home *** CD-ROM | disk | FTP | other *** search
Unknown | 2008-01-19 | 3.0 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 00 8b ff | 55 8b ec 53 8b 5d 08 56 |........|U..S.].V|
|00000010| 57 33 c0 40 a3 70 49 01 | 00 a3 74 49 01 00 b9 bf |W3.@.pI.|..tI....|
|00000020| 0f 00 00 89 0d 78 49 01 | 00 c7 43 0c 70 49 01 00 |.....xI.|..C.pI..|
|00000030| 66 c7 43 14 0c 00 be 6c | 31 01 00 bf 80 49 01 00 |f.C....l|1....I..|
|00000040| a5 a5 a5 a5 83 25 98 49 | 01 00 00 a3 90 49 01 00 |.....%.I|.....I..|
|00000050| c7 05 94 49 01 00 02 00 | 00 00 89 0d 9c 49 01 00 |...I....|.....I..|
|00000060| c7 43 10 80 49 01 00 66 | c7 43 16 20 00 c7 43 28 |.C..I..f|.C. ..C(|
|00000070| 18 12 01 00 c7 43 34 06 | 10 01 00 c7 43 3c 30 10 |.....C4.|....C<0.|
|00000080| 01 00 e8 5d 81 ff ff 84 | c0 74 07 c7 43 44 4e 10 |...]....|.t..CDN.|
|00000090| 01 00 8b 45 0c 81 08 00 | f6 27 22 5f 5e 33 c0 5b |...E....|.'"_^3.[|
|000000a0| 5d c2 08 00 cc cc cc cc | cc 8b ff 55 8b ec a1 34 |].......|...U...4|
|000000b0| 40 01 00 85 c0 b9 4e e6 | 40 bb 74 04 3b c1 75 1a |@.....N.|@.t.;.u.|
|000000c0| a1 d8 30 01 00 8b 00 35 | 34 40 01 00 a3 34 40 01 |..0....5|4@...4@.|
|000000d0| 00 75 07 8b c1 a3 34 40 | 01 00 f7 d0 a3 38 40 01 |.u....4@|.....8@.|
|000000e0| 00 5d e9 05 00 00 00 cc | cc cc cc cc 8b ff 55 8b |.]......|......U.|
|000000f0| ec 83 ec 14 56 57 33 c0 | 8d 7d ec ab ab ab ab ab |....VW3.|.}......|
|00000100| 6a 00 8d 45 ec 50 6a 00 | ff 75 0c c7 45 ec 14 00 |j..E.Pj.|.u..E...|
|00000110| 00 00 ff 75 08 c7 45 f0 | 68 51 01 00 ff 35 80 46 |...u..E.|hQ...5.F|
|00000120| 01 00 c7 45 f4 62 52 01 | 00 ff 15 30 42 01 00 8b |...E.bR.|...0B...|
|00000130| f0 85 f6 7c 2f 68 ac 48 | 01 00 ff 15 cc 30 01 00 |...|/h.H|.....0..|
|00000140| a3 a8 48 01 00 e8 0a 02 | 00 00 8b f0 85 f6 7c 14 |..H.....|......|.|
|00000150| 68 18 49 01 00 e8 1c 00 | 00 00 8b f0 85 f6 7c 04 |h.I.....|......|.|
|00000160| 33 f6 eb 05 e8 31 c9 ff | ff 5f 8b c6 5e c9 c2 08 |3....1..|._..^...|
|00000170| 00 cc cc cc cc cc 8b ff | 55 8b ec 83 ec 0c 53 56 |........|U.....SV|
|00000180| 8b 35 7c 30 01 00 57 33 | db 43 53 53 68 00 49 01 |.5|0..W3|.CSSh.I.|
|00000190| 00 ff d6 53 6a 00 68 02 | 1d 01 00 e8 9a 8a ff ff |...Sj.h.|........|
|000001a0| 8b f8 85 ff 0f 8c 9b 01 | 00 00 b8 40 4a 01 00 53 |........|...@J..S|
|000001b0| a3 44 4a 01 00 a3 40 4a | 01 00 b8 20 4a 01 00 53 |.DJ...@J|... J..S|
|000001c0| 68 48 4a 01 00 a3 24 4a | 01 00 a3 20 4a 01 00 ff |hHJ...$J|... J...|
|000001d0| d6 53 53 68 28 4a 01 00 | ff d6 ff 75 08 e8 9a 01 |.SSh(J..|...u....|
|000001e0| 00 00 8b f8 85 ff 0f 8c | 59 01 00 00 39 1d a8 48 |........|Y...9..H|
|000001f0| 01 00 76 3c 83 65 f8 00 | 8d 45 f8 50 68 b4 95 01 |..v<.e..|.E.Ph...|
|00000200| 00 68 1c 95 01 00 88 1d | a4 48 01 00 e8 9d e2 ff |.h......|.H......|
|00000210| ff 85 c0 7c 06 83 7d f8 | 00 75 0e 68 10 49 01 00 |...|..}.|.u.h.I..|
|00000220| e8 97 95 ff ff 85 c0 7d | 07 c6 05 a4 48 01 00 00 |.......}|....H...|
|00000230| 68 9c 48 01 00 68 08 95 | 01 00 be 8e 94 01 00 56 |h.H..h..|.......V|
|00000240| e8 69 e2 ff ff 68 98 48 | 01 00 68 74 94 01 00 56 |.i...h.H|..ht...V|
|00000250| e8 59 e2 ff ff 83 65 08 | 00 8d 45 fc 50 68 4c 31 |.Y....e.|..E.PhL1|
|00000260| 01 00 89 5d fc e8 8c 9c | ff ff 83 7d fc 02 75 07 |...]....|...}..u.|
|00000270| c7 45 08 00 00 00 70 8d | 45 fc 50 68 5c 31 01 00 |.E....p.|E.Ph\1..|
|00000280| 89 5d fc e8 6e 9c ff ff | 83 7d fc 02 75 04 83 4d |.]..n...|.}..u..M|
|00000290| 08 02 8b 45 08 09 05 98 | 48 01 00 83 65 f4 00 6a |...E....|H...e..j|
|000002a0| 4c b8 90 2c 01 00 89 1d | b0 48 01 00 5b a3 e8 48 |L..,....|.H..[..H|
|000002b0| 01 00 a3 f0 48 01 00 8d | 45 f4 50 be b0 48 01 00 |....H...|E.P..H..|
|000002c0| 56 89 1d b4 48 01 00 c7 | 05 a0 48 01 00 77 01 10 |V...H...|..H..w..|
|000002d0| 99 e8 30 fd ff ff 8b f8 | 85 ff 7d 0e 53 6a 00 56 |..0.....|..}.Sj.V|
|000002e0| e8 f9 9b ff ff 83 c4 0c | eb 5b a1 a0 48 01 00 0b |........|.[..H...|
|000002f0| 45 f4 a3 a0 48 01 00 23 | 45 08 a9 77 f0 07 00 74 |E...H..#|E..w...t|
|00000300| 05 e8 0e cb ff ff a1 a0 | 48 01 00 23 45 08 be 00 |........|H..#E...|
|00000310| 00 00 70 85 c6 74 05 e8 | 08 cb ff ff a1 98 48 01 |..p..t..|......H.|
|00000320| 00 85 c0 74 08 f7 d0 21 | 05 a0 48 01 00 83 3d d8 |...t...!|..H...=.|
|00000330| 48 01 00 00 74 0f 85 35 | 9c 48 01 00 74 07 83 25 |H...t..5|.H..t..%|
|00000340| d8 48 01 00 00 8b c7 5f | 5e 5b c9 c2 04 00 cc cc |.H....._|^[......|
|00000350| cc cc cc cc 68 58 4a 01 | 00 6a 00 6a 00 68 98 31 |....hXJ.|.j.j.h.1|
|00000360| 01 00 ff 15 78 30 01 00 | 85 c0 7c 09 c6 05 60 49 |....x0..|..|...`I|
|00000370| 01 00 01 33 c0 c3 cc cc | cc cc cc cc 8b ff 55 8b |...3....|......U.|
|00000380| ec 51 56 8d 45 fc 50 68 | 46 41 43 50 e8 b7 dd ff |.QV.E.Ph|FACP....|
|00000390| ff 8b f0 33 d2 3b f2 0f | 8c d0 00 00 00 8b 4d fc |...3.;..|......M.|
|000003a0| 39 51 38 8b 45 08 53 57 | 74 18 c6 40 04 01 c6 40 |9Q8.E.SW|t..@...@|
|000003b0| 05 10 88 50 06 c6 40 07 | 10 89 50 0c 8b 79 38 89 |...P..@.|..P..y8.|
|000003c0| 78 08 39 51 3c 74 18 c6 | 40 10 01 c6 40 11 10 88 |x.9Q<t..|@...@...|
|000003d0| 50 12 c6 40 13 10 89 50 | 18 8b 79 3c 89 78 14 39 |P..@...P|..y<.x.9|
|000003e0| 51 40 74 18 c6 40 1c 01 | c6 40 1d 10 88 50 1e c6 |Q@t..@..|.@...P..|
|000003f0| 40 1f 10 89 50 24 8b 79 | 40 89 78 20 39 51 44 74 |@...P$.y|@.x 9QDt|
|00000400| 18 c6 40 28 01 c6 40 29 | 10 88 50 2a c6 40 2b 10 |..@(..@)|..P*.@+.|
|00000410| 89 50 30 8b 79 44 89 78 | 2c 39 51 48 74 18 c6 40 |.P0.yD.x|,9QHt..@|
|00000420| 34 01 c6 40 35 08 88 50 | 36 c6 40 37 08 89 50 3c |4..@5..P|6.@7..P<|
|00000430| 8b 79 48 89 78 38 8b 79 | 30 89 78 40 8a 59 69 88 |.yH.x8.y|0.x@.Yi.|
|00000440| 58 46 8a 59 68 88 58 47 | 66 8b 79 60 66 89 38 66 |XF.Yh.XG|f.y`f.8f|
|00000450| 8b 79 62 66 89 78 02 8a | 59 37 88 58 44 8a 59 5f |.ybf.x..|Y7.XD.Y_|
|00000460| 52 51 88 58 45 ff 15 34 | 30 01 00 5f 5b 8b c6 5e |RQ.XE..4|0.._[..^|
|00000470| c9 c2 04 00 43 00 61 00 | 70 00 61 00 62 00 69 00 |....C.a.|p.a.b.i.|
|00000480| 6c 00 69 00 74 00 69 00 | 65 00 73 00 00 00 5c 00 |l.i.t.i.|e.s...\.|
|00000490| 52 00 65 00 67 00 69 00 | 73 00 74 00 72 00 79 00 |R.e.g.i.|s.t.r.y.|
|000004a0| 5c 00 4d 00 61 00 63 00 | 68 00 69 00 6e 00 65 00 |\.M.a.c.|h.i.n.e.|
|000004b0| 5c 00 53 00 79 00 73 00 | 74 00 65 00 6d 00 5c 00 |\.S.y.s.|t.e.m.\.|
|000004c0| 43 00 75 00 72 00 72 00 | 65 00 6e 00 74 00 43 00 |C.u.r.r.|e.n.t.C.|
|000004d0| 6f 00 6e 00 74 00 72 00 | 6f 00 6c 00 53 00 65 00 |o.n.t.r.|o.l.S.e.|
|000004e0| 74 00 5c 00 43 00 6f 00 | 6e 00 74 00 72 00 6f 00 |t.\.C.o.|n.t.r.o.|
|000004f0| 6c 00 5c 00 50 00 72 00 | 6f 00 63 00 65 00 73 00 |l.\.P.r.|o.c.e.s.|
|00000500| 73 00 6f 00 72 00 00 00 | 4f 00 76 00 65 00 72 00 |s.o.r...|O.v.e.r.|
|00000510| 72 00 69 00 64 00 65 00 | 73 00 00 00 5c 00 52 00 |r.i.d.e.|s...\.R.|
|00000520| 65 00 67 00 69 00 73 00 | 74 00 72 00 79 00 5c 00 |e.g.i.s.|t.r.y.\.|
|00000530| 4d 00 61 00 63 00 68 00 | 69 00 6e 00 65 00 5c 00 |M.a.c.h.|i.n.e.\.|
|00000540| 53 00 79 00 73 00 74 00 | 65 00 6d 00 5c 00 43 00 |S.y.s.t.|e.m.\.C.|
|00000550| 75 00 72 00 72 00 65 00 | 6e 00 74 00 43 00 6f 00 |u.r.r.e.|n.t.C.o.|
|00000560| 6e 00 74 00 72 00 6f 00 | 6c 00 53 00 65 00 74 00 |n.t.r.o.|l.S.e.t.|
|00000570| 5c 00 43 00 6f 00 6e 00 | 74 00 72 00 6f 00 6c 00 |\.C.o.n.|t.r.o.l.|
|00000580| 5c 00 53 00 65 00 73 00 | 73 00 69 00 6f 00 6e 00 |\.S.e.s.|s.i.o.n.|
|00000590| 20 00 4d 00 61 00 6e 00 | 61 00 67 00 65 00 72 00 | .M.a.n.|a.g.e.r.|
|000005a0| 5c 00 54 00 68 00 72 00 | 6f 00 74 00 74 00 6c 00 |\.T.h.r.|o.t.t.l.|
|000005b0| 65 00 00 00 50 00 65 00 | 72 00 66 00 45 00 6e 00 |e...P.e.|r.f.E.n.|
|000005c0| 61 00 62 00 6c 00 65 00 | 50 00 61 00 63 00 6b 00 |a.b.l.e.|P.a.c.k.|
|000005d0| 61 00 67 00 65 00 49 00 | 64 00 6c 00 65 00 00 00 |a.g.e.I.|d.l.e...|
|000005e0| 60 96 00 00 00 00 00 00 | 00 00 00 00 36 97 00 00 |`.......|....6...|
|000005f0| 30 30 00 00 54 96 00 00 | 00 00 00 00 00 00 00 00 |00..T...|........|
|00000600| 90 97 00 00 24 30 00 00 | 30 96 00 00 00 00 00 00 |....$0..|0.......|
|00000610| 00 00 00 00 de 9b 00 00 | 00 30 00 00 00 00 00 00 |........|.0......|
|00000620| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000630| b6 9b 00 00 a4 9b 00 00 | 90 9b 00 00 7e 9b 00 00 |........|....~...|
|00000640| 6a 9b 00 00 4c 9b 00 00 | 38 9b 00 00 ca 9b 00 00 |j...L...|8.......|
|00000650| 00 00 00 00 6a 97 00 00 | 7e 97 00 00 00 00 00 00 |....j...|~.......|
|00000660| e4 97 00 00 fe 97 00 00 | 12 98 00 00 28 98 00 00 |........|....(...|
|00000670| 40 98 00 00 4e 98 00 00 | 66 98 00 00 76 98 00 00 |@...N...|f...v...|
|00000680| 8a 98 00 00 94 98 00 00 | a4 98 00 00 b6 98 00 00 |........|........|
|00000690| e0 98 00 00 fa 98 00 00 | 0c 99 00 00 22 99 00 00 |........|...."...|
|000006a0| 44 99 00 00 9c 97 00 00 | 7c 99 00 00 d0 97 00 00 |D.......||.......|
|000006b0| 9a 99 00 00 a6 99 00 00 | b8 99 00 00 c8 99 00 00 |........|........|
|000006c0| e8 99 00 00 f2 99 00 00 | 04 9a 00 00 20 9a 00 00 |........|.... ...|
|000006d0| 3e 9a 00 00 5a 9a 00 00 | 6c 9a 00 00 82 9a 00 00 |>...Z...|l.......|
|000006e0| 98 9a 00 00 b0 9a 00 00 | c6 9a 00 00 de 9a 00 00 |........|........|
|000006f0| f6 9a 00 00 0e 9b 00 00 | 28 9b 00 00 b2 97 00 00 |........|(.......|
|00000700| 8a 99 00 00 a6 97 00 00 | 5c 97 00 00 44 97 00 00 |........|\...D...|
|00000710| 2c 97 00 00 62 99 00 00 | 20 97 00 00 00 00 00 00 |,...b...| .......|
|00000720| 52 07 5f 61 75 6c 6c 64 | 69 76 00 00 4b 07 5f 61 |R._aulld|iv..K._a|
|00000730| 6c 6c 6d 75 6c 00 6e 74 | 6f 73 6b 72 6e 6c 2e 65 |llmul.nt|oskrnl.e|
|00000740| 78 65 00 00 ff 04 52 74 | 6c 43 6f 70 79 55 6e 69 |xe....Rt|lCopyUni|
|00000750| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 3f 03 4b 65 |codeStri|ng..?.Ke|
|00000760| 54 69 63 6b 43 6f 75 6e | 74 00 07 00 57 64 66 56 |TickCoun|t...WdfV|
|00000770| 65 72 73 69 6f 6e 55 6e | 62 69 6e 64 00 00 06 00 |ersionUn|bind....|
|00000780| 57 64 66 56 65 72 73 69 | 6f 6e 42 69 6e 64 00 00 |WdfVersi|onBind..|
|00000790| 57 44 46 4c 44 52 2e 53 | 59 53 00 00 80 07 6d 65 |WDFLDR.S|YS....me|
|000007a0| 6d 73 65 74 00 00 e4 04 | 52 74 6c 41 73 73 65 72 |mset....|RtlAsser|
|000007b0| 74 00 f7 02 4b 65 51 75 | 65 72 79 41 63 74 69 76 |t...KeQu|eryActiv|
|000007c0| 65 50 72 6f 63 65 73 73 | 6f 72 43 6f 75 6e 74 00 |eProcess|orCount.|
|000007d0| d9 02 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 45 76 |..KeInit|ializeEv|
|000007e0| 65 6e 74 00 f8 02 4b 65 | 51 75 65 72 79 41 63 74 |ent...Ke|QueryAct|
|000007f0| 69 76 65 50 72 6f 63 65 | 73 73 6f 72 73 00 85 00 |iveProce|ssors...|
|00000800| 45 78 46 72 65 65 50 6f | 6f 6c 57 69 74 68 54 61 |ExFreePo|olWithTa|
|00000810| 67 00 f4 06 5a 77 50 6f | 77 65 72 49 6e 66 6f 72 |g...ZwPo|werInfor|
|00000820| 6d 61 74 69 6f 6e 00 00 | 6d 00 45 78 41 6c 6c 6f |mation..|m.ExAllo|
|00000830| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |catePool|WithTag.|
|00000840| 2a 03 4b 65 53 65 74 45 | 76 65 6e 74 00 00 48 03 |*.KeSetE|vent..H.|
|00000850| 4b 65 57 61 69 74 46 6f | 72 53 69 6e 67 6c 65 4f |KeWaitFo|rSingleO|
|00000860| 62 6a 65 63 74 00 b4 02 | 4b 65 43 61 6e 63 65 6c |bject...|KeCancel|
|00000870| 54 69 6d 65 72 00 fe 02 | 4b 65 51 75 65 72 79 53 |Timer...|KeQueryS|
|00000880| 79 73 74 65 6d 54 69 6d | 65 00 49 07 5f 61 6c 6c |ystemTim|e.I._all|
|00000890| 64 69 76 00 36 03 4b 65 | 53 65 74 54 69 6d 65 72 |div.6.Ke|SetTimer|
|000008a0| 45 78 00 00 ab 00 45 78 | 51 75 65 75 65 57 6f 72 |Ex....Ex|QueueWor|
|000008b0| 6b 49 74 65 6d 00 71 03 | 4d 6d 41 6c 6c 6f 63 61 |kItem.q.|MmAlloca|
|000008c0| 74 65 43 6f 6e 74 69 67 | 75 6f 75 73 4d 65 6d 6f |teContig|uousMemo|
|000008d0| 72 79 53 70 65 63 69 66 | 79 43 61 63 68 65 00 00 |rySpecif|yCache..|
|000008e0| 43 00 45 6d 43 6c 69 65 | 6e 74 51 75 65 72 79 52 |C.EmClie|ntQueryR|
|000008f0| 75 6c 65 53 74 61 74 65 | 00 00 d8 02 4b 65 49 6e |uleState|....KeIn|
|00000900| 69 74 69 61 6c 69 7a 65 | 44 70 63 00 e3 02 4b 65 |itialize|Dpc...Ke|
|00000910| 49 6e 69 74 69 61 6c 69 | 7a 65 54 69 6d 65 72 45 |Initiali|zeTimerE|
|00000920| 78 00 21 03 4b 65 52 65 | 76 65 72 74 54 6f 55 73 |x.!.KeRe|vertToUs|
|00000930| 65 72 41 66 66 69 6e 69 | 74 79 54 68 72 65 61 64 |erAffini|tyThread|
|00000940| 45 78 00 00 32 03 4b 65 | 53 65 74 53 79 73 74 65 |Ex..2.Ke|SetSyste|
|00000950| 6d 41 66 66 69 6e 69 74 | 79 54 68 72 65 61 64 45 |mAffinit|yThreadE|
|00000960| 78 00 58 02 49 6f 53 65 | 74 44 65 76 69 63 65 50 |x.X.IoSe|tDeviceP|
|00000970| 72 6f 70 65 72 74 79 44 | 61 74 61 00 50 00 45 74 |ropertyD|ata.P.Et|
|00000980| 77 52 65 67 69 73 74 65 | 72 00 53 00 45 74 77 55 |wRegiste|r.S.EtwU|
|00000990| 6e 72 65 67 69 73 74 65 | 72 00 54 00 45 74 77 57 |nregiste|r.T.EtwW|
|000009a0| 72 69 74 65 00 00 4e 00 | 45 74 77 45 76 65 6e 74 |rite..N.|EtwEvent|
|000009b0| 45 6e 61 62 6c 65 64 00 | 95 02 49 6f 66 43 61 6c |Enabled.|..IofCal|
|000009c0| 6c 44 72 69 76 65 72 00 | bb 01 49 6f 42 75 69 6c |lDriver.|..IoBuil|
|000009d0| 64 44 65 76 69 63 65 49 | 6f 43 6f 6e 74 72 6f 6c |dDeviceI|oControl|
|000009e0| 52 65 71 75 65 73 74 00 | 7e 07 6d 65 6d 63 70 79 |Request.|~.memcpy|
|000009f0| 00 00 fe 01 49 6f 46 72 | 65 65 57 6f 72 6b 49 74 |....IoFr|eeWorkIt|
|00000a00| 65 6d 00 00 12 07 5a 77 | 51 75 65 72 79 53 79 73 |em....Zw|QuerySys|
|00000a10| 74 65 6d 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 00 00 |temInfor|mation..|
|00000a20| ac 05 52 74 6c 4e 75 6d | 62 65 72 4f 66 53 65 74 |..RtlNum|berOfSet|
|00000a30| 42 69 74 73 55 6c 6f 6e | 67 50 74 72 00 00 07 04 |BitsUlon|gPtr....|
|00000a40| 4e 74 51 75 65 72 79 53 | 79 73 74 65 6d 49 6e 66 |NtQueryS|ystemInf|
|00000a50| 6f 72 6d 61 74 69 6f 6e | 00 00 34 02 49 6f 51 75 |ormation|..4.IoQu|
|00000a60| 65 75 65 57 6f 72 6b 49 | 74 65 6d 00 b2 01 49 6f |eueWorkI|tem...Io|
|00000a70| 41 6c 6c 6f 63 61 74 65 | 57 6f 72 6b 49 74 65 6d |Allocate|WorkItem|
|00000a80| 00 00 cf 04 52 45 41 44 | 5f 52 45 47 49 53 54 45 |....READ|_REGISTE|
|00000a90| 52 5f 55 43 48 41 52 00 | d1 04 52 45 41 44 5f 52 |R_UCHAR.|..READ_R|
|00000aa0| 45 47 49 53 54 45 52 5f | 55 53 48 4f 52 54 00 00 |EGISTER_|USHORT..|
|00000ab0| d0 04 52 45 41 44 5f 52 | 45 47 49 53 54 45 52 5f |..READ_R|EGISTER_|
|00000ac0| 55 4c 4f 4e 47 00 86 06 | 57 52 49 54 45 5f 52 45 |ULONG...|WRITE_RE|
|00000ad0| 47 49 53 54 45 52 5f 55 | 43 48 41 52 00 00 88 06 |GISTER_U|CHAR....|
|00000ae0| 57 52 49 54 45 5f 52 45 | 47 49 53 54 45 52 5f 55 |WRITE_RE|GISTER_U|
|00000af0| 53 48 4f 52 54 00 87 06 | 57 52 49 54 45 5f 52 45 |SHORT...|WRITE_RE|
|00000b00| 47 49 53 54 45 52 5f 55 | 4c 4f 4e 47 00 00 b9 05 |GISTER_U|LONG....|
|00000b10| 52 74 6c 51 75 65 72 79 | 52 65 67 69 73 74 72 79 |RtlQuery|Registry|
|00000b20| 56 61 6c 75 65 73 00 00 | b3 02 4b 65 42 75 67 43 |Values..|..KeBugC|
|00000b30| 68 65 63 6b 45 78 00 00 | 50 00 4b 65 47 65 74 43 |heckEx..|P.KeGetC|
|00000b40| 75 72 72 65 6e 74 49 72 | 71 6c 00 00 1e 00 48 61 |urrentIr|ql....Ha|
|00000b50| 6c 47 65 74 50 72 6f 63 | 65 73 73 6f 72 49 64 42 |lGetProc|essorIdB|
|00000b60| 79 4e 74 4e 75 6d 62 65 | 72 00 69 00 57 52 49 54 |yNtNumbe|r.i.WRIT|
|00000b70| 45 5f 50 4f 52 54 5f 55 | 43 48 41 52 00 00 63 00 |E_PORT_U|CHAR..c.|
|00000b80| 52 45 41 44 5f 50 4f 52 | 54 5f 55 43 48 41 52 00 |READ_POR|T_UCHAR.|
|00000b90| 65 00 52 45 41 44 5f 50 | 4f 52 54 5f 55 53 48 4f |e.READ_P|ORT_USHO|
|00000ba0| 52 54 00 00 64 00 52 45 | 41 44 5f 50 4f 52 54 5f |RT..d.RE|AD_PORT_|
|00000bb0| 55 4c 4f 4e 47 00 6b 00 | 57 52 49 54 45 5f 50 4f |ULONG.k.|WRITE_PO|
|00000bc0| 52 54 5f 55 53 48 4f 52 | 54 00 6a 00 57 52 49 54 |RT_USHOR|T.j.WRIT|
|00000bd0| 45 5f 50 4f 52 54 5f 55 | 4c 4f 4e 47 00 00 48 41 |E_PORT_U|LONG..HA|
|00000be0| 4c 2e 64 6c 6c 00 00 00 | 00 00 00 00 00 00 00 00 |L.dll...|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+