H4CK3R 14

home *** CD-ROM | disk | FTP | other *** search
/ H4CK3R 14 / hacker14.iso / patches / kb8176 / WindowsXP_en-sp2_KB817606.exe / sp1 / srv.sys / INIT next >
Unknown | 2003-03-28 | 7.8 KB
open in:
MacOS 8.1 |
Win98 |
DOS
view JSON data |
view as text

This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence	Program	Detection	Match Type	Support
`100%`	file	data	default
`100%`	gt2	Kopftext: 'SrvFsdInitialize'	default (weak)
hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 53 72 76 46 73 64 49 6e | 69 74 69 61 6c 69 7a 65 |SrvFsdIn|itialize|
|00000010| 3a 20 55 6e 61 62 6c 65 | 20 74 6f 20 63 72 65 61 |: Unable| to crea|
|00000020| 74 65 20 64 65 76 69 63 | 65 20 6f 62 6a 65 63 74 |te devic|e object|
|00000030| 3a 20 25 58 00 00 00 00 | 0a 00 55 8b ec 53 56 57 |: %X....|..U..SVW|
|00000040| ff 35 a0 ed 01 00 be 80 | 06 02 00 56 ff 15 30 d3 |.5......|...V..0.|
|00000050| 01 00 68 b0 f2 01 00 33 | db 53 53 6a 12 56 8b 75 |..h....3|.SSj.V.u|
|00000060| 08 6a 28 56 ff 15 e0 d0 | 01 00 8b f8 3b fb 89 7d |.j(V....|....;..}|
|00000070| 08 7d 49 83 3d 4c f0 01 | 00 02 72 2c f6 05 50 f0 |.}I.=L..|..r,..P.|
|00000080| 01 00 01 74 23 ff 15 90 | cf 01 00 3c 02 73 19 53 |...t#...|...<.s.S|
|00000090| 57 68 80 80 05 00 e8 fd | 44 fc ff 68 b8 80 05 00 |Wh......|D..h....|
|000000a0| e8 f3 44 fc ff 83 c4 10 | 53 53 53 53 57 68 d2 07 |..D.....|SSSSWh..|
|000000b0| 00 c0 56 e8 70 f0 fb ff | 8b c7 eb 62 6a 1c 59 b8 |..V.p...|...bj.Y.|
|000000c0| 8a 2f 03 00 c7 46 34 ea | ce 03 00 8d 7e 38 f3 ab |./...F4.|....~8..|
|000000d0| e8 51 00 00 00 8b 75 0c | 66 8b 06 66 05 02 00 66 |.Q....u.|f..f...f|
|000000e0| a3 7a 06 02 00 0f b7 c0 | 68 49 66 73 20 50 6a 01 |.z......|hIfs Pj.|
|000000f0| ff 15 04 d3 01 00 3b c3 | a3 7c 06 02 00 74 0e 56 |......;.|.|...t.V|
|00000100| 68 78 06 02 00 ff 15 34 | d0 01 00 eb 0e 66 89 1d |hx.....4|.....f..|
|00000110| 7a 06 02 00 66 89 1d 78 | 06 02 00 8b 45 08 5f 5e |z...f..x|....E._^|
|00000120| 5b 5d c2 08 00 cc 83 ec | 10 53 55 56 57 6a 28 59 |[]......|.SUVWj(Y|
|00000130| 33 c0 bf 70 fe 01 00 c6 | 05 b6 f2 01 00 01 f3 ab |3..p....|........|
|00000140| ff 15 44 d0 01 00 8b 35 | 6c d0 01 00 a3 b8 f2 01 |..D....5|l.......|
|00000150| 00 a1 a8 d2 01 00 0f be | 00 33 db 53 6a 01 68 c4 |........|.3.Sj.h.|
|00000160| f2 01 00 a3 b4 f4 01 00 | ff d6 53 6a 01 68 d8 00 |........|..Sj.h..|
|00000170| 02 00 ff d6 8b 2d f4 d2 | 01 00 68 f4 f2 01 00 ff |.....-..|..h.....|
|00000180| d5 68 94 f3 01 00 ff d5 | 8b 35 f8 d2 01 00 68 d4 |.h......|.5....h.|
|00000190| f3 01 00 ff d6 68 0c f4 | 01 00 ff d6 68 44 f4 01 |.....h..|....hD..|
|000001a0| 00 ff d6 bf 20 03 02 00 | 89 7c 24 10 c7 44 24 14 |.... ...|.|$..D$.|
|000001b0| 0a 00 00 00 ff 74 24 10 | ff d6 83 44 24 10 38 ff |.....t$.|...D$.8.|
|000001c0| 4c 24 14 75 ef 68 7c f4 | 01 00 ff d6 68 08 01 02 |L$.u.h|.|....h...|
|000001d0| 00 ff d6 68 6c ff 01 00 | ff d6 b8 14 f7 01 00 a3 |...hl...|........|
|000001e0| 18 f7 01 00 a3 14 f7 01 | 00 b8 1c f7 01 00 a3 20 |........|....... |
|000001f0| f7 01 00 a3 1c f7 01 00 | b8 30 f7 01 00 a3 34 f7 |........|.0....4.|
|00000200| 01 00 a3 30 f7 01 00 89 | 1d 28 f7 01 00 89 1d 2c |...0....|.(.....,|
|00000210| f7 01 00 89 1d e8 01 02 | 00 89 1d ec 01 02 00 c7 |........|........|
|00000220| 05 48 f7 01 00 78 52 01 | 00 89 1d 4c f7 01 00 89 |.H...xR.|...L....|
|00000230| 1d 40 f7 01 00 33 c9 b8 | 98 f7 01 00 c7 44 24 14 |.@...3..|.....D$.|
|00000240| 83 00 00 00 8b d1 6b d2 | 38 03 d7 41 83 f9 0a 89 |......k.|8..A....|
|00000250| 40 04 89 00 89 50 08 75 | 02 33 c9 83 c0 0c ff 4c |@....P.u|.3.....L|
|00000260| 24 14 75 e0 6a 11 b8 c0 | fd 01 00 59 89 40 04 89 |$.u.j...|...Y.@..|
|00000270| 00 83 c0 08 49 75 f5 68 | 18 00 02 00 ff d6 68 b0 |....Iu.h|......h.|
|00000280| 01 02 00 88 1d 6c 00 02 | 00 88 1d 8c 00 02 00 88 |.....l..|........|
|00000290| 1d ac 00 02 00 88 1d cc | 00 02 00 ff d6 ff 35 84 |........|......5.|
|000002a0| ed 01 00 b8 00 01 02 00 | a3 04 01 02 00 a3 00 01 |........|........|
|000002b0| 02 00 b8 40 01 02 00 a3 | 44 01 02 00 a3 40 01 02 |...@....|D....@..|
|000002c0| 00 8d 44 24 1c 50 c7 05 | 4c 01 02 00 02 00 00 00 |..D$.P..|L.......|
|000002d0| 88 1d 50 01 02 00 88 1d | 51 01 02 00 ff 15 f4 d1 |..P.....|Q.......|
|000002e0| 01 00 6a 01 8d 44 24 1c | 50 68 58 fe 01 00 ff 15 |..j..D$.|PhX.....|
|000002f0| 20 d3 01 00 ff 35 70 ed | 01 00 8b 35 30 d3 01 00 | ....5p.|...50...|
|00000300| 68 60 fe 01 00 ff d6 ff | 35 74 ed 01 00 68 68 fe |h`......|5t...hh.|
|00000310| 01 00 ff d6 ff 35 14 f0 | 01 00 68 2c ff 01 00 ff |.....5..|..h,....|
|00000320| d6 ff 35 18 f0 01 00 68 | 34 ff 01 00 ff 15 74 d2 |..5....h|4.....t.|
|00000330| 01 00 68 30 00 df ff 68 | 3c ff 01 00 ff d6 c7 05 |..h0...h|<.......|
|00000340| 60 01 02 00 b9 0b 00 00 | c7 05 70 01 02 00 ba 0b |`.......|..p.....|
|00000350| 00 00 bf c0 ff 01 00 ff | 34 9d c0 ef 01 00 57 ff |........|4.....W.|
|00000360| d6 43 83 c7 08 83 fb 07 | 76 ed 6a 0b 59 3b d9 73 |.C......|v.j.Y;.s|
|00000370| 16 2b cb 8d 3c dd c0 ff | 01 00 d1 e1 8d 77 f8 81 |.+..<...|.....w..|
|00000380| e1 fe ff ff 3f f3 a5 68 | b4 f3 01 00 ff d5 6a 04 |....?..h|......j.|
|00000390| be 14 f3 01 00 5f 56 ff | d5 83 c6 20 4f 75 f7 ff |....._V.|... Ou..|
|000003a0| 15 a4 d2 01 00 83 f8 08 | 5f 5e 5d 5b 73 03 6a 08 |........|_^][s.j.|
|000003b0| 58 48 a3 d4 f2 01 00 ff | 15 08 d1 01 00 8b c8 b8 |XH......|........|
|000003c0| 80 f0 fa 02 33 d2 f7 f1 | a3 f4 01 02 00 83 c4 10 |....3...|........|
|000003d0| c3 cc cc cc 34 85 04 00 | 00 00 00 00 00 00 00 00 |....4...|........|
|000003e0| fe 9b 04 00 e8 cf 00 00 | cc 84 04 00 00 00 00 00 |........|........|
|000003f0| 00 00 00 00 78 9c 04 00 | 80 cf 00 00 fc 84 04 00 |....x...|........|
|00000400| 00 00 00 00 00 00 00 00 | aa 9c 04 00 b0 cf 00 00 |........|........|
|00000410| e4 84 04 00 00 00 00 00 | 00 00 00 00 36 9d 04 00 |........|....6...|
|00000420| 98 cf 00 00 08 85 04 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000430| 2c 9e 04 00 bc cf 00 00 | 00 00 00 00 00 00 00 00 |,.......|........|
|00000440| 00 00 00 00 00 00 00 00 | 00 00 00 00 34 9c 04 00 |........|....4...|
|00000450| 48 9c 04 00 5c 9c 04 00 | 6a 9c 04 00 20 9c 04 00 |H...\...|j... ...|
|00000460| 00 00 00 00 b6 9c 04 00 | d2 9c 04 00 ec 9c 04 00 |........|........|
|00000470| 04 9d 04 00 20 9d 04 00 | 00 00 00 00 96 9c 04 00 |.... ...|........|
|00000480| 80 9c 04 00 00 00 00 00 | 84 9d 04 00 70 9d 04 00 |........|....p...|
|00000490| 5c 9d 04 00 3e 9d 04 00 | 9e 9d 04 00 b6 9d 04 00 |\...>...|........|
|000004a0| d2 9d 04 00 e4 9d 04 00 | fc 9d 04 00 16 9e 04 00 |........|........|
|000004b0| 00 00 00 00 4a 8b 04 00 | 62 8b 04 00 84 8b 04 00 |....J...|b.......|
|000004c0| a4 8b 04 00 be 8b 04 00 | d6 8b 04 00 e4 8b 04 00 |........|........|
|000004d0| fc 8b 04 00 1a 8c 04 00 | 3c 8c 04 00 5c 8c 04 00 |........|<...\...|
|000004e0| 7a 8c 04 00 98 8c 04 00 | b6 8c 04 00 d4 8c 04 00 |z.......|........|
|000004f0| ea 8c 04 00 f8 8c 04 00 | 14 8d 04 00 20 8d 04 00 |........|.... ...|
|00000500| 38 8d 04 00 50 8d 04 00 | 64 8d 04 00 7e 8d 04 00 |8...P...|d...~...|
|00000510| 96 8d 04 00 ac 8d 04 00 | b6 8d 04 00 c8 8d 04 00 |........|........|
|00000520| d4 8d 04 00 e0 8d 04 00 | ee 8d 04 00 08 8e 04 00 |........|........|
|00000530| 26 8e 04 00 46 8e 04 00 | 5a 8e 04 00 6e 8e 04 00 |&...F...|Z...n...|
|00000540| 86 8e 04 00 9a 8e 04 00 | aa 8e 04 00 b8 8e 04 00 |........|........|
|00000550| c8 8e 04 00 e2 8e 04 00 | f4 8e 04 00 fe 8e 04 00 |........|........|
|00000560| 1a 8f 04 00 2c 8f 04 00 | 3c 8f 04 00 4a 8f 04 00 |....,...|<...J...|
|00000570| 58 8f 04 00 70 8f 04 00 | 8c 8f 04 00 a8 8f 04 00 |X...p...|........|
|00000580| b8 8f 04 00 c2 8f 04 00 | d2 8f 04 00 ea 8f 04 00 |........|........|
|00000590| 04 90 04 00 16 90 04 00 | 28 90 04 00 3e 90 04 00 |........|(...>...|
|000005a0| 56 90 04 00 6e 90 04 00 | 82 90 04 00 92 90 04 00 |V...n...|........|
|000005b0| a4 90 04 00 b2 90 04 00 | c4 90 04 00 da 90 04 00 |........|........|
|000005c0| ec 90 04 00 02 91 04 00 | 16 91 04 00 36 91 04 00 |........|....6...|
|000005d0| 46 91 04 00 62 91 04 00 | 7a 91 04 00 84 91 04 00 |F...b...|z.......|
|000005e0| 9e 91 04 00 aa 91 04 00 | b6 91 04 00 ca 91 04 00 |........|........|
|000005f0| da 91 04 00 f0 91 04 00 | 04 92 04 00 1e 92 04 00 |........|........|
|00000600| 3c 92 04 00 5c 92 04 00 | 7c 92 04 00 8e 92 04 00 |<...\...||.......|
|00000610| a8 92 04 00 c0 92 04 00 | ca 92 04 00 ea 92 04 00 |........|........|
|00000620| 0a 93 04 00 24 93 04 00 | 34 93 04 00 44 93 04 00 |....$...|4...D...|
|00000630| 5a 93 04 00 6e 93 04 00 | 32 8b 04 00 a4 93 04 00 |Z...n...|2.......|
|00000640| b8 93 04 00 ca 93 04 00 | da 93 04 00 f0 93 04 00 |........|........|
|00000650| 0a 94 04 00 20 94 04 00 | 2a 94 04 00 3a 94 04 00 |.... ...|*...:...|
|00000660| 56 94 04 00 76 94 04 00 | 8c 94 04 00 9c 94 04 00 |V...v...|........|
|00000670| b0 94 04 00 c6 94 04 00 | d6 94 04 00 f2 94 04 00 |........|........|
|00000680| 04 95 04 00 14 95 04 00 | 2c 95 04 00 44 95 04 00 |........|,...D...|
|00000690| 54 95 04 00 60 95 04 00 | 78 95 04 00 94 95 04 00 |T...`...|x.......|
|000006a0| ae 95 04 00 c8 95 04 00 | da 95 04 00 fc 95 04 00 |........|........|
|000006b0| 16 96 04 00 30 96 04 00 | 4a 96 04 00 68 96 04 00 |....0...|J...h...|
|000006c0| 76 96 04 00 86 96 04 00 | 9e 96 04 00 b6 96 04 00 |v.......|........|
|000006d0| cc 96 04 00 e4 96 04 00 | f8 96 04 00 02 97 04 00 |........|........|
|000006e0| 1e 97 04 00 38 97 04 00 | 54 97 04 00 5e 97 04 00 |....8...|T...^...|
|000006f0| 6a 97 04 00 76 97 04 00 | 96 97 04 00 b2 97 04 00 |j...v...|........|
|00000700| d4 97 04 00 f8 97 04 00 | 0c 98 04 00 30 98 04 00 |........|....0...|
|00000710| 4e 98 04 00 58 98 04 00 | 6e 98 04 00 94 98 04 00 |N...X...|n.......|
|00000720| ac 98 04 00 ca 98 04 00 | e6 98 04 00 fa 98 04 00 |........|........|
|00000730| 18 99 04 00 2e 99 04 00 | 3c 99 04 00 5e 99 04 00 |........|<...^...|
|00000740| 68 99 04 00 7c 99 04 00 | 92 99 04 00 ac 99 04 00 |h...|...|........|
|00000750| c2 99 04 00 d6 99 04 00 | f0 99 04 00 02 9a 04 00 |........|........|
|00000760| 14 9a 04 00 32 9a 04 00 | 46 9a 04 00 5a 9a 04 00 |....2...|F...Z...|
|00000770| 6c 9a 04 00 92 9a 04 00 | a8 9a 04 00 b6 9a 04 00 |l.......|........|
|00000780| c0 9a 04 00 dc 9a 04 00 | f4 9a 04 00 0a 9b 04 00 |........|........|
|00000790| 22 9b 04 00 3a 9b 04 00 | 56 9b 04 00 70 9b 04 00 |"...:...|V...p...|
|000007a0| 8a 9b 04 00 9a 9b 04 00 | ac 9b 04 00 be 9b 04 00 |........|........|
|000007b0| cc 9b 04 00 dc 9b 04 00 | ec 9b 04 00 0c 9c 04 00 |........|........|
|000007c0| 1a 8b 04 00 fe 8a 04 00 | e2 8a 04 00 ca 8a 04 00 |........|........|
|000007d0| b2 8a 04 00 a6 8a 04 00 | 92 8a 04 00 78 8a 04 00 |........|....x...|
|000007e0| 64 8a 04 00 50 8a 04 00 | 30 8a 04 00 10 8a 04 00 |d...P...|0.......|
|000007f0| f6 89 04 00 e0 89 04 00 | c6 89 04 00 ae 89 04 00 |........|........|
|00000800| 94 89 04 00 7c 89 04 00 | 64 89 04 00 44 89 04 00 |....|...|d...D...|
|00000810| 2a 89 04 00 10 89 04 00 | 00 89 04 00 e6 88 04 00 |*.......|........|
|00000820| 86 93 04 00 d4 88 04 00 | 38 9e 04 00 46 9e 04 00 |........|8...F...|
|00000830| 5e 9e 04 00 6e 9e 04 00 | 8a 9e 04 00 a2 9e 04 00 |^...n...|........|
|00000840| b2 9e 04 00 c8 9e 04 00 | da 9e 04 00 f0 9e 04 00 |........|........|
|00000850| 00 00 00 00 e1 04 57 6d | 69 54 72 61 63 65 4d 65 |......Wm|iTraceMe|
|00000860| 73 73 61 67 65 00 c2 04 | 53 65 52 65 6c 65 61 73 |ssage...|SeReleas|
|00000870| 65 53 75 62 6a 65 63 74 | 43 6f 6e 74 65 78 74 00 |eSubject|Context.|
|00000880| 9f 04 53 65 41 63 63 65 | 73 73 43 68 65 63 6b 00 |..SeAcce|ssCheck.|
|00000890| a8 04 53 65 43 61 70 74 | 75 72 65 53 75 62 6a 65 |..SeCapt|ureSubje|
|000008a0| 63 74 43 6f 6e 74 65 78 | 74 00 cd 04 53 65 55 6e |ctContex|t...SeUn|
|000008b0| 6c 6f 63 6b 53 75 62 6a | 65 63 74 43 6f 6e 74 65 |lockSubj|ectConte|
|000008c0| 78 74 00 00 bc 04 53 65 | 51 75 65 72 79 41 75 74 |xt....Se|QueryAut|
|000008d0| 68 65 6e 74 69 63 61 74 | 69 6f 6e 49 64 54 6f 6b |henticat|ionIdTok|
|000008e0| 65 6e 00 00 b5 04 53 65 | 4c 6f 63 6b 53 75 62 6a |en....Se|LockSubj|
|000008f0| 65 63 74 43 6f 6e 74 65 | 78 74 00 00 f3 03 52 74 |ectConte|xt....Rt|
|00000900| 6c 46 72 65 65 55 6e 69 | 63 6f 64 65 53 74 72 69 |lFreeUni|codeStri|
|00000910| 6e 67 00 00 88 04 52 74 | 6c 55 70 63 61 73 65 55 |ng....Rt|lUpcaseU|
|00000920| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 0b 04 |nicodeSt|ring....|
|00000930| 52 74 6c 49 6e 69 74 55 | 6e 69 63 6f 64 65 53 74 |RtlInitU|nicodeSt|
|00000940| 72 69 6e 67 00 00 87 00 | 45 78 66 49 6e 74 65 72 |ring....|ExfInter|
|00000950| 6c 6f 63 6b 65 64 41 64 | 64 55 6c 6f 6e 67 00 00 |lockedAd|dUlong..|
|00000960| de 02 4e 74 46 72 65 65 | 56 69 72 74 75 61 6c 4d |..NtFree|VirtualM|
|00000970| 65 6d 6f 72 79 00 d1 02 | 4e 74 41 6c 6c 6f 63 61 |emory...|NtAlloca|
|00000980| 74 65 56 69 72 74 75 61 | 6c 4d 65 6d 6f 72 79 00 |teVirtua|lMemory.|
|00000990| 97 03 52 74 6c 41 6e 73 | 69 53 74 72 69 6e 67 54 |..RtlAns|iStringT|
|000009a0| 6f 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |oUnicode|String..|
|000009b0| a2 02 4d 6d 4d 61 70 4c | 6f 63 6b 65 64 50 61 67 |..MmMapL|ockedPag|
|000009c0| 65 73 53 70 65 63 69 66 | 79 43 61 63 68 65 00 00 |esSpecif|yCache..|
|000009d0| a1 02 4d 6d 4d 61 70 4c | 6f 63 6b 65 64 50 61 67 |..MmMapL|ockedPag|
|000009e0| 65 73 00 00 a8 03 52 74 | 6c 43 6f 6d 70 61 72 65 |es....Rt|lCompare|
|000009f0| 4d 65 6d 6f 72 79 00 00 | 6c 00 45 78 4c 6f 63 61 |Memory..|l.ExLoca|
|00000a00| 6c 54 69 6d 65 54 6f 53 | 79 73 74 65 6d 54 69 6d |lTimeToS|ystemTim|
|00000a10| 65 00 4d 00 45 78 46 72 | 65 65 50 6f 6f 6c 57 69 |e.M.ExFr|eePoolWi|
|00000a20| 74 68 54 61 67 00 30 00 | 44 62 67 50 72 69 6e 74 |thTag.0.|DbgPrint|
|00000a30| 00 00 40 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |..@.ExAl|locatePo|
|00000a40| 6f 6c 57 69 74 68 54 61 | 67 00 46 00 45 78 44 65 |olWithTa|g.F.ExDe|
|00000a50| 6c 65 74 65 52 65 73 6f | 75 72 63 65 4c 69 74 65 |leteReso|urceLite|
|00000a60| 00 00 14 01 49 6e 74 65 | 72 6c 6f 63 6b 65 64 50 |....Inte|rlockedP|
|00000a70| 6f 70 45 6e 74 72 79 53 | 4c 69 73 74 00 00 56 00 |opEntryS|List..V.|
|00000a80| 45 78 49 6e 69 74 69 61 | 6c 69 7a 65 52 65 73 6f |ExInitia|lizeReso|
|00000a90| 75 72 63 65 4c 69 74 65 | 00 00 12 02 4b 65 49 6e |urceLite|....KeIn|
|00000aa0| 69 74 69 61 6c 69 7a 65 | 53 70 69 6e 4c 6f 63 6b |itialize|SpinLock|
|00000ab0| 00 00 21 03 4f 62 66 44 | 65 72 65 66 65 72 65 6e |..!.ObfD|ereferen|
|00000ac0| 63 65 4f 62 6a 65 63 74 | 00 00 7a 00 45 78 52 65 |ceObject|..z.ExRe|
|00000ad0| 6c 65 61 73 65 52 65 73 | 6f 75 72 63 65 4c 69 74 |leaseRes|ourceLit|
|00000ae0| 65 00 37 00 45 78 41 63 | 71 75 69 72 65 52 65 73 |e.7.ExAc|quireRes|
|00000af0| 6f 75 72 63 65 45 78 63 | 6c 75 73 69 76 65 4c 69 |ourceExc|lusiveLi|
|00000b00| 74 65 00 00 8d 00 45 78 | 66 49 6e 74 65 72 6c 6f |te....Ex|fInterlo|
|00000b10| 63 6b 65 64 52 65 6d 6f | 76 65 48 65 61 64 4c 69 |ckedRemo|veHeadLi|
|00000b20| 73 74 00 00 ab 03 52 74 | 6c 43 6f 6d 70 61 72 65 |st....Rt|lCompare|
|00000b30| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 87 04 |UnicodeS|tring...|
|00000b40| 52 74 6c 55 70 63 61 73 | 65 55 6e 69 63 6f 64 65 |RtlUpcas|eUnicode|
|00000b50| 43 68 61 72 00 00 59 02 | 4b 65 54 69 63 6b 43 6f |Char..Y.|KeTickCo|
|00000b60| 75 6e 74 00 da 03 52 74 | 6c 45 71 75 61 6c 55 6e |unt...Rt|lEqualUn|
|00000b70| 69 63 6f 64 65 53 74 72 | 69 6e 67 00 38 00 45 78 |icodeStr|ing.8.Ex|
|00000b80| 41 63 71 75 69 72 65 52 | 65 73 6f 75 72 63 65 53 |AcquireR|esourceS|
|00000b90| 68 61 72 65 64 4c 69 74 | 65 00 62 02 4b 65 66 52 |haredLit|e.b.KefR|
|00000ba0| 65 6c 65 61 73 65 53 70 | 69 6e 4c 6f 63 6b 46 72 |eleaseSp|inLockFr|
|00000bb0| 6f 6d 44 70 63 4c 65 76 | 65 6c 00 00 61 02 4b 65 |omDpcLev|el..a.Ke|
|00000bc0| 66 41 63 71 75 69 72 65 | 53 70 69 6e 4c 6f 63 6b |fAcquire|SpinLock|
|00000bd0| 41 74 44 70 63 4c 65 76 | 65 6c 00 00 80 04 52 74 |AtDpcLev|el....Rt|
|00000be0| 6c 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |lUnicode|StringTo|
|00000bf0| 4f 65 6d 53 74 72 69 6e | 67 00 9e 04 52 74 6c 78 |OemStrin|g...Rtlx|
|00000c00| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 54 6f 4f |UnicodeS|tringToO|
|00000c10| 65 6d 53 69 7a 65 00 00 | 48 04 52 74 6c 4f 65 6d |emSize..|H.RtlOem|
|00000c20| 53 74 72 69 6e 67 54 6f | 55 6e 69 63 6f 64 65 53 |StringTo|UnicodeS|
|00000c30| 74 72 69 6e 67 00 9c 04 | 52 74 6c 78 4f 65 6d 53 |tring...|RtlxOemS|
|00000c40| 74 72 69 6e 67 54 6f 55 | 6e 69 63 6f 64 65 53 69 |tringToU|nicodeSi|
|00000c50| 7a 65 00 00 ca 02 4e 6c | 73 4d 62 4f 65 6d 43 6f |ze....Nl|sMbOemCo|
|00000c60| 64 65 50 61 67 65 54 61 | 67 00 49 02 4b 65 53 65 |dePageTa|g.I.KeSe|
|00000c70| 74 45 76 65 6e 74 00 00 | 15 01 49 6e 74 65 72 6c |tEvent..|..Interl|
|00000c80| 6f 63 6b 65 64 50 75 73 | 68 45 6e 74 72 79 53 4c |ockedPus|hEntrySL|
|00000c90| 69 73 74 00 5a 01 49 6f | 46 72 65 65 49 72 70 00 |ist.Z.Io|FreeIrp.|
|00000ca0| 2e 01 49 6f 43 68 65 63 | 6b 44 65 73 69 72 65 64 |..IoChec|kDesired|
|00000cb0| 41 63 63 65 73 73 00 00 | b5 03 52 74 6c 43 6f 70 |Access..|..RtlCop|
|00000cc0| 79 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |yUnicode|String..|
|00000cd0| 27 02 4b 65 51 75 65 72 | 79 53 79 73 74 65 6d 54 |'.KeQuer|ySystemT|
|00000ce0| 69 6d 65 00 5a 02 4b 65 | 55 6e 73 74 61 63 6b 44 |ime.Z.Ke|UnstackD|
|00000cf0| 65 74 61 63 68 50 72 6f | 63 65 73 73 00 00 56 02 |etachPro|cess..V.|
|00000d00| 4b 65 53 74 61 63 6b 41 | 74 74 61 63 68 50 72 6f |KeStackA|ttachPro|
|00000d10| 63 65 73 73 00 00 62 01 | 49 6f 47 65 74 43 75 72 |cess..b.|IoGetCur|
|00000d20| 72 65 6e 74 50 72 6f 63 | 65 73 73 00 d3 02 4e 74 |rentProc|ess...Nt|
|00000d30| 43 6c 6f 73 65 00 34 05 | 5a 77 51 75 65 72 79 56 |Close.4.|ZwQueryV|
|00000d40| 61 6c 75 65 4b 65 79 00 | 14 05 5a 77 4f 70 65 6e |alueKey.|..ZwOpen|
|00000d50| 4b 65 79 00 7b 05 5f 77 | 63 73 6e 69 63 6d 70 00 |Key.{._w|csnicmp.|
|00000d60| e5 02 4e 74 4f 70 65 6e | 46 69 6c 65 00 00 ef 02 |..NtOpen|File....|
|00000d70| 4e 74 51 75 65 72 79 49 | 6e 66 6f 72 6d 61 74 69 |NtQueryI|nformati|
|00000d80| 6f 6e 46 69 6c 65 00 00 | 31 04 52 74 6c 4c 65 6e |onFile..|1.RtlLen|
|00000d90| 67 74 68 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |gthSecur|ityDescr|
|00000da0| 69 70 74 6f 72 00 f6 02 | 4e 74 51 75 65 72 79 56 |iptor...|NtQueryV|
|00000db0| 6f 6c 75 6d 65 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |olumeInf|ormation|
|00000dc0| 46 69 6c 65 00 00 13 02 | 4b 65 49 6e 69 74 69 61 |File....|KeInitia|
|00000dd0| 6c 69 7a 65 54 69 6d 65 | 72 00 0c 02 4b 65 49 6e |lizeTime|r...KeIn|
|00000de0| 69 74 69 61 6c 69 7a 65 | 45 76 65 6e 74 00 60 02 |itialize|Event.`.|
|00000df0| 4b 65 57 61 69 74 46 6f | 72 53 69 6e 67 6c 65 4f |KeWaitFo|rSingleO|
|00000e00| 62 6a 65 63 74 00 2b 02 | 4b 65 52 65 61 64 53 74 |bject.+.|KeReadSt|
|00000e10| 61 74 65 45 76 65 6e 74 | 00 00 ee 01 4b 65 43 61 |ateEvent|....KeCa|
|00000e20| 6e 63 65 6c 54 69 6d 65 | 72 00 54 02 4b 65 53 65 |ncelTime|r.T.KeSe|
|00000e30| 74 54 69 6d 65 72 00 00 | ef 01 4b 65 43 6c 65 61 |tTimer..|..KeClea|
|00000e40| 72 45 76 65 6e 74 00 00 | 51 02 4b 65 53 65 74 54 |rEvent..|Q.KeSetT|
|00000e50| 61 72 67 65 74 50 72 6f | 63 65 73 73 6f 72 44 70 |argetPro|cessorDp|
|00000e60| 63 00 0b 02 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |c...KeIn|itialize|
|00000e70| 44 70 63 00 a9 05 77 63 | 73 6c 65 6e 00 00 85 02 |Dpc...wc|slen....|
|00000e80| 4d 6d 42 75 69 6c 64 4d | 64 6c 46 6f 72 4e 6f 6e |MmBuildM|dlForNon|
|00000e90| 50 61 67 65 64 50 6f 6f | 6c 00 75 01 49 6f 49 6e |PagedPoo|l.u.IoIn|
|00000ea0| 69 74 69 61 6c 69 7a 65 | 49 72 70 00 18 02 4b 65 |itialize|Irp...Ke|
|00000eb0| 49 6e 73 65 72 74 51 75 | 65 75 65 00 07 03 4e 74 |InsertQu|eue...Nt|
|00000ec0| 57 72 69 74 65 46 69 6c | 65 00 f7 02 4e 74 52 65 |WriteFil|e...NtRe|
|00000ed0| 61 64 46 69 6c 65 00 00 | fc 02 4e 74 53 65 74 49 |adFile..|..NtSetI|
|00000ee0| 6e 66 6f 72 6d 61 74 69 | 6f 6e 46 69 6c 65 00 00 |nformati|onFile..|
|00000ef0| 6f 01 49 6f 47 65 74 52 | 65 6c 61 74 65 64 44 65 |o.IoGetR|elatedDe|
|00000f00| 76 69 63 65 4f 62 6a 65 | 63 74 00 00 19 03 4f 62 |viceObje|ct....Ob|
|00000f10| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|00000f20| 79 48 61 6e 64 6c 65 00 | 3b 01 49 6f 43 72 65 61 |yHandle.|;.IoCrea|
|00000f30| 74 65 46 69 6c 65 00 00 | 8b 05 6d 65 6d 6d 6f 76 |teFile..|..memmov|
|00000f40| 65 00 8f 04 52 74 6c 55 | 70 70 65 72 43 68 61 72 |e...RtlU|pperChar|
|00000f50| 00 00 d4 01 49 6f 57 72 | 69 74 65 45 72 72 6f 72 |....IoWr|iteError|
|00000f60| 4c 6f 67 45 6e 74 72 79 | 00 00 1d 01 49 6f 41 6c |LogEntry|....IoAl|
|00000f70| 6c 6f 63 61 74 65 45 72 | 72 6f 72 4c 6f 67 45 6e |locateEr|rorLogEn|
|00000f80| 74 72 79 00 49 01 49 6f | 44 65 6c 65 74 65 44 65 |try.I.Io|DeleteDe|
|00000f90| 76 69 63 65 00 00 6f 00 | 45 78 51 75 65 75 65 57 |vice..o.|ExQueueW|
|00000fa0| 6f 72 6b 49 74 65 6d 00 | 22 03 4f 62 66 52 65 66 |orkItem.|".ObfRef|
|00000fb0| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 1d 02 |erenceOb|ject....|
|00000fc0| 4b 65 4c 65 61 76 65 43 | 72 69 74 69 63 61 6c 52 |KeLeaveC|riticalR|
|00000fd0| 65 67 69 6f 6e 00 f6 01 | 4b 65 45 6e 74 65 72 43 |egion...|KeEnterC|
|00000fe0| 72 69 74 69 63 61 6c 52 | 65 67 69 6f 6e 00 17 02 |riticalR|egion...|
|00000ff0| 4b 65 49 6e 73 65 72 74 | 48 65 61 64 51 75 65 75 |KeInsert|HeadQueu|
|00001000| 65 00 d9 01 49 6f 66 43 | 61 6c 6c 44 72 69 76 65 |e...IofC|allDrive|
|00001010| 72 00 38 01 49 6f 43 72 | 65 61 74 65 44 65 76 69 |r.8.IoCr|eateDevi|
|00001020| 63 65 00 00 dc 04 57 6d | 69 47 65 74 43 6c 6f 63 |ce....Wm|iGetCloc|
|00001030| 6b 00 d3 01 49 6f 57 4d | 49 57 72 69 74 65 45 76 |k...IoWM|IWriteEv|
|00001040| 65 6e 74 00 da 01 49 6f | 66 43 6f 6d 70 6c 65 74 |ent...Io|fComplet|
|00001050| 65 52 65 71 75 65 73 74 | 00 00 89 01 49 6f 51 75 |eRequest|....IoQu|
|00001060| 65 75 65 57 6f 72 6b 49 | 74 65 6d 00 20 01 49 6f |eueWorkI|tem. .Io|
|00001070| 41 6c 6c 6f 63 61 74 65 | 57 6f 72 6b 49 74 65 6d |Allocate|WorkItem|
|00001080| 00 00 2e 02 4b 65 52 65 | 61 64 53 74 61 74 65 51 |....KeRe|adStateQ|
|00001090| 75 65 75 65 00 00 41 00 | 45 78 41 6c 6c 6f 63 61 |ueue..A.|ExAlloca|
|000010a0| 74 65 50 6f 6f 6c 57 69 | 74 68 54 61 67 50 72 69 |tePoolWi|thTagPri|
|000010b0| 6f 72 69 74 79 00 35 03 | 50 72 6f 62 65 46 6f 72 |ority.5.|ProbeFor|
|000010c0| 52 65 61 64 00 00 ce 01 | 49 6f 57 4d 49 52 65 67 |Read....|IoWMIReg|
|000010d0| 69 73 74 72 61 74 69 6f | 6e 43 6f 6e 74 72 6f 6c |istratio|nControl|
|000010e0| 00 00 29 02 4b 65 51 75 | 65 72 79 54 69 6d 65 49 |..).KeQu|eryTimeI|
|000010f0| 6e 63 72 65 6d 65 6e 74 | 00 00 5e 05 5f 61 6c 6c |ncrement|..^._all|
|00001100| 6d 75 6c 00 c6 04 53 65 | 53 69 6e 67 6c 65 50 72 |mul...Se|SinglePr|
|00001110| 69 76 69 6c 65 67 65 43 | 68 65 63 6b 00 00 b0 04 |ivilegeC|heck....|
|00001120| 53 65 45 78 70 6f 72 74 | 73 00 5b 01 49 6f 46 72 |SeExport|s.[.IoFr|
|00001130| 65 65 4d 64 6c 00 29 01 | 49 6f 42 75 69 6c 64 50 |eeMdl.).|IoBuildP|
|00001140| 61 72 74 69 61 6c 4d 64 | 6c 00 bd 02 4d 6d 55 6e |artialMd|l...MmUn|
|00001150| 6c 6f 63 6b 50 61 67 65 | 73 00 bf 02 4d 6d 55 6e |lockPage|s...MmUn|
|00001160| 6d 61 70 4c 6f 63 6b 65 | 64 50 61 67 65 73 00 00 |mapLocke|dPages..|
|00001170| f1 03 52 74 6c 46 72 65 | 65 4f 65 6d 53 74 72 69 |..RtlFre|eOemStri|
|00001180| 6e 67 00 00 34 03 50 6f | 55 6e 72 65 67 69 73 74 |ng..4.Po|Unregist|
|00001190| 65 72 53 79 73 74 65 6d | 53 74 61 74 65 00 bc 02 |erSystem|State...|
|000011a0| 4d 6d 55 6e 6c 6f 63 6b | 50 61 67 61 62 6c 65 49 |MmUnlock|PagableI|
|000011b0| 6d 61 67 65 53 65 63 74 | 69 6f 6e 00 01 04 52 74 |mageSect|ion...Rt|
|000011c0| 6c 47 65 74 4f 77 6e 65 | 72 53 65 63 75 72 69 74 |lGetOwne|rSecurit|
|000011d0| 79 44 65 73 63 72 69 70 | 74 6f 72 00 f9 03 52 74 |yDescrip|tor...Rt|
|000011e0| 6c 47 65 74 44 61 63 6c | 53 65 63 75 72 69 74 79 |lGetDacl|Security|
|000011f0| 44 65 73 63 72 69 70 74 | 6f 72 00 00 42 02 4b 65 |Descript|or..B.Ke|
|00001200| 52 75 6e 64 6f 77 6e 51 | 75 65 75 65 00 00 f2 01 |RundownQ|ueue....|
|00001210| 4b 65 44 65 6c 61 79 45 | 78 65 63 75 74 69 6f 6e |KeDelayE|xecution|
|00001220| 54 68 72 65 61 64 00 00 | 2c 03 50 6f 52 65 67 69 |Thread..|,.PoRegi|
|00001230| 73 74 65 72 53 79 73 74 | 65 6d 53 74 61 74 65 00 |sterSyst|emState.|
|00001240| ee 04 5a 77 43 6c 6f 73 | 65 00 61 04 52 74 6c 53 |..ZwClos|e.a.RtlS|
|00001250| 65 74 4f 77 6e 65 72 53 | 65 63 75 72 69 74 79 44 |etOwnerS|ecurityD|
|00001260| 65 73 63 72 69 70 74 6f | 72 00 5f 04 52 74 6c 53 |escripto|r._.RtlS|
|00001270| 65 74 44 61 63 6c 53 65 | 63 75 72 69 74 79 44 65 |etDaclSe|curityDe|
|00001280| 73 63 72 69 70 74 6f 72 | 00 00 90 03 52 74 6c 41 |scriptor|....RtlA|
|00001290| 64 64 41 63 63 65 73 73 | 41 6c 6c 6f 77 65 64 41 |ddAccess|AllowedA|
|000012a0| 63 65 00 00 b6 03 52 74 | 6c 43 72 65 61 74 65 41 |ce....Rt|lCreateA|
|000012b0| 63 6c 00 00 32 04 52 74 | 6c 4c 65 6e 67 74 68 53 |cl..2.Rt|lLengthS|
|000012c0| 69 64 00 00 68 04 52 74 | 6c 53 75 62 41 75 74 68 |id..h.Rt|lSubAuth|
|000012d0| 6f 72 69 74 79 53 69 64 | 00 00 10 04 52 74 6c 49 |oritySid|....RtlI|
|000012e0| 6e 69 74 69 61 6c 69 7a | 65 53 69 64 00 00 30 04 |nitializ|eSid..0.|
|000012f0| 52 74 6c 4c 65 6e 67 74 | 68 52 65 71 75 69 72 65 |RtlLengt|hRequire|
|00001300| 64 53 69 64 00 00 ba 03 | 52 74 6c 43 72 65 61 74 |dSid....|RtlCreat|
|00001310| 65 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |eSecurit|yDescrip|
|00001320| 74 6f 72 00 10 02 4b 65 | 49 6e 69 74 69 61 6c 69 |tor...Ke|Initiali|
|00001330| 7a 65 51 75 65 75 65 00 | 5c 01 49 6f 46 72 65 65 |zeQueue.|\.IoFree|
|00001340| 57 6f 72 6b 49 74 65 6d | 00 00 2d 00 44 62 67 42 |WorkItem|..-.DbgB|
|00001350| 72 65 61 6b 50 6f 69 6e | 74 00 70 04 52 74 6c 54 |reakPoin|t.p.RtlT|
|00001360| 69 6d 65 54 6f 54 69 6d | 65 46 69 65 6c 64 73 00 |imeToTim|eFields.|
|00001370| 81 00 45 78 53 79 73 74 | 65 6d 54 69 6d 65 54 6f |..ExSyst|emTimeTo|
|00001380| 4c 6f 63 61 6c 54 69 6d | 65 00 6c 04 52 74 6c 54 |LocalTim|e.l.RtlT|
|00001390| 69 6d 65 46 69 65 6c 64 | 73 54 6f 54 69 6d 65 00 |imeField|sToTime.|
|000013a0| 5c 05 5f 61 6c 6c 64 69 | 76 00 ed 01 4b 65 42 75 |\._alldi|v...KeBu|
|000013b0| 67 43 68 65 63 6b 45 78 | 00 00 6e 04 52 74 6c 54 |gCheckEx|..n.RtlT|
|000013c0| 69 6d 65 54 6f 53 65 63 | 6f 6e 64 73 53 69 6e 63 |imeToSec|ondsSinc|
|000013d0| 65 31 39 37 30 00 ac 00 | 46 73 52 74 6c 44 6f 65 |e1970...|FsRtlDoe|
|000013e0| 73 4e 61 6d 65 43 6f 6e | 74 61 69 6e 57 69 6c 64 |sNameCon|tainWild|
|000013f0| 43 61 72 64 73 00 fb 01 | 4b 65 47 65 74 43 75 72 |Cards...|KeGetCur|
|00001400| 72 65 6e 74 54 68 72 65 | 61 64 00 00 1e 01 49 6f |rentThre|ad....Io|
|00001410| 41 6c 6c 6f 63 61 74 65 | 49 72 70 00 88 01 49 6f |Allocate|Irp...Io|
|00001420| 51 75 65 75 65 54 68 72 | 65 61 64 49 72 70 00 00 |QueueThr|eadIrp..|
|00001430| ae 02 4d 6d 50 72 6f 62 | 65 41 6e 64 4c 6f 63 6b |..MmProb|eAndLock|
|00001440| 50 61 67 65 73 00 1f 01 | 49 6f 41 6c 6c 6f 63 61 |Pages...|IoAlloca|
|00001450| 74 65 4d 64 6c 00 9d 02 | 4d 6d 4c 6f 63 6b 50 61 |teMdl...|MmLockPa|
|00001460| 67 61 62 6c 65 44 61 74 | 61 53 65 63 74 69 6f 6e |gableDat|aSection|
|00001470| 00 00 d9 03 52 74 6c 45 | 71 75 61 6c 53 74 72 69 |....RtlE|qualStri|
|00001480| 6e 67 00 00 d6 02 4e 74 | 43 72 65 61 74 65 46 69 |ng....Nt|CreateFi|
|00001490| 6c 65 00 00 da 02 4e 74 | 44 65 76 69 63 65 49 6f |le....Nt|DeviceIo|
|000014a0| 43 6f 6e 74 72 6f 6c 46 | 69 6c 65 00 fd 04 5a 77 |ControlF|ile...Zw|
|000014b0| 44 65 76 69 63 65 49 6f | 43 6f 6e 74 72 6f 6c 46 |DeviceIo|ControlF|
|000014c0| 69 6c 65 00 f3 04 5a 77 | 43 72 65 61 74 65 46 69 |ile...Zw|CreateFi|
|000014d0| 6c 65 00 00 79 05 5f 77 | 63 73 69 63 6d 70 00 00 |le..y._w|csicmp..|
|000014e0| 30 01 49 6f 43 68 65 63 | 6b 46 75 6e 63 74 69 6f |0.IoChec|kFunctio|
|000014f0| 6e 41 63 63 65 73 73 00 | d7 00 46 73 52 74 6c 4d |nAccess.|..FsRtlM|
|00001500| 64 6c 57 72 69 74 65 43 | 6f 6d 70 6c 65 74 65 44 |dlWriteC|ompleteD|
|00001510| 65 76 00 00 ea 00 46 73 | 52 74 6c 50 72 65 70 61 |ev....Fs|RtlPrepa|
|00001520| 72 65 4d 64 6c 57 72 69 | 74 65 44 65 76 00 d4 00 |reMdlWri|teDev...|
|00001530| 46 73 52 74 6c 4d 64 6c | 52 65 61 64 43 6f 6d 70 |FsRtlMdl|ReadComp|
|00001540| 6c 65 74 65 44 65 76 00 | d5 00 46 73 52 74 6c 4d |leteDev.|..FsRtlM|
|00001550| 64 6c 52 65 61 64 44 65 | 76 00 5f 01 49 6f 47 65 |dlReadDe|v._.IoGe|
|00001560| 74 42 61 73 65 46 69 6c | 65 53 79 73 74 65 6d 44 |tBaseFil|eSystemD|
|00001570| 65 76 69 63 65 4f 62 6a | 65 63 74 00 2f 01 49 6f |eviceObj|ect./.Io|
|00001580| 43 68 65 63 6b 45 61 42 | 75 66 66 65 72 56 61 6c |CheckEaB|ufferVal|
|00001590| 69 64 69 74 79 00 4d 04 | 52 74 6c 50 72 65 66 69 |idity.M.|RtlPrefi|
|000015a0| 78 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |xUnicode|String..|
|000015b0| f9 02 4e 74 52 65 71 75 | 65 73 74 57 61 69 74 52 |..NtRequ|estWaitR|
|000015c0| 65 70 6c 79 50 6f 72 74 | 00 00 41 04 52 74 6c 4e |eplyPort|..A.RtlN|
|000015d0| 74 53 74 61 74 75 73 54 | 6f 44 6f 73 45 72 72 6f |tStatusT|oDosErro|
|000015e0| 72 4e 6f 54 65 62 00 00 | 2d 01 49 6f 43 61 6e 63 |rNoTeb..|-.IoCanc|
|000015f0| 65 6c 49 72 70 00 0a 04 | 52 74 6c 49 6e 69 74 53 |elIrp...|RtlInitS|
|00001600| 74 72 69 6e 67 00 d8 01 | 49 6f 57 72 69 74 65 54 |tring...|IoWriteT|
|00001610| 72 61 6e 73 66 65 72 43 | 6f 75 6e 74 00 00 d5 01 |ransferC|ount....|
|00001620| 49 6f 57 72 69 74 65 4f | 70 65 72 61 74 69 6f 6e |IoWriteO|peration|
|00001630| 43 6f 75 6e 74 00 90 01 | 49 6f 52 65 61 64 54 72 |Count...|IoReadTr|
|00001640| 61 6e 73 66 65 72 43 6f | 75 6e 74 00 8d 01 49 6f |ansferCo|unt...Io|
|00001650| 52 65 61 64 4f 70 65 72 | 61 74 69 6f 6e 43 6f 75 |ReadOper|ationCou|
|00001660| 6e 74 00 00 b8 01 49 6f | 53 74 61 74 69 73 74 69 |nt....Io|Statisti|
|00001670| 63 73 4c 6f 63 6b 00 00 | a7 05 77 63 73 63 70 79 |csLock..|..wcscpy|
|00001680| 00 00 1a 04 52 74 6c 49 | 6e 74 65 67 65 72 54 6f |....RtlI|ntegerTo|
|00001690| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 17 04 |UnicodeS|tring...|
|000016a0| 52 74 6c 49 6e 74 36 34 | 54 6f 55 6e 69 63 6f 64 |RtlInt64|ToUnicod|
|000016b0| 65 53 74 72 69 6e 67 00 | b2 01 49 6f 53 65 74 54 |eString.|..IoSetT|
|000016c0| 68 72 65 61 64 48 61 72 | 64 45 72 72 6f 72 4d 6f |hreadHar|dErrorMo|
|000016d0| 64 65 00 00 a5 05 77 63 | 73 63 68 72 00 00 70 05 |de....wc|schr..p.|
|000016e0| 5f 73 74 72 69 63 6d 70 | 00 00 52 04 52 74 6c 52 |_stricmp|..R.RtlR|
|000016f0| 61 6e 64 6f 6d 00 54 01 | 49 6f 46 61 73 74 51 75 |andom.T.|IoFastQu|
|00001700| 65 72 79 4e 65 74 77 6f | 72 6b 41 74 74 72 69 62 |eryNetwo|rkAttrib|
|00001710| 75 74 65 73 00 00 58 04 | 52 74 6c 53 65 63 6f 6e |utes..X.|RtlSecon|
|00001720| 64 73 53 69 6e 63 65 31 | 39 37 30 54 6f 54 69 6d |dsSince1|970ToTim|
|00001730| 65 00 31 01 49 6f 43 68 | 65 63 6b 51 75 65 72 79 |e.1.IoCh|eckQuery|
|00001740| 53 65 74 46 69 6c 65 49 | 6e 66 6f 72 6d 61 74 69 |SetFileI|nformati|
|00001750| 6f 6e 00 00 8b 04 52 74 | 6c 55 70 63 61 73 65 55 |on....Rt|lUpcaseU|
|00001760| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 4f 65 |nicodeSt|ringToOe|
|00001770| 6d 53 74 72 69 6e 67 00 | ef 03 52 74 6c 46 72 65 |mString.|..RtlFre|
|00001780| 65 41 6e 73 69 53 74 72 | 69 6e 67 00 32 01 49 6f |eAnsiStr|ing.2.Io|
|00001790| 43 68 65 63 6b 51 75 65 | 72 79 53 65 74 56 6f 6c |CheckQue|rySetVol|
|000017a0| 75 6d 65 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 00 00 |umeInfor|mation..|
|000017b0| 01 03 4e 74 53 65 74 56 | 6f 6c 75 6d 65 49 6e 66 |..NtSetV|olumeInf|
|000017c0| 6f 72 6d 61 74 69 6f 6e | 46 69 6c 65 00 00 62 05 |ormation|File..b.|
|000017d0| 5f 61 6c 6c 73 68 72 00 | 00 03 4e 74 53 65 74 53 |_allshr.|..NtSetS|
|000017e0| 65 63 75 72 69 74 79 4f | 62 6a 65 63 74 00 92 04 |ecurityO|bject...|
|000017f0| 52 74 6c 56 61 6c 69 64 | 52 65 6c 61 74 69 76 65 |RtlValid|Relative|
|00001800| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|00001810| 6f 72 00 00 f4 02 4e 74 | 51 75 65 72 79 53 65 63 |or....Nt|QuerySec|
|00001820| 75 72 69 74 79 4f 62 6a | 65 63 74 00 f3 02 4e 74 |urityObj|ect...Nt|
|00001830| 51 75 65 72 79 51 75 6f | 74 61 49 6e 66 6f 72 6d |QueryQuo|taInform|
|00001840| 61 74 69 6f 6e 46 69 6c | 65 00 ff 02 4e 74 53 65 |ationFil|e...NtSe|
|00001850| 74 51 75 6f 74 61 49 6e | 66 6f 72 6d 61 74 69 6f |tQuotaIn|formatio|
|00001860| 6e 46 69 6c 65 00 73 01 | 49 6f 47 65 74 53 74 61 |nFile.s.|IoGetSta|
|00001870| 63 6b 4c 69 6d 69 74 73 | 00 00 93 04 52 74 6c 56 |ckLimits|....RtlV|
|00001880| 61 6c 69 64 53 65 63 75 | 72 69 74 79 44 65 73 63 |alidSecu|rityDesc|
|00001890| 72 69 70 74 6f 72 00 00 | bf 03 52 74 6c 44 65 63 |riptor..|..RtlDec|
|000018a0| 6f 6d 70 72 65 73 73 43 | 68 75 6e 6b 73 00 b9 02 |ompressC|hunks...|
|000018b0| 4d 6d 53 69 7a 65 4f 66 | 4d 64 6c 00 f8 03 52 74 |MmSizeOf|Mdl...Rt|
|000018c0| 6c 47 65 74 43 6f 6d 70 | 72 65 73 73 69 6f 6e 57 |lGetComp|ressionW|
|000018d0| 6f 72 6b 53 70 61 63 65 | 53 69 7a 65 00 00 a6 05 |orkSpace|Size....|
|000018e0| 77 63 73 63 6d 70 00 00 | 08 04 52 74 6c 49 6e 69 |wcscmp..|..RtlIni|
|000018f0| 74 41 6e 73 69 53 74 72 | 69 6e 67 00 c4 00 46 73 |tAnsiStr|ing...Fs|
|00001900| 52 74 6c 49 73 46 61 74 | 44 62 63 73 4c 65 67 61 |RtlIsFat|DbcsLega|
|00001910| 6c 00 26 04 52 74 6c 49 | 73 4e 61 6d 65 4c 65 67 |l.&.RtlI|sNameLeg|
|00001920| 61 6c 44 4f 53 38 44 6f | 74 33 00 00 cc 02 4e 6c |alDOS8Do|t3....Nl|
|00001930| 73 4f 65 6d 4c 65 61 64 | 42 79 74 65 49 6e 66 6f |sOemLead|ByteInfo|
|00001940| 00 00 84 04 52 74 6c 55 | 6e 69 63 6f 64 65 54 6f |....RtlU|nicodeTo|
|00001950| 4f 65 6d 4e 00 00 8e 04 | 52 74 6c 55 70 63 61 73 |OemN....|RtlUpcas|
|00001960| 65 55 6e 69 63 6f 64 65 | 54 6f 4f 65 6d 4e 00 00 |eUnicode|ToOemN..|
|00001970| f4 01 4b 65 44 65 74 61 | 63 68 50 72 6f 63 65 73 |..KeDeta|chProces|
|00001980| 73 00 eb 01 4b 65 41 74 | 74 61 63 68 50 72 6f 63 |s...KeAt|tachProc|
|00001990| 65 73 73 00 37 03 50 73 | 41 73 73 69 67 6e 49 6d |ess.7.Ps|AssignIm|
|000019a0| 70 65 72 73 6f 6e 61 74 | 69 6f 6e 54 6f 6b 65 6e |personat|ionToken|
|000019b0| 00 00 b2 04 53 65 46 72 | 65 65 50 72 69 76 69 6c |....SeFr|eePrivil|
|000019c0| 65 67 65 73 00 00 39 04 | 52 74 6c 4d 61 70 47 65 |eges..9.|RtlMapGe|
|000019d0| 6e 65 72 69 63 4d 61 73 | 6b 00 a9 01 49 6f 53 65 |nericMas|k...IoSe|
|000019e0| 74 46 69 6c 65 4f 72 69 | 67 69 6e 00 fd 01 4b 65 |tFileOri|gin...Ke|
|000019f0| 47 65 74 52 65 63 6f 6d | 6d 65 6e 64 65 64 53 68 |GetRecom|mendedSh|
|00001a00| 61 72 65 64 44 61 74 61 | 41 6c 69 67 6e 6d 65 6e |aredData|Alignmen|
|00001a10| 74 00 1f 02 4b 65 4e 75 | 6d 62 65 72 50 72 6f 63 |t...KeNu|mberProc|
|00001a20| 65 73 73 6f 72 73 00 00 | 6f 05 5f 73 6e 77 70 72 |essors..|o._snwpr|
|00001a30| 69 6e 74 66 00 00 9e 05 | 74 6f 75 70 70 65 72 00 |intf....|toupper.|
|00001a40| 6f 04 52 74 6c 54 69 6d | 65 54 6f 53 65 63 6f 6e |o.RtlTim|eToSecon|
|00001a50| 64 73 53 69 6e 63 65 31 | 39 38 30 00 95 04 52 74 |dsSince1|980...Rt|
|00001a60| 6c 56 65 72 69 66 79 56 | 65 72 73 69 6f 6e 49 6e |lVerifyV|ersionIn|
|00001a70| 66 6f 00 00 d0 04 56 65 | 72 53 65 74 43 6f 6e 64 |fo....Ve|rSetCond|
|00001a80| 69 74 69 6f 6e 4d 61 73 | 6b 00 9b 02 4d 6d 49 73 |itionMas|k...MmIs|
|00001a90| 54 68 69 73 41 6e 4e 74 | 41 73 53 79 73 74 65 6d |ThisAnNt|AsSystem|
|00001aa0| 00 00 3d 03 50 73 43 72 | 65 61 74 65 53 79 73 74 |..=.PsCr|eateSyst|
|00001ab0| 65 6d 54 68 72 65 61 64 | 00 00 4b 02 4b 65 53 65 |emThread|..K.KeSe|
|00001ac0| 74 49 64 65 61 6c 50 72 | 6f 63 65 73 73 6f 72 54 |tIdealPr|ocessorT|
|00001ad0| 68 72 65 61 64 00 fe 02 | 4e 74 53 65 74 49 6e 66 |hread...|NtSetInf|
|00001ae0| 6f 72 6d 61 74 69 6f 6e | 54 68 72 65 61 64 00 00 |ormation|Thread..|
|00001af0| 87 03 50 73 54 65 72 6d | 69 6e 61 74 65 53 79 73 |..PsTerm|inateSys|
|00001b00| 74 65 6d 54 68 72 65 61 | 64 00 3c 02 4b 65 52 65 |temThrea|d.<.KeRe|
|00001b10| 6d 6f 76 65 51 75 65 75 | 65 00 cc 03 52 74 6c 44 |moveQueu|e...RtlD|
|00001b20| 65 73 74 72 6f 79 48 65 | 61 70 00 00 94 03 52 74 |estroyHe|ap....Rt|
|00001b30| 6c 41 6c 6c 6f 63 61 74 | 65 48 65 61 70 00 f0 03 |lAllocat|eHeap...|
|00001b40| 52 74 6c 46 72 65 65 48 | 65 61 70 00 b8 03 52 74 |RtlFreeH|eap...Rt|
|00001b50| 6c 43 72 65 61 74 65 48 | 65 61 70 00 d4 02 4e 74 |lCreateH|eap...Nt|
|00001b60| 43 6f 6e 6e 65 63 74 50 | 6f 72 74 00 d7 02 4e 74 |ConnectP|ort...Nt|
|00001b70| 43 72 65 61 74 65 53 65 | 63 74 69 6f 6e 00 6e 74 |CreateSe|ction.nt|
|00001b80| 6f 73 6b 72 6e 6c 2e 65 | 78 65 00 00 68 05 5f 65 |oskrnl.e|xe..h._e|
|00001b90| 78 63 65 70 74 5f 68 61 | 6e 64 6c 65 72 33 00 00 |xcept_ha|ndler3..|
|00001ba0| 40 00 4b 65 47 65 74 43 | 75 72 72 65 6e 74 49 72 |@.KeGetC|urrentIr|
|00001bb0| 71 6c 00 00 4f 00 4b 66 | 52 65 6c 65 61 73 65 53 |ql..O.Kf|ReleaseS|
|00001bc0| 70 69 6e 4c 6f 63 6b 00 | 4c 00 4b 66 41 63 71 75 |pinLock.|L.KfAcqu|
|00001bd0| 69 72 65 53 70 69 6e 4c | 6f 63 6b 00 4d 00 4b 66 |ireSpinL|ock.M.Kf|
|00001be0| 4c 6f 77 65 72 49 72 71 | 6c 00 4e 00 4b 66 52 61 |LowerIrq|l.N.KfRa|
|00001bf0| 69 73 65 49 72 71 6c 00 | 48 41 4c 2e 64 6c 6c 00 |iseIrql.|HAL.dll.|
|00001c00| 00 00 57 6d 69 43 6f 6d | 70 6c 65 74 65 52 65 71 |..WmiCom|pleteReq|
|00001c10| 75 65 73 74 00 00 02 00 | 57 6d 69 53 79 73 74 65 |uest....|WmiSyste|
|00001c20| 6d 43 6f 6e 74 72 6f 6c | 00 00 57 4d 49 4c 49 42 |mControl|..WMILIB|
|00001c30| 2e 53 59 53 00 00 1f 00 | 54 64 69 44 65 72 65 67 |.SYS....|TdiDereg|
|00001c40| 69 73 74 65 72 50 6e 50 | 48 61 6e 64 6c 65 72 73 |isterPnP|Handlers|
|00001c50| 00 00 2d 00 54 64 69 52 | 65 67 69 73 74 65 72 50 |..-.TdiR|egisterP|
|00001c60| 6e 50 48 61 6e 64 6c 65 | 72 73 00 00 25 00 54 64 |nPHandle|rs..%.Td|
|00001c70| 69 4f 70 65 6e 4e 65 74 | 62 69 6f 73 41 64 64 72 |iOpenNet|biosAddr|
|00001c80| 65 73 73 00 2f 00 54 64 | 69 52 65 74 75 72 6e 43 |ess./.Td|iReturnC|
|00001c90| 68 61 69 6e 65 64 52 65 | 63 65 69 76 65 73 00 00 |hainedRe|ceives..|
|00001ca0| 0e 00 54 64 69 43 6f 70 | 79 42 75 66 66 65 72 54 |..TdiCop|yBufferT|
|00001cb0| 6f 4d 64 6c 00 00 54 44 | 49 2e 53 59 53 00 0f 00 |oMdl..TD|I.SYS...|
|00001cc0| 49 6d 70 65 72 73 6f 6e | 61 74 65 53 65 63 75 72 |Imperson|ateSecur|
|00001cd0| 69 74 79 43 6f 6e 74 65 | 78 74 00 00 18 00 4d 61 |ityConte|xt....Ma|
|00001ce0| 70 53 65 63 75 72 69 74 | 79 45 72 72 6f 72 00 00 |pSecurit|yError..|
|00001cf0| 0a 00 46 72 65 65 43 6f | 6e 74 65 78 74 42 75 66 |..FreeCo|ntextBuf|
|00001d00| 66 65 72 00 19 00 51 75 | 65 72 79 43 6f 6e 74 65 |fer...Qu|eryConte|
|00001d10| 78 74 41 74 74 72 69 62 | 75 74 65 73 57 00 05 00 |xtAttrib|utesW...|
|00001d20| 44 65 6c 65 74 65 53 65 | 63 75 72 69 74 79 43 6f |DeleteSe|curityCo|
|00001d30| 6e 74 65 78 74 00 01 00 | 41 63 71 75 69 72 65 43 |ntext...|AcquireC|
|00001d40| 72 65 64 65 6e 74 69 61 | 6c 73 48 61 6e 64 6c 65 |redentia|lsHandle|
|00001d50| 57 00 02 00 41 64 64 43 | 72 65 64 65 6e 74 69 61 |W...AddC|redentia|
|00001d60| 6c 73 57 00 00 00 41 63 | 63 65 70 74 53 65 63 75 |lsW...Ac|ceptSecu|
|00001d70| 72 69 74 79 43 6f 6e 74 | 65 78 74 00 11 00 49 6e |rityCont|ext...In|
|00001d80| 69 74 53 65 63 75 72 69 | 74 79 49 6e 74 65 72 66 |itSecuri|tyInterf|
|00001d90| 61 63 65 57 00 00 14 00 | 4b 53 65 63 56 61 6c 69 |aceW....|KSecVali|
|00001da0| 64 61 74 65 42 75 66 66 | 65 72 00 00 6b 73 65 63 |dateBuff|er..ksec|
|00001db0| 64 64 2e 73 79 73 00 00 | 42 05 5a 77 53 65 74 45 |dd.sys..|B.ZwSetE|
|00001dc0| 76 65 6e 74 00 00 55 05 | 5a 77 57 61 69 74 46 6f |vent..U.|ZwWaitFo|
|00001dd0| 72 53 69 6e 67 6c 65 4f | 62 6a 65 63 74 00 3f 02 |rSingleO|bject.?.|
|00001de0| 4b 65 52 65 73 65 74 45 | 76 65 6e 74 00 00 5e 02 |KeResetE|vent..^.|
|00001df0| 4b 65 57 61 69 74 46 6f | 72 4d 75 6c 74 69 70 6c |KeWaitFo|rMultipl|
|00001e00| 65 4f 62 6a 65 63 74 73 | 00 00 11 02 4b 65 49 6e |eObjects|....KeIn|
|00001e10| 69 74 69 61 6c 69 7a 65 | 53 65 6d 61 70 68 6f 72 |itialize|Semaphor|
|00001e20| 65 00 f2 04 5a 77 43 72 | 65 61 74 65 45 76 65 6e |e...ZwCr|eateEven|
|00001e30| 74 00 0e 05 5a 77 4d 61 | 70 56 69 65 77 4f 66 53 |t...ZwMa|pViewOfS|
|00001e40| 65 63 74 69 6f 6e 00 00 | f6 04 5a 77 43 72 65 61 |ection..|..ZwCrea|
|00001e50| 74 65 53 65 63 74 69 6f | 6e 00 36 02 4b 65 52 65 |teSectio|n.6.KeRe|
|00001e60| 6c 65 61 73 65 53 65 6d | 61 70 68 6f 72 65 00 00 |leaseSem|aphore..|
|00001e70| 8a 00 45 78 66 49 6e 74 | 65 72 6c 6f 63 6b 65 64 |..ExfInt|erlocked|
|00001e80| 49 6e 73 65 72 74 54 61 | 69 6c 4c 69 73 74 00 00 |InsertTa|ilList..|
|00001e90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ea0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001eb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ec0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ed0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ee0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ef0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+