/ Venus 7000 / darktronics.iso / Software / Service Packs / Win2kSP4.exe / i386 / rdpdr.sy_ / rdpdr.sys / INIT

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 55 8b ec 51 51 53 56 8b | 75 0c 57 56 ff 75 08 e8 |U..QQSV.|u.WV.u..|
|00000010| 2c 01 00 00 85 c0 0f 8c | 1c 01 00 00 0f b7 06 40 |,.......|.......@|
|00000020| 68 53 49 66 73 40 50 6a | 00 ff 15 0c 9f 01 00 8b |hSIfs@Pj|........|
|00000030| d8 85 db 75 0a b8 9a 00 | 00 c0 e9 f9 00 00 00 0f |...u....|........|
|00000040| b7 0e 41 33 c0 41 8b fb | 8b d1 c1 e9 02 f3 ab 8b |..A3.A..|........|
|00000050| ca 83 e1 03 f3 aa 0f b7 | 06 50 ff 76 04 53 ff 15 |........|.P.v.S..|
|00000060| 10 9f 01 00 66 8b 06 83 | c4 0c 66 a3 60 b1 01 00 |....f...|..f.`...|
|00000070| 66 8b 06 66 05 02 00 53 | 66 a3 62 b1 01 00 89 1d |f..f...S|f.b.....|
|00000080| 64 b1 01 00 e8 31 1a fe | ff e8 50 59 fe ff 8b 35 |d....1..|..PY...5|
|00000090| f0 a0 01 00 68 08 b1 01 | 00 ff d6 68 0c b1 01 00 |....h...|...h....|
|000000a0| ff d6 68 20 b1 01 00 ff | 15 f4 a0 01 00 b8 00 b1 |..h ....|........|
|000000b0| 01 00 68 80 aa 01 00 a3 | 04 b1 01 00 a3 00 b1 01 |..h.....|........|
|000000c0| 00 8d 45 f8 50 ff 15 f8 | a0 01 00 8b 75 08 6a 00 |..E.P...|....u.j.|
|000000d0| 6a 28 8d 45 f8 6a 00 50 | 6a 03 68 e0 af 01 00 56 |j(.E.j.P|j.h....V|
|000000e0| 68 5c b1 01 00 e8 f6 c9 | fe ff 85 c0 7c 4a e8 97 |h\......|....|J..|
|000000f0| 1a fe ff 8b d8 85 db 7c | 35 e8 7e 16 fe ff 8b d8 |.......||5.~.....|
|00000100| 85 db 7c 2a 8b 46 18 c7 | 46 34 12 03 01 00 6a 1c |..|*.F..|F4....j.|
|00000110| 8d 7e 38 c7 40 04 9c 3f | 01 00 59 b8 a4 09 01 00 |.~8.@..?|..Y.....|
|00000120| f3 ab e8 19 5d fe ff a3 | f0 b0 01 00 eb 08 6a 01 |....]...|......j.|
|00000130| 56 e8 0a 12 fe ff 8b c3 | 5f 5e 5b c9 c2 08 00 cc |V.......|_^[.....|
|00000140| 55 8b ec 6a ff 68 90 a1 | 01 00 68 ea 9c 01 00 64 |U..j.h..|..h....d|
|00000150| a1 00 00 00 00 50 64 89 | 25 00 00 00 00 51 51 83 |.....Pd.|%....QQ.|
|00000160| ec 1c 53 56 57 33 db 89 | 5d e4 e8 c5 cd fe ff 6a |..SVW3..|]......j|
|00000170| 25 59 33 c0 bf 40 b7 01 | 00 f3 ab 66 c7 05 40 b7 |%Y3..@..|...f..@.|
|00000180| 01 00 00 eb 66 c7 05 42 | b7 01 00 94 00 8b 45 08 |....f..B|......E.|
|00000190| a3 44 b7 01 00 6a 6c 59 | 33 c0 bf 20 b8 01 00 f3 |.D...jlY|3.. ....|
|000001a0| ab 66 c7 05 20 b8 01 00 | 9a eb 66 c7 05 22 b8 01 |.f.. ...|..f.."..|
|000001b0| 00 b0 01 be 70 ae 01 00 | 56 ff 15 f0 a0 01 00 89 |....p...|V.......|
|000001c0| 35 20 b7 01 00 e8 4e 94 | fe ff 89 5d fc c7 45 e0 |5 ....N.|...]..E.|
|000001d0| 05 00 00 00 bf 20 b2 01 | 00 89 3d d0 b9 01 00 b9 |..... ..|..=.....|
|000001e0| ec 00 00 00 33 c0 f3 ab | e8 48 cd ff ff c7 45 e4 |....3...|.H....E.|
|000001f0| 02 00 00 00 ff 75 0c e8 | 7e 01 00 00 e8 f5 cc fe |.....u..|~.......|
|00000200| ff 89 45 e0 3b c3 6a 01 | 5e 7c 03 89 75 e4 83 4d |..E.;.j.|^|..u..M|
|00000210| fc ff e8 22 01 00 00 39 | 5d e0 74 08 8b 45 e0 e9 |..."...9|].t..E..|
|00000220| ff 00 00 00 e8 e6 ae ff | ff 6a 04 68 52 78 49 72 |........|.j.hRxIr|
|00000230| 68 78 03 00 00 53 ff 35 | 04 9f 01 00 ff 35 0c 9f |hx...S.5|.....5..|
|00000240| 01 00 68 e0 b5 01 00 ff | 15 28 9f 01 00 b8 68 b1 |..h.....|.(....h.|
|00000250| 01 00 a3 6c b1 01 00 a3 | 68 b1 01 00 68 70 b1 01 |...l....|h...hp..|
|00000260| 00 ff 15 f0 a0 01 00 b8 | 00 b8 01 00 a3 04 b8 01 |........|........|
|00000270| 00 a3 00 b8 01 00 b8 20 | ba 01 00 a3 24 ba 01 00 |....... |....$...|
|00000280| a3 20 ba 01 00 89 35 60 | ba 01 00 89 1d 68 ba 01 |. ....5`|.....h..|
|00000290| 00 53 56 68 6c ba 01 00 | 8b 3d 6c 9e 01 00 ff d7 |.SVhl...|.=l.....|
|000002a0| 89 35 40 ba 01 00 89 1d | 48 ba 01 00 53 56 68 4c |.5@.....|H...SVhL|
|000002b0| ba 01 00 ff d7 56 68 40 | b6 01 00 8b 3d 24 9f 01 |.....Vh@|....=$..|
|000002c0| 00 ff d7 56 68 e0 b7 01 | 00 ff d7 a1 d0 b9 01 00 |...Vh...|........|
|000002d0| 8d 90 60 01 00 00 8d 88 | 78 01 00 00 6a 03 5e 89 |..`.....|x...j.^.|
|000002e0| 5a 0c 89 49 04 89 09 89 | 1a 83 c2 04 83 c1 08 4e |Z..I....|.......N|
|000002f0| 75 ed 05 90 01 00 00 50 | ff 15 f0 a0 01 00 ff 75 |u......P|.......u|
|00000300| 08 e8 14 01 00 00 68 9c | b7 01 00 ff 15 f4 a0 01 |......h.|........|
|00000310| 00 ff 15 20 9f 01 00 a3 | 78 b7 01 00 e8 9f b2 ff |... ....|x.......|
|00000320| ff 33 c0 8b 4d f0 64 89 | 0d 00 00 00 00 5f 5e 5b |.3..M.d.|....._^[|
|00000330| c9 c2 08 00 33 db 6a 01 | 5e 39 5d e0 74 24 68 08 |....3.j.|^9].t$h.|
|00000340| 01 00 00 ff 75 e0 68 c4 | 0b 00 80 53 ff 35 d0 b9 |....u.h.|...S.5..|
|00000350| 01 00 e8 c5 68 fe ff ff | 75 e4 ff 75 08 e8 6c cb |....h...|u..u..l.|
|00000360| fe ff c3 cc 50 00 61 00 | 72 00 61 00 6d 00 65 00 |....P.a.|r.a.m.e.|
|00000370| 74 00 65 00 72 00 73 00 | 00 00 55 8b ec 83 ec 24 |t.e.r.s.|..U....$|
|00000380| 53 56 8b 4d 08 57 33 c0 | 8b 35 e0 9e 01 00 6a 40 |SV.M.W3.|.5....j@|
|00000390| 89 45 e0 89 45 ec 89 45 | f0 5b 8d 45 dc 50 bf 19 |.E..E..E|.[.E.P..|
|000003a0| 00 02 00 8d 45 08 57 50 | c7 45 dc 18 00 00 00 89 |....E.WP|.E......|
|000003b0| 5d e8 89 4d e4 ff d6 85 | c0 7c 57 8d 45 f4 68 04 |]..M....|.|W.E.h.|
|000003c0| f3 02 00 50 ff 15 f8 a0 | 01 00 8b 45 08 83 65 ec |...P....|...E..e.|
|000003d0| 00 89 45 e0 8d 45 f4 83 | 65 f0 00 89 45 e4 8d 45 |..E..E..|e...E..E|
|000003e0| dc c7 45 dc 18 00 00 00 | 50 8d 45 fc 57 50 89 5d |..E.....|P.E.WP.]|
|000003f0| e8 ff d6 85 c0 7d 0b ff | 75 08 ff 15 20 9e 01 00 |.....}..|u... ...|
|00000400| eb 10 ff 75 fc 8b 35 20 | 9e 01 00 ff d6 ff 75 08 |...u..5 |......u.|
|00000410| ff d6 5f 5e 5b c9 c2 04 | 00 cc 8b 54 24 04 57 6a |.._^[...|...T$.Wj|
|00000420| 1b b8 8c bf 01 00 8d 7a | 38 59 f3 ab c7 05 d4 b8 |.......z|8Y......|
|00000430| 01 00 c8 ab 01 00 33 c0 | c7 42 28 a0 b1 01 00 c7 |......3.|.B(.....|
|00000440| 05 a0 b1 01 00 70 00 00 | 00 c7 05 a4 b1 01 00 b0 |.....p..|........|
|00000450| 4e 02 00 c7 05 a8 b1 01 | 00 26 4e 02 00 c7 05 ac |N.......|.&N.....|
|00000460| b1 01 00 62 4e 02 00 a3 | b0 b1 01 00 a3 b4 b1 01 |...bN...|........|
|00000470| 00 a3 b8 b1 01 00 a3 bc | b1 01 00 a3 c0 b1 01 00 |........|........|
|00000480| a3 c4 b1 01 00 c7 05 c8 | b1 01 00 e0 63 01 00 c7 |........|....c...|
|00000490| 05 08 b2 01 00 ec 87 01 | 00 c7 05 0c b2 01 00 ec |........|........|
|000004a0| 87 01 00 c7 05 cc b1 01 | 00 56 cc 02 00 c7 05 d0 |........|.V......|
|000004b0| b1 01 00 ac cc 02 00 e8 | 78 62 fe ff b9 12 cb 02 |........|xb......|
|000004c0| 00 b8 2c cb 02 00 c7 05 | 7c b7 01 00 66 ca 02 00 |..,.....||...f...|
|000004d0| c7 05 80 b7 01 00 a2 ca | 02 00 c7 05 84 b7 01 00 |........|........|
|000004e0| cc ca 02 00 c7 05 88 b7 | 01 00 fa ca 02 00 89 0d |........|........|
|000004f0| 8c b7 01 00 a3 90 b7 01 | 00 89 0d 94 b7 01 00 a3 |........|........|
|00000500| 98 b7 01 00 5f c2 04 00 | 20 f5 01 00 00 00 00 00 |...._...| .......|
|00000510| 00 00 00 00 da 00 02 00 | a8 9d 00 00 f8 f4 01 00 |........|........|
|00000520| 00 00 00 00 00 00 00 00 | 3c 01 02 00 80 9d 00 00 |........|<.......|
|00000530| 18 f5 01 00 00 00 00 00 | 00 00 00 00 6c 0c 02 00 |........|....l...|
|00000540| a0 9d 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000550| 00 00 00 00 00 00 00 00 | 3c 0c 02 00 1e 0c 02 00 |........|<.......|
|00000560| 0a 0c 02 00 26 01 02 00 | 10 01 02 00 fc 00 02 00 |....&...|........|
|00000570| e8 00 02 00 00 00 00 00 | 56 0c 02 00 00 00 00 00 |........|V.......|
|00000580| 72 f9 01 00 8c f9 01 00 | a0 f9 01 00 b6 f9 01 00 |r.......|........|
|00000590| 58 f9 01 00 c6 f9 01 00 | de f9 01 00 f2 f9 01 00 |X.......|........|
|000005a0| 12 fa 01 00 20 fa 01 00 | 3a fa 01 00 4e fa 01 00 |.... ...|:...N...|
|000005b0| 64 fa 01 00 7c fa 01 00 | 92 fa 01 00 ac fa 01 00 |d...|...|........|
|000005c0| bc fa 01 00 cc fa 01 00 | d8 fa 01 00 f2 fa 01 00 |........|........|
|000005d0| 10 fb 01 00 2e fb 01 00 | 4e fb 01 00 6c fb 01 00 |........|N...l...|
|000005e0| 82 fb 01 00 9a fb 01 00 | b2 fb 01 00 d2 fb 01 00 |........|........|
|000005f0| f4 fb 01 00 0c fc 01 00 | 24 fc 01 00 2e fc 01 00 |........|$.......|
|00000600| 4a fc 01 00 62 fc 01 00 | 80 fc 01 00 9a fc 01 00 |J...b...|........|
|00000610| b0 fc 01 00 c2 fc 01 00 | d2 fc 01 00 e2 fc 01 00 |........|........|
|00000620| f2 fc 01 00 08 fd 01 00 | 12 fd 01 00 24 fd 01 00 |........|....$...|
|00000630| 3c fd 01 00 60 fd 01 00 | 7c fd 01 00 98 fd 01 00 |<...`...||.......|
|00000640| b2 fd 01 00 bc fd 01 00 | d0 fd 01 00 e0 fd 01 00 |........|........|
|00000650| f8 fd 01 00 10 fe 01 00 | 30 fe 01 00 44 fe 01 00 |........|0...D...|
|00000660| 66 fe 01 00 82 fe 01 00 | 9e fe 01 00 ac fe 01 00 |f.......|........|
|00000670| be fe 01 00 cc fe 01 00 | da fe 01 00 f8 fe 01 00 |........|........|
|00000680| 10 ff 01 00 20 ff 01 00 | 32 ff 01 00 44 ff 01 00 |.... ...|2...D...|
|00000690| 5c ff 01 00 7a ff 01 00 | 92 ff 01 00 a4 ff 01 00 |\...z...|........|
|000006a0| c0 ff 01 00 ce ff 01 00 | de ff 01 00 e8 ff 01 00 |........|........|
|000006b0| f4 ff 01 00 08 00 02 00 | 20 00 02 00 2c 00 02 00 |........| ...,...|
|000006c0| 46 00 02 00 60 00 02 00 | 78 00 02 00 90 00 02 00 |F...`...|x.......|
|000006d0| a8 00 02 00 c2 00 02 00 | 2c f9 01 00 1e f9 01 00 |........|,.......|
|000006e0| 06 f9 01 00 ee f8 01 00 | e4 f8 01 00 44 01 02 00 |........|....D...|
|000006f0| 60 01 02 00 7c 01 02 00 | 8e 01 02 00 a4 01 02 00 |`...|...|........|
|00000700| b8 01 02 00 da 01 02 00 | ee 01 02 00 0c 02 02 00 |........|........|
|00000710| 18 02 02 00 32 02 02 00 | 50 02 02 00 68 02 02 00 |....2...|P...h...|
|00000720| 84 02 02 00 fe 02 02 00 | 80 f8 01 00 d0 02 02 00 |........|........|
|00000730| e4 02 02 00 44 f9 01 00 | 1a 03 02 00 2e 03 02 00 |....D...|........|
|00000740| 42 03 02 00 58 03 02 00 | 70 03 02 00 8a 03 02 00 |B...X...|p.......|
|00000750| aa 03 02 00 c4 03 02 00 | da 03 02 00 f4 03 02 00 |........|........|
|00000760| 0a 04 02 00 22 04 02 00 | 32 04 02 00 46 04 02 00 |...."...|2...F...|
|00000770| 60 04 02 00 78 04 02 00 | 90 04 02 00 ac 04 02 00 |`...x...|........|
|00000780| c4 04 02 00 d4 04 02 00 | e4 04 02 00 fe 04 02 00 |........|........|
|00000790| 18 05 02 00 34 05 02 00 | 50 05 02 00 68 05 02 00 |....4...|P...h...|
|000007a0| 72 05 02 00 92 05 02 00 | a6 05 02 00 c8 05 02 00 |r.......|........|
|000007b0| e8 05 02 00 fe 05 02 00 | 10 06 02 00 28 06 02 00 |........|....(...|
|000007c0| 42 06 02 00 52 06 02 00 | 74 06 02 00 84 06 02 00 |B...R...|t.......|
|000007d0| 9e 06 02 00 b2 06 02 00 | c0 06 02 00 dc 06 02 00 |........|........|
|000007e0| fc 06 02 00 20 07 02 00 | 42 07 02 00 58 07 02 00 |.... ...|B...X...|
|000007f0| 68 07 02 00 8a 07 02 00 | 9a 07 02 00 a8 07 02 00 |h.......|........|
|00000800| ca 07 02 00 e4 07 02 00 | f0 07 02 00 fe 07 02 00 |........|........|
|00000810| 20 08 02 00 3e 08 02 00 | 56 08 02 00 6e 08 02 00 | ...>...|V...n...|
|00000820| 86 08 02 00 9c 08 02 00 | b0 08 02 00 c6 08 02 00 |........|........|
|00000830| de 08 02 00 fc 08 02 00 | 18 09 02 00 2c 09 02 00 |........|....,...|
|00000840| 40 09 02 00 56 09 02 00 | 60 09 02 00 72 09 02 00 |@...V...|`...r...|
|00000850| 8e 09 02 00 a0 09 02 00 | ae 09 02 00 cc 09 02 00 |........|........|
|00000860| ea 09 02 00 00 0a 02 00 | 1a 0a 02 00 36 0a 02 00 |........|....6...|
|00000870| 42 0a 02 00 58 0a 02 00 | 68 0a 02 00 80 0a 02 00 |B...X...|h.......|
|00000880| 94 0a 02 00 a8 0a 02 00 | c0 0a 02 00 d2 0a 02 00 |........|........|
|00000890| e2 0a 02 00 00 0b 02 00 | 10 0b 02 00 20 0b 02 00 |........|.... ...|
|000008a0| 34 0b 02 00 46 0b 02 00 | 56 0b 02 00 64 0b 02 00 |4...F...|V...d...|
|000008b0| 86 0b 02 00 a6 0b 02 00 | b0 0b 02 00 c0 0b 02 00 |........|........|
|000008c0| e2 0b 02 00 f8 0b 02 00 | cc f8 01 00 b0 f8 01 00 |........|........|
|000008d0| 98 f8 01 00 9e 02 02 00 | b8 02 02 00 00 00 00 00 |........|........|
|000008e0| d7 02 50 73 47 65 74 43 | 75 72 72 65 6e 74 50 72 |..PsGetC|urrentPr|
|000008f0| 6f 63 65 73 73 49 64 00 | 68 03 52 74 6c 49 6e 69 |ocessId.|h.RtlIni|
|00000900| 74 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |tUnicode|String..|
|00000910| 50 00 45 78 49 6e 69 74 | 69 61 6c 69 7a 65 52 65 |P.ExInit|ializeRe|
|00000920| 73 6f 75 72 63 65 4c 69 | 74 65 00 00 ca 01 4b 65 |sourceLi|te....Ke|
|00000930| 49 6e 69 74 69 61 6c 69 | 7a 65 53 70 69 6e 4c 6f |Initiali|zeSpinLo|
|00000940| 63 6b 00 00 a3 04 6d 65 | 6d 6d 6f 76 65 00 3a 00 |ck....me|mmove.:.|
|00000950| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|00000960| 74 68 54 61 67 00 bd 02 | 4f 62 66 44 65 72 65 66 |thTag...|ObfDeref|
|00000970| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 47 00 |erenceOb|ject..G.|
|00000980| 45 78 46 72 65 65 50 6f | 6f 6c 00 00 41 00 45 78 |ExFreePo|ol..A.Ex|
|00000990| 44 65 6c 65 74 65 52 65 | 73 6f 75 72 63 65 4c 69 |DeleteRe|sourceLi|
|000009a0| 74 65 00 00 50 02 4d 6d | 4d 61 70 4c 6f 63 6b 65 |te..P.Mm|MapLocke|
|000009b0| 64 50 61 67 65 73 00 00 | 47 01 49 6f 47 65 74 52 |dPages..|G.IoGetR|
|000009c0| 65 71 75 65 73 74 6f 72 | 53 65 73 73 69 6f 6e 49 |equestor|SessionI|
|000009d0| 64 00 0f 04 53 65 55 6e | 6c 6f 63 6b 53 75 62 6a |d...SeUn|lockSubj|
|000009e0| 65 63 74 43 6f 6e 74 65 | 78 74 00 00 f5 03 53 65 |ectConte|xt....Se|
|000009f0| 46 72 65 65 50 72 69 76 | 69 6c 65 67 65 73 00 00 |FreePriv|ileges..|
|00000a00| e4 03 53 65 41 70 70 65 | 6e 64 50 72 69 76 69 6c |..SeAppe|ndPrivil|
|00000a10| 65 67 65 73 00 00 e3 03 | 53 65 41 63 63 65 73 73 |eges....|SeAccess|
|00000a20| 43 68 65 63 6b 00 f8 03 | 53 65 4c 6f 63 6b 53 75 |Check...|SeLockSu|
|00000a30| 62 6a 65 63 74 43 6f 6e | 74 65 78 74 00 00 85 03 |bjectCon|text....|
|00000a40| 52 74 6c 4d 61 70 47 65 | 6e 65 72 69 63 4d 61 73 |RtlMapGe|nericMas|
|00000a50| 6b 00 42 01 49 6f 47 65 | 74 46 69 6c 65 4f 62 6a |k.B.IoGe|tFileObj|
|00000a60| 65 63 74 47 65 6e 65 72 | 69 63 4d 61 70 70 69 6e |ectGener|icMappin|
|00000a70| 67 00 39 03 52 74 6c 45 | 71 75 61 6c 53 69 64 00 |g.9.RtlE|qualSid.|
|00000a80| 00 04 53 65 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |..SeQuer|yInforma|
|00000a90| 74 69 6f 6e 54 6f 6b 65 | 6e 00 6c 03 52 74 6c 49 |tionToke|n.l.RtlI|
|00000aa0| 6e 69 74 69 61 6c 69 7a | 65 53 69 64 00 00 b0 03 |nitializ|eSid....|
|00000ab0| 52 74 6c 53 75 62 41 75 | 74 68 6f 72 69 74 79 53 |RtlSubAu|thorityS|
|00000ac0| 69 64 00 00 7f 03 52 74 | 6c 4c 65 6e 67 74 68 52 |id....Rt|lLengthR|
|00000ad0| 65 71 75 69 72 65 64 53 | 69 64 00 00 97 01 49 6f |equiredS|id....Io|
|00000ae0| 66 43 6f 6d 70 6c 65 74 | 65 52 65 71 75 65 73 74 |fComplet|eRequest|
|00000af0| 00 00 f7 02 52 74 6c 41 | 64 64 41 63 63 65 73 73 |....RtlA|ddAccess|
|00000b00| 41 6c 6c 6f 77 65 64 41 | 63 65 00 00 1c 03 52 74 |AllowedA|ce....Rt|
|00000b10| 6c 43 72 65 61 74 65 41 | 63 6c 00 00 81 03 52 74 |lCreateA|cl....Rt|
|00000b20| 6c 4c 65 6e 67 74 68 53 | 69 64 00 00 f4 03 53 65 |lLengthS|id....Se|
|00000b30| 45 78 70 6f 72 74 73 00 | bb 02 4f 62 52 65 6c 65 |Exports.|..ObRele|
|00000b40| 61 73 65 4f 62 6a 65 63 | 74 53 65 63 75 72 69 74 |aseObjec|tSecurit|
|00000b50| 79 00 07 04 53 65 53 65 | 74 53 65 63 75 72 69 74 |y...SeSe|tSecurit|
|00000b60| 79 44 65 73 63 72 69 70 | 74 6f 72 49 6e 66 6f 00 |yDescrip|torInfo.|
|00000b70| 80 03 52 74 6c 4c 65 6e | 67 74 68 53 65 63 75 72 |..RtlLen|gthSecur|
|00000b80| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 a7 03 |ityDescr|iptor...|
|00000b90| 52 74 6c 53 65 74 44 61 | 63 6c 53 65 63 75 72 69 |RtlSetDa|clSecuri|
|00000ba0| 74 79 44 65 73 63 72 69 | 70 74 6f 72 00 00 20 03 |tyDescri|ptor.. .|
|00000bb0| 52 74 6c 43 72 65 61 74 | 65 53 65 63 75 72 69 74 |RtlCreat|eSecurit|
|00000bc0| 79 44 65 73 63 72 69 70 | 74 6f 72 00 b1 02 4f 62 |yDescrip|tor...Ob|
|00000bd0| 47 65 74 4f 62 6a 65 63 | 74 53 65 63 75 72 69 74 |GetObjec|tSecurit|
|00000be0| 79 00 d4 01 4b 65 4c 65 | 61 76 65 43 72 69 74 69 |y...KeLe|aveCriti|
|00000bf0| 63 61 6c 52 65 67 69 6f | 6e 00 73 00 45 78 52 65 |calRegio|n.s.ExRe|
|00000c00| 6c 65 61 73 65 52 65 73 | 6f 75 72 63 65 4c 69 74 |leaseRes|ourceLit|
|00000c10| 65 00 7d 00 45 78 66 49 | 6e 74 65 72 6c 6f 63 6b |e.}.ExfI|nterlock|
|00000c20| 65 64 49 6e 73 65 72 74 | 48 65 61 64 4c 69 73 74 |edInsert|HeadList|
|00000c30| 00 00 32 00 45 78 41 63 | 71 75 69 72 65 52 65 73 |..2.ExAc|quireRes|
|00000c40| 6f 75 72 63 65 45 78 63 | 6c 75 73 69 76 65 4c 69 |ourceExc|lusiveLi|
|00000c50| 74 65 00 00 af 01 4b 65 | 45 6e 74 65 72 43 72 69 |te....Ke|EnterCri|
|00000c60| 74 69 63 61 6c 52 65 67 | 69 6f 6e 00 14 02 4b 65 |ticalReg|ion...Ke|
|00000c70| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|00000c80| 65 63 74 00 1f 04 5a 77 | 43 6c 6f 73 65 00 b8 02 |ect...Zw|Close...|
|00000c90| 4f 62 52 65 66 65 72 65 | 6e 63 65 4f 62 6a 65 63 |ObRefere|nceObjec|
|00000ca0| 74 42 79 48 61 6e 64 6c | 65 00 d4 02 50 73 43 72 |tByHandl|e...PsCr|
|00000cb0| 65 61 74 65 53 79 73 74 | 65 6d 54 68 72 65 61 64 |eateSyst|emThread|
|00000cc0| 00 00 f6 00 49 6e 74 65 | 72 6c 6f 63 6b 65 64 43 |....Inte|rlockedC|
|00000cd0| 6f 6d 70 61 72 65 45 78 | 63 68 61 6e 67 65 00 00 |ompareEx|change..|
|00000ce0| ee 02 50 73 54 65 72 6d | 69 6e 61 74 65 53 79 73 |..PsTerm|inateSys|
|00000cf0| 74 65 6d 54 68 72 65 61 | 64 00 f8 00 49 6e 74 65 |temThrea|d...Inte|
|00000d00| 72 6c 6f 63 6b 65 64 45 | 78 63 68 61 6e 67 65 00 |rlockedE|xchange.|
|00000d10| 3a 03 52 74 6c 45 71 75 | 61 6c 53 74 72 69 6e 67 |:.RtlEqu|alString|
|00000d20| 00 00 67 03 52 74 6c 49 | 6e 69 74 53 74 72 69 6e |..g.RtlI|nitStrin|
|00000d30| 67 00 96 01 49 6f 66 43 | 61 6c 6c 44 72 69 76 65 |g...IofC|allDrive|
|00000d40| 72 00 c3 02 50 6f 43 61 | 6c 6c 44 72 69 76 65 72 |r...PoCa|llDriver|
|00000d50| 00 00 cd 02 50 6f 53 74 | 61 72 74 4e 65 78 74 50 |....PoSt|artNextP|
|00000d60| 6f 77 65 72 49 72 70 00 | bf 04 77 63 73 6c 65 6e |owerIrp.|..wcslen|
|00000d70| 00 00 59 04 5a 77 51 75 | 65 72 79 56 61 6c 75 65 |..Y.ZwQu|eryValue|
|00000d80| 4b 65 79 00 54 03 52 74 | 6c 46 72 65 65 55 6e 69 |Key.T.Rt|lFreeUni|
|00000d90| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 55 01 49 6f |codeStri|ng..U.Io|
|00000da0| 4f 70 65 6e 44 65 76 69 | 63 65 49 6e 74 65 72 66 |OpenDevi|ceInterf|
|00000db0| 61 63 65 52 65 67 69 73 | 74 72 79 4b 65 79 00 00 |aceRegis|tryKey..|
|00000dc0| 63 01 49 6f 52 65 67 69 | 73 74 65 72 44 65 76 69 |c.IoRegi|sterDevi|
|00000dd0| 63 65 49 6e 74 65 72 66 | 61 63 65 00 c4 03 52 74 |ceInterf|ace...Rt|
|00000de0| 6c 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |lUnicode|StringTo|
|00000df0| 49 6e 74 65 67 65 72 00 | 6a 01 49 6f 52 65 6c 65 |Integer.|j.IoRele|
|00000e00| 61 73 65 43 61 6e 63 65 | 6c 53 70 69 6e 4c 6f 63 |aseCance|lSpinLoc|
|00000e10| 6b 00 bd 04 77 63 73 63 | 70 79 00 00 c4 01 4b 65 |k...wcsc|py....Ke|
|00000e20| 49 6e 69 74 69 61 6c 69 | 7a 65 45 76 65 6e 74 00 |Initiali|zeEvent.|
|00000e30| a8 01 4b 65 43 6c 65 61 | 72 45 76 65 6e 74 00 00 |..KeClea|rEvent..|
|00000e40| fa 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 49 6e 63 |..Interl|ockedInc|
|00000e50| 72 65 6d 65 6e 74 00 00 | f7 00 49 6e 74 65 72 6c |rement..|..Interl|
|00000e60| 6f 63 6b 65 64 44 65 63 | 72 65 6d 65 6e 74 00 00 |ockedDec|rement..|
|00000e70| fe 02 52 74 6c 41 6e 73 | 69 53 74 72 69 6e 67 54 |..RtlAns|iStringT|
|00000e80| 6f 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |oUnicode|String..|
|00000e90| 65 03 52 74 6c 49 6e 69 | 74 41 6e 73 69 53 74 72 |e.RtlIni|tAnsiStr|
|00000ea0| 69 6e 67 00 01 03 52 74 | 6c 41 70 70 65 6e 64 55 |ing...Rt|lAppendU|
|00000eb0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 53 74 |nicodeSt|ringToSt|
|00000ec0| 72 69 6e 67 00 00 72 03 | 52 74 6c 49 6e 74 65 67 |ring..r.|RtlInteg|
|00000ed0| 65 72 54 6f 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |erToUnic|odeStrin|
|00000ee0| 67 00 02 03 52 74 6c 41 | 70 70 65 6e 64 55 6e 69 |g...RtlA|ppendUni|
|00000ef0| 63 6f 64 65 54 6f 53 74 | 72 69 6e 67 00 00 fb 01 |codeToSt|ring....|
|00000f00| 4b 65 53 65 74 45 76 65 | 6e 74 00 00 68 00 45 78 |KeSetEve|nt..h.Ex|
|00000f10| 51 75 65 75 65 57 6f 72 | 6b 49 74 65 6d 00 75 04 |QueueWor|kItem.u.|
|00000f20| 5a 77 57 72 69 74 65 46 | 69 6c 65 00 5b 04 5a 77 |ZwWriteF|ile.[.Zw|
|00000f30| 52 65 61 64 46 69 6c 65 | 00 00 33 00 45 78 41 63 |ReadFile|..3.ExAc|
|00000f40| 71 75 69 72 65 52 65 73 | 6f 75 72 63 65 53 68 61 |quireRes|ourceSha|
|00000f50| 72 65 64 4c 69 74 65 00 | b5 02 4f 62 4f 70 65 6e |redLite.|..ObOpen|
|00000f60| 4f 62 6a 65 63 74 42 79 | 50 6f 69 6e 74 65 72 00 |ObjectBy|Pointer.|
|00000f70| 24 04 5a 77 43 72 65 61 | 74 65 46 69 6c 65 00 00 |$.ZwCrea|teFile..|
|00000f80| 25 01 49 6f 44 65 6c 65 | 74 65 44 65 76 69 63 65 |%.IoDele|teDevice|
|00000f90| 00 00 28 01 49 6f 44 65 | 74 61 63 68 44 65 76 69 |..(.IoDe|tachDevi|
|00000fa0| 63 65 00 00 27 01 49 6f | 44 65 6c 65 74 65 53 79 |ce..'.Io|DeleteSy|
|00000fb0| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 09 01 49 6f |mbolicLi|nk....Io|
|00000fc0| 41 74 74 61 63 68 44 65 | 76 69 63 65 54 6f 44 65 |AttachDe|viceToDe|
|00000fd0| 76 69 63 65 53 74 61 63 | 6b 00 21 01 49 6f 43 72 |viceStac|k.!.IoCr|
|00000fe0| 65 61 74 65 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |eateSymb|olicLink|
|00000ff0| 00 00 1b 01 49 6f 43 72 | 65 61 74 65 44 65 76 69 |....IoCr|eateDevi|
|00001000| 63 65 00 00 77 01 49 6f | 53 65 74 44 65 76 69 63 |ce..w.Io|SetDevic|
|00001010| 65 49 6e 74 65 72 66 61 | 63 65 53 74 61 74 65 00 |eInterfa|ceState.|
|00001020| 33 04 5a 77 46 6c 75 73 | 68 4b 65 79 00 00 6d 04 |3.ZwFlus|hKey..m.|
|00001030| 5a 77 53 65 74 56 61 6c | 75 65 4b 65 79 00 b3 04 |ZwSetVal|ueKey...|
|00001040| 73 74 72 73 74 72 00 00 | b4 04 73 77 70 72 69 6e |strstr..|..swprin|
|00001050| 74 66 00 00 2b 04 5a 77 | 44 65 6c 65 74 65 56 61 |tf..+.Zw|DeleteVa|
|00001060| 6c 75 65 4b 65 79 00 00 | 3c 01 49 6f 47 65 74 44 |lueKey..|<.IoGetD|
|00001070| 65 76 69 63 65 49 6e 74 | 65 72 66 61 63 65 73 00 |eviceInt|erfaces.|
|00001080| 40 04 5a 77 4f 70 65 6e | 4b 65 79 00 c8 03 52 74 |@.ZwOpen|Key...Rt|
|00001090| 6c 55 6e 69 63 6f 64 65 | 54 6f 4d 75 6c 74 69 42 |lUnicode|ToMultiB|
|000010a0| 79 74 65 4e 00 00 88 03 | 52 74 6c 4d 75 6c 74 69 |yteN....|RtlMulti|
|000010b0| 42 79 74 65 54 6f 55 6e | 69 63 6f 64 65 4e 00 00 |ByteToUn|icodeN..|
|000010c0| c7 03 52 74 6c 55 6e 69 | 63 6f 64 65 54 6f 43 75 |..RtlUni|codeToCu|
|000010d0| 73 74 6f 6d 43 50 4e 00 | 22 03 52 74 6c 43 75 73 |stomCPN.|".RtlCus|
|000010e0| 74 6f 6d 43 50 54 6f 55 | 6e 69 63 6f 64 65 4e 00 |tomCPToU|nicodeN.|
|000010f0| 66 03 52 74 6c 49 6e 69 | 74 43 6f 64 65 50 61 67 |f.RtlIni|tCodePag|
|00001100| 65 54 61 62 6c 65 00 00 | 4f 04 5a 77 51 75 65 72 |eTable..|O.ZwQuer|
|00001110| 79 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 46 69 6c 65 |yInforma|tionFile|
|00001120| 00 00 5b 03 52 74 6c 47 | 65 74 44 65 66 61 75 6c |..[.RtlG|etDefaul|
|00001130| 74 43 6f 64 65 50 61 67 | 65 00 6e 74 6f 73 6b 72 |tCodePag|e.ntoskr|
|00001140| 6e 6c 2e 65 78 65 00 00 | 52 00 4b 66 52 65 6c 65 |nl.exe..|R.KfRele|
|00001150| 61 73 65 53 70 69 6e 4c | 6f 63 6b 00 4f 00 4b 66 |aseSpinL|ock.O.Kf|
|00001160| 41 63 71 75 69 72 65 53 | 70 69 6e 4c 6f 63 6b 00 |AcquireS|pinLock.|
|00001170| 01 00 45 78 52 65 6c 65 | 61 73 65 46 61 73 74 4d |..ExRele|aseFastM|
|00001180| 75 74 65 78 00 00 00 00 | 45 78 41 63 71 75 69 72 |utex....|ExAcquir|
|00001190| 65 46 61 73 74 4d 75 74 | 65 78 00 00 48 41 4c 2e |eFastMut|ex..HAL.|
|000011a0| 64 6c 6c 00 70 00 45 78 | 52 65 6c 65 61 73 65 46 |dll.p.Ex|ReleaseF|
|000011b0| 61 73 74 4d 75 74 65 78 | 55 6e 73 61 66 65 00 00 |astMutex|Unsafe..|
|000011c0| 30 00 45 78 41 63 71 75 | 69 72 65 46 61 73 74 4d |0.ExAcqu|ireFastM|
|000011d0| 75 74 65 78 55 6e 73 61 | 66 65 00 00 e9 01 4b 65 |utexUnsa|fe....Ke|
|000011e0| 52 65 6c 65 61 73 65 4d | 75 74 65 78 00 00 3a 01 |ReleaseM|utex..:.|
|000011f0| 49 6f 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |IoGetCur|rentProc|
|00001200| 65 73 73 00 c7 01 4b 65 | 49 6e 69 74 69 61 6c 69 |ess...Ke|Initiali|
|00001210| 7a 65 4d 75 74 65 78 00 | 4d 00 45 78 49 6e 69 74 |zeMutex.|M.ExInit|
|00001220| 69 61 6c 69 7a 65 4e 50 | 61 67 65 64 4c 6f 6f 6b |ializeNP|agedLook|
|00001230| 61 73 69 64 65 4c 69 73 | 74 00 81 04 5f 65 78 63 |asideLis|t..._exc|
|00001240| 65 70 74 5f 68 61 6e 64 | 6c 65 72 33 00 00 3e 00 |ept_hand|ler3..>.|
|00001250| 45 78 44 65 6c 65 74 65 | 4e 50 61 67 65 64 4c 6f |ExDelete|NPagedLo|
|00001260| 6f 6b 61 73 69 64 65 4c | 69 73 74 00 2d 00 44 62 |okasideL|ist.-.Db|
|00001270| 67 50 72 69 6e 74 00 00 | 89 01 49 6f 55 6e 72 65 |gPrint..|..IoUnre|
|00001280| 67 69 73 74 65 72 46 69 | 6c 65 53 79 73 74 65 6d |gisterFi|leSystem|
|00001290| 00 00 9c 00 46 73 52 74 | 6c 44 65 72 65 67 69 73 |....FsRt|lDeregis|
|000012a0| 74 65 72 55 6e 63 50 72 | 6f 76 69 64 65 72 00 00 |terUncPr|ovider..|
|000012b0| 65 01 49 6f 52 65 67 69 | 73 74 65 72 46 69 6c 65 |e.IoRegi|sterFile|
|000012c0| 53 79 73 74 65 6d 00 00 | d8 00 46 73 52 74 6c 52 |System..|..FsRtlR|
|000012d0| 65 67 69 73 74 65 72 55 | 6e 63 50 72 6f 76 69 64 |egisterU|ncProvid|
|000012e0| 65 72 00 00 05 04 53 65 | 52 65 6c 65 61 73 65 53 |er....Se|ReleaseS|
|000012f0| 75 62 6a 65 63 74 43 6f | 6e 74 65 78 74 00 ec 03 |ubjectCo|ntext...|
|00001300| 53 65 43 61 70 74 75 72 | 65 53 75 62 6a 65 63 74 |SeCaptur|eSubject|
|00001310| 43 6f 6e 74 65 78 74 00 | 77 04 5f 61 62 6e 6f 72 |Context.|w._abnor|
|00001320| 6d 61 6c 5f 74 65 72 6d | 69 6e 61 74 69 6f 6e 00 |mal_term|ination.|
|00001330| 48 01 49 6f 47 65 74 53 | 74 61 63 6b 4c 69 6d 69 |H.IoGetS|tackLimi|
|00001340| 74 73 00 00 fb 00 49 6f | 41 63 71 75 69 72 65 43 |ts....Io|AcquireC|
|00001350| 61 6e 63 65 6c 53 70 69 | 6e 4c 6f 63 6b 00 50 01 |ancelSpi|nLock.P.|
|00001360| 49 6f 49 73 4f 70 65 72 | 61 74 69 6f 6e 53 79 6e |IoIsOper|ationSyn|
|00001370| 63 68 72 6f 6e 6f 75 73 | 00 00 7f 01 49 6f 53 65 |chronous|....IoSe|
|00001380| 74 54 6f 70 4c 65 76 65 | 6c 49 72 70 00 00 49 01 |tTopLeve|lIrp..I.|
|00001390| 49 6f 47 65 74 54 6f 70 | 4c 65 76 65 6c 49 72 70 |IoGetTop|LevelIrp|
|000013a0| 00 00 b4 01 4b 65 47 65 | 74 43 75 72 72 65 6e 74 |....KeGe|tCurrent|
|000013b0| 54 68 72 65 61 64 00 00 | 93 01 49 6f 57 72 69 74 |Thread..|..IoWrit|
|000013c0| 65 45 72 72 6f 72 4c 6f | 67 45 6e 74 72 79 00 00 |eErrorLo|gEntry..|
|000013d0| 02 01 49 6f 41 6c 6c 6f | 63 61 74 65 45 72 72 6f |..IoAllo|cateErro|
|000013e0| 72 4c 6f 67 45 6e 74 72 | 79 00 ff 03 53 65 51 75 |rLogEntr|y...SeQu|
|000013f0| 65 72 79 41 75 74 68 65 | 6e 74 69 63 61 74 69 6f |eryAuthe|nticatio|
|00001400| 6e 49 64 54 6f 6b 65 6e | 00 00 12 01 49 6f 43 68 |nIdToken|....IoCh|
|00001410| 65 63 6b 45 61 42 75 66 | 66 65 72 56 61 6c 69 64 |eckEaBuf|ferValid|
|00001420| 69 74 79 00 6e 01 49 6f | 52 65 6d 6f 76 65 53 68 |ity.n.Io|RemoveSh|
|00001430| 61 72 65 41 63 63 65 73 | 73 00 b6 00 46 73 52 74 |areAcces|s...FsRt|
|00001440| 6c 49 73 4e 74 73 74 61 | 74 75 73 45 78 70 65 63 |lIsNtsta|tusExpec|
|00001450| 74 65 64 00 a3 00 46 73 | 52 74 6c 46 61 73 74 55 |ted...Fs|RtlFastU|
|00001460| 6e 6c 6f 63 6b 41 6c 6c | 00 00 45 01 49 6f 47 65 |nlockAll|..E.IoGe|
|00001470| 74 52 65 71 75 65 73 74 | 6f 72 50 72 6f 63 65 73 |tRequest|orProces|
|00001480| 73 00 a6 01 4b 65 42 75 | 67 43 68 65 63 6b 45 78 |s...KeBu|gCheckEx|
|00001490| 00 00 dd 01 4b 65 51 75 | 65 72 79 53 79 73 74 65 |....KeQu|erySyste|
|000014a0| 6d 54 69 6d 65 00 24 00 | 43 63 55 6e 69 6e 69 74 |mTime.$.|CcUninit|
|000014b0| 69 61 6c 69 7a 65 43 61 | 63 68 65 4d 61 70 00 00 |ializeCa|cheMap..|
|000014c0| d7 00 46 73 52 74 6c 50 | 72 6f 63 65 73 73 46 69 |..FsRtlP|rocessFi|
|000014d0| 6c 65 4c 6f 63 6b 00 00 | a5 00 46 73 52 74 6c 46 |leLock..|..FsRtlF|
|000014e0| 61 73 74 55 6e 6c 6f 63 | 6b 53 69 6e 67 6c 65 00 |astUnloc|kSingle.|
|000014f0| 75 00 45 78 53 65 74 52 | 65 73 6f 75 72 63 65 4f |u.ExSetR|esourceO|
|00001500| 77 6e 65 72 50 6f 69 6e | 74 65 72 00 37 02 4d 6d |wnerPoin|ter.7.Mm|
|00001510| 43 61 6e 46 69 6c 65 42 | 65 54 72 75 6e 63 61 74 |CanFileB|eTruncat|
|00001520| 65 64 00 00 d0 02 50 72 | 6f 62 65 46 6f 72 57 72 |ed....Pr|obeForWr|
|00001530| 69 74 65 00 cf 02 50 72 | 6f 62 65 46 6f 72 52 65 |ite...Pr|obeForRe|
|00001540| 61 64 00 00 21 03 52 74 | 6c 43 72 65 61 74 65 55 |ad..!.Rt|lCreateU|
|00001550| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 97 03 |nicodeSt|ring....|
|00001560| 52 74 6c 50 72 65 66 69 | 78 55 6e 69 63 6f 64 65 |RtlPrefi|xUnicode|
|00001570| 53 74 72 69 6e 67 00 00 | 57 04 5a 77 51 75 65 72 |String..|W.ZwQuer|
|00001580| 79 53 79 6d 62 6f 6c 69 | 63 4c 69 6e 6b 4f 62 6a |ySymboli|cLinkObj|
|00001590| 65 63 74 00 44 04 5a 77 | 4f 70 65 6e 53 79 6d 62 |ect.D.Zw|OpenSymb|
|000015a0| 6f 6c 69 63 4c 69 6e 6b | 4f 62 6a 65 63 74 00 00 |olicLink|Object..|
|000015b0| 3d 04 5a 77 4f 70 65 6e | 44 69 72 65 63 74 6f 72 |=.ZwOpen|Director|
|000015c0| 79 4f 62 6a 65 63 74 00 | bb 04 77 63 73 63 68 72 |yObject.|..wcschr|
|000015d0| 00 00 a0 00 46 73 52 74 | 6c 44 6f 65 73 4e 61 6d |....FsRt|lDoesNam|
|000015e0| 65 43 6f 6e 74 61 69 6e | 57 69 6c 64 43 61 72 64 |eContain|WildCard|
|000015f0| 73 00 0e 03 52 74 6c 43 | 6f 6d 70 61 72 65 4d 65 |s...RtlC|ompareMe|
|00001600| 6d 6f 72 79 00 00 3c 00 | 45 78 43 6f 6e 76 65 72 |mory..<.|ExConver|
|00001610| 74 45 78 63 6c 75 73 69 | 76 65 54 6f 53 68 61 72 |tExclusi|veToShar|
|00001620| 65 64 4c 69 74 65 00 00 | 51 02 4d 6d 4d 61 70 4c |edLite..|Q.MmMapL|
|00001630| 6f 63 6b 65 64 50 61 67 | 65 73 53 70 65 63 69 66 |ockedPag|esSpecif|
|00001640| 79 43 61 63 68 65 00 00 | 3b 02 4d 6d 46 6c 75 73 |yCache..|;.MmFlus|
|00001650| 68 49 6d 61 67 65 53 65 | 63 74 69 6f 6e 00 21 00 |hImageSe|ction.!.|
|00001660| 43 63 53 65 74 46 69 6c | 65 53 69 7a 65 73 00 00 |CcSetFil|eSizes..|
|00001670| 0f 00 43 63 49 6e 69 74 | 69 61 6c 69 7a 65 43 61 |..CcInit|ializeCa|
|00001680| 63 68 65 4d 61 70 00 00 | c5 00 46 73 52 74 6c 4e |cheMap..|..FsRtlN|
|00001690| 6f 72 6d 61 6c 69 7a 65 | 4e 74 73 74 61 74 75 73 |ormalize|Ntstatus|
|000016a0| 00 00 6d 00 45 78 52 61 | 69 73 65 53 74 61 74 75 |..m.ExRa|iseStatu|
|000016b0| 73 00 72 00 45 78 52 65 | 6c 65 61 73 65 52 65 73 |s.r.ExRe|leaseRes|
|000016c0| 6f 75 72 63 65 46 6f 72 | 54 68 72 65 61 64 4c 69 |ourceFor|ThreadLi|
|000016d0| 74 65 00 00 f1 01 4b 65 | 52 65 73 65 74 45 76 65 |te....Ke|ResetEve|
|000016e0| 6e 74 00 00 7c 00 45 78 | 66 49 6e 74 65 72 6c 6f |nt..|.Ex|fInterlo|
|000016f0| 63 6b 65 64 41 64 64 55 | 6c 6f 6e 67 00 00 17 00 |ckedAddU|long....|
|00001700| 43 63 50 72 65 70 61 72 | 65 4d 64 6c 57 72 69 74 |CcPrepar|eMdlWrit|
|00001710| 65 00 02 00 43 63 43 6f | 70 79 57 72 69 74 65 00 |e...CcCo|pyWrite.|
|00001720| 23 00 43 63 53 65 74 52 | 65 61 64 41 68 65 61 64 |#.CcSetR|eadAhead|
|00001730| 47 72 61 6e 75 6c 61 72 | 69 74 79 00 95 00 46 73 |Granular|ity...Fs|
|00001740| 52 74 6c 43 68 65 63 6b | 4c 6f 63 6b 46 6f 72 57 |RtlCheck|LockForW|
|00001750| 72 69 74 65 41 63 63 65 | 73 73 00 00 63 00 45 78 |riteAcce|ss..c.Ex|
|00001760| 49 73 52 65 73 6f 75 72 | 63 65 41 63 71 75 69 72 |IsResour|ceAcquir|
|00001770| 65 64 45 78 63 6c 75 73 | 69 76 65 4c 69 74 65 00 |edExclus|iveLite.|
|00001780| 64 00 45 78 49 73 52 65 | 73 6f 75 72 63 65 41 63 |d.ExIsRe|sourceAc|
|00001790| 71 75 69 72 65 64 53 68 | 61 72 65 64 4c 69 74 65 |quiredSh|aredLite|
|000017a0| 00 00 19 00 43 63 50 75 | 72 67 65 43 61 63 68 65 |....CcPu|rgeCache|
|000017b0| 53 65 63 74 69 6f 6e 00 | 09 00 43 63 46 6c 75 73 |Section.|..CcFlus|
|000017c0| 68 43 61 63 68 65 00 00 | 34 00 45 78 41 63 71 75 |hCache..|4.ExAcqu|
|000017d0| 69 72 65 53 68 61 72 65 | 64 53 74 61 72 76 65 45 |ireShare|dStarveE|
|000017e0| 78 63 6c 75 73 69 76 65 | 00 00 03 00 43 63 44 65 |xclusive|....CcDe|
|000017f0| 66 65 72 57 72 69 74 65 | 00 00 00 00 43 63 43 61 |ferWrite|....CcCa|
|00001800| 6e 49 57 72 69 74 65 00 | 53 00 45 78 49 6e 74 65 |nIWrite.|S.ExInte|
|00001810| 72 6c 6f 63 6b 65 64 41 | 64 64 4c 61 72 67 65 53 |rlockedA|ddLargeS|
|00001820| 74 61 74 69 73 74 69 63 | 00 00 d3 00 46 73 52 74 |tatistic|....FsRt|
|00001830| 6c 50 6f 73 74 53 74 61 | 63 6b 4f 76 65 72 66 6c |lPostSta|ckOverfl|
|00001840| 6f 77 00 00 12 00 43 63 | 4d 64 6c 52 65 61 64 00 |ow....Cc|MdlRead.|
|00001850| 01 00 43 63 43 6f 70 79 | 52 65 61 64 00 00 1d 00 |..CcCopy|Read....|
|00001860| 43 63 53 65 74 41 64 64 | 69 74 69 6f 6e 61 6c 43 |CcSetAdd|itionalC|
|00001870| 61 63 68 65 41 74 74 72 | 69 62 75 74 65 73 00 00 |acheAttr|ibutes..|
|00001880| 94 00 46 73 52 74 6c 43 | 68 65 63 6b 4c 6f 63 6b |..FsRtlC|heckLock|
|00001890| 46 6f 72 52 65 61 64 41 | 63 63 65 73 73 00 3c 02 |ForReadA|ccess.<.|
|000018a0| 4d 6d 46 6f 72 63 65 53 | 65 63 74 69 6f 6e 43 6c |MmForceS|ectionCl|
|000018b0| 6f 73 65 64 00 00 1b 03 | 52 74 6c 43 6f 70 79 55 |osed....|RtlCopyU|
|000018c0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 3b 03 |nicodeSt|ring..;.|
|000018d0| 52 74 6c 45 71 75 61 6c | 55 6e 69 63 6f 64 65 53 |RtlEqual|UnicodeS|
|000018e0| 74 72 69 6e 67 00 8d 01 | 49 6f 55 70 64 61 74 65 |tring...|IoUpdate|
|000018f0| 53 68 61 72 65 41 63 63 | 65 73 73 00 7d 01 49 6f |ShareAcc|ess.}.Io|
|00001900| 53 65 74 53 68 61 72 65 | 41 63 63 65 73 73 00 00 |SetShare|Access..|
|00001910| 17 01 49 6f 43 68 65 63 | 6b 53 68 61 72 65 41 63 |..IoChec|kShareAc|
|00001920| 63 65 73 73 00 00 02 04 | 53 65 51 75 65 72 79 53 |cess....|SeQueryS|
|00001930| 65 73 73 69 6f 6e 49 64 | 54 6f 6b 65 6e 00 a2 00 |essionId|Token...|
|00001940| 46 73 52 74 6c 46 61 73 | 74 43 68 65 63 6b 4c 6f |FsRtlFas|tCheckLo|
|00001950| 63 6b 46 6f 72 57 72 69 | 74 65 00 00 a1 00 46 73 |ckForWri|te....Fs|
|00001960| 52 74 6c 46 61 73 74 43 | 68 65 63 6b 4c 6f 63 6b |RtlFastC|heckLock|
|00001970| 46 6f 72 52 65 61 64 00 | 30 01 49 6f 46 69 6c 65 |ForRead.|0.IoFile|
|00001980| 4f 62 6a 65 63 74 54 79 | 70 65 00 00 13 00 43 63 |ObjectTy|pe....Cc|
|00001990| 4d 64 6c 52 65 61 64 43 | 6f 6d 70 6c 65 74 65 00 |MdlReadC|omplete.|
|000019a0| 14 00 43 63 4d 64 6c 57 | 72 69 74 65 43 6f 6d 70 |..CcMdlW|riteComp|
|000019b0| 6c 65 74 65 00 00 79 04 | 5f 61 6c 6c 6d 75 6c 00 |lete..y.|_allmul.|
|000019c0| 04 00 43 63 46 61 73 74 | 43 6f 70 79 52 65 61 64 |..CcFast|CopyRead|
|000019d0| 00 00 44 01 49 6f 47 65 | 74 52 65 6c 61 74 65 64 |..D.IoGe|tRelated|
|000019e0| 44 65 76 69 63 65 4f 62 | 6a 65 63 74 00 00 05 00 |DeviceOb|ject....|
|000019f0| 43 63 46 61 73 74 43 6f | 70 79 57 72 69 74 65 00 |CcFastCo|pyWrite.|
|00001a00| 29 00 43 63 5a 65 72 6f | 44 61 74 61 00 00 5e 00 |).CcZero|Data..^.|
|00001a10| 45 78 49 6e 74 65 72 6c | 6f 63 6b 65 64 50 6f 70 |ExInterl|ockedPop|
|00001a20| 45 6e 74 72 79 53 4c 69 | 73 74 00 00 60 00 45 78 |EntrySLi|st..`.Ex|
|00001a30| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 50 75 73 68 45 |Interloc|kedPushE|
|00001a40| 6e 74 72 79 53 4c 69 73 | 74 00 0d 04 53 65 54 6f |ntrySLis|t...SeTo|
|00001a50| 6b 65 6e 49 73 52 65 73 | 74 72 69 63 74 65 64 00 |kenIsRes|tricted.|
|00001a60| ac 00 46 73 52 74 6c 49 | 6e 69 74 69 61 6c 69 7a |..FsRtlI|nitializ|
|00001a70| 65 46 69 6c 65 4c 6f 63 | 6b 00 e3 00 46 73 52 74 |eFileLoc|k...FsRt|
|00001a80| 6c 55 6e 69 6e 69 74 69 | 61 6c 69 7a 65 46 69 6c |lUniniti|alizeFil|
|00001a90| 65 4c 6f 63 6b 00 33 01 | 49 6f 46 72 65 65 4d 64 |eLock.3.|IoFreeMd|
|00001aa0| 6c 00 59 02 4d 6d 50 72 | 6f 62 65 41 6e 64 4c 6f |l.Y.MmPr|obeAndLo|
|00001ab0| 63 6b 50 61 67 65 73 00 | 04 01 49 6f 41 6c 6c 6f |ckPages.|..IoAllo|
|00001ac0| 63 61 74 65 4d 64 6c 00 | cc 03 52 74 6c 55 70 63 |cateMdl.|..RtlUpc|
|00001ad0| 61 73 65 55 6e 69 63 6f | 64 65 43 68 61 72 00 00 |aseUnico|deChar..|
|00001ae0| 5c 02 4d 6d 51 75 65 72 | 79 53 79 73 74 65 6d 53 |\.MmQuer|ySystemS|
|00001af0| 69 7a 65 00 c8 01 4b 65 | 49 6e 69 74 69 61 6c 69 |ize...Ke|Initiali|
|00001b00| 7a 65 51 75 65 75 65 00 | dd 02 50 73 49 73 54 68 |zeQueue.|..PsIsTh|
|00001b10| 72 65 61 64 54 65 72 6d | 69 6e 61 74 69 6e 67 00 |readTerm|inating.|
|00001b20| f4 01 4b 65 52 75 6e 64 | 6f 77 6e 51 75 65 75 65 |..KeRund|ownQueue|
|00001b30| 00 00 d0 01 4b 65 49 6e | 73 65 72 74 51 75 65 75 |....KeIn|sertQueu|
|00001b40| 65 00 ba 02 4f 62 52 65 | 66 65 72 65 6e 63 65 4f |e...ObRe|ferenceO|
|00001b50| 62 6a 65 63 74 42 79 50 | 6f 69 6e 74 65 72 00 00 |bjectByP|ointer..|
|00001b60| ef 02 50 73 54 68 72 65 | 61 64 54 79 70 65 00 00 |..PsThre|adType..|
|00001b70| ef 01 4b 65 52 65 6d 6f | 76 65 51 75 65 75 65 00 |..KeRemo|veQueue.|
|00001b80| cb 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 54 69 |..KeInit|ializeTi|
|00001b90| 6d 65 72 00 c3 01 4b 65 | 49 6e 69 74 69 61 6c 69 |mer...Ke|Initiali|
|00001ba0| 7a 65 44 70 63 00 a7 01 | 4b 65 43 61 6e 63 65 6c |zeDpc...|KeCancel|
|00001bb0| 54 69 6d 65 72 00 08 02 | 4b 65 53 65 74 54 69 6d |Timer...|KeSetTim|
|00001bc0| 65 72 00 00 16 02 4b 65 | 66 52 65 6c 65 61 73 65 |er....Ke|fRelease|
|00001bd0| 53 70 69 6e 4c 6f 63 6b | 46 72 6f 6d 44 70 63 4c |SpinLock|FromDpcL|
|00001be0| 65 76 65 6c 00 00 15 02 | 4b 65 66 41 63 71 75 69 |evel....|KefAcqui|
|00001bf0| 72 65 53 70 69 6e 4c 6f | 63 6b 41 74 44 70 63 4c |reSpinLo|ckAtDpcL|
|00001c00| 65 76 65 6c 00 00 78 04 | 5f 61 6c 6c 64 69 76 00 |evel..x.|_alldiv.|
|00001c10| 67 02 4d 6d 55 6e 6c 6f | 63 6b 50 61 67 65 73 00 |g.MmUnlo|ckPages.|
|00001c20| 35 00 45 78 41 63 71 75 | 69 72 65 53 68 61 72 65 |5.ExAcqu|ireShare|
|00001c30| 64 57 61 69 74 46 6f 72 | 45 78 63 6c 75 73 69 76 |dWaitFor|Exclusiv|
|00001c40| 65 00 2b 02 4c 73 61 46 | 72 65 65 52 65 74 75 72 |e.+.LsaF|reeRetur|
|00001c50| 6e 42 75 66 66 65 72 00 | 92 01 49 6f 57 4d 49 57 |nBuffer.|..IoWMIW|
|00001c60| 72 69 74 65 45 76 65 6e | 74 00 44 00 4b 65 47 65 |riteEven|t.D.KeGe|
|00001c70| 74 43 75 72 72 65 6e 74 | 49 72 71 6c 00 00 22 00 |tCurrent|Irql..".|
|00001c80| 48 61 6c 52 65 71 75 65 | 73 74 53 6f 66 74 77 61 |HalReque|stSoftwa|
|00001c90| 72 65 49 6e 74 65 72 72 | 75 70 74 00 02 00 45 78 |reInterr|upt...Ex|
|00001ca0| 54 72 79 54 6f 41 63 71 | 75 69 72 65 46 61 73 74 |TryToAcq|uireFast|
|00001cb0| 4d 75 74 65 78 00 0d 00 | 47 65 74 53 65 63 75 72 |Mutex...|GetSecur|
|00001cc0| 69 74 79 55 73 65 72 49 | 6e 66 6f 00 6b 73 65 63 |ityUserI|nfo.ksec|
|00001cd0| 64 64 2e 73 79 73 00 00 | 00 00 00 00 00 00 00 00 |dd.sys..|........|
+--------+-------------------------+-------------------------+--------+--------+