PC World 2002 December (Special)

home *** CD-ROM | disk | FTP | other *** search
/ PC World 2002 December (Special) / PCWorld_2002-12_Special_cd.bin / Software / Ostatni / win2ksp3cs / W2Ksp3.exe / i386 / ntsdexts.dll < prev next >
Microsoft Windows Dynamic Link Library | 2000-08-08 | 83.8 KB
open in:
MacOS 8.1 extracted |
Win98 extracted |
DOS extracted
view JSON data |
view as text

This file was processed as: Microsoft Windows Dynamic Link Library (executable/dll).

You can browse this item here: ntsdexts.dll
Confidence	Program	Detection	Match Type	Support
`100%`	dexvert	Microsoft Windows Dynamic Link Library `(executable/dll)`	magic	Supported
`100%`	dexvert	MS-DOS/Windows or OS/2 Executable `(executable/exe)`	magic	Supported
`1%`	dexvert	OS/2 Dynamic Link Library `(other/os2DLL)`	ext	Unsupported
`100%`	file	PE32 executable for MS Windows 4.00 (DLL), Intel i386 (stripped to external PDB), 4 sections	default
`99%`	file	data	default
`37%`	TrID	Win32 Executable MS Visual C++ (generic)	default
`20%`	TrID	Microsoft Visual C++ compiled executable (generic)	default
`12%`	TrID	Win64 Executable (generic)	default
`7%`	TrID	Win32 Dynamic Link Library (generic)	default
`6%`	TrID	Win16 NE executable (generic)	default
`100%`	siegfried	fmt/899 Windows Portable Executable (32 bit)	default
`100%`	gt2	Ist eine ausf�hrbare Win32 Datei	default
`100%`	binwalkID	Microsoft executable, portable (PE)	default
`100%`	xdgMime	application/vnd.microsoft.portable-executable	default (weak)
hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 d8 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 1f 9b 82 95 5b fa ec c6 | 5b fa ec c6 5b fa ec c6 |....[...|[...[...|
|00000090| 5b fa ed c6 60 fa ec c6 | 31 e6 ee c6 4c fa ec c6 |[...`...|1...L...|
|000000a0| 02 d9 ff c6 5c fa ec c6 | 0d f2 ea c6 5a fa ec c6 |....\...|....Z...|
|000000b0| 5b fa ec c6 58 fa ec c6 | 52 69 63 68 5b fa ec c6 |[...X...|Rich[...|
|000000c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000d0| 00 00 00 00 00 00 00 00 | 50 45 00 00 4c 01 04 00 |........|PE..L...|
|000000e0| 38 22 66 3d 00 00 00 00 | 00 00 00 00 e0 00 0e 23 |8"f=....|.......#|
|000000f0| 0b 01 05 0c 00 22 01 00 | 00 36 00 00 00 00 00 00 |....."..|.6......|
|00000100| 00 00 00 00 00 10 00 00 | 00 40 01 00 00 00 9c 69 |........|.@.....i|
|00000110| 00 10 00 00 00 02 00 00 | 05 00 00 00 05 00 00 00 |........|........|
|00000120| 04 00 00 00 00 00 00 00 | 00 90 01 00 00 06 00 00 |........|........|
|00000130| c6 8e 01 00 03 00 00 00 | 00 00 04 00 00 10 00 00 |........|........|
|00000140| 00 00 10 00 00 10 00 00 | 00 00 00 00 10 00 00 00 |........|........|
|00000150| b0 2e 01 00 cd 01 00 00 | 90 27 01 00 64 00 00 00 |........|.'..d...|
|00000160| 00 60 01 00 d8 03 00 00 | 00 00 00 00 00 00 00 00 |.`......|........|
|00000170| 00 00 00 00 00 00 00 00 | 00 70 01 00 2c 16 00 00 |........|.p..,...|
|00000180| 50 11 00 00 1c 00 00 00 | 00 00 00 00 00 00 00 00 |P.......|........|
|00000190| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001a0| 00 00 00 00 00 00 00 00 | 70 02 00 00 60 00 00 00 |........|p...`...|
|000001b0| 00 10 00 00 44 01 00 00 | 00 00 00 00 00 00 00 00 |....D...|........|
|000001c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001d0| 2e 74 65 78 74 00 00 00 | 7d 20 01 00 00 10 00 00 |.text...|} ......|
|000001e0| 00 22 01 00 00 06 00 00 | 00 00 00 00 00 00 00 00 |."......|........|
|000001f0| 00 00 00 00 20 00 00 60 | 2e 64 61 74 61 00 00 00 |.... ..`|.data...|
|00000200| 9c 17 00 00 00 40 01 00 | 00 08 00 00 00 28 01 00 |.....@..|.....(..|
|00000210| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 c0 |........|....@...|
|00000220| 2e 72 73 72 63 00 00 00 | d8 03 00 00 00 60 01 00 |.rsrc...|.....`..|
|00000230| 00 04 00 00 00 30 01 00 | 00 00 00 00 00 00 00 00 |.....0..|........|
|00000240| 00 00 00 00 40 00 00 40 | 2e 72 65 6c 6f 63 00 00 |....@..@|.reloc..|
|00000250| 80 18 00 00 00 70 01 00 | 00 1a 00 00 00 34 01 00 |.....p..|.....4..|
|00000260| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 42 |........|....@..B|
|00000270| 38 65 aa 3b 30 00 00 00 | 20 22 66 3d 3b 00 00 00 |8e.;0...| "f=;...|
|00000280| 20 22 66 3d 45 00 01 00 | 20 22 66 3d 3b 00 00 00 | "f=E...| "f=;...|
|00000290| 20 22 66 3d 52 00 00 00 | 00 00 00 00 00 00 00 00 | "f=R...|........|
|000002a0| 4d 53 56 43 52 54 2e 64 | 6c 6c 00 6e 74 64 6c 6c |MSVCRT.d|ll.ntdll|
|000002b0| 2e 64 6c 6c 00 4b 45 52 | 4e 45 4c 33 32 2e 64 6c |.dll.KER|NEL32.dl|
|000002c0| 6c 00 41 44 56 41 50 49 | 33 32 2e 64 6c 6c 00 00 |l.ADVAPI|32.dll..|
|000002d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000300| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000310| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000320| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000350| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000360| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000410| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000420| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000430| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000440| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000450| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000460| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000470| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000480| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000490| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000510| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000520| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000530| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000550| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000005f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000600| a4 6f db 77 fc 63 db 77 | c3 5f db 77 48 cf db 77 |.o.w.c.w|._.wH..w|
|00000610| 42 82 db 77 9a c0 db 77 | d6 91 db 77 00 00 00 00 |B..w...w|...w....|
|00000620| c7 97 e9 77 b5 c0 e8 77 | 3d 1b e9 77 64 9f e8 77 |...w...w|=..wd..w|
|00000630| 93 7d e8 77 33 13 ea 77 | 30 a8 e8 77 3b 73 e8 77 |.}.w3..w|0..w;s.w|
|00000640| 84 76 e8 77 91 b6 fc 77 | cc 89 eb 77 b0 72 e8 77 |.v.w...w|...w.r.w|
|00000650| 85 bf e8 77 a5 78 e8 77 | 18 e8 e8 77 10 bd e8 77 |...w.x.w|...w...w|
|00000660| 18 9b e8 77 68 a6 e8 77 | d7 76 e8 77 af 76 e8 77 |...wh..w|.v.w.v.w|
|00000670| b3 7c e8 77 78 b1 fc 77 | d9 d5 e8 77 00 00 00 00 |.|.wx..w|...w....|
|00000680| 29 30 01 78 aa 4a 01 78 | bc 30 01 78 89 30 00 78 |)0.x.J.x|.0.x.0.x|
|00000690| 96 57 02 78 a5 1e 00 78 | 6f 2f 00 78 61 69 01 78 |.W.x...x|o/.xai.x|
|000006a0| b8 ff 00 78 5b 4b 01 78 | 6d 2f 01 78 72 16 00 78 |...x[K.x|m/.xr..x|
|000006b0| 5d 6d 01 78 a8 14 00 78 | 54 59 00 78 51 a5 02 78 |]m.x...x|TY.xQ..x|
|000006c0| 19 30 00 78 c9 11 00 78 | 75 31 00 78 44 57 02 78 |.0.x...x|u1.xDW.x|
|000006d0| 00 00 00 00 c8 51 f8 77 | ba 51 f8 77 e0 a4 f8 77 |.....Q.w|.Q.w...w|
|000006e0| d6 51 f8 77 87 f2 fa 77 | d5 78 f8 77 06 4d f8 77 |.Q.w...w|.x.w.M.w|
|000006f0| cd 6d f8 77 46 03 f9 77 | 6c a3 f9 77 96 a3 f9 77 |.m.wF..w|l..w...w|
|00000700| 12 73 f8 77 cf f3 f8 77 | 5c 4f f8 77 72 3b f8 77 |.s.w...w|\O.wr;.w|
|00000710| b5 fb f8 77 63 37 f8 77 | 91 b6 fc 77 78 b1 fc 77 |...wc7.w|...wx..w|
|00000720| 6d 3c f8 77 35 33 f9 77 | 24 6d f9 77 5d 64 f8 77 |m<.w53.w|$m.w]d.w|
|00000730| 3f 3b f8 77 e1 3d f8 77 | c3 37 f8 77 c3 54 f9 77 |?;.w.=.w|.7.w.T.w|
|00000740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000750| 00 00 00 00 d7 75 cc 3b | 00 00 00 00 04 00 00 00 |.....u.;|........|
|00000760| 10 01 00 00 00 00 00 00 | 00 4e 01 00 00 00 00 00 |........|.N......|
|00000770| d7 75 cc 3b 00 00 00 00 | 03 00 00 00 60 06 00 00 |.u.;....|....`...|
|00000780| 00 00 00 00 10 4f 01 00 | 00 00 00 00 d7 75 cc 3b |.....O..|.....u.;|
|00000790| 00 00 00 00 06 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000007a0| 70 55 01 00 00 00 00 00 | d7 75 cc 3b 00 00 00 00 |pU......|.u.;....|
|000007b0| 02 00 00 00 1d 00 00 00 | 00 00 00 00 90 fe a2 ff |........|........|
|000007c0| 44 69 73 61 62 6c 65 20 | 70 72 6f 74 65 63 74 65 |Disable |protecte|
|000007d0| 64 20 44 4c 4c 20 76 65 | 72 69 66 69 63 61 74 69 |d DLL ve|rificati|
|000007e0| 6f 6e 00 00 64 70 64 00 | 44 69 73 61 62 6c 65 20 |on..dpd.|Disable |
|000007f0| 6b 65 72 6e 65 6c 20 6d | 6f 64 65 20 44 62 67 50 |kernel m|ode DbgP|
|00000800| 72 69 6e 74 20 6f 75 74 | 70 75 74 00 64 64 70 00 |rint out|put.ddp.|
|00000810| 44 65 62 75 67 20 57 49 | 4e 4c 4f 47 4f 4e 00 00 |Debug WI|NLOGON..|
|00000820| 64 77 6c 00 50 6c 61 63 | 65 20 68 65 61 70 20 61 |dwl.Plac|e heap a|
|00000830| 6c 6c 6f 63 61 74 69 6f | 6e 73 20 61 74 20 65 6e |llocatio|ns at en|
|00000840| 64 73 20 6f 66 20 70 61 | 67 65 73 00 68 70 61 00 |ds of pa|ges.hpa.|
|00000850| 45 6e 61 62 6c 65 20 4f | 62 6a 65 63 74 20 48 61 |Enable O|bject Ha|
|00000860| 6e 64 6c 65 20 54 79 70 | 65 20 54 61 67 67 69 6e |ndle Typ|e Taggin|
|00000870| 67 00 00 00 65 6f 74 00 | 45 6e 61 62 6c 65 20 45 |g...eot.|Enable E|
|00000880| 78 63 65 70 74 69 6f 6e | 20 4c 6f 67 67 69 6e 67 |xception| Logging|
|00000890| 00 00 00 00 65 65 6c 00 | 45 6e 61 62 6c 65 20 43 |....eel.|Enable C|
|000008a0| 6c 6f 73 65 20 45 78 63 | 65 70 74 69 6f 6e 00 00 |lose Exc|eption..|
|000008b0| 65 63 65 00 44 69 73 61 | 62 6c 65 20 48 65 61 70 |ece.Disa|ble Heap|
|000008c0| 20 43 6f 61 6c 65 73 63 | 65 20 6f 6e 20 46 72 65 | Coalesc|e on Fre|
|000008d0| 65 00 00 00 64 68 63 00 | 45 6e 61 62 6c 65 20 48 |e...dhc.|Enable H|
|000008e0| 65 61 70 20 41 50 49 20 | 43 61 6c 6c 20 54 72 61 |eap API |Call Tra|
|000008f0| 63 69 6e 67 00 00 00 00 | 68 61 74 00 44 69 73 61 |cing....|hat.Disa|
|00000900| 62 6c 65 20 70 61 67 69 | 6e 67 20 6f 66 20 6b 65 |ble pagi|ng of ke|
|00000910| 72 6e 65 6c 20 73 74 61 | 63 6b 73 00 64 70 73 00 |rnel sta|cks.dps.|
|00000920| 45 6e 61 62 6c 65 20 6c | 6f 61 64 69 6e 67 20 6f |Enable l|oading o|
|00000930| 66 20 6b 65 72 6e 65 6c | 20 64 65 62 75 67 67 65 |f kernel| debugge|
|00000940| 72 20 73 79 6d 62 6f 6c | 73 00 00 00 6b 73 6c 00 |r symbol|s...ksl.|
|00000950| 45 6e 61 62 6c 65 20 64 | 65 62 75 67 67 69 6e 67 |Enable d|ebugging|
|00000960| 20 6f 66 20 57 69 6e 33 | 32 20 53 75 62 73 79 73 | of Win3|2 Subsys|
|00000970| 74 65 6d 00 64 33 32 00 | 75 6e 75 73 65 64 00 00 |tem.d32.|unused..|
|00000980| 69 64 70 00 45 6e 61 62 | 6c 65 20 48 65 61 70 20 |idp.Enab|le Heap |
|00000990| 54 61 67 67 69 6e 67 20 | 42 79 20 44 4c 4c 00 00 |Tagging |By DLL..|
|000009a0| 68 74 64 00 4d 61 69 6e | 74 61 69 6e 20 61 20 6c |htd.Main|tain a l|
|000009b0| 69 73 74 20 6f 66 20 6f | 62 6a 65 63 74 73 20 66 |ist of o|bjects f|
|000009c0| 6f 72 20 65 61 63 68 20 | 74 79 70 65 00 00 00 00 |or each |type....|
|000009d0| 6f 74 6c 00 43 72 65 61 | 74 65 20 6b 65 72 6e 65 |otl.Crea|te kerne|
|000009e0| 6c 20 6d 6f 64 65 20 73 | 74 61 63 6b 20 74 72 61 |l mode s|tack tra|
|000009f0| 63 65 20 44 42 00 00 00 | 6b 73 74 00 43 72 65 61 |ce DB...|kst.Crea|
|00000a00| 74 65 20 75 73 65 72 20 | 6d 6f 64 65 20 73 74 61 |te user |mode sta|
|00000a10| 63 6b 20 74 72 61 63 65 | 20 44 42 00 75 73 74 00 |ck trace| DB.ust.|
|00000a20| 45 6e 61 62 6c 65 20 68 | 65 61 70 20 74 61 67 67 |Enable h|eap tagg|
|00000a30| 69 6e 67 00 68 74 67 00 | 45 6e 61 62 6c 65 20 70 |ing.htg.|Enable p|
|00000a40| 6f 6f 6c 20 74 61 67 67 | 69 6e 67 00 70 74 67 00 |ool tagg|ing.ptg.|
|00000a50| 45 6e 61 62 6c 65 20 70 | 6f 6f 6c 20 66 72 65 65 |Enable p|ool free|
|00000a60| 20 63 68 65 63 6b 69 6e | 67 00 00 00 70 66 63 00 | checkin|g...pfc.|
|00000a70| 45 6e 61 62 6c 65 20 70 | 6f 6f 6c 20 74 61 69 6c |Enable p|ool tail|
|00000a80| 20 63 68 65 63 6b 69 6e | 67 00 00 00 70 74 63 00 | checkin|g...ptc.|
|00000a90| 45 6e 61 62 6c 65 20 68 | 65 61 70 20 76 61 6c 69 |Enable h|eap vali|
|00000aa0| 64 61 74 69 6f 6e 20 6f | 6e 20 63 61 6c 6c 00 00 |dation o|n call..|
|00000ab0| 68 76 63 00 45 6e 61 62 | 6c 65 20 68 65 61 70 20 |hvc.Enab|le heap |
|00000ac0| 70 61 72 61 6d 65 74 65 | 72 20 63 68 65 63 6b 69 |paramete|r checki|
|00000ad0| 6e 67 00 00 68 70 63 00 | 45 6e 61 62 6c 65 20 68 |ng..hpc.|Enable h|
|00000ae0| 65 61 70 20 66 72 65 65 | 20 63 68 65 63 6b 69 6e |eap free| checkin|
|00000af0| 67 00 00 00 68 66 63 00 | 45 6e 61 62 6c 65 20 68 |g...hfc.|Enable h|
|00000b00| 65 61 70 20 74 61 69 6c | 20 63 68 65 63 6b 69 6e |eap tail| checkin|
|00000b10| 67 00 00 00 68 74 63 00 | 53 74 6f 70 20 6f 6e 20 |g...htc.|Stop on |
|00000b20| 48 75 6e 67 20 47 55 49 | 00 00 00 00 73 68 67 00 |Hung GUI|....shg.|
|00000b30| 44 65 62 75 67 20 49 6e | 69 74 69 61 6c 20 43 6f |Debug In|itial Co|
|00000b40| 6d 6d 61 6e 64 00 00 00 | 64 69 63 00 53 68 6f 77 |mmand...|dic.Show|
|00000b50| 20 4c 6f 61 64 65 72 20 | 53 6e 61 70 73 00 00 00 | Loader |Snaps...|
|00000b60| 73 6c 73 00 53 74 6f 70 | 20 4f 6e 20 45 78 63 65 |sls.Stop| On Exce|
|00000b70| 70 74 69 6f 6e 00 00 00 | 73 6f 65 00 57 00 61 00 |ption...|soe.W.a.|
|00000b80| 69 00 74 00 61 00 62 00 | 6c 00 65 00 50 00 6f 00 |i.t.a.b.|l.e.P.o.|
|00000b90| 72 00 74 00 00 00 00 00 | 4a 00 6f 00 62 00 00 00 |r.t.....|J.o.b...|
|00000ba0| 54 00 69 00 6d 00 65 00 | 72 00 00 00 43 00 68 00 |T.i.m.e.|r...C.h.|
|00000bb0| 61 00 6e 00 6e 00 65 00 | 6c 00 00 00 49 00 6f 00 |a.n.n.e.|l...I.o.|
|00000bc0| 43 00 6f 00 6d 00 70 00 | 6c 00 65 00 74 00 69 00 |C.o.m.p.|l.e.t.i.|
|00000bd0| 6f 00 6e 00 00 00 00 00 | 44 00 65 00 73 00 6b 00 |o.n.....|D.e.s.k.|
|00000be0| 74 00 6f 00 70 00 00 00 | 50 00 72 00 6f 00 63 00 |t.o.p...|P.r.o.c.|
|00000bf0| 65 00 73 00 73 00 00 00 | 4b 00 65 00 79 00 00 00 |e.s.s...|K.e.y...|
|00000c00| 53 00 65 00 6d 00 61 00 | 70 00 68 00 6f 00 72 00 |S.e.m.a.|p.h.o.r.|
|00000c10| 65 00 00 00 57 00 69 00 | 6e 00 64 00 6f 00 77 00 |e...W.i.|n.d.o.w.|
|00000c20| 53 00 74 00 61 00 74 00 | 69 00 6f 00 6e 00 00 00 |S.t.a.t.|i.o.n...|
|00000c30| 4d 00 75 00 74 00 61 00 | 6e 00 74 00 00 00 00 00 |M.u.t.a.|n.t.....|
|00000c40| 53 00 79 00 6d 00 62 00 | 6f 00 6c 00 69 00 63 00 |S.y.m.b.|o.l.i.c.|
|00000c50| 4c 00 69 00 6e 00 6b 00 | 00 00 00 00 44 00 69 00 |L.i.n.k.|....D.i.|
|00000c60| 72 00 65 00 63 00 74 00 | 6f 00 72 00 79 00 00 00 |r.e.c.t.|o.r.y...|
|00000c70| 50 00 6f 00 72 00 74 00 | 00 00 00 00 46 00 69 00 |P.o.r.t.|....F.i.|
|00000c80| 6c 00 65 00 00 00 00 00 | 53 00 65 00 63 00 74 00 |l.e.....|S.e.c.t.|
|00000c90| 69 00 6f 00 6e 00 00 00 | 45 00 76 00 65 00 6e 00 |i.o.n...|E.v.e.n.|
|00000ca0| 74 00 00 00 4e 00 6f 00 | 6e 00 65 00 00 00 00 00 |t...N.o.|n.e.....|
|00000cb0| 44 65 6c 65 67 61 74 69 | 6f 6e 00 00 49 6d 70 65 |Delegati|on..Impe|
|00000cc0| 72 73 6f 6e 61 74 69 6f | 6e 00 00 00 49 64 65 6e |rsonatio|n...Iden|
|00000cd0| 74 69 66 69 63 61 74 69 | 6f 6e 00 00 41 6e 6f 6e |tificati|on..Anon|
|00000ce0| 79 6d 6f 75 73 00 00 00 | 53 65 45 6e 61 62 6c 65 |ymous...|SeEnable|
|00000cf0| 44 65 6c 65 67 61 74 69 | 6f 6e 50 72 69 76 69 6c |Delegati|onPrivil|
|00000d00| 65 67 65 00 53 65 53 79 | 6e 63 41 67 65 6e 74 50 |ege.SeSy|ncAgentP|
|00000d10| 72 69 76 69 6c 65 67 65 | 00 00 00 00 53 65 55 6e |rivilege|....SeUn|
|00000d20| 64 6f 63 6b 50 72 69 76 | 69 6c 65 67 65 00 00 00 |dockPriv|ilege...|
|00000d30| 53 65 52 65 6d 6f 74 65 | 53 68 75 74 64 6f 77 6e |SeRemote|Shutdown|
|00000d40| 50 72 69 76 69 6c 65 67 | 65 00 00 00 53 65 43 68 |Privileg|e...SeCh|
|00000d50| 61 6e 67 65 4e 6f 74 69 | 66 79 50 72 69 76 69 6c |angeNoti|fyPrivil|
|00000d60| 65 67 65 00 53 65 53 79 | 73 74 65 6d 45 6e 76 69 |ege.SeSy|stemEnvi|
|00000d70| 72 6f 6e 6d 65 6e 74 50 | 72 69 76 69 6c 65 67 65 |ronmentP|rivilege|
|00000d80| 00 00 00 00 53 65 41 75 | 64 69 74 50 72 69 76 69 |....SeAu|ditPrivi|
|00000d90| 6c 65 67 65 00 00 00 00 | 53 65 44 65 62 75 67 50 |lege....|SeDebugP|
|00000da0| 72 69 76 69 6c 65 67 65 | 00 00 00 00 53 65 53 68 |rivilege|....SeSh|
|00000db0| 75 74 64 6f 77 6e 50 72 | 69 76 69 6c 65 67 65 00 |utdownPr|ivilege.|
|00000dc0| 53 65 52 65 73 74 6f 72 | 65 50 72 69 76 69 6c 65 |SeRestor|ePrivile|
|00000dd0| 67 65 00 00 53 65 42 61 | 63 6b 75 70 50 72 69 76 |ge..SeBa|ckupPriv|
|00000de0| 69 6c 65 67 65 00 00 00 | 53 65 43 72 65 61 74 65 |ilege...|SeCreate|
|00000df0| 50 65 72 6d 61 6e 65 6e | 74 50 72 69 76 69 6c 65 |Permanen|tPrivile|
|00000e00| 67 65 00 00 53 65 43 72 | 65 61 74 65 50 61 67 65 |ge..SeCr|eatePage|
|00000e10| 66 69 6c 65 50 72 69 76 | 69 6c 65 67 65 00 00 00 |filePriv|ilege...|
|00000e20| 53 65 49 6e 63 72 65 61 | 73 65 42 61 73 65 50 72 |SeIncrea|seBasePr|
|00000e30| 69 6f 72 69 74 79 50 72 | 69 76 69 6c 65 67 65 00 |iorityPr|ivilege.|
|00000e40| 53 65 50 72 6f 66 69 6c | 65 53 69 6e 67 6c 65 50 |SeProfil|eSingleP|
|00000e50| 72 6f 63 65 73 73 50 72 | 69 76 69 6c 65 67 65 00 |rocessPr|ivilege.|
|00000e60| 53 65 53 79 73 74 65 6d | 50 72 6f 66 69 6c 65 50 |SeSystem|ProfileP|
|00000e70| 72 69 76 69 6c 65 67 65 | 00 00 00 00 53 65 4c 6f |rivilege|....SeLo|
|00000e80| 61 64 44 72 69 76 65 72 | 50 72 69 76 69 6c 65 67 |adDriver|Privileg|
|00000e90| 65 00 00 00 53 65 54 61 | 6b 65 4f 77 6e 65 72 73 |e...SeTa|keOwners|
|00000ea0| 68 69 70 50 72 69 76 69 | 6c 65 67 65 00 00 00 00 |hipPrivi|lege....|
|00000eb0| 53 65 53 65 63 75 72 69 | 74 79 50 72 69 76 69 6c |SeSecuri|tyPrivil|
|00000ec0| 65 67 65 00 53 65 54 63 | 62 50 72 69 76 69 6c 65 |ege.SeTc|bPrivile|
|00000ed0| 67 65 00 00 53 65 4d 61 | 63 68 69 6e 65 41 63 63 |ge..SeMa|chineAcc|
|00000ee0| 6f 75 6e 74 50 72 69 76 | 69 6c 65 67 65 00 00 00 |ountPriv|ilege...|
|00000ef0| 53 65 4c 6f 63 6b 4d 65 | 6d 6f 72 79 50 72 69 76 |SeLockMe|moryPriv|
|00000f00| 69 6c 65 67 65 00 00 00 | 53 65 41 73 73 69 67 6e |ilege...|SeAssign|
|00000f10| 50 72 69 6d 61 72 79 54 | 6f 6b 65 6e 50 72 69 76 |PrimaryT|okenPriv|
|00000f20| 69 6c 65 67 65 00 00 00 | 53 65 43 72 65 61 74 65 |ilege...|SeCreate|
|00000f30| 54 6f 6b 65 6e 50 72 69 | 76 69 6c 65 67 65 00 00 |TokenPri|vilege..|
|00000f40| 49 6e 76 61 6c 69 64 00 | 53 65 74 53 65 63 41 74 |Invalid.|SetSecAt|
|00000f50| 74 72 00 00 53 65 74 41 | 74 74 72 00 41 73 73 69 |tr..SetA|ttr.Assi|
|00000f60| 67 6e 50 72 6f 63 65 73 | 73 00 00 00 57 72 69 74 |gnProces|s...Writ|
|00000f70| 65 4d 65 73 73 61 67 65 | 00 00 00 00 52 65 61 64 |eMessage|....Read|
|00000f80| 4d 65 73 73 61 67 65 00 | 4d 6f 64 69 66 79 00 00 |Message.|Modify..|
|00000f90| 53 77 69 74 63 68 44 65 | 73 6b 74 6f 70 00 00 00 |SwitchDe|sktop...|
|00000fa0| 57 72 69 74 65 4f 62 6a | 65 63 74 73 00 00 00 00 |WriteObj|ects....|
|00000fb0| 4a 6f 75 72 6e 61 6c 50 | 6c 61 79 62 61 63 6b 00 |JournalP|layback.|
|00000fc0| 4a 6f 75 72 6e 61 6c 52 | 65 63 6f 72 64 00 00 00 |JournalR|ecord...|
|00000fd0| 48 6f 6f 6b 43 6f 6e 74 | 72 6f 6c 00 43 72 65 61 |HookCont|rol.Crea|
|00000fe0| 74 65 4d 65 6e 75 00 00 | 43 72 65 61 74 65 57 69 |teMenu..|CreateWi|
|00000ff0| 6e 64 6f 77 00 00 00 00 | 52 65 61 64 4f 62 6a 65 |ndow....|ReadObje|
|00001000| 63 74 73 00 52 65 61 64 | 53 63 72 65 65 6e 00 00 |cts.Read|Screen..|
|00001010| 45 6e 75 6d 65 72 61 74 | 65 00 00 00 45 78 69 74 |Enumerat|e...Exit|
|00001020| 57 69 6e 64 6f 77 73 00 | 47 6c 6f 62 61 6c 41 74 |Windows.|GlobalAt|
|00001030| 6f 6d 00 00 43 72 65 61 | 74 65 44 65 73 6b 74 6f |om..Crea|teDeskto|
|00001040| 70 00 00 00 43 6c 69 70 | 62 6f 61 72 64 00 00 00 |p...Clip|board...|
|00001050| 45 6e 75 6d 44 65 73 6b | 74 6f 70 73 00 00 00 00 |EnumDesk|tops....|
|00001060| 43 72 65 61 74 65 53 75 | 62 64 69 72 00 00 00 00 |CreateSu|bdir....|
|00001070| 43 72 65 61 74 65 00 00 | 54 72 61 76 65 72 73 65 |Create..|Traverse|
|00001080| 00 00 00 00 43 6f 6e 6e | 65 63 74 00 57 72 69 74 |....Conn|ect.Writ|
|00001090| 65 41 74 74 72 00 00 00 | 52 65 61 64 41 74 74 72 |eAttr...|ReadAttr|
|000010a0| 00 00 00 00 44 65 6c 43 | 68 69 6c 64 00 00 00 00 |....DelC|hild....|
|000010b0| 45 78 65 63 75 74 65 2f | 54 72 61 76 65 72 73 65 |Execute/|Traverse|
|000010c0| 00 00 00 00 57 72 69 74 | 65 45 41 00 52 65 61 64 |....Writ|eEA.Read|
|000010d0| 45 41 00 00 41 70 70 65 | 6e 64 2f 53 75 62 44 69 |EA..Appe|nd/SubDi|
|000010e0| 72 2f 43 72 65 61 74 65 | 50 69 70 65 00 00 00 00 |r/Create|Pipe....|
|000010f0| 57 72 69 74 65 2f 41 64 | 64 00 00 00 52 65 61 64 |Write/Ad|d...Read|
|00001100| 2f 4c 69 73 74 00 00 00 | 45 78 74 65 6e 64 00 00 |/List...|Extend..|
|00001110| 4d 61 70 45 78 65 63 75 | 74 65 00 00 4d 61 70 52 |MapExecu|te..MapR|
|00001120| 65 61 64 00 4d 61 70 57 | 72 69 74 65 00 00 00 00 |ead.MapW|rite....|
|00001130| 44 69 72 65 63 74 49 6d | 70 65 72 73 6f 6e 61 74 |DirectIm|personat|
|00001140| 65 00 00 00 53 65 74 54 | 6f 6b 65 6e 00 00 00 00 |e...SetT|oken....|
|00001150| 53 65 74 43 6f 6e 74 65 | 78 74 00 00 47 65 74 43 |SetConte|xt..GetC|
|00001160| 6f 6e 74 65 78 74 00 00 | 41 6c 65 72 74 00 00 00 |ontext..|Alert...|
|00001170| 53 75 73 70 65 6e 64 00 | 53 65 74 50 6f 72 74 00 |Suspend.|SetPort.|
|00001180| 51 75 65 72 79 49 6e 66 | 6f 00 00 00 53 65 74 49 |QueryInf|o...SetI|
|00001190| 6e 66 6f 00 53 65 74 51 | 75 6f 74 61 00 00 00 00 |nfo.SetQ|uota....|
|000011a0| 43 72 65 61 74 65 50 72 | 6f 63 65 73 73 00 00 00 |CreatePr|ocess...|
|000011b0| 44 75 70 48 61 6e 64 6c | 65 00 00 00 56 4d 57 72 |DupHandl|e...VMWr|
|000011c0| 69 74 65 00 56 4d 52 65 | 61 64 00 00 56 4d 4f 70 |ite.VMRe|ad..VMOp|
|000011d0| 00 00 00 00 43 72 65 61 | 74 65 54 68 72 65 61 64 |....Crea|teThread|
|000011e0| 00 00 00 00 54 65 72 6d | 69 6e 61 74 65 00 00 00 |....Term|inate...|
|000011f0| 43 6f 6e 74 72 6f 6c 00 | 4d 6f 64 69 66 79 53 74 |Control.|ModifySt|
|00001200| 61 74 65 00 51 75 65 72 | 79 53 74 61 74 65 00 00 |ate.Quer|yState..|
|00001210| 43 72 65 61 74 65 4c 69 | 6e 6b 00 00 4e 6f 74 69 |CreateLi|nk..Noti|
|00001220| 66 79 00 00 45 6e 75 6d | 53 75 62 4b 65 79 00 00 |fy..Enum|SubKey..|
|00001230| 43 72 65 61 74 65 53 75 | 62 4b 65 79 00 00 00 00 |CreateSu|bKey....|
|00001240| 53 65 74 56 61 6c 75 65 | 00 00 00 00 51 75 65 72 |SetValue|....Quer|
|00001250| 79 56 61 6c 75 65 00 00 | 41 64 6a 75 73 74 44 65 |yValue..|AdjustDe|
|00001260| 66 00 00 00 41 64 6a 75 | 73 74 47 72 6f 75 70 00 |f...Adju|stGroup.|
|00001270| 41 64 6a 75 73 74 50 72 | 69 76 00 00 51 75 65 72 |AdjustPr|iv..Quer|
|00001280| 79 53 6f 75 72 63 65 00 | 51 75 65 72 79 00 00 00 |ySource.|Query...|
|00001290| 49 6d 70 65 72 73 6f 6e | 61 74 65 00 44 75 70 6c |Imperson|ate.Dupl|
|000012a0| 69 63 61 74 65 00 00 00 | 41 73 73 69 67 6e 50 72 |icate...|AssignPr|
|000012b0| 69 6d 61 72 79 00 00 00 | 47 65 6e 65 72 69 63 52 |imary...|GenericR|
|000012c0| 65 61 64 00 47 65 6e 65 | 72 69 63 57 72 69 74 65 |ead.Gene|ricWrite|
|000012d0| 00 00 00 00 47 65 6e 65 | 72 69 63 45 78 65 63 00 |....Gene|ricExec.|
|000012e0| 47 65 6e 65 72 69 63 41 | 6c 6c 00 00 4d 61 78 41 |GenericA|ll..MaxA|
|000012f0| 6c 6c 6f 77 65 64 00 00 | 53 61 63 6c 00 00 00 00 |llowed..|Sacl....|
|00001300| 00 00 00 00 53 79 6e 63 | 68 00 00 00 57 72 69 74 |....Sync|h...Writ|
|00001310| 65 4f 77 6e 65 72 00 00 | 57 72 69 74 65 44 61 63 |eOwner..|WriteDac|
|00001320| 00 00 00 00 52 65 61 64 | 43 6f 6e 74 72 6f 6c 00 |....Read|Control.|
|00001330| 44 65 6c 65 74 65 00 00 | 54 00 6f 00 6b 00 65 00 |Delete..|T.o.k.e.|
|00001340| 6e 00 00 00 54 00 68 00 | 72 00 65 00 61 00 64 00 |n...T.h.|r.e.a.d.|
|00001350| 00 00 00 00 00 00 00 00 | dc 1e 9c 69 d4 1e 9c 69 |........|...i...i|
|00001360| c8 1e 9c 69 bc 1e 9c 69 | b0 1e 9c 69 00 00 00 00 |...i...i|...i....|
|00001370| dc 1e 9c 69 a8 1e 9c 69 | 9c 1e 9c 69 90 1e 9c 69 |...i...i|...i...i|
|00001380| 84 1e 9c 69 00 00 00 00 | 7c 1e 9c 69 74 1e 9c 69 |...i....||..it..i|
|00001390| 68 1e 9c 69 5c 1e 9c 69 | 50 1e 9c 69 40 1e 9c 69 |h..i\..i|P..i@..i|
|000013a0| 38 1e 9c 69 2c 1e 9c 69 | 24 1e 9c 69 14 1e 9c 69 |8..i,..i|$..i...i|
|000013b0| 00 1e 9c 69 f0 1d 9c 69 | d8 1d 9c 69 cc 1d 9c 69 |...i...i|...i...i|
|000013c0| cc 1d 9c 69 cc 1d 9c 69 | 00 00 00 00 52 65 73 65 |...i...i|....Rese|
|000013d0| 72 76 65 64 00 00 00 00 | 49 6d 70 6f 72 74 20 41 |rved....|Import A|
|000013e0| 64 64 72 65 73 73 20 54 | 61 62 6c 65 00 00 00 00 |ddress T|able....|
|000013f0| 42 6f 75 6e 64 20 49 6d | 70 6f 72 74 00 00 00 00 |Bound Im|port....|
|00001400| 4c 6f 61 64 20 43 6f 6e | 66 69 67 75 72 61 74 69 |Load Con|figurati|
|00001410| 6f 6e 00 00 54 68 72 65 | 61 64 20 53 74 6f 72 61 |on..Thre|ad Stora|
|00001420| 67 65 00 00 53 70 65 63 | 69 61 6c 00 44 65 73 63 |ge..Spec|ial.Desc|
|00001430| 72 69 70 74 69 6f 6e 00 | 44 65 62 75 67 00 00 00 |ription.|Debug...|
|00001440| 42 61 73 65 20 52 65 6c | 6f 63 61 74 69 6f 6e 00 |Base Rel|ocation.|
|00001450| 53 65 63 75 72 69 74 79 | 00 00 00 00 45 78 63 65 |Security|....Exce|
|00001460| 70 74 69 6f 6e 00 00 00 | 52 65 73 6f 75 72 63 65 |ption...|Resource|
|00001470| 00 00 00 00 49 6d 70 6f | 72 74 00 00 45 78 70 6f |....Impo|rt..Expo|
|00001480| 72 74 00 00 50 6f 73 69 | 78 20 43 55 49 00 00 00 |rt..Posi|x CUI...|
|00001490| 57 69 6e 64 6f 77 73 20 | 43 55 49 00 57 69 6e 64 |Windows |CUI.Wind|
|000014a0| 6f 77 73 20 47 55 49 00 | 4e 61 74 69 76 65 00 00 |ows GUI.|Native..|
|000014b0| 49 6e 74 65 6c 20 49 41 | 36 34 00 00 41 6c 70 68 |Intel IA|64..Alph|
|000014c0| 61 20 41 58 50 36 34 00 | 41 6c 70 68 61 20 41 58 |a AXP64.|Alpha AX|
|000014d0| 50 00 00 00 69 33 38 36 | 00 00 00 00 55 6e 6b 6e |P...i386|....Unkn|
|000014e0| 6f 77 6e 00 44 4f 53 44 | 45 56 49 43 45 5f 44 52 |own.DOSD|EVICE_DR|
|000014f0| 49 56 45 5f 52 41 4d 44 | 49 53 4b 00 44 4f 53 44 |IVE_RAMD|ISK.DOSD|
|00001500| 45 56 49 43 45 5f 44 52 | 49 56 45 5f 43 44 52 4f |EVICE_DR|IVE_CDRO|
|00001510| 4d 00 00 00 44 4f 53 44 | 45 56 49 43 45 5f 44 52 |M...DOSD|EVICE_DR|
|00001520| 49 56 45 5f 52 45 4d 4f | 54 45 00 00 44 4f 53 44 |IVE_REMO|TE..DOSD|
|00001530| 45 56 49 43 45 5f 44 52 | 49 56 45 5f 46 49 58 45 |EVICE_DR|IVE_FIXE|
|00001540| 44 00 00 00 44 4f 53 44 | 45 56 49 43 45 5f 44 52 |D...DOSD|EVICE_DR|
|00001550| 49 56 45 5f 52 45 4d 4f | 56 41 42 4c 45 00 00 00 |IVE_REMO|VABLE...|
|00001560| 44 4f 53 44 45 56 49 43 | 45 5f 44 52 49 56 45 5f |DOSDEVIC|E_DRIVE_|
|00001570| 43 41 4c 43 55 4c 41 54 | 45 00 00 00 44 4f 53 44 |CALCULAT|E...DOSD|
|00001580| 45 56 49 43 45 5f 44 52 | 49 56 45 5f 55 4e 4b 4e |EVICE_DR|IVE_UNKN|
|00001590| 4f 57 4e 00 55 6e 63 6f | 6d 6d 69 74 74 65 64 20 |OWN.Unco|mmitted |
|000015a0| 52 61 6e 67 65 73 00 00 | 4c 6f 63 6b 56 61 72 69 |Ranges..|LockVari|
|000015b0| 61 62 6c 65 00 00 00 00 | 46 72 65 65 4c 69 73 74 |able....|FreeList|
|000015c0| 73 00 00 00 50 73 65 75 | 64 6f 54 61 67 45 6e 74 |s...Pseu|doTagEnt|
|000015d0| 72 69 65 73 00 00 00 00 | 4e 6f 6e 44 65 64 69 63 |ries....|NonDedic|
|000015e0| 61 74 65 64 4c 69 73 74 | 4c 65 6e 67 74 68 00 00 |atedList|Length..|
|000015f0| 41 6c 6c 6f 63 61 74 6f | 72 42 61 63 6b 54 72 61 |Allocato|rBackTra|
|00001600| 63 65 49 6e 64 65 78 00 | 46 72 65 65 4c 69 73 74 |ceIndex.|FreeList|
|00001610| 73 49 6e 55 73 65 54 65 | 72 6d 69 6e 61 74 65 00 |sInUseTe|rminate.|
|00001620| 46 72 65 65 4c 69 73 74 | 73 49 6e 55 73 65 00 00 |FreeList|sInUse..|
|00001630| 53 65 67 6d 65 6e 74 73 | 00 00 00 00 56 69 72 74 |Segments|....Virt|
|00001640| 75 61 6c 41 6c 6c 6f 63 | 64 42 6c 6f 63 6b 73 00 |ualAlloc|dBlocks.|
|00001650| 41 6c 69 67 6e 4d 61 73 | 6b 00 00 00 41 6c 69 67 |AlignMas|k...Alig|
|00001660| 6e 52 6f 75 6e 64 00 00 | 55 6e 75 73 65 64 55 6e |nRound..|UnusedUn|
|00001670| 43 6f 6d 6d 69 74 74 65 | 64 52 61 6e 67 65 73 00 |Committe|dRanges.|
|00001680| 55 43 52 53 65 67 6d 65 | 6e 74 73 00 54 61 67 45 |UCRSegme|nts.TagE|
|00001690| 6e 74 72 69 65 73 00 00 | 4d 61 78 69 6d 75 6d 54 |ntries..|MaximumT|
|000016a0| 61 67 49 6e 64 65 78 00 | 4e 65 78 74 41 76 61 69 |agIndex.|NextAvai|
|000016b0| 6c 61 62 6c 65 54 61 67 | 49 6e 64 65 78 00 00 00 |lableTag|Index...|
|000016c0| 48 65 61 64 65 72 56 61 | 6c 69 64 61 74 65 43 6f |HeaderVa|lidateCo|
|000016d0| 70 79 00 00 48 65 61 64 | 65 72 56 61 6c 69 64 61 |py..Head|erValida|
|000016e0| 74 65 4c 65 6e 67 74 68 | 00 00 00 00 50 72 6f 63 |teLength|....Proc|
|000016f0| 65 73 73 48 65 61 70 73 | 4c 69 73 74 49 6e 64 65 |essHeaps|ListInde|
|00001700| 78 00 00 00 4d 61 78 69 | 6d 75 6d 41 6c 6c 6f 63 |x...Maxi|mumAlloc|
|00001710| 61 74 69 6f 6e 53 69 7a | 65 00 00 00 54 6f 74 61 |ationSiz|e...Tota|
|00001720| 6c 46 72 65 65 53 69 7a | 65 00 00 00 44 65 43 6f |lFreeSiz|e...DeCo|
|00001730| 6d 6d 69 74 54 6f 74 61 | 6c 46 72 65 65 54 68 72 |mmitTota|lFreeThr|
|00001740| 65 73 68 6f 6c 64 00 00 | 44 65 43 6f 6d 6d 69 74 |eshold..|DeCommit|
|00001750| 46 72 65 65 42 6c 6f 63 | 6b 54 68 72 65 73 68 6f |FreeBloc|kThresho|
|00001760| 6c 64 00 00 53 65 67 6d | 65 6e 74 43 6f 6d 6d 69 |ld..Segm|entCommi|
|00001770| 74 00 00 00 53 65 67 6d | 65 6e 74 52 65 73 65 72 |t...Segm|entReser|
|00001780| 76 65 00 00 56 69 72 74 | 75 61 6c 4d 65 6d 6f 72 |ve..Virt|ualMemor|
|00001790| 79 54 68 72 65 73 68 6f | 6c 64 00 00 46 6f 72 63 |yThresho|ld..Forc|
|000017a0| 65 46 6c 61 67 73 00 00 | 46 6c 61 67 73 00 00 00 |eFlags..|Flags...|
|000017b0| 53 69 67 6e 61 74 75 72 | 65 00 00 00 45 6e 74 72 |Signatur|e...Entr|
|000017c0| 79 00 00 00 40 24 74 65 | 62 00 00 00 40 24 70 65 |y...@$te|b...@$pe|
|000017d0| 62 00 00 00 20 20 20 20 | 55 6e 61 62 6c 65 20 74 |b...    |Unable t|
|000017e0| 6f 20 72 65 61 64 20 50 | 72 6f 63 65 73 73 20 50 |o read P|rocess P|
|000017f0| 45 42 0a 00 25 73 3a 20 | 28 25 73 29 20 25 23 78 |EB..%s: |(%s) %#x|
|00001800| 20 2d 20 25 73 0a 00 00 | 25 73 3a 20 28 25 73 29 | - %s...|%s: (%s)|
|00001810| 20 25 23 78 20 28 25 75 | 29 20 2d 20 25 73 0a 00 | %#x (%u|) - %s..|
|00001820| 4e 6f 20 6d 61 70 70 65 | 64 20 65 72 72 6f 72 20 |No mappe|d error |
|00001830| 63 6f 64 65 00 00 00 00 | 57 69 6e 33 32 00 00 00 |code....|Win32...|
|00001840| 4e 65 74 41 50 49 00 00 | 6e 65 74 6d 73 67 2e 64 |NetAPI..|netmsg.d|
|00001850| 6c 6c 00 00 57 69 6e 73 | 6f 63 6b 00 77 73 6f 63 |ll..Wins|ock.wsoc|
|00001860| 6b 33 32 2e 64 6c 6c 00 | 48 52 45 53 55 4c 54 00 |k32.dll.|HRESULT.|
|00001870| 4b 45 52 4e 45 4c 33 32 | 2e 44 4c 4c 00 00 00 00 |KERNEL32|.DLL....|
|00001880| 4e 54 53 54 41 54 55 53 | 00 00 00 00 4e 54 44 4c |NTSTATUS|....NTDL|
|00001890| 4c 2e 44 4c 4c 00 00 00 | 45 72 72 6f 72 20 63 6f |L.DLL...|Error co|
|000018a0| 64 65 00 00 55 6e 61 62 | 6c 65 20 74 6f 20 72 65 |de..Unab|le to re|
|000018b0| 61 64 20 63 75 72 72 65 | 6e 74 20 74 68 72 65 61 |ad curre|nt threa|
|000018c0| 64 27 73 20 54 45 42 0a | 00 00 00 00 4c 61 73 74 |d's TEB.|....Last|
|000018d0| 53 74 61 74 75 73 56 61 | 6c 75 65 00 4c 61 73 74 |StatusVa|lue.Last|
|000018e0| 45 72 72 6f 72 56 61 6c | 75 65 00 00 56 65 72 73 |ErrorVal|ue..Vers|
|000018f0| 69 6f 6e 20 25 64 2e 25 | 64 20 28 42 75 69 6c 64 |ion %d.%|d (Build|
|00001900| 20 25 64 25 73 29 20 25 | 73 0a 00 00 3a 20 25 73 | %d%s) %|s...: %s|
|00001910| 00 00 00 00 43 75 72 72 | 65 6e 74 54 79 70 65 00 |....Curr|entType.|
|00001920| 53 6f 66 74 77 61 72 65 | 5c 4d 69 63 72 6f 73 6f |Software|\Microso|
|00001930| 66 74 5c 57 69 6e 64 6f | 77 73 20 4e 54 5c 43 75 |ft\Windo|ws NT\Cu|
|00001940| 72 72 65 6e 74 56 65 72 | 73 69 6f 6e 00 00 00 00 |rrentVer|sion....|
|00001950| 47 65 74 56 65 72 73 69 | 6f 6e 45 78 20 66 61 69 |GetVersi|onEx fai|
|00001960| 6c 65 64 20 2d 20 25 75 | 0a 00 00 00 49 6e 76 61 |led - %u|....Inva|
|00001970| 6c 69 64 20 63 6f 6d 6d | 61 6e 64 2e 20 20 4e 6f |lid comm|and.  No|
|00001980| 20 68 65 6c 70 20 61 76 | 61 69 6c 61 62 6c 65 0a | help av|ailable.|
|00001990| 00 00 00 00 20 20 20 20 | 2d 61 62 62 72 65 76 20 |....    |-abbrev |
|000019a0| 2d 20 73 70 65 63 69 66 | 69 65 73 20 61 20 73 69 |- specif|ies a si|
|000019b0| 6e 67 6c 65 20 62 69 74 | 20 74 6f 20 63 6c 65 61 |ngle bit| to clea|
|000019c0| 72 20 69 6e 20 4e 74 47 | 6c 6f 62 61 6c 46 6c 61 |r in NtG|lobalFla|
|000019d0| 67 0a 00 00 20 20 20 20 | 2d 6e 75 6d 62 65 72 20 |g...    |-number |
|000019e0| 2d 20 73 70 65 63 69 66 | 69 65 73 20 6f 6e 65 20 |- specif|ies one |
|000019f0| 6f 72 20 6d 6f 72 65 20 | 62 69 74 73 20 74 6f 20 |or more |bits to |
|00001a00| 63 6c 65 61 72 20 69 6e | 20 4e 74 47 6c 6f 62 61 |clear in| NtGloba|
|00001a10| 6c 46 6c 61 67 0a 00 00 | 20 20 20 20 2b 61 62 62 |lFlag...|    +abb|
|00001a20| 72 65 76 20 2d 20 73 70 | 65 63 69 66 69 65 73 20 |rev - sp|ecifies |
|00001a30| 61 20 73 69 6e 67 6c 65 | 20 62 69 74 20 74 6f 20 |a single| bit to |
|00001a40| 73 65 74 20 69 6e 20 4e | 74 47 6c 6f 62 61 6c 46 |set in N|tGlobalF|
|00001a50| 6c 61 67 0a 00 00 00 00 | 20 20 20 20 2b 6e 75 6d |lag.....|    +num|
|00001a60| 62 65 72 20 2d 20 73 70 | 65 63 69 66 69 65 73 20 |ber - sp|ecifies |
|00001a70| 6f 6e 65 20 6f 72 20 6d | 6f 72 65 20 62 69 74 73 |one or m|ore bits|
|00001a80| 20 74 6f 20 73 65 74 20 | 69 6e 20 4e 74 47 6c 6f | to set |in NtGlo|
|00001a90| 62 61 6c 46 6c 61 67 0a | 00 00 00 00 20 20 20 20 |balFlag.|....    |
|00001aa0| 20 20 20 20 20 20 20 20 | 20 4e 74 47 6c 6f 62 61 |        | NtGloba|
|00001ab0| 6c 46 6c 61 67 0a 00 00 | 20 20 20 20 6e 75 6d 62 |lFlag...|    numb|
|00001ac0| 65 72 20 2d 20 33 32 2d | 62 69 74 20 6e 75 6d 62 |er - 32-|bit numb|
|00001ad0| 65 72 20 74 68 61 74 20 | 62 65 63 6f 6d 65 73 20 |er that |becomes |
|00001ae0| 74 68 65 20 6e 65 77 20 | 76 61 6c 75 65 20 73 74 |the new |value st|
|00001af0| 6f 72 65 64 20 69 6e 74 | 6f 0a 00 00 20 20 20 20 |ored int|o...    |
|00001b00| 2d 3f 20 2d 20 64 69 73 | 70 6c 61 79 73 20 61 20 |-? - dis|plays a |
|00001b10| 6c 69 73 74 20 6f 66 20 | 76 61 6c 69 64 20 66 6c |list of |valid fl|
|00001b20| 61 67 20 61 62 62 72 65 | 76 69 61 74 69 6f 6e 73 |ag abbre|viations|
|00001b30| 0a 00 00 00 66 6f 6c 6c | 6f 77 69 6e 67 3a 0a 00 |....foll|owing:..|
|00001b40| 4e 54 44 4c 4c 21 4e 74 | 47 6c 6f 62 61 6c 46 6c |NTDLL!Nt|GlobalFl|
|00001b50| 61 67 20 76 61 72 69 61 | 62 6c 65 2e 20 20 4f 74 |ag varia|ble.  Ot|
|00001b60| 68 65 72 77 69 73 65 20 | 76 61 6c 75 65 20 63 61 |herwise |value ca|
|00001b70| 6e 20 62 65 20 6f 6e 65 | 20 6f 66 20 74 68 65 0a |n be one| of the.|
|00001b80| 00 00 00 00 49 66 20 61 | 20 76 61 6c 75 65 20 69 |....If a| value i|
|00001b90| 73 20 6e 6f 74 20 67 69 | 76 65 6e 20 74 68 65 6e |s not gi|ven then|
|00001ba0| 20 64 69 73 70 6c 61 79 | 73 20 74 68 65 20 63 75 | display|s the cu|
|00001bb0| 72 72 65 6e 74 20 62 69 | 74 73 20 73 65 74 20 69 |rrent bi|ts set i|
|00001bc0| 6e 0a 00 00 67 66 6c 61 | 67 00 00 00 20 20 20 20 |n...gfla|g...    |
|00001bd0| 20 20 20 20 20 20 20 20 | 20 20 20 20 2d 2d 20 64 |        |    -- d|
|00001be0| 75 6d 70 73 20 65 76 65 | 72 79 74 68 69 6e 67 20 |umps eve|rything |
|00001bf0| 77 65 20 63 61 6e 20 66 | 69 6e 64 20 61 62 6f 75 |we can f|ind abou|
|00001c00| 74 20 6f 70 65 6e 20 65 | 76 65 6e 74 73 0a 00 00 |t open e|vents...|
|00001c10| 20 20 20 20 21 68 61 6e | 64 6c 65 20 30 20 66 20 |    !han|dle 0 f |
|00001c20| 45 76 65 6e 74 0a 00 00 | 20 20 20 20 21 68 61 6e |Event...|    !han|
|00001c30| 64 6c 65 20 30 20 66 20 | 2d 2d 20 64 75 6d 70 73 |dle 0 f |-- dumps|
|00001c40| 20 65 76 65 72 79 74 68 | 69 6e 67 20 77 65 20 63 | everyth|ing we c|
|00001c50| 61 6e 20 66 69 6e 64 20 | 61 62 6f 75 74 20 61 20 |an find |about a |
|00001c60| 68 61 6e 64 6c 65 2e 0a | 00 00 00 00 20 20 20 20 |handle..|....    |
|00001c70| 21 68 61 6e 64 6c 65 20 | 30 20 30 20 2d 2d 20 64 |!handle |0 0 -- d|
|00001c80| 75 6d 70 73 20 61 20 73 | 75 6d 6d 61 72 79 20 74 |umps a s|ummary t|
|00001c90| 61 62 6c 65 20 6f 66 20 | 61 6c 6c 20 74 68 65 20 |able of |all the |
|00001ca0| 6f 70 65 6e 20 68 61 6e | 64 6c 65 73 0a 00 00 00 |open han|dles....|
|00001cb0| 20 20 20 20 21 68 61 6e | 64 6c 65 20 20 20 20 20 |    !han|dle     |
|00001cc0| 2d 2d 20 64 75 6d 70 73 | 20 74 68 65 20 74 79 70 |-- dumps| the typ|
|00001cd0| 65 73 20 6f 66 20 61 6c | 6c 20 74 68 65 20 68 61 |es of al|l the ha|
|00001ce0| 6e 64 6c 65 73 2c 20 61 | 6e 64 20 61 20 73 75 6d |ndles, a|nd a sum|
|00001cf0| 6d 61 72 79 20 74 61 62 | 6c 65 0a 00 45 78 61 6d |mary tab|le..Exam|
|00001d00| 70 6c 65 73 3a 0a 00 00 | 63 6f 75 72 73 65 2e 0a |ples:...|course..|
|00001d10| 00 00 00 00 73 74 61 6e | 64 61 72 64 20 4e 54 20 |....stan|dard NT |
|00001d20| 74 79 70 65 20 6e 61 6d | 65 2c 20 65 2e 67 2e 20 |type nam|e, e.g. |
|00001d30| 45 76 65 6e 74 2c 20 53 | 65 6d 61 70 68 6f 72 65 |Event, S|emaphore|
|00001d40| 2c 20 65 74 63 2e 20 20 | 43 61 73 65 20 73 65 6e |, etc.  |Case sen|
|00001d50| 73 69 74 69 76 65 2c 20 | 6f 66 0a 00 49 66 20 54 |sitive, |of..If T|
|00001d60| 79 70 65 20 69 73 20 73 | 70 65 63 69 66 69 65 64 |ype is s|pecified|
|00001d70| 2c 20 6f 6e 6c 79 20 6f | 62 6a 65 63 74 20 6f 66 |, only o|bject of|
|00001d80| 20 74 68 61 74 20 74 79 | 70 65 20 61 72 65 20 73 | that ty|pe are s|
|00001d90| 63 61 6e 6e 65 64 2e 20 | 20 54 79 70 65 20 69 73 |canned. | Type is|
|00001da0| 20 61 0a 00 0a 00 00 00 | 20 20 20 20 38 20 20 20 | a......|    8   |
|00001db0| 2d 20 47 65 74 20 6f 62 | 6a 65 63 74 20 73 70 65 |- Get ob|ject spe|
|00001dc0| 63 69 66 69 63 20 69 6e | 66 6f 20 28 77 68 65 72 |cific in|fo (wher|
|00001dd0| 65 20 61 76 61 69 6c 61 | 62 6c 65 29 0a 00 00 00 |e availa|ble)....|
|00001de0| 20 20 20 20 34 20 20 20 | 2d 20 47 65 74 20 6e 61 |    4   |- Get na|
|00001df0| 6d 65 20 69 6e 66 6f 72 | 6d 61 74 69 6f 6e 0a 00 |me infor|mation..|
|00001e00| 20 20 20 20 32 20 20 20 | 2d 20 47 65 74 20 62 61 |    2   |- Get ba|
|00001e10| 73 69 63 20 69 6e 66 6f | 72 6d 61 74 69 6f 6e 0a |sic info|rmation.|
|00001e20| 00 00 00 00 20 20 20 20 | 31 20 20 20 2d 20 47 65 |....    |1   - Ge|
|00001e30| 74 20 74 79 70 65 20 69 | 6e 66 6f 72 6d 61 74 69 |t type i|nformati|
|00001e40| 6f 6e 20 28 64 65 66 61 | 75 6c 74 29 0a 00 00 00 |on (defa|ult)....|
|00001e50| 7a 65 72 6f 2c 20 74 68 | 61 74 20 70 61 72 74 69 |zero, th|at parti|
|00001e60| 63 75 6c 61 72 20 68 61 | 6e 64 6c 65 20 69 73 20 |cular ha|ndle is |
|00001e70| 65 78 61 6d 69 6e 65 64 | 2e 20 20 54 68 65 20 66 |examined|.  The f|
|00001e80| 6c 61 67 73 20 61 72 65 | 20 61 73 20 66 6f 6c 6c |lags are| as foll|
|00001e90| 6f 77 73 3a 0a 00 00 00 | 49 66 20 74 68 65 20 68 |ows:....|If the h|
|00001ea0| 61 6e 64 6c 65 20 69 73 | 20 30 20 6f 72 20 2d 31 |andle is| 0 or -1|
|00001eb0| 2c 20 61 6c 6c 20 68 61 | 6e 64 6c 65 73 20 61 72 |, all ha|ndles ar|
|00001ec0| 65 20 73 63 61 6e 6e 65 | 64 2e 20 20 49 66 20 74 |e scanne|d.  If t|
|00001ed0| 68 65 20 68 61 6e 64 6c | 65 20 69 73 20 6e 6f 74 |he handl|e is not|
|00001ee0| 0a 00 00 00 20 20 20 20 | 20 20 20 46 6c 61 67 73 |....    |   Flags|
|00001ef0| 20 61 72 65 20 62 69 74 | 73 20 69 6e 64 69 63 61 | are bit|s indica|
|00001f00| 74 69 6e 67 20 67 72 65 | 61 74 65 72 20 6c 65 76 |ting gre|ater lev|
|00001f10| 65 6c 73 20 6f 66 20 64 | 65 74 61 69 6c 2e 0a 00 |els of d|etail...|
|00001f20| 20 20 20 20 20 20 20 49 | 66 20 6e 6f 20 68 61 6e |       I|f no han|
|00001f30| 64 6c 65 20 73 70 65 63 | 69 66 69 65 64 2c 20 61 |dle spec|ified, a|
|00001f40| 6c 6c 20 68 61 6e 64 6c | 65 73 20 61 72 65 20 64 |ll handl|es are d|
|00001f50| 75 6d 70 65 64 2e 0a 00 | 21 68 61 6e 64 6c 65 20 |umped...|!handle |
|00001f60| 5b 68 61 6e 64 6c 65 20 | 5b 66 6c 61 67 73 20 5b |[handle |[flags [|
|00001f70| 74 79 70 65 5d 5d 5d 20 | 2d 20 44 75 6d 70 20 68 |type]]] |- Dump h|
|00001f80| 61 6e 64 6c 65 20 69 6e | 66 6f 72 6d 61 74 69 6f |andle in|formatio|
|00001f90| 6e 0a 00 00 68 61 6e 64 | 6c 65 00 00 20 20 20 20 |n...hand|le..    |
|00001fa0| 20 20 20 49 66 20 6e 6f | 20 70 61 74 74 65 72 6e |   If no| pattern|
|00001fb0| 2c 20 6c 61 73 74 20 70 | 61 74 74 65 72 6e 20 69 |, last p|attern i|
|00001fc0| 73 20 75 73 65 64 2c 20 | 69 66 20 6e 6f 20 61 64 |s used, |if no ad|
|00001fd0| 64 72 65 73 73 2c 20 6c | 61 73 74 20 68 69 74 20 |dress, l|ast hit |
|00001fe0| 69 73 20 75 73 65 64 0a | 00 00 00 00 21 69 67 72 |is used.|....!igr|
|00001ff0| 65 70 20 5b 70 61 74 74 | 65 72 6e 20 5b 61 64 64 |ep [patt|ern [add|
|00002000| 72 5d 5d 20 20 20 20 20 | 2d 20 47 72 65 70 20 66 |r]]     |- Grep f|
|00002010| 6f 72 20 64 69 73 61 73 | 73 65 6d 62 6c 65 64 20 |or disas|sembled |
|00002020| 70 61 74 74 65 72 6e 20 | 73 74 61 72 74 69 6e 67 |pattern |starting|
|00002030| 20 61 74 20 61 64 64 72 | 0a 00 00 00 69 67 72 65 | at addr|....igre|
|00002040| 70 00 00 00 21 76 70 72 | 6f 74 20 5b 61 64 64 72 |p...!vpr|ot [addr|
|00002050| 65 73 73 5d 20 20 20 20 | 20 20 20 20 20 20 20 20 |ess]    |        |
|00002060| 20 2d 20 44 75 6d 70 20 | 74 68 65 20 76 69 72 74 | - Dump |the virt|
|00002070| 75 61 6c 20 70 72 6f 74 | 65 63 74 20 73 65 74 74 |ual prot|ect sett|
|00002080| 69 6e 67 73 0a 00 00 00 | 21 76 65 72 73 69 6f 6e |ings....|!version|
|00002090| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|000020a0| 20 20 20 20 20 2d 20 44 | 75 6d 70 20 73 79 73 74 |     - D|ump syst|
|000020b0| 65 6d 20 76 65 72 73 69 | 6f 6e 20 61 6e 64 20 62 |em versi|on and b|
|000020c0| 75 69 6c 64 20 6e 75 6d | 62 65 72 0a 00 00 00 00 |uild num|ber.....|
|000020d0| 21 75 73 74 72 20 55 6e | 69 63 6f 64 65 53 74 72 |!ustr Un|icodeStr|
|000020e0| 69 6e 67 41 64 64 72 65 | 73 73 20 20 20 2d 20 44 |ingAddre|ss   - D|
|000020f0| 75 6d 70 20 61 20 55 4e | 49 43 4f 44 45 20 73 74 |ump a UN|ICODE st|
|00002100| 72 69 6e 67 0a 00 00 00 | 21 74 65 62 20 5b 74 65 |ring....|!teb [te|
|00002110| 62 20 61 64 64 72 20 74 | 6f 20 64 75 6d 70 5d 20 |b addr t|o dump] |
|00002120| 20 20 20 20 20 2d 20 44 | 75 6d 70 20 74 68 65 20 |     - D|ump the |
|00002130| 54 45 42 20 73 74 72 75 | 63 74 75 72 65 0a 00 00 |TEB stru|cture...|
|00002140| 21 73 74 72 20 41 6e 73 | 69 53 74 72 69 6e 67 41 |!str Ans|iStringA|
|00002150| 64 64 72 65 73 73 20 20 | 20 20 20 20 20 2d 20 44 |ddress  |     - D|
|00002160| 75 6d 70 20 61 6e 20 41 | 4e 53 49 20 73 74 72 69 |ump an A|NSI stri|
|00002170| 6e 67 0a 00 21 70 65 62 | 20 5b 70 65 62 20 61 64 |ng..!peb| [peb ad|
|00002180| 64 72 20 74 6f 20 64 75 | 6d 70 5d 20 20 20 20 20 |dr to du|mp]     |
|00002190| 20 2d 20 44 75 6d 70 20 | 74 68 65 20 50 45 42 20 | - Dump |the PEB |
|000021a0| 73 74 72 75 63 74 75 72 | 65 0a 00 00 21 6f 62 6a |structur|e...!obj|
|000021b0| 61 20 4f 62 6a 65 63 74 | 41 64 64 72 65 73 73 20 |a Object|Address |
|000021c0| 20 20 20 20 20 20 20 20 | 20 2d 20 44 75 6d 70 20 |        | - Dump |
|000021d0| 61 6e 20 6f 62 6a 65 63 | 74 27 73 20 61 74 74 72 |an objec|t's attr|
|000021e0| 69 62 75 74 65 73 0a 00 | 21 6c 6f 63 6b 73 20 5b |ibutes..|!locks [|
|000021f0| 2d 76 5d 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |-v]     |        |
|00002200| 20 20 20 20 20 2d 20 44 | 75 6d 70 20 61 6c 6c 20 |     - D|ump all |
|00002210| 43 72 69 74 69 63 61 6c | 20 53 65 63 74 69 6f 6e |Critical| Section|
|00002220| 73 20 69 6e 20 70 72 6f | 63 65 73 73 0a 00 00 00 |s in pro|cess....|
|00002230| 21 69 67 72 65 70 20 5b | 70 61 74 74 65 72 6e 20 |!igrep [|pattern |
|00002240| 5b 61 64 64 72 5d 5d 20 | 20 20 20 20 20 2d 20 47 |[addr]] |     - G|
|00002250| 72 65 70 20 66 6f 72 20 | 64 69 73 61 73 73 65 6d |rep for |disassem|
|00002260| 62 6c 65 64 20 70 61 74 | 74 65 72 6e 20 73 74 61 |bled pat|tern sta|
|00002270| 72 74 69 6e 67 20 61 74 | 20 61 64 64 72 0a 00 00 |rting at| addr...|
|00002280| 21 68 65 6c 70 20 5b 63 | 6d 64 5d 20 20 20 20 20 |!help [c|md]     |
|00002290| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 2d 20 44 |        |     - D|
|000022a0| 69 73 70 6c 61 79 73 20 | 74 68 69 73 20 6c 69 73 |isplays |this lis|
|000022b0| 74 20 6f 72 20 67 69 76 | 65 73 20 64 65 74 61 69 |t or giv|es detai|
|000022c0| 6c 73 20 6f 6e 20 63 6f | 6d 6d 61 6e 64 0a 00 00 |ls on co|mmand...|
|000022d0| 21 68 65 61 70 20 5b 61 | 64 64 72 65 73 73 5d 20 |!heap [a|ddress] |
|000022e0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 2d 20 44 |        |     - D|
|000022f0| 75 6d 70 20 68 65 61 70 | 0a 00 00 00 21 68 61 6e |ump heap|....!han|
|00002300| 64 6c 65 20 5b 68 61 6e | 64 6c 65 5d 20 20 20 20 |dle [han|dle]    |
|00002310| 20 20 20 20 20 20 20 20 | 20 2d 20 44 75 6d 70 20 |        | - Dump |
|00002320| 68 61 6e 64 6c 65 20 69 | 6e 66 6f 72 6d 61 74 69 |handle i|nformati|
|00002330| 6f 6e 0a 00 21 67 6c 65 | 20 20 20 20 20 20 20 20 |on..!gle|        |
|00002340| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00002350| 20 2d 20 44 75 6d 70 20 | 47 65 74 4c 61 73 74 45 | - Dump |GetLastE|
|00002360| 72 72 6f 72 20 76 61 6c | 75 65 20 66 6f 72 20 63 |rror val|ue for c|
|00002370| 75 72 72 65 6e 74 20 74 | 68 72 65 61 64 0a 00 00 |urrent t|hread...|
|00002380| 21 67 66 6c 61 67 20 5b | 76 61 6c 75 65 5d 20 20 |!gflag [|value]  |
|00002390| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 2d 20 44 |        |     - D|
|000023a0| 75 6d 70 20 74 68 65 20 | 67 6c 6f 62 61 6c 20 61 |ump the |global a|
|000023b0| 74 6f 6d 20 74 61 62 6c | 65 0a 00 00 21 67 61 74 |tom tabl|e...!gat|
|000023c0| 6f 6d 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |om      |        |
|000023d0| 20 20 20 20 20 20 20 20 | 20 2d 20 44 75 6d 70 20 |        | - Dump |
|000023e0| 74 68 65 20 67 6c 6f 62 | 61 6c 20 61 74 6f 6d 20 |the glob|al atom |
|000023f0| 74 61 62 6c 65 0a 00 00 | 21 65 78 72 20 61 64 64 |table...|!exr add|
|00002400| 72 65 73 73 20 20 20 20 | 20 20 20 20 20 20 20 20 |ress    |        |
|00002410| 20 20 20 20 20 2d 20 44 | 75 6d 70 20 61 6e 20 65 |     - D|ump an e|
|00002420| 78 63 65 70 74 69 6f 6e | 20 72 65 63 6f 72 64 0a |xception| record.|
|00002430| 00 00 00 00 21 65 72 72 | 6f 72 20 76 61 6c 75 65 |....!err|or value|
|00002440| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00002450| 20 2d 20 44 65 63 6f 64 | 65 20 65 72 72 6f 72 20 | - Decod|e error |
|00002460| 76 61 6c 75 65 0a 00 00 | 21 64 74 20 5b 76 5d 20 |value...|!dt [v] |
|00002470| 70 63 73 72 5f 74 68 72 | 65 61 64 20 20 20 20 20 |pcsr_thr|ead     |
|00002480| 20 20 20 20 20 2d 20 44 | 75 6d 70 20 43 53 52 20 |     - D|ump CSR |
|00002490| 74 68 72 65 61 64 0a 00 | 21 64 72 65 67 20 2d 5b |thread..|!dreg -[|
|000024a0| 64 7c 77 5d 20 3c 6b 65 | 79 50 61 74 68 3e 5b 21 |d|w] <ke|yPath>[!|
|000024b0| 5b 3c 76 61 6c 75 65 4e | 61 6d 65 3e 20 7c 20 2a |[<valueN|ame> | *|
|000024c0| 5d 5d 20 20 2d 20 44 75 | 6d 70 20 72 65 67 69 73 |]]  - Du|mp regis|
|000024d0| 74 72 79 20 69 6e 66 6f | 72 6d 61 74 69 6f 6e 0a |try info|rmation.|
|000024e0| 00 00 00 00 21 64 70 20 | 5b 76 5d 20 5b 70 69 64 |....!dp |[v] [pid|
|000024f0| 20 7c 20 70 63 73 72 5f | 70 72 6f 63 65 73 73 5d | | pcsr_|process]|
|00002500| 20 2d 20 44 75 6d 70 20 | 43 53 52 20 70 72 6f 63 | - Dump |CSR proc|
|00002510| 65 73 73 0a 00 00 00 00 | 21 64 6c 6c 73 20 5b 2d |ess.....|!dlls [-|
|00002520| 68 5d 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |h]      |        |
|00002530| 20 20 20 20 20 2d 20 44 | 75 6d 70 20 6c 6f 61 64 |     - D|ump load|
|00002540| 65 64 20 44 4c 4c 53 0a | 00 00 00 00 21 64 68 20 |ed DLLS.|....!dh |
|00002550| 5b 69 6d 61 67 65 20 62 | 61 73 65 20 61 64 64 72 |[image b|ase addr|
|00002560| 65 73 73 5d 20 20 20 20 | 20 2d 20 44 75 6d 70 20 |ess]    | - Dump |
|00002570| 69 6d 61 67 65 20 68 65 | 61 64 65 72 0a 00 00 00 |image he|ader....|
|00002580| 21 63 78 72 20 61 64 64 | 72 65 73 73 20 20 20 20 |!cxr add|ress    |
|00002590| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 2d 20 44 |        |     - D|
|000025a0| 75 6d 70 20 61 20 63 6f | 6e 74 65 78 74 20 72 65 |ump a co|ntext re|
|000025b0| 63 6f 72 64 0a 00 00 00 | 21 63 72 69 74 53 65 63 |cord....|!critSec|
|000025c0| 20 63 73 41 64 64 72 65 | 73 73 20 20 20 20 20 20 | csAddre|ss      |
|000025d0| 20 20 20 20 20 2d 20 44 | 75 6d 70 20 61 20 63 72 |     - D|ump a cr|
|000025e0| 69 74 69 63 61 6c 20 73 | 65 63 74 69 6f 6e 0a 00 |itical s|ection..|
|000025f0| 21 61 74 6f 6d 20 5b 61 | 74 6f 6d 5d 20 20 20 20 |!atom [a|tom]    |
|00002600| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 2d 20 44 |        |     - D|
|00002610| 75 6d 70 20 74 68 65 20 | 61 74 6f 6d 20 6f 72 20 |ump the |atom or |
|00002620| 74 61 62 6c 65 28 73 29 | 20 66 6f 72 20 74 68 65 |table(s)| for the|
|00002630| 20 70 72 6f 63 65 73 73 | 0a 00 00 00 6e 74 73 64 | process|....ntsd|
|00002640| 65 78 74 73 20 68 65 6c | 70 3a 0a 0a 00 00 00 00 |exts hel|p:......|
|00002650| 2a 2a 2a 20 4c 6f 63 6b | 65 64 0a 00 43 6f 6e 74 |*** Lock|ed..Cont|
|00002660| 65 6e 74 69 6f 6e 43 6f | 75 6e 74 20 20 20 20 25 |entionCo|unt    %|
|00002670| 6c 78 0a 00 45 6e 74 72 | 79 43 6f 75 6e 74 20 20 |lx..Entr|yCount  |
|00002680| 20 20 20 20 20 20 20 25 | 6c 78 0a 00 4f 77 6e 69 |       %|lx..Owni|
|00002690| 6e 67 54 68 72 65 61 64 | 20 20 20 20 20 20 20 25 |ngThread|       %|
|000026a0| 6c 78 0a 00 52 65 63 75 | 72 73 69 6f 6e 43 6f 75 |lx..Recu|rsionCou|
|000026b0| 6e 74 20 20 20 20 20 25 | 6c 64 0a 00 4c 6f 63 6b |nt     %|ld..Lock|
|000026c0| 43 6f 75 6e 74 20 20 20 | 20 20 20 20 20 20 20 25 |Count   |       %|
|000026d0| 6c 64 0a 00 4c 6f 63 6b | 43 6f 75 6e 74 20 20 20 |ld..Lock|Count   |
|000026e0| 20 20 20 20 20 20 20 4e | 4f 54 20 4c 4f 43 4b 45 |       N|OT LOCKE|
|000026f0| 44 0a 00 00 43 72 69 74 | 53 65 63 20 25 73 2b 25 |D...Crit|Sec %s+%|
|00002700| 6c 78 20 61 74 20 25 70 | 0a 00 00 00 25 73 00 00 |lx at %p|....%s..|
|00002710| 26 6e 74 64 6c 6c 21 52 | 74 6c 43 72 69 74 69 63 |&ntdll!R|tlCritic|
|00002720| 61 6c 53 65 63 74 69 6f | 6e 4c 69 73 74 00 00 00 |alSectio|nList...|
|00002730| 4e 54 53 44 45 58 54 53 | 3a 20 21 6c 6f 63 6b 73 |NTSDEXTS|: !locks|
|00002740| 20 69 6e 76 61 6c 69 64 | 20 6f 70 74 69 6f 6e 20 | invalid| option |
|00002750| 66 6c 61 67 20 27 2d 25 | 63 27 0a 00 09 2b 25 30 |flag '-%|c'...+%0|
|00002760| 34 6c 78 20 46 6c 61 67 | 73 20 20 20 20 20 20 20 |4lx Flag|s       |
|00002770| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 25 30 |        |      %0|
|00002780| 38 6c 78 0a 09 2b 25 30 | 34 6c 78 20 52 65 66 65 |8lx..+%0|4lx Refe|
|00002790| 72 65 6e 63 65 43 6f 75 | 6e 74 20 20 20 20 20 20 |renceCou|nt      |
|000027a0| 20 20 20 20 20 20 25 30 | 38 6c 78 0a 09 2b 25 30 |      %0|8lx..+%0|
|000027b0| 34 6c 78 20 48 61 73 68 | 4c 69 6e 6b 73 2e 46 6c |4lx Hash|Links.Fl|
|000027c0| 69 6e 6b 20 20 20 20 20 | 20 20 20 20 20 20 25 30 |ink     |      %0|
|000027d0| 38 6c 78 0a 09 2b 25 30 | 34 6c 78 20 48 61 73 68 |8lx..+%0|4lx Hash|
|000027e0| 4c 69 6e 6b 73 2e 42 6c | 69 6e 6b 20 20 20 20 20 |Links.Bl|ink     |
|000027f0| 20 20 20 20 20 20 25 30 | 38 6c 78 0a 00 00 00 00 |      %0|8lx.....|
|00002800| 09 2b 25 30 34 6c 78 20 | 57 61 69 74 42 6c 6f 63 |.+%04lx |WaitBloc|
|00002810| 6b 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |k       |        |
|00002820| 20 20 25 30 38 6c 78 0a | 09 2b 25 30 34 6c 78 20 |  %08lx.|.+%04lx |
|00002830| 43 6c 69 65 6e 74 49 64 | 2e 55 6e 69 71 75 65 50 |ClientId|.UniqueP|
|00002840| 72 6f 63 65 73 73 20 20 | 20 20 25 30 38 6c 78 0a |rocess  |  %08lx.|
|00002850| 09 2b 25 30 34 6c 78 20 | 43 6c 69 65 6e 74 49 64 |.+%04lx |ClientId|
|00002860| 2e 55 6e 69 71 75 65 54 | 68 72 65 61 64 20 20 20 |.UniqueT|hread   |
|00002870| 20 20 25 30 38 6c 78 0a | 09 2b 25 30 34 6c 78 20 |  %08lx.|.+%04lx |
|00002880| 54 68 72 65 61 64 48 61 | 6e 64 6c 65 20 20 20 20 |ThreadHa|ndle    |
|00002890| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a |        |  %08lx.|
|000028a0| 00 00 00 00 50 43 53 52 | 5f 54 48 52 45 41 44 20 |....PCSR|_THREAD |
|000028b0| 40 20 25 30 38 6c 78 3a | 0a 09 2b 25 30 34 6c 78 |@ %08lx:|..+%04lx|
|000028c0| 20 4c 69 6e 6b 2e 46 6c | 69 6e 6b 20 20 20 20 20 | Link.Fl|ink     |
|000028d0| 20 20 20 20 20 20 20 20 | 20 20 20 25 30 38 6c 78 |        |   %08lx|
|000028e0| 0a 09 2b 25 30 34 6c 78 | 20 4c 69 6e 6b 2e 42 6c |..+%04lx| Link.Bl|
|000028f0| 69 6e 6b 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |ink     |        |
|00002900| 20 20 20 25 30 38 6c 78 | 0a 09 2b 25 30 34 6c 78 |   %08lx|..+%04lx|
|00002910| 20 50 72 6f 63 65 73 73 | 20 20 20 20 20 20 20 20 | Process|        |
|00002920| 20 20 20 20 20 20 20 20 | 20 20 20 25 30 38 6c 78 |        |   %08lx|
|00002930| 0a 00 00 00 54 68 72 65 | 61 64 20 25 30 38 6c 78 |....Thre|ad %08lx|
|00002940| 2c 20 50 72 6f 63 65 73 | 73 20 25 30 38 6c 78 2c |, Proces|s %08lx,|
|00002950| 20 43 6c 69 65 6e 74 49 | 64 20 25 6c 78 2e 25 6c | ClientI|d %lx.%l|
|00002960| 78 2c 20 46 6c 61 67 73 | 20 25 6c 78 2c 20 52 65 |x, Flags| %lx, Re|
|00002970| 66 20 43 6f 75 6e 74 20 | 25 6c 78 0a 00 00 00 00 |f Count |%lx.....|
|00002980| ff ff ff ff e1 a2 9c 69 | e5 a2 9c 69 49 6e 76 61 |.......i|...iInva|
|00002990| 6c 69 64 20 74 68 72 65 | 61 64 2e 20 50 72 6f 62 |lid thre|ad. Prob|
|000029a0| 61 62 6c 79 20 69 6e 76 | 61 6c 69 64 20 61 72 67 |ably inv|alid arg|
|000029b0| 75 6d 65 6e 74 20 74 6f | 20 74 68 69 73 20 65 78 |ument to| this ex|
|000029c0| 74 65 6e 73 69 6f 6e 2e | 0a 00 00 00 54 68 72 65 |tension.|....Thre|
|000029d0| 61 64 73 3a 0a 00 00 00 | 09 2b 25 30 34 6c 78 20 |ads:....|.+%04lx |
|000029e0| 66 56 44 4d 20 20 20 20 | 20 20 20 20 20 20 20 20 |fVDM    |        |
|000029f0| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a |        |  %08lx.|
|00002a00| 09 2b 25 30 34 6c 78 20 | 54 68 72 65 61 64 43 6f |.+%04lx |ThreadCo|
|00002a10| 75 6e 74 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |unt     |        |
|00002a20| 20 20 25 30 38 6c 78 0a | 09 2b 25 30 34 6c 78 20 |  %08lx.|.+%04lx |
|00002a30| 50 72 69 6f 72 69 74 79 | 43 6c 61 73 73 20 20 20 |Priority|Class   |
|00002a40| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a |        |  %08lx.|
|00002a50| 09 2b 25 30 34 6c 78 20 | 53 68 75 74 64 6f 77 6e |.+%04lx |Shutdown|
|00002a60| 4c 65 76 65 6c 20 20 20 | 20 20 20 20 20 20 20 20 |Level   |        |
|00002a70| 20 20 25 30 38 6c 78 0a | 09 2b 25 30 34 6c 78 20 |  %08lx.|.+%04lx |
|00002a80| 53 68 75 74 64 6f 77 6e | 46 6c 61 67 73 20 20 20 |Shutdown|Flags   |
|00002a90| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a |        |  %08lx.|
|00002aa0| 00 00 00 00 09 2b 25 30 | 34 6c 78 20 44 65 62 75 |.....+%0|4lx Debu|
|00002ab0| 67 55 73 65 72 49 6e 74 | 65 72 66 61 63 65 20 20 |gUserInt|erface  |
|00002ac0| 20 20 20 20 20 20 25 30 | 38 6c 78 0a 09 2b 25 30 |      %0|8lx..+%0|
|00002ad0| 34 6c 78 20 52 65 66 65 | 72 65 6e 63 65 43 6f 75 |4lx Refe|renceCou|
|00002ae0| 6e 74 20 20 20 20 20 20 | 20 20 20 20 20 20 25 30 |nt      |      %0|
|00002af0| 38 6c 78 0a 09 2b 25 30 | 34 6c 78 20 50 72 6f 63 |8lx..+%0|4lx Proc|
|00002b00| 65 73 73 47 72 6f 75 70 | 49 64 20 20 20 20 20 20 |essGroup|Id      |
|00002b10| 20 20 20 20 20 20 25 30 | 38 6c 78 0a 09 2b 25 30 |      %0|8lx..+%0|
|00002b20| 34 6c 78 20 50 72 6f 63 | 65 73 73 47 72 6f 75 70 |4lx Proc|essGroup|
|00002b30| 53 65 71 75 65 6e 63 65 | 20 20 20 20 20 20 25 30 |Sequence|      %0|
|00002b40| 38 6c 78 0a 00 00 00 00 | 09 2b 25 30 34 6c 78 20 |8lx.....|.+%04lx |
|00002b50| 50 72 6f 63 65 73 73 48 | 61 6e 64 6c 65 20 20 20 |ProcessH|andle   |
|00002b60| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a |        |  %08lx.|
|00002b70| 09 2b 25 30 34 6c 78 20 | 53 65 71 75 65 6e 63 65 |.+%04lx |Sequence|
|00002b80| 4e 75 6d 62 65 72 20 20 | 20 20 20 20 20 20 20 20 |Number  |        |
|00002b90| 20 20 25 30 38 6c 78 0a | 09 2b 25 30 34 6c 78 20 |  %08lx.|.+%04lx |
|00002ba0| 46 6c 61 67 73 20 20 20 | 20 20 20 20 20 20 20 20 |Flags   |        |
|00002bb0| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a |        |  %08lx.|
|00002bc0| 09 2b 25 30 34 6c 78 20 | 44 65 62 75 67 46 6c 61 |.+%04lx |DebugFla|
|00002bd0| 67 73 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |gs      |        |
|00002be0| 20 20 25 30 38 6c 78 0a | 00 00 00 00 09 2b 25 30 |  %08lx.|.....+%0|
|00002bf0| 34 6c 78 20 43 6c 69 65 | 6e 74 50 6f 72 74 20 20 |4lx Clie|ntPort  |
|00002c00| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 25 30 |        |      %0|
|00002c10| 38 6c 78 0a 09 2b 25 30 | 34 6c 78 20 43 6c 69 65 |8lx..+%0|4lx Clie|
|00002c20| 6e 74 56 69 65 77 42 61 | 73 65 20 20 20 20 20 20 |ntViewBa|se      |
|00002c30| 20 20 20 20 20 20 25 30 | 38 6c 78 0a 09 2b 25 30 |      %0|8lx..+%0|
|00002c40| 34 6c 78 20 43 6c 69 65 | 6e 74 56 69 65 77 42 6f |4lx Clie|ntViewBo|
|00002c50| 75 6e 64 73 20 20 20 20 | 20 20 20 20 20 20 25 30 |unds    |      %0|
|00002c60| 38 6c 78 0a 09 2b 25 30 | 34 6c 78 20 43 6c 69 65 |8lx..+%0|4lx Clie|
|00002c70| 6e 74 49 64 2e 55 6e 69 | 71 75 65 50 72 6f 63 65 |ntId.Uni|queProce|
|00002c80| 73 73 20 20 20 20 25 30 | 38 6c 78 0a 00 00 00 00 |ss    %0|8lx.....|
|00002c90| 09 2b 25 30 34 6c 78 20 | 54 68 72 65 61 64 4c 69 |.+%04lx |ThreadLi|
|00002ca0| 73 74 2e 46 6c 69 6e 6b | 20 20 20 20 20 20 20 20 |st.Flink|        |
|00002cb0| 20 20 25 30 38 6c 78 0a | 09 2b 25 30 34 6c 78 20 |  %08lx.|.+%04lx |
|00002cc0| 54 68 72 65 61 64 4c 69 | 73 74 2e 42 6c 69 6e 6b |ThreadLi|st.Blink|
|00002cd0| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a |        |  %08lx.|
|00002ce0| 09 2b 25 30 34 6c 78 20 | 4e 74 53 65 73 73 69 6f |.+%04lx |NtSessio|
|00002cf0| 6e 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |n       |        |
|00002d00| 20 20 25 30 38 6c 78 0a | 09 2b 25 30 34 6c 78 20 |  %08lx.|.+%04lx |
|00002d10| 45 78 70 65 63 74 65 64 | 56 65 72 73 69 6f 6e 20 |Expected|Version |
|00002d20| 20 20 20 20 20 20 20 20 | 20 20 25 30 38 6c 78 0a |        |  %08lx.|
|00002d30| 00 00 00 00 50 43 53 52 | 5f 50 52 4f 43 45 53 53 |....PCSR|_PROCESS|
|00002d40| 20 40 20 25 30 38 6c 78 | 3a 0a 09 2b 25 30 34 6c | @ %08lx|:..+%04l|
|00002d50| 78 20 4c 69 73 74 4c 69 | 6e 6b 2e 46 6c 69 6e 6b |x ListLi|nk.Flink|
|00002d60| 20 20 20 20 20 20 20 20 | 20 20 20 20 25 30 38 6c |        |    %08l|
|00002d70| 78 0a 09 2b 25 30 34 6c | 78 20 4c 69 73 74 4c 69 |x..+%04l|x ListLi|
|00002d80| 6e 6b 2e 42 6c 69 6e 6b | 20 20 20 20 20 20 20 20 |nk.Blink|        |
|00002d90| 20 20 20 20 25 30 38 6c | 78 0a 09 2b 25 30 34 6c |    %08l|x..+%04l|
|00002da0| 78 20 50 61 72 65 6e 74 | 20 20 20 20 20 20 20 20 |x Parent|        |
|00002db0| 20 20 20 20 20 20 20 20 | 20 20 20 20 25 30 38 6c |        |    %08l|
|00002dc0| 78 0a 00 00 50 72 6f 63 | 65 73 73 20 25 30 38 6c |x...Proc|ess %08l|
|00002dd0| 78 2c 20 49 64 20 25 70 | 2c 20 53 65 71 23 20 25 |x, Id %p|, Seq# %|
|00002de0| 6c 78 2c 20 46 6c 61 67 | 73 20 25 6c 78 2c 20 52 |lx, Flag|s %lx, R|
|00002df0| 65 66 20 43 6f 75 6e 74 | 20 25 6c 78 0a 00 00 00 |ef Count| %lx....|
|00002e00| 2d 2d 2d 0a 00 00 00 00 | 26 63 73 72 73 72 76 21 |---.....|&csrsrv!|
|00002e10| 43 73 72 52 6f 6f 74 50 | 72 6f 63 65 73 73 00 00 |CsrRootP|rocess..|
|00002e20| ff ff ff ff bc a7 9c 69 | c0 a7 9c 69 ff ff ff ff |.......i|...i....|
|00002e30| 60 a4 9c 69 64 a4 9c 69 | ff ff ff ff 4d a4 9c 69 |`..id..i|....M..i|
|00002e40| 51 a4 9c 69 ff ff ff ff | b6 a7 9c 69 ba a7 9c 69 |Q..i....|...i...i|
|00002e50| ff ff ff ff de a7 9c 69 | e2 a7 9c 69 ff ff ff ff |.......i|...i....|
|00002e60| d8 a7 9c 69 dc a7 9c 69 | ff ff ff ff b0 a7 9c 69 |...i...i|.......i|
|00002e70| b4 a7 9c 69 ff ff ff ff | aa a7 9c 69 ae a7 9c 69 |...i....|...i...i|
|00002e80| ff ff ff ff a4 a7 9c 69 | a8 a7 9c 69 ff ff ff ff |.......i|...i....|
|00002e90| 9e a7 9c 69 a2 a7 9c 69 | 2d 63 20 66 6c 61 67 20 |...i...i|-c flag |
|00002ea0| 72 65 71 75 69 72 65 73 | 20 61 6e 64 20 61 64 64 |requires| and add|
|00002eb0| 72 65 73 73 20 61 72 67 | 75 65 6d 65 6e 74 0a 00 |ress arg|uement..|
|00002ec0| 20 20 20 2d 73 20 20 20 | 20 20 20 44 75 6d 70 20 |   -s   |   Dump |
|00002ed0| 73 65 63 74 69 6f 6e 20 | 68 65 61 64 65 72 73 0a |section |headers.|
|00002ee0| 00 00 00 00 20 20 20 2d | 6d 20 20 20 20 20 20 44 |....   -|m      D|
|00002ef0| 75 6d 70 20 64 6c 6c 27 | 73 20 69 6e 20 4d 65 6d |ump dll'|s in Mem|
|00002f00| 6f 72 79 20 6f 72 64 65 | 72 0a 00 00 20 20 20 2d |ory orde|r...   -|
|00002f10| 6c 20 20 20 20 20 20 44 | 75 6d 70 20 64 6c 6c 27 |l      D|ump dll'|
|00002f20| 73 20 69 6e 20 4c 6f 61 | 64 20 6f 72 64 65 72 20 |s in Loa|d order |
|00002f30| 28 74 68 65 20 64 65 66 | 61 75 6c 74 29 0a 00 00 |(the def|ault)...|
|00002f40| 20 20 20 2d 69 20 20 20 | 20 20 20 44 75 6d 70 20 |   -i   |   Dump |
|00002f50| 64 6c 6c 27 73 20 69 6e | 20 49 6e 69 74 20 6f 72 |dll's in| Init or|
|00002f60| 64 65 72 0a 00 00 00 00 | 20 20 20 2d 66 20 20 20 |der.....|   -f   |
|00002f70| 20 20 20 44 75 6d 70 20 | 66 69 6c 65 20 68 65 61 |   Dump |file hea|
|00002f80| 64 65 72 73 0a 00 00 00 | 20 20 20 2d 63 20 6e 6e |ders....|   -c nn|
|00002f90| 6e 20 20 44 75 6d 70 20 | 64 6c 6c 20 63 6f 6e 74 |n  Dump |dll cont|
|00002fa0| 61 69 6e 69 6e 67 20 61 | 64 64 72 65 73 73 20 6e |aining a|ddress n|
|00002fb0| 6e 6e 0a 00 20 20 20 2d | 61 20 20 20 20 20 20 44 |nn..   -|a      D|
|00002fc0| 75 6d 70 20 65 76 65 72 | 79 74 68 69 6e 67 0a 00 |ump ever|ything..|
|00002fd0| 4f 70 74 69 6f 6e 73 3a | 0a 00 00 00 64 75 6d 70 |Options:|....dump|
|00002fe0| 73 20 69 6d 61 67 65 20 | 61 6e 64 20 73 65 63 74 |s image |and sect|
|00002ff0| 69 6f 6e 20 68 65 61 64 | 65 72 73 2e 0a 00 00 00 |ion head|ers.....|
|00003000| 44 69 73 70 6c 61 79 73 | 20 6c 6f 61 64 65 72 20 |Displays| loader |
|00003010| 74 61 62 6c 65 20 65 6e | 74 72 69 65 73 2e 20 20 |table en|tries.  |
|00003020| 4f 70 74 69 6f 6e 61 6c | 6c 79 0a 00 55 73 61 67 |Optional|ly..Usag|
|00003030| 65 3a 20 64 6c 6c 73 20 | 5b 6f 70 74 69 6f 6e 73 |e: dlls |[options|
|00003040| 5d 20 5b 61 64 64 72 65 | 73 73 5d 0a 00 00 00 00 |] [addre|ss].....|
|00003050| 49 6e 76 61 6c 69 64 20 | 65 78 74 72 61 20 61 72 |Invalid |extra ar|
|00003060| 67 75 6d 65 6e 74 0a 00 | 20 20 20 20 20 20 20 20 |gument..|        |
|00003070| 20 20 20 20 20 4c 44 52 | 50 5f 57 58 38 36 5f 49 |     LDR|P_WX86_I|
|00003080| 47 4e 4f 52 45 5f 4d 41 | 43 48 49 4e 45 54 59 50 |GNORE_MA|CHINETYP|
|00003090| 45 0a 00 00 20 20 20 20 | 20 20 20 20 20 20 20 20 |E...    |        |
|000030a0| 20 4c 44 52 50 5f 49 4d | 41 47 45 5f 4e 4f 54 5f | LDRP_IM|AGE_NOT_|
|000030b0| 41 54 5f 42 41 53 45 0a | 00 00 00 00 20 20 20 20 |AT_BASE.|....    |
|000030c0| 20 20 20 20 20 20 20 20 | 20 4c 44 52 50 5f 44 45 |        | LDRP_DE|
|000030d0| 42 55 47 5f 53 59 4d 42 | 4f 4c 53 5f 4c 4f 41 44 |BUG_SYMB|OLS_LOAD|
|000030e0| 45 44 0a 00 20 20 20 20 | 20 20 20 20 20 20 20 20 |ED..    |        |
|000030f0| 20 4c 44 52 50 5f 50 52 | 4f 43 45 53 53 5f 41 54 | LDRP_PR|OCESS_AT|
|00003100| 54 41 43 48 5f 43 41 4c | 4c 45 44 0a 00 00 00 00 |TACH_CAL|LED.....|
|00003110| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 4c 44 52 |        |     LDR|
|00003120| 50 5f 44 4f 4e 54 5f 43 | 41 4c 4c 5f 46 4f 52 5f |P_DONT_C|ALL_FOR_|
|00003130| 54 48 52 45 41 44 53 0a | 00 00 00 00 20 20 20 20 |THREADS.|....    |
|00003140| 20 20 20 20 20 20 20 20 | 20 4c 44 52 50 5f 46 41 |        | LDRP_FA|
|00003150| 49 4c 45 44 5f 42 55 49 | 4c 54 49 4e 5f 4c 4f 41 |ILED_BUI|LTIN_LOA|
|00003160| 44 0a 00 00 20 20 20 20 | 20 20 20 20 20 20 20 20 |D...    |        |
|00003170| 20 4c 44 52 50 5f 43 55 | 52 52 45 4e 54 5f 4c 4f | LDRP_CU|RRENT_LO|
|00003180| 41 44 0a 00 20 20 20 20 | 20 20 20 20 20 20 20 20 |AD..    |        |
|00003190| 20 4c 44 52 50 5f 45 4e | 54 52 59 5f 49 4e 53 45 | LDRP_EN|TRY_INSE|
|000031a0| 52 54 45 44 0a 00 00 00 | 20 20 20 20 20 20 20 20 |RTED....|        |
|000031b0| 20 20 20 20 20 4c 44 52 | 50 5f 45 4e 54 52 59 5f |     LDR|P_ENTRY_|
|000031c0| 50 52 4f 43 45 53 53 45 | 44 0a 00 00 20 20 20 20 |PROCESSE|D...    |
|000031d0| 20 20 20 20 20 20 20 20 | 20 4c 44 52 50 5f 55 4e |        | LDRP_UN|
|000031e0| 4c 4f 41 44 5f 49 4e 5f | 50 52 4f 47 52 45 53 53 |LOAD_IN_|PROGRESS|
|000031f0| 0a 00 00 00 20 20 20 20 | 20 20 20 20 20 20 20 20 |....    |        |
|00003200| 20 4c 44 52 50 5f 4c 4f | 41 44 5f 49 4e 5f 50 52 | LDRP_LO|AD_IN_PR|
|00003210| 4f 47 52 45 53 53 0a 00 | 20 20 20 20 20 20 20 20 |OGRESS..|        |
|00003220| 20 20 20 20 20 4c 44 52 | 50 5f 49 4d 41 47 45 5f |     LDR|P_IMAGE_|
|00003230| 44 4c 4c 0a 00 00 00 00 | 20 20 20 20 20 20 20 20 |DLL.....|        |
|00003240| 20 20 20 20 20 4c 44 52 | 50 5f 53 54 41 54 49 43 |     LDR|P_STATIC|
|00003250| 5f 4c 49 4e 4b 0a 00 00 | 20 20 20 20 20 20 46 6c |_LINK...|      Fl|
|00003260| 61 67 73 20 20 30 78 25 | 30 38 78 20 20 4c 6f 61 |ags  0x%|08x  Loa|
|00003270| 64 43 6f 75 6e 74 20 20 | 20 30 78 25 30 38 78 20 |dCount  | 0x%08x |
|00003280| 20 54 6c 73 49 6e 64 65 | 78 20 20 20 20 30 78 25 | TlsInde|x    0x%|
|00003290| 30 38 78 0a 00 00 00 00 | 20 20 20 20 20 20 42 61 |08x.....|      Ba|
|000032a0| 73 65 20 20 20 30 78 25 | 30 38 78 20 20 45 6e 74 |se   0x%|08x  Ent|
|000032b0| 72 79 50 6f 69 6e 74 20 | 20 30 78 25 30 38 78 20 |ryPoint | 0x%08x |
|000032c0| 20 53 69 7a 65 20 20 20 | 20 20 20 20 20 30 78 25 | Size   |     0x%|
|000032d0| 30 38 78 0a 00 00 00 00 | 30 78 25 30 38 78 3a 20 |08x.....|0x%08x: |
|000032e0| 25 77 73 0a 00 00 00 00 | 55 00 6e 00 6b 00 6e 00 |%ws.....|U.n.k.n.|
|000032f0| 6f 00 77 00 6e 00 20 00 | 4d 00 6f 00 64 00 75 00 |o.w.n. .|M.o.d.u.|
|00003300| 6c 00 65 00 00 00 00 00 | 20 20 20 20 55 6e 61 62 |l.e.....|    Unab|
|00003310| 6c 65 64 20 74 6f 20 72 | 65 61 64 20 4d 6f 64 75 |led to r|ead Modu|
|00003320| 6c 65 20 4e 61 6d 65 0a | 00 00 00 00 20 20 20 20 |le Name.|....    |
|00003330| 55 6e 61 62 6c 65 64 20 | 74 6f 20 72 65 61 64 20 |Unabled |to read |
|00003340| 4c 64 72 20 45 6e 74 72 | 79 20 61 74 20 25 78 0a |Ldr Entr|y at %x.|
|00003350| 00 00 00 00 20 20 20 20 | 55 6e 61 62 6c 65 64 20 |....    |Unabled |
|00003360| 74 6f 20 72 65 61 64 20 | 50 65 62 4c 64 72 44 61 |to read |PebLdrDa|
|00003370| 74 61 0a 00 44 75 6d 70 | 20 64 6c 6c 20 63 6f 6e |ta..Dump| dll con|
|00003380| 74 61 69 6e 69 6e 67 20 | 30 78 25 70 3a 0a 00 00 |taining |0x%p:...|
|00003390| 20 20 20 20 55 6e 61 62 | 6c 65 20 74 6f 20 66 65 |    Unab|le to fe|
|000033a0| 74 63 68 20 53 79 73 74 | 65 6d 52 61 6e 67 65 53 |tch Syst|emRangeS|
|000033b0| 74 61 72 74 0a 00 00 00 | 48 45 41 50 45 58 54 3a |tart....|HEAPEXT:|
|000033c0| 20 55 6e 61 62 6c 65 20 | 74 6f 20 75 70 64 61 74 | Unable |to updat|
|000033d0| 65 20 68 65 61 64 65 72 | 20 76 61 6c 69 64 61 74 |e header| validat|
|000033e0| 69 6f 6e 20 63 6f 70 79 | 20 61 74 20 25 70 0a 00 |ion copy| at %p..|
|000033f0| 48 45 41 50 45 58 54 3a | 20 45 6e 61 62 6c 65 64 |HEAPEXT:| Enabled|
|00003400| 20 68 65 61 70 20 63 68 | 65 63 6b 69 6e 67 20 66 | heap ch|ecking f|
|00003410| 6f 72 20 68 65 61 70 20 | 25 70 0a 00 48 45 41 50 |or heap |%p..HEAP|
|00003420| 45 58 54 3a 20 45 6e 61 | 62 6c 65 64 20 76 61 6c |EXT: Ena|bled val|
|00003430| 69 64 61 74 65 20 6f 6e | 20 63 61 6c 6c 20 68 65 |idate on| call he|
|00003440| 61 70 20 63 68 65 63 6b | 69 6e 67 20 66 6f 72 20 |ap check|ing for |
|00003450| 68 65 61 70 20 25 70 0a | 00 00 00 00 48 45 41 50 |heap %p.|....HEAP|
|00003460| 45 58 54 3a 20 55 6e 61 | 62 6c 65 20 74 6f 20 65 |EXT: Una|ble to e|
|00003470| 6e 61 62 6c 65 20 68 65 | 61 70 20 63 68 65 63 6b |nable he|ap check|
|00003480| 69 6e 67 20 66 6f 72 20 | 68 65 61 70 20 25 70 0a |ing for |heap %p.|
|00003490| 00 00 00 00 48 45 41 50 | 45 58 54 3a 20 44 69 73 |....HEAP|EXT: Dis|
|000034a0| 61 62 6c 65 64 20 68 65 | 61 70 20 63 68 65 63 6b |abled he|ap check|
|000034b0| 69 6e 67 20 66 6f 72 20 | 68 65 61 70 20 25 70 0a |ing for |heap %p.|
|000034c0| 00 00 00 00 48 45 41 50 | 45 58 54 3a 20 44 69 73 |....HEAP|EXT: Dis|
|000034d0| 61 62 6c 65 64 20 76 61 | 6c 69 64 61 74 65 20 6f |abled va|lidate o|
|000034e0| 6e 20 63 61 6c 6c 20 68 | 65 61 70 20 63 68 65 63 |n call h|eap chec|
|000034f0| 6b 69 6e 67 20 66 6f 72 | 20 68 65 61 70 20 25 70 |king for| heap %p|
|00003500| 0a 00 00 00 48 45 41 50 | 45 58 54 3a 20 55 6e 61 |....HEAP|EXT: Una|
|00003510| 62 6c 65 20 74 6f 20 64 | 69 73 61 62 6c 65 20 68 |ble to d|isable h|
|00003520| 65 61 70 20 63 68 65 63 | 6b 69 6e 67 20 66 6f 72 |eap chec|king for|
|00003530| 20 68 65 61 70 20 25 70 | 0a 00 00 00 20 25 38 64 | heap %p|.... %8d|
|00003540| 20 25 38 64 20 25 36 64 | 20 25 38 64 0a 00 00 00 | %8d %6d| %8d....|
|00003550| 25 30 34 78 3a 20 56 69 | 72 74 75 61 6c 41 6c 6c |%04x: Vi|rtualAll|
|00003560| 6f 63 00 00 25 30 34 78 | 3a 20 4f 62 6a 65 63 74 |oc..%04x|: Object|
|00003570| 73 3d 25 34 75 00 00 00 | 25 30 34 78 3a 20 4f 62 |s=%4u...|%04x: Ob|
|00003580| 6a 65 63 74 73 3e 25 34 | 75 00 00 00 25 30 34 78 |jects>%4|u...%04x|
|00003590| 3a 20 75 6e 61 62 6c 65 | 20 74 6f 20 72 65 61 64 |: unable| to read|
|000035a0| 20 48 45 41 50 5f 50 53 | 45 55 44 4f 5f 54 41 47 | HEAP_PS|EUDO_TAG|
|000035b0| 5f 45 4e 54 52 59 20 61 | 74 20 25 70 0a 00 00 00 |_ENTRY a|t %p....|
|000035c0| 20 54 61 67 20 4e 61 6d | 65 20 20 20 20 20 20 20 | Tag Nam|e       |
|000035d0| 20 20 20 20 20 41 6c 6c | 6f 63 73 20 20 20 20 46 |     All|ocs    F|
|000035e0| 72 65 65 73 20 20 20 44 | 69 66 66 20 20 41 6c 6c |rees   D|iff  All|
|000035f0| 6f 63 61 74 65 64 0a 00 | 20 20 20 20 6e 6f 20 70 |ocated..|    no p|
|00003600| 73 65 75 64 6f 20 74 61 | 67 73 20 63 75 72 72 65 |seudo ta|gs curre|
|00003610| 6e 74 6c 79 20 64 65 66 | 69 6e 65 64 20 66 6f 72 |ntly def|ined for|
|00003620| 20 74 68 69 73 20 68 65 | 61 70 2e 0a 00 00 00 00 | this he|ap......|
|00003630| 25 30 34 78 3a 20 75 6e | 61 62 6c 65 20 74 6f 20 |%04x: un|able to |
|00003640| 72 65 61 64 20 48 45 41 | 50 5f 54 41 47 5f 45 4e |read HEA|P_TAG_EN|
|00003650| 54 52 59 20 61 74 20 25 | 70 0a 00 00 20 20 20 20 |TRY at %|p...    |
|00003660| 6e 6f 20 74 61 67 73 20 | 63 75 72 72 65 6e 74 6c |no tags |currentl|
|00003670| 79 20 64 65 66 69 6e 65 | 64 20 66 6f 72 20 74 68 |y define|d for th|
|00003680| 69 73 20 68 65 61 70 2e | 0a 00 00 00 48 45 41 50 |is heap.|....HEAP|
|00003690| 45 58 54 3a 20 44 69 73 | 61 62 6c 65 64 20 41 50 |EXT: Dis|abled AP|
|000036a0| 49 20 63 61 6c 6c 20 74 | 72 61 63 69 6e 67 20 66 |I call t|racing f|
|000036b0| 6f 72 20 68 65 61 70 20 | 25 70 0a 00 48 45 41 50 |or heap |%p..HEAP|
|000036c0| 45 58 54 3a 20 45 6e 61 | 62 6c 65 64 20 41 50 49 |EXT: Ena|bled API|
|000036d0| 20 63 61 6c 6c 20 74 72 | 61 63 69 6e 67 20 66 6f | call tr|acing fo|
|000036e0| 72 20 68 65 61 70 20 25 | 70 0a 00 00 48 45 41 50 |r heap %|p...HEAP|
|000036f0| 45 58 54 3a 20 55 6e 61 | 62 6c 65 20 74 6f 20 74 |EXT: Una|ble to t|
|00003700| 6f 67 67 6c 65 20 41 50 | 49 20 63 61 6c 6c 20 74 |oggle AP|I call t|
|00003710| 72 61 63 69 6e 67 20 66 | 6f 72 20 68 65 61 70 20 |racing f|or heap |
|00003720| 25 70 0a 00 48 45 41 50 | 45 58 54 3a 20 44 69 73 |%p..HEAP|EXT: Dis|
|00003730| 61 62 6c 65 64 20 68 65 | 61 70 20 62 72 65 61 6b |abled he|ap break|
|00003740| 70 6f 69 6e 74 20 66 6f | 72 20 25 73 0a 00 00 00 |point fo|r %s....|
|00003750| 48 45 41 50 45 58 54 3a | 20 45 6e 61 62 6c 65 64 |HEAPEXT:| Enabled|
|00003760| 20 68 65 61 70 20 62 72 | 65 61 6b 70 6f 69 6e 74 | heap br|eakpoint|
|00003770| 20 66 6f 72 20 25 73 20 | 6f 66 20 62 6c 6f 63 6b | for %s |of block|
|00003780| 20 77 69 74 68 20 74 61 | 67 20 25 77 73 0a 00 00 | with ta|g %ws...|
|00003790| 48 45 41 50 45 58 54 3a | 20 45 6e 61 62 6c 65 64 |HEAPEXT:| Enabled|
|000037a0| 20 68 65 61 70 20 62 72 | 65 61 6b 70 6f 69 6e 74 | heap br|eakpoint|
|000037b0| 20 66 6f 72 20 25 73 20 | 6f 66 20 62 6c 6f 63 6b | for %s |of block|
|000037c0| 20 25 78 0a 00 00 00 00 | 46 72 65 65 00 00 00 00 | %x.....|Free....|
|000037d0| 52 65 41 6c 6c 6f 63 00 | 41 6c 6c 6f 63 00 00 00 |ReAlloc.|Alloc...|
|000037e0| 48 45 41 50 45 58 54 3a | 20 55 6e 61 62 6c 65 20 |HEAPEXT:| Unable |
|000037f0| 74 6f 20 73 65 74 20 68 | 65 61 70 20 62 72 65 61 |to set h|eap brea|
|00003800| 6b 70 6f 69 6e 74 20 2d | 20 77 72 69 74 65 20 6d |kpoint -| write m|
|00003810| 65 6d 6f 72 79 20 74 6f | 20 25 78 20 66 61 69 6c |emory to| %x fail|
|00003820| 65 64 0a 00 48 45 41 50 | 45 58 54 3a 20 55 6e 61 |ed..HEAP|EXT: Una|
|00003830| 62 6c 65 20 74 6f 20 63 | 6f 6e 76 65 72 74 20 74 |ble to c|onvert t|
|00003840| 61 67 20 6e 61 6d 65 20 | 25 77 73 20 74 6f 20 61 |ag name |%ws to a|
|00003850| 6e 20 69 6e 64 65 78 0a | 00 00 00 00 20 20 20 20 |n index.|....    |
|00003860| 53 65 67 6d 65 6e 74 20 | 61 74 20 25 70 20 74 6f |Segment |at %p to|
|00003870| 20 25 70 20 28 25 30 38 | 78 20 62 79 74 65 73 20 | %p (%08|x bytes |
|00003880| 63 6f 6d 6d 69 74 74 65 | 64 29 0a 00 20 20 20 20 |committe|d)..    |
|00003890| 55 6e 61 62 6c 65 64 20 | 74 6f 20 72 65 61 64 20 |Unabled |to read |
|000038a0| 48 45 41 50 5f 53 45 47 | 4d 45 4e 54 20 73 74 72 |HEAP_SEG|MENT str|
|000038b0| 75 63 74 75 72 65 20 61 | 74 20 25 70 0a 00 00 00 |ucture a|t %p....|
|000038c0| 20 76 61 6c 69 64 61 74 | 65 20 6f 6e 20 63 61 6c | validat|e on cal|
|000038d0| 6c 00 00 00 20 76 61 6c | 69 64 61 74 65 20 70 61 |l... val|idate pa|
|000038e0| 72 61 6d 65 74 65 72 73 | 00 00 00 00 20 66 72 65 |rameters|.... fre|
|000038f0| 65 20 63 68 65 63 6b 69 | 6e 67 00 00 20 74 61 69 |e checki|ng.. tai|
|00003900| 6c 20 63 68 65 63 6b 69 | 6e 67 00 00 20 25 2d 31 |l checki|ng.. %-1|
|00003910| 34 2e 31 34 77 73 00 00 | 20 2d 20 68 65 61 70 20 |4.14ws..| - heap |
|00003920| 68 65 61 64 65 72 73 20 | 69 6e 61 63 63 65 73 73 |headers |inaccess|
|00003930| 61 62 6c 65 2c 20 73 6b | 69 70 70 69 6e 67 0a 00 |able, sk|ipping..|
|00003940| 25 33 75 3a 20 20 20 25 | 30 38 78 20 00 00 00 00 |%3u:   %|08x ....|
|00003950| 49 6e 64 65 78 20 20 20 | 41 64 64 72 65 73 73 20 |Index   |Address |
|00003960| 20 4e 61 6d 65 20 20 20 | 20 20 20 44 65 62 75 67 | Name   |   Debug|
|00003970| 67 69 6e 67 20 6f 70 74 | 69 6f 6e 73 20 65 6e 61 |ging opt|ions ena|
|00003980| 62 6c 65 64 0a 00 00 00 | 25 30 34 78 3a 20 75 6e |bled....|%04x: un|
|00003990| 61 62 6c 65 20 74 6f 20 | 72 65 61 64 20 48 45 41 |able to |read HEA|
|000039a0| 50 5f 54 41 47 5f 45 4e | 54 52 59 20 61 74 20 25 |P_TAG_EN|TRY at %|
|000039b0| 78 0a 00 00 25 30 34 78 | 3a 20 25 2d 32 30 2e 32 |x...%04x|: %-20.2|
|000039c0| 30 77 73 20 25 38 64 20 | 25 38 64 20 25 36 64 20 |0ws %8d |%8d %6d |
|000039d0| 25 38 64 0a 00 00 00 00 | 20 54 61 67 20 20 4e 61 |%8d.....| Tag  Na|
|000039e0| 6d 65 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |me      |        |
|000039f0| 20 20 20 20 20 41 6c 6c | 6f 63 73 20 20 20 20 46 |     All|ocs    F|
|00003a00| 72 65 65 73 20 20 20 44 | 69 66 66 20 20 41 6c 6c |rees   D|iff  All|
|00003a10| 6f 63 61 74 65 64 0a 00 | 20 20 20 20 6e 6f 20 67 |ocated..|    no g|
|00003a20| 6c 6f 62 61 6c 20 74 61 | 67 73 20 63 75 72 72 65 |lobal ta|gs curre|
|00003a30| 6e 74 6c 79 20 64 65 66 | 69 6e 65 64 2e 0a 00 00 |ntly def|ined....|
|00003a40| 48 45 41 50 45 58 54 3a | 20 55 6e 61 62 6c 65 20 |HEAPEXT:| Unable |
|00003a50| 74 6f 20 72 65 61 64 20 | 52 74 6c 70 47 6c 6f 62 |to read |RtlpGlob|
|00003a60| 61 6c 54 61 67 48 65 61 | 70 0a 00 00 47 6c 6f 62 |alTagHea|p...Glob|
|00003a70| 61 6c 20 54 61 67 73 20 | 64 65 66 69 6e 65 64 20 |al Tags |defined |
|00003a80| 66 6f 72 20 65 61 63 68 | 20 44 4c 4c 20 74 68 61 |for each| DLL tha|
|00003a90| 74 20 6d 61 6b 65 73 20 | 61 6e 20 75 6e 74 61 67 |t makes |an untag|
|00003aa0| 67 65 64 20 61 6c 6c 6f | 63 61 74 69 6f 6e 2e 0a |ged allo|cation..|
|00003ab0| 00 00 00 00 20 20 20 20 | 64 69 73 61 62 6c 65 20 |....    |disable |
|00003ac0| 63 6f 61 6c 65 73 63 69 | 6e 67 20 6f 66 20 66 72 |coalesci|ng of fr|
|00003ad0| 65 65 20 62 6c 6f 63 6b | 73 0a 00 00 20 20 20 20 |ee block|s...    |
|00003ae0| 73 74 61 63 6b 20 62 61 | 63 6b 20 74 72 61 63 65 |stack ba|ck trace|
|00003af0| 73 0a 00 00 20 20 20 20 | 68 65 61 70 20 74 61 67 |s...    |heap tag|
|00003b00| 67 69 6e 67 0a 00 00 00 | 20 20 20 20 76 61 6c 69 |ging....|    vali|
|00003b10| 64 61 74 65 20 6f 6e 20 | 63 61 6c 6c 0a 00 00 00 |date on |call....|
|00003b20| 20 20 20 20 76 61 6c 69 | 64 61 74 65 20 70 61 72 |    vali|date par|
|00003b30| 61 6d 65 74 65 72 73 0a | 00 00 00 00 20 20 20 20 |ameters.|....    |
|00003b40| 66 72 65 65 20 63 68 65 | 63 6b 69 6e 67 0a 00 00 |free che|cking...|
|00003b50| 20 20 20 20 74 61 69 6c | 20 63 68 65 63 6b 69 6e |    tail| checkin|
|00003b60| 67 0a 00 00 4e 74 47 6c | 6f 62 61 6c 46 6c 61 67 |g...NtGl|obalFlag|
|00003b70| 20 65 6e 61 62 6c 65 73 | 20 66 6f 6c 6c 6f 77 69 | enables| followi|
|00003b80| 6e 67 20 64 65 62 75 67 | 67 69 6e 67 20 61 69 64 |ng debug|ging aid|
|00003b90| 73 20 66 6f 72 20 6e 65 | 77 20 68 65 61 70 73 3a |s for ne|w heaps:|
|00003ba0| 00 00 00 00 20 20 2d 70 | 20 2d 74 20 5b 4e 5d 20 |....  -p| -t [N] |
|00003bb0| 20 20 64 75 6d 70 20 66 | 69 72 73 74 20 4e 20 63 |  dump f|irst N c|
|00003bc0| 6f 6c 6c 65 63 74 65 64 | 20 74 72 61 63 65 73 20 |ollected| traces |
|00003bd0| 77 69 74 68 20 68 65 61 | 76 79 20 68 65 61 70 20 |with hea|vy heap |
|00003be0| 75 73 65 72 73 2e 0a 00 | 20 20 2d 70 20 2d 61 20 |users...|  -p -a |
|00003bf0| 41 44 44 52 20 20 66 69 | 67 75 72 65 20 6f 75 74 |ADDR  fi|gure out|
|00003c00| 20 77 68 61 74 20 68 65 | 61 70 20 62 6c 6f 63 6b | what he|ap block|
|00003c10| 20 69 73 20 61 74 20 41 | 44 44 52 2e 20 20 20 20 | is at A|DDR.    |
|00003c20| 20 20 0a 00 20 20 2d 70 | 20 2d 68 20 41 44 44 52 |  ..  -p| -h ADDR|
|00003c30| 20 20 64 65 74 61 69 6c | 65 64 20 64 75 6d 70 20 |  detail|ed dump |
|00003c40| 6f 66 20 70 61 67 65 20 | 68 65 61 70 20 61 74 20 |of page |heap at |
|00003c50| 41 44 44 52 2e 20 20 20 | 20 20 20 20 20 20 0a 00 |ADDR.   |      ..|
|00003c60| 20 20 2d 70 20 20 20 20 | 20 20 20 20 20 20 64 75 |  -p    |      du|
|00003c70| 6d 70 20 61 6c 6c 20 70 | 61 67 65 20 68 65 61 70 |mp all p|age heap|
|00003c80| 73 2e 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |s.      |        |
|00003c90| 20 20 20 20 20 20 20 20 | 20 20 0a 00 20 20 2d 70 |        |  ..  -p|
|00003ca0| 20 2d 3f 20 20 20 20 20 | 20 20 65 78 74 65 6e 73 | -?     |  extens|
|00003cb0| 69 76 65 20 70 61 67 65 | 20 68 65 61 70 20 72 65 |ive page| heap re|
|00003cc0| 6c 61 74 65 64 20 68 65 | 6c 70 2e 20 20 20 20 20 |lated he|lp.     |
|00003cd0| 20 20 20 20 20 20 0a 00 | 20 20 20 20 20 20 20 20 |      ..|        |
|00003ce0| 20 20 20 20 69 66 20 74 | 68 65 20 74 79 70 65 20 |    if t|he type |
|00003cf0| 69 73 20 6e 6f 74 20 73 | 70 65 63 69 66 69 65 64 |is not s|pecified|
|00003d00| 20 74 68 65 6e 20 61 6c | 6c 20 62 72 65 61 6b 70 | then al|l breakp|
|00003d10| 6f 69 6e 74 73 20 61 72 | 65 20 72 65 6d 6f 76 65 |oints ar|e remove|
|00003d20| 64 2e 0a 00 20 20 2d 42 | 20 20 20 20 20 20 20 20 |d...  -B|        |
|00003d30| 72 65 6d 6f 76 65 73 20 | 61 20 63 6f 6e 64 69 74 |removes |a condit|
|00003d40| 69 6f 6e 61 6c 20 62 72 | 65 61 6b 70 6f 69 6e 74 |ional br|eakpoint|
|00003d50| 20 69 6e 20 74 68 65 20 | 68 65 61 70 20 6d 61 6e | in the |heap man|
|00003d60| 61 67 65 72 2e 0a 00 00 | 20 20 20 20 20 20 20 20 |ager....|        |
|00003d70| 20 20 20 20 61 6e 64 20 | 69 73 20 74 68 65 20 74 |    and |is the t|
|00003d80| 61 67 20 6e 61 6d 65 20 | 77 69 74 68 69 6e 20 74 |ag name |within t|
|00003d90| 68 65 20 68 65 61 70 20 | 73 70 65 63 69 66 69 65 |he heap |specifie|
|00003da0| 64 20 62 79 20 61 64 64 | 72 65 73 73 2e 0a 00 00 |d by add|ress....|
|00003db0| 20 20 20 20 20 20 20 20 | 20 20 20 20 6f 72 20 61 |        |    or a|
|00003dc0| 20 68 65 61 70 2c 20 69 | 6e 20 77 68 69 63 68 20 | heap, i|n which |
|00003dd0| 63 61 73 65 20 74 68 65 | 20 74 61 67 20 61 72 67 |case the| tag arg|
|00003de0| 75 6d 65 6e 74 20 69 73 | 20 72 65 71 75 69 72 65 |ument is| require|
|00003df0| 64 2c 0a 00 20 20 20 20 | 20 20 20 20 20 20 20 20 |d,..    |        |
|00003e00| 61 64 64 72 65 73 73 20 | 65 69 74 68 65 72 20 73 |address |either s|
|00003e10| 70 65 63 69 66 69 65 73 | 20 74 68 65 20 61 64 64 |pecifies| the add|
|00003e20| 72 65 73 73 20 6f 66 20 | 61 20 62 6c 6f 63 6b 20 |ress of |a block |
|00003e30| 74 6f 20 73 74 6f 70 20 | 6f 6e 2e 0a 00 00 00 00 |to stop |on......|
|00003e40| 20 20 20 20 20 20 20 20 | 20 20 20 20 61 6c 6c 6f |        |    allo|
|00003e50| 63 20 7c 20 72 65 61 6c | 6c 6f 63 20 7c 20 66 72 |c | real|loc | fr|
|00003e60| 65 65 20 73 70 65 63 69 | 66 69 65 73 20 77 68 69 |ee speci|fies whi|
|00003e70| 63 68 20 61 63 74 69 6f | 6e 20 74 6f 20 73 74 6f |ch actio|n to sto|
|00003e80| 70 2e 0a 00 20 20 2d 62 | 20 20 20 20 20 20 20 20 |p...  -b|        |
|00003e90| 63 72 65 61 74 65 73 20 | 61 20 63 6f 6e 64 69 74 |creates |a condit|
|00003ea0| 69 6f 6e 61 6c 20 62 72 | 65 61 6b 70 6f 69 6e 74 |ional br|eakpoint|
|00003eb0| 20 69 6e 20 74 68 65 20 | 68 65 61 70 20 6d 61 6e | in the |heap man|
|00003ec0| 61 67 65 72 2e 0a 00 00 | 20 20 2d 44 20 20 20 20 |ager....|  -D    |
|00003ed0| 20 20 20 20 64 69 73 61 | 62 6c 65 73 20 76 61 6c |    disa|bles val|
|00003ee0| 69 64 61 74 65 20 6f 6e | 20 63 61 6c 6c 20 66 6f |idate on| call fo|
|00003ef0| 72 20 74 68 65 20 73 70 | 65 63 69 66 69 65 64 20 |r the sp|ecified |
|00003f00| 68 65 61 70 28 73 29 2e | 0a 00 00 00 20 20 2d 45 |heap(s).|....  -E|
|00003f10| 20 20 20 20 20 20 20 20 | 65 6e 61 62 6c 65 73 20 |        |enables |
|00003f20| 76 61 6c 69 64 61 74 65 | 20 6f 6e 20 63 61 6c 6c |validate| on call|
|00003f30| 20 66 6f 72 20 74 68 65 | 20 73 70 65 63 69 66 69 | for the| specifi|
|00003f40| 65 64 20 68 65 61 70 28 | 73 29 2e 0a 00 00 00 00 |ed heap(|s)......|
|00003f50| 20 20 2d 64 20 20 20 20 | 20 20 20 20 64 69 73 61 |  -d    |    disa|
|00003f60| 62 6c 65 73 20 68 65 61 | 70 20 63 68 65 63 6b 69 |bles hea|p checki|
|00003f70| 6e 67 20 66 6f 72 20 74 | 68 65 20 73 70 65 63 69 |ng for t|he speci|
|00003f80| 66 69 65 64 20 68 65 61 | 70 28 73 29 2e 0a 00 00 |fied hea|p(s)....|
|00003f90| 20 20 2d 65 20 20 20 20 | 20 20 20 20 65 6e 61 62 |  -e    |    enab|
|00003fa0| 6c 65 73 20 68 65 61 70 | 20 63 68 65 63 6b 69 6e |les heap| checkin|
|00003fb0| 67 20 66 6f 72 20 74 68 | 65 20 73 70 65 63 69 66 |g for th|e specif|
|00003fc0| 69 65 64 20 68 65 61 70 | 28 73 29 2e 0a 00 00 00 |ied heap|(s).....|
|00003fd0| 20 20 2d 73 20 20 20 20 | 20 20 20 20 64 69 73 70 |  -s    |    disp|
|00003fe0| 6c 61 79 73 20 73 75 6d | 6d 61 72 79 20 69 6e 66 |lays sum|mary inf|
|00003ff0| 6f 72 6d 61 74 69 6f 6e | 20 66 6f 72 20 74 68 65 |ormation| for the|
|00004000| 20 73 70 65 63 69 66 69 | 65 64 20 68 65 61 70 28 | specifi|ed heap(|
|00004010| 73 29 2e 0a 00 00 00 00 | 20 20 2d 67 20 20 20 20 |s)......|  -g    |
|00004020| 20 20 20 20 64 69 73 70 | 6c 61 79 73 20 74 68 65 |    disp|lays the|
|00004030| 20 67 6c 6f 62 61 6c 20 | 74 61 67 20 69 6e 66 6f | global |tag info|
|00004040| 72 6d 61 74 69 6f 6e 20 | 67 65 6e 65 72 61 74 65 |rmation |generate|
|00004050| 64 20 62 79 20 74 61 67 | 20 62 79 20 44 4c 4c 0a |d by tag| by DLL.|
|00004060| 00 00 00 00 20 20 2d 54 | 20 20 20 20 20 20 20 20 |....  -T|        |
|00004070| 64 69 73 70 6c 61 79 73 | 20 74 68 65 20 70 73 65 |displays| the pse|
|00004080| 75 64 6f 20 74 61 67 20 | 69 6e 66 6f 72 6d 61 74 |udo tag |informat|
|00004090| 69 6f 6e 20 66 6f 72 20 | 74 68 65 20 73 70 65 63 |ion for |the spec|
|000040a0| 69 66 69 65 64 20 68 65 | 61 70 28 73 29 2e 0a 00 |ified he|ap(s)...|
|000040b0| 20 20 2d 74 20 20 20 20 | 20 20 20 20 64 69 73 70 |  -t    |    disp|
|000040c0| 6c 61 79 73 20 74 68 65 | 20 74 61 67 20 69 6e 66 |lays the| tag inf|
|000040d0| 6f 72 6d 61 74 69 6f 6e | 20 66 6f 72 20 74 68 65 |ormation| for the|
|000040e0| 20 73 70 65 63 69 66 69 | 65 64 20 68 65 61 70 28 | specifi|ed heap(|
|000040f0| 73 29 2e 0a 00 00 00 00 | 20 20 2d 6d 20 20 20 20 |s)......|  -m    |
|00004100| 20 20 20 20 64 69 73 70 | 6c 61 79 73 20 61 6c 6c |    disp|lays all|
|00004110| 20 74 68 65 20 73 65 67 | 6d 65 6e 74 20 65 6e 74 | the seg|ment ent|
|00004120| 72 69 65 73 20 66 6f 72 | 20 74 68 65 20 73 70 65 |ries for| the spe|
|00004130| 63 69 66 69 65 64 20 68 | 65 61 70 28 73 29 2e 0a |cified h|eap(s)..|
|00004140| 00 00 00 00 20 20 2d 6b | 20 20 20 20 20 20 20 20 |....  -k|        |
|00004150| 64 69 73 70 6c 61 79 73 | 20 61 6e 79 20 61 73 73 |displays| any ass|
|00004160| 6f 63 69 61 74 65 64 20 | 73 74 61 63 6b 20 62 61 |ociated |stack ba|
|00004170| 63 6b 20 74 72 61 63 65 | 20 66 6f 72 20 65 61 63 |ck trace| for eac|
|00004180| 68 20 65 6e 74 72 79 20 | 28 78 38 36 20 6f 6e 6c |h entry |(x86 onl|
|00004190| 79 29 2e 0a 00 00 00 00 | 20 20 2d 66 20 20 20 20 |y)......|  -f    |
|000041a0| 20 20 20 20 64 69 73 70 | 6c 61 79 73 20 61 6c 6c |    disp|lays all|
|000041b0| 20 74 68 65 20 66 72 65 | 65 20 6c 69 73 74 20 65 | the fre|e list e|
|000041c0| 6e 74 72 69 65 73 20 66 | 6f 72 20 74 68 65 20 73 |ntries f|or the s|
|000041d0| 70 65 63 69 66 69 65 64 | 20 68 65 61 70 28 73 29 |pecified| heap(s)|
|000041e0| 2e 0a 00 00 20 20 2d 68 | 20 20 20 20 20 20 20 20 |....  -h|        |
|000041f0| 64 69 73 70 6c 61 79 73 | 20 61 6c 6c 20 74 68 65 |displays| all the|
|00004200| 20 65 6e 74 72 69 65 73 | 20 66 6f 72 20 74 68 65 | entries| for the|
|00004210| 20 73 70 65 63 69 66 69 | 65 64 20 68 65 61 70 28 | specifi|ed heap(|
|00004220| 73 29 2e 0a 00 00 00 00 | 20 20 20 20 20 20 20 20 |s)......|        |
|00004230| 20 20 20 20 54 68 69 73 | 20 63 61 6e 20 74 61 6b |    This| can tak|
|00004240| 65 20 61 20 6c 6f 6e 67 | 20 74 69 6d 65 2e 0a 00 |e a long| time...|
|00004250| 20 20 2d 61 20 20 20 20 | 20 20 20 20 64 69 73 70 |  -a    |    disp|
|00004260| 6c 61 79 73 20 61 6c 6c | 20 74 68 65 20 69 6e 66 |lays all| the inf|
|00004270| 6f 72 6d 61 74 69 6f 6e | 20 66 6f 72 20 74 68 65 |ormation| for the|
|00004280| 20 73 70 65 63 69 66 69 | 65 64 20 68 65 61 70 28 | specifi|ed heap(|
|00004290| 73 29 2e 0a 00 00 00 00 | 20 20 2d 76 20 20 20 20 |s)......|  -v    |
|000042a0| 20 20 20 20 76 61 6c 69 | 64 61 74 65 73 20 74 68 |    vali|dates th|
|000042b0| 65 20 73 70 65 63 69 66 | 69 65 64 20 68 65 61 70 |e specif|ied heap|
|000042c0| 28 73 29 2e 0a 00 00 00 | 20 20 2d 3f 20 20 20 20 |(s).....|  -?    |
|000042d0| 20 20 20 20 64 69 73 70 | 6c 61 79 73 20 74 68 69 |    disp|lays thi|
|000042e0| 73 20 68 65 6c 70 20 6d | 65 73 73 61 67 65 2e 0a |s help m|essage..|
|000042f0| 00 00 00 00 20 20 20 20 | 20 20 20 20 20 20 20 20 |....    |        |
|00004300| 2d 31 20 69 73 20 74 68 | 65 20 64 65 66 61 75 6c |-1 is th|e defaul|
|00004310| 74 20 61 6e 64 20 73 70 | 65 63 69 66 69 65 73 20 |t and sp|ecifies |
|00004320| 74 68 65 20 70 72 6f 63 | 65 73 73 20 68 65 61 70 |the proc|ess heap|
|00004330| 2e 0a 00 00 20 20 20 20 | 20 20 20 20 20 20 20 20 |....    |        |
|00004340| 5a 65 72 6f 20 73 70 65 | 63 69 66 69 65 73 20 61 |Zero spe|cifies a|
|00004350| 6c 6c 20 68 65 61 70 73 | 20 69 6e 20 74 68 65 20 |ll heaps| in the |
|00004360| 70 72 6f 63 65 73 73 2e | 0a 00 00 00 20 20 61 64 |process.|....  ad|
|00004370| 64 72 65 73 73 20 2d 20 | 73 70 65 63 69 66 69 65 |dress - |specifie|
|00004380| 73 20 65 69 74 68 65 72 | 20 61 20 68 65 61 70 20 |s either| a heap |
|00004390| 6e 75 6d 62 65 72 20 28 | 31 2d 6e 29 2c 20 6f 72 |number (|1-n), or|
|000043a0| 20 61 20 68 65 61 70 20 | 61 64 64 72 65 73 73 2e | a heap |address.|
|000043b0| 0a 00 00 00 20 20 20 20 | 20 20 20 20 20 20 20 20 |....    |        |
|000043c0| 20 20 20 20 20 20 20 20 | 20 20 20 5b 2d 42 20 5b |        |   [-B [|
|000043d0| 61 6c 6c 6f 63 20 7c 20 | 72 65 61 6c 6c 6f 63 20 |alloc | |realloc |
|000043e0| 7c 20 66 72 65 65 5d 5d | 0a 00 00 00 20 20 20 20 || free]]|....    |
|000043f0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00004400| 20 20 20 5b 2d 62 20 5b | 61 6c 6c 6f 63 20 7c 20 |   [-b [|alloc | |
|00004410| 72 65 61 6c 6c 6f 63 20 | 7c 20 66 72 65 65 5d 20 |realloc || free] |
|00004420| 5b 74 61 67 5d 5d 0a 00 | 20 20 20 20 20 20 20 20 |[tag]]..|        |
|00004430| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 5b |        |       [|
|00004440| 2d 64 20 7c 20 2d 44 20 | 7c 20 2d 65 20 7c 20 2d |-d | -D || -e | -|
|00004450| 45 5d 0a 00 75 73 61 67 | 65 3a 20 21 68 65 61 70 |E]..usag|e: !heap|
|00004460| 20 5b 61 64 64 72 65 73 | 73 5d 20 5b 2d 3f 20 7c | [addres|s] [-? ||
|00004470| 20 2d 68 5d 20 5b 2d 76 | 5d 20 5b 5b 2d 61 5d 20 | -h] [-v|] [[-a] |
|00004480| 7c 20 5b 2d 68 5d 20 5b | 2d 66 5d 20 5b 2d 6d 5d || [-h] [|-f] [-m]|
|00004490| 5d 20 5b 2d 74 5d 20 5b | 2d 73 5d 0a 00 00 00 00 |] [-t] [|-s].....|
|000044a0| 48 45 41 50 45 58 54 3a | 20 55 6e 61 62 6c 65 20 |HEAPEXT:| Unable |
|000044b0| 74 6f 20 61 63 63 65 73 | 73 20 76 61 6c 75 65 20 |to acces|s value |
|000044c0| 6f 66 20 4e 54 44 4c 4c | 21 4e 74 47 6c 6f 62 61 |of NTDLL|!NtGloba|
|000044d0| 6c 46 6c 61 67 2e 0a 00 | 48 45 41 50 45 58 54 3a |lFlag...|HEAPEXT:|
|000044e0| 20 4d 75 73 74 20 73 70 | 65 63 69 66 79 20 65 69 | Must sp|ecify ei|
|000044f0| 74 68 65 72 20 68 65 61 | 70 20 69 6e 64 65 78 20 |ther hea|p index |
|00004500| 6f 72 20 68 65 61 70 20 | 61 64 64 72 65 73 73 20 |or heap |address |
|00004510| 74 6f 20 2d 62 20 63 6f | 6d 6d 61 6e 64 2e 0a 00 |to -b co|mmand...|
|00004520| 48 45 41 50 45 58 54 3a | 20 55 6e 61 62 6c 65 20 |HEAPEXT:| Unable |
|00004530| 74 6f 20 25 73 20 68 65 | 61 70 20 62 72 65 61 6b |to %s he|ap break|
|00004540| 70 6f 69 6e 74 20 64 75 | 65 20 74 6f 20 6d 69 73 |point du|e to mis|
|00004550| 73 69 6e 67 20 6f 72 20 | 69 6e 76 61 6c 69 64 20 |sing or |invalid |
|00004560| 4e 54 44 4c 4c 20 73 79 | 6d 62 6f 6c 73 2e 0a 00 |NTDLL sy|mbols...|
|00004570| 72 65 6d 6f 76 65 00 00 | 73 65 74 00 48 45 41 50 |remove..|set.HEAP|
|00004580| 45 58 54 3a 20 2d 64 2c | 20 2d 44 2c 20 2d 65 2c |EXT: -d,| -D, -e,|
|00004590| 20 2d 45 20 61 6e 64 20 | 2d 43 20 66 6c 61 67 73 | -E and |-C flags|
|000045a0| 20 61 72 65 20 6d 75 74 | 75 61 6c 6c 79 20 65 78 | are mut|ually ex|
|000045b0| 63 6c 75 73 69 76 65 0a | 00 00 00 00 61 72 72 61 |clusive.|....arra|
|000045c0| 79 20 6f 66 20 70 72 6f | 63 65 73 73 20 68 65 61 |y of pro|cess hea|
|000045d0| 70 73 20 69 73 20 69 6e | 61 63 63 65 73 73 61 62 |ps is in|accessab|
|000045e0| 6c 65 0a 00 59 6f 75 20 | 6d 75 73 74 20 73 70 65 |le..You |must spe|
|000045f0| 63 69 66 79 20 74 68 65 | 20 61 63 74 75 61 6c 20 |cify the| actual |
|00004600| 68 65 61 70 20 61 64 64 | 72 65 73 73 20 73 69 6e |heap add|ress sin|
|00004610| 63 65 0a 00 53 74 6f 70 | 20 69 6e 73 69 64 65 20 |ce..Stop| inside |
|00004620| 68 65 61 70 20 6d 61 6e | 61 67 65 72 2e 2e 2e 76 |heap man|ager...v|
|00004630| 61 6c 69 64 61 74 69 6e | 67 20 68 65 61 70 20 61 |alidatin|g heap a|
|00004640| 64 64 72 65 73 73 20 30 | 78 25 78 0a 00 00 00 00 |ddress 0|x%x.....|
|00004650| 25 30 38 6c 78 3a 20 55 | 6e 61 62 6c 65 20 74 6f |%08lx: U|nable to|
|00004660| 20 72 65 61 64 20 50 72 | 6f 63 65 73 73 48 65 61 | read Pr|ocessHea|
|00004670| 70 73 20 61 72 72 61 79 | 0a 00 00 00 55 6e 61 62 |ps array|....Unab|
|00004680| 6c 65 20 74 6f 20 61 6c | 6c 6f 63 61 74 65 20 6d |le to al|locate m|
|00004690| 65 6d 6f 72 79 20 74 6f | 20 68 6f 6c 64 20 50 72 |emory to| hold Pr|
|000046a0| 6f 63 65 73 73 48 65 61 | 70 73 20 61 72 72 61 79 |ocessHea|ps array|
|000046b0| 0a 00 00 00 55 6e 61 62 | 6c 65 20 74 6f 20 67 65 |....Unab|le to ge|
|000046c0| 74 20 61 64 64 72 65 73 | 73 20 6f 66 20 50 72 6f |t addres|s of Pro|
|000046d0| 63 65 73 73 48 65 61 70 | 73 20 61 72 72 61 79 0a |cessHeap|s array.|
|000046e0| 00 00 00 00 4e 6f 20 68 | 65 61 70 73 20 74 6f 20 |....No h|eaps to |
|000046f0| 64 69 73 70 6c 61 79 2e | 0a 00 00 00 20 00 00 00 |display.|.... ...|
|00004700| 25 6c 78 00 48 45 41 50 | 45 58 54 3a 20 54 6f 6f |%lx.HEAP|EXT: Too|
|00004710| 20 6d 61 6e 79 20 70 61 | 72 61 6d 65 74 65 72 73 | many pa|rameters|
|00004720| 20 73 70 65 63 69 66 69 | 65 64 20 74 6f 20 2d 42 | specifi|ed to -B|
|00004730| 20 73 77 69 74 63 68 0a | 00 00 00 00 48 45 41 50 | switch.|....HEAP|
|00004740| 45 58 54 3a 20 49 6e 76 | 61 6c 69 64 20 66 69 72 |EXT: Inv|alid fir|
|00004750| 73 74 20 61 72 67 75 6d | 65 6e 74 20 74 6f 20 2d |st argum|ent to -|
|00004760| 62 20 73 77 69 74 63 68 | 2e 0a 00 00 66 72 65 65 |b switch|....free|
|00004770| 00 00 00 00 72 65 61 6c | 6c 6f 63 00 61 6c 6c 6f |....real|loc.allo|
|00004780| 63 00 00 00 48 45 41 50 | 45 58 54 3a 20 49 6e 76 |c...HEAP|EXT: Inv|
|00004790| 61 6c 69 64 20 73 65 63 | 6f 6e 64 20 61 72 67 75 |alid sec|ond argu|
|000047a0| 6d 65 6e 74 20 74 6f 20 | 2d 62 20 73 77 69 74 63 |ment to |-b switc|
|000047b0| 68 2e 0a 00 25 77 73 00 | 48 45 41 50 45 58 54 3a |h...%ws.|HEAPEXT:|
|000047c0| 20 54 6f 6f 20 6d 61 6e | 79 20 70 61 72 61 6d 65 | Too man|y parame|
|000047d0| 74 65 72 73 20 73 70 65 | 63 69 66 69 65 64 20 74 |ters spe|cified t|
|000047e0| 6f 20 2d 62 20 73 77 69 | 74 63 68 0a 00 00 00 00 |o -b swi|tch.....|
|000047f0| 48 45 41 50 45 58 54 3a | 20 21 68 65 61 70 20 69 |HEAPEXT:| !heap i|
|00004800| 6e 76 61 6c 69 64 20 6f | 70 74 69 6f 6e 20 66 6c |nvalid o|ption fl|
|00004810| 61 67 20 27 2d 25 63 27 | 0a 00 00 00 48 45 41 50 |ag '-%c'|....HEAP|
|00004820| 45 58 54 3a 20 55 6e 61 | 62 6c 65 20 74 6f 20 67 |EXT: Una|ble to g|
|00004830| 65 74 20 61 64 64 72 65 | 73 73 20 6f 66 20 4e 54 |et addre|ss of NT|
|00004840| 44 4c 4c 21 52 74 6c 70 | 53 74 61 63 6b 54 72 61 |DLL!Rtlp|StackTra|
|00004850| 63 65 44 61 74 61 42 61 | 73 65 0a 00 4e 54 44 4c |ceDataBa|se..NTDL|
|00004860| 4c 21 52 74 6c 70 53 74 | 61 63 6b 54 72 61 63 65 |L!RtlpSt|ackTrace|
|00004870| 44 61 74 61 42 61 73 65 | 00 00 00 00 48 45 41 50 |DataBase|....HEAP|
|00004880| 45 58 54 3a 20 55 6e 61 | 62 6c 65 20 74 6f 20 67 |EXT: Una|ble to g|
|00004890| 65 74 20 61 64 64 72 65 | 73 73 20 6f 66 20 4e 54 |et addre|ss of NT|
|000048a0| 44 4c 4c 21 52 74 6c 70 | 48 65 61 70 53 74 6f 70 |DLL!Rtlp|HeapStop|
|000048b0| 4f 6e 0a 00 4e 54 44 4c | 4c 21 52 74 6c 70 48 65 |On..NTDL|L!RtlpHe|
|000048c0| 61 70 53 74 6f 70 4f 6e | 00 00 00 00 48 45 41 50 |apStopOn|....HEAP|
|000048d0| 45 58 54 3a 20 55 6e 61 | 62 6c 65 20 74 6f 20 67 |EXT: Una|ble to g|
|000048e0| 65 74 20 61 64 64 72 65 | 73 73 20 6f 66 20 2a 4e |et addre|ss of *N|
|000048f0| 54 44 4c 4c 21 52 74 6c | 70 47 6c 6f 62 61 6c 54 |TDLL!Rtl|pGlobalT|
|00004900| 61 67 48 65 61 70 2e 0a | 00 00 00 00 48 45 41 50 |agHeap..|....HEAP|
|00004910| 45 58 54 3a 20 55 6e 61 | 62 6c 65 20 74 6f 20 67 |EXT: Una|ble to g|
|00004920| 65 74 20 61 64 64 72 65 | 73 73 20 6f 66 20 4e 54 |et addre|ss of NT|
|00004930| 44 4c 4c 21 52 74 6c 70 | 47 6c 6f 62 61 6c 54 61 |DLL!Rtlp|GlobalTa|
|00004940| 67 48 65 61 70 2e 0a 00 | 4e 54 44 4c 4c 21 52 74 |gHeap...|NTDLL!Rt|
|00004950| 6c 70 47 6c 6f 62 61 6c | 54 61 67 48 65 61 70 00 |lpGlobal|TagHeap.|
|00004960| 48 45 41 50 45 58 54 3a | 20 55 6e 61 62 6c 65 20 |HEAPEXT:| Unable |
|00004970| 74 6f 20 67 65 74 20 61 | 64 64 72 65 73 73 20 6f |to get a|ddress o|
|00004980| 66 20 4e 54 44 4c 4c 21 | 52 74 6c 70 48 65 61 70 |f NTDLL!|RtlpHeap|
|00004990| 49 6e 76 61 6c 69 64 42 | 61 64 41 64 64 72 65 73 |InvalidB|adAddres|
|000049a0| 73 2e 0a 00 4e 54 44 4c | 4c 21 52 74 6c 70 48 65 |s...NTDL|L!RtlpHe|
|000049b0| 61 70 49 6e 76 61 6c 69 | 64 42 61 64 41 64 64 72 |apInvali|dBadAddr|
|000049c0| 65 73 73 00 48 45 41 50 | 45 58 54 3a 20 55 6e 61 |ess.HEAP|EXT: Una|
|000049d0| 62 6c 65 20 74 6f 20 67 | 65 74 20 61 64 64 72 65 |ble to g|et addre|
|000049e0| 73 73 20 6f 66 20 4e 54 | 44 4c 4c 21 52 74 6c 70 |ss of NT|DLL!Rtlp|
|000049f0| 48 65 61 70 49 6e 76 61 | 6c 69 64 42 72 65 61 6b |HeapInva|lidBreak|
|00004a00| 50 6f 69 6e 74 2e 0a 00 | 4e 54 44 4c 4c 21 52 74 |Point...|NTDLL!Rt|
|00004a10| 6c 70 48 65 61 70 49 6e | 76 61 6c 69 64 42 72 65 |lpHeapIn|validBre|
|00004a20| 61 6b 50 6f 69 6e 74 00 | 48 45 41 50 45 58 54 3a |akPoint.|HEAPEXT:|
|00004a30| 20 55 6e 61 62 6c 65 20 | 74 6f 20 67 65 74 20 61 | Unable |to get a|
|00004a40| 64 64 72 65 73 73 20 6f | 66 20 4e 54 44 4c 4c 21 |ddress o|f NTDLL!|
|00004a50| 4e 74 47 6c 6f 62 61 6c | 46 6c 61 67 2e 0a 00 00 |NtGlobal|Flag....|
|00004a60| 4e 54 44 4c 4c 21 4e 74 | 47 6c 6f 62 61 6c 46 6c |NTDLL!Nt|GlobalFl|
|00004a70| 61 67 00 00 2d 70 00 00 | 4f 00 62 00 6a 00 65 00 |ag..-p..|O.b.j.e.|
|00004a80| 63 00 74 00 73 00 00 00 | 56 00 69 00 72 00 74 00 |c.t.s...|V.i.r.t.|
|00004a90| 75 00 61 00 6c 00 41 00 | 6c 00 6c 00 6f 00 63 00 |u.a.l.A.|l.l.o.c.|
|00004aa0| 00 00 00 00 4f 00 62 00 | 6a 00 65 00 63 00 74 00 |....O.b.|j.e.c.t.|
|00004ab0| 73 00 3d 00 25 00 34 00 | 75 00 00 00 4f 00 62 00 |s.=.%.4.|u...O.b.|
|00004ac0| 6a 00 65 00 63 00 74 00 | 73 00 3e 00 25 00 34 00 |j.e.c.t.|s.>.%.4.|
|00004ad0| 75 00 00 00 20 20 20 20 | 55 6e 61 62 6c 65 64 20 |u...    |Unabled |
|00004ae0| 74 6f 20 72 65 61 64 20 | 48 45 41 50 5f 45 4e 54 |to read |HEAP_ENT|
|00004af0| 52 59 20 73 74 72 75 63 | 74 75 72 65 20 61 74 20 |RY struc|ture at |
|00004b00| 25 30 38 78 0a 00 00 00 | 20 20 20 20 20 20 20 20 |%08x....|        |
|00004b10| 25 30 38 78 3a 20 25 30 | 35 78 20 2e 20 25 30 35 |%08x: %0|5x . %05|
|00004b20| 78 20 5b 25 30 32 78 5d | 20 2d 20 66 72 65 65 0a |x [%02x]| - free.|
|00004b30| 00 00 00 00 20 20 20 20 | 46 72 65 65 4c 69 73 74 |....    |FreeList|
|00004b40| 5b 20 25 30 32 78 20 5d | 20 61 74 20 25 30 38 78 |[ %02x ]| at %08x|
|00004b50| 3a 20 25 30 38 78 20 2e | 20 25 30 38 78 0a 00 00 |: %08x .| %08x...|
|00004b60| 25 20 38 78 20 20 20 20 | 25 20 38 78 20 20 20 20 |% 8x    |% 8x    |
|00004b70| 20 20 25 20 38 78 20 20 | 25 20 38 78 0d 00 00 00 |  % 8x  |% 8x....|
|00004b80| 43 6f 6d 6d 69 74 74 65 | 64 20 20 20 41 6c 6c 6f |Committe|d   Allo|
|00004b90| 63 61 74 65 64 20 20 20 | 20 20 46 72 65 65 20 20 |cated   |  Free  |
|00004ba0| 20 20 20 20 4f 76 65 72 | 48 65 61 64 0a 00 00 00 |    Over|Head....|
|00004bb0| 20 20 20 20 46 72 65 65 | 4c 69 73 74 20 55 73 61 |    Free|List Usa|
|00004bc0| 67 65 3a 20 20 20 20 20 | 20 25 30 38 78 20 25 30 |ge:     | %08x %0|
|00004bd0| 38 78 20 25 30 38 78 20 | 25 30 38 78 0a 00 00 00 |8x %08x |%08x....|
|00004be0| 20 20 20 20 55 6e 61 62 | 6c 65 64 20 74 6f 20 72 |    Unab|led to r|
|00004bf0| 65 61 64 20 48 45 41 50 | 5f 55 43 52 5f 53 45 47 |ead HEAP|_UCR_SEG|
|00004c00| 4d 45 4e 54 20 73 74 72 | 75 63 74 75 72 65 20 61 |MENT str|ucture a|
|00004c10| 74 20 25 30 38 78 0a 00 | 20 20 20 20 55 43 52 53 |t %08x..|    UCRS|
|00004c20| 65 67 6d 65 6e 74 20 2d | 20 25 30 38 78 3a 20 25 |egment -| %08x: %|
|00004c30| 30 38 78 20 2e 20 25 30 | 38 78 0a 00 20 20 20 20 |08x . %0|8x..    |
|00004c40| 55 43 52 20 46 72 65 65 | 4c 69 73 74 3a 20 20 20 |UCR Free|List:   |
|00004c50| 20 20 20 20 20 25 70 0a | 00 00 00 00 20 20 20 20 |     %p.|....    |
|00004c60| 20 20 20 20 2a 2a 2a 2a | 20 4c 69 73 74 20 69 73 |    ****| List is|
|00004c70| 20 68 6f 73 65 64 0a 00 | 20 20 20 20 55 6e 61 62 | hosed..|    Unab|
|00004c80| 6c 65 20 74 6f 20 72 65 | 61 64 20 5f 48 45 41 50 |le to re|ad _HEAP|
|00004c90| 5f 56 49 52 54 55 41 4c | 5f 41 4c 4c 4f 43 5f 45 |_VIRTUAL|_ALLOC_E|
|00004ca0| 4e 54 52 59 20 73 74 72 | 75 63 74 75 72 65 20 61 |NTRY str|ucture a|
|00004cb0| 74 20 25 70 0a 00 00 00 | 2c 20 75 73 65 72 20 66 |t %p....|, user f|
|00004cc0| 6c 61 67 73 20 28 25 78 | 29 00 00 00 20 28 54 61 |lags (%x|)... (Ta|
|00004cd0| 67 20 25 78 29 00 00 00 | 20 28 25 77 73 29 00 00 |g %x)...| (%ws)..|
|00004ce0| 20 28 48 61 6e 64 6c 65 | 20 25 30 38 78 29 00 00 | (Handle| %08x)..|
|00004cf0| 2c 20 74 61 69 6c 20 66 | 69 6c 6c 00 20 20 20 20 |, tail f|ill.    |
|00004d00| 20 20 20 20 25 30 38 78 | 3a 20 25 30 38 78 20 5b |    %08x|: %08x [|
|00004d10| 25 30 32 78 5d 20 2d 20 | 62 75 73 79 20 28 25 78 |%02x] - |busy (%x|
|00004d20| 29 00 00 00 20 20 20 20 | 56 69 72 74 75 61 6c 20 |)...    |Virtual |
|00004d30| 41 6c 6c 6f 63 20 4c 69 | 73 74 3a 20 20 25 30 38 |Alloc Li|st:  %08|
|00004d40| 78 0a 00 00 20 20 20 20 | 50 73 75 65 64 6f 54 61 |x...    |PsuedoTa|
|00004d50| 67 20 45 6e 74 72 69 65 | 73 3a 20 20 20 25 30 38 |g Entrie|s:   %08|
|00004d60| 78 0a 00 00 20 20 20 20 | 54 61 67 20 45 6e 74 72 |x...    |Tag Entr|
|00004d70| 69 65 73 3a 20 20 20 20 | 20 20 20 20 20 25 30 38 |ies:    |     %08|
|00004d80| 78 0a 00 00 20 20 20 20 | 4d 61 78 69 6d 75 6d 20 |x...    |Maximum |
|00004d90| 54 61 67 49 6e 64 65 78 | 3a 20 20 20 20 25 30 34 |TagIndex|:    %04|
|00004da0| 78 0a 00 00 20 20 20 20 | 4e 65 78 74 20 54 61 67 |x...    |Next Tag|
|00004db0| 49 6e 64 65 78 3a 20 20 | 20 20 20 20 20 25 30 34 |Index:  |     %04|
|00004dc0| 78 0a 00 00 20 20 20 20 | 4c 6f 63 6b 20 56 61 72 |x...    |Lock Var|
|00004dd0| 69 61 62 6c 65 20 61 74 | 3a 20 20 20 20 25 30 38 |iable at|:    %08|
|00004de0| 78 0a 00 00 20 20 20 20 | 4d 61 78 2e 20 41 6c 6c |x...    |Max. All|
|00004df0| 6f 63 61 74 69 6f 6e 20 | 53 69 7a 65 3a 25 30 38 |ocation |Size:%08|
|00004e00| 78 0a 00 00 20 20 20 20 | 54 6f 74 61 6c 20 46 72 |x...    |Total Fr|
|00004e10| 65 65 20 53 69 7a 65 3a | 20 20 20 20 20 25 30 38 |ee Size:|     %08|
|00004e20| 78 0a 00 00 20 20 20 20 | 44 65 43 6f 6d 6d 69 74 |x...    |DeCommit|
|00004e30| 20 54 6f 74 61 6c 20 54 | 68 72 65 73 3a 25 30 38 | Total T|hres:%08|
|00004e40| 78 0a 00 00 20 20 20 20 | 44 65 43 6f 6d 6d 69 74 |x...    |DeCommit|
|00004e50| 20 42 6c 6f 63 6b 20 54 | 68 72 65 73 3a 25 30 38 | Block T|hres:%08|
|00004e60| 78 0a 00 00 20 20 20 20 | 53 65 67 6d 65 6e 74 20 |x...    |Segment |
|00004e70| 43 6f 6d 6d 69 74 3a 20 | 20 20 20 20 20 25 30 38 |Commit: |     %08|
|00004e80| 78 0a 00 00 20 20 20 20 | 53 65 67 6d 65 6e 74 20 |x...    |Segment |
|00004e90| 52 65 73 65 72 76 65 3a | 20 20 20 20 20 25 30 38 |Reserve:|     %08|
|00004ea0| 78 0a 00 00 20 20 20 20 | 47 72 61 6e 75 6c 61 72 |x...    |Granular|
|00004eb0| 69 74 79 3a 20 20 20 20 | 20 20 20 20 20 25 75 20 |ity:    |     %u |
|00004ec0| 62 79 74 65 73 0a 00 00 | 20 20 20 20 46 6f 72 63 |bytes...|    Forc|
|00004ed0| 65 46 6c 61 67 73 3a 20 | 20 20 20 20 20 20 20 20 |eFlags: |        |
|00004ee0| 20 25 30 38 78 0a 00 00 | 20 20 20 20 46 6c 61 67 | %08x...|    Flag|
|00004ef0| 73 3a 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |s:      |        |
|00004f00| 20 25 30 38 78 0a 00 00 | 20 20 20 20 20 20 20 20 | %08x...|        |
|00004f10| 20 20 20 20 75 6e 61 62 | 6c 65 20 74 6f 20 72 65 |    unab|le to re|
|00004f20| 61 64 20 68 65 61 70 20 | 65 6e 74 72 79 20 61 74 |ad heap |entry at|
|00004f30| 20 25 30 38 78 0a 00 00 | 20 20 20 20 20 20 20 20 | %08x...|        |
|00004f40| 25 70 3a 20 20 20 20 20 | 20 25 30 38 78 20 20 20 |%p:     | %08x   |
|00004f50| 20 20 20 2d 20 75 6e 63 | 6f 6d 6d 69 74 74 65 64 |   - unc|ommitted|
|00004f60| 20 62 79 74 65 73 2e 0a | 00 00 00 00 20 20 20 20 | bytes..|....    |
|00004f70| 48 65 61 70 20 65 6e 74 | 72 69 65 73 20 66 6f 72 |Heap ent|ries for|
|00004f80| 20 53 65 67 6d 65 6e 74 | 25 30 32 75 20 69 6e 20 | Segment|%02u in |
|00004f90| 48 65 61 70 20 25 78 0a | 00 00 00 00 20 20 20 20 |Heap %x.|....    |
|00004fa0| 20 20 20 20 20 20 20 20 | 75 6e 61 62 6c 65 20 74 |        |unable t|
|00004fb0| 6f 20 72 65 61 64 20 75 | 6e 63 6f 6d 6d 69 74 65 |o read u|ncommite|
|00004fc0| 64 20 72 61 6e 67 65 20 | 73 74 72 75 63 74 75 72 |d range |structur|
|00004fd0| 65 20 61 74 20 25 78 0a | 00 00 00 00 20 20 20 20 |e at %x.|....    |
|00004fe0| 20 20 20 20 20 20 20 20 | 25 30 38 78 3a 20 25 30 |        |%08x: %0|
|00004ff0| 38 78 0a 00 20 20 20 20 | 20 20 20 20 20 20 20 20 |8x..    |        |
|00005000| 75 6e 61 62 6c 65 20 74 | 6f 20 61 6c 6c 6f 63 61 |unable t|o alloca|
|00005010| 74 65 20 6d 65 6d 6f 72 | 79 20 66 6f 72 20 72 65 |te memor|y for re|
|00005020| 61 64 69 6e 67 20 75 6e | 63 6f 6d 6d 69 74 74 65 |ading un|committe|
|00005030| 64 20 72 61 6e 67 65 73 | 0a 00 00 00 20 20 20 20 |d ranges|....    |
|00005040| 20 20 20 20 55 6e 43 6f | 6d 6d 69 74 74 65 64 20 |    UnCo|mmitted |
|00005050| 52 61 6e 67 65 73 3a 20 | 28 25 75 29 0a 00 00 00 |Ranges: |(%u)....|
|00005060| 20 20 20 20 20 20 20 20 | 4c 61 72 67 65 73 74 20 |        |Largest |
|00005070| 55 6e 43 6f 6d 6d 69 74 | 3a 25 30 38 78 0a 00 00 |UnCommit|:%08x...|
|00005080| 20 20 20 20 20 20 20 20 | 54 6f 74 61 6c 20 55 6e |        |Total Un|
|00005090| 43 6f 6d 6d 69 74 3a 20 | 20 25 30 38 78 0a 00 00 |Commit: | %08x...|
|000050a0| 20 20 20 20 20 20 20 20 | 54 6f 74 61 6c 20 50 61 |        |Total Pa|
|000050b0| 67 65 73 3a 20 20 20 20 | 20 25 30 38 78 0a 00 00 |ges:    | %08x...|
|000050c0| 20 20 20 20 20 20 20 20 | 4c 61 73 74 20 45 6e 74 |        |Last Ent|
|000050d0| 72 79 3a 20 20 20 20 20 | 20 25 30 38 78 0a 00 00 |ry:     | %08x...|
|000050e0| 20 20 20 20 20 20 20 20 | 46 69 72 73 74 20 45 6e |        |First En|
|000050f0| 74 72 79 3a 20 20 20 20 | 20 25 30 38 78 0a 00 00 |try:    | %08x...|
|00005100| 20 20 20 20 20 20 20 20 | 42 61 73 65 3a 20 20 20 |        |Base:   |
|00005110| 20 20 20 20 20 20 20 20 | 20 25 30 38 78 0a 00 00 |        | %08x...|
|00005120| 20 20 20 20 20 20 20 20 | 46 6c 61 67 73 3a 20 20 |        |Flags:  |
|00005130| 20 20 20 20 20 20 20 20 | 20 25 30 38 78 0a 00 00 |        | %08x...|
|00005140| 20 20 20 20 53 65 67 6d | 65 6e 74 25 30 32 75 20 |    Segm|ent%02u |
|00005150| 61 74 20 25 30 38 78 3a | 0a 00 00 00 48 45 41 50 |at %08x:|....HEAP|
|00005160| 45 58 54 3a 20 55 6e 61 | 62 6c 65 20 74 6f 20 61 |EXT: Una|ble to a|
|00005170| 6c 6c 6f 63 61 74 65 20 | 6d 65 6d 6f 72 79 20 66 |llocate |memory f|
|00005180| 6f 72 20 68 65 61 70 20 | 68 65 61 64 65 72 2e 0a |or heap |header..|
|00005190| 00 00 00 00 48 45 41 50 | 45 58 54 3a 20 55 6e 61 |....HEAP|EXT: Una|
|000051a0| 62 6c 65 20 74 6f 20 61 | 6c 6c 6f 63 61 74 65 20 |ble to a|llocate |
|000051b0| 6d 65 6d 6f 72 79 20 66 | 6f 72 20 68 65 61 70 20 |memory f|or heap |
|000051c0| 68 65 61 64 65 72 20 63 | 6f 70 79 2e 0a 00 00 00 |header c|opy.....|
|000051d0| 48 45 41 50 45 58 54 3a | 20 55 6e 61 62 6c 65 20 |HEAPEXT:| Unable |
|000051e0| 74 6f 20 72 65 61 64 20 | 68 65 61 70 20 68 65 61 |to read |heap hea|
|000051f0| 64 65 72 73 2e 0a 00 00 | 48 45 41 50 45 58 54 3a |ders....|HEAPEXT:|
|00005200| 20 55 6e 61 62 6c 65 20 | 74 6f 20 72 65 61 64 20 | Unable |to read |
|00005210| 63 6f 70 79 20 6f 66 20 | 68 65 61 70 20 68 65 61 |copy of |heap hea|
|00005220| 64 65 72 73 2e 0a 00 00 | 20 20 20 20 54 68 69 73 |ders....|    This|
|00005230| 20 69 73 20 6c 6f 63 61 | 74 65 64 20 69 6e 20 74 | is loca|ted in t|
|00005240| 68 65 20 25 73 20 66 69 | 65 6c 64 20 6f 66 20 74 |he %s fi|eld of t|
|00005250| 68 65 20 68 65 61 70 20 | 68 65 61 64 65 72 2e 0a |he heap |header..|
|00005260| 00 00 00 00 48 45 41 50 | 45 58 54 3a 20 48 65 61 |....HEAP|EXT: Hea|
|00005270| 70 20 25 70 20 2d 20 68 | 65 61 64 65 72 73 20 6d |p %p - h|eaders m|
|00005280| 6f 64 69 66 69 65 64 20 | 28 25 70 20 69 73 20 25 |odified |(%p is %|
|00005290| 78 20 69 6e 73 74 65 61 | 64 20 6f 66 20 25 78 29 |x instea|d of %x)|
|000052a0| 0a 00 00 00 48 65 61 70 | 20 61 74 20 25 70 20 63 |....Heap| at %p c|
|000052b0| 6f 6e 74 61 69 6e 73 20 | 69 6e 76 61 6c 69 64 20 |ontains |invalid |
|000052c0| 73 69 67 6e 61 74 75 72 | 65 2e 0a 00 20 20 20 20 |signatur|e...    |
|000052d0| 55 6e 61 62 6c 65 20 74 | 6f 20 70 6f 72 74 69 6f |Unable t|o portio|
|000052e0| 6e 20 6f 66 20 66 72 65 | 65 20 68 65 61 70 20 62 |n of fre|e heap b|
|000052f0| 6c 6f 63 6b 20 61 74 20 | 25 70 0a 00 20 20 20 20 |lock at |%p..    |
|00005300| 46 72 65 65 20 48 65 61 | 70 20 62 6c 6f 63 6b 20 |Free Hea|p block |
|00005310| 25 70 20 6d 6f 64 69 66 | 69 65 64 20 61 74 20 25 |%p modif|ied at %|
|00005320| 70 20 61 66 74 65 72 20 | 69 74 20 77 61 73 20 66 |p after |it was f|
|00005330| 72 65 65 64 0a 00 00 00 | 20 20 20 20 55 6e 61 62 |reed....|    Unab|
|00005340| 6c 65 20 74 6f 20 72 65 | 61 64 20 74 61 69 6c 20 |le to re|ad tail |
|00005350| 6f 66 20 68 65 61 70 20 | 62 6c 6f 63 6b 20 61 74 |of heap |block at|
|00005360| 20 25 70 0a 00 00 00 00 | 20 20 20 20 48 65 61 70 | %p.....|    Heap|
|00005370| 20 62 6c 6f 63 6b 20 61 | 74 20 25 70 20 6d 6f 64 | block a|t %p mod|
|00005380| 69 66 69 65 64 20 61 74 | 20 25 78 20 70 61 73 74 |ified at| %x past|
|00005390| 20 72 65 71 75 65 73 74 | 65 64 20 73 69 7a 65 20 | request|ed size |
|000053a0| 6f 66 20 25 78 20 28 25 | 78 20 2a 20 38 20 2d 20 |of %x (%|x * 8 - |
|000053b0| 25 78 29 0a 00 00 00 00 | 20 20 20 20 50 72 65 76 |%x).....|    Prev|
|000053c0| 69 6f 75 73 53 69 7a 65 | 20 66 69 65 6c 64 20 64 |iousSize| field d|
|000053d0| 6f 65 73 20 6e 6f 74 20 | 6d 61 74 63 68 20 73 69 |oes not |match si|
|000053e0| 7a 65 20 69 6e 20 70 72 | 65 76 69 6f 75 73 20 65 |ze in pr|evious e|
|000053f0| 6e 74 72 79 0a 00 00 00 | 20 20 20 20 50 72 65 76 |ntry....|    Prev|
|00005400| 69 6f 75 73 53 69 7a 65 | 20 66 69 65 6c 64 20 69 |iousSize| field i|
|00005410| 73 20 6e 6f 6e 2d 7a 65 | 72 6f 20 77 68 65 6e 20 |s non-ze|ro when |
|00005420| 69 74 20 73 68 6f 75 6c | 64 20 62 65 20 7a 65 72 |it shoul|d be zer|
|00005430| 6f 20 74 6f 20 6d 61 72 | 6b 20 66 69 72 73 74 20 |o to mar|k first |
|00005440| 65 6e 74 72 79 0a 00 00 | 20 28 54 61 67 20 25 78 |entry...| (Tag %x|
|00005450| 20 61 74 20 25 70 29 00 | 20 2d 20 75 6e 61 62 6c | at %p).| - unabl|
|00005460| 65 20 74 6f 20 72 65 61 | 64 20 68 65 61 70 20 66 |e to rea|d heap f|
|00005470| 72 65 65 20 65 78 74 72 | 61 20 61 74 20 25 70 00 |ree extr|a at %p.|
|00005480| 20 66 72 65 65 20 66 69 | 6c 6c 00 00 20 2d 20 75 | free fi|ll.. - u|
|00005490| 6e 61 62 6c 65 20 74 6f | 20 72 65 61 64 20 68 65 |nable to| read he|
|000054a0| 61 70 20 65 6e 74 72 79 | 20 65 78 74 72 61 20 61 |ap entry| extra a|
|000054b0| 74 20 25 70 00 00 00 00 | 20 2d 20 62 75 73 79 20 |t %p....| - busy |
|000054c0| 28 25 78 29 00 00 00 00 | 20 20 20 20 20 20 20 20 |(%x)....|        |
|000054d0| 25 70 3a 20 25 30 35 78 | 20 2e 20 25 30 35 78 20 |%p: %05x| . %05x |
|000054e0| 5b 25 30 32 78 5d 00 00 | 2b 30 78 25 70 00 00 00 |[%02x]..|+0x%p...|
|000054f0| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00005500| 25 30 38 78 3a 20 25 73 | 00 00 00 00 20 20 20 20 |%08x: %s|....    |
|00005510| 20 20 20 20 20 20 20 20 | 53 74 61 63 6b 20 74 72 |        |Stack tr|
|00005520| 61 63 65 20 28 25 75 29 | 20 61 74 20 25 78 3a 0a |ace (%u)| at %x:.|
|00005530| 00 00 00 00 20 20 20 20 | 75 6e 61 62 6c 65 20 74 |....    |unable t|
|00005540| 6f 20 72 65 61 64 20 73 | 74 61 63 6b 20 62 61 63 |o read s|tack bac|
|00005550| 6b 20 74 72 61 63 65 20 | 65 6e 74 72 79 20 61 74 |k trace |entry at|
|00005560| 20 25 70 0a 00 00 00 00 | 20 20 20 20 75 6e 61 62 | %p.....|    unab|
|00005570| 6c 65 20 74 6f 20 72 65 | 61 64 20 73 74 61 63 6b |le to re|ad stack|
|00005580| 20 62 61 63 6b 20 74 72 | 61 63 65 20 69 6e 64 65 | back tr|ace inde|
|00005590| 78 20 28 25 78 29 20 65 | 6e 74 72 79 20 61 74 20 |x (%x) e|ntry at |
|000055a0| 25 70 0a 00 42 6f 67 75 | 73 20 68 61 73 68 20 6c |%p..Bogu|s hash l|
|000055b0| 69 6e 6b 20 61 74 20 25 | 78 0a 00 00 25 68 78 28 |ink at %|x...%hx(|
|000055c0| 25 32 64 29 20 3d 20 25 | 6c 73 20 28 25 64 29 25 |%2d) = %|ls (%d)%|
|000055d0| 73 0a 00 00 20 70 69 6e | 6e 65 64 00 20 20 20 20 |s... pin|ned.    |
|000055e0| 20 20 20 20 20 20 00 00 | 42 75 63 6b 65 74 20 25 |      ..|Bucket %|
|000055f0| 32 64 3a 00 61 74 20 25 | 78 0a 00 00 69 73 20 6e |2d:.at %|x...is n|
|00005600| 6f 74 20 69 6e 69 74 69 | 61 6c 69 7a 65 64 2e 0a |ot initi|alized..|
|00005610| 00 00 00 00 00 00 00 00 | ff ff ff ff 65 d7 9c 69 |........|....e..i|
|00005620| 69 d7 9c 69 ff ff ff ff | 5f d7 9c 69 63 d7 9c 69 |i..i....|_..ic..i|
|00005630| ff ff ff ff 45 d7 9c 69 | 49 d7 9c 69 ff ff ff ff |....E..i|I..i....|
|00005640| 3f d7 9c 69 43 d7 9c 69 | ff ff ff ff 39 d7 9c 69 |?..iC..i|....9..i|
|00005650| 3d d7 9c 69 0a 4c 6f 63 | 61 6c 20 61 74 6f 6d 20 |=..i.Loc|al atom |
|00005660| 74 61 62 6c 65 20 00 00 | ff ff ff ff 00 d8 9c 69 |table ..|.......i|
|00005670| 04 d8 9c 69 25 68 78 20 | 2a 2a 2a 20 71 75 65 72 |...i%hx |*** quer|
|00005680| 79 20 66 61 69 6c 65 64 | 20 28 25 78 29 0a 00 00 |y failed| (%x)...|
|00005690| 20 2d 20 63 61 6e 74 20 | 67 65 74 20 69 6e 66 6f | - cant |get info|
|000056a0| 72 6d 61 74 69 6f 6e 20 | 61 62 6f 75 74 20 25 78 |rmation |about %x|
|000056b0| 20 61 74 6f 6d 73 20 2d | 20 25 78 0a 00 00 00 00 | atoms -| %x.....|
|000056c0| 20 2d 20 63 61 6e 74 20 | 61 6c 6c 6f 63 61 74 65 | - cant |allocate|
|000056d0| 20 6d 65 6d 6f 72 79 20 | 66 6f 72 20 25 75 20 61 | memory |for %u a|
|000056e0| 74 6f 6d 73 0a 00 00 00 | 20 2d 20 63 61 6e 74 20 |toms....| - cant |
|000056f0| 67 65 74 20 69 6e 66 6f | 72 6d 61 74 69 6f 6e 20 |get info|rmation |
|00005700| 2d 20 25 78 0a 00 00 00 | 0a 47 6c 6f 62 61 6c 20 |- %x....|.Global |
|00005710| 61 74 6f 6d 20 74 61 62 | 6c 65 20 00 53 79 73 74 |atom tab|le .Syst|
|00005720| 65 6d 52 6f 6f 74 3a 20 | 27 25 77 73 27 0a 00 00 |emRoot: |'%ws'...|
|00005730| 43 72 79 70 74 6f 20 45 | 78 70 6f 6e 65 6e 74 3a |Crypto E|xponent:|
|00005740| 20 25 78 0a 00 00 00 00 | 49 6d 61 67 65 4e 75 6d | %x.....|ImageNum|
|00005750| 62 65 72 20 52 61 6e 67 | 65 3a 20 5b 25 78 20 2e |ber Rang|e: [%x .|
|00005760| 2e 20 25 78 5d 0a 00 00 | 54 69 6d 65 5a 6f 6e 65 |. %x]...|TimeZone|
|00005770| 20 49 64 3a 20 25 78 0a | 00 00 00 00 54 69 63 6b | Id: %x.|....Tick|
|00005780| 43 6f 75 6e 74 3a 20 20 | 20 20 25 78 20 2a 20 25 |Count:  |  %x * %|
|00005790| 30 38 78 0a 00 00 00 00 | 4b 55 53 45 52 5f 53 48 |08x.....|KUSER_SH|
|000057a0| 41 52 45 44 5f 44 41 54 | 41 20 61 74 20 25 78 0a |ARED_DAT|A at %x.|
|000057b0| 00 00 00 00 00 00 00 00 | ff ff ff ff 7f da 9c 69 |........|.......i|
|000057c0| 83 da 9c 69 00 00 00 00 | 79 da 9c 69 7d da 9c 69 |...i....|y..i}..i|
|000057d0| 20 20 20 20 55 6e 61 62 | 6c 65 20 74 6f 20 71 75 |    Unab|le to qu|
|000057e0| 65 72 79 20 70 72 6f 63 | 65 73 73 20 50 45 42 20 |ery proc|ess PEB |
|000057f0| 61 64 64 72 65 73 73 20 | 28 25 78 29 0a 00 00 00 |address |(%x)....|
|00005800| 20 20 20 20 55 6e 61 62 | 6c 65 20 74 6f 20 71 75 |    Unab|le to qu|
|00005810| 65 72 79 20 74 68 72 65 | 61 64 20 54 45 42 20 61 |ery thre|ad TEB a|
|00005820| 64 64 72 65 73 73 20 28 | 25 78 29 0a 00 00 00 00 |ddress (|%x).....|
|00005830| 2a 00 2a 00 2a 00 20 00 | 75 00 6e 00 61 00 62 00 |*.*.*. .|u.n.a.b.|
|00005840| 6c 00 65 00 20 00 74 00 | 6f 00 20 00 72 00 65 00 |l.e. .t.|o. .r.e.|
|00005850| 61 00 64 00 20 00 73 00 | 74 00 72 00 69 00 6e 00 |a.d. .s.|t.r.i.n.|
|00005860| 67 00 00 00 20 20 20 20 | 2a 2a 2a 20 75 6e 61 62 |g...    |*** unab|
|00005870| 6c 65 20 74 6f 20 72 65 | 61 64 20 70 72 6f 63 65 |le to re|ad proce|
|00005880| 73 73 20 70 61 72 61 6d | 65 74 65 72 73 0a 00 00 |ss param|eters...|
|00005890| 20 20 20 20 20 20 20 20 | 45 6e 76 69 72 6f 6e 6d |        |Environm|
|000058a0| 65 6e 74 3a 20 20 30 78 | 25 78 0a 00 20 20 20 20 |ent:  0x|%x..    |
|000058b0| 20 20 20 20 44 6c 6c 50 | 61 74 68 3a 20 20 20 20 |    DllP|ath:    |
|000058c0| 20 20 27 25 77 5a 27 0a | 00 00 00 00 20 20 20 20 |  '%wZ'.|....    |
|000058d0| 20 20 20 20 43 6f 6d 6d | 61 6e 64 4c 69 6e 65 3a |    Comm|andLine:|
|000058e0| 20 20 27 25 77 5a 27 0a | 00 00 00 00 20 20 20 20 |  '%wZ'.|....    |
|000058f0| 20 20 20 20 49 6d 61 67 | 65 46 69 6c 65 3a 20 20 |    Imag|eFile:  |
|00005900| 20 20 27 25 77 5a 27 0a | 00 00 00 00 20 20 20 20 |  '%wZ'.|....    |
|00005910| 20 20 20 20 57 69 6e 64 | 6f 77 54 69 74 6c 65 3a |    Wind|owTitle:|
|00005920| 20 20 27 25 77 5a 27 0a | 00 00 00 00 20 20 20 20 |  '%wZ'.|....    |
|00005930| 50 72 6f 63 65 73 73 50 | 61 72 61 6d 65 74 65 72 |ProcessP|arameter|
|00005940| 73 3a 20 25 78 0a 00 00 | 20 20 20 20 50 72 6f 63 |s: %x...|    Proc|
|00005950| 65 73 73 48 65 61 70 3a | 20 20 20 20 20 20 20 25 |essHeap:|       %|
|00005960| 78 0a 00 00 20 20 20 20 | 53 75 62 53 79 73 74 65 |x...    |SubSyste|
|00005970| 6d 44 61 74 61 3a 20 20 | 20 20 20 25 78 0a 00 00 |mData:  |   %x...|
|00005980| 20 20 20 20 2a 2a 2a 20 | 75 6e 61 62 6c 65 20 74 |    *** |unable t|
|00005990| 6f 20 72 65 61 64 20 4c | 64 72 20 74 61 62 6c 65 |o read L|dr table|
|000059a0| 20 61 74 20 25 70 0a 00 | 20 20 20 20 20 20 20 20 | at %p..|        |
|000059b0| 2a 2a 2a 20 75 6e 61 62 | 6c 65 20 74 6f 20 72 65 |*** unab|le to re|
|000059c0| 61 64 20 4c 44 52 20 65 | 6e 74 72 79 20 61 74 20 |ad LDR e|ntry at |
|000059d0| 25 70 0a 00 25 77 5a 0a | 00 00 00 00 25 30 38 78 |%p..%wZ.|....%08x|
|000059e0| 20 25 2d 32 30 2e 32 30 | 73 20 00 00 25 31 36 6c | %-20.20|s ..%16l|
|000059f0| 78 20 00 00 20 20 20 20 | 20 20 20 20 20 20 20 20 |x ..    |        |
|00005a00| 42 61 73 65 20 54 69 6d | 65 53 74 61 6d 70 20 20 |Base Tim|eStamp  |
|00005a10| 20 20 20 20 20 20 20 20 | 20 20 20 20 20 20 20 20 |        |        |
|00005a20| 20 20 20 4d 6f 64 75 6c | 65 0a 00 00 2a 00 2a 00 |   Modul|e...*.*.|
|00005a30| 2a 00 20 00 75 00 6e 00 | 61 00 62 00 6c 00 65 00 |*. .u.n.|a.b.l.e.|
|00005a40| 20 00 74 00 6f 00 20 00 | 72 00 65 00 61 00 64 00 | .t.o. .|r.e.a.d.|
|00005a50| 20 00 6e 00 61 00 6d 00 | 65 00 20 00 2a 00 2a 00 | .n.a.m.|e. .*.*.|
|00005a60| 2a 00 00 00 20 20 20 20 | 4c 64 72 2e 49 6e 4d 65 |*...    |Ldr.InMe|
|00005a70| 6d 6f 72 79 4f 72 64 65 | 72 4d 6f 64 75 6c 65 4c |moryOrde|rModuleL|
|00005a80| 69 73 74 3a 20 25 78 20 | 2e 20 25 78 0a 00 00 00 |ist: %x |. %x....|
|00005a90| 20 20 20 20 4c 64 72 2e | 49 6e 4c 6f 61 64 4f 72 |    Ldr.|InLoadOr|
|00005aa0| 64 65 72 4d 6f 64 75 6c | 65 4c 69 73 74 3a 20 25 |derModul|eList: %|
|00005ab0| 78 20 2e 20 25 78 0a 00 | 20 20 20 20 4c 64 72 2e |x . %x..|    Ldr.|
|00005ac0| 49 6e 49 6e 69 74 69 61 | 6c 69 7a 61 74 69 6f 6e |InInitia|lization|
|00005ad0| 4f 72 64 65 72 4d 6f 64 | 75 6c 65 4c 69 73 74 3a |OrderMod|uleList:|
|00005ae0| 20 25 78 20 2e 20 25 78 | 0a 00 00 00 20 20 20 20 | %x . %x|....    |
|00005af0| 4c 64 72 2e 49 6e 69 74 | 69 61 6c 69 7a 65 64 3a |Ldr.Init|ialized:|
|00005b00| 20 25 73 0a 00 00 00 00 | 20 20 20 20 49 6d 61 67 | %s.....|    Imag|
|00005b10| 65 42 61 73 65 41 64 64 | 72 65 73 73 3a 20 20 20 |eBaseAdd|ress:   |
|00005b20| 20 20 20 20 20 20 25 70 | 0a 00 00 00 20 20 20 20 |      %p|....    |
|00005b30| 42 65 69 6e 67 44 65 62 | 75 67 67 65 64 3a 20 20 |BeingDeb|ugged:  |
|00005b40| 20 20 20 20 20 20 20 20 | 20 20 25 73 0a 00 00 00 |        |  %s....|
|00005b50| 20 20 20 20 52 65 61 64 | 49 6d 61 67 65 46 69 6c |    Read|ImageFil|
|00005b60| 65 45 78 65 63 4f 70 74 | 69 6f 6e 73 3a 20 25 73 |eExecOpt|ions: %s|
|00005b70| 0a 00 00 00 20 20 20 20 | 49 6e 68 65 72 69 74 65 |....    |Inherite|
|00005b80| 64 41 64 64 72 65 73 73 | 53 70 61 63 65 3a 20 20 |dAddress|Space:  |
|00005b90| 20 20 25 73 0a 00 00 00 | 4e 6f 00 00 59 65 73 00 |  %s....|No..Yes.|
|00005ba0| 20 20 20 20 2a 2a 2a 20 | 75 6e 61 62 6c 65 20 74 |    *** |unable t|
|00005bb0| 6f 20 72 65 61 64 20 50 | 45 42 0a 00 50 45 42 20 |o read P|EB..PEB |
|00005bc0| 61 74 20 25 70 0a 00 00 | 20 20 20 20 48 61 72 64 |at %p...|    Hard|
|00005bd0| 45 72 72 6f 72 73 4d 6f | 64 65 3a 20 20 20 25 75 |ErrorsMo|de:   %u|
|00005be0| 0a 00 00 00 20 20 20 20 | 43 6f 75 6e 74 20 4f 77 |....    |Count Ow|
|00005bf0| 6e 65 64 20 4c 6f 63 6b | 73 3a 25 75 0a 00 00 00 |ned Lock|s:%u....|
|00005c00| 20 20 20 20 4c 61 73 74 | 53 74 61 74 75 73 56 61 |    Last|StatusVa|
|00005c10| 6c 75 65 3a 20 20 25 78 | 0a 00 00 00 20 20 20 20 |lue:  %x|....    |
|00005c20| 4c 61 73 74 45 72 72 6f | 72 56 61 6c 75 65 3a 20 |LastErro|rValue: |
|00005c30| 20 20 25 75 0a 00 00 00 | 20 20 20 20 50 45 42 20 |  %u....|    PEB |
|00005c40| 41 64 64 72 65 73 73 3a | 20 20 20 20 20 20 25 78 |Address:|      %x|
|00005c50| 0a 00 00 00 20 20 20 20 | 54 6c 73 20 53 74 6f 72 |....    |Tls Stor|
|00005c60| 61 67 65 3a 20 20 20 20 | 20 20 25 78 0a 00 00 00 |age:    |  %x....|
|00005c70| 20 20 20 20 52 70 63 48 | 61 6e 64 6c 65 3a 20 20 |    RpcH|andle:  |
|00005c80| 20 20 20 20 20 20 25 78 | 0a 00 00 00 20 20 20 20 |      %x|....    |
|00005c90| 52 65 61 6c 20 43 6c 69 | 65 6e 74 49 64 3a 20 20 |Real Cli|entId:  |
|00005ca0| 20 20 25 78 2e 25 78 0a | 00 00 00 00 20 20 20 20 |  %x.%x.|....    |
|00005cb0| 43 6c 69 65 6e 74 49 64 | 3a 20 20 20 20 20 20 20 |ClientId|:       |
|00005cc0| 20 20 25 78 2e 25 78 0a | 00 00 00 00 20 20 20 20 |  %x.%x.|....    |
|00005cd0| 45 6e 76 69 72 6f 6e 6d | 65 6e 74 50 74 72 3a 20 |Environm|entPtr: |
|00005ce0| 20 20 25 78 0a 00 00 00 | 20 20 20 20 53 65 6c 66 |  %x....|    Self|
|00005cf0| 3a 20 20 20 20 20 20 20 | 20 20 20 20 20 20 25 78 |:       |      %x|
|00005d00| 0a 00 00 00 20 20 20 20 | 41 72 62 69 74 72 61 72 |....    |Arbitrar|
|00005d10| 79 55 73 65 72 3a 20 20 | 20 20 25 78 0a 00 00 00 |yUser:  |  %x....|
|00005d20| 20 20 20 20 46 69 62 65 | 72 44 61 74 61 3a 20 20 |    Fibe|rData:  |
|00005d30| 20 20 20 20 20 20 25 78 | 0a 00 00 00 20 20 20 20 |      %x|....    |
|00005d40| 53 75 62 53 79 73 74 65 | 6d 54 69 62 3a 20 20 20 |SubSyste|mTib:   |
|00005d50| 20 20 25 78 0a 00 00 00 | 20 20 20 20 53 74 61 63 |  %x....|    Stac|
|00005d60| 6b 20 4c 69 6d 69 74 3a | 20 20 20 20 20 20 25 78 |k Limit:|      %x|
|00005d70| 0a 00 00 00 20 20 20 20 | 53 74 61 63 6b 20 42 61 |....    |Stack Ba|
|00005d80| 73 65 3a 20 20 20 20 20 | 20 20 25 78 0a 00 00 00 |se:     |  %x....|
|00005d90| 20 20 20 20 45 78 63 65 | 70 74 69 6f 6e 4c 69 73 |    Exce|ptionLis|
|00005da0| 74 3a 20 20 20 20 25 78 | 0a 00 00 00 20 20 20 20 |t:    %x|....    |
|00005db0| 2a 2a 2a 20 75 6e 61 62 | 6c 65 20 74 6f 20 72 65 |*** unab|le to re|
|00005dc0| 61 64 20 54 45 42 0a 00 | 54 45 42 20 61 74 20 25 |ad TEB..|TEB at %|
|00005dd0| 70 0a 00 00 44 75 6d 70 | 73 20 68 65 61 64 65 72 |p...Dump|s header|
|00005de0| 73 20 66 72 6f 6d 20 61 | 6e 20 69 6d 61 67 65 20 |s from a|n image |
|00005df0| 62 61 73 65 64 20 61 74 | 20 61 64 64 72 65 73 73 |based at| address|
|00005e00| 2e 0a 00 00 55 73 61 67 | 65 3a 20 64 68 20 5b 6f |....Usag|e: dh [o|
|00005e10| 70 74 69 6f 6e 73 5d 20 | 61 64 64 72 65 73 73 0a |ptions] |address.|
|00005e20| 00 00 00 00 4e 6f 20 66 | 69 6c 65 20 68 65 61 64 |....No f|ile head|
|00005e30| 65 72 2e 0a 00 00 00 00 | 0a 2a 2a 2a 0a 2a 2a 2a |er......|.***.***|
|00005e40| 20 53 6f 6d 65 20 73 65 | 63 74 69 6f 6e 20 68 65 | Some se|ction he|
|00005e50| 61 64 65 72 73 20 6d 61 | 79 20 62 65 20 6d 69 73 |aders ma|y be mis|
|00005e60| 73 69 6e 67 20 2a 2a 2a | 0a 2a 2a 2a 0a 0a 00 00 |sing ***|.***....|
|00005e70| 43 61 6e 27 74 20 72 65 | 61 64 20 73 65 63 74 69 |Can't re|ad secti|
|00005e80| 6f 6e 20 68 65 61 64 65 | 72 73 2e 0a 00 00 00 00 |on heade|rs......|
|00005e90| 42 61 64 20 66 69 6c 65 | 20 68 65 61 64 65 72 2e |Bad file| header.|
|00005ea0| 0a 00 00 00 43 61 6e 27 | 74 20 72 65 61 64 20 6f |....Can'|t read o|
|00005eb0| 70 74 69 6f 6e 61 6c 20 | 68 65 61 64 65 72 3a 20 |ptional |header: |
|00005ec0| 65 72 72 6f 72 20 3d 3d | 20 25 64 0a 00 00 00 00 |error ==| %d.....|
|00005ed0| 43 61 6e 27 74 20 72 65 | 61 64 20 66 69 6c 65 20 |Can't re|ad file |
|00005ee0| 68 65 61 64 65 72 3a 20 | 65 72 72 6f 72 20 3d 3d |header: |error ==|
|00005ef0| 20 25 64 0a 00 00 00 00 | ff ff ff ff 00 00 00 00 | %d.....|........|
|00005f00| 8f e5 9c 69 25 38 6c 58 | 20 5b 25 38 6c 58 5d 20 |...i%8lX| [%8lX] |
|00005f10| 61 64 64 72 65 73 73 20 | 5b 73 69 7a 65 5d 20 6f |address |[size] o|
|00005f20| 66 20 25 73 20 44 69 72 | 65 63 74 6f 72 79 0a 00 |f %s Dir|ectory..|
|00005f30| 20 20 20 20 20 20 20 20 | 20 2d 2d 2d 2d 2d 20 6e |        | ----- n|
|00005f40| 65 77 20 2d 2d 2d 2d 2d | 0a 25 70 20 69 6d 61 67 |ew -----|.%p imag|
|00005f50| 65 20 62 61 73 65 0a 25 | 38 6c 58 20 73 65 63 74 |e base.%|8lX sect|
|00005f60| 69 6f 6e 20 61 6c 69 67 | 6e 6d 65 6e 74 0a 25 38 |ion alig|nment.%8|
|00005f70| 6c 58 20 66 69 6c 65 20 | 61 6c 69 67 6e 6d 65 6e |lX file |alignmen|
|00005f80| 74 0a 25 38 68 58 20 73 | 75 62 73 79 73 74 65 6d |t.%8hX s|ubsystem|
|00005f90| 20 28 25 73 29 0a 25 38 | 73 20 6f 70 65 72 61 74 | (%s).%8|s operat|
|00005fa0| 69 6e 67 20 73 79 73 74 | 65 6d 20 76 65 72 73 69 |ing syst|em versi|
|00005fb0| 6f 6e 0a 25 38 73 20 69 | 6d 61 67 65 20 76 65 72 |on.%8s i|mage ver|
|00005fc0| 73 69 6f 6e 0a 25 38 73 | 20 73 75 62 73 79 73 74 |sion.%8s| subsyst|
|00005fd0| 65 6d 20 76 65 72 73 69 | 6f 6e 0a 25 38 6c 58 20 |em versi|on.%8lX |
|00005fe0| 73 69 7a 65 20 6f 66 20 | 69 6d 61 67 65 0a 25 38 |size of |image.%8|
|00005ff0| 6c 58 20 73 69 7a 65 20 | 6f 66 20 68 65 61 64 65 |lX size |of heade|
|00006000| 72 73 0a 25 38 6c 58 20 | 63 68 65 63 6b 73 75 6d |rs.%8lX |checksum|
|00006010| 0a 25 70 20 73 69 7a 65 | 20 6f 66 20 73 74 61 63 |.%p size| of stac|
|00006020| 6b 20 72 65 73 65 72 76 | 65 0a 25 70 20 73 69 7a |k reserv|e.%p siz|
|00006030| 65 20 6f 66 20 73 74 61 | 63 6b 20 63 6f 6d 6d 69 |e of sta|ck commi|
|00006040| 74 0a 25 70 20 73 69 7a | 65 20 6f 66 20 68 65 61 |t.%p siz|e of hea|
|00006050| 70 20 72 65 73 65 72 76 | 65 0a 25 70 20 73 69 7a |p reserv|e.%p siz|
|00006060| 65 20 6f 66 20 68 65 61 | 70 20 63 6f 6d 6d 69 74 |e of hea|p commit|
|00006070| 0a 00 00 00 25 68 75 2e | 25 30 32 68 75 00 00 00 |....%hu.|%02hu...|
|00006080| 20 20 20 20 20 20 20 20 | 20 2d 2d 2d 2d 2d 20 72 |        | ----- r|
|00006090| 6f 6d 20 2d 2d 2d 2d 2d | 0a 25 38 6c 58 20 62 61 |om -----|.%8lX ba|
|000060a0| 73 65 20 6f 66 20 62 73 | 73 0a 25 38 6c 58 20 67 |se of bs|s.%8lX g|
|000060b0| 70 72 20 6d 61 73 6b 0a | 20 20 20 20 20 20 20 20 |pr mask.|        |
|000060c0| 20 63 70 72 20 6d 61 73 | 6b 0a 20 20 20 20 20 20 | cpr mas|k.      |
|000060d0| 20 20 20 25 30 38 6c 58 | 20 25 30 38 6c 58 20 25 |   %08lX| %08lX %|
|000060e0| 30 38 6c 58 20 25 30 38 | 6c 58 0a 25 38 68 58 20 |08lX %08|lX.%8hX |
|000060f0| 67 70 20 76 61 6c 75 65 | 0a 00 00 00 0a 4f 50 54 |gp value|.....OPT|
|00006100| 49 4f 4e 41 4c 20 48 45 | 41 44 45 52 20 56 41 4c |IONAL HE|ADER VAL|
|00006110| 55 45 53 0a 25 38 68 58 | 20 6d 61 67 69 63 20 23 |UES.%8hX| magic #|
|00006120| 0a 25 38 73 20 6c 69 6e | 6b 65 72 20 76 65 72 73 |.%8s lin|ker vers|
|00006130| 69 6f 6e 0a 25 38 6c 58 | 20 73 69 7a 65 20 6f 66 |ion.%8lX| size of|
|00006140| 20 63 6f 64 65 0a 25 38 | 6c 58 20 73 69 7a 65 20 | code.%8|lX size |
|00006150| 6f 66 20 69 6e 69 74 69 | 61 6c 69 7a 65 64 20 64 |of initi|alized d|
|00006160| 61 74 61 0a 25 38 6c 58 | 20 73 69 7a 65 20 6f 66 |ata.%8lX| size of|
|00006170| 20 75 6e 69 6e 69 74 69 | 61 6c 69 7a 65 64 20 64 | uniniti|alized d|
|00006180| 61 74 61 0a 25 38 6c 58 | 20 61 64 64 72 65 73 73 |ata.%8lX| address|
|00006190| 20 6f 66 20 65 6e 74 72 | 79 20 70 6f 69 6e 74 0a | of entr|y point.|
|000061a0| 25 38 6c 58 20 62 61 73 | 65 20 6f 66 20 63 6f 64 |%8lX bas|e of cod|
|000061b0| 65 0a 25 38 6c 58 20 62 | 61 73 65 20 6f 66 20 64 |e.%8lX b|ase of d|
|000061c0| 61 74 61 0a 00 00 00 00 | 25 75 2e 25 30 32 75 00 |ata.....|%u.%02u.|
|000061d0| 20 20 20 20 20 20 20 20 | 20 20 20 20 25 73 0a 00 |        |    %s..|
|000061e0| 42 79 74 65 73 20 72 65 | 76 65 72 73 65 64 00 00 |Bytes re|versed..|
|000061f0| 33 32 20 62 69 74 20 77 | 6f 72 64 20 6d 61 63 68 |32 bit w|ord mach|
|00006200| 69 6e 65 00 44 65 62 75 | 67 20 69 6e 66 6f 72 6d |ine.Debu|g inform|
|00006210| 61 74 69 6f 6e 20 73 74 | 72 69 70 70 65 64 00 00 |ation st|ripped..|
|00006220| 53 79 73 74 65 6d 00 00 | 44 4c 4c 00 52 45 53 45 |System..|DLL.RESE|
|00006230| 52 56 45 44 20 2d 20 55 | 4e 4b 4e 4f 57 4e 00 00 |RVED - U|NKNOWN..|
|00006240| 53 79 6d 62 6f 6c 73 20 | 73 74 72 69 70 70 65 64 |Symbols |stripped|
|00006250| 00 00 00 00 52 65 6c 6f | 63 61 74 69 6f 6e 73 20 |....Relo|cations |
|00006260| 73 74 72 69 70 70 65 64 | 00 00 00 00 45 78 65 63 |stripped|....Exec|
|00006270| 75 74 61 62 6c 65 00 00 | 4c 69 6e 65 20 6e 75 6d |utable..|Line num|
|00006280| 62 65 72 73 20 73 74 72 | 69 70 70 65 64 00 00 00 |bers str|ipped...|
|00006290| 25 38 6c 58 20 66 69 6c | 65 20 70 6f 69 6e 74 65 |%8lX fil|e pointe|
|000062a0| 72 20 74 6f 20 73 79 6d | 62 6f 6c 20 74 61 62 6c |r to sym|bol tabl|
|000062b0| 65 0a 25 38 6c 58 20 6e | 75 6d 62 65 72 20 6f 66 |e.%8lX n|umber of|
|000062c0| 20 73 79 6d 62 6f 6c 73 | 0a 25 38 68 58 20 73 69 | symbols|.%8hX si|
|000062d0| 7a 65 20 6f 66 20 6f 70 | 74 69 6f 6e 61 6c 20 68 |ze of op|tional h|
|000062e0| 65 61 64 65 72 0a 25 38 | 68 58 20 63 68 61 72 61 |eader.%8|hX chara|
|000062f0| 63 74 65 72 69 73 74 69 | 63 73 0a 00 20 25 73 00 |cteristi|cs.. %s.|
|00006300| 46 49 4c 45 20 48 45 41 | 44 45 52 20 56 41 4c 55 |FILE HEA|DER VALU|
|00006310| 45 53 0a 25 38 68 58 20 | 6d 61 63 68 69 6e 65 20 |ES.%8hX |machine |
|00006320| 28 25 73 29 0a 25 38 68 | 58 20 6e 75 6d 62 65 72 |(%s).%8h|X number|
|00006330| 20 6f 66 20 73 65 63 74 | 69 6f 6e 73 0a 25 38 6c | of sect|ions.%8l|
|00006340| 58 20 74 69 6d 65 20 64 | 61 74 65 20 73 74 61 6d |X time d|ate stam|
|00006350| 70 00 00 00 0a 46 69 6c | 65 20 54 79 70 65 3a 20 |p....Fil|e Type: |
|00006360| 43 4f 46 46 20 4f 42 4a | 45 43 54 0a 00 00 00 00 |COFF OBJ|ECT.....|
|00006370| 0a 46 69 6c 65 20 54 79 | 70 65 3a 20 45 58 45 43 |.File Ty|pe: EXEC|
|00006380| 55 54 41 42 4c 45 20 49 | 4d 41 47 45 0a 00 00 00 |UTABLE I|MAGE....|
|00006390| 0a 46 69 6c 65 20 54 79 | 70 65 3a 20 44 4c 4c 0a |.File Ty|pe: DLL.|
|000063a0| 00 00 00 00 0a 46 69 6c | 65 20 54 79 70 65 3a 20 |.....Fil|e Type: |
|000063b0| 52 4f 4d 20 49 4d 41 47 | 45 0a 00 00 0a 46 69 6c |ROM IMAG|E....Fil|
|000063c0| 65 20 54 79 70 65 3a 20 | 55 4e 4b 4e 4f 57 4e 0a |e Type: |UNKNOWN.|
|000063d0| 00 00 00 00 45 78 65 63 | 75 74 65 20 4f 6e 6c 79 |....Exec|ute Only|
|000063e0| 00 00 00 00 52 65 61 64 | 20 4f 6e 6c 79 00 00 00 |....Read| Only...|
|000063f0| 45 78 65 63 75 74 65 20 | 52 65 61 64 00 00 00 00 |Execute |Read....|
+--------+-------------------------+-------------------------+--------+--------+
Only 25.0 KB of data is shown above.