/ CD World Haziran 1997 / CD World Haziran 1997.iso / Cesitlemeler / WinNt Service Pack II / WIN32K.SYS / INIT

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 71 12 00 00 00 00 00 | 00 00 00 00 88 74 12 00 |.q......|.....t..|
|00000010| c0 5a 11 00 64 74 12 00 | 00 00 00 00 00 00 00 00 |.Z..dt..|........|
|00000020| e0 88 12 00 24 5e 11 00 | 00 00 00 00 00 00 00 00 |....$^..|........|
|00000030| 00 00 00 00 00 00 00 00 | 00 00 00 00 cc cc cc cc |........|........|
|00000040| a0 74 12 00 bc 74 12 00 | d2 74 12 00 de 74 12 00 |.t...t..|.t...t..|
|00000050| f8 74 12 00 14 75 12 00 | 30 75 12 00 48 75 12 00 |.t...u..|0u..Hu..|
|00000060| 60 75 12 00 70 75 12 00 | 88 75 12 00 96 75 12 00 |`u..pu..|.u...u..|
|00000070| ac 75 12 00 ce 75 12 00 | e6 75 12 00 fe 75 12 00 |.u...u..|.u...u..|
|00000080| 0a 76 12 00 1c 76 12 00 | 34 76 12 00 48 76 12 00 |.v...v..|4v..Hv..|
|00000090| 5c 76 12 00 6c 76 12 00 | 7a 76 12 00 90 76 12 00 |\v..lv..|zv...v..|
|000000a0| aa 76 12 00 c8 76 12 00 | f0 76 12 00 0e 77 12 00 |.v...v..|.v...w..|
|000000b0| 28 77 12 00 3c 77 12 00 | 52 77 12 00 68 77 12 00 |(w..<w..|Rw..hw..|
|000000c0| 80 77 12 00 98 77 12 00 | b0 77 12 00 c8 77 12 00 |.w...w..|.w...w..|
|000000d0| dc 77 12 00 fc 77 12 00 | 14 78 12 00 2c 78 12 00 |.w...w..|.x..,x..|
|000000e0| 36 78 12 00 4a 78 12 00 | 6a 78 12 00 80 78 12 00 |6x..Jx..|jx...x..|
|000000f0| 96 78 12 00 b0 78 12 00 | c8 78 12 00 e0 78 12 00 |.x...x..|.x...x..|
|00000100| fe 78 12 00 18 79 12 00 | 32 79 12 00 50 79 12 00 |.x...y..|2y..Py..|
|00000110| 66 79 12 00 80 79 12 00 | 9c 79 12 00 a8 79 12 00 |fy...y..|.y...y..|
|00000120| c6 79 12 00 d6 79 12 00 | e2 79 12 00 02 7a 12 00 |.y...y..|.y...z..|
|00000130| 22 7a 12 00 42 7a 12 00 | 62 7a 12 00 74 7a 12 00 |"z..Bz..|bz..tz..|
|00000140| 84 7a 12 00 a8 7a 12 00 | bc 7a 12 00 da 7a 12 00 |.z...z..|.z...z..|
|00000150| f0 7a 12 00 10 7b 12 00 | 30 7b 12 00 60 7b 12 00 |.z...{..|0{..`{..|
|00000160| 80 7b 12 00 9a 7b 12 00 | ba 7b 12 00 d0 7b 12 00 |.{...{..|.{...{..|
|00000170| e6 7b 12 00 f8 7b 12 00 | 18 7c 12 00 30 7c 12 00 |.{...{..|.|..0|..|
|00000180| 50 7c 12 00 60 7c 12 00 | 6e 7c 12 00 86 7c 12 00 |P|..`|..|n|...|..|
|00000190| a8 7c 12 00 be 7c 12 00 | e0 7c 12 00 f8 7c 12 00 |.|...|..|.|...|..|
|000001a0| 0e 7d 12 00 1c 7d 12 00 | 2c 7d 12 00 48 7d 12 00 |.}...}..|,}..H}..|
|000001b0| 6c 7d 12 00 90 7d 12 00 | b0 7d 12 00 c0 7d 12 00 |l}...}..|.}...}..|
|000001c0| d8 7d 12 00 ee 7d 12 00 | 0c 7e 12 00 20 7e 12 00 |.}...}..|.~.. ~..|
|000001d0| 34 7e 12 00 46 7e 12 00 | 60 7e 12 00 7c 7e 12 00 |4~..F~..|`~..|~..|
|000001e0| 90 7e 12 00 b0 7e 12 00 | ca 7e 12 00 d8 7e 12 00 |.~...~..|.~...~..|
|000001f0| 00 7f 12 00 20 7f 12 00 | 30 7f 12 00 60 7f 12 00 |.... ...|0...`...|
|00000200| 7c 7f 12 00 a0 7f 12 00 | bc 7f 12 00 d0 7f 12 00 ||.......|........|
|00000210| ec 7f 12 00 08 80 12 00 | 22 80 12 00 2e 80 12 00 |........|".......|
|00000220| 48 80 12 00 52 80 12 00 | 60 80 12 00 6e 80 12 00 |H...R...|`...n...|
|00000230| 78 80 12 00 98 80 12 00 | b8 80 12 00 d4 80 12 00 |x.......|........|
|00000240| f0 80 12 00 10 81 12 00 | 30 81 12 00 40 81 12 00 |........|0...@...|
|00000250| 58 81 12 00 76 81 12 00 | a0 81 12 00 be 81 12 00 |X...v...|........|
|00000260| e0 81 12 00 fc 81 12 00 | 18 82 12 00 30 82 12 00 |........|....0...|
|00000270| 3a 82 12 00 48 82 12 00 | 54 82 12 00 70 82 12 00 |:...H...|T...p...|
|00000280| 90 82 12 00 a8 82 12 00 | c4 82 12 00 e8 82 12 00 |........|........|
|00000290| f4 82 12 00 10 83 12 00 | 2c 83 12 00 44 83 12 00 |........|,...D...|
|000002a0| 5e 83 12 00 78 83 12 00 | 90 83 12 00 a0 83 12 00 |^...x...|........|
|000002b0| b2 83 12 00 d0 83 12 00 | e2 83 12 00 f4 83 12 00 |........|........|
|000002c0| 10 84 12 00 2e 84 12 00 | 44 84 12 00 5c 84 12 00 |........|D...\...|
|000002d0| 72 84 12 00 8a 84 12 00 | a4 84 12 00 be 84 12 00 |r.......|........|
|000002e0| d4 84 12 00 e6 84 12 00 | f4 84 12 00 10 85 12 00 |........|........|
|000002f0| 20 85 12 00 38 85 12 00 | 46 85 12 00 5e 85 12 00 | ...8...|F...^...|
|00000300| 76 85 12 00 90 85 12 00 | a4 85 12 00 b0 85 12 00 |v.......|........|
|00000310| cc 85 12 00 e0 85 12 00 | f4 85 12 00 00 86 12 00 |........|........|
|00000320| 1c 86 12 00 3a 86 12 00 | 52 86 12 00 6e 86 12 00 |....:...|R...n...|
|00000330| 80 86 12 00 8e 86 12 00 | a8 86 12 00 b8 86 12 00 |........|........|
|00000340| ca 86 12 00 e4 86 12 00 | fc 86 12 00 10 87 12 00 |........|........|
|00000350| 2a 87 12 00 40 87 12 00 | 58 87 12 00 64 87 12 00 |*...@...|X...d...|
|00000360| 72 87 12 00 88 87 12 00 | 92 87 12 00 a0 87 12 00 |r.......|........|
|00000370| b0 87 12 00 ba 87 12 00 | c4 87 12 00 d8 87 12 00 |........|........|
|00000380| 00 88 12 00 1c 88 12 00 | 3a 88 12 00 54 88 12 00 |........|:...T...|
|00000390| 70 88 12 00 90 88 12 00 | a0 88 12 00 c0 88 12 00 |p.......|........|
|000003a0| 00 00 00 00 e8 88 12 00 | fe 88 12 00 12 89 12 00 |........|........|
|000003b0| 28 89 12 00 3c 89 12 00 | 60 89 12 00 74 89 12 00 |(...<...|`...t...|
|000003c0| 00 00 00 00 cc cc cc cc | 6e 74 6f 73 6b 72 6e 6c |........|ntoskrnl|
|000003d0| 2e 65 78 65 00 00 cc cc | cc cc cc cc cc cc cc cc |.exe....|........|
|000003e0| 72 00 45 78 57 69 6e 64 | 6f 77 53 74 61 74 69 6f |r.ExWind|owStatio|
|000003f0| 6e 4f 62 6a 65 63 74 54 | 79 70 65 00 eb 01 4d 6d |nObjectT|ype...Mm|
|00000400| 4d 61 70 56 69 65 77 4f | 66 53 65 63 74 69 6f 6e |MapViewO|fSection|
|00000410| 00 00 e4 03 76 73 70 72 | 69 6e 74 66 00 00 63 00 |....vspr|intf..c.|
|00000420| 45 78 52 61 69 73 65 41 | 63 63 65 73 73 56 69 6f |ExRaiseA|ccessVio|
|00000430| 6c 61 74 69 6f 6e 00 00 | 4a 00 45 78 49 6e 69 74 |lation..|J.ExInit|
|00000440| 69 61 6c 69 7a 65 52 65 | 73 6f 75 72 63 65 4c 69 |ializeRe|sourceLi|
|00000450| 74 65 00 00 6f 03 5a 77 | 46 72 65 65 56 69 72 74 |te..o.Zw|FreeVirt|
|00000460| 75 61 6c 4d 65 6d 6f 72 | 79 00 cc cc cc cc cc cc |ualMemor|y.......|
|00000470| f1 01 4d 6d 53 65 63 75 | 72 65 56 69 72 74 75 61 |..MmSecu|reVirtua|
|00000480| 6c 4d 65 6d 6f 72 79 00 | 25 03 52 74 6c 57 72 69 |lMemory.|%.RtlWri|
|00000490| 74 65 52 65 67 69 73 74 | 72 79 56 61 6c 75 65 00 |teRegist|ryValue.|
|000004a0| 9b 03 5a 77 53 65 74 56 | 61 6c 75 65 4b 65 79 00 |..ZwSetV|alueKey.|
|000004b0| 36 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |6.ExAllo|catePool|
|000004c0| 57 69 74 68 54 61 67 00 | 42 00 45 78 46 72 65 65 |WithTag.|B.ExFree|
|000004d0| 50 6f 6f 6c 00 00 d7 00 | 49 6e 74 65 72 6c 6f 63 |Pool....|Interloc|
|000004e0| 6b 65 64 45 78 63 68 61 | 6e 67 65 00 2e 00 45 78 |kedExcha|nge...Ex|
|000004f0| 41 63 71 75 69 72 65 52 | 65 73 6f 75 72 63 65 45 |AcquireR|esourceE|
|00000500| 78 63 6c 75 73 69 76 65 | 4c 69 74 65 00 00 d6 00 |xclusive|Lite....|
|00000510| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 44 65 63 72 65 |Interloc|kedDecre|
|00000520| 6d 65 6e 74 00 00 6d 00 | 45 78 52 65 6c 65 61 73 |ment..m.|ExReleas|
|00000530| 65 52 65 73 6f 75 72 63 | 65 4c 69 74 65 00 18 03 |eResourc|eLite...|
|00000540| 52 74 6c 55 6e 77 69 6e | 64 00 fd 01 4e 6c 73 41 |RtlUnwin|d...NlsA|
|00000550| 6e 73 69 43 6f 64 65 50 | 61 67 65 00 eb 02 52 74 |nsiCodeP|age...Rt|
|00000560| 6c 4e 74 53 74 61 74 75 | 73 54 6f 44 6f 73 45 72 |lNtStatu|sToDosEr|
|00000570| 72 6f 72 00 cc 02 52 74 | 6c 49 6d 61 67 65 4e 74 |ror...Rt|lImageNt|
|00000580| 48 65 61 64 65 72 00 00 | c9 01 4c 70 63 52 65 71 |Header..|..LpcReq|
|00000590| 75 65 73 74 50 6f 72 74 | 00 00 cc cc 95 02 52 74 |uestPort|......Rt|
|000005a0| 6c 43 72 65 61 74 65 48 | 65 61 70 00 26 03 52 74 |lCreateH|eap.&.Rt|
|000005b0| 6c 5a 65 72 6f 48 65 61 | 70 00 a6 02 52 74 6c 45 |lZeroHea|p...RtlE|
|000005c0| 6d 70 74 79 41 74 6f 6d | 54 61 62 6c 65 00 cc cc |mptyAtom|Table...|
|000005d0| f7 02 52 74 6c 51 75 65 | 72 79 41 74 6f 6d 49 6e |..RtlQue|ryAtomIn|
|000005e0| 41 74 6f 6d 54 61 62 6c | 65 00 9e 02 52 74 6c 44 |AtomTabl|e...RtlD|
|000005f0| 65 6c 65 74 65 41 74 6f | 6d 46 72 6f 6d 41 74 6f |eleteAto|mFromAto|
|00000600| 6d 54 61 62 6c 65 00 00 | e4 02 52 74 6c 4c 6f 6f |mTable..|..RtlLoo|
|00000610| 6b 75 70 41 74 6f 6d 49 | 6e 41 74 6f 6d 54 61 62 |kupAtomI|nAtomTab|
|00000620| 6c 65 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |le......|........|
|00000630| 66 02 50 73 53 65 74 50 | 72 6f 63 65 73 73 50 72 |f.PsSetP|rocessPr|
|00000640| 69 6f 72 69 74 79 42 79 | 43 6c 61 73 73 00 d0 01 |iorityBy|Class...|
|00000650| 4d 6d 41 64 6a 75 73 74 | 57 6f 72 6b 69 6e 67 53 |MmAdjust|WorkingS|
|00000660| 65 74 53 69 7a 65 00 00 | a3 03 5a 77 59 69 65 6c |etSize..|..ZwYiel|
|00000670| 64 45 78 65 63 75 74 69 | 6f 6e 00 00 a3 02 52 74 |dExecuti|on....Rt|
|00000680| 6c 44 65 73 74 72 6f 79 | 41 74 6f 6d 54 61 62 6c |lDestroy|AtomTabl|
|00000690| 65 00 94 02 52 74 6c 43 | 72 65 61 74 65 41 74 6f |e...RtlC|reateAto|
|000006a0| 6d 54 61 62 6c 65 00 00 | 72 02 52 74 6c 41 64 64 |mTable..|r.RtlAdd|
|000006b0| 41 74 6f 6d 54 6f 41 74 | 6f 6d 54 61 62 6c 65 00 |AtomToAt|omTable.|
|000006c0| f4 02 52 74 6c 50 69 6e | 41 74 6f 6d 49 6e 41 74 |..RtlPin|AtomInAt|
|000006d0| 6f 6d 54 61 62 6c 65 00 | 76 03 5a 77 4f 70 65 6e |omTable.|v.ZwOpen|
|000006e0| 44 69 72 65 63 74 6f 72 | 79 4f 62 6a 65 63 74 00 |Director|yObject.|
|000006f0| 39 02 4f 62 49 6e 73 65 | 72 74 4f 62 6a 65 63 74 |9.ObInse|rtObject|
|00000700| 00 00 cc cc cc cc cc cc | 2e 03 53 65 41 73 73 69 |........|..SeAssi|
|00000710| 67 6e 53 65 63 75 72 69 | 74 79 00 00 43 02 4f 62 |gnSecuri|ty..C.Ob|
|00000720| 53 65 74 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |SetSecur|ityDescr|
|00000730| 69 70 74 6f 72 49 6e 66 | 6f 00 cc cc 36 03 53 65 |iptorInf|o...6.Se|
|00000740| 44 65 61 73 73 69 67 6e | 53 65 63 75 72 69 74 79 |Deassign|Security|
|00000750| 00 00 cc cc 81 03 5a 77 | 51 75 65 72 79 44 65 66 |......Zw|QueryDef|
|00000760| 61 75 6c 74 4c 6f 63 61 | 6c 65 00 00 e7 03 77 63 |aultLoca|le....wc|
|00000770| 73 63 6d 70 00 00 cd 02 | 52 74 6c 49 6e 69 74 41 |scmp....|RtlInitA|
|00000780| 6e 73 69 53 74 72 69 6e | 67 00 77 02 52 74 6c 41 |nsiStrin|g.w.RtlA|
|00000790| 6e 73 69 53 74 72 69 6e | 67 54 6f 55 6e 69 63 6f |nsiStrin|gToUnico|
|000007a0| 64 65 53 74 72 69 6e 67 | 00 00 4b 00 45 78 49 6e |deString|..K.ExIn|
|000007b0| 69 74 69 61 6c 69 7a 65 | 5a 6f 6e 65 00 00 cc cc |itialize|Zone....|
|000007c0| 9c 03 5a 77 54 65 72 6d | 69 6e 61 74 65 50 72 6f |..ZwTerm|inatePro|
|000007d0| 63 65 73 73 00 00 32 03 | 53 65 43 61 70 74 75 72 |cess..2.|SeCaptur|
|000007e0| 65 53 75 62 6a 65 63 74 | 43 6f 6e 74 65 78 74 00 |eSubject|Context.|
|000007f0| 3c 03 53 65 4c 6f 63 6b | 53 75 62 6a 65 63 74 43 |<.SeLock|SubjectC|
|00000800| 6f 6e 74 65 78 74 00 00 | 40 03 53 65 50 72 69 76 |ontext..|@.SePriv|
|00000810| 69 6c 65 67 65 43 68 65 | 63 6b 00 00 cc cc cc cc |ilegeChe|ck......|
|00000820| 41 03 53 65 50 72 69 76 | 69 6c 65 67 65 4f 62 6a |A.SePriv|ilegeObj|
|00000830| 65 63 74 41 75 64 69 74 | 41 6c 61 72 6d 00 4e 03 |ectAudit|Alarm.N.|
|00000840| 53 65 55 6e 6c 6f 63 6b | 53 75 62 6a 65 63 74 43 |SeUnlock|SubjectC|
|00000850| 6f 6e 74 65 78 74 00 00 | 47 03 53 65 52 65 6c 65 |ontext..|G.SeRele|
|00000860| 61 73 65 53 75 62 6a 65 | 63 74 43 6f 6e 74 65 78 |aseSubje|ctContex|
|00000870| 74 00 34 03 53 65 43 72 | 65 61 74 65 41 63 63 65 |t.4.SeCr|eateAcce|
|00000880| 73 73 53 74 61 74 65 00 | cc cc cc cc cc cc cc cc |ssState.|........|
|00000890| 33 02 4f 62 43 68 65 63 | 6b 4f 62 6a 65 63 74 41 |3.ObChec|kObjectA|
|000008a0| 63 63 65 73 73 00 37 03 | 53 65 44 65 6c 65 74 65 |ccess.7.|SeDelete|
|000008b0| 41 63 63 65 73 73 53 74 | 61 74 65 00 cc cc cc cc |AccessSt|ate.....|
|000008c0| 85 03 5a 77 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |..ZwQuer|yInforma|
|000008d0| 74 69 6f 6e 54 6f 6b 65 | 6e 00 cc cc 39 03 53 65 |tionToke|n...9.Se|
|000008e0| 45 78 70 6f 72 74 73 00 | 97 02 52 74 6c 43 72 65 |Exports.|..RtlCre|
|000008f0| 61 74 65 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |ateSecur|ityDescr|
|00000900| 69 70 74 6f 72 00 93 02 | 52 74 6c 43 72 65 61 74 |iptor...|RtlCreat|
|00000910| 65 41 63 6c 00 00 71 02 | 52 74 6c 41 64 64 41 63 |eAcl..q.|RtlAddAc|
|00000920| 65 00 02 03 52 74 6c 53 | 65 74 44 61 63 6c 53 65 |e...RtlS|etDaclSe|
|00000930| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00000940| 00 00 05 03 52 74 6c 53 | 65 74 53 61 63 6c 53 65 |....RtlS|etSaclSe|
|00000950| 63 75 72 69 74 79 44 65 | 73 63 72 69 70 74 6f 72 |curityDe|scriptor|
|00000960| 00 00 04 03 52 74 6c 53 | 65 74 4f 77 6e 65 72 53 |....RtlS|etOwnerS|
|00000970| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00000980| 72 00 03 03 52 74 6c 53 | 65 74 47 72 6f 75 70 53 |r...RtlS|etGroupS|
|00000990| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|000009a0| 72 00 e3 02 52 74 6c 4c | 65 6e 67 74 68 53 69 64 |r...RtlL|engthSid|
|000009b0| 00 00 cc cc 90 02 52 74 | 6c 43 6f 70 79 53 69 64 |......Rt|lCopySid|
|000009c0| 00 00 cc cc 0f 03 52 74 | 6c 55 6e 69 63 6f 64 65 |......Rt|lUnicode|
|000009d0| 53 74 72 69 6e 67 54 6f | 41 6e 73 69 53 74 72 69 |StringTo|AnsiStri|
|000009e0| 6e 67 00 00 cc cc cc cc | d7 02 52 74 6c 49 6e 74 |ng......|..RtlInt|
|000009f0| 65 67 65 72 54 6f 43 68 | 61 72 00 00 5b 02 50 73 |egerToCh|ar..[.Ps|
|00000a00| 4c 6f 6f 6b 75 70 50 72 | 6f 63 65 73 73 42 79 50 |LookupPr|ocessByP|
|00000a10| 72 6f 63 65 73 73 49 64 | 00 00 87 03 5a 77 51 75 |rocessId|....ZwQu|
|00000a20| 65 72 79 4f 62 6a 65 63 | 74 00 cc cc cc cc cc cc |eryObjec|t.......|
|00000a30| 96 03 5a 77 53 65 74 49 | 6e 66 6f 72 6d 61 74 69 |..ZwSetI|nformati|
|00000a40| 6f 6e 4f 62 6a 65 63 74 | 00 00 cc cc cc cc cc cc |onObject|........|
|00000a50| 52 02 50 73 43 72 65 61 | 74 65 57 69 6e 33 32 50 |R.PsCrea|teWin32P|
|00000a60| 72 6f 63 65 73 73 00 00 | cc cc cc cc cc cc cc cc |rocess..|........|
|00000a70| 51 02 50 73 43 72 65 61 | 74 65 53 79 73 74 65 6d |Q.PsCrea|teSystem|
|00000a80| 54 68 72 65 61 64 00 00 | cc cc cc cc cc cc cc cc |Thread..|........|
|00000a90| cc cc cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000aa0| 5f 02 50 73 52 65 66 65 | 72 65 6e 63 65 49 6d 70 |_.PsRefe|renceImp|
|00000ab0| 65 72 73 6f 6e 61 74 69 | 6f 6e 54 6f 6b 65 6e 00 |ersonati|onToken.|
|00000ac0| 60 02 50 73 52 65 66 65 | 72 65 6e 63 65 50 72 69 |`.PsRefe|rencePri|
|00000ad0| 6d 61 72 79 54 6f 6b 65 | 6e 00 43 03 53 65 51 75 |maryToke|n.C.SeQu|
|00000ae0| 65 72 79 41 75 74 68 65 | 6e 74 69 63 61 74 69 6f |eryAuthe|nticatio|
|00000af0| 6e 49 64 54 6f 6b 65 6e | 00 00 7f 03 5a 77 4f 70 |nIdToken|....ZwOp|
|00000b00| 65 6e 54 68 72 65 61 64 | 54 6f 6b 65 6e 00 cc cc |enThread|Token...|
|00000b10| 7b 03 5a 77 4f 70 65 6e | 50 72 6f 63 65 73 73 54 |{.ZwOpen|ProcessT|
|00000b20| 6f 6b 65 6e 00 00 bb 02 | 52 74 6c 46 69 6e 64 4d |oken....|RtlFindM|
|00000b30| 65 73 73 61 67 65 00 00 | bf 02 52 74 6c 46 6f 72 |essage..|..RtlFor|
|00000b40| 6d 61 74 43 75 72 72 65 | 6e 74 55 73 65 72 4b 65 |matCurre|ntUserKe|
|00000b50| 79 50 61 74 68 00 cc cc | c3 02 52 74 6c 46 72 65 |yPath...|..RtlFre|
|00000b60| 65 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |eUnicode|String..|
|00000b70| 77 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 54 69 |w.KeInit|ializeTi|
|00000b80| 6d 65 72 00 cc cc cc cc | cc cc cc cc cc cc cc cc |mer.....|........|
|00000b90| 5f 03 5a 77 43 72 65 61 | 74 65 45 76 65 6e 74 00 |_.ZwCrea|teEvent.|
|00000ba0| ae 01 4b 65 53 65 74 54 | 69 6d 65 72 00 00 67 03 |..KeSetT|imer..g.|
|00000bb0| 5a 77 44 65 76 69 63 65 | 49 6f 43 6f 6e 74 72 6f |ZwDevice|IoContro|
|00000bc0| 6c 46 69 6c 65 00 7c 02 | 52 74 6c 41 72 65 41 6c |lFile.|.|RtlAreAl|
|00000bd0| 6c 41 63 63 65 73 73 65 | 73 47 72 61 6e 74 65 64 |lAccesse|sGranted|
|00000be0| 00 00 cc cc cc cc cc cc | b5 01 4b 65 55 73 65 72 |........|..KeUser|
|00000bf0| 4d 6f 64 65 43 61 6c 6c | 62 61 63 6b 00 00 7a 02 |ModeCall|back..z.|
|00000c00| 52 74 6c 41 70 70 65 6e | 64 55 6e 69 63 6f 64 65 |RtlAppen|dUnicode|
|00000c10| 53 74 72 69 6e 67 54 6f | 53 74 72 69 6e 67 00 00 |StringTo|String..|
|00000c20| 92 02 52 74 6c 43 6f 70 | 79 55 6e 69 63 6f 64 65 |..RtlCop|yUnicode|
|00000c30| 53 74 72 69 6e 67 00 00 | d1 02 52 74 6c 49 6e 69 |String..|..RtlIni|
|00000c40| 74 69 61 6c 69 7a 65 42 | 69 74 4d 61 70 00 01 03 |tializeB|itMap...|
|00000c50| 52 74 6c 53 65 74 42 69 | 74 73 00 00 85 02 52 74 |RtlSetBi|ts....Rt|
|00000c60| 6c 43 6c 65 61 72 42 69 | 74 73 00 00 5d 02 50 73 |lClearBi|ts..].Ps|
|00000c70| 4c 6f 6f 6b 75 70 54 68 | 72 65 61 64 42 79 54 68 |LookupTh|readByTh|
|00000c80| 72 65 61 64 49 64 00 00 | 5d 00 45 78 49 73 52 65 |readId..|].ExIsRe|
|00000c90| 73 6f 75 72 63 65 41 63 | 71 75 69 72 65 64 53 68 |sourceAc|quiredSh|
|00000ca0| 61 72 65 64 4c 69 74 65 | 00 00 cc cc 36 02 4f 62 |aredLite|....6.Ob|
|00000cb0| 46 69 6e 64 48 61 6e 64 | 6c 65 46 6f 72 4f 62 6a |FindHand|leForObj|
|00000cc0| 65 63 74 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ect.....|........|
|00000cd0| 69 03 5a 77 44 75 70 6c | 69 63 61 74 65 4f 62 6a |i.ZwDupl|icateObj|
|00000ce0| 65 63 74 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ect.....|........|
|00000cf0| 85 01 4b 65 50 75 6c 73 | 65 45 76 65 6e 74 00 00 |..KePuls|eEvent..|
|00000d00| fb 01 4d 6d 55 6e 6d 61 | 70 56 69 65 77 4f 66 53 |..MmUnma|pViewOfS|
|00000d10| 65 63 74 69 6f 6e 00 00 | 3b 02 4f 62 4f 70 65 6e |ection..|;.ObOpen|
|00000d20| 4f 62 6a 65 63 74 42 79 | 4e 61 6d 65 00 00 32 02 |ObjectBy|Name..2.|
|00000d30| 4f 62 43 68 65 63 6b 43 | 72 65 61 74 65 4f 62 6a |ObCheckC|reateObj|
|00000d40| 65 63 74 41 63 63 65 73 | 73 00 cc cc 34 02 4f 62 |ectAcces|s...4.Ob|
|00000d50| 43 72 65 61 74 65 4f 62 | 6a 65 63 74 00 00 cc cc |CreateOb|ject....|
|00000d60| 31 02 4f 62 41 73 73 69 | 67 6e 53 65 63 75 72 69 |1.ObAssi|gnSecuri|
|00000d70| 74 79 00 00 74 02 52 74 | 6c 41 6c 6c 6f 63 61 74 |ty..t.Rt|lAllocat|
|00000d80| 65 48 65 61 70 00 e6 02 | 52 74 6c 4d 61 70 47 65 |eHeap...|RtlMapGe|
|00000d90| 6e 65 72 69 63 4d 61 73 | 6b 00 cc cc cc cc cc cc |nericMas|k.......|
|00000da0| 98 03 5a 77 53 65 74 49 | 6e 66 6f 72 6d 61 74 69 |..ZwSetI|nformati|
|00000db0| 6f 6e 54 68 72 65 61 64 | 00 00 cc cc 40 00 45 78 |onThread|....@.Ex|
|00000dc0| 45 76 65 6e 74 4f 62 6a | 65 63 74 54 79 70 65 00 |EventObj|ectType.|
|00000dd0| 41 02 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |A.ObRefe|renceObj|
|00000de0| 65 63 74 42 79 50 6f 69 | 6e 74 65 72 00 00 cc cc |ectByPoi|nter....|
|00000df0| 67 02 50 73 54 65 72 6d | 69 6e 61 74 65 53 79 73 |g.PsTerm|inateSys|
|00000e00| 74 65 6d 54 68 72 65 61 | 64 00 c1 02 52 74 6c 46 |temThrea|d...RtlF|
|00000e10| 72 65 65 48 65 61 70 00 | 2f 00 45 78 41 63 71 75 |reeHeap.|/.ExAcqu|
|00000e20| 69 72 65 52 65 73 6f 75 | 72 63 65 53 68 61 72 65 |ireResou|rceShare|
|00000e30| 64 4c 69 74 65 00 cc cc | cc cc cc cc cc cc cc cc |dLite...|........|
|00000e40| 50 01 4b 65 42 6f 6f 73 | 74 43 75 72 72 65 6e 74 |P.KeBoos|tCurrent|
|00000e50| 54 68 72 65 61 64 00 00 | cc cc cc cc cc cc cc cc |Thread..|........|
|00000e60| 52 01 4b 65 42 75 67 43 | 68 65 63 6b 45 78 00 00 |R.KeBugC|heckEx..|
|00000e70| 5c 00 45 78 49 73 52 65 | 73 6f 75 72 63 65 41 63 |\.ExIsRe|sourceAc|
|00000e80| 71 75 69 72 65 64 45 78 | 63 6c 75 73 69 76 65 4c |quiredEx|clusiveL|
|00000e90| 69 74 65 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ite.....|........|
|00000ea0| b6 01 4b 65 57 61 69 74 | 46 6f 72 4d 75 6c 74 69 |..KeWait|ForMulti|
|00000eb0| 70 6c 65 4f 62 6a 65 63 | 74 73 00 00 64 00 45 78 |pleObjec|ts..d.Ex|
|00000ec0| 52 61 69 73 65 44 61 74 | 61 74 79 70 65 4d 69 73 |RaiseDat|atypeMis|
|00000ed0| 61 6c 69 67 6e 6d 65 6e | 74 00 cc cc cc cc cc cc |alignmen|t.......|
|00000ee0| 5e 03 5a 77 43 72 65 61 | 74 65 44 69 72 65 63 74 |^.ZwCrea|teDirect|
|00000ef0| 6f 72 79 4f 62 6a 65 63 | 74 00 cc cc 66 00 45 78 |oryObjec|t...f.Ex|
|00000f00| 52 61 69 73 65 48 61 72 | 64 45 72 72 6f 72 00 00 |RaiseHar|dError..|
|00000f10| d8 02 52 74 6c 49 6e 74 | 65 67 65 72 54 6f 55 6e |..RtlInt|egerToUn|
|00000f20| 69 63 6f 64 65 53 74 72 | 69 6e 67 00 0d 01 49 6f |icodeStr|ing...Io|
|00000f30| 47 65 74 44 65 76 69 63 | 65 4f 62 6a 65 63 74 50 |GetDevic|eObjectP|
|00000f40| 6f 69 6e 74 65 72 00 00 | 98 02 52 74 6c 43 72 65 |ointer..|..RtlCre|
|00000f50| 61 74 65 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |ateUnico|deString|
|00000f60| 00 00 2a 00 44 62 67 50 | 72 69 6e 74 00 00 3c 00 |..*.DbgP|rint..<.|
|00000f70| 45 78 44 65 6c 65 74 65 | 52 65 73 6f 75 72 63 65 |ExDelete|Resource|
|00000f80| 4c 69 74 65 00 00 cc cc | f0 03 77 63 73 73 74 72 |Lite....|..wcsstr|
|00000f90| 00 00 e6 03 77 63 73 63 | 68 72 00 00 cc cc cc cc |....wcsc|hr......|
|00000fa0| 61 03 5a 77 43 72 65 61 | 74 65 4b 65 79 00 ec 03 |a.ZwCrea|teKey...|
|00000fb0| 77 63 73 6e 63 6d 70 00 | 0b 01 49 6f 47 65 74 43 |wcsncmp.|..IoGetC|
|00000fc0| 6f 6e 66 69 67 75 72 61 | 74 69 6f 6e 49 6e 66 6f |onfigura|tionInfo|
|00000fd0| 72 6d 61 74 69 6f 6e 00 | f8 00 49 6f 43 72 65 61 |rmation.|..IoCrea|
|00000fe0| 74 65 53 79 6e 63 68 72 | 6f 6e 69 7a 61 74 69 6f |teSynchr|onizatio|
|00000ff0| 6e 45 76 65 6e 74 00 00 | 7d 03 5a 77 4f 70 65 6e |nEvent..|}.ZwOpen|
|00001000| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 4f 62 6a 65 |Symbolic|LinkObje|
|00001010| 63 74 00 00 7d 02 52 74 | 6c 41 72 65 41 6e 79 41 |ct..}.Rt|lAreAnyA|
|00001020| 63 63 65 73 73 65 73 47 | 72 61 6e 74 65 64 00 00 |ccessesG|ranted..|
|00001030| 46 01 4b 64 44 65 62 75 | 67 67 65 72 45 6e 61 62 |F.KdDebu|ggerEnab|
|00001040| 6c 65 64 00 cc cc cc cc | cc cc cc cc cc cc cc cc |led.....|........|
|00001050| 28 00 44 62 67 42 72 65 | 61 6b 50 6f 69 6e 74 57 |(.DbgBre|akPointW|
|00001060| 69 74 68 53 74 61 74 75 | 73 00 cc cc cc cc cc cc |ithStatu|s.......|
|00001070| 67 00 45 78 52 61 69 73 | 65 53 74 61 74 75 73 00 |g.ExRais|eStatus.|
|00001080| 3d 00 45 78 44 65 73 6b | 74 6f 70 4f 62 6a 65 63 |=.ExDesk|topObjec|
|00001090| 74 54 79 70 65 00 cc cc | 31 03 53 65 43 61 70 74 |tType...|1.SeCapt|
|000010a0| 75 72 65 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |ureSecur|ityDescr|
|000010b0| 69 70 74 6f 72 00 46 03 | 53 65 52 65 6c 65 61 73 |iptor.F.|SeReleas|
|000010c0| 65 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |eSecurit|yDescrip|
|000010d0| 74 6f 72 00 cc cc cc cc | cc cc cc cc cc cc cc cc |tor.....|........|
|000010e0| 35 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |5.ExAllo|catePool|
|000010f0| 57 69 74 68 51 75 6f 74 | 61 54 61 67 00 00 93 03 |WithQuot|aTag....|
|00001100| 5a 77 53 65 74 44 65 66 | 61 75 6c 74 4c 6f 63 61 |ZwSetDef|aultLoca|
|00001110| 6c 65 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |le......|........|
|00001120| 4e 01 4b 65 41 64 64 53 | 79 73 74 65 6d 53 65 72 |N.KeAddS|ystemSer|
|00001130| 76 69 63 65 54 61 62 6c | 65 00 cc cc 53 02 50 73 |viceTabl|e...S.Ps|
|00001140| 45 73 74 61 62 6c 69 73 | 68 57 69 6e 33 32 43 61 |Establis|hWin32Ca|
|00001150| 6c 6c 6f 75 74 73 00 00 | ec 01 4d 6d 50 61 67 65 |llouts..|..MmPage|
|00001160| 45 6e 74 69 72 65 44 72 | 69 76 65 72 00 00 cc cc |EntireDr|iver....|
|00001170| d5 03 73 74 72 63 68 72 | 00 00 db 03 73 74 72 6e |..strchr|....strn|
|00001180| 63 70 79 00 cc cc cc cc | e5 03 77 63 73 63 61 74 |cpy.....|..wcscat|
|00001190| 00 00 cc cc 16 03 52 74 | 6c 55 6e 69 63 6f 64 65 |......Rt|lUnicode|
|000011a0| 54 6f 4d 75 6c 74 69 42 | 79 74 65 53 69 7a 65 00 |ToMultiB|yteSize.|
|000011b0| a9 02 52 74 6c 45 6e 6c | 61 72 67 65 64 55 6e 73 |..RtlEnl|argedUns|
|000011c0| 69 67 6e 65 64 4d 75 6c | 74 69 70 6c 79 00 cc cc |ignedMul|tiply...|
|000011d0| da 02 52 74 6c 4c 61 72 | 67 65 49 6e 74 65 67 65 |..RtlLar|geIntege|
|000011e0| 72 41 64 64 00 00 cc cc | a8 02 52 74 6c 45 6e 6c |rAdd....|..RtlEnl|
|000011f0| 61 72 67 65 64 55 6e 73 | 69 67 6e 65 64 44 69 76 |argedUns|ignedDiv|
|00001200| 69 64 65 00 b1 02 52 74 | 6c 45 78 74 65 6e 64 65 |ide...Rt|lExtende|
|00001210| 64 4c 61 72 67 65 49 6e | 74 65 67 65 72 44 69 76 |dLargeIn|tegerDiv|
|00001220| 69 64 65 00 cc cc cc cc | bc 03 5f 77 63 73 69 63 |ide.....|.._wcsic|
|00001230| 6d 70 00 00 1a 03 52 74 | 6c 55 70 63 61 73 65 55 |mp....Rt|lUpcaseU|
|00001240| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 cc cc |nicodeSt|ring....|
|00001250| f8 02 52 74 6c 51 75 65 | 72 79 52 65 67 69 73 74 |..RtlQue|ryRegist|
|00001260| 72 79 56 61 6c 75 65 73 | 00 00 cc cc af 02 52 74 |ryValues|......Rt|
|00001270| 6c 45 71 75 61 6c 55 6e | 69 63 6f 64 65 53 74 72 |lEqualUn|icodeStr|
|00001280| 69 6e 67 00 99 03 5a 77 | 53 65 74 53 79 73 74 65 |ing...Zw|SetSyste|
|00001290| 6d 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 00 00 3c 02 |mInforma|tion..<.|
|000012a0| 4f 62 4f 70 65 6e 4f 62 | 6a 65 63 74 42 79 50 6f |ObOpenOb|jectByPo|
|000012b0| 69 6e 74 65 72 00 cc cc | ed 03 77 63 73 6e 63 70 |inter...|..wcsncp|
|000012c0| 79 00 cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |y.......|........|
|000012d0| 15 02 4e 74 47 6c 6f 62 | 61 6c 46 6c 61 67 00 00 |..NtGlob|alFlag..|
|000012e0| 62 03 5a 77 43 72 65 61 | 74 65 53 65 63 74 69 6f |b.ZwCrea|teSectio|
|000012f0| 6e 00 3f 02 4f 62 52 65 | 66 65 72 65 6e 63 65 4f |n.?.ObRe|ferenceO|
|00001300| 62 6a 65 63 74 42 79 48 | 61 6e 64 6c 65 00 cc cc |bjectByH|andle...|
|00001310| 4f 01 4b 65 41 74 74 61 | 63 68 50 72 6f 63 65 73 |O.KeAtta|chProces|
|00001320| 73 00 59 01 4b 65 44 65 | 74 61 63 68 50 72 6f 63 |s.Y.KeDe|tachProc|
|00001330| 65 73 73 00 7a 03 5a 77 | 4f 70 65 6e 50 72 6f 63 |ess.z.Zw|OpenProc|
|00001340| 65 73 73 00 cc cc cc cc | cc cc cc cc cc cc cc cc |ess.....|........|
|00001350| d5 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 43 6f 6d |..Interl|ockedCom|
|00001360| 70 61 72 65 45 78 63 68 | 61 6e 67 65 00 00 74 03 |pareExch|ange..t.|
|00001370| 5a 77 4d 61 70 56 69 65 | 77 4f 66 53 65 63 74 69 |ZwMapVie|wOfSecti|
|00001380| 6f 6e 00 00 9f 03 5a 77 | 55 6e 6d 61 70 56 69 65 |on....Zw|UnmapVie|
|00001390| 77 4f 66 53 65 63 74 69 | 6f 6e 00 00 b4 02 52 74 |wOfSecti|on....Rt|
|000013a0| 6c 46 69 6c 6c 4d 65 6d | 6f 72 79 55 6c 6f 6e 67 |lFillMem|oryUlong|
|000013b0| 00 00 95 03 5a 77 53 65 | 74 49 6e 66 6f 72 6d 61 |....ZwSe|tInforma|
|000013c0| 74 69 6f 6e 46 69 6c 65 | 00 00 57 01 4b 65 44 65 |tionFile|..W.KeDe|
|000013d0| 6c 61 79 45 78 65 63 75 | 74 69 6f 6e 54 68 72 65 |layExecu|tionThre|
|000013e0| 61 64 00 00 35 03 53 65 | 43 72 65 61 74 65 43 6c |ad..5.Se|CreateCl|
|000013f0| 69 65 6e 74 53 65 63 75 | 72 69 74 79 00 00 3b 03 |ientSecu|rity..;.|
|00001400| 53 65 49 6d 70 65 72 73 | 6f 6e 61 74 65 43 6c 69 |SeImpers|onateCli|
|00001410| 65 6e 74 00 62 02 50 73 | 52 65 76 65 72 74 54 6f |ent.b.Ps|RevertTo|
|00001420| 53 65 6c 66 00 00 4d 03 | 53 65 54 6f 6b 65 6e 54 |Self..M.|SeTokenT|
|00001430| 79 70 65 00 b8 01 4b 65 | 57 61 69 74 46 6f 72 53 |ype...Ke|WaitForS|
|00001440| 69 6e 67 6c 65 4f 62 6a | 65 63 74 00 cc cc cc cc |ingleObj|ect.....|
|00001450| a2 01 4b 65 53 65 74 45 | 76 65 6e 74 00 00 cc cc |..KeSetE|vent....|
|00001460| d9 00 49 6e 74 65 72 6c | 6f 63 6b 65 64 49 6e 63 |..Interl|ockedInc|
|00001470| 72 65 6d 65 6e 74 00 00 | 8e 03 5a 77 52 65 61 64 |rement..|..ZwRead|
|00001480| 46 69 6c 65 00 00 ce 02 | 52 74 6c 49 6e 69 74 43 |File....|RtlInitC|
|00001490| 6f 64 65 50 61 67 65 54 | 61 62 6c 65 00 00 99 02 |odePageT|able....|
|000014a0| 52 74 6c 43 75 73 74 6f | 6d 43 50 54 6f 55 6e 69 |RtlCusto|mCPToUni|
|000014b0| 63 6f 64 65 4e 00 14 03 | 52 74 6c 55 6e 69 63 6f |codeN...|RtlUnico|
|000014c0| 64 65 54 6f 43 75 73 74 | 6f 6d 43 50 4e 00 cc cc |deToCust|omCPN...|
|000014d0| 8c 03 5a 77 51 75 65 72 | 79 56 61 6c 75 65 4b 65 |..ZwQuer|yValueKe|
|000014e0| 79 00 cc cc df 03 73 77 | 70 72 69 6e 74 66 00 00 |y.....sw|printf..|
|000014f0| 11 03 52 74 6c 55 6e 69 | 63 6f 64 65 53 74 72 69 |..RtlUni|codeStri|
|00001500| 6e 67 54 6f 49 6e 74 65 | 67 65 72 00 c8 01 4c 64 |ngToInte|ger...Ld|
|00001510| 72 46 69 6e 64 52 65 73 | 6f 75 72 63 65 5f 55 00 |rFindRes|ource_U.|
|00001520| c5 01 4c 64 72 41 63 63 | 65 73 73 52 65 73 6f 75 |..LdrAcc|essResou|
|00001530| 72 63 65 00 be 03 5f 77 | 63 73 6e 69 63 6d 70 00 |rce..._w|csnicmp.|
|00001540| 7b 02 52 74 6c 41 70 70 | 65 6e 64 55 6e 69 63 6f |{.RtlApp|endUnico|
|00001550| 64 65 54 6f 53 74 72 69 | 6e 67 00 00 c7 01 4c 64 |deToStri|ng....Ld|
|00001560| 72 46 69 6e 64 52 65 73 | 6f 75 72 63 65 44 69 72 |rFindRes|ourceDir|
|00001570| 65 63 74 6f 72 79 5f 55 | 00 00 c8 02 52 74 6c 47 |ectory_U|....RtlG|
|00001580| 65 74 44 65 66 61 75 6c | 74 43 6f 64 65 50 61 67 |etDefaul|tCodePag|
|00001590| 65 00 fa 01 4d 6d 55 6e | 6d 61 70 56 69 65 77 49 |e...MmUn|mapViewI|
|000015a0| 6e 53 79 73 74 65 6d 53 | 70 61 63 65 00 00 60 03 |nSystemS|pace..`.|
|000015b0| 5a 77 43 72 65 61 74 65 | 46 69 6c 65 00 00 cc cc |ZwCreate|File....|
|000015c0| 78 03 5a 77 4f 70 65 6e | 46 69 6c 65 00 00 83 03 |x.ZwOpen|File....|
|000015d0| 5a 77 51 75 65 72 79 49 | 6e 66 6f 72 6d 61 74 69 |ZwQueryI|nformati|
|000015e0| 6f 6e 46 69 6c 65 00 00 | 4d 02 50 72 6f 62 65 46 |onFile..|M.ProbeF|
|000015f0| 6f 72 57 72 69 74 65 00 | d6 01 4d 6d 43 72 65 61 |orWrite.|..MmCrea|
|00001600| 74 65 53 65 63 74 69 6f | 6e 00 ea 01 4d 6d 4d 61 |teSectio|n...MmMa|
|00001610| 70 56 69 65 77 49 6e 53 | 79 73 74 65 6d 53 70 61 |pViewInS|ystemSpa|
|00001620| 63 65 00 00 44 02 4f 62 | 66 44 65 72 65 66 65 72 |ce..D.Ob|fDerefer|
|00001630| 65 6e 63 65 4f 62 6a 65 | 63 74 00 00 86 01 4b 65 |enceObje|ct....Ke|
|00001640| 51 75 65 72 79 53 79 73 | 74 65 6d 54 69 6d 65 00 |QuerySys|temTime.|
|00001650| 70 00 45 78 53 79 73 74 | 65 6d 54 69 6d 65 54 6f |p.ExSyst|emTimeTo|
|00001660| 4c 6f 63 61 6c 54 69 6d | 65 00 0d 03 52 74 6c 54 |LocalTim|e...RtlT|
|00001670| 69 6d 65 54 6f 54 69 6d | 65 46 69 65 6c 64 73 00 |imeToTim|eFields.|
|00001680| d0 02 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|00001690| 53 74 72 69 6e 67 00 00 | 79 03 5a 77 4f 70 65 6e |String..|y.ZwOpen|
|000016a0| 4b 65 79 00 86 03 5a 77 | 51 75 65 72 79 4b 65 79 |Key...Zw|QueryKey|
|000016b0| 00 00 6c 03 5a 77 45 6e | 75 6d 65 72 61 74 65 56 |..l.ZwEn|umerateV|
|000016c0| 61 6c 75 65 4b 65 79 00 | e8 03 77 63 73 63 70 79 |alueKey.|..wcscpy|
|000016d0| 00 00 5b 03 5a 77 43 6c | 6f 73 65 00 cc cc cc cc |..[.ZwCl|ose.....|
|000016e0| da 03 73 74 72 6e 63 6d | 70 00 cc cc cc cc cc cc |..strncm|p.......|
|000016f0| ea 03 77 63 73 6c 65 6e | 00 00 ce 03 6d 65 6d 6d |..wcslen|....memm|
|00001700| 6f 76 65 00 de 01 4d 6d | 47 72 6f 77 4b 65 72 6e |ove...Mm|GrowKern|
|00001710| 65 6c 53 74 61 63 6b 00 | a6 01 4b 65 53 65 74 4b |elStack.|..KeSetK|
|00001720| 65 72 6e 65 6c 53 74 61 | 63 6b 53 77 61 70 45 6e |ernelSta|ckSwapEn|
|00001730| 61 62 6c 65 00 00 cc cc | cc cc cc cc cc cc cc cc |able....|........|
|00001740| 9d 01 4b 65 53 61 76 65 | 46 6c 6f 61 74 69 6e 67 |..KeSave|Floating|
|00001750| 50 6f 69 6e 74 53 74 61 | 74 65 00 00 9b 01 4b 65 |PointSta|te....Ke|
|00001760| 52 65 73 74 6f 72 65 46 | 6c 6f 61 74 69 6e 67 50 |RestoreF|loatingP|
|00001770| 6f 69 6e 74 53 74 61 74 | 65 00 15 03 52 74 6c 55 |ointStat|e...RtlU|
|00001780| 6e 69 63 6f 64 65 54 6f | 4d 75 6c 74 69 42 79 74 |nicodeTo|MultiByt|
|00001790| 65 4e 00 00 e8 02 52 74 | 6c 4d 75 6c 74 69 42 79 |eN....Rt|lMultiBy|
|000017a0| 74 65 54 6f 55 6e 69 63 | 6f 64 65 4e 00 00 cc cc |teToUnic|odeN....|
|000017b0| e7 00 49 6f 42 75 69 6c | 64 44 65 76 69 63 65 49 |..IoBuil|dDeviceI|
|000017c0| 6f 43 6f 6e 74 72 6f 6c | 52 65 71 75 65 73 74 00 |oControl|Request.|
|000017d0| 44 01 49 6f 66 43 61 6c | 6c 44 72 69 76 65 72 00 |D.IofCal|lDriver.|
|000017e0| fc 01 4d 6d 55 6e 73 65 | 63 75 72 65 56 69 72 74 |..MmUnse|cureVirt|
|000017f0| 75 61 6c 4d 65 6d 6f 72 | 79 00 cc cc cc cc cc cc |ualMemor|y.......|
|00001800| 59 03 5a 77 41 6c 6c 6f | 63 61 74 65 56 69 72 74 |Y.ZwAllo|cateVirt|
|00001810| 75 61 6c 4d 65 6d 6f 72 | 79 00 cc cc cc cc cc cc |ualMemor|y.......|
|00001820| 48 41 4c 2e 64 6c 6c 00 | 01 00 45 78 52 65 6c 65 |HAL.dll.|..ExRele|
|00001830| 61 73 65 46 61 73 74 4d | 75 74 65 78 00 00 59 00 |aseFastM|utex..Y.|
|00001840| 57 52 49 54 45 5f 50 4f | 52 54 5f 55 53 48 4f 52 |WRITE_PO|RT_USHOR|
|00001850| 54 00 00 00 45 78 41 63 | 71 75 69 72 65 46 61 73 |T...ExAc|quireFas|
|00001860| 74 4d 75 74 65 78 00 00 | 57 00 57 52 49 54 45 5f |tMutex..|W.WRITE_|
|00001870| 50 4f 52 54 5f 55 43 48 | 41 52 00 00 22 00 48 61 |PORT_UCH|AR..".Ha|
|00001880| 6c 52 65 71 75 65 73 74 | 53 6f 66 74 77 61 72 65 |lRequest|Software|
|00001890| 49 6e 74 65 72 72 75 70 | 74 00 cc cc cc cc cc cc |Interrup|t.......|
|000018a0| 51 00 52 45 41 44 5f 50 | 4f 52 54 5f 55 43 48 41 |Q.READ_P|ORT_UCHA|
|000018b0| 52 00 cc cc 44 00 4b 65 | 51 75 65 72 79 50 65 72 |R...D.Ke|QueryPer|
|000018c0| 66 6f 72 6d 61 6e 63 65 | 43 6f 75 6e 74 65 72 00 |formance|Counter.|
|000018d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+