home *** CD-ROM | disk | FTP | other *** search
Unknown | 1997-04-25 | 6.6 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| OpenPGP Public Key
| default (weak)
| |
99%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| c6 05 0c be 01 00 01 83 | ec 08 33 c0 b9 20 00 00 |........|..3.. ..|
|00000010| 00 53 56 57 55 bf 40 cd | 01 00 f3 ab ff 15 60 ac |.SVWU.@.|......`.|
|00000020| 01 00 6a 00 a3 14 be 01 | 00 a1 7c ab 01 00 6a 01 |..j.....|..|...j.|
|00000030| 0f be 08 68 20 be 01 00 | 89 0d 30 c0 01 00 ff 15 |...h ...|..0.....|
|00000040| 68 ad 01 00 6a 00 6a 01 | 68 c0 cf 01 00 ff 15 68 |h...j.j.|h......h|
|00000050| ad 01 00 8b 0d 80 ab 01 | 00 68 5c be 01 00 8b 35 |........|.h\....5|
|00000060| 3c ab 01 00 8b 11 89 15 | 80 ab 01 00 ff d6 68 fc |<.......|......h.|
|00000070| be 01 00 ff d6 68 40 bf | 01 00 8b 3d 38 ab 01 00 |.....h@.|...=8...|
|00000080| bb f0 d3 01 00 ff d7 68 | 78 bf 01 00 ff d7 68 c0 |.......h|x.....h.|
|00000090| bf 01 00 ff d7 53 ff d7 | 83 c3 38 81 fb 20 d6 01 |.....S..|..8.. ..|
|000000a0| 00 72 f2 68 f8 bf 01 00 | ff d7 68 f8 cf 01 00 ff |.r.h....|..h.....|
|000000b0| d7 68 00 ce 01 00 ff d7 | b8 90 c2 01 00 a3 94 c2 |.h......|........|
|000000c0| 01 00 a3 90 c2 01 00 b8 | 98 c2 01 00 33 c9 a3 9c |........|....3...|
|000000d0| c2 01 00 a3 98 c2 01 00 | b8 a8 c2 01 00 a3 ac c2 |........|........|
|000000e0| 01 00 a3 a8 c2 01 00 b8 | c0 c2 01 00 c7 00 c1 09 |........|........|
|000000f0| 03 00 83 c0 10 3d e0 c2 | 01 00 89 48 f4 89 48 e8 |.....=..|...H..H.|
|00000100| 72 ea c7 05 e8 c2 01 00 | 4c 45 01 00 33 c9 b8 30 |r.......|LE..3..0|
|00000110| c3 01 00 66 89 0d a4 c2 | 01 00 89 0d a0 c2 01 00 |...f....|........|
|00000120| 66 89 0d a6 c2 01 00 89 | 0d ec c2 01 00 89 0d e0 |f.......|........|
|00000130| c2 01 00 8b d1 89 40 04 | 41 89 00 6b d2 38 81 c2 |......@.|A..k.8..|
|00000140| f0 d3 01 00 83 f9 0a 89 | 50 08 75 02 33 c9 83 c0 |........|P.u.3...|
|00000150| 0c 3d 30 c9 01 00 72 db | b8 30 c9 01 00 89 40 04 |.=0...r.|.0....@.|
|00000160| 89 00 83 c0 08 3d b0 c9 | 01 00 72 f1 68 00 cf 01 |.....=..|..r.h...|
|00000170| 00 33 db ff d7 68 a8 d0 | 01 00 88 1d 54 cf 01 00 |.3...h..|....T...|
|00000180| 88 1d 74 cf 01 00 88 1d | 94 cf 01 00 88 1d b4 cf |..t.....|........|
|00000190| 01 00 ff d7 c7 05 3c d0 | 01 00 02 00 00 00 b8 f0 |......<.|........|
|000001a0| cf 01 00 88 1d 40 d0 01 | 00 a3 f4 cf 01 00 88 1d |.....@..|........|
|000001b0| 41 d0 01 00 8d 54 24 10 | a3 f0 cf 01 00 ff 35 24 |A....T$.|......5$|
|000001c0| d1 01 00 52 b8 30 d0 01 | 00 a3 34 d0 01 00 a3 30 |...R.0..|..4....0|
|000001d0| d0 01 00 ff 15 04 ac 01 | 00 8d 4c 24 10 6a 01 51 |........|..L$.j.Q|
|000001e0| 68 c0 cc 01 00 ff 15 cc | ac 01 00 ff 35 18 d1 01 |h.......|....5...|
|000001f0| 00 68 c8 cc 01 00 8b 3d | 20 ac 01 00 ff d7 ff 35 |.h.....=| ......5|
|00000200| 1c d1 01 00 68 d0 cc 01 | 00 ff d7 a1 a8 d3 01 00 |....h...|........|
|00000210| 50 68 d0 cd 01 00 ff d7 | a1 ac d3 01 00 bb a0 ce |Ph......|........|
|00000220| 01 00 50 bd 50 d3 01 00 | 68 d8 cd 01 00 ff 15 b0 |..P.P...|h.......|
|00000230| ab 01 00 c7 05 50 d0 01 | 00 b9 0b 00 00 c7 05 60 |.....P..|.......`|
|00000240| d0 01 00 ba 0b 00 00 ff | 75 00 53 83 c3 08 ff d7 |........|u.S.....|
|00000250| 83 c5 04 81 fd 6c d3 01 | 00 76 ec b9 e0 ce 01 00 |.....l..|.v......|
|00000260| 8b 59 fc 8d 41 f8 8b 10 | 89 11 83 c1 08 81 f9 f8 |.Y..A...|........|
|00000270| ce 01 00 89 59 fc 72 e8 | 68 1c bf 01 00 bf 7c be |....Y.r.|h.....|.|
|00000280| 01 00 ff d6 57 ff d6 83 | c7 20 81 ff fc be 01 00 |....W...|. ......|
|00000290| 72 f2 c7 05 30 be 01 00 | 07 00 00 00 ff 15 e8 ac |r...0...|........|
|000002a0| 01 00 8b c8 2b d2 b8 80 | f0 fa 02 5d f7 f1 5f a3 |....+...|...].._.|
|000002b0| 04 d1 01 00 5e 5b 83 c4 | 08 c3 83 ec 08 a1 38 d1 |....^[..|......8.|
|000002c0| 01 00 8d 4c 24 00 53 56 | 33 db 57 50 51 ff 15 20 |...L$.SV|3.WPQ.. |
|000002d0| ac 01 00 8d 4c 24 0c 68 | 00 be 01 00 8b 7c 24 1c |....L$.h|.....|$.|
|000002e0| 53 53 6a 12 51 53 57 ff | 15 10 ad 01 00 8b f0 85 |SSj.QSW.|........|
|000002f0| f6 7d 1b 53 53 53 53 56 | 68 d2 07 00 c0 57 e8 a5 |.}.SSSSV|h....W..|
|00000300| 2b fd ff 8b c6 5f 5e 5b | 83 c4 08 c2 08 00 83 c7 |+...._^[|........|
|00000310| 38 b8 dc 15 03 00 b9 1c | 00 00 00 c7 47 fc 6b 65 |8.......|....G.ke|
|00000320| 03 00 f3 ab e8 d7 fc ff | ff eb d8 cc cc cc cc cc |........|........|
|00000330| 20 5a 03 00 00 00 00 00 | 00 00 00 00 78 5d 03 00 | Z......|....x]..|
|00000340| 80 aa 00 00 20 5d 03 00 | 00 00 00 00 00 00 00 00 |.... ]..|........|
|00000350| e0 6e 03 00 80 ad 00 00 | 38 5d 03 00 00 00 00 00 |.n......|8]......|
|00000360| 00 00 00 00 58 6f 03 00 | 98 ad 00 00 50 5d 03 00 |....Xo..|....P]..|
|00000370| 00 00 00 00 00 00 00 00 | 08 70 03 00 b0 ad 00 00 |........|.p......|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|000003a0| 88 5d 03 00 9a 5d 03 00 | b4 5d 03 00 cc 5d 03 00 |.]...]..|.]...]..|
|000003b0| ea 5d 03 00 08 5e 03 00 | 1e 5e 03 00 2c 5e 03 00 |.]...^..|.^..,^..|
|000003c0| 4a 5e 03 00 6a 5e 03 00 | 80 5e 03 00 a4 5e 03 00 |J^..j^..|.^...^..|
|000003d0| c2 5e 03 00 d0 5e 03 00 | e8 5e 03 00 00 5f 03 00 |.^...^..|.^..._..|
|000003e0| 18 5f 03 00 2c 5f 03 00 | 4a 5f 03 00 62 5f 03 00 |._..,_..|J_..b_..|
|000003f0| 7a 5f 03 00 96 5f 03 00 | b8 5f 03 00 ce 5f 03 00 |z_..._..|._..._..|
|00000400| dc 5f 03 00 ee 5f 03 00 | 04 60 03 00 14 60 03 00 |._..._..|.`...`..|
|00000410| 24 60 03 00 40 60 03 00 | 5a 60 03 00 74 60 03 00 |$`..@`..|Z`..t`..|
|00000420| 90 60 03 00 b0 60 03 00 | c6 60 03 00 de 60 03 00 |.`...`..|.`...`..|
|00000430| f8 60 03 00 1a 61 03 00 | 30 61 03 00 4a 61 03 00 |.`...a..|0a..Ja..|
|00000440| 68 61 03 00 82 61 03 00 | 92 61 03 00 ac 61 03 00 |ha...a..|.a...a..|
|00000450| b8 61 03 00 cc 61 03 00 | e0 61 03 00 fc 61 03 00 |.a...a..|.a...a..|
|00000460| 14 62 03 00 34 62 03 00 | 42 62 03 00 60 62 03 00 |.b..4b..|Bb..`b..|
|00000470| 72 62 03 00 84 62 03 00 | 94 62 03 00 a4 62 03 00 |rb...b..|.b...b..|
|00000480| c0 62 03 00 d0 62 03 00 | f0 62 03 00 08 63 03 00 |.b...b..|.b...c..|
|00000490| 16 63 03 00 30 63 03 00 | 50 63 03 00 6c 63 03 00 |.c..0c..|Pc..lc..|
|000004a0| 82 63 03 00 8e 63 03 00 | a2 63 03 00 b8 63 03 00 |.c...c..|.c...c..|
|000004b0| d6 63 03 00 e8 63 03 00 | fa 63 03 00 14 64 03 00 |.c...c..|.c...d..|
|000004c0| 28 64 03 00 3c 64 03 00 | 52 64 03 00 6c 64 03 00 |(d..<d..|Rd..ld..|
|000004d0| 88 64 03 00 9c 64 03 00 | a8 64 03 00 b4 64 03 00 |.d...d..|.d...d..|
|000004e0| cc 64 03 00 e2 64 03 00 | fa 64 03 00 10 65 03 00 |.d...d..|.d...e..|
|000004f0| 2c 65 03 00 50 65 03 00 | 64 65 03 00 76 65 03 00 |,e..Pe..|de..ve..|
|00000500| 92 65 03 00 b2 65 03 00 | be 65 03 00 d0 65 03 00 |.e...e..|.e...e..|
|00000510| e0 65 03 00 f8 65 03 00 | 0e 66 03 00 26 66 03 00 |.e...e..|.f..&f..|
|00000520| 3e 66 03 00 52 66 03 00 | 64 66 03 00 6e 66 03 00 |>f..Rf..|df..nf..|
|00000530| 7c 66 03 00 98 66 03 00 | b8 66 03 00 d6 66 03 00 ||f...f..|.f...f..|
|00000540| f0 66 03 00 08 67 03 00 | 20 67 03 00 3c 67 03 00 |.f...g..| g..<g..|
|00000550| 58 67 03 00 70 67 03 00 | 90 67 03 00 b0 67 03 00 |Xg..pg..|.g...g..|
|00000560| c0 67 03 00 d2 67 03 00 | ee 67 03 00 00 68 03 00 |.g...g..|.g...h..|
|00000570| 18 68 03 00 2c 68 03 00 | 42 68 03 00 54 68 03 00 |.h..,h..|Bh..Th..|
|00000580| 6a 68 03 00 80 68 03 00 | 90 68 03 00 b0 68 03 00 |jh...h..|.h...h..|
|00000590| d0 68 03 00 00 69 03 00 | 20 69 03 00 3a 69 03 00 |.h...i..| i..:i..|
|000005a0| 58 69 03 00 70 69 03 00 | 80 69 03 00 94 69 03 00 |Xi..pi..|.i...i..|
|000005b0| b4 69 03 00 d4 69 03 00 | 00 6a 03 00 14 6a 03 00 |.i...i..|.j...j..|
|000005c0| 32 6a 03 00 4a 6a 03 00 | 60 6a 03 00 80 6a 03 00 |2j..Jj..|`j...j..|
|000005d0| 90 6a 03 00 a0 6a 03 00 | ba 6a 03 00 da 6a 03 00 |.j...j..|.j...j..|
|000005e0| fa 6a 03 00 08 6b 03 00 | 1a 6b 03 00 24 6b 03 00 |.j...k..|.k..$k..|
|000005f0| 48 6b 03 00 58 6b 03 00 | 78 6b 03 00 88 6b 03 00 |Hk..Xk..|xk...k..|
|00000600| 9e 6b 03 00 b2 6b 03 00 | be 6b 03 00 d6 6b 03 00 |.k...k..|.k...k..|
|00000610| ea 6b 03 00 08 6c 03 00 | 16 6c 03 00 2c 6c 03 00 |.k...l..|.l..,l..|
|00000620| 3c 6c 03 00 48 6c 03 00 | 60 6c 03 00 72 6c 03 00 |<l..Hl..|`l..rl..|
|00000630| 84 6c 03 00 96 6c 03 00 | b0 6c 03 00 c8 6c 03 00 |.l...l..|.l...l..|
|00000640| d8 6c 03 00 e4 6c 03 00 | 00 6d 03 00 20 6d 03 00 |.l...l..|.m.. m..|
|00000650| 3c 6d 03 00 4a 6d 03 00 | 64 6d 03 00 74 6d 03 00 |<m..Jm..|dm..tm..|
|00000660| 84 6d 03 00 96 6d 03 00 | b4 6d 03 00 be 6d 03 00 |.m...m..|.m...m..|
|00000670| dc 6d 03 00 f0 6d 03 00 | 08 6e 03 00 18 6e 03 00 |.m...m..|.n...n..|
|00000680| 28 6e 03 00 38 6e 03 00 | 4c 6e 03 00 60 6e 03 00 |(n..8n..|Ln..`n..|
|00000690| 74 6e 03 00 88 6e 03 00 | c0 6e 03 00 00 00 00 00 |tn...n..|.n......|
|000006a0| e8 6e 03 00 00 6f 03 00 | 10 6f 03 00 30 6f 03 00 |.n...o..|.o..0o..|
|000006b0| 44 6f 03 00 00 00 00 00 | 60 6f 03 00 78 6f 03 00 |Do......|`o..xo..|
|000006c0| 9c 6f 03 00 b8 6f 03 00 | e0 6f 03 00 00 00 00 00 |.o...o..|.o......|
|000006d0| 14 70 03 00 30 70 03 00 | 50 70 03 00 64 70 03 00 |.p..0p..|Pp..dp..|
|000006e0| 82 70 03 00 96 70 03 00 | b8 70 03 00 d0 70 03 00 |.p...p..|.p...p..|
|000006f0| 00 00 00 00 cc cc cc cc | 6e 74 6f 73 6b 72 6e 6c |........|ntoskrnl|
|00000700| 2e 65 78 65 00 00 cc cc | b3 00 46 73 52 74 6c 4d |.exe....|..FsRtlM|
|00000710| 64 6c 52 65 61 64 44 65 | 76 00 b2 00 46 73 52 74 |dlReadDe|v...FsRt|
|00000720| 6c 4d 64 6c 52 65 61 64 | 43 6f 6d 70 6c 65 74 65 |lMdlRead|Complete|
|00000730| 44 65 76 00 1c 03 52 74 | 6c 55 70 63 61 73 65 55 |Dev...Rt|lUpcaseU|
|00000740| 6e 69 63 6f 64 65 43 68 | 61 72 00 00 16 03 52 74 |nicodeCh|ar....Rt|
|00000750| 6c 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |lUnicode|StringTo|
|00000760| 4f 65 6d 53 74 72 69 6e | 67 00 22 02 4e 74 51 75 |OemStrin|g.".NtQu|
|00000770| 65 72 79 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 46 69 |eryInfor|mationFi|
|00000780| 6c 65 00 00 cc cc cc cc | 03 02 4e 6c 73 4d 62 4f |le......|..NlsMbO|
|00000790| 65 6d 43 6f 64 65 50 61 | 67 65 54 61 67 00 a2 01 |emCodePa|geTag...|
|000007a0| 4b 65 53 65 74 45 76 65 | 6e 74 00 00 2e 03 52 74 |KeSetEve|nt....Rt|
|000007b0| 6c 78 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 54 |lxUnicod|eStringT|
|000007c0| 6f 4f 65 6d 53 69 7a 65 | 00 00 b9 01 4b 65 66 41 |oOemSize|....KefA|
|000007d0| 63 71 75 69 72 65 53 70 | 69 6e 4c 6f 63 6b 41 74 |cquireSp|inLockAt|
|000007e0| 44 70 63 4c 65 76 65 6c | 00 00 d7 00 49 6e 74 65 |DpcLevel|....Inte|
|000007f0| 72 6c 6f 63 6b 65 64 45 | 78 63 68 61 6e 67 65 00 |rlockedE|xchange.|
|00000800| ba 01 4b 65 66 52 65 6c | 65 61 73 65 53 70 69 6e |..KefRel|easeSpin|
|00000810| 4c 6f 63 6b 46 72 6f 6d | 44 70 63 4c 65 76 65 6c |LockFrom|DpcLevel|
|00000820| 00 00 cc cc 59 00 45 78 | 49 6e 74 65 72 6c 6f 63 |....Y.Ex|Interloc|
|00000830| 6b 65 64 50 75 73 68 45 | 6e 74 72 79 53 4c 69 73 |kedPushE|ntrySLis|
|00000840| 74 00 07 01 49 6f 46 72 | 65 65 49 72 70 00 cc cc |t...IoFr|eeIrp...|
|00000850| b2 02 52 74 6c 45 71 75 | 61 6c 55 6e 69 63 6f 64 |..RtlEqu|alUnicod|
|00000860| 65 53 74 72 69 6e 67 00 | ec 00 49 6f 43 68 65 63 |eString.|..IoChec|
|00000870| 6b 44 65 73 69 72 65 64 | 41 63 63 65 73 73 00 00 |kDesired|Access..|
|00000880| 95 02 52 74 6c 43 6f 70 | 79 55 6e 69 63 6f 64 65 |..RtlCop|yUnicode|
|00000890| 53 74 72 69 6e 67 00 00 | 86 01 4b 65 51 75 65 72 |String..|..KeQuer|
|000008a0| 79 53 79 73 74 65 6d 54 | 69 6d 65 00 e5 02 52 74 |ySystemT|ime...Rt|
|000008b0| 6c 4c 65 6e 67 74 68 53 | 65 63 75 72 69 74 79 44 |lLengthS|ecurityD|
|000008c0| 65 73 63 72 69 70 74 6f | 72 00 a4 03 5a 77 57 61 |escripto|r...ZwWa|
|000008d0| 69 74 46 6f 72 53 69 6e | 67 6c 65 4f 62 6a 65 63 |itForSin|gleObjec|
|000008e0| 74 00 75 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |t.u.KeIn|itialize|
|000008f0| 53 65 6d 61 70 68 6f 72 | 65 00 b6 01 4b 65 57 61 |Semaphor|e...KeWa|
|00000900| 69 74 46 6f 72 4d 75 6c | 74 69 70 6c 65 4f 62 6a |itForMul|tipleObj|
|00000910| 65 63 74 73 00 00 75 00 | 45 78 66 49 6e 74 65 72 |ects..u.|ExfInter|
|00000920| 6c 6f 63 6b 65 64 49 6e | 73 65 72 74 54 61 69 6c |lockedIn|sertTail|
|00000930| 4c 69 73 74 00 00 cc cc | 93 01 4b 65 52 65 6c 65 |List....|..KeRele|
|00000940| 61 73 65 53 65 6d 61 70 | 68 6f 72 65 00 00 97 03 |aseSemap|hore....|
|00000950| 5a 77 53 65 74 45 76 65 | 6e 74 00 00 65 03 5a 77 |ZwSetEve|nt..e.Zw|
|00000960| 43 72 65 61 74 65 53 65 | 63 74 69 6f 6e 00 77 03 |CreateSe|ction.w.|
|00000970| 5a 77 4d 61 70 56 69 65 | 77 4f 66 53 65 63 74 69 |ZwMapVie|wOfSecti|
|00000980| 6f 6e 00 00 62 03 5a 77 | 43 72 65 61 74 65 45 76 |on..b.Zw|CreateEv|
|00000990| 65 6e 74 00 9a 01 4b 65 | 52 65 73 65 74 45 76 65 |ent...Ke|ResetEve|
|000009a0| 6e 74 00 00 5e 00 45 78 | 4c 6f 63 61 6c 54 69 6d |nt..^.Ex|LocalTim|
|000009b0| 65 54 6f 53 79 73 74 65 | 6d 54 69 6d 65 00 cc cc |eToSyste|mTime...|
|000009c0| d8 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 45 78 63 |..Interl|ockedExc|
|000009d0| 68 61 6e 67 65 41 64 64 | 00 00 57 01 4b 65 44 65 |hangeAdd|..W.KeDe|
|000009e0| 6c 61 79 45 78 65 63 75 | 74 69 6f 6e 54 68 72 65 |layExecu|tionThre|
|000009f0| 61 64 00 00 73 00 45 78 | 66 49 6e 74 65 72 6c 6f |ad..s.Ex|fInterlo|
|00000a00| 63 6b 65 64 41 64 64 55 | 6c 6f 6e 67 00 00 cc cc |ckedAddU|long....|
|00000a10| 6d 00 45 78 52 65 6c 65 | 61 73 65 52 65 73 6f 75 |m.ExRele|aseResou|
|00000a20| 72 63 65 4c 69 74 65 00 | cc cc cc cc cc cc cc cc |rceLite.|........|
|00000a30| 10 03 52 74 6c 54 69 6d | 65 54 6f 54 69 6d 65 46 |..RtlTim|eToTimeF|
|00000a40| 69 65 6c 64 73 00 d9 00 | 49 6e 74 65 72 6c 6f 63 |ields...|Interloc|
|00000a50| 6b 65 64 49 6e 63 72 65 | 6d 65 6e 74 00 00 8c 02 |kedIncre|ment....|
|00000a60| 52 74 6c 43 6f 6d 70 61 | 72 65 55 6e 69 63 6f 64 |RtlCompa|reUnicod|
|00000a70| 65 53 74 72 69 6e 67 00 | 2e 00 45 78 41 63 71 75 |eString.|..ExAcqu|
|00000a80| 69 72 65 52 65 73 6f 75 | 72 63 65 45 78 63 6c 75 |ireResou|rceExclu|
|00000a90| 73 69 76 65 4c 69 74 65 | 00 00 16 02 4e 74 46 72 |siveLite|....NtFr|
|00000aa0| 65 65 56 69 72 74 75 61 | 6c 4d 65 6d 6f 72 79 00 |eeVirtua|lMemory.|
|00000ab0| 09 02 4e 74 41 6c 6c 6f | 63 61 74 65 56 69 72 74 |..NtAllo|cateVirt|
|00000ac0| 75 61 6c 4d 65 6d 6f 72 | 79 00 2e 02 4e 74 53 65 |ualMemor|y...NtSe|
|00000ad0| 74 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 54 68 72 65 |tInforma|tionThre|
|00000ae0| 61 64 00 00 cc cc cc cc | 4a 03 53 65 52 65 6c 65 |ad......|J.SeRele|
|00000af0| 61 73 65 53 75 62 6a 65 | 63 74 43 6f 6e 74 65 78 |aseSubje|ctContex|
|00000b00| 74 00 2f 03 53 65 41 63 | 63 65 73 73 43 68 65 63 |t./.SeAc|cessChec|
|00000b10| 6b 00 35 03 53 65 43 61 | 70 74 75 72 65 53 75 62 |k.5.SeCa|ptureSub|
|00000b20| 6a 65 63 74 43 6f 6e 74 | 65 78 74 00 bf 03 5f 77 |jectCont|ext..._w|
|00000b30| 63 73 69 63 6d 70 00 00 | e8 01 4d 6d 4d 61 70 4c |csicmp..|..MmMapL|
|00000b40| 6f 63 6b 65 64 50 61 67 | 65 73 00 00 89 02 52 74 |ockedPag|es....Rt|
|00000b50| 6c 43 6f 6d 70 61 72 65 | 4d 65 6d 6f 72 79 00 00 |lCompare|Memory..|
|00000b60| 4a 00 45 78 49 6e 69 74 | 69 61 6c 69 7a 65 52 65 |J.ExInit|ializeRe|
|00000b70| 73 6f 75 72 63 65 4c 69 | 74 65 00 00 76 01 4b 65 |sourceLi|te..v.Ke|
|00000b80| 49 6e 69 74 69 61 6c 69 | 7a 65 53 70 69 6e 4c 6f |Initiali|zeSpinLo|
|00000b90| 63 6b 00 00 78 00 45 78 | 66 49 6e 74 65 72 6c 6f |ck..x.Ex|fInterlo|
|00000ba0| 63 6b 65 64 52 65 6d 6f | 76 65 48 65 61 64 4c 69 |ckedRemo|veHeadLi|
|00000bb0| 73 74 00 00 c4 02 52 74 | 6c 46 72 65 65 48 65 61 |st....Rt|lFreeHea|
|00000bc0| 70 00 77 02 52 74 6c 41 | 6c 6c 6f 63 61 74 65 48 |p.w.RtlA|llocateH|
|00000bd0| 65 61 70 00 cc cc cc cc | cc cc cc cc cc cc cc cc |eap.....|........|
|00000be0| a7 02 52 74 6c 44 65 73 | 74 72 6f 79 48 65 61 70 |..RtlDes|troyHeap|
|00000bf0| 00 00 0f 02 4e 74 43 72 | 65 61 74 65 53 65 63 74 |....NtCr|eateSect|
|00000c00| 69 6f 6e 00 0c 02 4e 74 | 43 6f 6e 6e 65 63 74 50 |ion...Nt|ConnectP|
|00000c10| 6f 72 74 00 98 02 52 74 | 6c 43 72 65 61 74 65 48 |ort...Rt|lCreateH|
|00000c20| 65 61 70 00 6a 02 50 73 | 54 65 72 6d 69 6e 61 74 |eap.j.Ps|Terminat|
|00000c30| 65 53 79 73 74 65 6d 54 | 68 72 65 61 64 00 cc cc |eSystemT|hread...|
|00000c40| 98 01 4b 65 52 65 6d 6f | 76 65 51 75 65 75 65 00 |..KeRemo|veQueue.|
|00000c50| a4 01 4b 65 53 65 74 49 | 64 65 61 6c 50 72 6f 63 |..KeSetI|dealProc|
|00000c60| 65 73 73 6f 72 54 68 72 | 65 61 64 00 cc cc cc cc |essorThr|ead.....|
|00000c70| 54 02 50 73 43 72 65 61 | 74 65 53 79 73 74 65 6d |T.PsCrea|teSystem|
|00000c80| 54 68 72 65 61 64 00 00 | f5 01 4d 6d 53 69 7a 65 |Thread..|..MmSize|
|00000c90| 4f 66 4d 64 6c 00 e3 01 | 4d 6d 49 73 54 68 69 73 |OfMdl...|MmIsThis|
|00000ca0| 41 6e 4e 74 41 73 53 79 | 73 74 65 6d 00 00 cc cc |AnNtAsSy|stem....|
|00000cb0| 26 03 52 74 6c 56 61 6c | 69 64 53 65 63 75 72 69 |&.RtlVal|idSecuri|
|00000cc0| 74 79 44 65 73 63 72 69 | 70 74 6f 72 00 00 cc cc |tyDescri|ptor....|
|00000cd0| 0f 03 52 74 6c 54 69 6d | 65 54 6f 53 65 63 6f 6e |..RtlTim|eToSecon|
|00000ce0| 64 73 53 69 6e 63 65 31 | 39 38 30 00 82 01 4b 65 |dsSince1|980...Ke|
|00000cf0| 4e 75 6d 62 65 72 50 72 | 6f 63 65 73 73 6f 72 73 |NumberPr|ocessors|
|00000d00| 00 00 3c 03 53 65 45 78 | 70 6f 72 74 73 00 e9 02 |..<.SeEx|ports...|
|00000d10| 52 74 6c 4d 61 70 47 65 | 6e 65 72 69 63 4d 61 73 |RtlMapGe|nericMas|
|00000d20| 6b 00 3d 03 53 65 46 72 | 65 65 50 72 69 76 69 6c |k.=.SeFr|eePrivil|
|00000d30| 65 67 65 73 00 00 cc cc | 51 02 50 73 41 73 73 69 |eges....|Q.PsAssi|
|00000d40| 67 6e 49 6d 70 65 72 73 | 6f 6e 61 74 69 6f 6e 54 |gnImpers|onationT|
|00000d50| 6f 6b 65 6e 00 00 4f 01 | 4b 65 41 74 74 61 63 68 |oken..O.|KeAttach|
|00000d60| 50 72 6f 63 65 73 73 00 | 59 01 4b 65 44 65 74 61 |Process.|Y.KeDeta|
|00000d70| 63 68 50 72 6f 63 65 73 | 73 00 23 03 52 74 6c 55 |chProces|s.#.RtlU|
|00000d80| 70 63 61 73 65 55 6e 69 | 63 6f 64 65 54 6f 4f 65 |pcaseUni|codeToOe|
|00000d90| 6d 4e 00 00 1a 03 52 74 | 6c 55 6e 69 63 6f 64 65 |mN....Rt|lUnicode|
|00000da0| 54 6f 4f 65 6d 4e 00 00 | 02 02 4e 6c 73 4d 62 43 |ToOemN..|..NlsMbC|
|00000db0| 6f 64 65 50 61 67 65 54 | 61 67 00 00 04 02 4e 6c |odePageT|ag....Nl|
|00000dc0| 73 4f 65 6d 4c 65 61 64 | 42 79 74 65 49 6e 66 6f |sOemLead|ByteInfo|
|00000dd0| 00 00 dc 02 52 74 6c 49 | 73 4e 61 6d 65 4c 65 67 |....RtlI|sNameLeg|
|00000de0| 61 6c 44 4f 53 38 44 6f | 74 33 00 00 a6 00 46 73 |alDOS8Do|t3....Fs|
|00000df0| 52 74 6c 49 73 46 61 74 | 44 62 63 73 4c 65 67 61 |RtlIsFat|DbcsLega|
|00000e00| 6c 00 cc cc cc cc cc cc | d0 02 52 74 6c 49 6e 69 |l.......|..RtlIni|
|00000e10| 74 41 6e 73 69 53 74 72 | 69 6e 67 00 0b 02 4e 74 |tAnsiStr|ing...Nt|
|00000e20| 43 6c 6f 73 65 00 cc cc | ea 03 77 63 73 63 6d 70 |Close...|..wcscmp|
|00000e30| 00 00 cc cc 26 02 4e 74 | 51 75 65 72 79 53 65 63 |....&.Nt|QuerySec|
|00000e40| 75 72 69 74 79 4f 62 6a | 65 63 74 00 2f 02 4e 74 |urityObj|ect./.Nt|
|00000e50| 53 65 74 53 65 63 75 72 | 69 74 79 4f 62 6a 65 63 |SetSecur|ityObjec|
|00000e60| 74 00 12 02 4e 74 44 65 | 76 69 63 65 49 6f 43 6f |t...NtDe|viceIoCo|
|00000e70| 6e 74 72 6f 6c 46 69 6c | 65 00 c3 02 52 74 6c 46 |ntrolFil|e...RtlF|
|00000e80| 72 65 65 41 6e 73 69 53 | 74 72 69 6e 67 00 cc cc |reeAnsiS|tring...|
|00000e90| 1d 03 52 74 6c 55 70 63 | 61 73 65 55 6e 69 63 6f |..RtlUpc|aseUnico|
|00000ea0| 64 65 53 74 72 69 6e 67 | 00 00 cc cc 20 03 52 74 |deString|.... .Rt|
|00000eb0| 6c 55 70 63 61 73 65 55 | 6e 69 63 6f 64 65 53 74 |lUpcaseU|nicodeSt|
|00000ec0| 72 69 6e 67 54 6f 4f 65 | 6d 53 74 72 69 6e 67 00 |ringToOe|mString.|
|00000ed0| 13 01 49 6f 47 65 74 53 | 74 61 63 6b 4c 69 6d 69 |..IoGetS|tackLimi|
|00000ee0| 74 73 00 00 17 02 4e 74 | 46 73 43 6f 6e 74 72 6f |ts....Nt|FsContro|
|00000ef0| 6c 46 69 6c 65 00 01 03 | 52 74 6c 53 65 63 6f 6e |lFile...|RtlSecon|
|00000f00| 64 73 53 69 6e 63 65 31 | 39 37 30 54 6f 54 69 6d |dsSince1|970ToTim|
|00000f10| 65 00 04 01 49 6f 46 61 | 73 74 51 75 65 72 79 4e |e...IoFa|stQueryN|
|00000f20| 65 74 77 6f 72 6b 41 74 | 74 72 69 62 75 74 65 73 |etworkAt|tributes|
|00000f30| 00 00 fe 02 52 74 6c 52 | 61 6e 64 6f 6d 00 b7 03 |....RtlR|andom...|
|00000f40| 5f 73 74 72 69 63 6d 70 | 00 00 cc cc cc cc cc cc |_stricmp|........|
|00000f50| e9 03 77 63 73 63 68 72 | 00 00 cc cc cc cc cc cc |..wcschr|........|
|00000f60| 23 01 49 6f 52 65 61 64 | 4f 70 65 72 61 74 69 6f |#.IoRead|Operatio|
|00000f70| 6e 43 6f 75 6e 74 00 00 | 24 01 49 6f 52 65 61 64 |nCount..|$.IoRead|
|00000f80| 54 72 61 6e 73 66 65 72 | 43 6f 75 6e 74 00 42 01 |Transfer|Count.B.|
|00000f90| 49 6f 57 72 69 74 65 4f | 70 65 72 61 74 69 6f 6e |IoWriteO|peration|
|00000fa0| 43 6f 75 6e 74 00 43 01 | 49 6f 57 72 69 74 65 54 |Count.C.|IoWriteT|
|00000fb0| 72 61 6e 73 66 65 72 43 | 6f 75 6e 74 00 00 38 01 |ransferC|ount..8.|
|00000fc0| 49 6f 53 74 61 74 69 73 | 74 69 63 73 4c 6f 63 6b |IoStatis|ticsLock|
|00000fd0| 00 00 d2 02 52 74 6c 49 | 6e 69 74 53 74 72 69 6e |....RtlI|nitStrin|
|00000fe0| 67 00 cc cc eb 03 77 63 | 73 63 70 79 00 00 eb 00 |g.....wc|scpy....|
|00000ff0| 49 6f 43 61 6e 63 65 6c | 49 72 70 00 db 02 52 74 |IoCancel|Irp...Rt|
|00001000| 6c 49 6e 74 65 67 65 72 | 54 6f 55 6e 69 63 6f 64 |lInteger|ToUnicod|
|00001010| 65 53 74 72 69 6e 67 00 | 32 01 49 6f 53 65 74 54 |eString.|2.IoSetT|
|00001020| 68 72 65 61 64 48 61 72 | 64 45 72 72 6f 72 4d 6f |hreadHar|dErrorMo|
|00001030| 64 65 00 00 cc cc cc cc | ef 02 52 74 6c 4e 74 53 |de......|..RtlNtS|
|00001040| 74 61 74 75 73 54 6f 44 | 6f 73 45 72 72 6f 72 4e |tatusToD|osErrorN|
|00001050| 6f 54 65 62 00 00 2a 02 | 4e 74 52 65 71 75 65 73 |oTeb..*.|NtReques|
|00001060| 74 57 61 69 74 52 65 70 | 6c 79 50 6f 72 74 00 00 |tWaitRep|lyPort..|
|00001070| d3 02 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|00001080| 53 74 72 69 6e 67 00 00 | c6 02 52 74 6c 46 72 65 |String..|..RtlFre|
|00001090| 65 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |eUnicode|String..|
|000010a0| c5 00 46 73 52 74 6c 50 | 72 65 70 61 72 65 4d 64 |..FsRtlP|repareMd|
|000010b0| 6c 57 72 69 74 65 44 65 | 76 00 cc cc b5 00 46 73 |lWriteDe|v.....Fs|
|000010c0| 52 74 6c 4d 64 6c 57 72 | 69 74 65 43 6f 6d 70 6c |RtlMdlWr|iteCompl|
|000010d0| 65 74 65 44 65 76 00 00 | ee 00 49 6f 43 68 65 63 |eteDev..|..IoChec|
|000010e0| 6b 46 75 6e 63 74 69 6f | 6e 41 63 63 65 73 73 00 |kFunctio|nAccess.|
|000010f0| ed 00 49 6f 43 68 65 63 | 6b 45 61 42 75 66 66 65 |..IoChec|kEaBuffe|
|00001100| 72 56 61 6c 69 64 69 74 | 79 00 cc cc cc cc cc cc |rValidit|y.......|
|00001110| f9 02 52 74 6c 50 72 65 | 66 69 78 55 6e 69 63 6f |..RtlPre|fixUnico|
|00001120| 64 65 53 74 72 69 6e 67 | 00 00 cc cc cc cc cc cc |deString|........|
|00001130| 0e 02 4e 74 43 72 65 61 | 74 65 46 69 6c 65 00 00 |..NtCrea|teFile..|
|00001140| b1 02 52 74 6c 45 71 75 | 61 6c 53 74 72 69 6e 67 |..RtlEqu|alString|
|00001150| 00 00 e4 01 4d 6d 4c 6f | 63 6b 50 61 67 61 62 6c |....MmLo|ckPagabl|
|00001160| 65 44 61 74 61 53 65 63 | 74 69 6f 6e 00 00 e1 00 |eDataSec|tion....|
|00001170| 49 6f 41 6c 6c 6f 63 61 | 74 65 4d 64 6c 00 cc cc |IoAlloca|teMdl...|
|00001180| ee 01 4d 6d 50 72 6f 62 | 65 41 6e 64 4c 6f 63 6b |..MmProb|eAndLock|
|00001190| 50 61 67 65 73 00 cc cc | 20 01 49 6f 51 75 65 75 |Pages...| .IoQueu|
|000011a0| 65 54 68 72 65 61 64 49 | 72 70 00 00 48 02 4f 62 |eThreadI|rp..H.Ob|
|000011b0| 66 52 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |fReferen|ceObject|
|000011c0| 00 00 e0 00 49 6f 41 6c | 6c 6f 63 61 74 65 49 72 |....IoAl|locateIr|
|000011d0| 70 00 cc cc 60 01 4b 65 | 47 65 74 43 75 72 72 65 |p...`.Ke|GetCurre|
|000011e0| 6e 74 54 68 72 65 61 64 | 00 00 0c 01 49 6f 47 65 |ntThread|....IoGe|
|000011f0| 74 43 75 72 72 65 6e 74 | 50 72 6f 63 65 73 73 00 |tCurrent|Process.|
|00001200| 52 01 4b 65 42 75 67 43 | 68 65 63 6b 45 78 00 00 |R.KeBugC|heckEx..|
|00001210| 0d 03 52 74 6c 54 69 6d | 65 46 69 65 6c 64 73 54 |..RtlTim|eFieldsT|
|00001220| 6f 54 69 6d 65 00 cc cc | cc cc cc cc cc cc cc cc |oTime...|........|
|00001230| 3c 00 45 78 44 65 6c 65 | 74 65 52 65 73 6f 75 72 |<.ExDele|teResour|
|00001240| 63 65 4c 69 74 65 00 00 | cc cc cc cc cc cc cc cc |ceLite..|........|
|00001250| 47 02 4f 62 66 44 65 72 | 65 66 65 72 65 6e 63 65 |G.ObfDer|eference|
|00001260| 4f 62 6a 65 63 74 00 00 | cc cc cc cc cc cc cc cc |Object..|........|
|00001270| cc cc cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00001280| 95 00 46 73 52 74 6c 44 | 6f 65 73 4e 61 6d 65 43 |..FsRtlD|oesNameC|
|00001290| 6f 6e 74 61 69 6e 57 69 | 6c 64 43 61 72 64 73 00 |ontainWi|ldCards.|
|000012a0| 70 00 45 78 53 79 73 74 | 65 6d 54 69 6d 65 54 6f |p.ExSyst|emTimeTo|
|000012b0| 4c 6f 63 61 6c 54 69 6d | 65 00 0e 03 52 74 6c 54 |LocalTim|e...RtlT|
|000012c0| 69 6d 65 54 6f 53 65 63 | 6f 6e 64 73 53 69 6e 63 |imeToSec|ondsSinc|
|000012d0| 65 31 39 37 30 00 cc cc | d6 00 49 6e 74 65 72 6c |e1970...|..Interl|
|000012e0| 6f 63 6b 65 64 44 65 63 | 72 65 6d 65 6e 74 00 00 |ockedDec|rement..|
|000012f0| f4 00 49 6f 43 72 65 61 | 74 65 46 69 6c 65 00 00 |..IoCrea|teFile..|
|00001300| c5 02 52 74 6c 46 72 65 | 65 4f 65 6d 53 74 72 69 |..RtlFre|eOemStri|
|00001310| 6e 67 00 00 ca 02 52 74 | 6c 47 65 74 44 61 63 6c |ng....Rt|lGetDacl|
|00001320| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|00001330| 6f 72 00 00 ce 02 52 74 | 6c 47 65 74 4f 77 6e 65 |or....Rt|lGetOwne|
|00001340| 72 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |rSecurit|yDescrip|
|00001350| 74 6f 72 00 f7 01 4d 6d | 55 6e 6c 6f 63 6b 50 61 |tor...Mm|UnlockPa|
|00001360| 67 61 62 6c 65 49 6d 61 | 67 65 53 65 63 74 69 6f |gableIma|geSectio|
|00001370| 6e 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |n.......|........|
|00001380| 74 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 51 75 |t.KeInit|ializeQu|
|00001390| 65 75 65 00 9a 02 52 74 | 6c 43 72 65 61 74 65 53 |eue...Rt|lCreateS|
|000013a0| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|000013b0| 72 00 e4 02 52 74 6c 4c | 65 6e 67 74 68 52 65 71 |r...RtlL|engthReq|
|000013c0| 75 69 72 65 64 53 69 64 | 00 00 d6 02 52 74 6c 49 |uiredSid|....RtlI|
|000013d0| 6e 69 74 69 61 6c 69 7a | 65 53 69 64 00 00 cc cc |nitializ|eSid....|
|000013e0| 0c 03 52 74 6c 53 75 62 | 41 75 74 68 6f 72 69 74 |..RtlSub|Authorit|
|000013f0| 79 53 69 64 00 00 cc cc | cc cc cc cc cc cc cc cc |ySid....|........|
|00001400| e6 02 52 74 6c 4c 65 6e | 67 74 68 53 69 64 00 00 |..RtlLen|gthSid..|
|00001410| 96 02 52 74 6c 43 72 65 | 61 74 65 41 63 6c 00 00 |..RtlCre|ateAcl..|
|00001420| 73 02 52 74 6c 41 64 64 | 41 63 63 65 73 73 41 6c |s.RtlAdd|AccessAl|
|00001430| 6c 6f 77 65 64 41 63 65 | 00 00 05 03 52 74 6c 53 |lowedAce|....RtlS|
|00001440| 65 74 44 61 63 6c 53 65 | 63 75 72 69 74 79 44 65 |etDaclSe|curityDe|
|00001450| 73 63 72 69 70 74 6f 72 | 00 00 07 03 52 74 6c 53 |scriptor|....RtlS|
|00001460| 65 74 4f 77 6e 65 72 53 | 65 63 75 72 69 74 79 44 |etOwnerS|ecurityD|
|00001470| 65 73 63 72 69 70 74 6f | 72 00 7c 03 5a 77 4f 70 |escripto|r.|.ZwOp|
|00001480| 65 6e 4b 65 79 00 cc cc | 8f 03 5a 77 51 75 65 72 |enKey...|..ZwQuer|
|00001490| 79 56 61 6c 75 65 4b 65 | 79 00 5e 03 5a 77 43 6c |yValueKe|y.^.ZwCl|
|000014a0| 6f 73 65 00 7a 02 52 74 | 6c 41 6e 73 69 53 74 72 |ose.z.Rt|lAnsiStr|
|000014b0| 69 6e 67 54 6f 55 6e 69 | 63 6f 64 65 53 74 72 69 |ingToUni|codeStri|
|000014c0| 6e 67 00 00 cc cc cc cc | 1c 02 4e 74 4f 70 65 6e |ng......|..NtOpen|
|000014d0| 46 69 6c 65 00 00 cc cc | 2f 00 45 78 41 63 71 75 |File....|/.ExAcqu|
|000014e0| 69 72 65 52 65 73 6f 75 | 72 63 65 53 68 61 72 65 |ireResou|rceShare|
|000014f0| 64 4c 69 74 65 00 cc cc | f8 01 4d 6d 55 6e 6c 6f |dLite...|..MmUnlo|
|00001500| 63 6b 50 61 67 65 73 00 | fa 01 4d 6d 55 6e 6d 61 |ckPages.|..MmUnma|
|00001510| 70 4c 6f 63 6b 65 64 50 | 61 67 65 73 00 00 e8 00 |pLockedP|ages....|
|00001520| 49 6f 42 75 69 6c 64 50 | 61 72 74 69 61 6c 4d 64 |IoBuildP|artialMd|
|00001530| 6c 00 08 01 49 6f 46 72 | 65 65 4d 64 6c 00 88 01 |l...IoFr|eeMdl...|
|00001540| 4b 65 51 75 65 72 79 54 | 69 6d 65 49 6e 63 72 65 |KeQueryT|imeIncre|
|00001550| 6d 65 6e 74 00 00 8d 01 | 4b 65 52 65 61 64 53 74 |ment....|KeReadSt|
|00001560| 61 74 65 51 75 65 75 65 | 00 00 36 00 45 78 41 6c |ateQueue|..6.ExAl|
|00001570| 6c 6f 63 61 74 65 50 6f | 6f 6c 57 69 74 68 54 61 |locatePo|olWithTa|
|00001580| 67 00 cc cc cc cc cc cc | 42 00 45 78 46 72 65 65 |g.......|B.ExFree|
|00001590| 50 6f 6f 6c 00 00 45 01 | 49 6f 66 43 6f 6d 70 6c |Pool..E.|IofCompl|
|000015a0| 65 74 65 52 65 71 75 65 | 73 74 00 00 44 01 49 6f |eteReque|st..D.Io|
|000015b0| 66 43 61 6c 6c 44 72 69 | 76 65 72 00 c1 03 5f 77 |fCallDri|ver..._w|
|000015c0| 63 73 6e 69 63 6d 70 00 | 7b 01 4b 65 49 6e 73 65 |csnicmp.|{.KeInse|
|000015d0| 72 74 48 65 61 64 51 75 | 65 75 65 00 cc cc cc cc |rtHeadQu|eue.....|
|000015e0| 62 00 45 78 51 75 65 75 | 65 57 6f 72 6b 49 74 65 |b.ExQueu|eWorkIte|
|000015f0| 6d 00 fb 00 49 6f 44 65 | 6c 65 74 65 44 65 76 69 |m...IoDe|leteDevi|
|00001600| 63 65 00 00 f3 00 49 6f | 43 72 65 61 74 65 44 65 |ce....Io|CreateDe|
|00001610| 76 69 63 65 00 00 df 00 | 49 6f 41 6c 6c 6f 63 61 |vice....|IoAlloca|
|00001620| 74 65 45 72 72 6f 72 4c | 6f 67 45 6e 74 72 79 00 |teErrorL|ogEntry.|
|00001630| 41 01 49 6f 57 72 69 74 | 65 45 72 72 6f 72 4c 6f |A.IoWrit|eErrorLo|
|00001640| 67 45 6e 74 72 79 00 00 | 24 03 52 74 6c 55 70 70 |gEntry..|$.RtlUpp|
|00001650| 65 72 43 68 61 72 00 00 | d1 03 6d 65 6d 6d 6f 76 |erChar..|..memmov|
|00001660| 65 00 cc cc 42 02 4f 62 | 52 65 66 65 72 65 6e 63 |e...B.Ob|Referenc|
|00001670| 65 4f 62 6a 65 63 74 42 | 79 48 61 6e 64 6c 65 00 |eObjectB|yHandle.|
|00001680| aa 01 4b 65 53 65 74 54 | 61 72 67 65 74 50 72 6f |..KeSetT|argetPro|
|00001690| 63 65 73 73 6f 72 44 70 | 63 00 cc cc cc cc cc cc |cessorDp|c.......|
|000016a0| 11 01 49 6f 47 65 74 52 | 65 6c 61 74 65 64 44 65 |..IoGetR|elatedDe|
|000016b0| 76 69 63 65 4f 62 6a 65 | 63 74 00 00 28 02 4e 74 |viceObje|ct..(.Nt|
|000016c0| 52 65 61 64 46 69 6c 65 | 00 00 2c 02 4e 74 53 65 |ReadFile|..,.NtSe|
|000016d0| 74 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 46 69 6c 65 |tInforma|tionFile|
|000016e0| 00 00 cc cc 33 02 4e 74 | 57 72 69 74 65 46 69 6c |....3.Nt|WriteFil|
|000016f0| 65 00 cc cc 7c 01 4b 65 | 49 6e 73 65 72 74 51 75 |e...|.Ke|InsertQu|
|00001700| 65 75 65 00 15 01 49 6f | 49 6e 69 74 69 61 6c 69 |eue...Io|Initiali|
|00001710| 7a 65 49 72 70 00 d3 01 | 4d 6d 42 75 69 6c 64 4d |zeIrp...|MmBuildM|
|00001720| 64 6c 46 6f 72 4e 6f 6e | 50 61 67 65 64 50 6f 6f |dlForNon|PagedPoo|
|00001730| 6c 00 cc cc ed 03 77 63 | 73 6c 65 6e 00 00 f5 02 |l.....wc|slen....|
|00001740| 52 74 6c 4f 65 6d 53 74 | 72 69 6e 67 54 6f 55 6e |RtlOemSt|ringToUn|
|00001750| 69 63 6f 64 65 53 74 72 | 69 6e 67 00 6f 01 4b 65 |icodeStr|ing.o.Ke|
|00001760| 49 6e 69 74 69 61 6c 69 | 7a 65 44 70 63 00 cc cc |Initiali|zeDpc...|
|00001770| b8 01 4b 65 57 61 69 74 | 46 6f 72 53 69 6e 67 6c |..KeWait|ForSingl|
|00001780| 65 4f 62 6a 65 63 74 00 | 54 01 4b 65 43 6c 65 61 |eObject.|T.KeClea|
|00001790| 72 45 76 65 6e 74 00 00 | ae 01 4b 65 53 65 74 54 |rEvent..|..KeSetT|
|000017a0| 69 6d 65 72 00 00 cc cc | 53 01 4b 65 43 61 6e 63 |imer....|S.KeCanc|
|000017b0| 65 6c 54 69 6d 65 72 00 | 8a 01 4b 65 52 65 61 64 |elTimer.|..KeRead|
|000017c0| 53 74 61 74 65 45 76 65 | 6e 74 00 00 70 01 4b 65 |StateEve|nt..p.Ke|
|000017d0| 49 6e 69 74 69 61 6c 69 | 7a 65 45 76 65 6e 74 00 |Initiali|zeEvent.|
|000017e0| 77 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 54 69 |w.KeInit|ializeTi|
|000017f0| 6d 65 72 00 b2 01 4b 65 | 54 69 63 6b 43 6f 75 6e |mer...Ke|TickCoun|
|00001800| 74 00 cc cc cc cc cc cc | 57 00 45 78 49 6e 74 65 |t.......|W.ExInte|
|00001810| 72 6c 6f 63 6b 65 64 50 | 6f 70 45 6e 74 72 79 53 |rlockedP|opEntryS|
|00001820| 4c 69 73 74 00 00 cc cc | cc cc cc cc cc cc cc cc |List....|........|
|00001830| cc cc cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00001840| 27 02 4e 74 51 75 65 72 | 79 56 6f 6c 75 6d 65 49 |'.NtQuer|yVolumeI|
|00001850| 6e 66 6f 72 6d 61 74 69 | 6f 6e 46 69 6c 65 00 00 |nformati|onFile..|
|00001860| 48 41 4c 2e 64 6c 6c 00 | 4a 00 4b 66 41 63 71 75 |HAL.dll.|J.KfAcqu|
|00001870| 69 72 65 53 70 69 6e 4c | 6f 63 6b 00 cc cc cc cc |ireSpinL|ock.....|
|00001880| 4b 00 4b 66 4c 6f 77 65 | 72 49 72 71 6c 00 cc cc |K.KfLowe|rIrql...|
|00001890| 42 00 4b 65 47 65 74 43 | 75 72 72 65 6e 74 49 72 |B.KeGetC|urrentIr|
|000018a0| 71 6c 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ql......|........|
|000018b0| 4d 00 4b 66 52 65 6c 65 | 61 73 65 53 70 69 6e 4c |M.KfRele|aseSpinL|
|000018c0| 6f 63 6b 00 4c 00 4b 66 | 52 61 69 73 65 49 72 71 |ock.L.Kf|RaiseIrq|
|000018d0| 6c 00 cc cc cc cc cc cc | 54 44 49 2e 53 59 53 00 |l.......|TDI.SYS.|
|000018e0| 20 00 54 64 69 4f 70 65 | 6e 4e 65 74 62 69 6f 73 | .TdiOpe|nNetbios|
|000018f0| 41 64 64 72 65 73 73 00 | 1c 00 54 64 69 44 65 72 |Address.|..TdiDer|
|00001900| 65 67 69 73 74 65 72 4e | 6f 74 69 66 69 63 61 74 |egisterN|otificat|
|00001910| 69 6f 6e 48 61 6e 64 6c | 65 72 00 00 25 00 54 64 |ionHandl|er..%.Td|
|00001920| 69 52 65 74 75 72 6e 43 | 68 61 69 6e 65 64 52 65 |iReturnC|hainedRe|
|00001930| 63 65 69 76 65 73 00 00 | 0d 00 54 64 69 43 6f 70 |ceives..|..TdiCop|
|00001940| 79 42 75 66 66 65 72 54 | 6f 4d 64 6c 00 00 cc cc |yBufferT|oMdl....|
|00001950| cc cc cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00001960| 24 00 54 64 69 52 65 67 | 69 73 74 65 72 4e 6f 74 |$.TdiReg|isterNot|
|00001970| 69 66 69 63 61 74 69 6f | 6e 48 61 6e 64 6c 65 72 |ificatio|nHandler|
|00001980| 00 00 cc cc cc cc cc cc | 6b 73 65 63 64 64 2e 73 |........|ksecdd.s|
|00001990| 79 73 00 00 01 00 41 63 | 71 75 69 72 65 43 72 65 |ys....Ac|quireCre|
|000019a0| 64 65 6e 74 69 61 6c 73 | 48 61 6e 64 6c 65 57 00 |dentials|HandleW.|
|000019b0| 09 00 49 6e 69 74 53 65 | 63 75 72 69 74 79 49 6e |..InitSe|curityIn|
|000019c0| 74 65 72 66 61 63 65 57 | 00 00 cc cc cc cc cc cc |terfaceW|........|
|000019d0| 0c 00 4d 61 70 53 65 63 | 75 72 69 74 79 45 72 72 |..MapSec|urityErr|
|000019e0| 6f 72 00 00 08 00 49 6d | 70 65 72 73 6f 6e 61 74 |or....Im|personat|
|000019f0| 65 53 65 63 75 72 69 74 | 79 43 6f 6e 74 65 78 74 |eSecurit|yContext|
|00001a00| 00 00 05 00 46 72 65 65 | 43 6f 6e 74 65 78 74 42 |....Free|ContextB|
|00001a10| 75 66 66 65 72 00 04 00 | 45 6e 75 6d 65 72 61 74 |uffer...|Enumerat|
|00001a20| 65 53 65 63 75 72 69 74 | 79 50 61 63 6b 61 67 65 |eSecurit|yPackage|
|00001a30| 73 57 00 00 cc cc cc cc | 03 00 44 65 6c 65 74 65 |sW......|..Delete|
|00001a40| 53 65 63 75 72 69 74 79 | 43 6f 6e 74 65 78 74 00 |Security|Context.|
|00001a50| 00 00 41 63 63 65 70 74 | 53 65 63 75 72 69 74 79 |..Accept|Security|
|00001a60| 43 6f 6e 74 65 78 74 00 | 00 00 00 00 00 00 00 00 |Context.|........|
|00001a70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+