/ Chip 2000 July / Chip_2000-07_cd.bin / servis / SPNT / sp6x86.exe / win32k.sys / INIT

next >

view JSON data

view as text

open on a Mac

open on a PC

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 80 27 13 00 00 00 00 00 | 00 00 00 00 20 2b 13 00 |.'......|.... +..|
|00000010| 80 03 12 00 08 2b 13 00 | 00 00 00 00 00 00 00 00 |.....+..|........|
|00000020| 00 40 13 00 08 07 12 00 | 00 00 00 00 00 00 00 00 |.@......|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 cc cc cc cc |........|........|
|00000040| 30 2b 13 00 3a 2b 13 00 | 48 2b 13 00 60 2b 13 00 |0+..:+..|H+..`+..|
|00000050| 80 2b 13 00 a0 2b 13 00 | c0 2b 13 00 d8 2b 13 00 |.+...+..|.+...+..|
|00000060| e6 2b 13 00 fc 2b 13 00 | 08 2c 13 00 1a 2c 13 00 |.+...+..|.,...,..|
|00000070| 32 2c 13 00 48 2c 13 00 | 5a 2c 13 00 68 2c 13 00 |2,..H,..|Z,..h,..|
|00000080| 7c 2c 13 00 8c 2c 13 00 | a8 2c 13 00 c2 2c 13 00 ||,...,..|.,...,..|
|00000090| e0 2c 13 00 00 2d 13 00 | 1e 2d 13 00 38 2d 13 00 |.,...-..|.-..8-..|
|000000a0| 4c 2d 13 00 62 2d 13 00 | 78 2d 13 00 90 2d 13 00 |L-..b-..|x-...-..|
|000000b0| a8 2d 13 00 c0 2d 13 00 | d8 2d 13 00 ec 2d 13 00 |.-...-..|.-...-..|
|000000c0| 0c 2e 13 00 30 2e 13 00 | 50 2e 13 00 70 2e 13 00 |....0...|P...p...|
|000000d0| 84 2e 13 00 9a 2e 13 00 | ac 2e 13 00 c8 2e 13 00 |........|........|
|000000e0| e0 2e 13 00 f4 2e 13 00 | 18 2f 13 00 32 2f 13 00 |........|./..2/..|
|000000f0| 50 2f 13 00 66 2f 13 00 | 7c 2f 13 00 92 2f 13 00 |P/..f/..||/.../..|
|00000100| ac 2f 13 00 b8 2f 13 00 | d8 2f 13 00 e8 2f 13 00 |./.../..|./.../..|
|00000110| f4 2f 13 00 14 30 13 00 | 34 30 13 00 54 30 13 00 |./...0..|40..T0..|
|00000120| 74 30 13 00 84 30 13 00 | 92 30 13 00 b2 30 13 00 |t0...0..|.0...0..|
|00000130| c8 30 13 00 e8 30 13 00 | f8 30 13 00 12 31 13 00 |.0...0..|.0...1..|
|00000140| 2a 31 13 00 42 31 13 00 | 68 31 13 00 88 31 13 00 |*1..B1..|h1...1..|
|00000150| a8 31 13 00 bc 31 13 00 | d4 31 13 00 e6 31 13 00 |.1...1..|.1...1..|
|00000160| 04 32 13 00 1c 32 13 00 | 30 32 13 00 40 32 13 00 |.2...2..|02..@2..|
|00000170| 50 32 13 00 70 32 13 00 | 8c 32 13 00 a8 32 13 00 |P2..p2..|.2...2..|
|00000180| d0 32 13 00 e8 32 13 00 | 00 33 13 00 10 33 13 00 |.2...2..|.3...3..|
|00000190| 20 33 13 00 3c 33 13 00 | 5e 33 13 00 76 33 13 00 | 3..<3..|^3..v3..|
|000001a0| 8a 33 13 00 a4 33 13 00 | c0 33 13 00 dc 33 13 00 |.3...3..|.3...3..|
|000001b0| ee 33 13 00 10 34 13 00 | 24 34 13 00 38 34 13 00 |.3...4..|$4..84..|
|000001c0| 52 34 13 00 70 34 13 00 | 8e 34 13 00 a8 34 13 00 |R4..p4..|.4...4..|
|000001d0| b6 34 13 00 d4 34 13 00 | ec 34 13 00 fc 34 13 00 |.4...4..|.4...4..|
|000001e0| 20 35 13 00 38 35 13 00 | 54 35 13 00 6e 35 13 00 | 5..85..|T5..n5..|
|000001f0| 82 35 13 00 9e 35 13 00 | bc 35 13 00 d8 35 13 00 |.5...5..|.5...5..|
|00000200| f0 35 13 00 00 36 13 00 | 0a 36 13 00 1a 36 13 00 |.5...6..|.6...6..|
|00000210| 38 36 13 00 48 36 13 00 | 68 36 13 00 80 36 13 00 |86..H6..|h6...6..|
|00000220| a0 36 13 00 bc 36 13 00 | d0 36 13 00 ea 36 13 00 |.6...6..|.6...6..|
|00000230| fc 36 13 00 12 37 13 00 | 30 37 13 00 4e 37 13 00 |.6...7..|07..N7..|
|00000240| 6c 37 13 00 82 37 13 00 | 9c 37 13 00 c0 37 13 00 |l7...7..|.7...7..|
|00000250| d6 37 13 00 e0 37 13 00 | ea 37 13 00 f8 37 13 00 |.7...7..|.7...7..|
|00000260| 02 38 13 00 0c 38 13 00 | 28 38 13 00 46 38 13 00 |.8...8..|(8..F8..|
|00000270| 5c 38 13 00 78 38 13 00 | 98 38 13 00 b2 38 13 00 |\8..x8..|.8...8..|
|00000280| cc 38 13 00 e4 38 13 00 | 00 39 13 00 18 39 13 00 |.8...8..|.9...9..|
|00000290| 30 39 13 00 3c 39 13 00 | 4c 39 13 00 5e 39 13 00 |09..<9..|L9..^9..|
|000002a0| 70 39 13 00 82 39 13 00 | 94 39 13 00 b0 39 13 00 |p9...9..|.9...9..|
|000002b0| ce 39 13 00 e4 39 13 00 | fc 39 13 00 14 3a 13 00 |.9...9..|.9...:..|
|000002c0| 2a 3a 13 00 50 3a 13 00 | 6a 3a 13 00 90 3a 13 00 |*:..P:..|j:...:..|
|000002d0| a6 3a 13 00 b8 3a 13 00 | c8 3a 13 00 e0 3a 13 00 |.:...:..|.:...:..|
|000002e0| ee 3a 13 00 06 3b 13 00 | 22 3b 13 00 3c 3b 13 00 |.:...;..|";..<;..|
|000002f0| 58 3b 13 00 6c 3b 13 00 | 7a 3b 13 00 92 3b 13 00 |X;..l;..|z;...;..|
|00000300| aa 3b 13 00 d0 3b 13 00 | e4 3b 13 00 f0 3b 13 00 |.;...;..|.;...;..|
|00000310| 0c 3c 13 00 20 3c 13 00 | 34 3c 13 00 40 3c 13 00 |.<.. <..|4<..@<..|
|00000320| 4c 3c 13 00 68 3c 13 00 | 86 3c 13 00 9e 3c 13 00 |L<..h<..|.<...<..|
|00000330| ba 3c 13 00 cc 3c 13 00 | da 3c 13 00 f4 3c 13 00 |.<...<..|.<...<..|
|00000340| 10 3d 13 00 22 3d 13 00 | 3c 3d 13 00 54 3d 13 00 |.=.."=..|<=..T=..|
|00000350| 68 3d 13 00 82 3d 13 00 | 98 3d 13 00 b2 3d 13 00 |h=...=..|.=...=..|
|00000360| c0 3d 13 00 ce 3d 13 00 | e8 3d 13 00 f2 3d 13 00 |.=...=..|.=...=..|
|00000370| fc 3d 13 00 0c 3e 13 00 | 16 3e 13 00 20 3e 13 00 |.=...>..|.>.. >..|
|00000380| 40 3e 13 00 60 3e 13 00 | 7c 3e 13 00 9c 3e 13 00 |@>..`>..||>...>..|
|00000390| b6 3e 13 00 d4 3e 13 00 | f4 3e 13 00 08 3f 13 00 |.>...>..|.>...?..|
|000003a0| 22 3f 13 00 3c 3f 13 00 | 60 3f 13 00 78 3f 13 00 |"?..<?..|`?..x?..|
|000003b0| 8e 3f 13 00 a8 3f 13 00 | b4 3f 13 00 c0 3f 13 00 |.?...?..|.?...?..|
|000003c0| e2 3f 13 00 00 00 00 00 | 08 40 13 00 1e 40 13 00 |.?......|.@...@..|
|000003d0| 40 40 13 00 56 40 13 00 | 00 00 00 00 cc cc cc cc |@@..V@..|........|
|000003e0| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 cc cc |ntoskrnl|.exe....|
|000003f0| eb 03 77 63 73 63 68 72 | 00 00 66 03 5a 77 43 72 |..wcschr|..f.ZwCr|
|00000400| 65 61 74 65 4b 65 79 00 | d7 00 49 6e 74 65 72 6c |eateKey.|..Interl|
|00000410| 6f 63 6b 65 64 44 65 63 | 72 65 6d 65 6e 74 00 00 |ockedDec|rement..|
|00000420| 4b 00 45 78 49 6e 69 74 | 69 61 6c 69 7a 65 52 65 |K.ExInit|ializeRe|
|00000430| 73 6f 75 72 63 65 4c 69 | 74 65 00 00 cc cc cc cc |sourceLi|te......|
|00000440| f9 00 49 6f 43 72 65 61 | 74 65 53 79 6e 63 68 72 |..IoCrea|teSynchr|
|00000450| 6f 6e 69 7a 61 74 69 6f | 6e 45 76 65 6e 74 00 00 |onizatio|nEvent..|
|00000460| 82 03 5a 77 4f 70 65 6e | 53 79 6d 62 6f 6c 69 63 |..ZwOpen|Symbolic|
|00000470| 4c 69 6e 6b 4f 62 6a 65 | 63 74 00 00 cc cc cc cc |LinkObje|ct......|
|00000480| 36 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |6.ExAllo|catePool|
|00000490| 57 69 74 68 54 61 67 00 | 43 00 45 78 46 72 65 65 |WithTag.|C.ExFree|
|000004a0| 50 6f 6f 6c 00 00 d8 00 | 49 6e 74 65 72 6c 6f 63 |Pool....|Interloc|
|000004b0| 6b 65 64 45 78 63 68 61 | 6e 67 65 00 1d 03 52 74 |kedExcha|nge...Rt|
|000004c0| 6c 55 6e 77 69 6e 64 00 | 02 02 4e 6c 73 41 6e 73 |lUnwind.|..NlsAns|
|000004d0| 69 43 6f 64 65 50 61 67 | 65 00 f0 02 52 74 6c 4e |iCodePag|e...RtlN|
|000004e0| 74 53 74 61 74 75 73 54 | 6f 44 6f 73 45 72 72 6f |tStatusT|oDosErro|
|000004f0| 72 00 d1 02 52 74 6c 49 | 6d 61 67 65 4e 74 48 65 |r...RtlI|mageNtHe|
|00000500| 61 64 65 72 00 00 cc cc | ca 01 4c 70 63 52 65 71 |ader....|..LpcReq|
|00000510| 75 65 73 74 50 6f 72 74 | 00 00 2b 03 52 74 6c 5a |uestPort|..+.RtlZ|
|00000520| 65 72 6f 48 65 61 70 00 | ab 02 52 74 6c 45 6d 70 |eroHeap.|..RtlEmp|
|00000530| 74 79 41 74 6f 6d 54 61 | 62 6c 65 00 9a 02 52 74 |tyAtomTa|ble...Rt|
|00000540| 6c 43 72 65 61 74 65 48 | 65 61 70 00 86 03 5a 77 |lCreateH|eap...Zw|
|00000550| 51 75 65 72 79 44 65 66 | 61 75 6c 74 4c 6f 63 61 |QueryDef|aultLoca|
|00000560| 6c 65 00 00 cc cc cc cc | fc 02 52 74 6c 51 75 65 |le......|..RtlQue|
|00000570| 72 79 41 74 6f 6d 49 6e | 41 74 6f 6d 54 61 62 6c |ryAtomIn|AtomTabl|
|00000580| 65 00 a3 02 52 74 6c 44 | 65 6c 65 74 65 41 74 6f |e...RtlD|eleteAto|
|00000590| 6d 46 72 6f 6d 41 74 6f | 6d 54 61 62 6c 65 00 00 |mFromAto|mTable..|
|000005a0| e9 02 52 74 6c 4c 6f 6f | 6b 75 70 41 74 6f 6d 49 |..RtlLoo|kupAtomI|
|000005b0| 6e 41 74 6f 6d 54 61 62 | 6c 65 00 00 cc cc cc cc |nAtomTab|le......|
|000005c0| 6b 02 50 73 53 65 74 50 | 72 6f 63 65 73 73 50 72 |k.PsSetP|rocessPr|
|000005d0| 69 6f 72 69 74 79 42 79 | 43 6c 61 73 73 00 d1 01 |iorityBy|Class...|
|000005e0| 4d 6d 41 64 6a 75 73 74 | 57 6f 72 6b 69 6e 67 53 |MmAdjust|WorkingS|
|000005f0| 65 74 53 69 7a 65 00 00 | a8 03 5a 77 59 69 65 6c |etSize..|..ZwYiel|
|00000600| 64 45 78 65 63 75 74 69 | 6f 6e 00 00 a8 02 52 74 |dExecuti|on....Rt|
|00000610| 6c 44 65 73 74 72 6f 79 | 41 74 6f 6d 54 61 62 6c |lDestroy|AtomTabl|
|00000620| 65 00 99 02 52 74 6c 43 | 72 65 61 74 65 41 74 6f |e...RtlC|reateAto|
|00000630| 6d 54 61 62 6c 65 00 00 | 77 02 52 74 6c 41 64 64 |mTable..|w.RtlAdd|
|00000640| 41 74 6f 6d 54 6f 41 74 | 6f 6d 54 61 62 6c 65 00 |AtomToAt|omTable.|
|00000650| f9 02 52 74 6c 50 69 6e | 41 74 6f 6d 49 6e 41 74 |..RtlPin|AtomInAt|
|00000660| 6f 6d 54 61 62 6c 65 00 | 7b 03 5a 77 4f 70 65 6e |omTable.|{.ZwOpen|
|00000670| 44 69 72 65 63 74 6f 72 | 79 4f 62 6a 65 63 74 00 |Director|yObject.|
|00000680| 3e 02 4f 62 49 6e 73 65 | 72 74 4f 62 6a 65 63 74 |>.ObInse|rtObject|
|00000690| 00 00 cc cc cc cc cc cc | 33 03 53 65 41 73 73 69 |........|3.SeAssi|
|000006a0| 67 6e 53 65 63 75 72 69 | 74 79 00 00 48 02 4f 62 |gnSecuri|ty..H.Ob|
|000006b0| 53 65 74 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |SetSecur|ityDescr|
|000006c0| 69 70 74 6f 72 49 6e 66 | 6f 00 cc cc 3b 03 53 65 |iptorInf|o...;.Se|
|000006d0| 44 65 61 73 73 69 67 6e | 53 65 63 75 72 69 74 79 |Deassign|Security|
|000006e0| 00 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|000006f0| d2 02 52 74 6c 49 6e 69 | 74 41 6e 73 69 53 74 72 |..RtlIni|tAnsiStr|
|00000700| 69 6e 67 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ing.....|........|
|00000710| 7c 02 52 74 6c 41 6e 73 | 69 53 74 72 69 6e 67 54 ||.RtlAns|iStringT|
|00000720| 6f 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |oUnicode|String..|
|00000730| 4c 00 45 78 49 6e 69 74 | 69 61 6c 69 7a 65 5a 6f |L.ExInit|ializeZo|
|00000740| 6e 65 00 00 a1 03 5a 77 | 54 65 72 6d 69 6e 61 74 |ne....Zw|Terminat|
|00000750| 65 50 72 6f 63 65 73 73 | 00 00 55 01 4b 65 43 6c |eProcess|..U.KeCl|
|00000760| 65 61 72 45 76 65 6e 74 | 00 00 cc cc 37 03 53 65 |earEvent|....7.Se|
|00000770| 43 61 70 74 75 72 65 53 | 75 62 6a 65 63 74 43 6f |CaptureS|ubjectCo|
|00000780| 6e 74 65 78 74 00 cc cc | 41 03 53 65 4c 6f 63 6b |ntext...|A.SeLock|
|00000790| 53 75 62 6a 65 63 74 43 | 6f 6e 74 65 78 74 00 00 |SubjectC|ontext..|
|000007a0| 45 03 53 65 50 72 69 76 | 69 6c 65 67 65 43 68 65 |E.SePriv|ilegeChe|
|000007b0| 63 6b 00 00 46 03 53 65 | 50 72 69 76 69 6c 65 67 |ck..F.Se|Privileg|
|000007c0| 65 4f 62 6a 65 63 74 41 | 75 64 69 74 41 6c 61 72 |eObjectA|uditAlar|
|000007d0| 6d 00 cc cc cc cc cc cc | 53 03 53 65 55 6e 6c 6f |m.......|S.SeUnlo|
|000007e0| 63 6b 53 75 62 6a 65 63 | 74 43 6f 6e 74 65 78 74 |ckSubjec|tContext|
|000007f0| 00 00 4c 03 53 65 52 65 | 6c 65 61 73 65 53 75 62 |..L.SeRe|leaseSub|
|00000800| 6a 65 63 74 43 6f 6e 74 | 65 78 74 00 cc cc cc cc |jectCont|ext.....|
|00000810| 39 03 53 65 43 72 65 61 | 74 65 41 63 63 65 73 73 |9.SeCrea|teAccess|
|00000820| 53 74 61 74 65 00 38 02 | 4f 62 43 68 65 63 6b 4f |State.8.|ObCheckO|
|00000830| 62 6a 65 63 74 41 63 63 | 65 73 73 00 3c 03 53 65 |bjectAcc|ess.<.Se|
|00000840| 44 65 6c 65 74 65 41 63 | 63 65 73 73 53 74 61 74 |DeleteAc|cessStat|
|00000850| 65 00 8a 03 5a 77 51 75 | 65 72 79 49 6e 66 6f 72 |e...ZwQu|eryInfor|
|00000860| 6d 61 74 69 6f 6e 54 6f | 6b 65 6e 00 3e 03 53 65 |mationTo|ken.>.Se|
|00000870| 45 78 70 6f 72 74 73 00 | 9c 02 52 74 6c 43 72 65 |Exports.|..RtlCre|
|00000880| 61 74 65 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |ateSecur|ityDescr|
|00000890| 69 70 74 6f 72 00 cc cc | 98 02 52 74 6c 43 72 65 |iptor...|..RtlCre|
|000008a0| 61 74 65 41 63 6c 00 00 | 76 02 52 74 6c 41 64 64 |ateAcl..|v.RtlAdd|
|000008b0| 41 63 65 00 07 03 52 74 | 6c 53 65 74 44 61 63 6c |Ace...Rt|lSetDacl|
|000008c0| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|000008d0| 6f 72 00 00 0a 03 52 74 | 6c 53 65 74 53 61 63 6c |or....Rt|lSetSacl|
|000008e0| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|000008f0| 6f 72 00 00 09 03 52 74 | 6c 53 65 74 4f 77 6e 65 |or....Rt|lSetOwne|
|00000900| 72 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |rSecurit|yDescrip|
|00000910| 74 6f 72 00 08 03 52 74 | 6c 53 65 74 47 72 6f 75 |tor...Rt|lSetGrou|
|00000920| 70 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |pSecurit|yDescrip|
|00000930| 74 6f 72 00 e8 02 52 74 | 6c 4c 65 6e 67 74 68 53 |tor...Rt|lLengthS|
|00000940| 69 64 00 00 95 02 52 74 | 6c 43 6f 70 79 53 69 64 |id....Rt|lCopySid|
|00000950| 00 00 14 03 52 74 6c 55 | 6e 69 63 6f 64 65 53 74 |....RtlU|nicodeSt|
|00000960| 72 69 6e 67 54 6f 41 6e | 73 69 53 74 72 69 6e 67 |ringToAn|siString|
|00000970| 00 00 dc 02 52 74 6c 49 | 6e 74 65 67 65 72 54 6f |....RtlI|ntegerTo|
|00000980| 43 68 61 72 00 00 cc cc | 60 02 50 73 4c 6f 6f 6b |Char....|`.PsLook|
|00000990| 75 70 50 72 6f 63 65 73 | 73 42 79 50 72 6f 63 65 |upProces|sByProce|
|000009a0| 73 73 49 64 00 00 cc cc | 8c 03 5a 77 51 75 65 72 |ssId....|..ZwQuer|
|000009b0| 79 4f 62 6a 65 63 74 00 | 9b 03 5a 77 53 65 74 49 |yObject.|..ZwSetI|
|000009c0| 6e 66 6f 72 6d 61 74 69 | 6f 6e 4f 62 6a 65 63 74 |nformati|onObject|
|000009d0| 00 00 57 02 50 73 43 72 | 65 61 74 65 57 69 6e 33 |..W.PsCr|eateWin3|
|000009e0| 32 50 72 6f 63 65 73 73 | 00 00 56 02 50 73 43 72 |2Process|..V.PsCr|
|000009f0| 65 61 74 65 53 79 73 74 | 65 6d 54 68 72 65 61 64 |eateSyst|emThread|
|00000a00| 00 00 64 02 50 73 52 65 | 66 65 72 65 6e 63 65 49 |..d.PsRe|ferenceI|
|00000a10| 6d 70 65 72 73 6f 6e 61 | 74 69 6f 6e 54 6f 6b 65 |mpersona|tionToke|
|00000a20| 6e 00 cc cc cc cc cc cc | 65 02 50 73 52 65 66 65 |n.......|e.PsRefe|
|00000a30| 72 65 6e 63 65 50 72 69 | 6d 61 72 79 54 6f 6b 65 |rencePri|maryToke|
|00000a40| 6e 00 cc cc cc cc cc cc | 48 03 53 65 51 75 65 72 |n.......|H.SeQuer|
|00000a50| 79 41 75 74 68 65 6e 74 | 69 63 61 74 69 6f 6e 49 |yAuthent|icationI|
|00000a60| 64 54 6f 6b 65 6e 00 00 | 84 03 5a 77 4f 70 65 6e |dToken..|..ZwOpen|
|00000a70| 54 68 72 65 61 64 54 6f | 6b 65 6e 00 80 03 5a 77 |ThreadTo|ken...Zw|
|00000a80| 4f 70 65 6e 50 72 6f 63 | 65 73 73 54 6f 6b 65 6e |OpenProc|essToken|
|00000a90| 00 00 cc cc c0 02 52 74 | 6c 46 69 6e 64 4d 65 73 |......Rt|lFindMes|
|00000aa0| 73 61 67 65 00 00 c4 02 | 52 74 6c 46 6f 72 6d 61 |sage....|RtlForma|
|00000ab0| 74 43 75 72 72 65 6e 74 | 55 73 65 72 4b 65 79 50 |tCurrent|UserKeyP|
|00000ac0| 61 74 68 00 c8 02 52 74 | 6c 46 72 65 65 55 6e 69 |ath...Rt|lFreeUni|
|00000ad0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 78 01 4b 65 |codeStri|ng..x.Ke|
|00000ae0| 49 6e 69 74 69 61 6c 69 | 7a 65 54 69 6d 65 72 00 |Initiali|zeTimer.|
|00000af0| 64 03 5a 77 43 72 65 61 | 74 65 45 76 65 6e 74 00 |d.ZwCrea|teEvent.|
|00000b00| af 01 4b 65 53 65 74 54 | 69 6d 65 72 00 00 cc cc |..KeSetT|imer....|
|00000b10| 6c 03 5a 77 44 65 76 69 | 63 65 49 6f 43 6f 6e 74 |l.ZwDevi|ceIoCont|
|00000b20| 72 6f 6c 46 69 6c 65 00 | cc cc cc cc cc cc cc cc |rolFile.|........|
|00000b30| 81 02 52 74 6c 41 72 65 | 41 6c 6c 41 63 63 65 73 |..RtlAre|AllAcces|
|00000b40| 73 65 73 47 72 61 6e 74 | 65 64 00 00 b6 01 4b 65 |sesGrant|ed....Ke|
|00000b50| 55 73 65 72 4d 6f 64 65 | 43 61 6c 6c 62 61 63 6b |UserMode|Callback|
|00000b60| 00 00 cc cc cc cc cc cc | 7f 02 52 74 6c 41 70 70 |........|..RtlApp|
|00000b70| 65 6e 64 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |endUnico|deString|
|00000b80| 54 6f 53 74 72 69 6e 67 | 00 00 cc cc cc cc cc cc |ToString|........|
|00000b90| 97 02 52 74 6c 43 6f 70 | 79 55 6e 69 63 6f 64 65 |..RtlCop|yUnicode|
|00000ba0| 53 74 72 69 6e 67 00 00 | d6 02 52 74 6c 49 6e 69 |String..|..RtlIni|
|00000bb0| 74 69 61 6c 69 7a 65 42 | 69 74 4d 61 70 00 cc cc |tializeB|itMap...|
|00000bc0| 06 03 52 74 6c 53 65 74 | 42 69 74 73 00 00 cc cc |..RtlSet|Bits....|
|00000bd0| 8a 02 52 74 6c 43 6c 65 | 61 72 42 69 74 73 00 00 |..RtlCle|arBits..|
|00000be0| 62 02 50 73 4c 6f 6f 6b | 75 70 54 68 72 65 61 64 |b.PsLook|upThread|
|00000bf0| 42 79 54 68 72 65 61 64 | 49 64 00 00 5e 00 45 78 |ByThread|Id..^.Ex|
|00000c00| 49 73 52 65 73 6f 75 72 | 63 65 41 63 71 75 69 72 |IsResour|ceAcquir|
|00000c10| 65 64 53 68 61 72 65 64 | 4c 69 74 65 00 00 3b 02 |edShared|Lite..;.|
|00000c20| 4f 62 46 69 6e 64 48 61 | 6e 64 6c 65 46 6f 72 4f |ObFindHa|ndleForO|
|00000c30| 62 6a 65 63 74 00 6e 03 | 5a 77 44 75 70 6c 69 63 |bject.n.|ZwDuplic|
|00000c40| 61 74 65 4f 62 6a 65 63 | 74 00 ff 01 4d 6d 55 6e |ateObjec|t...MmUn|
|00000c50| 6d 61 70 56 69 65 77 4f | 66 53 65 63 74 69 6f 6e |mapViewO|fSection|
|00000c60| 00 00 cc cc 40 02 4f 62 | 4f 70 65 6e 4f 62 6a 65 |....@.Ob|OpenObje|
|00000c70| 63 74 42 79 4e 61 6d 65 | 00 00 cc cc cc cc cc cc |ctByName|........|
|00000c80| 37 02 4f 62 43 68 65 63 | 6b 43 72 65 61 74 65 4f |7.ObChec|kCreateO|
|00000c90| 62 6a 65 63 74 41 63 63 | 65 73 73 00 39 02 4f 62 |bjectAcc|ess.9.Ob|
|00000ca0| 43 72 65 61 74 65 4f 62 | 6a 65 63 74 00 00 36 02 |CreateOb|ject..6.|
|00000cb0| 4f 62 41 73 73 69 67 6e | 53 65 63 75 72 69 74 79 |ObAssign|Security|
|00000cc0| 00 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000cd0| 79 02 52 74 6c 41 6c 6c | 6f 63 61 74 65 48 65 61 |y.RtlAll|ocateHea|
|00000ce0| 70 00 cc cc eb 02 52 74 | 6c 4d 61 70 47 65 6e 65 |p.....Rt|lMapGene|
|00000cf0| 72 69 63 4d 61 73 6b 00 | 9d 03 5a 77 53 65 74 49 |ricMask.|..ZwSetI|
|00000d00| 6e 66 6f 72 6d 61 74 69 | 6f 6e 54 68 72 65 61 64 |nformati|onThread|
|00000d10| 00 00 41 00 45 78 45 76 | 65 6e 74 4f 62 6a 65 63 |..A.ExEv|entObjec|
|00000d20| 74 54 79 70 65 00 cc cc | cc cc cc cc cc cc cc cc |tType...|........|
|00000d30| 46 02 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |F.ObRefe|renceObj|
|00000d40| 65 63 74 42 79 50 6f 69 | 6e 74 65 72 00 00 6c 02 |ectByPoi|nter..l.|
|00000d50| 50 73 54 65 72 6d 69 6e | 61 74 65 53 79 73 74 65 |PsTermin|ateSyste|
|00000d60| 6d 54 68 72 65 61 64 00 | c6 02 52 74 6c 46 72 65 |mThread.|..RtlFre|
|00000d70| 65 48 65 61 70 00 2f 00 | 45 78 41 63 71 75 69 72 |eHeap./.|ExAcquir|
|00000d80| 65 52 65 73 6f 75 72 63 | 65 53 68 61 72 65 64 4c |eResourc|eSharedL|
|00000d90| 69 74 65 00 51 01 4b 65 | 42 6f 6f 73 74 43 75 72 |ite.Q.Ke|BoostCur|
|00000da0| 72 65 6e 74 54 68 72 65 | 61 64 00 00 53 01 4b 65 |rentThre|ad..S.Ke|
|00000db0| 42 75 67 43 68 65 63 6b | 45 78 00 00 5d 00 45 78 |BugCheck|Ex..].Ex|
|00000dc0| 49 73 52 65 73 6f 75 72 | 63 65 41 63 71 75 69 72 |IsResour|ceAcquir|
|00000dd0| 65 64 45 78 63 6c 75 73 | 69 76 65 4c 69 74 65 00 |edExclus|iveLite.|
|00000de0| f8 01 4d 6d 53 79 73 74 | 65 6d 52 61 6e 67 65 53 |..MmSyst|emRangeS|
|00000df0| 74 61 72 74 00 00 cc cc | 73 00 45 78 57 69 6e 64 |tart....|s.ExWind|
|00000e00| 6f 77 53 74 61 74 69 6f | 6e 4f 62 6a 65 63 74 54 |owStatio|nObjectT|
|00000e10| 79 70 65 00 63 03 5a 77 | 43 72 65 61 74 65 44 69 |ype.c.Zw|CreateDi|
|00000e20| 72 65 63 74 6f 72 79 4f | 62 6a 65 63 74 00 67 00 |rectoryO|bject.g.|
|00000e30| 45 78 52 61 69 73 65 48 | 61 72 64 45 72 72 6f 72 |ExRaiseH|ardError|
|00000e40| 00 00 dd 02 52 74 6c 49 | 6e 74 65 67 65 72 54 6f |....RtlI|ntegerTo|
|00000e50| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 0e 01 |UnicodeS|tring...|
|00000e60| 49 6f 47 65 74 44 65 76 | 69 63 65 4f 62 6a 65 63 |IoGetDev|iceObjec|
|00000e70| 74 50 6f 69 6e 74 65 72 | 00 00 cc cc 9d 02 52 74 |tPointer|......Rt|
|00000e80| 6c 43 72 65 61 74 65 55 | 6e 69 63 6f 64 65 53 74 |lCreateU|nicodeSt|
|00000e90| 72 69 6e 67 00 00 cc cc | 2a 03 52 74 6c 57 72 69 |ring....|*.RtlWri|
|00000ea0| 74 65 52 65 67 69 73 74 | 72 79 56 61 6c 75 65 00 |teRegist|ryValue.|
|00000eb0| a0 03 5a 77 53 65 74 56 | 61 6c 75 65 4b 65 79 00 |..ZwSetV|alueKey.|
|00000ec0| f5 03 77 63 73 73 74 72 | 00 00 86 01 4b 65 50 75 |..wcsstr|....KePu|
|00000ed0| 6c 73 65 45 76 65 6e 74 | 00 00 5c 01 4b 65 45 6e |lseEvent|..\.KeEn|
|00000ee0| 74 65 72 43 72 69 74 69 | 63 61 6c 52 65 67 69 6f |terCriti|calRegio|
|00000ef0| 6e 00 cc cc cc cc cc cc | f1 03 77 63 73 6e 63 6d |n.......|..wcsncm|
|00000f00| 70 00 cc cc cc cc cc cc | 0c 01 49 6f 47 65 74 43 |p.......|..IoGetC|
|00000f10| 6f 6e 66 69 67 75 72 61 | 74 69 6f 6e 49 6e 66 6f |onfigura|tionInfo|
|00000f20| 72 6d 61 74 69 6f 6e 00 | 6e 00 45 78 52 65 6c 65 |rmation.|n.ExRele|
|00000f30| 61 73 65 52 65 73 6f 75 | 72 63 65 4c 69 74 65 00 |aseResou|rceLite.|
|00000f40| 81 01 4b 65 4c 65 61 76 | 65 43 72 69 74 69 63 61 |..KeLeav|eCritica|
|00000f50| 6c 52 65 67 69 6f 6e 00 | cc cc cc cc cc cc cc cc |lRegion.|........|
|00000f60| 82 02 52 74 6c 41 72 65 | 41 6e 79 41 63 63 65 73 |..RtlAre|AnyAcces|
|00000f70| 73 65 73 47 72 61 6e 74 | 65 64 00 00 47 01 4b 64 |sesGrant|ed..G.Kd|
|00000f80| 44 65 62 75 67 67 65 72 | 45 6e 61 62 6c 65 64 00 |Debugger|Enabled.|
|00000f90| 28 00 44 62 67 42 72 65 | 61 6b 50 6f 69 6e 74 57 |(.DbgBre|akPointW|
|00000fa0| 69 74 68 53 74 61 74 75 | 73 00 68 00 45 78 52 61 |ithStatu|s.h.ExRa|
|00000fb0| 69 73 65 53 74 61 74 75 | 73 00 cc cc 3e 00 45 78 |iseStatu|s...>.Ex|
|00000fc0| 44 65 73 6b 74 6f 70 4f | 62 6a 65 63 74 54 79 70 |DesktopO|bjectTyp|
|00000fd0| 65 00 36 03 53 65 43 61 | 70 74 75 72 65 53 65 63 |e.6.SeCa|ptureSec|
|00000fe0| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 00 |urityDes|criptor.|
|00000ff0| 4b 03 53 65 52 65 6c 65 | 61 73 65 53 65 63 75 72 |K.SeRele|aseSecur|
|00001000| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 35 00 |ityDescr|iptor.5.|
|00001010| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|00001020| 74 68 51 75 6f 74 61 54 | 61 67 00 00 98 03 5a 77 |thQuotaT|ag....Zw|
|00001030| 53 65 74 44 65 66 61 75 | 6c 74 4c 6f 63 61 6c 65 |SetDefau|ltLocale|
|00001040| 00 00 4f 01 4b 65 41 64 | 64 53 79 73 74 65 6d 53 |..O.KeAd|dSystemS|
|00001050| 65 72 76 69 63 65 54 61 | 62 6c 65 00 58 02 50 73 |erviceTa|ble.X.Ps|
|00001060| 45 73 74 61 62 6c 69 73 | 68 57 69 6e 33 32 43 61 |Establis|hWin32Ca|
|00001070| 6c 6c 6f 75 74 73 00 00 | cc cc cc cc cc cc cc cc |llouts..|........|
|00001080| ef 01 4d 6d 50 61 67 65 | 45 6e 74 69 72 65 44 72 |..MmPage|EntireDr|
|00001090| 69 76 65 72 00 00 da 03 | 73 74 72 63 68 72 00 00 |iver....|strchr..|
|000010a0| e0 03 73 74 72 6e 63 70 | 79 00 df 03 73 74 72 6e |..strncp|y...strn|
|000010b0| 63 6d 70 00 cc cc cc cc | ea 03 77 63 73 63 61 74 |cmp.....|..wcscat|
|000010c0| 00 00 ec 03 77 63 73 63 | 6d 70 00 00 1b 03 52 74 |....wcsc|mp....Rt|
|000010d0| 6c 55 6e 69 63 6f 64 65 | 54 6f 4d 75 6c 74 69 42 |lUnicode|ToMultiB|
|000010e0| 79 74 65 53 69 7a 65 00 | ae 02 52 74 6c 45 6e 6c |yteSize.|..RtlEnl|
|000010f0| 61 72 67 65 64 55 6e 73 | 69 67 6e 65 64 4d 75 6c |argedUns|ignedMul|
|00001100| 74 69 70 6c 79 00 df 02 | 52 74 6c 4c 61 72 67 65 |tiply...|RtlLarge|
|00001110| 49 6e 74 65 67 65 72 41 | 64 64 00 00 ad 02 52 74 |IntegerA|dd....Rt|
|00001120| 6c 45 6e 6c 61 72 67 65 | 64 55 6e 73 69 67 6e 65 |lEnlarge|dUnsigne|
|00001130| 64 44 69 76 69 64 65 00 | b6 02 52 74 6c 45 78 74 |dDivide.|..RtlExt|
|00001140| 65 6e 64 65 64 4c 61 72 | 67 65 49 6e 74 65 67 65 |endedLar|geIntege|
|00001150| 72 44 69 76 69 64 65 00 | 1f 03 52 74 6c 55 70 63 |rDivide.|..RtlUpc|
|00001160| 61 73 65 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |aseUnico|deString|
|00001170| 00 00 fd 02 52 74 6c 51 | 75 65 72 79 52 65 67 69 |....RtlQ|ueryRegi|
|00001180| 73 74 72 79 56 61 6c 75 | 65 73 00 00 b4 02 52 74 |stryValu|es....Rt|
|00001190| 6c 45 71 75 61 6c 55 6e | 69 63 6f 64 65 53 74 72 |lEqualUn|icodeStr|
|000011a0| 69 6e 67 00 9e 03 5a 77 | 53 65 74 53 79 73 74 65 |ing...Zw|SetSyste|
|000011b0| 6d 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 00 00 cc cc |mInforma|tion....|
|000011c0| 41 02 4f 62 4f 70 65 6e | 4f 62 6a 65 63 74 42 79 |A.ObOpen|ObjectBy|
|000011d0| 50 6f 69 6e 74 65 72 00 | 79 03 5a 77 4d 61 70 56 |Pointer.|y.ZwMapV|
|000011e0| 69 65 77 4f 66 53 65 63 | 74 69 6f 6e 00 00 cc cc |iewOfSec|tion....|
|000011f0| f2 03 77 63 73 6e 63 70 | 79 00 cc cc 1a 02 4e 74 |..wcsncp|y.....Nt|
|00001200| 47 6c 6f 62 61 6c 46 6c | 61 67 00 00 67 03 5a 77 |GlobalFl|ag..g.Zw|
|00001210| 43 72 65 61 74 65 53 65 | 63 74 69 6f 6e 00 9b 01 |CreateSe|ction...|
|00001220| 4b 65 52 65 73 65 74 45 | 76 65 6e 74 00 00 cc cc |KeResetE|vent....|
|00001230| 50 01 4b 65 41 74 74 61 | 63 68 50 72 6f 63 65 73 |P.KeAtta|chProces|
|00001240| 73 00 5a 01 4b 65 44 65 | 74 61 63 68 50 72 6f 63 |s.Z.KeDe|tachProc|
|00001250| 65 73 73 00 7f 03 5a 77 | 4f 70 65 6e 50 72 6f 63 |ess...Zw|OpenProc|
|00001260| 65 73 73 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ess.....|........|
|00001270| d6 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 43 6f 6d |..Interl|ockedCom|
|00001280| 70 61 72 65 45 78 63 68 | 61 6e 67 65 00 00 f3 01 |pareExch|ange....|
|00001290| 4d 6d 53 65 63 74 69 6f | 6e 4f 62 6a 65 63 74 54 |MmSectio|nObjectT|
|000012a0| 79 70 65 00 ee 01 4d 6d | 4d 61 70 56 69 65 77 4f |ype...Mm|MapViewO|
|000012b0| 66 53 65 63 74 69 6f 6e | 00 00 cc cc a4 03 5a 77 |fSection|......Zw|
|000012c0| 55 6e 6d 61 70 56 69 65 | 77 4f 66 53 65 63 74 69 |UnmapVie|wOfSecti|
|000012d0| 6f 6e 00 00 b9 02 52 74 | 6c 46 69 6c 6c 4d 65 6d |on....Rt|lFillMem|
|000012e0| 6f 72 79 55 6c 6f 6e 67 | 00 00 b7 01 4b 65 57 61 |oryUlong|....KeWa|
|000012f0| 69 74 46 6f 72 4d 75 6c | 74 69 70 6c 65 4f 62 6a |itForMul|tipleObj|
|00001300| 65 63 74 73 00 00 cc cc | cc cc cc cc cc cc cc cc |ects....|........|
|00001310| 58 01 4b 65 44 65 6c 61 | 79 45 78 65 63 75 74 69 |X.KeDela|yExecuti|
|00001320| 6f 6e 54 68 72 65 61 64 | 00 00 3a 03 53 65 43 72 |onThread|..:.SeCr|
|00001330| 65 61 74 65 43 6c 69 65 | 6e 74 53 65 63 75 72 69 |eateClie|ntSecuri|
|00001340| 74 79 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ty......|........|
|00001350| 40 03 53 65 49 6d 70 65 | 72 73 6f 6e 61 74 65 43 |@.SeImpe|rsonateC|
|00001360| 6c 69 65 6e 74 00 67 02 | 50 73 52 65 76 65 72 74 |lient.g.|PsRevert|
|00001370| 54 6f 53 65 6c 66 00 00 | 52 03 53 65 54 6f 6b 65 |ToSelf..|R.SeToke|
|00001380| 6e 54 79 70 65 00 cc cc | da 00 49 6e 74 65 72 6c |nType...|..Interl|
|00001390| 6f 63 6b 65 64 49 6e 63 | 72 65 6d 65 6e 74 00 00 |ockedInc|rement..|
|000013a0| a3 01 4b 65 53 65 74 45 | 76 65 6e 74 00 00 b9 01 |..KeSetE|vent....|
|000013b0| 4b 65 57 61 69 74 46 6f | 72 53 69 6e 67 6c 65 4f |KeWaitFo|rSingleO|
|000013c0| 62 6a 65 63 74 00 44 02 | 4f 62 52 65 66 65 72 65 |bject.D.|ObRefere|
|000013d0| 6e 63 65 4f 62 6a 65 63 | 74 42 79 48 61 6e 64 6c |nceObjec|tByHandl|
|000013e0| 65 00 d5 02 52 74 6c 49 | 6e 69 74 55 6e 69 63 6f |e...RtlI|nitUnico|
|000013f0| 64 65 53 74 72 69 6e 67 | 00 00 cc cc 70 00 45 78 |deString|....p.Ex|
|00001400| 53 79 73 74 65 6d 45 78 | 63 65 70 74 69 6f 6e 46 |SystemEx|ceptionF|
|00001410| 69 6c 74 65 72 00 cc cc | 71 01 4b 65 49 6e 69 74 |ilter...|q.KeInit|
|00001420| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 93 03 5a 77 |ializeEv|ent...Zw|
|00001430| 52 65 61 64 46 69 6c 65 | 00 00 d3 02 52 74 6c 49 |ReadFile|....RtlI|
|00001440| 6e 69 74 43 6f 64 65 50 | 61 67 65 54 61 62 6c 65 |nitCodeP|ageTable|
|00001450| 00 00 9e 02 52 74 6c 43 | 75 73 74 6f 6d 43 50 54 |....RtlC|ustomCPT|
|00001460| 6f 55 6e 69 63 6f 64 65 | 4e 00 19 03 52 74 6c 55 |oUnicode|N...RtlU|
|00001470| 6e 69 63 6f 64 65 54 6f | 43 75 73 74 6f 6d 43 50 |nicodeTo|CustomCP|
|00001480| 4e 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |N.......|........|
|00001490| 91 03 5a 77 51 75 65 72 | 79 56 61 6c 75 65 4b 65 |..ZwQuer|yValueKe|
|000014a0| 79 00 cc cc e4 03 73 77 | 70 72 69 6e 74 66 00 00 |y.....sw|printf..|
|000014b0| 16 03 52 74 6c 55 6e 69 | 63 6f 64 65 53 74 72 69 |..RtlUni|codeStri|
|000014c0| 6e 67 54 6f 49 6e 74 65 | 67 65 72 00 c9 01 4c 64 |ngToInte|ger...Ld|
|000014d0| 72 46 69 6e 64 52 65 73 | 6f 75 72 63 65 5f 55 00 |rFindRes|ource_U.|
|000014e0| c6 01 4c 64 72 41 63 63 | 65 73 73 52 65 73 6f 75 |..LdrAcc|essResou|
|000014f0| 72 63 65 00 c1 03 5f 77 | 63 73 69 63 6d 70 00 00 |rce..._w|csicmp..|
|00001500| c3 03 5f 77 63 73 6e 69 | 63 6d 70 00 80 02 52 74 |.._wcsni|cmp...Rt|
|00001510| 6c 41 70 70 65 6e 64 55 | 6e 69 63 6f 64 65 54 6f |lAppendU|nicodeTo|
|00001520| 53 74 72 69 6e 67 00 00 | c8 01 4c 64 72 46 69 6e |String..|..LdrFin|
|00001530| 64 52 65 73 6f 75 72 63 | 65 44 69 72 65 63 74 6f |dResourc|eDirecto|
|00001540| 72 79 5f 55 00 00 cd 02 | 52 74 6c 47 65 74 44 65 |ry_U....|RtlGetDe|
|00001550| 66 61 75 6c 74 43 6f 64 | 65 50 61 67 65 00 fe 01 |faultCod|ePage...|
|00001560| 4d 6d 55 6e 6d 61 70 56 | 69 65 77 49 6e 53 79 73 |MmUnmapV|iewInSys|
|00001570| 74 65 6d 53 70 61 63 65 | 00 00 65 03 5a 77 43 72 |temSpace|..e.ZwCr|
|00001580| 65 61 74 65 46 69 6c 65 | 00 00 cc cc 7d 03 5a 77 |eateFile|....}.Zw|
|00001590| 4f 70 65 6e 46 69 6c 65 | 00 00 88 03 5a 77 51 75 |OpenFile|....ZwQu|
|000015a0| 65 72 79 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 46 69 |eryInfor|mationFi|
|000015b0| 6c 65 00 00 9a 03 5a 77 | 53 65 74 49 6e 66 6f 72 |le....Zw|SetInfor|
|000015c0| 6d 61 74 69 6f 6e 46 69 | 6c 65 00 00 cc cc cc cc |mationFi|le......|
|000015d0| d7 01 4d 6d 43 72 65 61 | 74 65 53 65 63 74 69 6f |..MmCrea|teSectio|
|000015e0| 6e 00 ed 01 4d 6d 4d 61 | 70 56 69 65 77 49 6e 53 |n...MmMa|pViewInS|
|000015f0| 79 73 74 65 6d 53 70 61 | 63 65 00 00 49 02 4f 62 |ystemSpa|ce..I.Ob|
|00001600| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|00001610| 63 74 00 00 87 01 4b 65 | 51 75 65 72 79 53 79 73 |ct....Ke|QuerySys|
|00001620| 74 65 6d 54 69 6d 65 00 | 71 00 45 78 53 79 73 74 |temTime.|q.ExSyst|
|00001630| 65 6d 54 69 6d 65 54 6f | 4c 6f 63 61 6c 54 69 6d |emTimeTo|LocalTim|
|00001640| 65 00 12 03 52 74 6c 54 | 69 6d 65 54 6f 54 69 6d |e...RtlT|imeToTim|
|00001650| 65 46 69 65 6c 64 73 00 | ed 02 52 74 6c 4d 75 6c |eFields.|..RtlMul|
|00001660| 74 69 42 79 74 65 54 6f | 55 6e 69 63 6f 64 65 4e |tiByteTo|UnicodeN|
|00001670| 00 00 7e 03 5a 77 4f 70 | 65 6e 4b 65 79 00 cc cc |..~.ZwOp|enKey...|
|00001680| 8b 03 5a 77 51 75 65 72 | 79 4b 65 79 00 00 71 03 |..ZwQuer|yKey..q.|
|00001690| 5a 77 45 6e 75 6d 65 72 | 61 74 65 56 61 6c 75 65 |ZwEnumer|ateValue|
|000016a0| 4b 65 79 00 cc cc cc cc | ed 03 77 63 73 63 70 79 |Key.....|..wcscpy|
|000016b0| 00 00 60 03 5a 77 43 6c | 6f 73 65 00 52 02 50 72 |..`.ZwCl|ose.R.Pr|
|000016c0| 6f 62 65 46 6f 72 57 72 | 69 74 65 00 ef 03 77 63 |obeForWr|ite...wc|
|000016d0| 73 6c 65 6e 00 00 d3 03 | 6d 65 6d 6d 6f 76 65 00 |slen....|memmove.|
|000016e0| df 01 4d 6d 47 72 6f 77 | 4b 65 72 6e 65 6c 53 74 |..MmGrow|KernelSt|
|000016f0| 61 63 6b 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ack.....|........|
|00001700| a7 01 4b 65 53 65 74 4b | 65 72 6e 65 6c 53 74 61 |..KeSetK|ernelSta|
|00001710| 63 6b 53 77 61 70 45 6e | 61 62 6c 65 00 00 cc cc |ckSwapEn|able....|
|00001720| 9e 01 4b 65 53 61 76 65 | 46 6c 6f 61 74 69 6e 67 |..KeSave|Floating|
|00001730| 50 6f 69 6e 74 53 74 61 | 74 65 00 00 9c 01 4b 65 |PointSta|te....Ke|
|00001740| 52 65 73 74 6f 72 65 46 | 6c 6f 61 74 69 6e 67 50 |RestoreF|loatingP|
|00001750| 6f 69 6e 74 53 74 61 74 | 65 00 cc cc 1a 03 52 74 |ointStat|e.....Rt|
|00001760| 6c 55 6e 69 63 6f 64 65 | 54 6f 4d 75 6c 74 69 42 |lUnicode|ToMultiB|
|00001770| 79 74 65 4e 00 00 65 00 | 45 78 52 61 69 73 65 44 |yteN..e.|ExRaiseD|
|00001780| 61 74 61 74 79 70 65 4d | 69 73 61 6c 69 67 6e 6d |atatypeM|isalignm|
|00001790| 65 6e 74 00 e8 00 49 6f | 42 75 69 6c 64 44 65 76 |ent...Io|BuildDev|
|000017a0| 69 63 65 49 6f 43 6f 6e | 74 72 6f 6c 52 65 71 75 |iceIoCon|trolRequ|
|000017b0| 65 73 74 00 45 01 49 6f | 66 43 61 6c 6c 44 72 69 |est.E.Io|fCallDri|
|000017c0| 76 65 72 00 cc cc cc cc | 00 02 4d 6d 55 6e 73 65 |ver.....|..MmUnse|
|000017d0| 63 75 72 65 56 69 72 74 | 75 61 6c 4d 65 6d 6f 72 |cureVirt|ualMemor|
|000017e0| 79 00 5e 03 5a 77 41 6c | 6c 6f 63 61 74 65 56 69 |y.^.ZwAl|locateVi|
|000017f0| 72 74 75 61 6c 4d 65 6d | 6f 72 79 00 f4 01 4d 6d |rtualMem|ory...Mm|
|00001800| 53 65 63 75 72 65 56 69 | 72 74 75 61 6c 4d 65 6d |SecureVi|rtualMem|
|00001810| 6f 72 79 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ory.....|........|
|00001820| 74 03 5a 77 46 72 65 65 | 56 69 72 74 75 61 6c 4d |t.ZwFree|VirtualM|
|00001830| 65 6d 6f 72 79 00 cc cc | 01 02 4d 6d 55 73 65 72 |emory...|..MmUser|
|00001840| 50 72 6f 62 65 41 64 64 | 72 65 73 73 00 00 64 00 |ProbeAdd|ress..d.|
|00001850| 45 78 52 61 69 73 65 41 | 63 63 65 73 73 56 69 6f |ExRaiseA|ccessVio|
|00001860| 6c 61 74 69 6f 6e 00 00 | e9 03 76 73 70 72 69 6e |lation..|..vsprin|
|00001870| 74 66 00 00 2a 00 44 62 | 67 50 72 69 6e 74 00 00 |tf..*.Db|gPrint..|
|00001880| 2e 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |..ExAcqu|ireResou|
|00001890| 72 63 65 45 78 63 6c 75 | 73 69 76 65 4c 69 74 65 |rceExclu|siveLite|
|000018a0| 00 00 3d 00 45 78 44 65 | 6c 65 74 65 52 65 73 6f |..=.ExDe|leteReso|
|000018b0| 75 72 63 65 4c 69 74 65 | 00 00 cc cc cc cc cc cc |urceLite|........|
|000018c0| 48 41 4c 2e 64 6c 6c 00 | 01 00 45 78 52 65 6c 65 |HAL.dll.|..ExRele|
|000018d0| 61 73 65 46 61 73 74 4d | 75 74 65 78 00 00 44 00 |aseFastM|utex..D.|
|000018e0| 4b 65 51 75 65 72 79 50 | 65 72 66 6f 72 6d 61 6e |KeQueryP|erforman|
|000018f0| 63 65 43 6f 75 6e 74 65 | 72 00 cc cc cc cc cc cc |ceCounte|r.......|
|00001900| 00 00 45 78 41 63 71 75 | 69 72 65 46 61 73 74 4d |..ExAcqu|ireFastM|
|00001910| 75 74 65 78 00 00 22 00 | 48 61 6c 52 65 71 75 65 |utex..".|HalReque|
|00001920| 73 74 53 6f 66 74 77 61 | 72 65 49 6e 74 65 72 72 |stSoftwa|reInterr|
|00001930| 75 70 74 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |upt.....|........|
+--------+-------------------------+-------------------------+--------+--------+