home *** CD-ROM | disk | FTP | other *** search
/ PC World 2006 October / PCWorld_2006-10_cd.bin / v cisle / who / WhoLockMe104.exe / WhoLockMe.exe / BINARY / DRV
MS-DOS/Windows or OS/2 Executable  |  2002-07-03  |  3.8 KB
open in: MacOS 8.1     |     Win98     |     DOS

view JSON data     |     view as text

This file was processed as: MS-DOS/Windows or OS/2 Executable (executable/exe).

You can browse this item here: DRV

ConfidenceProgramDetectionMatch TypeSupport
100% dexvert MS-DOS/Windows or OS/2 Executable (executable/exe) magic Supported
100% file PE32 executable for MS Windows 4.00 (native), Intel i386 (stripped to external PDB), 4 sections default
99% file data default
35% TrID Win32 Executable (generic) default
16% TrID Windows Icons Library (generic) default (weak)
16% TrID OS/2 Executable (generic) default
15% TrID Generic Win/DOS Executable default
15% TrID DOS Executable Generic default
100% siegfried fmt/899 Windows Portable Executable (32 bit) default
100% gt2 Ist eine ausf�hrbare Win32 Datei default
100% binwalkID Microsoft executable, portable (PE) default
100% xdgMime application/vnd.microsoft.portable-executable default (weak)


hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4d 5a 90 00 03 00 00 00 | 04 00 00 00 ff ff 00 00 |MZ......|........|
|00000010| b8 00 00 00 00 00 00 00 | 40 00 00 00 00 00 00 00 |........|@.......|
|00000020| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 b8 00 00 00 |........|........|
|00000040| 0e 1f ba 0e 00 b4 09 cd | 21 b8 01 4c cd 21 54 68 |........|!..L.!Th|
|00000050| 69 73 20 70 72 6f 67 72 | 61 6d 20 63 61 6e 6e 6f |is progr|am canno|
|00000060| 74 20 62 65 20 72 75 6e | 20 69 6e 20 44 4f 53 20 |t be run| in DOS |
|00000070| 6d 6f 64 65 2e 0d 0d 0a | 24 00 00 00 00 00 00 00 |mode....|$.......|
|00000080| 69 1b 0d db 2d 7a 63 88 | 2d 7a 63 88 2d 7a 63 88 |i...-zc.|-zc.-zc.|
|00000090| 2d 7a 63 88 37 7a 63 88 | 2b 59 69 88 2c 7a 63 88 |-zc.7zc.|+Yi.,zc.|
|000000a0| 52 69 63 68 2d 7a 63 88 | 00 00 00 00 00 00 00 00 |Rich-zc.|........|
|000000b0| 00 00 00 00 00 00 00 00 | 50 45 00 00 4c 01 04 00 |........|PE..L...|
|000000c0| be 9d cc 3b 00 00 00 00 | 00 00 00 00 e0 00 06 03 |...;....|........|
|000000d0| 0b 01 06 00 e0 0a 00 00 | e0 00 00 00 00 00 00 00 |........|........|
|000000e0| e4 08 00 00 60 02 00 00 | 20 0b 00 00 00 00 00 08 |....`...| .......|
|000000f0| 20 00 00 00 20 00 00 00 | 04 00 00 00 04 00 00 00 | ... ...|........|
|00000100| 04 00 00 00 00 00 00 00 | 20 0e 00 00 60 02 00 00 |........| ...`...|
|00000110| ed 0b 01 00 01 00 00 00 | 00 00 10 00 00 10 00 00 |........|........|
|00000120| 00 00 10 00 00 10 00 00 | 00 00 00 00 10 00 00 00 |........|........|
|00000130| 00 00 00 00 00 00 00 00 | 40 0b 00 00 28 00 00 00 |........|@...(...|
|00000140| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000150| 00 00 00 00 00 00 00 00 | 60 0d 00 00 78 00 00 00 |........|`...x...|
|00000160| c0 02 00 00 1c 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000170| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000180| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000190| 60 02 00 00 54 00 00 00 | 00 00 00 00 00 00 00 00 |`...T...|........|
|000001a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000001b0| 2e 74 65 78 74 00 00 00 | bc 08 00 00 60 02 00 00 |.text...|....`...|
|000001c0| c0 08 00 00 60 02 00 00 | 00 00 00 00 00 00 00 00 |....`...|........|
|000001d0| 00 00 00 00 20 00 00 68 | 2e 64 61 74 61 00 00 00 |.... ..h|.data...|
|000001e0| 04 00 00 00 20 0b 00 00 | 20 00 00 00 20 0b 00 00 |.... ...| ... ...|
|000001f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 c8 |........|....@...|
|00000200| 49 4e 49 54 00 00 00 00 | 20 02 00 00 40 0b 00 00 |INIT....| ...@...|
|00000210| 20 02 00 00 40 0b 00 00 | 00 00 00 00 00 00 00 00 | ...@...|........|
|00000220| 00 00 00 00 20 00 00 e2 | 2e 72 65 6c 6f 63 00 00 |.... ...|.reloc..|
|00000230| b4 00 00 00 60 0d 00 00 | c0 00 00 00 60 0d 00 00 |....`...|....`...|
|00000240| 00 00 00 00 00 00 00 00 | 00 00 00 00 40 00 00 42 |........|....@..B|
|00000250| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000260| bc 0b 00 00 d0 0b 00 00 | da 0b 00 00 fa 0b 00 00 |........|........|
|00000270| 0e 0c 00 00 22 0c 00 00 | 2c 0c 00 00 40 0c 00 00 |...."...|,...@...|
|00000280| 50 0c 00 00 62 0c 00 00 | 7a 0c 00 00 96 0c 00 00 |P...b...|z.......|
|00000290| a8 0c 00 00 c6 0c 00 00 | dc 0c 00 00 f2 0c 00 00 |........|........|
|000002a0| 04 0d 00 00 1c 0d 00 00 | 34 0d 00 00 54 0d 00 00 |........|4...T...|
|000002b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000002c0| 00 00 00 00 bd 9d cc 3b | 00 00 00 00 04 00 00 00 |.......;|........|
|000002d0| 10 01 00 00 00 00 00 00 | 20 0e 00 00 00 00 00 00 |........| .......|
|000002e0| bd 9d cc 3b 00 00 00 00 | 04 00 00 00 10 01 00 00 |...;....|........|
|000002f0| 00 00 00 00 48 19 00 00 | 00 00 00 00 bd 9d cc 3b |....H...|.......;|
|00000300| 00 00 00 00 03 00 00 00 | 50 00 00 00 00 00 00 00 |........|P.......|
|00000310| 58 1a 00 00 00 00 00 00 | ff ff ff ff e9 04 00 08 |X.......|........|
|00000320| ed 04 00 08 00 00 00 00 | ff ff ff ff 00 00 00 00 |........|........|
|00000330| b2 05 00 08 ff ff ff ff | 76 07 00 08 7a 07 00 08 |........|v...z...|
|00000340| ff ff ff ff 9c 07 00 08 | a0 07 00 08 55 8b ec 6a |........|....U..j|
|00000350| ff 68 18 03 00 08 68 4c | 0a 00 08 64 a1 00 00 00 |.h....hL|...d....|
|00000360| 00 50 64 89 25 00 00 00 | 00 83 ec 1c 53 56 57 89 |.Pd.%...|....SVW.|
|00000370| 65 e8 83 65 fc 00 8b 7d | 08 8b 47 04 85 c0 74 58 |e..e...}|..G...tX|
|00000380| 8d 4d e0 51 68 00 08 00 | 00 8b 75 0c 56 50 ff 15 |.M.Qh...|..u.VP..|
|00000390| 6c 02 00 08 85 c0 7c 43 | 6a 01 56 8d 45 d8 50 ff |l.....|C|j.V.E.P.|
|000003a0| 15 68 02 00 08 80 26 00 | 0f b7 45 d8 40 50 ff 75 |.h....&.|..E.@P.u|
|000003b0| dc 56 ff 15 64 02 00 08 | 83 c4 0c 0f b7 45 d8 80 |.V..d...|.....E..|
|000003c0| 24 30 00 0f b7 45 d8 03 | f0 89 75 0c 8d 45 d8 50 |$0...E..|..u..E.P|
|000003d0| ff 15 60 02 00 08 eb 03 | 8b 75 0c 0f b7 47 30 d1 |..`.....|.u...G0.|
|000003e0| e8 89 45 e0 8b 4f 20 89 | 4d d4 75 08 85 c9 0f 84 |..E..O .|M.u.....|
|000003f0| ed 00 00 00 8b 57 34 66 | 83 3a 5c 74 19 85 c9 74 |.....W4f|.:\t...t|
|00000400| 15 0f b7 51 30 d1 ea 8d | 44 10 01 89 45 e0 8b 49 |...Q0...|D...E..I|
|00000410| 20 89 4d d4 eb e7 8d 4f | 30 0f b7 11 d1 ea 2b c2 | .M....O|0.....+.|
|00000420| 03 c6 8b d8 89 5d e4 6a | 01 51 8d 45 d8 50 ff 15 |.....].j|.Q.E.P..|
|00000430| 68 02 00 08 0f b7 45 d8 | 40 50 ff 75 dc 53 ff 15 |h.....E.|@P.u.S..|
|00000440| 64 02 00 08 83 c4 0c 8d | 45 d8 50 ff 15 60 02 00 |d.......|E.P..`..|
|00000450| 08 8b 77 20 89 75 d4 8b | 47 34 66 83 38 5c 74 4b |..w .u..|G4f.8\tK|
|00000460| 85 f6 74 47 c6 43 ff 5c | 8d 46 30 0f b7 08 d1 e9 |..tG.C.\|.F0.....|
|00000470| 83 ca ff 2b d1 03 da 89 | 5d e4 6a 01 50 8d 45 d8 |...+....|].j.P.E.|
|00000480| 50 ff 15 68 02 00 08 0f | b7 45 d8 50 ff 75 dc 53 |P..h....|.E.P.u.S|
|00000490| ff 15 64 02 00 08 83 c4 | 0c 8d 45 d8 50 ff 15 60 |..d.....|..E.P..`|
|000004a0| 02 00 08 8b 76 20 89 75 | d4 eb b5 83 7d e0 03 76 |....v .u|....}..v|
|000004b0| 30 8b 45 0c 8d 50 02 80 | 3a 5c 75 25 8d 78 03 80 |0.E..P..|:\u%.x..|
|000004c0| 3f 5c 75 1d 83 c9 ff 33 | c0 f2 ae f7 d1 2b f9 8b |?\u....3|.....+..|
|000004d0| c1 8b f7 8b fa c1 e9 02 | f3 a5 8b c8 83 e1 03 f3 |........|........|
|000004e0| a4 83 4d fc ff 33 c0 eb | 10 6a 01 58 c3 8b 65 e8 |..M..3..|.j.X..e.|
|000004f0| 83 4d fc ff b8 05 00 00 | c0 8b 4d f0 64 89 0d 00 |.M......|..M.d...|
|00000500| 00 00 00 5f 5e 5b c9 c2 | 08 00 55 8b ec 6a ff 68 |..._^[..|..U..j.h|
|00000510| 28 03 00 08 68 4c 0a 00 | 08 64 a1 00 00 00 00 50 |(...hL..|.d.....P|
|00000520| 64 89 25 00 00 00 00 83 | ec 64 53 56 57 89 65 e8 |d.%.....|.dSVW.e.|
|00000530| 8b 45 10 8b 08 89 4d 94 | 80 65 c4 00 33 ff 89 7d |.E....M.|.e..3..}|
|00000540| 90 89 38 8b 75 08 8b 06 | 83 f8 08 73 77 8d 4d d0 |..8.u...|...sw.M.|
|00000550| 51 50 ff 15 90 02 00 08 | 3b c7 0f 8c 4e 02 00 00 |QP......|;...N...|
|00000560| 89 7d fc ff 75 d0 ff 15 | 8c 02 00 08 57 8d 45 90 |.}..u...|....W.E.|
|00000570| 50 57 57 68 00 00 00 80 | ff 76 08 ff 15 88 02 00 |PWWh....|.v......|
|00000580| 08 89 45 8c 3b c7 7c 11 | 8b 4d 90 3b 4e 04 74 09 |..E.;.|.|.M.;N.t.|
|00000590| ff 15 84 02 00 08 89 7d | 90 83 4d fc ff e8 12 00 |.......}|..M.....|
|000005a0| 00 00 8b 4d 90 3b cf 0f | 85 b2 00 00 00 e9 a3 00 |...M.;..|........|
|000005b0| 00 00 33 ff ff 15 80 02 | 00 08 8b 4d d0 ff 15 84 |..3.....|...M....|
|000005c0| 02 00 08 c3 89 7d a8 89 | 45 a4 c7 45 ac 18 00 00 |.....}..|E..E....|
|000005d0| 00 89 7d b0 89 7d b8 89 | 7d b4 89 7d bc 89 7d c0 |..}..}..|}..}..}.|
|000005e0| 8d 45 a4 50 8d 45 ac 50 | 6a 40 8d 45 cc 50 ff 15 |.E.P.E.P|j@.E.P..|
|000005f0| 7c 02 00 08 85 c0 7c 5d | 6a 02 57 57 8d 45 d4 50 ||.....|]|j.WW.E.P|
|00000600| 6a ff ff 76 08 ff 75 cc | ff 15 78 02 00 08 85 c0 |j..v..u.|..x.....|
|00000610| ff 75 cc 7d 08 ff 15 74 | 02 00 08 eb 38 8b 1d 74 |.u.}...t|....8..t|
|00000620| 02 00 08 ff d3 57 8d 45 | 90 50 57 57 68 00 00 00 |.....W.E|.PWWh...|
|00000630| 80 ff 75 d4 ff 15 88 02 | 00 08 85 c0 ff 75 d4 7d |..u.....|.....u.}|
|00000640| 04 ff d3 eb 10 ff d3 8b | 4d 90 3b 4e 04 74 10 ff |........|M.;N.t..|
|00000650| 15 84 02 00 08 b8 22 00 | 00 c0 e9 4f 01 00 00 6a |......".|...O...j|
|00000660| 01 5e 89 75 fc 89 4d dc | 66 83 39 05 75 23 66 83 |.^.u..M.|f.9.u#f.|
|00000670| 79 02 70 75 1c ff 75 0c | 51 e8 ce fc ff ff 89 45 |y.pu..u.|Q......E|
|00000680| 8c 3b c7 0f 8c de 00 00 | 00 8b 7d 0c e9 c8 00 00 |.;......|..}.....|
|00000690| 00 8d 45 d8 50 ff 75 94 | 8b 5d 0c 53 51 ff 15 6c |..E.P.u.|.].SQ..l|
|000006a0| 02 00 08 89 45 8c 3b c7 | 7c 41 66 39 3b 74 3c 56 |....E.;.||Af9;t<V|
|000006b0| 53 8d 45 9c 50 ff 15 68 | 02 00 08 85 c0 0f 85 a4 |S.E.P..h|........|
|000006c0| 00 00 00 20 03 0f b7 45 | 9c 50 ff 75 a0 53 ff 15 |... ...E|.P.u.S..|
|000006d0| 64 02 00 08 83 c4 0c 0f | b7 45 9c 80 24 18 00 8d |d.......|.E..$...|
|000006e0| 45 9c 50 ff 15 60 02 00 | 08 eb 6c 8b 45 90 8d 78 |E.P..`..|..l.E..x|
|000006f0| 14 89 7d c8 57 8b 35 70 | 02 00 08 ff d6 84 c0 74 |..}.W.5p|.......t|
|00000700| 66 ff 37 ff d6 84 c0 74 | 5e 8b 3f 83 c7 18 89 7d |f.7....t|^.?....}|
|00000710| 98 57 ff d6 84 c0 74 4f | ff 37 ff d6 84 c0 74 47 |.W....tO|.7....tG|
|00000720| 8b 3f 83 c7 24 89 7d dc | 57 ff d6 84 c0 74 38 ff |.?..$.}.|W....t8.|
|00000730| 37 ff d6 84 c0 74 30 8b | 3f 89 7d dc 66 83 3f 05 |7....t0.|?.}.f.?.|
|00000740| 75 25 66 83 7f 02 70 75 | 1e 53 57 e8 fc fb ff ff |u%f...pu|.SW.....|
|00000750| 89 45 8c 85 c0 7c 10 8b | fb 83 c9 ff 33 c0 f2 ae |.E...|..|....3...|
|00000760| f7 d1 8b 45 10 89 08 8b | 4d 90 ff 15 84 02 00 08 |...E....|M.......|
|00000770| c6 45 c4 01 eb 31 6a 01 | 58 c3 8b 65 e8 c7 45 8c |.E...1j.|X..e..E.|
|00000780| 05 00 00 c0 80 7d c4 00 | 75 1d c7 45 fc 02 00 00 |.....}..|u..E....|
|00000790| 00 8b 4d 90 ff 15 84 02 | 00 08 eb 07 6a 01 58 c3 |..M.....|....j.X.|
|000007a0| 8b 65 e8 83 4d fc ff 83 | 4d fc ff 8b 45 8c 8b 4d |.e..M...|M...E..M|
|000007b0| f0 64 89 0d 00 00 00 00 | 5f 5e 5b c9 c2 0c 00 cc |.d......|_^[.....|
|000007c0| 55 8b ec 56 57 8b 7d 24 | 83 27 00 83 67 04 00 81 |U..VW.}$|.'..g...|
|000007d0| 7d 20 00 00 35 83 8d 77 | 04 74 47 81 7d 20 08 00 |} ..5..w|.tG.} ..|
|000007e0| 35 83 74 23 81 7d 20 0c | 00 35 83 75 48 ff 75 18 |5.t#.} .|.5.uH.u.|
|000007f0| 8b 45 10 6a 08 ff 30 ff | 15 94 02 00 08 89 07 c7 |.E.j..0.|........|
|00000800| 06 04 00 00 00 eb 2e 8b | 4d 10 b8 c8 00 00 00 39 |........|M......9|
|00000810| 01 74 08 c7 06 59 00 00 | c0 eb 1a 8b 4d 18 89 01 |.t...Y..|....M...|
|00000820| eb dd 8b 45 1c 56 ff 75 | 18 89 06 ff 75 10 e8 d7 |...E.V.u|....u...|
|00000830| fc ff ff 89 07 8b 07 5f | 5e 5d c2 24 00 cc 55 8b |......._|^].$..U.|
|00000840| ec 51 83 65 fc 00 56 8b | 75 0c 57 8b 46 60 83 66 |.Q.e..V.|u.W.F`.f|
|00000850| 1c 00 8b 4e 0c 80 38 0e | 8b 50 08 8b 78 04 75 1e |...N..8.|.P..x.u.|
|00000860| 53 8d 5e 18 ff 75 08 53 | ff 70 0c 57 51 52 51 6a |S.^..u.S|.p.WQRQj|
|00000870| 01 ff 70 18 e8 47 ff ff | ff 8b f8 5b eb 03 8b 7d |..p..G..|...[...}|
|00000880| fc 32 d2 8b ce 89 7e 18 | ff 15 98 02 00 08 8b c7 |.2....~.|........|
|00000890| 5f 5e c9 c2 08 00 5c 00 | 44 00 65 00 76 00 69 00 |_^....\.|D.e.v.i.|
|000008a0| 63 00 65 00 5c 00 4e 00 | 74 00 48 00 61 00 6e 00 |c.e.\.N.|t.H.a.n.|
|000008b0| 64 00 6c 00 65 00 00 00 | 00 00 5c 00 44 00 6f 00 |d.l.e...|..\.D.o.|
|000008c0| 73 00 44 00 65 00 76 00 | 69 00 63 00 65 00 73 00 |s.D.e.v.|i.c.e.s.|
|000008d0| 5c 00 4e 00 74 00 48 00 | 61 00 6e 00 64 00 6c 00 |\.N.t.H.|a.n.d.l.|
|000008e0| 65 00 00 00 55 8b ec 83 | ec 60 53 56 57 6a 08 59 |e...U...|.`SVWj.Y|
|000008f0| be 96 08 00 08 8d 7d cc | 6a 0a f3 a5 66 a5 59 be |......}.|j...f.Y.|
|00000900| ba 08 00 08 8d 7d a0 8d | 45 cc f3 a5 50 8d 45 f8 |.....}..|E...P.E.|
|00000910| 66 a5 8b 3d a0 02 00 08 | 50 ff d7 8b 75 08 68 20 |f..=....|P...u.h |
|00000920| 0b 00 08 6a 01 6a 00 8d | 45 f8 68 35 83 00 00 50 |...j.j..|E.h5...P|
|00000930| 6a 00 56 ff 15 a8 02 00 | 08 8b d8 85 db 7c 2c 8d |j.V.....|.....|,.|
|00000940| 45 a0 50 8d 45 f0 50 ff | d7 8d 45 f8 50 8d 45 f0 |E.P.E.P.|..E.P.E.|
|00000950| 50 ff 15 a4 02 00 08 8b | d8 b8 3e 08 00 08 85 db |P.......|..>.....|
|00000960| 89 46 70 89 46 40 89 46 | 38 7d 10 a1 20 0b 00 08 |.Fp.F@.F|8}.. ...|
|00000970| 85 c0 74 07 50 ff 15 9c | 02 00 08 5f 8b c3 5e 5b |..t.P...|..._..^[|
|00000980| c9 c2 08 00 55 8b ec 53 | 56 57 55 6a 00 6a 00 68 |....U..S|VWUj.j.h|
|00000990| 9c 09 00 08 ff 75 08 e8 | 7a 01 00 00 5d 5f 5e 5b |.....u..|z...]_^[|
|000009a0| 8b e5 5d c3 8b 4c 24 04 | f7 41 04 06 00 00 00 b8 |..]..L$.|.A......|
|000009b0| 01 00 00 00 74 0f 8b 44 | 24 08 8b 54 24 10 89 02 |....t..D|$..T$...|
|000009c0| b8 03 00 00 00 c3 53 56 | 57 8b 44 24 10 50 6a fe |......SV|W.D$.Pj.|
|000009d0| 68 a4 09 00 08 64 ff 35 | 00 00 00 00 64 89 25 00 |h....d.5|....d.%.|
|000009e0| 00 00 00 8b 44 24 20 8b | 58 08 8b 70 0c 83 fe ff |....D$ .|X..p....|
|000009f0| 74 20 3b 74 24 24 74 1a | 8d 34 76 8b 0c b3 89 4c |t ;t$$t.|.4v....L|
|00000a00| 24 08 89 48 0c 83 7c b3 | 04 00 75 04 ff 54 b3 08 |$..H..|.|..u..T..|
|00000a10| eb d1 64 8f 05 00 00 00 | 00 83 c4 0c 5f 5e 5b c3 |..d.....|...._^[.|
|00000a20| 33 c0 64 8b 0d 00 00 00 | 00 81 79 04 a4 09 00 08 |3.d.....|..y.....|
|00000a30| 75 10 8b 51 0c 8b 52 0c | 39 51 08 75 05 b8 01 00 |u..Q..R.|9Q.u....|
|00000a40| 00 00 c3 cc 56 43 32 30 | 58 43 30 30 55 8b ec 83 |....VC20|XC00U...|
|00000a50| ec 08 53 56 57 55 fc 8b | 5d 0c 8b 45 08 f7 40 04 |..SVWU..|]..E..@.|
|00000a60| 06 00 00 00 75 77 89 45 | f8 8b 45 10 89 45 fc 8d |....uw.E|..E..E..|
|00000a70| 45 f8 89 43 fc 8b 73 0c | 8b 7b 08 83 fe ff 74 56 |E..C..s.|.{....tV|
|00000a80| 8d 0c 76 83 7c 8f 04 00 | 74 3a 56 55 8d 6b 10 ff |..v.|...|t:VU.k..|
|00000a90| 54 8f 04 5d 5e 8b 5d 0c | 0b c0 74 28 78 31 8b 7b |T..]^.].|..t(x1.{|
|00000aa0| 08 53 e8 dd fe ff ff 83 | c4 04 8d 6b 10 56 53 e8 |.S......|...k.VS.|
|00000ab0| 12 ff ff ff 83 c4 08 8d | 0c 76 8b 04 8f 89 43 0c |........|.v....C.|
|00000ac0| ff 54 8f 08 8b 7b 08 8d | 0c 76 8b 34 8f eb ac b8 |.T...{..|.v.4....|
|00000ad0| 00 00 00 00 eb 1c b8 01 | 00 00 00 eb 15 55 8d 6b |........|.....U.k|
|00000ae0| 10 6a ff 53 e8 dd fe ff | ff 83 c4 08 5d b8 01 00 |.j.S....|....]...|
|00000af0| 00 00 5d 5f 5e 5b 8b e5 | 5d c3 55 8b 4c 24 08 8b |..]_^[..|].U.L$..|
|00000b00| 29 8b 41 1c 50 8b 41 18 | 50 e8 b8 fe ff ff 83 c4 |).A.P.A.|P.......|
|00000b10| 08 5d c2 04 00 cc ff 25 | ac 02 00 08 00 00 00 00 |.].....%|........|
|00000b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000b40| 68 0b 00 00 00 00 00 00 | 00 00 00 00 46 0d 00 00 |h.......|....F...|
|00000b50| 60 02 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |`.......|........|
|00000b60| 00 00 00 00 00 00 00 00 | bc 0b 00 00 d0 0b 00 00 |........|........|
|00000b70| da 0b 00 00 fa 0b 00 00 | 0e 0c 00 00 22 0c 00 00 |........|...."...|
|00000b80| 2c 0c 00 00 40 0c 00 00 | 50 0c 00 00 62 0c 00 00 |,...@...|P...b...|
|00000b90| 7a 0c 00 00 96 0c 00 00 | a8 0c 00 00 c6 0c 00 00 |z.......|........|
|00000ba0| dc 0c 00 00 f2 0c 00 00 | 04 0d 00 00 1c 0d 00 00 |........|........|
|00000bb0| 34 0d 00 00 54 0d 00 00 | 00 00 00 00 c0 02 52 74 |4...T...|......Rt|
|00000bc0| 6c 46 72 65 65 41 6e 73 | 69 53 74 72 69 6e 67 00 |lFreeAns|iString.|
|00000bd0| db 03 73 74 72 6e 63 70 | 79 00 0f 03 52 74 6c 55 |..strncp|y...RtlU|
|00000be0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 41 6e |nicodeSt|ringToAn|
|00000bf0| 73 69 53 74 72 69 6e 67 | 00 00 3d 02 4f 62 51 75 |siString|..=.ObQu|
|00000c00| 65 72 79 4e 61 6d 65 53 | 74 72 69 6e 67 00 df 01 |eryNameS|tring...|
|00000c10| 4d 6d 49 73 41 64 64 72 | 65 73 73 56 61 6c 69 64 |MmIsAddr|essValid|
|00000c20| 00 00 5b 03 5a 77 43 6c | 6f 73 65 00 69 03 5a 77 |..[.ZwCl|ose.i.Zw|
|00000c30| 44 75 70 6c 69 63 61 74 | 65 4f 62 6a 65 63 74 00 |Duplicat|eObject.|
|00000c40| 7a 03 5a 77 4f 70 65 6e | 50 72 6f 63 65 73 73 00 |z.ZwOpen|Process.|
|00000c50| 59 01 4b 65 44 65 74 61 | 63 68 50 72 6f 63 65 73 |Y.KeDeta|chProces|
|00000c60| 73 00 44 02 4f 62 66 44 | 65 72 65 66 65 72 65 6e |s.D.ObfD|ereferen|
|00000c70| 63 65 4f 62 6a 65 63 74 | 00 00 3f 02 4f 62 52 65 |ceObject|..?.ObRe|
|00000c80| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 48 |ferenceO|bjectByH|
|00000c90| 61 6e 64 6c 65 00 4f 01 | 4b 65 41 74 74 61 63 68 |andle.O.|KeAttach|
|00000ca0| 50 72 6f 63 65 73 73 00 | 5b 02 50 73 4c 6f 6f 6b |Process.|[.PsLook|
|00000cb0| 75 70 50 72 6f 63 65 73 | 73 42 79 50 72 6f 63 65 |upProces|sByProce|
|00000cc0| 73 73 49 64 00 00 7b 03 | 5a 77 4f 70 65 6e 50 72 |ssId..{.|ZwOpenPr|
|00000cd0| 6f 63 65 73 73 54 6f 6b | 65 6e 00 00 45 01 49 6f |ocessTok|en..E.Io|
|00000ce0| 66 43 6f 6d 70 6c 65 74 | 65 52 65 71 75 65 73 74 |fComplet|eRequest|
|00000cf0| 00 00 fb 00 49 6f 44 65 | 6c 65 74 65 44 65 76 69 |....IoDe|leteDevi|
|00000d00| 63 65 00 00 d0 02 52 74 | 6c 49 6e 69 74 55 6e 69 |ce....Rt|lInitUni|
|00000d10| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 f7 00 49 6f |codeStri|ng....Io|
|00000d20| 43 72 65 61 74 65 53 79 | 6d 62 6f 6c 69 63 4c 69 |CreateSy|mbolicLi|
|00000d30| 6e 6b 00 00 f3 00 49 6f | 43 72 65 61 74 65 44 65 |nk....Io|CreateDe|
|00000d40| 76 69 63 65 00 00 6e 74 | 6f 73 6b 72 6e 6c 2e 65 |vice..nt|oskrnl.e|
|00000d50| 78 65 00 00 18 03 52 74 | 6c 55 6e 77 69 6e 64 00 |xe....Rt|lUnwind.|
|00000d60| 00 00 00 00 78 00 00 00 | 1c 33 20 33 30 33 38 33 |....x...|.3 30383|
|00000d70| 3c 33 44 33 48 33 52 33 | 57 33 90 33 a1 33 b4 33 |<3D3H3R3|W3.3.3.3|
|00000d80| d2 33 30 34 40 34 4d 34 | 83 34 92 34 9f 34 10 35 |.304@4M4|.4.4.4.5|
|00000d90| 15 35 54 35 68 35 7d 35 | 92 35 b6 35 bf 35 f0 35 |.5T5h5}5|.5.5.5.5|
|00000da0| 0a 36 17 36 1f 36 36 36 | 51 36 9f 36 b7 36 d0 36 |.6.6.666|Q6.6.6.6|
|00000db0| e5 36 f7 36 6c 37 96 37 | f9 37 8a 38 f1 38 00 39 |.6.6l7.7|.7.8.8.9|
|00000dc0| 14 39 1f 39 35 39 53 39 | 5a 39 6c 39 77 39 90 39 |.9.959S9|Z9l9w9.9|
|00000dd0| d1 39 2c 3a 18 3b 00 00 | 00 00 00 00 00 00 00 00 |.9,:.;..|........|
|00000de0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000df0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e20| 01 00 00 00 10 01 00 00 | 00 00 00 00 73 79 73 5c |........|....sys\|
|00000e30| 6e 74 68 61 6e 64 6c 65 | 2e 64 62 67 00 36 5c 66 |nthandle|.dbg.6\f|
|00000e40| 72 65 65 5c 6e 74 68 61 | 6e 64 6c 65 2e 73 79 73 |ree\ntha|ndle.sys|
|00000e50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ea0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000eb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ec0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ed0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ee0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ef0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+