home *** CD-ROM | disk | FTP | other *** search
Unknown | 1996-11-26 | 3.6 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 6c 1d 02 00 00 00 00 00 | 00 00 00 00 d4 2a 02 00 |l.......|.....*..|
|00000010| 3c 68 00 00 50 1d 02 00 | 00 00 00 00 00 00 00 00 |<h..P...|........|
|00000020| 16 2b 02 00 20 68 00 00 | 5c 1d 02 00 00 00 00 00 |.+.. h..|\.......|
|00000030| 00 00 00 00 74 2b 02 00 | 2c 68 00 00 00 00 00 00 |....t+..|,h......|
|00000040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| 02 2b 02 00 ee 2a 02 00 | 00 00 00 00 50 2b 02 00 |.+...*..|....P+..|
|00000060| 1e 2b 02 00 40 2b 02 00 | 00 00 00 00 c4 22 02 00 |.+..@+..|....."..|
|00000070| 2c 20 02 00 4c 20 02 00 | 64 20 02 00 86 20 02 00 |, ..L ..|d ... ..|
|00000080| 96 20 02 00 aa 20 02 00 | b6 20 02 00 d2 20 02 00 |. ... ..|. ... ..|
|00000090| e2 20 02 00 fa 20 02 00 | 08 21 02 00 20 21 02 00 |. ... ..|.!.. !..|
|000000a0| 46 21 02 00 56 21 02 00 | 70 21 02 00 88 21 02 00 |F!..V!..|p!...!..|
|000000b0| a0 21 02 00 be 21 02 00 | c6 21 02 00 dc 21 02 00 |.!...!..|.!...!..|
|000000c0| f0 21 02 00 0a 22 02 00 | 22 22 02 00 2c 22 02 00 |.!..."..|""..,"..|
|000000d0| 40 22 02 00 64 22 02 00 | 7a 22 02 00 98 22 02 00 |@"..d"..|z"..."..|
|000000e0| 06 20 02 00 14 20 02 00 | da 22 02 00 f2 22 02 00 |. ... ..|."..."..|
|000000f0| 0c 23 02 00 22 23 02 00 | 3c 23 02 00 52 23 02 00 |.#.."#..|<#..R#..|
|00000100| 6a 23 02 00 80 23 02 00 | a0 23 02 00 b6 23 02 00 |j#...#..|.#...#..|
|00000110| d0 23 02 00 ec 23 02 00 | 02 24 02 00 1c 24 02 00 |.#...#..|.$...$..|
|00000120| 32 24 02 00 40 24 02 00 | 56 24 02 00 6a 24 02 00 |2$..@$..|V$..j$..|
|00000130| 8a 24 02 00 94 24 02 00 | b2 24 02 00 ce 24 02 00 |.$...$..|.$...$..|
|00000140| d6 24 02 00 ea 24 02 00 | 04 25 02 00 1a 25 02 00 |.$...$..|.%...%..|
|00000150| 2e 25 02 00 48 25 02 00 | 5e 25 02 00 b0 22 02 00 |.%..H%..|^%..."..|
|00000160| d0 1f 02 00 e4 1f 02 00 | bc 25 02 00 c6 25 02 00 |........|.%...%..|
|00000170| e0 25 02 00 fa 25 02 00 | 18 26 02 00 44 26 02 00 |.%...%..|.&..D&..|
|00000180| 64 26 02 00 74 26 02 00 | 80 26 02 00 a0 26 02 00 |d&..t&..|.&...&..|
|00000190| b0 26 02 00 d2 26 02 00 | f2 26 02 00 fe 26 02 00 |.&...&..|.&...&..|
|000001a0| 0e 27 02 00 2e 27 02 00 | 46 27 02 00 58 27 02 00 |.'...'..|F'..X'..|
|000001b0| 6c 27 02 00 84 27 02 00 | 9a 27 02 00 b6 27 02 00 |l'...'..|.'...'..|
|000001c0| d4 27 02 00 ee 27 02 00 | 08 28 02 00 18 28 02 00 |.'...'..|.(...(..|
|000001d0| 3a 28 02 00 44 28 02 00 | 64 28 02 00 76 28 02 00 |:(..D(..|d(..v(..|
|000001e0| 88 28 02 00 a0 28 02 00 | b8 28 02 00 c2 28 02 00 |.(...(..|.(...(..|
|000001f0| ce 28 02 00 e0 28 02 00 | f2 28 02 00 04 29 02 00 |.(...(..|.(...)..|
|00000200| 1c 29 02 00 38 29 02 00 | 54 29 02 00 64 29 02 00 |.)..8)..|T)..d)..|
|00000210| 78 29 02 00 94 29 02 00 | b2 29 02 00 bc 29 02 00 |x)...)..|.)...)..|
|00000220| d6 29 02 00 f6 29 02 00 | 14 2a 02 00 28 2a 02 00 |.)...)..|.*..(*..|
|00000230| 46 2a 02 00 5c 2a 02 00 | 76 2a 02 00 86 2a 02 00 |F*..\*..|v*...*..|
|00000240| 94 2a 02 00 a8 2a 02 00 | ba 2a 02 00 e2 2a 02 00 |.*...*..|.*...*..|
|00000250| b6 1f 02 00 94 1f 02 00 | 88 1f 02 00 b2 25 02 00 |........|.....%..|
|00000260| 74 25 02 00 70 1f 02 00 | 9a 25 02 00 00 00 00 00 |t%..p...|.%......|
|00000270| d0 02 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|00000280| 53 74 72 69 6e 67 00 00 | be 03 5f 77 63 73 6e 69 |String..|.._wcsni|
|00000290| 63 6d 70 00 79 00 45 78 | 66 69 33 38 36 49 6e 74 |cmp.y.Ex|fi386Int|
|000002a0| 65 72 6c 6f 63 6b 65 64 | 44 65 63 72 65 6d 65 6e |erlocked|Decremen|
|000002b0| 74 4c 6f 6e 67 00 89 02 | 52 74 6c 43 6f 6d 70 61 |tLong...|RtlCompa|
|000002c0| 72 65 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |reUnicod|eString.|
|000002d0| 86 02 52 74 6c 43 6f 6d | 70 61 72 65 4d 65 6d 6f |..RtlCom|pareMemo|
|000002e0| 72 79 00 00 7b 00 45 78 | 66 69 33 38 36 49 6e 74 |ry..{.Ex|fi386Int|
|000002f0| 65 72 6c 6f 63 6b 65 64 | 49 6e 63 72 65 6d 65 6e |erlocked|Incremen|
|00000300| 74 4c 6f 6e 67 00 42 00 | 45 78 46 72 65 65 50 6f |tLong.B.|ExFreePo|
|00000310| 6f 6c 00 00 af 02 52 74 | 6c 45 71 75 61 6c 55 6e |ol....Rt|lEqualUn|
|00000320| 69 63 6f 64 65 53 74 72 | 69 6e 67 00 74 00 45 78 |icodeStr|ing.t.Ex|
|00000330| 66 49 6e 74 65 72 6c 6f | 63 6b 65 64 49 6e 73 65 |fInterlo|ckedInse|
|00000340| 72 74 48 65 61 64 4c 69 | 73 74 00 00 6d 00 45 78 |rtHeadLi|st..m.Ex|
|00000350| 52 65 6c 65 61 73 65 52 | 65 73 6f 75 72 63 65 4c |ReleaseR|esourceL|
|00000360| 69 74 65 00 2e 00 45 78 | 41 63 71 75 69 72 65 52 |ite...Ex|AcquireR|
|00000370| 65 73 6f 75 72 63 65 45 | 78 63 6c 75 73 69 76 65 |esourceE|xclusive|
|00000380| 4c 69 74 65 00 00 67 00 | 45 78 52 61 69 73 65 53 |Lite..g.|ExRaiseS|
|00000390| 74 61 74 75 73 00 86 01 | 4b 65 51 75 65 72 79 53 |tatus...|KeQueryS|
|000003a0| 79 73 74 65 6d 54 69 6d | 65 00 08 01 49 6f 46 72 |ystemTim|e...IoFr|
|000003b0| 65 65 4d 64 6c 00 d3 01 | 4d 6d 42 75 69 6c 64 4d |eeMdl...|MmBuildM|
|000003c0| 64 6c 46 6f 72 4e 6f 6e | 50 61 67 65 64 50 6f 6f |dlForNon|PagedPoo|
|000003d0| 6c 00 e1 00 49 6f 41 6c | 6c 6f 63 61 74 65 4d 64 |l...IoAl|locateMd|
|000003e0| 6c 00 36 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |l.6.ExAl|locatePo|
|000003f0| 6f 6c 57 69 74 68 54 61 | 67 00 a2 01 4b 65 53 65 |olWithTa|g...KeSe|
|00000400| 74 45 76 65 6e 74 00 00 | c3 02 52 74 6c 46 72 65 |tEvent..|..RtlFre|
|00000410| 65 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |eUnicode|String..|
|00000420| f0 02 52 74 6c 4f 65 6d | 53 74 72 69 6e 67 54 6f |..RtlOem|StringTo|
|00000430| 43 6f 75 6e 74 65 64 55 | 6e 69 63 6f 64 65 53 74 |CountedU|nicodeSt|
|00000440| 72 69 6e 67 00 00 cf 02 | 52 74 6c 49 6e 69 74 53 |ring....|RtlInitS|
|00000450| 74 72 69 6e 67 00 d6 02 | 52 74 6c 49 6e 73 65 72 |tring...|RtlInser|
|00000460| 74 55 6e 69 63 6f 64 65 | 50 72 65 66 69 78 00 00 |tUnicode|Prefix..|
|00000470| 92 02 52 74 6c 43 6f 70 | 79 55 6e 69 63 6f 64 65 |..RtlCop|yUnicode|
|00000480| 53 74 72 69 6e 67 00 00 | be 02 52 74 6c 46 69 6e |String..|..RtlFin|
|00000490| 64 55 6e 69 63 6f 64 65 | 50 72 65 66 69 78 00 00 |dUnicode|Prefix..|
|000004a0| f2 02 52 74 6c 4f 65 6d | 53 74 72 69 6e 67 54 6f |..RtlOem|StringTo|
|000004b0| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 d1 03 |UnicodeS|tring...|
|000004c0| 72 61 6e 64 00 00 f8 01 | 4d 6d 55 6e 6d 61 70 4c |rand....|MmUnmapL|
|000004d0| 6f 63 6b 65 64 50 61 67 | 65 73 00 00 e8 00 49 6f |ockedPag|es....Io|
|000004e0| 42 75 69 6c 64 50 61 72 | 74 69 61 6c 4d 64 6c 00 |BuildPar|tialMdl.|
|000004f0| fc 02 52 74 6c 52 65 6d | 6f 76 65 55 6e 69 63 6f |..RtlRem|oveUnico|
|00000500| 64 65 50 72 65 66 69 78 | 00 00 76 01 4b 65 49 6e |dePrefix|..v.KeIn|
|00000510| 69 74 69 61 6c 69 7a 65 | 53 70 69 6e 4c 6f 63 6b |itialize|SpinLock|
|00000520| 00 00 ce 03 6d 65 6d 6d | 6f 76 65 00 c0 02 52 74 |....memm|ove...Rt|
|00000530| 6c 46 72 65 65 41 6e 73 | 69 53 74 72 69 6e 67 00 |lFreeAns|iString.|
|00000540| 1d 03 52 74 6c 55 70 63 | 61 73 65 55 6e 69 63 6f |..RtlUpc|aseUnico|
|00000550| 64 65 53 74 72 69 6e 67 | 54 6f 4f 65 6d 53 74 72 |deString|ToOemStr|
|00000560| 69 6e 67 00 d1 02 52 74 | 6c 49 6e 69 74 69 61 6c |ing...Rt|lInitial|
|00000570| 69 7a 65 42 69 74 4d 61 | 70 00 2f 00 45 78 41 63 |izeBitMa|p./.ExAc|
|00000580| 71 75 69 72 65 52 65 73 | 6f 75 72 63 65 53 68 61 |quireRes|ourceSha|
|00000590| 72 65 64 4c 69 74 65 00 | 80 01 4b 65 4c 65 61 76 |redLite.|..KeLeav|
|000005a0| 65 43 72 69 74 69 63 61 | 6c 52 65 67 69 6f 6e 00 |eCritica|lRegion.|
|000005b0| 33 01 49 6f 53 65 74 54 | 6f 70 4c 65 76 65 6c 49 |3.IoSetT|opLevelI|
|000005c0| 72 70 00 00 45 01 49 6f | 66 43 6f 6d 70 6c 65 74 |rp..E.Io|fComplet|
|000005d0| 65 52 65 71 75 65 73 74 | 00 00 5b 01 4b 65 45 6e |eRequest|..[.KeEn|
|000005e0| 74 65 72 43 72 69 74 69 | 63 61 6c 52 65 67 69 6f |terCriti|calRegio|
|000005f0| 6e 00 29 01 49 6f 52 65 | 6c 65 61 73 65 43 61 6e |n.).IoRe|leaseCan|
|00000600| 63 65 6c 53 70 69 6e 4c | 6f 63 6b 00 d7 00 49 6e |celSpinL|ock...In|
|00000610| 74 65 72 6c 6f 63 6b 65 | 64 45 78 63 68 61 6e 67 |terlocke|dExchang|
|00000620| 65 00 da 00 49 6f 41 63 | 71 75 69 72 65 43 61 6e |e...IoAc|quireCan|
|00000630| 63 65 6c 53 70 69 6e 4c | 6f 63 6b 00 2b 01 49 6f |celSpinL|ock.+.Io|
|00000640| 52 65 6d 6f 76 65 53 68 | 61 72 65 41 63 63 65 73 |RemoveSh|areAcces|
|00000650| 73 00 da 01 4d 6d 46 6f | 72 63 65 53 65 63 74 69 |s...MmFo|rceSecti|
|00000660| 6f 6e 43 6c 6f 73 65 64 | 00 00 d9 01 4d 6d 46 6c |onClosed|....MmFl|
|00000670| 75 73 68 49 6d 61 67 65 | 53 65 63 74 69 6f 6e 00 |ushImage|Section.|
|00000680| 22 01 49 6f 52 61 69 73 | 65 49 6e 66 6f 72 6d 61 |".IoRais|eInforma|
|00000690| 74 69 6f 6e 61 6c 48 61 | 72 64 45 72 72 6f 72 00 |tionalHa|rdError.|
|000006a0| 0a 03 52 74 6c 54 69 6d | 65 46 69 65 6c 64 73 54 |..RtlTim|eFieldsT|
|000006b0| 6f 54 69 6d 65 00 5e 00 | 45 78 4c 6f 63 61 6c 54 |oTime.^.|ExLocalT|
|000006c0| 69 6d 65 54 6f 53 79 73 | 74 65 6d 54 69 6d 65 00 |imeToSys|temTime.|
|000006d0| ff 02 52 74 6c 53 65 63 | 6f 6e 64 73 53 69 6e 63 |..RtlSec|ondsSinc|
|000006e0| 65 31 39 38 30 54 6f 54 | 69 6d 65 00 0d 03 52 74 |e1980ToT|ime...Rt|
|000006f0| 6c 54 69 6d 65 54 6f 54 | 69 6d 65 46 69 65 6c 64 |lTimeToT|imeField|
|00000700| 73 00 70 00 45 78 53 79 | 73 74 65 6d 54 69 6d 65 |s.p.ExSy|stemTime|
|00000710| 54 6f 4c 6f 63 61 6c 54 | 69 6d 65 00 ef 00 49 6f |ToLocalT|ime...Io|
|00000720| 43 68 65 63 6b 53 68 61 | 72 65 41 63 63 65 73 73 |CheckSha|reAccess|
|00000730| 00 00 51 01 4b 65 42 75 | 67 43 68 65 63 6b 00 00 |..Q.KeBu|gCheck..|
|00000740| 60 01 4b 65 47 65 74 43 | 75 72 72 65 6e 74 54 68 |`.KeGetC|urrentTh|
|00000750| 72 65 61 64 00 00 31 01 | 49 6f 53 65 74 53 68 61 |read..1.|IoSetSha|
|00000760| 72 65 41 63 63 65 73 73 | 00 00 95 00 46 73 52 74 |reAccess|....FsRt|
|00000770| 6c 44 6f 65 73 4e 61 6d | 65 43 6f 6e 74 61 69 6e |lDoesNam|eContain|
|00000780| 57 69 6c 64 43 61 72 64 | 73 00 e6 03 77 63 73 63 |WildCard|s...wcsc|
|00000790| 68 72 00 00 13 03 52 74 | 6c 55 6e 69 63 6f 64 65 |hr....Rt|lUnicode|
|000007a0| 53 74 72 69 6e 67 54 6f | 4f 65 6d 53 74 72 69 6e |StringTo|OemStrin|
|000007b0| 67 00 4a 00 45 78 49 6e | 69 74 69 61 6c 69 7a 65 |g.J.ExIn|itialize|
|000007c0| 52 65 73 6f 75 72 63 65 | 4c 69 74 65 00 00 d3 03 |Resource|Lite....|
|000007d0| 73 72 61 6e 64 00 e7 01 | 4d 6d 4d 61 70 4c 6f 63 |srand...|MmMapLoc|
|000007e0| 6b 65 64 50 61 67 65 73 | 00 00 b6 00 46 73 52 74 |kedPages|....FsRt|
|000007f0| 6c 4e 6f 72 6d 61 6c 69 | 7a 65 4e 74 73 74 61 74 |lNormali|zeNtstat|
|00000800| 75 73 00 00 ed 01 4d 6d | 50 72 6f 62 65 41 6e 64 |us....Mm|ProbeAnd|
|00000810| 4c 6f 63 6b 50 61 67 65 | 73 00 c2 02 52 74 6c 46 |LockPage|s...RtlF|
|00000820| 72 65 65 4f 65 6d 53 74 | 72 69 6e 67 00 00 a8 00 |reeOemSt|ring....|
|00000830| 46 73 52 74 6c 49 73 4e | 61 6d 65 49 6e 45 78 70 |FsRtlIsN|ameInExp|
|00000840| 72 65 73 73 69 6f 6e 00 | 01 02 4e 6c 73 4f 65 6d |ression.|..NlsOem|
|00000850| 4c 65 61 64 42 79 74 65 | 49 6e 66 6f 00 00 00 02 |LeadByte|Info....|
|00000860| 4e 6c 73 4d 62 4f 65 6d | 43 6f 64 65 50 61 67 65 |NlsMbOem|CodePage|
|00000870| 54 61 67 00 10 03 52 74 | 6c 55 6e 69 63 6f 64 65 |Tag...Rt|lUnicode|
|00000880| 53 74 72 69 6e 67 54 6f | 43 6f 75 6e 74 65 64 4f |StringTo|CountedO|
|00000890| 65 6d 53 74 72 69 6e 67 | 00 00 41 01 49 6f 57 72 |emString|..A.IoWr|
|000008a0| 69 74 65 45 72 72 6f 72 | 4c 6f 67 45 6e 74 72 79 |iteError|LogEntry|
|000008b0| 00 00 ea 03 77 63 73 6c | 65 6e 00 00 e8 03 77 63 |....wcsl|en....wc|
|000008c0| 73 63 70 79 00 00 df 00 | 49 6f 41 6c 6c 6f 63 61 |scpy....|IoAlloca|
|000008d0| 74 65 45 72 72 6f 72 4c | 6f 67 45 6e 74 72 79 00 |teErrorL|ogEntry.|
|000008e0| a9 00 46 73 52 74 6c 49 | 73 4e 74 73 74 61 74 75 |..FsRtlI|sNtstatu|
|000008f0| 73 45 78 70 65 63 74 65 | 64 00 2b 03 52 74 6c 78 |sExpecte|d.+.Rtlx|
|00000900| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 54 6f 4f |UnicodeS|tringToO|
|00000910| 65 6d 53 69 7a 65 00 00 | 1c 03 52 74 6c 55 70 63 |emSize..|..RtlUpc|
|00000920| 61 73 65 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |aseUnico|deString|
|00000930| 54 6f 43 6f 75 6e 74 65 | 64 4f 65 6d 53 74 72 69 |ToCounte|dOemStri|
|00000940| 6e 67 00 00 ab 00 46 73 | 52 74 6c 4c 65 67 61 6c |ng....Fs|RtlLegal|
|00000950| 41 6e 73 69 43 68 61 72 | 61 63 74 65 72 41 72 72 |AnsiChar|acterArr|
|00000960| 61 79 00 00 27 00 44 62 | 67 42 72 65 61 6b 50 6f |ay..'.Db|gBreakPo|
|00000970| 69 6e 74 00 2a 00 44 62 | 67 50 72 69 6e 74 00 00 |int.*.Db|gPrint..|
|00000980| 75 00 45 78 66 49 6e 74 | 65 72 6c 6f 63 6b 65 64 |u.ExfInt|erlocked|
|00000990| 49 6e 73 65 72 74 54 61 | 69 6c 4c 69 73 74 00 00 |InsertTa|ilList..|
|000009a0| 44 01 49 6f 66 43 61 6c | 6c 44 72 69 76 65 72 00 |D.IofCal|lDriver.|
|000009b0| ba 01 4b 65 66 52 65 6c | 65 61 73 65 53 70 69 6e |..KefRel|easeSpin|
|000009c0| 4c 6f 63 6b 46 72 6f 6d | 44 70 63 4c 65 76 65 6c |LockFrom|DpcLevel|
|000009d0| 00 00 b9 01 4b 65 66 41 | 63 71 75 69 72 65 53 70 |....KefA|cquireSp|
|000009e0| 69 6e 4c 6f 63 6b 41 74 | 44 70 63 4c 65 76 65 6c |inLockAt|DpcLevel|
|000009f0| 00 00 07 01 49 6f 46 72 | 65 65 49 72 70 00 e0 00 |....IoFr|eeIrp...|
|00000a00| 49 6f 41 6c 6c 6f 63 61 | 74 65 49 72 70 00 78 00 |IoAlloca|teIrp.x.|
|00000a10| 45 78 66 49 6e 74 65 72 | 6c 6f 63 6b 65 64 52 65 |ExfInter|lockedRe|
|00000a20| 6d 6f 76 65 48 65 61 64 | 4c 69 73 74 00 00 b8 01 |moveHead|List....|
|00000a30| 4b 65 57 61 69 74 46 6f | 72 53 69 6e 67 6c 65 4f |KeWaitFo|rSingleO|
|00000a40| 62 6a 65 63 74 00 62 00 | 45 78 51 75 65 75 65 57 |bject.b.|ExQueueW|
|00000a50| 6f 72 6b 49 74 65 6d 00 | 14 01 49 6f 47 65 74 54 |orkItem.|..IoGetT|
|00000a60| 6f 70 4c 65 76 65 6c 49 | 72 70 00 00 d4 01 4d 6d |opLevelI|rp....Mm|
|00000a70| 43 61 6e 46 69 6c 65 42 | 65 54 72 75 6e 63 61 74 |CanFileB|eTruncat|
|00000a80| 65 64 00 00 0c 01 49 6f | 47 65 74 43 75 72 72 65 |ed....Io|GetCurre|
|00000a90| 6e 74 50 72 6f 63 65 73 | 73 00 c8 00 46 73 52 74 |ntProces|s...FsRt|
|00000aa0| 6c 52 65 67 69 73 74 65 | 72 55 6e 63 50 72 6f 76 |lRegiste|rUncProv|
|00000ab0| 69 64 65 72 00 00 91 00 | 46 73 52 74 6c 44 65 72 |ider....|FsRtlDer|
|00000ac0| 65 67 69 73 74 65 72 55 | 6e 63 50 72 6f 76 69 64 |egisterU|ncProvid|
|00000ad0| 65 72 00 00 47 03 53 65 | 52 65 6c 65 61 73 65 53 |er..G.Se|ReleaseS|
|00000ae0| 75 62 6a 65 63 74 43 6f | 6e 74 65 78 74 00 32 03 |ubjectCo|ntext.2.|
|00000af0| 53 65 43 61 70 74 75 72 | 65 53 75 62 6a 65 63 74 |SeCaptur|eSubject|
|00000b00| 43 6f 6e 74 65 78 74 00 | f6 01 4d 6d 55 6e 6c 6f |Context.|..MmUnlo|
|00000b10| 63 6b 50 61 67 65 73 00 | 7a 02 52 74 6c 41 70 70 |ckPages.|z.RtlApp|
|00000b20| 65 6e 64 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |endUnico|deString|
|00000b30| 54 6f 53 74 72 69 6e 67 | 00 00 ed 03 77 63 73 6e |ToString|....wcsn|
|00000b40| 63 70 79 00 43 03 53 65 | 51 75 65 72 79 41 75 74 |cpy.C.Se|QueryAut|
|00000b50| 68 65 6e 74 69 63 61 74 | 69 6f 6e 49 64 54 6f 6b |henticat|ionIdTok|
|00000b60| 65 6e 00 00 f3 00 49 6f | 43 72 65 61 74 65 44 65 |en....Io|CreateDe|
|00000b70| 76 69 63 65 00 00 fb 00 | 49 6f 44 65 6c 65 74 65 |vice....|IoDelete|
|00000b80| 44 65 76 69 63 65 00 00 | 3c 00 45 78 44 65 6c 65 |Device..|<.ExDele|
|00000b90| 74 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |teResour|ceLite..|
|00000ba0| 81 03 5a 77 51 75 65 72 | 79 44 65 66 61 75 6c 74 |..ZwQuer|yDefault|
|00000bb0| 4c 6f 63 61 6c 65 00 00 | 5b 03 5a 77 43 6c 6f 73 |Locale..|[.ZwClos|
|00000bc0| 65 00 79 03 5a 77 4f 70 | 65 6e 4b 65 79 00 8c 03 |e.y.ZwOp|enKey...|
|00000bd0| 5a 77 51 75 65 72 79 56 | 61 6c 75 65 4b 65 79 00 |ZwQueryV|alueKey.|
|00000be0| 59 01 4b 65 44 65 74 61 | 63 68 50 72 6f 63 65 73 |Y.KeDeta|chProces|
|00000bf0| 73 00 4f 01 4b 65 41 74 | 74 61 63 68 50 72 6f 63 |s.O.KeAt|tachProc|
|00000c00| 65 73 73 00 44 02 4f 62 | 66 44 65 72 65 66 65 72 |ess.D.Ob|fDerefer|
|00000c10| 65 6e 63 65 4f 62 6a 65 | 63 74 00 00 11 01 49 6f |enceObje|ct....Io|
|00000c20| 47 65 74 52 65 6c 61 74 | 65 64 44 65 76 69 63 65 |GetRelat|edDevice|
|00000c30| 4f 62 6a 65 63 74 00 00 | 3f 02 4f 62 52 65 66 65 |Object..|?.ObRefe|
|00000c40| 72 65 6e 63 65 4f 62 6a | 65 63 74 42 79 48 61 6e |renceObj|ectByHan|
|00000c50| 64 6c 65 00 60 03 5a 77 | 43 72 65 61 74 65 46 69 |dle.`.Zw|CreateFi|
|00000c60| 6c 65 00 00 70 01 4b 65 | 49 6e 69 74 69 61 6c 69 |le..p.Ke|Initiali|
|00000c70| 7a 65 45 76 65 6e 74 00 | e3 01 4d 6d 4c 6f 63 6b |zeEvent.|..MmLock|
|00000c80| 50 61 67 61 62 6c 65 44 | 61 74 61 53 65 63 74 69 |PagableD|ataSecti|
|00000c90| 6f 6e 00 00 f5 01 4d 6d | 55 6e 6c 6f 63 6b 50 61 |on....Mm|UnlockPa|
|00000ca0| 67 61 62 6c 65 49 6d 61 | 67 65 53 65 63 74 69 6f |gableIma|geSectio|
|00000cb0| 6e 00 d2 03 73 70 72 69 | 6e 74 66 00 79 02 52 74 |n...spri|ntf.y.Rt|
|00000cc0| 6c 41 70 70 65 6e 64 53 | 74 72 69 6e 67 54 6f 53 |lAppendS|tringToS|
|00000cd0| 74 72 69 6e 67 00 77 02 | 52 74 6c 41 6e 73 69 53 |tring.w.|RtlAnsiS|
|00000ce0| 74 72 69 6e 67 54 6f 55 | 6e 69 63 6f 64 65 53 74 |tringToU|nicodeSt|
|00000cf0| 72 69 6e 67 00 00 28 03 | 52 74 6c 78 41 6e 73 69 |ring..(.|RtlxAnsi|
|00000d00| 53 74 72 69 6e 67 54 6f | 55 6e 69 63 6f 64 65 53 |StringTo|UnicodeS|
|00000d10| 69 7a 65 00 cd 02 52 74 | 6c 49 6e 69 74 41 6e 73 |ize...Rt|lInitAns|
|00000d20| 69 53 74 72 69 6e 67 00 | d4 02 52 74 6c 49 6e 69 |iString.|..RtlIni|
|00000d30| 74 69 61 6c 69 7a 65 55 | 6e 69 63 6f 64 65 50 72 |tializeU|nicodePr|
|00000d40| 65 66 69 78 00 00 a6 00 | 46 73 52 74 6c 49 73 46 |efix....|FsRtlIsF|
|00000d50| 61 74 44 62 63 73 4c 65 | 67 61 6c 00 b6 02 52 74 |atDbcsLe|gal...Rt|
|00000d60| 6c 46 69 6e 64 43 6c 65 | 61 72 42 69 74 73 41 6e |lFindCle|arBitsAn|
|00000d70| 64 53 65 74 00 00 85 02 | 52 74 6c 43 6c 65 61 72 |dSet....|RtlClear|
|00000d80| 42 69 74 73 00 00 ae 01 | 4b 65 53 65 74 54 69 6d |Bits....|KeSetTim|
|00000d90| 65 72 00 00 77 01 4b 65 | 49 6e 69 74 69 61 6c 69 |er..w.Ke|Initiali|
|00000da0| 7a 65 54 69 6d 65 72 00 | 6f 01 4b 65 49 6e 69 74 |zeTimer.|o.KeInit|
|00000db0| 69 61 6c 69 7a 65 44 70 | 63 00 57 01 4b 65 44 65 |ializeDp|c.W.KeDe|
|00000dc0| 6c 61 79 45 78 65 63 75 | 74 69 6f 6e 54 68 72 65 |layExecu|tionThre|
|00000dd0| 61 64 00 00 6e 74 6f 73 | 6b 72 6e 6c 2e 65 78 65 |ad..ntos|krnl.exe|
|00000de0| 00 00 18 03 52 74 6c 55 | 6e 77 69 6e 64 00 4d 00 |....RtlU|nwind.M.|
|00000df0| 4b 66 52 65 6c 65 61 73 | 65 53 70 69 6e 4c 6f 63 |KfReleas|eSpinLoc|
|00000e00| 6b 00 4a 00 4b 66 41 63 | 71 75 69 72 65 53 70 69 |k.J.KfAc|quireSpi|
|00000e10| 6e 4c 6f 63 6b 00 48 41 | 4c 2e 64 6c 6c 00 24 00 |nLock.HA|L.dll.$.|
|00000e20| 54 64 69 52 65 67 69 73 | 74 65 72 4e 6f 74 69 66 |TdiRegis|terNotif|
|00000e30| 69 63 61 74 69 6f 6e 48 | 61 6e 64 6c 65 72 00 00 |icationH|andler..|
|00000e40| 1d 00 54 64 69 49 6e 69 | 74 69 61 6c 69 7a 65 00 |..TdiIni|tialize.|
|00000e50| 1c 00 54 64 69 44 65 72 | 65 67 69 73 74 65 72 4e |..TdiDer|egisterN|
|00000e60| 6f 74 69 66 69 63 61 74 | 69 6f 6e 48 61 6e 64 6c |otificat|ionHandl|
|00000e70| 65 72 00 00 54 44 49 2e | 53 59 53 00 00 00 00 00 |er..TDI.|SYS.....|
+--------+-------------------------+-------------------------+--------+--------+