/ CD World Haziran 1997 / CD World Haziran 1997.iso / Cesitlemeler / WinNt Service Pack II / SRV.SYS / INIT

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| c6 05 a8 b2 01 00 01 83 | ec 08 33 c0 b9 20 00 00 |........|..3.. ..|
|00000010| 00 53 56 57 55 bf b8 c1 | 01 00 f3 ab ff 15 a0 a1 |.SVWU...|........|
|00000020| 01 00 6a 00 a3 b0 b2 01 | 00 a1 bc a0 01 00 6a 01 |..j.....|......j.|
|00000030| 0f be 08 68 c0 b2 01 00 | 89 0d c8 b4 01 00 ff 15 |...h....|........|
|00000040| b4 a2 01 00 6a 00 6a 01 | 68 58 c4 01 00 ff 15 b4 |....j.j.|hX......|
|00000050| a2 01 00 8b 0d c0 a0 01 | 00 68 f4 b2 01 00 8b 35 |........|.h.....5|
|00000060| 74 a0 01 00 8b 11 89 15 | c0 a0 01 00 ff d6 68 94 |t.......|......h.|
|00000070| b3 01 00 ff d6 68 d8 b3 | 01 00 8b 3d 70 a0 01 00 |.....h..|...=p...|
|00000080| bb 80 c8 01 00 ff d7 68 | 20 b4 01 00 ff d7 68 58 |.......h| .....hX|
|00000090| b4 01 00 ff d7 53 ff d7 | 83 c3 38 81 fb b0 ca 01 |.....S..|..8.....|
|000000a0| 00 72 f2 68 90 b4 01 00 | ff d7 68 90 c4 01 00 ff |.r.h....|..h.....|
|000000b0| d7 68 80 c2 01 00 ff d7 | b8 28 b7 01 00 a3 2c b7 |.h......|.(....,.|
|000000c0| 01 00 a3 28 b7 01 00 b8 | 30 b7 01 00 33 c9 a3 34 |...(....|0...3..4|
|000000d0| b7 01 00 a3 30 b7 01 00 | b8 40 b7 01 00 a3 44 b7 |....0...|.@....D.|
|000000e0| 01 00 a3 40 b7 01 00 b8 | 58 b7 01 00 c7 00 6c 3b |...@....|X.....l;|
|000000f0| 03 00 83 c0 10 3d 78 b7 | 01 00 89 48 f4 89 48 e8 |.....=x.|...H..H.|
|00000100| 72 ea c7 05 80 b7 01 00 | 26 4d 01 00 33 c0 b9 c8 |r.......|&M..3...|
|00000110| b7 01 00 66 a3 3c b7 01 | 00 a3 38 b7 01 00 66 a3 |...f.<..|..8...f.|
|00000120| 3e b7 01 00 a3 84 b7 01 | 00 a3 78 b7 01 00 8b d0 |>.......|..x.....|
|00000130| 89 49 04 40 89 09 6b d2 | 38 81 c2 80 c8 01 00 83 |.I.@..k.|8.......|
|00000140| f8 0a 89 51 08 75 02 33 | c0 83 c1 0c 81 f9 c8 bd |...Q.u.3|........|
|00000150| 01 00 72 da b8 c8 bd 01 | 00 89 40 04 89 00 83 c0 |..r.....|..@.....|
|00000160| 08 3d 48 be 01 00 72 f1 | 68 98 c3 01 00 33 db ff |.=H...r.|h....3..|
|00000170| d7 68 40 c5 01 00 88 1d | ec c3 01 00 88 1d 0c c4 |.h@.....|........|
|00000180| 01 00 88 1d 2c c4 01 00 | 88 1d 4c c4 01 00 ff d7 |....,...|..L.....|
|00000190| c7 05 d4 c4 01 00 02 00 | 00 00 b8 88 c4 01 00 88 |........|........|
|000001a0| 1d d8 c4 01 00 a3 8c c4 | 01 00 88 1d d9 c4 01 00 |........|........|
|000001b0| 8d 54 24 10 a3 88 c4 01 | 00 ff 35 b4 c5 01 00 52 |.T$.....|..5....R|
|000001c0| b8 c8 c4 01 00 a3 cc c4 | 01 00 a3 c8 c4 01 00 ff |........|........|
|000001d0| 15 44 a1 01 00 8d 4c 24 | 10 6a 01 51 68 38 c1 01 |.D....L$|.j.Qh8..|
|000001e0| 00 ff 15 10 a2 01 00 ff | 35 a8 c5 01 00 68 40 c1 |........|5....h@.|
|000001f0| 01 00 8b 3d 04 a0 01 00 | ff d7 ff 35 ac c5 01 00 |...=....|...5....|
|00000200| 68 48 c1 01 00 ff d7 a1 | 38 c8 01 00 50 68 48 c2 |hH......|8...PhH.|
|00000210| 01 00 ff d7 a1 3c c8 01 | 00 bb 40 c3 01 00 50 bd |.....<..|..@...P.|
|00000220| e0 c7 01 00 68 50 c2 01 | 00 ff 15 f0 a0 01 00 c7 |....hP..|........|
|00000230| 05 e8 c4 01 00 b9 0b 00 | 00 c7 05 f8 c4 01 00 ba |........|........|
|00000240| 0b 00 00 ff 75 00 53 83 | c3 08 ff d7 83 c5 04 81 |....u.S.|........|
|00000250| fd fc c7 01 00 76 ec b9 | 80 c3 01 00 8b 59 fc 8d |.....v..|.....Y..|
|00000260| 41 f8 8b 10 89 11 83 c1 | 08 81 f9 98 c3 01 00 89 |A.......|........|
|00000270| 59 fc 72 e8 68 b4 b3 01 | 00 bf 14 b3 01 00 ff d6 |Y.r.h...|........|
|00000280| 57 ff d6 83 c7 20 81 ff | 94 b3 01 00 72 f2 c7 05 |W.... ..|....r...|
|00000290| d0 b2 01 00 07 00 00 00 | ff 15 30 a2 01 00 8b c8 |........|..0.....|
|000002a0| 2b d2 b8 80 f0 fa 02 5d | f7 f1 5f a3 9c c5 01 00 |+......]|.._.....|
|000002b0| 5e 5b 83 c4 08 c3 83 ec | 08 a1 c8 c5 01 00 8d 4c |^[......|.......L|
|000002c0| 24 00 53 56 33 db 57 50 | 51 ff 15 04 a0 01 00 8d |$.SV3.WP|Q.......|
|000002d0| 4c 24 0c 68 98 b2 01 00 | 8b 7c 24 1c 53 53 6a 12 |L$.h....|.|$.SSj.|
|000002e0| 51 53 57 ff 15 58 a2 01 | 00 8b f0 85 f6 7d 1b 53 |QSW..X..|.....}.S|
|000002f0| 53 53 53 56 68 d2 07 00 | c0 57 e8 f0 f6 fc ff 8b |SSSVh...|.W......|
|00000300| c6 5f 5e 5b 83 c4 08 c2 | 08 00 83 c7 38 b8 a5 0d |._^[....|....8...|
|00000310| 03 00 b9 1c 00 00 00 c7 | 47 fc c9 6d 03 00 f3 ab |........|G..m....|
|00000320| a1 98 b2 01 00 50 ff 15 | 5c a2 01 00 8b f0 85 f6 |.....P..|\.......|
|00000330| 7c 07 c6 05 a4 b2 01 00 | 01 e8 c2 fc ff ff eb bf ||.......|........|
|00000340| 70 4a 03 00 00 00 00 00 | 00 00 00 00 d0 4d 03 00 |pJ......|.....M..|
|00000350| c0 9f 00 00 78 4d 03 00 | 00 00 00 00 00 00 00 00 |....xM..|........|
|00000360| c0 5f 03 00 c8 a2 00 00 | 90 4d 03 00 00 00 00 00 |._......|.M......|
|00000370| 00 00 00 00 28 60 03 00 | e0 a2 00 00 a8 4d 03 00 |....(`..|.....M..|
|00000380| 00 00 00 00 00 00 00 00 | c8 60 03 00 f8 a2 00 00 |........|.`......|
|00000390| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000003a0| 00 00 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|000003b0| e0 4d 03 00 fa 4d 03 00 | 14 4e 03 00 32 4e 03 00 |.M...M..|.N..2N..|
|000003c0| 50 4e 03 00 60 4e 03 00 | 70 4e 03 00 a0 4e 03 00 |PN..`N..|pN...N..|
|000003d0| b6 4e 03 00 cc 4e 03 00 | e4 4e 03 00 04 4f 03 00 |.N...N..|.N...O..|
|000003e0| 10 4f 03 00 28 4f 03 00 | 46 4f 03 00 5e 4f 03 00 |.O..(O..|FO..^O..|
|000003f0| 72 4f 03 00 90 4f 03 00 | b0 4f 03 00 c8 4f 03 00 |rO...O..|.O...O..|
|00000400| e0 4f 03 00 fc 4f 03 00 | 1c 50 03 00 38 50 03 00 |.O...O..|.P..8P..|
|00000410| 46 50 03 00 60 50 03 00 | 80 50 03 00 90 50 03 00 |FP..`P..|.P...P..|
|00000420| a0 50 03 00 b8 50 03 00 | d4 50 03 00 f0 50 03 00 |.P...P..|.P...P..|
|00000430| 0a 51 03 00 22 51 03 00 | 44 51 03 00 5c 51 03 00 |.Q.."Q..|DQ..\Q..|
|00000440| 74 51 03 00 8e 51 03 00 | b0 51 03 00 ca 51 03 00 |tQ...Q..|.Q...Q..|
|00000450| e4 51 03 00 fe 51 03 00 | 0e 52 03 00 28 52 03 00 |.Q...Q..|.R..(R..|
|00000460| 34 52 03 00 50 52 03 00 | 68 52 03 00 88 52 03 00 |4R..PR..|hR...R..|
|00000470| a0 52 03 00 c2 52 03 00 | d0 52 03 00 e2 52 03 00 |.R...R..|.R...R..|
|00000480| 00 53 03 00 20 53 03 00 | 30 53 03 00 40 53 03 00 |.S.. S..|0S..@S..|
|00000490| 5a 53 03 00 6a 53 03 00 | 86 53 03 00 a0 53 03 00 |ZS..jS..|.S...S..|
|000004a0| b0 53 03 00 c8 53 03 00 | e6 53 03 00 04 54 03 00 |.S...S..|.S...T..|
|000004b0| 20 54 03 00 2c 54 03 00 | 40 54 03 00 54 54 03 00 | T..,T..|@T..TT..|
|000004c0| 78 54 03 00 8a 54 03 00 | 9c 54 03 00 b8 54 03 00 |xT...T..|.T...T..|
|000004d0| cc 54 03 00 e0 54 03 00 | f8 54 03 00 12 55 03 00 |.T...T..|.T...U..|
|000004e0| 28 55 03 00 40 55 03 00 | 4a 55 03 00 54 55 03 00 |(U..@U..|JU..TU..|
|000004f0| 70 55 03 00 90 55 03 00 | a8 55 03 00 bc 55 03 00 |pU...U..|.U...U..|
|00000500| d6 55 03 00 fa 55 03 00 | 10 56 03 00 24 56 03 00 |.U...U..|.V..$V..|
|00000510| 40 56 03 00 60 56 03 00 | 6c 56 03 00 78 56 03 00 |@V..`V..|lV..xV..|
|00000520| 82 56 03 00 9c 56 03 00 | b4 56 03 00 cc 56 03 00 |.V...V..|.V...V..|
|00000530| e8 56 03 00 00 57 03 00 | 10 57 03 00 20 57 03 00 |.V...W..|.W.. W..|
|00000540| 30 57 03 00 50 57 03 00 | 6c 57 03 00 90 57 03 00 |0W..PW..|lW...W..|
|00000550| aa 57 03 00 c0 57 03 00 | e0 57 03 00 fe 57 03 00 |.W...W..|.W...W..|
|00000560| 1a 58 03 00 34 58 03 00 | 4e 58 03 00 68 58 03 00 |.X..4X..|NX..hX..|
|00000570| 80 58 03 00 94 58 03 00 | b0 58 03 00 c0 58 03 00 |.X...X..|.X...X..|
|00000580| d6 58 03 00 ec 58 03 00 | 04 59 03 00 14 59 03 00 |.X...X..|.Y...Y..|
|00000590| 30 59 03 00 48 59 03 00 | 58 59 03 00 70 59 03 00 |0Y..HY..|XY..pY..|
|000005a0| 8a 59 03 00 a0 59 03 00 | b8 59 03 00 d4 59 03 00 |.Y...Y..|.Y...Y..|
|000005b0| f0 59 03 00 0c 5a 03 00 | 30 5a 03 00 3c 5a 03 00 |.Y...Z..|0Z..<Z..|
|000005c0| 5c 5a 03 00 7c 5a 03 00 | 9a 5a 03 00 be 5a 03 00 |\Z..|Z..|.Z...Z..|
|000005d0| e0 5a 03 00 00 5b 03 00 | 18 5b 03 00 2c 5b 03 00 |.Z...[..|.[..,[..|
|000005e0| 42 5b 03 00 52 5b 03 00 | 64 5b 03 00 80 5b 03 00 |B[..R[..|d[...[..|
|000005f0| a0 5b 03 00 c0 5b 03 00 | cc 5b 03 00 e0 5b 03 00 |.[...[..|.[...[..|
|00000600| ec 5b 03 00 0c 5c 03 00 | 30 5c 03 00 40 5c 03 00 |.[...\..|0\..@\..|
|00000610| 50 5c 03 00 68 5c 03 00 | 80 5c 03 00 94 5c 03 00 |P\..h\..|.\...\..|
|00000620| a0 5c 03 00 c0 5c 03 00 | d8 5c 03 00 f0 5c 03 00 |.\...\..|.\...\..|
|00000630| 00 5d 03 00 18 5d 03 00 | 28 5d 03 00 34 5d 03 00 |.]...]..|(]..4]..|
|00000640| 48 5d 03 00 60 5d 03 00 | 72 5d 03 00 84 5d 03 00 |H]..`]..|r]...]..|
|00000650| a6 5d 03 00 c0 5d 03 00 | d8 5d 03 00 f0 5d 03 00 |.]...]..|.]...]..|
|00000660| 00 5e 03 00 14 5e 03 00 | 30 5e 03 00 4c 5e 03 00 |.^...^..|0^..L^..|
|00000670| 5a 5e 03 00 74 5e 03 00 | 84 5e 03 00 94 5e 03 00 |Z^..t^..|.^...^..|
|00000680| a6 5e 03 00 c4 5e 03 00 | ce 5e 03 00 f0 5e 03 00 |.^...^..|.^...^..|
|00000690| 04 5f 03 00 1e 5f 03 00 | 30 5f 03 00 40 5f 03 00 |._..._..|0_..@_..|
|000006a0| 50 5f 03 00 68 5f 03 00 | 80 5f 03 00 94 5f 03 00 |P_..h_..|._..._..|
|000006b0| b0 5f 03 00 00 00 00 00 | c8 5f 03 00 dc 5f 03 00 |._......|._..._..|
|000006c0| ea 5f 03 00 fe 5f 03 00 | 18 60 03 00 00 00 00 00 |._..._..|.`......|
|000006d0| 30 60 03 00 48 60 03 00 | 70 60 03 00 8c 60 03 00 |0`..H`..|p`...`..|
|000006e0| a2 60 03 00 00 00 00 00 | d4 60 03 00 f0 60 03 00 |.`......|.`...`..|
|000006f0| 0a 61 03 00 1e 61 03 00 | 40 61 03 00 54 61 03 00 |.a...a..|@a..Ta..|
|00000700| 72 61 03 00 8a 61 03 00 | 00 00 00 00 cc cc cc cc |ra...a..|........|
|00000710| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 cc cc |ntoskrnl|.exe....|
|00000720| b2 00 46 73 52 74 6c 4d | 64 6c 52 65 61 64 43 6f |..FsRtlM|dlReadCo|
|00000730| 6d 70 6c 65 74 65 44 65 | 76 00 c5 00 46 73 52 74 |mpleteDe|v...FsRt|
|00000740| 6c 50 72 65 70 61 72 65 | 4d 64 6c 57 72 69 74 65 |lPrepare|MdlWrite|
|00000750| 44 65 76 00 13 03 52 74 | 6c 55 6e 69 63 6f 64 65 |Dev...Rt|lUnicode|
|00000760| 53 74 72 69 6e 67 54 6f | 4f 65 6d 53 74 72 69 6e |StringTo|OemStrin|
|00000770| 67 00 2b 03 52 74 6c 78 | 55 6e 69 63 6f 64 65 53 |g.+.Rtlx|UnicodeS|
|00000780| 74 72 69 6e 67 54 6f 4f | 65 6d 53 69 7a 65 00 00 |tringToO|emSize..|
|00000790| 21 03 52 74 6c 55 70 70 | 65 72 43 68 61 72 00 00 |!.RtlUpp|erChar..|
|000007a0| a2 01 4b 65 53 65 74 45 | 76 65 6e 74 00 00 cc cc |..KeSetE|vent....|
|000007b0| ba 01 4b 65 66 52 65 6c | 65 61 73 65 53 70 69 6e |..KefRel|easeSpin|
|000007c0| 4c 6f 63 6b 46 72 6f 6d | 44 70 63 4c 65 76 65 6c |LockFrom|DpcLevel|
|000007d0| 00 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|000007e0| 00 02 4e 6c 73 4d 62 4f | 65 6d 43 6f 64 65 50 61 |..NlsMbO|emCodePa|
|000007f0| 67 65 54 61 67 00 d7 00 | 49 6e 74 65 72 6c 6f 63 |geTag...|Interloc|
|00000800| 6b 65 64 45 78 63 68 61 | 6e 67 65 00 af 02 52 74 |kedExcha|nge...Rt|
|00000810| 6c 45 71 75 61 6c 55 6e | 69 63 6f 64 65 53 74 72 |lEqualUn|icodeStr|
|00000820| 69 6e 67 00 b9 01 4b 65 | 66 41 63 71 75 69 72 65 |ing...Ke|fAcquire|
|00000830| 53 70 69 6e 4c 6f 63 6b | 41 74 44 70 63 4c 65 76 |SpinLock|AtDpcLev|
|00000840| 65 6c 00 00 07 01 49 6f | 46 72 65 65 49 72 70 00 |el....Io|FreeIrp.|
|00000850| ec 00 49 6f 43 68 65 63 | 6b 44 65 73 69 72 65 64 |..IoChec|kDesired|
|00000860| 41 63 63 65 73 73 00 00 | 59 00 45 78 49 6e 74 65 |Access..|Y.ExInte|
|00000870| 72 6c 6f 63 6b 65 64 50 | 75 73 68 45 6e 74 72 79 |rlockedP|ushEntry|
|00000880| 53 4c 69 73 74 00 92 02 | 52 74 6c 43 6f 70 79 55 |SList...|RtlCopyU|
|00000890| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 86 01 |nicodeSt|ring....|
|000008a0| 4b 65 51 75 65 72 79 53 | 79 73 74 65 6d 54 69 6d |KeQueryS|ystemTim|
|000008b0| 65 00 e2 02 52 74 6c 4c | 65 6e 67 74 68 53 65 63 |e...RtlL|engthSec|
|000008c0| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 00 |urityDes|criptor.|
|000008d0| d0 02 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|000008e0| 53 74 72 69 6e 67 00 00 | cc cc cc cc cc cc cc cc |String..|........|
|000008f0| a1 03 5a 77 57 61 69 74 | 46 6f 72 53 69 6e 67 6c |..ZwWait|ForSingl|
|00000900| 65 4f 62 6a 65 63 74 00 | 75 01 4b 65 49 6e 69 74 |eObject.|u.KeInit|
|00000910| 69 61 6c 69 7a 65 53 65 | 6d 61 70 68 6f 72 65 00 |ializeSe|maphore.|
|00000920| b6 01 4b 65 57 61 69 74 | 46 6f 72 4d 75 6c 74 69 |..KeWait|ForMulti|
|00000930| 70 6c 65 4f 62 6a 65 63 | 74 73 00 00 75 00 45 78 |pleObjec|ts..u.Ex|
|00000940| 66 49 6e 74 65 72 6c 6f | 63 6b 65 64 49 6e 73 65 |fInterlo|ckedInse|
|00000950| 72 74 54 61 69 6c 4c 69 | 73 74 00 00 93 01 4b 65 |rtTailLi|st....Ke|
|00000960| 52 65 6c 65 61 73 65 53 | 65 6d 61 70 68 6f 72 65 |ReleaseS|emaphore|
|00000970| 00 00 cc cc cc cc cc cc | 94 03 5a 77 53 65 74 45 |........|..ZwSetE|
|00000980| 76 65 6e 74 00 00 62 03 | 5a 77 43 72 65 61 74 65 |vent..b.|ZwCreate|
|00000990| 53 65 63 74 69 6f 6e 00 | cc cc cc cc cc cc cc cc |Section.|........|
|000009a0| 74 03 5a 77 4d 61 70 56 | 69 65 77 4f 66 53 65 63 |t.ZwMapV|iewOfSec|
|000009b0| 74 69 6f 6e 00 00 cc cc | cc cc cc cc cc cc cc cc |tion....|........|
|000009c0| 5f 03 5a 77 43 72 65 61 | 74 65 45 76 65 6e 74 00 |_.ZwCrea|teEvent.|
|000009d0| 9a 01 4b 65 52 65 73 65 | 74 45 76 65 6e 74 00 00 |..KeRese|tEvent..|
|000009e0| 0d 03 52 74 6c 54 69 6d | 65 54 6f 54 69 6d 65 46 |..RtlTim|eToTimeF|
|000009f0| 69 65 6c 64 73 00 cc cc | 57 01 4b 65 44 65 6c 61 |ields...|W.KeDela|
|00000a00| 79 45 78 65 63 75 74 69 | 6f 6e 54 68 72 65 61 64 |yExecuti|onThread|
|00000a10| 00 00 cc cc c2 02 52 74 | 6c 46 72 65 65 4f 65 6d |......Rt|lFreeOem|
|00000a20| 53 74 72 69 6e 67 00 00 | cc cc cc cc cc cc cc cc |String..|........|
|00000a30| 73 00 45 78 66 49 6e 74 | 65 72 6c 6f 63 6b 65 64 |s.ExfInt|erlocked|
|00000a40| 41 64 64 55 6c 6f 6e 67 | 00 00 d9 00 49 6e 74 65 |AddUlong|....Inte|
|00000a50| 72 6c 6f 63 6b 65 64 49 | 6e 63 72 65 6d 65 6e 74 |rlockedI|ncrement|
|00000a60| 00 00 95 00 46 73 52 74 | 6c 44 6f 65 73 4e 61 6d |....FsRt|lDoesNam|
|00000a70| 65 43 6f 6e 74 61 69 6e | 57 69 6c 64 43 61 72 64 |eContain|WildCard|
|00000a80| 73 00 cc cc 44 02 4f 62 | 66 44 65 72 65 66 65 72 |s...D.Ob|fDerefer|
|00000a90| 65 6e 63 65 4f 62 6a 65 | 63 74 00 00 d6 00 49 6e |enceObje|ct....In|
|00000aa0| 74 65 72 6c 6f 63 6b 65 | 64 44 65 63 72 65 6d 65 |terlocke|dDecreme|
|00000ab0| 6e 74 00 00 89 02 52 74 | 6c 43 6f 6d 70 61 72 65 |nt....Rt|lCompare|
|00000ac0| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 13 02 |UnicodeS|tring...|
|00000ad0| 4e 74 46 72 65 65 56 69 | 72 74 75 61 6c 4d 65 6d |NtFreeVi|rtualMem|
|00000ae0| 6f 72 79 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ory.....|........|
|00000af0| 06 02 4e 74 41 6c 6c 6f | 63 61 74 65 56 69 72 74 |..NtAllo|cateVirt|
|00000b00| 75 61 6c 4d 65 6d 6f 72 | 79 00 2b 02 4e 74 53 65 |ualMemor|y.+.NtSe|
|00000b10| 74 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 54 68 72 65 |tInforma|tionThre|
|00000b20| 61 64 00 00 47 03 53 65 | 52 65 6c 65 61 73 65 53 |ad..G.Se|ReleaseS|
|00000b30| 75 62 6a 65 63 74 43 6f | 6e 74 65 78 74 00 2c 03 |ubjectCo|ntext.,.|
|00000b40| 53 65 41 63 63 65 73 73 | 43 68 65 63 6b 00 32 03 |SeAccess|Check.2.|
|00000b50| 53 65 43 61 70 74 75 72 | 65 53 75 62 6a 65 63 74 |SeCaptur|eSubject|
|00000b60| 43 6f 6e 74 65 78 74 00 | bc 03 5f 77 63 73 69 63 |Context.|.._wcsic|
|00000b70| 6d 70 00 00 4a 00 45 78 | 49 6e 69 74 69 61 6c 69 |mp..J.Ex|Initiali|
|00000b80| 7a 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |zeResour|ceLite..|
|00000b90| 76 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 53 70 |v.KeInit|ializeSp|
|00000ba0| 69 6e 4c 6f 63 6b 00 00 | 78 00 45 78 66 49 6e 74 |inLock..|x.ExfInt|
|00000bb0| 65 72 6c 6f 63 6b 65 64 | 52 65 6d 6f 76 65 48 65 |erlocked|RemoveHe|
|00000bc0| 61 64 4c 69 73 74 00 00 | 6d 00 45 78 52 65 6c 65 |adList..|m.ExRele|
|00000bd0| 61 73 65 52 65 73 6f 75 | 72 63 65 4c 69 74 65 00 |aseResou|rceLite.|
|00000be0| 2e 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |..ExAcqu|ireResou|
|00000bf0| 72 63 65 45 78 63 6c 75 | 73 69 76 65 4c 69 74 65 |rceExclu|siveLite|
|00000c00| 00 00 c1 02 52 74 6c 46 | 72 65 65 48 65 61 70 00 |....RtlF|reeHeap.|
|00000c10| 74 02 52 74 6c 41 6c 6c | 6f 63 61 74 65 48 65 61 |t.RtlAll|ocateHea|
|00000c20| 70 00 a4 02 52 74 6c 44 | 65 73 74 72 6f 79 48 65 |p...RtlD|estroyHe|
|00000c30| 61 70 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ap......|........|
|00000c40| 0c 02 4e 74 43 72 65 61 | 74 65 53 65 63 74 69 6f |..NtCrea|teSectio|
|00000c50| 6e 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |n.......|........|
|00000c60| 09 02 4e 74 43 6f 6e 6e | 65 63 74 50 6f 72 74 00 |..NtConn|ectPort.|
|00000c70| 95 02 52 74 6c 43 72 65 | 61 74 65 48 65 61 70 00 |..RtlCre|ateHeap.|
|00000c80| 67 02 50 73 54 65 72 6d | 69 6e 61 74 65 53 79 73 |g.PsTerm|inateSys|
|00000c90| 74 65 6d 54 68 72 65 61 | 64 00 98 01 4b 65 52 65 |temThrea|d...KeRe|
|00000ca0| 6d 6f 76 65 51 75 65 75 | 65 00 a4 01 4b 65 53 65 |moveQueu|e...KeSe|
|00000cb0| 74 49 64 65 61 6c 50 72 | 6f 63 65 73 73 6f 72 54 |tIdealPr|ocessorT|
|00000cc0| 68 72 65 61 64 00 51 02 | 50 73 43 72 65 61 74 65 |hread.Q.|PsCreate|
|00000cd0| 53 79 73 74 65 6d 54 68 | 72 65 61 64 00 00 cc cc |SystemTh|read....|
|00000ce0| f4 01 4d 6d 53 69 7a 65 | 4f 66 4d 64 6c 00 cc cc |..MmSize|OfMdl...|
|00000cf0| e2 01 4d 6d 49 73 54 68 | 69 73 41 6e 4e 74 41 73 |..MmIsTh|isAnNtAs|
|00000d00| 53 79 73 74 65 6d 00 00 | 23 03 52 74 6c 56 61 6c |System..|#.RtlVal|
|00000d10| 69 64 53 65 63 75 72 69 | 74 79 44 65 73 63 72 69 |idSecuri|tyDescri|
|00000d20| 70 74 6f 72 00 00 0c 03 | 52 74 6c 54 69 6d 65 54 |ptor....|RtlTimeT|
|00000d30| 6f 53 65 63 6f 6e 64 73 | 53 69 6e 63 65 31 39 38 |oSeconds|Since198|
|00000d40| 30 00 cc cc 82 01 4b 65 | 4e 75 6d 62 65 72 50 72 |0.....Ke|NumberPr|
|00000d50| 6f 63 65 73 73 6f 72 73 | 00 00 cc cc cc cc cc cc |ocessors|........|
|00000d60| 39 03 53 65 45 78 70 6f | 72 74 73 00 e6 02 52 74 |9.SeExpo|rts...Rt|
|00000d70| 6c 4d 61 70 47 65 6e 65 | 72 69 63 4d 61 73 6b 00 |lMapGene|ricMask.|
|00000d80| 3a 03 53 65 46 72 65 65 | 50 72 69 76 69 6c 65 67 |:.SeFree|Privileg|
|00000d90| 65 73 00 00 4e 02 50 73 | 41 73 73 69 67 6e 49 6d |es..N.Ps|AssignIm|
|00000da0| 70 65 72 73 6f 6e 61 74 | 69 6f 6e 54 6f 6b 65 6e |personat|ionToken|
|00000db0| 00 00 cc cc cc cc cc cc | 4f 01 4b 65 41 74 74 61 |........|O.KeAtta|
|00000dc0| 63 68 50 72 6f 63 65 73 | 73 00 59 01 4b 65 44 65 |chProces|s.Y.KeDe|
|00000dd0| 74 61 63 68 50 72 6f 63 | 65 73 73 00 20 03 52 74 |tachProc|ess. .Rt|
|00000de0| 6c 55 70 63 61 73 65 55 | 6e 69 63 6f 64 65 54 6f |lUpcaseU|nicodeTo|
|00000df0| 4f 65 6d 4e 00 00 cc cc | 17 03 52 74 6c 55 6e 69 |OemN....|..RtlUni|
|00000e00| 63 6f 64 65 54 6f 4f 65 | 6d 4e 00 00 ff 01 4e 6c |codeToOe|mN....Nl|
|00000e10| 73 4d 62 43 6f 64 65 50 | 61 67 65 54 61 67 00 00 |sMbCodeP|ageTag..|
|00000e20| 01 02 4e 6c 73 4f 65 6d | 4c 65 61 64 42 79 74 65 |..NlsOem|LeadByte|
|00000e30| 49 6e 66 6f 00 00 cc cc | d9 02 52 74 6c 49 73 4e |Info....|..RtlIsN|
|00000e40| 61 6d 65 4c 65 67 61 6c | 44 4f 53 38 44 6f 74 33 |ameLegal|DOS8Dot3|
|00000e50| 00 00 a6 00 46 73 52 74 | 6c 49 73 46 61 74 44 62 |....FsRt|lIsFatDb|
|00000e60| 63 73 4c 65 67 61 6c 00 | cd 02 52 74 6c 49 6e 69 |csLegal.|..RtlIni|
|00000e70| 74 41 6e 73 69 53 74 72 | 69 6e 67 00 cc cc cc cc |tAnsiStr|ing.....|
|00000e80| 08 02 4e 74 43 6c 6f 73 | 65 00 e7 03 77 63 73 63 |..NtClos|e...wcsc|
|00000e90| 6d 70 00 00 23 02 4e 74 | 51 75 65 72 79 53 65 63 |mp..#.Nt|QuerySec|
|00000ea0| 75 72 69 74 79 4f 62 6a | 65 63 74 00 cc cc cc cc |urityObj|ect.....|
|00000eb0| 2c 02 4e 74 53 65 74 53 | 65 63 75 72 69 74 79 4f |,.NtSetS|ecurityO|
|00000ec0| 62 6a 65 63 74 00 cc cc | cc cc cc cc cc cc cc cc |bject...|........|
|00000ed0| 0f 02 4e 74 44 65 76 69 | 63 65 49 6f 43 6f 6e 74 |..NtDevi|ceIoCont|
|00000ee0| 72 6f 6c 46 69 6c 65 00 | c0 02 52 74 6c 46 72 65 |rolFile.|..RtlFre|
|00000ef0| 65 41 6e 73 69 53 74 72 | 69 6e 67 00 1a 03 52 74 |eAnsiStr|ing...Rt|
|00000f00| 6c 55 70 63 61 73 65 55 | 6e 69 63 6f 64 65 53 74 |lUpcaseU|nicodeSt|
|00000f10| 72 69 6e 67 00 00 1d 03 | 52 74 6c 55 70 63 61 73 |ring....|RtlUpcas|
|00000f20| 65 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 54 6f |eUnicode|StringTo|
|00000f30| 4f 65 6d 53 74 72 69 6e | 67 00 13 01 49 6f 47 65 |OemStrin|g...IoGe|
|00000f40| 74 53 74 61 63 6b 4c 69 | 6d 69 74 73 00 00 cc cc |tStackLi|mits....|
|00000f50| 14 02 4e 74 46 73 43 6f | 6e 74 72 6f 6c 46 69 6c |..NtFsCo|ntrolFil|
|00000f60| 65 00 cc cc fe 02 52 74 | 6c 53 65 63 6f 6e 64 73 |e.....Rt|lSeconds|
|00000f70| 53 69 6e 63 65 31 39 37 | 30 54 6f 54 69 6d 65 00 |Since197|0ToTime.|
|00000f80| 04 01 49 6f 46 61 73 74 | 51 75 65 72 79 4e 65 74 |..IoFast|QueryNet|
|00000f90| 77 6f 72 6b 41 74 74 72 | 69 62 75 74 65 73 00 00 |workAttr|ibutes..|
|00000fa0| fb 02 52 74 6c 52 61 6e | 64 6f 6d 00 b4 03 5f 73 |..RtlRan|dom..._s|
|00000fb0| 74 72 69 63 6d 70 00 00 | e6 03 77 63 73 63 68 72 |tricmp..|..wcschr|
|00000fc0| 00 00 23 01 49 6f 52 65 | 61 64 4f 70 65 72 61 74 |..#.IoRe|adOperat|
|00000fd0| 69 6f 6e 43 6f 75 6e 74 | 00 00 cc cc 24 01 49 6f |ionCount|....$.Io|
|00000fe0| 52 65 61 64 54 72 61 6e | 73 66 65 72 43 6f 75 6e |ReadTran|sferCoun|
|00000ff0| 74 00 cc cc 42 01 49 6f | 57 72 69 74 65 4f 70 65 |t...B.Io|WriteOpe|
|00001000| 72 61 74 69 6f 6e 43 6f | 75 6e 74 00 43 01 49 6f |rationCo|unt.C.Io|
|00001010| 57 72 69 74 65 54 72 61 | 6e 73 66 65 72 43 6f 75 |WriteTra|nsferCou|
|00001020| 6e 74 00 00 cc cc cc cc | 38 01 49 6f 53 74 61 74 |nt......|8.IoStat|
|00001030| 69 73 74 69 63 73 4c 6f | 63 6b 00 00 cc cc cc cc |isticsLo|ck......|
|00001040| cf 02 52 74 6c 49 6e 69 | 74 53 74 72 69 6e 67 00 |..RtlIni|tString.|
|00001050| e8 03 77 63 73 63 70 79 | 00 00 cc cc cc cc cc cc |..wcscpy|........|
|00001060| eb 00 49 6f 43 61 6e 63 | 65 6c 49 72 70 00 cc cc |..IoCanc|elIrp...|
|00001070| d8 02 52 74 6c 49 6e 74 | 65 67 65 72 54 6f 55 6e |..RtlInt|egerToUn|
|00001080| 69 63 6f 64 65 53 74 72 | 69 6e 67 00 cc cc cc cc |icodeStr|ing.....|
|00001090| 32 01 49 6f 53 65 74 54 | 68 72 65 61 64 48 61 72 |2.IoSetT|hreadHar|
|000010a0| 64 45 72 72 6f 72 4d 6f | 64 65 00 00 ec 02 52 74 |dErrorMo|de....Rt|
|000010b0| 6c 4e 74 53 74 61 74 75 | 73 54 6f 44 6f 73 45 72 |lNtStatu|sToDosEr|
|000010c0| 72 6f 72 4e 6f 54 65 62 | 00 00 cc cc cc cc cc cc |rorNoTeb|........|
|000010d0| 27 02 4e 74 52 65 71 75 | 65 73 74 57 61 69 74 52 |'.NtRequ|estWaitR|
|000010e0| 65 70 6c 79 50 6f 72 74 | 00 00 b3 00 46 73 52 74 |eplyPort|....FsRt|
|000010f0| 6c 4d 64 6c 52 65 61 64 | 44 65 76 00 cc cc cc cc |lMdlRead|Dev.....|
|00001100| 24 02 4e 74 51 75 65 72 | 79 56 6f 6c 75 6d 65 49 |$.NtQuer|yVolumeI|
|00001110| 6e 66 6f 72 6d 61 74 69 | 6f 6e 46 69 6c 65 00 00 |nformati|onFile..|
|00001120| 2f 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |/.ExAcqu|ireResou|
|00001130| 72 63 65 53 68 61 72 65 | 64 4c 69 74 65 00 b5 00 |rceShare|dLite...|
|00001140| 46 73 52 74 6c 4d 64 6c | 57 72 69 74 65 43 6f 6d |FsRtlMdl|WriteCom|
|00001150| 70 6c 65 74 65 44 65 76 | 00 00 ee 00 49 6f 43 68 |pleteDev|....IoCh|
|00001160| 65 63 6b 46 75 6e 63 74 | 69 6f 6e 41 63 63 65 73 |eckFunct|ionAcces|
|00001170| 73 00 cc cc ed 00 49 6f | 43 68 65 63 6b 45 61 42 |s.....Io|CheckEaB|
|00001180| 75 66 66 65 72 56 61 6c | 69 64 69 74 79 00 f6 02 |ufferVal|idity...|
|00001190| 52 74 6c 50 72 65 66 69 | 78 55 6e 69 63 6f 64 65 |RtlPrefi|xUnicode|
|000011a0| 53 74 72 69 6e 67 00 00 | 0b 02 4e 74 43 72 65 61 |String..|..NtCrea|
|000011b0| 74 65 46 69 6c 65 00 00 | cc cc cc cc cc cc cc cc |teFile..|........|
|000011c0| ae 02 52 74 6c 45 71 75 | 61 6c 53 74 72 69 6e 67 |..RtlEqu|alString|
|000011d0| 00 00 cc cc e3 01 4d 6d | 4c 6f 63 6b 50 61 67 61 |......Mm|LockPaga|
|000011e0| 62 6c 65 44 61 74 61 53 | 65 63 74 69 6f 6e 00 00 |bleDataS|ection..|
|000011f0| e1 00 49 6f 41 6c 6c 6f | 63 61 74 65 4d 64 6c 00 |..IoAllo|cateMdl.|
|00001200| ed 01 4d 6d 50 72 6f 62 | 65 41 6e 64 4c 6f 63 6b |..MmProb|eAndLock|
|00001210| 50 61 67 65 73 00 20 01 | 49 6f 51 75 65 75 65 54 |Pages. .|IoQueueT|
|00001220| 68 72 65 61 64 49 72 70 | 00 00 cc cc 45 02 4f 62 |hreadIrp|....E.Ob|
|00001230| 66 52 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |fReferen|ceObject|
|00001240| 00 00 cc cc e0 00 49 6f | 41 6c 6c 6f 63 61 74 65 |......Io|Allocate|
|00001250| 49 72 70 00 60 01 4b 65 | 47 65 74 43 75 72 72 65 |Irp.`.Ke|GetCurre|
|00001260| 6e 74 54 68 72 65 61 64 | 00 00 cc cc cc cc cc cc |ntThread|........|
|00001270| 0c 01 49 6f 47 65 74 43 | 75 72 72 65 6e 74 50 72 |..IoGetC|urrentPr|
|00001280| 6f 63 65 73 73 00 cc cc | 52 01 4b 65 42 75 67 43 |ocess...|R.KeBugC|
|00001290| 68 65 63 6b 45 78 00 00 | 0a 03 52 74 6c 54 69 6d |heckEx..|..RtlTim|
|000012a0| 65 46 69 65 6c 64 73 54 | 6f 54 69 6d 65 00 cc cc |eFieldsT|oTime...|
|000012b0| 5e 00 45 78 4c 6f 63 61 | 6c 54 69 6d 65 54 6f 53 |^.ExLoca|lTimeToS|
|000012c0| 79 73 74 65 6d 54 69 6d | 65 00 86 02 52 74 6c 43 |ystemTim|e...RtlC|
|000012d0| 6f 6d 70 61 72 65 4d 65 | 6d 6f 72 79 00 00 cc cc |ompareMe|mory....|
|000012e0| 3c 00 45 78 44 65 6c 65 | 74 65 52 65 73 6f 75 72 |<.ExDele|teResour|
|000012f0| 63 65 4c 69 74 65 00 00 | 70 00 45 78 53 79 73 74 |ceLite..|p.ExSyst|
|00001300| 65 6d 54 69 6d 65 54 6f | 4c 6f 63 61 6c 54 69 6d |emTimeTo|LocalTim|
|00001310| 65 00 cc cc 0b 03 52 74 | 6c 54 69 6d 65 54 6f 53 |e.....Rt|lTimeToS|
|00001320| 65 63 6f 6e 64 73 53 69 | 6e 63 65 31 39 37 30 00 |econdsSi|nce1970.|
|00001330| d8 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 45 78 63 |..Interl|ockedExc|
|00001340| 68 61 6e 67 65 41 64 64 | 00 00 cc cc 57 00 45 78 |hangeAdd|....W.Ex|
|00001350| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 50 6f 70 45 6e |Interloc|kedPopEn|
|00001360| 74 72 79 53 4c 69 73 74 | 00 00 cc cc cc cc cc cc |trySList|........|
|00001370| ce 03 6d 65 6d 6d 6f 76 | 65 00 cc cc c7 02 52 74 |..memmov|e.....Rt|
|00001380| 6c 47 65 74 44 61 63 6c | 53 65 63 75 72 69 74 79 |lGetDacl|Security|
|00001390| 44 65 73 63 72 69 70 74 | 6f 72 00 00 cb 02 52 74 |Descript|or....Rt|
|000013a0| 6c 47 65 74 4f 77 6e 65 | 72 53 65 63 75 72 69 74 |lGetOwne|rSecurit|
|000013b0| 79 44 65 73 63 72 69 70 | 74 6f 72 00 f5 01 4d 6d |yDescrip|tor...Mm|
|000013c0| 55 6e 6c 6f 63 6b 50 61 | 67 61 62 6c 65 49 6d 61 |UnlockPa|gableIma|
|000013d0| 67 65 53 65 63 74 69 6f | 6e 00 3e 01 49 6f 55 6e |geSectio|n.>.IoUn|
|000013e0| 72 65 67 69 73 74 65 72 | 53 68 75 74 64 6f 77 6e |register|Shutdown|
|000013f0| 4e 6f 74 69 66 69 63 61 | 74 69 6f 6e 00 00 74 01 |Notifica|tion..t.|
|00001400| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 51 75 65 75 |KeInitia|lizeQueu|
|00001410| 65 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |e.......|........|
|00001420| 97 02 52 74 6c 43 72 65 | 61 74 65 53 65 63 75 72 |..RtlCre|ateSecur|
|00001430| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 cc cc |ityDescr|iptor...|
|00001440| e1 02 52 74 6c 4c 65 6e | 67 74 68 52 65 71 75 69 |..RtlLen|gthRequi|
|00001450| 72 65 64 53 69 64 00 00 | d3 02 52 74 6c 49 6e 69 |redSid..|..RtlIni|
|00001460| 74 69 61 6c 69 7a 65 53 | 69 64 00 00 09 03 52 74 |tializeS|id....Rt|
|00001470| 6c 53 75 62 41 75 74 68 | 6f 72 69 74 79 53 69 64 |lSubAuth|oritySid|
|00001480| 00 00 e3 02 52 74 6c 4c | 65 6e 67 74 68 53 69 64 |....RtlL|engthSid|
|00001490| 00 00 93 02 52 74 6c 43 | 72 65 61 74 65 41 63 6c |....RtlC|reateAcl|
|000014a0| 00 00 cc cc 70 02 52 74 | 6c 41 64 64 41 63 63 65 |....p.Rt|lAddAcce|
|000014b0| 73 73 41 6c 6c 6f 77 65 | 64 41 63 65 00 00 cc cc |ssAllowe|dAce....|
|000014c0| 02 03 52 74 6c 53 65 74 | 44 61 63 6c 53 65 63 75 |..RtlSet|DaclSecu|
|000014d0| 72 69 74 79 44 65 73 63 | 72 69 70 74 6f 72 00 00 |rityDesc|riptor..|
|000014e0| 04 03 52 74 6c 53 65 74 | 4f 77 6e 65 72 53 65 63 |..RtlSet|OwnerSec|
|000014f0| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 00 |urityDes|criptor.|
|00001500| 79 03 5a 77 4f 70 65 6e | 4b 65 79 00 8c 03 5a 77 |y.ZwOpen|Key...Zw|
|00001510| 51 75 65 72 79 56 61 6c | 75 65 4b 65 79 00 cc cc |QueryVal|ueKey...|
|00001520| 5b 03 5a 77 43 6c 6f 73 | 65 00 cc cc 77 02 52 74 |[.ZwClos|e...w.Rt|
|00001530| 6c 41 6e 73 69 53 74 72 | 69 6e 67 54 6f 55 6e 69 |lAnsiStr|ingToUni|
|00001540| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 c3 02 52 74 |codeStri|ng....Rt|
|00001550| 6c 46 72 65 65 55 6e 69 | 63 6f 64 65 53 74 72 69 |lFreeUni|codeStri|
|00001560| 6e 67 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ng......|........|
|00001570| f4 00 49 6f 43 72 65 61 | 74 65 46 69 6c 65 00 00 |..IoCrea|teFile..|
|00001580| f6 01 4d 6d 55 6e 6c 6f | 63 6b 50 61 67 65 73 00 |..MmUnlo|ckPages.|
|00001590| f8 01 4d 6d 55 6e 6d 61 | 70 4c 6f 63 6b 65 64 50 |..MmUnma|pLockedP|
|000015a0| 61 67 65 73 00 00 cc cc | e7 01 4d 6d 4d 61 70 4c |ages....|..MmMapL|
|000015b0| 6f 63 6b 65 64 50 61 67 | 65 73 00 00 cc cc cc cc |ockedPag|es......|
|000015c0| e8 00 49 6f 42 75 69 6c | 64 50 61 72 74 69 61 6c |..IoBuil|dPartial|
|000015d0| 4d 64 6c 00 08 01 49 6f | 46 72 65 65 4d 64 6c 00 |Mdl...Io|FreeMdl.|
|000015e0| 88 01 4b 65 51 75 65 72 | 79 54 69 6d 65 49 6e 63 |..KeQuer|yTimeInc|
|000015f0| 72 65 6d 65 6e 74 00 00 | cc cc cc cc cc cc cc cc |rement..|........|
|00001600| 8d 01 4b 65 52 65 61 64 | 53 74 61 74 65 51 75 65 |..KeRead|StateQue|
|00001610| 75 65 00 00 cc cc cc cc | 36 00 45 78 41 6c 6c 6f |ue......|6.ExAllo|
|00001620| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |catePool|WithTag.|
|00001630| 42 00 45 78 46 72 65 65 | 50 6f 6f 6c 00 00 cc cc |B.ExFree|Pool....|
|00001640| 45 01 49 6f 66 43 6f 6d | 70 6c 65 74 65 52 65 71 |E.IofCom|pleteReq|
|00001650| 75 65 73 74 00 00 cc cc | 44 01 49 6f 66 43 61 6c |uest....|D.IofCal|
|00001660| 6c 44 72 69 76 65 72 00 | be 03 5f 77 63 73 6e 69 |lDriver.|.._wcsni|
|00001670| 63 6d 70 00 7b 01 4b 65 | 49 6e 73 65 72 74 48 65 |cmp.{.Ke|InsertHe|
|00001680| 61 64 51 75 65 75 65 00 | 62 00 45 78 51 75 65 75 |adQueue.|b.ExQueu|
|00001690| 65 57 6f 72 6b 49 74 65 | 6d 00 cc cc cc cc cc cc |eWorkIte|m.......|
|000016a0| fb 00 49 6f 44 65 6c 65 | 74 65 44 65 76 69 63 65 |..IoDele|teDevice|
|000016b0| 00 00 f3 00 49 6f 43 72 | 65 61 74 65 44 65 76 69 |....IoCr|eateDevi|
|000016c0| 63 65 00 00 28 01 49 6f | 52 65 67 69 73 74 65 72 |ce..(.Io|Register|
|000016d0| 53 68 75 74 64 6f 77 6e | 4e 6f 74 69 66 69 63 61 |Shutdown|Notifica|
|000016e0| 74 69 6f 6e 00 00 df 00 | 49 6f 41 6c 6c 6f 63 61 |tion....|IoAlloca|
|000016f0| 74 65 45 72 72 6f 72 4c | 6f 67 45 6e 74 72 79 00 |teErrorL|ogEntry.|
|00001700| 41 01 49 6f 57 72 69 74 | 65 45 72 72 6f 72 4c 6f |A.IoWrit|eErrorLo|
|00001710| 67 45 6e 74 72 79 00 00 | 19 03 52 74 6c 55 70 63 |gEntry..|..RtlUpc|
|00001720| 61 73 65 55 6e 69 63 6f | 64 65 43 68 61 72 00 00 |aseUnico|deChar..|
|00001730| b2 01 4b 65 54 69 63 6b | 43 6f 75 6e 74 00 cc cc |..KeTick|Count...|
|00001740| 6f 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 44 70 |o.KeInit|ializeDp|
|00001750| 63 00 cc cc 3f 02 4f 62 | 52 65 66 65 72 65 6e 63 |c...?.Ob|Referenc|
|00001760| 65 4f 62 6a 65 63 74 42 | 79 48 61 6e 64 6c 65 00 |eObjectB|yHandle.|
|00001770| 11 01 49 6f 47 65 74 52 | 65 6c 61 74 65 64 44 65 |..IoGetR|elatedDe|
|00001780| 76 69 63 65 4f 62 6a 65 | 63 74 00 00 25 02 4e 74 |viceObje|ct..%.Nt|
|00001790| 52 65 61 64 46 69 6c 65 | 00 00 29 02 4e 74 53 65 |ReadFile|..).NtSe|
|000017a0| 74 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 46 69 6c 65 |tInforma|tionFile|
|000017b0| 00 00 cc cc 30 02 4e 74 | 57 72 69 74 65 46 69 6c |....0.Nt|WriteFil|
|000017c0| 65 00 cc cc 7c 01 4b 65 | 49 6e 73 65 72 74 51 75 |e...|.Ke|InsertQu|
|000017d0| 65 75 65 00 15 01 49 6f | 49 6e 69 74 69 61 6c 69 |eue...Io|Initiali|
|000017e0| 7a 65 49 72 70 00 d3 01 | 4d 6d 42 75 69 6c 64 4d |zeIrp...|MmBuildM|
|000017f0| 64 6c 46 6f 72 4e 6f 6e | 50 61 67 65 64 50 6f 6f |dlForNon|PagedPoo|
|00001800| 6c 00 cc cc ea 03 77 63 | 73 6c 65 6e 00 00 f2 02 |l.....wc|slen....|
|00001810| 52 74 6c 4f 65 6d 53 74 | 72 69 6e 67 54 6f 55 6e |RtlOemSt|ringToUn|
|00001820| 69 63 6f 64 65 53 74 72 | 69 6e 67 00 cc cc cc cc |icodeStr|ing.....|
|00001830| 8a 01 4b 65 52 65 61 64 | 53 74 61 74 65 45 76 65 |..KeRead|StateEve|
|00001840| 6e 74 00 00 aa 01 4b 65 | 53 65 74 54 61 72 67 65 |nt....Ke|SetTarge|
|00001850| 74 50 72 6f 63 65 73 73 | 6f 72 44 70 63 00 54 01 |tProcess|orDpc.T.|
|00001860| 4b 65 43 6c 65 61 72 45 | 76 65 6e 74 00 00 cc cc |KeClearE|vent....|
|00001870| ae 01 4b 65 53 65 74 54 | 69 6d 65 72 00 00 cc cc |..KeSetT|imer....|
|00001880| 53 01 4b 65 43 61 6e 63 | 65 6c 54 69 6d 65 72 00 |S.KeCanc|elTimer.|
|00001890| b8 01 4b 65 57 61 69 74 | 46 6f 72 53 69 6e 67 6c |..KeWait|ForSingl|
|000018a0| 65 4f 62 6a 65 63 74 00 | 70 01 4b 65 49 6e 69 74 |eObject.|p.KeInit|
|000018b0| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 cc cc cc cc |ializeEv|ent.....|
|000018c0| 77 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 54 69 |w.KeInit|ializeTi|
|000018d0| 6d 65 72 00 1f 02 4e 74 | 51 75 65 72 79 49 6e 66 |mer...Nt|QueryInf|
|000018e0| 6f 72 6d 61 74 69 6f 6e | 46 69 6c 65 00 00 cc cc |ormation|File....|
|000018f0| 19 02 4e 74 4f 70 65 6e | 46 69 6c 65 00 00 cc cc |..NtOpen|File....|
|00001900| 48 41 4c 2e 64 6c 6c 00 | 4a 00 4b 66 41 63 71 75 |HAL.dll.|J.KfAcqu|
|00001910| 69 72 65 53 70 69 6e 4c | 6f 63 6b 00 4b 00 4b 66 |ireSpinL|ock.K.Kf|
|00001920| 4c 6f 77 65 72 49 72 71 | 6c 00 42 00 4b 65 47 65 |LowerIrq|l.B.KeGe|
|00001930| 74 43 75 72 72 65 6e 74 | 49 72 71 6c 00 00 4d 00 |tCurrent|Irql..M.|
|00001940| 4b 66 52 65 6c 65 61 73 | 65 53 70 69 6e 4c 6f 63 |KfReleas|eSpinLoc|
|00001950| 6b 00 cc cc cc cc cc cc | 4c 00 4b 66 52 61 69 73 |k.......|L.KfRais|
|00001960| 65 49 72 71 6c 00 cc cc | 54 44 49 2e 53 59 53 00 |eIrql...|TDI.SYS.|
|00001970| 20 00 54 64 69 4f 70 65 | 6e 4e 65 74 62 69 6f 73 | .TdiOpe|nNetbios|
|00001980| 41 64 64 72 65 73 73 00 | 1c 00 54 64 69 44 65 72 |Address.|..TdiDer|
|00001990| 65 67 69 73 74 65 72 4e | 6f 74 69 66 69 63 61 74 |egisterN|otificat|
|000019a0| 69 6f 6e 48 61 6e 64 6c | 65 72 00 00 cc cc cc cc |ionHandl|er......|
|000019b0| 25 00 54 64 69 52 65 74 | 75 72 6e 43 68 61 69 6e |%.TdiRet|urnChain|
|000019c0| 65 64 52 65 63 65 69 76 | 65 73 00 00 0d 00 54 64 |edReceiv|es....Td|
|000019d0| 69 43 6f 70 79 42 75 66 | 66 65 72 54 6f 4d 64 6c |iCopyBuf|ferToMdl|
|000019e0| 00 00 24 00 54 64 69 52 | 65 67 69 73 74 65 72 4e |..$.TdiR|egisterN|
|000019f0| 6f 74 69 66 69 63 61 74 | 69 6f 6e 48 61 6e 64 6c |otificat|ionHandl|
|00001a00| 65 72 00 00 cc cc cc cc | 6b 73 65 63 64 64 2e 73 |er......|ksecdd.s|
|00001a10| 79 73 00 00 01 00 41 63 | 71 75 69 72 65 43 72 65 |ys....Ac|quireCre|
|00001a20| 64 65 6e 74 69 61 6c 73 | 48 61 6e 64 6c 65 57 00 |dentials|HandleW.|
|00001a30| 09 00 49 6e 69 74 53 65 | 63 75 72 69 74 79 49 6e |..InitSe|curityIn|
|00001a40| 74 65 72 66 61 63 65 57 | 00 00 0c 00 4d 61 70 53 |terfaceW|....MapS|
|00001a50| 65 63 75 72 69 74 79 45 | 72 72 6f 72 00 00 08 00 |ecurityE|rror....|
|00001a60| 49 6d 70 65 72 73 6f 6e | 61 74 65 53 65 63 75 72 |Imperson|ateSecur|
|00001a70| 69 74 79 43 6f 6e 74 65 | 78 74 00 00 cc cc cc cc |ityConte|xt......|
|00001a80| 05 00 46 72 65 65 43 6f | 6e 74 65 78 74 42 75 66 |..FreeCo|ntextBuf|
|00001a90| 66 65 72 00 04 00 45 6e | 75 6d 65 72 61 74 65 53 |fer...En|umerateS|
|00001aa0| 65 63 75 72 69 74 79 50 | 61 63 6b 61 67 65 73 57 |ecurityP|ackagesW|
|00001ab0| 00 00 03 00 44 65 6c 65 | 74 65 53 65 63 75 72 69 |....Dele|teSecuri|
|00001ac0| 74 79 43 6f 6e 74 65 78 | 74 00 00 00 41 63 63 65 |tyContex|t...Acce|
|00001ad0| 70 74 53 65 63 75 72 69 | 74 79 43 6f 6e 74 65 78 |ptSecuri|tyContex|
|00001ae0| 74 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |t.......|........|
|00001af0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+