home *** CD-ROM | disk | FTP | other *** search
| Unknown | 2008-01-19 | 11.0 KB |
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4e 00 44 00 49 00 53 00 | 00 00 46 00 6c 00 61 00 |N.D.I.S.|..F.l.a.|
|00000010| 67 00 73 00 00 00 52 00 | 73 00 73 00 42 00 61 00 |g.s...R.|s.s.B.a.|
|00000020| 73 00 65 00 43 00 70 00 | 75 00 00 00 50 00 61 00 |s.e.C.p.|u...P.a.|
|00000030| 72 00 61 00 6d 00 65 00 | 74 00 65 00 72 00 73 00 |r.a.m.e.|t.e.r.s.|
|00000040| 00 00 4d 00 65 00 64 00 | 69 00 61 00 54 00 79 00 |..M.e.d.|i.a.T.y.|
|00000050| 70 00 65 00 73 00 00 00 | 4d 00 61 00 78 00 4e 00 |p.e.s...|M.a.x.N.|
|00000060| 75 00 6d 00 52 00 73 00 | 73 00 43 00 70 00 75 00 |u.m.R.s.|s.C.p.u.|
|00000070| 73 00 00 00 4d 00 61 00 | 78 00 4e 00 75 00 6d 00 |s...M.a.|x.N.u.m.|
|00000080| 46 00 69 00 6c 00 74 00 | 65 00 72 00 73 00 00 00 |F.i.l.t.|e.r.s...|
|00000090| 50 00 61 00 64 00 53 00 | 68 00 6f 00 72 00 74 00 |P.a.d.S.|h.o.r.t.|
|000000a0| 50 00 61 00 63 00 6b 00 | 65 00 74 00 73 00 00 00 |P.a.c.k.|e.t.s...|
|000000b0| 50 00 61 00 63 00 6b 00 | 65 00 74 00 53 00 74 00 |P.a.c.k.|e.t.S.t.|
|000000c0| 61 00 63 00 6b 00 53 00 | 69 00 7a 00 65 00 00 00 |a.c.k.S.|i.z.e...|
|000000d0| 50 00 72 00 6f 00 63 00 | 65 00 73 00 73 00 6f 00 |P.r.o.c.|e.s.s.o.|
|000000e0| 72 00 41 00 66 00 66 00 | 69 00 6e 00 69 00 74 00 |r.A.f.f.|i.n.i.t.|
|000000f0| 79 00 4d 00 61 00 73 00 | 6b 00 00 00 50 00 6f 00 |y.M.a.s.|k...P.o.|
|00000100| 72 00 74 00 41 00 75 00 | 74 00 68 00 53 00 65 00 |r.t.A.u.|t.h.S.e.|
|00000110| 6e 00 64 00 43 00 6f 00 | 6e 00 74 00 72 00 6f 00 |n.d.C.o.|n.t.r.o.|
|00000120| 6c 00 53 00 74 00 61 00 | 74 00 65 00 00 00 50 00 |l.S.t.a.|t.e...P.|
|00000130| 6f 00 72 00 74 00 41 00 | 75 00 74 00 68 00 52 00 |o.r.t.A.|u.t.h.R.|
|00000140| 65 00 63 00 65 00 69 00 | 76 00 65 00 43 00 6f 00 |e.c.e.i.|v.e.C.o.|
|00000150| 6e 00 74 00 72 00 6f 00 | 6c 00 53 00 74 00 61 00 |n.t.r.o.|l.S.t.a.|
|00000160| 74 00 65 00 00 00 50 00 | 6f 00 72 00 74 00 41 00 |t.e...P.|o.r.t.A.|
|00000170| 75 00 74 00 68 00 53 00 | 65 00 6e 00 64 00 41 00 |u.t.h.S.|e.n.d.A.|
|00000180| 75 00 74 00 68 00 6f 00 | 72 00 69 00 7a 00 61 00 |u.t.h.o.|r.i.z.a.|
|00000190| 74 00 69 00 6f 00 6e 00 | 53 00 74 00 61 00 74 00 |t.i.o.n.|S.t.a.t.|
|000001a0| 65 00 00 00 50 00 6f 00 | 72 00 74 00 41 00 75 00 |e...P.o.|r.t.A.u.|
|000001b0| 74 00 68 00 52 00 65 00 | 63 00 65 00 69 00 76 00 |t.h.R.e.|c.e.i.v.|
|000001c0| 65 00 41 00 75 00 74 00 | 68 00 6f 00 72 00 69 00 |e.A.u.t.|h.o.r.i.|
|000001d0| 7a 00 61 00 74 00 69 00 | 6f 00 6e 00 53 00 74 00 |z.a.t.i.|o.n.S.t.|
|000001e0| 61 00 74 00 65 00 00 00 | 90 90 90 90 90 8b ff 55 |a.t.e...|.......U|
|000001f0| 8b ec a1 94 aa 04 00 85 | c0 b9 4e e6 40 bb 74 04 |........|..N.@.t.|
|00000200| 3b c1 75 1a a1 3c 81 04 | 00 8b 00 35 94 aa 04 00 |;.u..<..|...5....|
|00000210| a3 94 aa 04 00 75 07 8b | c1 a3 94 aa 04 00 f7 d0 |.....u..|........|
|00000220| a3 98 aa 04 00 5d 90 90 | 90 90 90 8b ff 55 8b ec |.....]..|.....U..|
|00000230| 81 ec 98 00 00 00 a1 94 | aa 04 00 33 c5 89 45 fc |........|...3..E.|
|00000240| 53 56 8b 75 08 57 8b 7d | 0c bb 20 e0 0c 00 53 89 |SV.u.W.}|.. ...S.|
|00000250| 75 c4 e8 3f 80 f1 ff e8 | 05 38 ff ff 89 1d 00 a0 |u..?....|.8......|
|00000260| 04 00 33 db 56 89 1d 38 | e0 0c 00 e8 b1 38 ff ff |..3.V..8|.....8..|
|00000270| 66 89 1d 30 ae 04 00 66 | 8b 07 66 a3 32 ae 04 00 |f..0...f|..f.2...|
|00000280| 0f b7 07 40 68 4e 44 20 | 20 40 33 f6 50 46 56 ff |...@hND | @3.PFV.|
|00000290| 15 64 83 04 00 57 68 30 | ae 04 00 a3 34 ae 04 00 |.d...Wh0|....4...|
|000002a0| ff 15 44 83 04 00 8b 7d | c4 68 bc 19 11 00 8d 45 |..D....}|.h.....E|
|000002b0| b8 50 89 3d c4 ad 04 00 | ff 15 40 83 04 00 68 40 |.P.=....|..@...h@|
|000002c0| ad 04 00 ff 15 f0 80 04 | 00 68 c0 ad 04 00 53 68 |........|.h....Sh|
|000002d0| 00 01 00 00 6a 12 a3 3c | ad 04 00 8d 45 b8 50 53 |....j..<|....E.PS|
|000002e0| 57 ff 15 ec 80 04 00 85 | c0 0f 8c 72 01 00 00 68 |W.......|...r...h|
|000002f0| 9e 19 11 00 8d 45 d0 50 | ff 15 40 83 04 00 8d 45 |.....E.P|..@....E|
|00000300| b8 50 8d 45 d0 50 ff 15 | e8 80 04 00 a1 c0 ad 04 |.P.E.P..|........|
|00000310| 00 83 48 1c 10 6a 1c 59 | 56 56 b8 34 62 0e 00 83 |..H..j.Y|VV.4b...|
|00000320| c7 38 68 50 ae 04 00 f3 | ab ff 35 c0 ad 04 00 e8 |.8hP....|..5.....|
|00000330| eb 65 f1 ff 8b 7d c4 53 | 56 57 e8 53 ac f1 ff 53 |.e...}.S|VW.S...S|
|00000340| 56 ff 77 04 e8 49 ac f1 | ff 53 56 ff 35 c0 ad 04 |V.w..I..|.SV.5...|
|00000350| 00 e8 3c ac f1 ff 56 ff | 35 c0 ad 04 00 ff 15 64 |..<...V.|5......d|
|00000360| 80 04 00 89 5f 34 89 1d | 60 df 0c 00 89 1d 58 df |...._4..|`.....X.|
|00000370| 0c 00 89 1d 5c df 0c 00 | 89 1d 54 df 0c 00 89 1d |....\...|..T.....|
|00000380| 50 df 0c 00 89 1d 44 df | 0c 00 89 1d 40 df 0c 00 |P.....D.|....@...|
|00000390| 89 1d 4c df 0c 00 89 1d | 48 df 0c 00 89 1d 6c d2 |..L.....|H.....l.|
|000003a0| 0c 00 89 1d 20 d6 0c 00 | 89 1d f0 d1 0c 00 c7 05 |.... ...|........|
|000003b0| 7c ad 04 00 04 00 00 00 | ff 15 8c 80 04 00 a3 80 ||.......|........|
|000003c0| ad 04 00 bf 70 a7 04 00 | c7 45 d8 06 00 00 00 57 |....p...|.E.....W|
|000003d0| e8 92 30 fe ff 83 c7 10 | ff 4d d8 75 f2 68 84 ad |..0.....|.M.u.h..|
|000003e0| 04 00 ff 15 e4 80 04 00 | e8 13 06 00 00 81 25 0c |........|......%.|
|000003f0| ae 04 00 ff fb ff ff 83 | 0d bc ad 04 00 ff 53 68 |........|......Sh|
|00000400| e4 ad 04 00 ff 15 e0 80 | 04 00 53 68 92 96 0e 00 |........|..Sh....|
|00000410| 53 6a ff 53 68 ff ff 1f | 00 8d 45 c0 50 ff 15 a8 |Sj.Sh...|..E.P...|
|00000420| 80 04 00 3b c3 7d 31 8b | 0d 00 a0 04 00 81 f9 00 |...;.}1.|........|
|00000430| a0 04 00 74 2c 66 f7 41 | 20 00 10 74 24 80 79 1d |...t,f.A| ..t$.y.|
|00000440| 02 72 1e 50 68 1c 85 04 | 00 6a 0a ff 71 14 ff 71 |.r.Ph...|.j..q..q|
|00000450| 10 e8 5a bd f1 ff eb 09 | ff 75 c0 ff 15 a4 80 04 |..Z.....|.u......|
|00000460| 00 68 18 ae 04 00 ff 15 | dc 80 04 00 68 10 ae 04 |.h......|....h...|
|00000470| 00 6a 3c e8 49 83 f1 ff | e8 ed 7e f1 ff 66 f7 05 |.j<.I...|..~..f..|
|00000480| 0c ae 04 00 00 01 75 05 | e8 55 89 f1 ff bf 40 d6 |......u.|.U....@.|
|00000490| 0c 00 c7 45 d8 10 00 00 | 00 6a 5c 53 57 e8 e6 00 |...E....|.j\SW...|
|000004a0| f0 ff 83 c4 0c 81 c7 8c | 00 00 00 ff 4d d8 75 e9 |........|....M.u.|
|000004b0| 68 6c 19 11 00 8d 45 98 | 50 ff 15 40 83 04 00 56 |hl....E.|P..@...V|
|000004c0| 8d 45 98 89 45 a8 56 8d | 45 a0 50 68 48 ae 04 00 |.E..E.V.|E.PhH...|
|000004d0| c7 45 a0 18 00 00 00 89 | 5d a4 c7 45 ac 50 02 00 |.E......|]..E.P..|
|000004e0| 00 89 5d b0 89 5d b4 ff | 15 d8 80 04 00 3b c3 7d |..]..]..|.....;.}|
|000004f0| 0d 50 68 36 19 11 00 e8 | 3f 62 f3 ff 59 59 68 d8 |.Ph6....|?b..YYh.|
|00000500| ad 04 00 53 68 28 d0 02 | 00 68 b0 8d 04 00 53 ff |...Sh(..|.h....S.|
|00000510| 15 d4 80 04 00 85 c0 7d | 0b 68 fc 18 11 00 e8 18 |.......}|.h......|
|00000520| 62 f3 ff 59 6a 08 59 33 | c0 6a 20 8d 7d dc f3 ab |b..Yj.Y3|.j .}...|
|00000530| 8d 45 dc 50 53 53 6a 05 | ff 15 d0 80 04 00 85 c0 |.E.PSSj.|........|
|00000540| 7c 20 38 5d dc 75 0d 38 | 5d dd 75 08 89 35 68 a7 || 8].u.8|].u..5h.|
|00000550| 04 00 eb 0e 33 c0 80 7d | dc 01 0f 94 c0 a3 68 a7 |....3..}|......h.|
|00000560| 04 00 8b 3d 84 81 04 00 | b8 5c ad 04 00 a3 60 ad |...=....|.\....`.|
|00000570| 04 00 a3 5c ad 04 00 b8 | 64 ad 04 00 a3 68 ad 04 |...\....|d....h..|
|00000580| 00 a3 64 ad 04 00 b8 6c | ad 04 00 a3 70 ad 04 00 |..d....l|....p...|
|00000590| a3 6c ad 04 00 b8 f8 d1 | 0c 00 68 ff ff 00 00 68 |.l......|..h....h|
|000005a0| 20 df 0c 00 a3 fc d1 0c | 00 a3 f8 d1 0c 00 ff d7 | .......|........|
|000005b0| 68 ff ff 00 00 68 20 d3 | 0c 00 ff d7 33 c0 8d 7d |h....h .|....3..}|
|000005c0| c8 ab ab ab ab 8d 45 c8 | 50 53 c6 45 c8 80 c6 45 |......E.|PS.E...E|
|000005d0| c9 01 66 c7 45 ca 10 00 | 88 5d cc 66 89 5d ce c6 |..f.E...|.].f.]..|
|000005e0| 45 cd 01 c7 45 d0 4e 44 | 6e 64 e8 8d 86 f0 ff 3b |E...E.ND|nd.....;|
|000005f0| c3 a3 7c ae 04 00 75 0b | 68 c0 18 11 00 e8 39 61 |..|...u.|h.....9a|
|00000600| f3 ff 59 33 c0 8d 7d cc | ab ab ab 8d 45 cc 50 53 |..Y3..}.|....E.PS|
|00000610| c6 45 cc 80 c6 45 cd 01 | 66 c7 45 ce 0c 00 c7 45 |.E...E..|f.E....E|
|00000620| d0 4e 44 6e 64 e8 d4 7a | f1 ff 3b c3 a3 80 ae 04 |.NDnd..z|..;.....|
|00000630| 00 75 0b 68 7e 18 11 00 | e8 fe 60 f3 ff 59 e8 69 |.u.h~...|..`..Y.i|
|00000640| 82 f1 ff 6a 10 53 bf ff | ff 00 00 57 68 84 ae 04 |...j.S..|...Wh...|
|00000650| 00 8d 45 d8 50 e8 b0 8e | f1 ff 6a 18 53 57 68 88 |..E.P...|..j.SWh.|
|00000660| ae 04 00 8d 45 d8 50 e8 | 9e 8e f1 ff 8b 3d 40 80 |....E.P.|.....=@.|
|00000670| 04 00 53 68 4e 44 54 72 | 6a 64 68 ff 0f 00 00 ff |..ShNDTr|jdh.....|
|00000680| d7 83 c0 03 83 e0 fc 83 | c0 64 50 53 53 53 68 a0 |........|.dPSSSh.|
|00000690| d1 0c 00 ff 15 20 80 04 | 00 53 68 4e 44 54 72 68 |..... ..|.ShNDTrh|
|000006a0| ea 05 00 00 68 ff 0f 00 | 00 ff d7 83 c0 03 83 e0 |....h...|........|
|000006b0| fc 05 ea 05 00 00 50 53 | 53 53 68 40 d1 0c 00 ff |......PS|SSh@....|
|000006c0| 15 20 80 04 00 68 01 00 | 00 80 56 56 56 56 56 56 |. ...h..|..VVVVVV|
|000006d0| e8 33 88 f1 ff 68 02 00 | 00 40 56 56 56 56 56 56 |.3...h..|.@VVVVVV|
|000006e0| a3 64 ae 04 00 e8 1e 88 | f1 ff bf 13 00 00 c0 57 |.d......|.......W|
|000006f0| 56 56 56 56 56 56 a3 68 | ae 04 00 e8 08 88 f1 ff |VVVVVV.h|........|
|00000700| 68 04 00 10 00 56 56 56 | 56 56 56 a3 6c ae 04 00 |h....VVV|VVV.l...|
|00000710| e8 f3 87 f1 ff 57 53 56 | 56 56 56 56 a3 70 ae 04 |.....WSV|VVVV.p..|
|00000720| 00 e8 e2 87 f1 ff 68 00 | d3 0c 00 ff 35 64 ae 04 |......h.|....5d..|
|00000730| 00 a3 74 ae 04 00 e8 26 | 87 f1 ff 68 e0 d2 0c 00 |..t....&|...h....|
|00000740| ff 35 68 ae 04 00 e8 16 | 87 f1 ff 68 c0 d2 0c 00 |.5h.....|...h....|
|00000750| ff 35 6c ae 04 00 e8 06 | 87 f1 ff 68 a0 d2 0c 00 |.5l.....|...h....|
|00000760| ff 35 70 ae 04 00 e8 f6 | 86 f1 ff 68 80 d2 0c 00 |.5p.....|...h....|
|00000770| ff 35 74 ae 04 00 e8 e6 | 86 f1 ff 89 45 d8 e8 57 |.5t.....|....E..W|
|00000780| 75 f1 ff e8 a1 ab f1 ff | 53 68 84 98 02 00 ff 75 |u.......|Sh.....u|
|00000790| c4 ff 15 cc 80 04 00 53 | 53 8d 45 88 50 ff 15 1c |.......S|S.E.P...|
|000007a0| 83 04 00 6a 0a 59 33 c0 | 6a 0a bf 80 df 0c 00 f3 |...j.Y3.|j.......|
|000007b0| ab 59 bf c0 df 0c 00 f3 | ab 8d 45 88 50 68 c7 92 |.Y......|..E.Ph..|
|000007c0| 02 00 8d 85 68 ff ff ff | 50 ff 15 c8 80 04 00 6a |....h...|P......j|
|000007d0| 02 8d 85 68 ff ff ff 50 | ff 15 c4 80 04 00 53 53 |...h...P|......SS|
|000007e0| 8d 85 68 ff ff ff 50 ff | 15 c0 80 04 00 53 53 53 |..h...P.|.....SSS|
|000007f0| 53 8d 45 88 50 ff 15 20 | 83 04 00 a1 3c ad 04 00 |S.E.P.. |....<...|
|00000800| 3b c3 be 20 d1 0c 00 76 | 0b 50 53 56 e8 77 fd ef |;.. ...v|.PSV.w..|
|00000810| ff 83 c4 0c 68 28 02 00 | 00 53 bf d8 b2 04 00 57 |....h(..|.S.....W|
|00000820| e8 63 fd ef ff 83 c4 0c | 57 c6 05 d8 b2 04 00 80 |.c......|W.......|
|00000830| 66 c7 05 da b2 04 00 28 | 02 c6 05 d9 b2 04 00 01 |f......(|........|
|00000840| 89 35 fc b2 04 00 e8 45 | a3 f1 ff 85 c0 74 16 a1 |.5.....E|.....t..|
|00000850| 3c ad 04 00 33 c9 3b c3 | 76 0b 88 89 20 d1 0c 00 |<...3.;.|v... ...|
|00000860| 41 3b c8 72 f5 e8 38 ad | f1 ff 8b 4d fc 8b 45 d8 |A;.r..8.|...M..E.|
|00000870| 5f 5e 33 cd 5b e8 96 f9 | ef ff c9 c2 08 00 4e 44 |_^3.[...|......ND|
|00000880| 49 53 3a 20 66 61 69 6c | 65 64 20 74 6f 20 63 72 |IS: fail|ed to cr|
|00000890| 65 61 74 65 20 6e 64 69 | 73 20 6e 65 74 20 62 75 |eate ndi|s net bu|
|000008a0| 66 66 65 72 20 73 70 65 | 63 69 61 6c 20 70 6f 6f |ffer spe|cial poo|
|000008b0| 6c 2e 0a 00 90 90 90 90 | 90 90 90 90 90 90 90 90 |l.......|........|
|000008c0| 4e 44 49 53 3a 20 66 61 | 69 6c 65 64 20 74 6f 20 |NDIS: fa|iled to |
|000008d0| 63 72 65 61 74 65 20 6e | 64 69 73 20 6e 65 74 20 |create n|dis net |
|000008e0| 62 75 66 66 65 72 20 6c | 69 73 74 20 73 70 65 63 |buffer l|ist spec|
|000008f0| 69 61 6c 20 70 6f 6f 6c | 2e 0a 00 90 4e 64 69 73 |ial pool|....Ndis|
|00000900| 3a 20 66 61 69 6c 65 64 | 20 74 6f 20 72 65 67 69 |: failed| to regi|
|00000910| 73 74 65 72 20 61 20 70 | 6f 77 65 72 20 73 74 61 |ster a p|ower sta|
|00000920| 74 65 20 43 61 6c 6c 62 | 61 63 6b 20 72 6f 75 74 |te Callb|ack rout|
|00000930| 69 6e 65 0a 00 90 4e 64 | 69 73 3a 20 66 61 69 6c |ine...Nd|is: fail|
|00000940| 65 64 20 74 6f 20 63 72 | 65 61 74 65 20 61 20 43 |ed to cr|eate a C|
|00000950| 61 6c 6c 62 61 63 6b 20 | 6f 62 6a 65 63 74 2e 20 |allback |object. |
|00000960| 53 74 61 74 75 73 20 25 | 6c 78 0a 00 5c 00 43 00 |Status %|lx..\.C.|
|00000970| 61 00 6c 00 6c 00 42 00 | 61 00 63 00 6b 00 5c 00 |a.l.l.B.|a.c.k.\.|
|00000980| 4e 00 64 00 69 00 73 00 | 42 00 69 00 6e 00 64 00 |N.d.i.s.|B.i.n.d.|
|00000990| 55 00 6e 00 62 00 69 00 | 6e 00 64 00 00 00 5c 00 |U.n.b.i.|n.d...\.|
|000009a0| 47 00 6c 00 6f 00 62 00 | 61 00 6c 00 3f 00 3f 00 |G.l.o.b.|a.l.?.?.|
|000009b0| 5c 00 4e 00 44 00 49 00 | 53 00 00 00 5c 00 44 00 |\.N.D.I.|S...\.D.|
|000009c0| 65 00 76 00 69 00 63 00 | 65 00 5c 00 4e 00 64 00 |e.v.i.c.|e.\.N.d.|
|000009d0| 69 00 73 00 00 00 90 90 | 90 90 90 90 90 90 90 90 |i.s.....|........|
|000009e0| 90 90 90 90 90 90 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|000009f0| 90 90 90 90 90 90 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|00000a00| 8b ff 55 8b ec 81 ec 70 | 01 00 00 53 33 c9 56 33 |..U....p|...S3.V3|
|00000a10| db 41 57 89 5d fc 8b d1 | 32 c0 be 18 ad 04 00 85 |.AW.]...|2.......|
|00000a20| 15 40 ad 04 00 74 02 88 | 06 03 d2 fe c0 46 3c 20 |.@...t..|.....F< |
|00000a30| 72 ed 6a 04 5f 6a 14 fe | c8 5e a2 38 ad 04 00 a2 |r.j._j..|.^.8....|
|00000a40| 39 ad 04 00 53 8d 45 fc | 53 89 85 c0 fe ff ff 8d |9...S.E.|S.......|
|00000a50| 85 90 fe ff ff 50 68 00 | 10 11 00 51 89 9d 90 fe |.....Ph.|...Q....|
|00000a60| ff ff 89 8d 94 fe ff ff | c7 85 98 fe ff ff 42 10 |........|......B.|
|00000a70| 11 00 c7 85 ac fe ff ff | 23 1e 11 00 89 bd bc fe |........|#.......|
|00000a80| ff ff 89 9d c4 fe ff ff | 89 b5 b0 fe ff ff 89 9d |........|........|
|00000a90| b4 fe ff ff 89 9d c8 fe | ff ff 89 9d cc fe ff ff |........|........|
|00000aa0| 89 9d d0 fe ff ff ff 15 | 0c 83 04 00 b9 0c ae 04 |........|........|
|00000ab0| 00 89 8d dc fe ff ff 89 | 8d d4 fe ff ff b9 78 a9 |........|......x.|
|00000ac0| 04 00 89 8d f8 fe ff ff | 89 8d f0 fe ff ff b9 d4 |........|........|
|00000ad0| a7 04 00 89 8d 14 ff ff | ff 89 8d 0c ff ff ff b9 |........|........|
|00000ae0| d8 a7 04 00 8d 45 fc 6a | 10 89 b5 b0 fe ff ff be |.....E.j|........|
|00000af0| 22 93 02 00 89 85 c0 fe | ff ff 58 89 8d 30 ff ff |".......|..X..0..|
|00000b00| ff 89 8d 28 ff ff ff b9 | dc a7 04 00 89 9d 90 fe |...(....|........|
|00000b10| ff ff c7 85 94 fe ff ff | 01 00 00 00 c7 85 98 fe |........|........|
|00000b20| ff ff 2c 10 11 00 c7 85 | ac fe ff ff be 1d 11 00 |..,.....|........|
|00000b30| 89 9d c4 fe ff ff 89 bd | bc fe ff ff c7 85 b4 fe |........|........|
|00000b40| ff ff d0 10 11 00 89 b5 | c8 fe ff ff 89 85 cc fe |........|........|
|00000b50| ff ff 89 9d e0 fe ff ff | 89 bd d8 fe ff ff c7 85 |........|........|
|00000b60| d0 fe ff ff 0a 10 11 00 | 89 b5 e4 fe ff ff 89 85 |........|........|
|00000b70| e8 fe ff ff 89 9d fc fe | ff ff 89 bd f4 fe ff ff |........|........|
|00000b80| c7 85 ec fe ff ff b0 10 | 11 00 89 b5 00 ff ff ff |........|........|
|00000b90| 89 85 04 ff ff ff c7 85 | 08 ff ff ff fc 10 11 00 |........|........|
|00000ba0| 89 9d 18 ff ff ff 89 bd | 10 ff ff ff 89 b5 1c ff |........|........|
|00000bb0| ff ff 89 85 20 ff ff ff | c7 85 24 ff ff ff 2e 11 |.... ...|..$.....|
|00000bc0| 11 00 89 9d 34 ff ff ff | 89 bd 2c ff ff ff 89 b5 |....4...|..,.....|
|00000bd0| 38 ff ff ff 89 85 3c ff | ff ff c7 85 40 ff ff ff |8.....<.|....@...|
|00000be0| 66 11 11 00 89 8d 4c ff | ff ff 89 9d 50 ff ff ff |f.....L.|....P...|
|00000bf0| 89 8d 44 ff ff ff 89 bd | 48 ff ff ff 89 b5 54 ff |..D.....|H.....T.|
|00000c00| ff ff 89 85 58 ff ff ff | 89 85 74 ff ff ff 53 b8 |....X...|..t...S.|
|00000c10| e4 a7 04 00 53 89 45 84 | 89 85 7c ff ff ff 8d 85 |....S.E.|..|.....|
|00000c20| 90 fe ff ff 50 b9 e0 a7 | 04 00 68 00 10 11 00 6a |....P...|..h....j|
|00000c30| 01 c7 85 5c ff ff ff a4 | 11 11 00 89 8d 68 ff ff |...\....|.....h..|
|00000c40| ff 89 9d 6c ff ff ff 89 | 8d 60 ff ff ff 89 bd 64 |...l....|.`.....d|
|00000c50| ff ff ff 89 b5 70 ff ff | ff c7 85 78 ff ff ff 74 |.....p..|...x...t|
|00000c60| 10 11 00 89 5d 88 89 7d | 80 89 5d 8c 89 5d 90 89 |....]..}|..]..]..|
|00000c70| 5d 94 ff 15 0c 83 04 00 | 33 d2 42 39 1d 78 a9 04 |].......|3.B9.x..|
|00000c80| 00 75 06 89 15 78 a9 04 | 00 6a 06 58 39 05 78 a9 |.u...x..|.j.X9.x.|
|00000c90| 04 00 72 05 a3 78 a9 04 | 00 6a 10 59 b8 d0 b2 04 |..r..x..|.j.Y....|
|00000ca0| 00 89 85 c0 fe ff ff 89 | 85 b8 fe ff ff b8 cc a8 |........|........|
|00000cb0| 04 00 89 85 dc fe ff ff | 89 85 d4 fe ff ff 53 b8 |........|......S.|
|00000cc0| 04 b5 04 00 53 89 85 f8 | fe ff ff 89 85 f0 fe ff |....S...|........|
|00000cd0| ff 8d 85 90 fe ff ff 50 | 68 00 10 11 00 52 89 9d |.......P|h....R..|
|00000ce0| 90 fe ff ff 89 95 94 fe | ff ff c7 85 98 fe ff ff |........|........|
|00000cf0| 2c 10 11 00 89 b5 ac fe | ff ff 89 8d b0 fe ff ff |,.......|........|
|00000d00| 89 9d c4 fe ff ff 89 bd | bc fe ff ff c7 85 b4 fe |........|........|
|00000d10| ff ff 16 10 11 00 89 b5 | c8 fe ff ff 89 8d cc fe |........|........|
|00000d20| ff ff 89 9d e0 fe ff ff | 89 bd d8 fe ff ff c7 85 |........|........|
|00000d30| d0 fe ff ff 58 10 11 00 | 89 b5 e4 fe ff ff 89 8d |....X...|........|
|00000d40| e8 fe ff ff 89 9d fc fe | ff ff 89 bd f4 fe ff ff |........|........|
|00000d50| c7 85 ec fe ff ff 90 10 | 11 00 89 9d 00 ff ff ff |........|........|
|00000d60| 89 9d 04 ff ff ff 89 9d | 08 ff ff ff ff 15 0c 83 |........|........|
|00000d70| 04 00 ff 35 cc a8 04 00 | e8 d0 75 f1 ff 8b 0d 3c |...5....|..u....<|
|00000d80| ad 04 00 3b c1 5f 5e a3 | cc a8 04 00 5b 76 07 8b |...;._^.|....[v..|
|00000d90| c1 a3 cc a8 04 00 8b 15 | d0 b2 04 00 3b d1 72 09 |........|....;.r.|
|00000da0| 8d 51 ff 89 15 d0 b2 04 | 00 03 c2 3b c1 76 08 2b |.Q......|...;.v.+|
|00000db0| ca 89 0d cc a8 04 00 c9 | c3 90 90 90 90 90 8b ff |........|........|
|00000dc0| 55 8b ec 83 7d 0c 04 75 | 4f 8b 45 10 85 c0 74 48 |U...}..u|O.E...tH|
|00000dd0| 8b 00 85 c0 74 3b 83 f8 | ff 74 36 8b d0 32 c0 32 |....t;..|.t6..2.2|
|00000de0| c9 56 85 d2 74 1c f6 c2 | 01 74 0b 0f b6 f0 88 8e |.V..t...|.t......|
|00000df0| 18 ad 04 00 fe c0 d1 ea | fe c1 3a 0d 38 ad 04 00 |........|..:.8...|
|00000e00| 76 e0 fe c8 a2 38 ad 04 | 00 a2 39 ad 04 00 5e eb |v....8..|..9...^.|
|00000e10| 07 c6 05 3a ad 04 00 01 | 33 c0 5d c2 18 00 90 90 |...:....|3.].....|
|00000e20| 90 90 90 8b ff 55 8b ec | 83 7d 0c 04 56 57 0f 85 |.....U..|.}..VW..|
|00000e30| a4 00 00 00 8b 7d 10 85 | ff 0f 84 99 00 00 00 8b |.....}..|........|
|00000e40| 37 83 fe 11 0f 86 8e 00 | 00 00 a1 4c a9 04 00 8b |7.......|...L....|
|00000e50| 0d 48 a9 04 00 8b d0 85 | d2 76 0c 3b 31 74 79 83 |.H......|.v.;1ty.|
|00000e60| c1 04 83 ea 04 75 f4 3b | 05 54 a9 04 00 75 52 68 |.....u.;|.T...uRh|
|00000e70| 4e 44 6d 74 83 c0 10 50 | 6a 00 ff 15 64 83 04 00 |NDmt...P|j...d...|
|00000e80| 8b f0 85 f6 74 30 ff 35 | 4c a9 04 00 ff 35 48 a9 |....t0.5|L....5H.|
|00000e90| 04 00 56 e8 fa 20 f0 ff | a1 48 a9 04 00 83 c4 0c |..V.. ..|.H......|
|00000ea0| 3d f0 a8 04 00 74 09 6a | 00 50 ff 15 68 83 04 00 |=....t.j|.P..h...|
|00000eb0| 89 35 48 a9 04 00 a1 4c | a9 04 00 3b 05 54 a9 04 |.5H....L|...;.T..|
|00000ec0| 00 73 15 8b 0f 8b 15 48 | a9 04 00 c1 e8 02 89 0c |.s.....H|........|
|00000ed0| 82 83 05 4c a9 04 00 04 | 5f 33 c0 5e 5d c2 18 00 |...L....|_3.^]...|
|00000ee0| 50 1f 10 00 00 00 00 00 | 00 00 00 00 30 1f 10 00 |P.......|....0...|
|00000ef0| 00 80 03 00 f4 22 10 00 | 00 00 00 00 00 00 00 00 |....."..|........|
|00000f00| 3e 1f 10 00 a4 83 03 00 | 2c 23 10 00 00 00 00 00 |>.......|,#......|
|00000f10| 00 00 00 00 46 1f 10 00 | dc 83 03 00 00 00 00 00 |....F...|........|
|00000f20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f30| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 48 41 |ntoskrnl|.exe..HA|
|00000f40| 4c 2e 64 6c 6c 00 4e 45 | 54 49 4f 2e 53 59 53 00 |L.dll.NE|TIO.SYS.|
|00000f50| 58 23 10 00 62 23 10 00 | 70 23 10 00 7c 23 10 00 |X#..b#..|p#..|#..|
|00000f60| 8e 23 10 00 a6 23 10 00 | b6 23 10 00 c4 23 10 00 |.#...#..|.#...#..|
|00000f70| e4 23 10 00 06 24 10 00 | 24 24 10 00 36 24 10 00 |.#...$..|$$..6$..|
|00000f80| 52 24 10 00 6e 24 10 00 | 7a 24 10 00 96 24 10 00 |R$..n$..|z$...$..|
|00000f90| a6 24 10 00 b4 24 10 00 | ca 24 10 00 ea 24 10 00 |.$...$..|.$...$..|
|00000fa0| 08 25 10 00 22 25 10 00 | 2e 25 10 00 42 25 10 00 |.%.."%..|.%..B%..|
|00000fb0| 54 25 10 00 70 25 10 00 | 8c 25 10 00 9c 25 10 00 |T%..p%..|.%...%..|
|00000fc0| b2 25 10 00 d2 25 10 00 | ec 25 10 00 00 26 10 00 |.%...%..|.%...&..|
|00000fd0| 20 26 10 00 30 26 10 00 | 4c 26 10 00 5e 26 10 00 | &..0&..|L&..^&..|
|00000fe0| 76 26 10 00 80 26 10 00 | 9a 26 10 00 b8 26 10 00 |v&...&..|.&...&..|
|00000ff0| d4 26 10 00 f8 26 10 00 | 02 27 10 00 1a 27 10 00 |.&...&..|.'...'..|
|00001000| 2a 27 10 00 40 27 10 00 | 58 27 10 00 6c 27 10 00 |*'..@'..|X'..l'..|
|00001010| 8c 27 10 00 a0 27 10 00 | b6 27 10 00 c8 27 10 00 |.'...'..|.'...'..|
|00001020| f0 27 10 00 06 28 10 00 | 28 28 10 00 3c 28 10 00 |.'...(..|((..<(..|
|00001030| 50 28 10 00 64 28 10 00 | 80 28 10 00 98 28 10 00 |P(..d(..|.(...(..|
|00001040| aa 28 10 00 c8 28 10 00 | d4 28 10 00 e6 28 10 00 |.(...(..|.(...(..|
|00001050| 02 29 10 00 16 29 10 00 | 2e 29 10 00 42 29 10 00 |.)...)..|.)..B)..|
|00001060| 5e 29 10 00 74 29 10 00 | 7e 29 10 00 9a 29 10 00 |^)..t)..|~)...)..|
|00001070| b4 29 10 00 d2 29 10 00 | ee 29 10 00 0e 2a 10 00 |.)...)..|.)...*..|
|00001080| 2c 2a 10 00 48 2a 10 00 | 62 2a 10 00 7a 2a 10 00 |,*..H*..|b*..z*..|
|00001090| 88 2a 10 00 9c 2a 10 00 | ac 2a 10 00 be 2a 10 00 |.*...*..|.*...*..|
|000010a0| cc 2a 10 00 e6 2a 10 00 | f6 2a 10 00 16 2b 10 00 |.*...*..|.*...+..|
|000010b0| 34 2b 10 00 3e 2b 10 00 | 5e 2b 10 00 7c 2b 10 00 |4+..>+..|^+..|+..|
|000010c0| 8c 2b 10 00 9c 2b 10 00 | aa 2b 10 00 c0 2b 10 00 |.+...+..|.+...+..|
|000010d0| d8 2b 10 00 fc 2b 10 00 | 10 2c 10 00 30 2c 10 00 |.+...+..|.,..0,..|
|000010e0| 50 2c 10 00 5e 2c 10 00 | 7e 2c 10 00 98 2c 10 00 |P,..^,..|~,...,..|
|000010f0| b8 2c 10 00 d8 2c 10 00 | f6 2c 10 00 14 2d 10 00 |.,...,..|.,...-..|
|00001100| 2e 2d 10 00 48 2d 10 00 | 60 2d 10 00 7a 2d 10 00 |.-..H-..|`-..z-..|
|00001110| 90 2d 10 00 a2 2d 10 00 | b4 2d 10 00 cc 2d 10 00 |.-...-..|.-...-..|
|00001120| e8 2d 10 00 f6 2d 10 00 | 0a 2e 10 00 1e 2e 10 00 |.-...-..|........|
|00001130| 2e 2e 10 00 42 2e 10 00 | 5c 2e 10 00 6e 2e 10 00 |....B...|\...n...|
|00001140| 86 2e 10 00 a8 2e 10 00 | c6 2e 10 00 e6 2e 10 00 |........|........|
|00001150| 06 2f 10 00 2c 2f 10 00 | 46 2f 10 00 58 2f 10 00 |./..,/..|F/..X/..|
|00001160| 74 2f 10 00 92 2f 10 00 | a8 2f 10 00 ca 2f 10 00 |t/.../..|./.../..|
|00001170| d6 2f 10 00 e6 2f 10 00 | 00 30 10 00 1a 30 10 00 |./.../..|.0...0..|
|00001180| 34 30 10 00 56 30 10 00 | 74 30 10 00 8c 30 10 00 |40..V0..|t0...0..|
|00001190| 9c 30 10 00 ac 30 10 00 | c4 30 10 00 da 30 10 00 |.0...0..|.0...0..|
|000011a0| ea 30 10 00 fc 30 10 00 | 14 31 10 00 34 31 10 00 |.0...0..|.1..41..|
|000011b0| 46 31 10 00 5a 31 10 00 | 70 31 10 00 86 31 10 00 |F1..Z1..|p1...1..|
|000011c0| 92 31 10 00 ac 31 10 00 | bc 31 10 00 cc 31 10 00 |.1...1..|.1...1..|
|000011d0| e0 31 10 00 f8 31 10 00 | 0c 32 10 00 2c 32 10 00 |.1...1..|.2..,2..|
|000011e0| 46 32 10 00 66 32 10 00 | 84 32 10 00 a4 32 10 00 |F2..f2..|.2...2..|
|000011f0| c4 32 10 00 e4 32 10 00 | 04 33 10 00 1a 33 10 00 |.2...2..|.3...3..|
|00001200| 26 33 10 00 44 33 10 00 | 62 33 10 00 80 33 10 00 |&3..D3..|b3...3..|
|00001210| 9a 33 10 00 ae 33 10 00 | c4 33 10 00 d4 33 10 00 |.3...3..|.3...3..|
|00001220| ec 33 10 00 0c 34 10 00 | 2c 34 10 00 4c 34 10 00 |.3...4..|,4..L4..|
|00001230| 64 34 10 00 86 34 10 00 | a0 34 10 00 c0 34 10 00 |d4...4..|.4...4..|
|00001240| d0 34 10 00 ec 34 10 00 | f6 34 10 00 1c 35 10 00 |.4...4..|.4...5..|
|00001250| 34 35 10 00 5e 35 10 00 | 7e 35 10 00 8a 35 10 00 |45..^5..|~5...5..|
|00001260| a4 35 10 00 b4 35 10 00 | c8 35 10 00 d8 35 10 00 |.5...5..|.5...5..|
|00001270| ec 35 10 00 04 36 10 00 | 16 36 10 00 30 36 10 00 |.5...6..|.6..06..|
|00001280| 44 36 10 00 64 36 10 00 | 86 36 10 00 94 36 10 00 |D6..d6..|.6...6..|
|00001290| b0 36 10 00 c8 36 10 00 | e0 36 10 00 02 37 10 00 |.6...6..|.6...7..|
|000012a0| 18 37 10 00 30 37 10 00 | 48 37 10 00 58 37 10 00 |.7..07..|H7..X7..|
|000012b0| 62 37 10 00 6c 37 10 00 | 84 37 10 00 98 37 10 00 |b7..l7..|.7...7..|
|000012c0| b6 37 10 00 cc 37 10 00 | e2 37 10 00 fa 37 10 00 |.7...7..|.7...7..|
|000012d0| 10 38 10 00 1e 38 10 00 | 3c 38 10 00 56 38 10 00 |.8...8..|<8..V8..|
|000012e0| 62 38 10 00 6c 38 10 00 | 8a 38 10 00 98 38 10 00 |b8..l8..|.8...8..|
|000012f0| 00 00 00 00 aa 38 10 00 | bc 38 10 00 d0 38 10 00 |.....8..|.8...8..|
|00001300| e4 38 10 00 f2 38 10 00 | 0a 39 10 00 18 39 10 00 |.8...8..|.9...9..|
|00001310| 32 39 10 00 46 39 10 00 | 5a 39 10 00 6e 39 10 00 |29..F9..|Z9..n9..|
|00001320| 80 39 10 00 94 39 10 00 | 00 00 00 00 a8 39 10 00 |.9...9..|.....9..|
|00001330| be 39 10 00 d6 39 10 00 | fc 39 10 00 10 3a 10 00 |.9...9..|.9...:..|
|00001340| 28 3a 10 00 3c 3a 10 00 | 64 3a 10 00 7c 3a 10 00 |(:..<:..|d:..|:..|
|00001350| 9e 3a 10 00 00 00 00 00 | 7f 07 6d 65 6d 6d 6f 76 |.:......|..memmov|
|00001360| 65 00 8d 06 57 6d 69 47 | 65 74 43 6c 6f 63 6b 00 |e...WmiG|etClock.|
|00001370| 52 07 5f 61 75 6c 6c 64 | 69 76 00 00 ab 00 45 78 |R._aulld|iv....Ex|
|00001380| 51 75 65 75 65 57 6f 72 | 6b 49 74 65 6d 00 44 05 |QueueWor|kItem.D.|
|00001390| 52 74 6c 47 65 74 43 61 | 6c 6c 65 72 73 41 64 64 |RtlGetCa|llersAdd|
|000013a0| 72 65 73 73 00 00 e7 02 | 4b 65 49 6e 73 65 72 74 |ress....|KeInsert|
|000013b0| 51 75 65 75 65 00 3d 00 | 44 62 67 50 72 69 6e 74 |Queue.=.|DbgPrint|
|000013c0| 45 78 00 00 9b 03 4d 6d | 4d 61 70 4c 6f 63 6b 65 |Ex....Mm|MapLocke|
|000013d0| 64 50 61 67 65 73 53 70 | 65 63 69 66 79 43 61 63 |dPagesSp|ecifyCac|
|000013e0| 68 65 00 00 8e 00 45 78 | 49 6e 69 74 69 61 6c 69 |he....Ex|Initiali|
|000013f0| 7a 65 4e 50 61 67 65 64 | 4c 6f 6f 6b 61 73 69 64 |zeNPaged|Lookasid|
|00001400| 65 4c 69 73 74 00 72 00 | 45 78 44 65 6c 65 74 65 |eList.r.|ExDelete|
|00001410| 4e 50 61 67 65 64 4c 6f | 6f 6b 61 73 69 64 65 4c |NPagedLo|okasideL|
|00001420| 69 73 74 00 0e 02 49 6f | 47 65 74 44 6d 61 41 64 |ist...Io|GetDmaAd|
|00001430| 61 70 74 65 72 00 a4 01 | 49 6e 74 65 72 6c 6f 63 |apter...|Interloc|
|00001440| 6b 65 64 50 6f 70 45 6e | 74 72 79 53 4c 69 73 74 |kedPopEn|trySList|
|00001450| 00 00 a5 01 49 6e 74 65 | 72 6c 6f 63 6b 65 64 50 |....Inte|rlockedP|
|00001460| 75 73 68 45 6e 74 72 79 | 53 4c 69 73 74 00 fb 01 |ushEntry|SList...|
|00001470| 49 6f 46 72 65 65 4d 64 | 6c 00 78 03 4d 6d 42 75 |IoFreeMd|l.x.MmBu|
|00001480| 69 6c 64 4d 64 6c 46 6f | 72 4e 6f 6e 50 61 67 65 |ildMdlFo|rNonPage|
|00001490| 64 50 6f 6f 6c 00 af 01 | 49 6f 41 6c 6c 6f 63 61 |dPool...|IoAlloca|
|000014a0| 74 65 4d 64 6c 00 b4 03 | 4d 6d 53 69 7a 65 4f 66 |teMdl...|MmSizeOf|
|000014b0| 4d 64 6c 00 ba 03 4d 6d | 55 6e 6d 61 70 4c 6f 63 |Mdl...Mm|UnmapLoc|
|000014c0| 6b 65 64 50 61 67 65 73 | 00 00 6e 00 45 78 41 6c |kedPages|..n.ExAl|
|000014d0| 6c 6f 63 61 74 65 50 6f | 6f 6c 57 69 74 68 54 61 |locatePo|olWithTa|
|000014e0| 67 50 72 69 6f 72 69 74 | 79 00 8d 00 45 78 49 6e |gPriorit|y...ExIn|
|000014f0| 69 74 69 61 6c 69 7a 65 | 4c 6f 6f 6b 61 73 69 64 |itialize|Lookasid|
|00001500| 65 4c 69 73 74 45 78 00 | 71 00 45 78 44 65 6c 65 |eListEx.|q.ExDele|
|00001510| 74 65 4c 6f 6f 6b 61 73 | 69 64 65 4c 69 73 74 45 |teLookas|ideListE|
|00001520| 78 00 3c 00 44 62 67 50 | 72 69 6e 74 00 00 bc 01 |x.<.DbgP|rint....|
|00001530| 49 6f 42 75 69 6c 64 50 | 61 72 74 69 61 6c 4d 64 |IoBuildP|artialMd|
|00001540| 6c 00 8e 02 49 6f 57 4d | 49 57 72 69 74 65 45 76 |l...IoWM|IWriteEv|
|00001550| 65 6e 74 00 8a 03 4d 6d | 47 65 74 53 79 73 74 65 |ent...Mm|GetSyste|
|00001560| 6d 52 6f 75 74 69 6e 65 | 41 64 64 72 65 73 73 00 |mRoutine|Address.|
|00001570| 89 02 49 6f 57 4d 49 52 | 65 67 69 73 74 72 61 74 |..IoWMIR|egistrat|
|00001580| 69 6f 6e 43 6f 6e 74 72 | 6f 6c 00 00 95 02 49 6f |ionContr|ol....Io|
|00001590| 66 43 61 6c 6c 44 72 69 | 76 65 72 00 96 02 49 6f |fCallDri|ver...Io|
|000015a0| 66 43 6f 6d 70 6c 65 74 | 65 52 65 71 75 65 73 74 |fComplet|eRequest|
|000015b0| 00 00 f9 02 4b 65 51 75 | 65 72 79 44 70 63 57 61 |....KeQu|eryDpcWa|
|000015c0| 74 63 68 64 6f 67 49 6e | 66 6f 72 6d 61 74 69 6f |tchdogIn|formatio|
|000015d0| 6e 00 fa 05 52 74 6c 55 | 70 63 61 73 65 55 6e 69 |n...RtlU|pcaseUni|
|000015e0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 a9 00 45 78 |codeStri|ng....Ex|
|000015f0| 4e 6f 74 69 66 79 43 61 | 6c 6c 62 61 63 6b 00 00 |NotifyCa|llback..|
|00001600| 59 05 52 74 6c 49 6d 61 | 67 65 44 69 72 65 63 74 |Y.RtlIma|geDirect|
|00001610| 6f 72 79 45 6e 74 72 79 | 54 6f 44 61 74 61 00 00 |oryEntry|ToData..|
|00001620| 38 00 44 62 67 42 72 65 | 61 6b 50 6f 69 6e 74 00 |8.DbgBre|akPoint.|
|00001630| 8e 06 57 6d 69 51 75 65 | 72 79 54 72 61 63 65 49 |..WmiQue|ryTraceI|
|00001640| 6e 66 6f 72 6d 61 74 69 | 6f 6e 00 00 1b 04 4e 74 |nformati|on....Nt|
|00001650| 54 72 61 63 65 43 6f 6e | 74 72 6f 6c 00 00 00 03 |TraceCon|trol....|
|00001660| 4b 65 51 75 65 72 79 54 | 69 6d 65 49 6e 63 72 65 |KeQueryT|imeIncre|
|00001670| 6d 65 6e 74 00 00 ad 06 | 5a 77 43 6c 6f 73 65 00 |ment....|ZwClose.|
|00001680| 2c 02 49 6f 4f 70 65 6e | 44 65 76 69 63 65 52 65 |,.IoOpen|DeviceRe|
|00001690| 67 69 73 74 72 79 4b 65 | 79 00 ac 05 52 74 6c 4e |gistryKe|y...RtlN|
|000016a0| 75 6d 62 65 72 4f 66 53 | 65 74 42 69 74 73 55 6c |umberOfS|etBitsUl|
|000016b0| 6f 6e 67 50 74 72 00 00 | 07 04 4e 74 51 75 65 72 |ongPtr..|..NtQuer|
|000016c0| 79 53 79 73 74 65 6d 49 | 6e 66 6f 72 6d 61 74 69 |ySystemI|nformati|
|000016d0| 6f 6e 00 00 3f 02 49 6f | 52 65 67 69 73 74 65 72 |on..?.Io|Register|
|000016e0| 44 72 69 76 65 72 52 65 | 69 6e 69 74 69 61 6c 69 |DriverRe|initiali|
|000016f0| 7a 61 74 69 6f 6e 00 00 | d0 03 4e 74 43 6c 6f 73 |zation..|..NtClos|
|00001700| 65 00 69 04 50 73 43 72 | 65 61 74 65 53 79 73 74 |e.i.PsCr|eateSyst|
|00001710| 65 6d 54 68 72 65 61 64 | 00 00 1a 03 4b 65 52 65 |emThread|....KeRe|
|00001720| 6d 6f 76 65 51 75 65 75 | 65 00 42 04 4f 62 66 52 |moveQueu|e.B.ObfR|
|00001730| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|00001740| 25 05 52 74 6c 45 71 75 | 61 6c 55 6e 69 63 6f 64 |%.RtlEqu|alUnicod|
|00001750| 65 53 74 72 69 6e 67 00 | 3c 05 52 74 6c 46 72 65 |eString.|<.RtlFre|
|00001760| 65 41 6e 73 69 53 74 72 | 69 6e 67 00 ee 05 52 74 |eAnsiStr|ing...Rt|
|00001770| 6c 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |lUnicode|StringTo|
|00001780| 41 6e 73 69 53 74 72 69 | 6e 67 00 00 e9 02 4b 65 |AnsiStri|ng....Ke|
|00001790| 49 6e 73 65 72 74 51 75 | 65 75 65 44 70 63 00 00 |InsertQu|eueDpc..|
|000017a0| 2d 03 4b 65 53 65 74 49 | 6d 70 6f 72 74 61 6e 63 |-.KeSetI|mportanc|
|000017b0| 65 44 70 63 00 00 d8 02 | 4b 65 49 6e 69 74 69 61 |eDpc....|KeInitia|
|000017c0| 6c 69 7a 65 44 70 63 00 | 3d 02 49 6f 52 65 67 69 |lizeDpc.|=.IoRegi|
|000017d0| 73 74 65 72 42 6f 6f 74 | 44 72 69 76 65 72 52 65 |sterBoot|DriverRe|
|000017e0| 69 6e 69 74 69 61 6c 69 | 7a 61 74 69 6f 6e 00 00 |initiali|zation..|
|000017f0| f4 06 5a 77 50 6f 77 65 | 72 49 6e 66 6f 72 6d 61 |..ZwPowe|rInforma|
|00001800| 74 69 6f 6e 00 00 51 04 | 50 6f 52 65 67 69 73 74 |tion..Q.|PoRegist|
|00001810| 65 72 50 6f 77 65 72 53 | 65 74 74 69 6e 67 43 61 |erPowerS|ettingCa|
|00001820| 6c 6c 62 61 63 6b 00 00 | 70 00 45 78 43 72 65 61 |llback..|p.ExCrea|
|00001830| 74 65 43 61 6c 6c 62 61 | 63 6b 00 00 fe 02 4b 65 |teCallba|ck....Ke|
|00001840| 51 75 65 72 79 53 79 73 | 74 65 6d 54 69 6d 65 00 |QuerySys|temTime.|
|00001850| de 02 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 51 75 |..KeInit|ializeQu|
|00001860| 65 75 65 00 91 00 45 78 | 49 6e 69 74 69 61 6c 69 |eue...Ex|Initiali|
|00001870| 7a 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |zeResour|ceLite..|
|00001880| db 01 49 6f 43 72 65 61 | 74 65 53 79 6d 62 6f 6c |..IoCrea|teSymbol|
|00001890| 69 63 4c 69 6e 6b 00 00 | d1 01 49 6f 43 72 65 61 |icLink..|..IoCrea|
|000018a0| 74 65 44 65 76 69 63 65 | 00 00 f7 02 4b 65 51 75 |teDevice|....KeQu|
|000018b0| 65 72 79 41 63 74 69 76 | 65 50 72 6f 63 65 73 73 |eryActiv|eProcess|
|000018c0| 6f 72 43 6f 75 6e 74 00 | e6 06 5a 77 4f 70 65 6e |orCount.|..ZwOpen|
|000018d0| 4b 65 79 00 cb 06 5a 77 | 45 6e 75 6d 65 72 61 74 |Key...Zw|Enumerat|
|000018e0| 65 4b 65 79 00 00 f0 05 | 52 74 6c 55 6e 69 63 6f |eKey....|RtlUnico|
|000018f0| 64 65 53 74 72 69 6e 67 | 54 6f 49 6e 74 65 67 65 |deString|ToIntege|
|00001900| 72 00 e7 04 52 74 6c 43 | 68 61 72 54 6f 49 6e 74 |r...RtlC|harToInt|
|00001910| 65 67 65 72 00 00 40 05 | 52 74 6c 46 72 65 65 55 |eger..@.|RtlFreeU|
|00001920| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 d7 05 |nicodeSt|ring....|
|00001930| 52 74 6c 53 74 72 69 6e | 67 46 72 6f 6d 47 55 49 |RtlStrin|gFromGUI|
|00001940| 44 00 df 04 52 74 6c 41 | 70 70 65 6e 64 55 6e 69 |D...RtlA|ppendUni|
|00001950| 63 6f 64 65 54 6f 53 74 | 72 69 6e 67 00 00 0a 02 |codeToSt|ring....|
|00001960| 49 6f 47 65 74 44 65 76 | 69 63 65 50 72 6f 70 65 |IoGetDev|icePrope|
|00001970| 72 74 79 00 49 07 5f 61 | 6c 6c 64 69 76 00 57 02 |rty.I._a|lldiv.W.|
|00001980| 49 6f 53 65 74 44 65 76 | 69 63 65 49 6e 74 65 72 |IoSetDev|iceInter|
|00001990| 66 61 63 65 53 74 61 74 | 65 00 23 02 49 6f 49 6e |faceStat|e.#.IoIn|
|000019a0| 76 61 6c 69 64 61 74 65 | 44 65 76 69 63 65 53 74 |validate|DeviceSt|
|000019b0| 61 74 65 00 b7 03 4d 6d | 55 6e 6c 6f 63 6b 50 61 |ate...Mm|UnlockPa|
|000019c0| 67 61 62 6c 65 49 6d 61 | 67 65 53 65 63 74 69 6f |gableIma|geSectio|
|000019d0| 6e 00 96 03 4d 6d 4c 6f | 63 6b 50 61 67 61 62 6c |n...MmLo|ckPagabl|
|000019e0| 65 44 61 74 61 53 65 63 | 74 69 6f 6e 00 00 98 03 |eDataSec|tion....|
|000019f0| 4d 6d 4c 6f 63 6b 50 61 | 67 61 62 6c 65 53 65 63 |MmLockPa|gableSec|
|00001a00| 74 69 6f 6e 42 79 48 61 | 6e 64 6c 65 00 00 70 03 |tionByHa|ndle..p.|
|00001a10| 4d 6d 41 6c 6c 6f 63 61 | 74 65 43 6f 6e 74 69 67 |MmAlloca|teContig|
|00001a20| 75 6f 75 73 4d 65 6d 6f | 72 79 00 00 74 03 4d 6d |uousMemo|ry..t.Mm|
|00001a30| 41 6c 6c 6f 63 61 74 65 | 4e 6f 6e 43 61 63 68 65 |Allocate|NonCache|
|00001a40| 64 4d 65 6d 6f 72 79 00 | 83 03 4d 6d 46 72 65 65 |dMemory.|..MmFree|
|00001a50| 43 6f 6e 74 69 67 75 6f | 75 73 4d 65 6d 6f 72 79 |Contiguo|usMemory|
|00001a60| 00 00 86 03 4d 6d 46 72 | 65 65 4e 6f 6e 43 61 63 |....MmFr|eeNonCac|
|00001a70| 68 65 64 4d 65 6d 6f 72 | 79 00 3f 03 4b 65 54 69 |hedMemor|y.?.KeTi|
|00001a80| 63 6b 43 6f 75 6e 74 00 | 9a 03 4d 6d 4d 61 70 4c |ckCount.|..MmMapL|
|00001a90| 6f 63 6b 65 64 50 61 67 | 65 73 00 00 99 03 4d 6d |ockedPag|es....Mm|
|00001aa0| 4d 61 70 49 6f 53 70 61 | 63 65 00 00 b9 03 4d 6d |MapIoSpa|ce....Mm|
|00001ab0| 55 6e 6d 61 70 49 6f 53 | 70 61 63 65 00 00 16 07 |UnmapIoS|pace....|
|00001ac0| 5a 77 52 65 61 64 46 69 | 6c 65 00 00 03 07 5a 77 |ZwReadFi|le....Zw|
|00001ad0| 51 75 65 72 79 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |QueryInf|ormation|
|00001ae0| 46 69 6c 65 00 00 b5 06 | 5a 77 43 72 65 61 74 65 |File....|ZwCreate|
|00001af0| 46 69 6c 65 00 00 fb 02 | 4b 65 51 75 65 72 79 4d |File....|KeQueryM|
|00001b00| 61 78 69 6d 75 6d 50 72 | 6f 63 65 73 73 6f 72 43 |aximumPr|ocessorC|
|00001b10| 6f 75 6e 74 00 00 26 05 | 52 74 6c 45 78 74 65 6e |ount..&.|RtlExten|
|00001b20| 64 65 64 49 6e 74 65 67 | 65 72 4d 75 6c 74 69 70 |dedInteg|erMultip|
|00001b30| 6c 79 00 00 4b 07 5f 61 | 6c 6c 6d 75 6c 00 88 00 |ly..K._a|llmul...|
|00001b40| 45 78 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |ExGetCur|rentProc|
|00001b50| 65 73 73 6f 72 43 70 75 | 55 73 61 67 65 00 87 00 |essorCpu|Usage...|
|00001b60| 45 78 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |ExGetCur|rentProc|
|00001b70| 65 73 73 6f 72 43 6f 75 | 6e 74 73 00 1e 03 4b 65 |essorCou|nts...Ke|
|00001b80| 52 65 73 65 74 45 76 65 | 6e 74 00 00 36 03 4b 65 |ResetEve|nt..6.Ke|
|00001b90| 53 65 74 54 69 6d 65 72 | 45 78 00 00 35 03 4b 65 |SetTimer|Ex..5.Ke|
|00001ba0| 53 65 74 54 69 6d 65 72 | 00 00 e3 02 4b 65 49 6e |SetTimer|....KeIn|
|00001bb0| 69 74 69 61 6c 69 7a 65 | 54 69 6d 65 72 45 78 00 |itialize|TimerEx.|
|00001bc0| 41 04 4f 62 66 44 65 72 | 65 66 65 72 65 6e 63 65 |A.ObfDer|eference|
|00001bd0| 4f 62 6a 65 63 74 00 00 | 7a 02 49 6f 55 6e 72 65 |Object..|z.IoUnre|
|00001be0| 67 69 73 74 65 72 53 68 | 75 74 64 6f 77 6e 4e 6f |gisterSh|utdownNo|
|00001bf0| 74 69 66 69 63 61 74 69 | 6f 6e 00 00 dd 02 4b 65 |tificati|on....Ke|
|00001c00| 49 6e 69 74 69 61 6c 69 | 7a 65 4d 75 74 65 78 00 |Initiali|zeMutex.|
|00001c10| 95 00 45 78 49 6e 74 65 | 72 6c 6f 63 6b 65 64 41 |..ExInte|rlockedA|
|00001c20| 64 64 4c 61 72 67 65 49 | 6e 74 65 67 65 72 00 00 |ddLargeI|nteger..|
|00001c30| d9 00 45 78 66 49 6e 74 | 65 72 6c 6f 63 6b 65 64 |..ExfInt|erlocked|
|00001c40| 49 6e 73 65 72 74 48 65 | 61 64 4c 69 73 74 00 00 |InsertHe|adList..|
|00001c50| 6a 07 5f 76 73 6e 77 70 | 72 69 6e 74 66 00 db 04 |j._vsnwp|rintf...|
|00001c60| 52 74 6c 41 6e 73 69 53 | 74 72 69 6e 67 54 6f 55 |RtlAnsiS|tringToU|
|00001c70| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 d7 00 |nicodeSt|ring....|
|00001c80| 45 78 66 49 6e 74 65 72 | 6c 6f 63 6b 65 64 41 64 |ExfInter|lockedAd|
|00001c90| 64 55 6c 6f 6e 67 00 00 | da 00 45 78 66 49 6e 74 |dUlong..|..ExfInt|
|00001ca0| 65 72 6c 6f 63 6b 65 64 | 49 6e 73 65 72 74 54 61 |erlocked|InsertTa|
|00001cb0| 69 6c 4c 69 73 74 00 00 | dd 00 45 78 66 49 6e 74 |ilList..|..ExfInt|
|00001cc0| 65 72 6c 6f 63 6b 65 64 | 52 65 6d 6f 76 65 48 65 |erlocked|RemoveHe|
|00001cd0| 61 64 4c 69 73 74 00 00 | dc 00 45 78 66 49 6e 74 |adList..|..ExfInt|
|00001ce0| 65 72 6c 6f 63 6b 65 64 | 50 75 73 68 45 6e 74 72 |erlocked|PushEntr|
|00001cf0| 79 4c 69 73 74 00 db 00 | 45 78 66 49 6e 74 65 72 |yList...|ExfInter|
|00001d00| 6c 6f 63 6b 65 64 50 6f | 70 45 6e 74 72 79 4c 69 |lockedPo|pEntryLi|
|00001d10| 73 74 00 00 45 02 49 6f | 52 65 6c 65 61 73 65 43 |st..E.Io|ReleaseC|
|00001d20| 61 6e 63 65 6c 53 70 69 | 6e 4c 6f 63 6b 00 a6 01 |ancelSpi|nLock...|
|00001d30| 49 6f 41 63 71 75 69 72 | 65 43 61 6e 63 65 6c 53 |IoAcquir|eCancelS|
|00001d40| 70 69 6e 4c 6f 63 6b 00 | 90 02 49 6f 57 72 69 74 |pinLock.|..IoWrit|
|00001d50| 65 45 72 72 6f 72 4c 6f | 67 45 6e 74 72 79 00 00 |eErrorLo|gEntry..|
|00001d60| ad 01 49 6f 41 6c 6c 6f | 63 61 74 65 45 72 72 6f |..IoAllo|cateErro|
|00001d70| 72 4c 6f 67 45 6e 74 72 | 79 00 b2 01 49 6f 41 6c |rLogEntr|y...IoAl|
|00001d80| 6c 6f 63 61 74 65 57 6f | 72 6b 49 74 65 6d 00 00 |locateWo|rkItem..|
|00001d90| fe 01 49 6f 46 72 65 65 | 57 6f 72 6b 49 74 65 6d |..IoFree|WorkItem|
|00001da0| 00 00 34 02 49 6f 51 75 | 65 75 65 57 6f 72 6b 49 |..4.IoQu|eueWorkI|
|00001db0| 74 65 6d 00 e8 01 49 6f | 44 65 6c 65 74 65 53 79 |tem...Io|DeleteSy|
|00001dc0| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 3e 02 49 6f |mbolicLi|nk..>.Io|
|00001dd0| 52 65 67 69 73 74 65 72 | 44 65 76 69 63 65 49 6e |Register|DeviceIn|
|00001de0| 74 65 72 66 61 63 65 00 | c1 01 49 6f 43 61 6e 63 |terface.|..IoCanc|
|00001df0| 65 6c 49 72 70 00 53 04 | 50 6f 52 65 71 75 65 73 |elIrp.S.|PoReques|
|00001e00| 74 50 6f 77 65 72 49 72 | 70 00 e2 02 4b 65 49 6e |tPowerIr|p...KeIn|
|00001e10| 69 74 69 61 6c 69 7a 65 | 54 69 6d 65 72 00 b4 02 |itialize|Timer...|
|00001e20| 4b 65 43 61 6e 63 65 6c | 54 69 6d 65 72 00 c5 02 |KeCancel|Timer...|
|00001e30| 4b 65 46 6c 75 73 68 51 | 75 65 75 65 64 44 70 63 |KeFlushQ|ueuedDpc|
|00001e40| 73 00 33 03 4b 65 53 65 | 74 54 61 72 67 65 74 50 |s.3.KeSe|tTargetP|
|00001e50| 72 6f 63 65 73 73 6f 72 | 44 70 63 00 e6 01 49 6f |rocessor|Dpc...Io|
|00001e60| 44 65 6c 65 74 65 44 65 | 76 69 63 65 00 00 bb 00 |DeleteDe|vice....|
|00001e70| 45 78 52 65 6c 65 61 73 | 65 52 65 73 6f 75 72 63 |ExReleas|eResourc|
|00001e80| 65 4c 69 74 65 00 5b 00 | 45 78 41 63 71 75 69 72 |eLite.[.|ExAcquir|
|00001e90| 65 52 65 73 6f 75 72 63 | 65 45 78 63 6c 75 73 69 |eResourc|eExclusi|
|00001ea0| 76 65 4c 69 74 65 00 00 | 08 03 4b 65 52 65 67 69 |veLite..|..KeRegi|
|00001eb0| 73 74 65 72 42 75 67 43 | 68 65 63 6b 43 61 6c 6c |sterBugC|heckCall|
|00001ec0| 62 61 63 6b 00 00 b8 02 | 4b 65 44 65 72 65 67 69 |back....|KeDeregi|
|00001ed0| 73 74 65 72 42 75 67 43 | 68 65 63 6b 43 61 6c 6c |sterBugC|heckCall|
|00001ee0| 62 61 63 6b 00 00 bd 01 | 49 6f 42 75 69 6c 64 53 |back....|IoBuildS|
|00001ef0| 79 6e 63 68 72 6f 6e 6f | 75 73 46 73 64 52 65 71 |ynchrono|usFsdReq|
|00001f00| 75 65 73 74 00 00 ca 02 | 4b 65 47 65 74 52 65 63 |uest....|KeGetRec|
|00001f10| 6f 6d 6d 65 6e 64 65 64 | 53 68 61 72 65 64 44 61 |ommended|SharedDa|
|00001f20| 74 61 41 6c 69 67 6e 6d | 65 6e 74 00 8f 01 48 61 |taAlignm|ent...Ha|
|00001f30| 6c 50 72 69 76 61 74 65 | 44 69 73 70 61 74 63 68 |lPrivate|Dispatch|
|00001f40| 54 61 62 6c 65 00 e9 01 | 49 6f 44 65 74 61 63 68 |Table...|IoDetach|
|00001f50| 44 65 76 69 63 65 00 00 | 1f 02 49 6f 49 6e 69 74 |Device..|..IoInit|
|00001f60| 69 61 6c 69 7a 65 52 65 | 6d 6f 76 65 4c 6f 63 6b |ializeRe|moveLock|
|00001f70| 45 78 00 00 b8 01 49 6f | 41 74 74 61 63 68 44 65 |Ex....Io|AttachDe|
|00001f80| 76 69 63 65 54 6f 44 65 | 76 69 63 65 53 74 61 63 |viceToDe|viceStac|
|00001f90| 6b 00 8f 03 4d 6d 49 73 | 44 72 69 76 65 72 56 65 |k...MmIs|DriverVe|
|00001fa0| 72 69 66 79 69 6e 67 00 | ac 01 49 6f 41 6c 6c 6f |rifying.|..IoAllo|
|00001fb0| 63 61 74 65 44 72 69 76 | 65 72 4f 62 6a 65 63 74 |cateDriv|erObject|
|00001fc0| 45 78 74 65 6e 73 69 6f | 6e 00 fa 01 49 6f 46 72 |Extensio|n...IoFr|
|00001fd0| 65 65 49 72 70 00 ae 01 | 49 6f 41 6c 6c 6f 63 61 |eeIrp...|IoAlloca|
|00001fe0| 74 65 49 72 70 00 0b 02 | 49 6f 47 65 74 44 65 76 |teIrp...|IoGetDev|
|00001ff0| 69 63 65 50 72 6f 70 65 | 72 74 79 44 61 74 61 00 |icePrope|rtyData.|
|00002000| ee 01 49 6f 44 69 73 63 | 6f 6e 6e 65 63 74 49 6e |..IoDisc|onnectIn|
|00002010| 74 65 72 72 75 70 74 45 | 78 00 3b 03 4b 65 53 79 |terruptE|x.;.KeSy|
|00002020| 6e 63 68 72 6f 6e 69 7a | 65 45 78 65 63 75 74 69 |nchroniz|eExecuti|
|00002030| 6f 6e 00 00 21 03 4b 65 | 52 65 76 65 72 74 54 6f |on..!.Ke|RevertTo|
|00002040| 55 73 65 72 41 66 66 69 | 6e 69 74 79 54 68 72 65 |UserAffi|nityThre|
|00002050| 61 64 45 78 00 00 32 03 | 4b 65 53 65 74 53 79 73 |adEx..2.|KeSetSys|
|00002060| 74 65 6d 41 66 66 69 6e | 69 74 79 54 68 72 65 61 |temAffin|ityThrea|
|00002070| 64 45 78 00 ce 01 49 6f | 43 6f 6e 6e 65 63 74 49 |dEx...Io|ConnectI|
|00002080| 6e 74 65 72 72 75 70 74 | 45 78 00 00 b6 02 4b 65 |nterrupt|Ex....Ke|
|00002090| 43 6c 65 61 72 45 76 65 | 6e 74 00 00 d8 06 5a 77 |ClearEve|nt....Zw|
|000020a0| 4c 6f 61 64 44 72 69 76 | 65 72 00 00 47 02 49 6f |LoadDriv|er..G.Io|
|000020b0| 52 65 6c 65 61 73 65 52 | 65 6d 6f 76 65 4c 6f 63 |ReleaseR|emoveLoc|
|000020c0| 6b 45 78 00 5c 04 50 6f | 53 74 61 72 74 4e 65 78 |kEx.\.Po|StartNex|
|000020d0| 74 50 6f 77 65 72 49 72 | 70 00 49 04 50 6f 43 61 |tPowerIr|p.I.PoCa|
|000020e0| 6c 6c 44 72 69 76 65 72 | 00 00 58 04 50 6f 53 65 |llDriver|..X.PoSe|
|000020f0| 74 50 6f 77 65 72 53 74 | 61 74 65 00 a7 01 49 6f |tPowerSt|ate...Io|
|00002100| 41 63 71 75 69 72 65 52 | 65 6d 6f 76 65 4c 6f 63 |AcquireR|emoveLoc|
|00002110| 6b 45 78 00 3f 04 4f 62 | 53 65 74 53 65 63 75 72 |kEx.?.Ob|SetSecur|
|00002120| 69 74 79 4f 62 6a 65 63 | 74 42 79 50 6f 69 6e 74 |ityObjec|tByPoint|
|00002130| 65 72 00 00 84 02 49 6f | 57 4d 49 4f 70 65 6e 42 |er....Io|WMIOpenB|
|00002140| 6c 6f 63 6b 00 00 5b 05 | 52 74 6c 49 6e 69 74 41 |lock..[.|RtlInitA|
|00002150| 6e 73 69 53 74 72 69 6e | 67 00 6d 03 4d 6d 41 64 |nsiStrin|g.m.MmAd|
|00002160| 64 56 65 72 69 66 69 65 | 72 54 68 75 6e 6b 73 00 |dVerifie|rThunks.|
|00002170| 95 03 4d 6d 49 73 56 65 | 72 69 66 69 65 72 45 6e |..MmIsVe|rifierEn|
|00002180| 61 62 6c 65 64 00 43 05 | 52 74 6c 47 65 74 41 63 |abled.C.|RtlGetAc|
|00002190| 65 00 d3 04 52 74 6c 41 | 64 64 41 63 63 65 73 73 |e...RtlA|ddAccess|
|000021a0| 41 6c 6c 6f 77 65 64 41 | 63 65 00 00 00 05 52 74 |AllowedA|ce....Rt|
|000021b0| 6c 43 72 65 61 74 65 41 | 63 6c 00 00 95 05 52 74 |lCreateA|cl....Rt|
|000021c0| 6c 4c 65 6e 67 74 68 53 | 69 64 00 00 65 05 52 74 |lLengthS|id..e.Rt|
|000021d0| 6c 49 6e 69 74 69 61 6c | 69 7a 65 53 69 64 00 00 |lInitial|izeSid..|
|000021e0| 93 05 52 74 6c 4c 65 6e | 67 74 68 52 65 71 75 69 |..RtlLen|gthRequi|
|000021f0| 72 65 64 53 69 64 00 00 | 9e 05 52 74 6c 4d 61 70 |redSid..|..RtlMap|
|00002200| 47 65 6e 65 72 69 63 4d | 61 73 6b 00 10 02 49 6f |GenericM|ask...Io|
|00002210| 47 65 74 46 69 6c 65 4f | 62 6a 65 63 74 47 65 6e |GetFileO|bjectGen|
|00002220| 65 72 69 63 4d 61 70 70 | 69 6e 67 00 3c 04 4f 62 |ericMapp|ing.<.Ob|
|00002230| 52 65 6c 65 61 73 65 4f | 62 6a 65 63 74 53 65 63 |ReleaseO|bjectSec|
|00002240| 75 72 69 74 79 00 cd 05 | 52 74 6c 53 65 74 44 61 |urity...|RtlSetDa|
|00002250| 63 6c 53 65 63 75 72 69 | 74 79 44 65 73 63 72 69 |clSecuri|tyDescri|
|00002260| 70 74 6f 72 00 00 c8 05 | 52 74 6c 53 65 6c 66 52 |ptor....|RtlSelfR|
|00002270| 65 6c 61 74 69 76 65 54 | 6f 41 62 73 6f 6c 75 74 |elativeT|oAbsolut|
|00002280| 65 53 44 00 51 05 52 74 | 6c 47 65 74 53 61 63 6c |eSD.Q.Rt|lGetSacl|
|00002290| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|000022a0| 6f 72 00 00 4b 05 52 74 | 6c 47 65 74 47 72 6f 75 |or..K.Rt|lGetGrou|
|000022b0| 70 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |pSecurit|yDescrip|
|000022c0| 74 6f 72 00 4f 05 52 74 | 6c 47 65 74 4f 77 6e 65 |tor.O.Rt|lGetOwne|
|000022d0| 72 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |rSecurit|yDescrip|
|000022e0| 74 6f 72 00 46 05 52 74 | 6c 47 65 74 44 61 63 6c |tor.F.Rt|lGetDacl|
|000022f0| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|00002300| 6f 72 00 00 2d 04 4f 62 | 47 65 74 4f 62 6a 65 63 |or..-.Ob|GetObjec|
|00002310| 74 53 65 63 75 72 69 74 | 79 00 2e 06 53 65 45 78 |tSecurit|y...SeEx|
|00002320| 70 6f 72 74 73 00 4b 06 | 53 65 53 65 74 53 65 63 |ports.K.|SeSetSec|
|00002330| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 49 |urityDes|criptorI|
|00002340| 6e 66 6f 00 94 05 52 74 | 6c 4c 65 6e 67 74 68 53 |nfo...Rt|lLengthS|
|00002350| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00002360| 72 00 04 05 52 74 6c 43 | 72 65 61 74 65 53 65 63 |r...RtlC|reateSec|
|00002370| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 00 |urityDes|criptor.|
|00002380| 55 06 53 65 55 6e 6c 6f | 63 6b 53 75 62 6a 65 63 |U.SeUnlo|ckSubjec|
|00002390| 74 43 6f 6e 74 65 78 74 | 00 00 30 06 53 65 46 72 |tContext|..0.SeFr|
|000023a0| 65 65 50 72 69 76 69 6c | 65 67 65 73 00 00 14 06 |eePrivil|eges....|
|000023b0| 53 65 41 70 70 65 6e 64 | 50 72 69 76 69 6c 65 67 |SeAppend|Privileg|
|000023c0| 65 73 00 00 12 06 53 65 | 41 63 63 65 73 73 43 68 |es....Se|AccessCh|
|000023d0| 65 63 6b 00 35 06 53 65 | 4c 6f 63 6b 53 75 62 6a |eck.5.Se|LockSubj|
|000023e0| 65 63 74 43 6f 6e 74 65 | 78 74 00 00 cf 05 52 74 |ectConte|xt....Rt|
|000023f0| 6c 53 65 74 47 72 6f 75 | 70 53 65 63 75 72 69 74 |lSetGrou|pSecurit|
|00002400| 79 44 65 73 63 72 69 70 | 74 6f 72 00 d0 05 52 74 |yDescrip|tor...Rt|
|00002410| 6c 53 65 74 4f 77 6e 65 | 72 53 65 63 75 72 69 74 |lSetOwne|rSecurit|
|00002420| 79 44 65 73 63 72 69 70 | 74 6f 72 00 72 04 50 73 |yDescrip|tor.r.Ps|
|00002430| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|00002440| 73 53 65 73 73 69 6f 6e | 49 64 00 00 97 04 50 73 |sSession|Id....Ps|
|00002450| 47 65 74 54 68 72 65 61 | 64 53 65 73 73 69 6f 6e |GetThrea|dSession|
|00002460| 49 64 00 00 6a 04 50 73 | 44 65 72 65 66 65 72 65 |Id..j.Ps|Derefere|
|00002470| 6e 63 65 49 6d 70 65 72 | 73 6f 6e 61 74 69 6f 6e |nceImper|sonation|
|00002480| 54 6f 6b 65 6e 00 40 06 | 53 65 51 75 65 72 79 49 |Token.@.|SeQueryI|
|00002490| 6e 66 6f 72 6d 61 74 69 | 6f 6e 54 6f 6b 65 6e 00 |nformati|onToken.|
|000024a0| ab 04 50 73 52 65 66 65 | 72 65 6e 63 65 49 6d 70 |..PsRefe|renceImp|
|000024b0| 65 72 73 6f 6e 61 74 69 | 6f 6e 54 6f 6b 65 6e 00 |ersonati|onToken.|
|000024c0| 94 04 50 73 47 65 74 54 | 68 72 65 61 64 49 64 00 |..PsGetT|hreadId.|
|000024d0| d4 04 52 74 6c 41 64 64 | 41 63 63 65 73 73 41 6c |..RtlAdd|AccessAl|
|000024e0| 6c 6f 77 65 64 41 63 65 | 45 78 00 00 51 07 5f 61 |lowedAce|Ex..Q._a|
|000024f0| 6c 6c 73 68 72 00 84 03 | 4d 6d 46 72 65 65 43 6f |llshr...|MmFreeCo|
|00002500| 6e 74 69 67 75 6f 75 73 | 4d 65 6d 6f 72 79 53 70 |ntiguous|MemorySp|
|00002510| 65 63 69 66 79 43 61 63 | 68 65 00 00 88 03 4d 6d |ecifyCac|he....Mm|
|00002520| 47 65 74 50 68 79 73 69 | 63 61 6c 41 64 64 72 65 |GetPhysi|calAddre|
|00002530| 73 73 00 00 71 03 4d 6d | 41 6c 6c 6f 63 61 74 65 |ss..q.Mm|Allocate|
|00002540| 43 6f 6e 74 69 67 75 6f | 75 73 4d 65 6d 6f 72 79 |Contiguo|usMemory|
|00002550| 53 70 65 63 69 66 79 43 | 61 63 68 65 00 00 b2 05 |SpecifyC|ache....|
|00002560| 52 74 6c 50 72 65 66 65 | 74 63 68 4d 65 6d 6f 72 |RtlPrefe|tchMemor|
|00002570| 79 4e 6f 6e 54 65 6d 70 | 6f 72 61 6c 00 00 f8 05 |yNonTemp|oral....|
|00002580| 52 74 6c 55 6e 77 69 6e | 64 00 b9 05 52 74 6c 51 |RtlUnwin|d...RtlQ|
|00002590| 75 65 72 79 52 65 67 69 | 73 74 72 79 56 61 6c 75 |ueryRegi|stryValu|
|000025a0| 65 73 00 00 38 07 5a 77 | 53 65 74 56 61 6c 75 65 |es..8.Zw|SetValue|
|000025b0| 4b 65 79 00 41 05 52 74 | 6c 47 55 49 44 46 72 6f |Key.A.Rt|lGUIDFro|
|000025c0| 6d 53 74 72 69 6e 67 00 | d0 00 45 78 55 75 69 64 |mString.|..ExUuid|
|000025d0| 43 72 65 61 74 65 00 00 | d9 02 4b 65 49 6e 69 74 |Create..|..KeInit|
|000025e0| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 48 03 4b 65 |ializeEv|ent.H.Ke|
|000025f0| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|00002600| 65 63 74 00 12 03 4b 65 | 52 65 6c 65 61 73 65 4d |ect...Ke|ReleaseM|
|00002610| 75 74 65 78 00 00 f2 04 | 52 74 6c 43 6f 6d 70 61 |utex....|RtlCompa|
|00002620| 72 65 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |reUnicod|eString.|
|00002630| ef 04 52 74 6c 43 6f 6d | 70 61 72 65 4d 65 6d 6f |..RtlCom|pareMemo|
|00002640| 72 79 00 00 49 03 4b 65 | 66 41 63 71 75 69 72 65 |ry..I.Ke|fAcquire|
|00002650| 53 70 69 6e 4c 6f 63 6b | 41 74 44 70 63 4c 65 76 |SpinLock|AtDpcLev|
|00002660| 65 6c 00 00 4a 03 4b 65 | 66 52 65 6c 65 61 73 65 |el..J.Ke|fRelease|
|00002670| 53 70 69 6e 4c 6f 63 6b | 46 72 6f 6d 44 70 63 4c |SpinLock|FromDpcL|
|00002680| 65 76 65 6c 00 00 2a 03 | 4b 65 53 65 74 45 76 65 |evel..*.|KeSetEve|
|00002690| 6e 74 00 00 6f 05 52 74 | 6c 49 6e 74 65 67 65 72 |nt..o.Rt|lInteger|
|000026a0| 54 6f 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |ToUnicod|eString.|
|000026b0| 5f 05 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |_.RtlIni|tUnicode|
|000026c0| 53 74 72 69 6e 67 00 00 | ff 04 52 74 6c 43 6f 70 |String..|..RtlCop|
|000026d0| 79 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |yUnicode|String..|
|000026e0| de 04 52 74 6c 41 70 70 | 65 6e 64 55 6e 69 63 6f |..RtlApp|endUnico|
|000026f0| 64 65 53 74 72 69 6e 67 | 54 6f 53 74 72 69 6e 67 |deString|ToString|
|00002700| 00 00 e8 04 52 74 6c 43 | 68 65 63 6b 52 65 67 69 |....RtlC|heckRegi|
|00002710| 73 74 72 79 4b 65 79 00 | 03 05 52 74 6c 43 72 65 |stryKey.|..RtlCre|
|00002720| 61 74 65 52 65 67 69 73 | 74 72 79 4b 65 79 00 00 |ateRegis|tryKey..|
|00002730| 0b 06 52 74 6c 57 72 69 | 74 65 52 65 67 69 73 74 |..RtlWri|teRegist|
|00002740| 72 79 56 61 6c 75 65 00 | b3 02 4b 65 42 75 67 43 |ryValue.|..KeBugC|
|00002750| 68 65 63 6b 45 78 00 00 | 80 07 6d 65 6d 73 65 74 |heckEx..|..memset|
|00002760| 00 00 7e 07 6d 65 6d 63 | 70 79 00 00 6d 00 45 78 |..~.memc|py..m.Ex|
|00002770| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|00002780| 54 61 67 00 85 00 45 78 | 46 72 65 65 50 6f 6f 6c |Tag...Ex|FreePool|
|00002790| 57 69 74 68 54 61 67 00 | 0f 02 49 6f 47 65 74 44 |WithTag.|..IoGetD|
|000027a0| 72 69 76 65 72 4f 62 6a | 65 63 74 45 78 74 65 6e |riverObj|ectExten|
|000027b0| 73 69 6f 6e 00 00 c8 02 | 4b 65 47 65 74 43 75 72 |sion....|KeGetCur|
|000027c0| 72 65 6e 74 54 68 72 65 | 61 64 00 00 34 07 5a 77 |rentThre|ad..4.Zw|
|000027d0| 53 65 74 53 65 63 75 72 | 69 74 79 4f 62 6a 65 63 |SetSecur|ityObjec|
|000027e0| 74 00 34 04 4f 62 4f 70 | 65 6e 4f 62 6a 65 63 74 |t.4.ObOp|enObject|
|000027f0| 42 79 50 6f 69 6e 74 65 | 72 00 ec 01 49 6f 44 65 |ByPointe|r...IoDe|
|00002800| 76 69 63 65 4f 62 6a 65 | 63 74 54 79 70 65 00 00 |viceObje|ctType..|
|00002810| 5f 07 5f 73 6e 77 70 72 | 69 6e 74 66 00 00 1f 06 |_._snwpr|intf....|
|00002820| 53 65 43 61 70 74 75 72 | 65 53 65 63 75 72 69 74 |SeCaptur|eSecurit|
|00002830| 79 44 65 73 63 72 69 70 | 74 6f 72 00 29 02 49 6f |yDescrip|tor.).Io|
|00002840| 49 73 57 64 6d 56 65 72 | 73 69 6f 6e 41 76 61 69 |IsWdmVer|sionAvai|
|00002850| 6c 61 62 6c 65 00 6e 07 | 5f 77 63 73 6e 69 63 6d |lable.n.|_wcsnicm|
|00002860| 70 00 9a 07 77 63 73 63 | 68 72 00 00 d2 04 52 74 |p...wcsc|hr....Rt|
|00002870| 6c 41 62 73 6f 6c 75 74 | 65 54 6f 53 65 6c 66 52 |lAbsolut|eToSelfR|
|00002880| 65 6c 61 74 69 76 65 53 | 44 00 b8 06 5a 77 43 72 |elativeS|D...ZwCr|
|00002890| 65 61 74 65 4b 65 79 00 | 13 07 5a 77 51 75 65 72 |eateKey.|..ZwQuer|
|000028a0| 79 56 61 6c 75 65 4b 65 | 79 00 64 00 52 45 41 44 |yValueKe|y.d.READ|
|000028b0| 5f 50 4f 52 54 5f 55 4c | 4f 4e 47 00 5c 00 4b 66 |_PORT_UL|ONG.\.Kf|
|000028c0| 41 63 71 75 69 72 65 53 | 70 69 6e 4c 6f 63 6b 00 |AcquireS|pinLock.|
|000028d0| 50 00 4b 65 47 65 74 43 | 75 72 72 65 6e 74 49 72 |P.KeGetC|urrentIr|
|000028e0| 71 6c 00 00 5d 00 4b 66 | 4c 6f 77 65 72 49 72 71 |ql..].Kf|LowerIrq|
|000028f0| 6c 00 54 00 4b 65 52 61 | 69 73 65 49 72 71 6c 54 |l.T.KeRa|iseIrqlT|
|00002900| 6f 44 70 63 4c 65 76 65 | 6c 00 5e 00 4b 66 52 61 |oDpcLeve|l.^.KfRa|
|00002910| 69 73 65 49 72 71 6c 00 | 3f 00 48 61 6c 54 72 61 |iseIrql.|?.HalTra|
|00002920| 6e 73 6c 61 74 65 42 75 | 73 41 64 64 72 65 73 73 |nslateBu|sAddress|
|00002930| 00 00 69 00 57 52 49 54 | 45 5f 50 4f 52 54 5f 55 |..i.WRIT|E_PORT_U|
|00002940| 43 48 41 52 00 00 6b 00 | 57 52 49 54 45 5f 50 4f |CHAR..k.|WRITE_PO|
|00002950| 52 54 5f 55 53 48 4f 52 | 54 00 6a 00 57 52 49 54 |RT_USHOR|T.j.WRIT|
|00002960| 45 5f 50 4f 52 54 5f 55 | 4c 4f 4e 47 00 00 63 00 |E_PORT_U|LONG..c.|
|00002970| 52 45 41 44 5f 50 4f 52 | 54 5f 55 43 48 41 52 00 |READ_POR|T_UCHAR.|
|00002980| 5f 00 4b 66 52 65 6c 65 | 61 73 65 53 70 69 6e 4c |_.KfRele|aseSpinL|
|00002990| 6f 63 6b 00 65 00 52 45 | 41 44 5f 50 4f 52 54 5f |ock.e.RE|AD_PORT_|
|000029a0| 55 53 48 4f 52 54 00 00 | d5 00 4e 6d 72 52 65 67 |USHORT..|..NmrReg|
|000029b0| 69 73 74 65 72 50 72 6f | 76 69 64 65 72 00 f2 00 |isterPro|vider...|
|000029c0| 4e 73 69 53 65 74 41 6c | 6c 50 61 72 61 6d 65 74 |NsiSetAl|lParamet|
|000029d0| 65 72 73 45 78 00 e3 00 | 4e 73 69 45 6e 75 6d 65 |ersEx...|NsiEnume|
|000029e0| 72 61 74 65 4f 62 6a 65 | 63 74 73 41 6c 6c 50 61 |rateObje|ctsAllPa|
|000029f0| 72 61 6d 65 74 65 72 73 | 45 78 00 00 ec 00 4e 73 |rameters|Ex....Ns|
|00002a00| 69 47 65 74 50 61 72 61 | 6d 65 74 65 72 45 78 00 |iGetPara|meterEx.|
|00002a10| e7 00 4e 73 69 47 65 74 | 41 6c 6c 50 61 72 61 6d |..NsiGet|AllParam|
|00002a20| 65 74 65 72 73 45 78 00 | f6 00 4e 73 69 53 65 74 |etersEx.|..NsiSet|
|00002a30| 50 61 72 61 6d 65 74 65 | 72 45 78 00 d7 00 4e 6d |Paramete|rEx...Nm|
|00002a40| 72 57 61 69 74 46 6f 72 | 50 72 6f 76 69 64 65 72 |rWaitFor|Provider|
|00002a50| 44 65 72 65 67 69 73 74 | 65 72 43 6f 6d 70 6c 65 |Deregist|erComple|
|00002a60| 74 65 00 00 d2 00 4e 6d | 72 44 65 72 65 67 69 73 |te....Nm|rDeregis|
|00002a70| 74 65 72 50 72 6f 76 69 | 64 65 72 00 ef 00 4e 73 |terProvi|der...Ns|
|00002a80| 69 52 65 67 69 73 74 65 | 72 43 68 61 6e 67 65 4e |iRegiste|rChangeN|
|00002a90| 6f 74 69 66 69 63 61 74 | 69 6f 6e 45 78 00 f4 00 |otificat|ionEx...|
|00002aa0| 4e 73 69 53 65 74 4f 62 | 6a 65 63 74 53 65 63 75 |NsiSetOb|jectSecu|
|00002ab0| 72 69 74 79 00 00 00 00 | 00 00 00 00 00 00 00 00 |rity....|........|
|00002ac0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002ad0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002ae0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b00| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+
