home *** CD-ROM | disk | FTP | other *** search
Unknown | 1996-12-06 | 6.0 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 56 57 33 f6 68 e8 76 01 | 00 ff 15 64 65 01 00 6a |VW3.h.v.|...de..j|
|00000010| 01 56 68 f0 76 01 00 ff | 15 5c 65 01 00 b9 b0 76 |.Vh.v...|.\e....v|
|00000020| 01 00 e8 30 2f ff ff b8 | a8 76 01 00 b9 cc 00 00 |...0/...|.v......|
|00000030| 22 a3 ac 76 01 00 a3 a8 | 76 01 00 e8 d5 31 fe ff |"..v....|v....1..|
|00000040| a3 a0 76 01 00 3b c6 75 | 0a be 9a 00 00 c0 8b c6 |..v..;.u|........|
|00000050| 5f 5e c3 8b 3d a0 76 01 | 00 33 c0 b9 33 00 00 00 |_^..=.v.|.3..3...|
|00000060| f3 ab b8 70 76 01 00 33 | c9 c7 00 03 00 00 00 83 |...pv..3|........|
|00000070| c0 0c 3d a0 76 01 00 89 | 48 fc 89 48 f8 72 ea 6a |..=.v...|H..H.r.j|
|00000080| 01 68 2c 01 00 00 6a 00 | 68 7b a3 01 00 e8 bb 78 |.h,...j.|h{.....x|
|00000090| fe ff eb ba 56 68 18 69 | 01 00 68 30 71 01 00 8b |....Vh.i|..h0q...|
|000000a0| 35 08 64 01 00 ff d6 68 | fc 68 01 00 68 38 71 01 |5.d....h|.h..h8q.|
|000000b0| 00 ff d6 68 e0 68 01 00 | 68 28 71 01 00 ff d6 68 |...h.h..|h(q....h|
|000000c0| c4 68 01 00 68 40 71 01 | 00 ff d6 68 b0 68 01 00 |.h..h@q.|...h.h..|
|000000d0| 68 48 71 01 00 ff d6 68 | 1c 66 01 00 68 20 71 01 |hHq....h|.f..h q.|
|000000e0| 00 ff d6 68 ac 68 01 00 | 68 e0 70 01 00 ff d6 68 |...h.h..|h.p....h|
|000000f0| a4 68 01 00 68 e8 70 01 | 00 ff d6 68 98 68 01 00 |.h..h.p.|...h.h..|
|00000100| 68 48 77 01 00 ff d6 68 | 8c 68 01 00 68 50 77 01 |hHw....h|.h..hPw.|
|00000110| 00 ff d6 68 80 68 01 00 | 68 58 77 01 00 ff d6 68 |...h.h..|hXw....h|
|00000120| 64 68 01 00 68 18 71 01 | 00 ff d6 68 54 68 01 00 |dh..h.q.|...hTh..|
|00000130| 68 f0 70 01 00 ff d6 68 | 34 68 01 00 68 f8 70 01 |h.p....h|4h..h.p.|
|00000140| 00 ff d6 68 0c 68 01 00 | 68 00 71 01 00 ff d6 68 |...h.h..|h.q....h|
|00000150| e4 67 01 00 68 08 71 01 | 00 ff d6 68 90 67 01 00 |.g..h.q.|...h.g..|
|00000160| 68 10 71 01 00 ff d6 33 | c0 5e c3 56 b9 50 6a 01 |h.q....3|.^.V.Pj.|
|00000170| 00 be 43 df 01 00 e8 dc | 2d ff ff 6a 01 68 10 0e |..C.....|-..j.h..|
|00000180| 00 00 68 18 6a 01 00 56 | e8 c0 77 fe ff 85 c0 7c |..h.j..V|..w....||
|00000190| 12 6a 01 68 58 02 00 00 | 68 28 6a 01 00 56 e8 aa |.j.hX...|h(j..V..|
|000001a0| 77 fe ff 5e c3 55 8b ec | 83 ec 08 56 57 be 70 77 |w..^.U..|...VW.pw|
|000001b0| 01 00 bf 98 77 01 00 56 | ff 15 d0 64 01 00 68 c0 |....w..V|...d..h.|
|000001c0| 77 01 00 ff 15 64 65 01 | 00 6a 00 68 e6 02 01 00 |w....de.|.j.h....|
|000001d0| 57 ff 15 74 64 01 00 c7 | 45 f8 80 69 67 ff c7 45 |W..td...|E..ig..E|
|000001e0| fc ff ff ff ff 57 ff 75 | fc ff 75 f8 56 ff 15 d4 |.....W.u|..u.V...|
|000001f0| 64 01 00 33 c0 5f 5e 8b | e5 5d c3 55 8b ec 83 ec |d..3._^.|.].U....|
|00000200| 08 53 56 57 6a 00 68 90 | 74 01 00 ff 15 00 64 01 |.SVWj.h.|t.....d.|
|00000210| 00 6a 00 68 b8 74 01 00 | ff 15 00 64 01 00 e8 ae |.j.h.t..|...d....|
|00000220| 01 00 00 85 c0 7c 58 68 | f0 65 01 00 8d 45 f8 50 |.....|Xh|.e...E.P|
|00000230| 33 f6 ff 15 08 64 01 00 | 68 0c 72 01 00 8d 45 f8 |3....d..|h.r...E.|
|00000240| 56 56 6a 12 50 56 ff 75 | 08 ff 15 04 64 01 00 8b |VVj.PV.u|....d...|
|00000250| f8 85 ff 7d 09 e8 33 b5 | ff ff 8b c7 eb 21 68 e4 |...}..3.|.....!h.|
|00000260| 74 01 00 68 8d 5d 01 00 | 68 60 43 01 00 e8 59 71 |t..h.]..|h`C...Yq|
|00000270| fe ff 8b f0 85 f6 7d 10 | e8 10 b5 ff ff 8b c6 5f |......}.|......._|
|00000280| 5e 5b 8b e5 5d c2 08 00 | b9 8d 0b 02 00 33 d2 e8 |^[..]...|.....3..|
|00000290| 0d 2f ff ff 8b f8 85 ff | 7c 78 33 f6 bb 80 75 01 |./......||x3...u.|
|000002a0| 00 c7 05 84 74 01 00 01 | 00 00 00 6a 00 53 ff 15 |....t...|...j.S..|
|000002b0| 00 64 01 00 b9 d3 54 01 | 00 8b d6 e8 e1 2e ff ff |.d....T.|........|
|000002c0| 8b f8 85 ff 7c 10 83 c3 | 28 46 81 fb d0 75 01 00 |....|...|(F...u..|
|000002d0| 72 d9 85 ff 7d 59 4e 78 | 35 6b f6 28 81 c6 80 75 |r...}YNx|5k.(...u|
|000002e0| 01 00 bb d8 71 01 00 53 | ff 15 24 64 01 00 68 f0 |....q..S|..$d..h.|
|000002f0| 75 01 00 56 83 ee 28 ff | 15 30 64 01 00 8b cb 33 |u..V..(.|.0d....3|
|00000300| d2 e8 34 fd fe ff 81 fe | 80 75 01 00 73 d9 85 ff |..4.....|.u..s...|
|00000310| 7d 0d ff 75 08 e8 a0 6b | ff ff bf 01 00 00 c0 68 |}..u...k|.......h|
|00000320| d8 71 01 00 ff 15 24 64 | 01 00 e9 2b ff ff ff c7 |.q....$d|...+....|
|00000330| 05 80 74 01 00 02 00 00 | 00 33 f6 b9 c6 45 01 00 |..t.....|.3...E..|
|00000340| 8b d6 c6 86 a8 73 01 00 | 01 e8 53 2e ff ff 8b f8 |.....s..|..S.....|
|00000350| 85 ff 7c 4b 46 83 fe 03 | 7c e1 c7 05 7c 74 01 00 |..|KF...||...|t..|
|00000360| 03 00 00 00 85 ff 7c aa | e8 d7 03 00 00 8b f8 85 |......|.|........|
|00000370| ff 7c 9f 8b 45 08 b9 1c | 00 00 00 c7 40 34 ba 4a |.|..E...|....@4.J|
|00000380| 02 00 8d 78 38 b8 60 23 | 02 00 f3 ab a1 0c 72 01 |...x8.`#|......r.|
|00000390| 00 33 ff 50 ff 15 fc 63 | 01 00 e9 6f ff ff ff c6 |.3.P...c|...o....|
|000003a0| 86 a8 73 01 00 00 85 f6 | 7e b0 be d8 71 01 00 56 |..s.....|~...q..V|
|000003b0| ff 15 24 64 01 00 68 98 | 73 01 00 68 90 74 01 00 |..$d..h.|s..h.t..|
|000003c0| ff 15 30 64 01 00 8b ce | 33 d2 e8 6b fc fe ff eb |..0d....|3..k....|
|000003d0| 89 55 8b ec 83 ec 04 53 | 56 57 8b 35 64 65 01 00 |.U.....S|VW.5de..|
|000003e0| 68 68 71 01 00 33 db ff | d6 68 6c 71 01 00 ff d6 |hhq..3..|.hlq....|
|000003f0| 68 78 72 01 00 ff d6 53 | 53 68 d8 71 01 00 ff 15 |hxr....S|Sh.q....|
|00000400| 5c 65 01 00 68 ff ff 00 | 00 68 e8 71 01 00 ff 15 |\e..h...|.h.q....|
|00000410| 4c 65 01 00 b8 98 73 01 | 00 89 1d a0 73 01 00 a3 |Le....s.|....s...|
|00000420| 9c 73 01 00 89 1d a4 73 | 01 00 a3 98 73 01 00 88 |.s.....s|....s...|
|00000430| 1d 40 73 01 00 68 08 67 | 01 00 8b 35 6c 65 01 00 |.@s..h.g|...5le..|
|00000440| 68 58 73 01 00 88 1d 41 | 73 01 00 c7 05 38 73 01 |hXs....A|s....8s.|
|00000450| 00 0c 00 00 00 c7 05 3c | 73 01 00 02 00 00 00 ff |.......<|s.......|
|00000460| d6 68 f4 66 01 00 68 60 | 73 01 00 ff d6 68 e4 66 |.h.f..h`|s....h.f|
|00000470| 01 00 68 68 73 01 00 ff | d6 68 d4 66 01 00 68 48 |..hhs...|.h.f..hH|
|00000480| 73 01 00 ff d6 68 c4 66 | 01 00 68 50 73 01 00 ff |s....h.f|..hPs...|
|00000490| d6 68 b0 66 01 00 be ff | ff ff ff 68 08 75 01 00 |.h.f....|...h.u..|
|000004a0| ff 15 08 64 01 00 c7 05 | 70 73 01 00 80 0f 05 fd |...d....|ps......|
|000004b0| b9 30 72 01 00 89 35 74 | 73 01 00 c7 05 78 73 01 |.0r...5t|s....xs.|
|000004c0| 00 80 3c 36 fe c7 05 80 | 73 01 00 00 d3 ce fe 89 |..<6....|s.......|
|000004d0| 35 7c 73 01 00 89 35 84 | 73 01 00 e8 77 2a ff ff |5|s...5.|s...w*..|
|000004e0| a0 a8 66 01 00 a2 20 72 | 01 00 8a 0d a9 66 01 00 |..f... r|.....f..|
|000004f0| 8a 15 aa 66 01 00 a0 ab | 66 01 00 88 0d 21 72 01 |...f....|f....!r.|
|00000500| 00 88 15 22 72 01 00 8a | 0d a0 66 01 00 8a 15 a1 |..."r...|..f.....|
|00000510| 66 01 00 a2 23 72 01 00 | 88 0d 24 72 01 00 a0 a2 |f...#r..|..$r....|
|00000520| 66 01 00 8a 0d a3 66 01 | 00 88 15 25 72 01 00 a2 |f.....f.|...%r...|
|00000530| 26 72 01 00 8a 15 9c 66 | 01 00 a0 9d 66 01 00 88 |&r.....f|....f...|
|00000540| 0d 27 72 01 00 88 15 28 | 72 01 00 8a 0d 9e 66 01 |.'r....(|r.....f.|
|00000550| 00 8a 15 9f 66 01 00 a2 | 29 72 01 00 88 0d 2a 72 |....f...|)r....*r|
|00000560| 01 00 c7 45 fc 04 03 02 | 01 8a 45 fc 88 15 2b 72 |...E....|..E...+r|
|00000570| 01 00 2c 04 89 1d 08 72 | 01 00 68 84 72 01 00 3c |..,....r|..h.r..<|
|00000580| 01 1a c0 89 35 d0 71 01 | 00 f6 d8 c7 05 cc 71 01 |....5.q.|......q.|
|00000590| 00 ff 00 00 00 a2 e0 74 | 01 00 e8 65 22 fe ff 89 |.......t|...e"...|
|000005a0| 5d fc 8b 45 fc 8b 04 c5 | 80 d8 02 00 85 c0 74 08 |]..E....|......t.|
|000005b0| ff d0 8b d8 85 db 7c 12 | ff 45 fc 83 7d fc 0b 7c |......|.|.E..}..||
|000005c0| e1 33 c0 5f 5e 5b 8b e5 | 5d c3 83 7d fc 00 7e 16 |.3._^[..|]..}..~.|
|000005d0| bf 84 d8 02 00 8b 75 fc | 8b 07 85 c0 74 02 ff d0 |......u.|....t...|
|000005e0| 83 c7 08 4e 75 f2 8b c3 | eb d9 53 b9 c0 00 00 99 |...Nu...|..S.....|
|000005f0| 56 57 e8 1e 2c fe ff a3 | c4 77 01 00 85 c0 75 09 |VW..,...|.w....u.|
|00000600| b8 9a 00 00 c0 5f 5e 5b | c3 b9 60 00 00 99 33 f6 |....._^[|..`...3.|
|00000610| e8 00 2c fe ff a3 c8 77 | 01 00 3b c6 75 18 8b 0d |..,....w|..;.u...|
|00000620| c4 77 01 00 e8 cc 2d fe | ff b8 9a 00 00 c0 89 35 |.w....-.|.......5|
|00000630| c4 77 01 00 eb cf b9 21 | 00 00 00 bb 01 00 00 00 |.w.....!|........|
|00000640| 84 c9 7c 12 a1 6c 64 01 | 00 33 db 8b 30 0f b6 d1 |..|..ld.|.3..0...|
|00000650| 8a 1c 32 83 e3 04 85 db | 75 2c 66 8b 15 cc 77 01 |..2.....|u,f...w.|
|00000660| 00 a1 c4 77 01 00 66 89 | 54 48 c0 8b 15 c8 77 01 |...w..f.|TH....w.|
|00000670| 00 0f b7 1d cc 77 01 00 | 88 8c 13 e0 0f ff ff 66 |.....w..|.......f|
|00000680| ff 05 cc 77 01 00 41 83 | f9 7f 7e af 66 a1 cc 77 |...w..A.|..~.f..w|
|00000690| 01 00 8b 0d c4 77 01 00 | 66 89 01 8b 0d c4 77 01 |.....w..|f.....w.|
|000006a0| 00 66 8b 01 8b 0d c8 77 | 01 00 0f b7 15 cc 77 01 |.f.....w|......w.|
|000006b0| 00 66 a3 d8 70 01 00 c6 | 84 0a e0 0f ff ff 20 66 |.f..p...|...... f|
|000006c0| ff 05 cc 77 01 00 8b 15 | c4 77 01 00 66 a1 cc 77 |...w....|.w..f..w|
|000006d0| 01 00 66 89 42 1c 8b 15 | c4 77 01 00 66 8b 42 1c |..f.B...|.w..f.B.|
|000006e0| 8b 0d c8 77 01 00 0f b7 | 1d cc 77 01 00 66 a3 dc |...w....|..w..f..|
|000006f0| 70 01 00 bf a0 71 01 00 | c6 84 0b e0 0f ff ff 2e |p....q..|........|
|00000700| 66 ff 05 cc 77 01 00 b9 | 0b 00 00 00 66 a1 cc 77 |f...w...|....f..w|
|00000710| 01 00 66 a3 d0 77 01 00 | 33 c0 66 ff 05 cc 77 01 |..f..w..|3.f...w.|
|00000720| 00 f3 ab e9 dd fe ff ff | 68 60 76 01 00 ff 15 64 |........|h`v....d|
|00000730| 65 01 00 6a 00 6a 0f 6a | 00 68 35 28 01 00 e8 0a |e..j.j.j|.h5(....|
|00000740| 72 fe ff c3 55 8b ec 83 | ec 70 56 57 e8 fa 5e fe |r...U...|.pVW..^.|
|00000750| ff ff 15 a8 65 01 00 a3 | 70 72 01 00 8d 45 fc 50 |....e...|pr...E.P|
|00000760| 68 ff 00 0f 00 6a ff ff | 15 ac 65 01 00 8b f8 33 |h....j..|..e....3|
|00000770| c0 85 ff 7d 1b 50 50 50 | 57 68 01 04 0d 00 68 04 |...}.PPP|Wh....h.|
|00000780| 2f 00 00 e8 7f 7f fe ff | 8b c7 5f 5e 8b e5 5d c3 |/.......|.._^..].|
|00000790| c7 45 90 18 00 00 00 33 | f6 68 68 72 01 00 89 75 |.E.....3|.hhr...u|
|000007a0| 94 89 75 9c 6a 02 8d 45 | 90 56 89 75 98 50 89 75 |..u.j..E|.V.u.P.u|
|000007b0| a0 c7 45 a4 38 73 01 00 | 68 ff 00 0f 00 ff 75 fc |..E.8s..|h.....u.|
|000007c0| ff 15 dc 64 01 00 ff 75 | fc 8b f8 ff 15 44 64 01 |...d...u|.....Dd.|
|000007d0| 00 85 ff 7d 15 56 56 56 | 57 68 13 04 0d 00 68 04 |...}.VVV|Wh....h.|
|000007e0| 2f 00 00 e8 1f 7f fe ff | eb 9e c7 45 b8 01 00 00 |/.......|...E....|
|000007f0| 00 c7 45 c4 02 00 00 80 | c7 45 f8 12 00 00 00 8b |..E.....|.E......|
|00000800| 45 f8 99 8d 4d f4 89 45 | bc 51 8d 45 a8 50 33 f6 |E...M..E|.Q.E.P3.|
|00000810| 6a 10 a1 68 72 01 00 89 | 55 c0 8d 55 b8 52 56 50 |j..hr...|U..U.RVP|
|00000820| ff 15 e0 64 01 00 8b f8 | 85 ff 7d 18 56 56 56 57 |...d....|..}.VVVW|
|00000830| 68 25 04 0d 00 68 04 2f | 00 00 e8 c8 7e fe ff e9 |h%...h./|....~...|
|00000840| 44 ff ff ff 8d 45 c8 be | 10 66 01 00 8b f8 8d 4d |D....E..|.f.....M|
|00000850| d4 51 89 45 e0 66 c7 45 | dc 08 00 a5 a5 68 60 72 |.Q.E.f.E|.....h`r|
|00000860| 01 00 33 f6 56 8d 45 dc | 56 56 56 6a 01 50 56 e8 |..3.V.E.|VVVj.PV.|
|00000870| 53 5e fe ff 8b f8 85 ff | 7d 23 39 35 68 72 01 00 |S^......|}#95hr..|
|00000880| 0f 84 02 ff ff ff a1 68 | 72 01 00 50 ff 15 44 64 |.......h|r..P..Dd|
|00000890| 01 00 89 35 68 72 01 00 | e9 eb fe ff ff 68 8c ba |...5hr..|.....h..|
|000008a0| 02 00 ff 15 0c 64 01 00 | 50 a3 74 74 01 00 ff 15 |.....d..|P.tt....|
|000008b0| f0 63 01 00 e9 cf fe ff | ff 68 f4 74 01 00 ff 15 |.c......|.h.t....|
|000008c0| 64 65 01 00 33 c0 c3 b9 | 10 75 01 00 e8 86 26 ff |de..3...|.u....&.|
|000008d0| ff 33 c0 c3 57 68 74 75 | 01 00 ff 15 64 65 01 00 |.3..Whtu|....de..|
|000008e0| 68 6c 75 01 00 bf e8 75 | 01 00 ff 15 64 65 01 00 |hlu....u|....de..|
|000008f0| 68 60 67 01 00 68 78 75 | 01 00 ff 15 08 64 01 00 |h`g..hxu|.....d..|
|00000900| b9 d0 75 01 00 33 c0 ab | ab bf e0 75 01 00 ab ab |..u..3..|...u....|
|00000910| 89 49 04 89 09 83 c1 08 | 81 f9 e0 75 01 00 72 f0 |.I......|...u..r.|
|00000920| 33 c0 5f c3 68 f8 74 01 | 00 ff 15 64 65 01 00 33 |3._.h.t.|...de..3|
|00000930| c0 c3 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000940| b0 e5 01 00 00 00 00 00 | 00 00 00 00 c0 e7 01 00 |........|........|
|00000950| e0 63 00 00 84 e7 01 00 | 00 00 00 00 00 00 00 00 |.c......|........|
|00000960| 98 f2 01 00 b4 65 00 00 | 9c e7 01 00 00 00 00 00 |.....e..|........|
|00000970| 00 00 00 00 00 f3 01 00 | cc 65 00 00 a8 e7 01 00 |........|.e......|
|00000980| 00 00 00 00 00 00 00 00 | 50 f3 01 00 d8 65 00 00 |........|P....e..|
|00000990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000009a0| 00 00 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|000009b0| d0 e7 01 00 de e7 01 00 | f6 e7 01 00 10 e8 01 00 |........|........|
|000009c0| 22 e8 01 00 40 e8 01 00 | 60 e8 01 00 80 e8 01 00 |"...@...|`.......|
|000009d0| a2 e8 01 00 b6 e8 01 00 | d0 e8 01 00 e8 e8 01 00 |........|........|
|000009e0| 04 e9 01 00 22 e9 01 00 | 32 e9 01 00 40 e9 01 00 |...."...|2...@...|
|000009f0| 58 e9 01 00 70 e9 01 00 | 80 e9 01 00 98 e9 01 00 |X...p...|........|
|00000a00| b0 e9 01 00 c0 e9 01 00 | dc e9 01 00 ec e9 01 00 |........|........|
|00000a10| 00 ea 01 00 12 ea 01 00 | 1c ea 01 00 2e ea 01 00 |........|........|
|00000a20| 48 ea 01 00 60 ea 01 00 | 80 ea 01 00 98 ea 01 00 |H...`...|........|
|00000a30| bc ea 01 00 dc ea 01 00 | f4 ea 01 00 0c eb 01 00 |........|........|
|00000a40| 2c eb 01 00 3c eb 01 00 | 4e eb 01 00 6c eb 01 00 |,...<...|N...l...|
|00000a50| 86 eb 01 00 a0 eb 01 00 | c0 eb 01 00 e0 eb 01 00 |........|........|
|00000a60| f8 eb 01 00 02 ec 01 00 | 20 ec 01 00 2e ec 01 00 |........| .......|
|00000a70| 4c ec 01 00 64 ec 01 00 | 80 ec 01 00 9a ec 01 00 |L...d...|........|
|00000a80| a8 ec 01 00 b8 ec 01 00 | c8 ec 01 00 e8 ec 01 00 |........|........|
|00000a90| f6 ec 01 00 10 ed 01 00 | 2a ed 01 00 34 ed 01 00 |........|*...4...|
|00000aa0| 58 ed 01 00 6c ed 01 00 | 7a ed 01 00 84 ed 01 00 |X...l...|z.......|
|00000ab0| 98 ed 01 00 b2 ed 01 00 | cc ed 01 00 e8 ed 01 00 |........|........|
|00000ac0| 00 ee 01 00 10 ee 01 00 | 30 ee 01 00 40 ee 01 00 |........|0...@...|
|00000ad0| 50 ee 01 00 6c ee 01 00 | 7c ee 01 00 94 ee 01 00 |P...l...||.......|
|00000ae0| ac ee 01 00 c2 ee 01 00 | d0 ee 01 00 ea ee 01 00 |........|........|
|00000af0| f8 ee 01 00 04 ef 01 00 | 18 ef 01 00 2a ef 01 00 |........|....*...|
|00000b00| 44 ef 01 00 60 ef 01 00 | 74 ef 01 00 80 ef 01 00 |D...`...|t.......|
|00000b10| 96 ef 01 00 ae ef 01 00 | d0 ef 01 00 f0 ef 01 00 |........|........|
|00000b20| 04 f0 01 00 20 f0 01 00 | 3c f0 01 00 60 f0 01 00 |.... ...|<...`...|
|00000b30| 80 f0 01 00 90 f0 01 00 | a8 f0 01 00 b6 f0 01 00 |........|........|
|00000b40| c6 f0 01 00 e6 f0 01 00 | 06 f1 01 00 26 f1 01 00 |........|....&...|
|00000b50| 3c f1 01 00 56 f1 01 00 | 70 f1 01 00 8e f1 01 00 |<...V...|p.......|
|00000b60| b0 f1 01 00 d2 f1 01 00 | dc f1 01 00 00 f2 01 00 |........|........|
|00000b70| 20 f2 01 00 40 f2 01 00 | 68 f2 01 00 7e f2 01 00 | ...@...|h...~...|
|00000b80| 00 00 00 00 a0 f2 01 00 | b0 f2 01 00 be f2 01 00 |........|........|
|00000b90| d2 f2 01 00 e6 f2 01 00 | 00 00 00 00 08 f3 01 00 |........|........|
|00000ba0| 2c f3 01 00 00 00 00 00 | 5c f3 01 00 78 f3 01 00 |,.......|\...x...|
|00000bb0| 90 f3 01 00 ac f3 01 00 | c8 f3 01 00 00 00 00 00 |........|........|
|00000bc0| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 cc cc |ntoskrnl|.exe....|
|00000bd0| 90 02 52 74 6c 43 6f 70 | 79 53 69 64 00 00 e1 02 |..RtlCop|ySid....|
|00000be0| 52 74 6c 4c 65 6e 67 74 | 68 52 65 71 75 69 72 65 |RtlLengt|hRequire|
|00000bf0| 64 53 69 64 00 00 60 01 | 4b 65 47 65 74 43 75 72 |dSid..`.|KeGetCur|
|00000c00| 72 65 6e 74 54 68 72 65 | 61 64 00 00 cc cc cc cc |rentThre|ad......|
|00000c10| 92 01 4b 65 52 65 6c 65 | 61 73 65 4d 75 74 65 78 |..KeRele|aseMutex|
|00000c20| 00 00 f5 01 4d 6d 55 6e | 6c 6f 63 6b 50 61 67 61 |....MmUn|lockPaga|
|00000c30| 62 6c 65 49 6d 61 67 65 | 53 65 63 74 69 6f 6e 00 |bleImage|Section.|
|00000c40| e5 01 4d 6d 4c 6f 63 6b | 50 61 67 61 62 6c 65 53 |..MmLock|PagableS|
|00000c50| 65 63 74 69 6f 6e 42 79 | 48 61 6e 64 6c 65 00 00 |ectionBy|Handle..|
|00000c60| 32 01 49 6f 53 65 74 54 | 68 72 65 61 64 48 61 72 |2.IoSetT|hreadHar|
|00000c70| 64 45 72 72 6f 72 4d 6f | 64 65 00 00 cc cc cc cc |dErrorMo|de......|
|00000c80| 28 01 49 6f 52 65 67 69 | 73 74 65 72 53 68 75 74 |(.IoRegi|sterShut|
|00000c90| 64 6f 77 6e 4e 6f 74 69 | 66 69 63 61 74 69 6f 6e |downNoti|fication|
|00000ca0| 00 00 74 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |..t.KeIn|itialize|
|00000cb0| 51 75 65 75 65 00 f3 00 | 49 6f 43 72 65 61 74 65 |Queue...|IoCreate|
|00000cc0| 44 65 76 69 63 65 00 00 | cc cc cc cc cc cc cc cc |Device..|........|
|00000cd0| d0 02 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|00000ce0| 53 74 72 69 6e 67 00 00 | e3 01 4d 6d 4c 6f 63 6b |String..|..MmLock|
|00000cf0| 50 61 67 61 62 6c 65 44 | 61 74 61 53 65 63 74 69 |PagableD|ataSecti|
|00000d00| 6f 6e 00 00 97 02 52 74 | 6c 43 72 65 61 74 65 53 |on....Rt|lCreateS|
|00000d10| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00000d20| 72 00 93 02 52 74 6c 43 | 72 65 61 74 65 41 63 6c |r...RtlC|reateAcl|
|00000d30| 00 00 42 00 45 78 46 72 | 65 65 50 6f 6f 6c 00 00 |..B.ExFr|eePool..|
|00000d40| 36 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |6.ExAllo|catePool|
|00000d50| 57 69 74 68 54 61 67 00 | 44 02 4f 62 66 44 65 72 |WithTag.|D.ObfDer|
|00000d60| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|00000d70| 54 01 4b 65 43 6c 65 61 | 72 45 76 65 6e 74 00 00 |T.KeClea|rEvent..|
|00000d80| d6 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 44 65 63 |..Interl|ockedDec|
|00000d90| 72 65 6d 65 6e 74 00 00 | d9 00 49 6e 74 65 72 6c |rement..|..Interl|
|00000da0| 6f 63 6b 65 64 49 6e 63 | 72 65 6d 65 6e 74 00 00 |ockedInc|rement..|
|00000db0| 7c 01 4b 65 49 6e 73 65 | 72 74 51 75 65 75 65 00 ||.KeInse|rtQueue.|
|00000dc0| 73 00 45 78 66 49 6e 74 | 65 72 6c 6f 63 6b 65 64 |s.ExfInt|erlocked|
|00000dd0| 41 64 64 55 6c 6f 6e 67 | 00 00 cc cc e3 02 52 74 |AddUlong|......Rt|
|00000de0| 6c 4c 65 6e 67 74 68 53 | 69 64 00 00 e7 01 4d 6d |lLengthS|id....Mm|
|00000df0| 4d 61 70 4c 6f 63 6b 65 | 64 50 61 67 65 73 00 00 |MapLocke|dPages..|
|00000e00| fb 00 49 6f 44 65 6c 65 | 74 65 44 65 76 69 63 65 |..IoDele|teDevice|
|00000e10| 00 00 08 02 4e 74 43 6c | 6f 73 65 00 9c 01 4b 65 |....NtCl|ose...Ke|
|00000e20| 52 75 6e 64 6f 77 6e 51 | 75 65 75 65 00 00 df 00 |RundownQ|ueue....|
|00000e30| 49 6f 41 6c 6c 6f 63 61 | 74 65 45 72 72 6f 72 4c |IoAlloca|teErrorL|
|00000e40| 6f 67 45 6e 74 72 79 00 | 41 01 49 6f 57 72 69 74 |ogEntry.|A.IoWrit|
|00000e50| 65 45 72 72 6f 72 4c 6f | 67 45 6e 74 72 79 00 00 |eErrorLo|gEntry..|
|00000e60| a6 00 46 73 52 74 6c 49 | 73 46 61 74 44 62 63 73 |..FsRtlI|sFatDbcs|
|00000e70| 4c 65 67 61 6c 00 cc cc | cc cc cc cc cc cc cc cc |Legal...|........|
|00000e80| ce 02 52 74 6c 49 6e 69 | 74 43 6f 64 65 50 61 67 |..RtlIni|tCodePag|
|00000e90| 65 54 61 62 6c 65 00 00 | 1d 03 52 74 6c 55 70 63 |eTable..|..RtlUpc|
|00000ea0| 61 73 65 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |aseUnico|deString|
|00000eb0| 54 6f 4f 65 6d 53 74 72 | 69 6e 67 00 77 02 52 74 |ToOemStr|ing.w.Rt|
|00000ec0| 6c 41 6e 73 69 53 74 72 | 69 6e 67 54 6f 55 6e 69 |lAnsiStr|ingToUni|
|00000ed0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 14 03 52 74 |codeStri|ng....Rt|
|00000ee0| 6c 55 6e 69 63 6f 64 65 | 54 6f 43 75 73 74 6f 6d |lUnicode|ToCustom|
|00000ef0| 43 50 4e 00 99 02 52 74 | 6c 43 75 73 74 6f 6d 43 |CPN...Rt|lCustomC|
|00000f00| 50 54 6f 55 6e 69 63 6f | 64 65 4e 00 ab 00 46 73 |PToUnico|deN...Fs|
|00000f10| 52 74 6c 4c 65 67 61 6c | 41 6e 73 69 43 68 61 72 |RtlLegal|AnsiChar|
|00000f20| 61 63 74 65 72 41 72 72 | 61 79 00 00 53 01 4b 65 |acterArr|ay..S.Ke|
|00000f30| 43 61 6e 63 65 6c 54 69 | 6d 65 72 00 6f 01 4b 65 |CancelTi|mer.o.Ke|
|00000f40| 49 6e 69 74 69 61 6c 69 | 7a 65 44 70 63 00 ff 02 |Initiali|zeDpc...|
|00000f50| 52 74 6c 53 65 63 6f 6e | 64 73 53 69 6e 63 65 31 |RtlSecon|dsSince1|
|00000f60| 39 38 30 54 6f 54 69 6d | 65 00 cc cc 5e 00 45 78 |980ToTim|e...^.Ex|
|00000f70| 4c 6f 63 61 6c 54 69 6d | 65 54 6f 53 79 73 74 65 |LocalTim|eToSyste|
|00000f80| 6d 54 69 6d 65 00 70 00 | 45 78 53 79 73 74 65 6d |mTime.p.|ExSystem|
|00000f90| 54 69 6d 65 54 6f 4c 6f | 63 61 6c 54 69 6d 65 00 |TimeToLo|calTime.|
|00000fa0| 0c 03 52 74 6c 54 69 6d | 65 54 6f 53 65 63 6f 6e |..RtlTim|eToSecon|
|00000fb0| 64 73 53 69 6e 63 65 31 | 39 38 30 00 cc cc cc cc |dsSince1|980.....|
|00000fc0| 93 01 4b 65 52 65 6c 65 | 61 73 65 53 65 6d 61 70 |..KeRele|aseSemap|
|00000fd0| 68 6f 72 65 00 00 cc cc | cc cc cc cc cc cc cc cc |hore....|........|
|00000fe0| 75 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 53 65 |u.KeInit|ializeSe|
|00000ff0| 6d 61 70 68 6f 72 65 00 | ce 03 6d 65 6d 6d 6f 76 |maphore.|..memmov|
|00001000| 65 00 b8 01 4b 65 57 61 | 69 74 46 6f 72 53 69 6e |e...KeWa|itForSin|
|00001010| 67 6c 65 4f 62 6a 65 63 | 74 00 cc cc cc cc cc cc |gleObjec|t.......|
|00001020| 16 02 4e 74 4c 6f 63 6b | 46 69 6c 65 00 00 b0 02 |..NtLock|File....|
|00001030| 52 74 6c 45 78 74 65 6e | 64 65 64 49 6e 74 65 67 |RtlExten|dedInteg|
|00001040| 65 72 4d 75 6c 74 69 70 | 6c 79 00 00 1c 02 4e 74 |erMultip|ly....Nt|
|00001050| 51 75 65 72 79 44 69 72 | 65 63 74 6f 72 79 46 69 |QueryDir|ectoryFi|
|00001060| 6c 65 00 00 29 02 4e 74 | 53 65 74 49 6e 66 6f 72 |le..).Nt|SetInfor|
|00001070| 6d 61 74 69 6f 6e 46 69 | 6c 65 00 00 cc cc cc cc |mationFi|le......|
|00001080| 1f 02 4e 74 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |..NtQuer|yInforma|
|00001090| 74 69 6f 6e 46 69 6c 65 | 00 00 30 02 4e 74 57 72 |tionFile|..0.NtWr|
|000010a0| 69 74 65 46 69 6c 65 00 | 25 02 4e 74 52 65 61 64 |iteFile.|%.NtRead|
|000010b0| 46 69 6c 65 00 00 cc cc | f4 00 49 6f 43 72 65 61 |File....|..IoCrea|
|000010c0| 74 65 46 69 6c 65 00 00 | 24 02 4e 74 51 75 65 72 |teFile..|$.NtQuer|
|000010d0| 79 56 6f 6c 75 6d 65 49 | 6e 66 6f 72 6d 61 74 69 |yVolumeI|nformati|
|000010e0| 6f 6e 46 69 6c 65 00 00 | eb 00 49 6f 43 61 6e 63 |onFile..|..IoCanc|
|000010f0| 65 6c 49 72 70 00 c3 02 | 52 74 6c 46 72 65 65 55 |elIrp...|RtlFreeU|
|00001100| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 cc cc |nicodeSt|ring....|
|00001110| 79 02 52 74 6c 41 70 70 | 65 6e 64 53 74 72 69 6e |y.RtlApp|endStrin|
|00001120| 67 54 6f 53 74 72 69 6e | 67 00 e6 03 77 63 73 63 |gToStrin|g...wcsc|
|00001130| 68 72 00 00 3e 01 49 6f | 55 6e 72 65 67 69 73 74 |hr..>.Io|Unregist|
|00001140| 65 72 53 68 75 74 64 6f | 77 6e 4e 6f 74 69 66 69 |erShutdo|wnNotifi|
|00001150| 63 61 74 69 6f 6e 00 00 | 77 01 4b 65 49 6e 69 74 |cation..|w.KeInit|
|00001160| 69 61 6c 69 7a 65 54 69 | 6d 65 72 00 ae 01 4b 65 |ializeTi|mer...Ke|
|00001170| 53 65 74 54 69 6d 65 72 | 00 00 ea 03 77 63 73 6c |SetTimer|....wcsl|
|00001180| 65 6e 00 00 11 02 4e 74 | 44 75 70 6c 69 63 61 74 |en....Nt|Duplicat|
|00001190| 65 54 6f 6b 65 6e 00 00 | 03 02 4e 74 41 64 6a 75 |eToken..|..NtAdju|
|000011a0| 73 74 50 72 69 76 69 6c | 65 67 65 73 54 6f 6b 65 |stPrivil|egesToke|
|000011b0| 6e 00 08 03 52 74 6c 53 | 75 62 41 75 74 68 6f 72 |n...RtlS|ubAuthor|
|000011c0| 69 74 79 43 6f 75 6e 74 | 53 69 64 00 09 03 52 74 |ityCount|Sid...Rt|
|000011d0| 6c 53 75 62 41 75 74 68 | 6f 72 69 74 79 53 69 64 |lSubAuth|oritySid|
|000011e0| 00 00 cc cc cc cc cc cc | 08 01 49 6f 46 72 65 65 |........|..IoFree|
|000011f0| 4d 64 6c 00 cc cc cc cc | cc cc cc cc cc cc cc cc |Mdl.....|........|
|00001200| e1 00 49 6f 41 6c 6c 6f | 63 61 74 65 4d 64 6c 00 |..IoAllo|cateMdl.|
|00001210| d3 01 4d 6d 42 75 69 6c | 64 4d 64 6c 46 6f 72 4e |..MmBuil|dMdlForN|
|00001220| 6f 6e 50 61 67 65 64 50 | 6f 6f 6c 00 cc cc cc cc |onPagedP|ool.....|
|00001230| 07 01 49 6f 46 72 65 65 | 49 72 70 00 cc cc cc cc |..IoFree|Irp.....|
|00001240| e0 00 49 6f 41 6c 6c 6f | 63 61 74 65 49 72 70 00 |..IoAllo|cateIrp.|
|00001250| 2b 02 4e 74 53 65 74 49 | 6e 66 6f 72 6d 61 74 69 |+.NtSetI|nformati|
|00001260| 6f 6e 54 68 72 65 61 64 | 00 00 cc cc 98 01 4b 65 |onThread|......Ke|
|00001270| 52 65 6d 6f 76 65 51 75 | 65 75 65 00 2c 02 4e 74 |RemoveQu|eue.,.Nt|
|00001280| 53 65 74 53 65 63 75 72 | 69 74 79 4f 62 6a 65 63 |SetSecur|ityObjec|
|00001290| 74 00 cc cc 23 02 4e 74 | 51 75 65 72 79 53 65 63 |t...#.Nt|QuerySec|
|000012a0| 75 72 69 74 79 4f 62 6a | 65 63 74 00 45 01 49 6f |urityObj|ect.E.Io|
|000012b0| 66 43 6f 6d 70 6c 65 74 | 65 52 65 71 75 65 73 74 |fComplet|eRequest|
|000012c0| 00 00 a2 01 4b 65 53 65 | 74 45 76 65 6e 74 00 00 |....KeSe|tEvent..|
|000012d0| 21 02 4e 74 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |!.NtQuer|yInforma|
|000012e0| 74 69 6f 6e 54 6f 6b 65 | 6e 00 ad 02 52 74 6c 45 |tionToke|n...RtlE|
|000012f0| 71 75 61 6c 53 69 64 00 | c9 03 69 73 78 64 69 67 |qualSid.|..isxdig|
|00001300| 69 74 00 00 82 02 52 74 | 6c 43 68 61 72 54 6f 49 |it....Rt|lCharToI|
|00001310| 6e 74 65 67 65 72 00 00 | 14 02 4e 74 46 73 43 6f |nteger..|..NtFsCo|
|00001320| 6e 74 72 6f 6c 46 69 6c | 65 00 06 02 4e 74 41 6c |ntrolFil|e...NtAl|
|00001330| 6c 6f 63 61 74 65 56 69 | 72 74 75 61 6c 4d 65 6d |locateVi|rtualMem|
|00001340| 6f 72 79 00 13 02 4e 74 | 46 72 65 65 56 69 72 74 |ory...Nt|FreeVirt|
|00001350| 75 61 6c 4d 65 6d 6f 72 | 79 00 cc cc cc cc cc cc |ualMemor|y.......|
|00001360| 86 01 4b 65 51 75 65 72 | 79 53 79 73 74 65 6d 54 |..KeQuer|ySystemT|
|00001370| 69 6d 65 00 fb 02 52 74 | 6c 52 61 6e 64 6f 6d 00 |ime...Rt|lRandom.|
|00001380| 45 02 4f 62 66 52 65 66 | 65 72 65 6e 63 65 4f 62 |E.ObfRef|erenceOb|
|00001390| 6a 65 63 74 00 00 51 02 | 50 73 43 72 65 61 74 65 |ject..Q.|PsCreate|
|000013a0| 53 79 73 74 65 6d 54 68 | 72 65 61 64 00 00 0f 03 |SystemTh|read....|
|000013b0| 52 74 6c 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |RtlUnico|deString|
|000013c0| 54 6f 41 6e 73 69 53 74 | 72 69 6e 67 00 00 cc cc |ToAnsiSt|ring....|
|000013d0| 2a 03 52 74 6c 78 55 6e | 69 63 6f 64 65 53 74 72 |*.RtlxUn|icodeStr|
|000013e0| 69 6e 67 54 6f 41 6e 73 | 69 53 69 7a 65 00 cc cc |ingToAns|iSize...|
|000013f0| 73 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 4d 75 |s.KeInit|ializeMu|
|00001400| 74 65 78 00 0b 02 4e 74 | 43 72 65 61 74 65 46 69 |tex...Nt|CreateFi|
|00001410| 6c 65 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |le......|........|
|00001420| 3f 02 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |?.ObRefe|renceObj|
|00001430| 65 63 74 42 79 48 61 6e | 64 6c 65 00 11 01 49 6f |ectByHan|dle...Io|
|00001440| 47 65 74 52 65 6c 61 74 | 65 64 44 65 76 69 63 65 |GetRelat|edDevice|
|00001450| 4f 62 6a 65 63 74 00 00 | cc cc cc cc cc cc cc cc |Object..|........|
|00001460| 70 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 45 76 |p.KeInit|ializeEv|
|00001470| 65 6e 74 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ent.....|........|
|00001480| 44 01 49 6f 66 43 61 6c | 6c 44 72 69 76 65 72 00 |D.IofCal|lDriver.|
|00001490| 76 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 53 70 |v.KeInit|ializeSp|
|000014a0| 69 6e 4c 6f 63 6b 00 00 | 51 01 4b 65 42 75 67 43 |inLock..|Q.KeBugC|
|000014b0| 68 65 63 6b 00 00 cf 02 | 52 74 6c 49 6e 69 74 53 |heck....|RtlInitS|
|000014c0| 74 72 69 6e 67 00 75 00 | 45 78 66 49 6e 74 65 72 |tring.u.|ExfInter|
|000014d0| 6c 6f 63 6b 65 64 49 6e | 73 65 72 74 54 61 69 6c |lockedIn|sertTail|
|000014e0| 4c 69 73 74 00 00 74 00 | 45 78 66 49 6e 74 65 72 |List..t.|ExfInter|
|000014f0| 6c 6f 63 6b 65 64 49 6e | 73 65 72 74 48 65 61 64 |lockedIn|sertHead|
|00001500| 4c 69 73 74 00 00 78 00 | 45 78 66 49 6e 74 65 72 |List..x.|ExfInter|
|00001510| 6c 6f 63 6b 65 64 52 65 | 6d 6f 76 65 48 65 61 64 |lockedRe|moveHead|
|00001520| 4c 69 73 74 00 00 86 02 | 52 74 6c 43 6f 6d 70 61 |List....|RtlCompa|
|00001530| 72 65 4d 65 6d 6f 72 79 | 00 00 cc cc 1a 03 52 74 |reMemory|......Rt|
|00001540| 6c 55 70 63 61 73 65 55 | 6e 69 63 6f 64 65 53 74 |lUpcaseU|nicodeSt|
|00001550| 72 69 6e 67 00 00 00 02 | 4e 6c 73 4d 62 4f 65 6d |ring....|NlsMbOem|
|00001560| 43 6f 64 65 50 61 67 65 | 54 61 67 00 cc cc cc cc |CodePage|Tag.....|
|00001570| 28 03 52 74 6c 78 41 6e | 73 69 53 74 72 69 6e 67 |(.RtlxAn|siString|
|00001580| 54 6f 55 6e 69 63 6f 64 | 65 53 69 7a 65 00 4d 00 |ToUnicod|eSize.M.|
|00001590| 45 78 49 6e 74 65 72 6c | 6f 63 6b 65 64 41 64 64 |ExInterl|ockedAdd|
|000015a0| 4c 61 72 67 65 53 74 61 | 74 69 73 74 69 63 00 00 |LargeSta|tistic..|
|000015b0| 7a 02 52 74 6c 41 70 70 | 65 6e 64 55 6e 69 63 6f |z.RtlApp|endUnico|
|000015c0| 64 65 53 74 72 69 6e 67 | 54 6f 53 74 72 69 6e 67 |deString|ToString|
|000015d0| 00 00 d5 03 73 74 72 63 | 68 72 00 00 af 02 52 74 |....strc|hr....Rt|
|000015e0| 6c 45 71 75 61 6c 55 6e | 69 63 6f 64 65 53 74 72 |lEqualUn|icodeStr|
|000015f0| 69 6e 67 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ing.....|........|
|00001600| ae 02 52 74 6c 45 71 75 | 61 6c 53 74 72 69 6e 67 |..RtlEqu|alString|
|00001610| 00 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00001620| b9 01 4b 65 66 41 63 71 | 75 69 72 65 53 70 69 6e |..KefAcq|uireSpin|
|00001630| 4c 6f 63 6b 41 74 44 70 | 63 4c 65 76 65 6c 00 00 |LockAtDp|cLevel..|
|00001640| ba 01 4b 65 66 52 65 6c | 65 61 73 65 53 70 69 6e |..KefRel|easeSpin|
|00001650| 4c 6f 63 6b 46 72 6f 6d | 44 70 63 4c 65 76 65 6c |LockFrom|DpcLevel|
|00001660| 00 00 cc cc cc cc cc cc | 0c 01 49 6f 47 65 74 43 |........|..IoGetC|
|00001670| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 00 1b 02 |urrentPr|ocess...|
|00001680| 4e 74 4f 70 65 6e 50 72 | 6f 63 65 73 73 54 6f 6b |NtOpenPr|ocessTok|
|00001690| 65 6e 00 00 cc cc cc cc | 48 41 4c 2e 64 6c 6c 00 |en......|HAL.dll.|
|000016a0| 4b 00 4b 66 4c 6f 77 65 | 72 49 72 71 6c 00 cc cc |K.KfLowe|rIrql...|
|000016b0| 4c 00 4b 66 52 61 69 73 | 65 49 72 71 6c 00 4d 00 |L.KfRais|eIrql.M.|
|000016c0| 4b 66 52 65 6c 65 61 73 | 65 53 70 69 6e 4c 6f 63 |KfReleas|eSpinLoc|
|000016d0| 6b 00 42 00 4b 65 47 65 | 74 43 75 72 72 65 6e 74 |k.B.KeGe|tCurrent|
|000016e0| 49 72 71 6c 00 00 4a 00 | 4b 66 41 63 71 75 69 72 |Irql..J.|KfAcquir|
|000016f0| 65 53 70 69 6e 4c 6f 63 | 6b 00 cc cc cc cc cc cc |eSpinLoc|k.......|
|00001700| 54 44 49 2e 53 59 53 00 | 1c 00 54 64 69 44 65 72 |TDI.SYS.|..TdiDer|
|00001710| 65 67 69 73 74 65 72 4e | 6f 74 69 66 69 63 61 74 |egisterN|otificat|
|00001720| 69 6f 6e 48 61 6e 64 6c | 65 72 00 00 24 00 54 64 |ionHandl|er..$.Td|
|00001730| 69 52 65 67 69 73 74 65 | 72 4e 6f 74 69 66 69 63 |iRegiste|rNotific|
|00001740| 61 74 69 6f 6e 48 61 6e | 64 6c 65 72 00 00 cc cc |ationHan|dler....|
|00001750| 6b 73 65 63 64 64 2e 73 | 79 73 00 00 0e 00 51 75 |ksecdd.s|ys....Qu|
|00001760| 65 72 79 53 65 63 75 72 | 69 74 79 43 6f 6e 74 65 |erySecur|ityConte|
|00001770| 78 74 54 6f 6b 65 6e 00 | 03 00 44 65 6c 65 74 65 |xtToken.|..Delete|
|00001780| 53 65 63 75 72 69 74 79 | 43 6f 6e 74 65 78 74 00 |Security|Context.|
|00001790| 09 00 49 6e 69 74 53 65 | 63 75 72 69 74 79 49 6e |..InitSe|curityIn|
|000017a0| 74 65 72 66 61 63 65 57 | 00 00 cc cc 01 00 41 63 |terfaceW|......Ac|
|000017b0| 71 75 69 72 65 43 72 65 | 64 65 6e 74 69 61 6c 73 |quireCre|dentials|
|000017c0| 48 61 6e 64 6c 65 57 00 | 00 00 41 63 63 65 70 74 |HandleW.|..Accept|
|000017d0| 53 65 63 75 72 69 74 79 | 43 6f 6e 74 65 78 74 00 |Security|Context.|
+--------+-------------------------+-------------------------+--------+--------+