/ PC World Komputer 2010 April / PCWorld0410.iso / WindowsServerTrial / server.iso / sources / install.wim / 5 / Windows / System32 / drivers / rdpdr.sys / INIT

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 90 90 90 90 90 8b ff 55 | 8b ec 83 ec 24 8b 4d 08 |.......U|....$.M.|
|00000010| 33 c0 56 8b 35 74 f0 02 | 00 57 89 45 e0 89 45 ec |3.V.5t..|.W.E..E.|
|00000020| 89 45 f0 8d 45 dc 50 bf | 19 00 02 00 57 8d 45 08 |.E..E.P.|....W.E.|
|00000030| 50 c7 45 dc 18 00 00 00 | c7 45 e8 40 02 00 00 89 |P.E.....|.E.@....|
|00000040| 4d e4 ff d6 85 c0 7c 5b | 68 dc 29 09 00 8d 45 f4 |M.....|[|h.)...E.|
|00000050| 50 ff 15 18 f0 02 00 8b | 45 08 83 65 ec 00 83 65 |P.......|E..e...e|
|00000060| f0 00 89 45 e0 8d 45 f4 | 89 45 e4 8d 45 dc 50 57 |...E..E.|.E..E.PW|
|00000070| 8d 45 fc 50 c7 45 dc 18 | 00 00 00 c7 45 e8 40 02 |.E.P.E..|....E.@.|
|00000080| 00 00 ff d6 85 c0 7d 0b | ff 75 08 ff 15 6c f0 02 |......}.|.u...l..|
|00000090| 00 eb 10 ff 75 fc 8b 35 | 6c f0 02 00 ff d6 ff 75 |....u..5|l......u|
|000000a0| 08 ff d6 5f 5e c9 c2 04 | 00 90 90 90 90 90 8b ff |..._^...|........|
|000000b0| 55 8b ec a1 e8 24 03 00 | 85 c0 b9 4e e6 40 bb 74 |U....$..|...N.@.t|
|000000c0| 04 3b c1 75 1a a1 04 f2 | 02 00 8b 00 35 e8 24 03 |.;.u....|....5.$.|
|000000d0| 00 a3 e8 24 03 00 75 07 | 8b c1 a3 e8 24 03 00 f7 |...$..u.|....$...|
|000000e0| d0 a3 ec 24 03 00 5d 90 | 90 90 90 90 8b ff 55 8b |...$..].|......U.|
|000000f0| ec 83 ec 44 53 33 db 39 | 1d 68 3c 07 00 56 57 75 |...DS3.9|.h<..VWu|
|00000100| 05 e8 52 cd fe ff 83 3d | 68 3c 07 00 01 75 0d 8b |..R....=|h<...u..|
|00000110| 45 08 c7 80 94 00 00 00 | 72 19 08 00 8b 75 0c 56 |E.......|r....u.V|
|00000120| ff 75 08 e8 58 09 00 00 | 8b f8 3b fb 7d 49 57 68 |.u..X...|..;.}IWh|
|00000130| ae 29 09 00 68 00 01 00 | 00 be 18 45 07 00 56 e8 |.)..h...|...E..V.|
|00000140| 83 34 f8 ff 83 c4 10 68 | 34 f7 02 00 68 d8 f7 02 |.4.....h|4...h...|
|00000150| 00 68 2f 01 00 00 6a 2a | 56 6a 03 e8 18 30 f8 ff |.h/...j*|Vj...0..|
|00000160| 68 90 29 09 00 e8 31 8b | f9 ff 59 e8 20 8b f9 ff |h.)...1.|..Y. ...|
|00000170| 8b c7 e9 95 01 00 00 0f | b7 06 53 33 c9 6a 02 40 |........|..S3.j.@|
|00000180| 5a f7 e2 0f 90 c1 f7 d9 | 0b c8 51 e8 ae 3f f8 ff |Z.......|..Q..?..|
|00000190| 8b f8 3b fb 59 59 75 43 | 56 68 68 29 09 00 68 00 |..;.YYuC|Vhh)..h.|
|000001a0| 01 00 00 be 18 45 07 00 | 56 e8 19 34 f8 ff 83 c4 |.....E..|V..4....|
|000001b0| 10 68 34 f7 02 00 68 d8 | f7 02 00 68 3e 01 00 00 |.h4...h.|...h>...|
|000001c0| 6a 2a 56 6a 03 e8 ae 2f | f8 ff 68 4a 29 09 00 e8 |j*Vj.../|..hJ)...|
|000001d0| c7 8a f9 ff bf 9a 00 00 | c0 eb 8f 0f b7 06 40 40 |........|......@@|
|000001e0| 50 53 57 e8 07 2a f8 ff | 0f b7 06 50 ff 76 04 57 |PSW..*..|...P.v.W|
|000001f0| ff 15 94 f0 02 00 66 8b | 06 66 a3 70 3c 07 00 66 |......f.|.f.p<..f|
|00000200| 8b 06 66 83 c0 02 83 c4 | 18 66 a3 72 3c 07 00 89 |..f.....|.f.r<...|
|00000210| 3d 74 3c 07 00 e8 d7 50 | f8 ff 68 9c 3c 07 00 ff |=t<....P|..h.<...|
|00000220| 15 b8 f0 02 00 8b 35 2c | f0 02 00 33 c0 40 53 50 |......5,|...3.@SP|
|00000230| 68 84 3c 07 00 a3 78 3c | 07 00 89 1d 7c 3c 07 00 |h.<...x<|....|<..|
|00000240| 89 1d 80 3c 07 00 ff d6 | 53 53 68 18 46 07 00 ff |...<....|SSh.F...|
|00000250| d6 e8 73 5d f8 ff 85 c0 | be 18 45 07 00 bb 34 f7 |..s]....|..E...4.|
|00000260| 02 00 bf d8 f7 02 00 75 | 07 68 2c 29 09 00 eb 50 |.......u|.h,)...P|
|00000270| 68 54 4f 42 4a 6a 68 6a | 00 ff 15 00 f4 02 00 85 |hTOBJjhj|........|
|00000280| c0 74 09 8b c8 e8 af 5c | f8 ff eb 02 33 c0 85 c0 |.t.....\|....3...|
|00000290| a3 10 3e 07 00 75 7c 68 | 0a 29 09 00 68 00 01 00 |..>..u|h|.)..h...|
|000002a0| 00 56 e8 20 33 f8 ff 83 | c4 0c 53 57 68 73 01 00 |.V. 3...|..SWhs..|
|000002b0| 00 6a 2a 56 6a 03 e8 bd | 2e f8 ff 68 ec 28 09 00 |.j*Vj...|...h.(..|
|000002c0| c7 45 0c 9a 00 00 c0 e8 | cf 89 f9 ff 59 e8 be 89 |.E......|....Y...|
|000002d0| f9 ff ff 75 0c 68 ce 28 | 09 00 68 00 01 00 00 56 |...u.h.(|..h....V|
|000002e0| e8 e2 32 f8 ff 83 c4 10 | 53 57 68 8e 01 00 00 6a |..2.....|SWh....j|
|000002f0| 2a 56 6a 03 e8 7f 2e f8 | ff 68 b0 28 09 00 e8 98 |*Vj.....|.h.(....|
|00000300| 89 f9 ff 59 e8 87 89 f9 | ff 8b 45 0c 5f 5e 5b c9 |...Y....|..E._^[.|
|00000310| c2 08 00 68 0c 3e 07 00 | ff 75 08 e8 bd 5d f8 ff |...h.>..|.u...]..|
|00000320| 85 c0 89 45 0c 7c ab 8b | 35 18 f0 02 00 68 8c 24 |...E.|..|5....h.$|
|00000330| 03 00 8d 45 ec 50 ff d6 | 68 08 3e 07 00 33 ff 57 |...E.P..|h.>..3.W|
|00000340| 57 6a 14 8d 45 ec 50 57 | ff 75 08 ff 15 b4 f0 02 |Wj..E.PW|.u......|
|00000350| 00 8b d8 3b df 0f 8c aa | 02 00 00 68 70 24 03 00 |...;....|...hp$..|
|00000360| 8d 45 e4 50 ff d6 6a 10 | 6a 14 57 8d 45 e4 50 6a |.E.P..j.|j.W.E.Pj|
|00000370| 12 68 a0 3c 07 00 ff 75 | 08 68 04 3e 07 00 e8 d7 |.h.<...u|.h.>....|
|00000380| e6 fe ff 3b c7 89 45 0c | 0f 8c 74 02 00 00 be d0 |...;..E.|..t.....|
|00000390| 3d 07 00 56 89 7d fc c6 | 45 f8 00 e8 77 4c f8 ff |=..V.}..|E...wL..|
|000003a0| e8 b3 ca fe ff 89 35 00 | 20 03 00 ff 35 04 3e 07 |......5.| ...5.>.|
|000003b0| 00 89 3d e8 3d 07 00 e8 | 56 e0 fe ff 8d 45 f8 50 |..=.=...|V....E.P|
|000003c0| 8d 45 fc 50 ff 35 04 3e | 07 00 ff 15 a0 f0 02 00 |.E.P.5.>|........|
|000003d0| 85 c0 7c 58 ff 75 fc 6a | 04 ff 35 08 3e 07 00 e8 |..|X.u.j|..5.>...|
|000003e0| bb 57 f8 ff 85 c0 be 18 | 45 07 00 bb 34 f7 02 00 |.W......|E...4...|
|000003f0| bf d8 f7 02 00 7d 27 ff | 75 0c 68 82 28 09 00 68 |.....}'.|u.h.(..h|
|00000400| 00 01 00 00 56 e8 bd 31 | f8 ff 83 c4 10 53 57 68 |....V..1|.....SWh|
|00000410| c7 01 00 00 6a 2a 56 6a | 03 e8 5a 2d f8 ff ff 75 |....j*Vj|..Z-...u|
|00000420| f8 ff 75 fc ff 15 8c f0 | 02 00 eb 36 ff 75 0c be |..u.....|...6.u..|
|00000430| 18 45 07 00 68 5e 28 09 | 00 68 00 01 00 00 56 e8 |.E..h^(.|.h....V.|
|00000440| 83 31 f8 ff 83 c4 10 bb | 34 f7 02 00 53 bf d8 f7 |.1......|4...S...|
|00000450| 02 00 57 68 cf 01 00 00 | 6a 2a 56 6a 03 e8 16 2d |..Wh....|j*Vj...-|
|00000460| f8 ff 8d 45 d0 50 ff 35 | 04 3e 07 00 c7 45 d0 66 |...E.P.5|.>...E.f|
|00000470| 34 96 1a c7 45 d4 b9 aa | f1 5c c7 45 d8 19 30 12 |4...E...|.\.E..0.|
|00000480| f8 c7 45 dc 95 ce 48 74 | c7 45 e0 a0 fd 4e 30 e8 |..E...Ht|.E...N0.|
|00000490| 01 55 f8 ff 8d 45 bc 50 | ff 35 04 3e 07 00 c7 45 |.U...E.P|.5.>...E|
|000004a0| bc c9 e7 88 9f c7 45 c0 | 19 8f f1 71 c7 45 c4 5d |......E.|...q.E.]|
|000004b0| cb 77 9c c7 45 c8 14 dc | 07 f9 c7 45 cc 47 1d 77 |.w..E...|...E.G.w|
|000004c0| 51 e8 cf 54 f8 ff e8 e5 | 51 f8 ff 85 c0 89 45 0c |Q..T....|Q.....E.|
|000004d0| 7c 0a e8 2d 4c f8 ff 89 | 45 0c eb 35 50 68 30 28 ||..-L...|E..5Ph0(|
|000004e0| 09 00 68 00 01 00 00 56 | e8 da 30 f8 ff 83 c4 10 |..h....V|..0.....|
|000004f0| 53 57 68 ff 01 00 00 6a | 2a 56 6a 03 e8 77 2c f8 |SWh....j|*Vj..w,.|
|00000500| ff 68 12 28 09 00 e8 90 | 87 f9 ff 59 e8 7f 87 f9 |.h.(....|...Y....|
|00000510| ff ff 35 04 3e 07 00 ff | 35 0c 20 03 00 6a 01 e8 |..5.>...|5. ..j..|
|00000520| 33 50 f8 ff 85 c0 a3 00 | 3e 07 00 75 36 68 e8 27 |3P......|>..u6h.'|
|00000530| 09 00 68 00 01 00 00 56 | e8 8a 30 f8 ff 83 c4 0c |..h....V|..0.....|
|00000540| 53 57 68 0d 02 00 00 6a | 2a 56 6a 03 e8 27 2c f8 |SWh....j|*Vj..',.|
|00000550| ff 68 ca 27 09 00 e8 40 | 87 f9 ff 59 c7 45 0c 9a |.h.'...@|...Y.E..|
|00000560| 00 00 c0 83 7d 0c 00 7c | 2e 8b 45 08 8b 48 18 c7 |....}..||..E..H..|
|00000570| 40 34 37 be 01 00 c7 41 | 04 aa 7b 01 00 8d 78 38 |@47....A|..{...x8|
|00000580| 6a 1c 59 b8 4a 11 01 00 | f3 ab ff 15 b0 f0 02 00 |j.Y.J...|........|
|00000590| a3 cc 3d 07 00 eb 1a 68 | ac 27 09 00 e8 fa 86 f9 |..=....h|.'......|
|000005a0| ff 59 e8 e9 86 f9 ff 6a | 01 ff 75 08 e8 73 97 f8 |.Y.....j|..u..s..|
|000005b0| ff 6a 04 8d 45 f4 50 68 | 8e 27 09 00 68 e0 26 09 |.j..E.Ph|.'..h.&.|
|000005c0| 00 e8 0f 50 f8 ff 85 c0 | 7c 22 8b 45 f4 6a ff 99 |...P....||".E.j..|
|000005d0| 68 80 69 67 ff 52 50 e8 | ca 86 f9 ff a3 c0 3d 07 |h.ig.RP.|......=.|
|000005e0| 00 89 15 c4 3d 07 00 e9 | 1d fd ff ff 83 0d c4 3d |....=...|.......=|
|000005f0| 07 00 ff c7 05 c0 3d 07 | 00 00 a2 2f 4d e9 07 fd |......=.|.../M...|
|00000600| ff ff 8b 5d 0c 53 68 c0 | 26 09 00 68 00 01 00 00 |...].Sh.|&..h....|
|00000610| be 18 45 07 00 56 e8 ac | 2f f8 ff 83 c4 10 68 34 |..E..V..|/.....h4|
|00000620| f7 02 00 68 d8 f7 02 00 | 68 ea 01 00 00 6a 2a 56 |...h....|h....j*V|
|00000630| 6a 03 e8 41 2b f8 ff 68 | 64 26 09 00 e8 5a 86 f9 |j..A+..h|d&...Z..|
|00000640| ff 59 e8 49 86 f9 ff a1 | 08 3e 07 00 3b c7 74 0d |.Y.I....|.>..;.t.|
|00000650| 50 ff 15 7c f0 02 00 89 | 3d 08 3e 07 00 8b c3 e9 |P..|....|=.>.....|
|00000660| a8 fc ff ff 72 64 70 64 | 72 2e 73 79 73 20 65 72 |....rdpd|r.sys er|
|00000670| 72 6f 72 69 6e 67 20 6f | 75 74 20 28 23 36 29 0a |roring o|ut (#6).|
|00000680| 00 90 90 90 90 90 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|00000690| 90 90 90 90 90 90 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|000006a0| 90 90 90 90 90 90 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|000006b0| 90 90 90 90 90 90 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|000006c0| 52 78 52 65 67 69 73 74 | 65 72 4d 69 6e 69 72 64 |RxRegist|erMinird|
|000006d0| 72 20 66 61 69 6c 65 64 | 3a 20 25 30 38 6c 78 00 |r failed|: %08lx.|
|000006e0| 5c 00 52 00 65 00 67 00 | 69 00 73 00 74 00 72 00 |\.R.e.g.|i.s.t.r.|
|000006f0| 79 00 5c 00 4d 00 61 00 | 63 00 68 00 69 00 6e 00 |y.\.M.a.|c.h.i.n.|
|00000700| 65 00 5c 00 53 00 79 00 | 73 00 74 00 65 00 6d 00 |e.\.S.y.|s.t.e.m.|
|00000710| 5c 00 43 00 75 00 72 00 | 72 00 65 00 6e 00 74 00 |\.C.u.r.|r.e.n.t.|
|00000720| 43 00 6f 00 6e 00 74 00 | 72 00 6f 00 6c 00 53 00 |C.o.n.t.|r.o.l.S.|
|00000730| 65 00 74 00 5c 00 43 00 | 6f 00 6e 00 74 00 72 00 |e.t.\.C.|o.n.t.r.|
|00000740| 6f 00 6c 00 5c 00 54 00 | 65 00 72 00 6d 00 69 00 |o.l.\.T.|e.r.m.i.|
|00000750| 6e 00 61 00 6c 00 20 00 | 53 00 65 00 72 00 76 00 |n.a.l. .|S.e.r.v.|
|00000760| 65 00 72 00 5c 00 57 00 | 69 00 6e 00 53 00 74 00 |e.r.\.W.|i.n.S.t.|
|00000770| 61 00 74 00 69 00 6f 00 | 6e 00 73 00 5c 00 52 00 |a.t.i.o.|n.s.\.R.|
|00000780| 44 00 50 00 2d 00 54 00 | 63 00 70 00 00 00 52 00 |D.P.-.T.|c.p...R.|
|00000790| 64 00 70 00 64 00 72 00 | 49 00 6f 00 54 00 69 00 |d.p.d.r.|I.o.T.i.|
|000007a0| 6d 00 65 00 4f 00 75 00 | 74 00 00 00 72 64 70 64 |m.e.O.u.|t...rdpd|
|000007b0| 72 2e 73 79 73 20 65 72 | 72 6f 72 69 6e 67 20 6f |r.sys er|roring o|
|000007c0| 75 74 20 28 23 39 29 0a | 00 90 72 64 70 64 72 2e |ut (#9).|..rdpdr.|
|000007d0| 73 79 73 20 65 72 72 6f | 72 69 6e 67 20 6f 75 74 |sys erro|ring out|
|000007e0| 20 28 23 38 29 0a 00 90 | 52 44 50 44 52 3a 20 46 | (#8)...|RDPDR: F|
|000007f0| 61 69 6c 65 64 20 74 6f | 20 69 6e 69 74 69 61 6c |ailed to| initial|
|00000800| 69 7a 65 20 74 68 65 20 | 54 53 20 51 75 65 75 65 |ize the |TS Queue|
|00000810| 00 90 72 64 70 64 72 2e | 73 79 73 20 65 72 72 6f |..rdpdr.|sys erro|
|00000820| 72 69 6e 67 20 6f 75 74 | 20 28 23 37 29 0a 00 90 |ring out| (#7)...|
|00000830| 43 72 65 61 74 65 41 64 | 6d 69 6e 53 65 63 75 72 |CreateAd|minSecur|
|00000840| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 20 66 61 |ityDescr|iptor fa|
|00000850| 69 6c 65 64 3a 20 30 78 | 25 30 38 6c 78 00 4f 62 |iled: 0x|%08lx.Ob|
|00000860| 47 65 74 4f 62 6a 65 63 | 74 53 65 63 75 72 69 74 |GetObjec|tSecurit|
|00000870| 79 20 66 61 69 6c 65 64 | 3a 20 30 78 25 30 38 6c |y failed|: 0x%08l|
|00000880| 78 00 4f 62 53 65 74 53 | 65 63 75 72 69 74 79 4f |x.ObSetS|ecurityO|
|00000890| 62 6a 65 63 74 42 79 50 | 6f 69 6e 74 65 72 20 66 |bjectByP|ointer f|
|000008a0| 61 69 6c 65 64 3a 20 30 | 78 25 30 38 6c 78 00 90 |ailed: 0|x%08lx..|
|000008b0| 72 64 70 64 72 2e 73 79 | 73 20 65 72 72 6f 72 69 |rdpdr.sy|s errori|
|000008c0| 6e 67 20 6f 75 74 20 28 | 23 35 29 0a 00 90 49 6f |ng out (|#5)...Io|
|000008d0| 43 72 65 61 74 65 44 65 | 76 69 63 65 20 66 61 69 |CreateDe|vice fai|
|000008e0| 6c 65 64 3a 20 25 30 38 | 6c 78 00 90 72 64 70 64 |led: %08|lx..rdpd|
|000008f0| 72 2e 73 79 73 20 65 72 | 72 6f 72 69 6e 67 20 6f |r.sys er|roring o|
|00000900| 75 74 20 28 23 34 29 0a | 00 90 55 6e 61 62 6c 65 |ut (#4).|..Unable|
|00000910| 20 74 6f 20 63 72 65 61 | 74 65 20 44 72 53 65 73 | to crea|te DrSes|
|00000920| 73 69 6f 6e 4d 61 6e 61 | 67 65 72 00 72 64 70 64 |sionMana|ger.rdpd|
|00000930| 72 2e 73 79 73 20 65 72 | 72 6f 72 69 6e 67 20 6f |r.sys er|roring o|
|00000940| 75 74 20 28 23 33 29 0a | 00 90 72 64 70 64 72 2e |ut (#3).|..rdpdr.|
|00000950| 73 79 73 20 65 72 72 6f | 72 69 6e 67 20 6f 75 74 |sys erro|ring out|
|00000960| 20 28 23 32 29 0a 00 90 | 44 52 3a 46 61 69 6c 65 | (#2)...|DR:Faile|
|00000970| 64 20 74 6f 20 61 6c 6c | 6f 63 61 74 65 20 72 65 |d to all|ocate re|
|00000980| 67 69 73 74 72 79 20 70 | 61 74 68 20 25 57 7a 00 |gistry p|ath %Wz.|
|00000990| 72 64 70 64 72 2e 73 79 | 73 20 65 72 72 6f 72 69 |rdpdr.sy|s errori|
|000009a0| 6e 67 20 6f 75 74 20 28 | 23 31 29 0a 00 90 57 72 |ng out (|#1)...Wr|
|000009b0| 61 70 70 65 72 20 66 61 | 69 6c 65 64 20 74 6f 20 |apper fa|iled to |
|000009c0| 69 6e 69 74 69 61 6c 69 | 7a 65 2e 20 53 74 61 74 |initiali|ze. Stat|
|000009d0| 75 73 20 3d 20 25 30 38 | 6c 78 00 90 50 00 61 00 |us = %08|lx..P.a.|
|000009e0| 72 00 61 00 6d 00 65 00 | 74 00 65 00 72 00 73 00 |r.a.m.e.|t.e.r.s.|
|000009f0| 00 00 46 00 73 00 52 00 | 74 00 6c 00 52 00 65 00 |..F.s.R.|t.l.R.e.|
|00000a00| 67 00 69 00 73 00 74 00 | 65 00 72 00 55 00 6e 00 |g.i.s.t.|e.r.U.n.|
|00000a10| 63 00 50 00 72 00 6f 00 | 76 00 69 00 64 00 65 00 |c.P.r.o.|v.i.d.e.|
|00000a20| 72 00 45 00 78 00 00 00 | 46 00 73 00 52 00 74 00 |r.E.x...|F.s.R.t.|
|00000a30| 6c 00 54 00 65 00 61 00 | 72 00 64 00 6f 00 77 00 |l.T.e.a.|r.d.o.w.|
|00000a40| 6e 00 50 00 65 00 72 00 | 53 00 74 00 72 00 65 00 |n.P.e.r.|S.t.r.e.|
|00000a50| 61 00 6d 00 43 00 6f 00 | 6e 00 74 00 65 00 78 00 |a.m.C.o.|n.t.e.x.|
|00000a60| 74 00 73 00 00 00 90 90 | 90 90 90 90 90 90 90 90 |t.s.....|........|
|00000a70| 90 90 90 90 90 90 90 90 | 90 90 90 90 90 90 90 90 |........|........|
|00000a80| 6a 18 68 60 0f 03 00 e8 | ac 1e f8 ff 33 f6 89 75 |j.h`....|....3..u|
|00000a90| e4 e8 b3 c7 fe ff 68 84 | 00 00 00 56 68 40 b1 07 |......h.|...Vh@..|
|00000aa0| 00 e8 49 21 f8 ff 66 c7 | 05 40 b1 07 00 00 eb 66 |..I!..f.|.@.....f|
|00000ab0| c7 05 42 b1 07 00 84 00 | 8b 45 08 a3 44 b1 07 00 |..B.....|.E..D...|
|00000ac0| 68 d0 01 00 00 56 68 60 | af 07 00 e8 1f 21 f8 ff |h....Vh`|.....!..|
|00000ad0| 83 c4 18 66 c7 05 60 af | 07 00 9a eb 66 c7 05 62 |...f..`.|....f..b|
|00000ae0| af 07 00 d0 01 bf a8 ac | 07 00 57 ff 15 b8 f0 02 |........|..W.....|
|00000af0| 00 89 3d 38 b1 07 00 e8 | 53 4a f8 ff 89 75 fc c7 |..=8....|SJ...u..|
|00000b00| 45 e0 05 00 00 00 b8 c0 | a8 07 00 a3 30 b1 07 00 |E.......|....0...|
|00000b10| 68 d0 03 00 00 56 50 e8 | d3 20 f8 ff 83 c4 0c e8 |h....VP.|. ......|
|00000b20| 45 c7 fe ff c7 45 e4 02 | 00 00 00 ff 75 0c e8 d2 |E....E..|....u...|
|00000b30| f4 ff ff e8 df c5 fe ff | 68 f2 29 09 00 8d 45 d8 |........|h.)...E.|
|00000b40| 50 ff 15 18 f0 02 00 8d | 45 d8 50 ff 15 14 f0 02 |P.......|E.P.....|
|00000b50| 00 a3 10 ae 07 00 e8 a4 | c6 fe ff 89 45 e0 33 ff |........|....E.3.|
|00000b60| 47 3b c6 7c 03 89 7d e4 | c7 45 fc fe ff ff ff e8 |G;.|..}.|.E......|
|00000b70| 1a 00 00 00 3b de 74 40 | 8b c3 e9 4e 01 00 00 90 |....;.t@|...N....|
|00000b80| 90 90 90 90 33 f6 33 ff | 47 90 90 90 90 90 8b 5d |....3.3.|G......]|
|00000b90| e0 3b de 74 22 68 32 01 | 00 00 53 68 c4 0b 00 80 |.;.t"h2.|..Sh....|
|00000ba0| 56 ff 35 30 b1 07 00 e8 | 9e 8b f9 ff ff 75 e4 ff |V.50....|.....u..|
|00000bb0| 75 08 e8 31 f1 fe ff c3 | e8 87 cc fe ff 6a 04 68 |u..1....|.....j.h|
|00000bc0| 52 78 49 72 68 80 03 00 | 00 56 ff 35 c0 f1 02 00 |RxIrh...|.V.5....|
|00000bd0| ff 35 00 f4 02 00 68 c0 | ad 07 00 ff 15 bc f1 02 |.5....h.|........|
|00000be0| 00 b8 48 af 07 00 a3 4c | af 07 00 a3 48 af 07 00 |..H....L|....H...|
|00000bf0| 68 40 af 07 00 ff 15 b8 | f0 02 00 b8 00 b2 07 00 |h@......|........|
|00000c00| a3 04 b2 07 00 a3 00 b2 | 07 00 b8 08 b2 07 00 a3 |........|........|
|00000c10| 0c b2 07 00 a3 08 b2 07 | 00 89 3d 20 af 07 00 89 |........|..= ....|
|00000c20| 35 24 af 07 00 89 35 28 | af 07 00 56 57 68 2c af |5$....5(|...VWh,.|
|00000c30| 07 00 8b 1d 2c f0 02 00 | ff d3 89 3d 00 af 07 00 |....,...|...=....|
|00000c40| 89 35 04 af 07 00 89 35 | 08 af 07 00 56 57 68 0c |.5.....5|....VWh.|
|00000c50| af 07 00 ff d3 57 68 20 | ae 07 00 8b 1d 68 f2 02 |.....Wh |.....h..|
|00000c60| 00 ff d3 57 68 e0 b1 07 | 00 ff d3 a1 30 b1 07 00 |...Wh...|....0...|
|00000c70| 8d 90 60 01 00 00 8d 88 | 78 01 00 00 6a 03 5f 89 |..`.....|x...j._.|
|00000c80| 72 0c 89 49 04 89 09 89 | 32 83 c1 08 83 c2 04 4f |r..I....|2......O|
|00000c90| 75 ed 05 90 01 00 00 50 | ff 15 b8 f0 02 00 ff 75 |u......P|.......u|
|00000ca0| 08 e8 34 00 00 00 68 8c | b1 07 00 ff 15 c8 f1 02 |..4...h.|........|
|00000cb0| 00 c7 05 a8 af 07 00 40 | b1 07 00 ff 15 04 f0 02 |.......@|........|
|00000cc0| 00 a3 78 b1 07 00 e8 53 | c8 fe ff 33 c0 e8 ab 1c |..x....S|...3....|
|00000cd0| f8 ff c2 08 00 90 90 90 | 90 90 8b ff 55 8b ec 51 |........|....U..Q|
|00000ce0| 51 57 68 28 2a 09 00 8d | 45 f8 50 ff 15 18 f0 02 |QWh(*...|E.P.....|
|00000cf0| 00 8d 45 f8 50 ff 15 14 | f0 02 00 8b 55 08 a3 94 |..E.P...|....U...|
|00000d00| ac 07 00 6a 1b 8d 7a 38 | 59 b8 bb c7 07 00 f3 ab |...j..z8|Y.......|
|00000d10| 33 c0 c7 05 2c b0 07 00 | 68 27 03 00 c7 42 28 40 |3...,...|h'...B(@|
|00000d20| ad 07 00 c7 05 40 ad 07 | 00 70 00 00 00 c7 05 44 |.....@..|.p.....D|
|00000d30| ad 07 00 5a b3 08 00 c7 | 05 48 ad 07 00 61 b1 08 |...Z....|.H...a..|
|00000d40| 00 c7 05 4c ad 07 00 71 | b2 08 00 a3 50 ad 07 00 |...L...q|....P...|
|00000d50| a3 54 ad 07 00 a3 58 ad | 07 00 a3 5c ad 07 00 a3 |.T....X.|...\....|
|00000d60| 60 ad 07 00 a3 64 ad 07 | 00 c7 05 68 ad 07 00 9c |`....d..|...h....|
|00000d70| 63 01 00 c7 05 a8 ad 07 | 00 98 d3 02 00 c7 05 ac |c.......|........|
|00000d80| ad 07 00 98 d3 02 00 c7 | 05 6c ad 07 00 a5 06 09 |........|.l......|
|00000d90| 00 c7 05 70 ad 07 00 bc | 02 09 00 e8 94 46 f8 ff |...p....|.....F..|
|00000da0| c7 05 7c b1 07 00 fc 05 | 09 00 c7 05 80 b1 07 00 |..|.....|........|
|00000db0| 68 06 09 00 c7 05 84 b1 | 07 00 8d 01 09 00 c7 05 |h.......|........|
|00000dc0| 88 b1 07 00 d4 01 09 00 | 5f c9 c2 04 00 90 90 90 |........|_.......|
|00000dd0| 44 2e 08 00 00 00 00 00 | 00 00 00 00 20 2e 08 00 |D.......|.... ...|
|00000de0| 00 f0 01 00 4c 32 08 00 | 00 00 00 00 00 00 00 00 |....L2..|........|
|00000df0| 2e 2e 08 00 08 f4 01 00 | 64 32 08 00 00 00 00 00 |........|d2......|
|00000e00| 00 00 00 00 36 2e 08 00 | 20 f4 01 00 00 00 00 00 |....6...| .......|
|00000e10| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000e20| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 48 41 |ntoskrnl|.exe..HA|
|00000e30| 4c 2e 64 6c 6c 00 6b 73 | 65 63 64 64 2e 73 79 73 |L.dll.ks|ecdd.sys|
|00000e40| 00 00 90 90 6c 32 08 00 | 80 32 08 00 96 32 08 00 |....l2..|.2...2..|
|00000e50| ac 32 08 00 c0 32 08 00 | d2 32 08 00 ee 32 08 00 |.2...2..|.2...2..|
|00000e60| 06 33 08 00 1a 33 08 00 | 36 33 08 00 46 33 08 00 |.3...3..|63..F3..|
|00000e70| 5c 33 08 00 70 33 08 00 | 88 33 08 00 a0 33 08 00 |\3..p3..|.3...3..|
|00000e80| ba 33 08 00 ce 33 08 00 | e4 33 08 00 f4 33 08 00 |.3...3..|.3...3..|
|00000e90| 0c 34 08 00 20 34 08 00 | 40 34 08 00 4c 34 08 00 |.4.. 4..|@4..L4..|
|00000ea0| 64 34 08 00 7e 34 08 00 | 8e 34 08 00 9e 34 08 00 |d4..~4..|.4...4..|
|00000eb0| aa 34 08 00 b4 34 08 00 | c6 34 08 00 d2 34 08 00 |.4...4..|.4...4..|
|00000ec0| ea 34 08 00 fc 34 08 00 | 0a 35 08 00 24 35 08 00 |.4...4..|.5..$5..|
|00000ed0| 3e 35 08 00 58 35 08 00 | 76 35 08 00 80 35 08 00 |>5..X5..|v5...5..|
|00000ee0| a0 35 08 00 be 35 08 00 | d4 35 08 00 f4 35 08 00 |.5...5..|.5...5..|
|00000ef0| 14 36 08 00 30 36 08 00 | 48 36 08 00 5a 36 08 00 |.6..06..|H6..Z6..|
|00000f00| 72 36 08 00 82 36 08 00 | 8e 36 08 00 98 36 08 00 |r6...6..|.6...6..|
|00000f10| a4 36 08 00 c6 36 08 00 | de 36 08 00 ee 36 08 00 |.6...6..|.6...6..|
|00000f20| 0c 37 08 00 24 37 08 00 | 3c 37 08 00 4e 37 08 00 |.7..$7..|<7..N7..|
|00000f30| 5e 37 08 00 6e 37 08 00 | 88 37 08 00 96 37 08 00 |^7..n7..|.7...7..|
|00000f40| b2 37 08 00 cc 37 08 00 | e4 37 08 00 00 38 08 00 |.7...7..|.7...8..|
|00000f50| 18 38 08 00 32 38 08 00 | 4a 38 08 00 6e 38 08 00 |.8..28..|J8..n8..|
|00000f60| 8a 38 08 00 a6 38 08 00 | b6 38 08 00 cc 38 08 00 |.8...8..|.8...8..|
|00000f70| d8 38 08 00 e4 38 08 00 | fc 38 08 00 1c 39 08 00 |.8...8..|.8...9..|
|00000f80| 38 39 08 00 54 39 08 00 | 70 39 08 00 82 39 08 00 |89..T9..|p9...9..|
|00000f90| 9a 39 08 00 aa 39 08 00 | b6 39 08 00 d4 39 08 00 |.9...9..|.9...9..|
|00000fa0| ec 39 08 00 fa 39 08 00 | 0a 3a 08 00 1e 3a 08 00 |.9...9..|.:...:..|
|00000fb0| 36 3a 08 00 52 3a 08 00 | 60 3a 08 00 6a 3a 08 00 |6:..R:..|`:..j:..|
|00000fc0| 76 3a 08 00 82 3a 08 00 | 9e 3a 08 00 ae 3a 08 00 |v:...:..|.:...:..|
|00000fd0| b8 3a 08 00 d0 3a 08 00 | e4 3a 08 00 fc 3a 08 00 |.:...:..|.:...:..|
|00000fe0| 06 3b 08 00 10 3b 08 00 | 32 3b 08 00 52 3b 08 00 |.;...;..|2;..R;..|
|00000ff0| 66 3b 08 00 86 3b 08 00 | 9a 3b 08 00 aa 3b 08 00 |f;...;..|.;...;..|
|00001000| c6 3b 08 00 e8 3b 08 00 | f6 3b 08 00 14 3c 08 00 |.;...;..|.;...<..|
|00001010| 30 3c 08 00 48 3c 08 00 | 62 3c 08 00 7c 3c 08 00 |0<..H<..|b<..|<..|
|00001020| 94 3c 08 00 ac 3c 08 00 | c4 3c 08 00 d2 3c 08 00 |.<...<..|.<...<..|
|00001030| ec 3c 08 00 02 3d 08 00 | 1c 3d 08 00 2c 3d 08 00 |.<...=..|.=..,=..|
|00001040| 3c 3d 08 00 52 3d 08 00 | 68 3d 08 00 76 3d 08 00 |<=..R=..|h=..v=..|
|00001050| 86 3d 08 00 92 3d 08 00 | 9c 3d 08 00 a6 3d 08 00 |.=...=..|.=...=..|
|00001060| c4 3d 08 00 d2 3d 08 00 | dc 3d 08 00 f2 3d 08 00 |.=...=..|.=...=..|
|00001070| 08 3e 08 00 28 3e 08 00 | 48 3e 08 00 68 3e 08 00 |.>..(>..|H>..h>..|
|00001080| 76 3e 08 00 94 3e 08 00 | ae 3e 08 00 cc 3e 08 00 |v>...>..|.>...>..|
|00001090| da 3e 08 00 ec 3e 08 00 | 08 3f 08 00 24 3f 08 00 |.>...>..|.?..$?..|
|000010a0| 3e 3f 08 00 5c 3f 08 00 | 74 3f 08 00 90 3f 08 00 |>?..\?..|t?...?..|
|000010b0| a4 3f 08 00 be 3f 08 00 | d8 3f 08 00 ec 3f 08 00 |.?...?..|.?...?..|
|000010c0| 00 40 08 00 14 40 08 00 | 2a 40 08 00 46 40 08 00 |.@...@..|*@..F@..|
|000010d0| 60 40 08 00 72 40 08 00 | 8a 40 08 00 a2 40 08 00 |`@..r@..|.@...@..|
|000010e0| bc 40 08 00 cc 40 08 00 | e2 40 08 00 fa 40 08 00 |.@...@..|.@...@..|
|000010f0| 14 41 08 00 34 41 08 00 | 54 41 08 00 6e 41 08 00 |.A..4A..|TA..nA..|
|00001100| 88 41 08 00 9e 41 08 00 | b4 41 08 00 cc 41 08 00 |.A...A..|.A...A..|
|00001110| e4 41 08 00 00 42 08 00 | 18 42 08 00 32 42 08 00 |.A...B..|.B..2B..|
|00001120| 4c 42 08 00 68 42 08 00 | 84 42 08 00 9c 42 08 00 |LB..hB..|.B...B..|
|00001130| bc 42 08 00 de 42 08 00 | 00 43 08 00 1a 43 08 00 |.B...B..|.C...C..|
|00001140| 2e 43 08 00 3c 43 08 00 | 58 43 08 00 78 43 08 00 |.C..<C..|XC..xC..|
|00001150| 8e 43 08 00 9e 43 08 00 | c2 43 08 00 e4 43 08 00 |.C...C..|.C...C..|
|00001160| f4 43 08 00 02 44 08 00 | 0e 44 08 00 1c 44 08 00 |.C...D..|.D...D..|
|00001170| 3e 44 08 00 5c 44 08 00 | 76 44 08 00 8e 44 08 00 |>D..\D..|vD...D..|
|00001180| a6 44 08 00 bc 44 08 00 | d0 44 08 00 e6 44 08 00 |.D...D..|.D...D..|
|00001190| 02 45 08 00 14 45 08 00 | 28 45 08 00 3e 45 08 00 |.E...E..|(E..>E..|
|000011a0| 5c 45 08 00 78 45 08 00 | 8a 45 08 00 9c 45 08 00 |\E..xE..|.E...E..|
|000011b0| aa 45 08 00 c4 45 08 00 | da 45 08 00 f6 45 08 00 |.E...E..|.E...E..|
|000011c0| 02 46 08 00 18 46 08 00 | 28 46 08 00 3c 46 08 00 |.F...F..|(F..<F..|
|000011d0| 4c 46 08 00 5c 46 08 00 | 7a 46 08 00 8a 46 08 00 |LF..\F..|zF...F..|
|000011e0| 9a 46 08 00 b6 46 08 00 | ca 46 08 00 dc 46 08 00 |.F...F..|.F...F..|
|000011f0| f4 46 08 00 0c 47 08 00 | 1c 47 08 00 2c 47 08 00 |.F...G..|.G..,G..|
|00001200| 3a 47 08 00 5c 47 08 00 | 7c 47 08 00 86 47 08 00 |:G..\G..||G...G..|
|00001210| 9a 47 08 00 ac 47 08 00 | c4 47 08 00 e6 47 08 00 |.G...G..|.G...G..|
|00001220| 08 48 08 00 20 48 08 00 | 36 48 08 00 44 48 08 00 |.H.. H..|6H..DH..|
|00001230| 54 48 08 00 66 48 08 00 | 78 48 08 00 8e 48 08 00 |TH..fH..|xH...H..|
|00001240| a2 48 08 00 ac 48 08 00 | 00 00 00 00 c4 48 08 00 |.H...H..|.....H..|
|00001250| d8 48 08 00 ee 48 08 00 | 04 49 08 00 18 49 08 00 |.H...H..|.I...I..|
|00001260| 00 00 00 00 2c 49 08 00 | 00 00 00 00 fe 02 4b 65 |....,I..|......Ke|
|00001270| 51 75 65 72 79 53 79 73 | 74 65 6d 54 69 6d 65 00 |QuerySys|temTime.|
|00001280| 05 02 49 6f 47 65 74 43 | 75 72 72 65 6e 74 50 72 |..IoGetC|urrentPr|
|00001290| 6f 63 65 73 73 00 d9 05 | 52 74 6c 53 75 62 41 75 |ocess...|RtlSubAu|
|000012a0| 74 68 6f 72 69 74 79 53 | 69 64 00 00 65 05 52 74 |thorityS|id..e.Rt|
|000012b0| 6c 49 6e 69 74 69 61 6c | 69 7a 65 53 69 64 00 00 |lInitial|izeSid..|
|000012c0| 8e 02 49 6f 57 4d 49 57 | 72 69 74 65 45 76 65 6e |..IoWMIW|riteEven|
|000012d0| 74 00 8a 03 4d 6d 47 65 | 74 53 79 73 74 65 6d 52 |t...MmGe|tSystemR|
|000012e0| 6f 75 74 69 6e 65 41 64 | 64 72 65 73 73 00 5f 05 |outineAd|dress._.|
|000012f0| 52 74 6c 49 6e 69 74 55 | 6e 69 63 6f 64 65 53 74 |RtlInitU|nicodeSt|
|00001300| 72 69 6e 67 00 00 ef 04 | 52 74 6c 43 6f 6d 70 61 |ring....|RtlCompa|
|00001310| 72 65 4d 65 6d 6f 72 79 | 00 00 89 02 49 6f 57 4d |reMemory|....IoWM|
|00001320| 49 52 65 67 69 73 74 72 | 61 74 69 6f 6e 43 6f 6e |IRegistr|ationCon|
|00001330| 74 72 6f 6c 00 00 95 02 | 49 6f 66 43 61 6c 6c 44 |trol....|IofCallD|
|00001340| 72 69 76 65 72 00 96 02 | 49 6f 66 43 6f 6d 70 6c |river...|IofCompl|
|00001350| 65 74 65 52 65 71 75 65 | 73 74 00 00 d9 02 4b 65 |eteReque|st....Ke|
|00001360| 49 6e 69 74 69 61 6c 69 | 7a 65 45 76 65 6e 74 00 |Initiali|zeEvent.|
|00001370| 41 04 4f 62 66 44 65 72 | 65 66 65 72 65 6e 63 65 |A.ObfDer|eference|
|00001380| 4f 62 6a 65 63 74 00 00 | 42 06 53 65 51 75 65 72 |Object..|B.SeQuer|
|00001390| 79 53 65 73 73 69 6f 6e | 49 64 54 6f 6b 65 6e 00 |ySession|IdToken.|
|000013a0| 55 06 53 65 55 6e 6c 6f | 63 6b 53 75 62 6a 65 63 |U.SeUnlo|ckSubjec|
|000013b0| 74 43 6f 6e 74 65 78 74 | 00 00 30 06 53 65 46 72 |tContext|..0.SeFr|
|000013c0| 65 65 50 72 69 76 69 6c | 65 67 65 73 00 00 14 06 |eePrivil|eges....|
|000013d0| 53 65 41 70 70 65 6e 64 | 50 72 69 76 69 6c 65 67 |SeAppend|Privileg|
|000013e0| 65 73 00 00 12 06 53 65 | 41 63 63 65 73 73 43 68 |es....Se|AccessCh|
|000013f0| 65 63 6b 00 35 06 53 65 | 4c 6f 63 6b 53 75 62 6a |eck.5.Se|LockSubj|
|00001400| 65 63 74 43 6f 6e 74 65 | 78 74 00 00 9e 05 52 74 |ectConte|xt....Rt|
|00001410| 6c 4d 61 70 47 65 6e 65 | 72 69 63 4d 61 73 6b 00 |lMapGene|ricMask.|
|00001420| 10 02 49 6f 47 65 74 46 | 69 6c 65 4f 62 6a 65 63 |..IoGetF|ileObjec|
|00001430| 74 47 65 6e 65 72 69 63 | 4d 61 70 70 69 6e 67 00 |tGeneric|Mapping.|
|00001440| 6e 07 5f 77 63 73 6e 69 | 63 6d 70 00 25 05 52 74 |n._wcsni|cmp.%.Rt|
|00001450| 6c 45 71 75 61 6c 55 6e | 69 63 6f 64 65 53 74 72 |lEqualUn|icodeStr|
|00001460| 69 6e 67 00 d3 04 52 74 | 6c 41 64 64 41 63 63 65 |ing...Rt|lAddAcce|
|00001470| 73 73 41 6c 6c 6f 77 65 | 64 41 63 65 00 00 00 05 |ssAllowe|dAce....|
|00001480| 52 74 6c 43 72 65 61 74 | 65 41 63 6c 00 00 95 05 |RtlCreat|eAcl....|
|00001490| 52 74 6c 4c 65 6e 67 74 | 68 53 69 64 00 00 2e 06 |RtlLengt|hSid....|
|000014a0| 53 65 45 78 70 6f 72 74 | 73 00 ad 06 5a 77 43 6c |SeExport|s...ZwCl|
|000014b0| 6f 73 65 00 13 07 5a 77 | 51 75 65 72 79 56 61 6c |ose...Zw|QueryVal|
|000014c0| 75 65 4b 65 79 00 e6 06 | 5a 77 4f 70 65 6e 4b 65 |ueKey...|ZwOpenKe|
|000014d0| 79 00 93 05 52 74 6c 4c | 65 6e 67 74 68 52 65 71 |y...RtlL|engthReq|
|000014e0| 75 69 72 65 64 53 69 64 | 00 00 e6 01 49 6f 44 65 |uiredSid|....IoDe|
|000014f0| 6c 65 74 65 44 65 76 69 | 63 65 00 00 23 05 52 74 |leteDevi|ce..#.Rt|
|00001500| 6c 45 71 75 61 6c 53 69 | 64 00 40 06 53 65 51 75 |lEqualSi|d.@.SeQu|
|00001510| 65 72 79 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 54 6f |eryInfor|mationTo|
|00001520| 6b 65 6e 00 19 02 49 6f | 47 65 74 52 65 71 75 65 |ken...Io|GetReque|
|00001530| 73 74 6f 72 53 65 73 73 | 69 6f 6e 49 64 00 3c 04 |storSess|ionId.<.|
|00001540| 4f 62 52 65 6c 65 61 73 | 65 4f 62 6a 65 63 74 53 |ObReleas|eObjectS|
|00001550| 65 63 75 72 69 74 79 00 | 4b 06 53 65 53 65 74 53 |ecurity.|K.SeSetS|
|00001560| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00001570| 72 49 6e 66 6f 00 7f 07 | 6d 65 6d 6d 6f 76 65 00 |rInfo...|memmove.|
|00001580| cd 05 52 74 6c 53 65 74 | 44 61 63 6c 53 65 63 75 |..RtlSet|DaclSecu|
|00001590| 72 69 74 79 44 65 73 63 | 72 69 70 74 6f 72 00 00 |rityDesc|riptor..|
|000015a0| 04 05 52 74 6c 43 72 65 | 61 74 65 53 65 63 75 72 |..RtlCre|ateSecur|
|000015b0| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 2d 04 |ityDescr|iptor.-.|
|000015c0| 4f 62 47 65 74 4f 62 6a | 65 63 74 53 65 63 75 72 |ObGetObj|ectSecur|
|000015d0| 69 74 79 00 3f 04 4f 62 | 53 65 74 53 65 63 75 72 |ity.?.Ob|SetSecur|
|000015e0| 69 74 79 4f 62 6a 65 63 | 74 42 79 50 6f 69 6e 74 |ityObjec|tByPoint|
|000015f0| 65 72 00 00 46 05 52 74 | 6c 47 65 74 44 61 63 6c |er..F.Rt|lGetDacl|
|00001600| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|00001610| 6f 72 00 00 57 06 53 65 | 56 61 6c 69 64 53 65 63 |or..W.Se|ValidSec|
|00001620| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 00 |urityDes|criptor.|
|00001630| 71 04 50 73 47 65 74 43 | 75 72 72 65 6e 74 50 72 |q.PsGetC|urrentPr|
|00001640| 6f 63 65 73 73 49 64 00 | d1 01 49 6f 43 72 65 61 |ocessId.|..IoCrea|
|00001650| 74 65 44 65 76 69 63 65 | 00 00 e0 02 4b 65 49 6e |teDevice|....KeIn|
|00001660| 69 74 69 61 6c 69 7a 65 | 53 70 69 6e 4c 6f 63 6b |itialize|SpinLock|
|00001670| 00 00 38 00 44 62 67 42 | 72 65 61 6b 50 6f 69 6e |..8.DbgB|reakPoin|
|00001680| 74 00 3c 00 44 62 67 50 | 72 69 6e 74 00 00 4b 07 |t.<.DbgP|rint..K.|
|00001690| 5f 61 6c 6c 6d 75 6c 00 | 95 07 74 6f 77 75 70 70 |_allmul.|..towupp|
|000016a0| 65 72 00 00 5b 00 45 78 | 41 63 71 75 69 72 65 52 |er..[.Ex|AcquireR|
|000016b0| 65 73 6f 75 72 63 65 45 | 78 63 6c 75 73 69 76 65 |esourceE|xclusive|
|000016c0| 4c 69 74 65 00 00 bb 00 | 45 78 52 65 6c 65 61 73 |Lite....|ExReleas|
|000016d0| 65 52 65 73 6f 75 72 63 | 65 4c 69 74 65 00 61 04 |eResourc|eLite.a.|
|000016e0| 50 72 6f 62 65 46 6f 72 | 57 72 69 74 65 00 5c 00 |ProbeFor|Write.\.|
|000016f0| 45 78 41 63 71 75 69 72 | 65 52 65 73 6f 75 72 63 |ExAcquir|eResourc|
|00001700| 65 53 68 61 72 65 64 4c | 69 74 65 00 bd 02 4b 65 |eSharedL|ite...Ke|
|00001710| 45 6e 74 65 72 43 72 69 | 74 69 63 61 6c 52 65 67 |EnterCri|ticalReg|
|00001720| 69 6f 6e 00 f0 02 4b 65 | 4c 65 61 76 65 43 72 69 |ion...Ke|LeaveCri|
|00001730| 74 69 63 61 6c 52 65 67 | 69 6f 6e 00 d3 06 5a 77 |ticalReg|ion...Zw|
|00001740| 46 73 43 6f 6e 74 72 6f | 6c 46 69 6c 65 00 b5 06 |FsContro|lFile...|
|00001750| 5a 77 43 72 65 61 74 65 | 46 69 6c 65 00 00 60 04 |ZwCreate|File..`.|
|00001760| 50 72 6f 62 65 46 6f 72 | 52 65 61 64 00 00 c8 04 |ProbeFor|Read....|
|00001770| 50 73 54 65 72 6d 69 6e | 61 74 65 53 79 73 74 65 |PsTermin|ateSyste|
|00001780| 6d 54 68 72 65 61 64 00 | 2a 03 4b 65 53 65 74 45 |mThread.|*.KeSetE|
|00001790| 76 65 6e 74 00 00 6b 04 | 50 73 44 65 72 65 66 65 |vent..k.|PsDerefe|
|000017a0| 72 65 6e 63 65 50 72 69 | 6d 61 72 79 54 6f 6b 65 |rencePri|maryToke|
|000017b0| 6e 00 ac 04 50 73 52 65 | 66 65 72 65 6e 63 65 50 |n...PsRe|ferenceP|
|000017c0| 72 69 6d 61 72 79 54 6f | 6b 65 6e 00 48 03 4b 65 |rimaryTo|ken.H.Ke|
|000017d0| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|000017e0| 65 63 74 00 37 04 4f 62 | 52 65 66 65 72 65 6e 63 |ect.7.Ob|Referenc|
|000017f0| 65 4f 62 6a 65 63 74 42 | 79 48 61 6e 64 6c 65 00 |eObjectB|yHandle.|
|00001800| 69 04 50 73 43 72 65 61 | 74 65 53 79 73 74 65 6d |i.PsCrea|teSystem|
|00001810| 54 68 72 65 61 64 00 00 | 45 02 49 6f 52 65 6c 65 |Thread..|E.IoRele|
|00001820| 61 73 65 43 61 6e 63 65 | 6c 53 70 69 6e 4c 6f 63 |aseCance|lSpinLoc|
|00001830| 6b 00 40 05 52 74 6c 46 | 72 65 65 55 6e 69 63 6f |k.@.RtlF|reeUnico|
|00001840| 64 65 53 74 72 69 6e 67 | 00 00 2b 02 49 6f 4f 70 |deString|..+.IoOp|
|00001850| 65 6e 44 65 76 69 63 65 | 49 6e 74 65 72 66 61 63 |enDevice|Interfac|
|00001860| 65 52 65 67 69 73 74 72 | 79 4b 65 79 00 00 3e 02 |eRegistr|yKey..>.|
|00001870| 49 6f 52 65 67 69 73 74 | 65 72 44 65 76 69 63 65 |IoRegist|erDevice|
|00001880| 49 6e 74 65 72 66 61 63 | 65 00 f0 05 52 74 6c 55 |Interfac|e...RtlU|
|00001890| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 49 6e |nicodeSt|ringToIn|
|000018a0| 74 65 67 65 72 00 49 04 | 50 6f 43 61 6c 6c 44 72 |teger.I.|PoCallDr|
|000018b0| 69 76 65 72 00 00 5c 04 | 50 6f 53 74 61 72 74 4e |iver..\.|PoStartN|
|000018c0| 65 78 74 50 6f 77 65 72 | 49 72 70 00 6c 07 5f 77 |extPower|Irp.l._w|
|000018d0| 63 73 69 63 6d 70 00 00 | 60 07 5f 73 74 72 69 63 |csicmp..|`._stric|
|000018e0| 6d 70 00 00 47 05 52 74 | 6c 47 65 74 44 65 66 61 |mp..G.Rt|lGetDefa|
|000018f0| 75 6c 74 43 6f 64 65 50 | 61 67 65 00 ba 01 49 6f |ultCodeP|age...Io|
|00001900| 42 75 69 6c 64 41 73 79 | 6e 63 68 72 6f 6e 6f 75 |BuildAsy|nchronou|
|00001910| 73 46 73 64 52 65 71 75 | 65 73 74 00 16 02 49 6f |sFsdRequ|est...Io|
|00001920| 47 65 74 52 65 6c 61 74 | 65 64 44 65 76 69 63 65 |GetRelat|edDevice|
|00001930| 4f 62 6a 65 63 74 00 00 | 6f 05 52 74 6c 49 6e 74 |Object..|o.RtlInt|
|00001940| 65 67 65 72 54 6f 55 6e | 69 63 6f 64 65 53 74 72 |egerToUn|icodeStr|
|00001950| 69 6e 67 00 df 04 52 74 | 6c 41 70 70 65 6e 64 55 |ing...Rt|lAppendU|
|00001960| 6e 69 63 6f 64 65 54 6f | 53 74 72 69 6e 67 00 00 |nicodeTo|String..|
|00001970| e9 01 49 6f 44 65 74 61 | 63 68 44 65 76 69 63 65 |..IoDeta|chDevice|
|00001980| 00 00 e8 01 49 6f 44 65 | 6c 65 74 65 53 79 6d 62 |....IoDe|leteSymb|
|00001990| 6f 6c 69 63 4c 69 6e 6b | 00 00 0c 05 52 74 6c 44 |olicLink|....RtlD|
|000019a0| 65 6c 65 74 65 41 63 65 | 00 00 43 05 52 74 6c 47 |eleteAce|..C.RtlG|
|000019b0| 65 74 41 63 65 00 b8 01 | 49 6f 41 74 74 61 63 68 |etAce...|IoAttach|
|000019c0| 44 65 76 69 63 65 54 6f | 44 65 76 69 63 65 53 74 |DeviceTo|DeviceSt|
|000019d0| 61 63 6b 00 db 01 49 6f | 43 72 65 61 74 65 53 79 |ack...Io|CreateSy|
|000019e0| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 6a 07 5f 76 |mbolicLi|nk..j._v|
|000019f0| 73 6e 77 70 72 69 6e 74 | 66 00 38 07 5a 77 53 65 |snwprint|f.8.ZwSe|
|00001a00| 74 56 61 6c 75 65 4b 65 | 79 00 c4 06 5a 77 44 65 |tValueKe|y...ZwDe|
|00001a10| 6c 65 74 65 56 61 6c 75 | 65 4b 65 79 00 00 08 02 |leteValu|eKey....|
|00001a20| 49 6f 47 65 74 44 65 76 | 69 63 65 49 6e 74 65 72 |IoGetDev|iceInter|
|00001a30| 66 61 63 65 73 00 57 02 | 49 6f 53 65 74 44 65 76 |faces.W.|IoSetDev|
|00001a40| 69 63 65 49 6e 74 65 72 | 66 61 63 65 53 74 61 74 |iceInter|faceStat|
|00001a50| 65 00 d0 06 5a 77 46 6c | 75 73 68 4b 65 79 00 00 |e...ZwFl|ushKey..|
|00001a60| 90 07 73 74 72 73 74 72 | 00 00 5d 07 5f 70 75 72 |..strstr|..]._pur|
|00001a70| 65 63 61 6c 6c 00 fa 01 | 49 6f 46 72 65 65 49 72 |ecall...|IoFreeIr|
|00001a80| 70 00 a5 01 49 6e 74 65 | 72 6c 6f 63 6b 65 64 50 |p...Inte|rlockedP|
|00001a90| 75 73 68 45 6e 74 72 79 | 53 4c 69 73 74 00 1e 03 |ushEntry|SList...|
|00001aa0| 4b 65 52 65 73 65 74 45 | 76 65 6e 74 00 00 d0 03 |KeResetE|vent....|
|00001ab0| 4e 74 43 6c 6f 73 65 00 | 34 04 4f 62 4f 70 65 6e |NtClose.|4.ObOpen|
|00001ac0| 4f 62 6a 65 63 74 42 79 | 50 6f 69 6e 74 65 72 00 |ObjectBy|Pointer.|
|00001ad0| f5 01 49 6f 46 69 6c 65 | 4f 62 6a 65 63 74 54 79 |..IoFile|ObjectTy|
|00001ae0| 70 65 00 00 0b 06 52 74 | 6c 57 72 69 74 65 52 65 |pe....Rt|lWriteRe|
|00001af0| 67 69 73 74 72 79 56 61 | 6c 75 65 00 75 07 69 73 |gistryVa|lue.u.is|
|00001b00| 64 69 67 69 74 00 8c 07 | 73 74 72 6e 63 6d 70 00 |digit...|strncmp.|
|00001b10| de 04 52 74 6c 41 70 70 | 65 6e 64 55 6e 69 63 6f |..RtlApp|endUnico|
|00001b20| 64 65 53 74 72 69 6e 67 | 54 6f 53 74 72 69 6e 67 |deString|ToString|
|00001b30| 00 00 db 04 52 74 6c 41 | 6e 73 69 53 74 72 69 6e |....RtlA|nsiStrin|
|00001b40| 67 54 6f 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |gToUnico|deString|
|00001b50| 00 00 5b 05 52 74 6c 49 | 6e 69 74 41 6e 73 69 53 |..[.RtlI|nitAnsiS|
|00001b60| 74 72 69 6e 67 00 9b 03 | 4d 6d 4d 61 70 4c 6f 63 |tring...|MmMapLoc|
|00001b70| 6b 65 64 50 61 67 65 73 | 53 70 65 63 69 66 79 43 |kedPages|SpecifyC|
|00001b80| 61 63 68 65 00 00 9a 03 | 4d 6d 4d 61 70 4c 6f 63 |ache....|MmMapLoc|
|00001b90| 6b 65 64 50 61 67 65 73 | 00 00 b6 02 4b 65 43 6c |kedPages|....KeCl|
|00001ba0| 65 61 72 45 76 65 6e 74 | 00 00 a4 01 49 6e 74 65 |earEvent|....Inte|
|00001bb0| 72 6c 6f 63 6b 65 64 50 | 6f 70 45 6e 74 72 79 53 |rlockedP|opEntryS|
|00001bc0| 4c 69 73 74 00 00 8e 00 | 45 78 49 6e 69 74 69 61 |List....|ExInitia|
|00001bd0| 6c 69 7a 65 4e 50 61 67 | 65 64 4c 6f 6f 6b 61 73 |lizeNPag|edLookas|
|00001be0| 69 64 65 4c 69 73 74 00 | 84 00 45 78 46 72 65 65 |ideList.|..ExFree|
|00001bf0| 50 6f 6f 6c 00 00 72 00 | 45 78 44 65 6c 65 74 65 |Pool..r.|ExDelete|
|00001c00| 4e 50 61 67 65 64 4c 6f | 6f 6b 61 73 69 64 65 4c |NPagedLo|okasideL|
|00001c10| 69 73 74 00 91 00 45 78 | 49 6e 69 74 69 61 6c 69 |ist...Ex|Initiali|
|00001c20| 7a 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |zeResour|ceLite..|
|00001c30| 74 00 45 78 44 65 6c 65 | 74 65 52 65 73 6f 75 72 |t.ExDele|teResour|
|00001c40| 63 65 4c 69 74 65 00 00 | f4 05 52 74 6c 55 6e 69 |ceLite..|..RtlUni|
|00001c50| 63 6f 64 65 54 6f 4d 75 | 6c 74 69 42 79 74 65 4e |codeToMu|ltiByteN|
|00001c60| 00 00 a2 05 52 74 6c 4d | 75 6c 74 69 42 79 74 65 |....RtlM|ultiByte|
|00001c70| 54 6f 55 6e 69 63 6f 64 | 65 4e 00 00 f3 05 52 74 |ToUnicod|eN....Rt|
|00001c80| 6c 55 6e 69 63 6f 64 65 | 54 6f 43 75 73 74 6f 6d |lUnicode|ToCustom|
|00001c90| 43 50 4e 00 07 05 52 74 | 6c 43 75 73 74 6f 6d 43 |CPN...Rt|lCustomC|
|00001ca0| 50 54 6f 55 6e 69 63 6f | 64 65 4e 00 5d 05 52 74 |PToUnico|deN.].Rt|
|00001cb0| 6c 49 6e 69 74 43 6f 64 | 65 50 61 67 65 54 61 62 |lInitCod|ePageTab|
|00001cc0| 6c 65 00 00 16 07 5a 77 | 52 65 61 64 46 69 6c 65 |le....Zw|ReadFile|
|00001cd0| 00 00 03 07 5a 77 51 75 | 65 72 79 49 6e 66 6f 72 |....ZwQu|eryInfor|
|00001ce0| 6d 61 74 69 6f 6e 46 69 | 6c 65 00 00 61 05 52 74 |mationFi|le..a.Rt|
|00001cf0| 6c 49 6e 69 74 69 61 6c | 69 7a 65 42 69 74 4d 61 |lInitial|izeBitMa|
|00001d00| 70 00 2c 05 52 74 6c 46 | 69 6e 64 43 6c 65 61 72 |p.,.RtlF|indClear|
|00001d10| 42 69 74 73 41 6e 64 53 | 65 74 00 00 e3 04 52 74 |BitsAndS|et....Rt|
|00001d20| 6c 41 72 65 42 69 74 73 | 53 65 74 00 eb 04 52 74 |lAreBits|Set...Rt|
|00001d30| 6c 43 6c 65 61 72 42 69 | 74 73 00 00 e2 05 52 74 |lClearBi|ts....Rt|
|00001d40| 6c 54 69 6d 65 54 6f 54 | 69 6d 65 46 69 65 6c 64 |lTimeToT|imeField|
|00001d50| 73 00 cd 06 5a 77 45 6e | 75 6d 65 72 61 74 65 56 |s...ZwEn|umerateV|
|00001d60| 61 6c 75 65 4b 65 79 00 | 3f 03 4b 65 54 69 63 6b |alueKey.|?.KeTick|
|00001d70| 43 6f 75 6e 74 00 b3 02 | 4b 65 42 75 67 43 68 65 |Count...|KeBugChe|
|00001d80| 63 6b 45 78 00 00 f8 05 | 52 74 6c 55 6e 77 69 6e |ckEx....|RtlUnwin|
|00001d90| 64 00 51 07 5f 61 6c 6c | 73 68 72 00 80 07 6d 65 |d.Q._all|shr...me|
|00001da0| 6d 73 65 74 00 00 94 05 | 52 74 6c 4c 65 6e 67 74 |mset....|RtlLengt|
|00001db0| 68 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |hSecurit|yDescrip|
|00001dc0| 74 6f 72 00 69 07 5f 76 | 73 6e 70 72 69 6e 74 66 |tor.i._v|snprintf|
|00001dd0| 00 00 7e 07 6d 65 6d 63 | 70 79 00 00 34 07 5a 77 |..~.memc|py..4.Zw|
|00001de0| 53 65 74 53 65 63 75 72 | 69 74 79 4f 62 6a 65 63 |SetSecur|ityObjec|
|00001df0| 74 00 ec 01 49 6f 44 65 | 76 69 63 65 4f 62 6a 65 |t...IoDe|viceObje|
|00001e00| 63 74 54 79 70 65 00 00 | 51 05 52 74 6c 47 65 74 |ctType..|Q.RtlGet|
|00001e10| 53 61 63 6c 53 65 63 75 | 72 69 74 79 44 65 73 63 |SaclSecu|rityDesc|
|00001e20| 72 69 70 74 6f 72 00 00 | 4b 05 52 74 6c 47 65 74 |riptor..|K.RtlGet|
|00001e30| 47 72 6f 75 70 53 65 63 | 75 72 69 74 79 44 65 73 |GroupSec|urityDes|
|00001e40| 63 72 69 70 74 6f 72 00 | 4f 05 52 74 6c 47 65 74 |criptor.|O.RtlGet|
|00001e50| 4f 77 6e 65 72 53 65 63 | 75 72 69 74 79 44 65 73 |OwnerSec|urityDes|
|00001e60| 63 72 69 70 74 6f 72 00 | 5f 07 5f 73 6e 77 70 72 |criptor.|_._snwpr|
|00001e70| 69 6e 74 66 00 00 1f 06 | 53 65 43 61 70 74 75 72 |intf....|SeCaptur|
|00001e80| 65 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |eSecurit|yDescrip|
|00001e90| 74 6f 72 00 29 02 49 6f | 49 73 57 64 6d 56 65 72 |tor.).Io|IsWdmVer|
|00001ea0| 73 69 6f 6e 41 76 61 69 | 6c 61 62 6c 65 00 d2 04 |sionAvai|lable...|
|00001eb0| 52 74 6c 41 62 73 6f 6c | 75 74 65 54 6f 53 65 6c |RtlAbsol|uteToSel|
|00001ec0| 66 52 65 6c 61 74 69 76 | 65 53 44 00 b8 06 5a 77 |fRelativ|eSD...Zw|
|00001ed0| 43 72 65 61 74 65 4b 65 | 79 00 12 03 4b 65 52 65 |CreateKe|y...KeRe|
|00001ee0| 6c 65 61 73 65 4d 75 74 | 65 78 00 00 b6 00 45 78 |leaseMut|ex....Ex|
|00001ef0| 52 65 6c 65 61 73 65 46 | 61 73 74 4d 75 74 65 78 |ReleaseF|astMutex|
|00001f00| 55 6e 73 61 66 65 00 00 | 5a 00 45 78 41 63 71 75 |Unsafe..|Z.ExAcqu|
|00001f10| 69 72 65 46 61 73 74 4d | 75 74 65 78 55 6e 73 61 |ireFastM|utexUnsa|
|00001f20| 66 65 00 00 77 02 49 6f | 55 6e 72 65 67 69 73 74 |fe..w.Io|Unregist|
|00001f30| 65 72 46 69 6c 65 53 79 | 73 74 65 6d 00 00 10 01 |erFileSy|stem....|
|00001f40| 46 73 52 74 6c 44 65 72 | 65 67 69 73 74 65 72 55 |FsRtlDer|egisterU|
|00001f50| 6e 63 50 72 6f 76 69 64 | 65 72 00 00 40 02 49 6f |ncProvid|er..@.Io|
|00001f60| 52 65 67 69 73 74 65 72 | 46 69 6c 65 53 79 73 74 |Register|FileSyst|
|00001f70| 65 6d 00 00 71 01 46 73 | 52 74 6c 52 65 67 69 73 |em..q.Fs|RtlRegis|
|00001f80| 74 65 72 55 6e 63 50 72 | 6f 76 69 64 65 72 00 00 |terUncPr|ovider..|
|00001f90| dd 02 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 4d 75 |..KeInit|ializeMu|
|00001fa0| 74 65 78 00 45 06 53 65 | 52 65 6c 65 61 73 65 53 |tex.E.Se|ReleaseS|
|00001fb0| 75 62 6a 65 63 74 43 6f | 6e 74 65 78 74 00 20 06 |ubjectCo|ntext. .|
|00001fc0| 53 65 43 61 70 74 75 72 | 65 53 75 62 6a 65 63 74 |SeCaptur|eSubject|
|00001fd0| 43 6f 6e 74 65 78 74 00 | 1b 02 49 6f 47 65 74 53 |Context.|..IoGetS|
|00001fe0| 74 61 63 6b 4c 69 6d 69 | 74 73 00 00 6a 02 49 6f |tackLimi|ts..j.Io|
|00001ff0| 53 65 74 54 6f 70 4c 65 | 76 65 6c 49 72 70 00 00 |SetTopLe|velIrp..|
|00002000| 1c 02 49 6f 47 65 74 54 | 6f 70 4c 65 76 65 6c 49 |..IoGetT|opLevelI|
|00002010| 72 70 00 00 c8 02 4b 65 | 47 65 74 43 75 72 72 65 |rp....Ke|GetCurre|
|00002020| 6e 74 54 68 72 65 61 64 | 00 00 26 02 49 6f 49 73 |ntThread|..&.IoIs|
|00002030| 4f 70 65 72 61 74 69 6f | 6e 53 79 6e 63 68 72 6f |Operatio|nSynchro|
|00002040| 6e 6f 75 73 00 00 2b 00 | 43 63 55 6e 69 6e 69 74 |nous..+.|CcUninit|
|00002050| 69 61 6c 69 7a 65 43 61 | 63 68 65 4d 61 70 00 00 |ializeCa|cheMap..|
|00002060| 25 00 43 63 53 65 74 46 | 69 6c 65 53 69 7a 65 73 |%.CcSetF|ileSizes|
|00002070| 00 00 79 03 4d 6d 43 61 | 6e 46 69 6c 65 42 65 54 |..y.MmCa|nFileBeT|
|00002080| 72 75 6e 63 61 74 65 64 | 00 00 11 00 43 63 49 6e |runcated|....CcIn|
|00002090| 69 74 69 61 6c 69 7a 65 | 43 61 63 68 65 4d 61 70 |itialize|CacheMap|
|000020a0| 00 00 55 01 46 73 52 74 | 6c 4e 6f 72 6d 61 6c 69 |..U.FsRt|lNormali|
|000020b0| 7a 65 4e 74 73 74 61 74 | 75 73 00 00 b0 00 45 78 |zeNtstat|us....Ex|
|000020c0| 52 61 69 73 65 53 74 61 | 74 75 73 00 81 03 4d 6d |RaiseSta|tus...Mm|
|000020d0| 46 6c 75 73 68 49 6d 61 | 67 65 53 65 63 74 69 6f |FlushIma|geSectio|
|000020e0| 6e 00 90 02 49 6f 57 72 | 69 74 65 45 72 72 6f 72 |n...IoWr|iteError|
|000020f0| 4c 6f 67 45 6e 74 72 79 | 00 00 ad 01 49 6f 41 6c |LogEntry|....IoAl|
|00002100| 6c 6f 63 61 74 65 45 72 | 72 6f 72 4c 6f 67 45 6e |locateEr|rorLogEn|
|00002110| 74 72 79 00 37 02 49 6f | 52 61 69 73 65 49 6e 66 |try.7.Io|RaiseInf|
|00002120| 6f 72 6d 61 74 69 6f 6e | 61 6c 48 61 72 64 45 72 |ormation|alHardEr|
|00002130| 72 6f 72 00 3f 06 53 65 | 51 75 65 72 79 41 75 74 |ror.?.Se|QueryAut|
|00002140| 68 65 6e 74 69 63 61 74 | 69 6f 6e 49 64 54 6f 6b |henticat|ionIdTok|
|00002150| 65 6e 00 00 c3 01 49 6f | 43 68 65 63 6b 45 61 42 |en....Io|CheckEaB|
|00002160| 75 66 66 65 72 56 61 6c | 69 64 69 74 79 00 3d 01 |ufferVal|idity.=.|
|00002170| 46 73 52 74 6c 49 73 4e | 74 73 74 61 74 75 73 45 |FsRtlIsN|tstatusE|
|00002180| 78 70 65 63 74 65 64 00 | 49 02 49 6f 52 65 6d 6f |xpected.|I.IoRemo|
|00002190| 76 65 53 68 61 72 65 41 | 63 63 65 73 73 00 17 01 |veShareA|ccess...|
|000021a0| 46 73 52 74 6c 46 61 73 | 74 55 6e 6c 6f 63 6b 41 |FsRtlFas|tUnlockA|
|000021b0| 6c 6c 00 00 17 02 49 6f | 47 65 74 52 65 71 75 65 |ll....Io|GetReque|
|000021c0| 73 74 6f 72 50 72 6f 63 | 65 73 73 00 19 01 46 73 |storProc|ess...Fs|
|000021d0| 52 74 6c 46 61 73 74 55 | 6e 6c 6f 63 6b 53 69 6e |RtlFastU|nlockSin|
|000021e0| 67 6c 65 00 c8 00 45 78 | 53 65 74 52 65 73 6f 75 |gle...Ex|SetResou|
|000021f0| 72 63 65 4f 77 6e 65 72 | 50 6f 69 6e 74 65 72 00 |rceOwner|Pointer.|
|00002200| 6d 01 46 73 52 74 6c 50 | 72 6f 63 65 73 73 46 69 |m.FsRtlP|rocessFi|
|00002210| 6c 65 4c 6f 63 6b 00 00 | 06 05 52 74 6c 43 72 65 |leLock..|..RtlCre|
|00002220| 61 74 65 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |ateUnico|deString|
|00002230| 00 00 b4 05 52 74 6c 50 | 72 65 66 69 78 55 6e 69 |....RtlP|refixUni|
|00002240| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 11 07 5a 77 |codeStri|ng....Zw|
|00002250| 51 75 65 72 79 53 79 6d | 62 6f 6c 69 63 4c 69 6e |QuerySym|bolicLin|
|00002260| 6b 4f 62 6a 65 63 74 00 | ed 06 5a 77 4f 70 65 6e |kObject.|..ZwOpen|
|00002270| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 4f 62 6a 65 |Symbolic|LinkObje|
|00002280| 63 74 00 00 e1 06 5a 77 | 4f 70 65 6e 44 69 72 65 |ct....Zw|OpenDire|
|00002290| 63 74 6f 72 79 4f 62 6a | 65 63 74 00 14 01 46 73 |ctoryObj|ect...Fs|
|000022a0| 52 74 6c 44 6f 65 73 4e | 61 6d 65 43 6f 6e 74 61 |RtlDoesN|ameConta|
|000022b0| 69 6e 57 69 6c 64 43 61 | 72 64 73 00 6f 00 45 78 |inWildCa|rds.o.Ex|
|000022c0| 43 6f 6e 76 65 72 74 45 | 78 63 6c 75 73 69 76 65 |ConvertE|xclusive|
|000022d0| 54 6f 53 68 61 72 65 64 | 4c 69 74 65 00 00 ba 00 |ToShared|Lite....|
|000022e0| 45 78 52 65 6c 65 61 73 | 65 52 65 73 6f 75 72 63 |ExReleas|eResourc|
|000022f0| 65 46 6f 72 54 68 72 65 | 61 64 4c 69 74 65 00 00 |eForThre|adLite..|
|00002300| d7 00 45 78 66 49 6e 74 | 65 72 6c 6f 63 6b 65 64 |..ExfInt|erlocked|
|00002310| 41 64 64 55 6c 6f 6e 67 | 00 00 1b 00 43 63 50 72 |AddUlong|....CcPr|
|00002320| 65 70 61 72 65 4d 64 6c | 57 72 69 74 65 00 05 00 |epareMdl|Write...|
|00002330| 43 63 43 6f 70 79 57 72 | 69 74 65 00 29 00 43 63 |CcCopyWr|ite.).Cc|
|00002340| 53 65 74 52 65 61 64 41 | 68 65 61 64 47 72 61 6e |SetReadA|headGran|
|00002350| 75 6c 61 72 69 74 79 00 | 05 01 46 73 52 74 6c 43 |ularity.|..FsRtlC|
|00002360| 68 65 63 6b 4c 6f 63 6b | 46 6f 72 57 72 69 74 65 |heckLock|ForWrite|
|00002370| 41 63 63 65 73 73 00 00 | 1d 00 43 63 50 75 72 67 |Access..|..CcPurg|
|00002380| 65 43 61 63 68 65 53 65 | 63 74 69 6f 6e 00 0a 00 |eCacheSe|ction...|
|00002390| 43 63 46 6c 75 73 68 43 | 61 63 68 65 00 00 a6 00 |CcFlushC|ache....|
|000023a0| 45 78 49 73 52 65 73 6f | 75 72 63 65 41 63 71 75 |ExIsReso|urceAcqu|
|000023b0| 69 72 65 64 45 78 63 6c | 75 73 69 76 65 4c 69 74 |iredExcl|usiveLit|
|000023c0| 65 00 a7 00 45 78 49 73 | 52 65 73 6f 75 72 63 65 |e...ExIs|Resource|
|000023d0| 41 63 71 75 69 72 65 64 | 53 68 61 72 65 64 4c 69 |Acquired|SharedLi|
|000023e0| 74 65 00 00 06 00 43 63 | 44 65 66 65 72 57 72 69 |te....Cc|DeferWri|
|000023f0| 74 65 00 00 03 00 43 63 | 43 61 6e 49 57 72 69 74 |te....Cc|CanIWrit|
|00002400| 65 00 15 00 43 63 4d 64 | 6c 52 65 61 64 00 04 00 |e...CcMd|lRead...|
|00002410| 43 63 43 6f 70 79 52 65 | 61 64 00 00 21 00 43 63 |CcCopyRe|ad..!.Cc|
|00002420| 53 65 74 41 64 64 69 74 | 69 6f 6e 61 6c 43 61 63 |SetAddit|ionalCac|
|00002430| 68 65 41 74 74 72 69 62 | 75 74 65 73 00 00 04 01 |heAttrib|utes....|
|00002440| 46 73 52 74 6c 43 68 65 | 63 6b 4c 6f 63 6b 46 6f |FsRtlChe|ckLockFo|
|00002450| 72 52 65 61 64 41 63 63 | 65 73 73 00 69 01 46 73 |rReadAcc|ess.i.Fs|
|00002460| 52 74 6c 50 6f 73 74 53 | 74 61 63 6b 4f 76 65 72 |RtlPostS|tackOver|
|00002470| 66 6c 6f 77 00 00 82 03 | 4d 6d 46 6f 72 63 65 53 |flow....|MmForceS|
|00002480| 65 63 74 69 6f 6e 43 6c | 6f 73 65 64 00 00 ff 04 |ectionCl|osed....|
|00002490| 52 74 6c 43 6f 70 79 55 | 6e 69 63 6f 64 65 53 74 |RtlCopyU|nicodeSt|
|000024a0| 72 69 6e 67 00 00 7b 02 | 49 6f 55 70 64 61 74 65 |ring..{.|IoUpdate|
|000024b0| 53 68 61 72 65 41 63 63 | 65 73 73 00 65 02 49 6f |ShareAcc|ess.e.Io|
|000024c0| 53 65 74 53 68 61 72 65 | 41 63 63 65 73 73 00 00 |SetShare|Access..|
|000024d0| c8 01 49 6f 43 68 65 63 | 6b 53 68 61 72 65 41 63 |..IoChec|kShareAc|
|000024e0| 63 65 73 73 00 00 87 04 | 50 73 47 65 74 50 72 6f |cess....|PsGetPro|
|000024f0| 63 65 73 73 49 6d 61 67 | 65 46 69 6c 65 4e 61 6d |cessImag|eFileNam|
|00002500| 65 00 ab 00 45 78 51 75 | 65 75 65 57 6f 72 6b 49 |e...ExQu|eueWorkI|
|00002510| 74 65 6d 00 16 00 43 63 | 4d 64 6c 52 65 61 64 43 |tem...Cc|MdlReadC|
|00002520| 6f 6d 70 6c 65 74 65 00 | 18 00 43 63 4d 64 6c 57 |omplete.|..CcMdlW|
|00002530| 72 69 74 65 43 6f 6d 70 | 6c 65 74 65 00 00 16 01 |riteComp|lete....|
|00002540| 46 73 52 74 6c 46 61 73 | 74 43 68 65 63 6b 4c 6f |FsRtlFas|tCheckLo|
|00002550| 63 6b 46 6f 72 57 72 69 | 74 65 00 00 15 01 46 73 |ckForWri|te....Fs|
|00002560| 52 74 6c 46 61 73 74 43 | 68 65 63 6b 4c 6f 63 6b |RtlFastC|heckLock|
|00002570| 46 6f 72 52 65 61 64 00 | 07 00 43 63 46 61 73 74 |ForRead.|..CcFast|
|00002580| 43 6f 70 79 52 65 61 64 | 00 00 08 00 43 63 46 61 |CopyRead|....CcFa|
|00002590| 73 74 43 6f 70 79 57 72 | 69 74 65 00 30 00 43 63 |stCopyWr|ite.0.Cc|
|000025a0| 5a 65 72 6f 44 61 74 61 | 00 00 2e 01 46 73 52 74 |ZeroData|....FsRt|
|000025b0| 6c 49 6e 69 74 69 61 6c | 69 7a 65 46 69 6c 65 4c |lInitial|izeFileL|
|000025c0| 6f 63 6b 00 51 06 53 65 | 54 6f 6b 65 6e 49 73 52 |ock.Q.Se|TokenIsR|
|000025d0| 65 73 74 72 69 63 74 65 | 64 00 88 01 46 73 52 74 |estricte|d...FsRt|
|000025e0| 6c 55 6e 69 6e 69 74 69 | 61 6c 69 7a 65 46 69 6c |lUniniti|alizeFil|
|000025f0| 65 4c 6f 63 6b 00 fb 01 | 49 6f 46 72 65 65 4d 64 |eLock...|IoFreeMd|
|00002600| 6c 00 a7 03 4d 6d 50 72 | 6f 62 65 41 6e 64 4c 6f |l...MmPr|obeAndLo|
|00002610| 63 6b 50 61 67 65 73 00 | af 01 49 6f 41 6c 6c 6f |ckPages.|..IoAllo|
|00002620| 63 61 74 65 4d 64 6c 00 | de 02 4b 65 49 6e 69 74 |cateMdl.|..KeInit|
|00002630| 69 61 6c 69 7a 65 51 75 | 65 75 65 00 e7 02 4b 65 |ializeQu|eue...Ke|
|00002640| 49 6e 73 65 72 74 51 75 | 65 75 65 00 1a 03 4b 65 |InsertQu|eue...Ke|
|00002650| 52 65 6d 6f 76 65 51 75 | 65 75 65 00 39 04 4f 62 |RemoveQu|eue.9.Ob|
|00002660| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|00002670| 79 50 6f 69 6e 74 65 72 | 00 00 c9 04 50 73 54 68 |yPointer|....PsTh|
|00002680| 72 65 61 64 54 79 70 65 | 00 00 54 05 52 74 6c 47 |readType|..T.RtlG|
|00002690| 65 74 56 65 72 73 69 6f | 6e 00 12 07 5a 77 51 75 |etVersio|n...ZwQu|
|000026a0| 65 72 79 53 79 73 74 65 | 6d 49 6e 66 6f 72 6d 61 |erySyste|mInforma|
|000026b0| 74 69 6f 6e 00 00 ab 03 | 4d 6d 51 75 65 72 79 53 |tion....|MmQueryS|
|000026c0| 79 73 74 65 6d 53 69 7a | 65 00 22 03 4b 65 52 75 |ystemSiz|e.".KeRu|
|000026d0| 6e 64 6f 77 6e 51 75 65 | 75 65 00 00 a3 04 50 73 |ndownQue|ue....Ps|
|000026e0| 49 73 54 68 72 65 61 64 | 54 65 72 6d 69 6e 61 74 |IsThread|Terminat|
|000026f0| 69 6e 67 00 f9 05 52 74 | 6c 55 70 63 61 73 65 55 |ing...Rt|lUpcaseU|
|00002700| 6e 69 63 6f 64 65 43 68 | 61 72 00 00 b8 03 4d 6d |nicodeCh|ar....Mm|
|00002710| 55 6e 6c 6f 63 6b 50 61 | 67 65 73 00 b4 02 4b 65 |UnlockPa|ges...Ke|
|00002720| 43 61 6e 63 65 6c 54 69 | 6d 65 72 00 35 03 4b 65 |CancelTi|mer.5.Ke|
|00002730| 53 65 74 54 69 6d 65 72 | 00 00 4a 03 4b 65 66 52 |SetTimer|..J.KefR|
|00002740| 65 6c 65 61 73 65 53 70 | 69 6e 4c 6f 63 6b 46 72 |eleaseSp|inLockFr|
|00002750| 6f 6d 44 70 63 4c 65 76 | 65 6c 00 00 49 03 4b 65 |omDpcLev|el..I.Ke|
|00002760| 66 41 63 71 75 69 72 65 | 53 70 69 6e 4c 6f 63 6b |fAcquire|SpinLock|
|00002770| 41 74 44 70 63 4c 65 76 | 65 6c 00 00 49 07 5f 61 |AtDpcLev|el..I._a|
|00002780| 6c 6c 64 69 76 00 e2 02 | 4b 65 49 6e 69 74 69 61 |lldiv...|KeInitia|
|00002790| 6c 69 7a 65 54 69 6d 65 | 72 00 d8 02 4b 65 49 6e |lizeTime|r...KeIn|
|000027a0| 69 74 69 61 6c 69 7a 65 | 44 70 63 00 00 03 4b 65 |itialize|Dpc...Ke|
|000027b0| 51 75 65 72 79 54 69 6d | 65 49 6e 63 72 65 6d 65 |QueryTim|eIncreme|
|000027c0| 6e 74 00 00 62 00 45 78 | 41 63 71 75 69 72 65 53 |nt..b.Ex|AcquireS|
|000027d0| 68 61 72 65 64 57 61 69 | 74 46 6f 72 45 78 63 6c |haredWai|tForExcl|
|000027e0| 75 73 69 76 65 00 61 00 | 45 78 41 63 71 75 69 72 |usive.a.|ExAcquir|
|000027f0| 65 53 68 61 72 65 64 53 | 74 61 72 76 65 45 78 63 |eSharedS|tarveExc|
|00002800| 6c 75 73 69 76 65 00 00 | 44 05 52 74 6c 47 65 74 |lusive..|D.RtlGet|
|00002810| 43 61 6c 6c 65 72 73 41 | 64 64 72 65 73 73 00 00 |CallersA|ddress..|
|00002820| 67 03 4c 73 61 46 72 65 | 65 52 65 74 75 72 6e 42 |g.LsaFre|eReturnB|
|00002830| 75 66 66 65 72 00 c1 01 | 49 6f 43 61 6e 63 65 6c |uffer...|IoCancel|
|00002840| 49 72 70 00 ae 01 49 6f | 41 6c 6c 6f 63 61 74 65 |Irp...Io|Allocate|
|00002850| 49 72 70 00 fe 01 49 6f | 46 72 65 65 57 6f 72 6b |Irp...Io|FreeWork|
|00002860| 49 74 65 6d 00 00 34 02 | 49 6f 51 75 65 75 65 57 |Item..4.|IoQueueW|
|00002870| 6f 72 6b 49 74 65 6d 00 | b2 01 49 6f 41 6c 6c 6f |orkItem.|..IoAllo|
|00002880| 63 61 74 65 57 6f 72 6b | 49 74 65 6d 00 00 85 00 |cateWork|Item....|
|00002890| 45 78 46 72 65 65 50 6f | 6f 6c 57 69 74 68 54 61 |ExFreePo|olWithTa|
|000028a0| 67 00 9a 07 77 63 73 63 | 68 72 00 00 6d 00 45 78 |g...wcsc|hr..m.Ex|
|000028b0| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|000028c0| 54 61 67 00 50 00 4b 65 | 47 65 74 43 75 72 72 65 |Tag.P.Ke|GetCurre|
|000028d0| 6e 74 49 72 71 6c 00 00 | 00 00 45 78 41 63 71 75 |ntIrql..|..ExAcqu|
|000028e0| 69 72 65 46 61 73 74 4d | 75 74 65 78 00 00 01 00 |ireFastM|utex....|
|000028f0| 45 78 52 65 6c 65 61 73 | 65 46 61 73 74 4d 75 74 |ExReleas|eFastMut|
|00002900| 65 78 00 00 5c 00 4b 66 | 41 63 71 75 69 72 65 53 |ex..\.Kf|AcquireS|
|00002910| 70 69 6e 4c 6f 63 6b 00 | 5f 00 4b 66 52 65 6c 65 |pinLock.|_.KfRele|
|00002920| 61 73 65 53 70 69 6e 4c | 6f 63 6b 00 30 00 47 65 |aseSpinL|ock.0.Ge|
|00002930| 74 53 65 63 75 72 69 74 | 79 55 73 65 72 49 6e 66 |tSecurit|yUserInf|
|00002940| 6f 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |o.......|........|
|00002950| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002960| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002970| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002980| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00002990| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000029a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000029b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000029c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000029d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000029e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000029f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+