/ CyberMycha 2005 February / CyberMycha 02-2005 (Poland) (Track 01).bin / DirectX / dx81nt.exe / ks.sys / INIT

next >

view JSON data

view as text

open on a Mac

open on a PC

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 33 c0 c2 08 00 cc 6a 00 | 68 4c 6d 01 00 ff 15 14 |3.....j.|hLm.....|
|00000010| 67 01 00 b8 44 6d 01 00 | a3 48 6d 01 00 a3 44 6d |g...Dm..|.Hm...Dm|
|00000020| 01 00 33 c0 c2 04 00 cc | f4 b0 01 00 00 00 00 00 |..3.....|........|
|00000030| 00 00 00 00 bc bf 01 00 | 50 65 00 00 c4 b0 01 00 |........|Pe......|
|00000040| 00 00 00 00 00 00 00 00 | a8 c0 01 00 20 65 00 00 |........|.... e..|
|00000050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000060| 00 00 00 00 9a c0 01 00 | 8c c0 01 00 5e c0 01 00 |........|....^...|
|00000070| 4e c0 01 00 74 c0 01 00 | 24 c0 01 00 0e c0 01 00 |N...t...|$.......|
|00000080| 3a c0 01 00 e6 bf 01 00 | ca bf 01 00 fa bf 01 00 |:.......|........|
|00000090| 00 00 00 00 30 b4 01 00 | 70 b4 01 00 8e b4 01 00 |....0...|p.......|
|000000a0| b2 b4 01 00 d4 b4 01 00 | ec b4 01 00 fc b4 01 00 |........|........|
|000000b0| 10 b5 01 00 20 b5 01 00 | 40 b5 01 00 4a b5 01 00 |.... ...|@...J...|
|000000c0| 5e b5 01 00 70 b5 01 00 | 7c b5 01 00 94 b5 01 00 |^...p...||.......|
|000000d0| ac b5 01 00 b6 b5 01 00 | c0 b5 01 00 d4 b5 01 00 |........|........|
|000000e0| ee b5 01 00 02 b6 01 00 | 22 b6 01 00 3c b6 01 00 |........|"...<...|
|000000f0| 58 b6 01 00 6e b6 01 00 | 8e b6 01 00 a2 b6 01 00 |X...n...|........|
|00000100| b8 b6 01 00 c8 b6 01 00 | dc b6 01 00 f8 b6 01 00 |........|........|
|00000110| 1a b7 01 00 28 b7 01 00 | 44 b7 01 00 5c b7 01 00 |....(...|D...\...|
|00000120| 6e b7 01 00 7a b7 01 00 | 84 b7 01 00 9c b7 01 00 |n...z...|........|
|00000130| b8 b7 01 00 d4 b7 01 00 | ec b7 01 00 08 b8 01 00 |........|........|
|00000140| 1e b8 01 00 2c b8 01 00 | 4a b8 01 00 5a b8 01 00 |....,...|J...Z...|
|00000150| 78 b8 01 00 8e b8 01 00 | 9e b8 01 00 b0 b8 01 00 |x.......|........|
|00000160| be b8 01 00 da b8 01 00 | ee b8 01 00 fa b8 01 00 |........|........|
|00000170| 0c b9 01 00 1e b9 01 00 | 30 b9 01 00 4e b9 01 00 |........|0...N...|
|00000180| 60 b9 01 00 74 b9 01 00 | 80 b9 01 00 9a b9 01 00 |`...t...|........|
|00000190| aa b9 01 00 ba b9 01 00 | 12 b4 01 00 52 b4 01 00 |........|....R...|
|000001a0| 1e ba 01 00 36 ba 01 00 | 4c ba 01 00 5e ba 01 00 |....6...|L...^...|
|000001b0| 78 ba 01 00 90 ba 01 00 | b2 ba 01 00 c8 ba 01 00 |x.......|........|
|000001c0| e0 ba 01 00 f4 ba 01 00 | 12 bb 01 00 28 bb 01 00 |........|....(...|
|000001d0| 3c bb 01 00 50 bb 01 00 | 6c bb 01 00 84 bb 01 00 |<...P...|l.......|
|000001e0| a2 bb 01 00 b2 bb 01 00 | c8 bb 01 00 de bb 01 00 |........|........|
|000001f0| fa bb 01 00 12 bc 01 00 | 2c bc 01 00 3c bc 01 00 |........|,...<...|
|00000200| 50 bc 01 00 6a bc 01 00 | 84 bc 01 00 98 bc 01 00 |P...j...|........|
|00000210| ae bc 01 00 be bc 01 00 | d6 bc 01 00 f6 bc 01 00 |........|........|
|00000220| 14 bd 01 00 28 bd 01 00 | 38 bd 01 00 48 bd 01 00 |....(...|8...H...|
|00000230| 54 bd 01 00 64 bd 01 00 | 7a bd 01 00 8a bd 01 00 |T...d...|z.......|
|00000240| a4 bd 01 00 be bd 01 00 | de bd 01 00 fe bd 01 00 |........|........|
|00000250| 12 be 01 00 26 be 01 00 | 40 be 01 00 54 be 01 00 |....&...|@...T...|
|00000260| 68 be 01 00 80 be 01 00 | a2 be 01 00 c0 be 01 00 |h.......|........|
|00000270| cc be 01 00 dc be 01 00 | e6 be 01 00 02 bf 01 00 |........|........|
|00000280| 1c bf 01 00 34 bf 01 00 | 4e bf 01 00 62 bf 01 00 |....4...|N...b...|
|00000290| 74 bf 01 00 98 bf 01 00 | a8 bf 01 00 d8 b3 01 00 |t.......|........|
|000002a0| fe b3 01 00 f0 b3 01 00 | 92 b3 01 00 c2 b3 01 00 |........|........|
|000002b0| aa b3 01 00 4e b3 01 00 | 84 b3 01 00 6c b3 01 00 |....N...|....l...|
|000002c0| dc b9 01 00 30 b3 01 00 | fe b9 01 00 00 00 00 00 |....0...|........|
|000002d0| 63 00 45 78 49 6e 74 65 | 72 6c 6f 63 6b 65 64 50 |c.ExInte|rlockedP|
|000002e0| 6f 70 45 6e 74 72 79 53 | 4c 69 73 74 00 00 65 00 |opEntryS|List..e.|
|000002f0| 45 78 49 6e 74 65 72 6c | 6f 63 6b 65 64 50 75 73 |ExInterl|ockedPus|
|00000300| 68 45 6e 74 72 79 53 4c | 69 73 74 00 3e 00 45 78 |hEntrySL|ist.>.Ex|
|00000310| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|00000320| 54 61 67 00 4a 00 45 78 | 46 72 65 65 50 6f 6f 6c |Tag.J.Ex|FreePool|
|00000330| 00 00 07 01 49 6e 74 65 | 72 6c 6f 63 6b 65 64 44 |....Inte|rlockedD|
|00000340| 65 63 72 65 6d 65 6e 74 | 00 00 0a 01 49 6e 74 65 |ecrement|....Inte|
|00000350| 72 6c 6f 63 6b 65 64 49 | 6e 63 72 65 6d 65 6e 74 |rlockedI|ncrement|
|00000360| 00 00 c4 01 49 6f 66 43 | 6f 6d 70 6c 65 74 65 52 |....IofC|ompleteR|
|00000370| 65 71 75 65 73 74 00 00 | 4b 02 4b 65 57 61 69 74 |equest..|K.KeWait|
|00000380| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 00 |ForSingl|eObject.|
|00000390| 32 02 4b 65 53 65 74 45 | 76 65 6e 74 00 00 f5 01 |2.KeSetE|vent....|
|000003a0| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 45 76 65 6e |KeInitia|lizeEven|
|000003b0| 74 00 42 00 45 78 44 65 | 6c 65 74 65 4e 50 61 67 |t.B.ExDe|leteNPag|
|000003c0| 65 64 4c 6f 6f 6b 61 73 | 69 64 65 4c 69 73 74 00 |edLookas|ideList.|
|000003d0| 52 00 45 78 49 6e 69 74 | 69 61 6c 69 7a 65 4e 50 |R.ExInit|ializeNP|
|000003e0| 61 67 65 64 4c 6f 6f 6b | 61 73 69 64 65 4c 69 73 |agedLook|asideLis|
|000003f0| 74 00 43 00 45 78 44 65 | 6c 65 74 65 50 61 67 65 |t.C.ExDe|letePage|
|00000400| 64 4c 6f 6f 6b 61 73 69 | 64 65 4c 69 73 74 00 00 |dLookasi|deList..|
|00000410| 4c 00 45 78 46 72 65 65 | 54 6f 50 61 67 65 64 4c |L.ExFree|ToPagedL|
|00000420| 6f 6f 6b 61 73 69 64 65 | 4c 69 73 74 00 00 3a 00 |ookaside|List..:.|
|00000430| 45 78 41 6c 6c 6f 63 61 | 74 65 46 72 6f 6d 50 61 |ExAlloca|teFromPa|
|00000440| 67 65 64 4c 6f 6f 6b 61 | 73 69 64 65 4c 69 73 74 |gedLooka|sideList|
|00000450| 00 00 53 00 45 78 49 6e | 69 74 69 61 6c 69 7a 65 |..S.ExIn|itialize|
|00000460| 50 61 67 65 64 4c 6f 6f | 6b 61 73 69 64 65 4c 69 |PagedLoo|kasideLi|
|00000470| 73 74 00 00 fb 01 4b 65 | 49 6e 69 74 69 61 6c 69 |st....Ke|Initiali|
|00000480| 7a 65 53 70 69 6e 4c 6f | 63 6b 00 00 11 03 50 72 |zeSpinLo|ck....Pr|
|00000490| 6f 62 65 46 6f 72 52 65 | 61 64 00 00 1d 05 5f 65 |obeForRe|ad...._e|
|000004a0| 78 63 65 70 74 5f 68 61 | 6e 64 6c 65 72 33 00 00 |xcept_ha|ndler3..|
|000004b0| c3 01 49 6f 66 43 61 6c | 6c 44 72 69 76 65 72 00 |..IofCal|lDriver.|
|000004c0| 20 01 49 6f 42 75 69 6c | 64 53 79 6e 63 68 72 6f | .IoBuil|dSynchro|
|000004d0| 6e 6f 75 73 46 73 64 52 | 65 71 75 65 73 74 00 00 |nousFsdR|equest..|
|000004e0| ac 04 5a 77 43 6c 6f 73 | 65 00 4b 00 45 78 46 72 |..ZwClos|e.K.ExFr|
|000004f0| 65 65 50 6f 6f 6c 57 69 | 74 68 54 61 67 00 ed 04 |eePoolWi|thTag...|
|00000500| 5a 77 51 75 65 72 79 56 | 61 6c 75 65 4b 65 79 00 |ZwQueryV|alueKey.|
|00000510| d0 04 5a 77 4f 70 65 6e | 4b 65 79 00 e1 03 52 74 |..ZwOpen|Key...Rt|
|00000520| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|00000530| 6e 67 00 00 c9 03 52 74 | 6c 46 72 65 65 55 6e 69 |ng....Rt|lFreeUni|
|00000540| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 58 05 77 63 |codeStri|ng..X.wc|
|00000550| 73 63 61 74 00 00 5b 05 | 77 63 73 63 70 79 00 00 |scat..[.|wcscpy..|
|00000560| 30 04 52 74 6c 53 74 72 | 69 6e 67 46 72 6f 6d 47 |0.RtlStr|ingFromG|
|00000570| 55 49 44 00 88 04 53 65 | 52 65 6c 65 61 73 65 53 |UID...Se|ReleaseS|
|00000580| 75 62 6a 65 63 74 43 6f | 6e 74 65 78 74 00 6a 04 |ubjectCo|ntext.j.|
|00000590| 53 65 41 73 73 69 67 6e | 53 65 63 75 72 69 74 79 |SeAssign|Security|
|000005a0| 00 00 5b 01 49 6f 47 65 | 74 46 69 6c 65 4f 62 6a |..[.IoGe|tFileObj|
|000005b0| 65 63 74 47 65 6e 65 72 | 69 63 4d 61 70 70 69 6e |ectGener|icMappin|
|000005c0| 67 00 6f 04 53 65 43 61 | 70 74 75 72 65 53 75 62 |g.o.SeCa|ptureSub|
|000005d0| 6a 65 63 74 43 6f 6e 74 | 65 78 74 00 5e 01 49 6f |jectCont|ext.^.Io|
|000005e0| 47 65 74 52 65 6c 61 74 | 65 64 44 65 76 69 63 65 |GetRelat|edDevice|
|000005f0| 4f 62 6a 65 63 74 00 00 | fe 02 4f 62 66 52 65 66 |Object..|..ObfRef|
|00000600| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 00 00 1e 01 |erenceOb|ject....|
|00000610| 49 6f 42 75 69 6c 64 44 | 65 76 69 63 65 49 6f 43 |IoBuildD|eviceIoC|
|00000620| 6f 6e 74 72 6f 6c 52 65 | 71 75 65 73 74 00 50 00 |ontrolRe|quest.P.|
|00000630| 45 78 47 65 74 50 72 65 | 76 69 6f 75 73 4d 6f 64 |ExGetPre|viousMod|
|00000640| 65 00 bf 04 5a 77 45 6e | 75 6d 65 72 61 74 65 56 |e...ZwEn|umerateV|
|00000650| 61 6c 75 65 4b 65 79 00 | 03 05 5a 77 53 65 74 56 |alueKey.|..ZwSetV|
|00000660| 61 6c 75 65 4b 65 79 00 | 7e 03 52 74 6c 43 6f 6d |alueKey.|~.RtlCom|
|00000670| 70 61 72 65 4d 65 6d 6f | 72 79 00 00 ee 03 52 74 |pareMemo|ry....Rt|
|00000680| 6c 49 6e 74 65 67 65 72 | 54 6f 55 6e 69 63 6f 64 |lInteger|ToUnicod|
|00000690| 65 53 74 72 69 6e 67 00 | 70 03 52 74 6c 41 70 70 |eString.|p.RtlApp|
|000006a0| 65 6e 64 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |endUnico|deString|
|000006b0| 54 6f 53 74 72 69 6e 67 | 00 00 b3 04 5a 77 43 72 |ToString|....ZwCr|
|000006c0| 65 61 74 65 4b 65 79 00 | 71 03 52 74 6c 41 70 70 |eateKey.|q.RtlApp|
|000006d0| 65 6e 64 55 6e 69 63 6f | 64 65 54 6f 53 74 72 69 |endUnico|deToStri|
|000006e0| 6e 67 00 00 8b 03 52 74 | 6c 43 6f 70 79 55 6e 69 |ng....Rt|lCopyUni|
|000006f0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 6d 00 45 78 |codeStri|ng..m.Ex|
|00000700| 51 75 65 75 65 57 6f 72 | 6b 49 74 65 6d 00 50 05 |QueueWor|kItem.P.|
|00000710| 73 77 70 72 69 6e 74 66 | 00 00 5d 05 77 63 73 6c |swprintf|..].wcsl|
|00000720| 65 6e 00 00 06 02 4b 65 | 4c 65 61 76 65 43 72 69 |en....Ke|LeaveCri|
|00000730| 74 69 63 61 6c 52 65 67 | 69 6f 6e 00 76 00 45 78 |ticalReg|ion.v.Ex|
|00000740| 52 65 6c 65 61 73 65 46 | 61 73 74 4d 75 74 65 78 |ReleaseF|astMutex|
|00000750| 55 6e 73 61 66 65 00 00 | 34 00 45 78 41 63 71 75 |Unsafe..|4.ExAcqu|
|00000760| 69 72 65 46 61 73 74 4d | 75 74 65 78 55 6e 73 61 |ireFastM|utexUnsa|
|00000770| 66 65 00 00 df 01 4b 65 | 45 6e 74 65 72 43 72 69 |fe....Ke|EnterCri|
|00000780| 74 69 63 61 6c 52 65 67 | 69 6f 6e 00 95 01 49 6f |ticalReg|ion...Io|
|00000790| 53 65 74 44 65 76 69 63 | 65 49 6e 74 65 72 66 61 |SetDevic|eInterfa|
|000007a0| 63 65 53 74 61 74 65 00 | 08 01 49 6e 74 65 72 6c |ceState.|..Interl|
|000007b0| 6f 63 6b 65 64 45 78 63 | 68 61 6e 67 65 00 3f 02 |ockedExc|hange.?.|
|000007c0| 4b 65 53 65 74 54 69 6d | 65 72 00 00 67 01 49 6f |KeSetTim|er..g.Io|
|000007d0| 49 6e 76 61 6c 69 64 61 | 74 65 44 65 76 69 63 65 |Invalida|teDevice|
|000007e0| 52 65 6c 61 74 69 6f 6e | 73 00 12 03 50 72 6f 62 |Relation|s...Prob|
|000007f0| 65 46 6f 72 57 72 69 74 | 65 00 3d 00 45 78 41 6c |eForWrit|e.=.ExAl|
|00000800| 6c 6f 63 61 74 65 50 6f | 6f 6c 57 69 74 68 51 75 |locatePo|olWithQu|
|00000810| 6f 74 61 54 61 67 00 00 | 56 01 49 6f 47 65 74 44 |otaTag..|V.IoGetD|
|00000820| 65 76 69 63 65 50 72 6f | 70 65 72 74 79 00 d6 01 |evicePro|perty...|
|00000830| 4b 65 42 75 67 43 68 65 | 63 6b 45 78 00 00 be 04 |KeBugChe|ckEx....|
|00000840| 5a 77 45 6e 75 6d 65 72 | 61 74 65 4b 65 79 00 00 |ZwEnumer|ateKey..|
|00000850| e7 04 5a 77 51 75 65 72 | 79 4b 65 79 00 00 80 01 |..ZwQuer|yKey....|
|00000860| 49 6f 52 65 67 69 73 74 | 65 72 44 65 76 69 63 65 |IoRegist|erDevice|
|00000870| 49 6e 74 65 72 66 61 63 | 65 00 ca 03 52 74 6c 47 |Interfac|e...RtlG|
|00000880| 55 49 44 46 72 6f 6d 53 | 74 72 69 6e 67 00 2d 05 |UIDFromS|tring.-.|
|00000890| 5f 77 63 73 69 63 6d 70 | 00 00 39 01 49 6f 44 65 |_wcsicmp|..9.IoDe|
|000008a0| 6c 65 74 65 44 65 76 69 | 63 65 00 00 2e 01 49 6f |leteDevi|ce....Io|
|000008b0| 43 72 65 61 74 65 44 65 | 76 69 63 65 00 00 3c 01 |CreateDe|vice..<.|
|000008c0| 49 6f 44 65 74 61 63 68 | 44 65 76 69 63 65 00 00 |IoDetach|Device..|
|000008d0| 1c 01 49 6f 41 74 74 61 | 63 68 44 65 76 69 63 65 |..IoAtta|chDevice|
|000008e0| 54 6f 44 65 76 69 63 65 | 53 74 61 63 6b 00 f4 01 |ToDevice|Stack...|
|000008f0| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 44 70 63 00 |KeInitia|lizeDpc.|
|00000900| fc 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 54 69 |..KeInit|ializeTi|
|00000910| 6d 65 72 00 2f 05 5f 77 | 63 73 6e 69 63 6d 70 00 |mer./._w|csnicmp.|
|00000920| 8c 04 53 65 53 69 6e 67 | 6c 65 50 72 69 76 69 6c |..SeSing|lePrivil|
|00000930| 65 67 65 43 68 65 63 6b | 00 00 d7 01 4b 65 43 61 |egeCheck|....KeCa|
|00000940| 6e 63 65 6c 54 69 6d 65 | 72 00 40 02 4b 65 53 65 |ncelTime|r.@.KeSe|
|00000950| 74 54 69 6d 65 72 45 78 | 00 00 5a 00 45 78 49 6e |tTimerEx|..Z.ExIn|
|00000960| 74 65 72 6c 6f 63 6b 65 | 64 43 6f 6d 70 61 72 65 |terlocke|dCompare|
|00000970| 45 78 63 68 61 6e 67 65 | 36 34 00 00 4d 02 4b 65 |Exchange|64..M.Ke|
|00000980| 66 52 65 6c 65 61 73 65 | 53 70 69 6e 4c 6f 63 6b |fRelease|SpinLock|
|00000990| 46 72 6f 6d 44 70 63 4c | 65 76 65 6c 00 00 4c 02 |FromDpcL|evel..L.|
|000009a0| 4b 65 66 41 63 71 75 69 | 72 65 53 70 69 6e 4c 6f |KefAcqui|reSpinLo|
|000009b0| 63 6b 41 74 44 70 63 4c | 65 76 65 6c 00 00 12 02 |ckAtDpcL|evel....|
|000009c0| 4b 65 51 75 65 72 79 54 | 69 6d 65 49 6e 63 72 65 |KeQueryT|imeIncre|
|000009d0| 6d 65 6e 74 00 00 fd 01 | 4b 65 49 6e 69 74 69 61 |ment....|KeInitia|
|000009e0| 6c 69 7a 65 54 69 6d 65 | 72 45 78 00 1e 02 4b 65 |lizeTime|rEx...Ke|
|000009f0| 52 65 6c 65 61 73 65 4d | 75 74 65 78 00 00 42 02 |ReleaseM|utex..B.|
|00000a00| 4b 65 53 79 6e 63 68 72 | 6f 6e 69 7a 65 45 78 65 |KeSynchr|onizeExe|
|00000a10| 63 75 74 69 6f 6e 00 00 | 78 00 45 78 52 65 6c 65 |cution..|x.ExRele|
|00000a20| 61 73 65 52 65 73 6f 75 | 72 63 65 4c 69 74 65 00 |aseResou|rceLite.|
|00000a30| 35 00 45 78 41 63 71 75 | 69 72 65 52 65 73 6f 75 |5.ExAcqu|ireResou|
|00000a40| 72 63 65 45 78 63 6c 75 | 73 69 76 65 4c 69 74 65 |rceExclu|siveLite|
|00000a50| 00 00 35 02 4b 65 53 65 | 74 49 6d 70 6f 72 74 61 |..5.KeSe|tImporta|
|00000a60| 6e 63 65 44 70 63 00 00 | fd 02 4f 62 66 44 65 72 |nceDpc..|..ObfDer|
|00000a70| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|00000a80| 26 02 4b 65 52 65 6d 6f | 76 65 51 75 65 75 65 44 |&.KeRemo|veQueueD|
|00000a90| 70 63 00 00 06 01 49 6e | 74 65 72 6c 6f 63 6b 65 |pc....In|terlocke|
|00000aa0| 64 43 6f 6d 70 61 72 65 | 45 78 63 68 61 6e 67 65 |dCompare|Exchange|
|00000ab0| 00 00 1f 02 4b 65 52 65 | 6c 65 61 73 65 53 65 6d |....KeRe|leaseSem|
|00000ac0| 61 70 68 6f 72 65 00 00 | 03 02 4b 65 49 6e 73 65 |aphore..|..KeInse|
|00000ad0| 72 74 51 75 65 75 65 44 | 70 63 00 00 48 00 45 78 |rtQueueD|pc..H.Ex|
|00000ae0| 45 76 65 6e 74 4f 62 6a | 65 63 74 54 79 70 65 00 |EventObj|ectType.|
|00000af0| f8 02 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |..ObRefe|renceObj|
|00000b00| 65 63 74 42 79 48 61 6e | 64 6c 65 00 7b 00 45 78 |ectByHan|dle.{.Ex|
|00000b10| 53 65 6d 61 70 68 6f 72 | 65 4f 62 6a 65 63 74 54 |Semaphor|eObjectT|
|00000b20| 79 70 65 00 36 00 45 78 | 41 63 71 75 69 72 65 52 |ype.6.Ex|AcquireR|
|00000b30| 65 73 6f 75 72 63 65 53 | 68 61 72 65 64 4c 69 74 |esourceS|haredLit|
|00000b40| 65 00 03 03 50 6f 43 61 | 6c 6c 44 72 69 76 65 72 |e...PoCa|llDriver|
|00000b50| 00 00 0f 03 50 6f 53 74 | 61 72 74 4e 65 78 74 50 |....PoSt|artNextP|
|00000b60| 6f 77 65 72 49 72 70 00 | e4 01 4b 65 47 65 74 43 |owerIrp.|..KeGetC|
|00000b70| 75 72 72 65 6e 74 54 68 | 72 65 61 64 00 00 54 00 |urrentTh|read..T.|
|00000b80| 45 78 49 6e 69 74 69 61 | 6c 69 7a 65 52 65 73 6f |ExInitia|lizeReso|
|00000b90| 75 72 63 65 4c 69 74 65 | 00 00 44 00 45 78 44 65 |urceLite|..D.ExDe|
|00000ba0| 6c 65 74 65 52 65 73 6f | 75 72 63 65 4c 69 74 65 |leteReso|urceLite|
|00000bb0| 00 00 81 03 52 74 6c 43 | 6f 6d 70 61 72 65 55 6e |....RtlC|ompareUn|
|00000bc0| 69 63 6f 64 65 53 74 72 | 69 6e 67 00 31 01 49 6f |icodeStr|ing.1.Io|
|00000bd0| 43 72 65 61 74 65 46 69 | 6c 65 00 00 04 04 52 74 |CreateFi|le....Rt|
|00000be0| 6c 4d 61 70 47 65 6e 65 | 72 69 63 4d 61 73 6b 00 |lMapGene|ricMask.|
|00000bf0| 92 04 53 65 55 6e 6c 6f | 63 6b 53 75 62 6a 65 63 |..SeUnlo|ckSubjec|
|00000c00| 74 43 6f 6e 74 65 78 74 | 00 00 7d 04 53 65 4f 70 |tContext|..}.SeOp|
|00000c10| 65 6e 4f 62 6a 65 63 74 | 41 75 64 69 74 41 6c 61 |enObject|AuditAla|
|00000c20| 72 6d 00 00 78 04 53 65 | 46 72 65 65 50 72 69 76 |rm..x.Se|FreePriv|
|00000c30| 69 6c 65 67 65 73 00 00 | 69 04 53 65 41 70 70 65 |ileges..|i.SeAppe|
|00000c40| 6e 64 50 72 69 76 69 6c | 65 67 65 73 00 00 68 04 |ndPrivil|eges..h.|
|00000c50| 53 65 41 63 63 65 73 73 | 43 68 65 63 6b 00 7b 04 |SeAccess|Check.{.|
|00000c60| 53 65 4c 6f 63 6b 53 75 | 62 6a 65 63 74 43 6f 6e |SeLockSu|bjectCon|
|00000c70| 74 65 78 74 00 00 84 04 | 53 65 51 75 65 72 79 53 |text....|SeQueryS|
|00000c80| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00000c90| 72 49 6e 66 6f 00 8a 04 | 53 65 53 65 74 53 65 63 |rInfo...|SeSetSec|
|00000ca0| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 49 |urityDes|criptorI|
|00000cb0| 6e 66 6f 00 87 02 4d 6d | 4d 61 70 4c 6f 63 6b 65 |nfo...Mm|MapLocke|
|00000cc0| 64 50 61 67 65 73 00 00 | d8 01 4b 65 43 6c 65 61 |dPages..|..KeClea|
|00000cd0| 72 45 76 65 6e 74 00 00 | 72 00 45 78 52 61 69 73 |rEvent..|r.ExRais|
|00000ce0| 65 53 74 61 74 75 73 00 | 4a 01 49 6f 46 72 65 65 |eStatus.|J.IoFree|
|00000cf0| 4d 64 6c 00 a2 02 4d 6d | 55 6e 6c 6f 63 6b 50 61 |Mdl...Mm|UnlockPa|
|00000d00| 67 65 73 00 93 02 4d 6d | 50 72 6f 62 65 41 6e 64 |ges...Mm|ProbeAnd|
|00000d10| 4c 6f 63 6b 50 61 67 65 | 73 00 16 01 49 6f 41 6c |LockPage|s...IoAl|
|00000d20| 6c 6f 63 61 74 65 4d 64 | 6c 00 87 01 49 6f 52 65 |locateMd|l...IoRe|
|00000d30| 6c 65 61 73 65 43 61 6e | 63 65 6c 53 70 69 6e 4c |leaseCan|celSpinL|
|00000d40| 6f 63 6b 00 0d 01 49 6f | 41 63 71 75 69 72 65 43 |ock...Io|AcquireC|
|00000d50| 61 6e 63 65 6c 53 70 69 | 6e 4c 6f 63 6b 00 8b 00 |ancelSpi|nLock...|
|00000d60| 45 78 66 49 6e 74 65 72 | 6c 6f 63 6b 65 64 52 65 |ExfInter|lockedRe|
|00000d70| 6d 6f 76 65 48 65 61 64 | 4c 69 73 74 00 00 88 00 |moveHead|List....|
|00000d80| 45 78 66 49 6e 74 65 72 | 6c 6f 63 6b 65 64 49 6e |ExfInter|lockedIn|
|00000d90| 73 65 72 74 54 61 69 6c | 4c 69 73 74 00 00 59 02 |sertTail|List..Y.|
|00000da0| 4c 64 72 41 63 63 65 73 | 73 52 65 73 6f 75 72 63 |LdrAcces|sResourc|
|00000db0| 65 00 5c 02 4c 64 72 46 | 69 6e 64 52 65 73 6f 75 |e.\.LdrF|indResou|
|00000dc0| 72 63 65 5f 55 00 6f 01 | 49 6f 4f 70 65 6e 44 65 |rce_U.o.|IoOpenDe|
|00000dd0| 76 69 63 65 52 65 67 69 | 73 74 72 79 4b 65 79 00 |viceRegi|stryKey.|
|00000de0| f8 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 4d 75 |..KeInit|ializeMu|
|00000df0| 74 65 78 00 45 01 49 6f | 46 69 6c 65 4f 62 6a 65 |tex.E.Io|FileObje|
|00000e00| 63 74 54 79 70 65 00 00 | 54 01 49 6f 47 65 74 44 |ctType..|T.IoGetD|
|00000e10| 65 76 69 63 65 49 6e 74 | 65 72 66 61 63 65 73 00 |eviceInt|erfaces.|
|00000e20| 13 01 49 6f 41 6c 6c 6f | 63 61 74 65 44 72 69 76 |..IoAllo|cateDriv|
|00000e30| 65 72 4f 62 6a 65 63 74 | 45 78 74 65 6e 73 69 6f |erObject|Extensio|
|00000e40| 6e 00 5a 01 49 6f 47 65 | 74 44 72 69 76 65 72 4f |n.Z.IoGe|tDriverO|
|00000e50| 62 6a 65 63 74 45 78 74 | 65 6e 73 69 6f 6e 00 00 |bjectExt|ension..|
|00000e60| 49 01 49 6f 46 72 65 65 | 49 72 70 00 15 01 49 6f |I.IoFree|Irp...Io|
|00000e70| 41 6c 6c 6f 63 61 74 65 | 49 72 70 00 3f 05 6d 65 |Allocate|Irp.?.me|
|00000e80| 6d 6d 6f 76 65 00 11 01 | 49 6f 41 6c 6c 6f 63 61 |mmove...|IoAlloca|
|00000e90| 74 65 41 64 61 70 74 65 | 72 43 68 61 6e 6e 65 6c |teAdapte|rChannel|
|00000ea0| 00 00 10 03 50 6f 55 6e | 72 65 67 69 73 74 65 72 |....PoUn|register|
|00000eb0| 53 79 73 74 65 6d 53 74 | 61 74 65 00 08 03 50 6f |SystemSt|ate...Po|
|00000ec0| 52 65 67 69 73 74 65 72 | 53 79 73 74 65 6d 53 74 |Register|SystemSt|
|00000ed0| 61 74 65 00 6c 01 49 6f | 49 73 57 64 6d 56 65 72 |ate.l.Io|IsWdmVer|
|00000ee0| 73 69 6f 6e 41 76 61 69 | 6c 61 62 6c 65 00 09 03 |sionAvai|lable...|
|00000ef0| 50 6f 52 65 71 75 65 73 | 74 50 6f 77 65 72 49 72 |PoReques|tPowerIr|
|00000f00| 70 00 0c 03 50 6f 53 65 | 74 50 6f 77 65 72 53 74 |p...PoSe|tPowerSt|
|00000f10| 61 74 65 00 6e 01 49 6f | 4f 70 65 6e 44 65 76 69 |ate.n.Io|OpenDevi|
|00000f20| 63 65 49 6e 74 65 72 66 | 61 63 65 52 65 67 69 73 |ceInterf|aceRegis|
|00000f30| 74 72 79 4b 65 79 00 00 | 28 02 4b 65 52 65 73 65 |tryKey..|(.KeRese|
|00000f40| 74 45 76 65 6e 74 00 00 | 10 02 4b 65 51 75 65 72 |tEvent..|..KeQuer|
|00000f50| 79 53 79 73 74 65 6d 54 | 69 6d 65 00 6e 74 6f 73 |ySystemT|ime.ntos|
|00000f60| 6b 72 6e 6c 2e 65 78 65 | 00 00 3e 00 4b 65 51 75 |krnl.exe|..>.KeQu|
|00000f70| 65 72 79 50 65 72 66 6f | 72 6d 61 6e 63 65 43 6f |eryPerfo|rmanceCo|
|00000f80| 75 6e 74 65 72 00 4b 00 | 4b 66 52 65 6c 65 61 73 |unter.K.|KfReleas|
|00000f90| 65 53 70 69 6e 4c 6f 63 | 6b 00 48 00 4b 66 41 63 |eSpinLoc|k.H.KfAc|
|00000fa0| 71 75 69 72 65 53 70 69 | 6e 4c 6f 63 6b 00 01 00 |quireSpi|nLock...|
|00000fb0| 45 78 52 65 6c 65 61 73 | 65 46 61 73 74 4d 75 74 |ExReleas|eFastMut|
|00000fc0| 65 78 00 00 00 00 45 78 | 41 63 71 75 69 72 65 46 |ex....Ex|AcquireF|
|00000fd0| 61 73 74 4d 75 74 65 78 | 00 00 3c 00 4b 65 47 65 |astMutex|..<.KeGe|
|00000fe0| 74 43 75 72 72 65 6e 74 | 49 72 71 6c 00 00 33 00 |tCurrent|Irql..3.|
|00000ff0| 49 6f 4d 61 70 54 72 61 | 6e 73 66 65 72 00 32 00 |IoMapTra|nsfer.2.|
|00001000| 49 6f 46 72 65 65 4d 61 | 70 52 65 67 69 73 74 65 |IoFreeMa|pRegiste|
|00001010| 72 73 00 00 30 00 49 6f | 46 6c 75 73 68 41 64 61 |rs..0.Io|FlushAda|
|00001020| 70 74 65 72 42 75 66 66 | 65 72 73 00 49 00 4b 66 |pterBuff|ers.I.Kf|
|00001030| 4c 6f 77 65 72 49 72 71 | 6c 00 4a 00 4b 66 52 61 |LowerIrq|l.J.KfRa|
|00001040| 69 73 65 49 72 71 6c 00 | 48 41 4c 2e 64 6c 6c 00 |iseIrql.|HAL.dll.|
|00001050| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+