74 69 6f 6e 00 00 9c 03 | 5f 4f 74 73 4d 6f 76 65 |tion....|_OtsMove|
|00000ac0| 4d 69 6e 69 6d 75 6d 00 | 97 03 5f 4f 74 73 46 69 |Minimum.|.._OtsFi|
|00000ad0| 6c 6c 00 00 ff 01 4e 74 | 47 6c 6f 62 61 6c 46 6c |ll....Nt|GlobalFl|
|00000ae0| 61 67 00 00 48 03 5a 77 | 43 72 65 61 74 65 53 65 |ag..H.Zw|CreateSe|
|00000af0| 63 74 69 6f 6e 00 b9 03 | 5f 4f 74 73 73 74 72 6c |ction...|_Otsstrl|
|00000b00| 65 6e 00 00 05 04 77 63 | 73 6e 63 70 79 00 60 03 |en....wc|sncpy.`.|
|00000b10| 5a 77 4f 70 65 6e 50 72 | 6f 63 65 73 73 00 42 01 |ZwOpenPr|ocess.B.|
|00000b20| 4b 65 41 74 74 61 63 68 | 50 72 6f 63 65 73 73 00 |KeAttach|Process.|
|00000b30| 4c 01 4b 65 44 65 74 61 | 63 68 50 72 6f 63 65 73 |L.KeDeta|chProces|
|00000b40| 73 00 8b 01 4b 65 52 65 | 73 65 74 45 76 65 6e 74 |s...KeRe|setEvent|
|00000b50| 00 00 95 02 52 74 6c 45 | 71 75 61 6c 55 6e 69 63 |....RtlE|qualUnic|
|00000b60| 6f 64 65 53 74 72 69 6e | 67 00 7f 03 5a 77 53 65 |odeStrin|g...ZwSe|
|00000b70| 74 53 79 73 74 65 6d 49 | 6e 66 6f 72 6d 61 74 69 |tSystemI|nformati|
|00000b80| 6f 6e 00 00 df 02 52 74 | 6c 51 75 65 72 79 52 65 |on....Rt|lQueryRe|
|00000b90| 67 69 73 74 72 79 56 61 | 6c 75 65 73 00 00 03 03 |gistryVa|lues....|
|00000ba0| 52 74 6c 55 70 63 61 73 | 65 55 6e 69 63 6f 64 65 |RtlUpcas|eUnicode|
|00000bb0| 53 74 72 69 6e 67 00 00 | d1 03 5f 77 63 73 69 63 |String..|.._wcsic|
|00000bc0| 6d 70 00 00 2c 00 45 78 | 41 63 71 75 69 72 65 46 |mp..,.Ex|AcquireF|
|00000bd0| 61 73 74 4d 75 74 65 78 | 00 00 69 00 45 78 52 65 |astMutex|..i.ExRe|
|00000be0| 6c 65 61 73 65 46 61 73 | 74 4d 75 74 65 78 00 00 |leaseFas|tMutex..|
|00000bf0| 97 02 52 74 6c 45 78 74 | 65 6e 64 65 64 4c 61 72 |..RtlExt|endedLar|
|00000c00| 67 65 49 6e 74 65 67 65 | 72 44 69 76 69 64 65 00 |geIntege|rDivide.|
|00000c10| 8e 02 52 74 6c 45 6e 6c | 61 72 67 65 64 55 6e 73 |..RtlEnl|argedUns|
|00000c20| 69 67 6e 65 64 44 69 76 | 69 64 65 00 8f 02 52 74 |ignedDiv|ide...Rt|
|00000c30| 6c 45 6e 6c 61 72 67 65 | 64 55 6e 73 69 67 6e 65 |lEnlarge|dUnsigne|
|00000c40| 64 4d 75 6c 74 69 70 6c | 79 00 c0 02 52 74 6c 4c |dMultipl|y...RtlL|
|00000c50| 61 72 67 65 49 6e 74 65 | 67 65 72 41 64 64 00 00 |argeInte|gerAdd..|
|00000c60| fd 03 77 63 73 63 61 74 | 00 00 fd 02 52 74 6c 55 |..wcscat|....RtlU|
|00000c70| 6e 69 63 6f 64 65 54 6f | 4d 75 6c 74 69 42 79 74 |nicodeTo|MultiByt|
|00000c80| 65 53 69 7a 65 00 ff 03 | 77 63 73 63 6d 70 00 00 |eSize...|wcscmp..|
|00000c90| f2 03 73 74 72 6e 63 6d | 70 00 ed 03 73 74 72 63 |..strncm|p...strc|
|00000ca0| 68 72 00 00 f3 03 73 74 | 72 6e 63 70 79 00 9f 03 |hr....st|rncpy...|
|00000cb0| 5f 4f 74 73 52 65 6d 61 | 69 6e 64 65 72 36 34 00 |_OtsRema|inder64.|
|00000cc0| 41 01 4b 65 41 64 64 53 | 79 73 74 65 6d 53 65 72 |A.KeAddS|ystemSer|
|00000cd0| 76 69 63 65 54 61 62 6c | 65 00 3d 02 50 73 45 73 |viceTabl|e.=.PsEs|
|00000ce0| 74 61 62 6c 69 73 68 57 | 69 6e 33 32 43 61 6c 6c |tablishW|in32Call|
|00000cf0| 6f 75 74 73 00 00 d6 01 | 4d 6d 50 61 67 65 45 6e |outs....|MmPageEn|
|00000d00| 74 69 72 65 44 72 69 76 | 65 72 00 00 79 03 5a 77 |tireDriv|er..y.Zw|
|00000d10| 53 65 74 44 65 66 61 75 | 6c 74 4c 6f 63 61 6c 65 |SetDefau|ltLocale|
|00000d20| 00 00 73 00 45 78 57 69 | 6e 64 6f 77 53 74 61 74 |..s.ExWi|ndowStat|
|00000d30| 69 6f 6e 4f 62 6a 65 63 | 74 54 79 70 65 00 40 00 |ionObjec|tType.@.|
|00000d40| 45 78 44 65 73 6b 74 6f | 70 4f 62 6a 65 63 74 54 |ExDeskto|pObjectT|
|00000d50| 79 70 65 00 44 03 5a 77 | 43 72 65 61 74 65 44 69 |ype.D.Zw|CreateDi|
|00000d60| 72 65 63 74 6f 72 79 4f | 62 6a 65 63 74 00 35 00 |rectoryO|bject.5.|
|00000d70| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|00000d80| 74 68 51 75 6f 74 61 54 | 61 67 00 00 08 04 77 63 |thQuotaT|ag....wc|
|00000d90| 73 73 74 72 00 00 fe 03 | 77 63 73 63 68 72 00 00 |sstr....|wcschr..|
|00000da0| d5 01 4d 6d 4d 61 70 56 | 69 65 77 4f 66 53 65 63 |..MmMapV|iewOfSec|
|00000db0| 74 69 6f 6e 00 00 5b 00 | 45 78 49 73 52 65 73 6f |tion..[.|ExIsReso|
|00000dc0| 75 72 63 65 41 63 71 75 | 69 72 65 64 45 78 63 6c |urceAcqu|iredExcl|
|00000dd0| 75 73 69 76 65 4c 69 74 | 65 00 45 01 4b 65 42 75 |usiveLit|e.E.KeBu|
|00000de0| 67 43 68 65 63 6b 45 78 | 00 00 3b 01 4b 64 44 65 |gCheckEx|..;.KdDe|
|00000df0| 62 75 67 67 65 72 45 6e | 61 62 6c 65 64 00 1d 03 |buggerEn|abled...|
|00000e00| 53 65 43 61 70 74 75 72 | 65 53 65 63 75 72 69 74 |SeCaptur|eSecurit|
|00000e10| 79 44 65 73 63 72 69 70 | 74 6f 72 00 32 03 53 65 |yDescrip|tor.2.Se|
|00000e20| 52 65 6c 65 61 73 65 53 | 65 63 75 72 69 74 79 44 |ReleaseS|ecurityD|
|00000e30| 65 73 63 72 69 70 74 6f | 72 00 66 00 45 78 52 61 |escripto|r.f.ExRa|
|00000e40| 69 73 65 53 74 61 74 75 | 73 00 28 00 44 62 67 42 |iseStatu|s.(.DbgB|
|00000e50| 72 65 61 6b 50 6f 69 6e | 74 57 69 74 68 53 74 61 |reakPoin|tWithSta|
|00000e60| 74 75 73 00 61 02 52 74 | 6c 41 72 65 41 6e 79 41 |tus.a.Rt|lAreAnyA|
|00000e70| 63 63 65 73 73 65 73 47 | 72 61 6e 74 65 64 00 00 |ccessesG|ranted..|
|00000e80| 63 03 5a 77 4f 70 65 6e | 53 79 6d 62 6f 6c 69 63 |c.ZwOpen|Symbolic|
|00000e90| 4c 69 6e 6b 4f 62 6a 65 | 63 74 00 00 00 01 49 6f |LinkObje|ct....Io|
|00000ea0| 47 65 74 43 6f 6e 66 69 | 67 75 72 61 74 69 6f 6e |GetConfi|guration|
|00000eb0| 49 6e 66 6f 72 6d 61 74 | 69 6f 6e 00 ed 00 49 6f |Informat|ion...Io|
|00000ec0| 43 72 65 61 74 65 53 79 | 6e 63 68 72 6f 6e 69 7a |CreateSy|nchroniz|
|00000ed0| 61 74 69 6f 6e 45 76 65 | 6e 74 00 00 04 04 77 63 |ationEve|nt....wc|
|00000ee0| 73 6e 63 6d 70 00 47 03 | 5a 77 43 72 65 61 74 65 |sncmp.G.|ZwCreate|
|00000ef0| 4b 65 79 00 81 03 5a 77 | 53 65 74 56 61 6c 75 65 |Key...Zw|SetValue|
|00000f00| 4b 65 79 00 0f 03 52 74 | 6c 57 72 69 74 65 52 65 |Key...Rt|lWriteRe|
|00000f10| 67 69 73 74 72 79 56 61 | 6c 75 65 00 7e 02 52 74 |gistryVa|lue.~.Rt|
|00000f20| 6c 43 72 65 61 74 65 55 | 6e 69 63 6f 64 65 53 74 |lCreateU|nicodeSt|
|00000f30| 72 69 6e 67 00 00 02 01 | 49 6f 47 65 74 44 65 76 |ring....|IoGetDev|
|00000f40| 69 63 65 4f 62 6a 65 63 | 74 50 6f 69 6e 74 65 72 |iceObjec|tPointer|
|00000f50| 00 00 be 02 52 74 6c 49 | 6e 74 65 67 65 72 54 6f |....RtlI|ntegerTo|
|00000f60| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 65 00 |UnicodeS|tring.e.|
|00000f70| 45 78 52 61 69 73 65 48 | 61 72 64 45 72 72 6f 72 |ExRaiseH|ardError|
|00000f80| 00 00 43 01 4b 65 42 6f | 6f 73 74 43 75 72 72 65 |..C.KeBo|ostCurre|
|00000f90| 6e 74 54 68 72 65 61 64 | 00 00 30 00 45 78 41 63 |ntThread|..0.ExAc|
|00000fa0| 71 75 69 72 65 52 65 73 | 6f 75 72 63 65 53 68 61 |quireRes|ourceSha|
|00000fb0| 72 65 64 4c 69 74 65 00 | 43 00 45 78 45 76 65 6e |redLite.|C.ExEven|
|00000fc0| 74 4f 62 6a 65 63 74 54 | 79 70 65 00 7e 03 5a 77 |tObjectT|ype.~.Zw|
|00000fd0| 53 65 74 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 54 68 |SetInfor|mationTh|
|00000fe0| 72 65 61 64 00 00 2b 02 | 4f 62 52 65 66 65 72 65 |read..+.|ObRefere|
|00000ff0| 6e 63 65 4f 62 6a 65 63 | 74 42 79 50 6f 69 6e 74 |nceObjec|tByPoint|
|00001000| 65 72 00 00 51 02 50 73 | 54 65 72 6d 69 6e 61 74 |er..Q.Ps|Terminat|
|00001010| 65 53 79 73 74 65 6d 54 | 68 72 65 61 64 00 1c 02 |eSystemT|hread...|
|00001020| 4f 62 43 68 65 63 6b 43 | 72 65 61 74 65 4f 62 6a |ObCheckC|reateObj|
|00001030| 65 63 74 41 63 63 65 73 | 73 00 1e 02 4f 62 43 72 |ectAcces|s...ObCr|
|00001040| 65 61 74 65 4f 62 6a 65 | 63 74 00 00 1b 02 4f 62 |eateObje|ct....Ob|
|00001050| 41 73 73 69 67 6e 53 65 | 63 75 72 69 74 79 00 00 |AssignSe|curity..|
|00001060| 58 02 52 74 6c 41 6c 6c | 6f 63 61 74 65 48 65 61 |X.RtlAll|ocateHea|
|00001070| 70 00 cd 02 52 74 6c 4d | 61 70 47 65 6e 65 72 69 |p...RtlM|apGeneri|
|00001080| 63 4d 61 73 6b 00 25 02 | 4f 62 4f 70 65 6e 4f 62 |cMask.%.|ObOpenOb|
|00001090| 6a 65 63 74 42 79 4e 61 | 6d 65 00 00 e5 01 4d 6d |jectByNa|me....Mm|
|000010a0| 55 6e 6d 61 70 56 69 65 | 77 4f 66 53 65 63 74 69 |UnmapVie|wOfSecti|
|000010b0| 6f 6e 00 00 a7 02 52 74 | 6c 46 72 65 65 48 65 61 |on....Rt|lFreeHea|
|000010c0| 70 00 4f 03 5a 77 44 75 | 70 6c 69 63 61 74 65 4f |p.O.ZwDu|plicateO|
|000010d0| 62 6a 65 63 74 00 5c 00 | 45 78 49 73 52 65 73 6f |bject.\.|ExIsReso|
|000010e0| 75 72 63 65 41 63 71 75 | 69 72 65 64 53 68 61 72 |urceAcqu|iredShar|
|000010f0| 65 64 4c 69 74 65 00 00 | 20 02 4f 62 46 69 6e 64 |edLite..| .ObFind|
|00001100| 48 61 6e 64 6c 65 46 6f | 72 4f 62 6a 65 63 74 00 |HandleFo|rObject.|
|00001110| 47 02 50 73 4c 6f 6f 6b | 75 70 54 68 72 65 61 64 |G.PsLook|upThread|
|00001120| 42 79 54 68 72 65 61 64 | 49 64 00 00 b7 02 52 74 |ByThread|Id....Rt|
|00001130| 6c 49 6e 69 74 69 61 6c | 69 7a 65 42 69 74 4d 61 |lInitial|izeBitMa|
|00001140| 70 00 e8 02 52 74 6c 53 | 65 74 42 69 74 73 00 00 |p...RtlS|etBits..|
|00001150| 6a 02 52 74 6c 43 6c 65 | 61 72 42 69 74 73 00 00 |j.RtlCle|arBits..|
|00001160| 5e 02 52 74 6c 41 70 70 | 65 6e 64 55 6e 69 63 6f |^.RtlApp|endUnico|
|00001170| 64 65 53 74 72 69 6e 67 | 54 6f 53 74 72 69 6e 67 |deString|ToString|
|00001180| 00 00 78 02 52 74 6c 43 | 6f 70 79 55 6e 69 63 6f |..x.RtlC|opyUnico|
|00001190| 64 65 53 74 72 69 6e 67 | 00 00 a4 01 4b 65 55 73 |deString|....KeUs|
|000011a0| 65 72 4d 6f 64 65 43 61 | 6c 6c 62 61 63 6b 00 00 |erModeCa|llback..|
|000011b0| 60 02 52 74 6c 41 72 65 | 41 6c 6c 41 63 63 65 73 |`.RtlAre|AllAcces|
|000011c0| 73 65 73 47 72 61 6e 74 | 65 64 00 00 4d 03 5a 77 |sesGrant|ed..M.Zw|
|000011d0| 44 65 76 69 63 65 49 6f | 43 6f 6e 74 72 6f 6c 46 |DeviceIo|ControlF|
|000011e0| 69 6c 65 00 64 01 4b 65 | 49 6e 69 74 69 61 6c 69 |ile.d.Ke|Initiali|
|000011f0| 7a 65 54 69 6d 65 72 00 | 45 03 5a 77 43 72 65 61 |zeTimer.|E.ZwCrea|
|00001200| 74 65 45 76 65 6e 74 00 | 9d 01 4b 65 53 65 74 54 |teEvent.|..KeSetT|
|00001210| 69 6d 65 72 00 00 71 02 | 52 74 6c 43 6f 6e 76 65 |imer..q.|RtlConve|
|00001220| 72 74 4c 6f 6e 67 54 6f | 4c 61 72 67 65 49 6e 74 |rtLongTo|LargeInt|
|00001230| 65 67 65 72 00 00 a5 02 | 52 74 6c 46 6f 72 6d 61 |eger....|RtlForma|
|00001240| 74 43 75 72 72 65 6e 74 | 55 73 65 72 4b 65 79 50 |tCurrent|UserKeyP|
|00001250| 61 74 68 00 a9 02 52 74 | 6c 46 72 65 65 55 6e 69 |ath...Rt|lFreeUni|
|00001260| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 a1 02 52 74 |codeStri|ng....Rt|
|00001270| 6c 46 69 6e 64 4d 65 73 | 73 61 67 65 00 00 65 03 |lFindMes|sage..e.|
|00001280| 5a 77 4f 70 65 6e 54 68 | 72 65 61 64 54 6f 6b 65 |ZwOpenTh|readToke|
|00001290| 6e 00 61 03 5a 77 4f 70 | 65 6e 50 72 6f 63 65 73 |n.a.ZwOp|enProces|
|000012a0| 73 54 6f 6b 65 6e 00 00 | 49 02 50 73 52 65 66 65 |sToken..|I.PsRefe|
|000012b0| 72 65 6e 63 65 49 6d 70 | 65 72 73 6f 6e 61 74 69 |renceImp|ersonati|
|000012c0| 6f 6e 54 6f 6b 65 6e 00 | 4a 02 50 73 52 65 66 65 |onToken.|J.PsRefe|
|000012d0| 72 65 6e 63 65 50 72 69 | 6d 61 72 79 54 6f 6b 65 |rencePri|maryToke|
|000012e0| 6e 00 2f 03 53 65 51 75 | 65 72 79 41 75 74 68 65 |n./.SeQu|eryAuthe|
|000012f0| 6e 74 69 63 61 74 69 6f | 6e 49 64 54 6f 6b 65 6e |nticatio|nIdToken|
|00001300| 00 00 3b 02 50 73 43 72 | 65 61 74 65 53 79 73 74 |..;.PsCr|eateSyst|
|00001310| 65 6d 54 68 72 65 61 64 | 00 00 3c 02 50 73 43 72 |emThread|..<.PsCr|
|00001320| 65 61 74 65 57 69 6e 33 | 32 50 72 6f 63 65 73 73 |eateWin3|2Process|
|00001330| 00 00 6d 03 5a 77 51 75 | 65 72 79 4f 62 6a 65 63 |..m.ZwQu|eryObjec|
|00001340| 74 00 7c 03 5a 77 53 65 | 74 49 6e 66 6f 72 6d 61 |t.|.ZwSe|tInforma|
|00001350| 74 69 6f 6e 4f 62 6a 65 | 63 74 00 00 45 02 50 73 |tionObje|ct..E.Ps|
|00001360| 4c 6f 6f 6b 75 70 50 72 | 6f 63 65 73 73 42 79 50 |LookupPr|ocessByP|
|00001370| 72 6f 63 65 73 73 49 64 | 00 00 f6 02 52 74 6c 55 |rocessId|....RtlU|
|00001380| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 41 6e |nicodeSt|ringToAn|
|00001390| 73 69 53 74 72 69 6e 67 | 00 00 bd 02 52 74 6c 49 |siString|....RtlI|
|000013a0| 6e 74 65 67 65 72 54 6f | 43 68 61 72 00 00 25 03 |ntegerTo|Char..%.|
|000013b0| 53 65 45 78 70 6f 72 74 | 73 00 c9 02 52 74 6c 4c |SeExport|s...RtlL|
|000013c0| 65 6e 67 74 68 53 69 64 | 00 00 76 02 52 74 6c 43 |engthSid|..v.RtlC|
|000013d0| 6f 70 79 53 69 64 00 00 | 7d 02 52 74 6c 43 72 65 |opySid..|}.RtlCre|
|000013e0| 61 74 65 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |ateSecur|ityDescr|
|000013f0| 69 70 74 6f 72 00 79 02 | 52 74 6c 43 72 65 61 74 |iptor.y.|RtlCreat|
|00001400| 65 41 63 6c 00 00 55 02 | 52 74 6c 41 64 64 41 63 |eAcl..U.|RtlAddAc|
|00001410| 65 00 e9 02 52 74 6c 53 | 65 74 44 61 63 6c 53 65 |e...RtlS|etDaclSe|
|00001420| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00001430| 00 00 ec 02 52 74 6c 53 | 65 74 53 61 63 6c 53 65 |....RtlS|etSaclSe|
|00001440| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00001450| 00 00 eb 02 52 74 6c 53 | 65 74 4f 77 6e 65 72 53 |....RtlS|etOwnerS|
|00001460| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00001470| 72 00 ea 02 52 74 6c 53 | 65 74 47 72 6f 75 70 53 |r...RtlS|etGroupS|
|00001480| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00001490| 72 00 6b 03 5a 77 51 75 | 65 72 79 49 6e 66 6f 72 |r.k.ZwQu|eryInfor|
|000014a0| 6d 61 74 69 6f 6e 54 6f | 6b 65 6e 00 20 03 53 65 |mationTo|ken. .Se|
|000014b0| 43 72 65 61 74 65 41 63 | 63 65 73 73 53 74 61 74 |CreateAc|cessStat|
|000014c0| 65 00 1d 02 4f 62 43 68 | 65 63 6b 4f 62 6a 65 63 |e...ObCh|eckObjec|
|000014d0| 74 41 63 63 65 73 73 00 | 23 03 53 65 44 65 6c 65 |tAccess.|#.SeDele|
|000014e0| 74 65 41 63 63 65 73 73 | 53 74 61 74 65 00 1e 03 |teAccess|State...|
|000014f0| 53 65 43 61 70 74 75 72 | 65 53 75 62 6a 65 63 74 |SeCaptur|eSubject|
|00001500| 43 6f 6e 74 65 78 74 00 | 28 03 53 65 4c 6f 63 6b |Context.|(.SeLock|
|00001510| 53 75 62 6a 65 63 74 43 | 6f 6e 74 65 78 74 00 00 |SubjectC|ontext..|
|00001520| 2c 03 53 65 50 72 69 76 | 69 6c 65 67 65 43 68 65 |,.SePriv|ilegeChe|
|00001530| 63 6b 00 00 3a 03 53 65 | 55 6e 6c 6f 63 6b 53 75 |ck..:.Se|UnlockSu|
|00001540| 62 6a 65 63 74 43 6f 6e | 74 65 78 74 00 00 2d 03 |bjectCon|text..-.|
|00001550| 53 65 50 72 69 76 69 6c | 65 67 65 4f 62 6a 65 63 |SePrivil|egeObjec|
|00001560| 74 41 75 64 69 74 41 6c | 61 72 6d 00 33 03 53 65 |tAuditAl|arm.3.Se|
|00001570| 52 65 6c 65 61 73 65 53 | 75 62 6a 65 63 74 43 6f |ReleaseS|ubjectCo|
|00001580| 6e 74 65 78 74 00 b2 02 | 52 74 6c 49 6d 61 67 65 |ntext...|RtlImage|
|00001590| 4e 74 48 65 61 64 65 72 | 00 00 4d 00 45 78 49 6e |NtHeader|..M.ExIn|
|000015a0| 69 74 69 61 6c 69 7a 65 | 5a 6f 6e 65 00 00 7a 02 |itialize|Zone..z.|
|000015b0| 52 74 6c 43 72 65 61 74 | 65 41 74 6f 6d 54 61 62 |RtlCreat|eAtomTab|
|000015c0| 6c 65 00 00 56 02 52 74 | 6c 41 64 64 41 74 6f 6d |le..V.Rt|lAddAtom|
|000015d0| 54 6f 41 74 6f 6d 54 61 | 62 6c 65 00 db 02 52 74 |ToAtomTa|ble...Rt|
|000015e0| 6c 50 69 6e 41 74 6f 6d | 49 6e 41 74 6f 6d 54 61 |lPinAtom|InAtomTa|
|000015f0| 62 6c 65 00 ca 02 52 74 | 6c 4c 6f 6f 6b 75 70 41 |ble...Rt|lLookupA|
|00001600| 74 6f 6d 49 6e 41 74 6f | 6d 54 61 62 6c 65 00 00 |tomInAto|mTable..|
|00001610| 84 02 52 74 6c 44 65 6c | 65 74 65 41 74 6f 6d 46 |..RtlDel|eteAtomF|
|00001620| 72 6f 6d 41 74 6f 6d 54 | 61 62 6c 65 00 00 de 02 |romAtomT|able....|
|00001630| 52 74 6c 51 75 65 72 79 | 41 74 6f 6d 49 6e 41 74 |RtlQuery|AtomInAt|
|00001640| 6f 6d 54 61 62 6c 65 00 | 5c 03 5a 77 4f 70 65 6e |omTable.|\.ZwOpen|
|00001650| 44 69 72 65 63 74 6f 72 | 79 4f 62 6a 65 63 74 00 |Director|yObject.|
|00001660| 23 02 4f 62 49 6e 73 65 | 72 74 4f 62 6a 65 63 74 |#.ObInse|rtObject|
|00001670| 00 00 1a 03 53 65 41 73 | 73 69 67 6e 53 65 63 75 |....SeAs|signSecu|
|00001680| 72 69 74 79 00 00 22 03 | 53 65 44 65 61 73 73 69 |rity..".|SeDeassi|
|00001690| 67 6e 53 65 63 75 72 69 | 74 79 00 00 2d 02 4f 62 |gnSecuri|ty..-.Ob|
|000016a0| 53 65 74 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |SetSecur|ityDescr|
|000016b0| 69 70 74 6f 72 49 6e 66 | 6f 00 89 02 52 74 6c 44 |iptorInf|o...RtlD|
|000016c0| 65 73 74 72 6f 79 41 74 | 6f 6d 54 61 62 6c 65 00 |estroyAt|omTable.|
|000016d0| 47 01 4b 65 43 6c 65 61 | 72 45 76 65 6e 74 00 00 |G.KeClea|rEvent..|
|000016e0| 82 03 5a 77 54 65 72 6d | 69 6e 61 74 65 50 72 6f |..ZwTerm|inatePro|
|000016f0| 63 65 73 73 00 00 b3 02 | 52 74 6c 49 6e 69 74 41 |cess....|RtlInitA|
|00001700| 6e 73 69 53 74 72 69 6e | 67 00 5b 02 52 74 6c 41 |nsiStrin|g.[.RtlA|
|00001710| 6e 73 69 53 74 72 69 6e | 67 54 6f 55 6e 69 63 6f |nsiStrin|gToUnico|
|00001720| 64 65 53 74 72 69 6e 67 | 00 00 89 03 5a 77 59 69 |deString|....ZwYi|
|00001730| 65 6c 64 45 78 65 63 75 | 74 69 6f 6e 00 00 67 03 |eldExecu|tion..g.|
|00001740| 5a 77 51 75 65 72 79 44 | 65 66 61 75 6c 74 4c 6f |ZwQueryD|efaultLo|
|00001750| 63 61 6c 65 00 00 ba 01 | 4d 6d 41 64 6a 75 73 74 |cale....|MmAdjust|
|00001760| 57 6f 72 6b 69 6e 67 53 | 65 74 53 69 7a 65 00 00 |WorkingS|etSize..|
|00001770| 50 02 50 73 53 65 74 50 | 72 6f 63 65 73 73 50 72 |P.PsSetP|rocessPr|
|00001780| 69 6f 72 69 74 79 42 79 | 43 6c 61 73 73 00 7b 02 |iorityBy|Class.{.|
|00001790| 52 74 6c 43 72 65 61 74 | 65 48 65 61 70 00 10 03 |RtlCreat|eHeap...|
|000017a0| 52 74 6c 5a 65 72 6f 48 | 65 61 70 00 8c 02 52 74 |RtlZeroH|eap...Rt|
|000017b0| 6c 45 6d 70 74 79 41 74 | 6f 6d 54 61 62 6c 65 00 |lEmptyAt|omTable.|
|000017c0| b3 01 4c 70 63 52 65 71 | 75 65 73 74 50 6f 72 74 |..LpcReq|uestPort|
|000017d0| 00 00 d2 02 52 74 6c 4e | 74 53 74 61 74 75 73 54 |....RtlN|tStatusT|
|000017e0| 6f 44 6f 73 45 72 72 6f | 72 00 e7 01 4e 6c 73 41 |oDosErro|r...NlsA|
|000017f0| 6e 73 69 43 6f 64 65 50 | 61 67 65 00 6e 74 6f 73 |nsiCodeP|age.ntos|
|00001800| 6b 72 6e 6c 2e 65 78 65 | 00 00 45 00 4b 65 51 75 |krnl.exe|..E.KeQu|
|00001810| 65 72 79 50 65 72 66 6f | 72 6d 61 6e 63 65 43 6f |eryPerfo|rmanceCo|
|00001820| 75 6e 74 65 72 00 48 41 | 4c 2e 64 6c 6c 00 00 00 |unter.HA|L.dll...|
|00001830| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+