home *** CD-ROM | disk | FTP | other *** search
Unknown | 2008-01-19 | 3.5 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 00 8b ff | 55 8b ec 83 7d 0c 07 74 |........|U...}..t|
|00000010| 0a b8 0d 00 00 c0 e9 5b | 01 00 00 56 8b 75 18 80 |.......[|...V.u..|
|00000020| 3e 00 57 74 5c 8b 45 08 | ff 46 0c 8d 50 02 66 8b |>.Wt\.E.|.F..P.f.|
|00000030| 08 40 40 66 85 c9 75 f6 | 8b 4d 10 2b c2 d1 f8 8d |.@@f..u.|.M.+....|
|00000040| 44 00 04 0f b7 c0 83 c0 | 08 01 46 04 eb 28 ff 46 |D.......|..F..(.F|
|00000050| 08 8b c1 8d 78 02 66 8b | 10 40 40 66 85 d2 75 f6 |....x.f.|.@@f..u.|
|00000060| 2b c7 d1 f8 8d 44 00 02 | 0f b7 c0 0f b7 c0 8d 50 |+....D..|.......P|
|00000070| 12 01 56 04 03 c8 66 83 | 39 00 75 d2 e9 f1 00 00 |..V...f.|9.u.....|
|00000080| 00 8b 7e 14 8d 47 08 89 | 46 14 8b 45 08 8d 48 02 |..~..G..|F..E..H.|
|00000090| 66 8b 10 40 40 66 85 d2 | 75 f6 2b c1 d1 f8 8d 44 |f..@@f..|u.+....D|
|000000a0| 00 04 0f b7 c0 8d 48 fe | 66 89 47 02 0f b7 c0 66 |......H.|f.G....f|
|000000b0| 89 0f 8b 4e 18 89 4f 04 | 01 46 18 8b 4f 04 83 c0 |...N..O.|.F..O...|
|000000c0| fe 50 ff 75 08 66 c7 01 | 5c 00 8b 47 04 40 40 50 |.P.u.f..|\..G.@@P|
|000000d0| e8 6f 6c ff ff 83 c4 0c | 6a 00 57 57 ff 15 1c 31 |.ol.....|j.WW...1|
|000000e0| 01 00 8b 45 10 66 83 38 | 00 89 45 08 0f 84 80 00 |...E.f.8|..E.....|
|000000f0| 00 00 53 8b 46 10 8d 48 | 10 89 4e 10 8b 4d 08 89 |..S.F..H|..N..M..|
|00000100| 78 04 8d 51 02 66 8b 19 | 41 41 66 85 db 75 f6 2b |x..Q.f..|AAf..u.+|
|00000110| ca d1 f9 8d 4c 09 04 0f | b7 c9 8d 50 08 66 89 48 |....L...|...P.f.H|
|00000120| 0a 8d 59 fe 66 89 1a 0f | b7 d9 89 55 10 8b 56 18 |..Y.f...|...U..V.|
|00000130| 89 50 0c 01 5e 18 8b 48 | 0c 66 c7 01 5c 00 8b 40 |.P..^..H|.f..\..@|
|00000140| 0c 8d 4b fe 51 ff 75 08 | 40 40 50 e8 f4 6b ff ff |..K.Q.u.|@@P..k..|
|00000150| 83 c4 0c 6a 00 ff 75 10 | ff 75 10 ff 15 1c 31 01 |...j..u.|.u....1.|
|00000160| 00 8b 45 08 8d 5c 18 fe | 66 83 3b 00 89 5d 08 75 |..E..\..|f.;..].u|
|00000170| 82 5b 5f 33 c0 5e 5d c2 | 18 00 cc cc cc cc cc cc |.[_3.^].|........|
|00000180| 8b ff 55 8b ec 83 ec 60 | 53 33 db 56 8b 35 14 30 |..U....`|S3.V.5.0|
|00000190| 01 00 57 53 8d 45 d8 50 | 8d 45 a0 50 68 c8 b5 01 |..WS.E.P|.E.Ph...|
|000001a0| 00 bf 01 00 00 80 57 c7 | 45 a0 06 b0 01 00 c7 45 |......W.|E......E|
|000001b0| a4 10 00 00 00 89 5d a8 | 89 5d ac 89 5d b0 89 5d |......].|.]..]..]|
|000001c0| b4 89 5d b8 89 5d bc 89 | 5d c0 89 5d c4 c6 45 d8 |..]..]..|]..]..E.|
|000001d0| 01 89 5d dc 89 5d e0 89 | 5d e4 ff d6 3b c3 7d 10 |..]..]..|]...;.}.|
|000001e0| 3d 34 00 00 c0 0f 85 ec | 00 00 00 e9 e5 00 00 00 |=4......|........|
|000001f0| 39 5d dc 0f 84 dc 00 00 | 00 68 4e 70 66 73 ff 75 |9]......|.hNpfs.u|
|00000200| dc 53 ff 15 10 30 01 00 | 3b c3 a3 c4 40 01 00 75 |.S...0..|;...@..u|
|00000210| 0a b8 9a 00 00 c0 e9 bc | 00 00 00 8b 4d e4 89 45 |........|....M..E|
|00000220| ec 8d 04 c8 8b 4d e0 c1 | e1 04 03 c8 53 89 45 e8 |.....M..|....S.E.|
|00000230| 89 45 fc 8d 45 d8 50 8d | 45 a0 50 68 c8 b5 01 00 |.E..E.P.|E.Ph....|
|00000240| 57 88 5d d8 89 4d f0 ff | d6 8b f0 3b f3 7d 17 53 |W.]..M..|...;.}.S|
|00000250| ff 35 c4 40 01 00 ff 15 | 90 30 01 00 89 1d c4 40 |.5.@....|.0.....@|
|00000260| 01 00 8b c6 eb 71 39 5d | e0 89 5d f8 76 67 8b 4d |.....q9]|..].vg.M|
|00000270| fc 0f b7 51 08 8d 42 f6 | 83 f8 08 89 55 f4 77 0b |...Q..B.|....U.w.|
|00000280| d1 e8 8d 3c 85 ac 40 01 | 00 eb 05 bf c0 40 01 00 |...<..@.|.....@..|
|00000290| 8b 37 eb 26 0f b7 46 08 | 3b c2 77 22 72 18 ff 76 |.7.&..F.|;.w"r..v|
|000002a0| 0c ff 71 0c ff 15 0c 30 | 01 00 85 c0 59 59 8b 4d |..q....0|....YY.M|
|000002b0| fc 7c 0b 8b 55 f4 8b fe | 8b 36 3b f3 75 d6 8b 07 |.|..U...|.6;.u...|
|000002c0| ff 45 f8 89 01 8b 45 f8 | 89 0f 83 c1 10 3b 45 e0 |.E....E.|.....;E.|
|000002d0| 89 4d fc 72 99 33 c0 5f | 5e 5b c9 c3 cc cc cc cc |.M.r.3._|^[......|
|000002e0| cc cc 8b ff 55 8b ec 83 | ec 14 e8 91 fe ff ff 85 |....U...|........|
|000002f0| c0 0f 8c 29 01 00 00 56 | 57 68 e2 b5 01 00 8d 45 |...)...V|Wh.....E|
|00000300| ec 50 ff 15 c0 30 01 00 | 8b 75 08 8d 45 fc 50 6a |.P...0..|.u..E.Pj|
|00000310| 00 6a 00 6a 11 8d 45 ec | 50 6a 30 56 ff 15 c4 30 |.j.j..E.|Pj0V...0|
|00000320| 01 00 8b f8 85 ff 7d 0a | e8 05 9e ff ff e9 ea 00 |......}.|........|
|00000330| 00 00 8b 45 fc c7 46 34 | 18 89 01 00 81 48 1c 00 |...E..F4|.....H..|
|00000340| 02 00 00 8b 45 fc c7 46 | 38 d8 5a 01 00 c7 46 3c |....E..F|8.Z...F<|
|00000350| 9e 61 01 00 c7 46 40 68 | 54 01 00 c7 46 44 38 8c |.a...F@h|T...FD8.|
|00000360| 01 00 c7 46 48 60 a0 01 | 00 c7 46 4c 9c 75 01 00 |...FH`..|..FL.u..|
|00000370| c7 46 50 e0 75 01 00 c7 | 46 60 3c 9e 01 00 c7 86 |.FP.u...|F`<.....|
|00000380| 80 00 00 00 c4 52 01 00 | c7 46 5c 04 77 01 00 c7 |.....R..|.F\.w...|
|00000390| 46 68 e0 6d 01 00 c7 46 | 6c d4 88 01 00 c7 86 88 |Fh.m...F|l.......|
|000003a0| 00 00 00 50 93 01 00 c7 | 86 8c 00 00 00 94 93 01 |...P....|........|
|000003b0| 00 c7 46 28 08 40 01 00 | a3 c8 40 01 00 05 b8 00 |..F(.@..|..@.....|
|000003c0| 00 00 a3 a4 40 01 00 83 | c0 1c a3 a8 40 01 00 e8 |....@...|....@...|
|000003d0| 56 00 00 00 e8 97 00 00 | 00 8b f8 85 ff 7d 3d 8d |V.......|.....}=.|
|000003e0| 45 f4 50 89 45 f8 89 45 | f4 e8 48 e8 ff ff ff 75 |E.P.E..E|..H....u|
|000003f0| fc ff 15 b8 30 01 00 e8 | 36 9d ff ff 8b 45 f4 8d |....0...|6....E..|
|00000400| 4d f4 3b c1 74 16 8b 30 | 8d 48 a8 b2 02 ff 15 20 |M.;.t..0|.H..... |
|00000410| 30 01 00 8d 4d f4 3b f1 | 8b c6 75 ea 8b c7 5f 5e |0...M.;.|..u..._^|
|00000420| c9 c2 08 00 cc cc cc cc | cc cc 6a 2c 6a 00 ff 35 |........|..j,j..5|
|00000430| a4 40 01 00 e8 17 69 ff | ff a1 a4 40 01 00 c6 00 |.@....i.|...@....|
|00000440| 01 a1 a4 40 01 00 83 c4 | 0c 83 c0 10 50 ff 15 ec |...@....|....P...|
|00000450| 30 01 00 a1 a4 40 01 00 | 83 60 1c 00 a1 a4 40 01 |0....@..|.`....@.|
|00000460| 00 83 c0 20 50 e8 06 ea | ff ff c3 cc cc cc cc cc |... P...|........|
|00000470| a1 a4 40 01 00 56 57 33 | ff 39 78 08 74 10 57 57 |..@..VW3|.9x.t.WW|
|00000480| 57 68 d8 00 17 00 6a 25 | ff 15 9c 30 01 00 68 4e |Wh....j%|...0..hN|
|00000490| 70 46 44 be 80 00 00 00 | 56 6a 01 ff 15 10 30 01 |pFD.....|Vj....0.|
|000004a0| 00 8b 0d a4 40 01 00 89 | 41 08 a1 a4 40 01 00 39 |....@...|A...@..9|
|000004b0| 78 08 75 0a b8 9a 00 00 | c0 e9 c4 00 00 00 56 57 |x.u.....|......VW|
|000004c0| ff 70 08 e8 88 68 ff ff | a1 a4 40 01 00 8b 40 08 |.p...h..|..@...@.|
|000004d0| c6 00 02 a1 a4 40 01 00 | 8b 40 08 83 c0 08 89 40 |.....@..|.@.....@|
|000004e0| 04 89 00 a1 a4 40 01 00 | 8b 40 08 83 c0 28 89 40 |.....@..|.@...(.@|
|000004f0| 04 89 00 a1 a4 40 01 00 | 8b 40 08 83 c0 30 89 40 |.....@..|.@...0.@|
|00000500| 04 89 00 a1 a4 40 01 00 | 8b 40 08 83 c0 38 89 40 |.....@..|.@...8.@|
|00000510| 04 89 00 a1 a4 40 01 00 | 8b 40 08 c7 40 54 78 40 |.....@..|.@..@Tx@|
|00000520| 01 00 a1 a4 40 01 00 8b | 40 08 66 c7 40 50 02 00 |....@...|@.f.@P..|
|00000530| a1 a4 40 01 00 8b 40 08 | 66 c7 40 52 04 00 a1 a4 |..@...@.|f.@R....|
|00000540| 40 01 00 8b 40 08 8b 48 | 50 89 48 58 8b 48 54 89 |@...@..H|P.HX.HT.|
|00000550| 48 5c a1 a4 40 01 00 8b | 48 08 83 c4 0c 8d 51 60 |H\..@...|H.....Q`|
|00000560| 52 83 c1 50 51 83 c0 10 | 50 ff 15 6c 30 01 00 84 |R..PQ...|P..l0...|
|00000570| c0 75 0d 57 57 57 68 0c | 01 17 00 e9 06 ff ff ff |.u.WWWh.|........|
|00000580| 33 c0 5f 5e c3 cc cc cc | cc cc 8b ff 55 8b ec a1 |3._^....|....U...|
|00000590| 7c 40 01 00 85 c0 b9 4e | e6 40 bb 74 04 3b c1 75 ||@.....N|.@.t.;.u|
|000005a0| 1a a1 0c 31 01 00 8b 00 | 35 7c 40 01 00 a3 7c 40 |...1....|5|@...|@|
|000005b0| 01 00 75 07 8b c1 a3 7c | 40 01 00 f7 d0 a3 80 40 |..u....||@......@|
|000005c0| 01 00 5d e9 1a fd ff ff | 4e 00 70 00 66 00 73 00 |..].....|N.p.f.s.|
|000005d0| 5c 00 41 00 6c 00 69 00 | 61 00 73 00 65 00 73 00 |\.A.l.i.|a.s.e.s.|
|000005e0| 00 00 5c 00 44 00 65 00 | 76 00 69 00 63 00 65 00 |..\.D.e.|v.i.c.e.|
|000005f0| 5c 00 4e 00 61 00 6d 00 | 65 00 64 00 50 00 69 00 |\.N.a.m.|e.d.P.i.|
|00000600| 70 00 65 00 00 00 cc cc | 50 b6 00 00 00 00 00 00 |p.e.....|P.......|
|00000610| 00 00 00 00 4e bd 00 00 | 0c 30 00 00 44 b6 00 00 |....N...|.0..D...|
|00000620| 00 00 00 00 00 00 00 00 | 90 bd 00 00 00 30 00 00 |........|.....0..|
|00000630| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000640| 00 00 00 00 68 bd 00 00 | 7c bd 00 00 00 00 00 00 |....h...||.......|
|00000650| a0 b7 00 00 ac b7 00 00 | c4 b7 00 00 de b7 00 00 |........|........|
|00000660| fc b7 00 00 14 b8 00 00 | 2a b8 00 00 42 b8 00 00 |........|*...B...|
|00000670| 5a b8 00 00 7c b8 00 00 | 96 b8 00 00 b2 b8 00 00 |Z...|...|........|
|00000680| ce b8 00 00 d8 b8 00 00 | ec b8 00 00 04 b9 00 00 |........|........|
|00000690| 1c b9 00 00 30 b9 00 00 | 4a b9 00 00 64 b9 00 00 |....0...|J...d...|
|000006a0| 78 b9 00 00 8e b9 00 00 | 9e b9 00 00 be b9 00 00 |x.......|........|
|000006b0| d6 b9 00 00 f0 b9 00 00 | 0a ba 00 00 1e ba 00 00 |........|........|
|000006c0| 3c ba 00 00 50 ba 00 00 | 5c ba 00 00 66 ba 00 00 |<...P...|\...f...|
|000006d0| 7e ba 00 00 8c b7 00 00 | a8 ba 00 00 be ba 00 00 |~.......|........|
|000006e0| d8 ba 00 00 e8 ba 00 00 | 02 bb 00 00 0e bb 00 00 |........|........|
|000006f0| 1a bb 00 00 2a bb 00 00 | 3a bb 00 00 50 bb 00 00 |....*...|:...P...|
|00000700| 62 bb 00 00 7a bb 00 00 | 92 bb 00 00 a4 bb 00 00 |b...z...|........|
|00000710| bc bb 00 00 d6 bb 00 00 | f8 bb 00 00 14 bc 00 00 |........|........|
|00000720| 22 bc 00 00 3a bc 00 00 | 5a bc 00 00 7a bc 00 00 |"...:...|Z...z...|
|00000730| 98 bc 00 00 b6 bc 00 00 | ce bc 00 00 de bc 00 00 |........|........|
|00000740| ec bc 00 00 02 bd 00 00 | 1a bd 00 00 2e bd 00 00 |........|........|
|00000750| 40 bd 00 00 5c bd 00 00 | 82 b7 00 00 90 ba 00 00 |@...\...|........|
|00000760| 68 b7 00 00 00 00 00 00 | fa 05 52 74 6c 55 70 63 |h.......|..RtlUpc|
|00000770| 61 73 65 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |aseUnico|deString|
|00000780| 00 00 7e 07 6d 65 6d 63 | 70 79 00 00 85 00 45 78 |..~.memc|py....Ex|
|00000790| 46 72 65 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |FreePool|WithTag.|
|000007a0| 6c 07 5f 77 63 73 69 63 | 6d 70 00 00 6d 00 45 78 |l._wcsic|mp..m.Ex|
|000007b0| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|000007c0| 54 61 67 00 b9 05 52 74 | 6c 51 75 65 72 79 52 65 |Tag...Rt|lQueryRe|
|000007d0| 67 69 73 74 72 79 56 61 | 6c 75 65 73 00 00 d5 00 |gistryVa|lues....|
|000007e0| 45 78 66 41 63 71 75 69 | 72 65 50 75 73 68 4c 6f |ExfAcqui|rePushLo|
|000007f0| 63 6b 45 78 63 6c 75 73 | 69 76 65 00 e2 00 45 78 |ckExclus|ive...Ex|
|00000800| 66 54 72 79 54 6f 57 61 | 6b 65 50 75 73 68 4c 6f |fTryToWa|kePushLo|
|00000810| 63 6b 00 00 96 02 49 6f | 66 43 6f 6d 70 6c 65 74 |ck....Io|fComplet|
|00000820| 65 52 65 71 75 65 73 74 | 00 00 f0 02 4b 65 4c 65 |eRequest|....KeLe|
|00000830| 61 76 65 43 72 69 74 69 | 63 61 6c 52 65 67 69 6f |aveCriti|calRegio|
|00000840| 6e 00 bd 02 4b 65 45 6e | 74 65 72 43 72 69 74 69 |n...KeEn|terCriti|
|00000850| 63 61 6c 52 65 67 69 6f | 6e 00 2a 04 4f 62 44 65 |calRegio|n.*.ObDe|
|00000860| 72 65 66 65 72 65 6e 63 | 65 53 65 63 75 72 69 74 |referenc|eSecurit|
|00000870| 79 44 65 73 63 72 69 70 | 74 6f 72 00 c0 05 52 74 |yDescrip|tor...Rt|
|00000880| 6c 52 65 6d 6f 76 65 55 | 6e 69 63 6f 64 65 50 72 |lRemoveU|nicodePr|
|00000890| 65 66 69 78 00 00 d6 00 | 45 78 66 41 63 71 75 69 |efix....|ExfAcqui|
|000008a0| 72 65 50 75 73 68 4c 6f | 63 6b 53 68 61 72 65 64 |rePushLo|ckShared|
|000008b0| 00 00 e0 00 45 78 66 52 | 65 6c 65 61 73 65 50 75 |....ExfR|eleasePu|
|000008c0| 73 68 4c 6f 63 6b 53 68 | 61 72 65 64 00 00 8c 07 |shLockSh|ared....|
|000008d0| 73 74 72 6e 63 6d 70 00 | 74 02 49 6f 54 68 72 65 |strncmp.|t.IoThre|
|000008e0| 61 64 54 6f 50 72 6f 63 | 65 73 73 00 97 04 50 73 |adToProc|ess...Ps|
|000008f0| 47 65 74 54 68 72 65 61 | 64 53 65 73 73 69 6f 6e |GetThrea|dSession|
|00000900| 49 64 00 00 96 04 50 73 | 47 65 74 54 68 72 65 61 |Id....Ps|GetThrea|
|00000910| 64 50 72 6f 63 65 73 73 | 49 64 00 00 ef 04 52 74 |dProcess|Id....Rt|
|00000920| 6c 43 6f 6d 70 61 72 65 | 4d 65 6d 6f 72 79 00 00 |lCompare|Memory..|
|00000930| 55 06 53 65 55 6e 6c 6f | 63 6b 53 75 62 6a 65 63 |U.SeUnlo|ckSubjec|
|00000940| 74 43 6f 6e 74 65 78 74 | 00 00 37 06 53 65 4f 70 |tContext|..7.SeOp|
|00000950| 65 6e 4f 62 6a 65 63 74 | 41 75 64 69 74 41 6c 61 |enObject|AuditAla|
|00000960| 72 6d 00 00 30 06 53 65 | 46 72 65 65 50 72 69 76 |rm..0.Se|FreePriv|
|00000970| 69 6c 65 67 65 73 00 00 | 14 06 53 65 41 70 70 65 |ileges..|..SeAppe|
|00000980| 6e 64 50 72 69 76 69 6c | 65 67 65 73 00 00 12 06 |ndPrivil|eges....|
|00000990| 53 65 41 63 63 65 73 73 | 43 68 65 63 6b 00 10 02 |SeAccess|Check...|
|000009a0| 49 6f 47 65 74 46 69 6c | 65 4f 62 6a 65 63 74 47 |IoGetFil|eObjectG|
|000009b0| 65 6e 65 72 69 63 4d 61 | 70 70 69 6e 67 00 35 06 |enericMa|pping.5.|
|000009c0| 53 65 4c 6f 63 6b 53 75 | 62 6a 65 63 74 43 6f 6e |SeLockSu|bjectCon|
|000009d0| 74 65 78 74 00 00 6b 05 | 52 74 6c 49 6e 73 65 72 |text..k.|RtlInser|
|000009e0| 74 55 6e 69 63 6f 64 65 | 50 72 65 66 69 78 00 00 |tUnicode|Prefix..|
|000009f0| 31 04 4f 62 4c 6f 67 53 | 65 63 75 72 69 74 79 44 |1.ObLogS|ecurityD|
|00000a00| 65 73 63 72 69 70 74 6f | 72 00 15 06 53 65 41 73 |escripto|r...SeAs|
|00000a10| 73 69 67 6e 53 65 63 75 | 72 69 74 79 00 00 6c 00 |signSecu|rity..l.|
|00000a20| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|00000a30| 74 68 51 75 6f 74 61 54 | 61 67 00 00 3c 06 53 65 |thQuotaT|ag..<.Se|
|00000a40| 50 72 69 76 69 6c 65 67 | 65 43 68 65 63 6b 00 00 |Privileg|eCheck..|
|00000a50| 2e 06 53 65 45 78 70 6f | 72 74 73 00 80 07 6d 65 |..SeExpo|rts...me|
|00000a60| 6d 73 65 74 00 00 8e 04 | 50 73 47 65 74 50 72 6f |mset....|PsGetPro|
|00000a70| 63 65 73 73 53 65 73 73 | 69 6f 6e 49 64 00 86 04 |cessSess|ionId...|
|00000a80| 50 73 47 65 74 50 72 6f | 63 65 73 73 49 64 00 00 |PsGetPro|cessId..|
|00000a90| 17 02 49 6f 47 65 74 52 | 65 71 75 65 73 74 6f 72 |..IoGetR|equestor|
|00000aa0| 50 72 6f 63 65 73 73 00 | c8 02 4b 65 47 65 74 43 |Process.|..KeGetC|
|00000ab0| 75 72 72 65 6e 74 54 68 | 72 65 61 64 00 00 45 02 |urrentTh|read..E.|
|00000ac0| 49 6f 52 65 6c 65 61 73 | 65 43 61 6e 63 65 6c 53 |IoReleas|eCancelS|
|00000ad0| 70 69 6e 4c 6f 63 6b 00 | b3 02 4b 65 42 75 67 43 |pinLock.|..KeBugC|
|00000ae0| 68 65 63 6b 45 78 00 00 | 3c 01 46 73 52 74 6c 49 |heckEx..|<.FsRtlI|
|00000af0| 73 4e 61 6d 65 49 6e 45 | 78 70 72 65 73 73 69 6f |sNameInE|xpressio|
|00000b00| 6e 00 60 07 5f 73 74 72 | 69 63 6d 70 00 00 fa 01 |n.`._str|icmp....|
|00000b10| 49 6f 46 72 65 65 49 72 | 70 00 ae 01 49 6f 41 6c |IoFreeIr|p...IoAl|
|00000b20| 6c 6f 63 61 74 65 49 72 | 70 00 61 04 50 72 6f 62 |locateIr|p.a.Prob|
|00000b30| 65 46 6f 72 57 72 69 74 | 65 00 c1 03 4d 6d 55 73 |eForWrit|e...MmUs|
|00000b40| 65 72 50 72 6f 62 65 41 | 64 64 72 65 73 73 00 00 |erProbeA|ddress..|
|00000b50| e6 01 49 6f 44 65 6c 65 | 74 65 44 65 76 69 63 65 |..IoDele|teDevice|
|00000b60| 00 00 e8 01 49 6f 44 65 | 6c 65 74 65 53 79 6d 62 |....IoDe|leteSymb|
|00000b70| 6f 6c 69 63 4c 69 6e 6b | 00 00 5f 05 52 74 6c 49 |olicLink|.._.RtlI|
|00000b80| 6e 69 74 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |nitUnico|deString|
|00000b90| 00 00 d1 01 49 6f 43 72 | 65 61 74 65 44 65 76 69 |....IoCr|eateDevi|
|00000ba0| 63 65 00 00 39 05 52 74 | 6c 46 69 6e 64 55 6e 69 |ce..9.Rt|lFindUni|
|00000bb0| 63 6f 64 65 50 72 65 66 | 69 78 00 00 27 06 53 65 |codePref|ix..'.Se|
|00000bc0| 43 72 65 61 74 65 43 6c | 69 65 6e 74 53 65 63 75 |CreateCl|ientSecu|
|00000bd0| 72 69 74 79 00 00 6a 04 | 50 73 44 65 72 65 66 65 |rity..j.|PsDerefe|
|00000be0| 72 65 6e 63 65 49 6d 70 | 65 72 73 6f 6e 61 74 69 |renceImp|ersonati|
|00000bf0| 6f 6e 54 6f 6b 65 6e 00 | 6b 04 50 73 44 65 72 65 |onToken.|k.PsDere|
|00000c00| 66 65 72 65 6e 63 65 50 | 72 69 6d 61 72 79 54 6f |ferenceP|rimaryTo|
|00000c10| 6b 65 6e 00 54 06 53 65 | 54 6f 6b 65 6e 54 79 70 |ken.T.Se|TokenTyp|
|00000c20| 65 00 33 06 53 65 49 6d | 70 65 72 73 6f 6e 61 74 |e.3.SeIm|personat|
|00000c30| 65 43 6c 69 65 6e 74 45 | 78 00 41 06 53 65 51 75 |eClientE|x.A.SeQu|
|00000c40| 65 72 79 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |erySecur|ityDescr|
|00000c50| 69 70 74 6f 72 49 6e 66 | 6f 00 3a 04 4f 62 52 65 |iptorInf|o.:.ObRe|
|00000c60| 66 65 72 65 6e 63 65 53 | 65 63 75 72 69 74 79 44 |ferenceS|ecurityD|
|00000c70| 65 73 63 72 69 70 74 6f | 72 00 4b 06 53 65 53 65 |escripto|r.K.SeSe|
|00000c80| 74 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |tSecurit|yDescrip|
|00000c90| 74 6f 72 49 6e 66 6f 00 | 66 05 52 74 6c 49 6e 69 |torInfo.|f.RtlIni|
|00000ca0| 74 69 61 6c 69 7a 65 55 | 6e 69 63 6f 64 65 50 72 |tializeU|nicodePr|
|00000cb0| 65 66 69 78 00 00 41 04 | 4f 62 66 44 65 72 65 66 |efix..A.|ObfDeref|
|00000cc0| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 b4 02 |erenceOb|ject....|
|00000cd0| 4b 65 43 61 6e 63 65 6c | 54 69 6d 65 72 00 35 03 |KeCancel|Timer.5.|
|00000ce0| 4b 65 53 65 74 54 69 6d | 65 72 00 00 42 04 4f 62 |KeSetTim|er..B.Ob|
|00000cf0| 66 52 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |fReferen|ceObject|
|00000d00| 00 00 f9 05 52 74 6c 55 | 70 63 61 73 65 55 6e 69 |....RtlU|pcaseUni|
|00000d10| 63 6f 64 65 43 68 61 72 | 00 00 e2 02 4b 65 49 6e |codeChar|....KeIn|
|00000d20| 69 74 69 61 6c 69 7a 65 | 54 69 6d 65 72 00 d8 02 |itialize|Timer...|
|00000d30| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 44 70 63 00 |KeInitia|lizeDpc.|
|00000d40| 3f 03 4b 65 54 69 63 6b | 43 6f 75 6e 74 00 6e 74 |?.KeTick|Count.nt|
|00000d50| 6f 73 6b 72 6e 6c 2e 65 | 78 65 00 00 f8 05 52 74 |oskrnl.e|xe....Rt|
|00000d60| 6c 55 6e 77 69 6e 64 00 | 5f 00 4b 66 52 65 6c 65 |lUnwind.|_.KfRele|
|00000d70| 61 73 65 53 70 69 6e 4c | 6f 63 6b 00 5c 00 4b 66 |aseSpinL|ock.\.Kf|
|00000d80| 41 63 71 75 69 72 65 53 | 70 69 6e 4c 6f 63 6b 00 |AcquireS|pinLock.|
|00000d90| 48 41 4c 2e 64 6c 6c 00 | 00 00 00 00 00 00 00 00 |HAL.dll.|........|
|00000da0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000db0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000dc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000dd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000de0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+