/ PC World 2007 July & August / PCWorld_2007-07-08_cd.bin / v cisle / tcpview / TcpView.exe / Tcpview.exe / BINRES / RCDRIVERNT / COFF_SYMBOLS

< prev

next >

view JSON data

view as text

open on a Mac

open on a PC

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00000010| 03 00 24 54 36 39 37 37 | 00 00 48 03 00 00 01 00 |..$T6977|..H.....|
|00000020| 00 00 03 00 24 54 37 30 | 30 32 00 00 58 03 00 00 |....$T70|02..X...|
|00000030| 01 00 00 00 03 00 24 54 | 37 30 33 31 00 00 80 03 |......$T|7031....|
|00000040| 00 00 01 00 00 00 03 00 | 24 53 47 36 38 38 31 00 |........|$SG6881.|
|00000050| d0 0c 00 00 01 00 00 00 | 03 00 24 53 47 36 38 39 |........|..$SG689|
|00000060| 37 00 8c 0d 00 00 01 00 | 00 00 03 00 24 53 47 36 |7.......|....$SG6|
|00000070| 38 39 34 00 60 0d 00 00 | 01 00 00 00 03 00 24 53 |894.`...|......$S|
|00000080| 47 36 38 39 31 00 3c 0d | 00 00 01 00 00 00 03 00 |G6891.<.|........|
|00000090| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|000000a0| 03 00 24 52 30 30 30 30 | 30 30 60 14 00 00 03 00 |..$R0000|00`.....|
|000000b0| 00 00 03 00 2e 69 64 61 | 74 61 24 36 ba 13 00 00 |.....ida|ta$6....|
|000000c0| 02 00 00 00 03 00 2e 74 | 65 78 74 00 00 00 b4 0f |.......t|ext.....|
|000000d0| 00 00 01 00 00 00 03 01 | d1 00 00 00 04 00 47 00 |........|......G.|
|000000e0| 00 00 00 00 00 00 00 00 | 00 00 24 24 24 30 30 30 |........|..$$$000|
|000000f0| 30 31 bc 0f 00 00 01 00 | 20 00 03 01 0e 00 00 00 |01......| .......|
|00000100| 00 00 00 00 ae 01 00 00 | 13 00 00 00 00 00 24 24 |........|......$$|
|00000110| 24 30 30 30 30 34 85 10 | 00 00 01 00 20 00 03 01 |$00004..|.... ...|
|00000120| 23 00 00 00 00 00 00 00 | 52 03 00 00 00 00 00 00 |#.......|R.......|
|00000130| 00 00 00 00 00 00 d9 07 | 00 00 34 10 00 00 01 00 |........|..4.....|
|00000140| 00 00 03 00 00 00 00 00 | e6 07 00 00 3f 10 00 00 |........|....?...|
|00000150| 01 00 00 00 03 00 00 00 | 00 00 f2 07 00 00 62 10 |........|......b.|
|00000160| 00 00 01 00 00 00 03 00 | 5f 6c 68 5f 74 6f 70 00 |........|_lh_top.|
|00000170| eb 0f 00 00 01 00 00 00 | 03 00 00 00 00 00 fd 07 |........|........|
|00000180| 00 00 46 10 00 00 01 00 | 00 00 03 00 00 00 00 00 |..F.....|........|
|00000190| 07 08 00 00 4d 10 00 00 | 01 00 00 00 03 00 2e 74 |....M...|.......t|
|000001a0| 65 78 74 00 00 00 f4 0e | 00 00 01 00 00 00 03 01 |ext.....|........|
|000001b0| bf 00 00 00 04 00 3d 00 | 00 00 00 00 00 00 00 00 |......=.|........|
|000001c0| 00 00 00 00 00 00 15 08 | 00 00 0c 0f 00 00 01 00 |........|........|
|000001d0| 00 00 03 00 24 24 24 30 | 30 30 30 31 f4 0e 00 00 |....$$$0|0001....|
|000001e0| 01 00 20 00 03 01 0f 00 | 00 00 00 00 00 00 9c 01 |.. .....|........|
|000001f0| 00 00 14 00 00 00 00 00 | 24 24 24 30 30 30 30 33 |........|$$$00003|
|00000200| 14 0f 00 00 01 00 20 00 | 03 01 1d 00 00 00 00 00 |...... .|........|
|00000210| 00 00 cc 01 00 00 22 00 | 00 00 00 00 00 00 00 00 |......".|........|
|00000220| 20 08 00 00 14 0f 00 00 | 01 00 20 00 03 01 24 00 | .......|.. ...$.|
|00000230| 00 00 22 00 00 00 d2 01 | 00 00 29 00 00 00 00 00 |..".....|..).....|
|00000240| 24 24 24 30 30 30 30 35 | 36 0f 00 00 01 00 20 00 |$$$00005|6..... .|
|00000250| 03 01 2b 00 00 00 00 00 | 00 00 08 02 00 00 30 00 |..+.....|......0.|
|00000260| 00 00 00 00 24 24 24 30 | 30 30 30 37 90 0f 00 00 |....$$$0|0007....|
|00000270| 01 00 20 00 03 01 39 00 | 00 00 00 00 00 00 c2 02 |.. ...9.|........|
|00000280| 00 00 3e 00 00 00 00 00 | 24 24 24 30 30 30 30 39 |..>.....|$$$00009|
|00000290| b3 0f 00 00 01 00 20 00 | 03 01 47 00 00 00 00 00 |...... .|..G.....|
|000002a0| 00 00 04 03 00 00 00 00 | 00 00 00 00 5f 6c 75 5f |........|...._lu_|
|000002b0| 64 6f 6e 65 82 0f 00 00 | 01 00 00 00 03 00 00 00 |done....|........|
|000002c0| 00 00 31 08 00 00 35 0f | 00 00 01 00 00 00 03 00 |..1...5.|........|
|000002d0| 00 00 00 00 3c 08 00 00 | 80 0f 00 00 01 00 00 00 |....<...|........|
|000002e0| 03 00 5f 6c 75 5f 74 6f | 70 00 53 0f 00 00 01 00 |.._lu_to|p.S.....|
|000002f0| 00 00 03 00 5f 61 74 5f | 64 6f 6e 65 b2 0f 00 00 |...._at_|done....|
|00000300| 01 00 00 00 03 00 2e 69 | 64 61 74 61 24 36 f0 13 |.......i|data$6..|
|00000310| 00 00 02 00 00 00 03 00 | 68 65 61 64 65 72 00 00 |........|header..|
|00000320| 00 00 00 00 fe ff 00 00 | 02 00 00 00 00 00 6f 01 |........|......o.|
|00000330| 00 00 00 00 00 00 ff ff | 00 00 02 00 00 00 00 00 |........|........|
|00000340| 6c 02 00 00 60 02 00 00 | 01 00 00 00 02 00 00 00 |l...`...|........|
|00000350| 00 00 9b 02 00 00 64 02 | 00 00 01 00 00 00 02 00 |......d.|........|
|00000360| 00 00 00 00 c4 07 00 00 | 68 02 00 00 01 00 00 00 |........|h.......|
|00000370| 02 00 00 00 00 00 53 01 | 00 00 6c 02 00 00 01 00 |......S.|..l.....|
|00000380| 00 00 02 00 00 00 00 00 | 8f 01 00 00 70 02 00 00 |........|....p...|
|00000390| 01 00 00 00 02 00 00 00 | 00 00 a0 01 00 00 74 02 |........|......t.|
|000003a0| 00 00 01 00 00 00 02 00 | 00 00 00 00 bc 01 00 00 |........|........|
|000003b0| 78 02 00 00 01 00 00 00 | 02 00 00 00 00 00 d4 01 |x.......|........|
|000003c0| 00 00 7c 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |..|.....|........|
|000003d0| ed 01 00 00 80 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|000003e0| 00 00 0b 02 00 00 84 02 | 00 00 01 00 00 00 02 00 |........|........|
|000003f0| 00 00 00 00 2f 02 00 00 | 88 02 00 00 01 00 00 00 |..../...|........|
|00000400| 02 00 00 00 00 00 48 02 | 00 00 8c 02 00 00 01 00 |......H.|........|
|00000410| 00 00 02 00 00 00 00 00 | 81 02 00 00 90 02 00 00 |........|........|
|00000420| 01 00 00 00 02 00 00 00 | 00 00 b0 02 00 00 94 02 |........|........|
|00000430| 00 00 01 00 00 00 02 00 | 00 00 00 00 d0 02 00 00 |........|........|
|00000440| 98 02 00 00 01 00 00 00 | 02 00 00 00 00 00 1e 06 |........|........|
|00000450| 00 00 9c 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000460| f4 02 00 00 9c 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000470| 00 00 2c 01 00 00 a0 02 | 00 00 01 00 00 00 02 00 |..,.....|........|
|00000480| 00 00 00 00 20 03 00 00 | a4 02 00 00 01 00 00 00 |.... ...|........|
|00000490| 02 00 00 00 00 00 3c 03 | 00 00 a8 02 00 00 01 00 |......<.|........|
|000004a0| 00 00 02 00 00 00 00 00 | 5d 03 00 00 ac 02 00 00 |........|].......|
|000004b0| 01 00 00 00 02 00 00 00 | 00 00 78 03 00 00 b0 02 |........|..x.....|
|000004c0| 00 00 01 00 00 00 02 00 | 00 00 00 00 93 03 00 00 |........|........|
|000004d0| b4 02 00 00 01 00 00 00 | 02 00 00 00 00 00 b4 03 |........|........|
|000004e0| 00 00 b8 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|000004f0| cc 03 00 00 bc 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000500| 00 00 ea 03 00 00 c0 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000510| 00 00 00 00 08 04 00 00 | c4 02 00 00 01 00 00 00 |........|........|
|00000520| 02 00 00 00 00 00 26 04 | 00 00 c8 02 00 00 01 00 |......&.|........|
|00000530| 00 00 02 00 00 00 00 00 | 3f 04 00 00 cc 02 00 00 |........|?.......|
|00000540| 01 00 00 00 02 00 00 00 | 00 00 7a 07 00 00 d0 02 |........|..z.....|
|00000550| 00 00 01 00 00 00 02 00 | 00 00 00 00 1d 01 00 00 |........|........|
|00000560| d4 02 00 00 01 00 00 00 | 02 00 00 00 00 00 03 03 |........|........|
|00000570| 00 00 d8 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000580| 02 01 00 00 dc 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000590| 00 00 60 07 00 00 e0 02 | 00 00 01 00 00 00 02 00 |..`.....|........|
|000005a0| 00 00 00 00 13 00 00 00 | 8c 03 00 00 01 00 20 00 |........|...... .|
|000005b0| 02 00 00 00 00 00 32 00 | 00 00 4a 05 00 00 01 00 |......2.|..J.....|
|000005c0| 20 00 02 00 00 00 00 00 | 4b 00 00 00 9a 07 00 00 | .......|K.......|
|000005d0| 01 00 20 00 02 00 00 00 | 00 00 5a 00 00 00 c2 07 |.. .....|..Z.....|
|000005e0| 00 00 01 00 20 00 02 00 | 00 00 00 00 70 00 00 00 |.... ...|....p...|
|000005f0| 68 08 00 00 01 00 20 00 | 02 00 00 00 00 00 8a 00 |h..... .|........|
|00000600| 00 00 c0 08 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000610| 9e 00 00 00 28 09 00 00 | 01 00 20 00 02 00 00 00 |....(...|.. .....|
|00000620| 00 00 b5 00 00 00 b2 09 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000630| 00 00 00 00 c5 00 00 00 | 6a 0a 00 00 01 00 20 00 |........|j..... .|
|00000640| 02 00 00 00 00 00 de 00 | 00 00 18 0c 00 00 01 00 |........|........|
|00000650| 20 00 02 00 00 00 00 00 | f1 00 00 00 fc 0c 00 00 | .......|........|
|00000660| 01 00 20 00 02 00 00 00 | 00 00 04 00 00 00 c6 0d |.. .....|........|
|00000670| 00 00 01 00 20 00 02 00 | 00 00 00 00 d6 04 00 00 |.... ...|........|
|00000680| f4 0e 00 00 01 00 20 00 | 02 00 00 00 00 00 e7 04 |...... .|........|
|00000690| 00 00 36 0f 00 00 01 00 | 20 00 02 00 00 00 00 00 |..6.....| .......|
|000006a0| f7 04 00 00 90 0f 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|000006b0| 00 00 7d 01 00 00 bc 0f | 00 00 01 00 20 00 02 00 |..}.....|.... ...|
|000006c0| 00 00 00 00 0e 05 00 00 | 6a 10 00 00 01 00 20 00 |........|j..... .|
|000006d0| 02 00 00 00 00 00 c8 04 | 00 00 86 10 00 00 01 00 |........|........|
|000006e0| 20 00 02 00 00 00 00 00 | 74 04 00 00 a0 10 00 00 | .......|t.......|
|000006f0| 02 00 00 00 02 00 00 00 | 00 00 9d 07 00 00 b4 10 |........|........|
|00000700| 00 00 02 00 00 00 02 00 | 00 00 00 00 47 07 00 00 |........|....G...|
|00000710| c8 10 00 00 02 00 00 00 | 02 00 65 6e 64 00 00 00 |........|..end...|
|00000720| 00 00 a0 18 00 00 fe ff | 00 00 02 00 49 08 00 00 |........|....I...|
|00000730| 5f 44 72 69 76 65 72 45 | 6e 74 72 79 40 38 00 5f |_DriverE|ntry@8._|
|00000740| 50 72 6f 63 45 78 70 47 | 65 74 43 6f 6d 70 6f 6e |ProcExpG|etCompon|
|00000750| 65 6e 74 46 69 6c 65 4e | 61 6d 65 40 38 00 5f 50 |entFileN|ame@8._P|
|00000760| 72 6f 63 45 78 70 47 65 | 74 4f 62 6a 65 63 74 4e |rocExpGe|tObjectN|
|00000770| 61 6d 65 40 31 32 00 5f | 50 72 6f 63 45 78 70 4f |ame@12._|ProcExpO|
|00000780| 70 65 6e 40 38 00 5f 50 | 72 6f 63 45 78 70 52 65 |pen@8._P|rocExpRe|
|00000790| 61 64 4b 73 74 61 63 6b | 40 31 32 00 5f 50 72 6f |adKstack|@12._Pro|
|000007a0| 63 45 78 70 47 65 74 4d | 75 74 61 6e 74 4f 77 6e |cExpGetM|utantOwn|
|000007b0| 65 72 40 31 32 00 5f 50 | 72 6f 63 45 78 70 51 75 |er@12._P|rocExpQu|
|000007c0| 65 72 79 44 65 70 40 31 | 32 00 5f 50 72 6f 63 45 |eryDep@1|2._ProcE|
|000007d0| 78 70 47 65 74 4b 63 6f | 6e 74 65 78 74 40 31 32 |xpGetKco|ntext@12|
|000007e0| 00 5f 50 72 6f 63 45 78 | 70 43 6c 6f 73 65 40 34 |._ProcEx|pClose@4|
|000007f0| 00 5f 50 72 6f 63 45 78 | 70 44 65 76 69 63 65 43 |._ProcEx|pDeviceC|
|00000800| 6f 6e 74 72 6f 6c 40 33 | 36 00 5f 50 72 6f 63 45 |ontrol@3|6._ProcE|
|00000810| 78 70 44 69 73 70 61 74 | 63 68 40 38 00 5f 50 72 |xpDispat|ch@8._Pr|
|00000820| 6f 63 45 78 70 55 6e 6c | 6f 61 64 40 34 00 5f 5f |ocExpUnl|oad@4.__|
|00000830| 69 6d 70 5f 5f 52 74 6c | 46 72 65 65 41 6e 73 69 |imp__Rtl|FreeAnsi|
|00000840| 53 74 72 69 6e 67 40 34 | 00 5f 5f 69 6d 70 5f 5f |String@4|.__imp__|
|00000850| 73 74 72 6e 63 70 79 00 | 5f 5f 69 6d 70 5f 5f 52 |strncpy.|__imp__R|
|00000860| 74 6c 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 54 |tlUnicod|eStringT|
|00000870| 6f 41 6e 73 69 53 74 72 | 69 6e 67 40 31 32 00 5f |oAnsiStr|ing@12._|
|00000880| 5f 69 6d 70 5f 5f 4f 62 | 51 75 65 72 79 4e 61 6d |_imp__Ob|QueryNam|
|00000890| 65 53 74 72 69 6e 67 40 | 31 36 00 5f 5f 65 78 63 |eString@|16.__exc|
|000008a0| 65 70 74 5f 6c 69 73 74 | 00 5f 5f 65 78 63 65 70 |ept_list|.__excep|
|000008b0| 74 5f 68 61 6e 64 6c 65 | 72 33 00 5f 5f 69 6d 70 |t_handle|r3.__imp|
|000008c0| 5f 5f 5a 77 43 6c 6f 73 | 65 40 34 00 5f 5f 69 6d |__ZwClos|e@4.__im|
|000008d0| 70 5f 5f 5a 77 44 75 70 | 6c 69 63 61 74 65 4f 62 |p__ZwDup|licateOb|
|000008e0| 6a 65 63 74 40 32 38 00 | 5f 5f 69 6d 70 5f 5f 5a |ject@28.|__imp__Z|
|000008f0| 77 4f 70 65 6e 50 72 6f | 63 65 73 73 40 31 36 00 |wOpenPro|cess@16.|
|00000900| 5f 5f 69 6d 70 5f 5f 4b | 65 44 65 74 61 63 68 50 |__imp__K|eDetachP|
|00000910| 72 6f 63 65 73 73 40 30 | 00 5f 5f 69 6d 70 5f 40 |rocess@0|.__imp_@|
|00000920| 4f 62 66 44 65 72 65 66 | 65 72 65 6e 63 65 4f 62 |ObfDeref|erenceOb|
|00000930| 6a 65 63 74 40 34 00 5f | 5f 69 6d 70 5f 5f 4f 62 |ject@4._|_imp__Ob|
|00000940| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|00000950| 79 48 61 6e 64 6c 65 40 | 32 34 00 5f 5f 69 6d 70 |yHandle@|24.__imp|
|00000960| 5f 5f 4b 65 41 74 74 61 | 63 68 50 72 6f 63 65 73 |__KeAtta|chProces|
|00000970| 73 40 34 00 5f 5f 69 6d | 70 5f 5f 50 73 4c 6f 6f |s@4.__im|p__PsLoo|
|00000980| 6b 75 70 50 72 6f 63 65 | 73 73 42 79 50 72 6f 63 |kupProce|ssByProc|
|00000990| 65 73 73 49 64 40 38 00 | 5f 5f 69 6d 70 5f 40 4b |essId@8.|__imp_@K|
|000009a0| 66 4c 6f 77 65 72 49 72 | 71 6c 40 34 00 5f 5f 69 |fLowerIr|ql@4.__i|
|000009b0| 6d 70 5f 5f 4d 6d 49 73 | 41 64 64 72 65 73 73 56 |mp__MmIs|AddressV|
|000009c0| 61 6c 69 64 40 34 00 5f | 5f 69 6d 70 5f 40 4b 66 |alid@4._|_imp_@Kf|
|000009d0| 52 61 69 73 65 49 72 71 | 6c 40 34 00 5f 5f 69 6d |RaiseIrq|l@4.__im|
|000009e0| 70 5f 5f 4f 62 4f 70 65 | 6e 4f 62 6a 65 63 74 42 |p__ObOpe|nObjectB|
|000009f0| 79 50 6f 69 6e 74 65 72 | 40 32 38 00 5f 5f 69 6d |yPointer|@28.__im|
|00000a00| 70 5f 5f 5a 77 51 75 65 | 72 79 49 6e 66 6f 72 6d |p__ZwQue|ryInform|
|00000a10| 61 74 69 6f 6e 50 72 6f | 63 65 73 73 40 32 30 00 |ationPro|cess@20.|
|00000a20| 5f 4e 74 42 75 69 6c 64 | 4e 75 6d 62 65 72 00 5f |_NtBuild|Number._|
|00000a30| 5f 69 6d 70 5f 5f 5a 77 | 4f 70 65 6e 50 72 6f 63 |_imp__Zw|OpenProc|
|00000a40| 65 73 73 54 6f 6b 65 6e | 40 31 32 00 5f 5f 69 6d |essToken|@12.__im|
|00000a50| 70 5f 40 49 6f 66 43 6f | 6d 70 6c 65 74 65 52 65 |p_@IofCo|mpleteRe|
|00000a60| 71 75 65 73 74 40 38 00 | 5f 5f 69 6d 70 5f 5f 53 |quest@8.|__imp__S|
|00000a70| 65 52 65 6c 65 61 73 65 | 53 75 62 6a 65 63 74 43 |eRelease|SubjectC|
|00000a80| 6f 6e 74 65 78 74 40 34 | 00 5f 5f 69 6d 70 5f 5f |ontext@4|.__imp__|
|00000a90| 53 65 50 72 69 76 69 6c | 65 67 65 43 68 65 63 6b |SePrivil|egeCheck|
|00000aa0| 40 31 32 00 5f 5f 69 6d | 70 5f 5f 45 78 47 65 74 |@12.__im|p__ExGet|
|00000ab0| 50 72 65 76 69 6f 75 73 | 4d 6f 64 65 40 30 00 5f |Previous|Mode@0._|
|00000ac0| 5f 69 6d 70 5f 5f 53 65 | 43 61 70 74 75 72 65 53 |_imp__Se|CaptureS|
|00000ad0| 75 62 6a 65 63 74 43 6f | 6e 74 65 78 74 40 34 00 |ubjectCo|ntext@4.|
|00000ae0| 5f 5f 69 6d 70 5f 5f 49 | 6f 44 65 6c 65 74 65 44 |__imp__I|oDeleteD|
|00000af0| 65 76 69 63 65 40 34 00 | 5f 5f 69 6d 70 5f 5f 49 |evice@4.|__imp__I|
|00000b00| 6f 44 65 6c 65 74 65 53 | 79 6d 62 6f 6c 69 63 4c |oDeleteS|ymbolicL|
|00000b10| 69 6e 6b 40 34 00 5f 5f | 69 6d 70 5f 5f 52 74 6c |ink@4.__|imp__Rtl|
|00000b20| 49 6e 69 74 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |InitUnic|odeStrin|
|00000b30| 67 40 38 00 5f 5f 69 6d | 70 5f 5f 49 6f 43 72 65 |g@8.__im|p__IoCre|
|00000b40| 61 74 65 53 79 6d 62 6f | 6c 69 63 4c 69 6e 6b 40 |ateSymbo|licLink@|
|00000b50| 38 00 5f 5f 69 6d 70 5f | 5f 49 6f 43 72 65 61 74 |8.__imp_|_IoCreat|
|00000b60| 65 44 65 76 69 63 65 40 | 32 38 00 5f 5f 69 6d 70 |eDevice@|28.__imp|
|00000b70| 5f 5f 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |__ExAllo|catePool|
|00000b80| 57 69 74 68 54 61 67 40 | 31 32 00 5f 52 74 6c 46 |WithTag@|12._RtlF|
|00000b90| 72 65 65 41 6e 73 69 53 | 74 72 69 6e 67 40 34 00 |reeAnsiS|tring@4.|
|00000ba0| 5f 5f 49 4d 50 4f 52 54 | 5f 44 45 53 43 52 49 50 |__IMPORT|_DESCRIP|
|00000bb0| 54 4f 52 5f 6e 74 6f 73 | 6b 72 6e 6c 00 5f 52 74 |TOR_ntos|krnl._Rt|
|00000bc0| 6c 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |lUnicode|StringTo|
|00000bd0| 41 6e 73 69 53 74 72 69 | 6e 67 40 31 32 00 5f 4f |AnsiStri|ng@12._O|
|00000be0| 62 51 75 65 72 79 4e 61 | 6d 65 53 74 72 69 6e 67 |bQueryNa|meString|
|00000bf0| 40 31 36 00 5f 52 74 6c | 55 6e 77 69 6e 64 40 31 |@16._Rtl|Unwind@1|
|00000c00| 36 00 5f 5f 67 6c 6f 62 | 61 6c 5f 75 6e 77 69 6e |6.__glob|al_unwin|
|00000c10| 64 32 00 5f 5f 6c 6f 63 | 61 6c 5f 75 6e 77 69 6e |d2.__loc|al_unwin|
|00000c20| 64 32 00 5f 5f 61 62 6e | 6f 72 6d 61 6c 5f 74 65 |d2.__abn|ormal_te|
|00000c30| 72 6d 69 6e 61 74 69 6f | 6e 00 5f 5f 73 65 68 5f |rminatio|n.__seh_|
|00000c40| 6c 6f 6e 67 6a 6d 70 5f | 75 6e 77 69 6e 64 40 34 |longjmp_|unwind@4|
|00000c50| 00 5f 5a 77 43 6c 6f 73 | 65 40 34 00 5f 5a 77 44 |._ZwClos|e@4._ZwD|
|00000c60| 75 70 6c 69 63 61 74 65 | 4f 62 6a 65 63 74 40 32 |uplicate|Object@2|
|00000c70| 38 00 5f 5a 77 4f 70 65 | 6e 50 72 6f 63 65 73 73 |8._ZwOpe|nProcess|
|00000c80| 40 31 36 00 5f 4b 65 44 | 65 74 61 63 68 50 72 6f |@16._KeD|etachPro|
|00000c90| 63 65 73 73 40 30 00 40 | 4f 62 66 44 65 72 65 66 |cess@0.@|ObfDeref|
|00000ca0| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 40 34 00 5f |erenceOb|ject@4._|
|00000cb0| 4f 62 52 65 66 65 72 65 | 6e 63 65 4f 62 6a 65 63 |ObRefere|nceObjec|
|00000cc0| 74 42 79 48 61 6e 64 6c | 65 40 32 34 00 5f 4b 65 |tByHandl|e@24._Ke|
|00000cd0| 41 74 74 61 63 68 50 72 | 6f 63 65 73 73 40 34 00 |AttachPr|ocess@4.|
|00000ce0| 5f 50 73 4c 6f 6f 6b 75 | 70 50 72 6f 63 65 73 73 |_PsLooku|pProcess|
|00000cf0| 42 79 50 72 6f 63 65 73 | 73 49 64 40 38 00 5f 4d |ByProces|sId@8._M|
|00000d00| 6d 49 73 41 64 64 72 65 | 73 73 56 61 6c 69 64 40 |mIsAddre|ssValid@|
|00000d10| 34 00 5f 4f 62 4f 70 65 | 6e 4f 62 6a 65 63 74 42 |4._ObOpe|nObjectB|
|00000d20| 79 50 6f 69 6e 74 65 72 | 40 32 38 00 5f 5a 77 51 |yPointer|@28._ZwQ|
|00000d30| 75 65 72 79 49 6e 66 6f | 72 6d 61 74 69 6f 6e 50 |ueryInfo|rmationP|
|00000d40| 72 6f 63 65 73 73 40 32 | 30 00 5f 5f 69 6d 70 5f |rocess@2|0.__imp_|
|00000d50| 5f 4e 74 42 75 69 6c 64 | 4e 75 6d 62 65 72 00 5f |_NtBuild|Number._|
|00000d60| 5a 77 4f 70 65 6e 50 72 | 6f 63 65 73 73 54 6f 6b |ZwOpenPr|ocessTok|
|00000d70| 65 6e 40 31 32 00 40 49 | 6f 66 43 6f 6d 70 6c 65 |en@12.@I|ofComple|
|00000d80| 74 65 52 65 71 75 65 73 | 74 40 38 00 5f 53 65 52 |teReques|t@8._SeR|
|00000d90| 65 6c 65 61 73 65 53 75 | 62 6a 65 63 74 43 6f 6e |eleaseSu|bjectCon|
|00000da0| 74 65 78 74 40 34 00 5f | 53 65 50 72 69 76 69 6c |text@4._|SePrivil|
|00000db0| 65 67 65 43 68 65 63 6b | 40 31 32 00 5f 45 78 47 |egeCheck|@12._ExG|
|00000dc0| 65 74 50 72 65 76 69 6f | 75 73 4d 6f 64 65 40 30 |etPrevio|usMode@0|
|00000dd0| 00 5f 53 65 43 61 70 74 | 75 72 65 53 75 62 6a 65 |._SeCapt|ureSubje|
|00000de0| 63 74 43 6f 6e 74 65 78 | 74 40 34 00 5f 49 6f 44 |ctContex|t@4._IoD|
|00000df0| 65 6c 65 74 65 44 65 76 | 69 63 65 40 34 00 5f 49 |eleteDev|ice@4._I|
|00000e00| 6f 44 65 6c 65 74 65 53 | 79 6d 62 6f 6c 69 63 4c |oDeleteS|ymbolicL|
|00000e10| 69 6e 6b 40 34 00 5f 52 | 74 6c 49 6e 69 74 55 6e |ink@4._R|tlInitUn|
|00000e20| 69 63 6f 64 65 53 74 72 | 69 6e 67 40 38 00 5f 49 |icodeStr|ing@8._I|
|00000e30| 6f 43 72 65 61 74 65 53 | 79 6d 62 6f 6c 69 63 4c |oCreateS|ymbolicL|
|00000e40| 69 6e 6b 40 38 00 5f 49 | 6f 43 72 65 61 74 65 44 |ink@8._I|oCreateD|
|00000e50| 65 76 69 63 65 40 32 38 | 00 5f 45 78 41 6c 6c 6f |evice@28|._ExAllo|
|00000e60| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 40 |catePool|WithTag@|
|00000e70| 31 32 00 5f 5f 4e 55 4c | 4c 5f 49 4d 50 4f 52 54 |12.__NUL|L_IMPORT|
|00000e80| 5f 44 45 53 43 52 49 50 | 54 4f 52 00 7f 6e 74 6f |_DESCRIP|TOR..nto|
|00000e90| 73 6b 72 6e 6c 5f 4e 55 | 4c 4c 5f 54 48 55 4e 4b |skrnl_NU|LL_THUNK|
|00000ea0| 5f 44 41 54 41 00 5f 5f | 69 6d 70 5f 5f 52 74 6c |_DATA.__|imp__Rtl|
|00000eb0| 55 6e 77 69 6e 64 40 31 | 36 00 40 4b 66 4c 6f 77 |Unwind@1|6.@KfLow|
|00000ec0| 65 72 49 72 71 6c 40 34 | 00 5f 5f 49 4d 50 4f 52 |erIrql@4|.__IMPOR|
|00000ed0| 54 5f 44 45 53 43 52 49 | 50 54 4f 52 5f 48 41 4c |T_DESCRI|PTOR_HAL|
|00000ee0| 00 40 4b 66 52 61 69 73 | 65 49 72 71 6c 40 34 00 |.@KfRais|eIrql@4.|
|00000ef0| 7f 48 41 4c 5f 4e 55 4c | 4c 5f 54 48 55 4e 4b 5f |.HAL_NUL|L_THUNK_|
|00000f00| 44 41 54 41 00 5f 6c 68 | 5f 63 6f 6e 74 69 6e 75 |DATA._lh|_continu|
|00000f10| 65 00 5f 6c 68 5f 64 69 | 73 6d 69 73 73 00 5f 6c |e._lh_di|smiss._l|
|00000f20| 68 5f 72 65 74 75 72 6e | 00 5f 6c 68 5f 62 61 67 |h_return|._lh_bag|
|00000f30| 69 74 00 5f 6c 68 5f 75 | 6e 77 69 6e 64 69 6e 67 |it._lh_u|nwinding|
|00000f40| 00 5f 67 75 5f 72 65 74 | 75 72 6e 00 5f 5f 75 6e |._gu_ret|urn.__un|
|00000f50| 77 69 6e 64 5f 68 61 6e | 64 6c 65 72 00 5f 75 68 |wind_han|dler._uh|
|00000f60| 5f 72 65 74 75 72 6e 00 | 5f 6c 75 5f 63 6f 6e 74 |_return.|_lu_cont|
|00000f70| 69 6e 75 65 00          |                         |inue.   |        |
+--------+-------------------------+-------------------------+--------+--------+