home *** CD-ROM | disk | FTP | other *** search
| Unknown | 2002-08-29 | 6.9 KB |
open in: 
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
| Confidence | Program | Detection | Match Type | Support
|
|---|
| 100%
| file
| data
| default
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 55 8b ec 83 ec 54 53 56 | 57 68 b4 60 03 00 68 40 |U....TSV|Wh.`..h@|
|00000010| 55 01 00 e8 e2 c8 fd ff | 68 c0 60 03 00 68 48 55 |U.......|h.`..hHU|
|00000020| 01 00 e8 d3 c8 fd ff 68 | 84 5d 03 00 68 50 55 01 |.......h|.]..hPU.|
|00000030| 00 e8 c4 c8 fd ff 8b 75 | 08 8b 1d 70 4f 01 00 68 |.......u|...pO..h|
|00000040| 8c 5d 03 00 8d 45 ec 50 | 89 35 84 53 01 00 ff d3 |.]...E.P|.5.S....|
|00000050| a1 58 4d 01 00 8a 00 68 | 20 55 01 00 33 ff 57 68 |.XM....h| U..3.Wh|
|00000060| 00 01 00 00 6a 12 a2 20 | 53 01 00 8d 45 ec 50 57 |....j.. |S...E.PW|
|00000070| 56 ff 15 54 4d 01 00 3b | c7 89 45 08 0f 8c 14 01 |V..TM..;|..E.....|
|00000080| 00 00 68 a8 5d 03 00 8d | 45 e4 50 ff d3 8d 45 ec |..h.]...|E.P...E.|
|00000090| 50 8d 45 e4 50 ff 15 50 | 4d 01 00 a1 20 55 01 00 |P.E.P..P|M... U..|
|000000a0| 83 48 1c 10 6a 1c 59 6a | 01 b8 9c 61 01 00 8d 7e |.H..j.Yj|...a...~|
|000000b0| 38 68 48 53 01 00 f3 ab | ff 35 20 55 01 00 e8 a9 |8hHS....|.5 U....|
|000000c0| c5 fd ff 56 e8 ab c8 fd | ff ff 76 04 e8 a3 c8 fd |...V....|..v.....|
|000000d0| ff ff 35 20 55 01 00 e8 | 98 c8 fd ff 33 ff 89 7e |..5 U...|....3..~|
|000000e0| 34 8b 35 4c 4d 01 00 68 | 58 55 01 00 ff d6 68 3c |4.5LM..h|XU....h<|
|000000f0| 53 01 00 ff d6 68 50 53 | 01 00 ff d6 68 e0 53 01 |S....hPS|....h.S.|
|00000100| 00 ff d6 68 98 53 01 00 | ff d6 68 c4 52 01 00 ff |...h.S..|..h.R...|
|00000110| d6 c7 05 2c 54 01 00 04 | 00 00 00 ff 15 48 4d 01 |...,T...|.....HM.|
|00000120| 00 a3 18 55 01 00 be 00 | 52 01 00 c7 45 08 08 00 |...U....|R...E...|
|00000130| 00 00 8b ce e8 02 5b fe | ff 83 c6 10 ff 4d 08 75 |......[.|.....M.u|
|00000140| f1 68 30 54 01 00 ff 15 | 44 4d 01 00 e8 64 01 00 |.h0T....|DM...d..|
|00000150| 00 80 25 21 54 01 00 fb | 83 0d 1c 55 01 00 ff 57 |..%!T...|...U...W|
|00000160| 68 88 52 01 00 ff 15 40 | 4d 01 00 57 68 00 56 01 |h.R....@|M..Wh.V.|
|00000170| 00 57 6a ff 57 68 ff 03 | 1f 00 8d 45 fc 50 ff 15 |.Wj.Wh..|...E.P..|
|00000180| 8c 4f 01 00 3b c7 89 45 | 08 7c 09 ff 75 fc ff 15 |.O..;..E|.|..u...|
|00000190| 90 4f 01 00 33 ff 68 38 | 55 01 00 ff 15 3c 4d 01 |.O..3.h8|U....<M.|
|000001a0| 00 68 30 55 01 00 6a 1e | e8 f1 c5 fd ff f6 05 21 |.h0U..j.|.......!|
|000001b0| 54 01 00 01 75 05 e8 96 | c7 fd ff 68 c8 5d 03 00 |T...u...|...h.]..|
|000001c0| 8d 45 f4 50 ff d3 8b 35 | 38 4d 01 00 6a 01 8d 45 |.E.P...5|8M..j..E|
|000001d0| f4 89 45 d4 6a 01 8d 45 | cc 50 68 b0 53 01 00 c7 |..E.j..E|.Ph.S...|
|000001e0| 45 cc 18 00 00 00 89 7d | d0 c7 45 d8 50 00 00 00 |E......}|..E.P...|
|000001f0| 89 7d dc 89 7d e0 ff d6 | 3b c7 0f 8c 48 03 00 00 |.}..}...|;...H...|
|00000200| 68 fc 5d 03 00 8d 45 f4 | 50 ff d3 6a 01 8d 45 f4 |h.]...E.|P..j..E.|
|00000210| 89 45 d4 57 8d 45 cc 50 | 68 28 55 01 00 c7 45 cc |.E.W.E.P|h(U...E.|
|00000220| 18 00 00 00 89 7d d0 c7 | 45 d8 50 00 00 00 89 7d |.....}..|E.P....}|
|00000230| dc 89 7d e0 ff d6 39 7d | 08 0f 8c 1b 03 00 00 57 |..}...9}|.......W|
|00000240| 68 bf 11 01 00 ff 35 28 | 55 01 00 ff 15 30 4d 01 |h.....5(|U....0M.|
|00000250| 00 3b c7 a3 2c 55 01 00 | 0f 84 0e 03 00 00 6a 08 |.;..,U..|......j.|
|00000260| 59 33 c0 6a 20 8d 7d ac | f3 ab 8d 45 ac 50 6a 00 |Y3.j .}.|...E.Pj.|
|00000270| 6a 00 6a 05 ff 15 2c 4d | 01 00 85 c0 7c 0e 33 c0 |j.j...,M|....|.3.|
|00000280| 80 7d ac 01 0f 94 c0 a3 | f0 53 01 00 b8 90 53 01 |.}......|.S....S.|
|00000290| 00 68 ff ff 00 00 68 60 | 53 01 00 a3 94 53 01 00 |.h....h`|S....S..|
|000002a0| a3 90 53 01 00 ff 15 28 | 4d 01 00 8b 45 08 5f 5e |..S....(|M...E._^|
|000002b0| 5b c9 c2 08 00 55 8d 6c | 24 88 81 ec e4 00 00 00 |[....U.l|$.......|
|000002c0| 8a 0d 20 53 01 00 53 33 | db 56 32 c0 3a cb 57 89 |.. S..S3|.V2.:.W.|
|000002d0| 5d 74 76 0e ba f8 53 01 | 00 88 02 fe c0 42 3a c1 |]tv...S.|.....B:.|
|000002e0| 72 f7 6a 04 fe c8 5e a2 | 18 54 01 00 a2 19 54 01 |r.j...^.|.T....T.|
|000002f0| 00 53 8d 45 74 53 89 45 | c4 8d 45 94 50 33 ff 47 |.S.EtS.E|..E.P3.G|
|00000300| 68 28 5e 03 00 57 89 5d | 94 89 7d 98 c7 45 9c 34 |h(^..W.]|..}..E.4|
|00000310| 5e 03 00 c7 45 b0 e9 5f | 03 00 89 75 c0 89 5d c8 |^...E.._|...u..].|
|00000320| c7 45 b4 14 00 00 00 89 | 5d b8 89 5d cc 89 5d d0 |.E......|]..]..].|
|00000330| 89 5d d4 ff 15 6c 4f 01 | 00 6a 10 5a 8d 45 74 89 |.]...lO.|.j.Z.Et.|
|00000340| 45 c4 b8 20 54 01 00 89 | 45 e0 89 45 d8 53 b8 80 |E.. T...|E..E.S..|
|00000350| 52 01 00 53 89 45 fc 89 | 45 f4 8d 45 94 50 b9 fb |R..S.E..|E..E.P..|
|00000360| 20 01 00 68 4c 5e 03 00 | 57 89 5d 94 89 7d 98 c7 | ..hL^..|W.]..}..|
|00000370| 45 9c 58 5e 03 00 c7 45 | b0 5a 5d 03 00 c7 45 b4 |E.X^...E|.Z]...E.|
|00000380| 14 00 00 00 89 5d c8 89 | 75 c0 c7 45 b8 70 5e 03 |.....]..|u..E.p^.|
|00000390| 00 89 4d cc 89 55 d0 89 | 5d e4 89 75 dc c7 45 d4 |..M..U..|]..u..E.|
|000003a0| 9c 5e 03 00 89 4d e8 89 | 55 ec 89 5d 00 89 75 f8 |.^...M..|U..]..u.|
|000003b0| c7 45 f0 a8 5e 03 00 89 | 5d 04 89 5d 08 89 5d 0c |.E..^...|]..]..].|
|000003c0| ff 15 6c 4f 01 00 39 1d | 80 52 01 00 0f 84 aa 01 |..lO..9.|.R......|
|000003d0| 00 00 5f 5e 5b 83 c5 78 | c9 c3 83 7c 24 08 04 75 |.._^[..x|...|$..u|
|000003e0| 1e 8b 44 24 0c 85 c0 74 | 16 8b 00 85 c0 74 09 83 |..D$...t|.....t..|
|000003f0| f8 ff 0f 85 8f 01 00 00 | c6 05 28 54 01 00 01 33 |........|..(T...3|
|00000400| c0 c2 18 00 6e 74 62 75 | 69 6c 64 00 5c 00 44 00 |....ntbu|ild.\.D.|
|00000410| 65 00 76 00 69 00 63 00 | 65 00 5c 00 4e 00 64 00 |e.v.i.c.|e.\.N.d.|
|00000420| 69 00 73 00 00 00 00 00 | 5c 00 47 00 6c 00 6f 00 |i.s.....|\.G.l.o.|
|00000430| 62 00 61 00 6c 00 3f 00 | 3f 00 5c 00 4e 00 44 00 |b.a.l.?.|?.\.N.D.|
|00000440| 49 00 53 00 00 00 00 00 | 5c 00 43 00 61 00 6c 00 |I.S.....|\.C.a.l.|
|00000450| 6c 00 42 00 61 00 63 00 | 6b 00 5c 00 4e 00 64 00 |l.B.a.c.|k.\.N.d.|
|00000460| 69 00 73 00 42 00 69 00 | 6e 00 64 00 55 00 6e 00 |i.s.B.i.|n.d.U.n.|
|00000470| 62 00 69 00 6e 00 64 00 | 00 00 00 00 5c 00 43 00 |b.i.n.d.|....\.C.|
|00000480| 61 00 6c 00 6c 00 42 00 | 61 00 63 00 6b 00 5c 00 |a.l.l.B.|a.c.k.\.|
|00000490| 50 00 6f 00 77 00 65 00 | 72 00 53 00 74 00 61 00 |P.o.w.e.|r.S.t.a.|
|000004a0| 74 00 65 00 00 00 00 00 | 4e 00 44 00 49 00 53 00 |t.e.....|N.D.I.S.|
|000004b0| 00 00 00 00 4d 00 65 00 | 64 00 69 00 61 00 54 00 |....M.e.|d.i.a.T.|
|000004c0| 79 00 70 00 65 00 73 00 | 00 00 00 00 4e 00 44 00 |y.p.e.s.|....N.D.|
|000004d0| 49 00 53 00 00 00 00 00 | 50 00 61 00 72 00 61 00 |I.S.....|P.a.r.a.|
|000004e0| 6d 00 65 00 74 00 65 00 | 72 00 73 00 00 00 00 00 |m.e.t.e.|r.s.....|
|000004f0| 50 00 72 00 6f 00 63 00 | 65 00 73 00 73 00 6f 00 |P.r.o.c.|e.s.s.o.|
|00000500| 72 00 41 00 66 00 66 00 | 69 00 6e 00 69 00 74 00 |r.A.f.f.|i.n.i.t.|
|00000510| 79 00 4d 00 61 00 73 00 | 6b 00 00 00 46 00 6c 00 |y.M.a.s.|k...F.l.|
|00000520| 61 00 67 00 73 00 00 00 | 50 00 61 00 63 00 6b 00 |a.g.s...|P.a.c.k.|
|00000530| 65 00 74 00 53 00 74 00 | 61 00 63 00 6b 00 53 00 |e.t.S.t.|a.c.k.S.|
|00000540| 69 00 7a 00 65 00 00 00 | 50 68 40 5f 03 00 e8 21 |i.z.e...|Ph@_...!|
|00000550| ed fd ff 59 59 e9 a6 fc | ff ff 50 68 78 5f 03 00 |...YY...|..Phx_..|
|00000560| e8 0f ed fd ff 59 59 e9 | 20 fd ff ff 68 b0 5f 03 |.....YY.| ...h._.|
|00000570| 00 e8 fe ec fd ff 59 e9 | e2 fc ff ff 89 3d 80 52 |......Y.|.....=.R|
|00000580| 01 00 e9 4b fe ff ff 8b | d0 32 c0 32 c9 56 85 d2 |...K....|.2.2.V..|
|00000590| 74 1c f6 c2 01 74 0b 0f | b6 f0 88 8e f8 53 01 00 |t....t..|.....S..|
|000005a0| fe c0 d1 ea fe c1 3a 0d | 18 54 01 00 76 e0 fe c8 |......:.|.T..v...|
|000005b0| a2 18 54 01 00 a2 19 54 | 01 00 5e e9 3f fe ff ff |..T....T|..^.?...|
|000005c0| 4e 64 69 73 3a 20 66 61 | 69 6c 65 64 20 74 6f 20 |Ndis: fa|iled to |
|000005d0| 63 72 65 61 74 65 20 61 | 20 43 61 6c 6c 62 61 63 |create a| Callbac|
|000005e0| 6b 20 6f 62 6a 65 63 74 | 2e 20 53 74 61 74 75 73 |k object|. Status|
|000005f0| 20 25 6c 78 0a 00 00 00 | 4e 64 69 73 3a 20 66 61 | %lx....|Ndis: fa|
|00000600| 69 6c 65 64 20 74 6f 20 | 63 72 65 61 74 65 20 61 |iled to |create a|
|00000610| 20 43 61 6c 6c 62 61 63 | 6b 20 6f 62 6a 65 63 74 | Callbac|k object|
|00000620| 2e 20 53 74 61 74 75 73 | 20 25 6c 78 0a 00 00 00 |. Status| %lx....|
|00000630| 4e 64 69 73 3a 20 66 61 | 69 6c 65 64 20 74 6f 20 |Ndis: fa|iled to |
|00000640| 72 65 67 69 73 74 65 72 | 20 61 20 70 6f 77 65 72 |register| a power|
|00000650| 20 73 74 61 74 65 20 43 | 61 6c 6c 62 61 63 6b 20 | state C|allback |
|00000660| 72 6f 75 74 69 6e 65 0a | 00 83 7c 24 08 04 55 56 |routine.|..|$..UV|
|00000670| 0f 85 b6 00 00 00 8b 6c | 24 14 85 ed 0f 84 aa 00 |.......l|$.......|
|00000680| 00 00 8b 75 00 83 fe 0a | 0f 86 9e 00 00 00 a1 70 |...u....|.......p|
|00000690| 54 01 00 8b 0d c8 54 01 | 00 8b d0 85 d2 76 10 3b |T.....T.|.....v.;|
|000006a0| 31 0f 84 85 00 00 00 83 | c1 04 83 ea 04 75 f0 3b |1.......|.....u.;|
|000006b0| 05 5c 55 01 00 75 5d 53 | 68 4e 44 6d 74 83 c0 10 |.\U..u]S|hNDmt...|
|000006c0| 50 6a 00 ff 15 98 4f 01 | 00 8b d8 85 db 74 39 8b |Pj....O.|.....t9.|
|000006d0| 0d 70 54 01 00 8b 35 c8 | 54 01 00 8b c1 57 c1 e9 |.pT...5.|T....W..|
|000006e0| 02 8b fb f3 a5 8b c8 83 | e1 03 f3 a4 a1 c8 54 01 |........|......T.|
|000006f0| 00 3d d0 54 01 00 5f 74 | 09 6a 00 50 ff 15 a0 4f |.=.T.._t|.j.P...O|
|00000700| 01 00 89 1d c8 54 01 00 | a1 70 54 01 00 3b 05 5c |.....T..|.pT..;.\|
|00000710| 55 01 00 5b 73 16 8b 4d | 00 8b 15 c8 54 01 00 c1 |U..[s..M|....T...|
|00000720| e8 02 89 0c 82 83 05 70 | 54 01 00 04 5e 33 c0 5d |.......p|T...^3.]|
|00000730| c2 18 00 90 41 75 67 20 | 32 38 20 32 30 30 32 00 |....Aug |28 2002.|
|00000740| 32 33 3a 32 35 3a 34 30 | 00 00 00 00 20 61 02 00 |23:25:40|.... a..|
|00000750| 00 00 00 00 00 00 00 00 | 08 61 02 00 00 4d 00 00 |........|.a...M..|
|00000760| c8 63 02 00 00 00 00 00 | 00 00 00 00 16 61 02 00 |.c......|.....a..|
|00000770| a8 4f 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |.O......|........|
|00000780| 00 00 00 00 00 00 00 00 | 6e 74 6f 73 6b 72 6e 6c |........|ntoskrnl|
|00000790| 2e 65 78 65 00 00 48 41 | 4c 2e 64 6c 6c 00 90 90 |.exe..HA|L.dll...|
|000007a0| 04 64 02 00 18 64 02 00 | 38 64 02 00 4c 64 02 00 |.d...d..|8d..Ld..|
|000007b0| 5e 64 02 00 76 64 02 00 | 98 64 02 00 b0 64 02 00 |^d..vd..|.d...d..|
|000007c0| c4 64 02 00 e4 64 02 00 | fa 64 02 00 0e 65 02 00 |.d...d..|.d...e..|
|000007d0| 24 65 02 00 3a 65 02 00 | 46 65 02 00 5a 65 02 00 |$e..:e..|Fe..Ze..|
|000007e0| 6e 65 02 00 82 65 02 00 | 9e 65 02 00 b6 65 02 00 |ne...e..|.e...e..|
|000007f0| ce 65 02 00 e6 65 02 00 | f8 65 02 00 0e 66 02 00 |.e...e..|.e...f..|
|00000800| 26 66 02 00 30 66 02 00 | 3c 66 02 00 56 66 02 00 |&f..0f..|<f..Vf..|
|00000810| 6a 66 02 00 7c 66 02 00 | 98 66 02 00 b0 66 02 00 |jf..|f..|.f...f..|
|00000820| cc 66 02 00 e2 66 02 00 | fe 66 02 00 08 67 02 00 |.f...f..|.f...g..|
|00000830| 22 67 02 00 40 67 02 00 | 5c 67 02 00 7c 67 02 00 |"g..@g..|\g..|g..|
|00000840| 9a 67 02 00 b6 67 02 00 | d0 67 02 00 e8 67 02 00 |.g...g..|.g...g..|
|00000850| f6 67 02 00 12 68 02 00 | 2e 68 02 00 3e 68 02 00 |.g...h..|.h..>h..|
|00000860| 52 68 02 00 66 68 02 00 | 76 68 02 00 88 68 02 00 |Rh..fh..|vh...h..|
|00000870| 96 68 02 00 b0 68 02 00 | c0 68 02 00 de 68 02 00 |.h...h..|.h...h..|
|00000880| fe 68 02 00 1c 69 02 00 | 2c 69 02 00 36 69 02 00 |.h...i..|,i..6i..|
|00000890| 56 69 02 00 72 69 02 00 | 8a 69 02 00 a2 69 02 00 |Vi..ri..|.i...i..|
|000008a0| ba 69 02 00 de 69 02 00 | fc 69 02 00 0c 6a 02 00 |.i...i..|.i...j..|
|000008b0| 1a 6a 02 00 30 6a 02 00 | 40 6a 02 00 5c 6a 02 00 |.j..0j..|@j..\j..|
|000008c0| 6c 6a 02 00 8c 6a 02 00 | ac 6a 02 00 b6 6a 02 00 |lj...j..|.j...j..|
|000008d0| c6 6a 02 00 d2 6a 02 00 | e4 6a 02 00 fe 6a 02 00 |.j...j..|.j...j..|
|000008e0| 1e 6b 02 00 3e 6b 02 00 | 5c 6b 02 00 7a 6b 02 00 |.k..>k..|\k..zk..|
|000008f0| 94 6b 02 00 ae 6b 02 00 | c6 6b 02 00 e0 6b 02 00 |.k...k..|.k...k..|
|00000900| f4 6b 02 00 0c 6c 02 00 | 28 6c 02 00 3a 6c 02 00 |.k...l..|(l..:l..|
|00000910| 50 6c 02 00 64 6c 02 00 | 74 6c 02 00 86 6c 02 00 |Pl..dl..|tl...l..|
|00000920| 9e 6c 02 00 c0 6c 02 00 | d2 6c 02 00 f0 6c 02 00 |.l...l..|.l...l..|
|00000930| 10 6d 02 00 20 6d 02 00 | 40 6d 02 00 4e 6d 02 00 |.m.. m..|@m..Nm..|
|00000940| 74 6d 02 00 92 6d 02 00 | a4 6d 02 00 c2 6d 02 00 |tm...m..|.m...m..|
|00000950| d8 6d 02 00 fa 6d 02 00 | 06 6e 02 00 16 6e 02 00 |.m...m..|.n...n..|
|00000960| 30 6e 02 00 46 6e 02 00 | 60 6e 02 00 78 6e 02 00 |0n..Fn..|`n..xn..|
|00000970| 88 6e 02 00 9c 6e 02 00 | b2 6e 02 00 c2 6e 02 00 |.n...n..|.n...n..|
|00000980| d4 6e 02 00 ee 6e 02 00 | 02 6f 02 00 18 6f 02 00 |.n...n..|.o...o..|
|00000990| 2e 6f 02 00 4e 6f 02 00 | 70 6f 02 00 7c 6f 02 00 |.o..No..|po..|o..|
|000009a0| 96 6f 02 00 a6 6f 02 00 | b6 6f 02 00 ca 6f 02 00 |.o...o..|.o...o..|
|000009b0| dc 6f 02 00 f4 6f 02 00 | 08 70 02 00 28 70 02 00 |.o...o..|.p..(p..|
|000009c0| 42 70 02 00 62 70 02 00 | 82 70 02 00 a0 70 02 00 |Bp..bp..|.p...p..|
|000009d0| c0 70 02 00 e0 70 02 00 | 00 71 02 00 20 71 02 00 |.p...p..|.q.. q..|
|000009e0| 36 71 02 00 42 71 02 00 | 60 71 02 00 7e 71 02 00 |6q..Bq..|`q..~q..|
|000009f0| 9c 71 02 00 b6 71 02 00 | ca 71 02 00 e0 71 02 00 |.q...q..|.q...q..|
|00000a00| f0 71 02 00 08 72 02 00 | 1c 72 02 00 2a 72 02 00 |.q...r..|.r..*r..|
|00000a10| 44 72 02 00 5c 72 02 00 | 76 72 02 00 96 72 02 00 |Dr..\r..|vr...r..|
|00000a20| b8 72 02 00 ce 72 02 00 | e4 72 02 00 f4 72 02 00 |.r...r..|.r...r..|
|00000a30| 0c 73 02 00 16 73 02 00 | 28 73 02 00 40 73 02 00 |.s...s..|(s..@s..|
|00000a40| 60 73 02 00 00 00 00 00 | 74 73 02 00 88 73 02 00 |`s......|ts...s..|
|00000a50| 96 73 02 00 a4 73 02 00 | c0 73 02 00 d2 73 02 00 |.s...s..|.s...s..|
|00000a60| e6 73 02 00 f8 73 02 00 | 0c 74 02 00 20 74 02 00 |.s...s..|.t.. t..|
|00000a70| 34 74 02 00 4e 74 02 00 | 62 74 02 00 76 74 02 00 |4t..Nt..|bt..vt..|
|00000a80| 00 00 00 00 6d 00 45 78 | 4e 6f 74 69 66 79 43 61 |....m.Ex|NotifyCa|
|00000a90| 6c 6c 62 61 63 6b 00 00 | 0c 04 52 74 6c 49 6d 61 |llback..|..RtlIma|
|00000aa0| 67 65 44 69 72 65 63 74 | 6f 72 79 45 6e 74 72 79 |geDirect|oryEntry|
|00000ab0| 54 6f 44 61 74 61 00 00 | 0f 02 4b 65 49 6e 69 74 |ToData..|..KeInit|
|00000ac0| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 39 02 4b 65 |ializeEv|ent.9.Ke|
|00000ad0| 52 65 6c 65 61 73 65 4d | 75 74 65 78 00 00 64 02 |ReleaseM|utex..d.|
|00000ae0| 4b 65 57 61 69 74 46 6f | 72 53 69 6e 67 6c 65 4f |KeWaitFo|rSingleO|
|00000af0| 62 6a 65 63 74 00 a0 03 | 52 74 6c 41 70 70 65 6e |bject...|RtlAppen|
|00000b00| 64 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |dUnicode|StringTo|
|00000b10| 53 74 72 69 6e 67 00 00 | bb 03 52 74 6c 43 6f 70 |String..|..RtlCop|
|00000b20| 79 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |yUnicode|String..|
|00000b30| f5 03 52 74 6c 46 72 65 | 65 41 6e 73 69 53 74 72 |..RtlFre|eAnsiStr|
|00000b40| 69 6e 67 00 82 04 52 74 | 6c 55 6e 69 63 6f 64 65 |ing...Rt|lUnicode|
|00000b50| 53 74 72 69 6e 67 54 6f | 41 6e 73 69 53 74 72 69 |StringTo|AnsiStri|
|00000b60| 6e 67 00 00 db 01 49 6f | 66 43 6f 6d 70 6c 65 74 |ng....Io|fComplet|
|00000b70| 65 52 65 71 75 65 73 74 | 00 00 12 02 4b 65 49 6e |eRequest|....KeIn|
|00000b80| 69 74 69 61 6c 69 7a 65 | 4d 75 74 65 78 00 24 05 |itialize|Mutex.$.|
|00000b90| 5a 77 50 6f 77 65 72 49 | 6e 66 6f 72 6d 61 74 69 |ZwPowerI|nformati|
|00000ba0| 6f 6e 00 00 76 00 45 78 | 52 65 67 69 73 74 65 72 |on..v.Ex|Register|
|00000bb0| 43 61 6c 6c 62 61 63 6b | 00 00 30 00 44 62 67 50 |Callback|..0.DbgP|
|00000bc0| 72 69 6e 74 00 00 43 00 | 45 78 43 72 65 61 74 65 |rint..C.|ExCreate|
|00000bd0| 43 61 6c 6c 62 61 63 6b | 00 00 2a 02 4b 65 51 75 |Callback|..*.KeQu|
|00000be0| 65 72 79 53 79 73 74 65 | 6d 54 69 6d 65 00 13 02 |erySyste|mTime...|
|00000bf0| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 51 75 65 75 |KeInitia|lizeQueu|
|00000c00| 65 00 56 00 45 78 49 6e | 69 74 69 61 6c 69 7a 65 |e.V.ExIn|itialize|
|00000c10| 52 65 73 6f 75 72 63 65 | 4c 69 74 65 00 00 2c 02 |Resource|Lite..,.|
|00000c20| 4b 65 51 75 65 72 79 54 | 69 6d 65 49 6e 63 72 65 |KeQueryT|imeIncre|
|00000c30| 6d 65 6e 74 00 00 15 02 | 4b 65 49 6e 69 74 69 61 |ment....|KeInitia|
|00000c40| 6c 69 7a 65 53 70 69 6e | 4c 6f 63 6b 00 00 41 01 |lizeSpin|Lock..A.|
|00000c50| 49 6f 43 72 65 61 74 65 | 53 79 6d 62 6f 6c 69 63 |IoCreate|Symbolic|
|00000c60| 4c 69 6e 6b 00 00 38 01 | 49 6f 43 72 65 61 74 65 |Link..8.|IoCreate|
|00000c70| 44 65 76 69 63 65 00 00 | 22 02 4b 65 4e 75 6d 62 |Device..|".KeNumb|
|00000c80| 65 72 50 72 6f 63 65 73 | 73 6f 72 73 00 00 9e 04 |erProces|sors....|
|00000c90| 52 74 6c 57 72 69 74 65 | 52 65 67 69 73 74 72 79 |RtlWrite|Registry|
|00000ca0| 56 61 6c 75 65 00 f4 04 | 5a 77 43 6c 6f 73 65 00 |Value...|ZwClose.|
|00000cb0| 1a 05 5a 77 4f 70 65 6e | 4b 65 79 00 81 01 49 6f |..ZwOpen|Key...Io|
|00000cc0| 4f 70 65 6e 44 65 76 69 | 63 65 52 65 67 69 73 74 |OpenDevi|ceRegist|
|00000cd0| 72 79 4b 65 79 00 a9 03 | 52 74 6c 43 68 61 72 54 |ryKey...|RtlCharT|
|00000ce0| 6f 49 6e 74 65 67 65 72 | 00 00 08 05 5a 77 45 6e |oInteger|....ZwEn|
|00000cf0| 75 6d 65 72 61 74 65 4b | 65 79 00 00 84 04 52 74 |umerateK|ey....Rt|
|00000d00| 6c 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |lUnicode|StringTo|
|00000d10| 49 6e 74 65 67 65 72 00 | e0 03 52 74 6c 45 71 75 |Integer.|..RtlEqu|
|00000d20| 61 6c 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |alUnicod|eString.|
|00000d30| a1 03 52 74 6c 41 70 70 | 65 6e 64 55 6e 69 63 6f |..RtlApp|endUnico|
|00000d40| 64 65 54 6f 53 74 72 69 | 6e 67 00 00 67 01 49 6f |deToStri|ng..g.Io|
|00000d50| 47 65 74 44 65 76 69 63 | 65 50 72 6f 70 65 72 74 |GetDevic|ePropert|
|00000d60| 79 00 a7 01 49 6f 53 65 | 74 44 65 76 69 63 65 49 |y...IoSe|tDeviceI|
|00000d70| 6e 74 65 72 66 61 63 65 | 53 74 61 74 65 00 62 05 |nterface|State.b.|
|00000d80| 5f 61 6c 6c 64 69 76 00 | 79 01 49 6f 49 6e 76 61 |_alldiv.|y.IoInva|
|00000d90| 6c 69 64 61 74 65 44 65 | 76 69 63 65 53 74 61 74 |lidateDe|viceStat|
|00000da0| 65 00 c0 02 4d 6d 55 6e | 6c 6f 63 6b 50 61 67 61 |e...MmUn|lockPaga|
|00000db0| 62 6c 65 49 6d 61 67 65 | 53 65 63 74 69 6f 6e 00 |bleImage|Section.|
|00000dc0| a1 02 4d 6d 4c 6f 63 6b | 50 61 67 61 62 6c 65 44 |..MmLock|PagableD|
|00000dd0| 61 74 61 53 65 63 74 69 | 6f 6e 00 00 a3 02 4d 6d |ataSecti|on....Mm|
|00000de0| 4c 6f 63 6b 50 61 67 61 | 62 6c 65 53 65 63 74 69 |LockPaga|bleSecti|
|00000df0| 6f 6e 42 79 48 61 6e 64 | 6c 65 00 00 84 02 4d 6d |onByHand|le....Mm|
|00000e00| 41 6c 6c 6f 63 61 74 65 | 43 6f 6e 74 69 67 75 6f |Allocate|Contiguo|
|00000e10| 75 73 4d 65 6d 6f 72 79 | 00 00 87 02 4d 6d 41 6c |usMemory|....MmAl|
|00000e20| 6c 6f 63 61 74 65 4e 6f | 6e 43 61 63 68 65 64 4d |locateNo|nCachedM|
|00000e30| 65 6d 6f 72 79 00 90 02 | 4d 6d 46 72 65 65 43 6f |emory...|MmFreeCo|
|00000e40| 6e 74 69 67 75 6f 75 73 | 4d 65 6d 6f 72 79 00 00 |ntiguous|Memory..|
|00000e50| 93 02 4d 6d 46 72 65 65 | 4e 6f 6e 43 61 63 68 65 |..MmFree|NonCache|
|00000e60| 64 4d 65 6d 6f 72 79 00 | 5d 02 4b 65 54 69 63 6b |dMemory.|].KeTick|
|00000e70| 43 6f 75 6e 74 00 15 01 | 49 6e 74 65 72 6c 6f 63 |Count...|Interloc|
|00000e80| 6b 65 64 50 75 73 68 45 | 6e 74 72 79 53 4c 69 73 |kedPushE|ntrySLis|
|00000e90| 74 00 89 02 4d 6d 42 75 | 69 6c 64 4d 64 6c 46 6f |t...MmBu|ildMdlFo|
|00000ea0| 72 4e 6f 6e 50 61 67 65 | 64 50 6f 6f 6c 00 1f 01 |rNonPage|dPool...|
|00000eb0| 49 6f 41 6c 6c 6f 63 61 | 74 65 4d 64 6c 00 29 01 |IoAlloca|teMdl.).|
|00000ec0| 49 6f 42 75 69 6c 64 50 | 61 72 74 69 61 6c 4d 64 |IoBuildP|artialMd|
|00000ed0| 6c 00 a5 02 4d 6d 4d 61 | 70 4c 6f 63 6b 65 64 50 |l...MmMa|pLockedP|
|00000ee0| 61 67 65 73 00 00 a4 02 | 4d 6d 4d 61 70 49 6f 53 |ages....|MmMapIoS|
|00000ef0| 70 61 63 65 00 00 c2 02 | 4d 6d 55 6e 6d 61 70 49 |pace....|MmUnmapI|
|00000f00| 6f 53 70 61 63 65 00 00 | 3c 05 5a 77 52 65 61 64 |oSpace..|<.ZwRead|
|00000f10| 46 69 6c 65 00 00 2e 05 | 5a 77 51 75 65 72 79 49 |File....|ZwQueryI|
|00000f20| 6e 66 6f 72 6d 61 74 69 | 6f 6e 46 69 6c 65 00 00 |nformati|onFile..|
|00000f30| f9 04 5a 77 43 72 65 61 | 74 65 46 69 6c 65 00 00 |..ZwCrea|teFile..|
|00000f40| e1 03 52 74 6c 45 78 74 | 65 6e 64 65 64 49 6e 74 |..RtlExt|endedInt|
|00000f50| 65 67 65 72 4d 75 6c 74 | 69 70 6c 79 00 00 50 00 |egerMult|iply..P.|
|00000f60| 45 78 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |ExGetCur|rentProc|
|00000f70| 65 73 73 6f 72 43 70 75 | 55 73 61 67 65 00 4f 00 |essorCpu|Usage.O.|
|00000f80| 45 78 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |ExGetCur|rentProc|
|00000f90| 65 73 73 6f 72 43 6f 75 | 6e 74 73 00 43 02 4b 65 |essorCou|nts.C.Ke|
|00000fa0| 52 65 73 65 74 45 76 65 | 6e 74 00 00 64 05 5f 61 |ResetEve|nt..d._a|
|00000fb0| 6c 6c 6d 75 6c 00 a6 02 | 4d 6d 4d 61 70 4c 6f 63 |llmul...|MmMapLoc|
|00000fc0| 6b 65 64 50 61 67 65 73 | 53 70 65 63 69 66 79 43 |kedPages|SpecifyC|
|00000fd0| 61 63 68 65 00 00 14 01 | 49 6e 74 65 72 6c 6f 63 |ache....|Interloc|
|00000fe0| 6b 65 64 50 6f 70 45 6e | 74 72 79 53 4c 69 73 74 |kedPopEn|trySList|
|00000ff0| 00 00 fd 03 52 74 6c 47 | 65 74 43 61 6c 6c 65 72 |....RtlG|etCaller|
|00001000| 73 41 64 64 72 65 73 73 | 00 00 25 03 4f 62 66 44 |sAddress|..%.ObfD|
|00001010| 65 72 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |ereferen|ceObject|
|00001020| 00 00 f9 03 52 74 6c 46 | 72 65 65 55 6e 69 63 6f |....RtlF|reeUnico|
|00001030| 64 65 53 74 72 69 6e 67 | 00 00 c0 01 49 6f 55 6e |deString|....IoUn|
|00001040| 72 65 67 69 73 74 65 72 | 53 68 75 74 64 6f 77 6e |register|Shutdown|
|00001050| 4e 6f 74 69 66 69 63 61 | 74 69 6f 6e 00 00 6b 01 |Notifica|tion..k.|
|00001060| 49 6f 47 65 74 44 72 69 | 76 65 72 4f 62 6a 65 63 |IoGetDri|verObjec|
|00001070| 74 45 78 74 65 6e 73 69 | 6f 6e 00 00 59 02 4b 65 |tExtensi|on..Y.Ke|
|00001080| 53 65 74 54 69 6d 65 72 | 45 78 00 00 58 02 4b 65 |SetTimer|Ex..X.Ke|
|00001090| 53 65 74 54 69 6d 65 72 | 00 00 17 02 4b 65 49 6e |SetTimer|....KeIn|
|000010a0| 69 74 69 61 6c 69 7a 65 | 54 69 6d 65 72 45 78 00 |itialize|TimerEx.|
|000010b0| ee 01 4b 65 42 75 67 43 | 68 65 63 6b 45 78 00 00 |..KeBugC|heckEx..|
|000010c0| cf 01 49 6f 57 4d 49 52 | 65 67 69 73 74 72 61 74 |..IoWMIR|egistrat|
|000010d0| 69 6f 6e 43 6f 6e 74 72 | 6f 6c 00 00 1b 02 4b 65 |ionContr|ol....Ke|
|000010e0| 49 6e 73 65 72 74 51 75 | 65 75 65 00 59 00 45 78 |InsertQu|eue.Y.Ex|
|000010f0| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 41 64 64 4c 61 |Interloc|kedAddLa|
|00001100| 72 67 65 49 6e 74 65 67 | 65 72 00 00 89 00 45 78 |rgeInteg|er....Ex|
|00001110| 66 49 6e 74 65 72 6c 6f | 63 6b 65 64 49 6e 73 65 |fInterlo|ckedInse|
|00001120| 72 74 48 65 61 64 4c 69 | 73 74 00 00 91 05 6d 65 |rtHeadLi|st....me|
|00001130| 6d 6d 6f 76 65 00 2d 00 | 44 62 67 42 72 65 61 6b |mmove.-.|DbgBreak|
|00001140| 50 6f 69 6e 74 00 5b 01 | 49 6f 46 72 65 65 4d 64 |Point.[.|IoFreeMd|
|00001150| 6c 00 d4 01 49 6f 57 4d | 49 57 72 69 74 65 45 76 |l...IoWM|IWriteEv|
|00001160| 65 6e 74 00 87 00 45 78 | 66 49 6e 74 65 72 6c 6f |ent...Ex|fInterlo|
|00001170| 63 6b 65 64 41 64 64 55 | 6c 6f 6e 67 00 00 8a 00 |ckedAddU|long....|
|00001180| 45 78 66 49 6e 74 65 72 | 6c 6f 63 6b 65 64 49 6e |ExfInter|lockedIn|
|00001190| 73 65 72 74 54 61 69 6c | 4c 69 73 74 00 00 8d 00 |sertTail|List....|
|000011a0| 45 78 66 49 6e 74 65 72 | 6c 6f 63 6b 65 64 52 65 |ExfInter|lockedRe|
|000011b0| 6d 6f 76 65 48 65 61 64 | 4c 69 73 74 00 00 8c 00 |moveHead|List....|
|000011c0| 45 78 66 49 6e 74 65 72 | 6c 6f 63 6b 65 64 50 75 |ExfInter|lockedPu|
|000011d0| 73 68 45 6e 74 72 79 4c | 69 73 74 00 8b 00 45 78 |shEntryL|ist...Ex|
|000011e0| 66 49 6e 74 65 72 6c 6f | 63 6b 65 64 50 6f 70 45 |fInterlo|ckedPopE|
|000011f0| 6e 74 72 79 4c 69 73 74 | 00 00 99 01 49 6f 52 65 |ntryList|....IoRe|
|00001200| 6c 65 61 73 65 43 61 6e | 63 65 6c 53 70 69 6e 4c |leaseCan|celSpinL|
|00001210| 6f 63 6b 00 16 01 49 6f | 41 63 71 75 69 72 65 43 |ock...Io|AcquireC|
|00001220| 61 6e 63 65 6c 53 70 69 | 6e 4c 6f 63 6b 00 d5 01 |ancelSpi|nLock...|
|00001230| 49 6f 57 72 69 74 65 45 | 72 72 6f 72 4c 6f 67 45 |IoWriteE|rrorLogE|
|00001240| 6e 74 72 79 00 00 1d 01 | 49 6f 41 6c 6c 6f 63 61 |ntry....|IoAlloca|
|00001250| 74 65 45 72 72 6f 72 4c | 6f 67 45 6e 74 72 79 00 |teErrorL|ogEntry.|
|00001260| 1d 02 4b 65 49 6e 73 65 | 72 74 51 75 65 75 65 44 |..KeInse|rtQueueD|
|00001270| 70 63 00 00 4b 01 49 6f | 44 65 6c 65 74 65 53 79 |pc..K.Io|DeleteSy|
|00001280| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 92 01 49 6f |mbolicLi|nk....Io|
|00001290| 52 65 67 69 73 74 65 72 | 44 65 76 69 63 65 49 6e |Register|DeviceIn|
|000012a0| 74 65 72 66 61 63 65 00 | 0e 02 4b 65 49 6e 69 74 |terface.|..KeInit|
|000012b0| 69 61 6c 69 7a 65 44 70 | 63 00 50 02 4b 65 53 65 |ializeDp|c.P.KeSe|
|000012c0| 74 49 6d 70 6f 72 74 61 | 6e 63 65 44 70 63 00 00 |tImporta|nceDpc..|
|000012d0| 16 02 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 54 69 |..KeInit|ializeTi|
|000012e0| 6d 65 72 00 ef 01 4b 65 | 43 61 6e 63 65 6c 54 69 |mer...Ke|CancelTi|
|000012f0| 6d 65 72 00 49 01 49 6f | 44 65 6c 65 74 65 44 65 |mer.I.Io|DeleteDe|
|00001300| 76 69 63 65 00 00 7a 00 | 45 78 52 65 6c 65 61 73 |vice..z.|ExReleas|
|00001310| 65 52 65 73 6f 75 72 63 | 65 4c 69 74 65 00 37 00 |eResourc|eLite.7.|
|00001320| 45 78 41 63 71 75 69 72 | 65 52 65 73 6f 75 72 63 |ExAcquir|eResourc|
|00001330| 65 45 78 63 6c 75 73 69 | 76 65 4c 69 74 65 00 00 |eExclusi|veLite..|
|00001340| 6a 01 49 6f 47 65 74 44 | 6d 61 41 64 61 70 74 65 |j.IoGetD|maAdapte|
|00001350| 72 00 34 02 4b 65 52 65 | 67 69 73 74 65 72 42 75 |r.4.KeRe|gisterBu|
|00001360| 67 43 68 65 63 6b 43 61 | 6c 6c 62 61 63 6b 00 00 |gCheckCa|llback..|
|00001370| f5 01 4b 65 44 65 72 65 | 67 69 73 74 65 72 42 75 |..KeDere|gisterBu|
|00001380| 67 43 68 65 63 6b 43 61 | 6c 6c 62 61 63 6b 00 00 |gCheckCa|llback..|
|00001390| da 01 49 6f 66 43 61 6c | 6c 44 72 69 76 65 72 00 |..IofCal|lDriver.|
|000013a0| 2a 01 49 6f 42 75 69 6c | 64 53 79 6e 63 68 72 6f |*.IoBuil|dSynchro|
|000013b0| 6e 6f 75 73 46 73 64 52 | 65 71 75 65 73 74 00 00 |nousFsdR|equest..|
|000013c0| 2d 01 49 6f 43 61 6e 63 | 65 6c 49 72 70 00 00 02 |-.IoCanc|elIrp...|
|000013d0| 4b 65 47 65 74 52 65 63 | 6f 6d 6d 65 6e 64 65 64 |KeGetRec|ommended|
|000013e0| 53 68 61 72 65 64 44 61 | 74 61 41 6c 69 67 6e 6d |SharedDa|taAlignm|
|000013f0| 65 6e 74 00 44 00 45 78 | 44 65 6c 65 74 65 4e 50 |ent.D.Ex|DeleteNP|
|00001400| 61 67 65 64 4c 6f 6f 6b | 61 73 69 64 65 4c 69 73 |agedLook|asideLis|
|00001410| 74 00 4c 01 49 6f 44 65 | 74 61 63 68 44 65 76 69 |t.L.IoDe|tachDevi|
|00001420| 63 65 00 00 25 01 49 6f | 41 74 74 61 63 68 44 65 |ce..%.Io|AttachDe|
|00001430| 76 69 63 65 54 6f 44 65 | 76 69 63 65 53 74 61 63 |viceToDe|viceStac|
|00001440| 6b 00 9c 02 4d 6d 49 73 | 44 72 69 76 65 72 56 65 |k...MmIs|DriverVe|
|00001450| 72 69 66 79 69 6e 67 00 | 1c 01 49 6f 41 6c 6c 6f |rifying.|..IoAllo|
|00001460| 63 61 74 65 44 72 69 76 | 65 72 4f 62 6a 65 63 74 |cateDriv|erObject|
|00001470| 45 78 74 65 6e 73 69 6f | 6e 00 5a 01 49 6f 46 72 |Extensio|n.Z.IoFr|
|00001480| 65 65 49 72 70 00 1e 01 | 49 6f 41 6c 6c 6f 63 61 |eeIrp...|IoAlloca|
|00001490| 74 65 49 72 70 00 5b 02 | 4b 65 53 79 6e 63 68 72 |teIrp.[.|KeSynchr|
|000014a0| 6f 6e 69 7a 65 45 78 65 | 63 75 74 69 6f 6e 00 00 |onizeExe|cution..|
|000014b0| 36 01 49 6f 43 6f 6e 6e | 65 63 74 49 6e 74 65 72 |6.IoConn|ectInter|
|000014c0| 72 75 70 74 00 00 55 02 | 4b 65 53 65 74 54 61 72 |rupt..U.|KeSetTar|
|000014d0| 67 65 74 50 72 6f 63 65 | 73 73 6f 72 44 70 63 00 |getProce|ssorDpc.|
|000014e0| 50 01 49 6f 44 69 73 63 | 6f 6e 6e 65 63 74 49 6e |P.IoDisc|onnectIn|
|000014f0| 74 65 72 72 75 70 74 00 | 11 05 5a 77 4c 6f 61 64 |terrupt.|..ZwLoad|
|00001500| 44 72 69 76 65 72 00 00 | 31 03 50 6f 52 65 71 75 |Driver..|1.PoRequ|
|00001510| 65 73 74 50 6f 77 65 72 | 49 72 70 00 37 03 50 6f |estPower|Irp.7.Po|
|00001520| 53 74 61 72 74 4e 65 78 | 74 50 6f 77 65 72 49 72 |StartNex|tPowerIr|
|00001530| 70 00 2b 03 50 6f 43 61 | 6c 6c 44 72 69 76 65 72 |p.+.PoCa|llDriver|
|00001540| 00 00 34 03 50 6f 53 65 | 74 50 6f 77 65 72 53 74 |..4.PoSe|tPowerSt|
|00001550| 61 74 65 00 cc 04 53 65 | 53 69 6e 67 6c 65 50 72 |ate...Se|SinglePr|
|00001560| 69 76 69 6c 65 67 65 43 | 68 65 63 6b 00 00 0e 04 |ivilegeC|heck....|
|00001570| 52 74 6c 49 6e 69 74 41 | 6e 73 69 53 74 72 69 6e |RtlInitA|nsiStrin|
|00001580| 67 00 81 02 4d 6d 41 64 | 64 56 65 72 69 66 69 65 |g...MmAd|dVerifie|
|00001590| 72 54 68 75 6e 6b 73 00 | a0 02 4d 6d 49 73 56 65 |rThunks.|..MmIsVe|
|000015a0| 72 69 66 69 65 72 45 6e | 61 62 6c 65 64 00 41 00 |rifierEn|abled.A.|
|000015b0| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|000015c0| 74 68 54 61 67 50 72 69 | 6f 72 69 74 79 00 54 00 |thTagPri|ority.T.|
|000015d0| 45 78 49 6e 69 74 69 61 | 6c 69 7a 65 4e 50 61 67 |ExInitia|lizeNPag|
|000015e0| 65 64 4c 6f 6f 6b 61 73 | 69 64 65 4c 69 73 74 00 |edLookas|ideList.|
|000015f0| fc 03 52 74 6c 47 65 74 | 41 63 65 00 96 03 52 74 |..RtlGet|Ace...Rt|
|00001600| 6c 41 64 64 41 63 63 65 | 73 73 41 6c 6c 6f 77 65 |lAddAcce|ssAllowe|
|00001610| 64 41 63 65 00 00 bc 03 | 52 74 6c 43 72 65 61 74 |dAce....|RtlCreat|
|00001620| 65 41 63 6c 00 00 38 04 | 52 74 6c 4c 65 6e 67 74 |eAcl..8.|RtlLengt|
|00001630| 68 53 69 64 00 00 16 04 | 52 74 6c 49 6e 69 74 69 |hSid....|RtlIniti|
|00001640| 61 6c 69 7a 65 53 69 64 | 00 00 3d 00 45 78 41 6c |alizeSid|..=.ExAl|
|00001650| 6c 6f 63 61 74 65 50 6f | 6f 6c 00 00 36 04 52 74 |locatePo|ol..6.Rt|
|00001660| 6c 4c 65 6e 67 74 68 52 | 65 71 75 69 72 65 64 53 |lLengthR|equiredS|
|00001670| 69 64 00 00 3f 04 52 74 | 6c 4d 61 70 47 65 6e 65 |id..?.Rt|lMapGene|
|00001680| 72 69 63 4d 61 73 6b 00 | 6c 01 49 6f 47 65 74 46 |ricMask.|l.IoGetF|
|00001690| 69 6c 65 4f 62 6a 65 63 | 74 47 65 6e 65 72 69 63 |ileObjec|tGeneric|
|000016a0| 4d 61 70 70 69 6e 67 00 | 21 03 4f 62 52 65 6c 65 |Mapping.|!.ObRele|
|000016b0| 61 73 65 4f 62 6a 65 63 | 74 53 65 63 75 72 69 74 |aseObjec|tSecurit|
|000016c0| 79 00 24 03 4f 62 53 65 | 74 53 65 63 75 72 69 74 |y.$.ObSe|tSecurit|
|000016d0| 79 4f 62 6a 65 63 74 42 | 79 50 6f 69 6e 74 65 72 |yObjectB|yPointer|
|000016e0| 00 00 65 04 52 74 6c 53 | 65 74 44 61 63 6c 53 65 |..e.RtlS|etDaclSe|
|000016f0| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00001700| 00 00 60 04 52 74 6c 53 | 65 6c 66 52 65 6c 61 74 |..`.RtlS|elfRelat|
|00001710| 69 76 65 54 6f 41 62 73 | 6f 6c 75 74 65 53 44 00 |iveToAbs|oluteSD.|
|00001720| 08 04 52 74 6c 47 65 74 | 53 61 63 6c 53 65 63 75 |..RtlGet|SaclSecu|
|00001730| 72 69 74 79 44 65 73 63 | 72 69 70 74 6f 72 00 00 |rityDesc|riptor..|
|00001740| 04 04 52 74 6c 47 65 74 | 47 72 6f 75 70 53 65 63 |..RtlGet|GroupSec|
|00001750| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 00 |urityDes|criptor.|
|00001760| 07 04 52 74 6c 47 65 74 | 4f 77 6e 65 72 53 65 63 |..RtlGet|OwnerSec|
|00001770| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 00 |urityDes|criptor.|
|00001780| ff 03 52 74 6c 47 65 74 | 44 61 63 6c 53 65 63 75 |..RtlGet|DaclSecu|
|00001790| 72 69 74 79 44 65 73 63 | 72 69 70 74 6f 72 00 00 |rityDesc|riptor..|
|000017a0| 15 03 4f 62 47 65 74 4f | 62 6a 65 63 74 53 65 63 |..ObGetO|bjectSec|
|000017b0| 75 72 69 74 79 00 b6 04 | 53 65 45 78 70 6f 72 74 |urity...|SeExport|
|000017c0| 73 00 ca 04 53 65 53 65 | 74 53 65 63 75 72 69 74 |s...SeSe|tSecurit|
|000017d0| 79 44 65 73 63 72 69 70 | 74 6f 72 49 6e 66 6f 00 |yDescrip|torInfo.|
|000017e0| 37 04 52 74 6c 4c 65 6e | 67 74 68 53 65 63 75 72 |7.RtlLen|gthSecur|
|000017f0| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 c0 03 |ityDescr|iptor...|
|00001800| 52 74 6c 43 72 65 61 74 | 65 53 65 63 75 72 69 74 |RtlCreat|eSecurit|
|00001810| 79 44 65 73 63 72 69 70 | 74 6f 72 00 d3 04 53 65 |yDescrip|tor...Se|
|00001820| 55 6e 6c 6f 63 6b 53 75 | 62 6a 65 63 74 43 6f 6e |UnlockSu|bjectCon|
|00001830| 74 65 78 74 00 00 b8 04 | 53 65 46 72 65 65 50 72 |text....|SeFreePr|
|00001840| 69 76 69 6c 65 67 65 73 | 00 00 a6 04 53 65 41 70 |ivileges|....SeAp|
|00001850| 70 65 6e 64 50 72 69 76 | 69 6c 65 67 65 73 00 00 |pendPriv|ileges..|
|00001860| a5 04 53 65 41 63 63 65 | 73 73 43 68 65 63 6b 00 |..SeAcce|ssCheck.|
|00001870| bb 04 53 65 4c 6f 63 6b | 53 75 62 6a 65 63 74 43 |..SeLock|SubjectC|
|00001880| 6f 6e 74 65 78 74 00 00 | 6e 05 5f 65 78 63 65 70 |ontext..|n._excep|
|00001890| 74 5f 68 61 6e 64 6c 65 | 72 33 00 00 4d 02 4b 65 |t_handle|r3..M.Ke|
|000018a0| 53 65 74 45 76 65 6e 74 | 00 00 55 04 52 74 6c 51 |SetEvent|..U.RtlQ|
|000018b0| 75 65 72 79 52 65 67 69 | 73 74 72 79 56 61 6c 75 |ueryRegi|stryValu|
|000018c0| 65 73 00 00 11 04 52 74 | 6c 49 6e 69 74 55 6e 69 |es....Rt|lInitUni|
|000018d0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 8e 04 52 74 |codeStri|ng....Rt|
|000018e0| 6c 55 70 63 61 73 65 55 | 6e 69 63 6f 64 65 53 74 |lUpcaseU|nicodeSt|
|000018f0| 72 69 6e 67 00 00 65 02 | 4b 65 66 41 63 71 75 69 |ring..e.|KefAcqui|
|00001900| 72 65 53 70 69 6e 4c 6f | 63 6b 41 74 44 70 63 4c |reSpinLo|ckAtDpcL|
|00001910| 65 76 65 6c 00 00 66 02 | 4b 65 66 52 65 6c 65 61 |evel..f.|KefRelea|
|00001920| 73 65 53 70 69 6e 4c 6f | 63 6b 46 72 6f 6d 44 70 |seSpinLo|ckFromDp|
|00001930| 63 4c 65 76 65 6c 00 00 | 4a 03 50 73 47 65 74 43 |cLevel..|J.PsGetC|
|00001940| 75 72 72 65 6e 74 54 68 | 72 65 61 64 00 00 26 03 |urrentTh|read..&.|
|00001950| 4f 62 66 52 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |ObfRefer|enceObje|
|00001960| 63 74 00 00 40 02 4b 65 | 52 65 6d 6f 76 65 51 75 |ct..@.Ke|RemoveQu|
|00001970| 65 75 65 00 41 03 50 73 | 43 72 65 61 74 65 53 79 |eue.A.Ps|CreateSy|
|00001980| 73 74 65 6d 54 68 72 65 | 61 64 00 00 d7 02 4e 74 |stemThre|ad....Nt|
|00001990| 43 6c 6f 73 65 00 6f 00 | 45 78 51 75 65 75 65 57 |Close.o.|ExQueueW|
|000019a0| 6f 72 6b 49 74 65 6d 00 | 40 00 45 78 41 6c 6c 6f |orkItem.|@.ExAllo|
|000019b0| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |catePool|WithTag.|
|000019c0| 9d 03 52 74 6c 41 6e 73 | 69 53 74 72 69 6e 67 54 |..RtlAns|iStringT|
|000019d0| 6f 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |oUnicode|String..|
|000019e0| 4d 00 45 78 46 72 65 65 | 50 6f 6f 6c 57 69 74 68 |M.ExFree|PoolWith|
|000019f0| 54 61 67 00 40 00 4b 65 | 47 65 74 43 75 72 72 65 |Tag.@.Ke|GetCurre|
|00001a00| 6e 74 49 72 71 6c 00 00 | 4e 00 4b 66 52 61 69 73 |ntIrql..|N.KfRais|
|00001a10| 65 49 72 71 6c 00 4d 00 | 4b 66 4c 6f 77 65 72 49 |eIrql.M.|KfLowerI|
|00001a20| 72 71 6c 00 49 00 4b 65 | 53 74 61 6c 6c 45 78 65 |rql.I.Ke|StallExe|
|00001a30| 63 75 74 69 6f 6e 50 72 | 6f 63 65 73 73 6f 72 00 |cutionPr|ocessor.|
|00001a40| 54 00 52 45 41 44 5f 50 | 4f 52 54 5f 55 4c 4f 4e |T.READ_P|ORT_ULON|
|00001a50| 47 00 55 00 52 45 41 44 | 5f 50 4f 52 54 5f 55 53 |G.U.READ|_PORT_US|
|00001a60| 48 4f 52 54 00 00 53 00 | 52 45 41 44 5f 50 4f 52 |HORT..S.|READ_POR|
|00001a70| 54 5f 55 43 48 41 52 00 | 5a 00 57 52 49 54 45 5f |T_UCHAR.|Z.WRITE_|
|00001a80| 50 4f 52 54 5f 55 4c 4f | 4e 47 00 00 5b 00 57 52 |PORT_ULO|NG..[.WR|
|00001a90| 49 54 45 5f 50 4f 52 54 | 5f 55 53 48 4f 52 54 00 |ITE_PORT|_USHORT.|
|00001aa0| 59 00 57 52 49 54 45 5f | 50 4f 52 54 5f 55 43 48 |Y.WRITE_|PORT_UCH|
|00001ab0| 41 52 00 00 2f 00 48 61 | 6c 54 72 61 6e 73 6c 61 |AR../.Ha|lTransla|
|00001ac0| 74 65 42 75 73 41 64 64 | 72 65 73 73 00 00 4c 00 |teBusAdd|ress..L.|
|00001ad0| 4b 66 41 63 71 75 69 72 | 65 53 70 69 6e 4c 6f 63 |KfAcquir|eSpinLoc|
|00001ae0| 6b 00 4f 00 4b 66 52 65 | 6c 65 61 73 65 53 70 69 |k.O.KfRe|leaseSpi|
|00001af0| 6e 4c 6f 63 6b 00 44 00 | 4b 65 52 61 69 73 65 49 |nLock.D.|KeRaiseI|
|00001b00| 72 71 6c 54 6f 44 70 63 | 4c 65 76 65 6c 00 00 00 |rqlToDpc|Level...|
|00001b10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+
