home *** CD-ROM | disk | FTP | other *** search
/ Cracking 2 / Cracking II..iso / Tools / icedump 6.018 and nticedump 1.9 / wnt / 405 / icedump
Unknown  |  2000-07-26  |  4.6 KB

open in: MacOS 8.1     |     Win98     |     DOS

view JSON data     |     view as text

This file was not able to be converted.
This format is not currently supported by dexvert.

ConfidenceProgramDetectionMatch TypeSupport
100% file data default
100% gt2 Kopftext: 'IDMP0' default (weak)



hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 49 44 4d 50 30 00 00 01 | 09 00 00 00 05 04 00 00 |IDMP0...|........|
|00000010| f4 01 02 00 49 63 65 44 | 75 6d 70 20 30 2e 30 39 |....IceD|ump 0.09|
|00000020| 20 66 6f 72 20 4e 54 49 | 43 45 20 34 2e 30 35 00 | for NTI|CE 4.05.|
|00000030| ff 74 24 08 ff 74 24 08 | e8 63 19 11 00 85 c0 0f |.t$..t$.|.c......|
|00000040| 8c a7 00 00 00 60 e8 00 | 00 00 00 5d 81 ed 0f 02 |.....`..|...]....|
|00000050| 02 00 b9 07 00 00 00 8d | bd 9c 0f 02 00 01 2f 83 |........|....../.|
|00000060| c7 04 e2 f9 8d bd 64 0f | 02 00 8d b5 81 0e 02 00 |......d.|........|
|00000070| b9 0e 00 00 00 e8 31 da | 00 00 72 6f ab 46 e2 f5 |......1.|..ro.F..|
|00000080| 0f 20 c3 53 0f ba f3 10 | 0f 22 c3 c6 85 3b 10 05 |. .S....|."...;..|
|00000090| 00 c3 c6 85 a3 7e 03 00 | be c7 85 a9 7e 03 00 06 |.....~..|....~...|
|000000a0| 84 fe ff c7 85 28 cf 01 | 00 ff ff ff ff 8d 85 f4 |.....(..|........|
|000000b0| 01 02 00 89 85 c3 c8 09 | 00 8d 85 3e 14 02 00 89 |........|...>....|
|000000c0| 85 c7 c8 09 00 8d 85 ce | 10 05 00 8d 9d c4 0d 02 |........|........|
|000000d0| 00 29 c3 89 18 5b 0f 22 | c3 b2 60 8d bd b3 08 02 |.)...[."|..`.....|
|000000e0| 00 b8 ff 00 00 00 e8 9c | b1 00 00 61 c2 08 00 60 |........|...a...`|
|000000f0| e8 00 00 00 00 5d 81 ed | b9 02 02 00 e8 63 0d 03 |.....]..|.....c..|
|00000100| 00 e8 2a 3a 01 00 72 2e | ac 24 5f 3c 44 0f 84 69 |..*:..r.|.$_<D..i|
|00000110| 02 00 00 3c 53 74 69 3c | 52 74 70 3c 42 74 77 3c |...<Sti<|Rtp<Btw<|
|00000120| 4c 0f 84 f3 03 00 00 eb | 0d 53 e8 85 09 03 00 e8 |L.......|.S......|
|00000130| c7 0d 03 00 61 c3 8d 9d | 70 13 02 00 53 e8 72 09 |....a...|p...S.r.|
|00000140| 03 00 8d 9d a4 13 02 00 | 53 e8 66 09 03 00 8d 9d |........|S.f.....|
|00000150| b4 13 02 00 53 e8 5a 09 | 03 00 8d 9d c4 13 02 00 |....S.Z.|........|
|00000160| 53 e8 4e 09 03 00 8d 9d | e2 13 02 00 53 e8 42 09 |S.N.....|....S.B.|
|00000170| 03 00 8d 9d 09 14 02 00 | 53 e8 36 09 03 00 eb af |........|S.6.....|
|00000180| 8d 9d 44 12 02 00 e9 9e | ff ff ff 8d 9d 44 12 02 |..D.....|.....D..|
|00000190| 00 e9 93 ff ff ff 8d 9d | 67 12 02 00 f6 85 23 ee |........|g.....#.|
|000001a0| 09 00 02 0f 85 80 ff ff | ff 8d 9d 96 12 02 00 0f |........|........|
|000001b0| 02 85 25 ee 09 00 0f ba | e0 16 0f 83 69 ff ff ff |..%.....|....i...|
|000001c0| 8d 9d c0 12 02 00 f6 85 | 25 ee 09 00 03 0f 84 56 |........|%......V|
|000001d0| ff ff ff 8d 9d 32 13 02 | 00 e8 c7 d0 00 00 0f 84 |.....2..|........|
|000001e0| 45 ff ff ff e8 33 0a 00 | 00 8d 9d ec 12 02 00 0f |E....3..|........|
|000001f0| 82 34 ff ff ff 0f 20 c3 | 53 0f ba f3 10 0f 22 c3 |.4.... .|S.....".|
|00000200| 8b 85 1d ee 09 00 89 85 | 28 05 02 00 89 f7 b9 ff |........|(.......|
|00000210| ff ff ff 31 c0 f2 ae 29 | f7 89 f9 8d bd d4 04 02 |...1...)|........|
|00000220| 00 f3 a4 aa 8d b5 ac 04 | 02 00 b9 94 00 00 00 e8 |........|........|
|00000230| 3b 07 00 00 09 c0 75 0f | 5b 0f 22 c3 8d 9d 54 13 |;.....u.|[."...T.|
|00000240| 02 00 e9 e2 fe ff ff 89 | 85 15 ee 09 00 89 85 1d |........|........|
|00000250| ee 09 00 89 85 19 ee 09 | 00 83 ad 19 ee 09 00 04 |........|........|
|00000260| 89 85 fb 4a 0e 00 83 85 | fb 4a 0e 00 25 8b 9d 34 |...J....|.J..%..4|
|00000270| 0e 02 00 89 98 01 00 00 | 00 29 80 01 00 00 00 83 |........|.)......|
|00000280| a8 01 00 00 00 05 8b 9d | 3c 0e 02 00 89 98 0f 00 |........|<.......|
|00000290| 00 00 29 80 0f 00 00 00 | 83 a8 0f 00 00 00 13 8b |..).....|........|
|000002a0| 9d 44 0e 02 00 89 98 21 | 00 00 00 29 80 21 00 00 |.D.....!|...).!..|
|000002b0| 00 83 a8 21 00 00 00 25 | 89 80 70 00 00 00 83 80 |...!...%|..p.....|
|000002c0| 70 00 00 00 74 8d 80 28 | 00 00 00 89 85 0d ee 09 |p...t..(|........|
|000002d0| 00 5b 0f 22 c3 31 c0 40 | 89 85 af 4a 0e 00 88 a5 |.[.".1.@|...J....|
|000002e0| 1a ba 09 00 61 c3 90 90 | e8 00 00 00 00 89 85 78 |....a...|.......x|
|000002f0| 00 00 00 56 6a 00 e8 00 | 00 00 00 85 c0 74 0e 83 |...Vj...|.....t..|
|00000300| c5 68 55 6a 00 6a 4a 50 | e8 00 00 00 00 cc 90 90 |.hUj.jJP|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 01 00 00 00 20 00 00 00 | 20 05 02 00 03 00 00 00 |.... ...| .......|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 01 01 00 01 |........|........|
|00000370| 01 00 01 01 00 00 03 00 | 00 00 00 00 e8 24 cf 00 |........|.....$..|
|00000380| 00 74 3f 8d 9d ee 10 02 | 00 e8 1d d7 00 00 0f 82 |.t?.....|........|
|00000390| 95 fd ff ff 89 85 11 ee | 09 00 c7 85 fd ed 09 00 |........|........|
|000003a0| 01 00 00 00 e8 fc ce 00 | 00 74 31 e8 fb d6 00 00 |........|.t1.....|
|000003b0| 0f 82 73 fd ff ff e8 ea | ce 00 00 75 28 e9 6d fd |..s.....|...u(.m.|
|000003c0| ff ff 80 b5 dd 06 02 00 | 01 8d 9d 0d 12 02 00 75 |........|.......u|
|000003d0| 06 8d 9d 28 12 02 00 e9 | 4d fd ff ff 31 c0 31 f6 |...(....|M...1.1.|
|000003e0| e9 15 00 00 00 80 bd dd | 06 02 00 01 74 0c 81 ee |........|....t...|
|000003f0| 04 00 00 00 c7 06 5c 3f | 3f 5c 89 b5 0d ee 09 00 |......\?|?\......|
|00000400| 89 85 05 ee 09 00 e8 a7 | 02 00 00 f6 85 25 ee 09 |........|.....%..|
|00000410| 00 03 0f 84 d8 00 00 00 | b9 03 00 00 00 51 8d 85 |........|.....Q..|
|00000420| b0 08 02 00 50 f6 85 23 | ee 09 00 02 74 66 0f 20 |....P..#|....tf. |
|00000430| e0 a9 01 00 00 00 74 2b | 0f 00 c8 e8 8b fe 01 00 |......t+|........|
|00000440| 73 11 8d 9d 6c 10 02 00 | 53 e8 66 06 03 00 e9 dc |s...l...|S.f.....|
|00000450| fc ff ff 0f b7 78 66 8d | 7c 07 e0 b8 ff 00 00 00 |.....xf.||.......|
|00000460| 0f ab 07 8b 85 21 ee 09 | 00 89 85 01 ee 09 00 80 |.....!..|........|
|00000470| 8d 22 ee 09 00 30 0f b7 | 85 2d ee 09 00 89 85 25 |."...0..|.-.....%|
|00000480| ee 09 00 c1 e0 04 0f b7 | bd 19 ee 09 00 29 cf 01 |........|.....)..|
|00000490| f8 50 eb 39 0f b7 85 2d | ee 09 00 e8 2b fe 01 00 |.P.9...-|....+...|
|000004a0| 73 0e 83 c4 08 8d 9d 89 | 10 02 00 e9 79 fc ff ff |s.......|....y...|
|000004b0| 89 c7 03 bd 19 ee 09 00 | 29 cf 57 66 c7 85 25 ee |........|).Wf..%.|
|000004c0| 09 00 1b 00 66 c7 85 2d | ee 09 00 23 00 e8 40 07 |....f..-|...#..@.|
|000004d0| 03 00 8d 9d 23 10 02 00 | 85 c0 0f 84 49 fc ff ff |....#...|....I...|
|000004e0| 89 fb 8d 87 02 00 00 00 | 89 bd 19 ee 09 00 eb 0c |........|........|
|000004f0| 8d 85 b2 08 02 00 8d 9d | b0 08 02 00 89 85 fb 4a |........|.......J|
|00000500| 0e 00 89 9d 1d ee 09 00 | 31 c0 40 89 85 af 4a 0e |........|1.@...J.|
|00000510| 00 88 a5 1a ba 09 00 61 | c3 01 e8 86 cd 00 00 74 |.......a|.......t|
|00000520| 43 8d 9d ee 10 02 00 e8 | 7f d5 00 00 0f 82 f7 fb |C.......|........|
|00000530| ff ff 89 85 11 ee 09 00 | c7 85 fd ed 09 00 06 00 |........|........|
|00000540| 00 00 e8 5e cd 00 00 0f | 84 dc fb ff ff e8 59 d5 |...^....|......Y.|
|00000550| 00 00 0f 82 d1 fb ff ff | e8 48 cd 00 00 75 1f e9 |........|.H...u..|
|00000560| cb fb ff ff 80 b5 dd 06 | 02 00 01 8d 9d 0d 12 02 |........|........|
|00000570| 00 75 06 8d 9d 28 12 02 | 00 e9 ab fb ff ff 80 bd |.u...(..|........|
|00000580| dd 06 02 00 01 74 0c 81 | ee 04 00 00 00 c7 06 5c |.....t..|.......\|
|00000590| 3f 3f 5c 89 b5 0d ee 09 | 00 89 85 05 ee 09 00 e8 |??\.....|........|
|000005a0| 0e 01 00 00 f6 85 25 ee | 09 00 03 0f 84 d8 00 00 |......%.|........|
|000005b0| 00 b9 03 00 00 00 51 8d | 85 b0 08 02 00 50 f6 85 |......Q.|.....P..|
|000005c0| 23 ee 09 00 02 74 66 0f | 20 e0 a9 01 00 00 00 74 |#....tf.| ......t|
|000005d0| 2b 0f 00 c8 e8 f2 fc 01 | 00 73 11 8d 9d 6c 10 02 |+.......|.s...l..|
|000005e0| 00 53 e8 cd 04 03 00 e9 | 43 fb ff ff 0f b7 78 66 |.S......|C.....xf|
|000005f0| 8d 7c 07 e0 b8 ff 00 00 | 00 0f ab 07 8b 85 21 ee |.|......|......!.|
|00000600| 09 00 89 85 01 ee 09 00 | 80 8d 22 ee 09 00 30 0f |........|.."...0.|
|00000610| b7 85 2d ee 09 00 89 85 | 25 ee 09 00 c1 e0 04 0f |..-.....|%.......|
|00000620| b7 bd 19 ee 09 00 29 cf | 01 f8 50 eb 39 0f b7 85 |......).|..P.9...|
|00000630| 2d ee 09 00 e8 92 fc 01 | 00 73 0e 83 c4 08 8d 9d |-.......|.s......|
|00000640| 89 10 02 00 e9 e0 fa ff | ff 89 c7 03 bd 19 ee 09 |........|........|
|00000650| 00 29 cf 57 66 c7 85 25 | ee 09 00 1b 00 66 c7 85 |.).Wf..%|.....f..|
|00000660| 2d ee 09 00 23 00 e8 a7 | 05 03 00 8d 9d 23 10 02 |-...#...|.....#..|
|00000670| 00 85 c0 0f 84 b0 fa ff | ff 89 fb 8d 87 02 00 00 |........|........|
|00000680| 00 89 bd 19 ee 09 00 eb | 0c 8d 85 b2 08 02 00 8d |........|........|
|00000690| 9d b0 08 02 00 89 85 fb | 4a 0e 00 89 9d 1d ee 09 |........|J.......|
|000006a0| 00 31 c0 40 89 85 af 4a | 0e 00 88 a5 1a ba 09 00 |.1.@...J|........|
|000006b0| 61 c3 e8 fb 7e 03 00 8d | 9d ea 0f 02 00 83 f8 02 |a...~...|........|
|000006c0| 73 24 8d 9d b8 0f 02 00 | f6 85 22 ee 09 00 02 74 |s$......|.."....t|
|000006d0| 15 8d 9d a1 10 02 00 8b | 85 d3 de 0d 00 3b 85 d7 |........|.....;..|
|000006e0| de 0d 00 75 01 c3 58 e9 | 3d fa ff ff cd ff cc 55 |...u..X.|=......U|
|000006f0| 53 56 57 0f a0 6a 30 0f | a1 31 db 64 ff 33 64 8b |SVW..j0.|.1.d.3d.|
|00000700| 35 24 01 00 00 6a ff 50 | 51 52 1e 06 0f a8 6a 23 |5$...j.P|QR....j#|
|00000710| 6a 23 1f 07 83 ec 30 f6 | 44 24 72 02 74 2d 0f b7 |j#....0.|D$r.t-..|
|00000720| 9c 24 80 00 00 00 89 5c | 24 38 0f b7 5c 24 7c 89 |.$.....\|$8..\$|.|
|00000730| 5c 24 34 0f b7 9c 24 84 | 00 00 00 89 5c 24 50 0f |\$4...$.|....\$P.|
|00000740| b7 9c 24 88 00 00 00 89 | 5c 24 30 89 e5 fc 89 ae |..$.....|\$0.....|
|00000750| 28 01 00 00 e8 00 00 00 | 00 5e 81 ee 1d 09 02 00 |(.......|.^......|
|00000760| f6 45 72 02 74 06 8b 45 | 5c 89 45 70 8b 45 44 89 |.Er.t..E|\.Ep.ED.|
|00000770| 75 44 81 c6 9c 0f 02 00 | fb ff 14 86 fa 8b 55 4c |uD......|......UL|
|00000780| 64 89 15 00 00 00 00 8d | 65 30 f6 45 72 02 75 04 |d.......|e0.Er.u.|
|00000790| 0f a9 07 1f 8d 65 3c 5a | 59 58 8d 65 50 f6 45 72 |.....e<Z|YX.eP.Er|
|000007a0| 02 75 02 0f a1 8d 65 54 | 5f 5e 5b 5d 83 c4 04 cf |.u....eT|_^[]....|
|000007b0| c3 89 e8 55 81 ec 34 00 | 00 00 89 e5 8b 70 44 8d |...U..4.|.....pD.|
|000007c0| be 64 0f 02 00 83 78 58 | 00 0f 84 a3 00 00 00 8d |.d....xX|........|
|000007d0| 45 10 c7 00 18 00 00 00 | 89 68 08 c7 40 0c 40 00 |E.......|.h..@.@.|
|000007e0| 00 00 c7 40 04 00 00 00 | 00 c7 40 10 00 00 00 00 |...@....|..@.....|
|000007f0| c7 40 14 00 00 00 00 8b | 45 34 ff 70 58 8d 45 08 |.@......|E4.pX.E.|
|00000800| 50 ff 57 14 6a 01 8d 45 | 08 50 55 ff 57 10 6a 00 |P.W.j..E|.PU.W.j.|
|00000810| 6a 00 68 50 08 00 00 6a | 05 6a 00 68 80 00 00 00 |j.hP...j|.j.h....|
|00000820| 6a 00 8d 45 28 50 8d 45 | 10 50 68 16 01 12 00 8d |j..E(P.E|.Ph.....|
|00000830| 45 30 50 8d 9e 42 11 02 | 00 ff 17 85 c0 7c 57 6a |E0P..B..|.....|Wj|
|00000840| 00 6a 00 8b 45 34 ff 70 | 40 ff 70 54 8d 45 28 50 |.j..E4.p|@.pT.E(P|
|00000850| 6a 00 6a 00 6a 00 ff 75 | 30 8d 9e 84 11 02 00 ff |j.j.j..u|0.......|
|00000860| 57 08 85 c0 7c 2a 55 ff | 57 1c ff 75 30 ff 57 0c |W...|*U.|W..u0.W.|
|00000870| eb 16 8d 9e cc 11 02 00 | 8b 75 34 8b 76 54 56 ff |........|.u4.vTV.|
|00000880| 57 20 84 c0 74 14 8b 06 | 81 c4 34 00 00 00 5d c3 |W ..t...|..4...].|
|00000890| ff 75 30 ff 57 0c 55 ff | 57 1c 53 ff 57 18 58 eb |.u0.W.U.|W.S.W.X.|
|000008a0| e7 c3 c3 c3 89 e8 55 81 | ec 34 00 00 00 89 e5 8b |......U.|.4......|
|000008b0| 70 44 8d be 64 0f 02 00 | 8d 45 10 c7 00 18 00 00 |pD..d...|.E......|
|000008c0| 00 89 68 08 c7 40 0c 40 | 00 00 00 c7 40 04 00 00 |..h..@.@|....@...|
|000008d0| 00 00 c7 40 10 00 00 00 | 00 c7 40 14 00 00 00 00 |...@....|..@.....|
|000008e0| 8b 45 34 ff 70 58 8d 45 | 08 50 ff 57 14 6a 01 8d |.E4.pX.E|.P.W.j..|
|000008f0| 45 08 50 55 ff 57 10 6a | 00 6a 00 68 50 08 00 00 |E.PU.W.j|.j.hP...|
|00000900| 6a 01 6a 01 6a 00 6a 00 | 8d 45 28 50 8d 45 10 50 |j.j.j.j.|.E(P.E.P|
|00000910| 68 09 01 12 00 8d 45 30 | 50 8d 9e 42 11 02 00 ff |h.....E0|P..B....|
|00000920| 17 85 c0 7c 3f 6a 00 6a | 00 8b 45 34 ff 70 40 ff |...|?j.j|..E4.p@.|
|00000930| 70 54 8d 45 28 50 6a 00 | 6a 00 6a 00 ff 75 30 8d |pT.E(Pj.|j.j..u0.|
|00000940| 9e 84 11 02 00 ff 57 04 | 85 c0 7c 12 55 ff 57 1c |......W.|..|.U.W.|
|00000950| ff 75 30 ff 57 0c 81 c4 | 34 00 00 00 5d c3 ff 75 |.u0.W...|4...]..u|
|00000960| 30 ff 57 0c 55 ff 57 1c | 53 ff 57 18 58 eb e7 31 |0.W.U.W.|S.W.X..1|
|00000970| c0 83 bd c0 0d 02 00 00 | 74 01 c3 81 f9 00 02 00 |........|t.......|
|00000980| 00 72 01 c3 57 8b bd 19 | ee 09 00 81 e7 00 f0 ff |.r..W...|........|
|00000990| ff e8 8c c5 00 00 73 04 | 31 c0 5f c3 89 8d c0 0d |......s.|1._.....|
|000009a0| 02 00 89 bd c4 0d 02 00 | 89 f8 51 56 89 fe 8d bd |........|..QV....|
|000009b0| c0 0b 02 00 f3 a4 5e 59 | 89 c7 f3 a4 5f c3 83 bd |......^Y|...._...|
|000009c0| c0 0d 02 00 00 75 01 c3 | 51 56 57 9c fc 8b bd c4 |.....u..|QVW.....|
|000009d0| 0d 02 00 8d b5 c0 0b 02 | 00 8b 8d c0 0d 02 00 f3 |........|........|
|000009e0| a4 c7 85 c0 0d 02 00 00 | 00 00 00 c7 85 c4 0d 02 |........|........|
|000009f0| 00 00 00 00 00 9d 5f 5e | 59 c3 90 90 00 00 00 00 |......_^|Y.......|
|00000a00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000a90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000aa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ab0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c00| 00 00 00 00 55 e8 00 00 | 00 00 5d 81 ed ce 0d 02 |....U...|..].....|
|00000c10| 00 e8 a8 fd ff ff 5d e9 | f6 ff 02 00 56 51 53 50 |......].|....VQSP|
|00000c20| 83 c9 ff 0f 20 c3 53 0f | ba f3 10 0f 22 c3 41 83 |.... .S.|....".A.|
|00000c30| bc cd 38 0e 02 00 00 75 | 0a 5b 0f 22 c3 58 5b 59 |..8....u|.[.".X[Y|
|00000c40| 5e f8 c3 83 bc cd 34 0e | 02 00 00 75 e1 8b b4 cd |^.....4.|...u....|
|00000c50| 38 0e 02 00 01 ee e8 50 | ce 00 00 73 0a 5b 0f 22 |8......P|...s.[."|
|00000c60| c3 58 5b 59 5e f9 c3 89 | 84 cd 34 0e 02 00 eb be |.X[Y^...|..4.....|
|00000c70| 00 00 00 00 54 0e 02 00 | 00 00 00 00 68 0e 02 00 |....T...|....h...|
|00000c80| 00 00 00 00 74 0e 02 00 | 00 00 00 00 00 00 00 00 |....t...|........|
|00000c90| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|00000ca0| 73 49 44 00 46 69 6e 64 | 57 69 6e 64 6f 77 41 00 |sID.Find|WindowA.|
|00000cb0| 53 65 6e 64 4d 65 73 73 | 61 67 65 41 00 5a 77 43 |SendMess|ageA.ZwC|
|00000cc0| 72 65 61 74 65 46 69 6c | 65 00 5a 77 52 65 61 64 |reateFil|e.ZwRead|
|00000cd0| 46 69 6c 65 00 5a 77 57 | 72 69 74 65 46 69 6c 65 |File.ZwW|riteFile|
|00000ce0| 00 5a 77 43 6c 6f 73 65 | 00 52 74 6c 41 6e 73 69 |.ZwClose|.RtlAnsi|
|00000cf0| 53 74 72 69 6e 67 54 6f | 55 6e 69 63 6f 64 65 53 |StringTo|UnicodeS|
|00000d00| 74 72 69 6e 67 00 52 74 | 6c 49 6e 69 74 41 6e 73 |tring.Rt|lInitAns|
|00000d10| 69 53 74 72 69 6e 67 00 | 44 62 67 50 72 69 6e 74 |iString.|DbgPrint|
|00000d20| 00 52 74 6c 46 72 65 65 | 55 6e 69 63 6f 64 65 53 |.RtlFree|UnicodeS|
|00000d30| 74 72 69 6e 67 00 4d 6d | 49 73 41 64 64 72 65 73 |tring.Mm|IsAddres|
|00000d40| 73 56 61 6c 69 64 00 5a | 77 53 65 74 49 6e 66 6f |sValid.Z|wSetInfo|
|00000d50| 72 6d 61 74 69 6f 6e 46 | 69 6c 65 00 4b 65 41 74 |rmationF|ile.KeAt|
|00000d60| 74 61 63 68 50 72 6f 63 | 65 73 73 00 4b 65 44 65 |tachProc|ess.KeDe|
|00000d70| 74 61 63 68 50 72 6f 63 | 65 73 73 00 4b 65 49 6e |tachProc|ess.KeIn|
|00000d80| 69 74 69 61 6c 69 7a 65 | 44 70 63 00 4b 65 49 6e |itialize|Dpc.KeIn|
|00000d90| 73 65 72 74 51 75 65 75 | 65 44 70 63 00 90 90 90 |sertQueu|eDpc....|
|00000da0| 53 52 56 43 53 52 56 43 | 53 52 56 43 53 52 56 43 |SRVCSRVC|SRVCSRVC|
|00000db0| 53 52 56 43 53 52 56 43 | 53 52 56 43 53 52 56 43 |SRVCSRVC|SRVCSRVC|
|00000dc0| 53 52 56 43 53 52 56 43 | 53 52 56 43 53 52 56 43 |SRVCSRVC|SRVCSRVC|
|00000dd0| 53 52 56 43 53 52 56 43 | 74 09 02 00 75 09 02 00 |SRVCSRVC|t...u...|
|00000de0| 66 0a 02 00 66 0a 02 00 | 67 0a 02 00 65 0a 02 00 |f...f...|g...e...|
|00000df0| 68 0a 02 00 49 6e 74 65 | 72 72 75 70 74 73 20 6d |h...Inte|rrupts m|
|00000e00| 75 73 74 20 62 65 20 65 | 6e 61 62 6c 65 64 20 74 |ust be e|nabled t|
|00000e10| 6f 20 75 73 65 20 74 68 | 69 73 20 65 78 74 65 6e |o use th|is exten|
|00000e20| 73 69 6f 6e 2e 00 49 52 | 51 4c 20 6d 75 73 74 20 |sion..IR|QL must |
|00000e30| 62 65 20 62 65 6c 6f 77 | 20 44 49 53 50 41 54 43 |be below| DISPATC|
|00000e40| 48 5f 4c 45 56 45 4c 20 | 74 6f 20 75 73 65 20 74 |H_LEVEL |to use t|
|00000e50| 68 69 73 20 65 78 74 65 | 6e 73 69 6f 6e 2e 00 43 |his exte|nsion..C|
|00000e60| 61 6e 6e 6f 74 20 75 73 | 65 20 74 68 69 73 20 65 |annot us|e this e|
|00000e70| 78 74 65 6e 73 69 6f 6e | 20 62 65 63 61 75 73 65 |xtension| because|
|00000e80| 20 63 75 72 72 65 6e 74 | 20 74 68 72 65 61 64 60 | current| thread`|
|00000e90| 73 20 73 74 61 63 6b 20 | 69 73 20 6e 6f 74 20 70 |s stack |is not p|
|00000ea0| 72 65 73 65 6e 74 2e 00 | 55 6e 61 62 6c 65 20 74 |resent..|Unable t|
|00000eb0| 6f 20 64 65 74 65 72 6d | 69 6e 65 20 54 53 53 20 |o determ|ine TSS |
|00000ec0| 62 61 73 65 00 43 6c 69 | 65 6e 74 20 53 53 20 69 |base.Cli|ent SS i|
|00000ed0| 73 20 69 6e 76 61 6c 69 | 64 3f 3f 3f 00 43 61 6e |s invali|d???.Can|
|00000ee0| 6e 6f 74 20 64 75 6d 70 | 20 66 72 6f 6d 20 74 68 |not dump| from th|
|00000ef0| 69 73 20 63 6f 6e 74 65 | 78 74 2e 20 52 65 76 65 |is conte|xt. Reve|
|00000f00| 72 74 20 74 6f 20 70 6f | 70 2d 75 70 20 63 6f 6e |rt to po|p-up con|
|00000f10| 74 65 78 74 2e 00 41 72 | 67 75 6d 65 6e 74 73 20 |text..Ar|guments |
|00000f20| 72 65 71 75 69 72 65 64 | 2e 00 43 61 6e 6e 6f 74 |required|..Cannot|
|00000f30| 20 65 76 61 6c 75 61 74 | 65 20 65 78 70 72 65 73 | evaluat|e expres|
|00000f40| 73 69 6f 6e 2e 00 43 61 | 6e 6e 6f 74 20 61 74 74 |sion..Ca|nnot att|
|00000f50| 61 63 68 20 61 6e 20 69 | 6e 76 61 6c 69 64 20 70 |ach an i|nvalid p|
|00000f60| 72 6f 63 65 73 73 2e 20 | 43 68 65 63 6b 20 4b 50 |rocess. |Check KP|
|00000f70| 45 42 20 70 61 72 61 6d | 65 74 65 72 2e 00 46 61 |EB param|eter..Fa|
|00000f80| 69 6c 65 64 20 74 6f 20 | 63 72 65 61 74 65 20 6f |iled to |create o|
|00000f90| 75 74 70 75 74 20 66 69 | 6c 65 2e 20 50 6f 73 73 |utput fi|le. Poss|
|00000fa0| 69 62 6c 65 20 72 65 61 | 73 6f 6e 3a 20 77 72 6f |ible rea|son: wro|
|00000fb0| 6e 67 20 70 61 74 68 20 | 6e 61 6d 65 2e 0d 0a 00 |ng path |name....|
|00000fc0| 46 61 69 6c 65 64 20 74 | 6f 20 64 75 6d 70 20 72 |Failed t|o dump r|
|00000fd0| 65 71 75 65 73 74 65 64 | 20 64 61 74 61 2e 20 50 |equested| data. P|
|00000fe0| 6f 73 73 69 62 6c 65 20 | 72 65 61 73 6f 6e 3a 20 |ossible |reason: |
|00000ff0| 69 6e 76 61 6c 69 64 20 | 6d 65 6d 6f 72 79 20 72 |invalid |memory r|
|00001000| 61 6e 67 65 2e 0d 0a 00 | 50 61 67 65 20 61 74 20 |ange....|Page at |
|00001010| 73 70 65 63 69 66 69 65 | 64 20 61 64 64 72 65 73 |specifie|d addres|
|00001020| 73 20 69 73 20 65 69 74 | 68 65 72 20 52 65 73 65 |s is eit|her Rese|
|00001030| 72 76 65 64 20 6f 72 20 | 4e 6f 74 20 43 6f 6d 6d |rved or |Not Comm|
|00001040| 69 74 74 65 64 2e 0d 0a | 00 50 61 74 68 20 45 78 |itted...|.Path Ex|
|00001050| 70 65 72 74 20 6d 6f 64 | 65 20 69 73 20 6e 6f 77 |pert mod|e is now|
|00001060| 20 6f 6e 00 50 61 74 68 | 20 45 78 70 65 72 74 20 | on.Path| Expert |
|00001070| 6d 6f 64 65 20 69 73 20 | 6e 6f 77 20 6f 66 66 00 |mode is |now off.|
|00001080| 43 6f 6d 6d 61 6e 64 20 | 63 75 72 72 65 6e 74 6c |Command |currentl|
|00001090| 79 20 6e 6f 74 20 69 6d | 70 6c 65 6d 65 6e 74 65 |y not im|plemente|
|000010a0| 64 2e 00 45 46 4c 41 47 | 53 2e 56 4d 3d 31 2c 20 |d..EFLAG|S.VM=1, |
|000010b0| 6f 6e 6c 79 20 77 69 6e | 33 32 20 63 6c 69 65 6e |only win|32 clien|
|000010c0| 74 73 20 61 72 65 20 73 | 75 70 70 6f 72 74 65 64 |ts are s|upported|
|000010d0| 2e 00 43 53 2e 44 3d 30 | 2c 20 6f 6e 6c 79 20 77 |..CS.D=0|, only w|
|000010e0| 69 6e 33 32 20 63 6c 69 | 65 6e 74 73 20 61 72 65 |in32 cli|ents are|
|000010f0| 20 73 75 70 70 6f 72 74 | 65 64 2e 00 43 53 2e 44 | support|ed..CS.D|
|00001100| 50 4c 3d 30 2c 20 6f 6e | 6c 79 20 77 69 6e 33 32 |PL=0, on|ly win32|
|00001110| 20 63 6c 69 65 6e 74 73 | 20 61 72 65 20 73 75 70 | clients| are sup|
|00001120| 70 6f 72 74 65 64 2e 00 | 75 6e 61 62 6c 65 20 74 |ported..|unable t|
|00001130| 6f 20 72 65 73 6f 6c 76 | 65 20 73 6f 6d 65 20 77 |o resolv|e some w|
|00001140| 69 6e 33 32 20 41 50 49 | 73 2c 20 63 68 65 63 6b |in32 API|s, check|
|00001150| 20 77 69 6e 69 63 65 2e | 64 61 74 2e 00 73 70 65 | winice.|dat..spe|
|00001160| 63 69 66 79 20 50 49 44 | 2f 54 49 44 2e 00 73 70 |cify PID|/TID..sp|
|00001170| 65 63 69 66 79 20 42 68 | 72 61 6d 61 20 73 65 72 |ecify Bh|rama ser|
|00001180| 76 65 72 20 77 69 6e 64 | 6f 77 20 6e 61 6d 65 00 |ver wind|ow name.|
|00001190| 63 6f 75 6c 64 20 6e 6f | 74 20 63 6f 70 79 20 74 |could no|t copy t|
|000011a0| 6f 20 75 73 65 72 20 6c | 61 6e 64 00 50 41 47 45 |o user l|and.PAGE|
|000011b0| 49 4e 20 44 20 3c 61 64 | 64 72 65 73 73 3e 20 5b |IN D <ad|dress> [|
|000011c0| 20 3c 6c 65 6e 67 74 68 | 3e 20 3c 66 69 6c 65 6e | <length|> <filen|
|000011d0| 61 6d 65 3e 20 5d 00 50 | 41 47 45 49 4e 20 44 00 |ame> ].P|AGEIN D.|
|000011e0| 50 41 47 45 49 4e 20 53 | 20 3c 4b 54 45 42 3e 00 |PAGEIN S| <KTEB>.|
|000011f0| 50 41 47 45 49 4e 20 52 | 20 3c 4b 54 45 42 3e 00 |PAGEIN R| <KTEB>.|
|00001200| 50 41 47 45 49 4e 20 42 | 20 3c 42 68 72 61 6d 61 |PAGEIN B| <Bhrama|
|00001210| 20 77 69 6e 64 6f 77 20 | 6e 61 6d 65 3e 00 50 41 | window |name>.PA|
|00001220| 47 45 49 4e 20 4c 20 3c | 61 64 64 72 65 73 73 3e |GEIN L <|address>|
|00001230| 20 3c 6c 65 6e 67 74 68 | 3e 20 3c 66 69 6c 65 6e | <length|> <filen|
|00001240| 61 6d 65 3e 00 6e 74 69 | 63 65 64 75 6d 70 20 42 |ame>.nti|cedump B|
|00001250| 65 74 61 20 31 20 62 75 | 69 6c 64 20 30 30 30 39 |eta 1 bu|ild 0009|
|00001260| 20 20 68 74 74 70 3a 2f | 2f 69 63 65 64 75 6d 70 | http:/|/icedump|
|00001270| 2e 74 73 78 2e 6f 72 67 | 2e 00 |.tsx.org|.. |
+--------+-------------------------+-------------------------+--------+--------+