/ PC World 2005 December / PCWorld_2005-12_cd.bin / software / temacd / tiny / tpf-6[1].5.126.exe / Tiny Firewall 2005.msi / KmxAgent.sys / INIT

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4b 6d 78 41 67 65 6e 74 | 20 44 72 69 76 65 72 20 |KmxAgent| Driver |
|00000010| 2d 20 44 72 69 76 65 72 | 45 6e 74 72 79 0a 43 6f |- Driver|Entry.Co|
|00000020| 6d 70 69 6c 65 64 20 61 | 74 20 31 38 3a 33 39 3a |mpiled a|t 18:39:|
|00000030| 31 38 20 6f 6e 20 4a 75 | 6c 20 31 31 20 32 30 30 |18 on Ju|l 11 200|
|00000040| 35 0a 00 00 4b 00 6d 00 | 78 00 41 00 67 00 65 00 |5...K.m.|x.A.g.e.|
|00000050| 6e 00 74 00 4c 00 6f 00 | 67 00 00 00 4b 6d 78 41 |n.t.L.o.|g...KmxA|
|00000060| 67 65 6e 74 20 2d 20 44 | 72 69 76 65 72 45 6e 74 |gent - D|riverEnt|
|00000070| 72 79 0a 00 5c 00 44 00 | 65 00 76 00 69 00 63 00 |ry..\.D.|e.v.i.c.|
|00000080| 65 00 5c 00 4b 00 6d 00 | 78 00 41 00 67 00 65 00 |e.\.K.m.|x.A.g.e.|
|00000090| 6e 00 74 00 00 00 00 00 | 5c 00 3f 00 3f 00 5c 00 |n.t.....|\.?.?.\.|
|000000a0| 4b 00 6d 00 78 00 41 00 | 67 00 65 00 6e 00 74 00 |K.m.x.A.|g.e.n.t.|
|000000b0| 00 00 00 00 44 72 69 76 | 65 72 45 6e 74 72 79 20 |....Driv|erEntry |
|000000c0| 2d 20 45 72 72 6f 72 20 | 61 6c 6c 6f 63 61 74 69 |- Error |allocati|
|000000d0| 6e 67 20 62 75 66 66 65 | 72 0a 00 00 44 72 69 76 |ng buffe|r...Driv|
|000000e0| 65 72 45 6e 74 72 79 20 | 2d 20 45 72 72 6f 72 20 |erEntry |- Error |
|000000f0| 6c 6f 61 64 69 6e 67 20 | 4b 6d 78 41 67 65 6e 74 |loading |KmxAgent|
|00000100| 0a 00 00 00 45 72 72 6f | 72 20 49 6f 52 65 67 69 |....Erro|r IoRegi|
|00000110| 73 74 65 72 46 73 52 65 | 67 69 73 74 72 61 74 69 |sterFsRe|gistrati|
|00000120| 6f 6e 43 68 61 6e 67 65 | 20 63 61 6c 6c 0a 00 cc |onChange| call...|
|00000130| 83 ec 10 56 68 00 20 02 | 00 e8 0a bf ff ff 83 c4 |...Vh. .|........|
|00000140| 04 68 4b 6d 78 41 e8 a5 | 9e ff ff e8 e0 9d ff ff |.hKmxA..|........|
|00000150| 8b f0 85 f6 74 0e e8 a5 | 9e ff ff 8b c6 5e 83 c4 |....t...|.....^..|
|00000160| 10 c2 08 00 53 8b 5c 24 | 20 55 8b 6c 24 20 33 c9 |....S.\$| U.l$ 3.|
|00000170| 89 2d 74 f0 01 00 66 8b | 0b 8b 53 04 8d 44 24 20 |.-t...f.|..S..D$ |
|00000180| 50 66 d1 e9 68 40 46 01 | 00 6a 00 c7 44 24 2c 00 |Pf..h@F.|.j..D$,.|
|00000190| 00 00 00 51 52 e8 46 ac | ff ff 85 c0 75 0f 8b 44 |...QR.F.|....u..D|
|000001a0| 24 20 85 c0 74 07 c6 05 | 79 f0 01 00 01 a1 74 10 |$ ..t...|y.....t.|
|000001b0| 01 00 8b 08 81 e1 ff ff | ff 0f 81 f9 28 0a 00 00 |........|....(...|
|000001c0| 73 07 c6 05 79 f0 01 00 | 00 57 68 44 20 02 00 68 |s...y...|.WhD ..h|
|000001d0| 80 f0 01 00 53 e8 f6 a7 | ff ff 8b 15 98 f0 01 00 |....S...|........|
|000001e0| 68 5c 20 02 00 68 cc 11 | 01 00 52 68 80 f0 01 00 |h\ ..h..|..Rh....|
|000001f0| e8 8b a5 ff ff 8b 3d 30 | 10 01 00 83 c4 10 68 74 |......=0|......ht|
|00000200| 20 02 00 8d 44 24 14 50 | ff d7 68 70 f0 01 00 6a | ...D$.P|..hp...j|
|00000210| 00 6a 00 6a 22 8d 4c 24 | 20 51 6a 00 55 ff 15 a0 |.j.j".L$| Qj.U...|
|00000220| 10 01 00 8b f0 85 f6 7c | 4c 68 98 20 02 00 8d 54 |.......||Lh. ...T|
|00000230| 24 1c 52 ff d7 8b 35 9c | 10 01 00 8d 44 24 10 50 |$.R...5.|....D$.P|
|00000240| 8d 4c 24 1c 51 ff d6 85 | c0 7d 3b 8d 54 24 18 52 |.L$.Q...|.};.T$.R|
|00000250| ff 15 98 10 01 00 8d 44 | 24 10 50 8d 4c 24 1c 51 |.......D|$.P.L$.Q|
|00000260| ff d6 8b f0 85 f6 7d 1e | 8b 15 70 f0 01 00 52 ff |......}.|..p...R.|
|00000270| 15 94 10 01 00 e8 86 9d | ff ff 5f 5d 5b 8b c6 5e |........|.._][..^|
|00000280| 83 c4 10 c2 08 00 a1 70 | f0 01 00 8a 0d 79 f0 01 |.......p|.....y..|
|00000290| 00 84 c9 a3 a4 f0 01 00 | b8 70 48 01 00 75 72 89 |........|.pH..ur.|
|000002a0| 45 38 89 45 3c 89 45 40 | 89 45 44 89 45 48 89 45 |E8.E<.E@|.ED.EH.E|
|000002b0| 4c 89 45 50 89 45 54 89 | 45 58 89 45 5c 89 45 60 |L.EP.ET.|EX.E\.E`|
|000002c0| 89 45 64 89 45 68 89 45 | 6c 89 45 70 89 45 74 89 |.Ed.Eh.E|l.Ep.Et.|
|000002d0| 45 78 89 45 7c 89 85 80 | 00 00 00 89 85 84 00 00 |Ex.E|...|........|
|000002e0| 00 89 85 88 00 00 00 89 | 85 8c 00 00 00 89 85 90 |........|........|
|000002f0| 00 00 00 89 85 94 00 00 | 00 89 85 98 00 00 00 89 |........|........|
|00000300| 85 9c 00 00 00 89 85 a0 | 00 00 00 89 85 a4 00 00 |........|........|
|00000310| 00 89 45 70 89 45 74 89 | 45 38 89 45 40 89 85 80 |..Ep.Et.|E8.E@...|
|00000320| 00 00 00 66 8b 4b 02 0f | b7 c1 d1 e8 66 89 0d 6a |...f.K..|....f..j|
|00000330| f0 01 00 66 8b 13 d1 e0 | 85 c0 66 89 15 68 f0 01 |...f....|..f..h..|
|00000340| 00 74 17 68 44 64 6b 20 | 50 6a 00 ff 15 a0 11 01 |.t.hDdk |Pj......|
|00000350| 00 66 8b 0d 6a f0 01 00 | eb 02 33 c0 85 c0 a3 6c |.f..j...|..3....l|
|00000360| f0 01 00 75 3e a1 98 f0 | 01 00 68 b4 20 02 00 68 |...u>...|..h. ..h|
|00000370| cc 11 01 00 50 68 80 f0 | 01 00 e8 01 a4 ff ff 8b |....Ph..|........|
|00000380| 0d 70 f0 01 00 83 c4 10 | 51 ff 15 94 10 01 00 e8 |.p......|Q.......|
|00000390| 6c 9c ff ff 5f 5d 5b b8 | 9a 00 00 c0 5e 83 c4 10 |l..._][.|....^...|
|000003a0| c2 08 00 8b 73 04 0f b7 | c9 8b d1 c1 e9 02 8b f8 |....s...|........|
|000003b0| f3 a5 8b ca 83 e1 03 53 | f3 a4 e8 61 23 ff ff 8b |.......S|...a#...|
|000003c0| f0 56 e8 39 47 ff ff 85 | f6 8b f8 74 07 56 ff 15 |.V.9G...|...t.V..|
|000003d0| 98 11 01 00 53 e8 46 24 | ff ff 85 ff 7d 3b a1 98 |....S.F$|....};..|
|000003e0| f0 01 00 68 dc 20 02 00 | 68 cc 11 01 00 50 68 80 |...h. ..|h....Ph.|
|000003f0| f0 01 00 e8 88 a3 ff ff | 8b 0d 70 f0 01 00 83 c4 |........|..p.....|
|00000400| 10 51 ff 15 94 10 01 00 | e8 f3 9b ff ff 8b c7 5f |.Q......|......._|
|00000410| 5d 5b 5e 83 c4 10 c2 08 | 00 a0 79 f0 01 00 84 c0 |][^.....|..y.....|
|00000420| 75 4a 68 20 7c 01 00 55 | ff 15 90 10 01 00 8b f8 |uJh |..U|........|
|00000430| 85 ff 7d 0f 68 04 21 02 | 00 b9 80 f0 01 00 e8 1d |..}.h.!.|........|
|00000440| ef fe ff 8b 15 74 10 01 | 00 8b 02 25 ff ff ff 0f |.....t..|...%....|
|00000450| 3d 28 0a 00 00 73 15 be | 02 00 00 00 8d 64 24 00 |=(...s..|.....d$.|
|00000460| 56 e8 2a 54 ff ff 46 83 | fe 1a 72 f4 e8 ef 72 ff |V.*T..F.|..r...r.|
|00000470| ff 8b c7 5f 5d 5b 5e 83 | c4 10 c2 08 00 cc cc cc |..._][^.|........|
|00000480| cc 24 01 00 00 00 00 00 | 00 00 00 00 be 2e 01 00 |.$......|........|
|00000490| 10 10 00 00 bc 24 01 00 | 00 00 00 00 00 00 00 00 |.....$..|........|
|000004a0| 0c 2f 01 00 00 10 00 00 | 00 00 00 00 00 00 00 00 |./......|........|
|000004b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 e2 2e 01 00 |........|........|
|000004c0| cc 2e 01 00 f8 2e 01 00 | 00 00 00 00 9e 26 01 00 |........|.....&..|
|000004d0| b6 26 01 00 ca 26 01 00 | d4 26 01 00 f2 26 01 00 |.&...&..|.&...&..|
|000004e0| 06 27 01 00 16 27 01 00 | 32 27 01 00 52 27 01 00 |.'...'..|2'..R'..|
|000004f0| 6a 27 01 00 78 27 01 00 | 94 27 01 00 9e 27 01 00 |j'..x'..|.'...'..|
|00000500| b6 27 01 00 ce 27 01 00 | e4 27 01 00 ee 27 01 00 |.'...'..|.'...'..|
|00000510| f8 27 01 00 0a 28 01 00 | 22 28 01 00 3e 28 01 00 |.'...(..|"(..>(..|
|00000520| 5e 28 01 00 6e 28 01 00 | 80 28 01 00 96 28 01 00 |^(..n(..|.(...(..|
|00000530| b2 28 01 00 c2 28 01 00 | e4 28 01 00 00 29 01 00 |.(...(..|.(...)..|
|00000540| 1c 29 01 00 28 29 01 00 | 44 29 01 00 5a 29 01 00 |.)..()..|D)..Z)..|
|00000550| 7c 29 01 00 8e 29 01 00 | a6 29 01 00 be 29 01 00 ||)...)..|.)...)..|
|00000560| d0 29 01 00 dc 29 01 00 | ec 29 01 00 04 2a 01 00 |.)...)..|.)...*..|
|00000570| 20 2a 01 00 30 2a 01 00 | 44 2a 01 00 60 2a 01 00 | *..0*..|D*..`*..|
|00000580| 7e 2a 01 00 94 2a 01 00 | a2 2a 01 00 b2 2a 01 00 |~*...*..|.*...*..|
|00000590| d0 2a 01 00 e2 2a 01 00 | f2 2a 01 00 04 2b 01 00 |.*...*..|.*...+..|
|000005a0| 1e 2b 01 00 2a 2b 01 00 | 46 2b 01 00 56 2b 01 00 |.+..*+..|F+..V+..|
|000005b0| 74 2b 01 00 8e 2b 01 00 | 9a 2b 01 00 aa 2b 01 00 |t+...+..|.+...+..|
|000005c0| c0 2b 01 00 d0 2b 01 00 | e8 2b 01 00 fe 2b 01 00 |.+...+..|.+...+..|
|000005d0| 12 2c 01 00 28 2c 01 00 | 40 2c 01 00 62 2c 01 00 |.,..(,..|@,..b,..|
|000005e0| 7e 2c 01 00 98 2c 01 00 | a2 2c 01 00 c0 2c 01 00 |~,...,..|.,...,..|
|000005f0| de 2c 01 00 00 2d 01 00 | 14 2d 01 00 22 2d 01 00 |.,...-..|.-.."-..|
|00000600| 40 2d 01 00 4a 2d 01 00 | 54 2d 01 00 62 2d 01 00 |@-..J-..|T-..b-..|
|00000610| 7a 2d 01 00 92 2d 01 00 | b2 2d 01 00 ce 2d 01 00 |z-...-..|.-...-..|
|00000620| e2 2d 01 00 f4 2d 01 00 | 00 2e 01 00 10 2e 01 00 |.-...-..|........|
|00000630| 2c 2e 01 00 44 2e 01 00 | 52 2e 01 00 68 2e 01 00 |,...D...|R...h...|
|00000640| 74 2e 01 00 8a 2e 01 00 | 9a 2e 01 00 b2 2e 01 00 |t.......|........|
|00000650| 8a 26 01 00 7c 26 01 00 | 66 2b 01 00 64 26 01 00 |.&..|&..|f+..d&..|
|00000660| 00 00 00 00 3a 00 45 78 | 41 6c 6c 6f 63 61 74 65 |....:.Ex|Allocate|
|00000670| 50 6f 6f 6c 57 69 74 68 | 54 61 67 00 47 00 45 78 |PoolWith|Tag.G.Ex|
|00000680| 46 72 65 65 50 6f 6f 6c | 00 00 c4 01 4b 65 49 6e |FreePool|....KeIn|
|00000690| 69 74 69 61 6c 69 7a 65 | 45 76 65 6e 74 00 bc 02 |itialize|Event...|
|000006a0| 4f 62 66 44 65 72 65 66 | 65 72 65 6e 63 65 4f 62 |ObfDeref|erenceOb|
|000006b0| 6a 65 63 74 00 00 dd 01 | 4b 65 51 75 65 72 79 53 |ject....|KeQueryS|
|000006c0| 79 73 74 65 6d 54 69 6d | 65 00 1d 04 5a 77 43 6c |ystemTim|e...ZwCl|
|000006d0| 6f 73 65 00 b9 02 4f 62 | 52 65 66 65 72 65 6e 63 |ose...Ob|Referenc|
|000006e0| 65 4f 62 6a 65 63 74 42 | 79 50 6f 69 6e 74 65 72 |eObjectB|yPointer|
|000006f0| 00 00 45 00 45 78 45 76 | 65 6e 74 4f 62 6a 65 63 |..E.ExEv|entObjec|
|00000700| 74 54 79 70 65 00 a8 01 | 4b 65 43 6c 65 61 72 45 |tType...|KeClearE|
|00000710| 76 65 6e 74 00 00 1e 01 | 49 6f 43 72 65 61 74 65 |vent....|IoCreate|
|00000720| 4e 6f 74 69 66 69 63 61 | 74 69 6f 6e 45 76 65 6e |Notifica|tionEven|
|00000730| 74 00 22 01 49 6f 43 72 | 65 61 74 65 53 79 6e 63 |t.".IoCr|eateSync|
|00000740| 68 72 6f 6e 69 7a 61 74 | 69 6f 6e 45 76 65 6e 74 |hronizat|ionEvent|
|00000750| 00 00 66 03 52 74 6c 49 | 6e 69 74 55 6e 69 63 6f |..f.RtlI|nitUnico|
|00000760| 64 65 53 74 72 69 6e 67 | 00 00 fb 01 4b 65 53 65 |deString|....KeSe|
|00000770| 74 45 76 65 6e 74 00 00 | 70 03 52 74 6c 49 6e 74 |tEvent..|p.RtlInt|
|00000780| 65 67 65 72 54 6f 55 6e | 69 63 6f 64 65 53 74 72 |egerToUn|icodeStr|
|00000790| 69 6e 67 00 b8 04 77 63 | 73 63 61 74 00 00 d6 02 |ing...wc|scat....|
|000007a0| 50 73 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |PsGetCur|rentProc|
|000007b0| 65 73 73 49 64 00 d7 02 | 50 73 47 65 74 43 75 72 |essId...|PsGetCur|
|000007c0| 72 65 6e 74 54 68 72 65 | 61 64 49 64 00 00 3a 01 |rentThre|adId..:.|
|000007d0| 49 6f 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |IoGetCur|rentProc|
|000007e0| 65 73 73 00 bb 04 77 63 | 73 63 70 79 00 00 bd 04 |ess...wc|scpy....|
|000007f0| 77 63 73 6c 65 6e 00 00 | 34 01 49 6f 46 72 65 65 |wcslen..|4.IoFree|
|00000800| 57 6f 72 6b 49 74 65 6d | 00 00 14 02 4b 65 57 61 |WorkItem|....KeWa|
|00000810| 69 74 46 6f 72 53 69 6e | 67 6c 65 4f 62 6a 65 63 |itForSin|gleObjec|
|00000820| 74 00 12 02 4b 65 57 61 | 69 74 46 6f 72 4d 75 6c |t...KeWa|itForMul|
|00000830| 74 69 70 6c 65 4f 62 6a | 65 63 74 73 00 00 12 03 |tipleObj|ects....|
|00000840| 52 74 6c 43 6f 6e 76 65 | 72 74 4c 6f 6e 67 54 6f |RtlConve|rtLongTo|
|00000850| 4c 61 72 67 65 49 6e 74 | 65 67 65 72 00 00 43 04 |LargeInt|eger..C.|
|00000860| 5a 77 4f 70 65 6e 54 68 | 72 65 61 64 00 00 5d 01 |ZwOpenTh|read..].|
|00000870| 49 6f 51 75 65 75 65 57 | 6f 72 6b 49 74 65 6d 00 |IoQueueW|orkItem.|
|00000880| 05 01 49 6f 41 6c 6c 6f | 63 61 74 65 57 6f 72 6b |..IoAllo|cateWork|
|00000890| 49 74 65 6d 00 00 43 02 | 4d 6d 47 65 74 53 79 73 |Item..C.|MmGetSys|
|000008a0| 74 65 6d 52 6f 75 74 69 | 6e 65 41 64 64 72 65 73 |temRouti|neAddres|
|000008b0| 73 00 7b 02 4e 74 42 75 | 69 6c 64 4e 75 6d 62 65 |s.{.NtBu|ildNumbe|
|000008c0| 72 00 ff 02 52 74 6c 41 | 70 70 65 6e 64 55 6e 69 |r...RtlA|ppendUni|
|000008d0| 63 6f 64 65 53 74 72 69 | 6e 67 54 6f 53 74 72 69 |codeStri|ngToStri|
|000008e0| 6e 67 00 00 44 01 49 6f | 47 65 74 52 65 6c 61 74 |ng..D.Io|GetRelat|
|000008f0| 65 64 44 65 76 69 63 65 | 4f 62 6a 65 63 74 00 00 |edDevice|Object..|
|00000900| 00 03 52 74 6c 41 70 70 | 65 6e 64 55 6e 69 63 6f |..RtlApp|endUnico|
|00000910| 64 65 54 6f 53 74 72 69 | 6e 67 00 00 91 04 5f 77 |deToStri|ng...._w|
|00000920| 63 73 6e 69 63 6d 70 00 | b7 02 4f 62 52 65 66 65 |csnicmp.|..ObRefe|
|00000930| 72 65 6e 63 65 4f 62 6a | 65 63 74 42 79 48 61 6e |renceObj|ectByHan|
|00000940| 64 6c 65 00 97 01 49 6f | 66 43 6f 6d 70 6c 65 74 |dle...Io|fComplet|
|00000950| 65 52 65 71 75 65 73 74 | 00 00 66 01 49 6f 52 65 |eRequest|..f.IoRe|
|00000960| 67 69 73 74 65 72 46 73 | 52 65 67 69 73 74 72 61 |gisterFs|Registra|
|00000970| 74 69 6f 6e 43 68 61 6e | 67 65 00 00 25 01 49 6f |tionChan|ge..%.Io|
|00000980| 44 65 6c 65 74 65 44 65 | 76 69 63 65 00 00 27 01 |DeleteDe|vice..'.|
|00000990| 49 6f 44 65 6c 65 74 65 | 53 79 6d 62 6f 6c 69 63 |IoDelete|Symbolic|
|000009a0| 4c 69 6e 6b 00 00 21 01 | 49 6f 43 72 65 61 74 65 |Link..!.|IoCreate|
|000009b0| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 00 00 1b 01 |Symbolic|Link....|
|000009c0| 49 6f 43 72 65 61 74 65 | 44 65 76 69 63 65 00 00 |IoCreate|Device..|
|000009d0| 2d 00 44 62 67 50 72 69 | 6e 74 00 00 36 04 5a 77 |-.DbgPri|nt..6.Zw|
|000009e0| 4c 6f 61 64 44 72 69 76 | 65 72 00 00 19 03 52 74 |LoadDriv|er....Rt|
|000009f0| 6c 43 6f 70 79 55 6e 69 | 63 6f 64 65 53 74 72 69 |lCopyUni|codeStri|
|00000a00| 6e 67 00 00 d8 03 52 74 | 6c 56 6f 6c 75 6d 65 44 |ng....Rt|lVolumeD|
|00000a10| 65 76 69 63 65 54 6f 44 | 6f 73 4e 61 6d 65 00 00 |eviceToD|osName..|
|00000a20| ed 02 50 73 54 68 72 65 | 61 64 54 79 70 65 00 00 |..PsThre|adType..|
|00000a30| 88 01 49 6f 54 68 72 65 | 61 64 54 6f 50 72 6f 63 |..IoThre|adToProc|
|00000a40| 65 73 73 00 e0 02 50 73 | 4c 6f 6f 6b 75 70 54 68 |ess...Ps|LookupTh|
|00000a50| 72 65 61 64 42 79 54 68 | 72 65 61 64 49 64 00 00 |readByTh|readId..|
|00000a60| de 02 50 73 4c 6f 6f 6b | 75 70 50 72 6f 63 65 73 |..PsLook|upProces|
|00000a70| 73 42 79 50 72 6f 63 65 | 73 73 49 64 00 00 64 02 |sByProce|ssId..d.|
|00000a80| 4d 6d 53 79 73 74 65 6d | 52 61 6e 67 65 53 74 61 |MmSystem|RangeSta|
|00000a90| 72 74 00 00 59 04 5a 77 | 52 65 61 64 46 69 6c 65 |rt..Y.Zw|ReadFile|
|00000aa0| 00 00 22 04 5a 77 43 72 | 65 61 74 65 46 69 6c 65 |..".ZwCr|eateFile|
|00000ab0| 00 00 09 01 49 6f 41 74 | 74 61 63 68 44 65 76 69 |....IoAt|tachDevi|
|00000ac0| 63 65 54 6f 44 65 76 69 | 63 65 53 74 61 63 6b 00 |ceToDevi|ceStack.|
|00000ad0| 28 01 49 6f 44 65 74 61 | 63 68 44 65 76 69 63 65 |(.IoDeta|chDevice|
|00000ae0| 00 00 96 01 49 6f 66 43 | 61 6c 6c 44 72 69 76 65 |....IofC|allDrive|
|00000af0| 72 00 68 00 45 78 51 75 | 65 75 65 57 6f 72 6b 49 |r.h.ExQu|eueWorkI|
|00000b00| 74 65 6d 00 0f 03 52 74 | 6c 43 6f 6d 70 61 72 65 |tem...Rt|lCompare|
|00000b10| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 8f 04 |UnicodeS|tring...|
|00000b20| 5f 77 63 73 69 63 6d 70 | 00 00 56 04 5a 77 51 75 |_wcsicmp|..V.ZwQu|
|00000b30| 65 72 79 53 79 73 74 65 | 6d 49 6e 66 6f 72 6d 61 |erySyste|mInforma|
|00000b40| 74 69 6f 6e 00 00 3f 04 | 5a 77 4f 70 65 6e 50 72 |tion..?.|ZwOpenPr|
|00000b50| 6f 63 65 73 73 00 7f 03 | 52 74 6c 4c 65 6e 67 74 |ocess...|RtlLengt|
|00000b60| 68 53 69 64 00 00 37 03 | 52 74 6c 45 71 75 61 6c |hSid..7.|RtlEqual|
|00000b70| 53 69 64 00 0e 02 4b 65 | 55 6e 73 74 61 63 6b 44 |Sid...Ke|UnstackD|
|00000b80| 65 74 61 63 68 50 72 6f | 63 65 73 73 00 00 33 01 |etachPro|cess..3.|
|00000b90| 49 6f 46 72 65 65 4d 64 | 6c 00 67 02 4d 6d 55 6e |IoFreeMd|l.g.MmUn|
|00000ba0| 6c 6f 63 6b 50 61 67 65 | 73 00 59 02 4d 6d 50 72 |lockPage|s.Y.MmPr|
|00000bb0| 6f 62 65 41 6e 64 4c 6f | 63 6b 50 61 67 65 73 00 |obeAndLo|ckPages.|
|00000bc0| 04 01 49 6f 41 6c 6c 6f | 63 61 74 65 4d 64 6c 00 |..IoAllo|cateMdl.|
|00000bd0| 0a 02 4b 65 53 74 61 63 | 6b 41 74 74 61 63 68 50 |..KeStac|kAttachP|
|00000be0| 72 6f 63 65 73 73 00 00 | 6d 04 5a 77 54 65 72 6d |rocess..|m.ZwTerm|
|00000bf0| 69 6e 61 74 65 50 72 6f | 63 65 73 73 00 00 6a 03 |inatePro|cess..j.|
|00000c00| 52 74 6c 49 6e 69 74 69 | 61 6c 69 7a 65 53 69 64 |RtlIniti|alizeSid|
|00000c10| 00 00 6f 02 4d 6d 55 73 | 65 72 50 72 6f 62 65 41 |..o.MmUs|erProbeA|
|00000c20| 64 64 72 65 73 73 00 00 | 46 02 4d 6d 48 69 67 68 |ddress..|F.MmHigh|
|00000c30| 65 73 74 55 73 65 72 41 | 64 64 72 65 73 73 00 00 |estUserA|ddress..|
|00000c40| e7 02 50 73 53 65 74 43 | 72 65 61 74 65 50 72 6f |..PsSetC|reatePro|
|00000c50| 63 65 73 73 4e 6f 74 69 | 66 79 52 6f 75 74 69 6e |cessNoti|fyRoutin|
|00000c60| 65 00 f7 01 4b 65 53 65 | 72 76 69 63 65 44 65 73 |e...KeSe|rviceDes|
|00000c70| 63 72 69 70 74 6f 72 54 | 61 62 6c 65 00 00 4f 04 |criptorT|able..O.|
|00000c80| 5a 77 51 75 65 72 79 49 | 6e 66 6f 72 6d 61 74 69 |ZwQueryI|nformati|
|00000c90| 6f 6e 54 6f 6b 65 6e 00 | c0 04 77 63 73 6e 63 70 |onToken.|..wcsncp|
|00000ca0| 79 00 5e 00 45 78 49 6e | 74 65 72 6c 6f 63 6b 65 |y.^.ExIn|terlocke|
|00000cb0| 64 50 6f 70 45 6e 74 72 | 79 53 4c 69 73 74 00 00 |dPopEntr|ySList..|
|00000cc0| 60 00 45 78 49 6e 74 65 | 72 6c 6f 63 6b 65 64 50 |`.ExInte|rlockedP|
|00000cd0| 75 73 68 45 6e 74 72 79 | 53 4c 69 73 74 00 4d 00 |ushEntry|SList.M.|
|00000ce0| 45 78 49 6e 69 74 69 61 | 6c 69 7a 65 4e 50 61 67 |ExInitia|lizeNPag|
|00000cf0| 65 64 4c 6f 6f 6b 61 73 | 69 64 65 4c 69 73 74 00 |edLookas|ideList.|
|00000d00| 63 03 52 74 6c 49 6e 69 | 74 41 6e 73 69 53 74 72 |c.RtlIni|tAnsiStr|
|00000d10| 69 6e 67 00 73 04 5a 77 | 57 72 69 74 65 46 69 6c |ing.s.Zw|WriteFil|
|00000d20| 65 00 3e 00 45 78 44 65 | 6c 65 74 65 4e 50 61 67 |e.>.ExDe|leteNPag|
|00000d30| 65 64 4c 6f 6f 6b 61 73 | 69 64 65 4c 69 73 74 00 |edLookas|ideList.|
|00000d40| a1 04 6d 65 6d 6d 6f 76 | 65 00 a8 04 73 74 72 63 |..memmov|e...strc|
|00000d50| 68 72 00 00 8e 04 5f 76 | 73 6e 70 72 69 6e 74 66 |hr...._v|snprintf|
|00000d60| 00 00 fa 00 49 6e 74 65 | 72 6c 6f 63 6b 65 64 49 |....Inte|rlockedI|
|00000d70| 6e 63 72 65 6d 65 6e 74 | 00 00 f7 00 49 6e 74 65 |ncrement|....Inte|
|00000d80| 72 6c 6f 63 6b 65 64 44 | 65 63 72 65 6d 65 6e 74 |rlockedD|ecrement|
|00000d90| 00 00 0b 01 49 6f 42 75 | 69 6c 64 44 65 76 69 63 |....IoBu|ildDevic|
|00000da0| 65 49 6f 43 6f 6e 74 72 | 6f 6c 52 65 71 75 65 73 |eIoContr|olReques|
|00000db0| 74 00 3d 01 49 6f 47 65 | 74 44 65 76 69 63 65 4f |t.=.IoGe|tDeviceO|
|00000dc0| 62 6a 65 63 74 50 6f 69 | 6e 74 65 72 00 00 b5 02 |bjectPoi|nter....|
|00000dd0| 4f 62 51 75 65 72 79 4e | 61 6d 65 53 74 72 69 6e |ObQueryN|ameStrin|
|00000de0| 67 00 57 04 5a 77 51 75 | 65 72 79 56 61 6c 75 65 |g.W.ZwQu|eryValue|
|00000df0| 4b 65 79 00 3e 04 5a 77 | 4f 70 65 6e 4b 65 79 00 |Key.>.Zw|OpenKey.|
|00000e00| 6b 04 5a 77 53 65 74 56 | 61 6c 75 65 4b 65 79 00 |k.ZwSetV|alueKey.|
|00000e10| 4e 04 5a 77 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |N.ZwQuer|yInforma|
|00000e20| 74 69 6f 6e 50 72 6f 63 | 65 73 73 00 b4 02 4f 62 |tionProc|ess...Ob|
|00000e30| 4f 70 65 6e 4f 62 6a 65 | 63 74 42 79 50 6f 69 6e |OpenObje|ctByPoin|
|00000e40| 74 65 72 00 17 03 52 74 | 6c 43 6f 70 79 53 69 64 |ter...Rt|lCopySid|
|00000e50| 00 00 40 04 5a 77 4f 70 | 65 6e 50 72 6f 63 65 73 |..@.ZwOp|enProces|
|00000e60| 73 54 6f 6b 65 6e 00 00 | 32 01 49 6f 46 72 65 65 |sToken..|2.IoFree|
|00000e70| 49 72 70 00 b4 01 4b 65 | 47 65 74 43 75 72 72 65 |Irp...Ke|GetCurre|
|00000e80| 6e 74 54 68 72 65 61 64 | 00 00 03 01 49 6f 41 6c |ntThread|....IoAl|
|00000e90| 6c 6f 63 61 74 65 49 72 | 70 00 4a 04 5a 77 51 75 |locateIr|p.J.ZwQu|
|00000ea0| 65 72 79 44 69 72 65 63 | 74 6f 72 79 46 69 6c 65 |eryDirec|toryFile|
|00000eb0| 00 00 c9 03 52 74 6c 55 | 6e 77 69 6e 64 00 6e 74 |....RtlU|nwind.nt|
|00000ec0| 6f 73 6b 72 6e 6c 2e 65 | 78 65 00 00 00 00 45 78 |oskrnl.e|xe....Ex|
|00000ed0| 41 63 71 75 69 72 65 46 | 61 73 74 4d 75 74 65 78 |AcquireF|astMutex|
|00000ee0| 00 00 01 00 45 78 52 65 | 6c 65 61 73 65 46 61 73 |....ExRe|leaseFas|
|00000ef0| 74 4d 75 74 65 78 00 00 | 44 00 4b 65 47 65 74 43 |tMutex..|D.KeGetC|
|00000f00| 75 72 72 65 6e 74 49 72 | 71 6c 00 00 48 41 4c 2e |urrentIr|ql..HAL.|
|00000f10| 64 6c 6c 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |dll.....|........|
|00000f20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fa0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000fe0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ff0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+