home *** CD-ROM | disk | FTP | other *** search
Unknown | 2004-06-21 | 3.5 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 43 00 6f 00 70 00 79 00 | 4f 00 6e 00 57 00 72 00 |C.o.p.y.|O.n.W.r.|
|00000010| 69 00 74 00 65 00 00 00 | 4b 00 6d 00 78 00 46 00 |i.t.e...|K.m.x.F.|
|00000020| 69 00 6c 00 65 00 4c 00 | 6f 00 67 00 00 00 00 00 |i.l.e.L.|o.g.....|
|00000030| 4b 6d 78 46 69 6c 65 20 | 2d 20 44 72 69 76 65 72 |KmxFile |- Driver|
|00000040| 45 6e 74 72 79 0a 00 00 | 5c 00 44 00 65 00 76 00 |Entry...|\.D.e.v.|
|00000050| 69 00 63 00 65 00 5c 00 | 4b 00 6d 00 78 00 46 00 |i.c.e.\.|K.m.x.F.|
|00000060| 69 00 6c 00 65 00 00 00 | 4b 6d 78 46 69 6c 65 20 |i.l.e...|KmxFile |
|00000070| 2d 20 65 72 72 6f 72 20 | 63 72 65 61 74 69 6e 67 |- error |creating|
|00000080| 20 63 6f 6e 74 72 6f 6c | 20 64 65 76 69 63 65 0a | control| device.|
|00000090| 00 00 00 00 5c 00 44 00 | 6f 00 73 00 44 00 65 00 |....\.D.|o.s.D.e.|
|000000a0| 76 00 69 00 63 00 65 00 | 73 00 5c 00 4b 00 6d 00 |v.i.c.e.|s.\.K.m.|
|000000b0| 78 00 46 00 69 00 6c 00 | 65 00 00 00 4b 6d 78 46 |x.F.i.l.|e...KmxF|
|000000c0| 69 6c 65 20 2d 20 65 72 | 72 6f 72 20 63 72 65 61 |ile - er|ror crea|
|000000d0| 74 69 6e 67 20 73 79 6d | 62 6f 6c 69 63 20 6c 69 |ting sym|bolic li|
|000000e0| 6e 6b 0a 00 44 72 69 76 | 65 72 45 6e 74 72 79 20 |nk..Driv|erEntry |
|000000f0| 2d 20 45 72 72 6f 72 20 | 69 6e 69 74 69 61 6c 69 |- Error |initiali|
|00000100| 7a 69 6e 67 20 63 74 72 | 6c 20 64 65 76 69 63 65 |zing ctr|l device|
|00000110| 0a 00 00 00 44 72 69 76 | 65 72 45 6e 74 72 79 20 |....Driv|erEntry |
|00000120| 2d 20 45 72 72 6f 72 20 | 49 6f 52 65 67 69 73 74 |- Error |IoRegist|
|00000130| 65 72 46 73 52 65 67 69 | 73 74 72 61 74 69 6f 6e |erFsRegi|stration|
|00000140| 43 68 61 6e 67 65 0a 00 | 44 72 69 76 65 72 45 6e |Change..|DriverEn|
|00000150| 74 72 79 20 2d 20 53 75 | 63 63 65 73 73 0a 00 cc |try - Su|ccess...|
|00000160| 83 ec 44 53 55 56 57 e8 | aa f3 ff ff 8b 74 24 5c |..DSUVW.|.....t$\|
|00000170| 8b 5c 24 58 6a 40 68 19 | 00 02 00 33 ed 55 55 55 |.\$Xj@h.|...3.UUU|
|00000180| 56 8d 4c 24 38 89 1d 3c | 76 01 00 e8 ba fc ff ff |V.L$8..<|v.......|
|00000190| 39 6c 24 28 7c 21 68 40 | 76 01 00 68 20 7e 01 00 |9l$(|!h@|v..h ~..|
|000001a0| 8d 4c 24 28 e8 53 fa ff | ff 85 c0 74 0a c7 05 40 |.L$(.S..|...t...@|
|000001b0| 76 01 00 01 00 00 00 68 | 38 7e 01 00 68 48 76 01 |v......h|8~..hHv.|
|000001c0| 00 56 e8 e9 e4 ff ff a1 | 60 76 01 00 68 50 7e 01 |.V......|`v..hP~.|
|000001d0| 00 68 8c 04 01 00 50 68 | 48 76 01 00 e8 7f e2 ff |.h....Ph|Hv......|
|000001e0| ff 8b 35 28 03 01 00 83 | c4 10 68 68 7e 01 00 8d |..5(....|..hh~...|
|000001f0| 4c 24 14 51 ff d6 68 38 | 76 01 00 55 68 00 01 00 |L$.Q..h8|v..Uh...|
|00000200| 00 6a 08 8d 54 24 20 52 | 55 53 ff 15 94 03 01 00 |.j..T$ R|US......|
|00000210| 8b f8 3b fd 7d 3b a1 60 | 76 01 00 68 88 7e 01 00 |..;.};.`|v..h.~..|
|00000220| 68 8c 04 01 00 50 68 48 | 76 01 00 e8 30 e2 ff ff |h....PhH|v...0...|
|00000230| 8b 44 24 34 83 c4 10 3b | c5 74 0b 50 89 6c 24 28 |.D$4...;|.t.P.l$(|
|00000240| ff 15 3c 03 01 00 8b 35 | f0 03 01 00 e9 68 02 00 |..<....5|.....h..|
|00000250| 00 68 b4 7e 01 00 8d 4c | 24 1c 51 ff d6 8b 35 e8 |.h.~...L|$.Q...5.|
|00000260| 03 01 00 8d 54 24 10 52 | 8d 44 24 1c 50 ff d6 85 |....T$.R|.D$.P...|
|00000270| c0 7d 5d 8d 4c 24 18 51 | ff 15 e4 03 01 00 8d 54 |.}].L$.Q|.......T|
|00000280| 24 10 52 8d 44 24 1c 50 | ff d6 8b f0 3b f5 7d 40 |$.R.D$.P|....;.}@|
|00000290| 8b 0d 60 76 01 00 68 dc | 7e 01 00 68 8c 04 01 00 |..`v..h.|~..h....|
|000002a0| 51 68 48 76 01 00 e8 b5 | e1 ff ff 8b 15 38 76 01 |QhHv....|.....8v.|
|000002b0| 00 83 c4 10 52 ff 15 74 | 03 01 00 8d 4c 24 20 e8 |....R..t|....L$ .|
|000002c0| bc cf ff ff 5f 8b c6 5e | 5d 5b 83 c4 44 c2 08 00 |...._..^|][..D...|
|000002d0| b8 70 4c 01 00 8d 4b 38 | 8b d1 89 02 89 42 04 89 |.pL...K8|.....B..|
|000002e0| 42 08 89 42 0c 89 42 10 | 89 42 14 89 42 18 89 42 |B..B..B.|.B..B..B|
|000002f0| 1c 89 42 20 89 42 24 89 | 42 28 89 42 2c 89 42 30 |..B .B$.|B(.B,.B0|
|00000300| 89 42 34 89 42 38 89 42 | 3c 89 42 40 89 42 44 89 |.B4.B8.B|<.B@.BD.|
|00000310| 42 48 89 42 4c 89 42 50 | 89 42 54 89 42 58 89 42 |BH.BL.BP|.BT.BX.B|
|00000320| 5c 89 42 60 89 42 64 89 | 42 68 89 42 6c 68 44 64 |\.B`.Bd.|Bh.BlhDd|
|00000330| 6b 20 6a 70 55 c7 01 10 | 4d 01 00 c7 43 48 f0 4d |k jpU...|M...CH.M|
|00000340| 01 00 c7 43 50 70 4e 01 | 00 c7 43 68 50 4f 01 00 |...CPpN.|..ChPO..|
|00000350| c7 43 40 80 4f 01 00 c7 | 43 6c d0 4f 01 00 ff 15 |.C@.O...|Cl.O....|
|00000360| 64 04 01 00 8b f0 3b f5 | 75 53 a1 38 76 01 00 50 |d.....;.|uS.8v..P|
|00000370| ff 15 74 03 01 00 8b 44 | 24 24 3b c5 74 0b 50 89 |..t....D|$$;.t.P.|
|00000380| 6c 24 28 ff 15 3c 03 01 | 00 8b 44 24 38 3b c5 8b |l$(..<..|..D$8;..|
|00000390| 35 f0 03 01 00 74 0c 50 | ff d6 89 6c 24 38 66 89 |5....t.P|...l$8f.|
|000003a0| 6c 24 34 8b 44 24 40 3b | c5 74 03 50 ff d6 5f 5e |l$4.D$@;|.t.P.._^|
|000003b0| 5d b8 9a 00 00 c0 5b 83 | c4 44 c2 08 00 33 c0 b9 |].....[.|.D...3..|
|000003c0| 1c 00 00 00 8b fe f3 ab | c7 06 70 00 00 00 c7 46 |........|..p....F|
|000003d0| 04 f0 12 01 00 c7 46 08 | 20 13 01 00 c7 46 0c 00 |......F.| ....F..|
|000003e0| 12 01 00 c7 46 10 50 13 | 01 00 c7 46 14 80 13 01 |....F.P.|...F....|
|000003f0| 00 c7 46 18 b0 13 01 00 | c7 46 1c e0 13 01 00 c7 |..F.....|.F......|
|00000400| 46 20 10 14 01 00 c7 46 | 24 40 14 01 00 c7 46 28 |F .....F|$@....F(|
|00000410| 80 12 01 00 c7 46 34 e0 | 16 01 00 c7 46 38 70 14 |.....F4.|....F8p.|
|00000420| 01 00 c7 46 40 a0 14 01 | 00 c7 46 44 d0 14 01 00 |...F@...|..FD....|
|00000430| c7 46 48 00 15 01 00 c7 | 46 4c 30 15 01 00 c7 46 |.FH.....|FL0....F|
|00000440| 50 60 15 01 00 c7 46 54 | 90 15 01 00 c7 46 58 c0 |P`....FT|.....FX.|
|00000450| 15 01 00 c7 46 5c f0 15 | 01 00 c7 46 60 20 16 01 |....F\..|...F` ..|
|00000460| 00 89 73 28 e8 b7 ce ff | ff 8b f8 3b fd 7d 75 8b |..s(....|...;.}u.|
|00000470| 0d 60 76 01 00 68 04 7f | 01 00 68 8c 04 01 00 51 |.`v..h..|..h....Q|
|00000480| 68 48 76 01 00 e8 d6 df | ff ff 83 c4 10 56 8b 35 |hHv.....|.....V.5|
|00000490| f0 03 01 00 89 6b 28 ff | d6 8b 15 38 76 01 00 52 |.....k(.|...8v..R|
|000004a0| ff 15 74 03 01 00 8b 44 | 24 24 3b c5 74 0b 50 89 |..t....D|$$;.t.P.|
|000004b0| 6c 24 28 ff 15 3c 03 01 | 00 8b 44 24 38 3b c5 74 |l$(..<..|..D$8;.t|
|000004c0| 0c 50 ff d6 89 6c 24 38 | 66 89 6c 24 34 8b 44 24 |.P...l$8|f.l$4.D$|
|000004d0| 40 3b c5 74 03 50 ff d6 | 8b c7 5f 5e 5d 5b 83 c4 |@;.t.P..|.._^][..|
|000004e0| 44 c2 08 00 68 60 1f 01 | 00 53 ff 15 e0 03 01 00 |D...h`..|.S......|
|000004f0| 8b f8 3b fd 7d 49 a1 60 | 76 01 00 68 34 7f 01 00 |..;.}I.`|v..h4...|
|00000500| 68 8c 04 01 00 50 68 48 | 76 01 00 e8 50 df ff ff |h....PhH|v...P...|
|00000510| 83 c4 10 56 89 6b 28 ff | 15 f0 03 01 00 8b 0d 38 |...V.k(.|.......8|
|00000520| 76 01 00 51 ff 15 74 03 | 01 00 8d 4c 24 20 e8 4d |v..Q..t.|...L$ .M|
|00000530| cd ff ff 8b c7 5f 5e 5d | 5b 83 c4 44 c2 08 00 be |....._^]|[..D....|
|00000540| 02 00 00 00 55 56 e8 a5 | 9d ff ff 46 83 fe 1a 72 |....UV..|...F...r|
|00000550| f3 a1 38 76 01 00 8b 48 | 1c 81 e1 7f ff ff ff 68 |..8v...H|.......h|
|00000560| 68 7f 01 00 89 48 1c 8b | 15 60 76 01 00 68 8c 04 |h....H..|.`v..h..|
|00000570| 01 00 52 68 48 76 01 00 | e8 e3 de ff ff 8b 44 24 |..RhHv..|......D$|
|00000580| 34 83 c4 10 3b c5 74 0b | 50 89 6c 24 28 ff 15 3c |4...;.t.|P.l$(..<|
|00000590| 03 01 00 8b 44 24 38 3b | c5 8b 35 f0 03 01 00 74 |....D$8;|..5....t|
|000005a0| 0c 50 ff d6 89 6c 24 38 | 66 89 6c 24 34 8b 44 24 |.P...l$8|f.l$4.D$|
|000005b0| 40 3b c5 74 03 50 ff d6 | 5f 5e 5d 33 c0 5b 83 c4 |@;.t.P..|_^]3.[..|
|000005c0| 44 c2 08 00 28 84 00 00 | 00 00 00 00 00 00 00 00 |D...(...|........|
|000005d0| ce 8b 00 00 28 03 00 00 | 20 84 00 00 00 00 00 00 |....(...| .......|
|000005e0| 00 00 00 00 f0 8b 00 00 | 20 03 00 00 00 00 00 00 |........| .......|
|000005f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000600| dc 8b 00 00 00 00 00 00 | 92 85 00 00 aa 85 00 00 |........|........|
|00000610| b4 85 00 00 be 85 00 00 | c8 85 00 00 e4 85 00 00 |........|........|
|00000620| ee 85 00 00 fc 85 00 00 | 06 86 00 00 1c 86 00 00 |........|........|
|00000630| 26 86 00 00 34 86 00 00 | 44 86 00 00 52 86 00 00 |&...4...|D...R...|
|00000640| 62 86 00 00 6c 86 00 00 | 84 86 00 00 96 86 00 00 |b...l...|........|
|00000650| a2 86 00 00 bc 86 00 00 | ce 86 00 00 e0 86 00 00 |........|........|
|00000660| fe 86 00 00 18 87 00 00 | 2e 87 00 00 40 87 00 00 |........|....@...|
|00000670| 56 87 00 00 6e 87 00 00 | 80 87 00 00 9a 87 00 00 |V...n...|........|
|00000680| b2 87 00 00 c2 87 00 00 | de 87 00 00 fa 87 00 00 |........|........|
|00000690| 14 88 00 00 24 88 00 00 | 40 88 00 00 5c 88 00 00 |....$...|@...\...|
|000006a0| 78 88 00 00 88 88 00 00 | a0 88 00 00 b6 88 00 00 |x.......|........|
|000006b0| d8 88 00 00 e2 88 00 00 | ee 88 00 00 0e 89 00 00 |........|........|
|000006c0| 22 89 00 00 44 89 00 00 | 5c 89 00 00 74 89 00 00 |"...D...|\...t...|
|000006d0| 84 85 00 00 90 89 00 00 | ac 89 00 00 ca 89 00 00 |........|........|
|000006e0| e8 89 00 00 00 8a 00 00 | 12 8a 00 00 26 8a 00 00 |........|....&...|
|000006f0| 48 8a 00 00 5c 8a 00 00 | 7a 8a 00 00 84 8a 00 00 |H...\...|z.......|
|00000700| 8e 8a 00 00 9c 8a 00 00 | b4 8a 00 00 cc 8a 00 00 |........|........|
|00000710| ec 8a 00 00 00 8b 00 00 | 1c 8b 00 00 30 8b 00 00 |........|....0...|
|00000720| 3c 8b 00 00 4a 8b 00 00 | 60 8b 00 00 70 8b 00 00 |<...J...|`...p...|
|00000730| 80 8b 00 00 96 8b 00 00 | ae 8b 00 00 c2 8b 00 00 |........|........|
|00000740| 80 89 00 00 6c 85 00 00 | 00 00 00 00 3a 00 45 78 |....l...|....:.Ex|
|00000750| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|00000760| 54 61 67 00 47 00 45 78 | 46 72 65 65 50 6f 6f 6c |Tag.G.Ex|FreePool|
|00000770| 00 00 66 03 52 74 6c 49 | 6e 69 74 55 6e 69 63 6f |..f.RtlI|nitUnico|
|00000780| 64 65 53 74 72 69 6e 67 | 00 00 be 04 77 63 73 6e |deString|....wcsn|
|00000790| 63 61 74 00 b8 04 77 63 | 73 63 61 74 00 00 c0 04 |cat...wc|scat....|
|000007a0| 77 63 73 6e 63 70 79 00 | 70 03 52 74 6c 49 6e 74 |wcsncpy.|p.RtlInt|
|000007b0| 65 67 65 72 54 6f 55 6e | 69 63 6f 64 65 53 74 72 |egerToUn|icodeStr|
|000007c0| 69 6e 67 00 1d 04 5a 77 | 43 6c 6f 73 65 00 23 04 |ing...Zw|Close.#.|
|000007d0| 5a 77 43 72 65 61 74 65 | 4b 65 79 00 bd 04 77 63 |ZwCreate|Key...wc|
|000007e0| 73 6c 65 6e 00 00 09 03 | 52 74 6c 43 68 65 63 6b |slen....|RtlCheck|
|000007f0| 52 65 67 69 73 74 72 79 | 4b 65 79 00 bb 04 77 63 |Registry|Key...wc|
|00000800| 73 63 70 79 00 00 59 04 | 5a 77 52 65 61 64 46 69 |scpy..Y.|ZwReadFi|
|00000810| 6c 65 00 00 27 04 5a 77 | 44 65 6c 65 74 65 46 69 |le..'.Zw|DeleteFi|
|00000820| 6c 65 00 00 73 04 5a 77 | 57 72 69 74 65 46 69 6c |le..s.Zw|WriteFil|
|00000830| 65 00 22 04 5a 77 43 72 | 65 61 74 65 46 69 6c 65 |e.".ZwCr|eateFile|
|00000840| 00 00 b9 04 77 63 73 63 | 68 72 00 00 da 03 52 74 |....wcsc|hr....Rt|
|00000850| 6c 57 72 69 74 65 52 65 | 67 69 73 74 72 79 56 61 |lWriteRe|gistryVa|
|00000860| 6c 75 65 00 57 04 5a 77 | 51 75 65 72 79 56 61 6c |lue.W.Zw|QueryVal|
|00000870| 75 65 4b 65 79 00 3e 04 | 5a 77 4f 70 65 6e 4b 65 |ueKey.>.|ZwOpenKe|
|00000880| 79 00 2b 03 52 74 6c 44 | 65 6c 65 74 65 52 65 67 |y.+.RtlD|eleteReg|
|00000890| 69 73 74 72 79 56 61 6c | 75 65 00 00 25 01 49 6f |istryVal|ue..%.Io|
|000008a0| 44 65 6c 65 74 65 44 65 | 76 69 63 65 00 00 28 01 |DeleteDe|vice..(.|
|000008b0| 49 6f 44 65 74 61 63 68 | 44 65 76 69 63 65 00 00 |IoDetach|Device..|
|000008c0| 09 01 49 6f 41 74 74 61 | 63 68 44 65 76 69 63 65 |..IoAtta|chDevice|
|000008d0| 54 6f 44 65 76 69 63 65 | 53 74 61 63 6b 00 ab 01 |ToDevice|Stack...|
|000008e0| 4b 65 44 65 6c 61 79 45 | 78 65 63 75 74 69 6f 6e |KeDelayE|xecution|
|000008f0| 54 68 72 65 61 64 00 00 | bd 02 4f 62 66 52 65 66 |Thread..|..ObfRef|
|00000900| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 68 00 |erenceOb|ject..h.|
|00000910| 45 78 51 75 65 75 65 57 | 6f 72 6b 49 74 65 6d 00 |ExQueueW|orkItem.|
|00000920| 97 01 49 6f 66 43 6f 6d | 70 6c 65 74 65 52 65 71 |..IofCom|pleteReq|
|00000930| 75 65 73 74 00 00 19 03 | 52 74 6c 43 6f 70 79 55 |uest....|RtlCopyU|
|00000940| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 1b 01 |nicodeSt|ring....|
|00000950| 49 6f 43 72 65 61 74 65 | 44 65 76 69 63 65 00 00 |IoCreate|Device..|
|00000960| 0f 03 52 74 6c 43 6f 6d | 70 61 72 65 55 6e 69 63 |..RtlCom|pareUnic|
|00000970| 6f 64 65 53 74 72 69 6e | 67 00 bc 02 4f 62 66 44 |odeStrin|g...ObfD|
|00000980| 65 72 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |ereferen|ceObject|
|00000990| 00 00 96 01 49 6f 66 43 | 61 6c 6c 44 72 69 76 65 |....IofC|allDrive|
|000009a0| 72 00 44 01 49 6f 47 65 | 74 52 65 6c 61 74 65 64 |r.D.IoGe|tRelated|
|000009b0| 44 65 76 69 63 65 4f 62 | 6a 65 63 74 00 00 b7 02 |DeviceOb|ject....|
|000009c0| 4f 62 52 65 66 65 72 65 | 6e 63 65 4f 62 6a 65 63 |ObRefere|nceObjec|
|000009d0| 74 42 79 48 61 6e 64 6c | 65 00 4d 04 5a 77 51 75 |tByHandl|e.M.ZwQu|
|000009e0| 65 72 79 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 46 69 |eryInfor|mationFi|
|000009f0| 6c 65 00 00 1d 01 49 6f | 43 72 65 61 74 65 46 69 |le....Io|CreateFi|
|00000a00| 6c 65 00 00 00 03 52 74 | 6c 41 70 70 65 6e 64 55 |le....Rt|lAppendU|
|00000a10| 6e 69 63 6f 64 65 54 6f | 53 74 72 69 6e 67 00 00 |nicodeTo|String..|
|00000a20| d8 03 52 74 6c 56 6f 6c | 75 6d 65 44 65 76 69 63 |..RtlVol|umeDevic|
|00000a30| 65 54 6f 44 6f 73 4e 61 | 6d 65 00 00 43 02 4d 6d |eToDosNa|me..C.Mm|
|00000a40| 47 65 74 53 79 73 74 65 | 6d 52 6f 75 74 69 6e 65 |GetSyste|mRoutine|
|00000a50| 41 64 64 72 65 73 73 00 | 7b 02 4e 74 42 75 69 6c |Address.|{.NtBuil|
|00000a60| 64 4e 75 6d 62 65 72 00 | 45 01 49 6f 47 65 74 52 |dNumber.|E.IoGetR|
|00000a70| 65 71 75 65 73 74 6f 72 | 50 72 6f 63 65 73 73 00 |equestor|Process.|
|00000a80| 3a 01 49 6f 47 65 74 43 | 75 72 72 65 6e 74 50 72 |:.IoGetC|urrentPr|
|00000a90| 6f 63 65 73 73 00 ff 02 | 52 74 6c 41 70 70 65 6e |ocess...|RtlAppen|
|00000aa0| 64 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |dUnicode|StringTo|
|00000ab0| 53 74 72 69 6e 67 00 00 | bf 04 77 63 73 6e 63 6d |String..|..wcsncm|
|00000ac0| 70 00 91 04 5f 77 63 73 | 6e 69 63 6d 70 00 a0 00 |p..._wcs|nicmp...|
|00000ad0| 46 73 52 74 6c 44 6f 65 | 73 4e 61 6d 65 43 6f 6e |FsRtlDoe|sNameCon|
|00000ae0| 74 61 69 6e 57 69 6c 64 | 43 61 72 64 73 00 50 02 |tainWild|Cards.P.|
|00000af0| 4d 6d 4d 61 70 4c 6f 63 | 6b 65 64 50 61 67 65 73 |MmMapLoc|kedPages|
|00000b00| 00 00 66 01 49 6f 52 65 | 67 69 73 74 65 72 46 73 |..f.IoRe|gisterFs|
|00000b10| 52 65 67 69 73 74 72 61 | 74 69 6f 6e 43 68 61 6e |Registra|tionChan|
|00000b20| 67 65 00 00 27 01 49 6f | 44 65 6c 65 74 65 53 79 |ge..'.Io|DeleteSy|
|00000b30| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 21 01 49 6f |mbolicLi|nk..!.Io|
|00000b40| 43 72 65 61 74 65 53 79 | 6d 62 6f 6c 69 63 4c 69 |CreateSy|mbolicLi|
|00000b50| 6e 6b 00 00 2d 00 44 62 | 67 50 72 69 6e 74 00 00 |nk..-.Db|gPrint..|
|00000b60| 36 04 5a 77 4c 6f 61 64 | 44 72 69 76 65 72 00 00 |6.ZwLoad|Driver..|
|00000b70| c2 03 52 74 6c 55 6e 69 | 63 6f 64 65 53 74 72 69 |..RtlUni|codeStri|
|00000b80| 6e 67 54 6f 49 6e 74 65 | 67 65 72 00 5e 00 45 78 |ngToInte|ger.^.Ex|
|00000b90| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 50 6f 70 45 6e |Interloc|kedPopEn|
|00000ba0| 74 72 79 53 4c 69 73 74 | 00 00 60 00 45 78 49 6e |trySList|..`.ExIn|
|00000bb0| 74 65 72 6c 6f 63 6b 65 | 64 50 75 73 68 45 6e 74 |terlocke|dPushEnt|
|00000bc0| 72 79 53 4c 69 73 74 00 | 14 02 4b 65 57 61 69 74 |rySList.|..KeWait|
|00000bd0| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 00 |ForSingl|eObject.|
|00000be0| e9 01 4b 65 52 65 6c 65 | 61 73 65 4d 75 74 65 78 |..KeRele|aseMutex|
|00000bf0| 00 00 dd 01 4b 65 51 75 | 65 72 79 53 79 73 74 65 |....KeQu|erySyste|
|00000c00| 6d 54 69 6d 65 00 4d 00 | 45 78 49 6e 69 74 69 61 |mTime.M.|ExInitia|
|00000c10| 6c 69 7a 65 4e 50 61 67 | 65 64 4c 6f 6f 6b 61 73 |lizeNPag|edLookas|
|00000c20| 69 64 65 4c 69 73 74 00 | 63 03 52 74 6c 49 6e 69 |ideList.|c.RtlIni|
|00000c30| 74 41 6e 73 69 53 74 72 | 69 6e 67 00 3e 00 45 78 |tAnsiStr|ing.>.Ex|
|00000c40| 44 65 6c 65 74 65 4e 50 | 61 67 65 64 4c 6f 6f 6b |DeleteNP|agedLook|
|00000c50| 61 73 69 64 65 4c 69 73 | 74 00 a1 04 6d 65 6d 6d |asideLis|t...memm|
|00000c60| 6f 76 65 00 a8 04 73 74 | 72 63 68 72 00 00 8e 04 |ove...st|rchr....|
|00000c70| 5f 76 73 6e 70 72 69 6e | 74 66 00 00 fa 00 49 6e |_vsnprin|tf....In|
|00000c80| 74 65 72 6c 6f 63 6b 65 | 64 49 6e 63 72 65 6d 65 |terlocke|dIncreme|
|00000c90| 6e 74 00 00 f7 00 49 6e | 74 65 72 6c 6f 63 6b 65 |nt....In|terlocke|
|00000ca0| 64 44 65 63 72 65 6d 65 | 6e 74 00 00 0b 01 49 6f |dDecreme|nt....Io|
|00000cb0| 42 75 69 6c 64 44 65 76 | 69 63 65 49 6f 43 6f 6e |BuildDev|iceIoCon|
|00000cc0| 74 72 6f 6c 52 65 71 75 | 65 73 74 00 c4 01 4b 65 |trolRequ|est...Ke|
|00000cd0| 49 6e 69 74 69 61 6c 69 | 7a 65 45 76 65 6e 74 00 |Initiali|zeEvent.|
|00000ce0| 3d 01 49 6f 47 65 74 44 | 65 76 69 63 65 4f 62 6a |=.IoGetD|eviceObj|
|00000cf0| 65 63 74 50 6f 69 6e 74 | 65 72 00 00 b5 02 4f 62 |ectPoint|er....Ob|
|00000d00| 51 75 65 72 79 4e 61 6d | 65 53 74 72 69 6e 67 00 |QueryNam|eString.|
|00000d10| 32 01 49 6f 46 72 65 65 | 49 72 70 00 fb 01 4b 65 |2.IoFree|Irp...Ke|
|00000d20| 53 65 74 45 76 65 6e 74 | 00 00 b4 01 4b 65 47 65 |SetEvent|....KeGe|
|00000d30| 74 43 75 72 72 65 6e 74 | 54 68 72 65 61 64 00 00 |tCurrent|Thread..|
|00000d40| 03 01 49 6f 41 6c 6c 6f | 63 61 74 65 49 72 70 00 |..IoAllo|cateIrp.|
|00000d50| cf 02 50 72 6f 62 65 46 | 6f 72 57 72 69 74 65 00 |..ProbeF|orWrite.|
|00000d60| 6f 02 4d 6d 55 73 65 72 | 50 72 6f 62 65 41 64 64 |o.MmUser|ProbeAdd|
|00000d70| 72 65 73 73 00 00 4a 04 | 5a 77 51 75 65 72 79 44 |ress..J.|ZwQueryD|
|00000d80| 69 72 65 63 74 6f 72 79 | 46 69 6c 65 00 00 c7 01 |irectory|File....|
|00000d90| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 4d 75 74 65 |KeInitia|lizeMute|
|00000da0| 78 00 c9 03 52 74 6c 55 | 6e 77 69 6e 64 00 6e 74 |x...RtlU|nwind.nt|
|00000db0| 6f 73 6b 72 6e 6c 2e 65 | 78 65 00 00 44 00 4b 65 |oskrnl.e|xe..D.Ke|
|00000dc0| 47 65 74 43 75 72 72 65 | 6e 74 49 72 71 6c 00 00 |GetCurre|ntIrql..|
|00000dd0| 48 41 4c 2e 64 6c 6c 00 | 00 00 00 00 00 00 00 00 |HAL.dll.|........|
+--------+-------------------------+-------------------------+--------+--------+