home *** CD-ROM | disk | FTP | other *** search
/ PC User 2001 August / APC_Aug2001_CD1.iso / patch / windows / files / W2KSP2.exe / i386 / mup.sy_ / mup.sys / INIT next >
Unknown  |  2000-08-28  |  3.0 KB

open in: MacOS 8.1     |     Win98     |     DOS

view JSON data     |     view as text


This file was not able to be converted.
This format is not currently supported by dexvert.

ConfidenceProgramDetectionMatch TypeSupport
100% file data default



hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| ac 2e 01 00 00 00 00 00 | 00 00 00 00 20 3a 01 00 |........|.... :..|
|00000010| b0 1c 00 00 9c 2e 01 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000020| 6a 3a 01 00 a0 1c 00 00 | 00 00 00 00 00 00 00 00 |j:......|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 56 3a 01 00 |........|....V:..|
|00000040| 42 3a 01 00 2e 3a 01 00 | 00 00 00 00 d8 30 01 00 |B:...:..|.....0..|
|00000050| f0 30 01 00 12 31 01 00 | 1c 31 01 00 36 31 01 00 |.0...1..|.1..61..|
|00000060| c0 30 01 00 4c 31 01 00 | 68 31 01 00 74 31 01 00 |.0..L1..|h1..t1..|
|00000070| 8c 31 01 00 a0 31 01 00 | b8 31 01 00 d0 31 01 00 |.1...1..|.1...1..|
|00000080| e4 31 01 00 fa 31 01 00 | 0a 32 01 00 22 32 01 00 |.1...1..|.2.."2..|
|00000090| 2c 32 01 00 36 32 01 00 | 52 32 01 00 5e 32 01 00 |,2..62..|R2..^2..|
|000000a0| 74 32 01 00 84 32 01 00 | 9c 32 01 00 b8 32 01 00 |t2...2..|.2...2..|
|000000b0| d4 32 01 00 e4 32 01 00 | f0 32 01 00 0a 33 01 00 |.2...2..|.2...3..|
|000000c0| 18 33 01 00 32 33 01 00 | 50 33 01 00 68 33 01 00 |.3..23..|P3..h3..|
|000000d0| 74 33 01 00 8a 33 01 00 | 9a 33 01 00 b8 33 01 00 |t3...3..|.3...3..|
|000000e0| c8 33 01 00 d8 33 01 00 | ea 33 01 00 fa 33 01 00 |.3...3..|.3...3..|
|000000f0| 08 34 01 00 20 34 01 00 | 36 34 01 00 54 34 01 00 |.4.. 4..|64..T4..|
|00000100| 6c 34 01 00 7e 34 01 00 | 96 34 01 00 a8 34 01 00 |l4..~4..|.4...4..|
|00000110| b4 34 01 00 d0 34 01 00 | da 34 01 00 f2 34 01 00 |.4...4..|.4...4..|
|00000120| 00 35 01 00 22 35 01 00 | 82 30 01 00 b2 30 01 00 |.5.."5..|.0...0..|
|00000130| 64 35 01 00 86 35 01 00 | 9a 35 01 00 b0 35 01 00 |d5...5..|.5...5..|
|00000140| cc 35 01 00 e0 35 01 00 | fa 35 01 00 08 36 01 00 |.5...5..|.5...6..|
|00000150| 22 36 01 00 3c 36 01 00 | 5a 36 01 00 72 36 01 00 |"6..<6..|Z6..r6..|
|00000160| 94 36 01 00 b2 36 01 00 | c8 36 01 00 e0 36 01 00 |.6...6..|.6...6..|
|00000170| f0 36 01 00 08 37 01 00 | 22 37 01 00 32 37 01 00 |.6...7..|"7..27..|
|00000180| 46 37 01 00 5e 37 01 00 | 72 37 01 00 86 37 01 00 |F7..^7..|r7...7..|
|00000190| 9e 37 01 00 b6 37 01 00 | d0 37 01 00 e2 37 01 00 |.7...7..|.7...7..|
|000001a0| f6 37 01 00 08 38 01 00 | 22 38 01 00 3c 38 01 00 |.7...8..|"8..<8..|
|000001b0| 58 38 01 00 72 38 01 00 | 82 38 01 00 94 38 01 00 |X8..r8..|.8...8..|
|000001c0| ac 38 01 00 c6 38 01 00 | d8 38 01 00 f0 38 01 00 |.8...8..|.8...8..|
|000001d0| 0e 39 01 00 18 39 01 00 | 34 39 01 00 48 39 01 00 |.9...9..|49..H9..|
|000001e0| 62 39 01 00 7a 39 01 00 | 9a 39 01 00 a6 39 01 00 |b9..z9..|.9...9..|
|000001f0| be 39 01 00 cc 39 01 00 | e6 39 01 00 06 3a 01 00 |.9...9..|.9...:..|
|00000200| 9a 30 01 00 44 35 01 00 | 74 30 01 00 54 35 01 00 |.0..D5..|t0..T5..|
|00000210| 00 00 00 00 a3 01 4b 65 | 42 75 67 43 68 65 63 6b |......Ke|BugCheck|
|00000220| 00 00 f7 00 49 6e 74 65 | 72 6c 6f 63 6b 65 64 44 |....Inte|rlockedD|
|00000230| 65 63 72 65 6d 65 6e 74 | 00 00 3a 00 45 78 41 6c |ecrement|..:.ExAl|
|00000240| 6c 6f 63 61 74 65 50 6f | 6f 6c 57 69 74 68 54 61 |locatePo|olWithTa|
|00000250| 67 00 47 00 45 78 46 72 | 65 65 50 6f 6f 6c 00 00 |g.G.ExFr|eePool..|
|00000260| ba 02 4f 62 66 44 65 72 | 65 66 65 72 65 6e 63 65 |..ObfDer|eference|
|00000270| 4f 62 6a 65 63 74 00 00 | 73 00 45 78 52 65 6c 65 |Object..|s.ExRele|
|00000280| 61 73 65 52 65 73 6f 75 | 72 63 65 4c 69 74 65 00 |aseResou|rceLite.|
|00000290| 32 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |2.ExAcqu|ireResou|
|000002a0| 72 63 65 45 78 63 6c 75 | 73 69 76 65 4c 69 74 65 |rceExclu|siveLite|
|000002b0| 00 00 18 04 5a 77 43 6c | 6f 73 65 00 9a 03 52 74 |....ZwCl|ose...Rt|
|000002c0| 6c 52 65 6d 6f 76 65 55 | 6e 69 63 6f 64 65 50 72 |lRemoveU|nicodePr|
|000002d0| 65 66 69 78 00 00 95 01 | 49 6f 66 43 6f 6d 70 6c |efix....|IofCompl|
|000002e0| 65 74 65 52 65 71 75 65 | 73 74 00 00 50 00 45 78 |eteReque|st..P.Ex|
|000002f0| 49 6e 69 74 69 61 6c 69 | 7a 65 52 65 73 6f 75 72 |Initiali|zeResour|
|00000300| 63 65 4c 69 74 65 00 00 | 2d 00 44 62 67 50 72 69 |ceLite..|-.DbgPri|
|00000310| 6e 74 00 00 41 00 45 78 | 44 65 6c 65 74 65 52 65 |nt..A.Ex|DeleteRe|
|00000320| 73 6f 75 72 63 65 4c 69 | 74 65 00 00 db 01 4b 65 |sourceLi|te....Ke|
|00000330| 51 75 65 72 79 53 79 73 | 74 65 6d 54 69 6d 65 00 |QuerySys|temTime.|
|00000340| d2 01 4b 65 4c 65 61 76 | 65 43 72 69 74 69 63 61 |..KeLeav|eCritica|
|00000350| 6c 52 65 67 69 6f 6e 00 | ad 01 4b 65 45 6e 74 65 |lRegion.|..KeEnte|
|00000360| 72 43 72 69 74 69 63 61 | 6c 52 65 67 69 6f 6e 00 |rCritica|lRegion.|
|00000370| 7a 04 5f 65 78 63 65 70 | 74 5f 68 61 6e 64 6c 65 |z._excep|t_handle|
|00000380| 72 33 00 00 6d 01 49 6f | 52 65 6d 6f 76 65 53 68 |r3..m.Io|RemoveSh|
|00000390| 61 72 65 41 63 63 65 73 | 73 00 6d 00 45 78 52 61 |areAcces|s.m.ExRa|
|000003a0| 69 73 65 53 74 61 74 75 | 73 00 fb 03 53 65 51 75 |iseStatu|s...SeQu|
|000003b0| 65 72 79 53 65 73 73 69 | 6f 6e 49 64 54 6f 6b 65 |erySessi|onIdToke|
|000003c0| 6e 00 b4 04 77 63 73 63 | 68 72 00 00 9c 04 6d 65 |n...wcsc|hr....me|
|000003d0| 6d 6d 6f 76 65 00 6e 03 | 52 74 6c 49 6e 74 65 67 |mmove.n.|RtlInteg|
|000003e0| 65 72 54 6f 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |erToUnic|odeStrin|
|000003f0| 67 00 8c 04 5f 77 63 73 | 6e 69 63 6d 70 00 17 01 |g..._wcs|nicmp...|
|00000400| 49 6f 43 68 65 63 6b 53 | 68 61 72 65 41 63 63 65 |IoCheckS|hareAcce|
|00000410| 73 73 00 00 94 01 49 6f | 66 43 61 6c 6c 44 72 69 |ss....Io|fCallDri|
|00000420| 76 65 72 00 4a 03 52 74 | 6c 46 69 6e 64 55 6e 69 |ver.J.Rt|lFindUni|
|00000430| 63 6f 64 65 50 72 65 66 | 69 78 00 00 44 01 49 6f |codePref|ix..D.Io|
|00000440| 47 65 74 52 65 6c 61 74 | 65 64 44 65 76 69 63 65 |GetRelat|edDevice|
|00000450| 4f 62 6a 65 63 74 00 00 | b5 02 4f 62 52 65 66 65 |Object..|..ObRefe|
|00000460| 72 65 6e 63 65 4f 62 6a | 65 63 74 42 79 48 61 6e |renceObj|ectByHan|
|00000470| 64 6c 65 00 1d 01 49 6f | 43 72 65 61 74 65 46 69 |dle...Io|CreateFi|
|00000480| 6c 65 00 00 32 01 49 6f | 46 72 65 65 49 72 70 00 |le..2.Io|FreeIrp.|
|00000490| 6c 03 52 74 6c 49 6e 73 | 65 72 74 55 6e 69 63 6f |l.RtlIns|ertUnico|
|000004a0| 64 65 50 72 65 66 69 78 | 00 00 f9 01 4b 65 53 65 |dePrefix|....KeSe|
|000004b0| 74 45 76 65 6e 74 00 00 | 0d 03 52 74 6c 43 6f 6d |tEvent..|..RtlCom|
|000004c0| 70 61 72 65 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |pareUnic|odeStrin|
|000004d0| 67 00 33 00 45 78 41 63 | 71 75 69 72 65 52 65 73 |g.3.ExAc|quireRes|
|000004e0| 6f 75 72 63 65 53 68 61 | 72 65 64 4c 69 74 65 00 |ourceSha|redLite.|
|000004f0| 12 02 4b 65 57 61 69 74 | 46 6f 72 53 69 6e 67 6c |..KeWait|ForSingl|
|00000500| 65 4f 62 6a 65 63 74 00 | 33 01 49 6f 46 72 65 65 |eObject.|3.IoFree|
|00000510| 4d 64 6c 00 57 02 4d 6d | 50 72 6f 62 65 41 6e 64 |Mdl.W.Mm|ProbeAnd|
|00000520| 4c 6f 63 6b 50 61 67 65 | 73 00 04 01 49 6f 41 6c |LockPage|s...IoAl|
|00000530| 6c 6f 63 61 74 65 4d 64 | 6c 00 39 00 45 78 41 6c |locateMd|l.9.ExAl|
|00000540| 6c 6f 63 61 74 65 50 6f | 6f 6c 57 69 74 68 51 75 |locatePo|olWithQu|
|00000550| 6f 74 61 54 61 67 00 00 | cc 02 50 72 6f 62 65 46 |otaTag..|..ProbeF|
|00000560| 6f 72 52 65 61 64 00 00 | 03 01 49 6f 41 6c 6c 6f |orRead..|..IoAllo|
|00000570| 63 61 74 65 49 72 70 00 | 68 00 45 78 51 75 65 75 |cateIrp.|h.ExQueu|
|00000580| 65 57 6f 72 6b 49 74 65 | 6d 00 65 02 4d 6d 55 6e |eWorkIte|m.e.MmUn|
|00000590| 6c 6f 63 6b 50 61 67 65 | 73 00 8b 02 4e 74 4f 70 |lockPage|s...NtOp|
|000005a0| 65 6e 46 69 6c 65 00 00 | 70 04 5f 61 62 6e 6f 72 |enFile..|p._abnor|
|000005b0| 6d 61 6c 5f 74 65 72 6d | 69 6e 61 74 69 6f 6e 00 |mal_term|ination.|
|000005c0| b2 01 4b 65 47 65 74 43 | 75 72 72 65 6e 74 54 68 |..KeGetC|urrentTh|
|000005d0| 72 65 61 64 00 00 69 03 | 52 74 6c 49 6e 69 74 69 |read..i.|RtlIniti|
|000005e0| 61 6c 69 7a 65 55 6e 69 | 63 6f 64 65 50 72 65 66 |alizeUni|codePref|
|000005f0| 69 78 00 00 c8 01 4b 65 | 49 6e 69 74 69 61 6c 69 |ix....Ke|Initiali|
|00000600| 7a 65 53 70 69 6e 4c 6f | 63 6b 00 00 1b 01 49 6f |zeSpinLo|ck....Io|
|00000610| 43 72 65 61 74 65 44 65 | 76 69 63 65 00 00 64 03 |CreateDe|vice..d.|
|00000620| 52 74 6c 49 6e 69 74 55 | 6e 69 63 6f 64 65 53 74 |RtlInitU|nicodeSt|
|00000630| 72 69 6e 67 00 00 52 04 | 5a 77 51 75 65 72 79 56 |ring..R.|ZwQueryV|
|00000640| 61 6c 75 65 4b 65 79 00 | 39 04 5a 77 4f 70 65 6e |alueKey.|9.ZwOpen|
|00000650| 4b 65 79 00 fe 02 52 74 | 6c 41 70 70 65 6e 64 55 |Key...Rt|lAppendU|
|00000660| 6e 69 63 6f 64 65 54 6f | 53 74 72 69 6e 67 00 00 |nicodeTo|String..|
|00000670| b8 04 77 63 73 6c 65 6e | 00 00 37 03 52 74 6c 45 |..wcslen|..7.RtlE|
|00000680| 71 75 61 6c 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |qualUnic|odeStrin|
|00000690| 67 00 13 03 52 74 6c 43 | 6f 70 79 4c 75 69 64 00 |g...RtlC|opyLuid.|
|000006a0| 82 00 45 78 66 69 33 38 | 36 49 6e 74 65 72 6c 6f |..Exfi38|6Interlo|
|000006b0| 63 6b 65 64 44 65 63 72 | 65 6d 65 6e 74 4c 6f 6e |ckedDecr|ementLon|
|000006c0| 67 00 84 00 45 78 66 69 | 33 38 36 49 6e 74 65 72 |g...Exfi|386Inter|
|000006d0| 6c 6f 63 6b 65 64 49 6e | 63 72 65 6d 65 6e 74 4c |lockedIn|crementL|
|000006e0| 6f 6e 67 00 ef 01 4b 65 | 52 65 73 65 74 45 76 65 |ong...Ke|ResetEve|
|000006f0| 6e 74 00 00 1d 04 5a 77 | 43 72 65 61 74 65 46 69 |nt....Zw|CreateFi|
|00000700| 6c 65 00 00 fd 02 52 74 | 6c 41 70 70 65 6e 64 55 |le....Rt|lAppendU|
|00000710| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 53 74 |nicodeSt|ringToSt|
|00000720| 72 69 6e 67 00 00 c2 01 | 4b 65 49 6e 69 74 69 61 |ring....|KeInitia|
|00000730| 6c 69 7a 65 45 76 65 6e | 74 00 3a 01 49 6f 47 65 |lizeEven|t.:.IoGe|
|00000740| 74 43 75 72 72 65 6e 74 | 50 72 6f 63 65 73 73 00 |tCurrent|Process.|
|00000750| 4f 01 49 6f 49 73 4f 70 | 65 72 61 74 69 6f 6e 53 |O.IoIsOp|erationS|
|00000760| 79 6e 63 68 72 6f 6e 6f | 75 73 00 00 7b 01 49 6f |ynchrono|us..{.Io|
|00000770| 53 65 74 53 68 61 72 65 | 41 63 63 65 73 73 00 00 |SetShare|Access..|
|00000780| e8 03 53 65 43 72 65 61 | 74 65 43 6c 69 65 6e 74 |..SeCrea|teClient|
|00000790| 53 65 63 75 72 69 74 79 | 00 00 07 04 53 65 54 6f |Security|....SeTo|
|000007a0| 6b 65 6e 54 79 70 65 00 | e2 02 50 73 52 65 73 74 |kenType.|..PsRest|
|000007b0| 6f 72 65 49 6d 70 65 72 | 73 6f 6e 61 74 69 6f 6e |oreImper|sonation|
|000007c0| 00 00 d2 02 50 73 44 69 | 73 61 62 6c 65 49 6d 70 |....PsDi|sableImp|
|000007d0| 65 72 73 6f 6e 61 74 69 | 6f 6e 00 00 b7 02 4f 62 |ersonati|on....Ob|
|000007e0| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|000007f0| 79 50 6f 69 6e 74 65 72 | 00 00 f0 03 53 65 49 6d |yPointer|....SeIm|
|00000800| 70 65 72 73 6f 6e 61 74 | 65 43 6c 69 65 6e 74 45 |personat|eClientE|
|00000810| 78 00 3c 00 45 78 43 6f | 6e 76 65 72 74 45 78 63 |x.<.ExCo|nvertExc|
|00000820| 6c 75 73 69 76 65 54 6f | 53 68 61 72 65 64 4c 69 |lusiveTo|SharedLi|
|00000830| 74 65 00 00 ce 02 50 73 | 41 73 73 69 67 6e 49 6d |te....Ps|AssignIm|
|00000840| 70 65 72 73 6f 6e 61 74 | 69 6f 6e 54 6f 6b 65 6e |personat|ionToken|
|00000850| 00 00 e8 01 4b 65 52 65 | 6c 65 61 73 65 53 65 6d |....KeRe|leaseSem|
|00000860| 61 70 68 6f 72 65 00 00 | 17 03 52 74 6c 43 6f 70 |aphore..|..RtlCop|
|00000870| 79 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |yUnicode|String..|
|00000880| a4 01 4b 65 42 75 67 43 | 68 65 63 6b 45 78 00 00 |..KeBugC|heckEx..|
|00000890| 54 03 52 74 6c 47 65 74 | 43 61 6c 6c 65 72 73 41 |T.RtlGet|CallersA|
|000008a0| 64 64 72 65 73 73 00 00 | b6 00 46 73 52 74 6c 49 |ddress..|..FsRtlI|
|000008b0| 73 4e 74 73 74 61 74 75 | 73 45 78 70 65 63 74 65 |sNtstatu|sExpecte|
|000008c0| 64 00 81 01 49 6f 53 74 | 61 72 74 54 69 6d 65 72 |d...IoSt|artTimer|
|000008d0| 00 00 4c 01 49 6f 49 6e | 69 74 69 61 6c 69 7a 65 |..L.IoIn|itialize|
|000008e0| 54 69 6d 65 72 00 64 01 | 49 6f 52 65 67 69 73 74 |Timer.d.|IoRegist|
|000008f0| 65 72 46 69 6c 65 53 79 | 73 74 65 6d 00 00 51 00 |erFileSy|stem..Q.|
|00000900| 45 78 49 6e 69 74 69 61 | 6c 69 7a 65 5a 6f 6e 65 |ExInitia|lizeZone|
|00000910| 00 00 5a 02 4d 6d 51 75 | 65 72 79 53 79 73 74 65 |..Z.MmQu|erySyste|
|00000920| 6d 53 69 7a 65 00 c7 01 | 4b 65 49 6e 69 74 69 61 |mSize...|KeInitia|
|00000930| 6c 69 7a 65 53 65 6d 61 | 70 68 6f 72 65 00 33 04 |lizeSema|phore.3.|
|00000940| 5a 77 4d 61 6b 65 54 65 | 6d 70 6f 72 61 72 79 4f |ZwMakeTe|mporaryO|
|00000950| 62 6a 65 63 74 00 1b 04 | 5a 77 43 72 65 61 74 65 |bject...|ZwCreate|
|00000960| 44 69 72 65 63 74 6f 72 | 79 4f 62 6a 65 63 74 00 |Director|yObject.|
|00000970| 25 01 49 6f 44 65 6c 65 | 74 65 44 65 76 69 63 65 |%.IoDele|teDevice|
|00000980| 00 00 7d 01 49 6f 53 65 | 74 54 6f 70 4c 65 76 65 |..}.IoSe|tTopLeve|
|00000990| 6c 49 72 70 00 00 c2 00 | 46 73 52 74 6c 4d 64 6c |lIrp....|FsRtlMdl|
|000009a0| 52 65 61 64 44 65 76 00 | c1 00 46 73 52 74 6c 4d |ReadDev.|..FsRtlM|
|000009b0| 64 6c 52 65 61 64 43 6f | 6d 70 6c 65 74 65 44 65 |dlReadCo|mpleteDe|
|000009c0| 76 00 d5 00 46 73 52 74 | 6c 50 72 65 70 61 72 65 |v...FsRt|lPrepare|
|000009d0| 4d 64 6c 57 72 69 74 65 | 44 65 76 00 c4 00 46 73 |MdlWrite|Dev...Fs|
|000009e0| 52 74 6c 4d 64 6c 57 72 | 69 74 65 43 6f 6d 70 6c |RtlMdlWr|iteCompl|
|000009f0| 65 74 65 44 65 76 00 00 | 47 01 49 6f 47 65 74 52 |eteDev..|G.IoGetR|
|00000a00| 65 71 75 65 73 74 6f 72 | 53 65 73 73 69 6f 6e 49 |equestor|SessionI|
|00000a10| 64 00 cd 02 50 72 6f 62 | 65 46 6f 72 57 72 69 74 |d...Prob|eForWrit|
|00000a20| 65 00 2f 04 5a 77 46 73 | 43 6f 6e 74 72 6f 6c 46 |e./.ZwFs|ControlF|
|00000a30| 69 6c 65 00 91 01 49 6f | 57 72 69 74 65 45 72 72 |ile...Io|WriteErr|
|00000a40| 6f 72 4c 6f 67 45 6e 74 | 72 79 00 00 02 01 49 6f |orLogEnt|ry....Io|
|00000a50| 41 6c 6c 6f 63 61 74 65 | 45 72 72 6f 72 4c 6f 67 |Allocate|ErrorLog|
|00000a60| 45 6e 74 72 79 00 36 03 | 52 74 6c 45 71 75 61 6c |Entry.6.|RtlEqual|
|00000a70| 53 74 72 69 6e 67 00 00 | b0 02 4f 62 4d 61 6b 65 |String..|..ObMake|
|00000a80| 54 65 6d 70 6f 72 61 72 | 79 4f 62 6a 65 63 74 00 |Temporar|yObject.|
|00000a90| 20 04 5a 77 43 72 65 61 | 74 65 53 79 6d 62 6f 6c | .ZwCrea|teSymbol|
|00000aa0| 69 63 4c 69 6e 6b 4f 62 | 6a 65 63 74 00 00 b6 04 |icLinkOb|ject....|
|00000ab0| 77 63 73 63 70 79 00 00 | 3d 04 5a 77 4f 70 65 6e |wcscpy..|=.ZwOpen|
|00000ac0| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 4f 62 6a 65 |Symbolic|LinkObje|
|00000ad0| 63 74 00 00 0a 03 52 74 | 6c 43 6f 6d 70 61 72 65 |ct....Rt|lCompare|
|00000ae0| 4d 65 6d 6f 72 79 00 00 | 0c 02 4b 65 55 6e 73 74 |Memory..|..KeUnst|
|00000af0| 61 63 6b 44 65 74 61 63 | 68 50 72 6f 63 65 73 73 |ackDetac|hProcess|
|00000b00| 00 00 08 02 4b 65 53 74 | 61 63 6b 41 74 74 61 63 |....KeSt|ackAttac|
|00000b10| 68 50 72 6f 63 65 73 73 | 00 00 bd 03 52 74 6c 55 |hProcess|....RtlU|
|00000b20| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 41 6e |nicodeSt|ringToAn|
|00000b30| 73 69 53 74 72 69 6e 67 | 00 00 97 03 52 74 6c 52 |siString|....RtlR|
|00000b40| 61 6e 64 6f 6d 00 c7 03 | 52 74 6c 55 70 63 61 73 |andom...|RtlUpcas|
|00000b50| 65 55 6e 69 63 6f 64 65 | 43 68 61 72 00 00 38 04 |eUnicode|Char..8.|
|00000b60| 5a 77 4f 70 65 6e 46 69 | 6c 65 00 00 fe 03 53 65 |ZwOpenFi|le....Se|
|00000b70| 52 65 6c 65 61 73 65 53 | 75 62 6a 65 63 74 43 6f |ReleaseS|ubjectCo|
|00000b80| 6e 74 65 78 74 00 f8 03 | 53 65 51 75 65 72 79 41 |ntext...|SeQueryA|
|00000b90| 75 74 68 65 6e 74 69 63 | 61 74 69 6f 6e 49 64 54 |uthentic|ationIdT|
|00000ba0| 6f 6b 65 6e 00 00 e5 03 | 53 65 43 61 70 74 75 72 |oken....|SeCaptur|
|00000bb0| 65 53 75 62 6a 65 63 74 | 43 6f 6e 74 65 78 74 00 |eSubject|Context.|
|00000bc0| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 44 00 |ntoskrnl|.exe..D.|
|00000bd0| 4b 65 47 65 74 43 75 72 | 72 65 6e 74 49 72 71 6c |KeGetCur|rentIrql|
|00000be0| 00 00 52 00 4b 66 52 65 | 6c 65 61 73 65 53 70 69 |..R.KfRe|leaseSpi|
|00000bf0| 6e 4c 6f 63 6b 00 4f 00 | 4b 66 41 63 71 75 69 72 |nLock.O.|KfAcquir|
|00000c00| 65 53 70 69 6e 4c 6f 63 | 6b 00 48 41 4c 2e 64 6c |eSpinLoc|k.HAL.dl|
|00000c10| 6c 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |l.......|........|
+--------+-------------------------+-------------------------+--------+--------+