home *** CD-ROM | disk | FTP | other *** search
Unknown | 2008-01-19 | 4.0 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 00 8b ff | 55 8b ec 83 ec 2c a1 7c |........|U....,.||
|00000010| 52 02 00 33 c5 89 45 fc | 8b 45 0c 53 56 8b 5d 08 |R..3..E.|.E.SV.].|
|00000020| 57 6a 07 59 be 3a 21 03 | 00 8d 7d e0 f3 a5 89 45 |Wj.Y.:!.|..}....E|
|00000030| dc 33 f6 66 89 35 98 de | 02 00 66 8b 40 02 66 05 |.3.f.5..|..f.@.f.|
|00000040| 02 00 66 a3 9a de 02 00 | 0f b7 c0 68 4e 61 57 6d |..f.....|...hNaWm|
|00000050| 50 6a 01 ff 15 e4 41 02 | 00 3b c6 a3 9c de 02 00 |Pj....A.|.;......|
|00000060| 74 7e ff 75 dc 68 98 de | 02 00 ff 15 9c 41 02 00 |t~.u.h..|.....A..|
|00000070| 8d 45 e0 50 8d 45 d4 50 | ff 15 c8 41 02 00 68 60 |.E.P.E.P|...A..h`|
|00000080| 54 02 00 56 68 80 43 02 | 00 56 68 00 01 00 00 6a |T..Vh.C.|.Vh....j|
|00000090| 12 8d 45 d4 50 56 53 e8 | 0b d1 ff ff 3b c6 7c 45 |..E.PVS.|....;.|E|
|000000a0| 89 35 dc de 02 00 89 35 | d8 de 02 00 89 35 d4 de |.5.....5|.....5..|
|000000b0| 02 00 6a 1b 59 b8 2a 1d | 01 00 c7 43 34 34 2d 01 |..j.Y.*.|...C44-.|
|000000c0| 00 c7 43 28 00 50 02 00 | 89 73 30 8d 7b 38 f3 ab |..C(.P..|.s0.{8..|
|000000d0| 8d 45 d4 50 e8 2d cf ff | ff e8 04 09 fe ff eb 05 |.E.P.-..|........|
|000000e0| b8 17 00 00 c0 8b 4d fc | 5f 5e 33 cd 5b e8 39 f2 |......M.|_^3.[.9.|
|000000f0| fe ff c9 c2 08 00 cc cc | cc cc cc 8b ff 55 8b ec |........|.....U..|
|00000100| a1 7c 52 02 00 85 c0 b9 | 4e e6 40 bb 74 04 3b c1 |.|R.....|N.@.t.;.|
|00000110| 75 1a a1 94 41 02 00 8b | 00 35 7c 52 02 00 a3 7c |u...A...|.5|R...||
|00000120| 52 02 00 75 07 8b c1 a3 | 7c 52 02 00 f7 d0 a3 80 |R..u....||R......|
|00000130| 52 02 00 5d e9 cd fe ff | ff cc 5c 00 44 00 65 00 |R..]....|..\.D.e.|
|00000140| 76 00 69 00 63 00 65 00 | 5c 00 49 00 50 00 4e 00 |v.i.c.e.|\.I.P.N.|
|00000150| 41 00 54 00 00 00 cc cc | 78 22 02 00 00 00 00 00 |A.T.....|x"......|
|00000160| 00 00 00 00 e0 28 02 00 | 94 40 01 00 e4 21 02 00 |.....(..|.@...!..|
|00000170| 00 00 00 00 00 00 00 00 | 3e 29 02 00 00 40 01 00 |........|>)...@..|
|00000180| 30 22 02 00 00 00 00 00 | 00 00 00 00 70 29 02 00 |0"......|....p)..|
|00000190| 4c 40 01 00 08 22 02 00 | 00 00 00 00 00 00 00 00 |L@..."..|........|
|000001a0| 06 2d 02 00 24 40 01 00 | fc 21 02 00 00 00 00 00 |.-..$@..|.!......|
|000001b0| 00 00 00 00 50 2d 02 00 | 18 40 01 00 3c 22 02 00 |....P-..|.@..<"..|
|000001c0| 00 00 00 00 00 00 00 00 | e2 2e 02 00 58 40 01 00 |........|....X@..|
|000001d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001e0| 00 00 00 00 0e 29 02 00 | 22 29 02 00 30 29 02 00 |.....)..|")..0)..|
|000001f0| f0 2b 02 00 fa 28 02 00 | 00 00 00 00 30 2d 02 00 |.+...(..|....0-..|
|00000200| 10 2d 02 00 00 00 00 00 | 6a 2c 02 00 8a 2c 02 00 |.-......|j,...,..|
|00000210| b0 2c 02 00 c4 2c 02 00 | 1e 2c 02 00 08 2c 02 00 |.,...,..|.,...,..|
|00000220| 38 2c 02 00 5a 2c 02 00 | d8 2c 02 00 00 00 00 00 |8,..Z,..|.,......|
|00000230| 46 29 02 00 5a 29 02 00 | 00 00 00 00 e6 2d 02 00 |F)..Z)..|.....-..|
|00000240| aa 2d 02 00 1e 2e 02 00 | 32 2e 02 00 5a 2e 02 00 |.-......|2...Z...|
|00000250| 80 2d 02 00 00 2e 02 00 | c8 2d 02 00 5a 2d 02 00 |.-......|.-..Z-..|
|00000260| 74 2e 02 00 86 2e 02 00 | a0 2e 02 00 b8 2e 02 00 |t.......|........|
|00000270| ca 2e 02 00 00 00 00 00 | e4 26 02 00 fe 26 02 00 |........|.&...&..|
|00000280| 0e 27 02 00 1c 27 02 00 | 30 27 02 00 42 27 02 00 |.'...'..|0'..B'..|
|00000290| 54 27 02 00 66 27 02 00 | 7c 27 02 00 90 27 02 00 |T'..f'..||'...'..|
|000002a0| ac 27 02 00 c4 27 02 00 | d4 27 02 00 e8 27 02 00 |.'...'..|.'...'..|
|000002b0| f8 27 02 00 0c 28 02 00 | 20 28 02 00 30 28 02 00 |.'...(..| (..0(..|
|000002c0| 44 28 02 00 56 28 02 00 | 6e 28 02 00 84 28 02 00 |D(..V(..|n(...(..|
|000002d0| a0 28 02 00 b0 28 02 00 | d0 28 02 00 ca 26 02 00 |.(...(..|.(...&..|
|000002e0| bc 26 02 00 a0 26 02 00 | 8c 26 02 00 7a 26 02 00 |.&...&..|.&..z&..|
|000002f0| 70 26 02 00 66 26 02 00 | 5a 26 02 00 4e 26 02 00 |p&..f&..|Z&..N&..|
|00000300| 7c 29 02 00 98 29 02 00 | ae 29 02 00 c6 29 02 00 ||)...)..|.)...)..|
|00000310| dc 29 02 00 ee 29 02 00 | 0e 2a 02 00 2e 2a 02 00 |.)...)..|.*...*..|
|00000320| 4e 2a 02 00 6e 2a 02 00 | 7c 2a 02 00 9a 2a 02 00 |N*..n*..||*...*..|
|00000330| b8 2a 02 00 c4 2a 02 00 | de 2a 02 00 ea 2a 02 00 |.*...*..|.*...*..|
|00000340| 04 2b 02 00 14 2b 02 00 | 1e 2b 02 00 3c 2b 02 00 |.+...+..|.+..<+..|
|00000350| 5c 2b 02 00 7a 2b 02 00 | 88 2b 02 00 98 2b 02 00 |\+..z+..|.+...+..|
|00000360| b0 2b 02 00 d0 2b 02 00 | 2e 26 02 00 24 26 02 00 |.+...+..|.&..$&..|
|00000370| 18 26 02 00 fa 25 02 00 | ec 25 02 00 ca 25 02 00 |.&...%..|.%...%..|
|00000380| b2 25 02 00 a0 25 02 00 | 94 25 02 00 82 25 02 00 |.%...%..|.%...%..|
|00000390| 66 25 02 00 5c 25 02 00 | 44 25 02 00 30 25 02 00 |f%..\%..|D%..0%..|
|000003a0| 14 25 02 00 f8 24 02 00 | e0 24 02 00 c8 24 02 00 |.%...$..|.$...$..|
|000003b0| b0 24 02 00 a6 24 02 00 | 92 24 02 00 7c 24 02 00 |.$...$..|.$..|$..|
|000003c0| 66 24 02 00 4e 24 02 00 | 36 24 02 00 22 24 02 00 |f$..N$..|6$.."$..|
|000003d0| 02 24 02 00 ee 28 02 00 | e0 23 02 00 00 00 00 00 |.$...(..|.#......|
|000003e0| 4a 03 4b 65 66 52 65 6c | 65 61 73 65 53 70 69 6e |J.KefRel|easeSpin|
|000003f0| 4c 6f 63 6b 46 72 6f 6d | 44 70 63 4c 65 76 65 6c |LockFrom|DpcLevel|
|00000400| 00 00 49 03 4b 65 66 41 | 63 71 75 69 72 65 53 70 |..I.KefA|cquireSp|
|00000410| 69 6e 4c 6f 63 6b 41 74 | 44 70 63 4c 65 76 65 6c |inLockAt|DpcLevel|
|00000420| 00 00 85 00 45 78 46 72 | 65 65 50 6f 6f 6c 57 69 |....ExFr|eePoolWi|
|00000430| 74 68 54 61 67 00 6d 00 | 45 78 41 6c 6c 6f 63 61 |thTag.m.|ExAlloca|
|00000440| 74 65 50 6f 6f 6c 57 69 | 74 68 54 61 67 00 71 04 |tePoolWi|thTag.q.|
|00000450| 50 73 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |PsGetCur|rentProc|
|00000460| 65 73 73 49 64 00 96 02 | 49 6f 66 43 6f 6d 70 6c |essId...|IofCompl|
|00000470| 65 74 65 52 65 71 75 65 | 73 74 00 00 c1 03 4d 6d |eteReque|st....Mm|
|00000480| 55 73 65 72 50 72 6f 62 | 65 41 64 64 72 65 73 73 |UserProb|eAddress|
|00000490| 00 00 8b 00 45 78 47 65 | 74 50 72 65 76 69 6f 75 |....ExGe|tPreviou|
|000004a0| 73 4d 6f 64 65 00 7e 07 | 6d 65 6d 63 70 79 00 00 |sMode.~.|memcpy..|
|000004b0| db 01 49 6f 43 72 65 61 | 74 65 53 79 6d 62 6f 6c |..IoCrea|teSymbol|
|000004c0| 69 63 4c 69 6e 6b 00 00 | 5f 05 52 74 6c 49 6e 69 |icLink..|_.RtlIni|
|000004d0| 74 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |tUnicode|String..|
|000004e0| e8 01 49 6f 44 65 6c 65 | 74 65 53 79 6d 62 6f 6c |..IoDele|teSymbol|
|000004f0| 69 63 4c 69 6e 6b 00 00 | a4 01 49 6e 74 65 72 6c |icLink..|..Interl|
|00000500| 6f 63 6b 65 64 50 6f 70 | 45 6e 74 72 79 53 4c 69 |ockedPop|EntrySLi|
|00000510| 73 74 00 00 a5 01 49 6e | 74 65 72 6c 6f 63 6b 65 |st....In|terlocke|
|00000520| 64 50 75 73 68 45 6e 74 | 72 79 53 4c 69 73 74 00 |dPushEnt|rySList.|
|00000530| d9 02 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 45 76 |..KeInit|ializeEv|
|00000540| 65 6e 74 00 48 03 4b 65 | 57 61 69 74 46 6f 72 53 |ent.H.Ke|WaitForS|
|00000550| 69 6e 67 6c 65 4f 62 6a | 65 63 74 00 ad 06 5a 77 |ingleObj|ect...Zw|
|00000560| 43 6c 6f 73 65 00 f0 05 | 52 74 6c 55 6e 69 63 6f |Close...|RtlUnico|
|00000570| 64 65 53 74 72 69 6e 67 | 54 6f 49 6e 74 65 67 65 |deString|ToIntege|
|00000580| 72 00 13 07 5a 77 51 75 | 65 72 79 56 61 6c 75 65 |r...ZwQu|eryValue|
|00000590| 4b 65 79 00 e6 06 5a 77 | 4f 70 65 6e 4b 65 79 00 |Key...Zw|OpenKey.|
|000005a0| e6 01 49 6f 44 65 6c 65 | 74 65 44 65 76 69 63 65 |..IoDele|teDevice|
|000005b0| 00 00 ff 04 52 74 6c 43 | 6f 70 79 55 6e 69 63 6f |....RtlC|opyUnico|
|000005c0| 64 65 53 74 72 69 6e 67 | 00 00 8e 00 45 78 49 6e |deString|....ExIn|
|000005d0| 69 74 69 61 6c 69 7a 65 | 4e 50 61 67 65 64 4c 6f |itialize|NPagedLo|
|000005e0| 6f 6b 61 73 69 64 65 4c | 69 73 74 00 3f 03 4b 65 |okasideL|ist.?.Ke|
|000005f0| 54 69 63 6b 43 6f 75 6e | 74 00 72 00 45 78 44 65 |TickCoun|t.r.ExDe|
|00000600| 6c 65 74 65 4e 50 61 67 | 65 64 4c 6f 6f 6b 61 73 |leteNPag|edLookas|
|00000610| 69 64 65 4c 69 73 74 00 | 55 07 5f 61 75 6c 6c 73 |ideList.|U._aulls|
|00000620| 68 72 00 00 80 07 6d 65 | 6d 73 65 74 00 00 6e 00 |hr....me|mset..n.|
|00000630| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|00000640| 74 68 54 61 67 50 72 69 | 6f 72 69 74 79 00 d6 05 |thTagPri|ority...|
|00000650| 52 74 6c 53 70 6c 61 79 | 00 00 0b 05 52 74 6c 44 |RtlSplay|....RtlD|
|00000660| 65 6c 65 74 65 00 49 07 | 5f 61 6c 6c 64 69 76 00 |elete.I.|_alldiv.|
|00000670| 4b 07 5f 61 6c 6c 6d 75 | 6c 00 8e 02 49 6f 57 4d |K._allmu|l...IoWM|
|00000680| 49 57 72 69 74 65 45 76 | 65 6e 74 00 fe 02 4b 65 |IWriteEv|ent...Ke|
|00000690| 51 75 65 72 79 53 79 73 | 74 65 6d 54 69 6d 65 00 |QuerySys|temTime.|
|000006a0| 89 02 49 6f 57 4d 49 52 | 65 67 69 73 74 72 61 74 |..IoWMIR|egistrat|
|000006b0| 69 6f 6e 43 6f 6e 74 72 | 6f 6c 00 00 2a 03 4b 65 |ionContr|ol..*.Ke|
|000006c0| 53 65 74 45 76 65 6e 74 | 00 00 45 02 49 6f 52 65 |SetEvent|..E.IoRe|
|000006d0| 6c 65 61 73 65 43 61 6e | 63 65 6c 53 70 69 6e 4c |leaseCan|celSpinL|
|000006e0| 6f 63 6b 00 a6 01 49 6f | 41 63 71 75 69 72 65 43 |ock...Io|AcquireC|
|000006f0| 61 6e 63 65 6c 53 70 69 | 6e 4c 6f 63 6b 00 eb 04 |ancelSpi|nLock...|
|00000700| 52 74 6c 43 6c 65 61 72 | 42 69 74 73 00 00 cc 05 |RtlClear|Bits....|
|00000710| 52 74 6c 53 65 74 42 69 | 74 73 00 00 2b 05 52 74 |RtlSetBi|ts..+.Rt|
|00000720| 6c 46 69 6e 64 43 6c 65 | 61 72 42 69 74 73 00 00 |lFindCle|arBits..|
|00000730| e9 04 52 74 6c 43 6c 65 | 61 72 41 6c 6c 42 69 74 |..RtlCle|arAllBit|
|00000740| 73 00 fe 01 49 6f 46 72 | 65 65 57 6f 72 6b 49 74 |s...IoFr|eeWorkIt|
|00000750| 65 6d 00 00 34 02 49 6f | 51 75 65 75 65 57 6f 72 |em..4.Io|QueueWor|
|00000760| 6b 49 74 65 6d 00 b2 01 | 49 6f 41 6c 6c 6f 63 61 |kItem...|IoAlloca|
|00000770| 74 65 57 6f 72 6b 49 74 | 65 6d 00 00 5d 02 49 6f |teWorkIt|em..].Io|
|00000780| 53 65 74 49 6f 43 6f 6d | 70 6c 65 74 69 6f 6e 00 |SetIoCom|pletion.|
|00000790| 37 04 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |7.ObRefe|renceObj|
|000007a0| 65 63 74 42 79 48 61 6e | 64 6c 65 00 41 04 4f 62 |ectByHan|dle.A.Ob|
|000007b0| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|000007c0| 63 74 00 00 b6 02 4b 65 | 43 6c 65 61 72 45 76 65 |ct....Ke|ClearEve|
|000007d0| 6e 74 00 00 7e 00 45 78 | 45 76 65 6e 74 4f 62 6a |nt..~.Ex|EventObj|
|000007e0| 65 63 74 54 79 70 65 00 | b4 02 4b 65 43 61 6e 63 |ectType.|..KeCanc|
|000007f0| 65 6c 54 69 6d 65 72 00 | c5 02 4b 65 46 6c 75 73 |elTimer.|..KeFlus|
|00000800| 68 51 75 65 75 65 64 44 | 70 63 73 00 e9 02 4b 65 |hQueuedD|pcs...Ke|
|00000810| 49 6e 73 65 72 74 51 75 | 65 75 65 44 70 63 00 00 |InsertQu|eueDpc..|
|00000820| 36 03 4b 65 53 65 74 54 | 69 6d 65 72 45 78 00 00 |6.KeSetT|imerEx..|
|00000830| e2 02 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 54 69 |..KeInit|ializeTi|
|00000840| 6d 65 72 00 d8 02 4b 65 | 49 6e 69 74 69 61 6c 69 |mer...Ke|Initiali|
|00000850| 7a 65 44 70 63 00 00 03 | 4b 65 51 75 65 72 79 54 |zeDpc...|KeQueryT|
|00000860| 69 6d 65 49 6e 63 72 65 | 6d 65 6e 74 00 00 42 04 |imeIncre|ment..B.|
|00000870| 4f 62 66 52 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |ObfRefer|enceObje|
|00000880| 63 74 00 00 09 02 49 6f | 47 65 74 44 65 76 69 63 |ct....Io|GetDevic|
|00000890| 65 4f 62 6a 65 63 74 50 | 6f 69 6e 74 65 72 00 00 |eObjectP|ointer..|
|000008a0| 95 02 49 6f 66 43 61 6c | 6c 44 72 69 76 65 72 00 |..IofCal|lDriver.|
|000008b0| bb 01 49 6f 42 75 69 6c | 64 44 65 76 69 63 65 49 |..IoBuil|dDeviceI|
|000008c0| 6f 43 6f 6e 74 72 6f 6c | 52 65 71 75 65 73 74 00 |oControl|Request.|
|000008d0| b3 02 4b 65 42 75 67 43 | 68 65 63 6b 45 78 00 00 |..KeBugC|heckEx..|
|000008e0| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 f8 05 |ntoskrnl|.exe....|
|000008f0| 52 74 6c 55 6e 77 69 6e | 64 00 5f 00 4b 66 52 65 |RtlUnwin|d._.KfRe|
|00000900| 6c 65 61 73 65 53 70 69 | 6e 4c 6f 63 6b 00 5c 00 |leaseSpi|nLock.\.|
|00000910| 4b 66 41 63 71 75 69 72 | 65 53 70 69 6e 4c 6f 63 |KfAcquir|eSpinLoc|
|00000920| 6b 00 5d 00 4b 66 4c 6f | 77 65 72 49 72 71 6c 00 |k.].KfLo|werIrql.|
|00000930| 5e 00 4b 66 52 61 69 73 | 65 49 72 71 6c 00 48 41 |^.KfRais|eIrql.HA|
|00000940| 4c 2e 64 6c 6c 00 02 00 | 57 6d 69 53 79 73 74 65 |L.dll...|WmiSyste|
|00000950| 6d 43 6f 6e 74 72 6f 6c | 00 00 00 00 57 6d 69 43 |mControl|....WmiC|
|00000960| 6f 6d 70 6c 65 74 65 52 | 65 71 75 65 73 74 00 00 |ompleteR|equest..|
|00000970| 57 4d 49 4c 49 42 2e 53 | 59 53 00 00 8a 03 4d 6d |WMILIB.S|YS....Mm|
|00000980| 47 65 74 53 79 73 74 65 | 6d 52 6f 75 74 69 6e 65 |GetSyste|mRoutine|
|00000990| 41 64 64 72 65 73 73 00 | 34 07 5a 77 53 65 74 53 |Address.|4.ZwSetS|
|000009a0| 65 63 75 72 69 74 79 4f | 62 6a 65 63 74 00 34 04 |ecurityO|bject.4.|
|000009b0| 4f 62 4f 70 65 6e 4f 62 | 6a 65 63 74 42 79 50 6f |ObOpenOb|jectByPo|
|000009c0| 69 6e 74 65 72 00 ec 01 | 49 6f 44 65 76 69 63 65 |inter...|IoDevice|
|000009d0| 4f 62 6a 65 63 74 54 79 | 70 65 00 00 d1 01 49 6f |ObjectTy|pe....Io|
|000009e0| 43 72 65 61 74 65 44 65 | 76 69 63 65 00 00 46 05 |CreateDe|vice..F.|
|000009f0| 52 74 6c 47 65 74 44 61 | 63 6c 53 65 63 75 72 69 |RtlGetDa|clSecuri|
|00000a00| 74 79 44 65 73 63 72 69 | 70 74 6f 72 00 00 51 05 |tyDescri|ptor..Q.|
|00000a10| 52 74 6c 47 65 74 53 61 | 63 6c 53 65 63 75 72 69 |RtlGetSa|clSecuri|
|00000a20| 74 79 44 65 73 63 72 69 | 70 74 6f 72 00 00 4b 05 |tyDescri|ptor..K.|
|00000a30| 52 74 6c 47 65 74 47 72 | 6f 75 70 53 65 63 75 72 |RtlGetGr|oupSecur|
|00000a40| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 4f 05 |ityDescr|iptor.O.|
|00000a50| 52 74 6c 47 65 74 4f 77 | 6e 65 72 53 65 63 75 72 |RtlGetOw|nerSecur|
|00000a60| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 5f 07 |ityDescr|iptor._.|
|00000a70| 5f 73 6e 77 70 72 69 6e | 74 66 00 00 94 05 52 74 |_snwprin|tf....Rt|
|00000a80| 6c 4c 65 6e 67 74 68 53 | 65 63 75 72 69 74 79 44 |lLengthS|ecurityD|
|00000a90| 65 73 63 72 69 70 74 6f | 72 00 1f 06 53 65 43 61 |escripto|r...SeCa|
|00000aa0| 70 74 75 72 65 53 65 63 | 75 72 69 74 79 44 65 73 |ptureSec|urityDes|
|00000ab0| 63 72 69 70 74 6f 72 00 | 2e 06 53 65 45 78 70 6f |criptor.|..SeExpo|
|00000ac0| 72 74 73 00 29 02 49 6f | 49 73 57 64 6d 56 65 72 |rts.).Io|IsWdmVer|
|00000ad0| 73 69 6f 6e 41 76 61 69 | 6c 61 62 6c 65 00 6e 07 |sionAvai|lable.n.|
|00000ae0| 5f 77 63 73 6e 69 63 6d | 70 00 d3 04 52 74 6c 41 |_wcsnicm|p...RtlA|
|00000af0| 64 64 41 63 63 65 73 73 | 41 6c 6c 6f 77 65 64 41 |ddAccess|AllowedA|
|00000b00| 63 65 00 00 95 05 52 74 | 6c 4c 65 6e 67 74 68 53 |ce....Rt|lLengthS|
|00000b10| 69 64 00 00 9a 07 77 63 | 73 63 68 72 00 00 d2 04 |id....wc|schr....|
|00000b20| 52 74 6c 41 62 73 6f 6c | 75 74 65 54 6f 53 65 6c |RtlAbsol|uteToSel|
|00000b30| 66 52 65 6c 61 74 69 76 | 65 53 44 00 cd 05 52 74 |fRelativ|eSD...Rt|
|00000b40| 6c 53 65 74 44 61 63 6c | 53 65 63 75 72 69 74 79 |lSetDacl|Security|
|00000b50| 44 65 73 63 72 69 70 74 | 6f 72 00 00 04 05 52 74 |Descript|or....Rt|
|00000b60| 6c 43 72 65 61 74 65 53 | 65 63 75 72 69 74 79 44 |lCreateS|ecurityD|
|00000b70| 65 73 63 72 69 70 74 6f | 72 00 b8 06 5a 77 43 72 |escripto|r...ZwCr|
|00000b80| 65 61 74 65 4b 65 79 00 | 38 07 5a 77 53 65 74 56 |eateKey.|8.ZwSetV|
|00000b90| 61 6c 75 65 4b 65 79 00 | 40 05 52 74 6c 46 72 65 |alueKey.|@.RtlFre|
|00000ba0| 65 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |eUnicode|String..|
|00000bb0| 9b 03 4d 6d 4d 61 70 4c | 6f 63 6b 65 64 50 61 67 |..MmMapL|ockedPag|
|00000bc0| 65 73 53 70 65 63 69 66 | 79 43 61 63 68 65 00 00 |esSpecif|yCache..|
|00000bd0| fb 02 4b 65 51 75 65 72 | 79 4d 61 78 69 6d 75 6d |..KeQuer|yMaximum|
|00000be0| 50 72 6f 63 65 73 73 6f | 72 43 6f 75 6e 74 00 00 |Processo|rCount..|
|00000bf0| 54 00 4b 65 52 61 69 73 | 65 49 72 71 6c 54 6f 44 |T.KeRais|eIrqlToD|
|00000c00| 70 63 4c 65 76 65 6c 00 | d1 00 4e 6d 72 44 65 72 |pcLevel.|..NmrDer|
|00000c10| 65 67 69 73 74 65 72 43 | 6c 69 65 6e 74 00 cf 00 |egisterC|lient...|
|00000c20| 4e 6d 72 43 6c 69 65 6e | 74 41 74 74 61 63 68 50 |NmrClien|tAttachP|
|00000c30| 72 6f 76 69 64 65 72 00 | d0 00 4e 6d 72 43 6c 69 |rovider.|..NmrCli|
|00000c40| 65 6e 74 44 65 74 61 63 | 68 50 72 6f 76 69 64 65 |entDetac|hProvide|
|00000c50| 72 43 6f 6d 70 6c 65 74 | 65 00 2a 00 47 65 74 42 |rComplet|e.*.GetB|
|00000c60| 65 73 74 52 6f 75 74 65 | 32 00 af 00 4e 65 74 69 |estRoute|2...Neti|
|00000c70| 6f 44 65 72 65 66 65 72 | 65 6e 63 65 4e 65 74 42 |oDerefer|enceNetB|
|00000c80| 75 66 66 65 72 4c 69 73 | 74 00 d6 00 4e 6d 72 57 |ufferLis|t...NmrW|
|00000c90| 61 69 74 46 6f 72 43 6c | 69 65 6e 74 44 65 72 65 |aitForCl|ientDere|
|00000ca0| 67 69 73 74 65 72 43 6f | 6d 70 6c 65 74 65 00 00 |gisterCo|mplete..|
|00000cb0| d4 00 4e 6d 72 52 65 67 | 69 73 74 65 72 43 6c 69 |..NmrReg|isterCli|
|00000cc0| 65 6e 74 00 a4 00 4e 65 | 74 69 6f 41 6c 6c 6f 63 |ent...Ne|tioAlloc|
|00000cd0| 61 74 65 4d 64 6c 00 00 | 9b 00 4e 65 74 69 6f 41 |ateMdl..|..NetioA|
|00000ce0| 6c 6c 6f 63 61 74 65 41 | 6e 64 52 65 66 65 72 65 |llocateA|ndRefere|
|00000cf0| 6e 63 65 43 6c 6f 6e 65 | 4e 65 74 42 75 66 66 65 |nceClone|NetBuffe|
|00000d00| 72 4c 69 73 74 00 4e 45 | 54 49 4f 2e 53 59 53 00 |rList.NE|TIO.SYS.|
|00000d10| 89 01 4e 64 69 73 52 65 | 74 72 65 61 74 4e 65 74 |..NdisRe|treatNet|
|00000d20| 42 75 66 66 65 72 44 61 | 74 61 53 74 61 72 74 00 |BufferDa|taStart.|
|00000d30| 07 00 4e 64 69 73 41 64 | 76 61 6e 63 65 4e 65 74 |..NdisAd|vanceNet|
|00000d40| 42 75 66 66 65 72 44 61 | 74 61 53 74 61 72 74 00 |BufferDa|taStart.|
|00000d50| 4e 44 49 53 2e 53 59 53 | 00 00 74 00 46 77 70 73 |NDIS.SYS|..t.Fwps|
|00000d60| 52 65 61 73 73 65 6d 62 | 6c 65 46 6f 72 77 61 72 |Reassemb|leForwar|
|00000d70| 64 46 72 61 67 6d 65 6e | 74 47 72 6f 75 70 30 00 |dFragmen|tGroup0.|
|00000d80| 02 00 46 77 70 69 43 61 | 6c 6c 6f 75 74 52 65 67 |..FwpiCa|lloutReg|
|00000d90| 69 73 74 65 72 41 6e 64 | 41 64 64 57 69 74 68 6f |isterAnd|AddWitho|
|00000da0| 75 74 44 65 76 69 63 65 | 30 00 6f 00 46 77 70 73 |utDevice|0.o.Fwps|
|00000db0| 49 6e 6a 65 63 74 69 6f | 6e 48 61 6e 64 6c 65 43 |Injectio|nHandleC|
|00000dc0| 72 65 61 74 65 30 00 00 | 70 00 46 77 70 73 49 6e |reate0..|p.FwpsIn|
|00000dd0| 6a 65 63 74 69 6f 6e 48 | 61 6e 64 6c 65 44 65 73 |jectionH|andleDes|
|00000de0| 74 72 6f 79 30 00 68 00 | 46 77 70 73 46 72 65 65 |troy0.h.|FwpsFree|
|00000df0| 4e 65 74 42 75 66 66 65 | 72 4c 69 73 74 30 00 00 |NetBuffe|rList0..|
|00000e00| 6c 00 46 77 70 73 49 6e | 6a 65 63 74 4e 65 74 77 |l.FwpsIn|jectNetw|
|00000e10| 6f 72 6b 53 65 6e 64 41 | 73 79 6e 63 30 00 13 00 |orkSendA|sync0...|
|00000e20| 46 77 70 6d 45 6e 67 69 | 6e 65 43 6c 6f 73 65 30 |FwpmEngi|neClose0|
|00000e30| 00 00 03 00 46 77 70 69 | 43 61 6c 6c 6f 75 74 55 |....Fwpi|CalloutU|
|00000e40| 6e 72 65 67 69 73 74 65 | 72 41 6e 64 44 65 6c 65 |nregiste|rAndDele|
|00000e50| 74 65 42 79 4b 65 79 30 | 00 00 20 00 46 77 70 6d |teByKey0|.. .Fwpm|
|00000e60| 46 69 6c 74 65 72 44 65 | 6c 65 74 65 42 79 4b 65 |FilterDe|leteByKe|
|00000e70| 79 30 00 00 16 00 46 77 | 70 6d 45 6e 67 69 6e 65 |y0....Fw|pmEngine|
|00000e80| 4f 70 65 6e 30 00 52 00 | 46 77 70 6d 54 72 61 6e |Open0.R.|FwpmTran|
|00000e90| 73 61 63 74 69 6f 6e 43 | 6f 6d 6d 69 74 30 00 00 |sactionC|ommit0..|
|00000ea0| 50 00 46 77 70 6d 54 72 | 61 6e 73 61 63 74 69 6f |P.FwpmTr|ansactio|
|00000eb0| 6e 41 62 6f 72 74 30 00 | 1d 00 46 77 70 6d 46 69 |nAbort0.|..FwpmFi|
|00000ec0| 6c 74 65 72 41 64 64 30 | 00 00 51 00 46 77 70 6d |lterAdd0|..Q.Fwpm|
|00000ed0| 54 72 61 6e 73 61 63 74 | 69 6f 6e 42 65 67 69 6e |Transact|ionBegin|
|00000ee0| 30 00 66 77 70 6b 63 6c | 6e 74 2e 73 79 73 00 00 |0.fwpkcl|nt.sys..|
|00000ef0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+