home *** CD-ROM | disk | FTP | other *** search
Unknown | 2002-08-29 | 7.9 KB |
open in:
MacOS 8.1
|
Win98
|
DOS
view JSON data
|
view as text
This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence | Program | Detection | Match Type | Support
|
---|
100%
| file
| data
| default
| |
100%
| gt2
| Kopftext: 'rdpdr.sys erroring out ('
| default (weak)
|
|
hex view+--------+-------------------------+-------------------------+--------+--------+
|00000000| 72 64 70 64 72 2e 73 79 | 73 20 65 72 72 6f 72 69 |rdpdr.sy|s errori|
|00000010| 6e 67 20 6f 75 74 20 28 | 23 31 29 0a 00 00 00 00 |ng out (|#1).....|
|00000020| 72 64 70 64 72 2e 73 79 | 73 20 65 72 72 6f 72 69 |rdpdr.sy|s errori|
|00000030| 6e 67 20 6f 75 74 20 28 | 23 32 29 0a 00 00 00 00 |ng out (|#2).....|
|00000040| 72 64 70 64 72 2e 73 79 | 73 20 65 72 72 6f 72 69 |rdpdr.sy|s errori|
|00000050| 6e 67 20 6f 75 74 20 28 | 23 33 29 0a 00 00 00 00 |ng out (|#3).....|
|00000060| 72 64 70 64 72 2e 73 79 | 73 20 65 72 72 6f 72 69 |rdpdr.sy|s errori|
|00000070| 6e 67 20 6f 75 74 20 28 | 23 35 29 0a 00 00 00 00 |ng out (|#5).....|
|00000080| 72 64 70 64 72 2e 73 79 | 73 20 65 72 72 6f 72 69 |rdpdr.sy|s errori|
|00000090| 6e 67 20 6f 75 74 20 28 | 23 34 29 0a 00 00 00 00 |ng out (|#4).....|
|000000a0| 72 64 70 64 72 2e 73 79 | 73 20 65 72 72 6f 72 69 |rdpdr.sy|s errori|
|000000b0| 6e 67 20 6f 75 74 20 28 | 23 37 29 0a 00 00 00 00 |ng out (|#7).....|
|000000c0| 72 64 70 64 72 2e 73 79 | 73 20 65 72 72 6f 72 69 |rdpdr.sy|s errori|
|000000d0| 6e 67 20 6f 75 74 20 28 | 23 38 29 0a 00 00 00 00 |ng out (|#8).....|
|000000e0| 72 64 70 64 72 2e 73 79 | 73 20 65 72 72 6f 72 69 |rdpdr.sy|s errori|
|000000f0| 6e 67 20 6f 75 74 20 28 | 23 36 29 0a 00 55 8b ec |ng out (|#6)..U..|
|00000100| 83 ec 10 53 56 8b 75 0c | 57 56 ff 75 08 e8 c8 03 |...SV.u.|WV.u....|
|00000110| 00 00 8b f8 33 db 3b fb | 7d 0c 68 00 80 03 00 e8 |....3.;.|}.h.....|
|00000120| fc 36 fe ff eb 2c 0f b7 | 06 68 44 72 44 72 8d 44 |.6...,..|.hDrDr.D|
|00000130| 00 02 50 53 ff 15 a8 0f | 02 00 8b f8 3b fb 89 7d |..PS....|....;..}|
|00000140| 0c 75 1c 68 20 80 03 00 | e8 d3 36 fe ff bf 9a 00 |.u.h ...|..6.....|
|00000150| 00 c0 59 e8 c2 36 fe ff | 8b c7 e9 a4 00 00 00 0f |..Y..6..|........|
|00000160| b7 0e 41 41 8b d1 c1 e9 | 02 33 c0 f3 ab 8b ca 83 |..AA....|.3......|
|00000170| e1 03 f3 aa 0f b7 06 8b | 7d 0c 50 ff 76 04 57 ff |........|}.P.v.W.|
|00000180| 15 6c 0c 02 00 66 8b 06 | 66 a3 90 20 02 00 66 8b |.l...f..|f.. ..f.|
|00000190| 06 66 05 02 00 83 c4 0c | 66 a3 92 20 02 00 89 3d |.f......|f.. ...=|
|000001a0| 94 20 02 00 e8 b9 31 fe | ff 68 bc 20 02 00 ff 15 |. ....1.|.h. ....|
|000001b0| 90 0c 02 00 33 c0 40 53 | 50 68 a4 20 02 00 a3 98 |....3.@S|Ph. ....|
|000001c0| 20 02 00 89 1d 9c 20 02 | 00 89 1d a0 20 02 00 ff | ..... .|.... ...|
|000001d0| 15 8c 0c 02 00 e8 4c 31 | fe ff 85 c0 75 2c 68 40 |......L1|....u,h@|
|000001e0| 80 03 00 e8 38 36 fe ff | 59 e8 2c 36 fe ff 68 60 |....86..|Y.,6..h`|
|000001f0| 80 03 00 e8 28 36 fe ff | 59 e8 1c 36 fe ff b8 9a |....(6..|Y..6....|
|00000200| 00 00 c0 5f 5e 5b c9 c2 | 08 00 68 54 4f 42 4a 6a |..._^[..|..hTOBJj|
|00000210| 64 53 ff 15 a8 0f 02 00 | 3b c3 74 09 8b c8 e8 61 |dS......|;.t....a|
|00000220| fb fd ff eb 02 33 c0 3b | c3 a3 f4 21 02 00 75 07 |.....3.;|...!..u.|
|00000230| 68 80 80 03 00 eb ac 8b | 35 88 0c 02 00 68 a0 1c |h.......|5....h..|
|00000240| 02 00 8d 45 f8 50 ff d6 | 8b 7d 08 68 f0 21 02 00 |...E.P..|.}.h.!..|
|00000250| 53 53 6a 28 8d 45 f8 50 | 53 57 ff 15 84 0c 02 00 |SSj(.E.P|SW......|
|00000260| 3b c3 89 45 08 0f 8c 9d | 00 00 00 68 84 1c 02 00 |;..E....|...h....|
|00000270| 8d 45 f0 50 ff d6 53 6a | 14 53 8d 45 f0 50 6a 02 |.E.P..Sj|.S.E.Pj.|
|00000280| 68 c0 20 02 00 57 68 ec | 21 02 00 e8 f0 ab fe ff |h. ..Wh.|!.......|
|00000290| 3b c3 89 45 08 7c 71 e8 | fa a7 fd ff 8b f0 3b f3 |;..E.|q.|......;.|
|000002a0| 7c 09 e8 4d ae fd ff 8b | f0 eb 10 68 a0 80 03 00 ||..M....|...h....|
|000002b0| e8 6b 35 fe ff 59 e8 5f | 35 fe ff 3b f3 7c 2a 8b |.k5..Y._|5..;.|*.|
|000002c0| 47 18 c7 47 34 4e 2c 01 | 00 c7 40 04 2c 5e 01 00 |G..G4N,.|..@.,^..|
|000002d0| 6a 1c 83 c7 38 59 b8 98 | 28 01 00 f3 ab e8 32 35 |j...8Y..|(.....25|
|000002e0| fe ff a3 e4 21 02 00 eb | 18 68 c0 80 03 00 e8 2d |....!...|.h.....-|
|000002f0| 35 fe ff 59 e8 21 35 fe | ff 6a 01 57 e8 9b a8 fd |5..Y.!5.|.j.W....|
|00000300| ff 8b c6 e9 fb fe ff ff | 68 e0 80 03 00 e8 0e 35 |........|h......5|
|00000310| fe ff 59 e8 02 35 fe ff | a1 f0 21 02 00 3b c3 74 |..Y..5..|..!..;.t|
|00000320| 0d 50 ff 15 7c 0c 02 00 | 89 1d f0 21 02 00 8b 45 |.P..|...|...!...E|
|00000330| 08 e9 cd fe ff ff 8b 54 | 24 04 57 6a 1b 8d 7a 38 |.......T|$.Wj..z8|
|00000340| 59 b8 d0 32 02 00 f3 ab | 33 c0 c7 05 e4 29 02 00 |Y..2....|3....)..|
|00000350| e0 1d 02 00 c7 42 28 c0 | 27 02 00 c7 05 c0 27 02 |.....B(.|'.....'.|
|00000360| 00 70 00 00 00 c7 05 c4 | 27 02 00 92 e3 02 00 c7 |.p......|'.......|
|00000370| 05 c8 27 02 00 22 e1 02 | 00 c7 05 cc 27 02 00 2c |..'.."..|....'..,|
|00000380| e2 02 00 a3 d0 27 02 00 | a3 d4 27 02 00 a3 d8 27 |.....'..|..'....'|
|00000390| 02 00 a3 dc 27 02 00 a3 | e0 27 02 00 a3 e4 27 02 |....'...|.'....'.|
|000003a0| 00 c7 05 e8 27 02 00 a0 | d3 01 00 c7 05 28 28 02 |....'...|.....((.|
|000003b0| 00 f8 eb 01 00 c7 05 2c | 28 02 00 f8 eb 01 00 c7 |.......,|(.......|
|000003c0| 05 ec 27 02 00 a0 3e 03 | 00 c7 05 f0 27 02 00 1a |..'...>.|....'...|
|000003d0| 3a 03 00 e8 f8 35 fe ff | b9 f2 38 03 00 b8 0a 39 |:....5..|..8....9|
|000003e0| 03 00 c7 05 3c 2b 02 00 | a0 3d 03 00 c7 05 40 2b |....<+..|.=....@+|
|000003f0| 02 00 3e 3e 03 00 c7 05 | 44 2b 02 00 9c 38 03 00 |..>>....|D+...8..|
|00000400| c7 05 48 2b 02 00 da 38 | 03 00 89 0d 4c 2b 02 00 |..H+...8|....L+..|
|00000410| a3 50 2b 02 00 89 0d 54 | 2b 02 00 a3 58 2b 02 00 |.P+....T|+...X+..|
|00000420| 5f c2 04 00 50 00 61 00 | 72 00 61 00 6d 00 65 00 |_...P.a.|r.a.m.e.|
|00000430| 74 00 65 00 72 00 73 00 | 00 00 55 8b ec 83 ec 24 |t.e.r.s.|..U....$|
|00000440| 8b 4d 08 53 56 8b 35 a0 | 0d 02 00 57 33 c0 6a 40 |.M.SV.5.|...W3.j@|
|00000450| 5b 89 45 e0 89 45 ec 89 | 45 f0 8d 45 dc 50 bf 19 |[.E..E..|E..E.P..|
|00000460| 00 02 00 57 8d 45 08 50 | c7 45 dc 18 00 00 00 89 |...W.E.P|.E......|
|00000470| 5d e8 89 4d e4 ff d6 85 | c0 7c 57 68 24 84 03 00 |]..M....|.|Wh$...|
|00000480| 8d 45 f4 50 ff 15 88 0c | 02 00 8b 45 08 83 65 ec |.E.P....|...E..e.|
|00000490| 00 83 65 f0 00 89 45 e0 | 8d 45 f4 89 45 e4 8d 45 |..e...E.|.E..E..E|
|000004a0| dc 50 57 8d 45 fc 50 c7 | 45 dc 18 00 00 00 89 5d |.PW.E.P.|E......]|
|000004b0| e8 ff d6 85 c0 7d 0b ff | 75 08 ff 15 c8 0c 02 00 |.....}..|u.......|
|000004c0| eb 10 ff 75 fc 8b 35 c8 | 0c 02 00 ff d6 ff 75 08 |...u..5.|......u.|
|000004d0| ff d6 5f 5e 5b c9 c2 04 | 00 cc 6a 10 68 f8 16 02 |.._^[...|..j.h...|
|000004e0| 00 e8 42 33 fe ff 33 f6 | 89 75 e4 e8 e2 86 ff ff |..B3..3.|.u......|
|000004f0| 6a 25 59 33 c0 bf 00 2b | 02 00 f3 ab 66 c7 05 00 |j%Y3...+|....f...|
|00000500| 2b 02 00 00 eb 66 c7 05 | 02 2b 02 00 94 00 8b 45 |+....f..|.+.....E|
|00000510| 08 a3 04 2b 02 00 6a 72 | 59 33 c0 bf 20 29 02 00 |...+..jr|Y3.. )..|
|00000520| f3 ab 66 c7 05 20 29 02 | 00 9a eb 66 c7 05 22 29 |..f.. ).|...f..")|
|00000530| 02 00 c8 01 bf 50 26 02 | 00 57 ff 15 90 0c 02 00 |.....P&.|.W......|
|00000540| 89 3d f0 2a 02 00 e8 45 | 05 fe ff 89 75 fc c7 45 |.=.*...E|....u..E|
|00000550| e0 05 00 00 00 bf 80 22 | 02 00 89 3d e8 2a 02 00 |......."|...=.*..|
|00000560| b9 ec 00 00 00 33 c0 f3 | ab e8 c1 de ff ff c7 45 |.....3..|.......E|
|00000570| e4 02 00 00 00 ff 75 0c | e8 bd fe ff ff e8 80 ca |......u.|........|
|00000580| fe ff e8 3d c9 fe ff 89 | 45 e0 33 ff 47 3b c6 7c |...=....|E.3.G;.||
|00000590| 03 89 7d e4 83 4d fc ff | e8 27 01 00 00 8b 45 e0 |..}..M..|.'....E.|
|000005a0| 3b c6 0f 85 0f 01 00 00 | e8 2b b1 ff ff 6a 04 68 |;.......|.+...j.h|
|000005b0| 52 78 49 72 68 80 03 00 | 00 56 ff 35 90 0d 02 00 |RxIrh...|.V.5....|
|000005c0| ff 35 a8 0f 02 00 68 60 | 27 02 00 ff 15 8c 0d 02 |.5....h`|'.......|
|000005d0| 00 b8 88 20 02 00 a3 8c | 20 02 00 a3 88 20 02 00 |... ....| .... ..|
|000005e0| 68 80 20 02 00 ff 15 90 | 0c 02 00 b8 c0 2b 02 00 |h. .....|.....+..|
|000005f0| a3 c4 2b 02 00 a3 c0 2b | 02 00 b8 c8 2b 02 00 a3 |..+....+|....+...|
|00000600| cc 2b 02 00 a3 c8 2b 02 | 00 89 3d 20 2e 02 00 89 |.+....+.|..= ....|
|00000610| 35 24 2e 02 00 89 35 28 | 2e 02 00 56 57 68 2c 2e |5$....5(|...VWh,.|
|00000620| 02 00 ff 15 8c 0c 02 00 | 89 3d 00 2e 02 00 89 35 |........|.=.....5|
|00000630| 04 2e 02 00 89 35 08 2e | 02 00 56 57 68 0c 2e 02 |.....5..|..VWh...|
|00000640| 00 ff 15 8c 0c 02 00 57 | 68 c0 28 02 00 ff 15 1c |.......W|h.(.....|
|00000650| 0e 02 00 57 68 a0 2b 02 | 00 ff 15 1c 0e 02 00 a1 |...Wh.+.|........|
|00000660| e8 2a 02 00 8d 90 60 01 | 00 00 8d 88 78 01 00 00 |.*....`.|....x...|
|00000670| 6a 03 5f 89 72 0c 89 49 | 04 89 09 89 32 83 c1 08 |j._.r..I|....2...|
|00000680| 83 c2 04 4f 75 ed 05 90 | 01 00 00 50 ff 15 90 0c |...Ou...|...P....|
|00000690| 02 00 ff 75 08 e8 9c fc | ff ff 68 5c 2b 02 00 ff |...u....|..h\+...|
|000006a0| 15 98 0d 02 00 ff 15 18 | 0e 02 00 a3 38 2b 02 00 |........|....8+..|
|000006b0| e8 49 e4 ff ff 33 c0 e8 | a5 31 fe ff c2 08 00 33 |.I...3..|.1.....3|
|000006c0| f6 33 ff 47 39 75 e0 74 | 24 68 12 01 00 00 ff 75 |.3.G9u.t|$h.....u|
|000006d0| e0 68 c4 0b 00 80 56 ff | 35 e8 2a 02 00 e8 9e 4e |.h....V.|5.*....N|
|000006e0| fe ff ff 75 e4 ff 75 08 | e8 ab c9 fe ff c3 cc cc |...u..u.|........|
|000006f0| 64 87 02 00 00 00 00 00 | 00 00 00 00 66 94 02 00 |d.......|....f...|
|00000700| 24 0c 01 00 40 87 02 00 | 00 00 00 00 00 00 00 00 |$...@...|........|
|00000710| dc 94 02 00 00 0c 01 00 | 5c 87 02 00 00 00 00 00 |........|\.......|
|00000720| 00 00 00 00 6e 9f 02 00 | 1c 0c 01 00 00 00 00 00 |....n...|........|
|00000730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000740| 3e 9f 02 00 2a 9f 02 00 | 9c 94 02 00 88 94 02 00 |>...*...|........|
|00000750| c6 94 02 00 b0 94 02 00 | 00 00 00 00 58 9f 02 00 |........|....X...|
|00000760| 00 00 00 00 aa 8b 02 00 | ba 8b 02 00 d2 8b 02 00 |........|........|
|00000770| e6 8b 02 00 06 8c 02 00 | 14 8c 02 00 2e 8c 02 00 |........|........|
|00000780| 42 8c 02 00 58 8c 02 00 | 70 8c 02 00 7c 8c 02 00 |B...X...|p...|...|
|00000790| 96 8c 02 00 ac 8c 02 00 | c6 8c 02 00 d6 8c 02 00 |........|........|
|000007a0| e6 8c 02 00 f2 8c 02 00 | 0c 8d 02 00 2a 8d 02 00 |........|....*...|
|000007b0| 34 8d 02 00 54 8d 02 00 | 72 8d 02 00 88 8d 02 00 |4...T...|r.......|
|000007c0| 9a 8d 02 00 b2 8d 02 00 | c4 8d 02 00 dc 8d 02 00 |........|........|
|000007d0| f0 8d 02 00 08 8e 02 00 | 18 8e 02 00 24 8e 02 00 |........|....$...|
|000007e0| 34 8e 02 00 44 8e 02 00 | 5e 8e 02 00 6a 8e 02 00 |4...D...|^...j...|
|000007f0| 74 8e 02 00 7e 8e 02 00 | 9c 8e 02 00 b4 8e 02 00 |t...~...|........|
|00000800| cc 8e 02 00 e4 8e 02 00 | fc 8e 02 00 06 8f 02 00 |........|........|
|00000810| 22 8f 02 00 3a 8f 02 00 | 54 8f 02 00 66 8f 02 00 |"...:...|T...f...|
|00000820| 7e 8f 02 00 a2 8f 02 00 | be 8f 02 00 da 8f 02 00 |~.......|........|
|00000830| ea 8f 02 00 00 90 02 00 | 10 90 02 00 1c 90 02 00 |........|........|
|00000840| 28 90 02 00 40 90 02 00 | 4e 90 02 00 70 90 02 00 |(...@...|N...p...|
|00000850| 90 90 02 00 a0 90 02 00 | bc 90 02 00 d8 90 02 00 |........|........|
|00000860| f4 90 02 00 06 91 02 00 | 18 91 02 00 2e 91 02 00 |........|........|
|00000870| 40 91 02 00 58 91 02 00 | 76 91 02 00 8e 91 02 00 |@...X...|v.......|
|00000880| 9a 91 02 00 aa 91 02 00 | be 91 02 00 d6 91 02 00 |........|........|
|00000890| f2 91 02 00 00 92 02 00 | 0c 92 02 00 1e 92 02 00 |........|........|
|000008a0| 2e 92 02 00 3e 92 02 00 | 5a 92 02 00 66 92 02 00 |....>...|Z...f...|
|000008b0| 7e 92 02 00 a0 92 02 00 | c0 92 02 00 d4 92 02 00 |~.......|........|
|000008c0| e8 92 02 00 f8 92 02 00 | 18 93 02 00 34 93 02 00 |........|....4...|
|000008d0| 56 93 02 00 64 93 02 00 | 82 93 02 00 9e 93 02 00 |V...d...|........|
|000008e0| b6 93 02 00 c2 93 02 00 | dc 93 02 00 f6 93 02 00 |........|........|
|000008f0| 0e 94 02 00 26 94 02 00 | 3e 94 02 00 4c 94 02 00 |....&...|>...L...|
|00000900| 74 94 02 00 94 8b 02 00 | 80 8b 02 00 66 8b 02 00 |t.......|....f...|
|00000910| 4e 8b 02 00 44 8b 02 00 | e4 94 02 00 26 8b 02 00 |N...D...|....&...|
|00000920| 12 95 02 00 2e 95 02 00 | 42 95 02 00 56 95 02 00 |........|B...V...|
|00000930| 6a 95 02 00 84 95 02 00 | a0 95 02 00 ba 95 02 00 |j.......|........|
|00000940| cc 95 02 00 e4 95 02 00 | fc 95 02 00 14 96 02 00 |........|........|
|00000950| 2e 96 02 00 3e 96 02 00 | 54 96 02 00 6a 96 02 00 |....>...|T...j...|
|00000960| 7e 96 02 00 9a 96 02 00 | b4 96 02 00 d2 96 02 00 |~.......|........|
|00000970| ea 96 02 00 06 97 02 00 | 20 97 02 00 3a 97 02 00 |........| ...:...|
|00000980| 5a 97 02 00 74 97 02 00 | 8e 97 02 00 a2 97 02 00 |Z...t...|........|
|00000990| b8 97 02 00 ce 97 02 00 | e6 97 02 00 f6 97 02 00 |........|........|
|000009a0| 0e 98 02 00 26 98 02 00 | 38 98 02 00 52 98 02 00 |....&...|8...R...|
|000009b0| 6c 98 02 00 88 98 02 00 | a4 98 02 00 bc 98 02 00 |l.......|........|
|000009c0| c6 98 02 00 e6 98 02 00 | fa 98 02 00 1c 99 02 00 |........|........|
|000009d0| 3e 99 02 00 58 99 02 00 | 7a 99 02 00 8e 99 02 00 |>...X...|z.......|
|000009e0| 9c 99 02 00 b8 99 02 00 | d8 99 02 00 fc 99 02 00 |........|........|
|000009f0| 1e 9a 02 00 34 9a 02 00 | 44 9a 02 00 54 9a 02 00 |....4...|D...T...|
|00000a00| 62 9a 02 00 6e 9a 02 00 | 7c 9a 02 00 9e 9a 02 00 |b...n...||.......|
|00000a10| bc 9a 02 00 d6 9a 02 00 | ee 9a 02 00 06 9b 02 00 |........|........|
|00000a20| 1e 9b 02 00 36 9b 02 00 | 4c 9b 02 00 60 9b 02 00 |....6...|L...`...|
|00000a30| 76 9b 02 00 96 9b 02 00 | a8 9b 02 00 bc 9b 02 00 |v.......|........|
|00000a40| d2 9b 02 00 f0 9b 02 00 | 0c 9c 02 00 20 9c 02 00 |........|.... ...|
|00000a50| 38 9c 02 00 52 9c 02 00 | 5c 9c 02 00 6e 9c 02 00 |8...R...|\...n...|
|00000a60| 80 9c 02 00 8e 9c 02 00 | b0 9c 02 00 ca 9c 02 00 |........|........|
|00000a70| e0 9c 02 00 fc 9c 02 00 | 1c 9d 02 00 34 9d 02 00 |........|....4...|
|00000a80| 40 9d 02 00 56 9d 02 00 | 66 9d 02 00 7a 9d 02 00 |@...V...|f...z...|
|00000a90| 98 9d 02 00 a8 9d 02 00 | b8 9d 02 00 c8 9d 02 00 |........|........|
|00000aa0| dc 9d 02 00 ee 9d 02 00 | 06 9e 02 00 28 9e 02 00 |........|....(...|
|00000ab0| 4a 9e 02 00 62 9e 02 00 | 72 9e 02 00 82 9e 02 00 |J...b...|r.......|
|00000ac0| 90 9e 02 00 b2 9e 02 00 | d2 9e 02 00 dc 9e 02 00 |........|........|
|00000ad0| f0 9e 02 00 02 9f 02 00 | 18 9f 02 00 1c 8b 02 00 |........|........|
|00000ae0| 08 8b 02 00 f6 94 02 00 | f0 8a 02 00 00 00 00 00 |........|........|
|00000af0| 40 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |@.ExAllo|catePool|
|00000b00| 57 69 74 68 54 61 67 00 | 4d 00 45 78 46 72 65 65 |WithTag.|M.ExFree|
|00000b10| 50 6f 6f 6c 57 69 74 68 | 54 61 67 00 ad 05 77 63 |PoolWith|Tag...wc|
|00000b20| 73 63 70 79 00 00 37 04 | 52 74 6c 4c 65 6e 67 74 |scpy..7.|RtlLengt|
|00000b30| 68 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |hSecurit|yDescrip|
|00000b40| 74 6f 72 00 68 05 5f 61 | 6c 6c 73 68 72 00 25 03 |tor.h._a|llshr.%.|
|00000b50| 4f 62 66 44 65 72 65 66 | 65 72 65 6e 63 65 4f 62 |ObfDeref|erenceOb|
|00000b60| 6a 65 63 74 00 00 d3 04 | 53 65 55 6e 6c 6f 63 6b |ject....|SeUnlock|
|00000b70| 53 75 62 6a 65 63 74 43 | 6f 6e 74 65 78 74 00 00 |SubjectC|ontext..|
|00000b80| b8 04 53 65 46 72 65 65 | 50 72 69 76 69 6c 65 67 |..SeFree|Privileg|
|00000b90| 65 73 00 00 a6 04 53 65 | 41 70 70 65 6e 64 50 72 |es....Se|AppendPr|
|00000ba0| 69 76 69 6c 65 67 65 73 | 00 00 a5 04 53 65 41 63 |ivileges|....SeAc|
|00000bb0| 63 65 73 73 43 68 65 63 | 6b 00 bb 04 53 65 4c 6f |cessChec|k...SeLo|
|00000bc0| 63 6b 53 75 62 6a 65 63 | 74 43 6f 6e 74 65 78 74 |ckSubjec|tContext|
|00000bd0| 00 00 3f 04 52 74 6c 4d | 61 70 47 65 6e 65 72 69 |..?.RtlM|apGeneri|
|00000be0| 63 4d 61 73 6b 00 6c 01 | 49 6f 47 65 74 46 69 6c |cMask.l.|IoGetFil|
|00000bf0| 65 4f 62 6a 65 63 74 47 | 65 6e 65 72 69 63 4d 61 |eObjectG|enericMa|
|00000c00| 70 70 69 6e 67 00 de 03 | 52 74 6c 45 71 75 61 6c |pping...|RtlEqual|
|00000c10| 53 69 64 00 c3 04 53 65 | 51 75 65 72 79 49 6e 66 |Sid...Se|QueryInf|
|00000c20| 6f 72 6d 61 74 69 6f 6e | 54 6f 6b 65 6e 00 16 04 |ormation|Token...|
|00000c30| 52 74 6c 49 6e 69 74 69 | 61 6c 69 7a 65 53 69 64 |RtlIniti|alizeSid|
|00000c40| 00 00 6e 04 52 74 6c 53 | 75 62 41 75 74 68 6f 72 |..n.RtlS|ubAuthor|
|00000c50| 69 74 79 53 69 64 00 00 | 36 04 52 74 6c 4c 65 6e |itySid..|6.RtlLen|
|00000c60| 67 74 68 52 65 71 75 69 | 72 65 64 53 69 64 00 00 |gthRequi|redSid..|
|00000c70| 81 05 5f 77 63 73 6e 69 | 63 6d 70 00 72 01 49 6f |.._wcsni|cmp.r.Io|
|00000c80| 47 65 74 52 65 71 75 65 | 73 74 6f 72 53 65 73 73 |GetReque|storSess|
|00000c90| 69 6f 6e 49 64 00 db 01 | 49 6f 66 43 6f 6d 70 6c |ionId...|IofCompl|
|00000ca0| 65 74 65 52 65 71 75 65 | 73 74 00 00 96 03 52 74 |eteReque|st....Rt|
|00000cb0| 6c 41 64 64 41 63 63 65 | 73 73 41 6c 6c 6f 77 65 |lAddAcce|ssAllowe|
|00000cc0| 64 41 63 65 00 00 bc 03 | 52 74 6c 43 72 65 61 74 |dAce....|RtlCreat|
|00000cd0| 65 41 63 6c 00 00 38 04 | 52 74 6c 4c 65 6e 67 74 |eAcl..8.|RtlLengt|
|00000ce0| 68 53 69 64 00 00 b6 04 | 53 65 45 78 70 6f 72 74 |hSid....|SeExport|
|00000cf0| 73 00 21 03 4f 62 52 65 | 6c 65 61 73 65 4f 62 6a |s.!.ObRe|leaseObj|
|00000d00| 65 63 74 53 65 63 75 72 | 69 74 79 00 ca 04 53 65 |ectSecur|ity...Se|
|00000d10| 53 65 74 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |SetSecur|ityDescr|
|00000d20| 69 70 74 6f 72 49 6e 66 | 6f 00 91 05 6d 65 6d 6d |iptorInf|o...memm|
|00000d30| 6f 76 65 00 65 04 52 74 | 6c 53 65 74 44 61 63 6c |ove.e.Rt|lSetDacl|
|00000d40| 53 65 63 75 72 69 74 79 | 44 65 73 63 72 69 70 74 |Security|Descript|
|00000d50| 6f 72 00 00 c0 03 52 74 | 6c 43 72 65 61 74 65 53 |or....Rt|lCreateS|
|00000d60| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00000d70| 72 00 15 03 4f 62 47 65 | 74 4f 62 6a 65 63 74 53 |r...ObGe|tObjectS|
|00000d80| 65 63 75 72 69 74 79 00 | 49 01 49 6f 44 65 6c 65 |ecurity.|I.IoDele|
|00000d90| 74 65 44 65 76 69 63 65 | 00 00 48 03 50 73 47 65 |teDevice|..H.PsGe|
|00000da0| 74 43 75 72 72 65 6e 74 | 50 72 6f 63 65 73 73 49 |tCurrent|ProcessI|
|00000db0| 64 00 38 01 49 6f 43 72 | 65 61 74 65 44 65 76 69 |d.8.IoCr|eateDevi|
|00000dc0| 63 65 00 00 11 04 52 74 | 6c 49 6e 69 74 55 6e 69 |ce....Rt|lInitUni|
|00000dd0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 0f 02 4b 65 |codeStri|ng....Ke|
|00000de0| 49 6e 69 74 69 61 6c 69 | 7a 65 45 76 65 6e 74 00 |Initiali|zeEvent.|
|00000df0| 15 02 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 53 70 |..KeInit|ializeSp|
|00000e00| 69 6e 4c 6f 63 6b 00 00 | 2d 00 44 62 67 42 72 65 |inLock..|-.DbgBre|
|00000e10| 61 6b 50 6f 69 6e 74 00 | 30 00 44 62 67 50 72 69 |akPoint.|0.DbgPri|
|00000e20| 6e 74 00 00 3a 03 50 72 | 6f 62 65 46 6f 72 57 72 |nt..:.Pr|obeForWr|
|00000e30| 69 74 65 00 39 03 50 72 | 6f 62 65 46 6f 72 52 65 |ite.9.Pr|obeForRe|
|00000e40| 61 64 00 00 8d 03 50 73 | 54 65 72 6d 69 6e 61 74 |ad....Ps|Terminat|
|00000e50| 65 53 79 73 74 65 6d 54 | 68 72 65 61 64 00 a6 05 |eSystemT|hread...|
|00000e60| 74 6f 77 75 70 70 65 72 | 00 00 af 05 77 63 73 6c |towupper|....wcsl|
|00000e70| 65 6e 00 00 aa 05 77 63 | 73 63 61 74 00 00 38 00 |en....wc|scat..8.|
|00000e80| 45 78 41 63 71 75 69 72 | 65 52 65 73 6f 75 72 63 |ExAcquir|eResourc|
|00000e90| 65 53 68 61 72 65 64 4c | 69 74 65 00 f9 01 4b 65 |eSharedL|ite...Ke|
|00000ea0| 45 6e 74 65 72 43 72 69 | 74 69 63 61 6c 52 65 67 |EnterCri|ticalReg|
|00000eb0| 69 6f 6e 00 20 02 4b 65 | 4c 65 61 76 65 43 72 69 |ion. .Ke|LeaveCri|
|00000ec0| 74 69 63 61 6c 52 65 67 | 69 6f 6e 00 7a 00 45 78 |ticalReg|ion.z.Ex|
|00000ed0| 52 65 6c 65 61 73 65 52 | 65 73 6f 75 72 63 65 4c |ReleaseR|esourceL|
|00000ee0| 69 74 65 00 64 02 4b 65 | 57 61 69 74 46 6f 72 53 |ite.d.Ke|WaitForS|
|00000ef0| 69 6e 67 6c 65 4f 62 6a | 65 63 74 00 f4 04 5a 77 |ingleObj|ect...Zw|
|00000f00| 43 6c 6f 73 65 00 1d 03 | 4f 62 52 65 66 65 72 65 |Close...|ObRefere|
|00000f10| 6e 63 65 4f 62 6a 65 63 | 74 42 79 48 61 6e 64 6c |nceObjec|tByHandl|
|00000f20| 65 00 41 03 50 73 43 72 | 65 61 74 65 53 79 73 74 |e.A.PsCr|eateSyst|
|00000f30| 65 6d 54 68 72 65 61 64 | 00 00 99 01 49 6f 52 65 |emThread|....IoRe|
|00000f40| 6c 65 61 73 65 43 61 6e | 63 65 6c 53 70 69 6e 4c |leaseCan|celSpinL|
|00000f50| 6f 63 6b 00 3a 05 5a 77 | 51 75 65 72 79 56 61 6c |ock.:.Zw|QueryVal|
|00000f60| 75 65 4b 65 79 00 f9 03 | 52 74 6c 46 72 65 65 55 |ueKey...|RtlFreeU|
|00000f70| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 80 01 |nicodeSt|ring....|
|00000f80| 49 6f 4f 70 65 6e 44 65 | 76 69 63 65 49 6e 74 65 |IoOpenDe|viceInte|
|00000f90| 72 66 61 63 65 52 65 67 | 69 73 74 72 79 4b 65 79 |rfaceReg|istryKey|
|00000fa0| 00 00 92 01 49 6f 52 65 | 67 69 73 74 65 72 44 65 |....IoRe|gisterDe|
|00000fb0| 76 69 63 65 49 6e 74 65 | 72 66 61 63 65 00 84 04 |viceInte|rface...|
|00000fc0| 52 74 6c 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |RtlUnico|deString|
|00000fd0| 54 6f 49 6e 74 65 67 65 | 72 00 2b 03 50 6f 43 61 |ToIntege|r.+.PoCa|
|00000fe0| 6c 6c 44 72 69 76 65 72 | 00 00 37 03 50 6f 53 74 |llDriver|..7.PoSt|
|00000ff0| 61 72 74 4e 65 78 74 50 | 6f 77 65 72 49 72 70 00 |artNextP|owerIrp.|
|00001000| da 01 49 6f 66 43 61 6c | 6c 44 72 69 76 65 72 00 |..IofCal|lDriver.|
|00001010| 7f 05 5f 77 63 73 69 63 | 6d 70 00 00 76 05 5f 73 |.._wcsic|mp..v._s|
|00001020| 74 72 69 63 6d 70 00 00 | 00 04 52 74 6c 47 65 74 |tricmp..|..RtlGet|
|00001030| 44 65 66 61 75 6c 74 43 | 6f 64 65 50 61 67 65 00 |DefaultC|odePage.|
|00001040| 4d 02 4b 65 53 65 74 45 | 76 65 6e 74 00 00 37 00 |M.KeSetE|vent..7.|
|00001050| 45 78 41 63 71 75 69 72 | 65 52 65 73 6f 75 72 63 |ExAcquir|eResourc|
|00001060| 65 45 78 63 6c 75 73 69 | 76 65 4c 69 74 65 00 00 |eExclusi|veLite..|
|00001070| 27 01 49 6f 42 75 69 6c | 64 41 73 79 6e 63 68 72 |'.IoBuil|dAsynchr|
|00001080| 6f 6e 6f 75 73 46 73 64 | 52 65 71 75 65 73 74 00 |onousFsd|Request.|
|00001090| f9 04 5a 77 43 72 65 61 | 74 65 46 69 6c 65 00 00 |..ZwCrea|teFile..|
|000010a0| 20 04 52 74 6c 49 6e 74 | 65 67 65 72 54 6f 55 6e | .RtlInt|egerToUn|
|000010b0| 69 63 6f 64 65 53 74 72 | 69 6e 67 00 a1 03 52 74 |icodeStr|ing...Rt|
|000010c0| 6c 41 70 70 65 6e 64 55 | 6e 69 63 6f 64 65 54 6f |lAppendU|nicodeTo|
|000010d0| 53 74 72 69 6e 67 00 00 | 6f 01 49 6f 47 65 74 52 |String..|o.IoGetR|
|000010e0| 65 6c 61 74 65 64 44 65 | 76 69 63 65 4f 62 6a 65 |elatedDe|viceObje|
|000010f0| 63 74 00 00 5c 01 49 6f | 46 72 65 65 57 6f 72 6b |ct..\.Io|FreeWork|
|00001100| 49 74 65 6d 00 00 89 01 | 49 6f 51 75 65 75 65 57 |Item....|IoQueueW|
|00001110| 6f 72 6b 49 74 65 6d 00 | 20 01 49 6f 41 6c 6c 6f |orkItem.| .IoAllo|
|00001120| 63 61 74 65 57 6f 72 6b | 49 74 65 6d 00 00 4c 01 |cateWork|Item..L.|
|00001130| 49 6f 44 65 74 61 63 68 | 44 65 76 69 63 65 00 00 |IoDetach|Device..|
|00001140| 4b 01 49 6f 44 65 6c 65 | 74 65 53 79 6d 62 6f 6c |K.IoDele|teSymbol|
|00001150| 69 63 4c 69 6e 6b 00 00 | 25 01 49 6f 41 74 74 61 |icLink..|%.IoAtta|
|00001160| 63 68 44 65 76 69 63 65 | 54 6f 44 65 76 69 63 65 |chDevice|ToDevice|
|00001170| 53 74 61 63 6b 00 41 01 | 49 6f 43 72 65 61 74 65 |Stack.A.|IoCreate|
|00001180| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 00 00 a2 05 |Symbolic|Link....|
|00001190| 73 77 70 72 69 6e 74 66 | 00 00 52 05 5a 77 53 65 |swprintf|..R.ZwSe|
|000011a0| 74 56 61 6c 75 65 4b 65 | 79 00 02 05 5a 77 44 65 |tValueKe|y...ZwDe|
|000011b0| 6c 65 74 65 56 61 6c 75 | 65 4b 65 79 00 00 65 01 |leteValu|eKey..e.|
|000011c0| 49 6f 47 65 74 44 65 76 | 69 63 65 49 6e 74 65 72 |IoGetDev|iceInter|
|000011d0| 66 61 63 65 73 00 a7 01 | 49 6f 53 65 74 44 65 76 |faces...|IoSetDev|
|000011e0| 69 63 65 49 6e 74 65 72 | 66 61 63 65 53 74 61 74 |iceInter|faceStat|
|000011f0| 65 00 0b 05 5a 77 46 6c | 75 73 68 4b 65 79 00 00 |e...ZwFl|ushKey..|
|00001200| 73 05 5f 70 75 72 65 63 | 61 6c 6c 00 df 03 52 74 |s._purec|all...Rt|
|00001210| 6c 45 71 75 61 6c 53 74 | 72 69 6e 67 00 00 10 04 |lEqualSt|ring....|
|00001220| 52 74 6c 49 6e 69 74 53 | 74 72 69 6e 67 00 43 02 |RtlInitS|tring.C.|
|00001230| 4b 65 52 65 73 65 74 45 | 76 65 6e 74 00 00 15 01 |KeResetE|vent....|
|00001240| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 50 75 73 68 45 |Interloc|kedPushE|
|00001250| 6e 74 72 79 53 4c 69 73 | 74 00 5a 01 49 6f 46 72 |ntrySLis|t.Z.IoFr|
|00001260| 65 65 49 72 70 00 9e 04 | 52 74 6c 57 72 69 74 65 |eeIrp...|RtlWrite|
|00001270| 52 65 67 69 73 74 72 79 | 56 61 6c 75 65 00 a0 03 |Registry|Value...|
|00001280| 52 74 6c 41 70 70 65 6e | 64 55 6e 69 63 6f 64 65 |RtlAppen|dUnicode|
|00001290| 53 74 72 69 6e 67 54 6f | 53 74 72 69 6e 67 00 00 |StringTo|String..|
|000012a0| 9d 03 52 74 6c 41 6e 73 | 69 53 74 72 69 6e 67 54 |..RtlAns|iStringT|
|000012b0| 6f 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |oUnicode|String..|
|000012c0| 0e 04 52 74 6c 49 6e 69 | 74 41 6e 73 69 53 74 72 |..RtlIni|tAnsiStr|
|000012d0| 69 6e 67 00 a5 02 4d 6d | 4d 61 70 4c 6f 63 6b 65 |ing...Mm|MapLocke|
|000012e0| 64 50 61 67 65 73 00 00 | f1 01 4b 65 43 6c 65 61 |dPages..|..KeClea|
|000012f0| 72 45 76 65 6e 74 00 00 | a6 02 4d 6d 4d 61 70 4c |rEvent..|..MmMapL|
|00001300| 6f 63 6b 65 64 50 61 67 | 65 73 53 70 65 63 69 66 |ockedPag|esSpecif|
|00001310| 79 43 61 63 68 65 00 00 | 14 01 49 6e 74 65 72 6c |yCache..|..Interl|
|00001320| 6f 63 6b 65 64 50 6f 70 | 45 6e 74 72 79 53 4c 69 |ockedPop|EntrySLi|
|00001330| 73 74 00 00 54 00 45 78 | 49 6e 69 74 69 61 6c 69 |st..T.Ex|Initiali|
|00001340| 7a 65 4e 50 61 67 65 64 | 4c 6f 6f 6b 61 73 69 64 |zeNPaged|Lookasid|
|00001350| 65 4c 69 73 74 00 4c 00 | 45 78 46 72 65 65 50 6f |eList.L.|ExFreePo|
|00001360| 6f 6c 00 00 44 00 45 78 | 44 65 6c 65 74 65 4e 50 |ol..D.Ex|DeleteNP|
|00001370| 61 67 65 64 4c 6f 6f 6b | 61 73 69 64 65 4c 69 73 |agedLook|asideLis|
|00001380| 74 00 56 00 45 78 49 6e | 69 74 69 61 6c 69 7a 65 |t.V.ExIn|itialize|
|00001390| 52 65 73 6f 75 72 63 65 | 4c 69 74 65 00 00 46 00 |Resource|Lite..F.|
|000013a0| 45 78 44 65 6c 65 74 65 | 52 65 73 6f 75 72 63 65 |ExDelete|Resource|
|000013b0| 4c 69 74 65 00 00 1a 05 | 5a 77 4f 70 65 6e 4b 65 |Lite....|ZwOpenKe|
|000013c0| 79 00 88 04 52 74 6c 55 | 6e 69 63 6f 64 65 54 6f |y...RtlU|nicodeTo|
|000013d0| 4d 75 6c 74 69 42 79 74 | 65 4e 00 00 43 04 52 74 |MultiByt|eN..C.Rt|
|000013e0| 6c 4d 75 6c 74 69 42 79 | 74 65 54 6f 55 6e 69 63 |lMultiBy|teToUnic|
|000013f0| 6f 64 65 4e 00 00 87 04 | 52 74 6c 55 6e 69 63 6f |odeN....|RtlUnico|
|00001400| 64 65 54 6f 43 75 73 74 | 6f 6d 43 50 4e 00 c3 03 |deToCust|omCPN...|
|00001410| 52 74 6c 43 75 73 74 6f | 6d 43 50 54 6f 55 6e 69 |RtlCusto|mCPToUni|
|00001420| 63 6f 64 65 4e 00 0f 04 | 52 74 6c 49 6e 69 74 43 |codeN...|RtlInitC|
|00001430| 6f 64 65 50 61 67 65 54 | 61 62 6c 65 00 00 3c 05 |odePageT|able..<.|
|00001440| 5a 77 52 65 61 64 46 69 | 6c 65 00 00 2e 05 5a 77 |ZwReadFi|le....Zw|
|00001450| 51 75 65 72 79 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |QueryInf|ormation|
|00001460| 46 69 6c 65 00 00 6e 74 | 6f 73 6b 72 6e 6c 2e 65 |File..nt|oskrnl.e|
|00001470| 78 65 00 00 6e 05 5f 65 | 78 63 65 70 74 5f 68 61 |xe..n._e|xcept_ha|
|00001480| 6e 64 6c 65 72 33 00 00 | 4f 00 4b 66 52 65 6c 65 |ndler3..|O.KfRele|
|00001490| 61 73 65 53 70 69 6e 4c | 6f 63 6b 00 4c 00 4b 66 |aseSpinL|ock.L.Kf|
|000014a0| 41 63 71 75 69 72 65 53 | 70 69 6e 4c 6f 63 6b 00 |AcquireS|pinLock.|
|000014b0| 01 00 45 78 52 65 6c 65 | 61 73 65 46 61 73 74 4d |..ExRele|aseFastM|
|000014c0| 75 74 65 78 00 00 00 00 | 45 78 41 63 71 75 69 72 |utex....|ExAcquir|
|000014d0| 65 46 61 73 74 4d 75 74 | 65 78 00 00 48 41 4c 2e |eFastMut|ex..HAL.|
|000014e0| 64 6c 6c 00 39 02 4b 65 | 52 65 6c 65 61 73 65 4d |dll.9.Ke|ReleaseM|
|000014f0| 75 74 65 78 00 00 78 00 | 45 78 52 65 6c 65 61 73 |utex..x.|ExReleas|
|00001500| 65 46 61 73 74 4d 75 74 | 65 78 55 6e 73 61 66 65 |eFastMut|exUnsafe|
|00001510| 00 00 36 00 45 78 41 63 | 71 75 69 72 65 46 61 73 |..6.ExAc|quireFas|
|00001520| 74 4d 75 74 65 78 55 6e | 73 61 66 65 00 00 73 01 |tMutexUn|safe..s.|
|00001530| 49 6f 47 65 74 53 74 61 | 63 6b 4c 69 6d 69 74 73 |IoGetSta|ckLimits|
|00001540| 00 00 74 01 49 6f 47 65 | 74 54 6f 70 4c 65 76 65 |..t.IoGe|tTopLeve|
|00001550| 6c 49 72 70 00 00 b3 01 | 49 6f 53 65 74 54 6f 70 |lIrp....|IoSetTop|
|00001560| 4c 65 76 65 6c 49 72 70 | 00 00 16 01 49 6f 41 63 |LevelIrp|....IoAc|
|00001570| 71 75 69 72 65 43 61 6e | 63 65 6c 53 70 69 6e 4c |quireCan|celSpinL|
|00001580| 6f 63 6b 00 7b 01 49 6f | 49 73 4f 70 65 72 61 74 |ock.{.Io|IsOperat|
|00001590| 69 6f 6e 53 79 6e 63 68 | 72 6f 6e 6f 75 73 00 00 |ionSynch|ronous..|
|000015a0| 25 00 43 63 55 6e 69 6e | 69 74 69 61 6c 69 7a 65 |%.CcUnin|itialize|
|000015b0| 43 61 63 68 65 4d 61 70 | 00 00 22 00 43 63 53 65 |CacheMap|..".CcSe|
|000015c0| 74 46 69 6c 65 53 69 7a | 65 73 00 00 8a 02 4d 6d |tFileSiz|es....Mm|
|000015d0| 43 61 6e 46 69 6c 65 42 | 65 54 72 75 6e 63 61 74 |CanFileB|eTruncat|
|000015e0| 65 64 00 00 0f 00 43 63 | 49 6e 69 74 69 61 6c 69 |ed....Cc|Initiali|
|000015f0| 7a 65 43 61 63 68 65 4d | 61 70 00 00 61 05 5f 61 |zeCacheM|ap..a._a|
|00001600| 62 6e 6f 72 6d 61 6c 5f | 74 65 72 6d 69 6e 61 74 |bnormal_|terminat|
|00001610| 69 6f 6e 00 d8 00 46 73 | 52 74 6c 4e 6f 72 6d 61 |ion...Fs|RtlNorma|
|00001620| 6c 69 7a 65 4e 74 73 74 | 61 74 75 73 00 00 74 00 |lizeNtst|atus..t.|
|00001630| 45 78 52 61 69 73 65 53 | 74 61 74 75 73 00 8e 02 |ExRaiseS|tatus...|
|00001640| 4d 6d 46 6c 75 73 68 49 | 6d 61 67 65 53 65 63 74 |MmFlushI|mageSect|
|00001650| 69 6f 6e 00 62 01 49 6f | 47 65 74 43 75 72 72 65 |ion.b.Io|GetCurre|
|00001660| 6e 74 50 72 6f 63 65 73 | 73 00 12 02 4b 65 49 6e |ntProces|s...KeIn|
|00001670| 69 74 69 61 6c 69 7a 65 | 4d 75 74 65 78 00 cf 01 |itialize|Mutex...|
|00001680| 49 6f 57 4d 49 52 65 67 | 69 73 74 72 61 74 69 6f |IoWMIReg|istratio|
|00001690| 6e 43 6f 6e 74 72 6f 6c | 00 00 bd 01 49 6f 55 6e |nControl|....IoUn|
|000016a0| 72 65 67 69 73 74 65 72 | 46 69 6c 65 53 79 73 74 |register|FileSyst|
|000016b0| 65 6d 00 00 a8 00 46 73 | 52 74 6c 44 65 72 65 67 |em....Fs|RtlDereg|
|000016c0| 69 73 74 65 72 55 6e 63 | 50 72 6f 76 69 64 65 72 |isterUnc|Provider|
|000016d0| 00 00 94 01 49 6f 52 65 | 67 69 73 74 65 72 46 69 |....IoRe|gisterFi|
|000016e0| 6c 65 53 79 73 74 65 6d | 00 00 ee 00 46 73 52 74 |leSystem|....FsRt|
|000016f0| 6c 52 65 67 69 73 74 65 | 72 55 6e 63 50 72 6f 76 |lRegiste|rUncProv|
|00001700| 69 64 65 72 00 00 c8 04 | 53 65 52 65 6c 65 61 73 |ider....|SeReleas|
|00001710| 65 53 75 62 6a 65 63 74 | 43 6f 6e 74 65 78 74 00 |eSubject|Context.|
|00001720| ae 04 53 65 43 61 70 74 | 75 72 65 53 75 62 6a 65 |..SeCapt|ureSubje|
|00001730| 63 74 43 6f 6e 74 65 78 | 74 00 c2 04 53 65 51 75 |ctContex|t...SeQu|
|00001740| 65 72 79 41 75 74 68 65 | 6e 74 69 63 61 74 69 6f |eryAuthe|nticatio|
|00001750| 6e 49 64 54 6f 6b 65 6e | 00 00 2f 01 49 6f 43 68 |nIdToken|../.IoCh|
|00001760| 65 63 6b 45 61 42 75 66 | 66 65 72 56 61 6c 69 64 |eckEaBuf|ferValid|
|00001770| 69 74 79 00 c7 00 46 73 | 52 74 6c 49 73 4e 74 73 |ity...Fs|RtlIsNts|
|00001780| 74 61 74 75 73 45 78 70 | 65 63 74 65 64 00 2a 02 |tatusExp|ected.*.|
|00001790| 4b 65 51 75 65 72 79 53 | 79 73 74 65 6d 54 69 6d |KeQueryS|ystemTim|
|000017a0| 65 00 9d 01 49 6f 52 65 | 6d 6f 76 65 53 68 61 72 |e...IoRe|moveShar|
|000017b0| 65 41 63 63 65 73 73 00 | af 00 46 73 52 74 6c 46 |eAccess.|..FsRtlF|
|000017c0| 61 73 74 55 6e 6c 6f 63 | 6b 41 6c 6c 00 00 70 01 |astUnloc|kAll..p.|
|000017d0| 49 6f 47 65 74 52 65 71 | 75 65 73 74 6f 72 50 72 |IoGetReq|uestorPr|
|000017e0| 6f 63 65 73 73 00 ee 01 | 4b 65 42 75 67 43 68 65 |ocess...|KeBugChe|
|000017f0| 63 6b 45 78 00 00 b1 00 | 46 73 52 74 6c 46 61 73 |ckEx....|FsRtlFas|
|00001800| 74 55 6e 6c 6f 63 6b 53 | 69 6e 67 6c 65 00 ec 00 |tUnlockS|ingle...|
|00001810| 46 73 52 74 6c 50 72 6f | 63 65 73 73 46 69 6c 65 |FsRtlPro|cessFile|
|00001820| 4c 6f 63 6b 00 00 72 05 | 5f 6c 6f 63 61 6c 5f 75 |Lock..r.|_local_u|
|00001830| 6e 77 69 6e 64 32 00 00 | c2 03 52 74 6c 43 72 65 |nwind2..|..RtlCre|
|00001840| 61 74 65 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |ateUnico|deString|
|00001850| 00 00 53 04 52 74 6c 50 | 72 65 66 69 78 55 6e 69 |..S.RtlP|refixUni|
|00001860| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 38 05 5a 77 |codeStri|ng..8.Zw|
|00001870| 51 75 65 72 79 53 79 6d | 62 6f 6c 69 63 4c 69 6e |QuerySym|bolicLin|
|00001880| 6b 4f 62 6a 65 63 74 00 | 1f 05 5a 77 4f 70 65 6e |kObject.|..ZwOpen|
|00001890| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 4f 62 6a 65 |Symbolic|LinkObje|
|000018a0| 63 74 00 00 16 05 5a 77 | 4f 70 65 6e 44 69 72 65 |ct....Zw|OpenDire|
|000018b0| 63 74 6f 72 79 4f 62 6a | 65 63 74 00 ab 05 77 63 |ctoryObj|ect...wc|
|000018c0| 73 63 68 72 00 00 ac 00 | 46 73 52 74 6c 44 6f 65 |schr....|FsRtlDoe|
|000018d0| 73 4e 61 6d 65 43 6f 6e | 74 61 69 6e 57 69 6c 64 |sNameCon|tainWild|
|000018e0| 43 61 72 64 73 00 ae 03 | 52 74 6c 43 6f 6d 70 61 |Cards...|RtlCompa|
|000018f0| 72 65 4d 65 6d 6f 72 79 | 00 00 42 00 45 78 43 6f |reMemory|..B.ExCo|
|00001900| 6e 76 65 72 74 45 78 63 | 6c 75 73 69 76 65 54 6f |nvertExc|lusiveTo|
|00001910| 53 68 61 72 65 64 4c 69 | 74 65 00 00 79 00 45 78 |SharedLi|te..y.Ex|
|00001920| 52 65 6c 65 61 73 65 52 | 65 73 6f 75 72 63 65 46 |ReleaseR|esourceF|
|00001930| 6f 72 54 68 72 65 61 64 | 4c 69 74 65 00 00 87 00 |orThread|Lite....|
|00001940| 45 78 66 49 6e 74 65 72 | 6c 6f 63 6b 65 64 41 64 |ExfInter|lockedAd|
|00001950| 64 55 6c 6f 6e 67 00 00 | 5a 00 45 78 49 6e 74 65 |dUlong..|Z.ExInte|
|00001960| 72 6c 6f 63 6b 65 64 41 | 64 64 4c 61 72 67 65 53 |rlockedA|ddLargeS|
|00001970| 74 61 74 69 73 74 69 63 | 00 00 18 00 43 63 50 72 |tatistic|....CcPr|
|00001980| 65 70 61 72 65 4d 64 6c | 57 72 69 74 65 00 02 00 |epareMdl|Write...|
|00001990| 43 63 43 6f 70 79 57 72 | 69 74 65 00 24 00 43 63 |CcCopyWr|ite.$.Cc|
|000019a0| 53 65 74 52 65 61 64 41 | 68 65 61 64 47 72 61 6e |SetReadA|headGran|
|000019b0| 75 6c 61 72 69 74 79 00 | a1 00 46 73 52 74 6c 43 |ularity.|..FsRtlC|
|000019c0| 68 65 63 6b 4c 6f 63 6b | 46 6f 72 57 72 69 74 65 |heckLock|ForWrite|
|000019d0| 41 63 63 65 73 73 00 00 | 6a 00 45 78 49 73 52 65 |Access..|j.ExIsRe|
|000019e0| 73 6f 75 72 63 65 41 63 | 71 75 69 72 65 64 45 78 |sourceAc|quiredEx|
|000019f0| 63 6c 75 73 69 76 65 4c | 69 74 65 00 6b 00 45 78 |clusiveL|ite.k.Ex|
|00001a00| 49 73 52 65 73 6f 75 72 | 63 65 41 63 71 75 69 72 |IsResour|ceAcquir|
|00001a10| 65 64 53 68 61 72 65 64 | 4c 69 74 65 00 00 1a 00 |edShared|Lite....|
|00001a20| 43 63 50 75 72 67 65 43 | 61 63 68 65 53 65 63 74 |CcPurgeC|acheSect|
|00001a30| 69 6f 6e 00 09 00 43 63 | 46 6c 75 73 68 43 61 63 |ion...Cc|FlushCac|
|00001a40| 68 65 00 00 03 00 43 63 | 44 65 66 65 72 57 72 69 |he....Cc|DeferWri|
|00001a50| 74 65 00 00 00 00 43 63 | 43 61 6e 49 57 72 69 74 |te....Cc|CanIWrit|
|00001a60| 65 00 12 00 43 63 4d 64 | 6c 52 65 61 64 00 01 00 |e...CcMd|lRead...|
|00001a70| 43 63 43 6f 70 79 52 65 | 61 64 00 00 1e 00 43 63 |CcCopyRe|ad....Cc|
|00001a80| 53 65 74 41 64 64 69 74 | 69 6f 6e 61 6c 43 61 63 |SetAddit|ionalCac|
|00001a90| 68 65 41 74 74 72 69 62 | 75 74 65 73 00 00 a0 00 |heAttrib|utes....|
|00001aa0| 46 73 52 74 6c 43 68 65 | 63 6b 4c 6f 63 6b 46 6f |FsRtlChe|ckLockFo|
|00001ab0| 72 52 65 61 64 41 63 63 | 65 73 73 00 e8 00 46 73 |rReadAcc|ess...Fs|
|00001ac0| 52 74 6c 50 6f 73 74 53 | 74 61 63 6b 4f 76 65 72 |RtlPostS|tackOver|
|00001ad0| 66 6c 6f 77 00 00 8f 02 | 4d 6d 46 6f 72 63 65 53 |flow....|MmForceS|
|00001ae0| 65 63 74 69 6f 6e 43 6c | 6f 73 65 64 00 00 c5 04 |ectionCl|osed....|
|00001af0| 53 65 51 75 65 72 79 53 | 65 73 73 69 6f 6e 49 64 |SeQueryS|essionId|
|00001b00| 54 6f 6b 65 6e 00 bb 03 | 52 74 6c 43 6f 70 79 55 |Token...|RtlCopyU|
|00001b10| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 e0 03 |nicodeSt|ring....|
|00001b20| 52 74 6c 45 71 75 61 6c | 55 6e 69 63 6f 64 65 53 |RtlEqual|UnicodeS|
|00001b30| 74 72 69 6e 67 00 c1 01 | 49 6f 55 70 64 61 74 65 |tring...|IoUpdate|
|00001b40| 53 68 61 72 65 41 63 63 | 65 73 73 00 af 01 49 6f |ShareAcc|ess...Io|
|00001b50| 53 65 74 53 68 61 72 65 | 41 63 63 65 73 73 00 00 |SetShare|Access..|
|00001b60| 34 01 49 6f 43 68 65 63 | 6b 53 68 61 72 65 41 63 |4.IoChec|kShareAc|
|00001b70| 63 65 73 73 00 00 8b 01 | 49 6f 52 61 69 73 65 49 |cess....|IoRaiseI|
|00001b80| 6e 66 6f 72 6d 61 74 69 | 6f 6e 61 6c 48 61 72 64 |nformati|onalHard|
|00001b90| 45 72 72 6f 72 00 6f 00 | 45 78 51 75 65 75 65 57 |Error.o.|ExQueueW|
|00001ba0| 6f 72 6b 49 74 65 6d 00 | 13 00 43 63 4d 64 6c 52 |orkItem.|..CcMdlR|
|00001bb0| 65 61 64 43 6f 6d 70 6c | 65 74 65 00 15 00 43 63 |eadCompl|ete...Cc|
|00001bc0| 4d 64 6c 57 72 69 74 65 | 43 6f 6d 70 6c 65 74 65 |MdlWrite|Complete|
|00001bd0| 00 00 ae 00 46 73 52 74 | 6c 46 61 73 74 43 68 65 |....FsRt|lFastChe|
|00001be0| 63 6b 4c 6f 63 6b 46 6f | 72 57 72 69 74 65 00 00 |ckLockFo|rWrite..|
|00001bf0| ad 00 46 73 52 74 6c 46 | 61 73 74 43 68 65 63 6b |..FsRtlF|astCheck|
|00001c00| 4c 6f 63 6b 46 6f 72 52 | 65 61 64 00 55 01 49 6f |LockForR|ead.U.Io|
|00001c10| 46 69 6c 65 4f 62 6a 65 | 63 74 54 79 70 65 00 00 |FileObje|ctType..|
|00001c20| d5 01 49 6f 57 72 69 74 | 65 45 72 72 6f 72 4c 6f |..IoWrit|eErrorLo|
|00001c30| 67 45 6e 74 72 79 00 00 | 1d 01 49 6f 41 6c 6c 6f |gEntry..|..IoAllo|
|00001c40| 63 61 74 65 45 72 72 6f | 72 4c 6f 67 45 6e 74 72 |cateErro|rLogEntr|
|00001c50| 79 00 64 05 5f 61 6c 6c | 6d 75 6c 00 04 00 43 63 |y.d._all|mul...Cc|
|00001c60| 46 61 73 74 43 6f 70 79 | 52 65 61 64 00 00 05 00 |FastCopy|Read....|
|00001c70| 43 63 46 61 73 74 43 6f | 70 79 57 72 69 74 65 00 |CcFastCo|pyWrite.|
|00001c80| 2a 00 43 63 5a 65 72 6f | 44 61 74 61 00 00 f7 00 |*.CcZero|Data....|
|00001c90| 46 73 52 74 6c 54 65 61 | 72 64 6f 77 6e 50 65 72 |FsRtlTea|rdownPer|
|00001ca0| 53 74 72 65 61 6d 43 6f | 6e 74 65 78 74 73 00 00 |StreamCo|ntexts..|
|00001cb0| bc 00 46 73 52 74 6c 49 | 6e 69 74 69 61 6c 69 7a |..FsRtlI|nitializ|
|00001cc0| 65 46 69 6c 65 4c 6f 63 | 6b 00 d0 04 53 65 54 6f |eFileLoc|k...SeTo|
|00001cd0| 6b 65 6e 49 73 52 65 73 | 74 72 69 63 74 65 64 00 |kenIsRes|tricted.|
|00001ce0| fa 00 46 73 52 74 6c 55 | 6e 69 6e 69 74 69 61 6c |..FsRtlU|ninitial|
|00001cf0| 69 7a 65 46 69 6c 65 4c | 6f 63 6b 00 41 00 45 78 |izeFileL|ock.A.Ex|
|00001d00| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|00001d10| 54 61 67 50 72 69 6f 72 | 69 74 79 00 8d 04 52 74 |TagPrior|ity...Rt|
|00001d20| 6c 55 70 63 61 73 65 55 | 6e 69 63 6f 64 65 43 68 |lUpcaseU|nicodeCh|
|00001d30| 61 72 00 00 5b 01 49 6f | 46 72 65 65 4d 64 6c 00 |ar..[.Io|FreeMdl.|
|00001d40| b2 02 4d 6d 50 72 6f 62 | 65 41 6e 64 4c 6f 63 6b |..MmProb|eAndLock|
|00001d50| 50 61 67 65 73 00 1f 01 | 49 6f 41 6c 6c 6f 63 61 |Pages...|IoAlloca|
|00001d60| 74 65 4d 64 6c 00 13 02 | 4b 65 49 6e 69 74 69 61 |teMdl...|KeInitia|
|00001d70| 6c 69 7a 65 51 75 65 75 | 65 00 1f 03 4f 62 52 65 |lizeQueu|e...ObRe|
|00001d80| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 50 |ferenceO|bjectByP|
|00001d90| 6f 69 6e 74 65 72 00 00 | 8e 03 50 73 54 68 72 65 |ointer..|..PsThre|
|00001da0| 61 64 54 79 70 65 00 00 | 1b 02 4b 65 49 6e 73 65 |adType..|..KeInse|
|00001db0| 72 74 51 75 65 75 65 00 | 40 02 4b 65 52 65 6d 6f |rtQueue.|@.KeRemo|
|00001dc0| 76 65 51 75 65 75 65 00 | b6 02 4d 6d 51 75 65 72 |veQueue.|..MmQuer|
|00001dd0| 79 53 79 73 74 65 6d 53 | 69 7a 65 00 46 02 4b 65 |ySystemS|ize.F.Ke|
|00001de0| 52 75 6e 64 6f 77 6e 51 | 75 65 75 65 00 00 70 03 |RundownQ|ueue..p.|
|00001df0| 50 73 49 73 54 68 72 65 | 61 64 54 65 72 6d 69 6e |PsIsThre|adTermin|
|00001e00| 61 74 69 6e 67 00 3b 00 | 45 78 41 63 71 75 69 72 |ating.;.|ExAcquir|
|00001e10| 65 53 68 61 72 65 64 57 | 61 69 74 46 6f 72 45 78 |eSharedW|aitForEx|
|00001e20| 63 6c 75 73 69 76 65 00 | 3a 00 45 78 41 63 71 75 |clusive.|:.ExAcqu|
|00001e30| 69 72 65 53 68 61 72 65 | 64 53 74 61 72 76 65 45 |ireShare|dStarveE|
|00001e40| 78 63 6c 75 73 69 76 65 | 00 00 fd 03 52 74 6c 47 |xclusive|....RtlG|
|00001e50| 65 74 43 61 6c 6c 65 72 | 73 41 64 64 72 65 73 73 |etCaller|sAddress|
|00001e60| 00 00 c1 02 4d 6d 55 6e | 6c 6f 63 6b 50 61 67 65 |....MmUn|lockPage|
|00001e70| 73 00 ef 01 4b 65 43 61 | 6e 63 65 6c 54 69 6d 65 |s...KeCa|ncelTime|
|00001e80| 72 00 58 02 4b 65 53 65 | 74 54 69 6d 65 72 00 00 |r.X.KeSe|tTimer..|
|00001e90| 66 02 4b 65 66 52 65 6c | 65 61 73 65 53 70 69 6e |f.KefRel|easeSpin|
|00001ea0| 4c 6f 63 6b 46 72 6f 6d | 44 70 63 4c 65 76 65 6c |LockFrom|DpcLevel|
|00001eb0| 00 00 65 02 4b 65 66 41 | 63 71 75 69 72 65 53 70 |..e.KefA|cquireSp|
|00001ec0| 69 6e 4c 6f 63 6b 41 74 | 44 70 63 4c 65 76 65 6c |inLockAt|DpcLevel|
|00001ed0| 00 00 62 05 5f 61 6c 6c | 64 69 76 00 16 02 4b 65 |..b._all|div...Ke|
|00001ee0| 49 6e 69 74 69 61 6c 69 | 7a 65 54 69 6d 65 72 00 |Initiali|zeTimer.|
|00001ef0| 0e 02 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 44 70 |..KeInit|ializeDp|
|00001f00| 63 00 7b 02 4c 73 61 46 | 72 65 65 52 65 74 75 72 |c.{.LsaF|reeRetur|
|00001f10| 6e 42 75 66 66 65 72 00 | d4 01 49 6f 57 4d 49 57 |nBuffer.|..IoWMIW|
|00001f20| 72 69 74 65 45 76 65 6e | 74 00 40 00 4b 65 47 65 |riteEven|t.@.KeGe|
|00001f30| 74 43 75 72 72 65 6e 74 | 49 72 71 6c 00 00 02 00 |tCurrent|Irql....|
|00001f40| 45 78 54 72 79 54 6f 41 | 63 71 75 69 72 65 46 61 |ExTryToA|cquireFa|
|00001f50| 73 74 4d 75 74 65 78 00 | 0e 00 47 65 74 53 65 63 |stMutex.|..GetSec|
|00001f60| 75 72 69 74 79 55 73 65 | 72 49 6e 66 6f 00 6b 73 |urityUse|rInfo.ks|
|00001f70| 65 63 64 64 2e 73 79 73 | 00 00 00 00 00 00 00 00 |ecdd.sys|........|
+--------+-------------------------+-------------------------+--------+--------+