/ H4CK3R 14 / hacker14.iso / patches / kb8176 / Windows2000-KB817606-x86-ENU.exe / srv.sys / INIT

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 55 8b ec 51 51 53 56 57 | 8d 45 f8 ff 35 78 b9 01 |U..QQSVW|.E..5x..|
|00000010| 00 50 ff 15 7c a5 01 00 | 8b 75 08 33 ff 68 60 be |.P..|...|.u.3.h`.|
|00000020| 01 00 57 57 8d 45 f8 6a | 12 50 57 56 ff 15 54 a3 |..WW.E.j|.PWV..T.|
|00000030| 01 00 8b d8 3b df 7d 12 | 57 57 57 57 53 68 d2 07 |....;.}.|WWWWSh..|
|00000040| 00 c0 56 e8 ca 0b fd ff | eb 19 6a 1c 8d 7e 38 59 |..V.....|..j..~8Y|
|00000050| b8 c4 a9 02 00 c7 46 34 | 2e 2e 03 00 f3 ab e8 29 |......F4|.......)|
|00000060| 00 00 00 5f 8b c3 5e 5b | c9 c2 08 00 49 00 6f 00 |..._..^[|....I.o.|
|00000070| 53 00 65 00 74 00 46 00 | 69 00 6c 00 65 00 4f 00 |S.e.t.F.|i.l.e.O.|
|00000080| 72 00 69 00 67 00 69 00 | 6e 00 00 00 83 ec 14 53 |r.i.g.i.|n......S|
|00000090| 55 56 57 6a 28 33 c0 59 | bf 30 ca 01 00 f3 ab c6 |UVWj(3.Y|.0......|
|000000a0| 05 6c be 01 00 01 ff 15 | e0 a2 01 00 8b 35 fc a2 |.l......|.....5..|
|000000b0| 01 00 a3 74 be 01 00 a1 | 40 a5 01 00 33 db 53 6a |...t....|@...3.Sj|
|000000c0| 01 0f be 00 68 80 be 01 | 00 a3 78 c0 01 00 ff d6 |....h...|..x.....|
|000000d0| 53 6a 01 68 90 cc 01 00 | ff d6 8b 3d 10 a4 01 00 |Sj.h....|...=....|
|000000e0| 68 b4 be 01 00 ff d7 68 | 54 bf 01 00 ff d7 8b 35 |h......h|T......5|
|000000f0| b8 a5 01 00 68 98 bf 01 | 00 ff d6 68 d0 bf 01 00 |....h...|...h....|
|00000100| ff d6 68 08 c0 01 00 ff | d6 bd 00 ce 01 00 89 6c |..h.....|.......l|
|00000110| 24 10 ff 74 24 10 ff d6 | 83 44 24 10 38 81 7c 24 |$..t$...|.D$.8.|$|
|00000120| 10 30 d0 01 00 72 eb 68 | 40 c0 01 00 ff d6 68 c0 |.0...r.h|@.....h.|
|00000130| cc 01 00 ff d6 68 28 cb | 01 00 ff d6 b8 d8 c2 01 |.....h(.|........|
|00000140| 00 89 1d e8 c2 01 00 a3 | dc c2 01 00 a3 d8 c2 01 |........|........|
|00000150| 00 b8 e0 c2 01 00 89 1d | ec c2 01 00 a3 e4 c2 01 |........|........|
|00000160| 00 a3 e0 c2 01 00 b8 f0 | c2 01 00 c7 05 08 c3 01 |........|........|
|00000170| 00 66 4c 01 00 a3 f4 c2 | 01 00 a3 f0 c2 01 00 89 |.fL.....|........|
|00000180| 1d 0c c3 01 00 89 1d 00 | c3 01 00 33 c9 b8 68 c3 |........|...3..h.|
|00000190| 01 00 8b d1 89 40 04 6b | d2 38 03 d5 41 89 00 83 |.....@.k|.8..A...|
|000001a0| f9 0a 89 50 08 75 02 33 | c9 83 c0 0c 3d 8c c9 01 |...P.u.3|....=...|
|000001b0| 00 72 df b8 90 c9 01 00 | 89 40 04 89 00 83 c0 08 |.r......|.@......|
|000001c0| 3d 18 ca 01 00 72 f1 68 | d0 cb 01 00 ff d6 68 68 |=....r.h|......hh|
|000001d0| cd 01 00 88 1d 24 cc 01 | 00 88 1d 44 cc 01 00 88 |.....$..|...D....|
|000001e0| 1d 64 cc 01 00 88 1d 84 | cc 01 00 ff d6 ff 35 5c |.d......|......5\|
|000001f0| b9 01 00 b8 b8 cc 01 00 | a3 bc cc 01 00 a3 b8 cc |........|........|
|00000200| 01 00 b8 f8 cc 01 00 c7 | 05 04 cd 01 00 02 00 00 |........|........|
|00000210| 00 a3 fc cc 01 00 a3 f8 | cc 01 00 8d 44 24 20 88 |........|....D$ .|
|00000220| 1d 08 cd 01 00 50 88 1d | 09 cd 01 00 ff 15 9c a4 |.....P..|........|
|00000230| 01 00 8d 44 24 1c 6a 01 | 50 68 18 ca 01 00 ff 15 |...D$.j.|Ph......|
|00000240| c4 a5 01 00 ff 35 48 b9 | 01 00 8b 35 7c a5 01 00 |.....5H.|...5|...|
|00000250| 68 20 ca 01 00 ff d6 ff | 35 4c b9 01 00 68 28 ca |h ......|5L...h(.|
|00000260| 01 00 ff d6 ff 35 00 bc | 01 00 68 e8 ca 01 00 ff |.....5..|..h.....|
|00000270| d6 ff 35 04 bc 01 00 68 | f0 ca 01 00 ff 15 08 a5 |..5....h|........|
|00000280| 01 00 68 30 00 df ff 68 | f8 ca 01 00 ff d6 c7 05 |..h0...h|........|
|00000290| 18 cd 01 00 b9 0b 00 00 | c7 05 28 cd 01 00 ba 0b |........|..(.....|
|000002a0| 00 00 bd 78 cb 01 00 bb | a8 bb 01 00 ff 33 55 ff |...x....|.....3U.|
|000002b0| d6 83 c3 04 83 c5 08 81 | fb c4 bb 01 00 76 ed b8 |........|.....v..|
|000002c0| b8 cb 01 00 8b 48 f8 89 | 08 8b 48 fc 89 48 04 83 |.....H..|..H..H..|
|000002d0| c0 08 3d d0 cb 01 00 72 | eb 68 74 bf 01 00 ff d7 |..=....r|.ht.....|
|000002e0| be d4 be 01 00 56 ff d7 | 83 c6 20 81 fe 54 bf 01 |.....V..|.. ..T..|
|000002f0| 00 72 f2 c7 05 90 be 01 | 00 07 00 00 00 ff 15 98 |.r......|........|
|00000300| a3 01 00 8b c8 b8 80 f0 | fa 02 33 d2 c7 44 24 18 |........|..3..D$.|
|00000310| ec 54 04 00 f7 f1 66 c7 | 44 24 14 1e 00 66 c7 44 |.T....f.|D$...f.D|
|00000320| 24 16 20 00 a3 ac cd 01 | 00 8d 44 24 14 50 ff 15 |$. .....|..D$.P..|
|00000330| 3c a5 01 00 5f 5e 5d a3 | d4 d0 01 00 5b 83 c4 14 |<..._^].|....[...|
|00000340| c3 cc cc cc 84 58 03 00 | 00 00 00 00 00 00 00 00 |.....X..|........|
|00000350| ec 6e 03 00 7c a2 00 00 | 28 58 03 00 00 00 00 00 |.n..|...|(X......|
|00000360| 00 00 00 00 52 6f 03 00 | 20 a2 00 00 40 58 03 00 |....Ro..| ...@X..|
|00000370| 00 00 00 00 00 00 00 00 | da 6f 03 00 38 a2 00 00 |........|.o..8...|
|00000380| 58 58 03 00 00 00 00 00 | 00 00 00 00 d0 70 03 00 |XX......|.....p..|
|00000390| 50 a2 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |P.......|........|
|000003a0| 00 00 00 00 00 00 00 00 | 0e 6f 03 00 22 6f 03 00 |........|.o.."o..|
|000003b0| 3e 6f 03 00 fa 6e 03 00 | 30 6f 03 00 00 00 00 00 |>o...n..|0o......|
|000003c0| 90 6f 03 00 a8 6f 03 00 | c4 6f 03 00 74 6f 03 00 |.o...o..|.o..to..|
|000003d0| 5a 6f 03 00 00 00 00 00 | ba 70 03 00 72 70 03 00 |Zo......|.p..rp..|
|000003e0| 58 70 03 00 8e 70 03 00 | 26 70 03 00 0e 70 03 00 |Xp...p..|&p...p..|
|000003f0| 44 70 03 00 fa 6f 03 00 | e2 6f 03 00 a0 70 03 00 |Dp...o..|.o...p..|
|00000400| 00 00 00 00 8c 60 03 00 | 74 5e 03 00 8c 5e 03 00 |.....`..|t^...^..|
|00000410| a4 5e 03 00 c2 5e 03 00 | d0 5e 03 00 e8 5e 03 00 |.^...^..|.^...^..|
|00000420| 06 5f 03 00 24 5f 03 00 | 30 5f 03 00 4e 5f 03 00 |._..$_..|0_..N_..|
|00000430| 6c 5f 03 00 82 5f 03 00 | 90 5f 03 00 a8 5f 03 00 |l_..._..|._..._..|
|00000440| c6 5f 03 00 e8 5f 03 00 | 08 60 03 00 1e 60 03 00 |._..._..|.`...`..|
|00000450| 3c 60 03 00 48 60 03 00 | 60 60 03 00 42 5e 03 00 |<`..H`..|``..B^..|
|00000460| 5c 5e 03 00 a6 60 03 00 | be 60 03 00 d4 60 03 00 |\^...`..|.`...`..|
|00000470| f2 60 03 00 12 61 03 00 | 1c 61 03 00 2a 61 03 00 |.`...a..|.a..*a..|
|00000480| 44 61 03 00 58 61 03 00 | 6c 61 03 00 84 61 03 00 |Da..Xa..|la...a..|
|00000490| 98 61 03 00 a8 61 03 00 | b6 61 03 00 c6 61 03 00 |.a...a..|.a...a..|
|000004a0| e0 61 03 00 f2 61 03 00 | fc 61 03 00 18 62 03 00 |.a...a..|.a...b..|
|000004b0| 2a 62 03 00 3a 62 03 00 | 48 62 03 00 78 60 03 00 |*b..:b..|Hb..x`..|
|000004c0| 60 62 03 00 08 5e 03 00 | 20 5e 03 00 b6 62 03 00 |`b...^..| ^...b..|
|000004d0| c0 62 03 00 d0 62 03 00 | e8 62 03 00 02 63 03 00 |.b...b..|.b...c..|
|000004e0| 14 63 03 00 26 63 03 00 | 38 63 03 00 4e 63 03 00 |.c..&c..|8c..Nc..|
|000004f0| 62 63 03 00 70 63 03 00 | 88 63 03 00 a0 63 03 00 |bc..pc..|.c...c..|
|00000500| b0 63 03 00 ce 63 03 00 | e4 63 03 00 fa 63 03 00 |.c...c..|.c...c..|
|00000510| 14 64 03 00 20 64 03 00 | 34 64 03 00 54 64 03 00 |.d.. d..|4d..Td..|
|00000520| 64 64 03 00 7c 64 03 00 | 90 64 03 00 9a 64 03 00 |dd..|d..|.d...d..|
|00000530| ac 64 03 00 b8 64 03 00 | cc 64 03 00 ec 64 03 00 |.d...d..|.d...d..|
|00000540| fc 64 03 00 12 65 03 00 | 26 65 03 00 38 65 03 00 |.d...e..|&e..8e..|
|00000550| 50 65 03 00 5a 65 03 00 | 6c 65 03 00 78 65 03 00 |Pe..Ze..|le..xe..|
|00000560| 98 65 03 00 b8 65 03 00 | d2 65 03 00 e2 65 03 00 |.e...e..|.e...e..|
|00000570| f2 65 03 00 08 66 03 00 | 1c 66 03 00 34 66 03 00 |.e...f..|.f..4f..|
|00000580| 6e 62 03 00 a6 62 03 00 | 80 66 03 00 9e 66 03 00 |nb...b..|.f...f..|
|00000590| be 66 03 00 8a 62 03 00 | b8 5d 03 00 10 5c 03 00 |.f...b..|.]...\..|
|000005a0| 24 67 03 00 40 67 03 00 | 5a 67 03 00 7a 67 03 00 |$g..@g..|Zg..zg..|
|000005b0| 90 67 03 00 a6 67 03 00 | b0 67 03 00 c0 67 03 00 |.g...g..|.g...g..|
|000005c0| d6 67 03 00 e6 67 03 00 | fa 67 03 00 10 68 03 00 |.g...g..|.g...h..|
|000005d0| 20 68 03 00 3c 68 03 00 | 4e 68 03 00 5e 68 03 00 | h..<h..|Nh..^h..|
|000005e0| 76 68 03 00 8e 68 03 00 | 9e 68 03 00 b8 68 03 00 |vh...h..|.h...h..|
|000005f0| d2 68 03 00 ea 68 03 00 | 06 69 03 00 20 69 03 00 |.h...h..|.i.. i..|
|00000600| 3a 69 03 00 4c 69 03 00 | 6e 69 03 00 7a 69 03 00 |:i..Li..|ni..zi..|
|00000610| 94 69 03 00 b2 69 03 00 | ce 69 03 00 ea 69 03 00 |.i...i..|.i...i..|
|00000620| f8 69 03 00 02 6a 03 00 | 12 6a 03 00 2a 6a 03 00 |.i...j..|.j..*j..|
|00000630| 42 6a 03 00 58 6a 03 00 | 70 6a 03 00 84 6a 03 00 |Bj..Xj..|pj...j..|
|00000640| 8e 6a 03 00 9a 6a 03 00 | a6 6a 03 00 c6 6a 03 00 |.j...j..|.j...j..|
|00000650| e2 6a 03 00 04 6b 03 00 | 28 6b 03 00 3c 6b 03 00 |.j...k..|(k..<k..|
|00000660| 60 6b 03 00 7e 6b 03 00 | 88 6b 03 00 9e 6b 03 00 |`k..~k..|.k...k..|
|00000670| c4 6b 03 00 dc 6b 03 00 | fa 6b 03 00 16 6c 03 00 |.k...k..|.k...l..|
|00000680| 2a 6c 03 00 4c 6c 03 00 | 5a 6c 03 00 70 6c 03 00 |*l..Ll..|Zl..pl..|
|00000690| 7a 6c 03 00 8e 6c 03 00 | a4 6c 03 00 be 6c 03 00 |zl...l..|.l...l..|
|000006a0| d4 6c 03 00 e8 6c 03 00 | fc 6c 03 00 16 6d 03 00 |.l...l..|.l...m..|
|000006b0| 28 6d 03 00 3a 6d 03 00 | 58 6d 03 00 6c 6d 03 00 |(m..:m..|Xm..lm..|
|000006c0| 80 6d 03 00 8c 6d 03 00 | a8 6d 03 00 be 6d 03 00 |.m...m..|.m...m..|
|000006d0| da 6d 03 00 f8 6d 03 00 | 10 6e 03 00 28 6e 03 00 |.m...m..|.n..(n..|
|000006e0| 44 6e 03 00 5e 6e 03 00 | 6e 6e 03 00 88 6e 03 00 |Dn..^n..|nn...n..|
|000006f0| 98 6e 03 00 a8 6e 03 00 | ba 6e 03 00 cc 6e 03 00 |.n...n..|.n...n..|
|00000700| de 6e 03 00 3c 5d 03 00 | 22 5d 03 00 0a 5d 03 00 |.n..<]..|"]...]..|
|00000710| f2 5c 03 00 d2 5c 03 00 | b8 5c 03 00 9e 5c 03 00 |.\...\..|.\...\..|
|00000720| 8e 5c 03 00 74 5c 03 00 | 5a 5c 03 00 44 5c 03 00 |.\..t\..|Z\..D\..|
|00000730| 2a 5c 03 00 f0 5d 03 00 | d0 5d 03 00 74 5d 03 00 |*\...]..|.]..t]..|
|00000740| 9c 5d 03 00 88 5d 03 00 | de 66 03 00 54 5d 03 00 |.]...]..|.f..T]..|
|00000750| f0 66 03 00 52 66 03 00 | 66 66 03 00 0a 67 03 00 |.f..Rf..|ff...g..|
|00000760| dc 70 03 00 f4 70 03 00 | 04 71 03 00 14 71 03 00 |.p...p..|.q...q..|
|00000770| 2a 71 03 00 3c 71 03 00 | 4a 71 03 00 60 71 03 00 |*q..<q..|Jq..`q..|
|00000780| 80 71 03 00 9c 71 03 00 | b4 71 03 00 00 00 00 00 |.q...q..|.q......|
|00000790| 7c 00 45 78 66 49 6e 74 | 65 72 6c 6f 63 6b 65 64 ||.ExfInt|erlocked|
|000007a0| 41 64 64 55 6c 6f 6e 67 | 00 00 65 00 45 78 4c 6f |AddUlong|..e.ExLo|
|000007b0| 63 61 6c 54 69 6d 65 54 | 6f 53 79 73 74 65 6d 54 |calTimeT|oSystemT|
|000007c0| 69 6d 65 00 87 02 4e 74 | 46 72 65 65 56 69 72 74 |ime...Nt|FreeVirt|
|000007d0| 75 61 6c 4d 65 6d 6f 72 | 79 00 7a 02 4e 74 41 6c |ualMemor|y.z.NtAl|
|000007e0| 6c 6f 63 61 74 65 56 69 | 72 74 75 61 6c 4d 65 6d |locateVi|rtualMem|
|000007f0| 6f 72 79 00 05 04 53 65 | 52 65 6c 65 61 73 65 53 |ory...Se|ReleaseS|
|00000800| 75 62 6a 65 63 74 43 6f | 6e 74 65 78 74 00 e3 03 |ubjectCo|ntext...|
|00000810| 53 65 41 63 63 65 73 73 | 43 68 65 63 6b 00 ec 03 |SeAccess|Check...|
|00000820| 53 65 43 61 70 74 75 72 | 65 53 75 62 6a 65 63 74 |SeCaptur|eSubject|
|00000830| 43 6f 6e 74 65 78 74 00 | 0f 04 53 65 55 6e 6c 6f |Context.|..SeUnlo|
|00000840| 63 6b 53 75 62 6a 65 63 | 74 43 6f 6e 74 65 78 74 |ckSubjec|tContext|
|00000850| 00 00 ff 03 53 65 51 75 | 65 72 79 41 75 74 68 65 |....SeQu|eryAuthe|
|00000860| 6e 74 69 63 61 74 69 6f | 6e 49 64 54 6f 6b 65 6e |nticatio|nIdToken|
|00000870| 00 00 f8 03 53 65 4c 6f | 63 6b 53 75 62 6a 65 63 |....SeLo|ckSubjec|
|00000880| 74 43 6f 6e 74 65 78 74 | 00 00 54 03 52 74 6c 46 |tContext|..T.RtlF|
|00000890| 72 65 65 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |reeUnico|deString|
|000008a0| 00 00 cd 03 52 74 6c 55 | 70 63 61 73 65 55 6e 69 |....RtlU|pcaseUni|
|000008b0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 68 03 52 74 |codeStri|ng..h.Rt|
|000008c0| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|000008d0| 6e 67 00 00 fe 02 52 74 | 6c 41 6e 73 69 53 74 72 |ng....Rt|lAnsiStr|
|000008e0| 69 6e 67 54 6f 55 6e 69 | 63 6f 64 65 53 74 72 69 |ingToUni|codeStri|
|000008f0| 6e 67 00 00 50 02 4d 6d | 4d 61 70 4c 6f 63 6b 65 |ng..P.Mm|MapLocke|
|00000900| 64 50 61 67 65 73 00 00 | 0e 03 52 74 6c 43 6f 6d |dPages..|..RtlCom|
|00000910| 70 61 72 65 4d 65 6d 6f | 72 79 00 00 50 00 45 78 |pareMemo|ry..P.Ex|
|00000920| 49 6e 69 74 69 61 6c 69 | 7a 65 52 65 73 6f 75 72 |Initiali|zeResour|
|00000930| 63 65 4c 69 74 65 00 00 | ca 01 4b 65 49 6e 69 74 |ceLite..|..KeInit|
|00000940| 69 61 6c 69 7a 65 53 70 | 69 6e 4c 6f 63 6b 00 00 |ializeSp|inLock..|
|00000950| 81 00 45 78 66 49 6e 74 | 65 72 6c 6f 63 6b 65 64 |..ExfInt|erlocked|
|00000960| 52 65 6d 6f 76 65 48 65 | 61 64 4c 69 73 74 00 00 |RemoveHe|adList..|
|00000970| fa 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 49 6e 63 |..Interl|ockedInc|
|00000980| 72 65 6d 65 6e 74 00 00 | 73 00 45 78 52 65 6c 65 |rement..|s.ExRele|
|00000990| 61 73 65 52 65 73 6f 75 | 72 63 65 4c 69 74 65 00 |aseResou|rceLite.|
|000009a0| 32 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |2.ExAcqu|ireResou|
|000009b0| 72 63 65 45 78 63 6c 75 | 73 69 76 65 4c 69 74 65 |rceExclu|siveLite|
|000009c0| 00 00 11 03 52 74 6c 43 | 6f 6d 70 61 72 65 55 6e |....RtlC|ompareUn|
|000009d0| 69 63 6f 64 65 53 74 72 | 69 6e 67 00 bd 02 4f 62 |icodeStr|ing...Ob|
|000009e0| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|000009f0| 63 74 00 00 f7 00 49 6e | 74 65 72 6c 6f 63 6b 65 |ct....In|terlocke|
|00000a00| 64 44 65 63 72 65 6d 65 | 6e 74 00 00 41 00 45 78 |dDecreme|nt..A.Ex|
|00000a10| 44 65 6c 65 74 65 52 65 | 73 6f 75 72 63 65 4c 69 |DeleteRe|sourceLi|
|00000a20| 74 65 00 00 5e 00 45 78 | 49 6e 74 65 72 6c 6f 63 |te..^.Ex|Interloc|
|00000a30| 6b 65 64 50 6f 70 45 6e | 74 72 79 53 4c 69 73 74 |kedPopEn|trySList|
|00000a40| 00 00 0d 02 4b 65 54 69 | 63 6b 43 6f 75 6e 74 00 |....KeTi|ckCount.|
|00000a50| cc 03 52 74 6c 55 70 63 | 61 73 65 55 6e 69 63 6f |..RtlUpc|aseUnico|
|00000a60| 64 65 43 68 61 72 00 00 | c6 03 52 74 6c 55 6e 69 |deChar..|..RtlUni|
|00000a70| 63 6f 64 65 53 74 72 69 | 6e 67 54 6f 4f 65 6d 53 |codeStri|ngToOemS|
|00000a80| 74 72 69 6e 67 00 e2 03 | 52 74 6c 78 55 6e 69 63 |tring...|RtlxUnic|
|00000a90| 6f 64 65 53 74 72 69 6e | 67 54 6f 4f 65 6d 53 69 |odeStrin|gToOemSi|
|00000aa0| 7a 65 00 00 2d 00 44 62 | 67 50 72 69 6e 74 00 00 |ze..-.Db|gPrint..|
|00000ab0| 92 03 52 74 6c 4f 65 6d | 53 74 72 69 6e 67 54 6f |..RtlOem|StringTo|
|00000ac0| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 e0 03 |UnicodeS|tring...|
|00000ad0| 52 74 6c 78 4f 65 6d 53 | 74 72 69 6e 67 54 6f 55 |RtlxOemS|tringToU|
|00000ae0| 6e 69 63 6f 64 65 53 69 | 7a 65 00 00 73 02 4e 6c |nicodeSi|ze..s.Nl|
|00000af0| 73 4d 62 4f 65 6d 43 6f | 64 65 50 61 67 65 54 61 |sMbOemCo|dePageTa|
|00000b00| 67 00 fb 01 4b 65 53 65 | 74 45 76 65 6e 74 00 00 |g...KeSe|tEvent..|
|00000b10| 3b 03 52 74 6c 45 71 75 | 61 6c 55 6e 69 63 6f 64 |;.RtlEqu|alUnicod|
|00000b20| 65 53 74 72 69 6e 67 00 | 33 00 45 78 41 63 71 75 |eString.|3.ExAcqu|
|00000b30| 69 72 65 52 65 73 6f 75 | 72 63 65 53 68 61 72 65 |ireResou|rceShare|
|00000b40| 64 4c 69 74 65 00 16 02 | 4b 65 66 52 65 6c 65 61 |dLite...|KefRelea|
|00000b50| 73 65 53 70 69 6e 4c 6f | 63 6b 46 72 6f 6d 44 70 |seSpinLo|ckFromDp|
|00000b60| 63 4c 65 76 65 6c 00 00 | 15 02 4b 65 66 41 63 71 |cLevel..|..KefAcq|
|00000b70| 75 69 72 65 53 70 69 6e | 4c 6f 63 6b 41 74 44 70 |uireSpin|LockAtDp|
|00000b80| 63 4c 65 76 65 6c 00 00 | f8 00 49 6e 74 65 72 6c |cLevel..|..Interl|
|00000b90| 6f 63 6b 65 64 45 78 63 | 68 61 6e 67 65 00 60 00 |ockedExc|hange.`.|
|00000ba0| 45 78 49 6e 74 65 72 6c | 6f 63 6b 65 64 50 75 73 |ExInterl|ockedPus|
|00000bb0| 68 45 6e 74 72 79 53 4c | 69 73 74 00 32 01 49 6f |hEntrySL|ist.2.Io|
|00000bc0| 46 72 65 65 49 72 70 00 | 11 01 49 6f 43 68 65 63 |FreeIrp.|..IoChec|
|00000bd0| 6b 44 65 73 69 72 65 64 | 41 63 63 65 73 73 00 00 |kDesired|Access..|
|00000be0| 1b 03 52 74 6c 43 6f 70 | 79 55 6e 69 63 6f 64 65 |..RtlCop|yUnicode|
|00000bf0| 53 74 72 69 6e 67 00 00 | dd 01 4b 65 51 75 65 72 |String..|..KeQuer|
|00000c00| 79 53 79 73 74 65 6d 54 | 69 6d 65 00 0e 02 4b 65 |ySystemT|ime...Ke|
|00000c10| 55 6e 73 74 61 63 6b 44 | 65 74 61 63 68 50 72 6f |UnstackD|etachPro|
|00000c20| 63 65 73 73 00 00 0a 02 | 4b 65 53 74 61 63 6b 41 |cess....|KeStackA|
|00000c30| 74 74 61 63 68 50 72 6f | 63 65 73 73 00 00 3a 01 |ttachPro|cess..:.|
|00000c40| 49 6f 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |IoGetCur|rentProc|
|00000c50| 65 73 73 00 80 03 52 74 | 6c 4c 65 6e 67 74 68 53 |ess...Rt|lLengthS|
|00000c60| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00000c70| 72 00 99 02 4e 74 51 75 | 65 72 79 56 6f 6c 75 6d |r...NtQu|eryVolum|
|00000c80| 65 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 46 69 6c 65 |eInforma|tionFile|
|00000c90| 00 00 7c 02 4e 74 43 6c | 6f 73 65 00 8d 02 4e 74 |..|.NtCl|ose...Nt|
|00000ca0| 4f 70 65 6e 46 69 6c 65 | 00 00 93 02 4e 74 51 75 |OpenFile|....NtQu|
|00000cb0| 65 72 79 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 46 69 |eryInfor|mationFi|
|00000cc0| 6c 65 00 00 cb 01 4b 65 | 49 6e 69 74 69 61 6c 69 |le....Ke|Initiali|
|00000cd0| 7a 65 54 69 6d 65 72 00 | c4 01 4b 65 49 6e 69 74 |zeTimer.|..KeInit|
|00000ce0| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 14 02 4b 65 |ializeEv|ent...Ke|
|00000cf0| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|00000d00| 65 63 74 00 e1 01 4b 65 | 52 65 61 64 53 74 61 74 |ect...Ke|ReadStat|
|00000d10| 65 45 76 65 6e 74 00 00 | a7 01 4b 65 43 61 6e 63 |eEvent..|..KeCanc|
|00000d20| 65 6c 54 69 6d 65 72 00 | 08 02 4b 65 53 65 74 54 |elTimer.|..KeSetT|
|00000d30| 69 6d 65 72 00 00 a8 01 | 4b 65 43 6c 65 61 72 45 |imer....|KeClearE|
|00000d40| 76 65 6e 74 00 00 04 02 | 4b 65 53 65 74 54 61 72 |vent....|KeSetTar|
|00000d50| 67 65 74 50 72 6f 63 65 | 73 73 6f 72 44 70 63 00 |getProce|ssorDpc.|
|00000d60| c3 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 44 70 |..KeInit|ializeDp|
|00000d70| 63 00 bf 04 77 63 73 6c | 65 6e 00 00 36 02 4d 6d |c...wcsl|en..6.Mm|
|00000d80| 42 75 69 6c 64 4d 64 6c | 46 6f 72 4e 6f 6e 50 61 |BuildMdl|ForNonPa|
|00000d90| 67 65 64 50 6f 6f 6c 00 | 4a 01 49 6f 49 6e 69 74 |gedPool.|J.IoInit|
|00000da0| 69 61 6c 69 7a 65 49 72 | 70 00 d0 01 4b 65 49 6e |ializeIr|p...KeIn|
|00000db0| 73 65 72 74 51 75 65 75 | 65 00 a8 02 4e 74 57 72 |sertQueu|e...NtWr|
|00000dc0| 69 74 65 46 69 6c 65 00 | 9f 02 4e 74 53 65 74 49 |iteFile.|..NtSetI|
|00000dd0| 6e 66 6f 72 6d 61 74 69 | 6f 6e 46 69 6c 65 00 00 |nformati|onFile..|
|00000de0| 9a 02 4e 74 52 65 61 64 | 46 69 6c 65 00 00 44 01 |..NtRead|File..D.|
|00000df0| 49 6f 47 65 74 52 65 6c | 61 74 65 64 44 65 76 69 |IoGetRel|atedDevi|
|00000e00| 63 65 4f 62 6a 65 63 74 | 00 00 b8 02 4f 62 52 65 |ceObject|....ObRe|
|00000e10| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 48 |ferenceO|bjectByH|
|00000e20| 61 6e 64 6c 65 00 1d 01 | 49 6f 43 72 65 61 74 65 |andle...|IoCreate|
|00000e30| 46 69 6c 65 00 00 a3 04 | 6d 65 6d 6d 6f 76 65 00 |File....|memmove.|
|00000e40| d4 03 52 74 6c 55 70 70 | 65 72 43 68 61 72 00 00 |..RtlUpp|erChar..|
|00000e50| 93 01 49 6f 57 72 69 74 | 65 45 72 72 6f 72 4c 6f |..IoWrit|eErrorLo|
|00000e60| 67 45 6e 74 72 79 00 00 | 02 01 49 6f 41 6c 6c 6f |gEntry..|..IoAllo|
|00000e70| 63 61 74 65 45 72 72 6f | 72 4c 6f 67 45 6e 74 72 |cateErro|rLogEntr|
|00000e80| 79 00 1b 01 49 6f 43 72 | 65 61 74 65 44 65 76 69 |y...IoCr|eateDevi|
|00000e90| 63 65 00 00 25 01 49 6f | 44 65 6c 65 74 65 44 65 |ce..%.Io|DeleteDe|
|00000ea0| 76 69 63 65 00 00 68 00 | 45 78 51 75 65 75 65 57 |vice..h.|ExQueueW|
|00000eb0| 6f 72 6b 49 74 65 6d 00 | be 02 4f 62 66 52 65 66 |orkItem.|..ObfRef|
|00000ec0| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 cf 01 |erenceOb|ject....|
|00000ed0| 4b 65 49 6e 73 65 72 74 | 48 65 61 64 51 75 65 75 |KeInsert|HeadQueu|
|00000ee0| 65 00 47 00 45 78 46 72 | 65 65 50 6f 6f 6c 00 00 |e.G.ExFr|eePool..|
|00000ef0| d4 01 4b 65 4c 65 61 76 | 65 43 72 69 74 69 63 61 |..KeLeav|eCritica|
|00000f00| 6c 52 65 67 69 6f 6e 00 | af 01 4b 65 45 6e 74 65 |lRegion.|..KeEnte|
|00000f10| 72 43 72 69 74 69 63 61 | 6c 52 65 67 69 6f 6e 00 |rCritica|lRegion.|
|00000f20| 96 01 49 6f 66 43 61 6c | 6c 44 72 69 76 65 72 00 |..IofCal|lDriver.|
|00000f30| f6 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 43 6f 6d |..Interl|ockedCom|
|00000f40| 70 61 72 65 45 78 63 68 | 61 6e 67 65 00 00 97 01 |pareExch|ange....|
|00000f50| 49 6f 66 43 6f 6d 70 6c | 65 74 65 52 65 71 75 65 |IofCompl|eteReque|
|00000f60| 73 74 00 00 05 01 49 6f | 41 6c 6c 6f 63 61 74 65 |st....Io|Allocate|
|00000f70| 57 6f 72 6b 49 74 65 6d | 00 00 09 04 53 65 53 69 |WorkItem|....SeSi|
|00000f80| 6e 67 6c 65 50 72 69 76 | 69 6c 65 67 65 43 68 65 |nglePriv|ilegeChe|
|00000f90| 63 6b 00 00 f4 03 53 65 | 45 78 70 6f 72 74 73 00 |ck....Se|Exports.|
|00000fa0| e4 01 4b 65 52 65 61 64 | 53 74 61 74 65 51 75 65 |..KeRead|StateQue|
|00000fb0| 75 65 00 00 3b 00 45 78 | 41 6c 6c 6f 63 61 74 65 |ue..;.Ex|Allocate|
|00000fc0| 50 6f 6f 6c 57 69 74 68 | 54 61 67 50 72 69 6f 72 |PoolWith|TagPrior|
|00000fd0| 69 74 79 00 cf 02 50 72 | 6f 62 65 46 6f 72 52 65 |ity...Pr|obeForRe|
|00000fe0| 61 64 00 00 df 01 4b 65 | 51 75 65 72 79 54 69 6d |ad....Ke|QueryTim|
|00000ff0| 65 49 6e 63 72 65 6d 65 | 6e 74 00 00 81 04 5f 65 |eIncreme|nt...._e|
|00001000| 78 63 65 70 74 5f 68 61 | 6e 64 6c 65 72 33 00 00 |xcept_ha|ndler3..|
|00001010| 79 04 5f 61 6c 6c 6d 75 | 6c 00 5d 01 49 6f 51 75 |y._allmu|l.].IoQu|
|00001020| 65 75 65 57 6f 72 6b 49 | 74 65 6d 00 33 01 49 6f |eueWorkI|tem.3.Io|
|00001030| 46 72 65 65 4d 64 6c 00 | 0c 01 49 6f 42 75 69 6c |FreeMdl.|..IoBuil|
|00001040| 64 50 61 72 74 69 61 6c | 4d 64 6c 00 51 02 4d 6d |dPartial|Mdl.Q.Mm|
|00001050| 4d 61 70 4c 6f 63 6b 65 | 64 50 61 67 65 73 53 70 |MapLocke|dPagesSp|
|00001060| 65 63 69 66 79 43 61 63 | 68 65 00 00 67 02 4d 6d |ecifyCac|he..g.Mm|
|00001070| 55 6e 6c 6f 63 6b 50 61 | 67 65 73 00 69 02 4d 6d |UnlockPa|ges.i.Mm|
|00001080| 55 6e 6d 61 70 4c 6f 63 | 6b 65 64 50 61 67 65 73 |UnmapLoc|kedPages|
|00001090| 00 00 52 03 52 74 6c 46 | 72 65 65 4f 65 6d 53 74 |..R.RtlF|reeOemSt|
|000010a0| 72 69 6e 67 00 00 34 01 | 49 6f 46 72 65 65 57 6f |ring..4.|IoFreeWo|
|000010b0| 72 6b 49 74 65 6d 00 00 | c7 02 50 6f 52 65 67 69 |rkItem..|..PoRegi|
|000010c0| 73 74 65 72 53 79 73 74 | 65 6d 53 74 61 74 65 00 |sterSyst|emState.|
|000010d0| 1f 04 5a 77 43 6c 6f 73 | 65 00 59 04 5a 77 51 75 |..ZwClos|e.Y.ZwQu|
|000010e0| 65 72 79 56 61 6c 75 65 | 4b 65 79 00 40 04 5a 77 |eryValue|Key.@.Zw|
|000010f0| 4f 70 65 6e 4b 65 79 00 | a9 03 52 74 6c 53 65 74 |OpenKey.|..RtlSet|
|00001100| 4f 77 6e 65 72 53 65 63 | 75 72 69 74 79 44 65 73 |OwnerSec|urityDes|
|00001110| 63 72 69 70 74 6f 72 00 | a7 03 52 74 6c 53 65 74 |criptor.|..RtlSet|
|00001120| 44 61 63 6c 53 65 63 75 | 72 69 74 79 44 65 73 63 |DaclSecu|rityDesc|
|00001130| 72 69 70 74 6f 72 00 00 | f7 02 52 74 6c 41 64 64 |riptor..|..RtlAdd|
|00001140| 41 63 63 65 73 73 41 6c | 6c 6f 77 65 64 41 63 65 |AccessAl|lowedAce|
|00001150| 00 00 1c 03 52 74 6c 43 | 72 65 61 74 65 41 63 6c |....RtlC|reateAcl|
|00001160| 00 00 81 03 52 74 6c 4c | 65 6e 67 74 68 53 69 64 |....RtlL|engthSid|
|00001170| 00 00 b0 03 52 74 6c 53 | 75 62 41 75 74 68 6f 72 |....RtlS|ubAuthor|
|00001180| 69 74 79 53 69 64 00 00 | 6c 03 52 74 6c 49 6e 69 |itySid..|l.RtlIni|
|00001190| 74 69 61 6c 69 7a 65 53 | 69 64 00 00 7f 03 52 74 |tializeS|id....Rt|
|000011a0| 6c 4c 65 6e 67 74 68 52 | 65 71 75 69 72 65 64 53 |lLengthR|equiredS|
|000011b0| 69 64 00 00 20 03 52 74 | 6c 43 72 65 61 74 65 53 |id.. .Rt|lCreateS|
|000011c0| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|000011d0| 72 00 c8 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |r...KeIn|itialize|
|000011e0| 51 75 65 75 65 00 ce 02 | 50 6f 55 6e 72 65 67 69 |Queue...|PoUnregi|
|000011f0| 73 74 65 72 53 79 73 74 | 65 6d 53 74 61 74 65 00 |sterSyst|emState.|
|00001200| 66 02 4d 6d 55 6e 6c 6f | 63 6b 50 61 67 61 62 6c |f.MmUnlo|ckPagabl|
|00001210| 65 49 6d 61 67 65 53 65 | 63 74 69 6f 6e 00 61 03 |eImageSe|ction.a.|
|00001220| 52 74 6c 47 65 74 4f 77 | 6e 65 72 53 65 63 75 72 |RtlGetOw|nerSecur|
|00001230| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 5a 03 |ityDescr|iptor.Z.|
|00001240| 52 74 6c 47 65 74 44 61 | 63 6c 53 65 63 75 72 69 |RtlGetDa|clSecuri|
|00001250| 74 79 44 65 73 63 72 69 | 70 74 6f 72 00 00 f4 01 |tyDescri|ptor....|
|00001260| 4b 65 52 75 6e 64 6f 77 | 6e 51 75 65 75 65 00 00 |KeRundow|nQueue..|
|00001270| ab 01 4b 65 44 65 6c 61 | 79 45 78 65 63 75 74 69 |..KeDela|yExecuti|
|00001280| 6f 6e 54 68 72 65 61 64 | 00 00 f9 00 49 6e 74 65 |onThread|....Inte|
|00001290| 72 6c 6f 63 6b 65 64 45 | 78 63 68 61 6e 67 65 41 |rlockedE|xchangeA|
|000012a0| 64 64 00 00 b4 03 52 74 | 6c 54 69 6d 65 54 6f 53 |dd....Rt|lTimeToS|
|000012b0| 65 63 6f 6e 64 73 53 69 | 6e 63 65 31 39 37 30 00 |econdsSi|nce1970.|
|000012c0| 78 00 45 78 53 79 73 74 | 65 6d 54 69 6d 65 54 6f |x.ExSyst|emTimeTo|
|000012d0| 4c 6f 63 61 6c 54 69 6d | 65 00 a0 00 46 73 52 74 |LocalTim|e...FsRt|
|000012e0| 6c 44 6f 65 73 4e 61 6d | 65 43 6f 6e 74 61 69 6e |lDoesNam|eContain|
|000012f0| 57 69 6c 64 43 61 72 64 | 73 00 b6 03 52 74 6c 54 |WildCard|s...RtlT|
|00001300| 69 6d 65 54 6f 54 69 6d | 65 46 69 65 6c 64 73 00 |imeToTim|eFields.|
|00001310| b3 03 52 74 6c 54 69 6d | 65 46 69 65 6c 64 73 54 |..RtlTim|eFieldsT|
|00001320| 6f 54 69 6d 65 00 78 04 | 5f 61 6c 6c 64 69 76 00 |oTime.x.|_alldiv.|
|00001330| a6 01 4b 65 42 75 67 43 | 68 65 63 6b 45 78 00 00 |..KeBugC|heckEx..|
|00001340| b4 01 4b 65 47 65 74 43 | 75 72 72 65 6e 74 54 68 |..KeGetC|urrentTh|
|00001350| 72 65 61 64 00 00 03 01 | 49 6f 41 6c 6c 6f 63 61 |read....|IoAlloca|
|00001360| 74 65 49 72 70 00 5c 01 | 49 6f 51 75 65 75 65 54 |teIrp.\.|IoQueueT|
|00001370| 68 72 65 61 64 49 72 70 | 00 00 59 02 4d 6d 50 72 |hreadIrp|..Y.MmPr|
|00001380| 6f 62 65 41 6e 64 4c 6f | 63 6b 50 61 67 65 73 00 |obeAndLo|ckPages.|
|00001390| 04 01 49 6f 41 6c 6c 6f | 63 61 74 65 4d 64 6c 00 |..IoAllo|cateMdl.|
|000013a0| 4c 02 4d 6d 4c 6f 63 6b | 50 61 67 61 62 6c 65 44 |L.MmLock|PagableD|
|000013b0| 61 74 61 53 65 63 74 69 | 6f 6e 00 00 3a 03 52 74 |ataSecti|on..:.Rt|
|000013c0| 6c 45 71 75 61 6c 53 74 | 72 69 6e 67 00 00 7f 02 |lEqualSt|ring....|
|000013d0| 4e 74 43 72 65 61 74 65 | 46 69 6c 65 00 00 83 02 |NtCreate|File....|
|000013e0| 4e 74 44 65 76 69 63 65 | 49 6f 43 6f 6e 74 72 6f |NtDevice|IoContro|
|000013f0| 6c 46 69 6c 65 00 2c 04 | 5a 77 44 65 76 69 63 65 |lFile.,.|ZwDevice|
|00001400| 49 6f 43 6f 6e 74 72 6f | 6c 46 69 6c 65 00 24 04 |IoContro|lFile.$.|
|00001410| 5a 77 43 72 65 61 74 65 | 46 69 6c 65 00 00 97 03 |ZwCreate|File....|
|00001420| 52 74 6c 50 72 65 66 69 | 78 55 6e 69 63 6f 64 65 |RtlPrefi|xUnicode|
|00001430| 53 74 72 69 6e 67 00 00 | 12 01 49 6f 43 68 65 63 |String..|..IoChec|
|00001440| 6b 45 61 42 75 66 66 65 | 72 56 61 6c 69 64 69 74 |kEaBuffe|rValidit|
|00001450| 79 00 13 01 49 6f 43 68 | 65 63 6b 46 75 6e 63 74 |y...IoCh|eckFunct|
|00001460| 69 6f 6e 41 63 63 65 73 | 73 00 c4 00 46 73 52 74 |ionAcces|s...FsRt|
|00001470| 6c 4d 64 6c 57 72 69 74 | 65 43 6f 6d 70 6c 65 74 |lMdlWrit|eComplet|
|00001480| 65 44 65 76 00 00 d5 00 | 46 73 52 74 6c 50 72 65 |eDev....|FsRtlPre|
|00001490| 70 61 72 65 4d 64 6c 57 | 72 69 74 65 44 65 76 00 |pareMdlW|riteDev.|
|000014a0| c1 00 46 73 52 74 6c 4d | 64 6c 52 65 61 64 43 6f |..FsRtlM|dlReadCo|
|000014b0| 6d 70 6c 65 74 65 44 65 | 76 00 c2 00 46 73 52 74 |mpleteDe|v...FsRt|
|000014c0| 6c 4d 64 6c 52 65 61 64 | 44 65 76 00 37 01 49 6f |lMdlRead|Dev.7.Io|
|000014d0| 47 65 74 42 61 73 65 46 | 69 6c 65 53 79 73 74 65 |GetBaseF|ileSyste|
|000014e0| 6d 44 65 76 69 63 65 4f | 62 6a 65 63 74 00 91 04 |mDeviceO|bject...|
|000014f0| 5f 77 63 73 69 63 6d 70 | 00 00 9c 02 4e 74 52 65 |_wcsicmp|....NtRe|
|00001500| 71 75 65 73 74 57 61 69 | 74 52 65 70 6c 79 50 6f |questWai|tReplyPo|
|00001510| 72 74 00 00 8c 03 52 74 | 6c 4e 74 53 74 61 74 75 |rt....Rt|lNtStatu|
|00001520| 73 54 6f 44 6f 73 45 72 | 72 6f 72 4e 6f 54 65 62 |sToDosEr|rorNoTeb|
|00001530| 00 00 7e 01 49 6f 53 65 | 74 54 68 72 65 61 64 48 |..~.IoSe|tThreadH|
|00001540| 61 72 64 45 72 72 6f 72 | 4d 6f 64 65 00 00 72 03 |ardError|Mode..r.|
|00001550| 52 74 6c 49 6e 74 65 67 | 65 72 54 6f 55 6e 69 63 |RtlInteg|erToUnic|
|00001560| 6f 64 65 53 74 72 69 6e | 67 00 10 01 49 6f 43 61 |odeStrin|g...IoCa|
|00001570| 6e 63 65 6c 49 72 70 00 | bd 04 77 63 73 63 70 79 |ncelIrp.|..wcscpy|
|00001580| 00 00 67 03 52 74 6c 49 | 6e 69 74 53 74 72 69 6e |..g.RtlI|nitStrin|
|00001590| 67 00 95 01 49 6f 57 72 | 69 74 65 54 72 61 6e 73 |g...IoWr|iteTrans|
|000015a0| 66 65 72 43 6f 75 6e 74 | 00 00 94 01 49 6f 57 72 |ferCount|....IoWr|
|000015b0| 69 74 65 4f 70 65 72 61 | 74 69 6f 6e 43 6f 75 6e |iteOpera|tionCoun|
|000015c0| 74 00 61 01 49 6f 52 65 | 61 64 54 72 61 6e 73 66 |t.a.IoRe|adTransf|
|000015d0| 65 72 43 6f 75 6e 74 00 | 60 01 49 6f 52 65 61 64 |erCount.|`.IoRead|
|000015e0| 4f 70 65 72 61 74 69 6f | 6e 43 6f 75 6e 74 00 00 |Operatio|nCount..|
|000015f0| 84 01 49 6f 53 74 61 74 | 69 73 74 69 63 73 4c 6f |..IoStat|isticsLo|
|00001600| 63 6b 00 00 bb 04 77 63 | 73 63 68 72 00 00 89 04 |ck....wc|schr....|
|00001610| 5f 73 74 72 69 63 6d 70 | 00 00 9c 03 52 74 6c 52 |_stricmp|....RtlR|
|00001620| 61 6e 64 6f 6d 00 2f 01 | 49 6f 46 61 73 74 51 75 |andom./.|IoFastQu|
|00001630| 65 72 79 4e 65 74 77 6f | 72 6b 41 74 74 72 69 62 |eryNetwo|rkAttrib|
|00001640| 75 74 65 73 00 00 a1 03 | 52 74 6c 53 65 63 6f 6e |utes....|RtlSecon|
|00001650| 64 73 53 69 6e 63 65 31 | 39 37 30 54 6f 54 69 6d |dsSince1|970ToTim|
|00001660| 65 00 14 01 49 6f 43 68 | 65 63 6b 51 75 65 72 79 |e...IoCh|eckQuery|
|00001670| 53 65 74 46 69 6c 65 49 | 6e 66 6f 72 6d 61 74 69 |SetFileI|nformati|
|00001680| 6f 6e 00 00 d0 03 52 74 | 6c 55 70 63 61 73 65 55 |on....Rt|lUpcaseU|
|00001690| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 4f 65 |nicodeSt|ringToOe|
|000016a0| 6d 53 74 72 69 6e 67 00 | 50 03 52 74 6c 46 72 65 |mString.|P.RtlFre|
|000016b0| 65 41 6e 73 69 53 74 72 | 69 6e 67 00 15 01 49 6f |eAnsiStr|ing...Io|
|000016c0| 43 68 65 63 6b 51 75 65 | 72 79 53 65 74 56 6f 6c |CheckQue|rySetVol|
|000016d0| 75 6d 65 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 00 00 |umeInfor|mation..|
|000016e0| a4 02 4e 74 53 65 74 56 | 6f 6c 75 6d 65 49 6e 66 |..NtSetV|olumeInf|
|000016f0| 6f 72 6d 61 74 69 6f 6e | 46 69 6c 65 00 00 7c 04 |ormation|File..|.|
|00001700| 5f 61 6c 6c 73 68 72 00 | a3 02 4e 74 53 65 74 53 |_allshr.|..NtSetS|
|00001710| 65 63 75 72 69 74 79 4f | 62 6a 65 63 74 00 d7 03 |ecurityO|bject...|
|00001720| 52 74 6c 56 61 6c 69 64 | 52 65 6c 61 74 69 76 65 |RtlValid|Relative|
|00001730| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|00001740| 6f 72 00 00 97 02 4e 74 | 51 75 65 72 79 53 65 63 |or....Nt|QuerySec|
|00001750| 75 72 69 74 79 4f 62 6a | 65 63 74 00 96 02 4e 74 |urityObj|ect...Nt|
|00001760| 51 75 65 72 79 51 75 6f | 74 61 49 6e 66 6f 72 6d |QueryQuo|taInform|
|00001770| 61 74 69 6f 6e 46 69 6c | 65 00 a2 02 4e 74 53 65 |ationFil|e...NtSe|
|00001780| 74 51 75 6f 74 61 49 6e | 66 6f 72 6d 61 74 69 6f |tQuotaIn|formatio|
|00001790| 6e 46 69 6c 65 00 48 01 | 49 6f 47 65 74 53 74 61 |nFile.H.|IoGetSta|
|000017a0| 63 6b 4c 69 6d 69 74 73 | 00 00 59 03 52 74 6c 47 |ckLimits|..Y.RtlG|
|000017b0| 65 74 43 6f 6d 70 72 65 | 73 73 69 6f 6e 57 6f 72 |etCompre|ssionWor|
|000017c0| 6b 53 70 61 63 65 53 69 | 7a 65 00 00 63 02 4d 6d |kSpaceSi|ze..c.Mm|
|000017d0| 53 69 7a 65 4f 66 4d 64 | 6c 00 24 03 52 74 6c 44 |SizeOfMd|l.$.RtlD|
|000017e0| 65 63 6f 6d 70 72 65 73 | 73 43 68 75 6e 6b 73 00 |ecompres|sChunks.|
|000017f0| bc 04 77 63 73 63 6d 70 | 00 00 65 03 52 74 6c 49 |..wcscmp|..e.RtlI|
|00001800| 6e 69 74 41 6e 73 69 53 | 74 72 69 6e 67 00 b3 00 |nitAnsiS|tring...|
|00001810| 46 73 52 74 6c 49 73 46 | 61 74 44 62 63 73 4c 65 |FsRtlIsF|atDbcsLe|
|00001820| 67 61 6c 00 75 03 52 74 | 6c 49 73 4e 61 6d 65 4c |gal.u.Rt|lIsNameL|
|00001830| 65 67 61 6c 44 4f 53 38 | 44 6f 74 33 00 00 75 02 |egalDOS8|Dot3..u.|
|00001840| 4e 6c 73 4f 65 6d 4c 65 | 61 64 42 79 74 65 49 6e |NlsOemLe|adByteIn|
|00001850| 66 6f 00 00 72 02 4e 6c | 73 4d 62 43 6f 64 65 50 |fo..r.Nl|sMbCodeP|
|00001860| 61 67 65 54 61 67 00 00 | ca 03 52 74 6c 55 6e 69 |ageTag..|..RtlUni|
|00001870| 63 6f 64 65 54 6f 4f 65 | 6d 4e 00 00 d3 03 52 74 |codeToOe|mN....Rt|
|00001880| 6c 55 70 63 61 73 65 55 | 6e 69 63 6f 64 65 54 6f |lUpcaseU|nicodeTo|
|00001890| 4f 65 6d 4e 00 00 ad 01 | 4b 65 44 65 74 61 63 68 |OemN....|KeDetach|
|000018a0| 50 72 6f 63 65 73 73 00 | a4 01 4b 65 41 74 74 61 |Process.|..KeAtta|
|000018b0| 63 68 50 72 6f 63 65 73 | 73 00 d1 02 50 73 41 73 |chProces|s...PsAs|
|000018c0| 73 69 67 6e 49 6d 70 65 | 72 73 6f 6e 61 74 69 6f |signImpe|rsonatio|
|000018d0| 6e 54 6f 6b 65 6e 00 00 | f5 03 53 65 46 72 65 65 |nToken..|..SeFree|
|000018e0| 50 72 69 76 69 6c 65 67 | 65 73 00 00 85 03 52 74 |Privileg|es....Rt|
|000018f0| 6c 4d 61 70 47 65 6e 65 | 72 69 63 4d 61 73 6b 00 |lMapGene|ricMask.|
|00001900| 93 04 5f 77 63 73 6e 69 | 63 6d 70 00 43 02 4d 6d |.._wcsni|cmp.C.Mm|
|00001910| 47 65 74 53 79 73 74 65 | 6d 52 6f 75 74 69 6e 65 |GetSyste|mRoutine|
|00001920| 41 64 64 72 65 73 73 00 | d6 01 4b 65 4e 75 6d 62 |Address.|..KeNumb|
|00001930| 65 72 50 72 6f 63 65 73 | 73 6f 72 73 00 00 b5 03 |erProces|sors....|
|00001940| 52 74 6c 54 69 6d 65 54 | 6f 53 65 63 6f 6e 64 73 |RtlTimeT|oSeconds|
|00001950| 53 69 6e 63 65 31 39 38 | 30 00 d8 03 52 74 6c 56 |Since198|0...RtlV|
|00001960| 61 6c 69 64 53 65 63 75 | 72 69 74 79 44 65 73 63 |alidSecu|rityDesc|
|00001970| 72 69 70 74 6f 72 00 00 | 4b 02 4d 6d 49 73 54 68 |riptor..|K.MmIsTh|
|00001980| 69 73 41 6e 4e 74 41 73 | 53 79 73 74 65 6d 00 00 |isAnNtAs|System..|
|00001990| d4 02 50 73 43 72 65 61 | 74 65 53 79 73 74 65 6d |..PsCrea|teSystem|
|000019a0| 54 68 72 65 61 64 00 00 | fd 01 4b 65 53 65 74 49 |Thread..|..KeSetI|
|000019b0| 64 65 61 6c 50 72 6f 63 | 65 73 73 6f 72 54 68 72 |dealProc|essorThr|
|000019c0| 65 61 64 00 a1 02 4e 74 | 53 65 74 49 6e 66 6f 72 |ead...Nt|SetInfor|
|000019d0| 6d 61 74 69 6f 6e 54 68 | 72 65 61 64 00 00 ef 01 |mationTh|read....|
|000019e0| 4b 65 52 65 6d 6f 76 65 | 51 75 65 75 65 00 ee 02 |KeRemove|Queue...|
|000019f0| 50 73 54 65 72 6d 69 6e | 61 74 65 53 79 73 74 65 |PsTermin|ateSyste|
|00001a00| 6d 54 68 72 65 61 64 00 | 1e 03 52 74 6c 43 72 65 |mThread.|..RtlCre|
|00001a10| 61 74 65 48 65 61 70 00 | 7d 02 4e 74 43 6f 6e 6e |ateHeap.|}.NtConn|
|00001a20| 65 63 74 50 6f 72 74 00 | 80 02 4e 74 43 72 65 61 |ectPort.|..NtCrea|
|00001a30| 74 65 53 65 63 74 69 6f | 6e 00 30 03 52 74 6c 44 |teSectio|n.0.RtlD|
|00001a40| 65 73 74 72 6f 79 48 65 | 61 70 00 00 fb 02 52 74 |estroyHe|ap....Rt|
|00001a50| 6c 41 6c 6c 6f 63 61 74 | 65 48 65 61 70 00 51 03 |lAllocat|eHeap.Q.|
|00001a60| 52 74 6c 46 72 65 65 48 | 65 61 70 00 6e 74 6f 73 |RtlFreeH|eap.ntos|
|00001a70| 6b 72 6e 6c 2e 65 78 65 | 00 00 52 00 4b 66 52 65 |krnl.exe|..R.KfRe|
|00001a80| 6c 65 61 73 65 53 70 69 | 6e 4c 6f 63 6b 00 4f 00 |leaseSpi|nLock.O.|
|00001a90| 4b 66 41 63 71 75 69 72 | 65 53 70 69 6e 4c 6f 63 |KfAcquir|eSpinLoc|
|00001aa0| 6b 00 50 00 4b 66 4c 6f | 77 65 72 49 72 71 6c 00 |k.P.KfLo|werIrql.|
|00001ab0| 51 00 4b 66 52 61 69 73 | 65 49 72 71 6c 00 44 00 |Q.KfRais|eIrql.D.|
|00001ac0| 4b 65 47 65 74 43 75 72 | 72 65 6e 74 49 72 71 6c |KeGetCur|rentIrql|
|00001ad0| 00 00 48 41 4c 2e 64 6c | 6c 00 2d 00 54 64 69 52 |..HAL.dl|l.-.TdiR|
|00001ae0| 65 67 69 73 74 65 72 50 | 6e 50 48 61 6e 64 6c 65 |egisterP|nPHandle|
|00001af0| 72 73 00 00 1e 00 54 64 | 69 44 65 72 65 67 69 73 |rs....Td|iDeregis|
|00001b00| 74 65 72 50 6e 50 48 61 | 6e 64 6c 65 72 73 00 00 |terPnPHa|ndlers..|
|00001b10| 25 00 54 64 69 4f 70 65 | 6e 4e 65 74 62 69 6f 73 |%.TdiOpe|nNetbios|
|00001b20| 41 64 64 72 65 73 73 00 | 2f 00 54 64 69 52 65 74 |Address.|/.TdiRet|
|00001b30| 75 72 6e 43 68 61 69 6e | 65 64 52 65 63 65 69 76 |urnChain|edReceiv|
|00001b40| 65 73 00 00 0e 00 54 64 | 69 43 6f 70 79 42 75 66 |es....Td|iCopyBuf|
|00001b50| 66 65 72 54 6f 4d 64 6c | 00 00 54 44 49 2e 53 59 |ferToMdl|..TDI.SY|
|00001b60| 53 00 04 00 44 65 6c 65 | 74 65 53 65 63 75 72 69 |S...Dele|teSecuri|
|00001b70| 74 79 43 6f 6e 74 65 78 | 74 00 17 00 4d 61 70 53 |tyContex|t...MapS|
|00001b80| 65 63 75 72 69 74 79 45 | 72 72 6f 72 00 00 00 00 |ecurityE|rror....|
|00001b90| 41 63 63 65 70 74 53 65 | 63 75 72 69 74 79 43 6f |AcceptSe|curityCo|
|00001ba0| 6e 74 65 78 74 00 0e 00 | 49 6d 70 65 72 73 6f 6e |ntext...|Imperson|
|00001bb0| 61 74 65 53 65 63 75 72 | 69 74 79 43 6f 6e 74 65 |ateSecur|ityConte|
|00001bc0| 78 74 00 00 09 00 46 72 | 65 65 43 6f 6e 74 65 78 |xt....Fr|eeContex|
|00001bd0| 74 42 75 66 66 65 72 00 | 18 00 51 75 65 72 79 43 |tBuffer.|..QueryC|
|00001be0| 6f 6e 74 65 78 74 41 74 | 74 72 69 62 75 74 65 73 |ontextAt|tributes|
|00001bf0| 57 00 01 00 41 63 71 75 | 69 72 65 43 72 65 64 65 |W...Acqu|ireCrede|
|00001c00| 6e 74 69 61 6c 73 48 61 | 6e 64 6c 65 57 00 02 00 |ntialsHa|ndleW...|
|00001c10| 41 64 64 43 72 65 64 65 | 6e 74 69 61 6c 73 57 00 |AddCrede|ntialsW.|
|00001c20| 10 00 49 6e 69 74 53 65 | 63 75 72 69 74 79 49 6e |..InitSe|curityIn|
|00001c30| 74 65 72 66 61 63 65 57 | 00 00 13 00 4b 53 65 63 |terfaceW|....KSec|
|00001c40| 56 61 6c 69 64 61 74 65 | 42 75 66 66 65 72 00 00 |Validate|Buffer..|
|00001c50| 6b 73 65 63 64 64 2e 73 | 79 73 00 00 3a 00 45 78 |ksecdd.s|ys..:.Ex|
|00001c60| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|00001c70| 54 61 67 00 f1 01 4b 65 | 52 65 73 65 74 45 76 65 |Tag...Ke|ResetEve|
|00001c80| 6e 74 00 00 23 04 5a 77 | 43 72 65 61 74 65 45 76 |nt..#.Zw|CreateEv|
|00001c90| 65 6e 74 00 3b 04 5a 77 | 4d 61 70 56 69 65 77 4f |ent.;.Zw|MapViewO|
|00001ca0| 66 53 65 63 74 69 6f 6e | 00 00 26 04 5a 77 43 72 |fSection|..&.ZwCr|
|00001cb0| 65 61 74 65 53 65 63 74 | 69 6f 6e 00 64 04 5a 77 |eateSect|ion.d.Zw|
|00001cc0| 53 65 74 45 76 65 6e 74 | 00 00 ea 01 4b 65 52 65 |SetEvent|....KeRe|
|00001cd0| 6c 65 61 73 65 53 65 6d | 61 70 68 6f 72 65 00 00 |leaseSem|aphore..|
|00001ce0| 7e 00 45 78 66 49 6e 74 | 65 72 6c 6f 63 6b 65 64 |~.ExfInt|erlocked|
|00001cf0| 49 6e 73 65 72 74 54 61 | 69 6c 4c 69 73 74 00 00 |InsertTa|ilList..|
|00001d00| 12 02 4b 65 57 61 69 74 | 46 6f 72 4d 75 6c 74 69 |..KeWait|ForMulti|
|00001d10| 70 6c 65 4f 62 6a 65 63 | 74 73 00 00 c9 01 4b 65 |pleObjec|ts....Ke|
|00001d20| 49 6e 69 74 69 61 6c 69 | 7a 65 53 65 6d 61 70 68 |Initiali|zeSemaph|
|00001d30| 6f 72 65 00 74 04 5a 77 | 57 61 69 74 46 6f 72 53 |ore.t.Zw|WaitForS|
|00001d40| 69 6e 67 6c 65 4f 62 6a | 65 63 74 00 00 00 00 00 |ingleObj|ect.....|
|00001d50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+