/ PC User 2001 August / APC_Aug2001_CD1.iso / patch / windows / files / W2KSP2.exe / i386 / srv.sy_ / SRV.SYS / INIT

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 55 8b ec 51 51 53 56 57 | 8d 45 f8 ff 35 0c b8 01 |U..QQSVW|.E..5...|
|00000010| 00 50 ff 15 ec a4 01 00 | 8b 75 08 33 ff 68 c8 bc |.P......|.u.3.h..|
|00000020| 01 00 57 57 8d 45 f8 6a | 12 50 57 56 ff 15 d8 a2 |..WW.E.j|.PWV....|
|00000030| 01 00 8b d8 3b df 7d 19 | 57 57 57 57 53 68 d2 07 |....;.}.|WWWWSh..|
|00000040| 00 c0 56 e8 95 06 fd ff | 5f 8b c3 5e 5b c9 c2 08 |..V.....|_..^[...|
|00000050| 00 6a 1c 8d 7e 38 59 b8 | 4d da 02 00 c7 46 34 79 |.j..~8Y.|M....F4y|
|00000060| 5a 03 00 f3 ab e8 09 00 | 00 00 5f 8b c3 5e 5b c9 |Z.......|.._..^[.|
|00000070| c2 08 00 83 ec 0c 53 55 | 56 57 6a 28 33 c0 59 bf |......SU|VWj(3.Y.|
|00000080| 98 c8 01 00 f3 ab c6 05 | d4 bc 01 00 01 ff 15 64 |........|.......d|
|00000090| a2 01 00 8b 35 80 a2 01 | 00 a3 dc bc 01 00 a1 b4 |....5...|........|
|000000a0| a4 01 00 33 db 53 6a 01 | 0f be 00 68 e8 bc 01 00 |...3.Sj.|...h....|
|000000b0| a3 e0 be 01 00 ff d6 53 | 6a 01 68 f0 ca 01 00 ff |.......S|j.h.....|
|000000c0| d6 8b 2d 1c a5 01 00 68 | 1c bd 01 00 ff d5 68 bc |..-....h|......h.|
|000000d0| bd 01 00 ff d5 8b 35 2c | a5 01 00 68 00 be 01 00 |......5,|...h....|
|000000e0| ff d6 68 38 be 01 00 ff | d6 68 70 be 01 00 ff d6 |..h8....|.hp.....|
|000000f0| bf 60 cc 01 00 89 7c 24 | 10 ff 74 24 10 ff d6 83 |.`....|$|..t$....|
|00000100| 44 24 10 38 81 7c 24 10 | 90 ce 01 00 72 eb 68 a8 |D$.8.|$.|....r.h.|
|00000110| be 01 00 ff d6 68 20 cb | 01 00 ff d6 68 88 c9 01 |.....h .|....h...|
|00000120| 00 ff d6 b8 40 c1 01 00 | a3 44 c1 01 00 a3 40 c1 |....@...|.D....@.|
|00000130| 01 00 b8 48 c1 01 00 a3 | 4c c1 01 00 a3 48 c1 01 |...H....|L....H..|
|00000140| 00 b8 58 c1 01 00 a3 5c | c1 01 00 a3 58 c1 01 00 |..X....\|....X...|
|00000150| b8 74 c1 01 00 c7 40 fc | 82 23 03 00 89 18 89 58 |.t....@.|.#.....X|
|00000160| f4 83 c0 10 3d 94 c1 01 | 00 72 ea 89 1d 50 c1 01 |....=...|.r...P..|
|00000170| 00 89 1d 54 c1 01 00 c7 | 05 98 c1 01 00 8f 58 01 |...T....|......X.|
|00000180| 00 89 1d 9c c1 01 00 89 | 1d 90 c1 01 00 33 c9 b8 |........|.....3..|
|00000190| d0 c1 01 00 8b d1 89 40 | 04 6b d2 38 03 d7 41 89 |.......@|.k.8..A.|
|000001a0| 00 83 f9 0a 89 50 08 75 | 02 33 c9 83 c0 0c 3d f4 |.....P.u|.3....=.|
|000001b0| c7 01 00 72 df b8 f8 c7 | 01 00 89 40 04 89 00 83 |...r....|...@....|
|000001c0| c0 08 3d 80 c8 01 00 72 | f1 68 30 ca 01 00 ff d6 |..=....r|.h0.....|
|000001d0| 68 c8 cb 01 00 88 1d 84 | ca 01 00 88 1d a4 ca 01 |h.......|........|
|000001e0| 00 88 1d c4 ca 01 00 88 | 1d e4 ca 01 00 ff d6 ff |........|........|
|000001f0| 35 f8 b7 01 00 b8 18 cb | 01 00 a3 1c cb 01 00 a3 |5.......|........|
|00000200| 18 cb 01 00 b8 58 cb 01 | 00 c7 05 64 cb 01 00 02 |.....X..|...d....|
|00000210| 00 00 00 a3 5c cb 01 00 | a3 58 cb 01 00 8d 44 24 |....\...|.X....D$|
|00000220| 18 88 1d 68 cb 01 00 50 | 88 1d 69 cb 01 00 ff 15 |...h...P|..i.....|
|00000230| 10 a4 01 00 8d 44 24 14 | 6a 01 50 68 80 c8 01 00 |.....D$.|j.Ph....|
|00000240| ff 15 38 a5 01 00 ff 35 | ec b7 01 00 8b 35 ec a4 |..8....5|.....5..|
|00000250| 01 00 68 88 c8 01 00 ff | d6 ff 35 f0 b7 01 00 68 |..h.....|..5....h|
|00000260| 90 c8 01 00 ff d6 ff 35 | 80 ba 01 00 68 50 c9 01 |.......5|....hP..|
|00000270| 00 ff d6 ff 35 84 ba 01 | 00 68 58 c9 01 00 ff 15 |....5...|.hX.....|
|00000280| 80 a4 01 00 68 30 00 df | ff 68 60 c9 01 00 ff d6 |....h0..|.h`.....|
|00000290| c7 05 78 cb 01 00 b9 0b | 00 00 c7 05 88 cb 01 00 |..x.....|........|
|000002a0| ba 0b 00 00 bb d8 c9 01 | 00 bf 28 ba 01 00 ff 37 |........|..(....7|
|000002b0| 53 ff d6 83 c7 04 83 c3 | 08 81 ff 44 ba 01 00 76 |S.......|...D...v|
|000002c0| ed b8 18 ca 01 00 8b 48 | f8 89 08 8b 48 fc 89 48 |.......H|....H..H|
|000002d0| 04 83 c0 08 3d 30 ca 01 | 00 72 eb 68 dc bd 01 00 |....=0..|.r.h....|
|000002e0| ff d5 be 3c bd 01 00 56 | ff d5 83 c6 20 81 fe bc |...<...V|.... ...|
|000002f0| bd 01 00 72 f2 c7 05 f8 | bc 01 00 07 00 00 00 ff |...r....|........|
|00000300| 15 10 a3 01 00 8b c8 b8 | 80 f0 fa 02 33 d2 5f f7 |........|....3._.|
|00000310| f1 5e 5d 5b a3 0c cc 01 | 00 83 c4 0c c3 4b 66 03 |.^][....|.....Kf.|
|00000320| 00 00 00 00 00 00 00 00 | 00 21 66 03 00 00 a2 00 |........|.!f.....|
|00000330| 00 c3 69 03 00 00 00 00 | 00 00 00 00 00 2f 66 03 |..i.....|...../f.|
|00000340| 00 78 a5 00 00 db 69 03 | 00 00 00 00 00 00 00 00 |.x....i.|........|
|00000350| 00 37 66 03 00 90 a5 00 | 00 f3 69 03 00 00 00 00 |.7f.....|..i.....|
|00000360| 00 00 00 00 00 3f 66 03 | 00 a8 a5 00 00 00 00 00 |.....?f.|........|
|00000370| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000380| 00 4e 54 4f 53 4b 52 4e | 4c 2e 45 58 45 00 00 48 |.NTOSKRN|L.EXE..H|
|00000390| 41 4c 2e 44 4c 4c 00 54 | 44 49 2e 53 59 53 00 4b |AL.DLL.T|DI.SYS.K|
|000003a0| 53 45 43 44 44 2e 53 59 | 53 00 00 20 6a 03 00 38 |SECDD.SY|S.. j..8|
|000003b0| 6a 03 00 50 6a 03 00 6e | 6a 03 00 86 6a 03 00 94 |j..Pj..n|j...j...|
|000003c0| 6a 03 00 ac 6a 03 00 ca | 6a 03 00 e8 6a 03 00 f4 |j...j...|j...j...|
|000003d0| 6a 03 00 12 6b 03 00 30 | 6b 03 00 46 6b 03 00 54 |j...k..0|k..Fk..T|
|000003e0| 6b 03 00 6c 6b 03 00 8a | 6b 03 00 ac 6b 03 00 cc |k..lk...|k...k...|
|000003f0| 6b 03 00 e2 6b 03 00 00 | 6c 03 00 0c 6c 03 00 24 |k...k...|l...l..$|
|00000400| 6c 03 00 3c 6c 03 00 50 | 6c 03 00 6a 6c 03 00 82 |l..<l..P|l..jl...|
|00000410| 6c 03 00 98 6c 03 00 b6 | 6c 03 00 d6 6c 03 00 e0 |l...l...|l...l...|
|00000420| 6c 03 00 ee 6c 03 00 08 | 6d 03 00 1c 6d 03 00 30 |l...l...|m...m..0|
|00000430| 6d 03 00 48 6d 03 00 5c | 6d 03 00 6c 6d 03 00 7a |m..Hm..\|m..lm..z|
|00000440| 6d 03 00 8a 6d 03 00 a4 | 6d 03 00 b6 6d 03 00 c0 |m...m...|m...m...|
|00000450| 6d 03 00 dc 6d 03 00 ee | 6d 03 00 fe 6d 03 00 0c |m...m...|m...m...|
|00000460| 6e 03 00 24 6e 03 00 32 | 6e 03 00 4e 6e 03 00 6a |n..$n..2|n..Nn..j|
|00000470| 6e 03 00 7a 6e 03 00 84 | 6e 03 00 94 6e 03 00 ac |n..zn...|n...n...|
|00000480| 6e 03 00 c6 6e 03 00 d8 | 6e 03 00 ea 6e 03 00 fc |n...n...|n...n...|
|00000490| 6e 03 00 10 6f 03 00 1e | 6f 03 00 36 6f 03 00 4e |n...o...|o..6o..N|
|000004a0| 6f 03 00 5e 6f 03 00 74 | 6f 03 00 8e 6f 03 00 9a |o..^o..t|o...o...|
|000004b0| 6f 03 00 ae 6f 03 00 ce | 6f 03 00 de 6f 03 00 f6 |o...o...|o...o...|
|000004c0| 6f 03 00 0a 70 03 00 14 | 70 03 00 20 70 03 00 34 |o...p...|p.. p..4|
|000004d0| 70 03 00 54 70 03 00 64 | 70 03 00 7a 70 03 00 8e |p..Tp..d|p..zp...|
|000004e0| 70 03 00 a6 70 03 00 b0 | 70 03 00 c2 70 03 00 ce |p...p...|p...p...|
|000004f0| 70 03 00 ee 70 03 00 0e | 71 03 00 28 71 03 00 38 |p...p...|q..(q..8|
|00000500| 71 03 00 48 71 03 00 5e | 71 03 00 72 71 03 00 8a |q..Hq..^|q..rq...|
|00000510| 71 03 00 a8 71 03 00 bc | 71 03 00 d6 71 03 00 f4 |q...q...|q...q...|
|00000520| 71 03 00 16 72 03 00 36 | 72 03 00 48 72 03 00 62 |q...r..6|r..Hr..b|
|00000530| 72 03 00 7c 72 03 00 94 | 72 03 00 ae 72 03 00 ce |r..|r...|r...r...|
|00000540| 72 03 00 e4 72 03 00 fa | 72 03 00 04 73 03 00 14 |r...r...|r...s...|
|00000550| 73 03 00 2a 73 03 00 3a | 73 03 00 50 73 03 00 64 |s..*s..:|s..Ps..d|
|00000560| 73 03 00 7a 73 03 00 8a | 73 03 00 a6 73 03 00 b8 |s..zs...|s...s...|
|00000570| 73 03 00 c8 73 03 00 e0 | 73 03 00 f8 73 03 00 08 |s...s...|s...s...|
|00000580| 74 03 00 22 74 03 00 3c | 74 03 00 54 74 03 00 70 |t.."t..<|t..Tt..p|
|00000590| 74 03 00 8a 74 03 00 a4 | 74 03 00 b6 74 03 00 d8 |t...t...|t...t...|
|000005a0| 74 03 00 e4 74 03 00 fe | 74 03 00 1c 75 03 00 38 |t...t...|t...u..8|
|000005b0| 75 03 00 54 75 03 00 62 | 75 03 00 6c 75 03 00 7c |u..Tu..b|u..lu..||
|000005c0| 75 03 00 94 75 03 00 ac | 75 03 00 c2 75 03 00 da |u...u...|u...u...|
|000005d0| 75 03 00 ee 75 03 00 f8 | 75 03 00 04 76 03 00 10 |u...u...|u...v...|
|000005e0| 76 03 00 30 76 03 00 4c | 76 03 00 6e 76 03 00 92 |v..0v..L|v..nv...|
|000005f0| 76 03 00 a6 76 03 00 ca | 76 03 00 e8 76 03 00 f2 |v...v...|v...v...|
|00000600| 76 03 00 08 77 03 00 2e | 77 03 00 46 77 03 00 64 |v...w...|w..Fw..d|
|00000610| 77 03 00 80 77 03 00 94 | 77 03 00 b2 77 03 00 d4 |w...w...|w...w...|
|00000620| 77 03 00 e2 77 03 00 f8 | 77 03 00 02 78 03 00 16 |w...w...|w...x...|
|00000630| 78 03 00 2c 78 03 00 46 | 78 03 00 5c 78 03 00 70 |x..,x..F|x..\x..p|
|00000640| 78 03 00 84 78 03 00 9e | 78 03 00 b0 78 03 00 c2 |x...x...|x...x...|
|00000650| 78 03 00 e0 78 03 00 f4 | 78 03 00 08 79 03 00 14 |x...x...|x...y...|
|00000660| 79 03 00 2a 79 03 00 46 | 79 03 00 5e 79 03 00 76 |y..*y..F|y..^y..v|
|00000670| 79 03 00 92 79 03 00 ac | 79 03 00 bc 79 03 00 d6 |y...y...|y...y...|
|00000680| 79 03 00 e6 79 03 00 f6 | 79 03 00 08 7a 03 00 1a |y...y...|y...z...|
|00000690| 7a 03 00 2c 7a 03 00 3a | 7a 03 00 52 7a 03 00 6c |z..,z..:|z..Rz..l|
|000006a0| 7a 03 00 84 7a 03 00 9c | 7a 03 00 bc 7a 03 00 d6 |z...z...|z...z...|
|000006b0| 7a 03 00 f0 7a 03 00 00 | 7b 03 00 1a 7b 03 00 34 |z...z...|{...{..4|
|000006c0| 7b 03 00 4a 7b 03 00 64 | 7b 03 00 7c 7b 03 00 94 |{..J{..d|{..|{...|
|000006d0| 7b 03 00 b4 7b 03 00 c8 | 7b 03 00 e4 7b 03 00 f8 |{...{...|{...{...|
|000006e0| 7b 03 00 14 7c 03 00 34 | 7c 03 00 4e 7c 03 00 6e |{...|..4||..N|..n|
|000006f0| 7c 03 00 88 7c 03 00 a0 | 7c 03 00 b0 7c 03 00 c0 ||...|...||...|...|
|00000700| 7c 03 00 d6 7c 03 00 e8 | 7c 03 00 f6 7c 03 00 0c ||...|...||...|...|
|00000710| 7d 03 00 2c 7d 03 00 48 | 7d 03 00 60 7d 03 00 00 |}..,}..H|}..`}...|
|00000720| 00 00 00 78 7d 03 00 8c | 7d 03 00 9a 7d 03 00 ae |...x}...|}...}...|
|00000730| 7d 03 00 c2 7d 03 00 00 | 00 00 00 d0 7d 03 00 e8 |}...}...|....}...|
|00000740| 7d 03 00 04 7e 03 00 1a | 7e 03 00 36 7e 03 00 00 |}...~...|~..6~...|
|00000750| 00 00 00 50 7e 03 00 62 | 7e 03 00 7e 7e 03 00 98 |...P~..b|~..~~...|
|00000760| 7e 03 00 ac 7e 03 00 ca | 7e 03 00 e4 7e 03 00 f8 |~...~...|~...~...|
|00000770| 7e 03 00 10 7f 03 00 28 | 7f 03 00 00 00 00 00 90 |~......(|........|
|00000780| f7 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 44 65 63 |..Interl|ockedDec|
|00000790| 72 65 6d 65 6e 74 00 00 | 41 00 45 78 44 65 6c 65 |rement..|A.ExDele|
|000007a0| 74 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |teResour|ceLite..|
|000007b0| 5e 00 45 78 49 6e 74 65 | 72 6c 6f 63 6b 65 64 50 |^.ExInte|rlockedP|
|000007c0| 6f 70 45 6e 74 72 79 53 | 4c 69 73 74 00 00 ba 02 |opEntryS|List....|
|000007d0| 4f 62 66 44 65 72 65 66 | 65 72 65 6e 63 65 4f 62 |ObfDeref|erenceOb|
|000007e0| 6a 65 63 74 00 00 0b 02 | 4b 65 54 69 63 6b 43 6f |ject....|KeTickCo|
|000007f0| 75 6e 74 00 c7 03 52 74 | 6c 55 70 63 61 73 65 55 |unt...Rt|lUpcaseU|
|00000800| 6e 69 63 6f 64 65 43 68 | 61 72 00 00 c1 03 52 74 |nicodeCh|ar....Rt|
|00000810| 6c 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |lUnicode|StringTo|
|00000820| 4f 65 6d 53 74 72 69 6e | 67 00 dd 03 52 74 6c 78 |OemStrin|g...Rtlx|
|00000830| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 54 6f 4f |UnicodeS|tringToO|
|00000840| 65 6d 53 69 7a 65 00 00 | 2d 00 44 62 67 50 72 69 |emSize..|-.DbgPri|
|00000850| 6e 74 00 00 8e 03 52 74 | 6c 4f 65 6d 53 74 72 69 |nt....Rt|lOemStri|
|00000860| 6e 67 54 6f 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |ngToUnic|odeStrin|
|00000870| 67 00 db 03 52 74 6c 78 | 4f 65 6d 53 74 72 69 6e |g...Rtlx|OemStrin|
|00000880| 67 54 6f 55 6e 69 63 6f | 64 65 53 69 7a 65 00 00 |gToUnico|deSize..|
|00000890| 71 02 4e 6c 73 4d 62 4f | 65 6d 43 6f 64 65 50 61 |q.NlsMbO|emCodePa|
|000008a0| 67 65 54 61 67 00 f9 01 | 4b 65 53 65 74 45 76 65 |geTag...|KeSetEve|
|000008b0| 6e 74 00 00 37 03 52 74 | 6c 45 71 75 61 6c 55 6e |nt..7.Rt|lEqualUn|
|000008c0| 69 63 6f 64 65 53 74 72 | 69 6e 67 00 33 00 45 78 |icodeStr|ing.3.Ex|
|000008d0| 41 63 71 75 69 72 65 52 | 65 73 6f 75 72 63 65 53 |AcquireR|esourceS|
|000008e0| 68 61 72 65 64 4c 69 74 | 65 00 14 02 4b 65 66 52 |haredLit|e...KefR|
|000008f0| 65 6c 65 61 73 65 53 70 | 69 6e 4c 6f 63 6b 46 72 |eleaseSp|inLockFr|
|00000900| 6f 6d 44 70 63 4c 65 76 | 65 6c 00 00 13 02 4b 65 |omDpcLev|el....Ke|
|00000910| 66 41 63 71 75 69 72 65 | 53 70 69 6e 4c 6f 63 6b |fAcquire|SpinLock|
|00000920| 41 74 44 70 63 4c 65 76 | 65 6c 00 00 f8 00 49 6e |AtDpcLev|el....In|
|00000930| 74 65 72 6c 6f 63 6b 65 | 64 45 78 63 68 61 6e 67 |terlocke|dExchang|
|00000940| 65 00 60 00 45 78 49 6e | 74 65 72 6c 6f 63 6b 65 |e.`.ExIn|terlocke|
|00000950| 64 50 75 73 68 45 6e 74 | 72 79 53 4c 69 73 74 00 |dPushEnt|rySList.|
|00000960| 32 01 49 6f 46 72 65 65 | 49 72 70 00 11 01 49 6f |2.IoFree|Irp...Io|
|00000970| 43 68 65 63 6b 44 65 73 | 69 72 65 64 41 63 63 65 |CheckDes|iredAcce|
|00000980| 73 73 00 00 17 03 52 74 | 6c 43 6f 70 79 55 6e 69 |ss....Rt|lCopyUni|
|00000990| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 db 01 4b 65 |codeStri|ng....Ke|
|000009a0| 51 75 65 72 79 53 79 73 | 74 65 6d 54 69 6d 65 00 |QuerySys|temTime.|
|000009b0| 0c 02 4b 65 55 6e 73 74 | 61 63 6b 44 65 74 61 63 |..KeUnst|ackDetac|
|000009c0| 68 50 72 6f 63 65 73 73 | 00 00 08 02 4b 65 53 74 |hProcess|....KeSt|
|000009d0| 61 63 6b 41 74 74 61 63 | 68 50 72 6f 63 65 73 73 |ackAttac|hProcess|
|000009e0| 00 00 3a 01 49 6f 47 65 | 74 43 75 72 72 65 6e 74 |..:.IoGe|tCurrent|
|000009f0| 50 72 6f 63 65 73 73 00 | 7c 03 52 74 6c 4c 65 6e |Process.||.RtlLen|
|00000a00| 67 74 68 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |gthSecur|ityDescr|
|00000a10| 69 70 74 6f 72 00 97 02 | 4e 74 51 75 65 72 79 56 |iptor...|NtQueryV|
|00000a20| 6f 6c 75 6d 65 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |olumeInf|ormation|
|00000a30| 46 69 6c 65 00 00 7a 02 | 4e 74 43 6c 6f 73 65 00 |File..z.|NtClose.|
|00000a40| 8b 02 4e 74 4f 70 65 6e | 46 69 6c 65 00 00 91 02 |..NtOpen|File....|
|00000a50| 4e 74 51 75 65 72 79 49 | 6e 66 6f 72 6d 61 74 69 |NtQueryI|nformati|
|00000a60| 6f 6e 46 69 6c 65 00 00 | c9 01 4b 65 49 6e 69 74 |onFile..|..KeInit|
|00000a70| 69 61 6c 69 7a 65 54 69 | 6d 65 72 00 c2 01 4b 65 |ializeTi|mer...Ke|
|00000a80| 49 6e 69 74 69 61 6c 69 | 7a 65 45 76 65 6e 74 00 |Initiali|zeEvent.|
|00000a90| 12 02 4b 65 57 61 69 74 | 46 6f 72 53 69 6e 67 6c |..KeWait|ForSingl|
|00000aa0| 65 4f 62 6a 65 63 74 00 | df 01 4b 65 52 65 61 64 |eObject.|..KeRead|
|00000ab0| 53 74 61 74 65 45 76 65 | 6e 74 00 00 a5 01 4b 65 |StateEve|nt....Ke|
|00000ac0| 43 61 6e 63 65 6c 54 69 | 6d 65 72 00 06 02 4b 65 |CancelTi|mer...Ke|
|00000ad0| 53 65 74 54 69 6d 65 72 | 00 00 a6 01 4b 65 43 6c |SetTimer|....KeCl|
|00000ae0| 65 61 72 45 76 65 6e 74 | 00 00 02 02 4b 65 53 65 |earEvent|....KeSe|
|00000af0| 74 54 61 72 67 65 74 50 | 72 6f 63 65 73 73 6f 72 |tTargetP|rocessor|
|00000b00| 44 70 63 00 c1 01 4b 65 | 49 6e 69 74 69 61 6c 69 |Dpc...Ke|Initiali|
|00000b10| 7a 65 44 70 63 00 b8 04 | 77 63 73 6c 65 6e 00 00 |zeDpc...|wcslen..|
|00000b20| 34 02 4d 6d 42 75 69 6c | 64 4d 64 6c 46 6f 72 4e |4.MmBuil|dMdlForN|
|00000b30| 6f 6e 50 61 67 65 64 50 | 6f 6f 6c 00 4a 01 49 6f |onPagedP|ool.J.Io|
|00000b40| 49 6e 69 74 69 61 6c 69 | 7a 65 49 72 70 00 ce 01 |Initiali|zeIrp...|
|00000b50| 4b 65 49 6e 73 65 72 74 | 51 75 65 75 65 00 a6 02 |KeInsert|Queue...|
|00000b60| 4e 74 57 72 69 74 65 46 | 69 6c 65 00 9d 02 4e 74 |NtWriteF|ile...Nt|
|00000b70| 53 65 74 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 46 69 |SetInfor|mationFi|
|00000b80| 6c 65 00 00 98 02 4e 74 | 52 65 61 64 46 69 6c 65 |le....Nt|ReadFile|
|00000b90| 00 00 44 01 49 6f 47 65 | 74 52 65 6c 61 74 65 64 |..D.IoGe|tRelated|
|00000ba0| 44 65 76 69 63 65 4f 62 | 6a 65 63 74 00 00 b5 02 |DeviceOb|ject....|
|00000bb0| 4f 62 52 65 66 65 72 65 | 6e 63 65 4f 62 6a 65 63 |ObRefere|nceObjec|
|00000bc0| 74 42 79 48 61 6e 64 6c | 65 00 1d 01 49 6f 43 72 |tByHandl|e...IoCr|
|00000bd0| 65 61 74 65 46 69 6c 65 | 00 00 9c 04 6d 65 6d 6d |eateFile|....memm|
|00000be0| 6f 76 65 00 cf 03 52 74 | 6c 55 70 70 65 72 43 68 |ove...Rt|lUpperCh|
|00000bf0| 61 72 00 00 91 01 49 6f | 57 72 69 74 65 45 72 72 |ar....Io|WriteErr|
|00000c00| 6f 72 4c 6f 67 45 6e 74 | 72 79 00 00 02 01 49 6f |orLogEnt|ry....Io|
|00000c10| 41 6c 6c 6f 63 61 74 65 | 45 72 72 6f 72 4c 6f 67 |Allocate|ErrorLog|
|00000c20| 45 6e 74 72 79 00 1b 01 | 49 6f 43 72 65 61 74 65 |Entry...|IoCreate|
|00000c30| 44 65 76 69 63 65 00 00 | 25 01 49 6f 44 65 6c 65 |Device..|%.IoDele|
|00000c40| 74 65 44 65 76 69 63 65 | 00 00 68 00 45 78 51 75 |teDevice|..h.ExQu|
|00000c50| 65 75 65 57 6f 72 6b 49 | 74 65 6d 00 cd 01 4b 65 |eueWorkI|tem...Ke|
|00000c60| 49 6e 73 65 72 74 48 65 | 61 64 51 75 65 75 65 00 |InsertHe|adQueue.|
|00000c70| 47 00 45 78 46 72 65 65 | 50 6f 6f 6c 00 00 d2 01 |G.ExFree|Pool....|
|00000c80| 4b 65 4c 65 61 76 65 43 | 72 69 74 69 63 61 6c 52 |KeLeaveC|riticalR|
|00000c90| 65 67 69 6f 6e 00 ad 01 | 4b 65 45 6e 74 65 72 43 |egion...|KeEnterC|
|00000ca0| 72 69 74 69 63 61 6c 52 | 65 67 69 6f 6e 00 94 01 |riticalR|egion...|
|00000cb0| 49 6f 66 43 61 6c 6c 44 | 72 69 76 65 72 00 95 01 |IofCallD|river...|
|00000cc0| 49 6f 66 43 6f 6d 70 6c | 65 74 65 52 65 71 75 65 |IofCompl|eteReque|
|00000cd0| 73 74 00 00 02 04 53 65 | 53 69 6e 67 6c 65 50 72 |st....Se|SinglePr|
|00000ce0| 69 76 69 6c 65 67 65 43 | 68 65 63 6b 00 00 ed 03 |ivilegeC|heck....|
|00000cf0| 53 65 45 78 70 6f 72 74 | 73 00 e2 01 4b 65 52 65 |SeExport|s...KeRe|
|00000d00| 61 64 53 74 61 74 65 51 | 75 65 75 65 00 00 3b 00 |adStateQ|ueue..;.|
|00000d10| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|00000d20| 74 68 54 61 67 50 72 69 | 6f 72 69 74 79 00 cc 02 |thTagPri|ority...|
|00000d30| 50 72 6f 62 65 46 6f 72 | 52 65 61 64 00 00 dd 01 |ProbeFor|Read....|
|00000d40| 4b 65 51 75 65 72 79 54 | 69 6d 65 49 6e 63 72 65 |KeQueryT|imeIncre|
|00000d50| 6d 65 6e 74 00 00 7a 04 | 5f 65 78 63 65 70 74 5f |ment..z.|_except_|
|00000d60| 68 61 6e 64 6c 65 72 33 | 00 00 72 04 5f 61 6c 6c |handler3|..r._all|
|00000d70| 6d 75 6c 00 33 01 49 6f | 46 72 65 65 4d 64 6c 00 |mul.3.Io|FreeMdl.|
|00000d80| 0c 01 49 6f 42 75 69 6c | 64 50 61 72 74 69 61 6c |..IoBuil|dPartial|
|00000d90| 4d 64 6c 00 4f 02 4d 6d | 4d 61 70 4c 6f 63 6b 65 |Mdl.O.Mm|MapLocke|
|00000da0| 64 50 61 67 65 73 53 70 | 65 63 69 66 79 43 61 63 |dPagesSp|ecifyCac|
|00000db0| 68 65 00 00 65 02 4d 6d | 55 6e 6c 6f 63 6b 50 61 |he..e.Mm|UnlockPa|
|00000dc0| 67 65 73 00 67 02 4d 6d | 55 6e 6d 61 70 4c 6f 63 |ges.g.Mm|UnmapLoc|
|00000dd0| 6b 65 64 50 61 67 65 73 | 00 00 4e 03 52 74 6c 46 |kedPages|..N.RtlF|
|00000de0| 72 65 65 4f 65 6d 53 74 | 72 69 6e 67 00 00 c4 02 |reeOemSt|ring....|
|00000df0| 50 6f 52 65 67 69 73 74 | 65 72 53 79 73 74 65 6d |PoRegist|erSystem|
|00000e00| 53 74 61 74 65 00 18 04 | 5a 77 43 6c 6f 73 65 00 |State...|ZwClose.|
|00000e10| 52 04 5a 77 51 75 65 72 | 79 56 61 6c 75 65 4b 65 |R.ZwQuer|yValueKe|
|00000e20| 79 00 39 04 5a 77 4f 70 | 65 6e 4b 65 79 00 a4 03 |y.9.ZwOp|enKey...|
|00000e30| 52 74 6c 53 65 74 4f 77 | 6e 65 72 53 65 63 75 72 |RtlSetOw|nerSecur|
|00000e40| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 a2 03 |ityDescr|iptor...|
|00000e50| 52 74 6c 53 65 74 44 61 | 63 6c 53 65 63 75 72 69 |RtlSetDa|clSecuri|
|00000e60| 74 79 44 65 73 63 72 69 | 70 74 6f 72 00 00 f3 02 |tyDescri|ptor....|
|00000e70| 52 74 6c 41 64 64 41 63 | 63 65 73 73 41 6c 6c 6f |RtlAddAc|cessAllo|
|00000e80| 77 65 64 41 63 65 00 00 | 18 03 52 74 6c 43 72 65 |wedAce..|..RtlCre|
|00000e90| 61 74 65 41 63 6c 00 00 | 7d 03 52 74 6c 4c 65 6e |ateAcl..|}.RtlLen|
|00000ea0| 67 74 68 53 69 64 00 00 | ab 03 52 74 6c 53 75 62 |gthSid..|..RtlSub|
|00000eb0| 41 75 74 68 6f 72 69 74 | 79 53 69 64 00 00 68 03 |Authorit|ySid..h.|
|00000ec0| 52 74 6c 49 6e 69 74 69 | 61 6c 69 7a 65 53 69 64 |RtlIniti|alizeSid|
|00000ed0| 00 00 7b 03 52 74 6c 4c | 65 6e 67 74 68 52 65 71 |..{.RtlL|engthReq|
|00000ee0| 75 69 72 65 64 53 69 64 | 00 00 1c 03 52 74 6c 43 |uiredSid|....RtlC|
|00000ef0| 72 65 61 74 65 53 65 63 | 75 72 69 74 79 44 65 73 |reateSec|urityDes|
|00000f00| 63 72 69 70 74 6f 72 00 | c6 01 4b 65 49 6e 69 74 |criptor.|..KeInit|
|00000f10| 69 61 6c 69 7a 65 51 75 | 65 75 65 00 cb 02 50 6f |ializeQu|eue...Po|
|00000f20| 55 6e 72 65 67 69 73 74 | 65 72 53 79 73 74 65 6d |Unregist|erSystem|
|00000f30| 53 74 61 74 65 00 64 02 | 4d 6d 55 6e 6c 6f 63 6b |State.d.|MmUnlock|
|00000f40| 50 61 67 61 62 6c 65 49 | 6d 61 67 65 53 65 63 74 |PagableI|mageSect|
|00000f50| 69 6f 6e 00 32 00 45 78 | 41 63 71 75 69 72 65 52 |ion.2.Ex|AcquireR|
|00000f60| 65 73 6f 75 72 63 65 45 | 78 63 6c 75 73 69 76 65 |esourceE|xclusive|
|00000f70| 4c 69 74 65 00 00 56 03 | 52 74 6c 47 65 74 44 61 |Lite..V.|RtlGetDa|
|00000f80| 63 6c 53 65 63 75 72 69 | 74 79 44 65 73 63 72 69 |clSecuri|tyDescri|
|00000f90| 70 74 6f 72 00 00 f2 01 | 4b 65 52 75 6e 64 6f 77 |ptor....|KeRundow|
|00000fa0| 6e 51 75 65 75 65 00 00 | a9 01 4b 65 44 65 6c 61 |nQueue..|..KeDela|
|00000fb0| 79 45 78 65 63 75 74 69 | 6f 6e 54 68 72 65 61 64 |yExecuti|onThread|
|00000fc0| 00 00 f9 00 49 6e 74 65 | 72 6c 6f 63 6b 65 64 45 |....Inte|rlockedE|
|00000fd0| 78 63 68 61 6e 67 65 41 | 64 64 00 00 73 00 45 78 |xchangeA|dd..s.Ex|
|00000fe0| 52 65 6c 65 61 73 65 52 | 65 73 6f 75 72 63 65 4c |ReleaseR|esourceL|
|00000ff0| 69 74 65 00 0d 03 52 74 | 6c 43 6f 6d 70 61 72 65 |ite...Rt|lCompare|
|00001000| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 a0 00 |UnicodeS|tring...|
|00001010| 46 73 52 74 6c 44 6f 65 | 73 4e 61 6d 65 43 6f 6e |FsRtlDoe|sNameCon|
|00001020| 74 61 69 6e 57 69 6c 64 | 43 61 72 64 73 00 b1 03 |tainWild|Cards...|
|00001030| 52 74 6c 54 69 6d 65 54 | 6f 54 69 6d 65 46 69 65 |RtlTimeT|oTimeFie|
|00001040| 6c 64 73 00 ae 03 52 74 | 6c 54 69 6d 65 46 69 65 |lds...Rt|lTimeFie|
|00001050| 6c 64 73 54 6f 54 69 6d | 65 00 71 04 5f 61 6c 6c |ldsToTim|e.q._all|
|00001060| 64 69 76 00 a4 01 4b 65 | 42 75 67 43 68 65 63 6b |div...Ke|BugCheck|
|00001070| 45 78 00 00 b2 01 4b 65 | 47 65 74 43 75 72 72 65 |Ex....Ke|GetCurre|
|00001080| 6e 74 54 68 72 65 61 64 | 00 00 03 01 49 6f 41 6c |ntThread|....IoAl|
|00001090| 6c 6f 63 61 74 65 49 72 | 70 00 bb 02 4f 62 66 52 |locateIr|p...ObfR|
|000010a0| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|000010b0| 5b 01 49 6f 51 75 65 75 | 65 54 68 72 65 61 64 49 |[.IoQueu|eThreadI|
|000010c0| 72 70 00 00 57 02 4d 6d | 50 72 6f 62 65 41 6e 64 |rp..W.Mm|ProbeAnd|
|000010d0| 4c 6f 63 6b 50 61 67 65 | 73 00 04 01 49 6f 41 6c |LockPage|s...IoAl|
|000010e0| 6c 6f 63 61 74 65 4d 64 | 6c 00 4a 02 4d 6d 4c 6f |locateMd|l.J.MmLo|
|000010f0| 63 6b 50 61 67 61 62 6c | 65 44 61 74 61 53 65 63 |ckPagabl|eDataSec|
|00001100| 74 69 6f 6e 00 00 36 03 | 52 74 6c 45 71 75 61 6c |tion..6.|RtlEqual|
|00001110| 53 74 72 69 6e 67 00 00 | 7d 02 4e 74 43 72 65 61 |String..|}.NtCrea|
|00001120| 74 65 46 69 6c 65 00 00 | 81 02 4e 74 44 65 76 69 |teFile..|..NtDevi|
|00001130| 63 65 49 6f 43 6f 6e 74 | 72 6f 6c 46 69 6c 65 00 |ceIoCont|rolFile.|
|00001140| 25 04 5a 77 44 65 76 69 | 63 65 49 6f 43 6f 6e 74 |%.ZwDevi|ceIoCont|
|00001150| 72 6f 6c 46 69 6c 65 00 | 1d 04 5a 77 43 72 65 61 |rolFile.|..ZwCrea|
|00001160| 74 65 46 69 6c 65 00 00 | 92 03 52 74 6c 50 72 65 |teFile..|..RtlPre|
|00001170| 66 69 78 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |fixUnico|deString|
|00001180| 00 00 12 01 49 6f 43 68 | 65 63 6b 45 61 42 75 66 |....IoCh|eckEaBuf|
|00001190| 66 65 72 56 61 6c 69 64 | 69 74 79 00 13 01 49 6f |ferValid|ity...Io|
|000011a0| 43 68 65 63 6b 46 75 6e | 63 74 69 6f 6e 41 63 63 |CheckFun|ctionAcc|
|000011b0| 65 73 73 00 c4 00 46 73 | 52 74 6c 4d 64 6c 57 72 |ess...Fs|RtlMdlWr|
|000011c0| 69 74 65 43 6f 6d 70 6c | 65 74 65 44 65 76 00 00 |iteCompl|eteDev..|
|000011d0| d5 00 46 73 52 74 6c 50 | 72 65 70 61 72 65 4d 64 |..FsRtlP|repareMd|
|000011e0| 6c 57 72 69 74 65 44 65 | 76 00 c1 00 46 73 52 74 |lWriteDe|v...FsRt|
|000011f0| 6c 4d 64 6c 52 65 61 64 | 43 6f 6d 70 6c 65 74 65 |lMdlRead|Complete|
|00001200| 44 65 76 00 c2 00 46 73 | 52 74 6c 4d 64 6c 52 65 |Dev...Fs|RtlMdlRe|
|00001210| 61 64 44 65 76 00 37 01 | 49 6f 47 65 74 42 61 73 |adDev.7.|IoGetBas|
|00001220| 65 46 69 6c 65 53 79 73 | 74 65 6d 44 65 76 69 63 |eFileSys|temDevic|
|00001230| 65 4f 62 6a 65 63 74 00 | 8a 04 5f 77 63 73 69 63 |eObject.|.._wcsic|
|00001240| 6d 70 00 00 9a 02 4e 74 | 52 65 71 75 65 73 74 57 |mp....Nt|RequestW|
|00001250| 61 69 74 52 65 70 6c 79 | 50 6f 72 74 00 00 88 03 |aitReply|Port....|
|00001260| 52 74 6c 4e 74 53 74 61 | 74 75 73 54 6f 44 6f 73 |RtlNtSta|tusToDos|
|00001270| 45 72 72 6f 72 4e 6f 54 | 65 62 00 00 7c 01 49 6f |ErrorNoT|eb..|.Io|
|00001280| 53 65 74 54 68 72 65 61 | 64 48 61 72 64 45 72 72 |SetThrea|dHardErr|
|00001290| 6f 72 4d 6f 64 65 00 00 | 6e 03 52 74 6c 49 6e 74 |orMode..|n.RtlInt|
|000012a0| 65 67 65 72 54 6f 55 6e | 69 63 6f 64 65 53 74 72 |egerToUn|icodeStr|
|000012b0| 69 6e 67 00 10 01 49 6f | 43 61 6e 63 65 6c 49 72 |ing...Io|CancelIr|
|000012c0| 70 00 b6 04 77 63 73 63 | 70 79 00 00 63 03 52 74 |p...wcsc|py..c.Rt|
|000012d0| 6c 49 6e 69 74 53 74 72 | 69 6e 67 00 93 01 49 6f |lInitStr|ing...Io|
|000012e0| 57 72 69 74 65 54 72 61 | 6e 73 66 65 72 43 6f 75 |WriteTra|nsferCou|
|000012f0| 6e 74 00 00 92 01 49 6f | 57 72 69 74 65 4f 70 65 |nt....Io|WriteOpe|
|00001300| 72 61 74 69 6f 6e 43 6f | 75 6e 74 00 60 01 49 6f |rationCo|unt.`.Io|
|00001310| 52 65 61 64 54 72 61 6e | 73 66 65 72 43 6f 75 6e |ReadTran|sferCoun|
|00001320| 74 00 5f 01 49 6f 52 65 | 61 64 4f 70 65 72 61 74 |t._.IoRe|adOperat|
|00001330| 69 6f 6e 43 6f 75 6e 74 | 00 00 82 01 49 6f 53 74 |ionCount|....IoSt|
|00001340| 61 74 69 73 74 69 63 73 | 4c 6f 63 6b 00 00 b4 04 |atistics|Lock....|
|00001350| 77 63 73 63 68 72 00 00 | 82 04 5f 73 74 72 69 63 |wcschr..|.._stric|
|00001360| 6d 70 00 00 97 03 52 74 | 6c 52 61 6e 64 6f 6d 00 |mp....Rt|lRandom.|
|00001370| 2f 01 49 6f 46 61 73 74 | 51 75 65 72 79 4e 65 74 |/.IoFast|QueryNet|
|00001380| 77 6f 72 6b 41 74 74 72 | 69 62 75 74 65 73 00 00 |workAttr|ibutes..|
|00001390| 9c 03 52 74 6c 53 65 63 | 6f 6e 64 73 53 69 6e 63 |..RtlSec|ondsSinc|
|000013a0| 65 31 39 37 30 54 6f 54 | 69 6d 65 00 14 01 49 6f |e1970ToT|ime...Io|
|000013b0| 43 68 65 63 6b 51 75 65 | 72 79 53 65 74 46 69 6c |CheckQue|rySetFil|
|000013c0| 65 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 00 00 cb 03 |eInforma|tion....|
|000013d0| 52 74 6c 55 70 63 61 73 | 65 55 6e 69 63 6f 64 65 |RtlUpcas|eUnicode|
|000013e0| 53 74 72 69 6e 67 54 6f | 4f 65 6d 53 74 72 69 6e |StringTo|OemStrin|
|000013f0| 67 00 4c 03 52 74 6c 46 | 72 65 65 41 6e 73 69 53 |g.L.RtlF|reeAnsiS|
|00001400| 74 72 69 6e 67 00 15 01 | 49 6f 43 68 65 63 6b 51 |tring...|IoCheckQ|
|00001410| 75 65 72 79 53 65 74 56 | 6f 6c 75 6d 65 49 6e 66 |uerySetV|olumeInf|
|00001420| 6f 72 6d 61 74 69 6f 6e | 00 00 a2 02 4e 74 53 65 |ormation|....NtSe|
|00001430| 74 56 6f 6c 75 6d 65 49 | 6e 66 6f 72 6d 61 74 69 |tVolumeI|nformati|
|00001440| 6f 6e 46 69 6c 65 00 00 | 75 04 5f 61 6c 6c 73 68 |onFile..|u._allsh|
|00001450| 72 00 a1 02 4e 74 53 65 | 74 53 65 63 75 72 69 74 |r...NtSe|tSecurit|
|00001460| 79 4f 62 6a 65 63 74 00 | d2 03 52 74 6c 56 61 6c |yObject.|..RtlVal|
|00001470| 69 64 52 65 6c 61 74 69 | 76 65 53 65 63 75 72 69 |idRelati|veSecuri|
|00001480| 74 79 44 65 73 63 72 69 | 70 74 6f 72 00 00 95 02 |tyDescri|ptor....|
|00001490| 4e 74 51 75 65 72 79 53 | 65 63 75 72 69 74 79 4f |NtQueryS|ecurityO|
|000014a0| 62 6a 65 63 74 00 94 02 | 4e 74 51 75 65 72 79 51 |bject...|NtQueryQ|
|000014b0| 75 6f 74 61 49 6e 66 6f | 72 6d 61 74 69 6f 6e 46 |uotaInfo|rmationF|
|000014c0| 69 6c 65 00 a0 02 4e 74 | 53 65 74 51 75 6f 74 61 |ile...Nt|SetQuota|
|000014d0| 49 6e 66 6f 72 6d 61 74 | 69 6f 6e 46 69 6c 65 00 |Informat|ionFile.|
|000014e0| 48 01 49 6f 47 65 74 53 | 74 61 63 6b 4c 69 6d 69 |H.IoGetS|tackLimi|
|000014f0| 74 73 00 00 d3 03 52 74 | 6c 56 61 6c 69 64 53 65 |ts....Rt|lValidSe|
|00001500| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00001510| 00 00 55 03 52 74 6c 47 | 65 74 43 6f 6d 70 72 65 |..U.RtlG|etCompre|
|00001520| 73 73 69 6f 6e 57 6f 72 | 6b 53 70 61 63 65 53 69 |ssionWor|kSpaceSi|
|00001530| 7a 65 00 00 61 02 4d 6d | 53 69 7a 65 4f 66 4d 64 |ze..a.Mm|SizeOfMd|
|00001540| 6c 00 20 03 52 74 6c 44 | 65 63 6f 6d 70 72 65 73 |l. .RtlD|ecompres|
|00001550| 73 43 68 75 6e 6b 73 00 | b5 04 77 63 73 63 6d 70 |sChunks.|..wcscmp|
|00001560| 00 00 61 03 52 74 6c 49 | 6e 69 74 41 6e 73 69 53 |..a.RtlI|nitAnsiS|
|00001570| 74 72 69 6e 67 00 b3 00 | 46 73 52 74 6c 49 73 46 |tring...|FsRtlIsF|
|00001580| 61 74 44 62 63 73 4c 65 | 67 61 6c 00 71 03 52 74 |atDbcsLe|gal.q.Rt|
|00001590| 6c 49 73 4e 61 6d 65 4c | 65 67 61 6c 44 4f 53 38 |lIsNameL|egalDOS8|
|000015a0| 44 6f 74 33 00 00 73 02 | 4e 6c 73 4f 65 6d 4c 65 |Dot3..s.|NlsOemLe|
|000015b0| 61 64 42 79 74 65 49 6e | 66 6f 00 00 70 02 4e 6c |adByteIn|fo..p.Nl|
|000015c0| 73 4d 62 43 6f 64 65 50 | 61 67 65 54 61 67 00 00 |sMbCodeP|ageTag..|
|000015d0| c5 03 52 74 6c 55 6e 69 | 63 6f 64 65 54 6f 4f 65 |..RtlUni|codeToOe|
|000015e0| 6d 4e 00 00 ce 03 52 74 | 6c 55 70 63 61 73 65 55 |mN....Rt|lUpcaseU|
|000015f0| 6e 69 63 6f 64 65 54 6f | 4f 65 6d 4e 00 00 ab 01 |nicodeTo|OemN....|
|00001600| 4b 65 44 65 74 61 63 68 | 50 72 6f 63 65 73 73 00 |KeDetach|Process.|
|00001610| a2 01 4b 65 41 74 74 61 | 63 68 50 72 6f 63 65 73 |..KeAtta|chProces|
|00001620| 73 00 ce 02 50 73 41 73 | 73 69 67 6e 49 6d 70 65 |s...PsAs|signImpe|
|00001630| 72 73 6f 6e 61 74 69 6f | 6e 54 6f 6b 65 6e 00 00 |rsonatio|nToken..|
|00001640| ee 03 53 65 46 72 65 65 | 50 72 69 76 69 6c 65 67 |..SeFree|Privileg|
|00001650| 65 73 00 00 81 03 52 74 | 6c 4d 61 70 47 65 6e 65 |es....Rt|lMapGene|
|00001660| 72 69 63 4d 61 73 6b 00 | 8c 04 5f 77 63 73 6e 69 |ricMask.|.._wcsni|
|00001670| 63 6d 70 00 d4 01 4b 65 | 4e 75 6d 62 65 72 50 72 |cmp...Ke|NumberPr|
|00001680| 6f 63 65 73 73 6f 72 73 | 00 00 b0 03 52 74 6c 54 |ocessors|....RtlT|
|00001690| 69 6d 65 54 6f 53 65 63 | 6f 6e 64 73 53 69 6e 63 |imeToSec|ondsSinc|
|000016a0| 65 31 39 38 30 00 49 02 | 4d 6d 49 73 54 68 69 73 |e1980.I.|MmIsThis|
|000016b0| 41 6e 4e 74 41 73 53 79 | 73 74 65 6d 00 00 d1 02 |AnNtAsSy|stem....|
|000016c0| 50 73 43 72 65 61 74 65 | 53 79 73 74 65 6d 54 68 |PsCreate|SystemTh|
|000016d0| 72 65 61 64 00 00 fb 01 | 4b 65 53 65 74 49 64 65 |read....|KeSetIde|
|000016e0| 61 6c 50 72 6f 63 65 73 | 73 6f 72 54 68 72 65 61 |alProces|sorThrea|
|000016f0| 64 00 9f 02 4e 74 53 65 | 74 49 6e 66 6f 72 6d 61 |d...NtSe|tInforma|
|00001700| 74 69 6f 6e 54 68 72 65 | 61 64 00 00 ed 01 4b 65 |tionThre|ad....Ke|
|00001710| 52 65 6d 6f 76 65 51 75 | 65 75 65 00 ea 02 50 73 |RemoveQu|eue...Ps|
|00001720| 54 65 72 6d 69 6e 61 74 | 65 53 79 73 74 65 6d 54 |Terminat|eSystemT|
|00001730| 68 72 65 61 64 00 1a 03 | 52 74 6c 43 72 65 61 74 |hread...|RtlCreat|
|00001740| 65 48 65 61 70 00 7b 02 | 4e 74 43 6f 6e 6e 65 63 |eHeap.{.|NtConnec|
|00001750| 74 50 6f 72 74 00 7e 02 | 4e 74 43 72 65 61 74 65 |tPort.~.|NtCreate|
|00001760| 53 65 63 74 69 6f 6e 00 | 2c 03 52 74 6c 44 65 73 |Section.|,.RtlDes|
|00001770| 74 72 6f 79 48 65 61 70 | 00 00 f7 02 52 74 6c 41 |troyHeap|....RtlA|
|00001780| 6c 6c 6f 63 61 74 65 48 | 65 61 70 00 4d 03 52 74 |llocateH|eap.M.Rt|
|00001790| 6c 46 72 65 65 48 65 61 | 70 00 64 03 52 74 6c 49 |lFreeHea|p.d.RtlI|
|000017a0| 6e 69 74 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |nitUnico|deString|
|000017b0| 00 00 c8 03 52 74 6c 55 | 70 63 61 73 65 55 6e 69 |....RtlU|pcaseUni|
|000017c0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 50 03 52 74 |codeStri|ng..P.Rt|
|000017d0| 6c 46 72 65 65 55 6e 69 | 63 6f 64 65 53 74 72 69 |lFreeUni|codeStri|
|000017e0| 6e 67 00 00 f1 03 53 65 | 4c 6f 63 6b 53 75 62 6a |ng....Se|LockSubj|
|000017f0| 65 63 74 43 6f 6e 74 65 | 78 74 00 00 f8 03 53 65 |ectConte|xt....Se|
|00001800| 51 75 65 72 79 41 75 74 | 68 65 6e 74 69 63 61 74 |QueryAut|henticat|
|00001810| 69 6f 6e 49 64 54 6f 6b | 65 6e 00 00 08 04 53 65 |ionIdTok|en....Se|
|00001820| 55 6e 6c 6f 63 6b 53 75 | 62 6a 65 63 74 43 6f 6e |UnlockSu|bjectCon|
|00001830| 74 65 78 74 00 00 e5 03 | 53 65 43 61 70 74 75 72 |text....|SeCaptur|
|00001840| 65 53 75 62 6a 65 63 74 | 43 6f 6e 74 65 78 74 00 |eSubject|Context.|
|00001850| de 03 53 65 41 63 63 65 | 73 73 43 68 65 63 6b 00 |..SeAcce|ssCheck.|
|00001860| fe 03 53 65 52 65 6c 65 | 61 73 65 53 75 62 6a 65 |..SeRele|aseSubje|
|00001870| 63 74 43 6f 6e 74 65 78 | 74 00 78 02 4e 74 41 6c |ctContex|t.x.NtAl|
|00001880| 6c 6f 63 61 74 65 56 69 | 72 74 75 61 6c 4d 65 6d |locateVi|rtualMem|
|00001890| 6f 72 79 00 85 02 4e 74 | 46 72 65 65 56 69 72 74 |ory...Nt|FreeVirt|
|000018a0| 75 61 6c 4d 65 6d 6f 72 | 79 00 65 00 45 78 4c 6f |ualMemor|y.e.ExLo|
|000018b0| 63 61 6c 54 69 6d 65 54 | 6f 53 79 73 74 65 6d 54 |calTimeT|oSystemT|
|000018c0| 69 6d 65 00 c8 01 4b 65 | 49 6e 69 74 69 61 6c 69 |ime...Ke|Initiali|
|000018d0| 7a 65 53 70 69 6e 4c 6f | 63 6b 00 00 fa 00 49 6e |zeSpinLo|ck....In|
|000018e0| 74 65 72 6c 6f 63 6b 65 | 64 49 6e 63 72 65 6d 65 |terlocke|dIncreme|
|000018f0| 6e 74 00 00 81 00 45 78 | 66 49 6e 74 65 72 6c 6f |nt....Ex|fInterlo|
|00001900| 63 6b 65 64 52 65 6d 6f | 76 65 48 65 61 64 4c 69 |ckedRemo|veHeadLi|
|00001910| 73 74 00 00 4e 02 4d 6d | 4d 61 70 4c 6f 63 6b 65 |st..N.Mm|MapLocke|
|00001920| 64 50 61 67 65 73 00 00 | 50 00 45 78 49 6e 69 74 |dPages..|P.ExInit|
|00001930| 69 61 6c 69 7a 65 52 65 | 73 6f 75 72 63 65 4c 69 |ializeRe|sourceLi|
|00001940| 74 65 00 00 0a 03 52 74 | 6c 43 6f 6d 70 61 72 65 |te....Rt|lCompare|
|00001950| 4d 65 6d 6f 72 79 00 00 | af 03 52 74 6c 54 69 6d |Memory..|..RtlTim|
|00001960| 65 54 6f 53 65 63 6f 6e | 64 73 53 69 6e 63 65 31 |eToSecon|dsSince1|
|00001970| 39 37 30 00 fa 02 52 74 | 6c 41 6e 73 69 53 74 72 |970...Rt|lAnsiStr|
|00001980| 69 6e 67 54 6f 55 6e 69 | 63 6f 64 65 53 74 72 69 |ingToUni|codeStri|
|00001990| 6e 67 00 00 7c 00 45 78 | 66 49 6e 74 65 72 6c 6f |ng..|.Ex|fInterlo|
|000019a0| 63 6b 65 64 41 64 64 55 | 6c 6f 6e 67 00 00 5d 03 |ckedAddU|long..].|
|000019b0| 52 74 6c 47 65 74 4f 77 | 6e 65 72 53 65 63 75 72 |RtlGetOw|nerSecur|
|000019c0| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 78 00 |ityDescr|iptor.x.|
|000019d0| 45 78 53 79 73 74 65 6d | 54 69 6d 65 54 6f 4c 6f |ExSystem|TimeToLo|
|000019e0| 63 61 6c 54 69 6d 65 00 | 3a 00 45 78 41 6c 6c 6f |calTime.|:.ExAllo|
|000019f0| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |catePool|WithTag.|
|00001a00| ef 01 4b 65 52 65 73 65 | 74 45 76 65 6e 74 00 00 |..KeRese|tEvent..|
|00001a10| 1c 04 5a 77 43 72 65 61 | 74 65 45 76 65 6e 74 00 |..ZwCrea|teEvent.|
|00001a20| 34 04 5a 77 4d 61 70 56 | 69 65 77 4f 66 53 65 63 |4.ZwMapV|iewOfSec|
|00001a30| 74 69 6f 6e 00 00 1f 04 | 5a 77 43 72 65 61 74 65 |tion....|ZwCreate|
|00001a40| 53 65 63 74 69 6f 6e 00 | 5d 04 5a 77 53 65 74 45 |Section.|].ZwSetE|
|00001a50| 76 65 6e 74 00 00 e8 01 | 4b 65 52 65 6c 65 61 73 |vent....|KeReleas|
|00001a60| 65 53 65 6d 61 70 68 6f | 72 65 00 00 7e 00 45 78 |eSemapho|re..~.Ex|
|00001a70| 66 49 6e 74 65 72 6c 6f | 63 6b 65 64 49 6e 73 65 |fInterlo|ckedInse|
|00001a80| 72 74 54 61 69 6c 4c 69 | 73 74 00 00 10 02 4b 65 |rtTailLi|st....Ke|
|00001a90| 57 61 69 74 46 6f 72 4d | 75 6c 74 69 70 6c 65 4f |WaitForM|ultipleO|
|00001aa0| 62 6a 65 63 74 73 00 00 | c7 01 4b 65 49 6e 69 74 |bjects..|..KeInit|
|00001ab0| 69 61 6c 69 7a 65 53 65 | 6d 61 70 68 6f 72 65 00 |ializeSe|maphore.|
|00001ac0| 6d 04 5a 77 57 61 69 74 | 46 6f 72 53 69 6e 67 6c |m.ZwWait|ForSingl|
|00001ad0| 65 4f 62 6a 65 63 74 00 | 4f 00 4b 66 41 63 71 75 |eObject.|O.KfAcqu|
|00001ae0| 69 72 65 53 70 69 6e 4c | 6f 63 6b 00 50 00 4b 66 |ireSpinL|ock.P.Kf|
|00001af0| 4c 6f 77 65 72 49 72 71 | 6c 00 44 00 4b 65 47 65 |LowerIrq|l.D.KeGe|
|00001b00| 74 43 75 72 72 65 6e 74 | 49 72 71 6c 00 00 52 00 |tCurrent|Irql..R.|
|00001b10| 4b 66 52 65 6c 65 61 73 | 65 53 70 69 6e 4c 6f 63 |KfReleas|eSpinLoc|
|00001b20| 6b 00 51 00 4b 66 52 61 | 69 73 65 49 72 71 6c 00 |k.Q.KfRa|iseIrql.|
|00001b30| 25 00 54 64 69 4f 70 65 | 6e 4e 65 74 62 69 6f 73 |%.TdiOpe|nNetbios|
|00001b40| 41 64 64 72 65 73 73 00 | 2f 00 54 64 69 52 65 74 |Address.|/.TdiRet|
|00001b50| 75 72 6e 43 68 61 69 6e | 65 64 52 65 63 65 69 76 |urnChain|edReceiv|
|00001b60| 65 73 00 00 0e 00 54 64 | 69 43 6f 70 79 42 75 66 |es....Td|iCopyBuf|
|00001b70| 66 65 72 54 6f 4d 64 6c | 00 00 1e 00 54 64 69 44 |ferToMdl|....TdiD|
|00001b80| 65 72 65 67 69 73 74 65 | 72 50 6e 50 48 61 6e 64 |eregiste|rPnPHand|
|00001b90| 6c 65 72 73 00 00 2d 00 | 54 64 69 52 65 67 69 73 |lers..-.|TdiRegis|
|00001ba0| 74 65 72 50 6e 50 48 61 | 6e 64 6c 65 72 73 00 00 |terPnPHa|ndlers..|
|00001bb0| 02 00 41 64 64 43 72 65 | 64 65 6e 74 69 61 6c 73 |..AddCre|dentials|
|00001bc0| 57 00 01 00 41 63 71 75 | 69 72 65 43 72 65 64 65 |W...Acqu|ireCrede|
|00001bd0| 6e 74 69 61 6c 73 48 61 | 6e 64 6c 65 57 00 10 00 |ntialsHa|ndleW...|
|00001be0| 49 6e 69 74 53 65 63 75 | 72 69 74 79 49 6e 74 65 |InitSecu|rityInte|
|00001bf0| 72 66 61 63 65 57 00 00 | 09 00 46 72 65 65 43 6f |rfaceW..|..FreeCo|
|00001c00| 6e 74 65 78 74 42 75 66 | 66 65 72 00 0e 00 49 6d |ntextBuf|fer...Im|
|00001c10| 70 65 72 73 6f 6e 61 74 | 65 53 65 63 75 72 69 74 |personat|eSecurit|
|00001c20| 79 43 6f 6e 74 65 78 74 | 00 00 18 00 51 75 65 72 |yContext|....Quer|
|00001c30| 79 43 6f 6e 74 65 78 74 | 41 74 74 72 69 62 75 74 |yContext|Attribut|
|00001c40| 65 73 57 00 17 00 4d 61 | 70 53 65 63 75 72 69 74 |esW...Ma|pSecurit|
|00001c50| 79 45 72 72 6f 72 00 00 | 04 00 44 65 6c 65 74 65 |yError..|..Delete|
|00001c60| 53 65 63 75 72 69 74 79 | 43 6f 6e 74 65 78 74 00 |Security|Context.|
|00001c70| 00 00 41 63 63 65 70 74 | 53 65 63 75 72 69 74 79 |..Accept|Security|
|00001c80| 43 6f 6e 74 65 78 74 00 | 13 00 4b 53 65 63 56 61 |Context.|..KSecVa|
|00001c90| 6c 69 64 61 74 65 42 75 | 66 66 65 72 00 00 00 00 |lidateBu|ffer....|
+--------+-------------------------+-------------------------+--------+--------+