/ PC Gamer (Italian) 45 / PC Gamer IT CD 45 2-2.iso / addons / photodraw / NT4SP4 / SP4I386.EXE / srv.sys / INIT

next >

view JSON data

view as text

open on a Mac

open on a PC

+--------+-------------------------+-------------------------+--------+--------+
|00000000| c6 05 4c bf 01 00 01 83 | ec 08 33 c0 b9 20 00 00 |..L.....|..3.. ..|
|00000010| 00 53 56 57 55 bf 80 ce | 01 00 f3 ab ff 15 a4 ad |.SVWU...|........|
|00000020| 01 00 6a 00 a3 54 bf 01 | 00 a1 bc ac 01 00 6a 01 |..j..T..|......j.|
|00000030| 0f be 08 68 60 bf 01 00 | 89 0d 70 c1 01 00 ff 15 |...h`...|..p.....|
|00000040| b0 ae 01 00 6a 00 6a 01 | 68 00 d1 01 00 ff 15 b0 |....j.j.|h.......|
|00000050| ae 01 00 8b 0d c0 ac 01 | 00 68 9c bf 01 00 8b 35 |........|.h.....5|
|00000060| 7c ac 01 00 8b 11 89 15 | c0 ac 01 00 ff d6 68 3c ||.......|......h<|
|00000070| c0 01 00 ff d6 68 80 c0 | 01 00 8b 3d 78 ac 01 00 |.....h..|...=x...|
|00000080| bb 30 d5 01 00 ff d7 68 | b8 c0 01 00 ff d7 68 00 |.0.....h|......h.|
|00000090| c1 01 00 ff d7 53 ff d7 | 83 c3 38 81 fb 60 d7 01 |.....S..|..8..`..|
|000000a0| 00 72 f2 68 38 c1 01 00 | ff d7 68 38 d1 01 00 ff |.r.h8...|..h8....|
|000000b0| d7 68 40 cf 01 00 ff d7 | b8 d0 c3 01 00 a3 d4 c3 |.h@.....|........|
|000000c0| 01 00 a3 d0 c3 01 00 b8 | d8 c3 01 00 33 c9 a3 dc |........|....3...|
|000000d0| c3 01 00 a3 d8 c3 01 00 | b8 e8 c3 01 00 a3 ec c3 |........|........|
|000000e0| 01 00 a3 e8 c3 01 00 b8 | 00 c4 01 00 c7 00 66 45 |........|......fE|
|000000f0| 02 00 83 c0 10 3d 20 c4 | 01 00 89 48 f4 89 48 e8 |.....= .|...H..H.|
|00000100| 72 ea c7 05 28 c4 01 00 | d5 32 01 00 33 c0 b9 70 |r...(...|.2..3..p|
|00000110| c4 01 00 66 a3 e4 c3 01 | 00 a3 e0 c3 01 00 66 a3 |...f....|......f.|
|00000120| e6 c3 01 00 a3 2c c4 01 | 00 a3 20 c4 01 00 8b d0 |.....,..|.. .....|
|00000130| 89 49 04 40 89 09 6b d2 | 38 81 c2 30 d5 01 00 83 |.I.@..k.|8..0....|
|00000140| f8 0a 89 51 08 75 02 33 | c0 83 c1 0c 81 f9 70 ca |...Q.u.3|......p.|
|00000150| 01 00 72 da b8 70 ca 01 | 00 89 40 04 89 00 83 c0 |..r..p..|..@.....|
|00000160| 08 3d f0 ca 01 00 72 f1 | 68 40 d0 01 00 33 db ff |.=....r.|h@...3..|
|00000170| d7 68 e8 d1 01 00 88 1d | 94 d0 01 00 88 1d b4 d0 |.h......|........|
|00000180| 01 00 88 1d d4 d0 01 00 | 88 1d f4 d0 01 00 ff d7 |........|........|
|00000190| c7 05 7c d1 01 00 02 00 | 00 00 b8 30 d1 01 00 88 |..|.....|...0....|
|000001a0| 1d 80 d1 01 00 a3 34 d1 | 01 00 88 1d 81 d1 01 00 |......4.|........|
|000001b0| 8d 54 24 10 a3 30 d1 01 | 00 ff 35 64 d2 01 00 52 |.T$..0..|..5d...R|
|000001c0| b8 70 d1 01 00 a3 74 d1 | 01 00 a3 70 d1 01 00 ff |.p....t.|...p....|
|000001d0| 15 44 ad 01 00 8d 4c 24 | 10 6a 01 51 68 00 ce 01 |.D....L$|.j.Qh...|
|000001e0| 00 ff 15 14 ae 01 00 ff | 35 58 d2 01 00 68 08 ce |........|5X...h..|
|000001f0| 01 00 8b 3d 64 ad 01 00 | ff d7 ff 35 5c d2 01 00 |...=d...|...5\...|
|00000200| 68 10 ce 01 00 ff d7 a1 | e8 d4 01 00 50 68 10 cf |h.......|....Ph..|
|00000210| 01 00 ff d7 a1 ec d4 01 | 00 bb e0 cf 01 00 50 bd |........|......P.|
|00000220| 90 d4 01 00 68 18 cf 01 | 00 ff 15 f0 ac 01 00 c7 |....h...|........|
|00000230| 05 90 d1 01 00 b9 0b 00 | 00 c7 05 a0 d1 01 00 ba |........|........|
|00000240| 0b 00 00 ff 75 00 53 83 | c3 08 ff d7 83 c5 04 81 |....u.S.|........|
|00000250| fd ac d4 01 00 76 ec b9 | 20 d0 01 00 8b 59 fc 8d |.....v..| ....Y..|
|00000260| 41 f8 8b 10 89 11 83 c1 | 08 81 f9 38 d0 01 00 89 |A.......|...8....|
|00000270| 59 fc 72 e8 68 5c c0 01 | 00 bf bc bf 01 00 ff d6 |Y.r.h\..|........|
|00000280| 57 ff d6 83 c7 20 81 ff | 3c c0 01 00 72 f2 c7 05 |W.... ..|<...r...|
|00000290| 70 bf 01 00 07 00 00 00 | ff 15 30 ae 01 00 8b c8 |p.......|..0.....|
|000002a0| 2b d2 b8 80 f0 fa 02 5d | f7 f1 5f a3 44 d2 01 00 |+......]|.._.D...|
|000002b0| 5e 5b 83 c4 08 c3 83 ec | 08 a1 78 d2 01 00 8d 4c |^[......|..x....L|
|000002c0| 24 00 53 56 33 db 57 50 | 51 ff 15 64 ad 01 00 8d |$.SV3.WP|Q..d....|
|000002d0| 4c 24 0c 68 40 bf 01 00 | 8b 7c 24 1c 53 53 6a 12 |L$.h@...|.|$.SSj.|
|000002e0| 51 53 57 ff 15 58 ae 01 | 00 8b f0 85 f6 7d 1b 53 |QSW..X..|.....}.S|
|000002f0| 53 53 53 56 68 d2 07 00 | c0 57 e8 ec 2a fd ff 8b |SSSVh...|.W..*...|
|00000300| c6 5f 5e 5b 83 c4 08 c2 | 08 00 83 c7 38 b8 28 45 |._^[....|....8.(E|
|00000310| 02 00 b9 1c 00 00 00 c7 | 47 fc 71 6b 03 00 f3 ab |........|G.qk....|
|00000320| e8 db fc ff ff eb d8 cc | cc cc cc cc cc cc cc cc |........|........|
|00000330| e0 60 03 00 00 00 00 00 | 00 00 00 00 40 64 03 00 |.`......|....@d..|
|00000340| c0 ab 00 00 e8 63 03 00 | 00 00 00 00 00 00 00 00 |.....c..|........|
|00000350| e8 75 03 00 c8 ae 00 00 | 00 64 03 00 00 00 00 00 |.u......|.d......|
|00000360| 00 00 00 00 58 76 03 00 | e0 ae 00 00 18 64 03 00 |....Xv..|.....d..|
|00000370| 00 00 00 00 00 00 00 00 | f8 76 03 00 f8 ae 00 00 |........|.v......|
|00000380| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000390| 00 00 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|000003a0| 4e 64 03 00 60 64 03 00 | 80 64 03 00 a0 64 03 00 |Nd..`d..|.d...d..|
|000003b0| c0 64 03 00 cc 64 03 00 | e2 64 03 00 f0 64 03 00 |.d...d..|.d...d..|
|000003c0| 0e 65 03 00 2e 65 03 00 | 50 65 03 00 80 65 03 00 |.e...e..|Pe...e..|
|000003d0| 9e 65 03 00 b0 65 03 00 | c8 65 03 00 e0 65 03 00 |.e...e..|.e...e..|
|000003e0| f8 65 03 00 0c 66 03 00 | 2a 66 03 00 42 66 03 00 |.e...f..|*f..Bf..|
|000003f0| 5a 66 03 00 76 66 03 00 | 98 66 03 00 ae 66 03 00 |Zf..vf..|.f...f..|
|00000400| bc 66 03 00 ce 66 03 00 | e4 66 03 00 f4 66 03 00 |.f...f..|.f...f..|
|00000410| 04 67 03 00 1e 67 03 00 | 38 67 03 00 58 67 03 00 |.g...g..|8g..Xg..|
|00000420| 78 67 03 00 90 67 03 00 | a6 67 03 00 be 67 03 00 |xg...g..|.g...g..|
|00000430| e0 67 03 00 02 68 03 00 | 18 68 03 00 32 68 03 00 |.g...h..|.h..2h..|
|00000440| 4c 68 03 00 66 68 03 00 | 76 68 03 00 90 68 03 00 |Lh..fh..|vh...h..|
|00000450| 9c 68 03 00 b0 68 03 00 | c4 68 03 00 e0 68 03 00 |.h...h..|.h...h..|
|00000460| f8 68 03 00 18 69 03 00 | 26 69 03 00 38 69 03 00 |.h...i..|&i..8i..|
|00000470| 4a 69 03 00 5c 69 03 00 | 6c 69 03 00 7c 69 03 00 |Ji..\i..|li..|i..|
|00000480| 98 69 03 00 b0 69 03 00 | d0 69 03 00 e8 69 03 00 |.i...i..|.i...i..|
|00000490| f6 69 03 00 10 6a 03 00 | 30 6a 03 00 4c 6a 03 00 |.i...j..|0j..Lj..|
|000004a0| 62 6a 03 00 6e 6a 03 00 | 82 6a 03 00 a0 6a 03 00 |bj..nj..|.j...j..|
|000004b0| be 6a 03 00 d0 6a 03 00 | e2 6a 03 00 fc 6a 03 00 |.j...j..|.j...j..|
|000004c0| 10 6b 03 00 24 6b 03 00 | 3a 6b 03 00 54 6b 03 00 |.k..$k..|:k..Tk..|
|000004d0| 70 6b 03 00 84 6b 03 00 | 90 6b 03 00 9c 6b 03 00 |pk...k..|.k...k..|
|000004e0| b4 6b 03 00 ca 6b 03 00 | e2 6b 03 00 f8 6b 03 00 |.k...k..|.k...k..|
|000004f0| 14 6c 03 00 40 6c 03 00 | 54 6c 03 00 66 6c 03 00 |.l..@l..|Tl..fl..|
|00000500| 82 6c 03 00 a2 6c 03 00 | ae 6c 03 00 c0 6c 03 00 |.l...l..|.l...l..|
|00000510| d0 6c 03 00 e8 6c 03 00 | fe 6c 03 00 16 6d 03 00 |.l...l..|.l...m..|
|00000520| 2e 6d 03 00 42 6d 03 00 | 54 6d 03 00 5e 6d 03 00 |.m..Bm..|Tm..^m..|
|00000530| 6c 6d 03 00 88 6d 03 00 | b0 6d 03 00 ce 6d 03 00 |lm...m..|.m...m..|
|00000540| e8 6d 03 00 0c 6e 03 00 | 24 6e 03 00 3c 6e 03 00 |.m...n..|$n..<n..|
|00000550| 56 6e 03 00 72 6e 03 00 | 90 6e 03 00 aa 6e 03 00 |Vn..rn..|.n...n..|
|00000560| c4 6e 03 00 d4 6e 03 00 | e8 6e 03 00 08 6f 03 00 |.n...n..|.n...o..|
|00000570| 18 6f 03 00 2e 6f 03 00 | 48 6f 03 00 60 6f 03 00 |.o...o..|Ho..`o..|
|00000580| 70 6f 03 00 88 6f 03 00 | a0 6f 03 00 b0 6f 03 00 |po...o..|.o...o..|
|00000590| c8 6f 03 00 e0 6f 03 00 | f8 6f 03 00 18 70 03 00 |.o...o..|.o...p..|
|000005a0| 40 70 03 00 5c 70 03 00 | 74 70 03 00 84 70 03 00 |@p..\p..|tp...p..|
|000005b0| 96 70 03 00 aa 70 03 00 | ca 70 03 00 f0 70 03 00 |.p...p..|.p...p..|
|000005c0| 10 71 03 00 24 71 03 00 | 42 71 03 00 5a 71 03 00 |.q..$q..|Bq..Zq..|
|000005d0| 70 71 03 00 88 71 03 00 | 98 71 03 00 a8 71 03 00 |pq...q..|.q...q..|
|000005e0| c2 71 03 00 e2 71 03 00 | 02 72 03 00 10 72 03 00 |.q...q..|.r...r..|
|000005f0| 22 72 03 00 2c 72 03 00 | 50 72 03 00 6c 72 03 00 |"r..,r..|Pr..lr..|
|00000600| 8c 72 03 00 9c 72 03 00 | b2 72 03 00 c6 72 03 00 |.r...r..|.r...r..|
|00000610| d2 72 03 00 ea 72 03 00 | fe 72 03 00 18 73 03 00 |.r...r..|.r...s..|
|00000620| 26 73 03 00 3c 73 03 00 | 4c 73 03 00 58 73 03 00 |&s..<s..|Ls..Xs..|
|00000630| 6c 73 03 00 7e 73 03 00 | 90 73 03 00 a2 73 03 00 |ls..~s..|.s...s..|
|00000640| bc 73 03 00 d4 73 03 00 | e4 73 03 00 f4 73 03 00 |.s...s..|.s...s..|
|00000650| 12 74 03 00 2c 74 03 00 | 48 74 03 00 56 74 03 00 |.t..,t..|Ht..Vt..|
|00000660| 70 74 03 00 80 74 03 00 | 90 74 03 00 a2 74 03 00 |pt...t..|.t...t..|
|00000670| c0 74 03 00 ca 74 03 00 | e8 74 03 00 fc 74 03 00 |.t...t..|.t...t..|
|00000680| 14 75 03 00 28 75 03 00 | 40 75 03 00 50 75 03 00 |.u..(u..|@u..Pu..|
|00000690| 70 75 03 00 84 75 03 00 | 98 75 03 00 b4 75 03 00 |pu...u..|.u...u..|
|000006a0| c4 75 03 00 00 00 00 00 | f0 75 03 00 08 76 03 00 |.u......|.u...v..|
|000006b0| 18 76 03 00 30 76 03 00 | 44 76 03 00 00 00 00 00 |.v..0v..|Dv......|
|000006c0| 60 76 03 00 78 76 03 00 | 9c 76 03 00 b8 76 03 00 |`v..xv..|.v...v..|
|000006d0| d0 76 03 00 00 00 00 00 | 04 77 03 00 20 77 03 00 |.v......|.w.. w..|
|000006e0| 40 77 03 00 54 77 03 00 | 72 77 03 00 86 77 03 00 |@w..Tw..|rw...w..|
|000006f0| b0 77 03 00 c8 77 03 00 | 00 00 00 00 cc cc cc cc |.w...w..|........|
|00000700| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 b3 00 |ntoskrnl|.exe....|
|00000710| 46 73 52 74 6c 4d 64 6c | 52 65 61 64 44 65 76 00 |FsRtlMdl|ReadDev.|
|00000720| b2 00 46 73 52 74 6c 4d | 64 6c 52 65 61 64 43 6f |..FsRtlM|dlReadCo|
|00000730| 6d 70 6c 65 74 65 44 65 | 76 00 cc cc cc cc cc cc |mpleteDe|v.......|
|00000740| 1c 03 52 74 6c 55 70 63 | 61 73 65 55 6e 69 63 6f |..RtlUpc|aseUnico|
|00000750| 64 65 43 68 61 72 00 00 | cc cc cc cc cc cc cc cc |deChar..|........|
|00000760| 16 03 52 74 6c 55 6e 69 | 63 6f 64 65 53 74 72 69 |..RtlUni|codeStri|
|00000770| 6e 67 54 6f 4f 65 6d 53 | 74 72 69 6e 67 00 cc cc |ngToOemS|tring...|
|00000780| d1 03 6d 65 6d 6d 6f 76 | 65 00 cc cc 03 02 4e 6c |..memmov|e.....Nl|
|00000790| 73 4d 62 4f 65 6d 43 6f | 64 65 50 61 67 65 54 61 |sMbOemCo|dePageTa|
|000007a0| 67 00 a2 01 4b 65 53 65 | 74 45 76 65 6e 74 00 00 |g...KeSe|tEvent..|
|000007b0| 2e 03 52 74 6c 78 55 6e | 69 63 6f 64 65 53 74 72 |..RtlxUn|icodeStr|
|000007c0| 69 6e 67 54 6f 4f 65 6d | 53 69 7a 65 00 00 b9 01 |ingToOem|Size....|
|000007d0| 4b 65 66 41 63 71 75 69 | 72 65 53 70 69 6e 4c 6f |KefAcqui|reSpinLo|
|000007e0| 63 6b 41 74 44 70 63 4c | 65 76 65 6c 00 00 d7 00 |ckAtDpcL|evel....|
|000007f0| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 45 78 63 68 61 |Interloc|kedExcha|
|00000800| 6e 67 65 00 cc cc cc cc | cc cc cc cc cc cc cc cc |nge.....|........|
|00000810| ba 01 4b 65 66 52 65 6c | 65 61 73 65 53 70 69 6e |..KefRel|easeSpin|
|00000820| 4c 6f 63 6b 46 72 6f 6d | 44 70 63 4c 65 76 65 6c |LockFrom|DpcLevel|
|00000830| 00 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000840| 59 00 45 78 49 6e 74 65 | 72 6c 6f 63 6b 65 64 50 |Y.ExInte|rlockedP|
|00000850| 75 73 68 45 6e 74 72 79 | 53 4c 69 73 74 00 07 01 |ushEntry|SList...|
|00000860| 49 6f 46 72 65 65 49 72 | 70 00 cc cc cc cc cc cc |IoFreeIr|p.......|
|00000870| b2 02 52 74 6c 45 71 75 | 61 6c 55 6e 69 63 6f 64 |..RtlEqu|alUnicod|
|00000880| 65 53 74 72 69 6e 67 00 | ec 00 49 6f 43 68 65 63 |eString.|..IoChec|
|00000890| 6b 44 65 73 69 72 65 64 | 41 63 63 65 73 73 00 00 |kDesired|Access..|
|000008a0| 95 02 52 74 6c 43 6f 70 | 79 55 6e 69 63 6f 64 65 |..RtlCop|yUnicode|
|000008b0| 53 74 72 69 6e 67 00 00 | 86 01 4b 65 51 75 65 72 |String..|..KeQuer|
|000008c0| 79 53 79 73 74 65 6d 54 | 69 6d 65 00 e5 02 52 74 |ySystemT|ime...Rt|
|000008d0| 6c 4c 65 6e 67 74 68 53 | 65 63 75 72 69 74 79 44 |lLengthS|ecurityD|
|000008e0| 65 73 63 72 69 70 74 6f | 72 00 a4 03 5a 77 57 61 |escripto|r...ZwWa|
|000008f0| 69 74 46 6f 72 53 69 6e | 67 6c 65 4f 62 6a 65 63 |itForSin|gleObjec|
|00000900| 74 00 75 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |t.u.KeIn|itialize|
|00000910| 53 65 6d 61 70 68 6f 72 | 65 00 b6 01 4b 65 57 61 |Semaphor|e...KeWa|
|00000920| 69 74 46 6f 72 4d 75 6c | 74 69 70 6c 65 4f 62 6a |itForMul|tipleObj|
|00000930| 65 63 74 73 00 00 75 00 | 45 78 66 49 6e 74 65 72 |ects..u.|ExfInter|
|00000940| 6c 6f 63 6b 65 64 49 6e | 73 65 72 74 54 61 69 6c |lockedIn|sertTail|
|00000950| 4c 69 73 74 00 00 cc cc | 93 01 4b 65 52 65 6c 65 |List....|..KeRele|
|00000960| 61 73 65 53 65 6d 61 70 | 68 6f 72 65 00 00 97 03 |aseSemap|hore....|
|00000970| 5a 77 53 65 74 45 76 65 | 6e 74 00 00 65 03 5a 77 |ZwSetEve|nt..e.Zw|
|00000980| 43 72 65 61 74 65 53 65 | 63 74 69 6f 6e 00 77 03 |CreateSe|ction.w.|
|00000990| 5a 77 4d 61 70 56 69 65 | 77 4f 66 53 65 63 74 69 |ZwMapVie|wOfSecti|
|000009a0| 6f 6e 00 00 62 03 5a 77 | 43 72 65 61 74 65 45 76 |on..b.Zw|CreateEv|
|000009b0| 65 6e 74 00 9a 01 4b 65 | 52 65 73 65 74 45 76 65 |ent...Ke|ResetEve|
|000009c0| 6e 74 00 00 5e 00 45 78 | 4c 6f 63 61 6c 54 69 6d |nt..^.Ex|LocalTim|
|000009d0| 65 54 6f 53 79 73 74 65 | 6d 54 69 6d 65 00 d8 00 |eToSyste|mTime...|
|000009e0| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 45 78 63 68 61 |Interloc|kedExcha|
|000009f0| 6e 67 65 41 64 64 00 00 | 57 01 4b 65 44 65 6c 61 |ngeAdd..|W.KeDela|
|00000a00| 79 45 78 65 63 75 74 69 | 6f 6e 54 68 72 65 61 64 |yExecuti|onThread|
|00000a10| 00 00 cc cc cc cc cc cc | 73 00 45 78 66 49 6e 74 |........|s.ExfInt|
|00000a20| 65 72 6c 6f 63 6b 65 64 | 41 64 64 55 6c 6f 6e 67 |erlocked|AddUlong|
|00000a30| 00 00 cc cc cc cc cc cc | 6d 00 45 78 52 65 6c 65 |........|m.ExRele|
|00000a40| 61 73 65 52 65 73 6f 75 | 72 63 65 4c 69 74 65 00 |aseResou|rceLite.|
|00000a50| 10 03 52 74 6c 54 69 6d | 65 54 6f 54 69 6d 65 46 |..RtlTim|eToTimeF|
|00000a60| 69 65 6c 64 73 00 d9 00 | 49 6e 74 65 72 6c 6f 63 |ields...|Interloc|
|00000a70| 6b 65 64 49 6e 63 72 65 | 6d 65 6e 74 00 00 8c 02 |kedIncre|ment....|
|00000a80| 52 74 6c 43 6f 6d 70 61 | 72 65 55 6e 69 63 6f 64 |RtlCompa|reUnicod|
|00000a90| 65 53 74 72 69 6e 67 00 | cc cc cc cc cc cc cc cc |eString.|........|
|00000aa0| 2e 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |..ExAcqu|ireResou|
|00000ab0| 72 63 65 45 78 63 6c 75 | 73 69 76 65 4c 69 74 65 |rceExclu|siveLite|
|00000ac0| 00 00 16 02 4e 74 46 72 | 65 65 56 69 72 74 75 61 |....NtFr|eeVirtua|
|00000ad0| 6c 4d 65 6d 6f 72 79 00 | 09 02 4e 74 41 6c 6c 6f |lMemory.|..NtAllo|
|00000ae0| 63 61 74 65 56 69 72 74 | 75 61 6c 4d 65 6d 6f 72 |cateVirt|ualMemor|
|00000af0| 79 00 2e 02 4e 74 53 65 | 74 49 6e 66 6f 72 6d 61 |y...NtSe|tInforma|
|00000b00| 74 69 6f 6e 54 68 72 65 | 61 64 00 00 4a 03 53 65 |tionThre|ad..J.Se|
|00000b10| 52 65 6c 65 61 73 65 53 | 75 62 6a 65 63 74 43 6f |ReleaseS|ubjectCo|
|00000b20| 6e 74 65 78 74 00 2f 03 | 53 65 41 63 63 65 73 73 |ntext./.|SeAccess|
|00000b30| 43 68 65 63 6b 00 35 03 | 53 65 43 61 70 74 75 72 |Check.5.|SeCaptur|
|00000b40| 65 53 75 62 6a 65 63 74 | 43 6f 6e 74 65 78 74 00 |eSubject|Context.|
|00000b50| bf 03 5f 77 63 73 69 63 | 6d 70 00 00 e8 01 4d 6d |.._wcsic|mp....Mm|
|00000b60| 4d 61 70 4c 6f 63 6b 65 | 64 50 61 67 65 73 00 00 |MapLocke|dPages..|
|00000b70| 89 02 52 74 6c 43 6f 6d | 70 61 72 65 4d 65 6d 6f |..RtlCom|pareMemo|
|00000b80| 72 79 00 00 4a 00 45 78 | 49 6e 69 74 69 61 6c 69 |ry..J.Ex|Initiali|
|00000b90| 7a 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |zeResour|ceLite..|
|00000ba0| 76 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 53 70 |v.KeInit|ializeSp|
|00000bb0| 69 6e 4c 6f 63 6b 00 00 | 78 00 45 78 66 49 6e 74 |inLock..|x.ExfInt|
|00000bc0| 65 72 6c 6f 63 6b 65 64 | 52 65 6d 6f 76 65 48 65 |erlocked|RemoveHe|
|00000bd0| 61 64 4c 69 73 74 00 00 | c4 02 52 74 6c 46 72 65 |adList..|..RtlFre|
|00000be0| 65 48 65 61 70 00 77 02 | 52 74 6c 41 6c 6c 6f 63 |eHeap.w.|RtlAlloc|
|00000bf0| 61 74 65 48 65 61 70 00 | a7 02 52 74 6c 44 65 73 |ateHeap.|..RtlDes|
|00000c00| 74 72 6f 79 48 65 61 70 | 00 00 0f 02 4e 74 43 72 |troyHeap|....NtCr|
|00000c10| 65 61 74 65 53 65 63 74 | 69 6f 6e 00 0c 02 4e 74 |eateSect|ion...Nt|
|00000c20| 43 6f 6e 6e 65 63 74 50 | 6f 72 74 00 98 02 52 74 |ConnectP|ort...Rt|
|00000c30| 6c 43 72 65 61 74 65 48 | 65 61 70 00 6a 02 50 73 |lCreateH|eap.j.Ps|
|00000c40| 54 65 72 6d 69 6e 61 74 | 65 53 79 73 74 65 6d 54 |Terminat|eSystemT|
|00000c50| 68 72 65 61 64 00 cc cc | 98 01 4b 65 52 65 6d 6f |hread...|..KeRemo|
|00000c60| 76 65 51 75 65 75 65 00 | cc cc cc cc cc cc cc cc |veQueue.|........|
|00000c70| a4 01 4b 65 53 65 74 49 | 64 65 61 6c 50 72 6f 63 |..KeSetI|dealProc|
|00000c80| 65 73 73 6f 72 54 68 72 | 65 61 64 00 cc cc cc cc |essorThr|ead.....|
|00000c90| 54 02 50 73 43 72 65 61 | 74 65 53 79 73 74 65 6d |T.PsCrea|teSystem|
|00000ca0| 54 68 72 65 61 64 00 00 | f5 01 4d 6d 53 69 7a 65 |Thread..|..MmSize|
|00000cb0| 4f 66 4d 64 6c 00 e3 01 | 4d 6d 49 73 54 68 69 73 |OfMdl...|MmIsThis|
|00000cc0| 41 6e 4e 74 41 73 53 79 | 73 74 65 6d 00 00 cc cc |AnNtAsSy|stem....|
|00000cd0| 26 03 52 74 6c 56 61 6c | 69 64 53 65 63 75 72 69 |&.RtlVal|idSecuri|
|00000ce0| 74 79 44 65 73 63 72 69 | 70 74 6f 72 00 00 cc cc |tyDescri|ptor....|
|00000cf0| 0f 03 52 74 6c 54 69 6d | 65 54 6f 53 65 63 6f 6e |..RtlTim|eToSecon|
|00000d00| 64 73 53 69 6e 63 65 31 | 39 38 30 00 82 01 4b 65 |dsSince1|980...Ke|
|00000d10| 4e 75 6d 62 65 72 50 72 | 6f 63 65 73 73 6f 72 73 |NumberPr|ocessors|
|00000d20| 00 00 3c 03 53 65 45 78 | 70 6f 72 74 73 00 e9 02 |..<.SeEx|ports...|
|00000d30| 52 74 6c 4d 61 70 47 65 | 6e 65 72 69 63 4d 61 73 |RtlMapGe|nericMas|
|00000d40| 6b 00 3d 03 53 65 46 72 | 65 65 50 72 69 76 69 6c |k.=.SeFr|eePrivil|
|00000d50| 65 67 65 73 00 00 cc cc | cc cc cc cc cc cc cc cc |eges....|........|
|00000d60| 51 02 50 73 41 73 73 69 | 67 6e 49 6d 70 65 72 73 |Q.PsAssi|gnImpers|
|00000d70| 6f 6e 61 74 69 6f 6e 54 | 6f 6b 65 6e 00 00 4f 01 |onationT|oken..O.|
|00000d80| 4b 65 41 74 74 61 63 68 | 50 72 6f 63 65 73 73 00 |KeAttach|Process.|
|00000d90| 59 01 4b 65 44 65 74 61 | 63 68 50 72 6f 63 65 73 |Y.KeDeta|chProces|
|00000da0| 73 00 23 03 52 74 6c 55 | 70 63 61 73 65 55 6e 69 |s.#.RtlU|pcaseUni|
|00000db0| 63 6f 64 65 54 6f 4f 65 | 6d 4e 00 00 1a 03 52 74 |codeToOe|mN....Rt|
|00000dc0| 6c 55 6e 69 63 6f 64 65 | 54 6f 4f 65 6d 4e 00 00 |lUnicode|ToOemN..|
|00000dd0| 02 02 4e 6c 73 4d 62 43 | 6f 64 65 50 61 67 65 54 |..NlsMbC|odePageT|
|00000de0| 61 67 00 00 04 02 4e 6c | 73 4f 65 6d 4c 65 61 64 |ag....Nl|sOemLead|
|00000df0| 42 79 74 65 49 6e 66 6f | 00 00 dc 02 52 74 6c 49 |ByteInfo|....RtlI|
|00000e00| 73 4e 61 6d 65 4c 65 67 | 61 6c 44 4f 53 38 44 6f |sNameLeg|alDOS8Do|
|00000e10| 74 33 00 00 a6 00 46 73 | 52 74 6c 49 73 46 61 74 |t3....Fs|RtlIsFat|
|00000e20| 44 62 63 73 4c 65 67 61 | 6c 00 cc cc cc cc cc cc |DbcsLega|l.......|
|00000e30| d0 02 52 74 6c 49 6e 69 | 74 41 6e 73 69 53 74 72 |..RtlIni|tAnsiStr|
|00000e40| 69 6e 67 00 0b 02 4e 74 | 43 6c 6f 73 65 00 cc cc |ing...Nt|Close...|
|00000e50| ea 03 77 63 73 63 6d 70 | 00 00 cc cc 26 02 4e 74 |..wcscmp|....&.Nt|
|00000e60| 51 75 65 72 79 53 65 63 | 75 72 69 74 79 4f 62 6a |QuerySec|urityObj|
|00000e70| 65 63 74 00 2f 02 4e 74 | 53 65 74 53 65 63 75 72 |ect./.Nt|SetSecur|
|00000e80| 69 74 79 4f 62 6a 65 63 | 74 00 12 02 4e 74 44 65 |ityObjec|t...NtDe|
|00000e90| 76 69 63 65 49 6f 43 6f | 6e 74 72 6f 6c 46 69 6c |viceIoCo|ntrolFil|
|00000ea0| 65 00 c3 02 52 74 6c 46 | 72 65 65 41 6e 73 69 53 |e...RtlF|reeAnsiS|
|00000eb0| 74 72 69 6e 67 00 cc cc | 1d 03 52 74 6c 55 70 63 |tring...|..RtlUpc|
|00000ec0| 61 73 65 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |aseUnico|deString|
|00000ed0| 00 00 cc cc 20 03 52 74 | 6c 55 70 63 61 73 65 55 |.... .Rt|lUpcaseU|
|00000ee0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 4f 65 |nicodeSt|ringToOe|
|00000ef0| 6d 53 74 72 69 6e 67 00 | cc cc cc cc cc cc cc cc |mString.|........|
|00000f00| 13 01 49 6f 47 65 74 53 | 74 61 63 6b 4c 69 6d 69 |..IoGetS|tackLimi|
|00000f10| 74 73 00 00 17 02 4e 74 | 46 73 43 6f 6e 74 72 6f |ts....Nt|FsContro|
|00000f20| 6c 46 69 6c 65 00 01 03 | 52 74 6c 53 65 63 6f 6e |lFile...|RtlSecon|
|00000f30| 64 73 53 69 6e 63 65 31 | 39 37 30 54 6f 54 69 6d |dsSince1|970ToTim|
|00000f40| 65 00 04 01 49 6f 46 61 | 73 74 51 75 65 72 79 4e |e...IoFa|stQueryN|
|00000f50| 65 74 77 6f 72 6b 41 74 | 74 72 69 62 75 74 65 73 |etworkAt|tributes|
|00000f60| 00 00 fe 02 52 74 6c 52 | 61 6e 64 6f 6d 00 b7 03 |....RtlR|andom...|
|00000f70| 5f 73 74 72 69 63 6d 70 | 00 00 cc cc cc cc cc cc |_stricmp|........|
|00000f80| e9 03 77 63 73 63 68 72 | 00 00 cc cc cc cc cc cc |..wcschr|........|
|00000f90| 23 01 49 6f 52 65 61 64 | 4f 70 65 72 61 74 69 6f |#.IoRead|Operatio|
|00000fa0| 6e 43 6f 75 6e 74 00 00 | 24 01 49 6f 52 65 61 64 |nCount..|$.IoRead|
|00000fb0| 54 72 61 6e 73 66 65 72 | 43 6f 75 6e 74 00 42 01 |Transfer|Count.B.|
|00000fc0| 49 6f 57 72 69 74 65 4f | 70 65 72 61 74 69 6f 6e |IoWriteO|peration|
|00000fd0| 43 6f 75 6e 74 00 43 01 | 49 6f 57 72 69 74 65 54 |Count.C.|IoWriteT|
|00000fe0| 72 61 6e 73 66 65 72 43 | 6f 75 6e 74 00 00 38 01 |ransferC|ount..8.|
|00000ff0| 49 6f 53 74 61 74 69 73 | 74 69 63 73 4c 6f 63 6b |IoStatis|ticsLock|
|00001000| 00 00 d2 02 52 74 6c 49 | 6e 69 74 53 74 72 69 6e |....RtlI|nitStrin|
|00001010| 67 00 cc cc eb 03 77 63 | 73 63 70 79 00 00 eb 00 |g.....wc|scpy....|
|00001020| 49 6f 43 61 6e 63 65 6c | 49 72 70 00 db 02 52 74 |IoCancel|Irp...Rt|
|00001030| 6c 49 6e 74 65 67 65 72 | 54 6f 55 6e 69 63 6f 64 |lInteger|ToUnicod|
|00001040| 65 53 74 72 69 6e 67 00 | 32 01 49 6f 53 65 74 54 |eString.|2.IoSetT|
|00001050| 68 72 65 61 64 48 61 72 | 64 45 72 72 6f 72 4d 6f |hreadHar|dErrorMo|
|00001060| 64 65 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |de......|........|
|00001070| ef 02 52 74 6c 4e 74 53 | 74 61 74 75 73 54 6f 44 |..RtlNtS|tatusToD|
|00001080| 6f 73 45 72 72 6f 72 4e | 6f 54 65 62 00 00 2a 02 |osErrorN|oTeb..*.|
|00001090| 4e 74 52 65 71 75 65 73 | 74 57 61 69 74 52 65 70 |NtReques|tWaitRep|
|000010a0| 6c 79 50 6f 72 74 00 00 | 0a 01 49 6f 47 65 74 42 |lyPort..|..IoGetB|
|000010b0| 61 73 65 46 69 6c 65 53 | 79 73 74 65 6d 44 65 76 |aseFileS|ystemDev|
|000010c0| 69 63 65 4f 62 6a 65 63 | 74 00 cc cc d3 02 52 74 |iceObjec|t.....Rt|
|000010d0| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|000010e0| 6e 67 00 00 c6 02 52 74 | 6c 46 72 65 65 55 6e 69 |ng....Rt|lFreeUni|
|000010f0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 c5 00 46 73 |codeStri|ng....Fs|
|00001100| 52 74 6c 50 72 65 70 61 | 72 65 4d 64 6c 57 72 69 |RtlPrepa|reMdlWri|
|00001110| 74 65 44 65 76 00 b5 00 | 46 73 52 74 6c 4d 64 6c |teDev...|FsRtlMdl|
|00001120| 57 72 69 74 65 43 6f 6d | 70 6c 65 74 65 44 65 76 |WriteCom|pleteDev|
|00001130| 00 00 ee 00 49 6f 43 68 | 65 63 6b 46 75 6e 63 74 |....IoCh|eckFunct|
|00001140| 69 6f 6e 41 63 63 65 73 | 73 00 cc cc cc cc cc cc |ionAcces|s.......|
|00001150| ed 00 49 6f 43 68 65 63 | 6b 45 61 42 75 66 66 65 |..IoChec|kEaBuffe|
|00001160| 72 56 61 6c 69 64 69 74 | 79 00 f9 02 52 74 6c 50 |rValidit|y...RtlP|
|00001170| 72 65 66 69 78 55 6e 69 | 63 6f 64 65 53 74 72 69 |refixUni|codeStri|
|00001180| 6e 67 00 00 0e 02 4e 74 | 43 72 65 61 74 65 46 69 |ng....Nt|CreateFi|
|00001190| 6c 65 00 00 b1 02 52 74 | 6c 45 71 75 61 6c 53 74 |le....Rt|lEqualSt|
|000011a0| 72 69 6e 67 00 00 cc cc | e4 01 4d 6d 4c 6f 63 6b |ring....|..MmLock|
|000011b0| 50 61 67 61 62 6c 65 44 | 61 74 61 53 65 63 74 69 |PagableD|ataSecti|
|000011c0| 6f 6e 00 00 cc cc cc cc | e1 00 49 6f 41 6c 6c 6f |on......|..IoAllo|
|000011d0| 63 61 74 65 4d 64 6c 00 | ee 01 4d 6d 50 72 6f 62 |cateMdl.|..MmProb|
|000011e0| 65 41 6e 64 4c 6f 63 6b | 50 61 67 65 73 00 20 01 |eAndLock|Pages. .|
|000011f0| 49 6f 51 75 65 75 65 54 | 68 72 65 61 64 49 72 70 |IoQueueT|hreadIrp|
|00001200| 00 00 cc cc cc cc cc cc | 48 02 4f 62 66 52 65 66 |........|H.ObfRef|
|00001210| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 cc cc |erenceOb|ject....|
|00001220| e0 00 49 6f 41 6c 6c 6f | 63 61 74 65 49 72 70 00 |..IoAllo|cateIrp.|
|00001230| 60 01 4b 65 47 65 74 43 | 75 72 72 65 6e 74 54 68 |`.KeGetC|urrentTh|
|00001240| 72 65 61 64 00 00 cc cc | 0c 01 49 6f 47 65 74 43 |read....|..IoGetC|
|00001250| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 00 cc cc |urrentPr|ocess...|
|00001260| 52 01 4b 65 42 75 67 43 | 68 65 63 6b 45 78 00 00 |R.KeBugC|heckEx..|
|00001270| 0d 03 52 74 6c 54 69 6d | 65 46 69 65 6c 64 73 54 |..RtlTim|eFieldsT|
|00001280| 6f 54 69 6d 65 00 cc cc | 3c 00 45 78 44 65 6c 65 |oTime...|<.ExDele|
|00001290| 74 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |teResour|ceLite..|
|000012a0| 47 02 4f 62 66 44 65 72 | 65 66 65 72 65 6e 63 65 |G.ObfDer|eference|
|000012b0| 4f 62 6a 65 63 74 00 00 | 95 00 46 73 52 74 6c 44 |Object..|..FsRtlD|
|000012c0| 6f 65 73 4e 61 6d 65 43 | 6f 6e 74 61 69 6e 57 69 |oesNameC|ontainWi|
|000012d0| 6c 64 43 61 72 64 73 00 | 70 00 45 78 53 79 73 74 |ldCards.|p.ExSyst|
|000012e0| 65 6d 54 69 6d 65 54 6f | 4c 6f 63 61 6c 54 69 6d |emTimeTo|LocalTim|
|000012f0| 65 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |e.......|........|
|00001300| 0e 03 52 74 6c 54 69 6d | 65 54 6f 53 65 63 6f 6e |..RtlTim|eToSecon|
|00001310| 64 73 53 69 6e 63 65 31 | 39 37 30 00 d6 00 49 6e |dsSince1|970...In|
|00001320| 74 65 72 6c 6f 63 6b 65 | 64 44 65 63 72 65 6d 65 |terlocke|dDecreme|
|00001330| 6e 74 00 00 f4 00 49 6f | 43 72 65 61 74 65 46 69 |nt....Io|CreateFi|
|00001340| 6c 65 00 00 9c 01 4b 65 | 52 75 6e 64 6f 77 6e 51 |le....Ke|RundownQ|
|00001350| 75 65 75 65 00 00 c5 02 | 52 74 6c 46 72 65 65 4f |ueue....|RtlFreeO|
|00001360| 65 6d 53 74 72 69 6e 67 | 00 00 ca 02 52 74 6c 47 |emString|....RtlG|
|00001370| 65 74 44 61 63 6c 53 65 | 63 75 72 69 74 79 44 65 |etDaclSe|curityDe|
|00001380| 73 63 72 69 70 74 6f 72 | 00 00 ce 02 52 74 6c 47 |scriptor|....RtlG|
|00001390| 65 74 4f 77 6e 65 72 53 | 65 63 75 72 69 74 79 44 |etOwnerS|ecurityD|
|000013a0| 65 73 63 72 69 70 74 6f | 72 00 cc cc cc cc cc cc |escripto|r.......|
|000013b0| f7 01 4d 6d 55 6e 6c 6f | 63 6b 50 61 67 61 62 6c |..MmUnlo|ckPagabl|
|000013c0| 65 49 6d 61 67 65 53 65 | 63 74 69 6f 6e 00 cc cc |eImageSe|ction...|
|000013d0| 74 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 51 75 |t.KeInit|ializeQu|
|000013e0| 65 75 65 00 9a 02 52 74 | 6c 43 72 65 61 74 65 53 |eue...Rt|lCreateS|
|000013f0| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00001400| 72 00 e4 02 52 74 6c 4c | 65 6e 67 74 68 52 65 71 |r...RtlL|engthReq|
|00001410| 75 69 72 65 64 53 69 64 | 00 00 d6 02 52 74 6c 49 |uiredSid|....RtlI|
|00001420| 6e 69 74 69 61 6c 69 7a | 65 53 69 64 00 00 cc cc |nitializ|eSid....|
|00001430| 0c 03 52 74 6c 53 75 62 | 41 75 74 68 6f 72 69 74 |..RtlSub|Authorit|
|00001440| 79 53 69 64 00 00 cc cc | e6 02 52 74 6c 4c 65 6e |ySid....|..RtlLen|
|00001450| 67 74 68 53 69 64 00 00 | 96 02 52 74 6c 43 72 65 |gthSid..|..RtlCre|
|00001460| 61 74 65 41 63 6c 00 00 | 73 02 52 74 6c 41 64 64 |ateAcl..|s.RtlAdd|
|00001470| 41 63 63 65 73 73 41 6c | 6c 6f 77 65 64 41 63 65 |AccessAl|lowedAce|
|00001480| 00 00 05 03 52 74 6c 53 | 65 74 44 61 63 6c 53 65 |....RtlS|etDaclSe|
|00001490| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|000014a0| 00 00 07 03 52 74 6c 53 | 65 74 4f 77 6e 65 72 53 |....RtlS|etOwnerS|
|000014b0| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|000014c0| 72 00 7c 03 5a 77 4f 70 | 65 6e 4b 65 79 00 cc cc |r.|.ZwOp|enKey...|
|000014d0| 8f 03 5a 77 51 75 65 72 | 79 56 61 6c 75 65 4b 65 |..ZwQuer|yValueKe|
|000014e0| 79 00 5e 03 5a 77 43 6c | 6f 73 65 00 7a 02 52 74 |y.^.ZwCl|ose.z.Rt|
|000014f0| 6c 41 6e 73 69 53 74 72 | 69 6e 67 54 6f 55 6e 69 |lAnsiStr|ingToUni|
|00001500| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 cc cc cc cc |codeStri|ng......|
|00001510| 42 02 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |B.ObRefe|renceObj|
|00001520| 65 63 74 42 79 48 61 6e | 64 6c 65 00 2f 00 45 78 |ectByHan|dle./.Ex|
|00001530| 41 63 71 75 69 72 65 52 | 65 73 6f 75 72 63 65 53 |AcquireR|esourceS|
|00001540| 68 61 72 65 64 4c 69 74 | 65 00 cc cc f8 01 4d 6d |haredLit|e.....Mm|
|00001550| 55 6e 6c 6f 63 6b 50 61 | 67 65 73 00 fa 01 4d 6d |UnlockPa|ges...Mm|
|00001560| 55 6e 6d 61 70 4c 6f 63 | 6b 65 64 50 61 67 65 73 |UnmapLoc|kedPages|
|00001570| 00 00 e8 00 49 6f 42 75 | 69 6c 64 50 61 72 74 69 |....IoBu|ildParti|
|00001580| 61 6c 4d 64 6c 00 08 01 | 49 6f 46 72 65 65 4d 64 |alMdl...|IoFreeMd|
|00001590| 6c 00 88 01 4b 65 51 75 | 65 72 79 54 69 6d 65 49 |l...KeQu|eryTimeI|
|000015a0| 6e 63 72 65 6d 65 6e 74 | 00 00 8d 01 4b 65 52 65 |ncrement|....KeRe|
|000015b0| 61 64 53 74 61 74 65 51 | 75 65 75 65 00 00 36 00 |adStateQ|ueue..6.|
|000015c0| 45 78 41 6c 6c 6f 63 61 | 74 65 50 6f 6f 6c 57 69 |ExAlloca|tePoolWi|
|000015d0| 74 68 54 61 67 00 cc cc | 42 00 45 78 46 72 65 65 |thTag...|B.ExFree|
|000015e0| 50 6f 6f 6c 00 00 45 01 | 49 6f 66 43 6f 6d 70 6c |Pool..E.|IofCompl|
|000015f0| 65 74 65 52 65 71 75 65 | 73 74 00 00 44 01 49 6f |eteReque|st..D.Io|
|00001600| 66 43 61 6c 6c 44 72 69 | 76 65 72 00 c1 03 5f 77 |fCallDri|ver..._w|
|00001610| 63 73 6e 69 63 6d 70 00 | 7b 01 4b 65 49 6e 73 65 |csnicmp.|{.KeInse|
|00001620| 72 74 48 65 61 64 51 75 | 65 75 65 00 62 00 45 78 |rtHeadQu|eue.b.Ex|
|00001630| 51 75 65 75 65 57 6f 72 | 6b 49 74 65 6d 00 fb 00 |QueueWor|kItem...|
|00001640| 49 6f 44 65 6c 65 74 65 | 44 65 76 69 63 65 00 00 |IoDelete|Device..|
|00001650| f3 00 49 6f 43 72 65 61 | 74 65 44 65 76 69 63 65 |..IoCrea|teDevice|
|00001660| 00 00 df 00 49 6f 41 6c | 6c 6f 63 61 74 65 45 72 |....IoAl|locateEr|
|00001670| 72 6f 72 4c 6f 67 45 6e | 74 72 79 00 41 01 49 6f |rorLogEn|try.A.Io|
|00001680| 57 72 69 74 65 45 72 72 | 6f 72 4c 6f 67 45 6e 74 |WriteErr|orLogEnt|
|00001690| 72 79 00 00 24 03 52 74 | 6c 55 70 70 65 72 43 68 |ry..$.Rt|lUpperCh|
|000016a0| 61 72 00 00 b2 01 4b 65 | 54 69 63 6b 43 6f 75 6e |ar....Ke|TickCoun|
|000016b0| 74 00 cc cc 57 00 45 78 | 49 6e 74 65 72 6c 6f 63 |t...W.Ex|Interloc|
|000016c0| 6b 65 64 50 6f 70 45 6e | 74 72 79 53 4c 69 73 74 |kedPopEn|trySList|
|000016d0| 00 00 aa 01 4b 65 53 65 | 74 54 61 72 67 65 74 50 |....KeSe|tTargetP|
|000016e0| 72 6f 63 65 73 73 6f 72 | 44 70 63 00 11 01 49 6f |rocessor|Dpc...Io|
|000016f0| 47 65 74 52 65 6c 61 74 | 65 64 44 65 76 69 63 65 |GetRelat|edDevice|
|00001700| 4f 62 6a 65 63 74 00 00 | 28 02 4e 74 52 65 61 64 |Object..|(.NtRead|
|00001710| 46 69 6c 65 00 00 2c 02 | 4e 74 53 65 74 49 6e 66 |File..,.|NtSetInf|
|00001720| 6f 72 6d 61 74 69 6f 6e | 46 69 6c 65 00 00 cc cc |ormation|File....|
|00001730| 33 02 4e 74 57 72 69 74 | 65 46 69 6c 65 00 cc cc |3.NtWrit|eFile...|
|00001740| 7c 01 4b 65 49 6e 73 65 | 72 74 51 75 65 75 65 00 ||.KeInse|rtQueue.|
|00001750| 15 01 49 6f 49 6e 69 74 | 69 61 6c 69 7a 65 49 72 |..IoInit|ializeIr|
|00001760| 70 00 d3 01 4d 6d 42 75 | 69 6c 64 4d 64 6c 46 6f |p...MmBu|ildMdlFo|
|00001770| 72 4e 6f 6e 50 61 67 65 | 64 50 6f 6f 6c 00 cc cc |rNonPage|dPool...|
|00001780| ed 03 77 63 73 6c 65 6e | 00 00 f5 02 52 74 6c 4f |..wcslen|....RtlO|
|00001790| 65 6d 53 74 72 69 6e 67 | 54 6f 55 6e 69 63 6f 64 |emString|ToUnicod|
|000017a0| 65 53 74 72 69 6e 67 00 | 6f 01 4b 65 49 6e 69 74 |eString.|o.KeInit|
|000017b0| 69 61 6c 69 7a 65 44 70 | 63 00 cc cc b8 01 4b 65 |ializeDp|c.....Ke|
|000017c0| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|000017d0| 65 63 74 00 54 01 4b 65 | 43 6c 65 61 72 45 76 65 |ect.T.Ke|ClearEve|
|000017e0| 6e 74 00 00 cc cc cc cc | ae 01 4b 65 53 65 74 54 |nt......|..KeSetT|
|000017f0| 69 6d 65 72 00 00 cc cc | cc cc cc cc cc cc cc cc |imer....|........|
|00001800| 53 01 4b 65 43 61 6e 63 | 65 6c 54 69 6d 65 72 00 |S.KeCanc|elTimer.|
|00001810| 8a 01 4b 65 52 65 61 64 | 53 74 61 74 65 45 76 65 |..KeRead|StateEve|
|00001820| 6e 74 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |nt......|........|
|00001830| 70 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 45 76 |p.KeInit|ializeEv|
|00001840| 65 6e 74 00 77 01 4b 65 | 49 6e 69 74 69 61 6c 69 |ent.w.Ke|Initiali|
|00001850| 7a 65 54 69 6d 65 72 00 | 22 02 4e 74 51 75 65 72 |zeTimer.|".NtQuer|
|00001860| 79 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 46 69 6c 65 |yInforma|tionFile|
|00001870| 00 00 cc cc 1c 02 4e 74 | 4f 70 65 6e 46 69 6c 65 |......Nt|OpenFile|
|00001880| 00 00 cc cc 27 02 4e 74 | 51 75 65 72 79 56 6f 6c |....'.Nt|QueryVol|
|00001890| 75 6d 65 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 46 69 |umeInfor|mationFi|
|000018a0| 6c 65 00 00 cc cc cc cc | 48 41 4c 2e 64 6c 6c 00 |le......|HAL.dll.|
|000018b0| 4a 00 4b 66 41 63 71 75 | 69 72 65 53 70 69 6e 4c |J.KfAcqu|ireSpinL|
|000018c0| 6f 63 6b 00 cc cc cc cc | 4b 00 4b 66 4c 6f 77 65 |ock.....|K.KfLowe|
|000018d0| 72 49 72 71 6c 00 cc cc | 42 00 4b 65 47 65 74 43 |rIrql...|B.KeGetC|
|000018e0| 75 72 72 65 6e 74 49 72 | 71 6c 00 00 cc cc cc cc |urrentIr|ql......|
|000018f0| 4d 00 4b 66 52 65 6c 65 | 61 73 65 53 70 69 6e 4c |M.KfRele|aseSpinL|
|00001900| 6f 63 6b 00 4c 00 4b 66 | 52 61 69 73 65 49 72 71 |ock.L.Kf|RaiseIrq|
|00001910| 6c 00 cc cc cc cc cc cc | 54 44 49 2e 53 59 53 00 |l.......|TDI.SYS.|
|00001920| 20 00 54 64 69 4f 70 65 | 6e 4e 65 74 62 69 6f 73 | .TdiOpe|nNetbios|
|00001930| 41 64 64 72 65 73 73 00 | 1c 00 54 64 69 44 65 72 |Address.|..TdiDer|
|00001940| 65 67 69 73 74 65 72 4e | 6f 74 69 66 69 63 61 74 |egisterN|otificat|
|00001950| 69 6f 6e 48 61 6e 64 6c | 65 72 00 00 25 00 54 64 |ionHandl|er..%.Td|
|00001960| 69 52 65 74 75 72 6e 43 | 68 61 69 6e 65 64 52 65 |iReturnC|hainedRe|
|00001970| 63 65 69 76 65 73 00 00 | 0d 00 54 64 69 43 6f 70 |ceives..|..TdiCop|
|00001980| 79 42 75 66 66 65 72 54 | 6f 4d 64 6c 00 00 cc cc |yBufferT|oMdl....|
|00001990| 24 00 54 64 69 52 65 67 | 69 73 74 65 72 4e 6f 74 |$.TdiReg|isterNot|
|000019a0| 69 66 69 63 61 74 69 6f | 6e 48 61 6e 64 6c 65 72 |ificatio|nHandler|
|000019b0| 00 00 cc cc cc cc cc cc | 6b 73 65 63 64 64 2e 73 |........|ksecdd.s|
|000019c0| 79 73 00 00 01 00 41 63 | 71 75 69 72 65 43 72 65 |ys....Ac|quireCre|
|000019d0| 64 65 6e 74 69 61 6c 73 | 48 61 6e 64 6c 65 57 00 |dentials|HandleW.|
|000019e0| 09 00 49 6e 69 74 53 65 | 63 75 72 69 74 79 49 6e |..InitSe|curityIn|
|000019f0| 74 65 72 66 61 63 65 57 | 00 00 cc cc cc cc cc cc |terfaceW|........|
|00001a00| 0c 00 4d 61 70 53 65 63 | 75 72 69 74 79 45 72 72 |..MapSec|urityErr|
|00001a10| 6f 72 00 00 08 00 49 6d | 70 65 72 73 6f 6e 61 74 |or....Im|personat|
|00001a20| 65 53 65 63 75 72 69 74 | 79 43 6f 6e 74 65 78 74 |eSecurit|yContext|
|00001a30| 00 00 05 00 46 72 65 65 | 43 6f 6e 74 65 78 74 42 |....Free|ContextB|
|00001a40| 75 66 66 65 72 00 04 00 | 45 6e 75 6d 65 72 61 74 |uffer...|Enumerat|
|00001a50| 65 53 65 63 75 72 69 74 | 79 50 61 63 6b 61 67 65 |eSecurit|yPackage|
|00001a60| 73 57 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |sW......|........|
|00001a70| 03 00 44 65 6c 65 74 65 | 53 65 63 75 72 69 74 79 |..Delete|Security|
|00001a80| 43 6f 6e 74 65 78 74 00 | 00 00 41 63 63 65 70 74 |Context.|..Accept|
|00001a90| 53 65 63 75 72 69 74 79 | 43 6f 6e 74 65 78 74 00 |Security|Context.|
+--------+-------------------------+-------------------------+--------+--------+