home *** CD-ROM | disk | FTP | other *** search
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was processed as: Microsoft Windows Dynamic Link Library
(executable/dll).
You can browse this item here: ntsdexts.dll
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 d8 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 1f 9b 82 95 5b fa ec c6 | 5b fa ec c6 5b fa ec c6 |....[...|[...[...|
|00000090| 5b fa ed c6 60 fa ec c6 | 31 e6 ee c6 4c fa ec c6 |[...`...|1...L...|
|000000a0| 02 d9 ff c6 5c fa ec c6 | 0d f2 ea c6 5a fa ec c6 |....\...|....Z...|
|000000b0| 5b fa ec c6 58 fa ec c6 | 52 69 63 68 5b fa ec c6 |[...X...|Rich[...|
|000000c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 00 00 00 00 00 00 00 | 50 45 00 00 4c 01 04 00 |........|PE..L...|
|000000e0| 8a 20 f3 3a 00 00 00 00 | 00 00 00 00 e0 00 0e 23 |. .:....|.......#|
|000000f0| 0b 01 05 0c 00 2c 01 00 | 00 3a 00 00 00 00 00 00 |.....,..|.:......|
|00000100| 00 00 00 00 00 10 00 00 | 00 40 01 00 00 00 b1 69 |........|.@.....i|
|00000110| 00 10 00 00 00 02 00 00 | 05 00 00 00 05 00 00 00 |........|........|
|00000120| 04 00 00 00 00 00 00 00 | 00 90 01 00 00 06 00 00 |........|........|
|00000130| c2 7d 01 00 03 00 00 00 | 00 00 04 00 00 10 00 00 |.}......|........|
|00000140| 00 00 10 00 00 10 00 00 | 00 00 00 00 10 00 00 00 |........|........|
|00000150| 10 39 01 00 f6 01 00 00 | b0 31 01 00 64 00 00 00 |.9......|.1..d...|
|00000160| 00 60 01 00 d8 03 00 00 | 00 00 00 00 00 00 00 00 |.`......|........|
|00000170| 00 00 00 00 00 00 00 00 | 00 70 01 00 28 17 00 00 |........|.p..(...|
|00000180| 50 11 00 00 1c 00 00 00 | 00 00 00 00 00 00 00 00 |P.......|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 70 02 00 00 60 00 00 00 |........|p...`...|
|000001b0| 00 10 00 00 4c 01 00 00 | 00 00 00 00 00 00 00 00 |....L...|........|
|000001c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001d0| 2e 74 65 78 74 00 00 00 | 06 2b 01 00 00 10 00 00 |.text...|.+......|
|000001e0| 00 2c 01 00 00 06 00 00 | 00 00 00 00 00 00 00 00 |.,......|........|
|000001f0| 00 00 00 00 20 00 00 60 | 2e 64 61 74 61 00 00 00 |.... ..`|.data...|
|00000200| 5c 1a 00 00 00 40 01 00 | 00 08 00 00 00 32 01 00 |\....@..|.....2..|
|00000210| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 c0 |........|....@...|
|00000220| 2e 72 73 72 63 00 00 00 | d8 03 00 00 00 60 01 00 |.rsrc...|.....`..|
|00000230| 00 04 00 00 00 3a 01 00 | 00 00 00 00 00 00 00 00 |.....:..|........|
|00000240| 00 00 00 00 40 00 00 40 | 2e 72 65 6c 6f 63 00 00 |....@..@|.reloc..|
|00000250| 58 18 00 00 00 70 01 00 | 00 1a 00 00 00 3e 01 00 |X....p..|.....>..|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 42 |........|....@..B|
|00000270| 14 33 6d 39 30 00 00 00 | 50 20 f3 3a 3b 00 00 00 |.3m90...|P .:;...|
|00000280| 50 20 f3 3a 45 00 01 00 | 50 20 f3 3a 3b 00 00 00 |P .:E...|P .:;...|
|00000290| 50 20 f3 3a 52 00 00 00 | 00 00 00 00 00 00 00 00 |P .:R...|........|
|000002a0| 4d 53 56 43 52 54 2e 64 | 6c 6c 00 6e 74 64 6c 6c |MSVCRT.d|ll.ntdll|
|000002b0| 2e 64 6c 6c 00 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |.dll.KER|NEL32.dl|
|000002c0| 6c 00 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 00 |l.ADVAPI|32.dll..|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000410| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000420| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000440| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000460| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000470| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000480| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000490| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000510| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000520| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000530| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000550| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000600| 4c 87 db 77 b8 8a db 77 | 41 81 db 77 c6 d7 db 77 |L..w...w|A..w...w|
|00000610| ec a0 db 77 c0 ac db 77 | 4c b0 db 77 00 00 00 00 |...w...w|L..w....|
|00000620| 5c 31 e8 77 f9 8f e8 77 | 42 6c e8 77 61 69 e8 77 |\1.w...w|Bl.wai.w|
|00000630| c3 a9 e8 77 f3 65 e8 77 | 68 65 e8 77 33 b6 fc 77 |...w.e.w|he.w3..w|
|00000640| 0f b1 fc 77 35 72 eb 77 | 0f c0 e8 77 19 07 ea 77 |...w5r.w|...w...w|
|00000650| a2 69 e8 77 da 6a e8 77 | ac a3 e8 77 09 b1 e8 77 |.i.w.j.w|...w...w|
|00000660| 54 a2 e8 77 a2 3a e9 77 | d5 6c e8 77 7a fa e9 77 |T..w.:.w|.l.wz..w|
|00000670| 2a 84 e8 77 23 6b e8 77 | 00 00 00 00 6f 19 01 78 |*..w#k.w|....o..x|
|00000680| 80 45 02 78 35 19 01 78 | f8 16 01 78 f8 51 01 78 |.E.x5..x|...x.Q.x|
|00000690| c3 16 01 78 89 35 01 78 | d7 53 01 78 3a 58 01 78 |...x.5.x|.S.x:X.x|
|000006a0| d8 34 01 78 a2 17 01 78 | 89 14 01 78 2d 98 02 78 |.4.x...x|...x-..x|
|000006b0| d8 15 01 78 fd 15 01 78 | b4 45 02 78 de 7c 02 78 |...x...x|.E.x.|.x|
|000006c0| 11 db 00 78 5e 18 01 78 | 2e 45 02 78 00 00 00 00 |...x^..x|.E.x....|
|000006d0| 22 2a f8 77 14 2a f8 77 | 09 84 f8 77 30 2a f8 77 |"*.w.*.w|...w0*.w|
|000006e0| 90 07 f9 77 df ee fa 77 | 05 5b f8 77 e4 9d f8 77 |...w...w|.[.w...w|
|000006f0| 7f 5a f8 77 62 02 f9 77 | 23 9f f9 77 4d 9f f9 77 |.Z.wb..w|#..wM..w|
|00000700| 96 61 f8 77 14 7f f8 77 | f9 3f f8 77 e0 2f f8 77 |.a.w...w|.?.w./.w|
|00000710| 1b 80 f8 77 06 28 f8 77 | 33 b6 fc 77 0f b1 fc 77 |...w.(.w|3..w...w|
|00000720| 74 2d f8 77 d2 22 f9 77 | f7 00 f9 77 a5 6a f8 77 |t-.w.".w|...w.j.w|
|00000730| 90 3c f8 77 c6 3e f8 77 | f9 3f f8 77 77 2e f8 77 |.<.w.>.w|.?.ww..w|
|00000740| 3a 28 f8 77 cc 47 f9 77 | 00 00 00 00 00 00 00 00 |:(.w.G.w|........|
|00000750| 00 00 00 00 55 0e aa 39 | 00 00 00 00 04 00 00 00 |....U..9|........|
|00000760| 10 01 00 00 00 00 00 00 | 00 58 01 00 00 00 00 00 |........|.X......|
|00000770| 55 0e aa 39 00 00 00 00 | 03 00 00 00 b0 06 00 00 |U..9....|........|
|00000780| 00 00 00 00 10 59 01 00 | 00 00 00 00 55 0e aa 39 |.....Y..|....U..9|
|00000790| 00 00 00 00 06 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| c0 5f 01 00 00 00 00 00 | 55 0e aa 39 00 00 00 00 |._......|U..9....|
|000007b0| 02 00 00 00 1d 00 00 00 | 00 00 00 00 90 fe a2 ff |........|........|
|000007c0| 44 69 73 61 62 6c 65 20 | 70 72 6f 74 65 63 74 65 |Disable |protecte|
|000007d0| 64 20 44 4c 4c 20 76 65 | 72 69 66 69 63 61 74 69 |d DLL ve|rificati|
|000007e0| 6f 6e 00 00 64 70 64 00 | 44 69 73 61 62 6c 65 20 |on..dpd.|Disable |
|000007f0| 6b 65 72 6e 65 6c 20 6d | 6f 64 65 20 44 62 67 50 |kernel m|ode DbgP|
|00000800| 72 69 6e 74 20 6f 75 74 | 70 75 74 00 64 64 70 00 |rint out|put.ddp.|
|00000810| 44 65 62 75 67 20 57 49 | 4e 4c 4f 47 4f 4e 00 00 |Debug WI|NLOGON..|
|00000820| 64 77 6c 00 50 6c 61 63 | 65 20 68 65 61 70 20 61 |dwl.Plac|e heap a|
|00000830| 6c 6c 6f 63 61 74 69 6f | 6e 73 20 61 74 20 65 6e |llocatio|ns at en|
|00000840| 64 73 20 6f 66 20 70 61 | 67 65 73 00 68 70 61 00 |ds of pa|ges.hpa.|
|00000850| 45 6e 61 62 6c 65 20 4f | 62 6a 65 63 74 20 48 61 |Enable O|bject Ha|
|00000860| 6e 64 6c 65 20 54 79 70 | 65 20 54 61 67 67 69 6e |ndle Typ|e Taggin|
|00000870| 67 00 00 00 65 6f 74 00 | 45 6e 61 62 6c 65 20 45 |g...eot.|Enable E|
|00000880| 78 63 65 70 74 69 6f 6e | 20 4c 6f 67 67 69 6e 67 |xception| Logging|
|00000890| 00 00 00 00 65 65 6c 00 | 45 6e 61 62 6c 65 20 43 |....eel.|Enable C|
|000008a0| 6c 6f 73 65 20 45 78 63 | 65 70 74 69 6f 6e 00 00 |lose Exc|eption..|
|000008b0| 65 63 65 00 44 69 73 61 | 62 6c 65 20 48 65 61 70 |ece.Disa|ble Heap|
|000008c0| 20 43 6f 61 6c 65 73 63 | 65 20 6f 6e 20 46 72 65 | Coalesc|e on Fre|
|000008d0| 65 00 00 00 64 68 63 00 | 45 6e 61 62 6c 65 20 48 |e...dhc.|Enable H|
|000008e0| 65 61 70 20 41 50 49 20 | 43 61 6c 6c 20 54 72 61 |eap API |Call Tra|
|000008f0| 63 69 6e 67 00 00 00 00 | 68 61 74 00 44 69 73 61 |cing....|hat.Disa|
|00000900| 62 6c 65 20 70 61 67 69 | 6e 67 20 6f 66 20 6b 65 |ble pagi|ng of ke|
|00000910| 72 6e 65 6c 20 73 74 61 | 63 6b 73 00 64 70 73 00 |rnel sta|cks.dps.|
|00000920| 45 6e 61 62 6c 65 20 6c | 6f 61 64 69 6e 67 20 6f |Enable l|oading o|
|00000930| 66 20 6b 65 72 6e 65 6c | 20 64 65 62 75 67 67 65 |f kernel| debugge|
|00000940| 72 20 73 79 6d 62 6f 6c | 73 00 00 00 6b 73 6c 00 |r symbol|s...ksl.|
|00000950| 45 6e 61 62 6c 65 20 64 | 65 62 75 67 67 69 6e 67 |Enable d|ebugging|
|00000960| 20 6f 66 20 57 69 6e 33 | 32 20 53 75 62 73 79 73 | of Win3|2 Subsys|
|00000970| 74 65 6d 00 64 33 32 00 | 75 6e 75 73 65 64 00 00 |tem.d32.|unused..|
|00000980| 69 64 70 00 45 6e 61 62 | 6c 65 20 48 65 61 70 20 |idp.Enab|le Heap |
|00000990| 54 61 67 67 69 6e 67 20 | 42 79 20 44 4c 4c 00 00 |Tagging |By DLL..|
|000009a0| 68 74 64 00 4d 61 69 6e | 74 61 69 6e 20 61 20 6c |htd.Main|tain a l|
|000009b0| 69 73 74 20 6f 66 20 6f | 62 6a 65 63 74 73 20 66 |ist of o|bjects f|
|000009c0| 6f 72 20 65 61 63 68 20 | 74 79 70 65 00 00 00 00 |or each |type....|
|000009d0| 6f 74 6c 00 43 72 65 61 | 74 65 20 6b 65 72 6e 65 |otl.Crea|te kerne|
|000009e0| 6c 20 6d 6f 64 65 20 73 | 74 61 63 6b 20 74 72 61 |l mode s|tack tra|
|000009f0| 63 65 20 44 42 00 00 00 | 6b 73 74 00 43 72 65 61 |ce DB...|kst.Crea|
|00000a00| 74 65 20 75 73 65 72 20 | 6d 6f 64 65 20 73 74 61 |te user |mode sta|
|00000a10| 63 6b 20 74 72 61 63 65 | 20 44 42 00 75 73 74 00 |ck trace| DB.ust.|
|00000a20| 45 6e 61 62 6c 65 20 68 | 65 61 70 20 74 61 67 67 |Enable h|eap tagg|
|00000a30| 69 6e 67 00 68 74 67 00 | 45 6e 61 62 6c 65 20 70 |ing.htg.|Enable p|
|00000a40| 6f 6f 6c 20 74 61 67 67 | 69 6e 67 00 70 74 67 00 |ool tagg|ing.ptg.|
|00000a50| 45 6e 61 62 6c 65 20 70 | 6f 6f 6c 20 66 72 65 65 |Enable p|ool free|
|00000a60| 20 63 68 65 63 6b 69 6e | 67 00 00 00 70 66 63 00 | checkin|g...pfc.|
|00000a70| 45 6e 61 62 6c 65 20 70 | 6f 6f 6c 20 74 61 69 6c |Enable p|ool tail|
|00000a80| 20 63 68 65 63 6b 69 6e | 67 00 00 00 70 74 63 00 | checkin|g...ptc.|
|00000a90| 45 6e 61 62 6c 65 20 68 | 65 61 70 20 76 61 6c 69 |Enable h|eap vali|
|00000aa0| 64 61 74 69 6f 6e 20 6f | 6e 20 63 61 6c 6c 00 00 |dation o|n call..|
|00000ab0| 68 76 63 00 45 6e 61 62 | 6c 65 20 68 65 61 70 20 |hvc.Enab|le heap |
|00000ac0| 70 61 72 61 6d 65 74 65 | 72 20 63 68 65 63 6b 69 |paramete|r checki|
|00000ad0| 6e 67 00 00 68 70 63 00 | 45 6e 61 62 6c 65 20 68 |ng..hpc.|Enable h|
|00000ae0| 65 61 70 20 66 72 65 65 | 20 63 68 65 63 6b 69 6e |eap free| checkin|
|00000af0| 67 00 00 00 68 66 63 00 | 45 6e 61 62 6c 65 20 68 |g...hfc.|Enable h|
|00000b00| 65 61 70 20 74 61 69 6c | 20 63 68 65 63 6b 69 6e |eap tail| checkin|
|00000b10| 67 00 00 00 68 74 63 00 | 53 74 6f 70 20 6f 6e 20 |g...htc.|Stop on |
|00000b20| 48 75 6e 67 20 47 55 49 | 00 00 00 00 73 68 67 00 |Hung GUI|....shg.|
|00000b30| 44 65 62 75 67 20 49 6e | 69 74 69 61 6c 20 43 6f |Debug In|itial Co|
|00000b40| 6d 6d 61 6e 64 00 00 00 | 64 69 63 00 53 68 6f 77 |mmand...|dic.Show|
|00000b50| 20 4c 6f 61 64 65 72 20 | 53 6e 61 70 73 00 00 00 | Loader |Snaps...|
|00000b60| 73 6c 73 00 53 74 6f 70 | 20 4f 6e 20 45 78 63 65 |sls.Stop| On Exce|
|00000b70| 70 74 69 6f 6e 00 00 00 | 73 6f 65 00 57 00 61 00 |ption...|soe.W.a.|
|00000b80| 69 00 74 00 61 00 62 00 | 6c 00 65 00 50 00 6f 00 |i.t.a.b.|l.e.P.o.|
|00000b90| 72 00 74 00 00 00 00 00 | 4a 00 6f 00 62 00 00 00 |r.t.....|J.o.b...|
|00000ba0| 54 00 69 00 6d 00 65 00 | 72 00 00 00 43 00 68 00 |T.i.m.e.|r...C.h.|
|00000bb0| 61 00 6e 00 6e 00 65 00 | 6c 00 00 00 49 00 6f 00 |a.n.n.e.|l...I.o.|
|00000bc0| 43 00 6f 00 6d 00 70 00 | 6c 00 65 00 74 00 69 00 |C.o.m.p.|l.e.t.i.|
|00000bd0| 6f 00 6e 00 00 00 00 00 | 44 00 65 00 73 00 6b 00 |o.n.....|D.e.s.k.|
|00000be0| 74 00 6f 00 70 00 00 00 | 50 00 72 00 6f 00 63 00 |t.o.p...|P.r.o.c.|
|00000bf0| 65 00 73 00 73 00 00 00 | 4b 00 65 00 79 00 00 00 |e.s.s...|K.e.y...|
|00000c00| 53 00 65 00 6d 00 61 00 | 70 00 68 00 6f 00 72 00 |S.e.m.a.|p.h.o.r.|
|00000c10| 65 00 00 00 57 00 69 00 | 6e 00 64 00 6f 00 77 00 |e...W.i.|n.d.o.w.|
|00000c20| 53 00 74 00 61 00 74 00 | 69 00 6f 00 6e 00 00 00 |S.t.a.t.|i.o.n...|
|00000c30| 4d 00 75 00 74 00 61 00 | 6e 00 74 00 00 00 00 00 |M.u.t.a.|n.t.....|
|00000c40| 53 00 79 00 6d 00 62 00 | 6f 00 6c 00 69 00 63 00 |S.y.m.b.|o.l.i.c.|
|00000c50| 4c 00 69 00 6e 00 6b 00 | 00 00 00 00 44 00 69 00 |L.i.n.k.|....D.i.|
|00000c60| 72 00 65 00 63 00 74 00 | 6f 00 72 00 79 00 00 00 |r.e.c.t.|o.r.y...|
|00000c70| 50 00 6f 00 72 00 74 00 | 00 00 00 00 46 00 69 00 |P.o.r.t.|....F.i.|
|00000c80| 6c 00 65 00 00 00 00 00 | 53 00 65 00 63 00 74 00 |l.e.....|S.e.c.t.|
|00000c90| 69 00 6f 00 6e 00 00 00 | 45 00 76 00 65 00 6e 00 |i.o.n...|E.v.e.n.|
|00000ca0| 74 00 00 00 4e 00 6f 00 | 6e 00 65 00 00 00 00 00 |t...N.o.|n.e.....|
|00000cb0| 44 65 6c 65 67 61 74 69 | 6f 6e 00 00 49 6d 70 65 |Delegati|on..Impe|
|00000cc0| 72 73 6f 6e 61 74 69 6f | 6e 00 00 00 49 64 65 6e |rsonatio|n...Iden|
|00000cd0| 74 69 66 69 63 61 74 69 | 6f 6e 00 00 41 6e 6f 6e |tificati|on..Anon|
|00000ce0| 79 6d 6f 75 73 00 00 00 | 53 65 45 6e 61 62 6c 65 |ymous...|SeEnable|
|00000cf0| 44 65 6c 65 67 61 74 69 | 6f 6e 50 72 69 76 69 6c |Delegati|onPrivil|
|00000d00| 65 67 65 00 53 65 53 79 | 6e 63 41 67 65 6e 74 50 |ege.SeSy|ncAgentP|
|00000d10| 72 69 76 69 6c 65 67 65 | 00 00 00 00 53 65 55 6e |rivilege|....SeUn|
|00000d20| 64 6f 63 6b 50 72 69 76 | 69 6c 65 67 65 00 00 00 |dockPriv|ilege...|
|00000d30| 53 65 52 65 6d 6f 74 65 | 53 68 75 74 64 6f 77 6e |SeRemote|Shutdown|
|00000d40| 50 72 69 76 69 6c 65 67 | 65 00 00 00 53 65 43 68 |Privileg|e...SeCh|
|00000d50| 61 6e 67 65 4e 6f 74 69 | 66 79 50 72 69 76 69 6c |angeNoti|fyPrivil|
|00000d60| 65 67 65 00 53 65 53 79 | 73 74 65 6d 45 6e 76 69 |ege.SeSy|stemEnvi|
|00000d70| 72 6f 6e 6d 65 6e 74 50 | 72 69 76 69 6c 65 67 65 |ronmentP|rivilege|
|00000d80| 00 00 00 00 53 65 41 75 | 64 69 74 50 72 69 76 69 |....SeAu|ditPrivi|
|00000d90| 6c 65 67 65 00 00 00 00 | 53 65 44 65 62 75 67 50 |lege....|SeDebugP|
|00000da0| 72 69 76 69 6c 65 67 65 | 00 00 00 00 53 65 53 68 |rivilege|....SeSh|
|00000db0| 75 74 64 6f 77 6e 50 72 | 69 76 69 6c 65 67 65 00 |utdownPr|ivilege.|
|00000dc0| 53 65 52 65 73 74 6f 72 | 65 50 72 69 76 69 6c 65 |SeRestor|ePrivile|
|00000dd0| 67 65 00 00 53 65 42 61 | 63 6b 75 70 50 72 69 76 |ge..SeBa|ckupPriv|
|00000de0| 69 6c 65 67 65 00 00 00 | 53 65 43 72 65 61 74 65 |ilege...|SeCreate|
|00000df0| 50 65 72 6d 61 6e 65 6e | 74 50 72 69 76 69 6c 65 |Permanen|tPrivile|
|00000e00| 67 65 00 00 53 65 43 72 | 65 61 74 65 50 61 67 65 |ge..SeCr|eatePage|
|00000e10| 66 69 6c 65 50 72 69 76 | 69 6c 65 67 65 00 00 00 |filePriv|ilege...|
|00000e20| 53 65 49 6e 63 72 65 61 | 73 65 42 61 73 65 50 72 |SeIncrea|seBasePr|
|00000e30| 69 6f 72 69 74 79 50 72 | 69 76 69 6c 65 67 65 00 |iorityPr|ivilege.|
|00000e40| 53 65 50 72 6f 66 69 6c | 65 53 69 6e 67 6c 65 50 |SeProfil|eSingleP|
|00000e50| 72 6f 63 65 73 73 50 72 | 69 76 69 6c 65 67 65 00 |rocessPr|ivilege.|
|00000e60| 53 65 53 79 73 74 65 6d | 50 72 6f 66 69 6c 65 50 |SeSystem|ProfileP|
|00000e70| 72 69 76 69 6c 65 67 65 | 00 00 00 00 53 65 4c 6f |rivilege|....SeLo|
|00000e80| 61 64 44 72 69 76 65 72 | 50 72 69 76 69 6c 65 67 |adDriver|Privileg|
|00000e90| 65 00 00 00 53 65 54 61 | 6b 65 4f 77 6e 65 72 73 |e...SeTa|keOwners|
|00000ea0| 68 69 70 50 72 69 76 69 | 6c 65 67 65 00 00 00 00 |hipPrivi|lege....|
|00000eb0| 53 65 53 65 63 75 72 69 | 74 79 50 72 69 76 69 6c |SeSecuri|tyPrivil|
|00000ec0| 65 67 65 00 53 65 54 63 | 62 50 72 69 76 69 6c 65 |ege.SeTc|bPrivile|
|00000ed0| 67 65 00 00 53 65 4d 61 | 63 68 69 6e 65 41 63 63 |ge..SeMa|chineAcc|
|00000ee0| 6f 75 6e 74 50 72 69 76 | 69 6c 65 67 65 00 00 00 |ountPriv|ilege...|
|00000ef0| 53 65 4c 6f 63 6b 4d 65 | 6d 6f 72 79 50 72 69 76 |SeLockMe|moryPriv|
|00000f00| 69 6c 65 67 65 00 00 00 | 53 65 41 73 73 69 67 6e |ilege...|SeAssign|
|00000f10| 50 72 69 6d 61 72 79 54 | 6f 6b 65 6e 50 72 69 76 |PrimaryT|okenPriv|
|00000f20| 69 6c 65 67 65 00 00 00 | 53 65 43 72 65 61 74 65 |ilege...|SeCreate|
|00000f30| 54 6f 6b 65 6e 50 72 69 | 76 69 6c 65 67 65 00 00 |TokenPri|vilege..|
|00000f40| 49 6e 76 61 6c 69 64 00 | 53 65 74 53 65 63 41 74 |Invalid.|SetSecAt|
|00000f50| 74 72 00 00 53 65 74 41 | 74 74 72 00 41 73 73 69 |tr..SetA|ttr.Assi|
|00000f60| 67 6e 50 72 6f 63 65 73 | 73 00 00 00 57 72 69 74 |gnProces|s...Writ|
|00000f70| 65 4d 65 73 73 61 67 65 | 00 00 00 00 52 65 61 64 |eMessage|....Read|
|00000f80| 4d 65 73 73 61 67 65 00 | 4d 6f 64 69 66 79 00 00 |Message.|Modify..|
|00000f90| 53 77 69 74 63 68 44 65 | 73 6b 74 6f 70 00 00 00 |SwitchDe|sktop...|
|00000fa0| 57 72 69 74 65 4f 62 6a | 65 63 74 73 00 00 00 00 |WriteObj|ects....|
|00000fb0| 4a 6f 75 72 6e 61 6c 50 | 6c 61 79 62 61 63 6b 00 |JournalP|layback.|
|00000fc0| 4a 6f 75 72 6e 61 6c 52 | 65 63 6f 72 64 00 00 00 |JournalR|ecord...|
|00000fd0| 48 6f 6f 6b 43 6f 6e 74 | 72 6f 6c 00 43 72 65 61 |HookCont|rol.Crea|
|00000fe0| 74 65 4d 65 6e 75 00 00 | 43 72 65 61 74 65 57 69 |teMenu..|CreateWi|
|00000ff0| 6e 64 6f 77 00 00 00 00 | 52 65 61 64 4f 62 6a 65 |ndow....|ReadObje|
|00001000| 63 74 73 00 52 65 61 64 | 53 63 72 65 65 6e 00 00 |cts.Read|Screen..|
|00001010| 45 6e 75 6d 65 72 61 74 | 65 00 00 00 45 78 69 74 |Enumerat|e...Exit|
|00001020| 57 69 6e 64 6f 77 73 00 | 47 6c 6f 62 61 6c 41 74 |Windows.|GlobalAt|
|00001030| 6f 6d 00 00 43 72 65 61 | 74 65 44 65 73 6b 74 6f |om..Crea|teDeskto|
|00001040| 70 00 00 00 43 6c 69 70 | 62 6f 61 72 64 00 00 00 |p...Clip|board...|
|00001050| 45 6e 75 6d 44 65 73 6b | 74 6f 70 73 00 00 00 00 |EnumDesk|tops....|
|00001060| 43 72 65 61 74 65 53 75 | 62 64 69 72 00 00 00 00 |CreateSu|bdir....|
|00001070| 43 72 65 61 74 65 00 00 | 54 72 61 76 65 72 73 65 |Create..|Traverse|
|00001080| 00 00 00 00 43 6f 6e 6e | 65 63 74 00 57 72 69 74 |....Conn|ect.Writ|
|00001090| 65 41 74 74 72 00 00 00 | 52 65 61 64 41 74 74 72 |eAttr...|ReadAttr|
|000010a0| 00 00 00 00 44 65 6c 43 | 68 69 6c 64 00 00 00 00 |....DelC|hild....|
|000010b0| 45 78 65 63 75 74 65 2f | 54 72 61 76 65 72 73 65 |Execute/|Traverse|
|000010c0| 00 00 00 00 57 72 69 74 | 65 45 41 00 52 65 61 64 |....Writ|eEA.Read|
|000010d0| 45 41 00 00 41 70 70 65 | 6e 64 2f 53 75 62 44 69 |EA..Appe|nd/SubDi|
|000010e0| 72 2f 43 72 65 61 74 65 | 50 69 70 65 00 00 00 00 |r/Create|Pipe....|
|000010f0| 57 72 69 74 65 2f 41 64 | 64 00 00 00 52 65 61 64 |Write/Ad|d...Read|
|00001100| 2f 4c 69 73 74 00 00 00 | 45 78 74 65 6e 64 00 00 |/List...|Extend..|
|00001110| 4d 61 70 45 78 65 63 75 | 74 65 00 00 4d 61 70 52 |MapExecu|te..MapR|
|00001120| 65 61 64 00 4d 61 70 57 | 72 69 74 65 00 00 00 00 |ead.MapW|rite....|
|00001130| 44 69 72 65 63 74 49 6d | 70 65 72 73 6f 6e 61 74 |DirectIm|personat|
|00001140| 65 00 00 00 53 65 74 54 | 6f 6b 65 6e 00 00 00 00 |e...SetT|oken....|
|00001150| 53 65 74 43 6f 6e 74 65 | 78 74 00 00 47 65 74 43 |SetConte|xt..GetC|
|00001160| 6f 6e 74 65 78 74 00 00 | 41 6c 65 72 74 00 00 00 |ontext..|Alert...|
|00001170| 53 75 73 70 65 6e 64 00 | 53 65 74 50 6f 72 74 00 |Suspend.|SetPort.|
|00001180| 51 75 65 72 79 49 6e 66 | 6f 00 00 00 53 65 74 49 |QueryInf|o...SetI|
|00001190| 6e 66 6f 00 53 65 74 51 | 75 6f 74 61 00 00 00 00 |nfo.SetQ|uota....|
|000011a0| 43 72 65 61 74 65 50 72 | 6f 63 65 73 73 00 00 00 |CreatePr|ocess...|
|000011b0| 44 75 70 48 61 6e 64 6c | 65 00 00 00 56 4d 57 72 |DupHandl|e...VMWr|
|000011c0| 69 74 65 00 56 4d 52 65 | 61 64 00 00 56 4d 4f 70 |ite.VMRe|ad..VMOp|
|000011d0| 00 00 00 00 43 72 65 61 | 74 65 54 68 72 65 61 64 |....Crea|teThread|
|000011e0| 00 00 00 00 54 65 72 6d | 69 6e 61 74 65 00 00 00 |....Term|inate...|
|000011f0| 43 6f 6e 74 72 6f 6c 00 | 4d 6f 64 69 66 79 53 74 |Control.|ModifySt|
|00001200| 61 74 65 00 51 75 65 72 | 79 53 74 61 74 65 00 00 |ate.Quer|yState..|
|00001210| 43 72 65 61 74 65 4c 69 | 6e 6b 00 00 4e 6f 74 69 |CreateLi|nk..Noti|
|00001220| 66 79 00 00 45 6e 75 6d | 53 75 62 4b 65 79 00 00 |fy..Enum|SubKey..|
|00001230| 43 72 65 61 74 65 53 75 | 62 4b 65 79 00 00 00 00 |CreateSu|bKey....|
|00001240| 53 65 74 56 61 6c 75 65 | 00 00 00 00 51 75 65 72 |SetValue|....Quer|
|00001250| 79 56 61 6c 75 65 00 00 | 41 64 6a 75 73 74 44 65 |yValue..|AdjustDe|
|00001260| 66 00 00 00 41 64 6a 75 | 73 74 47 72 6f 75 70 00 |f...Adju|stGroup.|
|00001270| 41 64 6a 75 73 74 50 72 | 69 76 00 00 51 75 65 72 |AdjustPr|iv..Quer|
|00001280| 79 53 6f 75 72 63 65 00 | 51 75 65 72 79 00 00 00 |ySource.|Query...|
|00001290| 49 6d 70 65 72 73 6f 6e | 61 74 65 00 44 75 70 6c |Imperson|ate.Dupl|
|000012a0| 69 63 61 74 65 00 00 00 | 41 73 73 69 67 6e 50 72 |icate...|AssignPr|
|000012b0| 69 6d 61 72 79 00 00 00 | 47 65 6e 65 72 69 63 52 |imary...|GenericR|
|000012c0| 65 61 64 00 47 65 6e 65 | 72 69 63 57 72 69 74 65 |ead.Gene|ricWrite|
|000012d0| 00 00 00 00 47 65 6e 65 | 72 69 63 45 78 65 63 00 |....Gene|ricExec.|
|000012e0| 47 65 6e 65 72 69 63 41 | 6c 6c 00 00 4d 61 78 41 |GenericA|ll..MaxA|
|000012f0| 6c 6c 6f 77 65 64 00 00 | 53 61 63 6c 00 00 00 00 |llowed..|Sacl....|
|00001300| 00 00 00 00 53 79 6e 63 | 68 00 00 00 57 72 69 74 |....Sync|h...Writ|
|00001310| 65 4f 77 6e 65 72 00 00 | 57 72 69 74 65 44 61 63 |eOwner..|WriteDac|
|00001320| 00 00 00 00 52 65 61 64 | 43 6f 6e 74 72 6f 6c 00 |....Read|Control.|
|00001330| 44 65 6c 65 74 65 00 00 | 54 00 6f 00 6b 00 65 00 |Delete..|T.o.k.e.|
|00001340| 6e 00 00 00 54 00 68 00 | 72 00 65 00 61 00 64 00 |n...T.h.|r.e.a.d.|
|00001350| 00 00 00 00 00 00 00 00 | dc 1e b1 69 d4 1e b1 69 |........|...i...i|
|00001360| c8 1e b1 69 bc 1e b1 69 | b0 1e b1 69 00 00 00 00 |...i...i|...i....|
|00001370| dc 1e b1 69 a8 1e b1 69 | 9c 1e b1 69 90 1e b1 69 |...i...i|...i...i|
|00001380| 84 1e b1 69 00 00 00 00 | 7c 1e b1 69 74 1e b1 69 |...i....||..it..i|
|00001390| 68 1e b1 69 5c 1e b1 69 | 50 1e b1 69 40 1e b1 69 |h..i\..i|P..i@..i|
|000013a0| 38 1e b1 69 2c 1e b1 69 | 24 1e b1 69 14 1e b1 69 |8..i,..i|$..i...i|
|000013b0| 00 1e b1 69 f0 1d b1 69 | d8 1d b1 69 cc 1d b1 69 |...i...i|...i...i|
|000013c0| cc 1d b1 69 cc 1d b1 69 | 00 00 00 00 52 65 73 65 |...i...i|....Rese|
|000013d0| 72 76 65 64 00 00 00 00 | 49 6d 70 6f 72 74 20 41 |rved....|Import A|
|000013e0| 64 64 72 65 73 73 20 54 | 61 62 6c 65 00 00 00 00 |ddress T|able....|
|000013f0| 42 6f 75 6e 64 20 49 6d | 70 6f 72 74 00 00 00 00 |Bound Im|port....|
|00001400| 4c 6f 61 64 20 43 6f 6e | 66 69 67 75 72 61 74 69 |Load Con|figurati|
|00001410| 6f 6e 00 00 54 68 72 65 | 61 64 20 53 74 6f 72 61 |on..Thre|ad Stora|
|00001420| 67 65 00 00 53 70 65 63 | 69 61 6c 00 44 65 73 63 |ge..Spec|ial.Desc|
|00001430| 72 69 70 74 69 6f 6e 00 | 44 65 62 75 67 00 00 00 |ription.|Debug...|
|00001440| 42 61 73 65 20 52 65 6c | 6f 63 61 74 69 6f 6e 00 |Base Rel|ocation.|
|00001450| 53 65 63 75 72 69 74 79 | 00 00 00 00 45 78 63 65 |Security|....Exce|
|00001460| 70 74 69 6f 6e 00 00 00 | 52 65 73 6f 75 72 63 65 |ption...|Resource|
|00001470| 00 00 00 00 49 6d 70 6f | 72 74 00 00 45 78 70 6f |....Impo|rt..Expo|
|00001480| 72 74 00 00 50 6f 73 69 | 78 20 43 55 49 00 00 00 |rt..Posi|x CUI...|
|00001490| 57 69 6e 64 6f 77 73 20 | 43 55 49 00 57 69 6e 64 |Windows |CUI.Wind|
|000014a0| 6f 77 73 20 47 55 49 00 | 4e 61 74 69 76 65 00 00 |ows GUI.|Native..|
|000014b0| 49 6e 74 65 6c 20 49 41 | 36 34 00 00 41 6c 70 68 |Intel IA|64..Alph|
|000014c0| 61 20 41 58 50 36 34 00 | 41 6c 70 68 61 20 41 58 |a AXP64.|Alpha AX|
|000014d0| 50 00 00 00 69 33 38 36 | 00 00 00 00 55 6e 6b 6e |P...i386|....Unkn|
|000014e0| 6f 77 6e 00 44 4f 53 44 | 45 56 49 43 45 5f 44 52 |own.DOSD|EVICE_DR|
|000014f0| 49 56 45 5f 52 41 4d 44 | 49 53 4b 00 44 4f 53 44 |IVE_RAMD|ISK.DOSD|
|00001500| 45 56 49 43 45 5f 44 52 | 49 56 45 5f 43 44 52 4f |EVICE_DR|IVE_CDRO|
|00001510| 4d 00 00 00 44 4f 53 44 | 45 56 49 43 45 5f 44 52 |M...DOSD|EVICE_DR|
|00001520| 49 56 45 5f 52 45 4d 4f | 54 45 00 00 44 4f 53 44 |IVE_REMO|TE..DOSD|
|00001530| 45 56 49 43 45 5f 44 52 | 49 56 45 5f 46 49 58 45 |EVICE_DR|IVE_FIXE|
|00001540| 44 00 00 00 44 4f 53 44 | 45 56 49 43 45 5f 44 52 |D...DOSD|EVICE_DR|
|00001550| 49 56 45 5f 52 45 4d 4f | 56 41 42 4c 45 00 00 00 |IVE_REMO|VABLE...|
|00001560| 44 4f 53 44 45 56 49 43 | 45 5f 44 52 49 56 45 5f |DOSDEVIC|E_DRIVE_|
|00001570| 43 41 4c 43 55 4c 41 54 | 45 00 00 00 44 4f 53 44 |CALCULAT|E...DOSD|
|00001580| 45 56 49 43 45 5f 44 52 | 49 56 45 5f 55 4e 4b 4e |EVICE_DR|IVE_UNKN|
|00001590| 4f 57 4e 00 55 6e 63 6f | 6d 6d 69 74 74 65 64 20 |OWN.Unco|mmitted |
|000015a0| 52 61 6e 67 65 73 00 00 | 4c 6f 63 6b 56 61 72 69 |Ranges..|LockVari|
|000015b0| 61 62 6c 65 00 00 00 00 | 46 72 65 65 4c 69 73 74 |able....|FreeList|
|000015c0| 73 00 00 00 50 73 65 75 | 64 6f 54 61 67 45 6e 74 |s...Pseu|doTagEnt|
|000015d0| 72 69 65 73 00 00 00 00 | 4e 6f 6e 44 65 64 69 63 |ries....|NonDedic|
|000015e0| 61 74 65 64 4c 69 73 74 | 4c 65 6e 67 74 68 00 00 |atedList|Length..|
|000015f0| 41 6c 6c 6f 63 61 74 6f | 72 42 61 63 6b 54 72 61 |Allocato|rBackTra|
|00001600| 63 65 49 6e 64 65 78 00 | 46 72 65 65 4c 69 73 74 |ceIndex.|FreeList|
|00001610| 73 49 6e 55 73 65 54 65 | 72 6d 69 6e 61 74 65 00 |sInUseTe|rminate.|
|00001620| 46 72 65 65 4c 69 73 74 | 73 49 6e 55 73 65 00 00 |FreeList|sInUse..|
|00001630| 53 65 67 6d 65 6e 74 73 | 00 00 00 00 56 69 72 74 |Segments|....Virt|
|00001640| 75 61 6c 41 6c 6c 6f 63 | 64 42 6c 6f 63 6b 73 00 |ualAlloc|dBlocks.|
|00001650| 41 6c 69 67 6e 4d 61 73 | 6b 00 00 00 41 6c 69 67 |AlignMas|k...Alig|
|00001660| 6e 52 6f 75 6e 64 00 00 | 55 6e 75 73 65 64 55 6e |nRound..|UnusedUn|
|00001670| 43 6f 6d 6d 69 74 74 65 | 64 52 61 6e 67 65 73 00 |Committe|dRanges.|
|00001680| 55 43 52 53 65 67 6d 65 | 6e 74 73 00 54 61 67 45 |UCRSegme|nts.TagE|
|00001690| 6e 74 72 69 65 73 00 00 | 4d 61 78 69 6d 75 6d 54 |ntries..|MaximumT|
|000016a0| 61 67 49 6e 64 65 78 00 | 4e 65 78 74 41 76 61 69 |agIndex.|NextAvai|
|000016b0| 6c 61 62 6c 65 54 61 67 | 49 6e 64 65 78 00 00 00 |lableTag|Index...|
|000016c0| 48 65 61 64 65 72 56 61 | 6c 69 64 61 74 65 43 6f |HeaderVa|lidateCo|
|000016d0| 70 79 00 00 48 65 61 64 | 65 72 56 61 6c 69 64 61 |py..Head|erValida|
|000016e0| 74 65 4c 65 6e 67 74 68 | 00 00 00 00 50 72 6f 63 |teLength|....Proc|
|000016f0| 65 73 73 48 65 61 70 73 | 4c 69 73 74 49 6e 64 65 |essHeaps|ListInde|
|00001700| 78 00 00 00 4d 61 78 69 | 6d 75 6d 41 6c 6c 6f 63 |x...Maxi|mumAlloc|
|00001710| 61 74 69 6f 6e 53 69 7a | 65 00 00 00 54 6f 74 61 |ationSiz|e...Tota|
|00001720| 6c 46 72 65 65 53 69 7a | 65 00 00 00 44 65 43 6f |lFreeSiz|e...DeCo|
|00001730| 6d 6d 69 74 54 6f 74 61 | 6c 46 72 65 65 54 68 72 |mmitTota|lFreeThr|
|00001740| 65 73 68 6f 6c 64 00 00 | 44 65 43 6f 6d 6d 69 74 |eshold..|DeCommit|
|00001750| 46 72 65 65 42 6c 6f 63 | 6b 54 68 72 65 73 68 6f |FreeBloc|kThresho|
|00001760| 6c 64 00 00 53 65 67 6d | 65 6e 74 43 6f 6d 6d 69 |ld..Segm|entCommi|
|00001770| 74 00 00 00 53 65 67 6d | 65 6e 74 52 65 73 65 72 |t...Segm|entReser|
|00001780| 76 65 00 00 56 69 72 74 | 75 61 6c 4d 65 6d 6f 72 |ve..Virt|ualMemor|
|00001790| 79 54 68 72 65 73 68 6f | 6c 64 00 00 46 6f 72 63 |yThresho|ld..Forc|
|000017a0| 65 46 6c 61 67 73 00 00 | 46 6c 61 67 73 00 00 00 |eFlags..|Flags...|
|000017b0| 53 69 67 6e 61 74 75 72 | 65 00 00 00 45 6e 74 72 |Signatur|e...Entr|
|000017c0| 79 00 00 00 20 20 20 20 | 55 6e 61 62 6c 65 20 74 |y... |Unable t|
|000017d0| 6f 20 72 65 61 64 20 50 | 72 6f 63 65 73 73 20 50 |o read P|rocess P|
|000017e0| 45 42 0a 00 25 73 3a 20 | 28 25 73 29 20 25 23 78 |EB..%s: |(%s) %#x|
|000017f0| 20 2d 20 25 73 0a 00 00 | 25 73 3a 20 28 25 73 29 | - %s...|%s: (%s)|
|00001800| 20 25 23 78 20 28 25 75 | 29 20 2d 20 25 73 0a 00 | %#x (%u|) - %s..|
|00001810| 4e 6f 20 6d 61 70 70 65 | 64 20 65 72 72 6f 72 20 |No mappe|d error |
|00001820| 63 6f 64 65 00 00 00 00 | 57 69 6e 33 32 00 00 00 |code....|Win32...|
|00001830| 4e 65 74 41 50 49 00 00 | 6e 65 74 6d 73 67 2e 64 |NetAPI..|netmsg.d|
|00001840| 6c 6c 00 00 57 69 6e 73 | 6f 63 6b 00 77 73 6f 63 |ll..Wins|ock.wsoc|
|00001850| 6b 33 32 2e 64 6c 6c 00 | 48 52 45 53 55 4c 54 00 |k32.dll.|HRESULT.|
|00001860| 4b 45 52 4e 45 4c 33 32 | 2e 44 4c 4c 00 00 00 00 |KERNEL32|.DLL....|
|00001870| 4e 54 53 54 41 54 55 53 | 00 00 00 00 4e 54 44 4c |NTSTATUS|....NTDL|
|00001880| 4c 2e 44 4c 4c 00 00 00 | 45 72 72 6f 72 20 63 6f |L.DLL...|Error co|
|00001890| 64 65 00 00 55 6e 61 62 | 6c 65 20 74 6f 20 72 65 |de..Unab|le to re|
|000018a0| 61 64 20 63 75 72 72 65 | 6e 74 20 74 68 72 65 61 |ad curre|nt threa|
|000018b0| 64 27 73 20 54 45 42 0a | 00 00 00 00 4c 61 73 74 |d's TEB.|....Last|
|000018c0| 53 74 61 74 75 73 56 61 | 6c 75 65 00 4c 61 73 74 |StatusVa|lue.Last|
|000018d0| 45 72 72 6f 72 56 61 6c | 75 65 00 00 56 65 72 73 |ErrorVal|ue..Vers|
|000018e0| 69 6f 6e 20 25 64 2e 25 | 64 20 28 42 75 69 6c 64 |ion %d.%|d (Build|
|000018f0| 20 25 64 25 73 29 20 25 | 73 0a 00 00 3a 20 25 73 | %d%s) %|s...: %s|
|00001900| 00 00 00 00 43 75 72 72 | 65 6e 74 54 79 70 65 00 |....Curr|entType.|
|00001910| 53 6f 66 74 77 61 72 65 | 5c 4d 69 63 72 6f 73 6f |Software|\Microso|
|00001920| 66 74 5c 57 69 6e 64 6f | 77 73 20 4e 54 5c 43 75 |ft\Windo|ws NT\Cu|
|00001930| 72 72 65 6e 74 56 65 72 | 73 69 6f 6e 00 00 00 00 |rrentVer|sion....|
|00001940| 47 65 74 56 65 72 73 69 | 6f 6e 45 78 20 66 61 69 |GetVersi|onEx fai|
|00001950| 6c 65 64 20 2d 20 25 75 | 0a 00 00 00 49 6e 76 61 |led - %u|....Inva|
|00001960| 6c 69 64 20 63 6f 6d 6d | 61 6e 64 2e 20 20 4e 6f |lid comm|and. No|
|00001970| 20 68 65 6c 70 20 61 76 | 61 69 6c 61 62 6c 65 0a | help av|ailable.|
|00001980| 00 00 00 00 20 20 20 20 | 2d 61 62 62 72 65 76 20 |.... |-abbrev |
|00001990| 2d 20 73 70 65 63 69 66 | 69 65 73 20 61 20 73 69 |- specif|ies a si|
|000019a0| 6e 67 6c 65 20 62 69 74 | 20 74 6f 20 63 6c 65 61 |ngle bit| to clea|
|000019b0| 72 20 69 6e 20 4e 74 47 | 6c 6f 62 61 6c 46 6c 61 |r in NtG|lobalFla|
|000019c0| 67 0a 00 00 20 20 20 20 | 2d 6e 75 6d 62 65 72 20 |g... |-number |
|000019d0| 2d 20 73 70 65 63 69 66 | 69 65 73 20 6f 6e 65 20 |- specif|ies one |
|000019e0| 6f 72 20 6d 6f 72 65 20 | 62 69 74 73 20 74 6f 20 |or more |bits to |
|000019f0| 63 6c 65 61 72 20 69 6e | 20 4e 74 47 6c 6f 62 61 |clear in| NtGloba|
|00001a00| 6c 46 6c 61 67 0a 00 00 | 20 20 20 20 2b 61 62 62 |lFlag...| +abb|
|00001a10| 72 65 76 20 2d 20 73 70 | 65 63 69 66 69 65 73 20 |rev - sp|ecifies |
|00001a20| 61 20 73 69 6e 67 6c 65 | 20 62 69 74 20 74 6f 20 |a single| bit to |
|00001a30| 73 65 74 20 69 6e 20 4e | 74 47 6c 6f 62 61 6c 46 |set in N|tGlobalF|
|00001a40| 6c 61 67 0a 00 00 00 00 | 20 20 20 20 2b 6e 75 6d |lag.....| +num|
|00001a50| 62 65 72 20 2d 20 73 70 | 65 63 69 66 69 65 73 20 |ber - sp|ecifies |
|00001a60| 6f 6e 65 20 6f 72 20 6d | 6f 72 65 20 62 69 74 73 |one or m|ore bits|
|00001a70| 20 74 6f 20 73 65 74 20 | 69 6e 20 4e 74 47 6c 6f | to set |in NtGlo|
|00001a80| 62 61 6c 46 6c 61 67 0a | 00 00 00 00 20 20 20 20 |balFlag.|.... |
|00001a90| 20 20 20 20 20 20 20 20 | 20 4e 74 47 6c 6f 62 61 | | NtGloba|
|00001aa0| 6c 46 6c 61 67 0a 00 00 | 20 20 20 20 6e 75 6d 62 |lFlag...| numb|
|00001ab0| 65 72 20 2d 20 33 32 2d | 62 69 74 20 6e 75 6d 62 |er - 32-|bit numb|
|00001ac0| 65 72 20 74 68 61 74 20 | 62 65 63 6f 6d 65 73 20 |er that |becomes |
|00001ad0| 74 68 65 20 6e 65 77 20 | 76 61 6c 75 65 20 73 74 |the new |value st|
|00001ae0| 6f 72 65 64 20 69 6e 74 | 6f 0a 00 00 20 20 20 20 |ored int|o... |
|00001af0| 2d 3f 20 2d 20 64 69 73 | 70 6c 61 79 73 20 61 20 |-? - dis|plays a |
|00001b00| 6c 69 73 74 20 6f 66 20 | 76 61 6c 69 64 20 66 6c |list of |valid fl|
|00001b10| 61 67 20 61 62 62 72 65 | 76 69 61 74 69 6f 6e 73 |ag abbre|viations|
|00001b20| 0a 00 00 00 66 6f 6c 6c | 6f 77 69 6e 67 3a 0a 00 |....foll|owing:..|
|00001b30| 4e 54 44 4c 4c 21 4e 74 | 47 6c 6f 62 61 6c 46 6c |NTDLL!Nt|GlobalFl|
|00001b40| 61 67 20 76 61 72 69 61 | 62 6c 65 2e 20 20 4f 74 |ag varia|ble. Ot|
|00001b50| 68 65 72 77 69 73 65 20 | 76 61 6c 75 65 20 63 61 |herwise |value ca|
|00001b60| 6e 20 62 65 20 6f 6e 65 | 20 6f 66 20 74 68 65 0a |n be one| of the.|
|00001b70| 00 00 00 00 49 66 20 61 | 20 76 61 6c 75 65 20 69 |....If a| value i|
|00001b80| 73 20 6e 6f 74 20 67 69 | 76 65 6e 20 74 68 65 6e |s not gi|ven then|
|00001b90| 20 64 69 73 70 6c 61 79 | 73 20 74 68 65 20 63 75 | display|s the cu|
|00001ba0| 72 72 65 6e 74 20 62 69 | 74 73 20 73 65 74 20 69 |rrent bi|ts set i|
|00001bb0| 6e 0a 00 00 67 66 6c 61 | 67 00 00 00 20 20 20 20 |n...gfla|g... |
|00001bc0| 20 20 20 20 20 20 20 20 | 20 20 20 20 2d 2d 20 64 | | -- d|
|00001bd0| 75 6d 70 73 20 65 76 65 | 72 79 74 68 69 6e 67 20 |umps eve|rything |
|00001be0| 77 65 20 63 61 6e 20 66 | 69 6e 64 20 61 62 6f 75 |we can f|ind abou|
|00001bf0| 74 20 6f 70 65 6e 20 65 | 76 65 6e 74 73 0a 00 00 |t open e|vents...|
|00001c00| 20 20 20 20 21 68 61 6e | 64 6c 65 20 30 20 66 20 | !han|dle 0 f |
|00001c10| 45 76 65 6e 74 0a 00 00 | 20 20 20 20 21 68 61 6e |Event...| !han|
|00001c20| 64 6c 65 20 30 20 66 20 | 2d 2d 20 64 75 6d 70 73 |dle 0 f |-- dumps|
|00001c30| 20 65 76 65 72 79 74 68 | 69 6e 67 20 77 65 20 63 | everyth|ing we c|
|00001c40| 61 6e 20 66 69 6e 64 20 | 61 62 6f 75 74 20 61 20 |an find |about a |
|00001c50| 68 61 6e 64 6c 65 2e 0a | 00 00 00 00 20 20 20 20 |handle..|.... |
|00001c60| 21 68 61 6e 64 6c 65 20 | 30 20 30 20 2d 2d 20 64 |!handle |0 0 -- d|
|00001c70| 75 6d 70 73 20 61 20 73 | 75 6d 6d 61 72 79 20 74 |umps a s|ummary t|
|00001c80| 61 62 6c 65 20 6f 66 20 | 61 6c 6c 20 74 68 65 20 |able of |all the |
|00001c90| 6f 70 65 6e 20 68 61 6e | 64 6c 65 73 0a 00 00 00 |open han|dles....|
|00001ca0| 20 20 20 20 21 68 61 6e | 64 6c 65 20 20 20 20 20 | !han|dle |
|00001cb0| 2d 2d 20 64 75 6d 70 73 | 20 74 68 65 20 74 79 70 |-- dumps| the typ|
|00001cc0| 65 73 20 6f 66 20 61 6c | 6c 20 74 68 65 20 68 61 |es of al|l the ha|
|00001cd0| 6e 64 6c 65 73 2c 20 61 | 6e 64 20 61 20 73 75 6d |ndles, a|nd a sum|
|00001ce0| 6d 61 72 79 20 74 61 62 | 6c 65 0a 00 45 78 61 6d |mary tab|le..Exam|
|00001cf0| 70 6c 65 73 3a 0a 00 00 | 63 6f 75 72 73 65 2e 0a |ples:...|course..|
|00001d00| 00 00 00 00 73 74 61 6e | 64 61 72 64 20 4e 54 20 |....stan|dard NT |
|00001d10| 74 79 70 65 20 6e 61 6d | 65 2c 20 65 2e 67 2e 20 |type nam|e, e.g. |
|00001d20| 45 76 65 6e 74 2c 20 53 | 65 6d 61 70 68 6f 72 65 |Event, S|emaphore|
|00001d30| 2c 20 65 74 63 2e 20 20 | 43 61 73 65 20 73 65 6e |, etc. |Case sen|
|00001d40| 73 69 74 69 76 65 2c 20 | 6f 66 0a 00 49 66 20 54 |sitive, |of..If T|
|00001d50| 79 70 65 20 69 73 20 73 | 70 65 63 69 66 69 65 64 |ype is s|pecified|
|00001d60| 2c 20 6f 6e 6c 79 20 6f | 62 6a 65 63 74 20 6f 66 |, only o|bject of|
|00001d70| 20 74 68 61 74 20 74 79 | 70 65 20 61 72 65 20 73 | that ty|pe are s|
|00001d80| 63 61 6e 6e 65 64 2e 20 | 20 54 79 70 65 20 69 73 |canned. | Type is|
|00001d90| 20 61 0a 00 0a 00 00 00 | 20 20 20 20 38 20 20 20 | a......| 8 |
|00001da0| 2d 20 47 65 74 20 6f 62 | 6a 65 63 74 20 73 70 65 |- Get ob|ject spe|
|00001db0| 63 69 66 69 63 20 69 6e | 66 6f 20 28 77 68 65 72 |cific in|fo (wher|
|00001dc0| 65 20 61 76 61 69 6c 61 | 62 6c 65 29 0a 00 00 00 |e availa|ble)....|
|00001dd0| 20 20 20 20 34 20 20 20 | 2d 20 47 65 74 20 6e 61 | 4 |- Get na|
|00001de0| 6d 65 20 69 6e 66 6f 72 | 6d 61 74 69 6f 6e 0a 00 |me infor|mation..|
|00001df0| 20 20 20 20 32 20 20 20 | 2d 20 47 65 74 20 62 61 | 2 |- Get ba|
|00001e00| 73 69 63 20 69 6e 66 6f | 72 6d 61 74 69 6f 6e 0a |sic info|rmation.|
|00001e10| 00 00 00 00 20 20 20 20 | 31 20 20 20 2d 20 47 65 |.... |1 - Ge|
|00001e20| 74 20 74 79 70 65 20 69 | 6e 66 6f 72 6d 61 74 69 |t type i|nformati|
|00001e30| 6f 6e 20 28 64 65 66 61 | 75 6c 74 29 0a 00 00 00 |on (defa|ult)....|
|00001e40| 7a 65 72 6f 2c 20 74 68 | 61 74 20 70 61 72 74 69 |zero, th|at parti|
|00001e50| 63 75 6c 61 72 20 68 61 | 6e 64 6c 65 20 69 73 20 |cular ha|ndle is |
|00001e60| 65 78 61 6d 69 6e 65 64 | 2e 20 20 54 68 65 20 66 |examined|. The f|
|00001e70| 6c 61 67 73 20 61 72 65 | 20 61 73 20 66 6f 6c 6c |lags are| as foll|
|00001e80| 6f 77 73 3a 0a 00 00 00 | 49 66 20 74 68 65 20 68 |ows:....|If the h|
|00001e90| 61 6e 64 6c 65 20 69 73 | 20 30 20 6f 72 20 2d 31 |andle is| 0 or -1|
|00001ea0| 2c 20 61 6c 6c 20 68 61 | 6e 64 6c 65 73 20 61 72 |, all ha|ndles ar|
|00001eb0| 65 20 73 63 61 6e 6e 65 | 64 2e 20 20 49 66 20 74 |e scanne|d. If t|
|00001ec0| 68 65 20 68 61 6e 64 6c | 65 20 69 73 20 6e 6f 74 |he handl|e is not|
|00001ed0| 0a 00 00 00 20 20 20 20 | 20 20 20 46 6c 61 67 73 |.... | Flags|
|00001ee0| 20 61 72 65 20 62 69 74 | 73 20 69 6e 64 69 63 61 | are bit|s indica|
|00001ef0| 74 69 6e 67 20 67 72 65 | 61 74 65 72 20 6c 65 76 |ting gre|ater lev|
|00001f00| 65 6c 73 20 6f 66 20 64 | 65 74 61 69 6c 2e 0a 00 |els of d|etail...|
|00001f10| 20 20 20 20 20 20 20 49 | 66 20 6e 6f 20 68 61 6e | I|f no han|
|00001f20| 64 6c 65 20 73 70 65 63 | 69 66 69 65 64 2c 20 61 |dle spec|ified, a|
|00001f30| 6c 6c 20 68 61 6e 64 6c | 65 73 20 61 72 65 20 64 |ll handl|es are d|
|00001f40| 75 6d 70 65 64 2e 0a 00 | 21 68 61 6e 64 6c 65 20 |umped...|!handle |
|00001f50| 5b 68 61 6e 64 6c 65 20 | 5b 66 6c 61 67 73 20 5b |[handle |[flags [|
|00001f60| 74 79 70 65 5d 5d 5d 20 | 2d 20 44 75 6d 70 20 68 |type]]] |- Dump h|
|00001f70| 61 6e 64 6c 65 20 69 6e | 66 6f 72 6d 61 74 69 6f |andle in|formatio|
|00001f80| 6e 0a 00 00 68 61 6e 64 | 6c 65 00 00 20 20 20 20 |n...hand|le.. |
|00001f90| 20 20 20 49 66 20 6e 6f | 20 70 61 74 74 65 72 6e | If no| pattern|
|00001fa0| 2c 20 6c 61 73 74 20 70 | 61 74 74 65 72 6e 20 69 |, last p|attern i|
|00001fb0| 73 20 75 73 65 64 2c 20 | 69 66 20 6e 6f 20 61 64 |s used, |if no ad|
|00001fc0| 64 72 65 73 73 2c 20 6c | 61 73 74 20 68 69 74 20 |dress, l|ast hit |
|00001fd0| 69 73 20 75 73 65 64 0a | 00 00 00 00 21 69 67 72 |is used.|....!igr|
|00001fe0| 65 70 20 5b 70 61 74 74 | 65 72 6e 20 5b 61 64 64 |ep [patt|ern [add|
|00001ff0| 72 5d 5d 20 20 20 20 20 | 2d 20 47 72 65 70 20 66 |r]] |- Grep f|
|00002000| 6f 72 20 64 69 73 61 73 | 73 65 6d 62 6c 65 64 20 |or disas|sembled |
|00002010| 70 61 74 74 65 72 6e 20 | 73 74 61 72 74 69 6e 67 |pattern |starting|
|00002020| 20 61 74 20 61 64 64 72 | 0a 00 00 00 69 67 72 65 | at addr|....igre|
|00002030| 70 00 00 00 21 76 70 72 | 6f 74 20 5b 61 64 64 72 |p...!vpr|ot [addr|
|00002040| 65 73 73 5d 20 20 20 20 | 20 20 20 20 20 20 20 20 |ess] | |
|00002050| 20 2d 20 44 75 6d 70 20 | 74 68 65 20 76 69 72 74 | - Dump |the virt|
|00002060| 75 61 6c 20 70 72 6f 74 | 65 63 74 20 73 65 74 74 |ual prot|ect sett|
|00002070| 69 6e 67 73 0a 00 00 00 | 21 76 65 72 73 69 6f 6e |ings....|!version|
|00002080| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00002090| 20 20 20 20 20 2d 20 44 | 75 6d 70 20 73 79 73 74 | - D|ump syst|
|000020a0| 65 6d 20 76 65 72 73 69 | 6f 6e 20 61 6e 64 20 62 |em versi|on and b|
|000020b0| 75 69 6c 64 20 6e 75 6d | 62 65 72 0a 00 00 00 00 |uild num|ber.....|
|000020c0| 21 75 73 74 72 20 55 6e | 69 63 6f 64 65 53 74 72 |!ustr Un|icodeStr|
|000020d0| 69 6e 67 41 64 64 72 65 | 73 73 20 20 20 2d 20 44 |ingAddre|ss - D|
|000020e0| 75 6d 70 20 61 20 55 4e | 49 43 4f 44 45 20 73 74 |ump a UN|ICODE st|
|000020f0| 72 69 6e 67 0a 00 00 00 | 21 74 65 62 20 5b 74 65 |ring....|!teb [te|
|00002100| 62 20 61 64 64 72 20 74 | 6f 20 64 75 6d 70 5d 20 |b addr t|o dump] |
|00002110| 20 20 20 20 20 2d 20 44 | 75 6d 70 20 74 68 65 20 | - D|ump the |
|00002120| 54 45 42 20 73 74 72 75 | 63 74 75 72 65 0a 00 00 |TEB stru|cture...|
|00002130| 21 73 74 72 20 41 6e 73 | 69 53 74 72 69 6e 67 41 |!str Ans|iStringA|
|00002140| 64 64 72 65 73 73 20 20 | 20 20 20 20 20 2d 20 44 |ddress | - D|
|00002150| 75 6d 70 20 61 6e 20 41 | 4e 53 49 20 73 74 72 69 |ump an A|NSI stri|
|00002160| 6e 67 0a 00 21 70 65 62 | 20 5b 70 65 62 20 61 64 |ng..!peb| [peb ad|
|00002170| 64 72 20 74 6f 20 64 75 | 6d 70 5d 20 20 20 20 20 |dr to du|mp] |
|00002180| 20 2d 20 44 75 6d 70 20 | 74 68 65 20 50 45 42 20 | - Dump |the PEB |
|00002190| 73 74 72 75 63 74 75 72 | 65 0a 00 00 21 6f 62 6a |structur|e...!obj|
|000021a0| 61 20 4f 62 6a 65 63 74 | 41 64 64 72 65 73 73 20 |a Object|Address |
|000021b0| 20 20 20 20 20 20 20 20 | 20 2d 20 44 75 6d 70 20 | | - Dump |
|000021c0| 61 6e 20 6f 62 6a 65 63 | 74 27 73 20 61 74 74 72 |an objec|t's attr|
|000021d0| 69 62 75 74 65 73 0a 00 | 21 6c 6f 63 6b 73 20 5b |ibutes..|!locks [|
|000021e0| 2d 76 5d 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |-v] | |
|000021f0| 20 20 20 20 20 2d 20 44 | 75 6d 70 20 61 6c 6c 20 | - D|ump all |
|00002200| 43 72 69 74 69 63 61 6c | 20 53 65 63 74 69 6f 6e |Critical| Section|
|00002210| 73 20 69 6e 20 70 72 6f | 63 65 73 73 0a 00 00 00 |s in pro|cess....|
|00002220| 21 69 67 72 65 70 20 5b | 70 61 74 74 65 72 6e 20 |!igrep [|pattern |
|00002230| 5b 61 64 64 72 5d 5d 20 | 20 20 20 20 20 2d 20 47 |[addr]] | - G|
|00002240| 72 65 70 20 66 6f 72 20 | 64 69 73 61 73 73 65 6d |rep for |disassem|
|00002250| 62 6c 65 64 20 70 61 74 | 74 65 72 6e 20 73 74 61 |bled pat|tern sta|
|00002260| 72 74 69 6e 67 20 61 74 | 20 61 64 64 72 0a 00 00 |rting at| addr...|
|00002270| 21 68 65 6c 70 20 5b 63 | 6d 64 5d 20 20 20 20 20 |!help [c|md] |
|00002280| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 2d 20 44 | | - D|
|00002290| 69 73 70 6c 61 79 73 20 | 74 68 69 73 20 6c 69 73 |isplays |this lis|
|000022a0| 74 20 6f 72 20 67 69 76 | 65 73 20 64 65 74 61 69 |t or giv|es detai|
|000022b0| 6c 73 20 6f 6e 20 63 6f | 6d 6d 61 6e 64 0a 00 00 |ls on co|mmand...|
|000022c0| 21 68 65 61 70 20 5b 61 | 64 64 72 65 73 73 5d 20 |!heap [a|ddress] |
|000022d0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 2d 20 44 | | - D|
|000022e0| 75 6d 70 20 68 65 61 70 | 0a 00 00 00 21 68 61 6e |ump heap|....!han|
|000022f0| 64 6c 65 20 5b 68 61 6e | 64 6c 65 5d 20 20 20 20 |dle [han|dle] |
|00002300| 20 20 20 20 20 20 20 20 | 20 2d 20 44 75 6d 70 20 | | - Dump |
|00002310| 68 61 6e 64 6c 65 20 69 | 6e 66 6f 72 6d 61 74 69 |handle i|nformati|
|00002320| 6f 6e 0a 00 21 67 6c 65 | 20 20 20 20 20 20 20 20 |on..!gle| |
|00002330| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00002340| 20 2d 20 44 75 6d 70 20 | 47 65 74 4c 61 73 74 45 | - Dump |GetLastE|
|00002350| 72 72 6f 72 20 76 61 6c | 75 65 20 66 6f 72 20 63 |rror val|ue for c|
|00002360| 75 72 72 65 6e 74 20 74 | 68 72 65 61 64 0a 00 00 |urrent t|hread...|
|00002370| 21 67 66 6c 61 67 20 5b | 76 61 6c 75 65 5d 20 20 |!gflag [|value] |
|00002380| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 2d 20 44 | | - D|
|00002390| 75 6d 70 20 74 68 65 20 | 67 6c 6f 62 61 6c 20 61 |ump the |global a|
|000023a0| 74 6f 6d 20 74 61 62 6c | 65 0a 00 00 21 67 61 74 |tom tabl|e...!gat|
|000023b0| 6f 6d 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |om | |
|000023c0| 20 20 20 20 20 20 20 20 | 20 2d 20 44 75 6d 70 20 | | - Dump |
|000023d0| 74 68 65 20 67 6c 6f 62 | 61 6c 20 61 74 6f 6d 20 |the glob|al atom |
|000023e0| 74 61 62 6c 65 0a 00 00 | 21 65 78 72 20 61 64 64 |table...|!exr add|
|000023f0| 72 65 73 73 20 20 20 20 | 20 20 20 20 20 20 20 20 |ress | |
|00002400| 20 20 20 20 20 2d 20 44 | 75 6d 70 20 61 6e 20 65 | - D|ump an e|
|00002410| 78 63 65 70 74 69 6f 6e | 20 72 65 63 6f 72 64 0a |xception| record.|
|00002420| 00 00 00 00 21 65 72 72 | 6f 72 20 76 61 6c 75 65 |....!err|or value|
|00002430| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00002440| 20 2d 20 44 65 63 6f 64 | 65 20 65 72 72 6f 72 20 | - Decod|e error |
|00002450| 76 61 6c 75 65 0a 00 00 | 21 64 74 20 5b 76 5d 20 |value...|!dt [v] |
|00002460| 70 63 73 72 5f 74 68 72 | 65 61 64 20 20 20 20 20 |pcsr_thr|ead |
|00002470| 20 20 20 20 20 2d 20 44 | 75 6d 70 20 43 53 52 20 | - D|ump CSR |
|00002480| 74 68 72 65 61 64 0a 00 | 21 64 72 65 67 20 2d 5b |thread..|!dreg -[|
|00002490| 64 7c 77 5d 20 3c 6b 65 | 79 50 61 74 68 3e 5b 21 |d|w] <ke|yPath>[!|
|000024a0| 5b 3c 76 61 6c 75 65 4e | 61 6d 65 3e 20 7c 20 2a |[<valueN|ame> | *|
|000024b0| 5d 5d 20 20 2d 20 44 75 | 6d 70 20 72 65 67 69 73 |]] - Du|mp regis|
|000024c0| 74 72 79 20 69 6e 66 6f | 72 6d 61 74 69 6f 6e 0a |try info|rmation.|
|000024d0| 00 00 00 00 21 64 70 20 | 5b 76 5d 20 5b 70 69 64 |....!dp |[v] [pid|
|000024e0| 20 7c 20 70 63 73 72 5f | 70 72 6f 63 65 73 73 5d | | pcsr_|process]|
|000024f0| 20 2d 20 44 75 6d 70 20 | 43 53 52 20 70 72 6f 63 | - Dump |CSR proc|
|00002500| 65 73 73 0a 00 00 00 00 | 21 64 6c 6c 73 20 5b 2d |ess.....|!dlls [-|
|00002510| 68 5d 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |h] | |
|00002520| 20 20 20 20 20 2d 20 44 | 75 6d 70 20 6c 6f 61 64 | - D|ump load|
|00002530| 65 64 20 44 4c 4c 53 0a | 00 00 00 00 21 64 68 20 |ed DLLS.|....!dh |
|00002540| 5b 69 6d 61 67 65 20 62 | 61 73 65 20 61 64 64 72 |[image b|ase addr|
|00002550| 65 73 73 5d 20 20 20 20 | 20 2d 20 44 75 6d 70 20 |ess] | - Dump |
|00002560| 69 6d 61 67 65 20 68 65 | 61 64 65 72 0a 00 00 00 |image he|ader....|
|00002570| 21 63 78 72 20 61 64 64 | 72 65 73 73 20 20 20 20 |!cxr add|ress |
|00002580| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 2d 20 44 | | - D|
|00002590| 75 6d 70 20 61 20 63 6f | 6e 74 65 78 74 20 72 65 |ump a co|ntext re|
|000025a0| 63 6f 72 64 0a 00 00 00 | 21 63 72 69 74 53 65 63 |cord....|!critSec|
|000025b0| 20 63 73 41 64 64 72 65 | 73 73 20 20 20 20 20 20 | csAddre|ss |
|000025c0| 20 20 20 20 20 2d 20 44 | 75 6d 70 20 61 20 63 72 | - D|ump a cr|
|000025d0| 69 74 69 63 61 6c 20 73 | 65 63 74 69 6f 6e 0a 00 |itical s|ection..|
|000025e0| 21 61 74 6f 6d 20 5b 61 | 74 6f 6d 5d 20 20 20 20 |!atom [a|tom] |
|000025f0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 2d 20 44 | | - D|
|00002600| 75 6d 70 20 74 68 65 20 | 61 74 6f 6d 20 6f 72 20 |ump the |atom or |
|00002610| 74 61 62 6c 65 28 73 29 | 20 66 6f 72 20 74 68 65 |table(s)| for the|
|00002620| 20 70 72 6f 63 65 73 73 | 0a 00 00 00 6e 74 73 64 | process|....ntsd|
|00002630| 65 78 74 73 20 68 65 6c | 70 3a 0a 0a 00 00 00 00 |exts hel|p:......|
|00002640| 2a 2a 2a 20 4c 6f 63 6b | 65 64 0a 00 43 6f 6e 74 |*** Lock|ed..Cont|
|00002650| 65 6e 74 69 6f 6e 43 6f | 75 6e 74 20 20 20 20 25 |entionCo|unt %|
|00002660| 6c 78 0a 00 45 6e 74 72 | 79 43 6f 75 6e 74 20 20 |lx..Entr|yCount |
|00002670| 20 20 20 20 20 20 20 25 | 6c 78 0a 00 4f 77 6e 69 | %|lx..Owni|
|00002680| 6e 67 54 68 72 65 61 64 | 20 20 20 20 20 20 20 25 |ngThread| %|
|00002690| 6c 78 0a 00 52 65 63 75 | 72 73 69 6f 6e 43 6f 75 |lx..Recu|rsionCou|
|000026a0| 6e 74 20 20 20 20 20 25 | 6c 64 0a 00 4c 6f 63 6b |nt %|ld..Lock|
|000026b0| 43 6f 75 6e 74 20 20 20 | 20 20 20 20 20 20 20 25 |Count | %|
|000026c0| 6c 64 0a 00 4c 6f 63 6b | 43 6f 75 6e 74 20 20 20 |ld..Lock|Count |
|000026d0| 20 20 20 20 20 20 20 4e | 4f 54 20 4c 4f 43 4b 45 | N|OT LOCKE|
|000026e0| 44 0a 00 00 43 72 69 74 | 53 65 63 20 25 73 2b 25 |D...Crit|Sec %s+%|
|000026f0| 6c 78 20 61 74 20 25 70 | 0a 00 00 00 25 73 00 00 |lx at %p|....%s..|
|00002700| 53 74 72 69 6e 67 28 25 | 64 2c 25 64 29 20 25 73 |String(%|d,%d) %s|
|00002710| 2b 25 70 20 61 74 20 25 | 70 3a 20 25 73 0a 00 00 |+%p at %|p: %s...|
|00002720| 09 4f 42 4a 5f 4f 50 45 | 4e 49 46 0a 00 00 00 00 |.OBJ_OPE|NIF.....|
|00002730| 09 4f 42 4a 5f 43 41 53 | 45 5f 49 4e 53 45 4e 53 |.OBJ_CAS|E_INSENS|
|00002740| 49 54 49 56 45 0a 00 00 | 09 4f 42 4a 5f 45 58 43 |ITIVE...|.OBJ_EXC|
|00002750| 4c 55 53 49 56 45 0a 00 | 09 4f 42 4a 5f 50 45 52 |LUSIVE..|.OBJ_PER|
|00002760| 4d 41 4e 45 4e 54 0a 00 | 09 4f 42 4a 5f 49 4e 48 |MANENT..|.OBJ_INH|
|00002770| 45 52 49 54 0a 00 00 00 | 09 25 73 20 69 73 20 25 |ERIT....|.%s is %|
|00002780| 77 73 0a 00 46 75 6c 6c | 20 4e 61 6d 65 00 00 00 |ws..Full| Name...|
|00002790| 52 65 6c 61 74 69 76 65 | 20 4e 61 6d 65 00 00 00 |Relative| Name...|
|000027a0| 4f 62 6a 61 20 25 73 2b | 25 70 20 61 74 20 25 70 |Obja %s+|%p at %p|
|000027b0| 3a 0a 00 00 26 6e 74 64 | 6c 6c 21 52 74 6c 43 72 |:...&ntd|ll!RtlCr|
|000027c0| 69 74 69 63 61 6c 53 65 | 63 74 69 6f 6e 4c 69 73 |iticalSe|ctionLis|
|000027d0| 74 00 00 00 4e 54 53 44 | 45 58 54 53 3a 20 21 6c |t...NTSD|EXTS: !l|
|000027e0| 6f 63 6b 73 20 69 6e 76 | 61 6c 69 64 20 6f 70 74 |ocks inv|alid opt|
|000027f0| 69 6f 6e 20 66 6c 61 67 | 20 27 2d 25 63 27 0a 00 |ion flag| '-%c'..|
|00002800| 09 2b 25 30 34 6c 78 20 | 46 6c 61 67 73 20 20 20 |.+%04lx |Flags |
|00002810| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00002820| 20 20 25 30 38 6c 78 0a | 09 2b 25 30 34 6c 78 20 | %08lx.|.+%04lx |
|00002830| 52 65 66 65 72 65 6e 63 | 65 43 6f 75 6e 74 20 20 |Referenc|eCount |
|00002840| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a | | %08lx.|
|00002850| 09 2b 25 30 34 6c 78 20 | 48 61 73 68 4c 69 6e 6b |.+%04lx |HashLink|
|00002860| 73 2e 46 6c 69 6e 6b 20 | 20 20 20 20 20 20 20 20 |s.Flink | |
|00002870| 20 20 25 30 38 6c 78 0a | 09 2b 25 30 34 6c 78 20 | %08lx.|.+%04lx |
|00002880| 48 61 73 68 4c 69 6e 6b | 73 2e 42 6c 69 6e 6b 20 |HashLink|s.Blink |
|00002890| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a | | %08lx.|
|000028a0| 00 00 00 00 09 2b 25 30 | 34 6c 78 20 57 61 69 74 |.....+%0|4lx Wait|
|000028b0| 42 6c 6f 63 6b 20 20 20 | 20 20 20 20 20 20 20 20 |Block | |
|000028c0| 20 20 20 20 20 20 25 30 | 38 6c 78 0a 09 2b 25 30 | %0|8lx..+%0|
|000028d0| 34 6c 78 20 43 6c 69 65 | 6e 74 49 64 2e 55 6e 69 |4lx Clie|ntId.Uni|
|000028e0| 71 75 65 50 72 6f 63 65 | 73 73 20 20 20 20 25 30 |queProce|ss %0|
|000028f0| 38 6c 78 0a 09 2b 25 30 | 34 6c 78 20 43 6c 69 65 |8lx..+%0|4lx Clie|
|00002900| 6e 74 49 64 2e 55 6e 69 | 71 75 65 54 68 72 65 61 |ntId.Uni|queThrea|
|00002910| 64 20 20 20 20 20 25 30 | 38 6c 78 0a 09 2b 25 30 |d %0|8lx..+%0|
|00002920| 34 6c 78 20 54 68 72 65 | 61 64 48 61 6e 64 6c 65 |4lx Thre|adHandle|
|00002930| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 25 30 | | %0|
|00002940| 38 6c 78 0a 00 00 00 00 | 50 43 53 52 5f 54 48 52 |8lx.....|PCSR_THR|
|00002950| 45 41 44 20 40 20 25 30 | 38 6c 78 3a 0a 09 2b 25 |EAD @ %0|8lx:..+%|
|00002960| 30 34 6c 78 20 4c 69 6e | 6b 2e 46 6c 69 6e 6b 20 |04lx Lin|k.Flink |
|00002970| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 25 | | %|
|00002980| 30 38 6c 78 0a 09 2b 25 | 30 34 6c 78 20 4c 69 6e |08lx..+%|04lx Lin|
|00002990| 6b 2e 42 6c 69 6e 6b 20 | 20 20 20 20 20 20 20 20 |k.Blink | |
|000029a0| 20 20 20 20 20 20 20 25 | 30 38 6c 78 0a 09 2b 25 | %|08lx..+%|
|000029b0| 30 34 6c 78 20 50 72 6f | 63 65 73 73 20 20 20 20 |04lx Pro|cess |
|000029c0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 25 | | %|
|000029d0| 30 38 6c 78 0a 00 00 00 | 54 68 72 65 61 64 20 25 |08lx....|Thread %|
|000029e0| 30 38 6c 78 2c 20 50 72 | 6f 63 65 73 73 20 25 30 |08lx, Pr|ocess %0|
|000029f0| 38 6c 78 2c 20 43 6c 69 | 65 6e 74 49 64 20 25 6c |8lx, Cli|entId %l|
|00002a00| 78 2e 25 6c 78 2c 20 46 | 6c 61 67 73 20 25 6c 78 |x.%lx, F|lags %lx|
|00002a10| 2c 20 52 65 66 20 43 6f | 75 6e 74 20 25 6c 78 0a |, Ref Co|unt %lx.|
|00002a20| 00 00 00 00 00 00 00 00 | ff ff ff ff 24 a9 b1 69 |........|....$..i|
|00002a30| 28 a9 b1 69 49 6e 76 61 | 6c 69 64 20 74 68 72 65 |(..iInva|lid thre|
|00002a40| 61 64 2e 20 50 72 6f 62 | 61 62 6c 79 20 69 6e 76 |ad. Prob|ably inv|
|00002a50| 61 6c 69 64 20 61 72 67 | 75 6d 65 6e 74 20 74 6f |alid arg|ument to|
|00002a60| 20 74 68 69 73 20 65 78 | 74 65 6e 73 69 6f 6e 2e | this ex|tension.|
|00002a70| 0a 00 00 00 54 68 72 65 | 61 64 73 3a 0a 00 00 00 |....Thre|ads:....|
|00002a80| 09 2b 25 30 34 6c 78 20 | 66 56 44 4d 20 20 20 20 |.+%04lx |fVDM |
|00002a90| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00002aa0| 20 20 25 30 38 6c 78 0a | 09 2b 25 30 34 6c 78 20 | %08lx.|.+%04lx |
|00002ab0| 54 68 72 65 61 64 43 6f | 75 6e 74 20 20 20 20 20 |ThreadCo|unt |
|00002ac0| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a | | %08lx.|
|00002ad0| 09 2b 25 30 34 6c 78 20 | 50 72 69 6f 72 69 74 79 |.+%04lx |Priority|
|00002ae0| 43 6c 61 73 73 20 20 20 | 20 20 20 20 20 20 20 20 |Class | |
|00002af0| 20 20 25 30 38 6c 78 0a | 09 2b 25 30 34 6c 78 20 | %08lx.|.+%04lx |
|00002b00| 53 68 75 74 64 6f 77 6e | 4c 65 76 65 6c 20 20 20 |Shutdown|Level |
|00002b10| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a | | %08lx.|
|00002b20| 09 2b 25 30 34 6c 78 20 | 53 68 75 74 64 6f 77 6e |.+%04lx |Shutdown|
|00002b30| 46 6c 61 67 73 20 20 20 | 20 20 20 20 20 20 20 20 |Flags | |
|00002b40| 20 20 25 30 38 6c 78 0a | 00 00 00 00 09 2b 25 30 | %08lx.|.....+%0|
|00002b50| 34 6c 78 20 44 65 62 75 | 67 55 73 65 72 49 6e 74 |4lx Debu|gUserInt|
|00002b60| 65 72 66 61 63 65 20 20 | 20 20 20 20 20 20 25 30 |erface | %0|
|00002b70| 38 6c 78 0a 09 2b 25 30 | 34 6c 78 20 52 65 66 65 |8lx..+%0|4lx Refe|
|00002b80| 72 65 6e 63 65 43 6f 75 | 6e 74 20 20 20 20 20 20 |renceCou|nt |
|00002b90| 20 20 20 20 20 20 25 30 | 38 6c 78 0a 09 2b 25 30 | %0|8lx..+%0|
|00002ba0| 34 6c 78 20 50 72 6f 63 | 65 73 73 47 72 6f 75 70 |4lx Proc|essGroup|
|00002bb0| 49 64 20 20 20 20 20 20 | 20 20 20 20 20 20 25 30 |Id | %0|
|00002bc0| 38 6c 78 0a 09 2b 25 30 | 34 6c 78 20 50 72 6f 63 |8lx..+%0|4lx Proc|
|00002bd0| 65 73 73 47 72 6f 75 70 | 53 65 71 75 65 6e 63 65 |essGroup|Sequence|
|00002be0| 20 20 20 20 20 20 25 30 | 38 6c 78 0a 00 00 00 00 | %0|8lx.....|
|00002bf0| 09 2b 25 30 34 6c 78 20 | 50 72 6f 63 65 73 73 48 |.+%04lx |ProcessH|
|00002c00| 61 6e 64 6c 65 20 20 20 | 20 20 20 20 20 20 20 20 |andle | |
|00002c10| 20 20 25 30 38 6c 78 0a | 09 2b 25 30 34 6c 78 20 | %08lx.|.+%04lx |
|00002c20| 53 65 71 75 65 6e 63 65 | 4e 75 6d 62 65 72 20 20 |Sequence|Number |
|00002c30| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a | | %08lx.|
|00002c40| 09 2b 25 30 34 6c 78 20 | 46 6c 61 67 73 20 20 20 |.+%04lx |Flags |
|00002c50| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00002c60| 20 20 25 30 38 6c 78 0a | 09 2b 25 30 34 6c 78 20 | %08lx.|.+%04lx |
|00002c70| 44 65 62 75 67 46 6c 61 | 67 73 20 20 20 20 20 20 |DebugFla|gs |
|00002c80| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a | | %08lx.|
|00002c90| 00 00 00 00 09 2b 25 30 | 34 6c 78 20 43 6c 69 65 |.....+%0|4lx Clie|
|00002ca0| 6e 74 50 6f 72 74 20 20 | 20 20 20 20 20 20 20 20 |ntPort | |
|00002cb0| 20 20 20 20 20 20 25 30 | 38 6c 78 0a 09 2b 25 30 | %0|8lx..+%0|
|00002cc0| 34 6c 78 20 43 6c 69 65 | 6e 74 56 69 65 77 42 61 |4lx Clie|ntViewBa|
|00002cd0| 73 65 20 20 20 20 20 20 | 20 20 20 20 20 20 25 30 |se | %0|
|00002ce0| 38 6c 78 0a 09 2b 25 30 | 34 6c 78 20 43 6c 69 65 |8lx..+%0|4lx Clie|
|00002cf0| 6e 74 56 69 65 77 42 6f | 75 6e 64 73 20 20 20 20 |ntViewBo|unds |
|00002d00| 20 20 20 20 20 20 25 30 | 38 6c 78 0a 09 2b 25 30 | %0|8lx..+%0|
|00002d10| 34 6c 78 20 43 6c 69 65 | 6e 74 49 64 2e 55 6e 69 |4lx Clie|ntId.Uni|
|00002d20| 71 75 65 50 72 6f 63 65 | 73 73 20 20 20 20 25 30 |queProce|ss %0|
|00002d30| 38 6c 78 0a 00 00 00 00 | 09 2b 25 30 34 6c 78 20 |8lx.....|.+%04lx |
|00002d40| 54 68 72 65 61 64 4c 69 | 73 74 2e 46 6c 69 6e 6b |ThreadLi|st.Flink|
|00002d50| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a | | %08lx.|
|00002d60| 09 2b 25 30 34 6c 78 20 | 54 68 72 65 61 64 4c 69 |.+%04lx |ThreadLi|
|00002d70| 73 74 2e 42 6c 69 6e 6b | 20 20 20 20 20 20 20 20 |st.Blink| |
|00002d80| 20 20 25 30 38 6c 78 0a | 09 2b 25 30 34 6c 78 20 | %08lx.|.+%04lx |
|00002d90| 4e 74 53 65 73 73 69 6f | 6e 20 20 20 20 20 20 20 |NtSessio|n |
|00002da0| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a | | %08lx.|
|00002db0| 09 2b 25 30 34 6c 78 20 | 45 78 70 65 63 74 65 64 |.+%04lx |Expected|
|00002dc0| 56 65 72 73 69 6f 6e 20 | 20 20 20 20 20 20 20 20 |Version | |
|00002dd0| 20 20 25 30 38 6c 78 0a | 00 00 00 00 50 43 53 52 | %08lx.|....PCSR|
|00002de0| 5f 50 52 4f 43 45 53 53 | 20 40 20 25 30 38 6c 78 |_PROCESS| @ %08lx|
|00002df0| 3a 0a 09 2b 25 30 34 6c | 78 20 4c 69 73 74 4c 69 |:..+%04l|x ListLi|
|00002e00| 6e 6b 2e 46 6c 69 6e 6b | 20 20 20 20 20 20 20 20 |nk.Flink| |
|00002e10| 20 20 20 20 25 30 38 6c | 78 0a 09 2b 25 30 34 6c | %08l|x..+%04l|
|00002e20| 78 20 4c 69 73 74 4c 69 | 6e 6b 2e 42 6c 69 6e 6b |x ListLi|nk.Blink|
|00002e30| 20 20 20 20 20 20 20 20 | 20 20 20 20 25 30 38 6c | | %08l|
|00002e40| 78 0a 09 2b 25 30 34 6c | 78 20 50 61 72 65 6e 74 |x..+%04l|x Parent|
|00002e50| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|00002e60| 20 20 20 20 25 30 38 6c | 78 0a 00 00 50 72 6f 63 | %08l|x...Proc|
|00002e70| 65 73 73 20 25 30 38 6c | 78 2c 20 49 64 20 25 70 |ess %08l|x, Id %p|
|00002e80| 2c 20 53 65 71 23 20 25 | 6c 78 2c 20 46 6c 61 67 |, Seq# %|lx, Flag|
|00002e90| 73 20 25 6c 78 2c 20 52 | 65 66 20 43 6f 75 6e 74 |s %lx, R|ef Count|
|00002ea0| 20 25 6c 78 0a 00 00 00 | 2d 2d 2d 0a 00 00 00 00 | %lx....|---.....|
|00002eb0| 26 63 73 72 73 72 76 21 | 43 73 72 52 6f 6f 74 50 |&csrsrv!|CsrRootP|
|00002ec0| 72 6f 63 65 73 73 00 00 | ff ff ff ff ff ad b1 69 |rocess..|.......i|
|00002ed0| 03 ae b1 69 ff ff ff ff | a3 aa b1 69 a7 aa b1 69 |...i....|...i...i|
|00002ee0| ff ff ff ff 90 aa b1 69 | 94 aa b1 69 ff ff ff ff |.......i|...i....|
|00002ef0| f9 ad b1 69 fd ad b1 69 | ff ff ff ff 21 ae b1 69 |...i...i|....!..i|
|00002f00| 25 ae b1 69 ff ff ff ff | 1b ae b1 69 1f ae b1 69 |%..i....|...i...i|
|00002f10| ff ff ff ff f3 ad b1 69 | f7 ad b1 69 ff ff ff ff |.......i|...i....|
|00002f20| ed ad b1 69 f1 ad b1 69 | ff ff ff ff e7 ad b1 69 |...i...i|.......i|
|00002f30| eb ad b1 69 ff ff ff ff | e1 ad b1 69 e5 ad b1 69 |...i....|...i...i|
|00002f40| 63 73 3d 25 30 34 78 20 | 20 73 73 3d 25 30 34 78 |cs=%04x | ss=%04x|
|00002f50| 20 20 64 73 3d 25 30 34 | 78 20 20 65 73 3d 25 30 | ds=%04|x es=%0|
|00002f60| 34 78 20 20 66 73 3d 25 | 30 34 78 20 20 67 73 3d |4x fs=%|04x gs=|
|00002f70| 25 30 34 78 20 20 20 20 | 20 20 20 20 20 20 20 20 |%04x | |
|00002f80| 20 65 66 6c 3d 25 30 38 | 6c 78 0a 00 65 69 70 3d | efl=%08|lx..eip=|
|00002f90| 25 30 38 6c 78 20 65 73 | 70 3d 25 30 38 6c 78 20 |%08lx es|p=%08lx |
|00002fa0| 65 62 70 3d 25 30 38 6c | 78 20 69 6f 70 6c 3d 25 |ebp=%08l|x iopl=%|
|00002fb0| 31 6c 78 20 20 20 20 20 | 20 20 20 20 25 73 20 25 |1lx | %s %|
|00002fc0| 73 20 25 73 20 25 73 20 | 25 73 20 25 73 20 25 73 |s %s %s |%s %s %s|
|00002fd0| 20 25 73 0a 00 00 00 00 | 6e 76 00 00 6f 76 00 00 | %s.....|nv..ov..|
|00002fe0| 75 70 00 00 64 6e 00 00 | 64 69 00 00 65 69 00 00 |up..dn..|di..ei..|
|00002ff0| 70 6c 00 00 6e 67 00 00 | 6e 7a 00 00 7a 72 00 00 |pl..ng..|nz..zr..|
|00003000| 6e 61 00 00 61 63 00 00 | 70 65 00 00 70 6f 00 00 |na..ac..|pe..po..|
|00003010| 6e 63 00 00 63 79 00 00 | 65 61 78 3d 25 30 38 6c |nc..cy..|eax=%08l|
|00003020| 78 20 65 62 78 3d 25 30 | 38 6c 78 20 65 63 78 3d |x ebx=%0|8lx ecx=|
|00003030| 25 30 38 6c 78 20 65 64 | 78 3d 25 30 38 6c 78 20 |%08lx ed|x=%08lx |
|00003040| 65 73 69 3d 25 30 38 6c | 78 20 65 64 69 3d 25 30 |esi=%08l|x edi=%0|
|00003050| 38 6c 78 0a 00 00 00 00 | ff ff ff ff 14 b0 b1 69 |8lx.....|.......i|
|00003060| 18 b0 b1 69 41 74 74 65 | 6d 70 74 20 74 6f 20 25 |...iAtte|mpt to %|
|00003070| 73 20 61 64 64 72 65 73 | 73 20 25 78 0a 00 00 00 |s addres|s %x....|
|00003080| 72 65 61 64 20 66 72 6f | 6d 00 00 00 77 72 69 74 |read fro|m...writ|
|00003090| 65 20 74 6f 00 00 00 00 | 49 6e 70 61 67 65 20 6f |e to....|Inpage o|
|000030a0| 70 65 72 61 74 69 6f 6e | 20 66 61 69 6c 65 64 20 |peration| failed |
|000030b0| 61 74 20 25 23 78 2c 20 | 64 75 65 20 74 6f 20 49 |at %#x, |due to I|
|000030c0| 2f 4f 20 65 72 72 6f 72 | 20 25 78 0a 00 00 00 00 |/O error| %x.....|
|000030d0| 54 68 72 65 61 64 20 74 | 72 69 65 64 20 74 6f 20 |Thread t|ried to |
|000030e0| 63 6c 6f 73 65 20 61 20 | 68 61 6e 64 6c 65 20 74 |close a |handle t|
|000030f0| 68 61 74 20 77 61 73 20 | 69 6e 76 61 6c 69 64 20 |hat was |invalid |
|00003100| 6f 72 20 69 6c 6c 65 67 | 61 6c 20 74 6f 20 63 6c |or illeg|al to cl|
|00003110| 6f 73 65 0a 00 00 00 00 | 69 73 20 6f 77 6e 65 64 |ose.....|is owned|
|00003120| 20 62 79 20 74 68 72 65 | 61 64 20 25 78 2c 0a 63 | by thre|ad %x,.c|
|00003130| 61 75 73 69 6e 67 20 74 | 68 69 73 20 74 68 72 65 |ausing t|his thre|
|00003140| 61 64 20 74 6f 20 72 61 | 69 73 65 20 61 6e 20 65 |ad to ra|ise an e|
|00003150| 78 63 65 70 74 69 6f 6e | 00 00 00 00 43 72 69 74 |xception|....Crit|
|00003160| 69 63 61 6c 20 73 65 63 | 74 69 6f 6e 20 61 74 20 |ical sec|tion at |
|00003170| 25 23 78 00 43 72 69 74 | 69 63 61 6c 20 73 65 63 |%#x.Crit|ical sec|
|00003180| 74 69 6f 6e 20 61 74 20 | 25 23 78 20 28 25 73 2b |tion at |%#x (%s+|
|00003190| 25 23 78 29 00 00 00 00 | 20 20 20 50 61 72 61 6d |%#x)....| Param|
|000031a0| 65 74 65 72 5b 25 64 5d | 3a 20 25 30 38 6c 78 0a |eter[%d]|: %08lx.|
|000031b0| 00 00 00 00 4e 75 6d 62 | 65 72 50 61 72 61 6d 65 |....Numb|erParame|
|000031c0| 74 65 72 73 3a 20 25 64 | 0a 00 00 00 20 20 45 78 |ters: %d|.... Ex|
|000031d0| 63 65 70 74 69 6f 6e 46 | 6c 61 67 73 3a 20 25 30 |ceptionF|lags: %0|
|000031e0| 38 6c 78 0a 00 00 00 00 | 20 20 20 45 78 63 65 70 |8lx.....| Excep|
|000031f0| 74 69 6f 6e 43 6f 64 65 | 00 00 00 00 45 78 63 65 |tionCode|....Exce|
|00003200| 70 74 69 6f 6e 41 64 64 | 72 65 73 73 3a 20 25 30 |ptionAdd|ress: %0|
|00003210| 38 6c 78 0a 00 00 00 00 | 45 78 63 65 70 74 69 6f |8lx.....|Exceptio|
|00003220| 6e 41 64 64 72 65 73 73 | 3a 20 25 30 38 6c 78 20 |nAddress|: %08lx |
|00003230| 28 25 73 2b 30 78 25 78 | 29 0a 00 00 00 00 00 00 |(%s+0x%x|).......|
|00003240| ff ff ff ff 7d b2 b1 69 | 81 b2 b1 69 2d 63 20 66 |....}..i|...i-c f|
|00003250| 6c 61 67 20 72 65 71 75 | 69 72 65 73 20 61 6e 64 |lag requ|ires and|
|00003260| 20 61 64 64 72 65 73 73 | 20 61 72 67 75 65 6d 65 | address| argueme|
|00003270| 6e 74 0a 00 20 20 20 2d | 73 20 20 20 20 20 20 44 |nt.. -|s D|
|00003280| 75 6d 70 20 73 65 63 74 | 69 6f 6e 20 68 65 61 64 |ump sect|ion head|
|00003290| 65 72 73 0a 00 00 00 00 | 20 20 20 2d 6d 20 20 20 |ers.....| -m |
|000032a0| 20 20 20 44 75 6d 70 20 | 64 6c 6c 27 73 20 69 6e | Dump |dll's in|
|000032b0| 20 4d 65 6d 6f 72 79 20 | 6f 72 64 65 72 0a 00 00 | Memory |order...|
|000032c0| 20 20 20 2d 6c 20 20 20 | 20 20 20 44 75 6d 70 20 | -l | Dump |
|000032d0| 64 6c 6c 27 73 20 69 6e | 20 4c 6f 61 64 20 6f 72 |dll's in| Load or|
|000032e0| 64 65 72 20 28 74 68 65 | 20 64 65 66 61 75 6c 74 |der (the| default|
|000032f0| 29 0a 00 00 20 20 20 2d | 69 20 20 20 20 20 20 44 |)... -|i D|
|00003300| 75 6d 70 20 64 6c 6c 27 | 73 20 69 6e 20 49 6e 69 |ump dll'|s in Ini|
|00003310| 74 20 6f 72 64 65 72 0a | 00 00 00 00 20 20 20 2d |t order.|.... -|
|00003320| 66 20 20 20 20 20 20 44 | 75 6d 70 20 66 69 6c 65 |f D|ump file|
|00003330| 20 68 65 61 64 65 72 73 | 0a 00 00 00 20 20 20 2d | headers|.... -|
|00003340| 63 20 6e 6e 6e 20 20 44 | 75 6d 70 20 64 6c 6c 20 |c nnn D|ump dll |
|00003350| 63 6f 6e 74 61 69 6e 69 | 6e 67 20 61 64 64 72 65 |containi|ng addre|
|00003360| 73 73 20 6e 6e 6e 0a 00 | 20 20 20 2d 61 20 20 20 |ss nnn..| -a |
|00003370| 20 20 20 44 75 6d 70 20 | 65 76 65 72 79 74 68 69 | Dump |everythi|
|00003380| 6e 67 0a 00 4f 70 74 69 | 6f 6e 73 3a 0a 00 00 00 |ng..Opti|ons:....|
|00003390| 64 75 6d 70 73 20 69 6d | 61 67 65 20 61 6e 64 20 |dumps im|age and |
|000033a0| 73 65 63 74 69 6f 6e 20 | 68 65 61 64 65 72 73 2e |section |headers.|
|000033b0| 0a 00 00 00 44 69 73 70 | 6c 61 79 73 20 6c 6f 61 |....Disp|lays loa|
|000033c0| 64 65 72 20 74 61 62 6c | 65 20 65 6e 74 72 69 65 |der tabl|e entrie|
|000033d0| 73 2e 20 20 4f 70 74 69 | 6f 6e 61 6c 6c 79 0a 00 |s. Opti|onally..|
|000033e0| 55 73 61 67 65 3a 20 64 | 6c 6c 73 20 5b 6f 70 74 |Usage: d|lls [opt|
|000033f0| 69 6f 6e 73 5d 20 5b 61 | 64 64 72 65 73 73 5d 0a |ions] [a|ddress].|
|00003400| 00 00 00 00 49 6e 76 61 | 6c 69 64 20 65 78 74 72 |....Inva|lid extr|
|00003410| 61 20 61 72 67 75 6d 65 | 6e 74 0a 00 20 20 20 20 |a argume|nt.. |
|00003420| 20 20 20 20 20 20 20 20 | 20 4c 44 52 50 5f 57 58 | | LDRP_WX|
|00003430| 38 36 5f 49 47 4e 4f 52 | 45 5f 4d 41 43 48 49 4e |86_IGNOR|E_MACHIN|
|00003440| 45 54 59 50 45 0a 00 00 | 20 20 20 20 20 20 20 20 |ETYPE...| |
|00003450| 20 20 20 20 20 4c 44 52 | 50 5f 49 4d 41 47 45 5f | LDR|P_IMAGE_|
|00003460| 4e 4f 54 5f 41 54 5f 42 | 41 53 45 0a 00 00 00 00 |NOT_AT_B|ASE.....|
|00003470| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 4c 44 52 | | LDR|
|00003480| 50 5f 44 45 42 55 47 5f | 53 59 4d 42 4f 4c 53 5f |P_DEBUG_|SYMBOLS_|
|00003490| 4c 4f 41 44 45 44 0a 00 | 20 20 20 20 20 20 20 20 |LOADED..| |
|000034a0| 20 20 20 20 20 4c 44 52 | 50 5f 50 52 4f 43 45 53 | LDR|P_PROCES|
|000034b0| 53 5f 41 54 54 41 43 48 | 5f 43 41 4c 4c 45 44 0a |S_ATTACH|_CALLED.|
|000034c0| 00 00 00 00 20 20 20 20 | 20 20 20 20 20 20 20 20 |.... | |
|000034d0| 20 4c 44 52 50 5f 44 4f | 4e 54 5f 43 41 4c 4c 5f | LDRP_DO|NT_CALL_|
|000034e0| 46 4f 52 5f 54 48 52 45 | 41 44 53 0a 00 00 00 00 |FOR_THRE|ADS.....|
|000034f0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 4c 44 52 | | LDR|
|00003500| 50 5f 46 41 49 4c 45 44 | 5f 42 55 49 4c 54 49 4e |P_FAILED|_BUILTIN|
|00003510| 5f 4c 4f 41 44 0a 00 00 | 20 20 20 20 20 20 20 20 |_LOAD...| |
|00003520| 20 20 20 20 20 4c 44 52 | 50 5f 43 55 52 52 45 4e | LDR|P_CURREN|
|00003530| 54 5f 4c 4f 41 44 0a 00 | 20 20 20 20 20 20 20 20 |T_LOAD..| |
|00003540| 20 20 20 20 20 4c 44 52 | 50 5f 45 4e 54 52 59 5f | LDR|P_ENTRY_|
|00003550| 49 4e 53 45 52 54 45 44 | 0a 00 00 00 20 20 20 20 |INSERTED|.... |
|00003560| 20 20 20 20 20 20 20 20 | 20 4c 44 52 50 5f 45 4e | | LDRP_EN|
|00003570| 54 52 59 5f 50 52 4f 43 | 45 53 53 45 44 0a 00 00 |TRY_PROC|ESSED...|
|00003580| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 4c 44 52 | | LDR|
|00003590| 50 5f 55 4e 4c 4f 41 44 | 5f 49 4e 5f 50 52 4f 47 |P_UNLOAD|_IN_PROG|
|000035a0| 52 45 53 53 0a 00 00 00 | 20 20 20 20 20 20 20 20 |RESS....| |
|000035b0| 20 20 20 20 20 4c 44 52 | 50 5f 4c 4f 41 44 5f 49 | LDR|P_LOAD_I|
|000035c0| 4e 5f 50 52 4f 47 52 45 | 53 53 0a 00 20 20 20 20 |N_PROGRE|SS.. |
|000035d0| 20 20 20 20 20 20 20 20 | 20 4c 44 52 50 5f 49 4d | | LDRP_IM|
|000035e0| 41 47 45 5f 44 4c 4c 0a | 00 00 00 00 20 20 20 20 |AGE_DLL.|.... |
|000035f0| 20 20 20 20 20 20 20 20 | 20 4c 44 52 50 5f 53 54 | | LDRP_ST|
|00003600| 41 54 49 43 5f 4c 49 4e | 4b 0a 00 00 20 20 20 20 |ATIC_LIN|K... |
|00003610| 20 20 46 6c 61 67 73 20 | 20 30 78 25 30 38 78 20 | Flags | 0x%08x |
|00003620| 20 4c 6f 61 64 43 6f 75 | 6e 74 20 20 20 30 78 25 | LoadCou|nt 0x%|
|00003630| 30 38 78 20 20 54 6c 73 | 49 6e 64 65 78 20 20 20 |08x Tls|Index |
|00003640| 20 30 78 25 30 38 78 0a | 00 00 00 00 20 20 20 20 | 0x%08x.|.... |
|00003650| 20 20 42 61 73 65 20 20 | 20 30 78 25 30 38 78 20 | Base | 0x%08x |
|00003660| 20 45 6e 74 72 79 50 6f | 69 6e 74 20 20 30 78 25 | EntryPo|int 0x%|
|00003670| 30 38 78 20 20 53 69 7a | 65 20 20 20 20 20 20 20 |08x Siz|e |
|00003680| 20 30 78 25 30 38 78 0a | 00 00 00 00 30 78 25 30 | 0x%08x.|....0x%0|
|00003690| 38 78 3a 20 25 77 73 0a | 00 00 00 00 55 00 6e 00 |8x: %ws.|....U.n.|
|000036a0| 6b 00 6e 00 6f 00 77 00 | 6e 00 20 00 4d 00 6f 00 |k.n.o.w.|n. .M.o.|
|000036b0| 64 00 75 00 6c 00 65 00 | 00 00 00 00 20 20 20 20 |d.u.l.e.|.... |
|000036c0| 55 6e 61 62 6c 65 64 20 | 74 6f 20 72 65 61 64 20 |Unabled |to read |
|000036d0| 4d 6f 64 75 6c 65 20 4e | 61 6d 65 0a 00 00 00 00 |Module N|ame.....|
|000036e0| 20 20 20 20 55 6e 61 62 | 6c 65 64 20 74 6f 20 72 | Unab|led to r|
|000036f0| 65 61 64 20 4c 64 72 20 | 45 6e 74 72 79 20 61 74 |ead Ldr |Entry at|
|00003700| 20 25 78 0a 00 00 00 00 | 20 20 20 20 55 6e 61 62 | %x.....| Unab|
|00003710| 6c 65 64 20 74 6f 20 72 | 65 61 64 20 50 65 62 4c |led to r|ead PebL|
|00003720| 64 72 44 61 74 61 0a 00 | 44 75 6d 70 20 64 6c 6c |drData..|Dump dll|
|00003730| 20 63 6f 6e 74 61 69 6e | 69 6e 67 20 30 78 25 70 | contain|ing 0x%p|
|00003740| 3a 0a 00 00 20 20 20 20 | 55 6e 61 62 6c 65 20 74 |:... |Unable t|
|00003750| 6f 20 66 65 74 63 68 20 | 53 79 73 74 65 6d 52 61 |o fetch |SystemRa|
|00003760| 6e 67 65 53 74 61 72 74 | 0a 00 00 00 48 45 41 50 |ngeStart|....HEAP|
|00003770| 45 58 54 3a 20 55 6e 61 | 62 6c 65 20 74 6f 20 75 |EXT: Una|ble to u|
|00003780| 70 64 61 74 65 20 68 65 | 61 64 65 72 20 76 61 6c |pdate he|ader val|
|00003790| 69 64 61 74 69 6f 6e 20 | 63 6f 70 79 20 61 74 20 |idation |copy at |
|000037a0| 25 70 0a 00 48 45 41 50 | 45 58 54 3a 20 45 6e 61 |%p..HEAP|EXT: Ena|
|000037b0| 62 6c 65 64 20 68 65 61 | 70 20 63 68 65 63 6b 69 |bled hea|p checki|
|000037c0| 6e 67 20 66 6f 72 20 68 | 65 61 70 20 25 70 0a 00 |ng for h|eap %p..|
|000037d0| 48 45 41 50 45 58 54 3a | 20 45 6e 61 62 6c 65 64 |HEAPEXT:| Enabled|
|000037e0| 20 76 61 6c 69 64 61 74 | 65 20 6f 6e 20 63 61 6c | validat|e on cal|
|000037f0| 6c 20 68 65 61 70 20 63 | 68 65 63 6b 69 6e 67 20 |l heap c|hecking |
|00003800| 66 6f 72 20 68 65 61 70 | 20 25 70 0a 00 00 00 00 |for heap| %p.....|
|00003810| 48 45 41 50 45 58 54 3a | 20 55 6e 61 62 6c 65 20 |HEAPEXT:| Unable |
|00003820| 74 6f 20 65 6e 61 62 6c | 65 20 68 65 61 70 20 63 |to enabl|e heap c|
|00003830| 68 65 63 6b 69 6e 67 20 | 66 6f 72 20 68 65 61 70 |hecking |for heap|
|00003840| 20 25 70 0a 00 00 00 00 | 48 45 41 50 45 58 54 3a | %p.....|HEAPEXT:|
|00003850| 20 44 69 73 61 62 6c 65 | 64 20 68 65 61 70 20 63 | Disable|d heap c|
|00003860| 68 65 63 6b 69 6e 67 20 | 66 6f 72 20 68 65 61 70 |hecking |for heap|
|00003870| 20 25 70 0a 00 00 00 00 | 48 45 41 50 45 58 54 3a | %p.....|HEAPEXT:|
|00003880| 20 44 69 73 61 62 6c 65 | 64 20 76 61 6c 69 64 61 | Disable|d valida|
|00003890| 74 65 20 6f 6e 20 63 61 | 6c 6c 20 68 65 61 70 20 |te on ca|ll heap |
|000038a0| 63 68 65 63 6b 69 6e 67 | 20 66 6f 72 20 68 65 61 |checking| for hea|
|000038b0| 70 20 25 70 0a 00 00 00 | 48 45 41 50 45 58 54 3a |p %p....|HEAPEXT:|
|000038c0| 20 55 6e 61 62 6c 65 20 | 74 6f 20 64 69 73 61 62 | Unable |to disab|
|000038d0| 6c 65 20 68 65 61 70 20 | 63 68 65 63 6b 69 6e 67 |le heap |checking|
|000038e0| 20 66 6f 72 20 68 65 61 | 70 20 25 70 0a 00 00 00 | for hea|p %p....|
|000038f0| 20 25 38 64 20 25 38 64 | 20 25 36 64 20 25 38 64 | %8d %8d| %6d %8d|
|00003900| 0a 00 00 00 25 30 34 78 | 3a 20 56 69 72 74 75 61 |....%04x|: Virtua|
|00003910| 6c 41 6c 6c 6f 63 00 00 | 25 30 34 78 3a 20 4f 62 |lAlloc..|%04x: Ob|
|00003920| 6a 65 63 74 73 3d 25 34 | 75 00 00 00 25 30 34 78 |jects=%4|u...%04x|
|00003930| 3a 20 4f 62 6a 65 63 74 | 73 3e 25 34 75 00 00 00 |: Object|s>%4u...|
|00003940| 25 30 34 78 3a 20 75 6e | 61 62 6c 65 20 74 6f 20 |%04x: un|able to |
|00003950| 72 65 61 64 20 48 45 41 | 50 5f 50 53 45 55 44 4f |read HEA|P_PSEUDO|
|00003960| 5f 54 41 47 5f 45 4e 54 | 52 59 20 61 74 20 25 70 |_TAG_ENT|RY at %p|
|00003970| 0a 00 00 00 20 54 61 67 | 20 4e 61 6d 65 20 20 20 |.... Tag| Name |
|00003980| 20 20 20 20 20 20 20 20 | 20 41 6c 6c 6f 63 73 20 | | Allocs |
|00003990| 20 20 20 46 72 65 65 73 | 20 20 20 44 69 66 66 20 | Frees| Diff |
|000039a0| 20 41 6c 6c 6f 63 61 74 | 65 64 0a 00 20 20 20 20 | Allocat|ed.. |
|000039b0| 6e 6f 20 70 73 65 75 64 | 6f 20 74 61 67 73 20 63 |no pseud|o tags c|
|000039c0| 75 72 72 65 6e 74 6c 79 | 20 64 65 66 69 6e 65 64 |urrently| defined|
|000039d0| 20 66 6f 72 20 74 68 69 | 73 20 68 65 61 70 2e 0a | for thi|s heap..|
|000039e0| 00 00 00 00 25 30 34 78 | 3a 20 75 6e 61 62 6c 65 |....%04x|: unable|
|000039f0| 20 74 6f 20 72 65 61 64 | 20 48 45 41 50 5f 54 41 | to read| HEAP_TA|
|00003a00| 47 5f 45 4e 54 52 59 20 | 61 74 20 25 70 0a 00 00 |G_ENTRY |at %p...|
|00003a10| 20 20 20 20 6e 6f 20 74 | 61 67 73 20 63 75 72 72 | no t|ags curr|
|00003a20| 65 6e 74 6c 79 20 64 65 | 66 69 6e 65 64 20 66 6f |ently de|fined fo|
|00003a30| 72 20 74 68 69 73 20 68 | 65 61 70 2e 0a 00 00 00 |r this h|eap.....|
|00003a40| 48 45 41 50 45 58 54 3a | 20 44 69 73 61 62 6c 65 |HEAPEXT:| Disable|
|00003a50| 64 20 41 50 49 20 63 61 | 6c 6c 20 74 72 61 63 69 |d API ca|ll traci|
|00003a60| 6e 67 20 66 6f 72 20 68 | 65 61 70 20 25 70 0a 00 |ng for h|eap %p..|
|00003a70| 48 45 41 50 45 58 54 3a | 20 45 6e 61 62 6c 65 64 |HEAPEXT:| Enabled|
|00003a80| 20 41 50 49 20 63 61 6c | 6c 20 74 72 61 63 69 6e | API cal|l tracin|
|00003a90| 67 20 66 6f 72 20 68 65 | 61 70 20 25 70 0a 00 00 |g for he|ap %p...|
|00003aa0| 48 45 41 50 45 58 54 3a | 20 55 6e 61 62 6c 65 20 |HEAPEXT:| Unable |
|00003ab0| 74 6f 20 74 6f 67 67 6c | 65 20 41 50 49 20 63 61 |to toggl|e API ca|
|00003ac0| 6c 6c 20 74 72 61 63 69 | 6e 67 20 66 6f 72 20 68 |ll traci|ng for h|
|00003ad0| 65 61 70 20 25 70 0a 00 | 48 45 41 50 45 58 54 3a |eap %p..|HEAPEXT:|
|00003ae0| 20 44 69 73 61 62 6c 65 | 64 20 68 65 61 70 20 62 | Disable|d heap b|
|00003af0| 72 65 61 6b 70 6f 69 6e | 74 20 66 6f 72 20 25 73 |reakpoin|t for %s|
|00003b00| 0a 00 00 00 48 45 41 50 | 45 58 54 3a 20 45 6e 61 |....HEAP|EXT: Ena|
|00003b10| 62 6c 65 64 20 68 65 61 | 70 20 62 72 65 61 6b 70 |bled hea|p breakp|
|00003b20| 6f 69 6e 74 20 66 6f 72 | 20 25 73 20 6f 66 20 62 |oint for| %s of b|
|00003b30| 6c 6f 63 6b 20 77 69 74 | 68 20 74 61 67 20 25 77 |lock wit|h tag %w|
|00003b40| 73 0a 00 00 48 45 41 50 | 45 58 54 3a 20 45 6e 61 |s...HEAP|EXT: Ena|
|00003b50| 62 6c 65 64 20 68 65 61 | 70 20 62 72 65 61 6b 70 |bled hea|p breakp|
|00003b60| 6f 69 6e 74 20 66 6f 72 | 20 25 73 20 6f 66 20 62 |oint for| %s of b|
|00003b70| 6c 6f 63 6b 20 25 78 0a | 00 00 00 00 46 72 65 65 |lock %x.|....Free|
|00003b80| 00 00 00 00 52 65 41 6c | 6c 6f 63 00 41 6c 6c 6f |....ReAl|loc.Allo|
|00003b90| 63 00 00 00 48 45 41 50 | 45 58 54 3a 20 55 6e 61 |c...HEAP|EXT: Una|
|00003ba0| 62 6c 65 20 74 6f 20 73 | 65 74 20 68 65 61 70 20 |ble to s|et heap |
|00003bb0| 62 72 65 61 6b 70 6f 69 | 6e 74 20 2d 20 77 72 69 |breakpoi|nt - wri|
|00003bc0| 74 65 20 6d 65 6d 6f 72 | 79 20 74 6f 20 25 78 20 |te memor|y to %x |
|00003bd0| 66 61 69 6c 65 64 0a 00 | 48 45 41 50 45 58 54 3a |failed..|HEAPEXT:|
|00003be0| 20 55 6e 61 62 6c 65 20 | 74 6f 20 63 6f 6e 76 65 | Unable |to conve|
|00003bf0| 72 74 20 74 61 67 20 6e | 61 6d 65 20 25 77 73 20 |rt tag n|ame %ws |
|00003c00| 74 6f 20 61 6e 20 69 6e | 64 65 78 0a 00 00 00 00 |to an in|dex.....|
|00003c10| 20 20 20 20 53 65 67 6d | 65 6e 74 20 61 74 20 25 | Segm|ent at %|
|00003c20| 70 20 74 6f 20 25 70 20 | 28 25 30 38 78 20 62 79 |p to %p |(%08x by|
|00003c30| 74 65 73 20 63 6f 6d 6d | 69 74 74 65 64 29 0a 00 |tes comm|itted)..|
|00003c40| 20 20 20 20 55 6e 61 62 | 6c 65 64 20 74 6f 20 72 | Unab|led to r|
|00003c50| 65 61 64 20 48 45 41 50 | 5f 53 45 47 4d 45 4e 54 |ead HEAP|_SEGMENT|
|00003c60| 20 73 74 72 75 63 74 75 | 72 65 20 61 74 20 25 70 | structu|re at %p|
|00003c70| 0a 00 00 00 20 76 61 6c | 69 64 61 74 65 20 6f 6e |.... val|idate on|
|00003c80| 20 63 61 6c 6c 00 00 00 | 20 76 61 6c 69 64 61 74 | call...| validat|
|00003c90| 65 20 70 61 72 61 6d 65 | 74 65 72 73 00 00 00 00 |e parame|ters....|
|00003ca0| 20 66 72 65 65 20 63 68 | 65 63 6b 69 6e 67 00 00 | free ch|ecking..|
|00003cb0| 20 74 61 69 6c 20 63 68 | 65 63 6b 69 6e 67 00 00 | tail ch|ecking..|
|00003cc0| 20 25 2d 31 34 2e 31 34 | 77 73 00 00 20 2d 20 68 | %-14.14|ws.. - h|
|00003cd0| 65 61 70 20 68 65 61 64 | 65 72 73 20 69 6e 61 63 |eap head|ers inac|
|00003ce0| 63 65 73 73 61 62 6c 65 | 2c 20 73 6b 69 70 70 69 |cessable|, skippi|
|00003cf0| 6e 67 0a 00 25 33 75 3a | 20 20 20 25 30 38 78 20 |ng..%3u:| %08x |
|00003d00| 00 00 00 00 49 6e 64 65 | 78 20 20 20 41 64 64 72 |....Inde|x Addr|
|00003d10| 65 73 73 20 20 4e 61 6d | 65 20 20 20 20 20 20 44 |ess Nam|e D|
|00003d20| 65 62 75 67 67 69 6e 67 | 20 6f 70 74 69 6f 6e 73 |ebugging| options|
|00003d30| 20 65 6e 61 62 6c 65 64 | 0a 00 00 00 25 30 34 78 | enabled|....%04x|
|00003d40| 3a 20 75 6e 61 62 6c 65 | 20 74 6f 20 72 65 61 64 |: unable| to read|
|00003d50| 20 48 45 41 50 5f 54 41 | 47 5f 45 4e 54 52 59 20 | HEAP_TA|G_ENTRY |
|00003d60| 61 74 20 25 78 0a 00 00 | 25 30 34 78 3a 20 25 2d |at %x...|%04x: %-|
|00003d70| 32 30 2e 32 30 77 73 20 | 25 38 64 20 25 38 64 20 |20.20ws |%8d %8d |
|00003d80| 25 36 64 20 25 38 64 0a | 00 00 00 00 20 54 61 67 |%6d %8d.|.... Tag|
|00003d90| 20 20 4e 61 6d 65 20 20 | 20 20 20 20 20 20 20 20 | Name | |
|00003da0| 20 20 20 20 20 20 20 20 | 20 41 6c 6c 6f 63 73 20 | | Allocs |
|00003db0| 20 20 20 46 72 65 65 73 | 20 20 20 44 69 66 66 20 | Frees| Diff |
|00003dc0| 20 41 6c 6c 6f 63 61 74 | 65 64 0a 00 20 20 20 20 | Allocat|ed.. |
|00003dd0| 6e 6f 20 67 6c 6f 62 61 | 6c 20 74 61 67 73 20 63 |no globa|l tags c|
|00003de0| 75 72 72 65 6e 74 6c 79 | 20 64 65 66 69 6e 65 64 |urrently| defined|
|00003df0| 2e 0a 00 00 48 45 41 50 | 45 58 54 3a 20 55 6e 61 |....HEAP|EXT: Una|
|00003e00| 62 6c 65 20 74 6f 20 72 | 65 61 64 20 52 74 6c 70 |ble to r|ead Rtlp|
|00003e10| 47 6c 6f 62 61 6c 54 61 | 67 48 65 61 70 0a 00 00 |GlobalTa|gHeap...|
|00003e20| 47 6c 6f 62 61 6c 20 54 | 61 67 73 20 64 65 66 69 |Global T|ags defi|
|00003e30| 6e 65 64 20 66 6f 72 20 | 65 61 63 68 20 44 4c 4c |ned for |each DLL|
|00003e40| 20 74 68 61 74 20 6d 61 | 6b 65 73 20 61 6e 20 75 | that ma|kes an u|
|00003e50| 6e 74 61 67 67 65 64 20 | 61 6c 6c 6f 63 61 74 69 |ntagged |allocati|
|00003e60| 6f 6e 2e 0a 00 00 00 00 | 20 20 20 20 64 69 73 61 |on......| disa|
|00003e70| 62 6c 65 20 63 6f 61 6c | 65 73 63 69 6e 67 20 6f |ble coal|escing o|
|00003e80| 66 20 66 72 65 65 20 62 | 6c 6f 63 6b 73 0a 00 00 |f free b|locks...|
|00003e90| 20 20 20 20 73 74 61 63 | 6b 20 62 61 63 6b 20 74 | stac|k back t|
|00003ea0| 72 61 63 65 73 0a 00 00 | 20 20 20 20 68 65 61 70 |races...| heap|
|00003eb0| 20 74 61 67 67 69 6e 67 | 0a 00 00 00 20 20 20 20 | tagging|.... |
|00003ec0| 76 61 6c 69 64 61 74 65 | 20 6f 6e 20 63 61 6c 6c |validate| on call|
|00003ed0| 0a 00 00 00 20 20 20 20 | 76 61 6c 69 64 61 74 65 |.... |validate|
|00003ee0| 20 70 61 72 61 6d 65 74 | 65 72 73 0a 00 00 00 00 | paramet|ers.....|
|00003ef0| 20 20 20 20 66 72 65 65 | 20 63 68 65 63 6b 69 6e | free| checkin|
|00003f00| 67 0a 00 00 20 20 20 20 | 74 61 69 6c 20 63 68 65 |g... |tail che|
|00003f10| 63 6b 69 6e 67 0a 00 00 | 4e 74 47 6c 6f 62 61 6c |cking...|NtGlobal|
|00003f20| 46 6c 61 67 20 65 6e 61 | 62 6c 65 73 20 66 6f 6c |Flag ena|bles fol|
|00003f30| 6c 6f 77 69 6e 67 20 64 | 65 62 75 67 67 69 6e 67 |lowing d|ebugging|
|00003f40| 20 61 69 64 73 20 66 6f | 72 20 6e 65 77 20 68 65 | aids fo|r new he|
|00003f50| 61 70 73 3a 00 00 00 00 | 20 20 2d 70 20 2d 74 20 |aps:....| -p -t |
|00003f60| 5b 4e 5d 20 20 20 64 75 | 6d 70 20 66 69 72 73 74 |[N] du|mp first|
|00003f70| 20 4e 20 63 6f 6c 6c 65 | 63 74 65 64 20 74 72 61 | N colle|cted tra|
|00003f80| 63 65 73 20 77 69 74 68 | 20 68 65 61 76 79 20 68 |ces with| heavy h|
|00003f90| 65 61 70 20 75 73 65 72 | 73 2e 0a 00 20 20 2d 70 |eap user|s... -p|
|00003fa0| 20 2d 61 20 41 44 44 52 | 20 20 66 69 67 75 72 65 | -a ADDR| figure|
|00003fb0| 20 6f 75 74 20 77 68 61 | 74 20 68 65 61 70 20 62 | out wha|t heap b|
|00003fc0| 6c 6f 63 6b 20 69 73 20 | 61 74 20 41 44 44 52 2e |lock is |at ADDR.|
|00003fd0| 20 20 20 20 20 20 0a 00 | 20 20 2d 70 20 2d 68 20 | ..| -p -h |
|00003fe0| 41 44 44 52 20 20 64 65 | 74 61 69 6c 65 64 20 64 |ADDR de|tailed d|
|00003ff0| 75 6d 70 20 6f 66 20 70 | 61 67 65 20 68 65 61 70 |ump of p|age heap|
|00004000| 20 61 74 20 41 44 44 52 | 2e 20 20 20 20 20 20 20 | at ADDR|. |
|00004010| 20 20 0a 00 20 20 2d 70 | 20 20 20 20 20 20 20 20 | .. -p| |
|00004020| 20 20 64 75 6d 70 20 61 | 6c 6c 20 70 61 67 65 20 | dump a|ll page |
|00004030| 68 65 61 70 73 2e 20 20 | 20 20 20 20 20 20 20 20 |heaps. | |
|00004040| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 0a 00 | | ..|
|00004050| 20 20 2d 70 20 2d 3f 20 | 20 20 20 20 20 20 65 78 | -p -? | ex|
|00004060| 74 65 6e 73 69 76 65 20 | 70 61 67 65 20 68 65 61 |tensive |page hea|
|00004070| 70 20 72 65 6c 61 74 65 | 64 20 68 65 6c 70 2e 20 |p relate|d help. |
|00004080| 20 20 20 20 20 20 20 20 | 20 20 0a 00 20 20 20 20 | | .. |
|00004090| 20 20 20 20 20 20 20 20 | 69 66 20 74 68 65 20 74 | |if the t|
|000040a0| 79 70 65 20 69 73 20 6e | 6f 74 20 73 70 65 63 69 |ype is n|ot speci|
|000040b0| 66 69 65 64 20 74 68 65 | 6e 20 61 6c 6c 20 62 72 |fied the|n all br|
|000040c0| 65 61 6b 70 6f 69 6e 74 | 73 20 61 72 65 20 72 65 |eakpoint|s are re|
|000040d0| 6d 6f 76 65 64 2e 0a 00 | 20 20 2d 42 20 20 20 20 |moved...| -B |
|000040e0| 20 20 20 20 72 65 6d 6f | 76 65 73 20 61 20 63 6f | remo|ves a co|
|000040f0| 6e 64 69 74 69 6f 6e 61 | 6c 20 62 72 65 61 6b 70 |nditiona|l breakp|
|00004100| 6f 69 6e 74 20 69 6e 20 | 74 68 65 20 68 65 61 70 |oint in |the heap|
|00004110| 20 6d 61 6e 61 67 65 72 | 2e 0a 00 00 20 20 20 20 | manager|.... |
|00004120| 20 20 20 20 20 20 20 20 | 61 6e 64 20 69 73 20 74 | |and is t|
|00004130| 68 65 20 74 61 67 20 6e | 61 6d 65 20 77 69 74 68 |he tag n|ame with|
|00004140| 69 6e 20 74 68 65 20 68 | 65 61 70 20 73 70 65 63 |in the h|eap spec|
|00004150| 69 66 69 65 64 20 62 79 | 20 61 64 64 72 65 73 73 |ified by| address|
|00004160| 2e 0a 00 00 20 20 20 20 | 20 20 20 20 20 20 20 20 |.... | |
|00004170| 6f 72 20 61 20 68 65 61 | 70 2c 20 69 6e 20 77 68 |or a hea|p, in wh|
|00004180| 69 63 68 20 63 61 73 65 | 20 74 68 65 20 74 61 67 |ich case| the tag|
|00004190| 20 61 72 67 75 6d 65 6e | 74 20 69 73 20 72 65 71 | argumen|t is req|
|000041a0| 75 69 72 65 64 2c 0a 00 | 20 20 20 20 20 20 20 20 |uired,..| |
|000041b0| 20 20 20 20 61 64 64 72 | 65 73 73 20 65 69 74 68 | addr|ess eith|
|000041c0| 65 72 20 73 70 65 63 69 | 66 69 65 73 20 74 68 65 |er speci|fies the|
|000041d0| 20 61 64 64 72 65 73 73 | 20 6f 66 20 61 20 62 6c | address| of a bl|
|000041e0| 6f 63 6b 20 74 6f 20 73 | 74 6f 70 20 6f 6e 2e 0a |ock to s|top on..|
|000041f0| 00 00 00 00 20 20 20 20 | 20 20 20 20 20 20 20 20 |.... | |
|00004200| 61 6c 6c 6f 63 20 7c 20 | 72 65 61 6c 6c 6f 63 20 |alloc | |realloc |
|00004210| 7c 20 66 72 65 65 20 73 | 70 65 63 69 66 69 65 73 || free s|pecifies|
|00004220| 20 77 68 69 63 68 20 61 | 63 74 69 6f 6e 20 74 6f | which a|ction to|
|00004230| 20 73 74 6f 70 2e 0a 00 | 20 20 2d 62 20 20 20 20 | stop...| -b |
|00004240| 20 20 20 20 63 72 65 61 | 74 65 73 20 61 20 63 6f | crea|tes a co|
|00004250| 6e 64 69 74 69 6f 6e 61 | 6c 20 62 72 65 61 6b 70 |nditiona|l breakp|
|00004260| 6f 69 6e 74 20 69 6e 20 | 74 68 65 20 68 65 61 70 |oint in |the heap|
|00004270| 20 6d 61 6e 61 67 65 72 | 2e 0a 00 00 20 20 2d 44 | manager|.... -D|
|00004280| 20 20 20 20 20 20 20 20 | 64 69 73 61 62 6c 65 73 | |disables|
|00004290| 20 76 61 6c 69 64 61 74 | 65 20 6f 6e 20 63 61 6c | validat|e on cal|
|000042a0| 6c 20 66 6f 72 20 74 68 | 65 20 73 70 65 63 69 66 |l for th|e specif|
|000042b0| 69 65 64 20 68 65 61 70 | 28 73 29 2e 0a 00 00 00 |ied heap|(s).....|
|000042c0| 20 20 2d 45 20 20 20 20 | 20 20 20 20 65 6e 61 62 | -E | enab|
|000042d0| 6c 65 73 20 76 61 6c 69 | 64 61 74 65 20 6f 6e 20 |les vali|date on |
|000042e0| 63 61 6c 6c 20 66 6f 72 | 20 74 68 65 20 73 70 65 |call for| the spe|
|000042f0| 63 69 66 69 65 64 20 68 | 65 61 70 28 73 29 2e 0a |cified h|eap(s)..|
|00004300| 00 00 00 00 20 20 2d 64 | 20 20 20 20 20 20 20 20 |.... -d| |
|00004310| 64 69 73 61 62 6c 65 73 | 20 68 65 61 70 20 63 68 |disables| heap ch|
|00004320| 65 63 6b 69 6e 67 20 66 | 6f 72 20 74 68 65 20 73 |ecking f|or the s|
|00004330| 70 65 63 69 66 69 65 64 | 20 68 65 61 70 28 73 29 |pecified| heap(s)|
|00004340| 2e 0a 00 00 20 20 2d 65 | 20 20 20 20 20 20 20 20 |.... -e| |
|00004350| 65 6e 61 62 6c 65 73 20 | 68 65 61 70 20 63 68 65 |enables |heap che|
|00004360| 63 6b 69 6e 67 20 66 6f | 72 20 74 68 65 20 73 70 |cking fo|r the sp|
|00004370| 65 63 69 66 69 65 64 20 | 68 65 61 70 28 73 29 2e |ecified |heap(s).|
|00004380| 0a 00 00 00 20 20 2d 73 | 20 20 20 20 20 20 20 20 |.... -s| |
|00004390| 64 69 73 70 6c 61 79 73 | 20 73 75 6d 6d 61 72 79 |displays| summary|
|000043a0| 20 69 6e 66 6f 72 6d 61 | 74 69 6f 6e 20 66 6f 72 | informa|tion for|
|000043b0| 20 74 68 65 20 73 70 65 | 63 69 66 69 65 64 20 68 | the spe|cified h|
|000043c0| 65 61 70 28 73 29 2e 0a | 00 00 00 00 20 20 2d 67 |eap(s)..|.... -g|
|000043d0| 20 20 20 20 20 20 20 20 | 64 69 73 70 6c 61 79 73 | |displays|
|000043e0| 20 74 68 65 20 67 6c 6f | 62 61 6c 20 74 61 67 20 | the glo|bal tag |
|000043f0| 69 6e 66 6f 72 6d 61 74 | 69 6f 6e 20 67 65 6e 65 |informat|ion gene|
|00004400| 72 61 74 65 64 20 62 79 | 20 74 61 67 20 62 79 20 |rated by| tag by |
|00004410| 44 4c 4c 0a 00 00 00 00 | 20 20 2d 54 20 20 20 20 |DLL.....| -T |
|00004420| 20 20 20 20 64 69 73 70 | 6c 61 79 73 20 74 68 65 | disp|lays the|
|00004430| 20 70 73 65 75 64 6f 20 | 74 61 67 20 69 6e 66 6f | pseudo |tag info|
|00004440| 72 6d 61 74 69 6f 6e 20 | 66 6f 72 20 74 68 65 20 |rmation |for the |
|00004450| 73 70 65 63 69 66 69 65 | 64 20 68 65 61 70 28 73 |specifie|d heap(s|
|00004460| 29 2e 0a 00 20 20 2d 74 | 20 20 20 20 20 20 20 20 |)... -t| |
|00004470| 64 69 73 70 6c 61 79 73 | 20 74 68 65 20 74 61 67 |displays| the tag|
|00004480| 20 69 6e 66 6f 72 6d 61 | 74 69 6f 6e 20 66 6f 72 | informa|tion for|
|00004490| 20 74 68 65 20 73 70 65 | 63 69 66 69 65 64 20 68 | the spe|cified h|
|000044a0| 65 61 70 28 73 29 2e 0a | 00 00 00 00 20 20 2d 6d |eap(s)..|.... -m|
|000044b0| 20 20 20 20 20 20 20 20 | 64 69 73 70 6c 61 79 73 | |displays|
|000044c0| 20 61 6c 6c 20 74 68 65 | 20 73 65 67 6d 65 6e 74 | all the| segment|
|000044d0| 20 65 6e 74 72 69 65 73 | 20 66 6f 72 20 74 68 65 | entries| for the|
|000044e0| 20 73 70 65 63 69 66 69 | 65 64 20 68 65 61 70 28 | specifi|ed heap(|
|000044f0| 73 29 2e 0a 00 00 00 00 | 20 20 2d 6b 20 20 20 20 |s)......| -k |
|00004500| 20 20 20 20 64 69 73 70 | 6c 61 79 73 20 61 6e 79 | disp|lays any|
|00004510| 20 61 73 73 6f 63 69 61 | 74 65 64 20 73 74 61 63 | associa|ted stac|
|00004520| 6b 20 62 61 63 6b 20 74 | 72 61 63 65 20 66 6f 72 |k back t|race for|
|00004530| 20 65 61 63 68 20 65 6e | 74 72 79 20 28 78 38 36 | each en|try (x86|
|00004540| 20 6f 6e 6c 79 29 2e 0a | 00 00 00 00 20 20 2d 66 | only)..|.... -f|
|00004550| 20 20 20 20 20 20 20 20 | 64 69 73 70 6c 61 79 73 | |displays|
|00004560| 20 61 6c 6c 20 74 68 65 | 20 66 72 65 65 20 6c 69 | all the| free li|
|00004570| 73 74 20 65 6e 74 72 69 | 65 73 20 66 6f 72 20 74 |st entri|es for t|
|00004580| 68 65 20 73 70 65 63 69 | 66 69 65 64 20 68 65 61 |he speci|fied hea|
|00004590| 70 28 73 29 2e 0a 00 00 | 20 20 2d 68 20 20 20 20 |p(s)....| -h |
|000045a0| 20 20 20 20 64 69 73 70 | 6c 61 79 73 20 61 6c 6c | disp|lays all|
|000045b0| 20 74 68 65 20 65 6e 74 | 72 69 65 73 20 66 6f 72 | the ent|ries for|
|000045c0| 20 74 68 65 20 73 70 65 | 63 69 66 69 65 64 20 68 | the spe|cified h|
|000045d0| 65 61 70 28 73 29 2e 0a | 00 00 00 00 20 20 20 20 |eap(s)..|.... |
|000045e0| 20 20 20 20 20 20 20 20 | 54 68 69 73 20 63 61 6e | |This can|
|000045f0| 20 74 61 6b 65 20 61 20 | 6c 6f 6e 67 20 74 69 6d | take a |long tim|
|00004600| 65 2e 0a 00 20 20 2d 61 | 20 20 20 20 20 20 20 20 |e... -a| |
|00004610| 64 69 73 70 6c 61 79 73 | 20 61 6c 6c 20 74 68 65 |displays| all the|
|00004620| 20 69 6e 66 6f 72 6d 61 | 74 69 6f 6e 20 66 6f 72 | informa|tion for|
|00004630| 20 74 68 65 20 73 70 65 | 63 69 66 69 65 64 20 68 | the spe|cified h|
|00004640| 65 61 70 28 73 29 2e 0a | 00 00 00 00 20 20 2d 76 |eap(s)..|.... -v|
|00004650| 20 20 20 20 20 20 20 20 | 76 61 6c 69 64 61 74 65 | |validate|
|00004660| 73 20 74 68 65 20 73 70 | 65 63 69 66 69 65 64 20 |s the sp|ecified |
|00004670| 68 65 61 70 28 73 29 2e | 0a 00 00 00 20 20 2d 3f |heap(s).|.... -?|
|00004680| 20 20 20 20 20 20 20 20 | 64 69 73 70 6c 61 79 73 | |displays|
|00004690| 20 74 68 69 73 20 68 65 | 6c 70 20 6d 65 73 73 61 | this he|lp messa|
|000046a0| 67 65 2e 0a 00 00 00 00 | 20 20 20 20 20 20 20 20 |ge......| |
|000046b0| 20 20 20 20 2d 31 20 69 | 73 20 74 68 65 20 64 65 | -1 i|s the de|
|000046c0| 66 61 75 6c 74 20 61 6e | 64 20 73 70 65 63 69 66 |fault an|d specif|
|000046d0| 69 65 73 20 74 68 65 20 | 70 72 6f 63 65 73 73 20 |ies the |process |
|000046e0| 68 65 61 70 2e 0a 00 00 | 20 20 20 20 20 20 20 20 |heap....| |
|000046f0| 20 20 20 20 5a 65 72 6f | 20 73 70 65 63 69 66 69 | Zero| specifi|
|00004700| 65 73 20 61 6c 6c 20 68 | 65 61 70 73 20 69 6e 20 |es all h|eaps in |
|00004710| 74 68 65 20 70 72 6f 63 | 65 73 73 2e 0a 00 00 00 |the proc|ess.....|
|00004720| 20 20 61 64 64 72 65 73 | 73 20 2d 20 73 70 65 63 | addres|s - spec|
|00004730| 69 66 69 65 73 20 65 69 | 74 68 65 72 20 61 20 68 |ifies ei|ther a h|
|00004740| 65 61 70 20 6e 75 6d 62 | 65 72 20 28 31 2d 6e 29 |eap numb|er (1-n)|
|00004750| 2c 20 6f 72 20 61 20 68 | 65 61 70 20 61 64 64 72 |, or a h|eap addr|
|00004760| 65 73 73 2e 0a 00 00 00 | 20 20 20 20 20 20 20 20 |ess.....| |
|00004770| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 5b | | [|
|00004780| 2d 42 20 5b 61 6c 6c 6f | 63 20 7c 20 72 65 61 6c |-B [allo|c | real|
|00004790| 6c 6f 63 20 7c 20 66 72 | 65 65 5d 5d 0a 00 00 00 |loc | fr|ee]]....|
|000047a0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|000047b0| 20 20 20 20 20 20 20 5b | 2d 62 20 5b 61 6c 6c 6f | [|-b [allo|
|000047c0| 63 20 7c 20 72 65 61 6c | 6c 6f 63 20 7c 20 66 72 |c | real|loc | fr|
|000047d0| 65 65 5d 20 5b 74 61 67 | 5d 5d 0a 00 20 20 20 20 |ee] [tag|]].. |
|000047e0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 | | |
|000047f0| 20 20 20 5b 2d 64 20 7c | 20 2d 44 20 7c 20 2d 65 | [-d || -D | -e|
|00004800| 20 7c 20 2d 45 5d 0a 00 | 75 73 61 67 65 3a 20 21 | | -E]..|usage: !|
|00004810| 68 65 61 70 20 5b 61 64 | 64 72 65 73 73 5d 20 5b |heap [ad|dress] [|
|00004820| 2d 3f 20 7c 20 2d 68 5d | 20 5b 2d 76 5d 20 5b 5b |-? | -h]| [-v] [[|
|00004830| 2d 61 5d 20 7c 20 5b 2d | 68 5d 20 5b 2d 66 5d 20 |-a] | [-|h] [-f] |
|00004840| 5b 2d 6d 5d 5d 20 5b 2d | 74 5d 20 5b 2d 73 5d 0a |[-m]] [-|t] [-s].|
|00004850| 00 00 00 00 48 45 41 50 | 45 58 54 3a 20 55 6e 61 |....HEAP|EXT: Una|
|00004860| 62 6c 65 20 74 6f 20 61 | 63 63 65 73 73 20 76 61 |ble to a|ccess va|
|00004870| 6c 75 65 20 6f 66 20 4e | 54 44 4c 4c 21 4e 74 47 |lue of N|TDLL!NtG|
|00004880| 6c 6f 62 61 6c 46 6c 61 | 67 2e 0a 00 48 45 41 50 |lobalFla|g...HEAP|
|00004890| 45 58 54 3a 20 4d 75 73 | 74 20 73 70 65 63 69 66 |EXT: Mus|t specif|
|000048a0| 79 20 65 69 74 68 65 72 | 20 68 65 61 70 20 69 6e |y either| heap in|
|000048b0| 64 65 78 20 6f 72 20 68 | 65 61 70 20 61 64 64 72 |dex or h|eap addr|
|000048c0| 65 73 73 20 74 6f 20 2d | 62 20 63 6f 6d 6d 61 6e |ess to -|b comman|
|000048d0| 64 2e 0a 00 48 45 41 50 | 45 58 54 3a 20 55 6e 61 |d...HEAP|EXT: Una|
|000048e0| 62 6c 65 20 74 6f 20 25 | 73 20 68 65 61 70 20 62 |ble to %|s heap b|
|000048f0| 72 65 61 6b 70 6f 69 6e | 74 20 64 75 65 20 74 6f |reakpoin|t due to|
|00004900| 20 6d 69 73 73 69 6e 67 | 20 6f 72 20 69 6e 76 61 | missing| or inva|
|00004910| 6c 69 64 20 4e 54 44 4c | 4c 20 73 79 6d 62 6f 6c |lid NTDL|L symbol|
|00004920| 73 2e 0a 00 72 65 6d 6f | 76 65 00 00 73 65 74 00 |s...remo|ve..set.|
|00004930| 48 45 41 50 45 58 54 3a | 20 2d 64 2c 20 2d 44 2c |HEAPEXT:| -d, -D,|
|00004940| 20 2d 65 2c 20 2d 45 20 | 61 6e 64 20 2d 43 20 66 | -e, -E |and -C f|
|00004950| 6c 61 67 73 20 61 72 65 | 20 6d 75 74 75 61 6c 6c |lags are| mutuall|
|00004960| 79 20 65 78 63 6c 75 73 | 69 76 65 0a 00 00 00 00 |y exclus|ive.....|
|00004970| 61 72 72 61 79 20 6f 66 | 20 70 72 6f 63 65 73 73 |array of| process|
|00004980| 20 68 65 61 70 73 20 69 | 73 20 69 6e 61 63 63 65 | heaps i|s inacce|
|00004990| 73 73 61 62 6c 65 0a 00 | 59 6f 75 20 6d 75 73 74 |ssable..|You must|
|000049a0| 20 73 70 65 63 69 66 79 | 20 74 68 65 20 61 63 74 | specify| the act|
|000049b0| 75 61 6c 20 68 65 61 70 | 20 61 64 64 72 65 73 73 |ual heap| address|
|000049c0| 20 73 69 6e 63 65 0a 00 | 53 74 6f 70 20 69 6e 73 | since..|Stop ins|
|000049d0| 69 64 65 20 68 65 61 70 | 20 6d 61 6e 61 67 65 72 |ide heap| manager|
|000049e0| 2e 2e 2e 76 61 6c 69 64 | 61 74 69 6e 67 20 68 65 |...valid|ating he|
|000049f0| 61 70 20 61 64 64 72 65 | 73 73 20 30 78 25 78 0a |ap addre|ss 0x%x.|
|00004a00| 00 00 00 00 25 30 38 6c | 78 3a 20 55 6e 61 62 6c |....%08l|x: Unabl|
|00004a10| 65 20 74 6f 20 72 65 61 | 64 20 50 72 6f 63 65 73 |e to rea|d Proces|
|00004a20| 73 48 65 61 70 73 20 61 | 72 72 61 79 0a 00 00 00 |sHeaps a|rray....|
|00004a30| 55 6e 61 62 6c 65 20 74 | 6f 20 61 6c 6c 6f 63 61 |Unable t|o alloca|
|00004a40| 74 65 20 6d 65 6d 6f 72 | 79 20 74 6f 20 68 6f 6c |te memor|y to hol|
|00004a50| 64 20 50 72 6f 63 65 73 | 73 48 65 61 70 73 20 61 |d Proces|sHeaps a|
|00004a60| 72 72 61 79 0a 00 00 00 | 55 6e 61 62 6c 65 20 74 |rray....|Unable t|
|00004a70| 6f 20 67 65 74 20 61 64 | 64 72 65 73 73 20 6f 66 |o get ad|dress of|
|00004a80| 20 50 72 6f 63 65 73 73 | 48 65 61 70 73 20 61 72 | Process|Heaps ar|
|00004a90| 72 61 79 0a 00 00 00 00 | 4e 6f 20 68 65 61 70 73 |ray.....|No heaps|
|00004aa0| 20 74 6f 20 64 69 73 70 | 6c 61 79 2e 0a 00 00 00 | to disp|lay.....|
|00004ab0| 20 00 00 00 25 6c 78 00 | 48 45 41 50 45 58 54 3a | ...%lx.|HEAPEXT:|
|00004ac0| 20 54 6f 6f 20 6d 61 6e | 79 20 70 61 72 61 6d 65 | Too man|y parame|
|00004ad0| 74 65 72 73 20 73 70 65 | 63 69 66 69 65 64 20 74 |ters spe|cified t|
|00004ae0| 6f 20 2d 42 20 73 77 69 | 74 63 68 0a 00 00 00 00 |o -B swi|tch.....|
|00004af0| 48 45 41 50 45 58 54 3a | 20 49 6e 76 61 6c 69 64 |HEAPEXT:| Invalid|
|00004b00| 20 66 69 72 73 74 20 61 | 72 67 75 6d 65 6e 74 20 | first a|rgument |
|00004b10| 74 6f 20 2d 62 20 73 77 | 69 74 63 68 2e 0a 00 00 |to -b sw|itch....|
|00004b20| 66 72 65 65 00 00 00 00 | 72 65 61 6c 6c 6f 63 00 |free....|realloc.|
|00004b30| 61 6c 6c 6f 63 00 00 00 | 48 45 41 50 45 58 54 3a |alloc...|HEAPEXT:|
|00004b40| 20 49 6e 76 61 6c 69 64 | 20 73 65 63 6f 6e 64 20 | Invalid| second |
|00004b50| 61 72 67 75 6d 65 6e 74 | 20 74 6f 20 2d 62 20 73 |argument| to -b s|
|00004b60| 77 69 74 63 68 2e 0a 00 | 25 77 73 00 48 45 41 50 |witch...|%ws.HEAP|
|00004b70| 45 58 54 3a 20 54 6f 6f | 20 6d 61 6e 79 20 70 61 |EXT: Too| many pa|
|00004b80| 72 61 6d 65 74 65 72 73 | 20 73 70 65 63 69 66 69 |rameters| specifi|
|00004b90| 65 64 20 74 6f 20 2d 62 | 20 73 77 69 74 63 68 0a |ed to -b| switch.|
|00004ba0| 00 00 00 00 48 45 41 50 | 45 58 54 3a 20 21 68 65 |....HEAP|EXT: !he|
|00004bb0| 61 70 20 69 6e 76 61 6c | 69 64 20 6f 70 74 69 6f |ap inval|id optio|
|00004bc0| 6e 20 66 6c 61 67 20 27 | 2d 25 63 27 0a 00 00 00 |n flag '|-%c'....|
|00004bd0| 48 45 41 50 45 58 54 3a | 20 55 6e 61 62 6c 65 20 |HEAPEXT:| Unable |
|00004be0| 74 6f 20 67 65 74 20 61 | 64 64 72 65 73 73 20 6f |to get a|ddress o|
|00004bf0| 66 20 4e 54 44 4c 4c 21 | 52 74 6c 70 53 74 61 63 |f NTDLL!|RtlpStac|
|00004c00| 6b 54 72 61 63 65 44 61 | 74 61 42 61 73 65 0a 00 |kTraceDa|taBase..|
|00004c10| 4e 54 44 4c 4c 21 52 74 | 6c 70 53 74 61 63 6b 54 |NTDLL!Rt|lpStackT|
|00004c20| 72 61 63 65 44 61 74 61 | 42 61 73 65 00 00 00 00 |raceData|Base....|
|00004c30| 48 45 41 50 45 58 54 3a | 20 55 6e 61 62 6c 65 20 |HEAPEXT:| Unable |
|00004c40| 74 6f 20 67 65 74 20 61 | 64 64 72 65 73 73 20 6f |to get a|ddress o|
|00004c50| 66 20 4e 54 44 4c 4c 21 | 52 74 6c 70 48 65 61 70 |f NTDLL!|RtlpHeap|
|00004c60| 53 74 6f 70 4f 6e 0a 00 | 4e 54 44 4c 4c 21 52 74 |StopOn..|NTDLL!Rt|
|00004c70| 6c 70 48 65 61 70 53 74 | 6f 70 4f 6e 00 00 00 00 |lpHeapSt|opOn....|
|00004c80| 48 45 41 50 45 58 54 3a | 20 55 6e 61 62 6c 65 20 |HEAPEXT:| Unable |
|00004c90| 74 6f 20 67 65 74 20 61 | 64 64 72 65 73 73 20 6f |to get a|ddress o|
|00004ca0| 66 20 2a 4e 54 44 4c 4c | 21 52 74 6c 70 47 6c 6f |f *NTDLL|!RtlpGlo|
|00004cb0| 62 61 6c 54 61 67 48 65 | 61 70 2e 0a 00 00 00 00 |balTagHe|ap......|
|00004cc0| 48 45 41 50 45 58 54 3a | 20 55 6e 61 62 6c 65 20 |HEAPEXT:| Unable |
|00004cd0| 74 6f 20 67 65 74 20 61 | 64 64 72 65 73 73 20 6f |to get a|ddress o|
|00004ce0| 66 20 4e 54 44 4c 4c 21 | 52 74 6c 70 47 6c 6f 62 |f NTDLL!|RtlpGlob|
|00004cf0| 61 6c 54 61 67 48 65 61 | 70 2e 0a 00 4e 54 44 4c |alTagHea|p...NTDL|
|00004d00| 4c 21 52 74 6c 70 47 6c | 6f 62 61 6c 54 61 67 48 |L!RtlpGl|obalTagH|
|00004d10| 65 61 70 00 48 45 41 50 | 45 58 54 3a 20 55 6e 61 |eap.HEAP|EXT: Una|
|00004d20| 62 6c 65 20 74 6f 20 67 | 65 74 20 61 64 64 72 65 |ble to g|et addre|
|00004d30| 73 73 20 6f 66 20 4e 54 | 44 4c 4c 21 52 74 6c 70 |ss of NT|DLL!Rtlp|
|00004d40| 48 65 61 70 49 6e 76 61 | 6c 69 64 42 61 64 41 64 |HeapInva|lidBadAd|
|00004d50| 64 72 65 73 73 2e 0a 00 | 4e 54 44 4c 4c 21 52 74 |dress...|NTDLL!Rt|
|00004d60| 6c 70 48 65 61 70 49 6e | 76 61 6c 69 64 42 61 64 |lpHeapIn|validBad|
|00004d70| 41 64 64 72 65 73 73 00 | 48 45 41 50 45 58 54 3a |Address.|HEAPEXT:|
|00004d80| 20 55 6e 61 62 6c 65 20 | 74 6f 20 67 65 74 20 61 | Unable |to get a|
|00004d90| 64 64 72 65 73 73 20 6f | 66 20 4e 54 44 4c 4c 21 |ddress o|f NTDLL!|
|00004da0| 52 74 6c 70 48 65 61 70 | 49 6e 76 61 6c 69 64 42 |RtlpHeap|InvalidB|
|00004db0| 72 65 61 6b 50 6f 69 6e | 74 2e 0a 00 4e 54 44 4c |reakPoin|t...NTDL|
|00004dc0| 4c 21 52 74 6c 70 48 65 | 61 70 49 6e 76 61 6c 69 |L!RtlpHe|apInvali|
|00004dd0| 64 42 72 65 61 6b 50 6f | 69 6e 74 00 48 45 41 50 |dBreakPo|int.HEAP|
|00004de0| 45 58 54 3a 20 55 6e 61 | 62 6c 65 20 74 6f 20 67 |EXT: Una|ble to g|
|00004df0| 65 74 20 61 64 64 72 65 | 73 73 20 6f 66 20 4e 54 |et addre|ss of NT|
|00004e00| 44 4c 4c 21 4e 74 47 6c | 6f 62 61 6c 46 6c 61 67 |DLL!NtGl|obalFlag|
|00004e10| 2e 0a 00 00 4e 54 44 4c | 4c 21 4e 74 47 6c 6f 62 |....NTDL|L!NtGlob|
|00004e20| 61 6c 46 6c 61 67 00 00 | 2d 70 00 00 4f 00 62 00 |alFlag..|-p..O.b.|
|00004e30| 6a 00 65 00 63 00 74 00 | 73 00 00 00 56 00 69 00 |j.e.c.t.|s...V.i.|
|00004e40| 72 00 74 00 75 00 61 00 | 6c 00 41 00 6c 00 6c 00 |r.t.u.a.|l.A.l.l.|
|00004e50| 6f 00 63 00 00 00 00 00 | 4f 00 62 00 6a 00 65 00 |o.c.....|O.b.j.e.|
|00004e60| 63 00 74 00 73 00 3d 00 | 25 00 34 00 75 00 00 00 |c.t.s.=.|%.4.u...|
|00004e70| 4f 00 62 00 6a 00 65 00 | 63 00 74 00 73 00 3e 00 |O.b.j.e.|c.t.s.>.|
|00004e80| 25 00 34 00 75 00 00 00 | 20 20 20 20 55 6e 61 62 |%.4.u...| Unab|
|00004e90| 6c 65 64 20 74 6f 20 72 | 65 61 64 20 48 45 41 50 |led to r|ead HEAP|
|00004ea0| 5f 45 4e 54 52 59 20 73 | 74 72 75 63 74 75 72 65 |_ENTRY s|tructure|
|00004eb0| 20 61 74 20 25 30 38 78 | 0a 00 00 00 20 20 20 20 | at %08x|.... |
|00004ec0| 20 20 20 20 25 30 38 78 | 3a 20 25 30 35 78 20 2e | %08x|: %05x .|
|00004ed0| 20 25 30 35 78 20 5b 25 | 30 32 78 5d 20 2d 20 66 | %05x [%|02x] - f|
|00004ee0| 72 65 65 0a 00 00 00 00 | 20 20 20 20 46 72 65 65 |ree.....| Free|
|00004ef0| 4c 69 73 74 5b 20 25 30 | 32 78 20 5d 20 61 74 20 |List[ %0|2x ] at |
|00004f00| 25 30 38 78 3a 20 25 30 | 38 78 20 2e 20 25 30 38 |%08x: %0|8x . %08|
|00004f10| 78 0a 00 00 25 20 38 78 | 20 20 20 20 25 20 38 78 |x...% 8x| % 8x|
|00004f20| 20 20 20 20 20 20 25 20 | 38 78 20 20 25 20 38 78 | % |8x % 8x|
|00004f30| 0d 00 00 00 43 6f 6d 6d | 69 74 74 65 64 20 20 20 |....Comm|itted |
|00004f40| 41 6c 6c 6f 63 61 74 65 | 64 20 20 20 20 20 46 72 |Allocate|d Fr|
|00004f50| 65 65 20 20 20 20 20 20 | 4f 76 65 72 48 65 61 64 |ee |OverHead|
|00004f60| 0a 00 00 00 20 20 20 20 | 46 72 65 65 4c 69 73 74 |.... |FreeList|
|00004f70| 20 55 73 61 67 65 3a 20 | 20 20 20 20 20 25 30 38 | Usage: | %08|
|00004f80| 78 20 25 30 38 78 20 25 | 30 38 78 20 25 30 38 78 |x %08x %|08x %08x|
|00004f90| 0a 00 00 00 20 20 20 20 | 55 6e 61 62 6c 65 64 20 |.... |Unabled |
|00004fa0| 74 6f 20 72 65 61 64 20 | 48 45 41 50 5f 55 43 52 |to read |HEAP_UCR|
|00004fb0| 5f 53 45 47 4d 45 4e 54 | 20 73 74 72 75 63 74 75 |_SEGMENT| structu|
|00004fc0| 72 65 20 61 74 20 25 30 | 38 78 0a 00 20 20 20 20 |re at %0|8x.. |
|00004fd0| 55 43 52 53 65 67 6d 65 | 6e 74 20 2d 20 25 30 38 |UCRSegme|nt - %08|
|00004fe0| 78 3a 20 25 30 38 78 20 | 2e 20 25 30 38 78 0a 00 |x: %08x |. %08x..|
|00004ff0| 20 20 20 20 55 43 52 20 | 46 72 65 65 4c 69 73 74 | UCR |FreeList|
|00005000| 3a 20 20 20 20 20 20 20 | 20 25 70 0a 00 00 00 00 |: | %p.....|
|00005010| 20 20 20 20 20 20 20 20 | 2a 2a 2a 2a 20 4c 69 73 | |**** Lis|
|00005020| 74 20 69 73 20 68 6f 73 | 65 64 0a 00 20 20 20 20 |t is hos|ed.. |
|00005030| 55 6e 61 62 6c 65 20 74 | 6f 20 72 65 61 64 20 5f |Unable t|o read _|
|00005040| 48 45 41 50 5f 56 49 52 | 54 55 41 4c 5f 41 4c 4c |HEAP_VIR|TUAL_ALL|
|00005050| 4f 43 5f 45 4e 54 52 59 | 20 73 74 72 75 63 74 75 |OC_ENTRY| structu|
|00005060| 72 65 20 61 74 20 25 70 | 0a 00 00 00 2c 20 75 73 |re at %p|...., us|
|00005070| 65 72 20 66 6c 61 67 73 | 20 28 25 78 29 00 00 00 |er flags| (%x)...|
|00005080| 20 28 54 61 67 20 25 78 | 29 00 00 00 20 28 25 77 | (Tag %x|)... (%w|
|00005090| 73 29 00 00 20 28 48 61 | 6e 64 6c 65 20 25 30 38 |s).. (Ha|ndle %08|
|000050a0| 78 29 00 00 2c 20 74 61 | 69 6c 20 66 69 6c 6c 00 |x).., ta|il fill.|
|000050b0| 20 20 20 20 20 20 20 20 | 25 30 38 78 3a 20 25 30 | |%08x: %0|
|000050c0| 38 78 20 5b 25 30 32 78 | 5d 20 2d 20 62 75 73 79 |8x [%02x|] - busy|
|000050d0| 20 28 25 78 29 00 00 00 | 20 20 20 20 56 69 72 74 | (%x)...| Virt|
|000050e0| 75 61 6c 20 41 6c 6c 6f | 63 20 4c 69 73 74 3a 20 |ual Allo|c List: |
|000050f0| 20 25 30 38 78 0a 00 00 | 20 20 20 20 50 73 75 65 | %08x...| Psue|
|00005100| 64 6f 54 61 67 20 45 6e | 74 72 69 65 73 3a 20 20 |doTag En|tries: |
|00005110| 20 25 30 38 78 0a 00 00 | 20 20 20 20 54 61 67 20 | %08x...| Tag |
|00005120| 45 6e 74 72 69 65 73 3a | 20 20 20 20 20 20 20 20 |Entries:| |
|00005130| 20 25 30 38 78 0a 00 00 | 20 20 20 20 4d 61 78 69 | %08x...| Maxi|
|00005140| 6d 75 6d 20 54 61 67 49 | 6e 64 65 78 3a 20 20 20 |mum TagI|ndex: |
|00005150| 20 25 30 34 78 0a 00 00 | 20 20 20 20 4e 65 78 74 | %04x...| Next|
|00005160| 20 54 61 67 49 6e 64 65 | 78 3a 20 20 20 20 20 20 | TagInde|x: |
|00005170| 20 25 30 34 78 0a 00 00 | 20 20 20 20 4c 6f 63 6b | %04x...| Lock|
|00005180| 20 56 61 72 69 61 62 6c | 65 20 61 74 3a 20 20 20 | Variabl|e at: |
|00005190| 20 25 30 38 78 0a 00 00 | 20 20 20 20 4d 61 78 2e | %08x...| Max.|
|000051a0| 20 41 6c 6c 6f 63 61 74 | 69 6f 6e 20 53 69 7a 65 | Allocat|ion Size|
|000051b0| 3a 25 30 38 78 0a 00 00 | 20 20 20 20 54 6f 74 61 |:%08x...| Tota|
|000051c0| 6c 20 46 72 65 65 20 53 | 69 7a 65 3a 20 20 20 20 |l Free S|ize: |
|000051d0| 20 25 30 38 78 0a 00 00 | 20 20 20 20 44 65 43 6f | %08x...| DeCo|
|000051e0| 6d 6d 69 74 20 54 6f 74 | 61 6c 20 54 68 72 65 73 |mmit Tot|al Thres|
|000051f0| 3a 25 30 38 78 0a 00 00 | 20 20 20 20 44 65 43 6f |:%08x...| DeCo|
|00005200| 6d 6d 69 74 20 42 6c 6f | 63 6b 20 54 68 72 65 73 |mmit Blo|ck Thres|
|00005210| 3a 25 30 38 78 0a 00 00 | 20 20 20 20 53 65 67 6d |:%08x...| Segm|
|00005220| 65 6e 74 20 43 6f 6d 6d | 69 74 3a 20 20 20 20 20 |ent Comm|it: |
|00005230| 20 25 30 38 78 0a 00 00 | 20 20 20 20 53 65 67 6d | %08x...| Segm|
|00005240| 65 6e 74 20 52 65 73 65 | 72 76 65 3a 20 20 20 20 |ent Rese|rve: |
|00005250| 20 25 30 38 78 0a 00 00 | 20 20 20 20 47 72 61 6e | %08x...| Gran|
|00005260| 75 6c 61 72 69 74 79 3a | 20 20 20 20 20 20 20 20 |ularity:| |
|00005270| 20 25 75 20 62 79 74 65 | 73 0a 00 00 20 20 20 20 | %u byte|s... |
|00005280| 46 6f 72 63 65 46 6c 61 | 67 73 3a 20 20 20 20 20 |ForceFla|gs: |
|00005290| 20 20 20 20 20 25 30 38 | 78 0a 00 00 20 20 20 20 | %08|x... |
|000052a0| 46 6c 61 67 73 3a 20 20 | 20 20 20 20 20 20 20 20 |Flags: | |
|000052b0| 20 20 20 20 20 25 30 38 | 78 0a 00 00 20 20 20 20 | %08|x... |
|000052c0| 20 20 20 20 20 20 20 20 | 75 6e 61 62 6c 65 20 74 | |unable t|
|000052d0| 6f 20 72 65 61 64 20 68 | 65 61 70 20 65 6e 74 72 |o read h|eap entr|
|000052e0| 79 20 61 74 20 25 30 38 | 78 0a 00 00 20 20 20 20 |y at %08|x... |
|000052f0| 20 20 20 20 25 70 3a 20 | 20 20 20 20 20 25 30 38 | %p: | %08|
|00005300| 78 20 20 20 20 20 20 2d | 20 75 6e 63 6f 6d 6d 69 |x -| uncommi|
|00005310| 74 74 65 64 20 62 79 74 | 65 73 2e 0a 00 00 00 00 |tted byt|es......|
|00005320| 20 20 20 20 48 65 61 70 | 20 65 6e 74 72 69 65 73 | Heap| entries|
|00005330| 20 66 6f 72 20 53 65 67 | 6d 65 6e 74 25 30 32 75 | for Seg|ment%02u|
|00005340| 20 69 6e 20 48 65 61 70 | 20 25 78 0a 00 00 00 00 | in Heap| %x.....|
|00005350| 20 20 20 20 20 20 20 20 | 20 20 20 20 75 6e 61 62 | | unab|
|00005360| 6c 65 20 74 6f 20 72 65 | 61 64 20 75 6e 63 6f 6d |le to re|ad uncom|
|00005370| 6d 69 74 65 64 20 72 61 | 6e 67 65 20 73 74 72 75 |mited ra|nge stru|
|00005380| 63 74 75 72 65 20 61 74 | 20 25 78 0a 00 00 00 00 |cture at| %x.....|
|00005390| 20 20 20 20 20 20 20 20 | 20 20 20 20 25 30 38 78 | | %08x|
|000053a0| 3a 20 25 30 38 78 0a 00 | 20 20 20 20 20 20 20 20 |: %08x..| |
|000053b0| 20 20 20 20 75 6e 61 62 | 6c 65 20 74 6f 20 61 6c | unab|le to al|
|000053c0| 6c 6f 63 61 74 65 20 6d | 65 6d 6f 72 79 20 66 6f |locate m|emory fo|
|000053d0| 72 20 72 65 61 64 69 6e | 67 20 75 6e 63 6f 6d 6d |r readin|g uncomm|
|000053e0| 69 74 74 65 64 20 72 61 | 6e 67 65 73 0a 00 00 00 |itted ra|nges....|
|000053f0| 20 20 20 20 20 20 20 20 | 55 6e 43 6f 6d 6d 69 74 | |UnCommit|
|00005400| 74 65 64 20 52 61 6e 67 | 65 73 3a 20 28 25 75 29 |ted Rang|es: (%u)|
|00005410| 0a 00 00 00 20 20 20 20 | 20 20 20 20 4c 61 72 67 |.... | Larg|
|00005420| 65 73 74 20 55 6e 43 6f | 6d 6d 69 74 3a 25 30 38 |est UnCo|mmit:%08|
|00005430| 78 0a 00 00 20 20 20 20 | 20 20 20 20 54 6f 74 61 |x... | Tota|
|00005440| 6c 20 55 6e 43 6f 6d 6d | 69 74 3a 20 20 25 30 38 |l UnComm|it: %08|
|00005450| 78 0a 00 00 20 20 20 20 | 20 20 20 20 54 6f 74 61 |x... | Tota|
|00005460| 6c 20 50 61 67 65 73 3a | 20 20 20 20 20 25 30 38 |l Pages:| %08|
|00005470| 78 0a 00 00 20 20 20 20 | 20 20 20 20 4c 61 73 74 |x... | Last|
|00005480| 20 45 6e 74 72 79 3a 20 | 20 20 20 20 20 25 30 38 | Entry: | %08|
|00005490| 78 0a 00 00 20 20 20 20 | 20 20 20 20 46 69 72 73 |x... | Firs|
|000054a0| 74 20 45 6e 74 72 79 3a | 20 20 20 20 20 25 30 38 |t Entry:| %08|
|000054b0| 78 0a 00 00 20 20 20 20 | 20 20 20 20 42 61 73 65 |x... | Base|
|000054c0| 3a 20 20 20 20 20 20 20 | 20 20 20 20 20 25 30 38 |: | %08|
|000054d0| 78 0a 00 00 20 20 20 20 | 20 20 20 20 46 6c 61 67 |x... | Flag|
|000054e0| 73 3a 20 20 20 20 20 20 | 20 20 20 20 20 25 30 38 |s: | %08|
|000054f0| 78 0a 00 00 20 20 20 20 | 53 65 67 6d 65 6e 74 25 |x... |Segment%|
|00005500| 30 32 75 20 61 74 20 25 | 30 38 78 3a 0a 00 00 00 |02u at %|08x:....|
|00005510| 48 45 41 50 45 58 54 3a | 20 55 6e 61 62 6c 65 20 |HEAPEXT:| Unable |
|00005520| 74 6f 20 61 6c 6c 6f 63 | 61 74 65 20 6d 65 6d 6f |to alloc|ate memo|
|00005530| 72 79 20 66 6f 72 20 68 | 65 61 70 20 68 65 61 64 |ry for h|eap head|
|00005540| 65 72 2e 0a 00 00 00 00 | 48 45 41 50 45 58 54 3a |er......|HEAPEXT:|
|00005550| 20 55 6e 61 62 6c 65 20 | 74 6f 20 61 6c 6c 6f 63 | Unable |to alloc|
|00005560| 61 74 65 20 6d 65 6d 6f | 72 79 20 66 6f 72 20 68 |ate memo|ry for h|
|00005570| 65 61 70 20 68 65 61 64 | 65 72 20 63 6f 70 79 2e |eap head|er copy.|
|00005580| 0a 00 00 00 48 45 41 50 | 45 58 54 3a 20 55 6e 61 |....HEAP|EXT: Una|
|00005590| 62 6c 65 20 74 6f 20 72 | 65 61 64 20 68 65 61 70 |ble to r|ead heap|
|000055a0| 20 68 65 61 64 65 72 73 | 2e 0a 00 00 48 45 41 50 | headers|....HEAP|
|000055b0| 45 58 54 3a 20 55 6e 61 | 62 6c 65 20 74 6f 20 72 |EXT: Una|ble to r|
|000055c0| 65 61 64 20 63 6f 70 79 | 20 6f 66 20 68 65 61 70 |ead copy| of heap|
|000055d0| 20 68 65 61 64 65 72 73 | 2e 0a 00 00 20 20 20 20 | headers|.... |
|000055e0| 54 68 69 73 20 69 73 20 | 6c 6f 63 61 74 65 64 20 |This is |located |
|000055f0| 69 6e 20 74 68 65 20 25 | 73 20 66 69 65 6c 64 20 |in the %|s field |
|00005600| 6f 66 20 74 68 65 20 68 | 65 61 70 20 68 65 61 64 |of the h|eap head|
|00005610| 65 72 2e 0a 00 00 00 00 | 48 45 41 50 45 58 54 3a |er......|HEAPEXT:|
|00005620| 20 48 65 61 70 20 25 70 | 20 2d 20 68 65 61 64 65 | Heap %p| - heade|
|00005630| 72 73 20 6d 6f 64 69 66 | 69 65 64 20 28 25 70 20 |rs modif|ied (%p |
|00005640| 69 73 20 25 78 20 69 6e | 73 74 65 61 64 20 6f 66 |is %x in|stead of|
|00005650| 20 25 78 29 0a 00 00 00 | 48 65 61 70 20 61 74 20 | %x)....|Heap at |
|00005660| 25 70 20 63 6f 6e 74 61 | 69 6e 73 20 69 6e 76 61 |%p conta|ins inva|
|00005670| 6c 69 64 20 73 69 67 6e | 61 74 75 72 65 2e 0a 00 |lid sign|ature...|
|00005680| 20 20 20 20 55 6e 61 62 | 6c 65 20 74 6f 20 70 6f | Unab|le to po|
|00005690| 72 74 69 6f 6e 20 6f 66 | 20 66 72 65 65 20 68 65 |rtion of| free he|
|000056a0| 61 70 20 62 6c 6f 63 6b | 20 61 74 20 25 70 0a 00 |ap block| at %p..|
|000056b0| 20 20 20 20 46 72 65 65 | 20 48 65 61 70 20 62 6c | Free| Heap bl|
|000056c0| 6f 63 6b 20 25 70 20 6d | 6f 64 69 66 69 65 64 20 |ock %p m|odified |
|000056d0| 61 74 20 25 70 20 61 66 | 74 65 72 20 69 74 20 77 |at %p af|ter it w|
|000056e0| 61 73 20 66 72 65 65 64 | 0a 00 00 00 20 20 20 20 |as freed|.... |
|000056f0| 55 6e 61 62 6c 65 20 74 | 6f 20 72 65 61 64 20 74 |Unable t|o read t|
|00005700| 61 69 6c 20 6f 66 20 68 | 65 61 70 20 62 6c 6f 63 |ail of h|eap bloc|
|00005710| 6b 20 61 74 20 25 70 0a | 00 00 00 00 20 20 20 20 |k at %p.|.... |
|00005720| 48 65 61 70 20 62 6c 6f | 63 6b 20 61 74 20 25 70 |Heap blo|ck at %p|
|00005730| 20 6d 6f 64 69 66 69 65 | 64 20 61 74 20 25 78 20 | modifie|d at %x |
|00005740| 70 61 73 74 20 72 65 71 | 75 65 73 74 65 64 20 73 |past req|uested s|
|00005750| 69 7a 65 20 6f 66 20 25 | 78 20 28 25 78 20 2a 20 |ize of %|x (%x * |
|00005760| 38 20 2d 20 25 78 29 0a | 00 00 00 00 20 20 20 20 |8 - %x).|.... |
|00005770| 50 72 65 76 69 6f 75 73 | 53 69 7a 65 20 66 69 65 |Previous|Size fie|
|00005780| 6c 64 20 64 6f 65 73 20 | 6e 6f 74 20 6d 61 74 63 |ld does |not matc|
|00005790| 68 20 73 69 7a 65 20 69 | 6e 20 70 72 65 76 69 6f |h size i|n previo|
|000057a0| 75 73 20 65 6e 74 72 79 | 0a 00 00 00 20 20 20 20 |us entry|.... |
|000057b0| 50 72 65 76 69 6f 75 73 | 53 69 7a 65 20 66 69 65 |Previous|Size fie|
|000057c0| 6c 64 20 69 73 20 6e 6f | 6e 2d 7a 65 72 6f 20 77 |ld is no|n-zero w|
|000057d0| 68 65 6e 20 69 74 20 73 | 68 6f 75 6c 64 20 62 65 |hen it s|hould be|
|000057e0| 20 7a 65 72 6f 20 74 6f | 20 6d 61 72 6b 20 66 69 | zero to| mark fi|
|000057f0| 72 73 74 20 65 6e 74 72 | 79 0a 00 00 20 28 54 61 |rst entr|y... (Ta|
|00005800| 67 20 25 78 20 61 74 20 | 25 70 29 00 20 2d 20 75 |g %x at |%p). - u|
|00005810| 6e 61 62 6c 65 20 74 6f | 20 72 65 61 64 20 68 65 |nable to| read he|
|00005820| 61 70 20 66 72 65 65 20 | 65 78 74 72 61 20 61 74 |ap free |extra at|
|00005830| 20 25 70 00 20 66 72 65 | 65 20 66 69 6c 6c 00 00 | %p. fre|e fill..|
|00005840| 20 2d 20 75 6e 61 62 6c | 65 20 74 6f 20 72 65 61 | - unabl|e to rea|
|00005850| 64 20 68 65 61 70 20 65 | 6e 74 72 79 20 65 78 74 |d heap e|ntry ext|
|00005860| 72 61 20 61 74 20 25 70 | 00 00 00 00 20 2d 20 62 |ra at %p|.... - b|
|00005870| 75 73 79 20 28 25 78 29 | 00 00 00 00 20 20 20 20 |usy (%x)|.... |
|00005880| 20 20 20 20 25 70 3a 20 | 25 30 35 78 20 2e 20 25 | %p: |%05x . %|
|00005890| 30 35 78 20 5b 25 30 32 | 78 5d 00 00 2b 30 78 25 |05x [%02|x]..+0x%|
|000058a0| 70 00 00 00 20 20 20 20 | 20 20 20 20 20 20 20 20 |p... | |
|000058b0| 20 20 20 20 25 30 38 78 | 3a 20 25 73 00 00 00 00 | %08x|: %s....|
|000058c0| 20 20 20 20 20 20 20 20 | 20 20 20 20 53 74 61 63 | | Stac|
|000058d0| 6b 20 74 72 61 63 65 20 | 28 25 75 29 20 61 74 20 |k trace |(%u) at |
|000058e0| 25 78 3a 0a 00 00 00 00 | 20 20 20 20 75 6e 61 62 |%x:.....| unab|
|000058f0| 6c 65 20 74 6f 20 72 65 | 61 64 20 73 74 61 63 6b |le to re|ad stack|
|00005900| 20 62 61 63 6b 20 74 72 | 61 63 65 20 65 6e 74 72 | back tr|ace entr|
|00005910| 79 20 61 74 20 25 70 0a | 00 00 00 00 20 20 20 20 |y at %p.|.... |
|00005920| 75 6e 61 62 6c 65 20 74 | 6f 20 72 65 61 64 20 73 |unable t|o read s|
|00005930| 74 61 63 6b 20 62 61 63 | 6b 20 74 72 61 63 65 20 |tack bac|k trace |
|00005940| 69 6e 64 65 78 20 28 25 | 78 29 20 65 6e 74 72 79 |index (%|x) entry|
|00005950| 20 61 74 20 25 70 0a 00 | 42 6f 67 75 73 20 68 61 | at %p..|Bogus ha|
|00005960| 73 68 20 6c 69 6e 6b 20 | 61 74 20 25 78 0a 00 00 |sh link |at %x...|
|00005970| 25 68 78 28 25 32 64 29 | 20 3d 20 25 6c 73 20 28 |%hx(%2d)| = %ls (|
|00005980| 25 64 29 25 73 0a 00 00 | 20 70 69 6e 6e 65 64 00 |%d)%s...| pinned.|
|00005990| 20 20 20 20 20 20 20 20 | 20 20 00 00 42 75 63 6b | | ..Buck|
|000059a0| 65 74 20 25 32 64 3a 00 | 61 74 20 25 78 0a 00 00 |et %2d:.|at %x...|
|000059b0| 69 73 20 6e 6f 74 20 69 | 6e 69 74 69 61 6c 69 7a |is not i|nitializ|
|000059c0| 65 64 2e 0a 00 00 00 00 | ff ff ff ff 0d e2 b1 69 |ed......|.......i|
|000059d0| 11 e2 b1 69 ff ff ff ff | 07 e2 b1 69 0b e2 b1 69 |...i....|...i...i|
|000059e0| ff ff ff ff ed e1 b1 69 | f1 e1 b1 69 ff ff ff ff |.......i|...i....|
|000059f0| e7 e1 b1 69 eb e1 b1 69 | ff ff ff ff e1 e1 b1 69 |...i...i|.......i|
|00005a00| e5 e1 b1 69 0a 4c 6f 63 | 61 6c 20 61 74 6f 6d 20 |...i.Loc|al atom |
|00005a10| 74 61 62 6c 65 20 00 00 | ff ff ff ff a8 e2 b1 69 |table ..|.......i|
|00005a20| ac e2 b1 69 25 68 78 20 | 2a 2a 2a 20 71 75 65 72 |...i%hx |*** quer|
|00005a30| 79 20 66 61 69 6c 65 64 | 20 28 25 78 29 0a 00 00 |y failed| (%x)...|
|00005a40| 20 2d 20 63 61 6e 74 20 | 67 65 74 20 69 6e 66 6f | - cant |get info|
|00005a50| 72 6d 61 74 69 6f 6e 20 | 61 62 6f 75 74 20 25 78 |rmation |about %x|
|00005a60| 20 61 74 6f 6d 73 20 2d | 20 25 78 0a 00 00 00 00 | atoms -| %x.....|
|00005a70| 20 2d 20 63 61 6e 74 20 | 61 6c 6c 6f 63 61 74 65 | - cant |allocate|
|00005a80| 20 6d 65 6d 6f 72 79 20 | 66 6f 72 20 25 75 20 61 | memory |for %u a|
|00005a90| 74 6f 6d 73 0a 00 00 00 | 20 2d 20 63 61 6e 74 20 |toms....| - cant |
|00005aa0| 67 65 74 20 69 6e 66 6f | 72 6d 61 74 69 6f 6e 20 |get info|rmation |
|00005ab0| 2d 20 25 78 0a 00 00 00 | 0a 47 6c 6f 62 61 6c 20 |- %x....|.Global |
|00005ac0| 61 74 6f 6d 20 74 61 62 | 6c 65 20 00 53 79 73 74 |atom tab|le .Syst|
|00005ad0| 65 6d 52 6f 6f 74 3a 20 | 27 25 77 73 27 0a 00 00 |emRoot: |'%ws'...|
|00005ae0| 43 72 79 70 74 6f 20 45 | 78 70 6f 6e 65 6e 74 3a |Crypto E|xponent:|
|00005af0| 20 25 78 0a 00 00 00 00 | 49 6d 61 67 65 4e 75 6d | %x.....|ImageNum|
|00005b00| 62 65 72 20 52 61 6e 67 | 65 3a 20 5b 25 78 20 2e |ber Rang|e: [%x .|
|00005b10| 2e 20 25 78 5d 0a 00 00 | 54 69 6d 65 5a 6f 6e 65 |. %x]...|TimeZone|
|00005b20| 20 49 64 3a 20 25 78 0a | 00 00 00 00 54 69 63 6b | Id: %x.|....Tick|
|00005b30| 43 6f 75 6e 74 3a 20 20 | 20 20 25 78 20 2a 20 25 |Count: | %x * %|
|00005b40| 30 38 78 0a 00 00 00 00 | 4b 55 53 45 52 5f 53 48 |08x.....|KUSER_SH|
|00005b50| 41 52 45 44 5f 44 41 54 | 41 20 61 74 20 25 78 0a |ARED_DAT|A at %x.|
|00005b60| 00 00 00 00 00 00 00 00 | ff ff ff ff 27 e5 b1 69 |........|....'..i|
|00005b70| 2b e5 b1 69 00 00 00 00 | 21 e5 b1 69 25 e5 b1 69 |+..i....|!..i%..i|
|00005b80| 20 20 20 20 55 6e 61 62 | 6c 65 20 74 6f 20 71 75 | Unab|le to qu|
|00005b90| 65 72 79 20 70 72 6f 63 | 65 73 73 20 50 45 42 20 |ery proc|ess PEB |
|00005ba0| 61 64 64 72 65 73 73 20 | 28 25 78 29 0a 00 00 00 |address |(%x)....|
|00005bb0| 20 20 20 20 55 6e 61 62 | 6c 65 20 74 6f 20 71 75 | Unab|le to qu|
|00005bc0| 65 72 79 20 74 68 72 65 | 61 64 20 54 45 42 20 61 |ery thre|ad TEB a|
|00005bd0| 64 64 72 65 73 73 20 28 | 25 78 29 0a 00 00 00 00 |ddress (|%x).....|
|00005be0| 2a 00 2a 00 2a 00 20 00 | 75 00 6e 00 61 00 62 00 |*.*.*. .|u.n.a.b.|
|00005bf0| 6c 00 65 00 20 00 74 00 | 6f 00 20 00 72 00 65 00 |l.e. .t.|o. .r.e.|
|00005c00| 61 00 64 00 20 00 73 00 | 74 00 72 00 69 00 6e 00 |a.d. .s.|t.r.i.n.|
|00005c10| 67 00 00 00 20 20 20 20 | 2a 2a 2a 20 75 6e 61 62 |g... |*** unab|
|00005c20| 6c 65 20 74 6f 20 72 65 | 61 64 20 70 72 6f 63 65 |le to re|ad proce|
|00005c30| 73 73 20 70 61 72 61 6d | 65 74 65 72 73 0a 00 00 |ss param|eters...|
|00005c40| 20 20 20 20 20 20 20 20 | 45 6e 76 69 72 6f 6e 6d | |Environm|
|00005c50| 65 6e 74 3a 20 20 30 78 | 25 78 0a 00 20 20 20 20 |ent: 0x|%x.. |
|00005c60| 20 20 20 20 44 6c 6c 50 | 61 74 68 3a 20 20 20 20 | DllP|ath: |
|00005c70| 20 20 27 25 77 5a 27 0a | 00 00 00 00 20 20 20 20 | '%wZ'.|.... |
|00005c80| 20 20 20 20 43 6f 6d 6d | 61 6e 64 4c 69 6e 65 3a | Comm|andLine:|
|00005c90| 20 20 27 25 77 5a 27 0a | 00 00 00 00 20 20 20 20 | '%wZ'.|.... |
|00005ca0| 20 20 20 20 49 6d 61 67 | 65 46 69 6c 65 3a 20 20 | Imag|eFile: |
|00005cb0| 20 20 27 25 77 5a 27 0a | 00 00 00 00 20 20 20 20 | '%wZ'.|.... |
|00005cc0| 20 20 20 20 57 69 6e 64 | 6f 77 54 69 74 6c 65 3a | Wind|owTitle:|
|00005cd0| 20 20 27 25 77 5a 27 0a | 00 00 00 00 20 20 20 20 | '%wZ'.|.... |
|00005ce0| 50 72 6f 63 65 73 73 50 | 61 72 61 6d 65 74 65 72 |ProcessP|arameter|
|00005cf0| 73 3a 20 25 78 0a 00 00 | 20 20 20 20 50 72 6f 63 |s: %x...| Proc|
|00005d00| 65 73 73 48 65 61 70 3a | 20 20 20 20 20 20 20 25 |essHeap:| %|
|00005d10| 78 0a 00 00 20 20 20 20 | 53 75 62 53 79 73 74 65 |x... |SubSyste|
|00005d20| 6d 44 61 74 61 3a 20 20 | 20 20 20 25 78 0a 00 00 |mData: | %x...|
|00005d30| 20 20 20 20 2a 2a 2a 20 | 75 6e 61 62 6c 65 20 74 | *** |unable t|
|00005d40| 6f 20 72 65 61 64 20 4c | 64 72 20 74 61 62 6c 65 |o read L|dr table|
|00005d50| 20 61 74 20 25 70 0a 00 | 20 20 20 20 20 20 20 20 | at %p..| |
|00005d60| 2a 2a 2a 20 75 6e 61 62 | 6c 65 20 74 6f 20 72 65 |*** unab|le to re|
|00005d70| 61 64 20 4c 44 52 20 65 | 6e 74 72 79 20 61 74 20 |ad LDR e|ntry at |
|00005d80| 25 70 0a 00 20 20 20 20 | 20 20 20 20 25 70 20 25 |%p.. | %p %|
|00005d90| 77 5a 0a 00 2a 00 2a 00 | 2a 00 20 00 75 00 6e 00 |wZ..*.*.|*. .u.n.|
|00005da0| 61 00 62 00 6c 00 65 00 | 20 00 74 00 6f 00 20 00 |a.b.l.e.| .t.o. .|
|00005db0| 72 00 65 00 61 00 64 00 | 20 00 6e 00 61 00 6d 00 |r.e.a.d.| .n.a.m.|
|00005dc0| 65 00 20 00 2a 00 2a 00 | 2a 00 00 00 20 20 20 20 |e. .*.*.|*... |
|00005dd0| 4c 64 72 2e 49 6e 4d 65 | 6d 6f 72 79 4f 72 64 65 |Ldr.InMe|moryOrde|
|00005de0| 72 4d 6f 64 75 6c 65 4c | 69 73 74 3a 20 25 78 20 |rModuleL|ist: %x |
|00005df0| 2e 20 25 78 0a 00 00 00 | 20 20 20 20 4c 64 72 2e |. %x....| Ldr.|
|00005e00| 49 6e 4c 6f 61 64 4f 72 | 64 65 72 4d 6f 64 75 6c |InLoadOr|derModul|
|00005e10| 65 4c 69 73 74 3a 20 25 | 78 20 2e 20 25 78 0a 00 |eList: %|x . %x..|
|00005e20| 20 20 20 20 4c 64 72 2e | 49 6e 49 6e 69 74 69 61 | Ldr.|InInitia|
|00005e30| 6c 69 7a 61 74 69 6f 6e | 4f 72 64 65 72 4d 6f 64 |lization|OrderMod|
|00005e40| 75 6c 65 4c 69 73 74 3a | 20 25 78 20 2e 20 25 78 |uleList:| %x . %x|
|00005e50| 0a 00 00 00 20 20 20 20 | 4c 64 72 2e 49 6e 69 74 |.... |Ldr.Init|
|00005e60| 69 61 6c 69 7a 65 64 3a | 20 25 73 0a 00 00 00 00 |ialized:| %s.....|
|00005e70| 20 20 20 20 49 6d 61 67 | 65 42 61 73 65 41 64 64 | Imag|eBaseAdd|
|00005e80| 72 65 73 73 3a 20 20 20 | 20 20 20 20 20 20 25 70 |ress: | %p|
|00005e90| 0a 00 00 00 20 20 20 20 | 42 65 69 6e 67 44 65 62 |.... |BeingDeb|
|00005ea0| 75 67 67 65 64 3a 20 20 | 20 20 20 20 20 20 20 20 |ugged: | |
|00005eb0| 20 20 25 73 0a 00 00 00 | 20 20 20 20 52 65 61 64 | %s....| Read|
|00005ec0| 49 6d 61 67 65 46 69 6c | 65 45 78 65 63 4f 70 74 |ImageFil|eExecOpt|
|00005ed0| 69 6f 6e 73 3a 20 25 73 | 0a 00 00 00 20 20 20 20 |ions: %s|.... |
|00005ee0| 49 6e 68 65 72 69 74 65 | 64 41 64 64 72 65 73 73 |Inherite|dAddress|
|00005ef0| 53 70 61 63 65 3a 20 20 | 20 20 25 73 0a 00 00 00 |Space: | %s....|
|00005f00| 4e 6f 00 00 59 65 73 00 | 20 20 20 20 2a 2a 2a 20 |No..Yes.| *** |
|00005f10| 75 6e 61 62 6c 65 20 74 | 6f 20 72 65 61 64 20 50 |unable t|o read P|
|00005f20| 45 42 0a 00 50 45 42 20 | 61 74 20 25 70 0a 00 00 |EB..PEB |at %p...|
|00005f30| 20 20 20 20 48 61 72 64 | 45 72 72 6f 72 73 4d 6f | Hard|ErrorsMo|
|00005f40| 64 65 3a 20 20 20 25 75 | 0a 00 00 00 20 20 20 20 |de: %u|.... |
|00005f50| 43 6f 75 6e 74 20 4f 77 | 6e 65 64 20 4c 6f 63 6b |Count Ow|ned Lock|
|00005f60| 73 3a 25 75 0a 00 00 00 | 20 20 20 20 4c 61 73 74 |s:%u....| Last|
|00005f70| 53 74 61 74 75 73 56 61 | 6c 75 65 3a 20 20 25 78 |StatusVa|lue: %x|
|00005f80| 0a 00 00 00 20 20 20 20 | 4c 61 73 74 45 72 72 6f |.... |LastErro|
|00005f90| 72 56 61 6c 75 65 3a 20 | 20 20 25 75 0a 00 00 00 |rValue: | %u....|
|00005fa0| 20 20 20 20 50 45 42 20 | 41 64 64 72 65 73 73 3a | PEB |Address:|
|00005fb0| 20 20 20 20 20 20 25 78 | 0a 00 00 00 20 20 20 20 | %x|.... |
|00005fc0| 54 6c 73 20 53 74 6f 72 | 61 67 65 3a 20 20 20 20 |Tls Stor|age: |
|00005fd0| 20 20 25 78 0a 00 00 00 | 20 20 20 20 52 70 63 48 | %x....| RpcH|
|00005fe0| 61 6e 64 6c 65 3a 20 20 | 20 20 20 20 20 20 25 78 |andle: | %x|
|00005ff0| 0a 00 00 00 20 20 20 20 | 52 65 61 6c 20 43 6c 69 |.... |Real Cli|
|00006000| 65 6e 74 49 64 3a 20 20 | 20 20 25 78 2e 25 78 0a |entId: | %x.%x.|
|00006010| 00 00 00 00 20 20 20 20 | 43 6c 69 65 6e 74 49 64 |.... |ClientId|
|00006020| 3a 20 20 20 20 20 20 20 | 20 20 25 78 2e 25 78 0a |: | %x.%x.|
|00006030| 00 00 00 00 20 20 20 20 | 45 6e 76 69 72 6f 6e 6d |.... |Environm|
|00006040| 65 6e 74 50 74 72 3a 20 | 20 20 25 78 0a 00 00 00 |entPtr: | %x....|
|00006050| 20 20 20 20 53 65 6c 66 | 3a 20 20 20 20 20 20 20 | Self|: |
|00006060| 20 20 20 20 20 20 25 78 | 0a 00 00 00 20 20 20 20 | %x|.... |
|00006070| 41 72 62 69 74 72 61 72 | 79 55 73 65 72 3a 20 20 |Arbitrar|yUser: |
|00006080| 20 20 25 78 0a 00 00 00 | 20 20 20 20 46 69 62 65 | %x....| Fibe|
|00006090| 72 44 61 74 61 3a 20 20 | 20 20 20 20 20 20 25 78 |rData: | %x|
|000060a0| 0a 00 00 00 20 20 20 20 | 53 75 62 53 79 73 74 65 |.... |SubSyste|
|000060b0| 6d 54 69 62 3a 20 20 20 | 20 20 25 78 0a 00 00 00 |mTib: | %x....|
|000060c0| 20 20 20 20 53 74 61 63 | 6b 20 4c 69 6d 69 74 3a | Stac|k Limit:|
|000060d0| 20 20 20 20 20 20 25 78 | 0a 00 00 00 20 20 20 20 | %x|.... |
|000060e0| 53 74 61 63 6b 20 42 61 | 73 65 3a 20 20 20 20 20 |Stack Ba|se: |
|000060f0| 20 20 25 78 0a 00 00 00 | 20 20 20 20 45 78 63 65 | %x....| Exce|
|00006100| 70 74 69 6f 6e 4c 69 73 | 74 3a 20 20 20 20 25 78 |ptionLis|t: %x|
|00006110| 0a 00 00 00 20 20 20 20 | 2a 2a 2a 20 75 6e 61 62 |.... |*** unab|
|00006120| 6c 65 20 74 6f 20 72 65 | 61 64 20 54 45 42 0a 00 |le to re|ad TEB..|
|00006130| 54 45 42 20 61 74 20 25 | 70 0a 00 00 44 75 6d 70 |TEB at %|p...Dump|
|00006140| 73 20 68 65 61 64 65 72 | 73 20 66 72 6f 6d 20 61 |s header|s from a|
|00006150| 6e 20 69 6d 61 67 65 20 | 62 61 73 65 64 20 61 74 |n image |based at|
|00006160| 20 61 64 64 72 65 73 73 | 2e 0a 00 00 55 73 61 67 | address|....Usag|
|00006170| 65 3a 20 64 68 20 5b 6f | 70 74 69 6f 6e 73 5d 20 |e: dh [o|ptions] |
|00006180| 61 64 64 72 65 73 73 0a | 00 00 00 00 4e 6f 20 66 |address.|....No f|
|00006190| 69 6c 65 20 68 65 61 64 | 65 72 2e 0a 00 00 00 00 |ile head|er......|
|000061a0| 0a 2a 2a 2a 0a 2a 2a 2a | 20 53 6f 6d 65 20 73 65 |.***.***| Some se|
|000061b0| 63 74 69 6f 6e 20 68 65 | 61 64 65 72 73 20 6d 61 |ction he|aders ma|
|000061c0| 79 20 62 65 20 6d 69 73 | 73 69 6e 67 20 2a 2a 2a |y be mis|sing ***|
|000061d0| 0a 2a 2a 2a 0a 0a 00 00 | 43 61 6e 27 74 20 72 65 |.***....|Can't re|
|000061e0| 61 64 20 73 65 63 74 69 | 6f 6e 20 68 65 61 64 65 |ad secti|on heade|
|000061f0| 72 73 2e 0a 00 00 00 00 | 42 61 64 20 66 69 6c 65 |rs......|Bad file|
|00006200| 20 68 65 61 64 65 72 2e | 0a 00 00 00 43 61 6e 27 | header.|....Can'|
|00006210| 74 20 72 65 61 64 20 6f | 70 74 69 6f 6e 61 6c 20 |t read o|ptional |
|00006220| 68 65 61 64 65 72 3a 20 | 65 72 72 6f 72 20 3d 3d |header: |error ==|
|00006230| 20 25 64 0a 00 00 00 00 | 43 61 6e 27 74 20 72 65 | %d.....|Can't re|
|00006240| 61 64 20 66 69 6c 65 20 | 68 65 61 64 65 72 3a 20 |ad file |header: |
|00006250| 65 72 72 6f 72 20 3d 3d | 20 25 64 0a 00 00 00 00 |error ==| %d.....|
|00006260| ff ff ff ff 00 00 00 00 | e2 ef b1 69 25 38 6c 58 |........|...i%8lX|
|00006270| 20 5b 25 38 6c 58 5d 20 | 61 64 64 72 65 73 73 20 | [%8lX] |address |
|00006280| 5b 73 69 7a 65 5d 20 6f | 66 20 25 73 20 44 69 72 |[size] o|f %s Dir|
|00006290| 65 63 74 6f 72 79 0a 00 | 20 20 20 20 20 20 20 20 |ectory..| |
|000062a0| 20 2d 2d 2d 2d 2d 20 6e | 65 77 20 2d 2d 2d 2d 2d | ----- n|ew -----|
|000062b0| 0a 25 70 20 69 6d 61 67 | 65 20 62 61 73 65 0a 25 |.%p imag|e base.%|
|000062c0| 38 6c 58 20 73 65 63 74 | 69 6f 6e 20 61 6c 69 67 |8lX sect|ion alig|
|000062d0| 6e 6d 65 6e 74 0a 25 38 | 6c 58 20 66 69 6c 65 20 |nment.%8|lX file |
|000062e0| 61 6c 69 67 6e 6d 65 6e | 74 0a 25 38 68 58 20 73 |alignmen|t.%8hX s|
|000062f0| 75 62 73 79 73 74 65 6d | 20 28 25 73 29 0a 25 38 |ubsystem| (%s).%8|
|00006300| 73 20 6f 70 65 72 61 74 | 69 6e 67 20 73 79 73 74 |s operat|ing syst|
|00006310| 65 6d 20 76 65 72 73 69 | 6f 6e 0a 25 38 73 20 69 |em versi|on.%8s i|
|00006320| 6d 61 67 65 20 76 65 72 | 73 69 6f 6e 0a 25 38 73 |mage ver|sion.%8s|
|00006330| 20 73 75 62 73 79 73 74 | 65 6d 20 76 65 72 73 69 | subsyst|em versi|
|00006340| 6f 6e 0a 25 38 6c 58 20 | 73 69 7a 65 20 6f 66 20 |on.%8lX |size of |
|00006350| 69 6d 61 67 65 0a 25 38 | 6c 58 20 73 69 7a 65 20 |image.%8|lX size |
|00006360| 6f 66 20 68 65 61 64 65 | 72 73 0a 25 38 6c 58 20 |of heade|rs.%8lX |
|00006370| 63 68 65 63 6b 73 75 6d | 0a 25 70 20 73 69 7a 65 |checksum|.%p size|
|00006380| 20 6f 66 20 73 74 61 63 | 6b 20 72 65 73 65 72 76 | of stac|k reserv|
|00006390| 65 0a 25 70 20 73 69 7a | 65 20 6f 66 20 73 74 61 |e.%p siz|e of sta|
|000063a0| 63 6b 20 63 6f 6d 6d 69 | 74 0a 25 70 20 73 69 7a |ck commi|t.%p siz|
|000063b0| 65 20 6f 66 20 68 65 61 | 70 20 72 65 73 65 72 76 |e of hea|p reserv|
|000063c0| 65 0a 25 70 20 73 69 7a | 65 20 6f 66 20 68 65 61 |e.%p siz|e of hea|
|000063d0| 70 20 63 6f 6d 6d 69 74 | 0a 00 00 00 25 68 75 2e |p commit|....%hu.|
|000063e0| 25 30 32 68 75 00 00 00 | 20 20 20 20 20 20 20 20 |%02hu...| |
|000063f0| 20 2d 2d 2d 2d 2d 20 72 | 6f 6d 20 2d 2d 2d 2d 2d | ----- r|om -----|
+--------+-------------------------+-------------------------+--------+--------+
Only 25.0 KB of data is shown above.