/ PC Gamer (Italian) 45 / PC Gamer IT CD 45 2-2.iso / addons / photodraw / NT4SP4 / SP4I386.EXE / win32k.sys / INIT

next >

view JSON data

view as text

open on a Mac

open on a PC

+--------+-------------------------+-------------------------+--------+--------+
|00000000| c0 02 13 00 00 00 00 00 | 00 00 00 00 58 06 13 00 |........|....X...|
|00000010| c0 e1 11 00 44 06 13 00 | 00 00 00 00 00 00 00 00 |....D...|........|
|00000020| 48 1b 13 00 44 e5 11 00 | 00 00 00 00 00 00 00 00 |H...D...|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 cc cc cc cc |........|........|
|00000040| 68 06 13 00 72 06 13 00 | 7c 06 13 00 94 06 13 00 |h...r...||.......|
|00000050| ac 06 13 00 cc 06 13 00 | e8 06 13 00 04 07 13 00 |........|........|
|00000060| 20 07 13 00 38 07 13 00 | 50 07 13 00 68 07 13 00 | ...8...|P...h...|
|00000070| 80 07 13 00 94 07 13 00 | a8 07 13 00 c0 07 13 00 |........|........|
|00000080| e0 07 13 00 f0 07 13 00 | 10 08 13 00 30 08 13 00 |........|....0...|
|00000090| 4c 08 13 00 6c 08 13 00 | 90 08 13 00 a4 08 13 00 |L...l...|........|
|000000a0| bc 08 13 00 d4 08 13 00 | ec 08 13 00 04 09 13 00 |........|........|
|000000b0| 1c 09 13 00 2e 09 13 00 | 48 09 13 00 66 09 13 00 |........|H...f...|
|000000c0| 7c 09 13 00 94 09 13 00 | a8 09 13 00 c8 09 13 00 ||.......|........|
|000000d0| dc 09 13 00 f4 09 13 00 | 04 0a 13 00 1e 0a 13 00 |........|........|
|000000e0| 36 0a 13 00 50 0a 13 00 | 6e 0a 13 00 88 0a 13 00 |6...P...|n.......|
|000000f0| a2 0a 13 00 b8 0a 13 00 | ce 0a 13 00 e8 0a 13 00 |........|........|
|00000100| 04 0b 13 00 10 0b 13 00 | 2e 0b 13 00 3e 0b 13 00 |........|....>...|
|00000110| 4a 0b 13 00 6a 0b 13 00 | 8a 0b 13 00 aa 0b 13 00 |J...j...|........|
|00000120| ca 0b 13 00 dc 0b 13 00 | ec 0b 13 00 10 0c 13 00 |........|........|
|00000130| 24 0c 13 00 42 0c 13 00 | 58 0c 13 00 80 0c 13 00 |$...B...|X.......|
|00000140| 98 0c 13 00 b0 0c 13 00 | d0 0c 13 00 ea 0c 13 00 |........|........|
|00000150| 0a 0d 13 00 20 0d 13 00 | 36 0d 13 00 48 0d 13 00 |.... ...|6...H...|
|00000160| 68 0d 13 00 80 0d 13 00 | 98 0d 13 00 a8 0d 13 00 |h.......|........|
|00000170| b6 0d 13 00 ce 0d 13 00 | f0 0d 13 00 06 0e 13 00 |........|........|
|00000180| 28 0e 13 00 40 0e 13 00 | 56 0e 13 00 64 0e 13 00 |(...@...|V...d...|
|00000190| 74 0e 13 00 90 0e 13 00 | b4 0e 13 00 d0 0e 13 00 |t.......|........|
|000001a0| f0 0e 13 00 08 0f 13 00 | 1e 0f 13 00 3c 0f 13 00 |........|....<...|
|000001b0| 50 0f 13 00 64 0f 13 00 | 76 0f 13 00 90 0f 13 00 |P...d...|v.......|
|000001c0| ac 0f 13 00 c0 0f 13 00 | e0 0f 13 00 fa 0f 13 00 |........|........|
|000001d0| 10 10 13 00 30 10 13 00 | 48 10 13 00 58 10 13 00 |....0...|H...X...|
|000001e0| 7c 10 13 00 98 10 13 00 | ae 10 13 00 c8 10 13 00 ||.......|........|
|000001f0| dc 10 13 00 f8 10 13 00 | 18 11 13 00 40 11 13 00 |........|....@...|
|00000200| 60 11 13 00 80 11 13 00 | a2 11 13 00 be 11 13 00 |`.......|........|
|00000210| cc 11 13 00 d8 11 13 00 | f8 11 13 00 06 12 13 00 |........|........|
|00000220| 20 12 13 00 40 12 13 00 | 54 12 13 00 6e 12 13 00 | ...@...|T...n...|
|00000230| 80 12 13 00 96 12 13 00 | b4 12 13 00 e0 12 13 00 |........|........|
|00000240| fc 12 13 00 1c 13 13 00 | 32 13 13 00 4c 13 13 00 |........|2...L...|
|00000250| 70 13 13 00 86 13 13 00 | 90 13 13 00 9a 13 13 00 |p.......|........|
|00000260| a8 13 13 00 b2 13 13 00 | bc 13 13 00 d8 13 13 00 |........|........|
|00000270| f6 13 13 00 0c 14 13 00 | 28 14 13 00 48 14 13 00 |........|(...H...|
|00000280| 62 14 13 00 7c 14 13 00 | 94 14 13 00 b0 14 13 00 |b...|...|........|
|00000290| c8 14 13 00 d2 14 13 00 | e8 14 13 00 00 15 13 00 |........|........|
|000002a0| 10 15 13 00 24 15 13 00 | 38 15 13 00 48 15 13 00 |....$...|8...H...|
|000002b0| 70 15 13 00 88 15 13 00 | a0 15 13 00 b6 15 13 00 |p.......|........|
|000002c0| d4 15 13 00 ee 15 13 00 | 08 16 13 00 1e 16 13 00 |........|........|
|000002d0| 30 16 13 00 40 16 13 00 | 58 16 13 00 66 16 13 00 |0...@...|X...f...|
|000002e0| 7e 16 13 00 9a 16 13 00 | b0 16 13 00 cc 16 13 00 |~.......|........|
|000002f0| e0 16 13 00 ee 16 13 00 | 06 17 13 00 1e 17 13 00 |........|........|
|00000300| 28 17 13 00 40 17 13 00 | 4c 17 13 00 70 17 13 00 |(...@...|L...p...|
|00000310| 84 17 13 00 98 17 13 00 | a4 17 13 00 b0 17 13 00 |........|........|
|00000320| cc 17 13 00 ea 17 13 00 | 02 18 13 00 1e 18 13 00 |........|........|
|00000330| 30 18 13 00 3e 18 13 00 | 58 18 13 00 70 18 13 00 |0...>...|X...p...|
|00000340| 82 18 13 00 9c 18 13 00 | b4 18 13 00 c8 18 13 00 |........|........|
|00000350| e2 18 13 00 f8 18 13 00 | 10 19 13 00 1c 19 13 00 |........|........|
|00000360| 2a 19 13 00 40 19 13 00 | 4a 19 13 00 5a 19 13 00 |*...@...|J...Z...|
|00000370| 78 19 13 00 82 19 13 00 | 8c 19 13 00 a0 19 13 00 |x.......|........|
|00000380| c0 19 13 00 dc 19 13 00 | 00 1a 13 00 1a 1a 13 00 |........|........|
|00000390| 34 1a 13 00 54 1a 13 00 | 64 1a 13 00 7e 1a 13 00 |4...T...|d...~...|
|000003a0| 98 1a 13 00 ae 1a 13 00 | ba 1a 13 00 d8 1a 13 00 |........|........|
|000003b0| ee 1a 13 00 08 1b 13 00 | 14 1b 13 00 30 1b 13 00 |........|....0...|
|000003c0| 00 00 00 00 50 1b 13 00 | 66 1b 13 00 7c 1b 13 00 |....P...|f...|...|
|000003d0| 98 1b 13 00 00 00 00 00 | 6e 74 6f 73 6b 72 6e 6c |........|ntoskrnl|
|000003e0| 2e 65 78 65 00 00 cc cc | eb 03 77 63 73 63 68 72 |.exe....|..wcschr|
|000003f0| 00 00 f5 03 77 63 73 73 | 74 72 00 00 5c 01 4b 65 |....wcss|tr..\.Ke|
|00000400| 45 6e 74 65 72 43 72 69 | 74 69 63 61 6c 52 65 67 |EnterCri|ticalReg|
|00000410| 69 6f 6e 00 d7 00 49 6e | 74 65 72 6c 6f 63 6b 65 |ion...In|terlocke|
|00000420| 64 44 65 63 72 65 6d 65 | 6e 74 00 00 f9 00 49 6f |dDecreme|nt....Io|
|00000430| 43 72 65 61 74 65 53 79 | 6e 63 68 72 6f 6e 69 7a |CreateSy|nchroniz|
|00000440| 61 74 69 6f 6e 45 76 65 | 6e 74 00 00 36 00 45 78 |ationEve|nt..6.Ex|
|00000450| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|00000460| 54 61 67 00 cc cc cc cc | 82 03 5a 77 4f 70 65 6e |Tag.....|..ZwOpen|
|00000470| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 4f 62 6a 65 |Symbolic|LinkObje|
|00000480| 63 74 00 00 d8 00 49 6e | 74 65 72 6c 6f 63 6b 65 |ct....In|terlocke|
|00000490| 64 45 78 63 68 61 6e 67 | 65 00 cc cc cc cc cc cc |dExchang|e.......|
|000004a0| 81 01 4b 65 4c 65 61 76 | 65 43 72 69 74 69 63 61 |..KeLeav|eCritica|
|000004b0| 6c 52 65 67 69 6f 6e 00 | 1d 03 52 74 6c 55 6e 77 |lRegion.|..RtlUnw|
|000004c0| 69 6e 64 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ind.....|........|
|000004d0| 02 02 4e 6c 73 41 6e 73 | 69 43 6f 64 65 50 61 67 |..NlsAns|iCodePag|
|000004e0| 65 00 cc cc cc cc cc cc | f0 02 52 74 6c 4e 74 53 |e.......|..RtlNtS|
|000004f0| 74 61 74 75 73 54 6f 44 | 6f 73 45 72 72 6f 72 00 |tatusToD|osError.|
|00000500| d1 02 52 74 6c 49 6d 61 | 67 65 4e 74 48 65 61 64 |..RtlIma|geNtHead|
|00000510| 65 72 00 00 ca 01 4c 70 | 63 52 65 71 75 65 73 74 |er....Lp|cRequest|
|00000520| 50 6f 72 74 00 00 cc cc | 2b 03 52 74 6c 5a 65 72 |Port....|+.RtlZer|
|00000530| 6f 48 65 61 70 00 cc cc | cc cc cc cc cc cc cc cc |oHeap...|........|
|00000540| ab 02 52 74 6c 45 6d 70 | 74 79 41 74 6f 6d 54 61 |..RtlEmp|tyAtomTa|
|00000550| 62 6c 65 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ble.....|........|
|00000560| 9a 02 52 74 6c 43 72 65 | 61 74 65 48 65 61 70 00 |..RtlCre|ateHeap.|
|00000570| fc 02 52 74 6c 51 75 65 | 72 79 41 74 6f 6d 49 6e |..RtlQue|ryAtomIn|
|00000580| 41 74 6f 6d 54 61 62 6c | 65 00 cc cc cc cc cc cc |AtomTabl|e.......|
|00000590| a3 02 52 74 6c 44 65 6c | 65 74 65 41 74 6f 6d 46 |..RtlDel|eteAtomF|
|000005a0| 72 6f 6d 41 74 6f 6d 54 | 61 62 6c 65 00 00 cc cc |romAtomT|able....|
|000005b0| e9 02 52 74 6c 4c 6f 6f | 6b 75 70 41 74 6f 6d 49 |..RtlLoo|kupAtomI|
|000005c0| 6e 41 74 6f 6d 54 61 62 | 6c 65 00 00 6b 02 50 73 |nAtomTab|le..k.Ps|
|000005d0| 53 65 74 50 72 6f 63 65 | 73 73 50 72 69 6f 72 69 |SetProce|ssPriori|
|000005e0| 74 79 42 79 43 6c 61 73 | 73 00 cc cc d1 01 4d 6d |tyByClas|s.....Mm|
|000005f0| 41 64 6a 75 73 74 57 6f | 72 6b 69 6e 67 53 65 74 |AdjustWo|rkingSet|
|00000600| 53 69 7a 65 00 00 cc cc | cc cc cc cc cc cc cc cc |Size....|........|
|00000610| a8 03 5a 77 59 69 65 6c | 64 45 78 65 63 75 74 69 |..ZwYiel|dExecuti|
|00000620| 6f 6e 00 00 a8 02 52 74 | 6c 44 65 73 74 72 6f 79 |on....Rt|lDestroy|
|00000630| 41 74 6f 6d 54 61 62 6c | 65 00 cc cc 99 02 52 74 |AtomTabl|e.....Rt|
|00000640| 6c 43 72 65 61 74 65 41 | 74 6f 6d 54 61 62 6c 65 |lCreateA|tomTable|
|00000650| 00 00 cc cc 77 02 52 74 | 6c 41 64 64 41 74 6f 6d |....w.Rt|lAddAtom|
|00000660| 54 6f 41 74 6f 6d 54 61 | 62 6c 65 00 f9 02 52 74 |ToAtomTa|ble...Rt|
|00000670| 6c 50 69 6e 41 74 6f 6d | 49 6e 41 74 6f 6d 54 61 |lPinAtom|InAtomTa|
|00000680| 62 6c 65 00 7b 03 5a 77 | 4f 70 65 6e 44 69 72 65 |ble.{.Zw|OpenDire|
|00000690| 63 74 6f 72 79 4f 62 6a | 65 63 74 00 3e 02 4f 62 |ctoryObj|ect.>.Ob|
|000006a0| 49 6e 73 65 72 74 4f 62 | 6a 65 63 74 00 00 33 03 |InsertOb|ject..3.|
|000006b0| 53 65 41 73 73 69 67 6e | 53 65 63 75 72 69 74 79 |SeAssign|Security|
|000006c0| 00 00 cc cc cc cc cc cc | 48 02 4f 62 53 65 74 53 |........|H.ObSetS|
|000006d0| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|000006e0| 72 49 6e 66 6f 00 3b 03 | 53 65 44 65 61 73 73 69 |rInfo.;.|SeDeassi|
|000006f0| 67 6e 53 65 63 75 72 69 | 74 79 00 00 86 03 5a 77 |gnSecuri|ty....Zw|
|00000700| 51 75 65 72 79 44 65 66 | 61 75 6c 74 4c 6f 63 61 |QueryDef|aultLoca|
|00000710| 6c 65 00 00 d2 02 52 74 | 6c 49 6e 69 74 41 6e 73 |le....Rt|lInitAns|
|00000720| 69 53 74 72 69 6e 67 00 | 7c 02 52 74 6c 41 6e 73 |iString.||.RtlAns|
|00000730| 69 53 74 72 69 6e 67 54 | 6f 55 6e 69 63 6f 64 65 |iStringT|oUnicode|
|00000740| 53 74 72 69 6e 67 00 00 | 4c 00 45 78 49 6e 69 74 |String..|L.ExInit|
|00000750| 69 61 6c 69 7a 65 5a 6f | 6e 65 00 00 a1 03 5a 77 |ializeZo|ne....Zw|
|00000760| 54 65 72 6d 69 6e 61 74 | 65 50 72 6f 63 65 73 73 |Terminat|eProcess|
|00000770| 00 00 cc cc 55 01 4b 65 | 43 6c 65 61 72 45 76 65 |....U.Ke|ClearEve|
|00000780| 6e 74 00 00 37 03 53 65 | 43 61 70 74 75 72 65 53 |nt..7.Se|CaptureS|
|00000790| 75 62 6a 65 63 74 43 6f | 6e 74 65 78 74 00 41 03 |ubjectCo|ntext.A.|
|000007a0| 53 65 4c 6f 63 6b 53 75 | 62 6a 65 63 74 43 6f 6e |SeLockSu|bjectCon|
|000007b0| 74 65 78 74 00 00 45 03 | 53 65 50 72 69 76 69 6c |text..E.|SePrivil|
|000007c0| 65 67 65 43 68 65 63 6b | 00 00 cc cc cc cc cc cc |egeCheck|........|
|000007d0| 46 03 53 65 50 72 69 76 | 69 6c 65 67 65 4f 62 6a |F.SePriv|ilegeObj|
|000007e0| 65 63 74 41 75 64 69 74 | 41 6c 61 72 6d 00 53 03 |ectAudit|Alarm.S.|
|000007f0| 53 65 55 6e 6c 6f 63 6b | 53 75 62 6a 65 63 74 43 |SeUnlock|SubjectC|
|00000800| 6f 6e 74 65 78 74 00 00 | 4c 03 53 65 52 65 6c 65 |ontext..|L.SeRele|
|00000810| 61 73 65 53 75 62 6a 65 | 63 74 43 6f 6e 74 65 78 |aseSubje|ctContex|
|00000820| 74 00 39 03 53 65 43 72 | 65 61 74 65 41 63 63 65 |t.9.SeCr|eateAcce|
|00000830| 73 73 53 74 61 74 65 00 | 38 02 4f 62 43 68 65 63 |ssState.|8.ObChec|
|00000840| 6b 4f 62 6a 65 63 74 41 | 63 63 65 73 73 00 3c 03 |kObjectA|ccess.<.|
|00000850| 53 65 44 65 6c 65 74 65 | 41 63 63 65 73 73 53 74 |SeDelete|AccessSt|
|00000860| 61 74 65 00 cc cc cc cc | 8a 03 5a 77 51 75 65 72 |ate.....|..ZwQuer|
|00000870| 79 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 54 6f 6b 65 |yInforma|tionToke|
|00000880| 6e 00 cc cc 3e 03 53 65 | 45 78 70 6f 72 74 73 00 |n...>.Se|Exports.|
|00000890| 9c 02 52 74 6c 43 72 65 | 61 74 65 53 65 63 75 72 |..RtlCre|ateSecur|
|000008a0| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 98 02 |ityDescr|iptor...|
|000008b0| 52 74 6c 43 72 65 61 74 | 65 41 63 6c 00 00 76 02 |RtlCreat|eAcl..v.|
|000008c0| 52 74 6c 41 64 64 41 63 | 65 00 07 03 52 74 6c 53 |RtlAddAc|e...RtlS|
|000008d0| 65 74 44 61 63 6c 53 65 | 63 75 72 69 74 79 44 65 |etDaclSe|curityDe|
|000008e0| 73 63 72 69 70 74 6f 72 | 00 00 0a 03 52 74 6c 53 |scriptor|....RtlS|
|000008f0| 65 74 53 61 63 6c 53 65 | 63 75 72 69 74 79 44 65 |etSaclSe|curityDe|
|00000900| 73 63 72 69 70 74 6f 72 | 00 00 09 03 52 74 6c 53 |scriptor|....RtlS|
|00000910| 65 74 4f 77 6e 65 72 53 | 65 63 75 72 69 74 79 44 |etOwnerS|ecurityD|
|00000920| 65 73 63 72 69 70 74 6f | 72 00 08 03 52 74 6c 53 |escripto|r...RtlS|
|00000930| 65 74 47 72 6f 75 70 53 | 65 63 75 72 69 74 79 44 |etGroupS|ecurityD|
|00000940| 65 73 63 72 69 70 74 6f | 72 00 e8 02 52 74 6c 4c |escripto|r...RtlL|
|00000950| 65 6e 67 74 68 53 69 64 | 00 00 cc cc 95 02 52 74 |engthSid|......Rt|
|00000960| 6c 43 6f 70 79 53 69 64 | 00 00 cc cc 14 03 52 74 |lCopySid|......Rt|
|00000970| 6c 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |lUnicode|StringTo|
|00000980| 41 6e 73 69 53 74 72 69 | 6e 67 00 00 cc cc cc cc |AnsiStri|ng......|
|00000990| dc 02 52 74 6c 49 6e 74 | 65 67 65 72 54 6f 43 68 |..RtlInt|egerToCh|
|000009a0| 61 72 00 00 60 02 50 73 | 4c 6f 6f 6b 75 70 50 72 |ar..`.Ps|LookupPr|
|000009b0| 6f 63 65 73 73 42 79 50 | 72 6f 63 65 73 73 49 64 |ocessByP|rocessId|
|000009c0| 00 00 8c 03 5a 77 51 75 | 65 72 79 4f 62 6a 65 63 |....ZwQu|eryObjec|
|000009d0| 74 00 cc cc cc cc cc cc | 9b 03 5a 77 53 65 74 49 |t.......|..ZwSetI|
|000009e0| 6e 66 6f 72 6d 61 74 69 | 6f 6e 4f 62 6a 65 63 74 |nformati|onObject|
|000009f0| 00 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000a00| 57 02 50 73 43 72 65 61 | 74 65 57 69 6e 33 32 50 |W.PsCrea|teWin32P|
|00000a10| 72 6f 63 65 73 73 00 00 | 56 02 50 73 43 72 65 61 |rocess..|V.PsCrea|
|00000a20| 74 65 53 79 73 74 65 6d | 54 68 72 65 61 64 00 00 |teSystem|Thread..|
|00000a30| 64 02 50 73 52 65 66 65 | 72 65 6e 63 65 49 6d 70 |d.PsRefe|renceImp|
|00000a40| 65 72 73 6f 6e 61 74 69 | 6f 6e 54 6f 6b 65 6e 00 |ersonati|onToken.|
|00000a50| 65 02 50 73 52 65 66 65 | 72 65 6e 63 65 50 72 69 |e.PsRefe|rencePri|
|00000a60| 6d 61 72 79 54 6f 6b 65 | 6e 00 48 03 53 65 51 75 |maryToke|n.H.SeQu|
|00000a70| 65 72 79 41 75 74 68 65 | 6e 74 69 63 61 74 69 6f |eryAuthe|nticatio|
|00000a80| 6e 49 64 54 6f 6b 65 6e | 00 00 84 03 5a 77 4f 70 |nIdToken|....ZwOp|
|00000a90| 65 6e 54 68 72 65 61 64 | 54 6f 6b 65 6e 00 cc cc |enThread|Token...|
|00000aa0| 80 03 5a 77 4f 70 65 6e | 50 72 6f 63 65 73 73 54 |..ZwOpen|ProcessT|
|00000ab0| 6f 6b 65 6e 00 00 c0 02 | 52 74 6c 46 69 6e 64 4d |oken....|RtlFindM|
|00000ac0| 65 73 73 61 67 65 00 00 | c4 02 52 74 6c 46 6f 72 |essage..|..RtlFor|
|00000ad0| 6d 61 74 43 75 72 72 65 | 6e 74 55 73 65 72 4b 65 |matCurre|ntUserKe|
|00000ae0| 79 50 61 74 68 00 cc cc | c8 02 52 74 6c 46 72 65 |yPath...|..RtlFre|
|00000af0| 65 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |eUnicode|String..|
|00000b00| 78 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 54 69 |x.KeInit|ializeTi|
|00000b10| 6d 65 72 00 cc cc cc cc | 64 03 5a 77 43 72 65 61 |mer.....|d.ZwCrea|
|00000b20| 74 65 45 76 65 6e 74 00 | af 01 4b 65 53 65 74 54 |teEvent.|..KeSetT|
|00000b30| 69 6d 65 72 00 00 6c 03 | 5a 77 44 65 76 69 63 65 |imer..l.|ZwDevice|
|00000b40| 49 6f 43 6f 6e 74 72 6f | 6c 46 69 6c 65 00 81 02 |IoContro|lFile...|
|00000b50| 52 74 6c 41 72 65 41 6c | 6c 41 63 63 65 73 73 65 |RtlAreAl|lAccesse|
|00000b60| 73 47 72 61 6e 74 65 64 | 00 00 cc cc cc cc cc cc |sGranted|........|
|00000b70| b6 01 4b 65 55 73 65 72 | 4d 6f 64 65 43 61 6c 6c |..KeUser|ModeCall|
|00000b80| 62 61 63 6b 00 00 7f 02 | 52 74 6c 41 70 70 65 6e |back....|RtlAppen|
|00000b90| 64 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |dUnicode|StringTo|
|00000ba0| 53 74 72 69 6e 67 00 00 | 97 02 52 74 6c 43 6f 70 |String..|..RtlCop|
|00000bb0| 79 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |yUnicode|String..|
|00000bc0| d6 02 52 74 6c 49 6e 69 | 74 69 61 6c 69 7a 65 42 |..RtlIni|tializeB|
|00000bd0| 69 74 4d 61 70 00 06 03 | 52 74 6c 53 65 74 42 69 |itMap...|RtlSetBi|
|00000be0| 74 73 00 00 8a 02 52 74 | 6c 43 6c 65 61 72 42 69 |ts....Rt|lClearBi|
|00000bf0| 74 73 00 00 62 02 50 73 | 4c 6f 6f 6b 75 70 54 68 |ts..b.Ps|LookupTh|
|00000c00| 72 65 61 64 42 79 54 68 | 72 65 61 64 49 64 00 00 |readByTh|readId..|
|00000c10| 5e 00 45 78 49 73 52 65 | 73 6f 75 72 63 65 41 63 |^.ExIsRe|sourceAc|
|00000c20| 71 75 69 72 65 64 53 68 | 61 72 65 64 4c 69 74 65 |quiredSh|aredLite|
|00000c30| 00 00 cc cc 3b 02 4f 62 | 46 69 6e 64 48 61 6e 64 |....;.Ob|FindHand|
|00000c40| 6c 65 46 6f 72 4f 62 6a | 65 63 74 00 cc cc cc cc |leForObj|ect.....|
|00000c50| 6e 03 5a 77 44 75 70 6c | 69 63 61 74 65 4f 62 6a |n.ZwDupl|icateObj|
|00000c60| 65 63 74 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ect.....|........|
|00000c70| ff 01 4d 6d 55 6e 6d 61 | 70 56 69 65 77 4f 66 53 |..MmUnma|pViewOfS|
|00000c80| 65 63 74 69 6f 6e 00 00 | 40 02 4f 62 4f 70 65 6e |ection..|@.ObOpen|
|00000c90| 4f 62 6a 65 63 74 42 79 | 4e 61 6d 65 00 00 37 02 |ObjectBy|Name..7.|
|00000ca0| 4f 62 43 68 65 63 6b 43 | 72 65 61 74 65 4f 62 6a |ObCheckC|reateObj|
|00000cb0| 65 63 74 41 63 63 65 73 | 73 00 cc cc 39 02 4f 62 |ectAcces|s...9.Ob|
|00000cc0| 43 72 65 61 74 65 4f 62 | 6a 65 63 74 00 00 cc cc |CreateOb|ject....|
|00000cd0| 36 02 4f 62 41 73 73 69 | 67 6e 53 65 63 75 72 69 |6.ObAssi|gnSecuri|
|00000ce0| 74 79 00 00 79 02 52 74 | 6c 41 6c 6c 6f 63 61 74 |ty..y.Rt|lAllocat|
|00000cf0| 65 48 65 61 70 00 eb 02 | 52 74 6c 4d 61 70 47 65 |eHeap...|RtlMapGe|
|00000d00| 6e 65 72 69 63 4d 61 73 | 6b 00 cc cc cc cc cc cc |nericMas|k.......|
|00000d10| 9d 03 5a 77 53 65 74 49 | 6e 66 6f 72 6d 61 74 69 |..ZwSetI|nformati|
|00000d20| 6f 6e 54 68 72 65 61 64 | 00 00 cc cc 41 00 45 78 |onThread|....A.Ex|
|00000d30| 45 76 65 6e 74 4f 62 6a | 65 63 74 54 79 70 65 00 |EventObj|ectType.|
|00000d40| 46 02 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |F.ObRefe|renceObj|
|00000d50| 65 63 74 42 79 50 6f 69 | 6e 74 65 72 00 00 cc cc |ectByPoi|nter....|
|00000d60| 6c 02 50 73 54 65 72 6d | 69 6e 61 74 65 53 79 73 |l.PsTerm|inateSys|
|00000d70| 74 65 6d 54 68 72 65 61 | 64 00 c6 02 52 74 6c 46 |temThrea|d...RtlF|
|00000d80| 72 65 65 48 65 61 70 00 | cc cc cc cc cc cc cc cc |reeHeap.|........|
|00000d90| 2f 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |/.ExAcqu|ireResou|
|00000da0| 72 63 65 53 68 61 72 65 | 64 4c 69 74 65 00 cc cc |rceShare|dLite...|
|00000db0| 51 01 4b 65 42 6f 6f 73 | 74 43 75 72 72 65 6e 74 |Q.KeBoos|tCurrent|
|00000dc0| 54 68 72 65 61 64 00 00 | 53 01 4b 65 42 75 67 43 |Thread..|S.KeBugC|
|00000dd0| 68 65 63 6b 45 78 00 00 | 5d 00 45 78 49 73 52 65 |heckEx..|].ExIsRe|
|00000de0| 73 6f 75 72 63 65 41 63 | 71 75 69 72 65 64 45 78 |sourceAc|quiredEx|
|00000df0| 63 6c 75 73 69 76 65 4c | 69 74 65 00 f8 01 4d 6d |clusiveL|ite...Mm|
|00000e00| 53 79 73 74 65 6d 52 61 | 6e 67 65 53 74 61 72 74 |SystemRa|ngeStart|
|00000e10| 00 00 cc cc cc cc cc cc | ee 01 4d 6d 4d 61 70 56 |........|..MmMapV|
|00000e20| 69 65 77 4f 66 53 65 63 | 74 69 6f 6e 00 00 63 03 |iewOfSec|tion..c.|
|00000e30| 5a 77 43 72 65 61 74 65 | 44 69 72 65 63 74 6f 72 |ZwCreate|Director|
|00000e40| 79 4f 62 6a 65 63 74 00 | 67 00 45 78 52 61 69 73 |yObject.|g.ExRais|
|00000e50| 65 48 61 72 64 45 72 72 | 6f 72 00 00 dd 02 52 74 |eHardErr|or....Rt|
|00000e60| 6c 49 6e 74 65 67 65 72 | 54 6f 55 6e 69 63 6f 64 |lInteger|ToUnicod|
|00000e70| 65 53 74 72 69 6e 67 00 | 0e 01 49 6f 47 65 74 44 |eString.|..IoGetD|
|00000e80| 65 76 69 63 65 4f 62 6a | 65 63 74 50 6f 69 6e 74 |eviceObj|ectPoint|
|00000e90| 65 72 00 00 cc cc cc cc | 9d 02 52 74 6c 43 72 65 |er......|..RtlCre|
|00000ea0| 61 74 65 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |ateUnico|deString|
|00000eb0| 00 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000ec0| 2a 03 52 74 6c 57 72 69 | 74 65 52 65 67 69 73 74 |*.RtlWri|teRegist|
|00000ed0| 72 79 56 61 6c 75 65 00 | cc cc cc cc cc cc cc cc |ryValue.|........|
|00000ee0| a0 03 5a 77 53 65 74 56 | 61 6c 75 65 4b 65 79 00 |..ZwSetV|alueKey.|
|00000ef0| cc cc cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000f00| 2e 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |..ExAcqu|ireResou|
|00000f10| 72 63 65 45 78 63 6c 75 | 73 69 76 65 4c 69 74 65 |rceExclu|siveLite|
|00000f20| 00 00 4b 00 45 78 49 6e | 69 74 69 61 6c 69 7a 65 |..K.ExIn|itialize|
|00000f30| 52 65 73 6f 75 72 63 65 | 4c 69 74 65 00 00 66 03 |Resource|Lite..f.|
|00000f40| 5a 77 43 72 65 61 74 65 | 4b 65 79 00 f1 03 77 63 |ZwCreate|Key...wc|
|00000f50| 73 6e 63 6d 70 00 cc cc | 0c 01 49 6f 47 65 74 43 |sncmp...|..IoGetC|
|00000f60| 6f 6e 66 69 67 75 72 61 | 74 69 6f 6e 49 6e 66 6f |onfigura|tionInfo|
|00000f70| 72 6d 61 74 69 6f 6e 00 | 43 00 45 78 46 72 65 65 |rmation.|C.ExFree|
|00000f80| 50 6f 6f 6c 00 00 9e 02 | 52 74 6c 43 75 73 74 6f |Pool....|RtlCusto|
|00000f90| 6d 43 50 54 6f 55 6e 69 | 63 6f 64 65 4e 00 cc cc |mCPToUni|codeN...|
|00000fa0| 82 02 52 74 6c 41 72 65 | 41 6e 79 41 63 63 65 73 |..RtlAre|AnyAcces|
|00000fb0| 73 65 73 47 72 61 6e 74 | 65 64 00 00 cc cc cc cc |sesGrant|ed......|
|00000fc0| 47 01 4b 64 44 65 62 75 | 67 67 65 72 45 6e 61 62 |G.KdDebu|ggerEnab|
|00000fd0| 6c 65 64 00 28 00 44 62 | 67 42 72 65 61 6b 50 6f |led.(.Db|gBreakPo|
|00000fe0| 69 6e 74 57 69 74 68 53 | 74 61 74 75 73 00 68 00 |intWithS|tatus.h.|
|00000ff0| 45 78 52 61 69 73 65 53 | 74 61 74 75 73 00 cc cc |ExRaiseS|tatus...|
|00001000| 3e 00 45 78 44 65 73 6b | 74 6f 70 4f 62 6a 65 63 |>.ExDesk|topObjec|
|00001010| 74 54 79 70 65 00 36 03 | 53 65 43 61 70 74 75 72 |tType.6.|SeCaptur|
|00001020| 65 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |eSecurit|yDescrip|
|00001030| 74 6f 72 00 4b 03 53 65 | 52 65 6c 65 61 73 65 53 |tor.K.Se|ReleaseS|
|00001040| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00001050| 72 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |r.......|........|
|00001060| 73 00 45 78 57 69 6e 64 | 6f 77 53 74 61 74 69 6f |s.ExWind|owStatio|
|00001070| 6e 4f 62 6a 65 63 74 54 | 79 70 65 00 35 00 45 78 |nObjectT|ype.5.Ex|
|00001080| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|00001090| 51 75 6f 74 61 54 61 67 | 00 00 cc cc 98 03 5a 77 |QuotaTag|......Zw|
|000010a0| 53 65 74 44 65 66 61 75 | 6c 74 4c 6f 63 61 6c 65 |SetDefau|ltLocale|
|000010b0| 00 00 4f 01 4b 65 41 64 | 64 53 79 73 74 65 6d 53 |..O.KeAd|dSystemS|
|000010c0| 65 72 76 69 63 65 54 61 | 62 6c 65 00 58 02 50 73 |erviceTa|ble.X.Ps|
|000010d0| 45 73 74 61 62 6c 69 73 | 68 57 69 6e 33 32 43 61 |Establis|hWin32Ca|
|000010e0| 6c 6c 6f 75 74 73 00 00 | cc cc cc cc cc cc cc cc |llouts..|........|
|000010f0| ef 01 4d 6d 50 61 67 65 | 45 6e 74 69 72 65 44 72 |..MmPage|EntireDr|
|00001100| 69 76 65 72 00 00 da 03 | 73 74 72 63 68 72 00 00 |iver....|strchr..|
|00001110| e0 03 73 74 72 6e 63 70 | 79 00 df 03 73 74 72 6e |..strncp|y...strn|
|00001120| 63 6d 70 00 cc cc cc cc | ea 03 77 63 73 63 61 74 |cmp.....|..wcscat|
|00001130| 00 00 ec 03 77 63 73 63 | 6d 70 00 00 1b 03 52 74 |....wcsc|mp....Rt|
|00001140| 6c 55 6e 69 63 6f 64 65 | 54 6f 4d 75 6c 74 69 42 |lUnicode|ToMultiB|
|00001150| 79 74 65 53 69 7a 65 00 | ae 02 52 74 6c 45 6e 6c |yteSize.|..RtlEnl|
|00001160| 61 72 67 65 64 55 6e 73 | 69 67 6e 65 64 4d 75 6c |argedUns|ignedMul|
|00001170| 74 69 70 6c 79 00 df 02 | 52 74 6c 4c 61 72 67 65 |tiply...|RtlLarge|
|00001180| 49 6e 74 65 67 65 72 41 | 64 64 00 00 ad 02 52 74 |IntegerA|dd....Rt|
|00001190| 6c 45 6e 6c 61 72 67 65 | 64 55 6e 73 69 67 6e 65 |lEnlarge|dUnsigne|
|000011a0| 64 44 69 76 69 64 65 00 | b6 02 52 74 6c 45 78 74 |dDivide.|..RtlExt|
|000011b0| 65 6e 64 65 64 4c 61 72 | 67 65 49 6e 74 65 67 65 |endedLar|geIntege|
|000011c0| 72 44 69 76 69 64 65 00 | 1f 03 52 74 6c 55 70 63 |rDivide.|..RtlUpc|
|000011d0| 61 73 65 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |aseUnico|deString|
|000011e0| 00 00 fd 02 52 74 6c 51 | 75 65 72 79 52 65 67 69 |....RtlQ|ueryRegi|
|000011f0| 73 74 72 79 56 61 6c 75 | 65 73 00 00 b4 02 52 74 |stryValu|es....Rt|
|00001200| 6c 45 71 75 61 6c 55 6e | 69 63 6f 64 65 53 74 72 |lEqualUn|icodeStr|
|00001210| 69 6e 67 00 9e 03 5a 77 | 53 65 74 53 79 73 74 65 |ing...Zw|SetSyste|
|00001220| 6d 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 00 00 cc cc |mInforma|tion....|
|00001230| 41 02 4f 62 4f 70 65 6e | 4f 62 6a 65 63 74 42 79 |A.ObOpen|ObjectBy|
|00001240| 50 6f 69 6e 74 65 72 00 | f2 03 77 63 73 6e 63 70 |Pointer.|..wcsncp|
|00001250| 79 00 1a 02 4e 74 47 6c | 6f 62 61 6c 46 6c 61 67 |y...NtGl|obalFlag|
|00001260| 00 00 cc cc cc cc cc cc | 67 03 5a 77 43 72 65 61 |........|g.ZwCrea|
|00001270| 74 65 53 65 63 74 69 6f | 6e 00 cc cc cc cc cc cc |teSectio|n.......|
|00001280| 9b 01 4b 65 52 65 73 65 | 74 45 76 65 6e 74 00 00 |..KeRese|tEvent..|
|00001290| 50 01 4b 65 41 74 74 61 | 63 68 50 72 6f 63 65 73 |P.KeAtta|chProces|
|000012a0| 73 00 cc cc 5a 01 4b 65 | 44 65 74 61 63 68 50 72 |s...Z.Ke|DetachPr|
|000012b0| 6f 63 65 73 73 00 cc cc | 7f 03 5a 77 4f 70 65 6e |ocess...|..ZwOpen|
|000012c0| 50 72 6f 63 65 73 73 00 | d6 00 49 6e 74 65 72 6c |Process.|..Interl|
|000012d0| 6f 63 6b 65 64 43 6f 6d | 70 61 72 65 45 78 63 68 |ockedCom|pareExch|
|000012e0| 61 6e 67 65 00 00 cc cc | cc cc cc cc cc cc cc cc |ange....|........|
|000012f0| 79 03 5a 77 4d 61 70 56 | 69 65 77 4f 66 53 65 63 |y.ZwMapV|iewOfSec|
|00001300| 74 69 6f 6e 00 00 cc cc | a4 03 5a 77 55 6e 6d 61 |tion....|..ZwUnma|
|00001310| 70 56 69 65 77 4f 66 53 | 65 63 74 69 6f 6e 00 00 |pViewOfS|ection..|
|00001320| b9 02 52 74 6c 46 69 6c | 6c 4d 65 6d 6f 72 79 55 |..RtlFil|lMemoryU|
|00001330| 6c 6f 6e 67 00 00 b7 01 | 4b 65 57 61 69 74 46 6f |long....|KeWaitFo|
|00001340| 72 4d 75 6c 74 69 70 6c | 65 4f 62 6a 65 63 74 73 |rMultipl|eObjects|
|00001350| 00 00 cc cc 58 01 4b 65 | 44 65 6c 61 79 45 78 65 |....X.Ke|DelayExe|
|00001360| 63 75 74 69 6f 6e 54 68 | 72 65 61 64 00 00 3a 03 |cutionTh|read..:.|
|00001370| 53 65 43 72 65 61 74 65 | 43 6c 69 65 6e 74 53 65 |SeCreate|ClientSe|
|00001380| 63 75 72 69 74 79 00 00 | 40 03 53 65 49 6d 70 65 |curity..|@.SeImpe|
|00001390| 72 73 6f 6e 61 74 65 43 | 6c 69 65 6e 74 00 67 02 |rsonateC|lient.g.|
|000013a0| 50 73 52 65 76 65 72 74 | 54 6f 53 65 6c 66 00 00 |PsRevert|ToSelf..|
|000013b0| 52 03 53 65 54 6f 6b 65 | 6e 54 79 70 65 00 cc cc |R.SeToke|nType...|
|000013c0| da 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 49 6e 63 |..Interl|ockedInc|
|000013d0| 72 65 6d 65 6e 74 00 00 | a3 01 4b 65 53 65 74 45 |rement..|..KeSetE|
|000013e0| 76 65 6e 74 00 00 b9 01 | 4b 65 57 61 69 74 46 6f |vent....|KeWaitFo|
|000013f0| 72 53 69 6e 67 6c 65 4f | 62 6a 65 63 74 00 44 02 |rSingleO|bject.D.|
|00001400| 4f 62 52 65 66 65 72 65 | 6e 63 65 4f 62 6a 65 63 |ObRefere|nceObjec|
|00001410| 74 42 79 48 61 6e 64 6c | 65 00 86 01 4b 65 50 75 |tByHandl|e...KePu|
|00001420| 6c 73 65 45 76 65 6e 74 | 00 00 cc cc cc cc cc cc |lseEvent|........|
|00001430| 70 00 45 78 53 79 73 74 | 65 6d 45 78 63 65 70 74 |p.ExSyst|emExcept|
|00001440| 69 6f 6e 46 69 6c 74 65 | 72 00 cc cc 71 01 4b 65 |ionFilte|r...q.Ke|
|00001450| 49 6e 69 74 69 61 6c 69 | 7a 65 45 76 65 6e 74 00 |Initiali|zeEvent.|
|00001460| 93 03 5a 77 52 65 61 64 | 46 69 6c 65 00 00 d3 02 |..ZwRead|File....|
|00001470| 52 74 6c 49 6e 69 74 43 | 6f 64 65 50 61 67 65 54 |RtlInitC|odePageT|
|00001480| 61 62 6c 65 00 00 19 03 | 52 74 6c 55 6e 69 63 6f |able....|RtlUnico|
|00001490| 64 65 54 6f 43 75 73 74 | 6f 6d 43 50 4e 00 60 03 |deToCust|omCPN.`.|
|000014a0| 5a 77 43 6c 6f 73 65 00 | 91 03 5a 77 51 75 65 72 |ZwClose.|..ZwQuer|
|000014b0| 79 56 61 6c 75 65 4b 65 | 79 00 cc cc cc cc cc cc |yValueKe|y.......|
|000014c0| e4 03 73 77 70 72 69 6e | 74 66 00 00 16 03 52 74 |..swprin|tf....Rt|
|000014d0| 6c 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |lUnicode|StringTo|
|000014e0| 49 6e 74 65 67 65 72 00 | cc cc cc cc cc cc cc cc |Integer.|........|
|000014f0| c9 01 4c 64 72 46 69 6e | 64 52 65 73 6f 75 72 63 |..LdrFin|dResourc|
|00001500| 65 5f 55 00 c6 01 4c 64 | 72 41 63 63 65 73 73 52 |e_U...Ld|rAccessR|
|00001510| 65 73 6f 75 72 63 65 00 | c1 03 5f 77 63 73 69 63 |esource.|.._wcsic|
|00001520| 6d 70 00 00 c3 03 5f 77 | 63 73 6e 69 63 6d 70 00 |mp...._w|csnicmp.|
|00001530| 80 02 52 74 6c 41 70 70 | 65 6e 64 55 6e 69 63 6f |..RtlApp|endUnico|
|00001540| 64 65 54 6f 53 74 72 69 | 6e 67 00 00 c8 01 4c 64 |deToStri|ng....Ld|
|00001550| 72 46 69 6e 64 52 65 73 | 6f 75 72 63 65 44 69 72 |rFindRes|ourceDir|
|00001560| 65 63 74 6f 72 79 5f 55 | 00 00 cd 02 52 74 6c 47 |ectory_U|....RtlG|
|00001570| 65 74 44 65 66 61 75 6c | 74 43 6f 64 65 50 61 67 |etDefaul|tCodePag|
|00001580| 65 00 fe 01 4d 6d 55 6e | 6d 61 70 56 69 65 77 49 |e...MmUn|mapViewI|
|00001590| 6e 53 79 73 74 65 6d 53 | 70 61 63 65 00 00 65 03 |nSystemS|pace..e.|
|000015a0| 5a 77 43 72 65 61 74 65 | 46 69 6c 65 00 00 cc cc |ZwCreate|File....|
|000015b0| 7d 03 5a 77 4f 70 65 6e | 46 69 6c 65 00 00 88 03 |}.ZwOpen|File....|
|000015c0| 5a 77 51 75 65 72 79 49 | 6e 66 6f 72 6d 61 74 69 |ZwQueryI|nformati|
|000015d0| 6f 6e 46 69 6c 65 00 00 | 9a 03 5a 77 53 65 74 49 |onFile..|..ZwSetI|
|000015e0| 6e 66 6f 72 6d 61 74 69 | 6f 6e 46 69 6c 65 00 00 |nformati|onFile..|
|000015f0| d7 01 4d 6d 43 72 65 61 | 74 65 53 65 63 74 69 6f |..MmCrea|teSectio|
|00001600| 6e 00 ed 01 4d 6d 4d 61 | 70 56 69 65 77 49 6e 53 |n...MmMa|pViewInS|
|00001610| 79 73 74 65 6d 53 70 61 | 63 65 00 00 49 02 4f 62 |ystemSpa|ce..I.Ob|
|00001620| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|00001630| 63 74 00 00 87 01 4b 65 | 51 75 65 72 79 53 79 73 |ct....Ke|QuerySys|
|00001640| 74 65 6d 54 69 6d 65 00 | 71 00 45 78 53 79 73 74 |temTime.|q.ExSyst|
|00001650| 65 6d 54 69 6d 65 54 6f | 4c 6f 63 61 6c 54 69 6d |emTimeTo|LocalTim|
|00001660| 65 00 12 03 52 74 6c 54 | 69 6d 65 54 6f 54 69 6d |e...RtlT|imeToTim|
|00001670| 65 46 69 65 6c 64 73 00 | d5 02 52 74 6c 49 6e 69 |eFields.|..RtlIni|
|00001680| 74 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |tUnicode|String..|
|00001690| 7e 03 5a 77 4f 70 65 6e | 4b 65 79 00 8b 03 5a 77 |~.ZwOpen|Key...Zw|
|000016a0| 51 75 65 72 79 4b 65 79 | 00 00 71 03 5a 77 45 6e |QueryKey|..q.ZwEn|
|000016b0| 75 6d 65 72 61 74 65 56 | 61 6c 75 65 4b 65 79 00 |umerateV|alueKey.|
|000016c0| ed 03 77 63 73 63 70 79 | 00 00 52 02 50 72 6f 62 |..wcscpy|..R.Prob|
|000016d0| 65 46 6f 72 57 72 69 74 | 65 00 f4 01 4d 6d 53 65 |eForWrit|e...MmSe|
|000016e0| 63 75 72 65 56 69 72 74 | 75 61 6c 4d 65 6d 6f 72 |cureVirt|ualMemor|
|000016f0| 79 00 cc cc cc cc cc cc | ef 03 77 63 73 6c 65 6e |y.......|..wcslen|
|00001700| 00 00 d3 03 6d 65 6d 6d | 6f 76 65 00 df 01 4d 6d |....memm|ove...Mm|
|00001710| 47 72 6f 77 4b 65 72 6e | 65 6c 53 74 61 63 6b 00 |GrowKern|elStack.|
|00001720| a7 01 4b 65 53 65 74 4b | 65 72 6e 65 6c 53 74 61 |..KeSetK|ernelSta|
|00001730| 63 6b 53 77 61 70 45 6e | 61 62 6c 65 00 00 cc cc |ckSwapEn|able....|
|00001740| 9e 01 4b 65 53 61 76 65 | 46 6c 6f 61 74 69 6e 67 |..KeSave|Floating|
|00001750| 50 6f 69 6e 74 53 74 61 | 74 65 00 00 9c 01 4b 65 |PointSta|te....Ke|
|00001760| 52 65 73 74 6f 72 65 46 | 6c 6f 61 74 69 6e 67 50 |RestoreF|loatingP|
|00001770| 6f 69 6e 74 53 74 61 74 | 65 00 cc cc cc cc cc cc |ointStat|e.......|
|00001780| 1a 03 52 74 6c 55 6e 69 | 63 6f 64 65 54 6f 4d 75 |..RtlUni|codeToMu|
|00001790| 6c 74 69 42 79 74 65 4e | 00 00 ed 02 52 74 6c 4d |ltiByteN|....RtlM|
|000017a0| 75 6c 74 69 42 79 74 65 | 54 6f 55 6e 69 63 6f 64 |ultiByte|ToUnicod|
|000017b0| 65 4e 00 00 e8 00 49 6f | 42 75 69 6c 64 44 65 76 |eN....Io|BuildDev|
|000017c0| 69 63 65 49 6f 43 6f 6e | 74 72 6f 6c 52 65 71 75 |iceIoCon|trolRequ|
|000017d0| 65 73 74 00 45 01 49 6f | 66 43 61 6c 6c 44 72 69 |est.E.Io|fCallDri|
|000017e0| 76 65 72 00 00 02 4d 6d | 55 6e 73 65 63 75 72 65 |ver...Mm|Unsecure|
|000017f0| 56 69 72 74 75 61 6c 4d | 65 6d 6f 72 79 00 5e 03 |VirtualM|emory.^.|
|00001800| 5a 77 41 6c 6c 6f 63 61 | 74 65 56 69 72 74 75 61 |ZwAlloca|teVirtua|
|00001810| 6c 4d 65 6d 6f 72 79 00 | 74 03 5a 77 46 72 65 65 |lMemory.|t.ZwFree|
|00001820| 56 69 72 74 75 61 6c 4d | 65 6d 6f 72 79 00 2a 00 |VirtualM|emory.*.|
|00001830| 44 62 67 50 72 69 6e 74 | 00 00 65 00 45 78 52 61 |DbgPrint|..e.ExRa|
|00001840| 69 73 65 44 61 74 61 74 | 79 70 65 4d 69 73 61 6c |iseDatat|ypeMisal|
|00001850| 69 67 6e 6d 65 6e 74 00 | 01 02 4d 6d 55 73 65 72 |ignment.|..MmUser|
|00001860| 50 72 6f 62 65 41 64 64 | 72 65 73 73 00 00 64 00 |ProbeAdd|ress..d.|
|00001870| 45 78 52 61 69 73 65 41 | 63 63 65 73 73 56 69 6f |ExRaiseA|ccessVio|
|00001880| 6c 61 74 69 6f 6e 00 00 | e9 03 76 73 70 72 69 6e |lation..|..vsprin|
|00001890| 74 66 00 00 3d 00 45 78 | 44 65 6c 65 74 65 52 65 |tf..=.Ex|DeleteRe|
|000018a0| 73 6f 75 72 63 65 4c 69 | 74 65 00 00 cc cc cc cc |sourceLi|te......|
|000018b0| 6e 00 45 78 52 65 6c 65 | 61 73 65 52 65 73 6f 75 |n.ExRele|aseResou|
|000018c0| 72 63 65 4c 69 74 65 00 | 48 41 4c 2e 64 6c 6c 00 |rceLite.|HAL.dll.|
|000018d0| 01 00 45 78 52 65 6c 65 | 61 73 65 46 61 73 74 4d |..ExRele|aseFastM|
|000018e0| 75 74 65 78 00 00 00 00 | 45 78 41 63 71 75 69 72 |utex....|ExAcquir|
|000018f0| 65 46 61 73 74 4d 75 74 | 65 78 00 00 44 00 4b 65 |eFastMut|ex..D.Ke|
|00001900| 51 75 65 72 79 50 65 72 | 66 6f 72 6d 61 6e 63 65 |QueryPer|formance|
|00001910| 43 6f 75 6e 74 65 72 00 | 22 00 48 61 6c 52 65 71 |Counter.|".HalReq|
|00001920| 75 65 73 74 53 6f 66 74 | 77 61 72 65 49 6e 74 65 |uestSoft|wareInte|
|00001930| 72 72 75 70 74 00 00 00 | 00 00 00 00 00 00 00 00 |rrupt...|........|
+--------+-------------------------+-------------------------+--------+--------+