home *** CD-ROM | disk | FTP | other *** search
Unknown | 1999-03-26 | 6.5 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 83 ec 08 a1 30 d3 01 00 | 8d 4c 24 00 53 56 33 db |....0...|.L$.SV3.|
|00000010| 57 50 51 ff 15 00 ab 01 | 00 8d 4c 24 0c 68 b0 ce |WPQ.....|..L$.h..|
|00000020| 01 00 8b 7c 24 1c 53 53 | 6a 12 51 53 57 ff 15 70 |...|$.SS|j.QSW..p|
|00000030| ab 01 00 8b f0 85 f6 7d | 1b 53 53 53 53 56 68 d2 |.......}|.SSSSVh.|
|00000040| 07 00 c0 57 e8 2e 1e fd | ff 8b c6 5f 5e 5b 83 c4 |...W....|..._^[..|
|00000050| 08 c2 08 00 83 c7 38 b8 | 2e 46 02 00 b9 1c 00 00 |......8.|.F......|
|00000060| 00 c7 47 fc 69 56 03 00 | f3 ab e8 02 00 00 00 eb |..G.iV..|........|
|00000070| d8 c6 05 b4 ce 01 00 01 | 83 ec 08 33 c0 b9 20 00 |........|...3.. .|
|00000080| 00 00 53 56 57 55 bf 00 | bb 01 00 f3 ab ff 15 24 |..SVWU..|.......$|
|00000090| ac 01 00 6a 00 a3 84 bb | 01 00 a1 0c ad 01 00 6a |...j....|.......j|
|000000a0| 01 0f be 08 68 c8 ce 01 | 00 89 0d a0 c3 01 00 ff |....h...|........|
|000000b0| 15 14 ab 01 00 6a 00 6a | 01 68 60 d2 01 00 ff 15 |.....j.j|.h`.....|
|000000c0| 14 ab 01 00 8b 0d 08 ad | 01 00 68 5c c0 01 00 8b |........|..h\....|
|000000d0| 35 4c ad 01 00 8b 11 89 | 15 08 ad 01 00 ff d6 68 |5L......|.......h|
|000000e0| fc c0 01 00 ff d6 68 c0 | cb 01 00 8b 3d 50 ad 01 |......h.|....=P..|
|000000f0| 00 bb 20 d5 01 00 ff d7 | 68 d8 ce 01 00 ff d7 68 |.. .....|h......h|
|00000100| 60 cb 01 00 ff d7 53 ff | d7 83 c3 38 81 fb 50 d7 |`.....S.|...8..P.|
|00000110| 01 00 72 f2 68 10 cf 01 | 00 ff d7 68 00 c0 01 00 |..r.h...|...h....|
|00000120| ff d7 68 e0 d0 01 00 ff | d7 b8 50 cf 01 00 a3 54 |..h.....|..P....T|
|00000130| cf 01 00 a3 50 cf 01 00 | b8 58 cf 01 00 33 c9 a3 |....P...|.X...3..|
|00000140| 5c cf 01 00 a3 58 cf 01 | 00 b8 60 cc 01 00 a3 64 |\....X..|..`....d|
|00000150| cc 01 00 a3 60 cc 01 00 | b8 78 cc 01 00 c7 00 21 |....`...|.x.....!|
|00000160| 48 02 00 83 c0 10 3d 98 | cc 01 00 89 48 f4 89 48 |H.....=.|....H..H|
|00000170| e8 72 ea c7 05 78 cf 01 | 00 9b 60 01 00 33 c0 b9 |.r...x..|..`..3..|
|00000180| 30 c4 01 00 66 a3 64 cf | 01 00 a3 60 cf 01 00 66 |0...f.d.|...`...f|
|00000190| a3 66 cf 01 00 a3 7c cf | 01 00 a3 70 cf 01 00 8b |.f....|.|...p....|
|000001a0| d0 89 49 04 40 89 09 6b | d2 38 81 c2 20 d5 01 00 |..I.@..k|.8.. ...|
|000001b0| 83 f8 0a 89 51 08 75 02 | 33 c0 83 c1 0c 81 f9 30 |....Q.u.|3......0|
|000001c0| ca 01 00 72 da b8 c0 cf | 01 00 89 40 04 89 00 83 |...r....|...@....|
|000001d0| c0 08 3d 40 d0 01 00 72 | f1 68 e0 d1 01 00 33 db |..=@...r|.h....3.|
|000001e0| ff d7 68 a0 d2 01 00 88 | 1d b4 cb 01 00 88 1d fc |..h.....|........|
|000001f0| bf 01 00 88 1d 34 d2 01 | 00 88 1d 54 d2 01 00 ff |.....4..|...T....|
|00000200| d7 c7 05 f4 be 01 00 02 | 00 00 00 b8 40 c1 01 00 |........|....@...|
|00000210| 88 1d f8 be 01 00 a3 44 | c1 01 00 88 1d f9 be 01 |.......D|........|
|00000220| 00 8d 54 24 10 a3 40 c1 | 01 00 ff 35 20 d3 01 00 |..T$..@.|...5 ...|
|00000230| 52 b8 c0 bf 01 00 a3 c4 | bf 01 00 a3 c0 bf 01 00 |R.......|........|
|00000240| ff 15 84 ac 01 00 8d 4c | 24 10 6a 01 51 68 50 d0 |.......L|$.j.QhP.|
|00000250| 01 00 ff 15 b4 ab 01 00 | ff 35 14 d3 01 00 68 58 |........|.5....hX|
|00000260| d0 01 00 8b 3d 00 ab 01 | 00 ff d7 ff 35 18 d3 01 |....=...|....5...|
|00000270| 00 68 60 d0 01 00 ff d7 | a1 cc d4 01 00 50 68 b0 |.h`.....|.....Ph.|
|00000280| d0 01 00 ff d7 a1 d0 d4 | 01 00 bb 78 d1 01 00 50 |........|...x...P|
|00000290| bd 90 d4 01 00 68 b8 d0 | 01 00 ff 15 d8 ac 01 00 |.....h..|........|
|000002a0| c7 05 20 cc 01 00 b9 0b | 00 00 c7 05 30 cc 01 00 |.. .....|....0...|
|000002b0| ba 0b 00 00 ff 75 00 53 | 83 c3 08 ff d7 83 c5 04 |.....u.S|........|
|000002c0| 81 fd ac d4 01 00 76 ec | b9 b8 d1 01 00 8b 59 fc |......v.|......Y.|
|000002d0| 8d 41 f8 8b 10 89 11 83 | c1 08 81 f9 d0 d1 01 00 |.A......|........|
|000002e0| 89 59 fc 72 e8 68 1c c1 | 01 00 bf 7c c0 01 00 ff |.Y.r.h..|...|....|
|000002f0| d6 57 ff d6 83 c7 20 81 | ff fc c0 01 00 72 f2 c7 |.W.... .|.....r..|
|00000300| 05 a0 cc 01 00 07 00 00 | 00 ff 15 98 ab 01 00 8b |........|........|
|00000310| c8 2b d2 b8 80 f0 fa 02 | 5d f7 f1 5f a3 04 d3 01 |.+......|].._....|
|00000320| 00 5e 5b 83 c4 08 c3 00 | 00 00 00 00 00 00 00 00 |.^[.....|........|
|00000330| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 40 5e 03 00 00 00 00 00 | 00 00 00 00 e4 5d 03 00 |@^......|.....]..|
|00000350| c0 aa 00 00 48 61 03 00 | 00 00 00 00 00 00 00 00 |....Ha..|........|
|00000360| f2 5d 03 00 c8 ad 00 00 | 60 61 03 00 00 00 00 00 |.]......|`a......|
|00000370| 00 00 00 00 fa 5d 03 00 | e0 ad 00 00 78 61 03 00 |.....]..|....xa..|
|00000380| 00 00 00 00 00 00 00 00 | 02 5e 03 00 f8 ad 00 00 |........|.^......|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 6e 74 6f 73 | 6b 72 6e 6c 2e 65 78 65 |....ntos|krnl.exe|
|000003b0| 00 00 48 41 4c 2e 64 6c | 6c 00 54 44 49 2e 53 59 |..HAL.dl|l.TDI.SY|
|000003c0| 53 00 6b 73 65 63 64 64 | 2e 73 79 73 00 00 00 00 |S.ksecdd|.sys....|
|000003d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000400| 1c 67 03 00 b8 63 03 00 | d0 63 03 00 ee 63 03 00 |.g...c..|.c...c..|
|00000410| 0c 64 03 00 22 64 03 00 | 30 64 03 00 52 64 03 00 |.d.."d..|0d..Rd..|
|00000420| 72 64 03 00 88 64 03 00 | a0 64 03 00 be 64 03 00 |rd...d..|.d...d..|
|00000430| ca 64 03 00 e2 64 03 00 | fa 64 03 00 0e 65 03 00 |.d...d..|.d...e..|
|00000440| 2c 65 03 00 44 65 03 00 | 64 65 03 00 72 65 03 00 |,e..De..|de..re..|
|00000450| 8c 65 03 00 a0 65 03 00 | b4 65 03 00 cc 65 03 00 |.e...e..|.e...e..|
|00000460| e0 65 03 00 f0 65 03 00 | fe 65 03 00 0e 66 03 00 |.e...e..|.e...f..|
|00000470| 28 66 03 00 3a 66 03 00 | 58 66 03 00 62 66 03 00 |(f..:f..|Xf..bf..|
|00000480| 7e 66 03 00 90 66 03 00 | a0 66 03 00 ae 66 03 00 |~f...f..|.f...f..|
|00000490| c6 66 03 00 d4 66 03 00 | f0 66 03 00 8c 63 03 00 |.f...f..|.f...c..|
|000004a0| aa 63 03 00 26 67 03 00 | 36 67 03 00 4e 67 03 00 |.c..&g..|6g..Ng..|
|000004b0| 68 67 03 00 7a 67 03 00 | 8c 67 03 00 9e 67 03 00 |hg..zg..|.g...g..|
|000004c0| b2 67 03 00 be 67 03 00 | ce 67 03 00 e4 67 03 00 |.g...g..|.g...g..|
|000004d0| f2 67 03 00 0a 68 03 00 | 1e 68 03 00 36 68 03 00 |.g...h..|.h..6h..|
|000004e0| 42 68 03 00 56 68 03 00 | 6c 68 03 00 7c 68 03 00 |Bh..Vh..|lh..|h..|
|000004f0| 9a 68 03 00 b2 68 03 00 | d2 68 03 00 dc 68 03 00 |.h...h..|.h...h..|
|00000500| ee 68 03 00 fa 68 03 00 | 1a 69 03 00 3a 69 03 00 |.h...h..|.i..:i..|
|00000510| 54 69 03 00 64 69 03 00 | 74 69 03 00 8a 69 03 00 |Ti..di..|ti...i..|
|00000520| 9e 69 03 00 b6 69 03 00 | d4 69 03 00 e8 69 03 00 |.i...i..|.i...i..|
|00000530| 06 6a 03 00 26 6a 03 00 | 46 6a 03 00 5a 6a 03 00 |.j..&j..|Fj..Zj..|
|00000540| 0c 67 03 00 5c 63 03 00 | a0 6a 03 00 bc 6a 03 00 |.g..\c..|.j...j..|
|00000550| d6 6a 03 00 44 63 03 00 | 74 63 03 00 26 6b 03 00 |.j..Dc..|tc..&k..|
|00000560| 3c 6b 03 00 4c 6b 03 00 | 62 6b 03 00 78 6b 03 00 |<k..Lk..|bk..xk..|
|00000570| 88 6b 03 00 9e 6b 03 00 | b2 6b 03 00 c8 6b 03 00 |.k...k..|.k...k..|
|00000580| d8 6b 03 00 f4 6b 03 00 | 06 6c 03 00 16 6c 03 00 |.k...k..|.l...l..|
|00000590| 30 6c 03 00 4a 6c 03 00 | 62 6c 03 00 7e 6c 03 00 |0l..Jl..|bl..~l..|
|000005a0| 98 6c 03 00 b2 6c 03 00 | c4 6c 03 00 e6 6c 03 00 |.l...l..|.l...l..|
|000005b0| 00 6d 03 00 1e 6d 03 00 | 3a 6d 03 00 56 6d 03 00 |.m...m..|:m..Vm..|
|000005c0| 64 6d 03 00 6e 6d 03 00 | 7e 6d 03 00 92 6d 03 00 |dm..nm..|~m...m..|
|000005d0| aa 6d 03 00 c2 6d 03 00 | d8 6d 03 00 f0 6d 03 00 |.m...m..|.m...m..|
|000005e0| fa 6d 03 00 06 6e 03 00 | 12 6e 03 00 32 6e 03 00 |.m...n..|.n..2n..|
|000005f0| 4e 6e 03 00 60 6e 03 00 | 74 6e 03 00 98 6e 03 00 |Nn..`n..|tn...n..|
|00000600| b2 6e 03 00 c6 6e 03 00 | de 6e 03 00 f4 6e 03 00 |.n...n..|.n...n..|
|00000610| 0c 6f 03 00 16 6f 03 00 | 20 6f 03 00 34 6f 03 00 |.o...o..| o..4o..|
|00000620| 4a 6f 03 00 64 6f 03 00 | 7a 6f 03 00 8e 6f 03 00 |Jo..do..|zo...o..|
|00000630| a2 6f 03 00 bc 6f 03 00 | ce 6f 03 00 e0 6f 03 00 |.o...o..|.o...o..|
|00000640| fe 6f 03 00 12 70 03 00 | 26 70 03 00 32 70 03 00 |.o...p..|&p..2p..|
|00000650| 48 70 03 00 64 70 03 00 | 82 70 03 00 9a 70 03 00 |Hp..dp..|.p...p..|
|00000660| a8 70 03 00 c0 70 03 00 | dc 70 03 00 ec 70 03 00 |.p...p..|.p...p..|
|00000670| 06 71 03 00 16 71 03 00 | 26 71 03 00 38 71 03 00 |.q...q..|&q..8q..|
|00000680| 4a 71 03 00 5c 71 03 00 | b8 62 03 00 a0 62 03 00 |Jq..\q..|.b...b..|
|00000690| 84 62 03 00 70 62 03 00 | 54 62 03 00 48 62 03 00 |.b..pb..|Tb..Hb..|
|000006a0| 2e 62 03 00 1e 62 03 00 | 04 62 03 00 ea 61 03 00 |.b...b..|.b...a..|
|000006b0| d0 61 03 00 ba 61 03 00 | f0 62 03 00 2a 63 03 00 |.a...a..|.b..*c..|
|000006c0| 12 63 03 00 f6 6a 03 00 | d8 62 03 00 a0 61 03 00 |.c...j..|.b...a..|
|000006d0| 6c 6a 03 00 86 6a 03 00 | 0c 6b 03 00 2a 73 03 00 |lj...j..|.k..*s..|
|000006e0| 3a 73 03 00 4a 73 03 00 | 60 73 03 00 72 73 03 00 |:s..Js..|`s..rs..|
|000006f0| 80 73 03 00 96 73 03 00 | b6 73 03 00 d2 73 03 00 |.s...s..|.s...s..|
|00000700| ea 73 03 00 00 00 00 00 | 84 71 03 00 98 71 03 00 |.s......|.q...q..|
|00000710| b4 71 03 00 70 71 03 00 | a6 71 03 00 00 00 00 00 |.q..pq..|.q......|
|00000720| 0e 72 03 00 26 72 03 00 | 42 72 03 00 ea 71 03 00 |.r..&r..|Br...q..|
|00000730| c8 71 03 00 00 00 00 00 | 10 73 03 00 c2 72 03 00 |.q......|.s...r..|
|00000740| a4 72 03 00 de 72 03 00 | 78 72 03 00 60 72 03 00 |.r...r..|xr..`r..|
|00000750| 8c 72 03 00 f2 72 03 00 | 00 00 00 00 00 00 00 00 |.r...r..|........|
|00000760| 73 00 45 78 66 49 6e 74 | 65 72 6c 6f 63 6b 65 64 |s.ExfInt|erlocked|
|00000770| 41 64 64 55 6c 6f 6e 67 | 00 00 16 02 4e 74 46 72 |AddUlong|....NtFr|
|00000780| 65 65 56 69 72 74 75 61 | 6c 4d 65 6d 6f 72 79 00 |eeVirtua|lMemory.|
|00000790| 09 02 4e 74 41 6c 6c 6f | 63 61 74 65 56 69 72 74 |..NtAllo|cateVirt|
|000007a0| 75 61 6c 4d 65 6d 6f 72 | 79 00 2e 02 4e 74 53 65 |ualMemor|y...NtSe|
|000007b0| 74 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 54 68 72 65 |tInforma|tionThre|
|000007c0| 61 64 00 00 4a 03 53 65 | 52 65 6c 65 61 73 65 53 |ad..J.Se|ReleaseS|
|000007d0| 75 62 6a 65 63 74 43 6f | 6e 74 65 78 74 00 2f 03 |ubjectCo|ntext./.|
|000007e0| 53 65 41 63 63 65 73 73 | 43 68 65 63 6b 00 35 03 |SeAccess|Check.5.|
|000007f0| 53 65 43 61 70 74 75 72 | 65 53 75 62 6a 65 63 74 |SeCaptur|eSubject|
|00000800| 43 6f 6e 74 65 78 74 00 | bf 03 5f 77 63 73 69 63 |Context.|.._wcsic|
|00000810| 6d 70 00 00 e8 01 4d 6d | 4d 61 70 4c 6f 63 6b 65 |mp....Mm|MapLocke|
|00000820| 64 50 61 67 65 73 00 00 | 00 00 00 00 00 00 00 00 |dPages..|........|
|00000830| 89 02 52 74 6c 43 6f 6d | 70 61 72 65 4d 65 6d 6f |..RtlCom|pareMemo|
|00000840| 72 79 00 00 4a 00 45 78 | 49 6e 69 74 69 61 6c 69 |ry..J.Ex|Initiali|
|00000850| 7a 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |zeResour|ceLite..|
|00000860| 76 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 53 70 |v.KeInit|ializeSp|
|00000870| 69 6e 4c 6f 63 6b 00 00 | 78 00 45 78 66 49 6e 74 |inLock..|x.ExfInt|
|00000880| 65 72 6c 6f 63 6b 65 64 | 52 65 6d 6f 76 65 48 65 |erlocked|RemoveHe|
|00000890| 61 64 4c 69 73 74 00 00 | 6d 00 45 78 52 65 6c 65 |adList..|m.ExRele|
|000008a0| 61 73 65 52 65 73 6f 75 | 72 63 65 4c 69 74 65 00 |aseResou|rceLite.|
|000008b0| 2e 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |..ExAcqu|ireResou|
|000008c0| 72 63 65 45 78 63 6c 75 | 73 69 76 65 4c 69 74 65 |rceExclu|siveLite|
|000008d0| 00 00 d9 00 49 6e 74 65 | 72 6c 6f 63 6b 65 64 49 |....Inte|rlockedI|
|000008e0| 6e 63 72 65 6d 65 6e 74 | 00 00 8c 02 52 74 6c 43 |ncrement|....RtlC|
|000008f0| 6f 6d 70 61 72 65 55 6e | 69 63 6f 64 65 53 74 72 |ompareUn|icodeStr|
|00000900| 69 6e 67 00 47 02 4f 62 | 66 44 65 72 65 66 65 72 |ing.G.Ob|fDerefer|
|00000910| 65 6e 63 65 4f 62 6a 65 | 63 74 00 00 d6 00 49 6e |enceObje|ct....In|
|00000920| 74 65 72 6c 6f 63 6b 65 | 64 44 65 63 72 65 6d 65 |terlocke|dDecreme|
|00000930| 6e 74 00 00 3c 00 45 78 | 44 65 6c 65 74 65 52 65 |nt..<.Ex|DeleteRe|
|00000940| 73 6f 75 72 63 65 4c 69 | 74 65 00 00 57 00 45 78 |sourceLi|te..W.Ex|
|00000950| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 50 6f 70 45 6e |Interloc|kedPopEn|
|00000960| 74 72 79 53 4c 69 73 74 | 00 00 b2 01 4b 65 54 69 |trySList|....KeTi|
|00000970| 63 6b 43 6f 75 6e 74 00 | 1c 03 52 74 6c 55 70 63 |ckCount.|..RtlUpc|
|00000980| 61 73 65 55 6e 69 63 6f | 64 65 43 68 61 72 00 00 |aseUnico|deChar..|
|00000990| 16 03 52 74 6c 55 6e 69 | 63 6f 64 65 53 74 72 69 |..RtlUni|codeStri|
|000009a0| 6e 67 54 6f 4f 65 6d 53 | 74 72 69 6e 67 00 2e 03 |ngToOemS|tring...|
|000009b0| 52 74 6c 78 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |RtlxUnic|odeStrin|
|000009c0| 67 54 6f 4f 65 6d 53 69 | 7a 65 00 00 03 02 4e 6c |gToOemSi|ze....Nl|
|000009d0| 73 4d 62 4f 65 6d 43 6f | 64 65 50 61 67 65 54 61 |sMbOemCo|dePageTa|
|000009e0| 67 00 a2 01 4b 65 53 65 | 74 45 76 65 6e 74 00 00 |g...KeSe|tEvent..|
|000009f0| ba 01 4b 65 66 52 65 6c | 65 61 73 65 53 70 69 6e |..KefRel|easeSpin|
|00000a00| 4c 6f 63 6b 46 72 6f 6d | 44 70 63 4c 65 76 65 6c |LockFrom|DpcLevel|
|00000a10| 00 00 b9 01 4b 65 66 41 | 63 71 75 69 72 65 53 70 |....KefA|cquireSp|
|00000a20| 69 6e 4c 6f 63 6b 41 74 | 44 70 63 4c 65 76 65 6c |inLockAt|DpcLevel|
|00000a30| 00 00 d7 00 49 6e 74 65 | 72 6c 6f 63 6b 65 64 45 |....Inte|rlockedE|
|00000a40| 78 63 68 61 6e 67 65 00 | b2 02 52 74 6c 45 71 75 |xchange.|..RtlEqu|
|00000a50| 61 6c 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |alUnicod|eString.|
|00000a60| 59 00 45 78 49 6e 74 65 | 72 6c 6f 63 6b 65 64 50 |Y.ExInte|rlockedP|
|00000a70| 75 73 68 45 6e 74 72 79 | 53 4c 69 73 74 00 07 01 |ushEntry|SList...|
|00000a80| 49 6f 46 72 65 65 49 72 | 70 00 ec 00 49 6f 43 68 |IoFreeIr|p...IoCh|
|00000a90| 65 63 6b 44 65 73 69 72 | 65 64 41 63 63 65 73 73 |eckDesir|edAccess|
|00000aa0| 00 00 95 02 52 74 6c 43 | 6f 70 79 55 6e 69 63 6f |....RtlC|opyUnico|
|00000ab0| 64 65 53 74 72 69 6e 67 | 00 00 86 01 4b 65 51 75 |deString|....KeQu|
|00000ac0| 65 72 79 53 79 73 74 65 | 6d 54 69 6d 65 00 e5 02 |erySyste|mTime...|
|00000ad0| 52 74 6c 4c 65 6e 67 74 | 68 53 65 63 75 72 69 74 |RtlLengt|hSecurit|
|00000ae0| 79 44 65 73 63 72 69 70 | 74 6f 72 00 d3 02 52 74 |yDescrip|tor...Rt|
|00000af0| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|00000b00| 6e 67 00 00 27 02 4e 74 | 51 75 65 72 79 56 6f 6c |ng..'.Nt|QueryVol|
|00000b10| 75 6d 65 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 46 69 |umeInfor|mationFi|
|00000b20| 6c 65 00 00 1c 02 4e 74 | 4f 70 65 6e 46 69 6c 65 |le....Nt|OpenFile|
|00000b30| 00 00 22 02 4e 74 51 75 | 65 72 79 49 6e 66 6f 72 |..".NtQu|eryInfor|
|00000b40| 6d 61 74 69 6f 6e 46 69 | 6c 65 00 00 77 01 4b 65 |mationFi|le..w.Ke|
|00000b50| 49 6e 69 74 69 61 6c 69 | 7a 65 54 69 6d 65 72 00 |Initiali|zeTimer.|
|00000b60| 70 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 45 76 |p.KeInit|ializeEv|
|00000b70| 65 6e 74 00 b8 01 4b 65 | 57 61 69 74 46 6f 72 53 |ent...Ke|WaitForS|
|00000b80| 69 6e 67 6c 65 4f 62 6a | 65 63 74 00 8a 01 4b 65 |ingleObj|ect...Ke|
|00000b90| 52 65 61 64 53 74 61 74 | 65 45 76 65 6e 74 00 00 |ReadStat|eEvent..|
|00000ba0| 53 01 4b 65 43 61 6e 63 | 65 6c 54 69 6d 65 72 00 |S.KeCanc|elTimer.|
|00000bb0| ae 01 4b 65 53 65 74 54 | 69 6d 65 72 00 00 54 01 |..KeSetT|imer..T.|
|00000bc0| 4b 65 43 6c 65 61 72 45 | 76 65 6e 74 00 00 aa 01 |KeClearE|vent....|
|00000bd0| 4b 65 53 65 74 54 61 72 | 67 65 74 50 72 6f 63 65 |KeSetTar|getProce|
|00000be0| 73 73 6f 72 44 70 63 00 | 6f 01 4b 65 49 6e 69 74 |ssorDpc.|o.KeInit|
|00000bf0| 69 61 6c 69 7a 65 44 70 | 63 00 f5 02 52 74 6c 4f |ializeDp|c...RtlO|
|00000c00| 65 6d 53 74 72 69 6e 67 | 54 6f 55 6e 69 63 6f 64 |emString|ToUnicod|
|00000c10| 65 53 74 72 69 6e 67 00 | ed 03 77 63 73 6c 65 6e |eString.|..wcslen|
|00000c20| 00 00 d3 01 4d 6d 42 75 | 69 6c 64 4d 64 6c 46 6f |....MmBu|ildMdlFo|
|00000c30| 72 4e 6f 6e 50 61 67 65 | 64 50 6f 6f 6c 00 15 01 |rNonPage|dPool...|
|00000c40| 49 6f 49 6e 69 74 69 61 | 6c 69 7a 65 49 72 70 00 |IoInitia|lizeIrp.|
|00000c50| 7c 01 4b 65 49 6e 73 65 | 72 74 51 75 65 75 65 00 ||.KeInse|rtQueue.|
|00000c60| 33 02 4e 74 57 72 69 74 | 65 46 69 6c 65 00 2c 02 |3.NtWrit|eFile.,.|
|00000c70| 4e 74 53 65 74 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |NtSetInf|ormation|
|00000c80| 46 69 6c 65 00 00 28 02 | 4e 74 52 65 61 64 46 69 |File..(.|NtReadFi|
|00000c90| 6c 65 00 00 11 01 49 6f | 47 65 74 52 65 6c 61 74 |le....Io|GetRelat|
|00000ca0| 65 64 44 65 76 69 63 65 | 4f 62 6a 65 63 74 00 00 |edDevice|Object..|
|00000cb0| 42 02 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |B.ObRefe|renceObj|
|00000cc0| 65 63 74 42 79 48 61 6e | 64 6c 65 00 f4 00 49 6f |ectByHan|dle...Io|
|00000cd0| 43 72 65 61 74 65 46 69 | 6c 65 00 00 d1 03 6d 65 |CreateFi|le....me|
|00000ce0| 6d 6d 6f 76 65 00 24 03 | 52 74 6c 55 70 70 65 72 |mmove.$.|RtlUpper|
|00000cf0| 43 68 61 72 00 00 41 01 | 49 6f 57 72 69 74 65 45 |Char..A.|IoWriteE|
|00000d00| 72 72 6f 72 4c 6f 67 45 | 6e 74 72 79 00 00 df 00 |rrorLogE|ntry....|
|00000d10| 49 6f 41 6c 6c 6f 63 61 | 74 65 45 72 72 6f 72 4c |IoAlloca|teErrorL|
|00000d20| 6f 67 45 6e 74 72 79 00 | f3 00 49 6f 43 72 65 61 |ogEntry.|..IoCrea|
|00000d30| 74 65 44 65 76 69 63 65 | 00 00 fb 00 49 6f 44 65 |teDevice|....IoDe|
|00000d40| 6c 65 74 65 44 65 76 69 | 63 65 00 00 62 00 45 78 |leteDevi|ce..b.Ex|
|00000d50| 51 75 65 75 65 57 6f 72 | 6b 49 74 65 6d 00 7b 01 |QueueWor|kItem.{.|
|00000d60| 4b 65 49 6e 73 65 72 74 | 48 65 61 64 51 75 65 75 |KeInsert|HeadQueu|
|00000d70| 65 00 c1 03 5f 77 63 73 | 6e 69 63 6d 70 00 44 01 |e..._wcs|nicmp.D.|
|00000d80| 49 6f 66 43 61 6c 6c 44 | 72 69 76 65 72 00 45 01 |IofCallD|river.E.|
|00000d90| 49 6f 66 43 6f 6d 70 6c | 65 74 65 52 65 71 75 65 |IofCompl|eteReque|
|00000da0| 73 74 00 00 42 00 45 78 | 46 72 65 65 50 6f 6f 6c |st..B.Ex|FreePool|
|00000db0| 00 00 36 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |..6.ExAl|locatePo|
|00000dc0| 6f 6c 57 69 74 68 54 61 | 67 00 8d 01 4b 65 52 65 |olWithTa|g...KeRe|
|00000dd0| 61 64 53 74 61 74 65 51 | 75 65 75 65 00 00 88 01 |adStateQ|ueue....|
|00000de0| 4b 65 51 75 65 72 79 54 | 69 6d 65 49 6e 63 72 65 |KeQueryT|imeIncre|
|00000df0| 6d 65 6e 74 00 00 08 01 | 49 6f 46 72 65 65 4d 64 |ment....|IoFreeMd|
|00000e00| 6c 00 e8 00 49 6f 42 75 | 69 6c 64 50 61 72 74 69 |l...IoBu|ildParti|
|00000e10| 61 6c 4d 64 6c 00 fa 01 | 4d 6d 55 6e 6d 61 70 4c |alMdl...|MmUnmapL|
|00000e20| 6f 63 6b 65 64 50 61 67 | 65 73 00 00 f8 01 4d 6d |ockedPag|es....Mm|
|00000e30| 55 6e 6c 6f 63 6b 50 61 | 67 65 73 00 2f 00 45 78 |UnlockPa|ges./.Ex|
|00000e40| 41 63 71 75 69 72 65 52 | 65 73 6f 75 72 63 65 53 |AcquireR|esourceS|
|00000e50| 68 61 72 65 64 4c 69 74 | 65 00 c6 02 52 74 6c 46 |haredLit|e...RtlF|
|00000e60| 72 65 65 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |reeUnico|deString|
|00000e70| 00 00 7a 02 52 74 6c 41 | 6e 73 69 53 74 72 69 6e |..z.RtlA|nsiStrin|
|00000e80| 67 54 6f 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |gToUnico|deString|
|00000e90| 00 00 5e 03 5a 77 43 6c | 6f 73 65 00 8f 03 5a 77 |..^.ZwCl|ose...Zw|
|00000ea0| 51 75 65 72 79 56 61 6c | 75 65 4b 65 79 00 7c 03 |QueryVal|ueKey.|.|
|00000eb0| 5a 77 4f 70 65 6e 4b 65 | 79 00 07 03 52 74 6c 53 |ZwOpenKe|y...RtlS|
|00000ec0| 65 74 4f 77 6e 65 72 53 | 65 63 75 72 69 74 79 44 |etOwnerS|ecurityD|
|00000ed0| 65 73 63 72 69 70 74 6f | 72 00 05 03 52 74 6c 53 |escripto|r...RtlS|
|00000ee0| 65 74 44 61 63 6c 53 65 | 63 75 72 69 74 79 44 65 |etDaclSe|curityDe|
|00000ef0| 73 63 72 69 70 74 6f 72 | 00 00 73 02 52 74 6c 41 |scriptor|..s.RtlA|
|00000f00| 64 64 41 63 63 65 73 73 | 41 6c 6c 6f 77 65 64 41 |ddAccess|AllowedA|
|00000f10| 63 65 00 00 96 02 52 74 | 6c 43 72 65 61 74 65 41 |ce....Rt|lCreateA|
|00000f20| 63 6c 00 00 e6 02 52 74 | 6c 4c 65 6e 67 74 68 53 |cl....Rt|lLengthS|
|00000f30| 69 64 00 00 0c 03 52 74 | 6c 53 75 62 41 75 74 68 |id....Rt|lSubAuth|
|00000f40| 6f 72 69 74 79 53 69 64 | 00 00 d6 02 52 74 6c 49 |oritySid|....RtlI|
|00000f50| 6e 69 74 69 61 6c 69 7a | 65 53 69 64 00 00 e4 02 |nitializ|eSid....|
|00000f60| 52 74 6c 4c 65 6e 67 74 | 68 52 65 71 75 69 72 65 |RtlLengt|hRequire|
|00000f70| 64 53 69 64 00 00 9a 02 | 52 74 6c 43 72 65 61 74 |dSid....|RtlCreat|
|00000f80| 65 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |eSecurit|yDescrip|
|00000f90| 74 6f 72 00 74 01 4b 65 | 49 6e 69 74 69 61 6c 69 |tor.t.Ke|Initiali|
|00000fa0| 7a 65 51 75 65 75 65 00 | f7 01 4d 6d 55 6e 6c 6f |zeQueue.|..MmUnlo|
|00000fb0| 63 6b 50 61 67 61 62 6c | 65 49 6d 61 67 65 53 65 |ckPagabl|eImageSe|
|00000fc0| 63 74 69 6f 6e 00 ce 02 | 52 74 6c 47 65 74 4f 77 |ction...|RtlGetOw|
|00000fd0| 6e 65 72 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |nerSecur|ityDescr|
|00000fe0| 69 70 74 6f 72 00 ca 02 | 52 74 6c 47 65 74 44 61 |iptor...|RtlGetDa|
|00000ff0| 63 6c 53 65 63 75 72 69 | 74 79 44 65 73 63 72 69 |clSecuri|tyDescri|
|00001000| 70 74 6f 72 00 00 c5 02 | 52 74 6c 46 72 65 65 4f |ptor....|RtlFreeO|
|00001010| 65 6d 53 74 72 69 6e 67 | 00 00 9c 01 4b 65 52 75 |emString|....KeRu|
|00001020| 6e 64 6f 77 6e 51 75 65 | 75 65 00 00 57 01 4b 65 |ndownQue|ue..W.Ke|
|00001030| 44 65 6c 61 79 45 78 65 | 63 75 74 69 6f 6e 54 68 |DelayExe|cutionTh|
|00001040| 72 65 61 64 00 00 d8 00 | 49 6e 74 65 72 6c 6f 63 |read....|Interloc|
|00001050| 6b 65 64 45 78 63 68 61 | 6e 67 65 41 64 64 00 00 |kedExcha|ngeAdd..|
|00001060| 0e 03 52 74 6c 54 69 6d | 65 54 6f 53 65 63 6f 6e |..RtlTim|eToSecon|
|00001070| 64 73 53 69 6e 63 65 31 | 39 37 30 00 70 00 45 78 |dsSince1|970.p.Ex|
|00001080| 53 79 73 74 65 6d 54 69 | 6d 65 54 6f 4c 6f 63 61 |SystemTi|meToLoca|
|00001090| 6c 54 69 6d 65 00 95 00 | 46 73 52 74 6c 44 6f 65 |lTime...|FsRtlDoe|
|000010a0| 73 4e 61 6d 65 43 6f 6e | 74 61 69 6e 57 69 6c 64 |sNameCon|tainWild|
|000010b0| 43 61 72 64 73 00 10 03 | 52 74 6c 54 69 6d 65 54 |Cards...|RtlTimeT|
|000010c0| 6f 54 69 6d 65 46 69 65 | 6c 64 73 00 5e 00 45 78 |oTimeFie|lds.^.Ex|
|000010d0| 4c 6f 63 61 6c 54 69 6d | 65 54 6f 53 79 73 74 65 |LocalTim|eToSyste|
|000010e0| 6d 54 69 6d 65 00 0d 03 | 52 74 6c 54 69 6d 65 46 |mTime...|RtlTimeF|
|000010f0| 69 65 6c 64 73 54 6f 54 | 69 6d 65 00 52 01 4b 65 |ieldsToT|ime.R.Ke|
|00001100| 42 75 67 43 68 65 63 6b | 45 78 00 00 0c 01 49 6f |BugCheck|Ex....Io|
|00001110| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|00001120| 73 00 60 01 4b 65 47 65 | 74 43 75 72 72 65 6e 74 |s.`.KeGe|tCurrent|
|00001130| 54 68 72 65 61 64 00 00 | e0 00 49 6f 41 6c 6c 6f |Thread..|..IoAllo|
|00001140| 63 61 74 65 49 72 70 00 | 48 02 4f 62 66 52 65 66 |cateIrp.|H.ObfRef|
|00001150| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 20 01 |erenceOb|ject.. .|
|00001160| 49 6f 51 75 65 75 65 54 | 68 72 65 61 64 49 72 70 |IoQueueT|hreadIrp|
|00001170| 00 00 ee 01 4d 6d 50 72 | 6f 62 65 41 6e 64 4c 6f |....MmPr|obeAndLo|
|00001180| 63 6b 50 61 67 65 73 00 | e1 00 49 6f 41 6c 6c 6f |ckPages.|..IoAllo|
|00001190| 63 61 74 65 4d 64 6c 00 | e4 01 4d 6d 4c 6f 63 6b |cateMdl.|..MmLock|
|000011a0| 50 61 67 61 62 6c 65 44 | 61 74 61 53 65 63 74 69 |PagableD|ataSecti|
|000011b0| 6f 6e 00 00 b1 02 52 74 | 6c 45 71 75 61 6c 53 74 |on....Rt|lEqualSt|
|000011c0| 72 69 6e 67 00 00 0e 02 | 4e 74 43 72 65 61 74 65 |ring....|NtCreate|
|000011d0| 46 69 6c 65 00 00 f9 02 | 52 74 6c 50 72 65 66 69 |File....|RtlPrefi|
|000011e0| 78 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |xUnicode|String..|
|000011f0| ed 00 49 6f 43 68 65 63 | 6b 45 61 42 75 66 66 65 |..IoChec|kEaBuffe|
|00001200| 72 56 61 6c 69 64 69 74 | 79 00 ee 00 49 6f 43 68 |rValidit|y...IoCh|
|00001210| 65 63 6b 46 75 6e 63 74 | 69 6f 6e 41 63 63 65 73 |eckFunct|ionAcces|
|00001220| 73 00 b5 00 46 73 52 74 | 6c 4d 64 6c 57 72 69 74 |s...FsRt|lMdlWrit|
|00001230| 65 43 6f 6d 70 6c 65 74 | 65 44 65 76 00 00 c5 00 |eComplet|eDev....|
|00001240| 46 73 52 74 6c 50 72 65 | 70 61 72 65 4d 64 6c 57 |FsRtlPre|pareMdlW|
|00001250| 72 69 74 65 44 65 76 00 | b2 00 46 73 52 74 6c 4d |riteDev.|..FsRtlM|
|00001260| 64 6c 52 65 61 64 43 6f | 6d 70 6c 65 74 65 44 65 |dlReadCo|mpleteDe|
|00001270| 76 00 b3 00 46 73 52 74 | 6c 4d 64 6c 52 65 61 64 |v...FsRt|lMdlRead|
|00001280| 44 65 76 00 0a 01 49 6f | 47 65 74 42 61 73 65 46 |Dev...Io|GetBaseF|
|00001290| 69 6c 65 53 79 73 74 65 | 6d 44 65 76 69 63 65 4f |ileSyste|mDeviceO|
|000012a0| 62 6a 65 63 74 00 2a 02 | 4e 74 52 65 71 75 65 73 |bject.*.|NtReques|
|000012b0| 74 57 61 69 74 52 65 70 | 6c 79 50 6f 72 74 00 00 |tWaitRep|lyPort..|
|000012c0| ef 02 52 74 6c 4e 74 53 | 74 61 74 75 73 54 6f 44 |..RtlNtS|tatusToD|
|000012d0| 6f 73 45 72 72 6f 72 4e | 6f 54 65 62 00 00 32 01 |osErrorN|oTeb..2.|
|000012e0| 49 6f 53 65 74 54 68 72 | 65 61 64 48 61 72 64 45 |IoSetThr|eadHardE|
|000012f0| 72 72 6f 72 4d 6f 64 65 | 00 00 db 02 52 74 6c 49 |rrorMode|....RtlI|
|00001300| 6e 74 65 67 65 72 54 6f | 55 6e 69 63 6f 64 65 53 |ntegerTo|UnicodeS|
|00001310| 74 72 69 6e 67 00 eb 00 | 49 6f 43 61 6e 63 65 6c |tring...|IoCancel|
|00001320| 49 72 70 00 eb 03 77 63 | 73 63 70 79 00 00 d2 02 |Irp...wc|scpy....|
|00001330| 52 74 6c 49 6e 69 74 53 | 74 72 69 6e 67 00 38 01 |RtlInitS|tring.8.|
|00001340| 49 6f 53 74 61 74 69 73 | 74 69 63 73 4c 6f 63 6b |IoStatis|ticsLock|
|00001350| 00 00 43 01 49 6f 57 72 | 69 74 65 54 72 61 6e 73 |..C.IoWr|iteTrans|
|00001360| 66 65 72 43 6f 75 6e 74 | 00 00 42 01 49 6f 57 72 |ferCount|..B.IoWr|
|00001370| 69 74 65 4f 70 65 72 61 | 74 69 6f 6e 43 6f 75 6e |iteOpera|tionCoun|
|00001380| 74 00 24 01 49 6f 52 65 | 61 64 54 72 61 6e 73 66 |t.$.IoRe|adTransf|
|00001390| 65 72 43 6f 75 6e 74 00 | 23 01 49 6f 52 65 61 64 |erCount.|#.IoRead|
|000013a0| 4f 70 65 72 61 74 69 6f | 6e 43 6f 75 6e 74 00 00 |Operatio|nCount..|
|000013b0| e9 03 77 63 73 63 68 72 | 00 00 b7 03 5f 73 74 72 |..wcschr|...._str|
|000013c0| 69 63 6d 70 00 00 fe 02 | 52 74 6c 52 61 6e 64 6f |icmp....|RtlRando|
|000013d0| 6d 00 04 01 49 6f 46 61 | 73 74 51 75 65 72 79 4e |m...IoFa|stQueryN|
|000013e0| 65 74 77 6f 72 6b 41 74 | 74 72 69 62 75 74 65 73 |etworkAt|tributes|
|000013f0| 00 00 01 03 52 74 6c 53 | 65 63 6f 6e 64 73 53 69 |....RtlS|econdsSi|
|00001400| 6e 63 65 31 39 37 30 54 | 6f 54 69 6d 65 00 17 02 |nce1970T|oTime...|
|00001410| 4e 74 46 73 43 6f 6e 74 | 72 6f 6c 46 69 6c 65 00 |NtFsCont|rolFile.|
|00001420| 13 01 49 6f 47 65 74 53 | 74 61 63 6b 4c 69 6d 69 |..IoGetS|tackLimi|
|00001430| 74 73 00 00 20 03 52 74 | 6c 55 70 63 61 73 65 55 |ts.. .Rt|lUpcaseU|
|00001440| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 4f 65 |nicodeSt|ringToOe|
|00001450| 6d 53 74 72 69 6e 67 00 | 1d 03 52 74 6c 55 70 63 |mString.|..RtlUpc|
|00001460| 61 73 65 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |aseUnico|deString|
|00001470| 00 00 c3 02 52 74 6c 46 | 72 65 65 41 6e 73 69 53 |....RtlF|reeAnsiS|
|00001480| 74 72 69 6e 67 00 12 02 | 4e 74 44 65 76 69 63 65 |tring...|NtDevice|
|00001490| 49 6f 43 6f 6e 74 72 6f | 6c 46 69 6c 65 00 2f 02 |IoContro|lFile./.|
|000014a0| 4e 74 53 65 74 53 65 63 | 75 72 69 74 79 4f 62 6a |NtSetSec|urityObj|
|000014b0| 65 63 74 00 26 02 4e 74 | 51 75 65 72 79 53 65 63 |ect.&.Nt|QuerySec|
|000014c0| 75 72 69 74 79 4f 62 6a | 65 63 74 00 ea 03 77 63 |urityObj|ect...wc|
|000014d0| 73 63 6d 70 00 00 0b 02 | 4e 74 43 6c 6f 73 65 00 |scmp....|NtClose.|
|000014e0| d0 02 52 74 6c 49 6e 69 | 74 41 6e 73 69 53 74 72 |..RtlIni|tAnsiStr|
|000014f0| 69 6e 67 00 a6 00 46 73 | 52 74 6c 49 73 46 61 74 |ing...Fs|RtlIsFat|
|00001500| 44 62 63 73 4c 65 67 61 | 6c 00 dc 02 52 74 6c 49 |DbcsLega|l...RtlI|
|00001510| 73 4e 61 6d 65 4c 65 67 | 61 6c 44 4f 53 38 44 6f |sNameLeg|alDOS8Do|
|00001520| 74 33 00 00 04 02 4e 6c | 73 4f 65 6d 4c 65 61 64 |t3....Nl|sOemLead|
|00001530| 42 79 74 65 49 6e 66 6f | 00 00 02 02 4e 6c 73 4d |ByteInfo|....NlsM|
|00001540| 62 43 6f 64 65 50 61 67 | 65 54 61 67 00 00 1a 03 |bCodePag|eTag....|
|00001550| 52 74 6c 55 6e 69 63 6f | 64 65 54 6f 4f 65 6d 4e |RtlUnico|deToOemN|
|00001560| 00 00 23 03 52 74 6c 55 | 70 63 61 73 65 55 6e 69 |..#.RtlU|pcaseUni|
|00001570| 63 6f 64 65 54 6f 4f 65 | 6d 4e 00 00 59 01 4b 65 |codeToOe|mN..Y.Ke|
|00001580| 44 65 74 61 63 68 50 72 | 6f 63 65 73 73 00 4f 01 |DetachPr|ocess.O.|
|00001590| 4b 65 41 74 74 61 63 68 | 50 72 6f 63 65 73 73 00 |KeAttach|Process.|
|000015a0| 51 02 50 73 41 73 73 69 | 67 6e 49 6d 70 65 72 73 |Q.PsAssi|gnImpers|
|000015b0| 6f 6e 61 74 69 6f 6e 54 | 6f 6b 65 6e 00 00 3d 03 |onationT|oken..=.|
|000015c0| 53 65 46 72 65 65 50 72 | 69 76 69 6c 65 67 65 73 |SeFreePr|ivileges|
|000015d0| 00 00 e9 02 52 74 6c 4d | 61 70 47 65 6e 65 72 69 |....RtlM|apGeneri|
|000015e0| 63 4d 61 73 6b 00 3c 03 | 53 65 45 78 70 6f 72 74 |cMask.<.|SeExport|
|000015f0| 73 00 82 01 4b 65 4e 75 | 6d 62 65 72 50 72 6f 63 |s...KeNu|mberProc|
|00001600| 65 73 73 6f 72 73 00 00 | 0f 03 52 74 6c 54 69 6d |essors..|..RtlTim|
|00001610| 65 54 6f 53 65 63 6f 6e | 64 73 53 69 6e 63 65 31 |eToSecon|dsSince1|
|00001620| 39 38 30 00 26 03 52 74 | 6c 56 61 6c 69 64 53 65 |980.&.Rt|lValidSe|
|00001630| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00001640| 00 00 e3 01 4d 6d 49 73 | 54 68 69 73 41 6e 4e 74 |....MmIs|ThisAnNt|
|00001650| 41 73 53 79 73 74 65 6d | 00 00 f5 01 4d 6d 53 69 |AsSystem|....MmSi|
|00001660| 7a 65 4f 66 4d 64 6c 00 | 54 02 50 73 43 72 65 61 |zeOfMdl.|T.PsCrea|
|00001670| 74 65 53 79 73 74 65 6d | 54 68 72 65 61 64 00 00 |teSystem|Thread..|
|00001680| a4 01 4b 65 53 65 74 49 | 64 65 61 6c 50 72 6f 63 |..KeSetI|dealProc|
|00001690| 65 73 73 6f 72 54 68 72 | 65 61 64 00 98 01 4b 65 |essorThr|ead...Ke|
|000016a0| 52 65 6d 6f 76 65 51 75 | 65 75 65 00 6a 02 50 73 |RemoveQu|eue.j.Ps|
|000016b0| 54 65 72 6d 69 6e 61 74 | 65 53 79 73 74 65 6d 54 |Terminat|eSystemT|
|000016c0| 68 72 65 61 64 00 98 02 | 52 74 6c 43 72 65 61 74 |hread...|RtlCreat|
|000016d0| 65 48 65 61 70 00 0c 02 | 4e 74 43 6f 6e 6e 65 63 |eHeap...|NtConnec|
|000016e0| 74 50 6f 72 74 00 0f 02 | 4e 74 43 72 65 61 74 65 |tPort...|NtCreate|
|000016f0| 53 65 63 74 69 6f 6e 00 | a7 02 52 74 6c 44 65 73 |Section.|..RtlDes|
|00001700| 74 72 6f 79 48 65 61 70 | 00 00 77 02 52 74 6c 41 |troyHeap|..w.RtlA|
|00001710| 6c 6c 6f 63 61 74 65 48 | 65 61 70 00 c4 02 52 74 |llocateH|eap...Rt|
|00001720| 6c 46 72 65 65 48 65 61 | 70 00 00 00 00 00 00 00 |lFreeHea|p.......|
|00001730| 4d 00 4b 66 52 65 6c 65 | 61 73 65 53 70 69 6e 4c |M.KfRele|aseSpinL|
|00001740| 6f 63 6b 00 4a 00 4b 66 | 41 63 71 75 69 72 65 53 |ock.J.Kf|AcquireS|
|00001750| 70 69 6e 4c 6f 63 6b 00 | 4b 00 4b 66 4c 6f 77 65 |pinLock.|K.KfLowe|
|00001760| 72 49 72 71 6c 00 4c 00 | 4b 66 52 61 69 73 65 49 |rIrql.L.|KfRaiseI|
|00001770| 72 71 6c 00 42 00 4b 65 | 47 65 74 43 75 72 72 65 |rql.B.Ke|GetCurre|
|00001780| 6e 74 49 72 71 6c 00 00 | 24 00 54 64 69 52 65 67 |ntIrql..|$.TdiReg|
|00001790| 69 73 74 65 72 4e 6f 74 | 69 66 69 63 61 74 69 6f |isterNot|ificatio|
|000017a0| 6e 48 61 6e 64 6c 65 72 | 00 00 1c 00 54 64 69 44 |nHandler|....TdiD|
|000017b0| 65 72 65 67 69 73 74 65 | 72 4e 6f 74 69 66 69 63 |eregiste|rNotific|
|000017c0| 61 74 69 6f 6e 48 61 6e | 64 6c 65 72 00 00 20 00 |ationHan|dler.. .|
|000017d0| 54 64 69 4f 70 65 6e 4e | 65 74 62 69 6f 73 41 64 |TdiOpenN|etbiosAd|
|000017e0| 64 72 65 73 73 00 25 00 | 54 64 69 52 65 74 75 72 |dress.%.|TdiRetur|
|000017f0| 6e 43 68 61 69 6e 65 64 | 52 65 63 65 69 76 65 73 |nChained|Receives|
|00001800| 00 00 0d 00 54 64 69 43 | 6f 70 79 42 75 66 66 65 |....TdiC|opyBuffe|
|00001810| 72 54 6f 4d 64 6c 00 00 | 00 00 00 00 00 00 00 00 |rToMdl..|........|
|00001820| 03 00 44 65 6c 65 74 65 | 53 65 63 75 72 69 74 79 |..Delete|Security|
|00001830| 43 6f 6e 74 65 78 74 00 | 0c 00 4d 61 70 53 65 63 |Context.|..MapSec|
|00001840| 75 72 69 74 79 45 72 72 | 6f 72 00 00 00 00 41 63 |urityErr|or....Ac|
|00001850| 63 65 70 74 53 65 63 75 | 72 69 74 79 43 6f 6e 74 |ceptSecu|rityCont|
|00001860| 65 78 74 00 08 00 49 6d | 70 65 72 73 6f 6e 61 74 |ext...Im|personat|
|00001870| 65 53 65 63 75 72 69 74 | 79 43 6f 6e 74 65 78 74 |eSecurit|yContext|
|00001880| 00 00 01 00 41 63 71 75 | 69 72 65 43 72 65 64 65 |....Acqu|ireCrede|
|00001890| 6e 74 69 61 6c 73 48 61 | 6e 64 6c 65 57 00 05 00 |ntialsHa|ndleW...|
|000018a0| 46 72 65 65 43 6f 6e 74 | 65 78 74 42 75 66 66 65 |FreeCont|extBuffe|
|000018b0| 72 00 04 00 45 6e 75 6d | 65 72 61 74 65 53 65 63 |r...Enum|erateSec|
|000018c0| 75 72 69 74 79 50 61 63 | 6b 61 67 65 73 57 00 00 |urityPac|kagesW..|
|000018d0| 09 00 49 6e 69 74 53 65 | 63 75 72 69 74 79 49 6e |..InitSe|curityIn|
|000018e0| 74 65 72 66 61 63 65 57 | 00 00 9a 01 4b 65 52 65 |terfaceW|....KeRe|
|000018f0| 73 65 74 45 76 65 6e 74 | 00 00 62 03 5a 77 43 72 |setEvent|..b.ZwCr|
|00001900| 65 61 74 65 45 76 65 6e | 74 00 77 03 5a 77 4d 61 |eateEven|t.w.ZwMa|
|00001910| 70 56 69 65 77 4f 66 53 | 65 63 74 69 6f 6e 00 00 |pViewOfS|ection..|
|00001920| 65 03 5a 77 43 72 65 61 | 74 65 53 65 63 74 69 6f |e.ZwCrea|teSectio|
|00001930| 6e 00 97 03 5a 77 53 65 | 74 45 76 65 6e 74 00 00 |n...ZwSe|tEvent..|
|00001940| 93 01 4b 65 52 65 6c 65 | 61 73 65 53 65 6d 61 70 |..KeRele|aseSemap|
|00001950| 68 6f 72 65 00 00 75 00 | 45 78 66 49 6e 74 65 72 |hore..u.|ExfInter|
|00001960| 6c 6f 63 6b 65 64 49 6e | 73 65 72 74 54 61 69 6c |lockedIn|sertTail|
|00001970| 4c 69 73 74 00 00 b6 01 | 4b 65 57 61 69 74 46 6f |List....|KeWaitFo|
|00001980| 72 4d 75 6c 74 69 70 6c | 65 4f 62 6a 65 63 74 73 |rMultipl|eObjects|
|00001990| 00 00 75 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |..u.KeIn|itialize|
|000019a0| 53 65 6d 61 70 68 6f 72 | 65 00 a4 03 5a 77 57 61 |Semaphor|e...ZwWa|
|000019b0| 69 74 46 6f 72 53 69 6e | 67 6c 65 4f 62 6a 65 63 |itForSin|gleObjec|
|000019c0| 74 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |t.......|........|
|000019d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+