Chip 2007 January, February, March & April

home *** CD-ROM | disk | FTP | other *** search
/ Chip 2007 January, February, March & April / Chip-Cover-CD-2007-02.iso / Pakiet bezpieczenstwa / AntyRootkity / RootkitRevealer 1.70 / RootkitRevealer.exe / 26 / 177 / COFF_SYMBOLS < prev next >
Unknown | 2005-06-21 | 3.0 KB
open in:
MacOS 8.1 |
Win98 |
DOS
view JSON data |
view as text

This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence	Program	Detection	Match Type	Support
`100%`	file	data	default
hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00000010| 03 00 24 54 36 37 36 33 | 00 00 38 03 00 00 01 00 |..$T6763|..8.....|
|00000020| 00 00 03 00 24 53 47 36 | 36 31 32 00 40 04 00 00 |....$SG6|612.@...|
|00000030| 01 00 00 00 03 00 24 53 | 47 36 36 37 37 00 84 05 |......$S|G6677...|
|00000040| 00 00 01 00 00 00 03 00 | 24 53 47 36 36 39 33 00 |........|$SG6693.|
|00000050| 4c 06 00 00 01 00 00 00 | 03 00 24 53 47 36 36 39 |L.......|..$SG669|
|00000060| 30 00 1c 06 00 00 01 00 | 00 00 03 00 24 53 47 36 |0.......|....$SG6|
|00000070| 36 38 37 00 f4 05 00 00 | 01 00 00 00 03 00 40 63 |687.....|......@c|
|00000080| 6f 6d 70 2e 69 64 00 00 | 00 00 ff ff 00 00 03 00 |omp.id..|........|
|00000090| 24 52 30 30 30 30 30 30 | 20 0c 00 00 04 00 00 00 |$R000000| .......|
|000000a0| 03 00 2e 69 64 61 74 61 | 24 36 8e 0b 00 00 03 00 |...idata|$6......|
|000000b0| 00 00 03 00 2e 74 65 78 | 74 00 00 00 84 08 00 00 |.....tex|t.......|
|000000c0| 01 00 00 00 03 01 d1 00 | 00 00 04 00 47 00 00 00 |........|....G...|
|000000d0| 00 00 00 00 00 00 00 00 | 24 24 24 30 30 30 30 31 |........|$$$00001|
|000000e0| 8c 08 00 00 01 00 20 00 | 03 01 0e 00 00 00 00 00 |...... .|........|
|000000f0| 00 00 ae 01 00 00 13 00 | 00 00 00 00 24 24 24 30 |........|....$$$0|
|00000100| 30 30 30 34 55 09 00 00 | 01 00 20 00 03 01 23 00 |0004U...|.. ...#.|
|00000110| 00 00 00 00 00 00 52 03 | 00 00 00 00 00 00 00 00 |......R.|........|
|00000120| 00 00 00 00 da 05 00 00 | 04 09 00 00 01 00 00 00 |........|........|
|00000130| 03 00 00 00 00 00 e7 05 | 00 00 0f 09 00 00 01 00 |........|........|
|00000140| 00 00 03 00 00 00 00 00 | f3 05 00 00 32 09 00 00 |........|....2...|
|00000150| 01 00 00 00 03 00 5f 6c | 68 5f 74 6f 70 00 bb 08 |......_l|h_top...|
|00000160| 00 00 01 00 00 00 03 00 | 00 00 00 00 fe 05 00 00 |........|........|
|00000170| 16 09 00 00 01 00 00 00 | 03 00 00 00 00 00 08 06 |........|........|
|00000180| 00 00 1d 09 00 00 01 00 | 00 00 03 00 2e 74 65 78 |........|.....tex|
|00000190| 74 00 00 00 c4 07 00 00 | 01 00 00 00 03 01 bf 00 |t.......|........|
|000001a0| 00 00 04 00 3d 00 00 00 | 00 00 00 00 00 00 00 00 |....=...|........|
|000001b0| 00 00 00 00 16 06 00 00 | dc 07 00 00 01 00 00 00 |........|........|
|000001c0| 03 00 24 24 24 30 30 30 | 30 31 c4 07 00 00 01 00 |..$$$000|01......|
|000001d0| 20 00 03 01 0f 00 00 00 | 00 00 00 00 9c 01 00 00 | .......|........|
|000001e0| 14 00 00 00 00 00 24 24 | 24 30 30 30 30 33 e4 07 |......$$|$00003..|
|000001f0| 00 00 01 00 20 00 03 01 | 1d 00 00 00 00 00 00 00 |.... ...|........|
|00000200| cc 01 00 00 22 00 00 00 | 00 00 00 00 00 00 21 06 |...."...|......!.|
|00000210| 00 00 e4 07 00 00 01 00 | 20 00 03 01 24 00 00 00 |........| ...$...|
|00000220| 22 00 00 00 d2 01 00 00 | 29 00 00 00 00 00 24 24 |".......|).....$$|
|00000230| 24 30 30 30 30 35 06 08 | 00 00 01 00 20 00 03 01 |$00005..|.... ...|
|00000240| 2b 00 00 00 00 00 00 00 | 08 02 00 00 30 00 00 00 |+.......|....0...|
|00000250| 00 00 24 24 24 30 30 30 | 30 37 60 08 00 00 01 00 |..$$$000|07`.....|
|00000260| 20 00 03 01 39 00 00 00 | 00 00 00 00 c2 02 00 00 | ...9...|........|
|00000270| 3e 00 00 00 00 00 24 24 | 24 30 30 30 30 39 83 08 |>.....$$|$00009..|
|00000280| 00 00 01 00 20 00 03 01 | 47 00 00 00 00 00 00 00 |.... ...|G.......|
|00000290| 04 03 00 00 00 00 00 00 | 00 00 5f 6c 75 5f 64 6f |........|.._lu_do|
|000002a0| 6e 65 52 08 00 00 01 00 | 00 00 03 00 00 00 00 00 |neR.....|........|
|000002b0| 32 06 00 00 05 08 00 00 | 01 00 00 00 03 00 00 00 |2.......|........|
|000002c0| 00 00 3d 06 00 00 50 08 | 00 00 01 00 00 00 03 00 |..=...P.|........|
|000002d0| 5f 6c 75 5f 74 6f 70 00 | 23 08 00 00 01 00 00 00 |_lu_top.|#.......|
|000002e0| 03 00 5f 61 74 5f 64 6f | 6e 65 82 08 00 00 01 00 |.._at_do|ne......|
|000002f0| 00 00 03 00 2e 69 64 61 | 74 61 24 36 a8 0b 00 00 |.....ida|ta$6....|
|00000300| 03 00 00 00 03 00 68 65 | 61 64 65 72 00 00 00 00 |......he|ader....|
|00000310| 00 00 fe ff 00 00 02 00 | 00 00 00 00 8a 01 00 00 |........|........|
|00000320| 00 00 00 00 ff ff 00 00 | 02 00 00 00 00 00 ed 00 |........|........|
|00000330| 00 00 80 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000340| 00 01 00 00 84 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000350| 00 00 1a 01 00 00 88 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000360| 00 00 00 00 37 01 00 00 | 8c 02 00 00 01 00 00 00 |....7...|........|
|00000370| 02 00 00 00 00 00 58 01 | 00 00 90 02 00 00 01 00 |......X.|........|
|00000380| 00 00 02 00 00 00 00 00 | 6c 01 00 00 94 02 00 00 |........|l.......|
|00000390| 01 00 00 00 02 00 00 00 | 00 00 e0 01 00 00 98 02 |........|........|
|000003a0| 00 00 01 00 00 00 02 00 | 00 00 00 00 fd 01 00 00 |........|........|
|000003b0| 9c 02 00 00 01 00 00 00 | 02 00 00 00 00 00 0c 02 |........|........|
|000003c0| 00 00 a0 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|000003d0| d8 00 00 00 a4 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|000003e0| 00 00 49 02 00 00 a8 02 | 00 00 01 00 00 00 02 00 |..I.....|........|
|000003f0| 00 00 00 00 64 02 00 00 | ac 02 00 00 01 00 00 00 |....d...|........|
|00000400| 02 00 00 00 00 00 7f 02 | 00 00 b0 02 00 00 01 00 |........|........|
|00000410| 00 00 02 00 00 00 00 00 | a0 02 00 00 b4 02 00 00 |........|........|
|00000420| 01 00 00 00 02 00 00 00 | 00 00 b8 02 00 00 b8 02 |........|........|
|00000430| 00 00 01 00 00 00 02 00 | 00 00 00 00 d6 02 00 00 |........|........|
|00000440| bc 02 00 00 01 00 00 00 | 02 00 00 00 00 00 f4 02 |........|........|
|00000450| 00 00 c0 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000460| 0d 03 00 00 c4 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000470| 00 00 7c 05 00 00 c8 02 | 00 00 01 00 00 00 02 00 |..|.....|........|
|00000480| 00 00 00 00 28 02 00 00 | cc 02 00 00 01 00 00 00 |....(...|........|
|00000490| 02 00 00 00 00 00 c1 00 | 00 00 d0 02 00 00 01 00 |........|........|
|000004a0| 00 00 02 00 00 00 00 00 | 62 05 00 00 d4 02 00 00 |........|b.......|
|000004b0| 01 00 00 00 02 00 00 00 | 00 00 13 00 00 00 44 03 |........|......D.|
|000004c0| 00 00 01 00 20 00 02 00 | 00 00 00 00 2a 00 00 00 |.... ...|....*...|
|000004d0| a0 03 00 00 01 00 20 00 | 02 00 00 00 00 00 56 00 |...... .|......V.|
|000004e0| 00 00 47 04 00 00 01 00 | 20 00 02 00 00 00 00 00 |..G.....| .......|
|000004f0| 6e 00 00 00 7e 04 00 00 | 01 00 20 00 02 00 00 00 |n...~...|.. .....|
|00000500| 00 00 88 00 00 00 cc 04 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000510| 00 00 00 00 9c 00 00 00 | b4 05 00 00 01 00 20 00 |........|...... .|
|00000520| 02 00 00 00 00 00 04 00 | 00 00 8a 06 00 00 01 00 |........|........|
|00000530| 20 00 02 00 00 00 00 00 | f1 03 00 00 c4 07 00 00 | .......|........|
|00000540| 01 00 20 00 02 00 00 00 | 00 00 02 04 00 00 06 08 |.. .....|........|
|00000550| 00 00 01 00 20 00 02 00 | 00 00 00 00 12 04 00 00 |.... ...|........|
|00000560| 60 08 00 00 01 00 20 00 | 02 00 00 00 00 00 98 01 |`..... .|........|
|00000570| 00 00 8c 08 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000580| 29 04 00 00 3a 09 00 00 | 01 00 20 00 02 00 00 00 |)...:...|.. .....|
|00000590| 00 00 e3 03 00 00 56 09 | 00 00 01 00 20 00 02 00 |......V.|.... ...|
|000005a0| 00 00 00 00 ae 00 00 00 | 60 09 00 00 02 00 00 00 |........|`.......|
|000005b0| 02 00 00 00 00 00 3e 03 | 00 00 80 09 00 00 03 00 |......>.|........|
|000005c0| 00 00 02 00 00 00 00 00 | 49 05 00 00 94 09 00 00 |........|I.......|
|000005d0| 03 00 00 00 02 00 65 6e | 64 00 00 00 00 00 20 10 |......en|d..... .|
|000005e0| 00 00 fe ff 00 00 02 00 | 4a 06 00 00 5f 44 72 69 |........|J..._Dri|
|000005f0| 76 65 72 45 6e 74 72 79 | 40 38 00 5f 52 6b 52 65 |verEntry|@8._RkRe|
|00000600| 76 65 61 6c 47 65 74 53 | 79 73 63 61 6c 6c 40 31 |vealGetS|yscall@1|
|00000610| 32 00 5f 52 6b 52 65 76 | 65 61 6c 4f 70 65 6e 4b |2._RkRev|ealOpenK|
|00000620| 65 79 40 31 32 00 5f 52 | 61 6e 64 6f 6d 69 7a 65 |ey@12._R|andomize|
|00000630| 50 72 6f 63 65 73 73 4e | 61 6d 65 40 30 00 5f 47 |ProcessN|ame@0._G|
|00000640| 65 74 50 72 6f 63 65 73 | 73 4e 61 6d 65 4f 66 66 |etProces|sNameOff|
|00000650| 73 65 74 40 30 00 5f 52 | 6b 52 65 76 65 61 6c 44 |set@0._R|kRevealD|
|00000660| 65 76 69 63 65 43 6f 6e | 74 72 6f 6c 40 33 36 00 |eviceCon|trol@36.|
|00000670| 5f 52 6b 52 65 76 65 61 | 6c 44 69 73 70 61 74 63 |_RkRevea|lDispatc|
|00000680| 68 40 38 00 5f 52 6b 52 | 65 76 65 61 6c 55 6e 6c |h@8._RkR|evealUnl|
|00000690| 6f 61 64 40 34 00 5f 50 | 72 6f 63 65 73 73 4e 61 |oad@4._P|rocessNa|
|000006a0| 6d 65 4f 66 66 73 65 74 | 00 5f 5f 69 6d 70 5f 5f |meOffset|.__imp__|
|000006b0| 5a 77 43 72 65 61 74 65 | 46 69 6c 65 40 34 34 00 |ZwCreate|File@44.|
|000006c0| 5f 5f 69 6d 70 5f 5f 5a | 77 52 65 61 64 46 69 6c |__imp__Z|wReadFil|
|000006d0| 65 40 33 36 00 5f 5f 69 | 6d 70 5f 5f 5a 77 53 61 |e@36.__i|mp__ZwSa|
|000006e0| 76 65 4b 65 79 40 38 00 | 5f 5f 69 6d 70 5f 5f 5a |veKey@8.|__imp__Z|
|000006f0| 77 43 72 65 61 74 65 53 | 65 63 74 69 6f 6e 40 32 |wCreateS|ection@2|
|00000700| 38 00 5f 5f 69 6d 70 5f | 5f 5a 77 4d 61 70 56 69 |8.__imp_|_ZwMapVi|
|00000710| 65 77 4f 66 53 65 63 74 | 69 6f 6e 40 34 30 00 5f |ewOfSect|ion@40._|
|00000720| 5f 69 6d 70 5f 5f 5a 77 | 51 75 65 72 79 49 6e 66 |_imp__Zw|QueryInf|
|00000730| 6f 72 6d 61 74 69 6f 6e | 46 69 6c 65 40 32 30 00 |ormation|File@20.|
|00000740| 5f 5f 69 6d 70 5f 5f 5a | 77 4f 70 65 6e 4b 65 79 |__imp__Z|wOpenKey|
|00000750| 40 31 32 00 5f 5f 69 6d | 70 5f 5f 52 74 6c 49 6e |@12.__im|p__RtlIn|
|00000760| 69 74 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 40 |itUnicod|eString@|
|00000770| 38 00 5f 5f 65 78 63 65 | 70 74 5f 6c 69 73 74 00 |8.__exce|pt_list.|
|00000780| 5f 5f 65 78 63 65 70 74 | 5f 68 61 6e 64 6c 65 72 |__except|_handler|
|00000790| 33 00 5f 5f 69 6d 70 5f | 5f 4b 65 51 75 65 72 79 |3.__imp_|_KeQuery|
|000007a0| 50 65 72 66 6f 72 6d 61 | 6e 63 65 43 6f 75 6e 74 |Performa|nceCount|
|000007b0| 65 72 40 34 00 5f 5f 69 | 6d 70 5f 5f 52 74 6c 52 |er@4.__i|mp__RtlR|
|000007c0| 61 6e 64 6f 6d 40 34 00 | 5f 5f 69 6d 70 5f 5f 49 |andom@4.|__imp__I|
|000007d0| 6f 47 65 74 43 75 72 72 | 65 6e 74 50 72 6f 63 65 |oGetCurr|entProce|
|000007e0| 73 73 40 30 00 5f 5f 69 | 6d 70 5f 5f 73 74 72 6e |ss@0.__i|mp__strn|
|000007f0| 63 6d 70 00 5f 5f 69 6d | 70 5f 40 49 6f 66 43 6f |cmp.__im|p_@IofCo|
|00000800| 6d 70 6c 65 74 65 52 65 | 71 75 65 73 74 40 38 00 |mpleteRe|quest@8.|
|00000810| 5f 5f 69 6d 70 5f 5f 53 | 65 52 65 6c 65 61 73 65 |__imp__S|eRelease|
|00000820| 53 75 62 6a 65 63 74 43 | 6f 6e 74 65 78 74 40 34 |SubjectC|ontext@4|
|00000830| 00 5f 5f 69 6d 70 5f 5f | 53 65 50 72 69 76 69 6c |.__imp__|SePrivil|
|00000840| 65 67 65 43 68 65 63 6b | 40 31 32 00 5f 5f 69 6d |egeCheck|@12.__im|
|00000850| 70 5f 5f 45 78 47 65 74 | 50 72 65 76 69 6f 75 73 |p__ExGet|Previous|
|00000860| 4d 6f 64 65 40 30 00 5f | 5f 69 6d 70 5f 5f 53 65 |Mode@0._|_imp__Se|
|00000870| 43 61 70 74 75 72 65 53 | 75 62 6a 65 63 74 43 6f |CaptureS|ubjectCo|
|00000880| 6e 74 65 78 74 40 34 00 | 5f 5f 69 6d 70 5f 5f 49 |ntext@4.|__imp__I|
|00000890| 6f 44 65 6c 65 74 65 44 | 65 76 69 63 65 40 34 00 |oDeleteD|evice@4.|
|000008a0| 5f 5f 69 6d 70 5f 5f 49 | 6f 44 65 6c 65 74 65 53 |__imp__I|oDeleteS|
|000008b0| 79 6d 62 6f 6c 69 63 4c | 69 6e 6b 40 34 00 5f 5f |ymbolicL|ink@4.__|
|000008c0| 69 6d 70 5f 5f 49 6f 43 | 72 65 61 74 65 53 79 6d |imp__IoC|reateSym|
|000008d0| 62 6f 6c 69 63 4c 69 6e | 6b 40 38 00 5f 5f 69 6d |bolicLin|k@8.__im|
|000008e0| 70 5f 5f 49 6f 43 72 65 | 61 74 65 44 65 76 69 63 |p__IoCre|ateDevic|
|000008f0| 65 40 32 38 00 5f 5f 69 | 6d 70 5f 5f 45 78 41 6c |e@28.__i|mp__ExAl|
|00000900| 6c 6f 63 61 74 65 50 6f | 6f 6c 57 69 74 68 54 61 |locatePo|olWithTa|
|00000910| 67 40 31 32 00 5f 5a 77 | 43 72 65 61 74 65 46 69 |g@12._Zw|CreateFi|
|00000920| 6c 65 40 34 34 00 5f 5f | 49 4d 50 4f 52 54 5f 44 |le@44.__|IMPORT_D|
|00000930| 45 53 43 52 49 50 54 4f | 52 5f 6e 74 6f 73 6b 72 |ESCRIPTO|R_ntoskr|
|00000940| 6e 6c 00 5f 5a 77 52 65 | 61 64 46 69 6c 65 40 33 |nl._ZwRe|adFile@3|
|00000950| 36 00 5f 5a 77 53 61 76 | 65 4b 65 79 40 38 00 5f |6._ZwSav|eKey@8._|
|00000960| 5a 77 43 72 65 61 74 65 | 53 65 63 74 69 6f 6e 40 |ZwCreate|Section@|
|00000970| 32 38 00 5f 5a 77 4d 61 | 70 56 69 65 77 4f 66 53 |28._ZwMa|pViewOfS|
|00000980| 65 63 74 69 6f 6e 40 34 | 30 00 5f 5a 77 51 75 65 |ection@4|0._ZwQue|
|00000990| 72 79 49 6e 66 6f 72 6d | 61 74 69 6f 6e 46 69 6c |ryInform|ationFil|
|000009a0| 65 40 32 30 00 5f 5a 77 | 4f 70 65 6e 4b 65 79 40 |e@20._Zw|OpenKey@|
|000009b0| 31 32 00 5f 52 74 6c 49 | 6e 69 74 55 6e 69 63 6f |12._RtlI|nitUnico|
|000009c0| 64 65 53 74 72 69 6e 67 | 40 38 00 5f 52 74 6c 55 |deString|@8._RtlU|
|000009d0| 6e 77 69 6e 64 40 31 36 | 00 5f 5f 67 6c 6f 62 61 |nwind@16|.__globa|
|000009e0| 6c 5f 75 6e 77 69 6e 64 | 32 00 5f 5f 6c 6f 63 61 |l_unwind|2.__loca|
|000009f0| 6c 5f 75 6e 77 69 6e 64 | 32 00 5f 5f 61 62 6e 6f |l_unwind|2.__abno|
|00000a00| 72 6d 61 6c 5f 74 65 72 | 6d 69 6e 61 74 69 6f 6e |rmal_ter|mination|
|00000a10| 00 5f 5f 73 65 68 5f 6c | 6f 6e 67 6a 6d 70 5f 75 |.__seh_l|ongjmp_u|
|00000a20| 6e 77 69 6e 64 40 34 00 | 5f 52 74 6c 52 61 6e 64 |nwind@4.|_RtlRand|
|00000a30| 6f 6d 40 34 00 5f 49 6f | 47 65 74 43 75 72 72 65 |om@4._Io|GetCurre|
|00000a40| 6e 74 50 72 6f 63 65 73 | 73 40 30 00 40 49 6f 66 |ntProces|s@0.@Iof|
|00000a50| 43 6f 6d 70 6c 65 74 65 | 52 65 71 75 65 73 74 40 |Complete|Request@|
|00000a60| 38 00 5f 53 65 52 65 6c | 65 61 73 65 53 75 62 6a |8._SeRel|easeSubj|
|00000a70| 65 63 74 43 6f 6e 74 65 | 78 74 40 34 00 5f 53 65 |ectConte|xt@4._Se|
|00000a80| 50 72 69 76 69 6c 65 67 | 65 43 68 65 63 6b 40 31 |Privileg|eCheck@1|
|00000a90| 32 00 5f 45 78 47 65 74 | 50 72 65 76 69 6f 75 73 |2._ExGet|Previous|
|00000aa0| 4d 6f 64 65 40 30 00 5f | 53 65 43 61 70 74 75 72 |Mode@0._|SeCaptur|
|00000ab0| 65 53 75 62 6a 65 63 74 | 43 6f 6e 74 65 78 74 40 |eSubject|Context@|
|00000ac0| 34 00 5f 49 6f 44 65 6c | 65 74 65 44 65 76 69 63 |4._IoDel|eteDevic|
|00000ad0| 65 40 34 00 5f 49 6f 44 | 65 6c 65 74 65 53 79 6d |e@4._IoD|eleteSym|
|00000ae0| 62 6f 6c 69 63 4c 69 6e | 6b 40 34 00 5f 49 6f 43 |bolicLin|k@4._IoC|
|00000af0| 72 65 61 74 65 53 79 6d | 62 6f 6c 69 63 4c 69 6e |reateSym|bolicLin|
|00000b00| 6b 40 38 00 5f 49 6f 43 | 72 65 61 74 65 44 65 76 |k@8._IoC|reateDev|
|00000b10| 69 63 65 40 32 38 00 5f | 45 78 41 6c 6c 6f 63 61 |ice@28._|ExAlloca|
|00000b20| 74 65 50 6f 6f 6c 57 69 | 74 68 54 61 67 40 31 32 |tePoolWi|thTag@12|
|00000b30| 00 5f 5f 4e 55 4c 4c 5f | 49 4d 50 4f 52 54 5f 44 |.__NULL_|IMPORT_D|
|00000b40| 45 53 43 52 49 50 54 4f | 52 00 7f 6e 74 6f 73 6b |ESCRIPTO|R..ntosk|
|00000b50| 72 6e 6c 5f 4e 55 4c 4c | 5f 54 48 55 4e 4b 5f 44 |rnl_NULL|_THUNK_D|
|00000b60| 41 54 41 00 5f 5f 69 6d | 70 5f 5f 52 74 6c 55 6e |ATA.__im|p__RtlUn|
|00000b70| 77 69 6e 64 40 31 36 00 | 5f 4b 65 51 75 65 72 79 |wind@16.|_KeQuery|
|00000b80| 50 65 72 66 6f 72 6d 61 | 6e 63 65 43 6f 75 6e 74 |Performa|nceCount|
|00000b90| 65 72 40 34 00 5f 5f 49 | 4d 50 4f 52 54 5f 44 45 |er@4.__I|MPORT_DE|
|00000ba0| 53 43 52 49 50 54 4f 52 | 5f 48 41 4c 00 7f 48 41 |SCRIPTOR|_HAL..HA|
|00000bb0| 4c 5f 4e 55 4c 4c 5f 54 | 48 55 4e 4b 5f 44 41 54 |L_NULL_T|HUNK_DAT|
|00000bc0| 41 00 5f 6c 68 5f 63 6f | 6e 74 69 6e 75 65 00 5f |A._lh_co|ntinue._|
|00000bd0| 6c 68 5f 64 69 73 6d 69 | 73 73 00 5f 6c 68 5f 72 |lh_dismi|ss._lh_r|
|00000be0| 65 74 75 72 6e 00 5f 6c | 68 5f 62 61 67 69 74 00 |eturn._l|h_bagit.|
|00000bf0| 5f 6c 68 5f 75 6e 77 69 | 6e 64 69 6e 67 00 5f 67 |_lh_unwi|nding._g|
|00000c00| 75 5f 72 65 74 75 72 6e | 00 5f 5f 75 6e 77 69 6e |u_return|.__unwin|
|00000c10| 64 5f 68 61 6e 64 6c 65 | 72 00 5f 75 68 5f 72 65 |d_handle|r._uh_re|
|00000c20| 74 75 72 6e 00 5f 6c 75 | 5f 63 6f 6e 74 69 6e 75 |turn._lu|_continu|
|00000c30| 65 00                   |                         |e.      |        |
+--------+-------------------------+-------------------------+--------+--------+