NTKERN — Windows 98 Debug

Source Tree

  • 4../../../../../../dos/dos386/vxd/ntkern/inc/macros.h
  • 5../../../../../../dos/dos386/vxd/ntkern/inc/pregstr.h
  • ../apcobj.c
  • ../assoc.c
  • ../attrib.c
  • ../bitmap.c
  • ../bugcheck.c
  • ../bus.c
  • ../callback.c
  • ../cnvint.c
  • ../connect.c
  • ../creasect.c
  • ../create.c
  • ../dbglog.c
  • ../debug.asm
  • ../devctrl.c
  • ../devnode.c
  • ../../../../../../dev/ntddk/inc/ntddk.h
  • ../devquobj.c
  • ../drvobj.c
  • ../errorlog.c
  • ../event.c
  • ../eventobj.c
  • ../exinit.c
  • ../guid.c
  • ../hal.asm
  • ../handle.c
  • i386/exsup2.asm
  • i386/exsup3.asm
  • i386/exsup.asm
  • i386/memchr.asm
  • i386/memcmp.asm
  • i386/strcat.asm
  • i386/strchr.asm
  • i386/strcmp.asm
  • i386/stricmp.asm
  • i386/strlen.asm
  • i386/strlwr.asm
  • i386/strncat.asm
  • i386/strncmp.asm
  • i386/strncpy.asm
  • i386/strnicmp.asm
  • i386/strnset.asm
  • i386/strrchr.asm
  • i386/strrev.asm
  • i386/strset.asm
  • i386/strspn.asm
  • i386/strstr.asm
  • i386/strupr.asm
  • ../idle.c
  • ../init.c
  • ../initload.c
  • ../internal.c
  • ../intrlfst.asm
  • ../iodeb.c
  • ../ioinit.c
  • ../iop.h
  • ../iosubs.c
  • ../irql.c
  • ../ixhwsup.c
  • ../ixisasup.c
  • ../ixphwsup.c
  • ../krnasm.asm
  • ../largeint.asm
  • LLDIV.ASM
  • LLMUL.ASM
  • LLREM.ASM
  • LLSHL.ASM
  • LLSHR.ASM
  • ../loader.c
  • ../loadunld.c
  • ../lookasid.c
  • ../maperr.c
  • ../mapview.c
  • ../misc.c
  • ../mm.c
  • ../mminit.c
  • ../movemem.asm
  • ../msg.asm
  • ../mtrr.c
  • ../mutntobj.c
  • ../notify.c
  • ../ntapi.c
  • /NT/private/crt32nt/convert/atox.c
  • /NT/private/crt32nt/convert/_ctype.c
  • /NT/private/crt32nt/convert/isctype.c
  • /NT/private/crt32nt/convert/iswctype.c
  • /NT/private/crt32nt/convert/mblen.c
  • /NT/private/crt32nt/convert/_mbslen.c
  • /NT/private/crt32nt/convert/mbstowcs.c
  • /NT/private/crt32nt/convert/mbtowc.c
  • /NT/private/crt32nt/convert/tolower.c
  • /NT/private/crt32nt/convert/toupper.c
  • /NT/private/crt32nt/convert/towlower.c
  • /NT/private/crt32nt/convert/towupper.c
  • /NT/private/crt32nt/convert/wcstombs.c
  • /NT/private/crt32nt/convert/wctomb.c
  • /NT/private/crt32nt/convert/xtoa.c
  • /NT/private/crt32nt/hack/stubs.c
  • /NT/private/crt32nt/misc/qsort.c
  • /NT/private/crt32nt/misc/rand.c
  • /NT/private/crt32nt/startup/crt0fp.c
  • /NT/private/crt32nt/stdio/_flsbuf.c
  • /NT/private/crt32nt/stdio/fputwc.c
  • /NT/private/crt32nt/stdio/output.c
  • /NT/private/crt32nt/stdio/sprintf.c
  • /NT/private/crt32nt/stdio/swprintf.c
  • /NT/private/crt32nt/stdio/vsprintf.c
  • /NT/private/crt32nt/stdio/vswprint.c
  • /NT/private/crt32nt/string/wcscat.c
  • /NT/private/crt32nt/string/wcschr.c
  • /NT/private/crt32nt/string/wcscmp.c
  • /NT/private/crt32nt/string/wcscspn.c
  • /NT/private/crt32nt/string/wcsicmp.c
  • /NT/private/crt32nt/string/wcslen.c
  • /NT/private/crt32nt/string/wcslwr.c
  • /NT/private/crt32nt/string/wcsncat.c
  • /NT/private/crt32nt/string/wcsncmp.c
  • /NT/private/crt32nt/string/wcsncpy.c
  • /NT/private/crt32nt/string/wcsnicmp.c
  • /NT/private/crt32nt/string/wcsnset.c
  • /NT/private/crt32nt/string/wcsrchr.c
  • /NT/private/crt32nt/string/wcsrev.c
  • /NT/private/crt32nt/string/wcsspn.c
  • /NT/private/crt32nt/string/wcsstr.c
  • /NT/private/crt32nt/string/wcsupr.c
  • ../ntutil.c
  • ../obclose.c
  • ../obcreate.c
  • ../obdir.c
  • ../obhandle.c
  • ../obinit.c
  • ../obinsert.c
  • ../objsup.c
  • ../oblink.c
  • ../obref.c
  • ../obtype.c
  • ../open.c
  • ../paction.c
  • ../parse.c
  • ../pbatt.c
  • ../penter.asm
  • ../pinfo.c
  • ../pnpapi.c
  • ../pnpctrl.c
  • ../pnpenum.c
  • ../pnphdlr.c
  • ../pnphirp.c
  • ../pnpinit.c
  • ../pnpirp.c
  • ../pnpmsg.c
  • ../pnpsetup.c
  • ../pnpstate.c
  • ../pnpstr.c
  • ../pnputil.c
  • ../pocall.c
  • ../podebug.c
  • ../pohdlr.c
  • ../poinit.c
  • ../pool.c
  • ../postate.c
  • ../pwork.c
  • ../qsinfo.c
  • ../raise.c
  • ../rdtont2.c
  • ../rdtont.c
  • ../read.c
  • ../regstr.c
  • ../regutil.c
  • ../resource.c
  • ../rtl.c
  • ../rtlintr.c
  • ../seastate.c
  • ../sectsup.c
  • ../semphobj.c
  • ../sertl.c
  • ../sidle.c
  • ../spinlock.c
  • ../switch.c
  • ../test.c
  • ../testob.c
  • ../thermal.c
  • ../thread.c
  • ../threads.c
  • ../time.c
  • ULLDIV.ASM
  • ULLREM.ASM
  • ULLSHR.ASM
  • ../umapview.c
  • ../util.c
  • ../utils.asm
  • ../vector.c
  • ../w32.asm
  • ../wait.c
  • ../worker.c
  • ../write.c
  • ../xxhal.c
  • ../zw.c
  • BusAddress.H
  • Ht.H
  • MmCa../creasect.c
  • PhysicalAddress.H
  • standardInformation.EndOfFile.H
Segment 1: .bss @ 00018340
  • 00000000 — _PsThreadType
  • 00000004 — _MmSectionObjectType
  • 00000008 — _ObpRemoveQueueActive
  • 0000000C — _ObpObjectsWithName
  • 00000010 — _ObpObjectsCreated
  • 00000014 — _ObpObjectsWithHandleDB
  • 00000020 — _ObpRootDirectoryMutex
  • 00000058 — _ObpTypeDirectoryObject
  • 0000005C — _ObpSymbolicLinkObjectType
  • 00000060 — _ObpObjectTypes
  • 000000C0 — _ObpRemoveObjectQueue
  • 000000D0 — _ObpRemoveObjectWorkItem
  • 000000E0 — _ObpDirectoryObjectType
  • 000000F0 — _ObpDefaultObject
  • 00000100 — _HandleCount
  • 00000104 — _ObpTypeObjectType
  • 00000108 — _ObpLock
  • 0000010C — _Global_Handle_Table
  • 00000110 — _ObpRootDirectoryObject
  • 00000120 — _IopErrorLogWorkItem
  • 00000130 — _IopErrorLogPortPending
  • 00000138 — _IopPendingIrps
  • 00000140 — _IopDatabaseEvent
  • 00000150 — _IopTimerQueueHead
  • 00000158 — _IopCancelSpinLock
  • 0000015C — _IopTimerLock
  • 00000160 — _ConfigurationInformation
  • 00000180 — _IoAdapterObjectType
  • 000001A0 — _IopTimerDpc
  • 000001C0 — _IopCompletionLock
  • 000001C4 — _IoOtherOperationCount
  • 000001C8 — _IopErrorLogLock
  • 000001D0 — _IoReadTransferCount
  • 000001D8 — _IopNotifyShutdownQueueHead
  • 000001E0 — _IoReadOperationCount
  • 000001E4 — _IoDriverObjectType
  • 000001E8 — _IopTimerCount
  • 000001F0 — _IoWriteTransferCount
  • 000001F8 — _IopFileObjectType
  • 00000200 — _IopTimer
  • 00000228 — _NextUniqueDeviceObjectNumber
  • 00000230 — _IopErrorLogListHead
  • 00000238 — _IoWriteOperationCount
  • 0000023C — _IoDeviceObjectType
  • 00000240 — _IopErrorLogAllocation
  • 00000244 — _IopDatabaseLock
  • 00000248 — _IoOtherTransferCount
  • 00000250 — _IopErrorLogAllocationLock
  • 00000254 — _IopPendingIrpCount
  • 00000260 — _IopAssociationHashTable
  • 00000460 — _IopAssociationCreationCount
  • 00000464 — _NullPage
  • 00000468 — _NlsMbOemCodePageTag
  • 00000469 — _LessThan16Mb
  • 0000046C — _HalpSystemHardwareLock
  • 00000470 — _MasterAdapterObject
  • 00000480 — _HalpBusDatabaseEvent
  • 00000490 — _HalpMapBufferSize
  • 00000494 — _HalpEisaDma
  • 00000498 — _HalpBusType
  • 000004A0 — _HalpMapBufferPhysicalAddress
  • 000004A8 — _HalpEisaControlBase
  • 000004C0 — _HalpEisaAdapter
  • 000004E0 — _ExNPagedLookasideLock
  • 000004E8 — _ExPagedLookasideListHead
  • 000004F0 — _ExPagedLookasideLock
  • 000004F8 — _ExNPagedLookasideListHead
  • 00000500 — _ExpCheckSystemInfoBusy
  • 00000510 — _ExpCheckSystemInfoWorkItem
  • 00000520 — _ExCbSetSystemInformation
  • 00000524 — _ExCbSetSystemTime
  • 00000528 — _ExpCheckSystemInfoLock
  • 0000052C — _ExCbSuspendHibernateSystem
  • 00000530 — _ExCallbackObjectType
  • 00000540 — _ExpCallbackEvent
  • 00000550 — _PendingDelayedWorkItems
  • 00000560 — _CriticalWorkItems
  • 00000590 — _PendingCriticalWorkItems
  • 000005A0 — _DelayedWorkItems
  • 000005D0 — _ExpEventObjectType
  • 000005D4 — _ExEventObjectType
  • 000005D8 — _ExpTimeout
  • 000005E0 — _ExpSystemResourcesList
  • 000005E8 — _ExpResourceSpinLock
  • 00000600 — _PopThrottleTimer
  • 00000640 — _PoSystemIdleTimer
  • 00000680 — _PopPolicyLock
  • 000006B8 — _PopThrottleSummary
  • 000006BC — _PopNotifyEvents
  • 000006C0 — _PopIdleScanDpc
  • 000006E0 — _PopIdleScanTime
  • 00000700 — _PopIdleScanTimer
  • 00000728 — _PopWorkerItemQueue
  • 00000730 — _PoHiberInProgress
  • 00000734 — _PopThrottleTimeout
  • 00000738 — _PopActionWaiters
  • 00000740 — _PopWorkerEvent
  • 00000750 — _PopDumbyEvent
  • 00000760 — _PopIdleScanTimeInSeconds
  • 00000764 — _PopInrushIrpPointer
  • 00000768 — _PoPowerSequence
  • 00000770 — _PopThermal
  • 00000778 — _PopVolumeDevices
  • 00000780 — _PopWorkerSpinLock
  • 00000784 — _PopWorkerThread
  • 00000788 — _PopCoolingMode
  • 0000078C — _PopInrushPending
  • 000007A0 — _PopAdminPolicy
  • 000007B8 — _PopWorkerPending
  • 000007C0 — _PopWorkerStartEvent
  • 000007D0 — _PopSetThrottle
  • 000007E0 — _PopNotifyLock
  • 00000818 — _PopPolicyIrpQueue
  • 00000820 — _PopSwitches
  • 00000840 — _PopSIdle
  • 00000878 — _PopInvalidNotifyBlockCount
  • 00000880 — _PopCapabilities
  • 000008D0 — _PopIrpSerialList
  • 000008D8 — _PopIrpSerialLock
  • 000008E0 — _PopCB
  • 000009A0 — _PopEventCode
  • 000009C0 — _PopThrottleDpc
  • 000009E0 — _PopIrpSerialListLength
  • 000009E4 — _PopIdle0PromoteLimit
  • 00000A00 — _PopVolumeLock
  • 00000A20 — _PopIdle0PromoteTicks
  • 00000A24 — _PopWorkerExitFlag
  • 00000A40 — _PopWorkerStartLock
  • 00000A80 — _PopIdle
  • 00000AE0 — _PopDopeGlobalLock
  • 00000AE4 — _PopWorkerStatus
  • 00000AE8 — _PopInrushIrpReferenceCount
  • 00000AF0 — _PopPolicyWorker
  • 00000B00 — _PopEventCallout
  • 00000B08 — _PopRequestedIrps
  • 00000B10 — _PopWorkerLock
  • 00000B14 — _PopFullWake
  • 00000B20 — _PopHeuristics
  • 00000B34 — _PoSleepingSummary
  • 00000B38 — _PopStateCallout
  • 00000B40 — _PopIdleDetectList
  • 00000B60 — _IopHwProfileChangeNotifyLock
  • 00000B80 — _IopDeviceClassNotifyList
  • 00000C00 — _IopDeviceClassNotifyLock
  • 00000C20 — _IopHwProfileChangeNotifyList
  • 00000C28 — _CurrentThread
  • 00000C30 — _KrnProcessList
  • 00000C38 — _NTKERNPreviousMode
  • 00000C40 — _ThreadTestEvent
  • 00000C50 — _SystemPTEPoolSize
  • 00000C54 — _SystemPTESpace
  • 00000C58 — _SystemPTEBusyMapHeader
  • 00000C60 — _SystemPTEBusyMap
  • 00000C64 — _hWin95NullPage
  • 00000C68 — _InitializationPhase
  • 00000C80 — _KTHREAD
  • 00000CD0 — _DebugRingBuffer
  • 00000CE0 — __osfile
  • 00000CF4 — __iob
  • 00000CF8 — _errno
  • 00000D00 — _DriverList
  • 00000D10 — ??_C@_0BB@HLDA@system32?2drivers?$AA@
  • 00000D24 — ??_C@_08OGD@system32?$AA@
  • 00000D30 — ??_C@_06GMLA@system?$AA@
  • 00000D38 — ??_C@_07NKAG@?$CFs?$CFs?2?$CFs?$AA@
  • 00000D40 — ??_C@_05LLOB@FALSE?$AA@
  • 00000D48 — ??_C@_0M@DPL@?4?4?2loader?4c?$AA@
  • 00000D54 — ??_C@_0CF@HIAL@EX?3?5Pageable?5code?5called?5at?5IRQL@
  • 00000D7C — ??_C@_0CC@HOED@?8NTKRNLOADER?3?5failing?5load?5of?5?$CFs@
  • 00000DA0 — ??_C@_0EE@OKCO@?8NTKRNLOADER?3?5library?5?$CFs?5does?5no@
  • 00000DE4 — ??_C@_0CD@DIIP@pFindDriver?$CI?5pszFileName?5?$CJ?5?$DN?$DN?5NU@
  • 00000E08 — ??_C@_0O@BMMI@DllInitialize?$AA@
  • 00000E18 — ??_C@_0CA@KDD@dllNode?9?$DOpfnDriverEntry?5?$DN?$DN?5NULL?$AA@
  • 00000E38 — ??_C@_0CM@PDGJ@?8NTKRNLOADER?3?5module?5?$CFs?5needs?5im@
  • 00000E64 — ??_C@_0CB@KHME@?8NTKRNLOADER?3?5loading?5module?5?$CFs?6@
  • 00000E88 — ??_C@_0O@HBII@pNode?5?$CB?$DN?5NULL?$AA@
  • 00000E98 — ??_C@_0M@PEDC@Result?5?$DN?$DN?50?$AA@
  • 00000EA4 — ??_C@_0BC@FIAL@pPrevNode?5?$CB?$DN?5NULL?$AA@
  • 00000EB8 — _RegistryMapping
  • 00000EF0 — _MappingTables
  • 00000EF8 — ??_C@_0BJ@KILJ@?8MapError?3?5returning?5?$CFx?6?$AA@
  • 00000F14 — ??_C@_0BG@FHPO@Context?5?$DM?5MAX_CONTEXT?$AA@
  • 00000F2C — ??_C@_0M@BIBN@?4?4?2maperr?4c?$AA@
  • 00000F38 — _MmpUserProbeAddress
  • 00000F3C — _MmUserProbeAddress
  • 00000F40 — ??_C@_0BB@BPIP@Inserted?5?$DN?$DN?5TRUE?$AA@
  • 00000F54 — ??_C@_0CF@DLHL@MemoryDescriptorList?9?$DOByteCount?5@
  • 00000F7C — ??_C@_0DE@CLJO@?$CIMemoryDescriptorList?9?$DOMdlFlags?5@
  • 00000FB0 — ??_C@_0EE@NPOP@?$CIMemoryDescriptorList?9?$DOMdlFlags?5@
  • 00000FF4 — ??_C@_0DJ@PPEF@?$CIMemoryDescriptorList?9?$DOMdlFlags?5@
  • 00001030 — ??_C@_07JJLE@?4?4?2mm?4c?$AA@
  • 00001038 — ??_C@_08GGLP@Ret?5?$CB?$DN?50?$AA@
  • 00001044 — ??_C@_0EE@GCAC@?$CIMemoryDescriptorList?9?$DOMdlFlags?5@
  • 00001088 — ??_C@_0BE@IEHF@BaseAddress?5?$CB?$DN?5NULL?$AA@
  • 0000109C — ??_C@_0CP@HHJD@HighestAcceptableAddress?4LowPart@
  • 000010CC — ??_C@_0IC@OFPN@?$CIMemoryDescriptorList?9?$DOMdlFlags?5@
  • 00001150 — ??_C@_0KB@IFNO@?$CIMemoryDescriptorList?9?$DOMdlFlags?5@
  • 000011F4 — ??_C@_0EC@HDEB@?$CI?$CIULONG?$CJMemoryDescriptorList?9?$DOBy@
  • 00001238 — ??_C@_0DO@MBHB@?$CI?$CIULONG?$CJMemoryDescriptorList?9?$DOSt@
  • 00001278 — ??_C@_0M@BOML@Result?5?$CB?$DN?50?$AA@
  • 00001284 — ??_C@_0DG@KEAH@MmMapIoSpace?3?5NtKernSetPhysicalC@
  • 000012BC — ??_C@_0CP@KEP@MmMapIoSpace?3?5Failed?5to?5set?5rang@
  • 000012EC — ??_C@_0BM@JIIP@PhysicalAddress?4HighPart?$DN?$DN0?$AA@
  • 00001308 — ??_C@_08GDGN@ret?5?$CB?$DN?50?$AA@
  • 00001314 — ??_C@_0BN@KFGI@?$CIULONG?$CJ?5SystemPTESpace?5?$CB?$DN?5?91?$AA@
  • 00001334 — ??_C@_0BG@HMFF@SystemPTEBusyMap?5?$CB?$DN?50?$AA@
  • 0000134C — ??_C@_1BG@OJPP@?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAW?$AAD?$AAM?$AA?$AA@
  • 00001364 — ??_C@_1GI@DEJO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY@
  • 000013CC — ??_C@_1BK@JLBF@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
  • 000013E8 — ??_C@_1M@HKNH@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
  • 000013F4 — ??_C@_19KJIP@?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
  • 00001400 — ??_C@_1BE@PJND@?$AAI?$AAm?$AAa?$AAg?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
  • 00001414 — ??_C@_1IA@PBPA@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY@
  • 00001494 — ??_C@_0BF@PFIM@NT_SUCCESS?$CI?5status?5?$CJ?$AA@
  • 000014AC — ??_C@_09CIIC@?4?4?2test?4c?$AA@
  • 000014B8 — ??_C@_1BG@FFLG@?$AA?2?$AAa?$AA?2?$AAb?$AA?2?$AAc?$AA?2?$AAd?$AA?2?$AAe?$AA?$AA@
  • 000014D0 — ??_C@_0N@GMNI@pIrp?5?$CB?$DN?5NULL?$AA@
  • 000014E0 — ??_C@_0M@FHGN@ext1?5?$DN?$DN?5ext?$AA@
  • 000014EC — ??_C@_0BF@EPII@NT_SUCCESS?$CI?5result?5?$CJ?$AA@
  • 00001504 — ??_C@_0M@EOAC@Length?5?$CB?$DN?50?$AA@
  • 00001510 — ??_C@_0BJ@PDB@?8Thread?5?$CF3d?5terminating?6?$AA@
  • 0000152C — ??_C@_0BI@HGAD@?8Thread?5?$CF3d?5unblocking?6?$AA@
  • 00001544 — ??_C@_0BJ@PJMD@status?5?$DN?$DN?5STATUS_SUCCESS?$AA@
  • 00001560 — ??_C@_0BG@HMBL@?8Thread?5?$CF3d?5starting?6?$AA@
  • 00001578 — ??_C@_0DJ@DAEE@?8ThreadTest?3?5Created?5thread?5?$CF3d?5@
  • 000015B4 — ??_C@_0BF@DNHP@kernelHandle?5?$CB?$DN?5NULL?$AA@
  • 000015CC — ??_C@_0CC@NJND@?8ThreadTest?3?5Creating?5thread?5?$CF3d@
  • 000015F0 — ??_C@_0BC@PBBK@regHandle?5?$CB?$DN?5NULL?$AA@
  • 00001604 — ??_C@_0BJ@NMKO@?2Registry?2Machine?2System?$AA@
  • 00001620 — ??_C@_0DE@DFLA@standardInformation?4EndOfFile?4Lo@
  • 00001654 — ??_C@_0CM@NP@standardInformation?4EndOfFile?4Hi@
  • 00001680 — ??_C@_0BB@LPCM@buffer?$FL?5i?5?$FN?5?$DN?$DN?5i?$AA@
  • 00001694 — ??_C@_1DC@LCIO@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AAC?$AA?3?$AA?2?$AAw?$AAd?$AAm?$AAf?$AAs@
  • 000016C8 — ??_C@_0P@LDMK@buffer?5?$CB?$DN?5NULL?$AA@
  • 000016D8 — _ThreadDataSlot
  • 000016DC — ??_C@_0CI@MEK@Get_Cur_Thread_Handle?$CI?$CJ?5?$DN?$DN?5Threa@
  • 00001704 — ??_C@_0N@CFEE@?4?4?2threads?4c?$AA@
  • 00001714 — ??_C@_0CE@DGGI@IsListEmpty?$CI?5?$CGKrnProcess?9?$DOMappin@
  • 00001738 — ??_C@_0CH@HLDJ@IsListEmpty?$CI?5?$CGKrnProcess?9?$DOThread@
  • 00001760 — ??_C@_0CP@BHCK@IsListEmpty?$CI?5?$CGKrnProcess?9?$DOLinear@
  • 00001790 — ??_C@_0BC@PAEG@KrnThread?5?$CB?$DN?5NULL?$AA@
  • 000017A4 — ??_C@_0BE@JDDB@ThreadDataSlot?5?$CB?$DN?50?$AA@
  • 000017B8 — ??_C@_0BN@KGNN@NewThread?9?$DOIrql?5?$DM?$DN?5APC_LEVEL?$AA@
  • 000017D8 — ??_C@_0CA@HKKH@KeGetCurrentIrql?$CI?$CJ?5?$DM?$DN?5APC_LEVEL?$AA@
  • 000017F8 — ??_C@_0DA@NBKJ@?$CIOldThread?$CJ?9?$DOThreadSignature?5?$DN?$DN?5@
  • 00001828 — ??_C@_0DA@GCFP@?$CINewThread?$CJ?9?$DOThreadSignature?5?$DN?$DN?5@
  • 00001858 — ??_C@_0BD@JEGO@ThreadDataSlot?5?$DO?50?$AA@
  • 0000186C — ??_C@_0DE@PDNA@?$CICurrentThread?$CJ?9?$DOThreadSignature@
  • 000018A0 — ??_C@_0DB@CHBE@?5KTHREAD?5?$CFx?0?5hRing0?5?$CFx?0?5IRQL?5?$CF02@
  • 000018D4 — ??_C@_0CB@EMFF@?6Process?5?$CFx?5sys?5?$CFx?5thread?5list?3?6@
  • 000018F8 — ??_C@_0BO@GPIB@HARDWARE?2DeviceMap?2InputClass?$AA@
  • 00001918 — ??_C@_0BN@KAPE@HARDWARE?2DeviceMap?2InputPort?$AA@
  • 00001938 — _PathMapArray
  • 00001948 — _pZWKeyList
  • 0000194C — _CLASS_NAME
  • 00001958 — ??_C@_07CDNJ@?4?4?2zw?4c?$AA@
  • 00001960 — ??_C@_0EF@COFB@InQueue?$CI?$CGpZWKeyList?0?5pzwkey?$CJ?5?$CG?$CG?5@
  • 000019A8 — ??_C@_0BO@HOLO@?8ZwOpenKey?3?5Key?3?5?$CFs?5Error?5?$CFx?6?$AA@
  • 000019C8 — ??_C@_0DD@GJHJ@ObjectAttributes?9?$DOSecurityQualit@
  • 000019FC — ??_C@_0CN@ILPC@ObjectAttributes?9?$DOSecurityDescri@
  • 00001A2C — ??_C@_0DI@FAIF@ObjectAttributes?9?$DOLength?5?$DN?$DN?5size@
  • 00001A64 — ??_C@_0BJ@PMMJ@Result?5?$DN?$DN?5STATUS_SUCCESS?$AA@
  • 00001A80 — ??_C@_0BJ@KALC@result?5?$DN?$DN?5STATUS_SUCCESS?$AA@
  • 00001A9C — ??_C@_0CA@BGKA@?8ZwCreateKey?3?5Key?3?5?$CFs?5Error?5?$CFx?6?$AA@
  • 00001ABC — ??_C@_0EI@KPHD@ValueTypeName?9?$DOLength?5?$DN?$DN?5ValueTy@
  • 00001B04 — ??_C@_0FD@FOAP@?$CI?$CIValueTypeName?$CJ?9?$DOLength?5?$CL?5?$CICm_T@
  • 00001B58 — ??_C@_0CB@HGHD@?$CICm_TypeName?4Length?$CJ?5?$DM?5MAXUSHORT@
  • 00001B7C — ??_C@_0FC@IEDP@?$CI?$CIValueTypeName?$CJ?9?$DOLength?5?$CL?5?$CIValu@
  • 00001BD0 — ??_C@_0CA@OGCC@?$CIValueName?9?$DOLength?$CJ?5?$DM?5MAXUSHORT?$AA@
  • 00001BF0 — ??_C@_0FB@PGGO@?$CI?$CIValueTypeName?$CJ?9?$DOLength?5?$CL?5?$CICm_T@
  • 00001C44 — ??_C@_0BP@EKCD@?$CICm_T_Name?4Length?$CJ?5?$DM?5MAXUSHORT?$AA@
  • 00001C64 — ??_C@_0CH@IONI@status?5?$DN?$DN?5STATUS_OBJECT_NAME_NOT@
  • 00001C8C — ??_C@_0BG@HMBO@ValueName?9?$DOLength?5?$DO?52?$AA@
  • 00001CA4 — ??_C@_0CL@BOHK@?8ZwQueryValueKey?3?5looking?5up?5?$CFs?5@
  • 00001CD0 — ??_C@_0BC@GPPO@NotificationEntry?$AA@
  • 00001CE4 — ??_C@_0M@CCGG@?4?4?2notify?4c?$AA@
  • 00001CF0 — ??_C@_0BF@FAHG@Notify?9?$DORefCount?5?$DO?50?$AA@
  • 00001D08 — ??_C@_06EHOD@Notify?$AA@
  • 00001D10 — ??_C@_0BF@JGPA@Notify?9?$DOUnregistered?$AA@
  • 00001D28 — ??_C@_0CJ@DALC@Driver?5?$CF08X?5failed?5the?5hw?5profil@
  • 00001D54 — ??_C@_0BD@DAAI@NTKERN?5PNP?5WARNS?3?5?$AA@
  • 00001D68 — ??_C@_0BI@NBFI@EventCategoryData?$DN?$DNNULL?$AA@
  • 00001D80 — ??_C@_0BC@GKE@EventCategoryData?$AA@
  • 00001D94 — ??_C@_0BD@GDEE@No?5valid?5code?5path?$AA@
  • 00001DA8 — ??_C@_0BC@CGKF@NTKERN?5PO?5ERROR?3?5?$AA@
  • 00001DBC — ??_C@_0M@OAIA@Count?5?$CB?$DN?5?91?$AA@
  • 00001DC8 — ??_C@_0M@BEI@?4?4?2attrib?4c?$AA@
  • 00001DD4 — _PoPowerTraceControl
  • 00001DD8 — _PoPowerTraceCount
  • 00001DDC — _PoPowerTraceMinorCode
  • 00001DEC — _PoPowerTracePoint
  • 00001E00 — _PoPowerType
  • 00001E08 — ??_C@_03BNPA@dev?$AA@
  • 00001E0C — ??_C@_03HGH@sys?$AA@
  • 00001E10 — ??_C@_08IFCJ@complete?$AA@
  • 00001E1C — ??_C@_08JLGB@setstate?$AA@
  • 00001E28 — ??_C@_08KHGE@startnxt?$AA@
  • 00001E34 — ??_C@_07EOPE@present?$AA@
  • 00001E3C — ??_C@_07JGJN@calldrv?$AA@
  • 00001E44 — ??_C@_05PBDF@query?$AA@
  • 00001E4C — ??_C@_03NHNF@set?$AA@
  • 00001E50 — ??_C@_03NHBO@seq?$AA@
  • 00001E54 — ??_C@_04OMDE@wait?$AA@
  • 00001E5C — ??_C@_0CM@GBAO@PopPolicyLockThread?5?$DN?$DN?5KeGetCurr@
  • 00001E88 — ??_C@_09FEJF@?4?4?2misc?4c?$AA@
  • 00001E94 — ??_C@_0M@EPEN@Unspecified?$AA@
  • 00001EA0 — ??_C@_07PCLD@Working?$AA@
  • 00001EA8 — ??_C@_09GJGM@Sleeping1?$AA@
  • 00001EB4 — ??_C@_09JGNF@Sleeping2?$AA@
  • 00001EC0 — ??_C@_09DMEC@Sleeping3?$AA@
  • 00001ECC — ??_C@_09NLJB@Hibernate?$AA@
  • 00001ED8 — ??_C@_08DCJK@Shutdown?$AA@
  • 00001EE4 — ??_C@_01PKMN@?$DP?$AA@
  • 00001EE8 — ??_C@_04COF@None?$AA@
  • 00001EF0 — ??_C@_05BKOF@Sleep?$AA@
  • 00001EF8 — ??_C@_0O@CLAD@ShutdownReset?$AA@
  • 00001F08 — ??_C@_0M@EBLN@ShutdownOff?$AA@
  • 00001F14 — ??_C@_06PBJL@?0?$CFs?0?$CFd?$AA@
  • 00001F1C — ??_C@_04BPBB@?0?$CF5s?$AA@
  • 00001F24 — ??_C@_0BF@LPFG@?0irp?$EA?$CF08lx?0isp?$EA?$CF08lx?$AA@
  • 00001F3C — ??_C@_09NLKM@?0?0?0?0?$CFs?0?$CFd?$AA@
  • 00001F48 — ??_C@_0BI@KJEM@PLOG?0?$CF05ld?0?$CF8s?0do?$EA?$CF08lx?$AA@
  • 00001F60 — ??_C@_0L@LAKC@?4?4?2ntapi?4c?$AA@
  • 00001F6C — ??_C@_0BO@LLFN@PopCriticalShutdown?3?5type?5?$CFx?6?$AA@
  • 00001F8C — ??_C@_08DJFO@hTimeOut?$AA@
  • 00001F98 — ??_C@_0N@MCIM@?4?4?2paction?4c?$AA@
  • 00001FA8 — ??_C@_08COLN@USER?4EXE?$AA@
  • 00001FB4 — ??_C@_0M@BPKL@MESSAGEBEEP?$AA@
  • 00001FC0 — ??_C@_09LCBD@?$CBhTimeOut?$AA@
  • 00001FCC — ??_C@_0CC@PBAG@PopAction?3?5dropped?5user?5event?5?$CFx@
  • 00001FF0 — ??_C@_0CN@OPPJ@PopAction?3?5dropping?5duplicate?5us@
  • 00002020 — ??_C@_0CD@POL@PopAction?3?5queueing?5user?5event?5?$CF@
  • 00002044 — ??_C@_0CB@MLKE@MinState?5?$DM?$DN?5PowerSystemHibernate@
  • 00002068 — ??_C@_0CJ@KLKC@PopSetPowerAction?3?5?$CFs?0?5Flags?5?$CFx?0@
  • 00002094 — ??_C@_0BK@PFIL@PopAction?3?5invalid?5state?6?$AA@
  • 000020B0 — ??_C@_0M@FPCA@EXITWINDOWS?$AA@
  • 000020BC — ??_C@_0DO@NEMD@PopIssueActionRequest?5of?5Shutdow@
  • 000020FC — ??_C@_0CH@ELDM@PowerAction?3?5Setting?5with?5direct@
  • 00002124 — ??_C@_0CF@COCL@PowerAction?3?5?$CFs?$CFs?0?5Min?$DN?$CFs?0?5Flags@
  • 0000214C — ??_C@_09DFAA@Promote?0?5?$AA@
  • 00002158 — ??_C@_0BI@JDPI@PopCB?3?5Battery?5removed?6?$AA@
  • 00002170 — ??_C@_0DI@NJGK@?$CI1?$CJ?5?$HM?5?$CI1?$CJ?5?$HM?5?$CI1?$CJ?5?$DP?5?$CIPopCompletePo@
  • 000021A8 — ??_C@_0BC@FADK@PopCB?3?5query?5tag?6?$AA@
  • 000021BC — ??_C@_0BD@CNMG@PopCB?3?5query?5info?6?$AA@
  • 000021D0 — ??_C@_0DC@EPCE@PopCB?3?5timeout?5?$CFx?0?5pwrstate?5?$CFx?0?5@
  • 00002204 — ??_C@_0BH@PIOK@PopCB?3?5query?5est?5time?6?$AA@
  • 0000221C — ??_C@_0BG@BPMI@PopCB?3?5irp?5cancelled?6?$AA@
  • 00002234 — ??_C@_0CA@CJKD@PopCB?3?5error?5?$CFx?5?9?5new?5state?5?$CFd?6?$AA@
  • 00002254 — ??_C@_0BI@BIJK@PopCB?3?5New?5battery?5tag?6?$AA@
  • 0000226C — ??_C@_0BC@HJDN@PopCB?3?5info?5read?6?$AA@
  • 00002280 — ??_C@_0CB@BDGM@Capacity?5?$DN?5?$CFu?5TriggerLevel?5?$DN?5?$CFu?6@
  • 000022A4 — ??_C@_0BO@BKPA@PopCB?3?5AC?1DC?5state?5not?5known?6?$AA@
  • 000022C4 — ??_C@_0DE@CHEL@PopCB?3?5Status?5PwrState?5?$CFx?0?5Cap?5?$CF@
  • 000022F8 — ??_C@_0BF@DKFE@PopCB?3?5EstTime?5read?6?$AA@
  • 00002310 — ??_C@_0BH@LF@Irp?5?$DN?$DN?5PopCB?4StatusIrp?$AA@
  • 00002328 — ??_C@_0L@NDDB@?4?4?2pbatt?4c?$AA@
  • 00002334 — ??_C@_0L@PJGB@?4?4?2pinfo?4c?$AA@
  • 00002340 — ??_C@_0BD@IHJK@GetExceptionCode?$CI?$CJ?$AA@
  • 00002354 — ??_C@_0BD@OLFO@NT_SUCCESS?$CIStatus?$CJ?$AA@
  • 00002368 — ??_C@_0CO@EOMN@PopConnectToPolicyDevice?3?5Device@
  • 00002398 — ??_C@_0EA@IFPL@PopConnectToPolicyDevice?3?5Batter@
  • 000023D8 — _PopIdleDetectionMode
  • 000023DC — _PopSimulate
  • 000023E0 — _PoDebug
  • 000023E4 — _PopAttributes
  • 00002434 — _PopRegKey
  • 00002470 — _PopAcRegName
  • 00002484 — _PopDcRegName
  • 00002498 — _PopHiberRegName
  • 000024BC — _PopAdminRegName
  • 000024DC — _PopHeuristicsRegName
  • 000024F4 — _PopCompositeBatteryName
  • 00002528 — _PopHiberFileName
  • 00002544 — _PopDebugHiberFileName
  • 00002560 — _PopDumpStackPrefix
  • 00002570 — _PopWorkerTypes
  • 00002584 — _PopPowerStateHandlers
  • 000025F4 — _PopPolicyLockThread
  • 000025F8 — _PopAcPolicy
  • 000026E0 — _PopDcPolicy
  • 000027C8 — _PopPolicy
  • 000027CC — _PopAction
  • 000027FC — _PopMaxPageRun
  • 00002800 — _PopDebugCloneBase
  • 00002804 — _PopDebugCloneEnd
  • 00002808 — _PopHiberFile
  • 00002824 — _PopHiberFileDebug
  • 00002840 — _PoPageLockData
  • 00002844 — _lpszWarningText
  • 00002898 — _hTimeOut
  • 0000289C — _PopSystemActionPending
  • 000028A0 — _PopAppyTimeHandle
  • 000028A4 — ??_C@_0M@FPBC@?4?4?2poinit?4c?$AA@
  • 000028B0 — ??_C@_0L@FLLE@?4?4?2pwork?4c?$AA@
  • 000028BC — ??_C@_0BO@ECJJ@PoSIdle?3?5new?5idle?5params?5set?6?$AA@
  • 000028DC — ??_C@_0M@MABC@?4?4?2switch?4c?$AA@
  • 000028E8 — ??_C@_0CN@GJOE@PopSystemButtonHandler?3?5unexpect@
  • 00002918 — ??_C@_0BE@FOP@HandleTable?5?$CB?$DN?5NULL?$AA@
  • 0000292C — ??_C@_0M@GFDJ@?4?4?2handle?4c?$AA@
  • 00002938 — ??_C@_0BA@NHDH@Process?5?$DN?$DN?5NULL?$AA@
  • 00002948 — ??_C@_0CC@JNAC@NewCountEntries?5?$DO?5OldCountEntrie@
  • 0000296C — ??_C@_0BE@GGBJ@HandleEntry?5?$CB?$DN?5NULL?$AA@
  • 00002980 — _PoolFlags
  • 0000299C — ??_C@_0EE@NOBJ@?$CI?$CI?$CIULONG?$CJmem?5?$FO?5?$CI?$CIULONG?$CJmem?5?$CL?5Num@
  • 000029E0 — ??_C@_0BN@OOPC@?$CI?$CIULONG?$CJmem?5?$CG?5PAGEMASK?$CJ?5?$DN?$DN?50?$AA@
  • 00002A00 — ??_C@_09GEEE@?4?4?2pool?4c?$AA@
  • 00002A0C — _ResourceTrack
  • 00002A10 — _ExpResourceTimeoutCount
  • 00002A14 — ??_C@_0BI@EPAN@?8EX?3?5Acquire?5Result?5?$CFx?6?$AA@
  • 00002A2C — ??_C@_0CP@BNCA@?$CIResource?9?$DOFlag?5?$CG?5ResourceNeverE@
  • 00002A5C — ??_C@_0O@DGEM@?4?4?2resource?4c?$AA@
  • 00002A6C — ??_C@_0BB@PHOC@?8EX?3?5Acquire?5?$CFx?6?$AA@
  • 00002A80 — ??_C@_0BM@BHKH@OwnerEntry?9?$DOOwnerCount?5?$CB?$DN?50?$AA@
  • 00002A9C — ??_C@_0BL@CLK@OwnerEntry?9?$DOOwnerCount?5?$DO?50?$AA@
  • 00002AB8 — ??_C@_0CJ@PFOO@OwnerEntry?9?$DOOwnerThread?5?$DN?$DN?5curre@
  • 00002AE4 — ??_C@_0BD@JHHH@OwnerEntry?5?$CB?$DN?5NULL?$AA@
  • 00002AF8 — ??_C@_0BK@DIMF@Resource?9?$DOActiveCount?5?$DO?50?$AA@
  • 00002B14 — ??_C@_0CJ@BPAC@Resource?9?$DOOwnerThreads?$FL0?$FN?4OwnerC@
  • 00002B40 — ??_C@_0FA@LJM@Resource?9?$DOOwnerThreads?$FL0?$FN?4OwnerT@
  • 00002B90 — ??_C@_0BK@LLFI@?8EX?3?5Release?5resource?5?$CFx?6?$AA@
  • 00002BAC — ??_C@_0CG@CKEH@IsExclusiveWaiting?$CIResource?$CJ?5?$DN?$DN?5@
  • 00002BD4 — ??_C@_0CD@CJLN@IsSharedWaiting?$CIResource?$CJ?5?$DN?$DN?5FAL@
  • 00002BF8 — ??_C@_0BB@MKLO@?8EX?5?9?5Rewaiting?6?$AA@
  • 00002C0C — ??_C@_0CE@DFPL@?8?5NumberOfExclusiveWaiters?5?$DN?5?$CF04@
  • 00002C30 — ??_C@_0CH@NBOI@?8?5ActiveCount?5?$DN?5?$CF04lx?5?5Flags?5?$DN?5?$CF@
  • 00002C58 — ??_C@_0BC@EMAC@IsOwnedExclusive?5?$AA@
  • 00002C6C — ??_C@_0O@DCBD@SharedWaiter?5?$AA@
  • 00002C7C — ??_C@_0BB@PBLJ@ExclusiveWaiter?5?$AA@
  • 00002C90 — ??_C@_0BB@MPPP@?8Resource?5?$EA?5?$CFlx?6?$AA@
  • 00002CA4 — ??_C@_0CB@COIA@?8?5?5Thread?5?$DN?5?$CF08lx?0?5Count?5?$DN?5?$CF02x?6@
  • 00002CC8 — _ExpSemaphoreObjectType
  • 00002CCC — _ExSemaphoreObjectType
  • 00002CD0 — _ExpEventMapping
  • 00002CE0 — ??_C@_1M@BACH@?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
  • 00002CEC — ??_C@_0CJ@OPKC@FastMutex?9?$DOOwner?5?$CB?$DN?5KeGetCurrent@
  • 00002D18 — ??_C@_0L@BHKK@?4?4?2event?4c?$AA@
  • 00002D24 — ??_C@_0CJ@EDLF@FastMutex?9?$DOOwner?5?$DN?$DN?5KeGetCurrent@
  • 00002D50 — ??_C@_0CM@DALH@?8Executive?3?5Resource?5initializat@
  • 00002D7C — ??_C@_0CJ@HCDA@?8Executive?3?5Event?5initialization@
  • 00002DA8 — ??_C@_0M@BMHK@?8run?5?$CFx?5?$CFx?6?$AA@
  • 00002DB4 — ??_C@_0BK@DAMD@?8Dequeued?5work?5item?5?$CF08x?6?$AA@
  • 00002DD0 — ??_C@_0M@JNCH@?4?4?2worker?4c?$AA@
  • 00002DDC — ??_C@_0BD@NPEO@?8Queue?5time?5?$CFx?5?$CFx?6?$AA@
  • 00002DF0 — ??_C@_0CF@PGIF@workItemListEntry?5?$CB?$DN?5?$CGWorkItem?9?$DO@
  • 00002E18 — ??_C@_0BO@KIMB@?8ExQueueWorkItem?$CI?5?$CF08x?0?5?$CFd?5?$CJ?6?$AA@
  • 00002E38 — ??_C@_0EA@GEIP@QueueType?5?$DN?$DN?5CriticalWorkQueue?5?$HM@
  • 00002E78 — ??_C@_0BN@DINI@WorkItem?9?$DOList?4Flink?5?$DN?$DN?5NULL?$AA@
  • 00002E98 — ??_C@_0BN@LLAA@QueueType?5?$DM?5MaximumWorkQueue?$AA@
  • 00002EB8 — _ExpCallbackMapping
  • 00002EC8 — ??_C@_1BC@NEEN@?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
  • 00002EDC — ??_C@_0O@CIPK@?4?4?2callback?4c?$AA@
  • 00002EEC — ??_C@_0DC@GJBM@IsListEmpty?$CI?$CGCallbackObject?9?$DOReg@
  • 00002F20 — ??_C@_0CE@MNAJ@KeGetCurrentIrql?$CI?$CJ?5?$DM?5DISPATCH_LE@
  • 00002F44 — ??_C@_0BB@IGGI@CallbackFunction?$AA@
  • 00002F58 — _ExpAdjustScanPeriod
  • 00002F5C — _ExpCurrentScanPeriod
  • 00002F60 — ??_C@_0O@MFNC@?4?4?2lookasid?4c?$AA@
  • 00002F70 — _HalpDmaOperations
  • 00002FA4 — ??_C@_0CF@BMOG@DeviceDescriptor?9?$DOReserved1?5?$DN?$DN?5F@
  • 00002FCC — ??_C@_0O@LALK@?4?4?2ixisasup?4c?$AA@
  • 00002FDC — ??_C@_0BI@GHDI@MapRegisterBase?5?$CB?$DN?5NULL?$AA@
  • 00002FF4 — ??_C@_0GG@BFBN@MaxPhysicalAddress?5?$DN?$DN?50xFFFFFF?5?$HM@
  • 0000305C — ??_C@_0L@IODE@?4?4?2xxhal?4c?$AA@
  • 00003068 — ??_C@_0N@CPMP@?4?4?2ixhwsup?4c?$AA@
  • 00003078 — ??_C@_0BJ@PBAE@BusAddress?4HighPart?5?$DN?$DN?50?$AA@
  • 00003094 — ??_C@_08CFKJ@?4?4?2bus?4c?$AA@
  • 000030A0 — ??_C@_0CB@LOCD@BusNumber?5?$DN?$DN?50?5?$HM?$HM?5BusNumber?5?$DN?$DN?51@
  • 000030C4 — ??_C@_0O@PCIC@?4?4?2ixphwsup?4c?$AA@
  • 000030D4 — _NlsMbCodePageTag
  • 000030D8 — _RtlFreeStringRoutine
  • 000030DC — _RtlAllocateStringRoutine
  • 000030E0 — ??_C@_08NBA@?4?4?2rtl?4c?$AA@
  • 000030EC — ??_C@_0N@OBFI@pStr?5?$CB?$DN?5NULL?$AA@
  • 000030FC — ??_C@_0DD@HEJB@RtlAssert?3?5Assertion?5?$CI?$CFs?$CJ?5failed@
  • 00003130 — ??_C@_0DG@FKJI@RtlAssert?3?5Assertion?5?$CI?$CFs?$CJ?5failed@
  • 00003168 — ??_C@_0FA@ICHG@?$CB?$CI?$CI?$CI?$CI?$CIULONG?$CJs1?5?$CG?51?$CJ?5?$CB?$DN?50?$CJ?5?$HM?$HM?5?$CI?$CI?$CI@
  • 000031B8 — ??_C@_0O@EICH@?$CIn2?5?$CG?51?$CJ?5?$DN?$DN?50?$AA@
  • 000031C8 — ??_C@_0O@HHLH@?$CIn1?5?$CG?51?$CJ?5?$DN?$DN?50?$AA@
  • 000031D8 — ??_C@_0CC@MGE@charsPrinted?5?$CB?$DN?5?$CIULONG?$CJ0xFFFFFFF@
  • 000031FC — _RtlpBitsClearAnywhere
  • 000032FC — _RtlpBitsClearLow
  • 000033FC — _RtlpBitsClearHigh
  • 000034FC — _RtlpBitsClearTotal
  • 00003614 — ??_C@_0M@BMFN@?4?4?2bitmap?4c?$AA@
  • 00003620 — ??_C@_0DK@NBID@StartingIndex?5?$CL?5NumberToSet?5?$DM?$DN?5B@
  • 0000365C — ??_C@_0DM@MOOM@StartingIndex?5?$CL?5NumberToClear?5?$DM?$DN@
  • 00003698 — ??_C@_0CJ@LCBI@?8RTL?3?5?$CFwZ?5key?5not?5found?5?9?5Status@
  • 000036C4 — ??_C@_13HMCP@?$AA?2?$AA?$AA@
  • 000036C8 — ??_C@_0DD@GFCE@?8RtlpGetRegistryHandle?3?5RTL_REGI@
  • 000036FC — ??_C@_0N@BBFO@?4?4?2regutil?4c?$AA@
  • 0000370C — ??_C@_0DH@KFIL@?8RTL?3?5Expand?5variables?5for?5?$CFwZ?5f@
  • 00003744 — ??_C@_0DC@HKMD@?8RTL?3?5QueryRoutine?$CI?5?$CFws?5?$CJ?5failed@
  • 00003778 — ??_C@_1CA@NKCK@?$AA?$CK?$AA?$CK?$AA?$CK?$AA?5?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$AA@
  • 00003798 — ??_C@_0CF@MIKF@RTL?3?5No?5values?5found?5under?5?$CFwZ?5k@
  • 000037C0 — ??_C@_0BO@KPE@?8RTL?3?5?$CFwZ?5sub?5key?5not?5found?4?6?$AA@
  • 000037E0 — _RtlpRegistryPaths
  • 000037F8 — _GuidFormat
  • 00003860 — ??_C@_1BM@CAEM@?$AAU?$AAs?$AAe?$AAr?$AA?2?$AA?4?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
  • 0000387C — ??_C@_1CG@BHB@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAM?$AAa?$AAp?$AA?$AA@
  • 000038A4 — ??_C@_1FE@EPLF@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW@
  • 000038F8 — ??_C@_1EC@JGOB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@
  • 0000393C — ??_C@_1EE@KIMN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@
  • 00003980 — _RtlpIntegerChars
  • 00003990 — _LeapYearDayToMonth
  • 00003B00 — _NormalYearDayToMonth
  • 00003C70 — _LeapYearDaysPrecedingMonth
  • 00003C8C — _NormalYearDaysPrecedingMonth
  • 00003CA8 — _SecondsToStartOf1970
  • 00003CB0 — _SecondsToStartOf1980
  • 00003CB8 — _Magic10000
  • 00003CC0 — _Magic10000000
  • 00003CC8 — _Magic86400000
  • 00003CD0 — ??_C@_09NKEK@?4?4?2guid?4c?$AA@
  • 00003CDC — ??_C@_0BJ@JENC@IopAssociationIsLocked?$CI?$CJ?$AA@
  • 00003CF8 — ??_C@_0L@BGAP@?4?4?2assoc?4c?$AA@
  • 00003D04 — ??_C@_0FF@KEH@IopAssociationLookup?$CI?5SlotHead?0?5@
  • 00003D5C — ??_C@_0DC@NHON@Remove?5?$DN?$DN?5FALSE?5?$HM?$HM?5?$CBARGUMENT_PRE@
  • 00003D90 — ??_C@_0M@FJLM@ShareVector?$AA@
  • 00003D9C — ??_C@_0BO@FBNN@Vector?5?$DO?$DN?5PRIMARY_VECTOR_BASE?$AA@
  • 00003DBC — ??_C@_0N@EGPN@?4?4?2connect?4c?$AA@
  • 00003DCC — ??_C@_0BB@KFEE@pInterruptObject?$AA@
  • 00003DE0 — ??_C@_1BA@NEMI@?$AA?$CF?$AAw?$AAZ?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
  • 00003DF0 — ??_C@_0M@FDPN@?4?4?2drvobj?4c?$AA@
  • 00003DFC — ??_C@_1BI@KHDI@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAl?$AAu?$AA?$AA@
  • 00003E14 — ??_C@_1BI@CICJ@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
  • 00003E2C — ??_C@_0EH@GBAE@?$CI?$CIFullPath?$CJ?9?$DOLength?5?$CL?5?$CICmSysName@
  • 00003E74 — ??_C@_0BP@LO@?$CICmSysName?4Length?$CJ?5?$DM?5MAXUSHORT?$AA@
  • 00003E94 — ??_C@_13DOBH@?$AA?4?$AA?$AA@
  • 00003E98 — ??_C@_0EH@POLI@?$CI?$CIFullPath?$CJ?9?$DOLength?5?$CL?5?$CIDriverNam@
  • 00003EE0 — ??_C@_0BP@JHN@?$CIDriverNameLength?$CJ?5?$DM?5MAXUSHORT?$AA@
  • 00003F00 — ??_C@_0EG@OCJP@?$CI?$CIFullPath?$CJ?9?$DOLength?5?$CL?5?$CIsizeof?$CI?5W@
  • 00003F48 — ??_C@_0FN@ODDF@?$CI?$CIFullPath?$CJ?9?$DOLength?5?$CL?5?$CICmSystemR@
  • 00003FA8 — ??_C@_0DF@DENH@?$CICmSystemRootSystem32driversName@
  • 00003FE0 — ??_C@_0BN@FCIO@FullPath?9?$DOMaximumLength?5?$DN?$DN?50?$AA@
  • 00004000 — ??_C@_0O@JEPC@?4?4?2initload?4c?$AA@
  • 00004010 — ??_C@_0CJ@BIDB@valueInformation?9?$DONameLength?5?$DM?5M@
  • 0000403C — ??_C@_0EF@HKLO@StringU?9?$DOBuffer?$FL?5StringU?9?$DOLength@
  • 00004084 — ??_C@_0CJ@OCCL@valueInformation?9?$DODataLength?5?$DM?5M@
  • 000040B0 — ??_C@_0CO@FDFI@?$CIkeyBasicInformation?9?$DONameLength@
  • 000040E0 — ??_C@_0CP@KOGF@?8Did?5not?5find?5any?5NT?5group?5secti@
  • 00004110 — ??_C@_0DN@NLEH@?$CIvalueInformation?9?$DODataLength?5?9?5@
  • 00004150 — ??_C@_0CG@KCJF@?8Did?5not?5find?5any?5NT?5drivers?5to?5@
  • 00004178 — ??_C@_0CB@OACJ@DeviceObject?9?$DOReferenceCount?5?$DO?50@
  • 0000419C — ??_C@_0O@ECGH@?4?4?2internal?4c?$AA@
  • 000041AC — ??_C@_0CD@EGL@irp?9?$DOIoStatus?4Status?5?$CB?$DN?50xffffff@
  • 000041D0 — ??_C@_0CM@KFNE@?$CB?$CIMdl?9?$DOMdlFlags?5?$CG?5MDL_MAPPED_TO_@
  • 000041FC — ??_C@_0BM@MEOJ@Mdl?9?$DOMdlFlags?5?$CG?5MDL_PARTIAL?$AA@
  • 00004218 — ??_C@_08KMMD@?4?4?2iop?4h?$AA@
  • 00004224 — ??_C@_0BK@PBCM@?8Disassociating?5Irp?3?5?5?$CFx?6?$AA@
  • 00004240 — ??_C@_0BN@FAPP@?8IopSyncServTail?3?5Synch?5I?1O?6?$AA@
  • 00004260 — ??_C@_0CO@DNIO@?8I?1O?5completed?5without?5pending?0?5@
  • 00004290 — ??_C@_0BG@HKPA@?$CBIrp?9?$DOPendingReturned?$AA@
  • 000042A8 — ??_C@_0CA@EBEF@?8IopSyncServTail?3?5deferred?5I?1O?6?$AA@
  • 000042C8 — ??_C@_0BF@CKCF@?8Queue?5irp?5?$CFx?5to?5?$CFx?6?$AA@
  • 000042E0 — ??_C@_0DE@GOLC@?8IopCancelAlertedRequested?3?5pend@
  • 00004314 — _Mmp64BitPhysicalAddress
  • 00004318 — _Mm64BitPhysicalAddress
  • 0000431C — _IoFileObjectType
  • 00004320 — ??_C@_0BI@DHNG@?8IoDriver?5object?5?$CFs?5?$CFx?6?$AA@
  • 00004338 — ??_C@_0BI@DJND@?8IoDevice?5object?5?$CFs?5?$CFx?6?$AA@
  • 00004350 — _IopFileMapping
  • 00004360 — ??_C@_0CH@DDOI@?8IoInit?3?5Failed?5to?5create?5Device@
  • 00004388 — ??_C@_0CH@MKKM@?8IoInit?3?5Failed?5to?5create?5Driver@
  • 000043B0 — ??_C@_1BA@FOJN@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
  • 000043C0 — ??_C@_1BA@BBDO@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
  • 000043D0 — ??_C@_1BI@EDCJ@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
  • 000043E8 — ??_C@_0CO@PGJE@?8IoInit?3?5Couldn?8t?5create?5object?5@
  • 00004418 — ??_C@_19GDCN@?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
  • 00004424 — ??_C@_0CF@BPAM@?8IoInit?3?5Created?5object?5type?5Dri@
  • 0000444C — ??_C@_1O@IMKM@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
  • 0000445C — ??_C@_0CF@KMGP@?8IoInit?3?5Created?5object?5type?5Dev@
  • 00004484 — ??_C@_1O@MDAP@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
  • 00004494 — ??_C@_1BA@PFGJ@?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
  • 000044A4 — ??_C@_0M@PGAE@Irp?9?$DOCancel?$AA@
  • 000044B0 — ??_C@_0CE@KOCD@?8Multiple?5irp?5complete?5requests?5@
  • 000044D4 — ??_C@_0FA@GAPL@?$CB?$CIIrp?9?$DOFlags?5?$CG?5IRP_PAGING_IO?5?$CG?$CG?5@
  • 00004524 — ??_C@_0CD@LLCI@Irp?9?$DOIoStatus?4Status?5?$CB?$DN?50xffffff@
  • 00004548 — ??_C@_0CH@LIKF@Irp?9?$DOIoStatus?4Status?5?$CB?$DN?5STATUS_P@
  • 00004570 — ??_C@_0BE@CGCC@?$CBIrp?9?$DOCancelRoutine?$AA@
  • 00004584 — ??_C@_0BJ@OGCG@Irp?9?$DOType?5?$DN?$DN?5IO_TYPE_IRP?$AA@
  • 000045A0 — ??_C@_0M@BAPF@?4?4?2iosubs?4c?$AA@
  • 000045AC — ??_C@_0BO@PMHC@Null?5name?5device?5object?5?$CF08X?6?$AA@
  • 000045CC — ??_C@_1BK@PKEN@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAU?$AA_?$AA?$CF?$AAx?$AA?$AA@
  • 000045E8 — ??_C@_0BD@EJPF@DeviceName?5?$DN?$DN?5NULL?$AA@
  • 000045FC — ??_C@_0DB@IEKJ@?$CIDriverObject?9?$DOFlags?5?$CG?5DRVO_UNLO@
  • 00004630 — ??_C@_0CM@PBOB@openPacket?4FileObject?9?$DOType?5?$DN?$DN?5I@
  • 0000465C — ??_C@_0CI@HCBG@Irp?9?$DOCurrentLocation?5?$DO?$DN?5Irp?9?$DOSta@
  • 00004684 — ??_C@_0BF@JJNP@deviceObject?5?$CB?$DN?5NULL?$AA@
  • 0000469C — ??_C@_0DE@LDPP@?$CIDeviceObject?9?$DOFlags?5?$CG?5DO_DEVICE@
  • 000046D0 — ??_C@_0DB@ENDE@Sending?5IRP?5to?5uninitialized?5dev@
  • 00004704 — ??_C@_06CAAP@Length?$AA@
  • 0000470C — ??_C@_0DB@DKHB@?$CI?$CIMdl?$CJ?9?$DOMdlFlags?5?$CG?5MDL_MAPPED_TO@
  • 00004740 — ??_C@_0CF@EEMI@?$CI?$CIMdl?$CJ?9?$DOMdlFlags?5?$CG?5MDL_PARTIAL?$CJ?5@
  • 00004768 — ??_C@_0DE@MOGE@?$CISourceDevice?9?$DOFlags?5?$CG?5DO_DEVICE@
  • 0000479C — ??_C@_0BN@MKDG@deviceObject?5?$CB?$DN?5SourceDevice?$AA@
  • 000047BC — ??_C@_1CM@OIPI@?$AAC?$AAo?$AAm?$AAp?$AAo?$AAn?$AAe?$AAn?$AAt?$AA?5?$AAI?$AAn?$AAf?$AAo?$AAr?$AAm?$AAa?$AAt?$AAi?$AAo@
  • 000047E8 — ??_C@_1CG@KHLK@?$AAC?$AAo?$AAn?$AAf?$AAi?$AAg?$AAu?$AAr?$AAa?$AAt?$AAi?$AAo?$AAn?$AA?5?$AAD?$AAa?$AAt?$AAa?$AA?$AA@
  • 00004810 — ??_C@_1BG@OHP@?$AAI?$AAd?$AAe?$AAn?$AAt?$AAi?$AAf?$AAi?$AAe?$AAr?$AA?$AA@
  • 00004828 — ??_C@_0BP@LOMH@listEntry?5?$CB?$DN?5?$CGtimer?9?$DOTimerList?$AA@
  • 00004848 — ??_C@_0DH@IPIH@?8IO?3?5Waiting?5for?5shutdown?5of?5dev@
  • 00004880 — ??_C@_0BK@BKEO@NTKERN?3?5Shutdown?5phase?50?6?$AA@
  • 0000489C — ??_C@_0CB@HHDA@ARGUMENT_PRESENT?$CI?5ClassGuidStr?5?$CJ@
  • 000048C0 — ??_C@_0CC@MONO@?$CBARGUMENT_PRESENT?$CI?5ClassGuidStr?5@
  • 000048E4 — ??_C@_1BI@LELB@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
  • 000048FC — ??_C@_0BP@DOAM@Device?5object?5?$CFx?5has?5no?5name?$CB?6?$AA@
  • 0000491C — ??_C@_0DM@HNLM@refString?4Buffer?$FL0?$FN?5?$DN?$DN?5L?8?$CD?8?5?$HM?$HM?5r@
  • 00004958 — ??_C@_0DC@PANC@guid?4Buffer?$FL?91?$FN?5?$DN?$DN?5?8?$CD?8?5?$HM?$HM?5guid?4B@
  • 0000498C — ??_C@_1BA@HANO@?$AA?2?$AA?2?$AA?4?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
  • 0000499C — ??_C@_19JGFB@?$AA?2?$AA?2?$AA?4?$AA?2?$AA?$AA@
  • 000049A8 — ??_C@_1BK@LPBE@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AA?$AA@
  • 000049C4 — ??_C@_1CM@JPOA@?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CD?$AA?$CF?$AAw?$AAZ?$AA?$CF?$AAs?$AA?$CF?$AAw@
  • 000049F0 — ??_C@_1BG@BJJK@?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
  • 00004A08 — ??_C@_15LEKJ@?$AA?2?$AA?4?$AA?$AA@
  • 00004A10 — ??_C@_11A@?$AA?$AA@
  • 00004A14 — ??_C@_0P@HFBB@?8?5?5?5?5Nothing?4?6?$AA@
  • 00004A24 — ??_C@_07KDEM@?8?5?5?5?$CFS?6?$AA@
  • 00004A2C — ??_C@_0DC@HIGH@?8IoGetDeviceInterfaces?$CI?5flags?5?$DN?$DN@
  • 00004A60 — ??_C@_0CA@CALG@len?5?$DN?$DN?5wcslen?$CI?5runningLinkPtr?5?$CJ?$AA@
  • 00004A80 — ??_C@_1BM@PFBL@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$CF?$AAs?$AA?$AA@
  • 00004A9C — ??_C@_1BC@KIOB@?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?$AA@
  • 00004AB0 — ??_C@_0DD@NEFC@?$CIFlags?5?$CG?5?$HODEVICE_INTERFACE_INCLU@
  • 00004AE4 — ??_C@_0CB@IJM@status?5?$DN?$DN?5STATUS_NO_MORE_ENTRIES@
  • 00004B08 — ??_C@_0DA@CEHC@ObGetObjectName?$CI?5PhysicalDeviceO@
  • 00004B38 — ??_C@_1BG@PKBH@?$AA?$CF?$AAw?$AAZ?$AA?$CD?$AA?$CF?$AAw?$AAZ?$AA?$CF?$AAw?$AAZ?$AA?$AA@
  • 00004B50 — ??_C@_0N@LCHJ@IRP_MJ_POWER?$AA@
  • 00004B60 — ??_C@_0L@BEII@IRP_MJ_PNP?$AA@
  • 00004B6C — ??_C@_0BG@MDKH@IRP_MJ_SYSTEM_CONTROL?$AA@
  • 00004B84 — ??_C@_0CN@LNGI@NTKERN?3?5?$CFS?5didn?8t?5fill?5in?5?$CFs?0?5se@
  • 00004BB4 — ??_C@_0CH@DELJ@?8IOLOAD?3?5Driver?5?$CFwZ?5took?5?$CFd?4?$CFds?5@
  • 00004BDC — ??_C@_0BE@IJEN@fail?5initialization?$AA@
  • 00004BF0 — ??_C@_0L@OJAJ@initialize?$AA@
  • 00004BFC — ??_C@_1DM@GGCI@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2@
  • 00004C38 — ??_C@_1BK@CENL@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AA?$AA@
  • 00004C54 — ??_C@_19BBIN@?$AA?4?$AAS?$AAY?$AAS?$AA?$AA@
  • 00004C60 — ??_C@_0O@BGFD@?4?4?2loadunld?4c?$AA@
  • 00004C70 — ??_C@_1BG@PJKH@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
  • 00004C88 — ??_C@_0BM@MEIF@?8NTKERN?3?5Could?5not?5load?5?$CFs?6?$AA@
  • 00004CA4 — ??_C@_15HGOB@?$AA?$CF?$AAS?$AA?$AA@
  • 00004CAC — ??_C@_1BG@BNKI@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAS?$AA?$AA@
  • 00004CC4 — ??_C@_0CC@FHJH@IopCloseFile?3?5not?5the?5last?5close@
  • 00004CE8 — ??_C@_0M@LLKE@?4?4?2objsup?4c?$AA@
  • 00004CF4 — ??_C@_0BO@HHAE@?5?$CK?$CK?$CK?5Driver?5?$CFwZ?5unloaded?5?$CK?$CK?$CK?6?$AA@
  • 00004D14 — ??_C@_0BP@KDIL@?5?$CK?$CK?$CK?5Unloading?5driver?5?$CFwZ?5?$CK?$CK?$CK?6?$AA@
  • 00004D34 — ??_C@_0BM@OMIM@?$CBdriverObject?9?$DODeviceObject?$AA@
  • 00004D50 — ??_C@_0L@GCJ@?4?4?2parse?4c?$AA@
  • 00004D5C — ??_C@_0BG@FDC@?$CBirp?9?$DOPendingReturned?$AA@
  • 00004D74 — ??_C@_0M@KHFH@?4?4?2qsinfo?4c?$AA@
  • 00004D80 — ??_C@_0BN@CDI@?8NTWF?3?5Direct?5I?1O?5operation?6?$AA@
  • 00004DA0 — ??_C@_0CF@LNCE@?8NTWF?3?5?9ve?5file?5offsets?5are?5ille@
  • 00004DC8 — ??_C@_0CK@PLIB@?8NTWF?3?5Invalid?5Byte?5offset?5is?50?5@
  • 00004DF4 — ??_C@_0BE@BOJF@?8NtWF?3?5Synch?5Write?6?$AA@
  • 00004E08 — ??_C@_0BN@COGG@?8NtWF?3?5Failed?5to?5map?5handle?6?$AA@
  • 00004E28 — ??_C@_0L@DCIN@?4?4?2write?4c?$AA@
  • 00004E34 — ??_C@_09NMLL@?4?4?2open?4c?$AA@
  • 00004E40 — ??_C@_0L@HBI@String?3?$CFS?6?$AA@
  • 00004E4C — ??_C@_0BE@NFBF@NumberOfStrings?3?$CFx?6?$AA@
  • 00004E60 — ??_C@_0BC@JGKM@IoControlCode?3?$CFx?6?$AA@
  • 00004E74 — ??_C@_0BD@JIFC@SequenceNumber?3?$CFx?6?$AA@
  • 00004E88 — ??_C@_0BA@GGNH@FinalStatus?3?$CFd?6?$AA@
  • 00004E98 — ??_C@_0BF@BIHM@UniqueErrorValue?3?$CFd?6?$AA@
  • 00004EB0 — ??_C@_0O@HIIA@ErrorCode?3?$CFx?6?$AA@
  • 00004EC0 — ??_C@_0BC@CGBB@EventCategory?3?$CFx?6?$AA@
  • 00004ED4 — ??_C@_0BB@IENP@DumpDataSize?3?$CFx?6?$AA@
  • 00004EE8 — ??_C@_0BA@EPKC@Retry?5Count?3?$CFx?6?$AA@
  • 00004EF8 — ??_C@_0BI@OMHI@Major?5Function?5Code?3?$CFx?6?$AA@
  • 00004F10 — ??_C@_0BA@DBMH@Driver?5Name?3?$CFS?6?$AA@
  • 00004F20 — ??_C@_0CC@KNBK@?6IO?5Error?5Log?5Packet?5Information@
  • 00004F44 — ??_C@_13A@?$AA?$AA?$AA?$AA@
  • 00004F48 — ??_C@_0O@HGEG@?4?4?2errorlog?4c?$AA@
  • 00004F58 — ??_C@_0N@NIGP@?4?4?2obclose?4c?$AA@
  • 00004F68 — ??_C@_0CF@KOGC@?8NTCreateDirectoryObject?3?5Failed@
  • 00004F90 — ??_C@_0CG@LOBF@?8NTCreateDirectoryObject?5?3?5handl@
  • 00004FB8 — ??_C@_0BL@IPMC@ObpLeaveRootDirectoryMutex?$AA@
  • 00004FD4 — ??_C@_0BB@ENME@?$CKDirectoryLocked?$AA@
  • 00004FE8 — ??_C@_0L@IEEC@?4?4?2obdir?4c?$AA@
  • 00004FF4 — ??_C@_0BK@JPFP@OB?3?5?$CFs?5called?5at?5IRQL?5?$CFd?6?$AA@
  • 00005010 — ??_C@_0BL@PMFI@ObpEnterRootDirectoryMutex?$AA@
  • 0000502C — ??_C@_0BI@IJIK@ObpLeaveObjectTypeMutex?$AA@
  • 00005044 — ??_C@_0BI@JNGK@ObpEnterObjectTypeMutex?$AA@
  • 0000505C — ??_C@_0O@JIDA@?4?4?2obhandle?4c?$AA@
  • 0000506C — ??_C@_0CI@IPHL@OB?3?5Invalid?5symbolic?5link?5target@
  • 00005094 — ??_C@_0CD@BDNN@?8Deref?3?5Postponing?5object?5remova@
  • 000050B8 — ??_C@_0FI@ILCA@?$CIObjectHeader?9?$DOType?5?$DN?$DN?5NULL?$CJ?5?$HM?$HM?5@
  • 00005110 — ??_C@_0BM@EBJD@?8Deref?3?5removing?5object?5?$CFx?6?$AA@
  • 0000512C — ??_C@_0BP@DGOF@ObjectHeader?9?$DOHandleCount?5?$DN?$DN?50?$AA@
  • 0000514C — ??_C@_0L@JACA@?4?4?2obref?4c?$AA@
  • 00005158 — ??_C@_0EG@LKGP@?8ReferenceObjectByHandle?3?5no?5han@
  • 000051A0 — ??_C@_0CF@MJOM@?8ReferenceObjectByHandle?3?5Object@
  • 000051C8 — ??_C@_0CK@KNAD@?8CreateObjectType?3?5New?5object?5cr@
  • 000051F4 — ??_C@_1BK@OIJB@?$AA?2?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAT?$AAy?$AAp?$AAe?$AAs?$AA?$AA@
  • 00005210 — ??_C@_0CN@MNGB@?8ObInit?3?5Failed?5to?5create?5Type?5S@
  • 00005240 — ??_C@_0CL@JNNG@?8ObInit?3?5Created?5object?5type?5Sym@
  • 0000526C — ??_C@_0CF@PJKN@?8ObInit?3?5Failed?5to?5create?5Direct@
  • 00005294 — ??_C@_0CI@KPOF@?8ObInit?3?5Created?5object?5type?5Dir@
  • 000052BC — ??_C@_1BE@PPB@?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
  • 000052D0 — ??_C@_0CA@LLPC@?8ObInit?3?5Failed?5to?5create?5Type?6?$AA@
  • 000052F0 — ??_C@_0CD@LFKG@?8ObInit?3?5Created?5object?5type?5Typ@
  • 00005314 — ??_C@_0BN@FKCK@?8Symbolic?5link?5object?5?$CFs?5?$CFx?6?$AA@
  • 00005334 — ??_C@_0BG@NGKK@?8Directory?5object?5?$CFs?6?$AA@
  • 0000534C — ??_C@_0BP@OJA@?8Dumping?5the?5object?5directory?6?$AA@
  • 0000536C — ??_C@_0BN@DCAD@?8Dumping?5the?5root?5directory?6?$AA@
  • 0000538C — ??_C@_0CK@DNIJ@AccessState?9?$DOPrivilegesAllocated@
  • 000053B8 — ??_C@_0CI@EEDD@AccessState?9?$DOSecurityDescriptor?5@
  • 000053E0 — ??_C@_0O@FEJO@?4?4?2seastate?4c?$AA@
  • 000053F0 — ??_C@_0CF@ICB@Environment?5?$DM?$DN?5CurrentApcEnviron@
  • 00005418 — ??_C@_0M@PPGA@?4?4?2apcobj?4c?$AA@
  • 00005424 — ??_C@_0BE@IMLO@ApcMode?5?$DN?$DN?5UserMode?$AA@
  • 00005438 — ??_C@_0BG@BBGI@Thread?9?$DOApcEvent?5?$CB?$DN?50?$AA@
  • 00005450 — ??_C@_0BJ@KBGE@?$CIApc?$CJ?9?$DOType?5?$DN?$DN?5ApcObject?$AA@
  • 0000546C — _FSysErr
  • 0000547C — _FSysErrVerbose
  • 0000548C — _FErrorCode
  • 0000549C — _FCaption
  • 000054C0 — ??_C@_0BI@NKKE@?$CFs?5called?5by?5?$CFx?5?6?$CFs?5?$CFx?6?$AA@
  • 000054D8 — ??_C@_0DB@NGP@?$CFs?5called?5by?5?$CFx?5?6?$CFs?5?$CFx?5?6Paramete@
  • 0000550C — ??_C@_0CF@IOKM@KeGetCurrentIrql?$CI?$CJ?5?$DN?$DN?5DISPATCH_L@
  • 00005534 — ??_C@_0CJ@OIEB@?$CIDeviceQueue?$CJ?9?$DOType?5?$DN?$DN?5DeviceQue@
  • 00005560 — ??_C@_0O@NALC@?4?4?2devquobj?4c?$AA@
  • 00005570 — ??_C@_0BK@MEIK@DeviceQueue?9?$DOBusy?5?$DN?$DN?5TRUE?$AA@
  • 0000558C — ??_C@_0DC@HCDK@?8KeSetEvent?$CI?5?$CFx?0?5?$CFx?0?5?$CFx?5?$CJ?0?5event@
  • 000055C0 — ??_C@_03OEEH@not?$AA@
  • 000055C4 — ??_C@_0CF@HKIN@KeGetCurrentIrql?$CI?$CJ?5?$DM?$DN?5DISPATCH_L@
  • 000055EC — ??_C@_0O@KGAP@?4?4?2eventobj?4c?$AA@
  • 000055FC — _NestCount
  • 00005600 — ??_C@_0BA@HGBI@NestCount?5?$DM?5100?$AA@
  • 00005610 — ??_C@_09IFHF@?4?4?2irql?4c?$AA@
  • 0000561C — ??_C@_0BL@NDNN@Irql?5?$DM?$DN?5KeGetCurrentIrql?$CI?$CJ?$AA@
  • 00005638 — ??_C@_0O@PFAK@NestCount?5?$DO?50?$AA@
  • 00005648 — ??_C@_0P@KGBI@?$CKSpinLock?5?$DN?$DN?50?$AA@
  • 00005658 — ??_C@_0O@BGJP@?4?4?2spinlock?4c?$AA@
  • 00005668 — ??_C@_0P@MIP@?$CKSpinLock?5?$DN?$DN?51?$AA@
  • 00005678 — ??_C@_0CJ@BPBA@?8KeDelayExecutionThread?3?5waiting@
  • 000056A4 — _MiSectionMapping
  • 000056B4 — ??_C@_0CI@PBCC@Unimplemented?5function?5MiSection@
  • 000056DC — ??_C@_1CO@EMLF@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAP?$AAh?$AAy?$AAs?$AAi?$AAc?$AAa?$AAl?$AAM?$AAe?$AAm?$AAo@
  • 0000570C — ??_C@_1BA@GGKP@?$AAS?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
  • 0000571C — _MMCONTROL
  • 00005720 — ??_C@_0O@ODBN@?4?4?2creasect?4c?$AA@
  • 00005730 — ??_C@_0CO@DBJL@?$CBSection?9?$DOSegment?9?$DOControlArea?9?$DO@
  • 00005760 — ??_C@_0DG@LLHL@Section?9?$DOSegment?9?$DOControlArea?9?$DOu@
  • 00005798 — ??_C@_0CC@HK@MapView?3?5invalid?5capturedbase?5?$CFx@
  • 000057BC — ??_C@_0CL@EJIF@?8?5?5?5?5Inheritdisp?5?$CFlx?5?5Allocation@
  • 000057E8 — ??_C@_0DL@BEEL@?8?5?5?5?5view?5size?5?$CFlx?5offset?5?$CFlx?5co@
  • 00005824 — ??_C@_0EI@GEBF@?8mapview?5process?5handle?5?$CFlx?5sect@
  • 0000586C — ??_C@_0CE@JKGP@ProcessHandle?5?$DN?$DN?5NtCurrentProces@
  • 00005890 — ??_C@_0N@NHO@?4?4?2mapview?4c?$AA@
  • 000058A0 — ??_C@_0BM@CMGN@?$CBControlArea?9?$DOu?4Flags?4Image?$AA@
  • 000058BC — ??_C@_0CE@IDGM@ControlArea?9?$DOu?4Flags?4PhysicalMem@
  • 000058E0 — ??_C@_0DC@CGOO@?$CIULONG?$CJStartingAddress?5?$DN?$DN?5?$CIPage6@
  • 00005914 — ??_C@_0CE@ELCJ@IoGetCurrentProcess?$CI?$CJ?5?$DN?$DN?5KrnProc@
  • 00005938 — ??_C@_0BK@OJFM@CurrentPage?5?$DM?$DN?5EndingPage?$AA@
  • 00005954 — ??_C@_0CJ@MMEM@?$CILinearBlock?9?$DOFreePages?5?$CG?5PageMa@
  • 00005980 — ??_C@_0CP@GAMC@ZwMapView?3?5insufficient?5linear?5m@
  • 000059B0 — ??_C@_0CM@NAL@ControlArea?9?$DONumberOfSectionRefe@
  • 000059DC — ??_C@_0BN@GIJF@ZwMapView?3?5failed?5to?5commit?6?$AA@
  • 000059FC — ??_C@_0O@IEIB@ZeroBits?5?$DN?$DN?50?$AA@
  • 00005A0C — ??_C@_0BN@KDME@SectionOffset?9?$DOHighPart?5?$DN?$DN?50?$AA@
  • 00005A2C — ??_C@_0DC@MPIB@?8NtUnmapView?3?5process?5handle?5?$CFx?0@
  • 00005A60 — ??_C@_0O@MKLC@?4?4?2umapview?4c?$AA@
  • 00005A70 — ??_C@_0CB@LNFD@IoGetCurrentProcess?$CI?$CJ?5?$DN?$DN?5Process@
  • 00005A94 — ??_C@_0CB@IGFP@ARGUMENT_PRESENT?$CI?5StartRoutine?5?$CJ@
  • 00005AB8 — ??_C@_0CB@NPJJ@ARGUMENT_PRESENT?$CI?5ThreadHandle?5?$CJ@
  • 00005ADC — ??_C@_0M@BFBM@?4?4?2thread?4c?$AA@
  • 00005AE8 — ??_C@_06NMEN@result?$AA@
  • 00005AF0 — _PspThreadMapping
  • 00005B00 — ??_C@_1O@BEJI@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AA?$AA@
  • 00005B14 — ___nullstring
  • 00005B18 — ___wnullstring
  • 00005B1C — ??_C@_1O@POHA@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA@
  • 00005B2C — ??_C@_06ONKE@?$CInull?$CJ?$AA@
  • 00005B38 — __pctype
  • 00005B3C — __pwctype
  • 00005B40 — __ctype
  • 00005D44 — ___mb_cur_max
  • 00005D48 — __decimal_point
  • 00005D4C — __decimal_point_length
  • 00005D50 — __fltused
  • 00005D54 — __ldused
  • 00005D58 — ___fastflag
  • 00005D60 — __cfltcvt_tab
  • 00005D78 — __sigintoff
  • 00005D80 — _GUID_HWPROFILE_QUERY_CHANGE
  • 00005D90 — _GUID_HWPROFILE_CHANGE_CANCELLED
  • 00005DA0 — _GUID_HWPROFILE_CHANGE_COMPLETE
  • 00005DB0 — _GUID_DEVICE_INTERFACE_ARRIVAL
  • 00005DC0 — _GUID_DEVICE_INTERFACE_REMOVAL
  • 00005DD0 — _GUID_TARGET_DEVICE_QUERY_REMOVE
  • 00005DE0 — _GUID_TARGET_DEVICE_REMOVE_CANCELLED
  • 00005DF0 — _GUID_TARGET_DEVICE_REMOVE_COMPLETE
  • 00005E00 — _GUID_BUS_INTERFACE_STANDARD
  • 00005E10 — _GUID_PCI_BUS_INTERFACE_STANDARD
  • 00005E20 — _GUID_ARBITER_INTERFACE_STANDARD
  • 00005E30 — _GUID_TRANSLATOR_INTERFACE_STANDARD
  • 00005E40 — _GUID_ACPI_INTERFACE_STANDARD
  • 00005E50 — _GUID_BUS_TYPE_PCMCIA
  • 00005E60 — _GUID_BUS_TYPE_PCI
  • 00005EAC — _GUID_DEVICE_BATTERY
  • 00005EBC — _GUID_DEVICE_SYS_BUTTON
  • 00005ECC — _GUID_DEVICE_LID
  • 00005EDC — _GUID_DEVICE_THERMAL_ZONE
  • 00005EEC — _GUID_CLASS_INPUT
  • 00006080 — ___lookuptable
  • 000060DC — _FreeDriverInitialization@4
  • 00006124 — _MapWin95Err@8
  • 00006188 — _MmUnlockPages@4
  • 00006331 — _MiDeferredUnLock@20
  • 0000637D — _MmUnmapLockedPages@8
  • 000064A9 — _MiDeferredUnMap@20
  • 000064E6 — _MmMapLockedPages@8
  • 00006682 — _ntkIsSwapping@0
  • 0000669D — _MmSizeOfMdl@8
  • 000066CC — _MmCreateMdl@12
  • 00006741 — _MmAllocateContiguousMemory@12
  • 000067AD — _MmBuildMdlForNonPagedPool@4
  • 00006847 — _MmFreeContiguousMemory@4
  • 0000688C — _MmProbeAndLockPages@12
  • 00006A2F — _MmProbeAndLockProcessPages@16
  • 00006AFC — _MiLockProcessPages@20
  • 00006B26 — _MiLockPages@20
  • 00006B6D — _MmMapIoSpace@16
  • 00006DBE — _MmUnmapIoSpace@8
  • 00006E11 — _MiReserveSystemPtes@20
  • 00006EDA — _MiInitializeSystemPtes@12
  • 00006FC2 — _MiReleaseSystemPtes@12
  • 00007020 — _RtlTest@0
  • 00007099 — _IrpTest@0
  • 000070CA — _AssociationTest@0
  • 00007176 — _RegistryTest@0
  • 000071FC — _HalBusDataTest@0
  • 0000723E — _ThreadTestThread@4
  • 0000729E — _ThreadTest@0
  • 000073C9 — _RegOpenAbsoluteKey@4
  • 00007441 — _RegTest@0
  • 00007474 — _DelayTest@0
  • 00007498 — _FileTest@0
  • 0000766C — _Test@0
  • 00007699 — _ThreadSwitchNotification@4
  • 00007794 — _KeGetCurrentThread@0
  • 000077C3 — _IoGetCurrentProcess@0
  • 000077D1 — _memmove
  • 00007819 — _InitializeRegistry@0
  • 00007840 — _ProbeForRead@12
  • 0000788B — _ProbeForWrite@12
  • 000078A4 — _DeviceIoControl@12
  • 0000794C — _IoUnregisterPlugPlayNotification@4
  • 000079CB — _IoReportTargetDeviceChange@8
  • 000079D8 — _IopInitializePlugPlayNotification@0
  • 00007A7E — _IopReferenceNotify@4
  • 00007AF5 — _IopDereferenceNotify@4
  • 00007B99 — _IopNotifyHwProfileChange@4
  • 00007C77 — _IopNotifyTargetDeviceChange@8
  • 00007C84 — _IopNotifyDeviceClassChange@12
  • 00007D84 — _IoRegisterPlugPlayNotification@28
  • 00007FC5 — _NtGetDevnodeFromFileHandle@8
  • 00008083 — _PoSetSystemState@4
  • 000080AF — _PoRegisterSystemState@8
  • 00008110 — _PoUnregisterSystemState@4
  • 0000812F — _PopApplyAttributeState@8
  • 00008214 — _PopAttribNop@4
  • 0000821C — _PopSystemRequiredSet@4
  • 00008234 — _PopUserPresentSet@4
  • 0000826B — _ConvertToCMPowerState@12
  • 000082B8 — _PoQueryPowerSequence@0
  • 000082C1 — _PopAssertPolicyLockOwned@0
  • 00008317 — @_PopInternalError@4
  • 0000832E — _PopSystemStateString@4
  • 00008387 — _PopPowerActionString@4
  • 000083D7 — _PoPowerTracePrint@24
  • 000084C7 — _PopSetCapability@4
  • 000084EE — _PopOpenPowerKey@4
  • 00008584 — _PopCloseSystemHandle@4
  • 00008598 — _PoRegisterDeviceNotify@24
  • 000085A5 — _PoCancelDeviceNotify@4
  • 000085B2 — _NtSetThreadExecutionState@8
  • 000086D5 — _NtRequestWakeupLatency@4
  • 0000875E — _NtInitiatePowerAction@16
  • 0000876B — _NtSetSystemPowerState@12
  • 00008778 — _PopCriticalShutdown@4
  • 0000879E — _CancelWarningDialog
  • 000087EB — _PopMessageBoxCompletion
  • 0000880B — _PopDisplayWarningDialog
  • 000088E0 — _PopSetPowerAction@16
  • 00008BF8 — _PopCompleteAction@8
  • 00008C24 — _PopPromoteActionFlag@20
  • 00008C6A — _PopPolicyWorkerAction@0
  • 00008D22 — _PopPolicyWorkerActionPromote@0
  • 00008DC7 — _PopShutdown
  • 00008E13 — _PopIssueActionRequest@16
  • 00008F56 — _PopRemoveUserEventsFromQueue@0
  • 00008F74 — _PopSuspendTimeOut
  • 00008F94 — _PopCompositeBatteryDeviceHandler@16
  • 000095BC — _PopComputeCBTime@0
  • 000095CC — _PopResetCBTriggers@4
  • 00009600 — _PopCurrentPowerState@4
  • 00009777 — _NtPowerInformation@20
  • 00009BDC — _PopApplyAdminPolicy@12
  • 00009CB5 — _PopApplyPolicy@16
  • 00009E2F — _PopVerifyPowerPolicy@12
  • 0000A03A — _PopVerifyThrottle@8
  • 0000A0A0 — _PopVerifyPowerActionPolicy@4
  • 0000A19D — _PopVerifySystemPowerState@4
  • 0000A285 — _PopResetCurrentPolicies@0
  • 0000A443 — _PopNotifyPolicyDevice@8
  • 0000A4B6 — _PopConnectToPolicyDevice@8
  • 0000A740 — _PoInitSystem@4
  • 0000AB4B — _PopDefaultPolicy@4
  • 0000ABB9 — _PoInitDriverServices@4
  • 0000AC63 — _PopRegisterForDeviceNotification@8
  • 0000ACA7 — _PoSetPowerState@12
  • 0000ACB3 — _PopAcquirePolicyLock@0
  • 0000AD05 — _PopReleasePolicyLock@4
  • 0000AD8D — _PopGetPolicyWorker@4
  • 0000ADB6 — _PopCompletePolicyIrp@12
  • 0000AE26 — _PopCheckForWork@0
  • 0000AE99 — _PopPolicyWorkerThread@4
  • 0000AF74 — _PopPolicyWorkerMain@0
  • 0000AFBA — _PopDoNotificationWork
  • 0000B008 — _PopSetNotificationWork@4
  • 0000B02D — _PopPolicyWorkerNotify@0
  • 0000B035 — _PopInitSIdle@0
  • 0000B12A — _PopPolicySystemIdle@0
  • 0000B190 — _PoSystemIdleWorker@4
  • 0000B19C — _PopSqrt@4
  • 0000B1CA — _PopSystemButtonHandler@16
  • 0000B2FA — _PopTriggerSwitch@12
  • 0000B353 — _PopResetSwitchTriggers@0
  • 0000B374 — _PopThermalDeviceHandler@16
  • 0000B37C — _PopThermalZoneCleanup@16
  • 0000B384 — _PopThermalZoneDpc@16
  • 0000B38C — _PopApplyThermalThrottle@0
  • 0000B392 — _ExAllocatePoolWithTag@12
  • 0000B3C8 — _ExpAllocatePool@12
  • 0000B453 — _ExpFreePool@4
  • 0000B466 — _ExFreePool@4
  • 0000B477 — _ExAllocatePool@8
  • 0000B4AB — _ExInitializeResourceLite@4
  • 0000B4E2 — _ExReinitializeResourceLite@4
  • 0000B563 — @ExpAcquireResourceExclusiveLite@8
  • 0000B5E1 — _ExAcquireResourceExclusiveLite@8
  • 0000B6A3 — _ExTryToAcquireResourceExclusiveLite@4
  • 0000B719 — _ExAcquireResourceSharedLite@8
  • 0000B842 — @ExReleaseResourceLite@4
  • 0000BA4E — _ExDeleteResourceLite@4
  • 0000BADD — _ExGetExclusiveWaiterCount@4
  • 0000BAED — _ExGetSharedWaiterCount@4
  • 0000BAFD — _ExIsResourceAcquiredExclusiveLite@4
  • 0000BB3C — _ExIsResourceAcquiredSharedLite@4
  • 0000BBA6 — _ExpWaitForResource@8
  • 0000BCEF — _ExpFindCurrentThread@8
  • 0000BDF7 — @ExAcquireFastMutexUnsafe@4
  • 0000BE46 — @ExReleaseFastMutexUnsafe@4
  • 0000BE8C — @ExAcquireFastMutex@4
  • 0000BEAE — @ExReleaseFastMutex@4
  • 0000BEC5 — _ExSystemExceptionFilter@0
  • 0000BED6 — _ExGetPreviousMode@0
  • 0000BEE1 — _ExShutDown@0
  • 0000BEEB — _ExQueueWorkItem@8
  • 0000C043 — _Query_Thread_Priority@0
  • 0000C05A — _KefYield@0
  • 0000C07E — _ExRegisterCallback@12
  • 0000C14D — _ExUnregisterCallback@4
  • 0000C1F4 — _ExNotifyCallback@12
  • 0000C292 — _ExAdjustLookasideDepth@0
  • 0000C2EB — _ExpComputeLookasideDepth@16
  • 0000C37B — _ExpScanGeneralLookasideList@8
  • 0000C3DD — _ExpScanPoolLookasideList@4
  • 0000C427 — _ExDeleteNPagedLookasideList@4
  • 0000C470 — _ExDeletePagedLookasideList@4
  • 0000C4B9 — _ExAllocateFromNPagedLookasideList@4
  • 0000C4E7 — _ExAllocateFromPagedLookasideList@4
  • 0000C562 — _ExFreeToPagedLookasideList@8
  • 0000C5D3 — _ExpDummyAllocate@12
  • 0000C5DD — _HalPutDmaAdapter@4
  • 0000C5E5 — _HalAllocateAdapterChannel@16
  • 0000C6F9 — _HalAllocateCrashDumpRegisters@8
  • 0000C768 — _IoMapTransfer@24
  • 0000C7DA — _HalpMapTransferHelper@20
  • 0000C820 — _HalpMapTransfer@24
  • 0000CB78 — _IoFlushAdapterBuffers@24
  • 0000CCB1 — _HalReadDmaCounter@4
  • 0000CDA0 — _HalGetDmaAlignment@4
  • 0000CDAB — _HalpAllocPhysicalMemory@12
  • 0000CE66 — _HalpCopyBufferMap@20
  • 0000CEC6 — _HalFlushCommonBuffer@20
  • 0000CED0 — _HalFreeCommonBuffer@24
  • 0000CEE1 — _IoFreeAdapterChannel@4
  • 0000CFDE — _IoFreeMapRegisters@12
  • 0000D115 — _HalGetInterruptVector@24
  • 0000D146 — _HalTranslateBusAddress@24
  • 0000D17A — _HalpGetCmosData@16
  • 0000D201 — _HalGetBusData@20
  • 0000D271 — _HalGetBusDataByOffset@24
  • 0000D2A9 — _RtlSingleByteSet
  • 0000D2B6 — _RtlUpcaseUnicodeChar@4
  • 0000D2D9 — _RtlpUpcaseUnicodeChar@4
  • 0000D2FC — _RtlAnsiCharToUnicodeChar@4
  • 0000D363 — _RtlFreeString@4
  • 0000D374 — _RtlAllocateString@4
  • 0000D3AB — _RtlInitAnsiString@8
  • 0000D3DE — _RtlInitUnicodeString@8
  • 0000D415 — _RtlAssert@16
  • 0000D468 — _RtlEqualUnicodeString@12
  • 0000D585 — _RtlCopyUnicodeString@8
  • 0000D5DC — _RtlAppendUnicodeToString@8
  • 0000D652 — _RtlAppendUnicodeStringToString@8
  • 0000D6BB — _RtlxUnicodeStringToAnsiSize@4
  • 0000D6F8 — _RtlxAnsiStringToUnicodeSize@4
  • 0000D71E — _RtlFreeUnicodeString@4
  • 0000D76C — _RtlFreeAnsiString@4
  • 0000D7BA — _RtlCompareUnicodeString@12
  • 0000D8E9 — _RtlUnicodeToMultiByteN@20
  • 0000D916 — _RtlMultiByteToUnicodeN@20
  • 0000D940 — _RtlUpcaseUnicodeToMultiByteN@20
  • 0000D998 — _RtlUnicodeToMultiByteSize@12
  • 0000D9C5 — _RtlUnicodeStringToAnsiSize@4
  • 0000D9EC — _RtlAllocateSprintf
  • 0000DA0A — _RtlAllocateWsprintf
  • 0000DA28 — _RtlpAllocateSprintf@20
  • 0000DADE — _RtlMapGenericMask@8
  • 0000DB37 — _RtlSetAllBits@4
  • 0000DB5C — _RtlSetBits@12
  • 0000DC14 — _RtlFindClearBits@12
  • 0000DE6C — _RtlFindClearBitsAndSet@12
  • 0000DE9D — _RtlClearBits@12
  • 0000DF56 — _RtlDeleteRegistryValue@12
  • 0000DFD4 — _RtlIntegerToChar@16
  • 0000E0CA — _RtlCharToInteger@12
  • 0000E1BF — _RtlUnicodeStringToInteger@12
  • 0000E318 — _RtlIntegerToUnicodeString@12
  • 0000E364 — _RtlLargeIntegerToChar@16
  • 0000E4B8 — _RtlMoveMemory@12
  • 0000E4D4 — _RtlCopyMemory@12
  • 0000E4F0 — _RtlZeroMemory@8
  • 0000E50C — _ElapsedDaysToYears@4
  • 0000E581 — _DaysAndFractionToTime@12
  • 0000E5BE — _RtlTimeToTimeFields@8
  • 0000E756 — _RtlCutoverTimeToSystemTime@16
  • 0000E94F — _RtlTimeFieldsToTime@8
  • 0000EAEC — _RtlTimeToElapsedTimeFields@8
  • 0000EB72 — _RtlTimeToSecondsSince1980@8
  • 0000EBB6 — _RtlSecondsSince1980ToTime@8
  • 0000EBEB — _RtlTimeToSecondsSince1970@8
  • 0000EC2F — _RtlSecondsSince1970ToTime@8
  • 0000EC64 — _IopAssociationLookup@12
  • 0000ECBA — _IopAssociationInsert@8
  • 0000ED1A — _IoAssociationAllocate@16
  • 0000EE0B — _IoAssociationFind@16
  • 0000EEF4 — _IoGetDriverObjectExtension@8
  • 0000EF1D — _NTKERNProcessISR
  • 0000EF4A — _NtKernGetVPICDHandleFromInterruptObj
  • 0000EF8B — _IopDecrementDeviceObjectRef@8
  • 0000EFFA — _IopInsertRemoveDevice@12
  • 0000F051 — _IopCompleteUnloadOrDelete@8
  • 0000F19D — _IopCompleteRequest@20
  • 0000F446 — _IopFreeMdl@4
  • 0000F49F — _IopDisassociateThreadIrp@0
  • 0000F51A — _IopDropIrp@8
  • 0000F582 — _IopInvalidDeviceRequest@8
  • 0000F5A1 — _IopExceptionFilter@8
  • 0000F5CE — _IopExceptionCleanup@16
  • 0000F672 — _IopFreeIrpAndMdls@4
  • 0000F69D — _IopTimerDispatch@16
  • 0000F71F — @IofCompleteRequest@8
  • 0000FA2C — _IoAllocateErrorLogEntry@8
  • 0000FB42 — _IoWriteErrorLogEntry@4
  • 0000FBBE — _IopCheckDeviceName@4
  • 0000FBC6 — _IoCreateSymbolicLink@8
  • 0000FC24 — _IopRemoveTimerFromTimerList@4
  • 0000FC63 — _IoDeleteDevice@4
  • 0000FCD7 — _IoDetachDevice@4
  • 0000FD28 — _IoCompleteRequest@8
  • 0000FD3D — _IoInitializeIrp@12
  • 0000FD89 — _IoFreeIrp@4
  • 0000FDD6 — _IoAllocateIrp@8
  • 0000FE14 — _IoGetAttachedDevice@4
  • 0000FE2B — _IoGetAttachedDeviceReference@4
  • 0000FE64 — _IoGetRelatedDeviceObject@4
  • 0000FEC2 — @IofCallDriver@8
  • 0000FF41 — _IoCancelIrp@4
  • 0000FFA2 — _IoAllocateMdl@20
  • 00010067 — _IoFreeMdl@4
  • 000100C6 — _IopSetAttachedDevicePointer@8
  • 00010115 — _IoAttachDeviceToDeviceStack@8
  • 00010193 — _IoAttachDeviceByPointer@8
  • 000101F5 — _IoAcquireCancelSpinLock@4
  • 0001020D — _IoReleaseCancelSpinLock@4
  • 00010223 — _IoAllocateAdapterChannel@20
  • 00010253 — _IoCallDriver@8
  • 00010268 — _IoStartTimer@4
  • 000102A3 — _IoStopTimer@4
  • 000102DD — _IoBuildSynchronousFsdRequest@28
  • 00010357 — _IoBuildAsynchronousFsdRequest@24
  • 00010443 — _IoStartNextPacket@8
  • 000104A3 — _IoStartNextPacketByKey@12
  • 00010506 — _IoStartPacket@16
  • 000105B1 — _IopAppendWorkHandleList@12
  • 00010629 — _IoBuildPartialMdl@16
  • 0001070E — _IoGetCurrentIrpStackLocation@4
  • 0001071D — _NtLoadDriver@4
  • 00010770 — _IopValidateDriverPostInit@8
  • 000107EB — _IopReferenceAttachmentChain@4
  • 00010807 — _IopDereferenceAttachmentChain@4
  • 00010828 — _IopDeleteFile@4
  • 000109D5 — _IopCheckDeviceAndDriver@16
  • 00010A43 — _IopDereferenceVpbAndFree@4
  • 00010A70 — _IoReportResourceUsage@36
  • 00010A81 — _LogPrint
  • 00010AB3 — _NullPrint
  • 00010AB9 — _IopErrorLogDpc@16
  • 00010AF8 — _IopErrorLogGetEntry@0
  • 00010B4E — _ObpAllocateObjectCreateInfoBuffer@0
  • 00010B62 — _ObpAllocateObjectNameBuffer@8
  • 00010B90 — @ObpFreeObjectCreateInfoBuffer@4
  • 00010B9C — @ObpFreeObjectNameBuffer@4
  • 00010BAA — _CloseHandle@8
  • 00010C29 — _NtClose@4
  • 00010C3C — _ObpInsertDirectoryEntry@8
  • 00010CAE — _ObpDeleteDirectoryEntry@4
  • 00010CEA — _ObpIncrementHandleCount@24
  • 00010DCE — _ObpIncrementUnnamedHandleCount@16
  • 00010EC7 — _ObpDecrementHandleCount@12
  • 00010F6F — @IsWin32Object@4
  • 00010FCB — _GetWin32ObjectType@4
  • 00011000 — @ObfReferenceObject@4
  • 0001102A — _ObpProcessRemoveObjectQueue@4
  • 000110A0 — @ObfDereferenceObject@4
  • 000111B7 — _ObReferenceObjectByHandle@24
  • 000112C4 — _ObReferenceObjectByPointer@16
  • 000112D7 — _ObDereferenceObject@4
  • 000112E8 — _ObGetObjectName@4
  • 00011316 — _KeInitializeApc@32
  • 00011387 — _KiProcessWin95APC@4
  • 00011451 — _KeInsertQueueApc@16
  • 0001151C — _KeRemoveQueueApc@4
  • 00011561 — _KeBugCheck@4
  • 000115AE — _KeBugCheckEx@20
  • 0001160D — _KeInitializeSpinLock@4
  • 0001161C — _KeInitializeDeviceQueue@4
  • 0001163F — _KeInsertDeviceQueue@8
  • 000116B8 — _KeRemoveDeviceQueue@4
  • 00011753 — _KeRemoveEntryDeviceQueue@8
  • 000117B0 — _KeSynchronizeExecution@12
  • 000117DE — _KeInsertByKeyDeviceQueue@12
  • 00011864 — _KeRemoveByKeyDeviceQueue@8
  • 00011916 — _KeInitializeEvent@12
  • 00011938 — _KeSetEvent@12
  • 00011989 — _KeClearEvent@4
  • 0001199B — _KeResetEvent@4
  • 000119AD — _KePulseEvent@12
  • 00011A10 — _KeReadStateEvent@4
  • 00011A1F — @KepEnterNTKern@4
  • 00011A58 — @KepLeaveNTKern@4
  • 00011AA6 — _KeEnterCriticalRegion@0
  • 00011B04 — _KeLeaveCriticalRegion@0
  • 00011B5B — _KeInitializeMutex@8
  • 00011B6D — _KeReleaseMutex@8
  • 00011BA0 — _KeInitializeSemaphore@12
  • 00011BBC — _KeReadStateSemaphore@4
  • 00011BDF — _KeReleaseSemaphore@16
  • 00011C62 — @KfAcquireSpinLock@4
  • 00011CB2 — @KfReleaseSpinLock@8
  • 00011CE2 — @KefAcquireSpinLockAtDpcLevel@4
  • 00011D25 — @KefReleaseSpinLockFromDpcLevel@4
  • 00011D65 — _KeWaitForSingleObject@20
  • 00011D9F — _KeDelayExecutionThread@12
  • 00011E1C — _KeWaitForMultipleObjects@32
  • 00011E6F — _KeSetPhysicalCacheTypeRange@16
  • 00011EB1 — _MiSectionDelete@4
  • 00011EF6 — _MmInitSystem@4
  • 00011F0E — _MmQuerySystemSize@0
  • 00011F17 — _MiProcessTerminated@4
  • 00011F4B — @PiWinCreateThreadWrapper@8
  • 00011F6A — _sprintf
  • 00011FC3 — _vsprintf
  • 0001201C — __global_unwind2
  • 0001205E — __local_unwind2
  • 000120B8 — __abnormal_termination
  • 000120E4 — __except_handler2
  • 0001219C — __except_handler3
  • 0001224A — __seh_longjmp_unwind@4
  • 000122C5 — __itoa
  • 000122EF — __ltoa
  • 0001231E — __ultoa
  • 0001233A — __snprintf
  • 00012392 — __snwprintf
  • 0001240C — __stricmp
  • 0001240C — __strcmpi
  • 00012450 — __strlwr
  • 00012474 — __strnicmp
  • 000124CC — __strnset
  • 000124F8 — __strrev
  • 00012528 — __strset
  • 00012548 — __strupr
  • 00012569 — __vsnprintf
  • 000125C0 — __wcsicmp
  • 00012609 — __wcslwr
  • 00012635 — __wcsnicmp
  • 000126A2 — __wcsnset
  • 000126D0 — __wcsrev
  • 00012705 — __wcsupr
  • 00012731 — _atol
  • 000127C8 — _atoi
  • 000127D5 — _isalpha
  • 00012806 — _isupper
  • 00012832 — _islower
  • 0001285E — _isdigit
  • 0001288A — _isxdigit
  • 000128BB — _isspace
  • 000128E7 — _ispunct
  • 00012913 — _isalnum
  • 00012944 — _isprint
  • 00012975 — _isgraph
  • 000129A6 — _iscntrl
  • 000129D2 — ___isascii
  • 000129E3 — ___toascii
  • 000129EB — ___iscsymf
  • 00012A31 — ___iscsym
  • 00012A77 — _mbstowcs
  • 00012AFB — _mbtowc
  • 00012B74 — _memchr
  • 00012B94 — _qsort
  • 00012D64 — _srand
  • 00012D6E — _rand
  • 00012D8C — _strcat
  • 00012D90 — _strcpy
  • 00012DCC — _strchr
  • 00012DF4 — _strcmp
  • 00012E18 — _strlen
  • 00012E30 — _strncat
  • 00012E64 — _strncmp
  • 00012E9C — _strncpy
  • 00012EC0 — _strrchr
  • 00012EE8 — _strspn
  • 00012F24 — _strstr
  • 00012F82 — _swprintf
  • 00012FF9 — __tolower
  • 00013001 — _tolower
  • 00013038 — __toupper
  • 00013040 — _toupper
  • 00013095 — _towlower
  • 000130B2 — _towupper
  • 000130BC — _wcscat
  • 000130ED — _wcscpy
  • 0001310F — _wcschr
  • 0001313B — _wcscmp
  • 00013178 — _wcscspn
  • 000131B7 — _wcslen
  • 000131CE — _wcsncat
  • 00013212 — _wcsncmp
  • 0001324A — _wcsncpy
  • 0001328D — _wcsrchr
  • 000132BE — _wcsspn
  • 000132FD — _wcsstr
  • 00013344 — _wcstombs
  • 000133DA — _wctomb
  • 00013420 — _memcmp
  • 0001343F — __vsnwprintf
  • 000134B6 — __flsbuf
  • 000134C4 — __output
  • 00013D62 — __woutput
  • 000145A5 — _iswctype
  • 000145D0 — _is_wctype
  • 000145E1 — __isctype
  • 000145E4 — _fflush
  • 000145E5 — _fprintf
  • 000145E6 — _abort
  • 000145E7 — _read
  • 000145E8 — __read
  • 000145E9 — __assert
  • 000145EA — __amsg_exit
  • 000145EB — __mbstrlen
  • 0001463B — _mblen
  • 00014670 — _fputwc
  • 000146A0 — _putwc
  • 000146B1 — __fptrap
  • 000146BC — __flswbuf
  • 000146CC — __alldiv
  • 00014768 — __allmul
  • 0001479C — __allrem
  • 0001483C — __allshl
  • 0001484C — __allshr
  • 0001485C — __aulldiv
  • 000148BC — __aullrem
  • 00014928 — __aullshr
  • 00014AAC — __NTKERN_Get_Version
  • 00014AB0 — __NtKernCreateFile
  • 00014AB4 — __NtKernClose
  • 00014AB8 — __NtKernReadFile
  • 00014ABC — __NtKernWriteFile
  • 00014AC0 — __NtKernDeviceIoControl
  • 00014AC4 — __NtKernGetWorkerThread
  • 00014AC8 — __NtKernLoadDriver
  • 00014ACC — __NtKernQueueWorkItem
  • 00014AD0 — __NtKernPhysicalDeviceObjectToDevNode
  • 00014AD4 — __NtKernSetPhysicalCacheTypeRange
  • 00014AD8 — __NtKernWin9XLoadDriver
  • 00014ADC — __NtKernCancelIoFile
  • 00014AE0 — __NtKernGetVPICDHandleFromInterruptObj
  • 00014AE4 — __NtKernInternalDeviceIoControl
  • 00014AE8 — NTKERN_DDB
  • 00014B38 — KdComPortInUse
  • 00014B3C — KdDebuggerNotPresent
  • 00014B40 — _MachineInfo
  • 00014B44 — TimerLoopsPer65536uSec
  • 00014BE0 — _SysVMStack
  • 00014BE0 — ??_C@_0FA@NKCL@No?5supporting?5IoInvalidateDevice@
  • 00014BE0 — _SysVMStackLimit
  • 00014C30 — ??_C@_0BE@MDBF@Irp?9?$DOCancel?5?$DN?$DN?5TRUE?$AA@
  • 00014C44 — ??_C@_0BN@CLEP@Cancel?5routine?5already?5set?$DP?$CB?$AA@
  • 00014C64 — ??_C@_0CN@DJCA@Not?5enough?5memory?5for?5an?5IRP?5in?5@
  • 00014CA0 — _DebugInit@4
  • 00014CBE — _DebugPrint@8
  • 00014D04 — _DbgPrint
  • 00014D17 — _DbgBreakPoint@0
  • 00014D19 — _DbgOutDebugString@4
  • 00014D2B — _DbgInDebugChar@0
  • 00014D34 — _READ_PORT_UCHAR@4
  • 00014D52 — _READ_PORT_USHORT@4
  • 00014D71 — _READ_PORT_ULONG@4
  • 00014D8F — _WRITE_PORT_UCHAR@8
  • 00014DB1 — _WRITE_PORT_USHORT@8
  • 00014DD4 — _WRITE_PORT_ULONG@8
  • 00014DF6 — _READ_REGISTER_UCHAR@4
  • 00014E15 — _READ_REGISTER_USHORT@4
  • 00014E35 — _READ_REGISTER_ULONG@4
  • 00014E54 — _WRITE_REGISTER_UCHAR@8
  • 00014E77 — _WRITE_REGISTER_USHORT@8
  • 00014E9B — _WRITE_REGISTER_ULONG@8
  • 00014EBE — _READ_REGISTER_BUFFER_UCHAR@12
  • 00014EEA — _READ_REGISTER_BUFFER_ULONG@12
  • 00014F16 — _READ_REGISTER_BUFFER_USHORT@12
  • 00014F42 — _WRITE_REGISTER_BUFFER_UCHAR@12
  • 00014F6E — _WRITE_REGISTER_BUFFER_ULONG@12
  • 00014F9A — _WRITE_REGISTER_BUFFER_USHORT@12
  • 00014FC7 — _READ_PORT_BUFFER_UCHAR@12
  • 00014FF0 — _READ_PORT_BUFFER_ULONG@12
  • 00015019 — _READ_PORT_BUFFER_USHORT@12
  • 00015043 — _WRITE_PORT_BUFFER_UCHAR@12
  • 0001506C — _WRITE_PORT_BUFFER_ULONG@12
  • 00015095 — _WRITE_PORT_BUFFER_USHORT@12
  • 000150BF — _KeStallExecutionProcessor@4
  • 000150D4 — _IoCheckShareAccess@20
  • 000150DD — @KeFlushWriteBuffer@0
  • 000150E4 — _KeSetImportanceDpc@8
  • 000150ED — _SeAssignSecurity@28
  • 000150F6 — _SeDeassignSecurity@4
  • 000150FF — _HalAssignSlotResources@32
  • 00015108 — _HalSetBusDataByOffset@24
  • 00015111 — NTKERN_Control
  • 000151F8 — _NTKERN_Get_Version
  • 000151FF — _KeGetCurrentIrql@0
  • 00015209 — _KeQuerySystemTime@4
  • 00015213 — @KfRaiseIrql@4
  • 0001521D — @KfLowerIrql@4
  • 00015227 — _RtlUnwind@16
  • 00015231 — _RtlRaiseStatus@4
  • 0001523B — _RtlRaiseException@4
  • 00015245 — _KeInitializeDpc@12
  • 0001524F — _ZwOpenSection@12
  • 00015254 — _ZwMapViewOfSection@40
  • 00015259 — _EnQueue@8
  • 0001526D — _DeQueue@4
  • 00015281 — _InQueue@8
  • 000152A2 — _RemQueue@8
  • 000152C4 — _SetInterrupts@4
  • 000152DA — _ExchangeUlong@8
  • 000152E7 — _QueueUserApc
  • 000152ED — _QueueKernelApc
  • 000152F3 — _LinPageUnlock
  • 000152F9 — _KeInitializeTimer@4
  • 000152FF — _KeQueryPerformanceCounter@4
  • 00015309 — _KeSetTimer@16
  • 0001530F — _RunScheduledEvents@0
  • 00015315 — _GetCurrentThread@0
  • 00015320 — _Debug_Printf_Service
  • 00015326 — _Win95PageReserve
  • 0001532C — _Win95PageCommitPhys
  • 00015332 — _Win95PageDecommit
  • 00015338 — _Win95PageFree
  • 0001533E — _Win95GetNulPageHandle
  • 00015344 — _MmGetPhysicalAddress@4
  • 00015381 — __LinPageLock
  • 00015387 — _MiFillMdlPages@12
  • 000153C1 — _CountBits@8
  • 000153F8 — _CodeLoaded@0
  • 00015413 — NTKERN_Debug_Query
  • 00015428 — _ExRaiseStatus@4
  • 00015434 — @Exfi386InterlockedExchangeUlong@8
  • 0001543C — @InterlockedDecrement@4
  • 00015447 — @InterlockedIncrement@4
  • 00015454 — @InterlockedExchange@8
  • 00015459 — @InterlockedCompareExchange@12
  • 00015463 — @ExfInterlockedAddUlong@12
  • 0001546D — _ExqInterlockedAddUlong@0
  • 0001546E — @ExqInterlockedAddUlong@8
  • 00015493 — _ExqInterlockedAddUlong386@0
  • 0001549B — _ExqInterlockedAddUlong486@0
  • 000154A2 — _ExInterlockedAddLargeStatistic@0
  • 000154A2 — @ExInterlockedAddLargeStatistic@8
  • 000154A9 — _ExfInterlockedInsertHeadList@0
  • 000154A9 — @ExfInterlockedInsertHeadList@12
  • 000154C1 — @ExfInterlockedInsertTailList@12
  • 000154C1 — _ExfInterlockedInsertTailList@0
  • 000154DA — _ExfInterlockedRemoveHeadList@0
  • 000154DA — @ExfInterlockedRemoveHeadList@8
  • 000154ED — @ExfInterlockedPushEntryList@12
  • 000154F9 — @ExfInterlockedPopEntryList@8
  • 00015507 — @ExInterlockedPushEntrySList@12
  • 00015528 — @ExInterlockedPopEntrySList@8
  • 0001554F — @ExfInterlockedPopEntrySList@8
  • 00015560 — @ExfInterlockedPushEntrySList@12
  • 0001556F — @ExInterlockedCompareExchange64@16
  • 0001558A — @ExpInterlockedCompareExchange64@16
  • 000155BC — __penter
  • 000155C0 — ThreadSwitchNotification_stub
  • 000155C8 — _memcpy
  • 000155FD — _memset
  • 0001563B — __disable
  • 0001563D — __enable
  • 0001563F — _KeQueryTimeIncrement@0
  • 00015648 — _InitializeWin32Mutex
  • 00015656 — _ReleaseWin32Mutex
  • 00015665 — _InitializeWin32Event
  • 00015688 — _SetWin32Event
  • 00015693 — _ClearWin32Event
  • 0001569E — _ResetWin32Event
  • 000156AD — _PulseWin32Event
  • 000156BC — _InitializeWin32Semaphore
  • 000156C2 — _ReadWin32Semaphore
  • 000156D9 — _SignalWin32Semaphore
  • 000156E8 — _WaitForSingleObject
  • 00015702 — _BlockThreadEx
  • 0001571A — _ScheduleRestrictedEvent@20
  • 0001575A — _BoostWithDecay@8
  • 0001576F — _ScheduleGlobalEvent@8
  • 0001578D — _KiProcessWin95APC_stub@0
  • 0001579A — _IoInvalidateDeviceRelations@8
  • 0001580E — _IoInvalidateDeviceState@4
  • 00015849 — _NTKERNToWin95IrpHandler@8
  • 00015990 — _RtlConvertLongToLargeInteger@4
  • 00015998 — _RtlConvertUlongToLargeInteger@4
  • 000159AA — _RtlCompareMemory@12
  • 000159F6 — _IoUnregisterShutdownNotification@4
  • 00015A51 — _MiMapViewOfPhysicalSection@36
  • 00015C28 — _HeapAllocateEx@16
  • 00015C2E — _HeapFreeEx@8
  • 00015C34 — _LCODE__Debug_Printf_Service
  • 00015C48 — _LCODE__CONFIGMG_Reenumerate_DevNode
  • 00015C50 — _LCODE__CONFIGMG_Call_At_Appy_Time
  • 00015C58 — _LCODE__SHELL_QueryAppyTimeAvailable
  • 00015C60 — _LCODE__SHELL_CallAtAppyTime
  • 00015C68 — _LCODE_Call_Restricted_Event@24
  • 00015C94 — _LCODE_VWIN32_SetWin32EventBoostPriority
  • 00015C9C — _LCODE__AtEventTime
  • 00015CA4 — _LCODE_VPICD_Phys_EOI@4
  • 00015CB4 — _LCODE_VPICD_Physically_Unmask@4
  • 00015CC4 — _LCODE__VPICD_Set_Channel_Irql
  • 00015CCC — _LCODE_VPICD_Virtualize_IRQ@4
  • 00015CE0 — _LCODE_VPICD_Force_Default_Behavior@4
  • 00015CF0 — _LCODE_SHELL_SYSMODAL_Message@16
  • 00015D14 — _LCODE__Sprintf
  • 00015D1C — _LCODE_VWIN32_ConvertNtTimeout@4
  • 00015D24 — _LCODE_MTRRSetPhysicalCacheTypeRange@12
  • 00015D3C — _LCODE__PageReserve
  • 00015D44 — _LCODE__PageFree
Segment 2: _LMSG$1 @ 00018380
  • 00000000 — @MSG_LAB
  • 00000014 — @MSG_LDATA
Segment 3: _DB1CODE @ 00019620
  • 00000000 — _DbgPutLogStr@4
  • 0000003E — _DbgGetString@8
  • 000000BF — _DbgAddLogStr@4
  • 0000014E — _DbgDumpTraceLog@0
  • 000001A9 — _DebugPrintP@8
  • 00000222 — _DebugQuery@0
  • 0000034F — _DebugInitP@4
  • 000003B0 — _DbgDumpThread@4
  • 000003D4 — _DbgDumpProcess@4
  • 0000040A — _DbgDumpThreadInfo@0
  • 00000430 — _DbgDumpSystemState@4
  • 0000049A — _DbgDumpAction@4
  • 00000514 — _DbgDumpPowerLevel@4
  • 0000056D — _DbgDumpPolicy@4
  • 00000763 — _DbgDumpCapabilities@4
  • 0000098F — _DbgDumpPowerInformation@0
  • 00000A00 — _IoDumpCheck@12
  • 00000A4D — _DumpIrps@0
  • 00000A53 — _DumpLevel@8
  • 00000B45 — _OBDebugDump@0
  • 00000B7C — _NTKERNTraceLevel
  • 00000B80 — _ulInDebug
  • 00000B84 — ??_C@_0BA@JFJO@?$CF08x?5?$CF02d?5?$CF08x?5?$AA@
  • 00000B94 — ??_C@_0BB@PJKF@No?5pending?5Irps?6?$AA@
  • 00000BA8 — ??_C@_0BD@FFDI@?6Enter?5selection?3?5?$AA@
  • 00000BBC — ??_C@_09EMNI@?$CIX?$CJ?5Exit?6?$AA@
  • 00000BC8 — ??_C@_0CC@BABL@?$CII?$CJ?5Dump?5pending?5Irp?5information@
  • 00000BEC — ??_C@_0CJ@IEIH@?$CIT?$CJ?5Dump?5thread?5and?5process?5info@
  • 00000C18 — ??_C@_0BM@JBCN@?$CIP?$CJ?5Dump?5power?5information?6?$AA@
  • 00000C34 — ??_C@_0BN@LOAC@?$CIO?$CJ?5Dump?5object?5information?6?$AA@
  • 00000C54 — ??_C@_0BE@JGGN@?$CID?$CJ?5Dump?5trace?5log?6?$AA@
  • 00000C68 — ??_C@_0BF@ILII@?6NTKERN?5Debug?5menu?6?6?$AA@
  • 00000C80 — ??_C@_01BJG@?6?$AA@
  • 00000C84 — ??_C@_08HGNB@INVALID?$CB?$AA@
  • 00000C90 — ??_C@_01FCOA@?5?$AA@
  • 00000C94 — ??_C@_0BM@ELLE@?0?5Flags?3?5?$CFd?0?5EventCode?3?5?$CFd?6?$AA@
  • 00000CB0 — ??_C@_08GKAE@Reserved?$AA@
  • 00000CBC — ??_C@_09GOGM@?0?5Action?3?$AA@
  • 00000CC8 — ??_C@_0DC@LGLE@?$CFs?0?5Spare?5?$CFd?5?$CFd?5?$CFd?0?5Battery?5leve@
  • 00000CFC — ??_C@_08FGLH@Disabled?$AA@
  • 00000D08 — ??_C@_07FFME@Enabled?$AA@
  • 00000D10 — ??_C@_0P@FCCG@OverThrottled?3?$AA@
  • 00000D20 — ??_C@_0FA@PKOM@Optimize?3?5?$CFs?0?5Fan?5throttle?5toler@
  • 00000D70 — ??_C@_04BBGC@Life?$AA@
  • 00000D78 — ??_C@_05EFBF@Power?$AA@
  • 00000D80 — ??_C@_03KLCE@Off?$AA@
  • 00000D84 — ??_C@_02CCEO@On?$AA@
  • 00000D88 — ??_C@_0BE@HGHB@Disk?5spin?5down?3?5?$CFd?6?$AA@
  • 00000D9C — ??_C@_0CP@BILG@Video?5timeout?3?5?$CFd?0?5Video?5reserve@
  • 00000DCC — ??_C@_0BF@PFDJ@Discharge?5policy?5?$CFd?3?$AA@
  • 00000DE4 — ??_C@_0CD@JFOK@Broadcast?5capacity?5resolution?3?5?$CF@
  • 00000E08 — ??_C@_0CA@KIK@Doze?5spare?3?5?$CFd?0?5S4?5timeout?3?5?$CFd?6?$AA@
  • 00000E28 — ??_C@_0BD@CLIF@WinLogonFlags?3?5?$CFd?6?$AA@
  • 00000E3C — ??_C@_0BH@KNON@?5Reduce?5Latency?5Sleep?3?$AA@
  • 00000E54 — ??_C@_0M@BFLH@?5Max?5Sleep?3?$AA@
  • 00000E60 — ??_C@_0L@GEAA@Min?5Sleep?3?$AA@
  • 00000E6C — ??_C@_0DH@MDM@Idle?5timeout?3?5?$CFd?0?5sensitivity?5?$CFd@
  • 00000EA4 — ??_C@_05BFLF@Idle?3?$AA@
  • 00000EAC — ??_C@_0O@JAMB@Reserved?3?5?$CFd?6?$AA@
  • 00000EBC — ??_C@_0P@NGNF@Lid?5open?5wake?3?$AA@
  • 00000ECC — ??_C@_0L@FPGN@Lid?5close?3?$AA@
  • 00000ED8 — ??_C@_0O@CBFB@Sleep?5button?3?$AA@
  • 00000EE8 — ??_C@_0O@JNKL@Power?5button?3?$AA@
  • 00000EF8 — ??_C@_0O@MHLB@Revision?3?5?$CFd?6?$AA@
  • 00000F08 — ??_C@_0BK@BMCL@Default?5low?5latency?5wake?3?$AA@
  • 00000F24 — ??_C@_0BL@NEOH@Minimum?5device?5wake?5state?3?$AA@
  • 00000F40 — ??_C@_0BG@KNJM@Real?9time?5clock?5wake?3?$AA@
  • 00000F58 — ??_C@_0P@HLBA@Soft?5lid?5wake?3?$AA@
  • 00000F68 — ??_C@_0BB@EIAJ@AC?5on?9line?5wake?3?$AA@
  • 00000F7C — ??_C@_0CL@MPFN@Battery?5?$CFd?3?5Granularity?3?5?$CFd?0?5Cap@
  • 00000FA8 — ??_C@_0BJ@FEIK@Batteries?3?5?$CFs?0?5Life?3?5?$CFs?6?$AA@
  • 00000FC4 — ??_C@_09JCKO@Long?5term?$AA@
  • 00000FD0 — ??_C@_0L@INDI@Short?5term?$AA@
  • 00000FDC — ??_C@_0CE@MDDJ@Disk?5spin?5down?3?5?$CFs?0?5Spare?5?$CFd?5?$CFd?5@
  • 00001000 — ??_C@_0EK@EBOA@Thermal?5control?3?5?$CFs?0?5Throttle?3?5?$CF@
  • 0000104C — ??_C@_05MJBI@Can?8t?$AA@
  • 00001054 — ??_C@_03EGCG@Can?$AA@
  • 00001058 — ??_C@_0CK@FBCG@?6Hiberfile?3?5?$CFs?0?5Wake?3?5?$CFs?0?5Spare?5@
  • 00001084 — ??_C@_08PHKO@Non?9Full?$AA@
  • 00001090 — ??_C@_04OOPN@Full?$AA@
  • 00001098 — ??_C@_04DMJH@?5S?$CFd?$AA@
  • 000010A0 — ??_C@_0O@OFNL@System?5state?3?$AA@
  • 000010B0 — ??_C@_08FHHB@Lid?3?5?$CFs?6?$AA@
  • 000010BC — ??_C@_0BC@CEHF@Sleep?5button?3?5?$CFs?6?$AA@
  • 000010D0 — ??_C@_0BC@FHMO@Power?5button?3?5?$CFs?6?$AA@
  • 000010E4 — ??_C@_06OAGO@Absent?$AA@
  • 000010EC — ??_C@_07JMEA@Present?$AA@
  • 000010F4 — ??_C@_0BG@LGMD@System?5capabilities?3?6?$AA@
  • 0000110C — ??_C@_06GAPH@DC?5?$CFc?6?$AA@
  • 00001114 — ??_C@_06KDNH@AC?5?$CFc?6?$AA@
Segment 4: RARE @ 000198B0
  • 00000000 — UnExportNTFunctions
  • 00000070 — _HalInitSystem@8
  • 000000A8 — _ObInitSystem@4
  • 000002C6 — _MiSectionInitialization@0
Segment 5: W32 @ 00019A50
  • 00000000 — _W32_IOManGetVersion
  • 0000000E — _W32_IOManRequestWakeupLatency
  • 0000001B — _W32_IOManGetDevnodeFromFileHandle
  • 00000028 — _W32_IOManCreateFile
  • 00000035 — _W32_IOManClose
  • 00000042 — _W32_IOManWriteFile
  • 0000004F — _W32_IOManReadFile
  • 0000005C — _W32_IOManDeviceIoControl
  • 00000069 — _W32_IOManCancelIoFile
  • 00000076 — _W32_IOManFlushFileBuffers
Segment 6: PNP @ 0001C670
  • 00000000 — _IoGetDeviceProperty@20
  • 0000036D — _IoSetDeviceProperty@16
  • 0000037A — _IoReportDeviceStatus@8
  • 00000387 — _IoOpenDeviceRegistryKey@16
  • 00000419 — _IoQueryDeviceResource@16
  • 00000426 — _PnPLeaveDriverEntry@8
  • 00000430 — _NtKernPhysicalDeviceObjectToDevNode
  • 000004A4 — _NtKernWin9XLoadDriver
  • 000004ED — _IsVXDName
  • 0000051C — _LoadMultipleDrivers
  • 00000703 — _NTKERNPnPNewDevNode@8
  • 000009A1 — _Barf
  • 00000A4F — _GetBusInfo
  • 00000BB0 — _KillChild
  • 00000C6D — _ProcessNewDevNode
  • 00000D9A — _NTKERNAssertPdo
  • 00000E57 — _NTKERNEnumerate
  • 0000125B — _RemoveWalkTheDOs
  • 00001298 — _RemovePDO
  • 00001301 — _QuickPnPIrp
  • 00001330 — _StartIrp
  • 00001588 — _PowerIrp
  • 000015D8 — _NTKERNFilterDevNode
  • 000017D6 — _NTKERNConfigHandler
  • 000019D3 — _NTKERNEnumHandler
  • 00001A5E — _ReadWriteConfig@24
  • 00001B16 — _SendIRPToVxD
  • 00001BAD — _ProcessPnPIRP
  • 00001DEF — _PnPInit
  • 00001F20 — _InitializePnPStackLocation
  • 00001F46 — _GetCapabilities
  • 0000203E — _PnPCompletionRoutine@12
  • 00002058 — _SynchronousCallDriver
  • 00002113 — _SendPnPIrp
  • 000021B7 — _NTKERNReceiveMessage
  • 0000221C — _DoThisString
  • 000022EB — _DoTheseIDs
  • 000023A4 — _NTKERNSetupDevNode
  • 00002403 — _CheckDeviceState
  • 00002517 — _ConvertWToA
  • 00002597 — _ConvertWToHeapAllocatedA
  • 00002653 — _ConvertRegistryToW
  • 00002779 — _PnPGetPhysicalDeviceObjectName@8
  • 0000284E — _PnPGetRegistryPathFromDevnode@12
  • 0000293E — _PnPGetRegistryPath@12
  • 000029C0 — _PnPGetHardwareDeviceInstanceName@8
  • 00002A0B — _PnPGetPhysicalDeviceObject@4
  • 00002A9D — _DoMemory
  • 00002AD2 — _DoIO
  • 00002B06 — _DoDMA
  • 00002B32 — _DoIRQ
  • 00002B94 — _DoPartialResource
  • 00002BEC — _GetConfiguration
  • 00002D53 — _GetGroupCount
  • 00002D88 — _GetGroupBeginEnd
  • 00002E20 — _ExtraDataSize
  • 00002E87 — _AddExtraData
  • 00002F27 — _AddConvertedBack
  • 00002F65 — _AllocateBack
  • 00003008 — _GetMemorySize
  • 00003056 — _ConvertMemory
  • 0000310C — _ConvertBackMemory
  • 000031BC — _GetIOSize
  • 00003207 — _ConvertIO
  • 00003303 — _ConvertBackIO
  • 000033D2 — _GetDMASize
  • 000033F9 — _ConvertDMA
  • 0000347B — _ConvertBackDMA
  • 000034F4 — _GetIRQSize
  • 0000351B — _ConvertIRQ
  • 000035B1 — _ConvertBackIRQ
  • 000036A0 — _GetAnythingSize
  • 000036C9 — _ConvertAnything
  • 00003778 — _GetNTSize
  • 000037CC — _ConvertNT
  • 00003826 — _ConvertBackGeneric
  • 00003854 — _ConvertBackConfigData
  • 000038A6 — _ConvertBackOSSpecific
  • 0000396F — _GetConvertHandler
  • 00003992 — _GetConvertBackHandler
  • 000039B5 — _GetFilteredConfiguration
  • 00003BC5 — _SetBasicFilteredConfiguration
  • 00003CEF — _AddResourceRequirements
  • 00003D4D — _PoRegisterDeviceForIdleDetection@16
  • 00003E04 — _PopCompleteRequestIrp@12
  • 00003EA0 — _PoRequestPowerIrpWorker
  • 000040CF — _PoRequestPowerCancelRoutine@8
  • 00004116 — _PoRequestPowerIrp@24
  • 00004279 — _PoCallDriver@8
  • 0000428E — _PoStartNextPowerIrp@4
  • 00004296 — _PopCheckBatteryStatus
  • 000042C5 — _PageablePowerHandler
  • 0000434A — _PowerHandler
  • 00004374 — _CCODE__CONFIGMG_Get_Sibling
  • 0000437C — _CCODE__CONFIGMG_Get_Child
  • 00004384 — _CCODE__CONFIGMG_Locate_DevNode
  • 0000438C — _CCODE__CONFIGMG_Get_Bus_Info
  • 00004394 — _CCODE__CONFIGMG_Call_Enumerator_Function
  • 0000439C — _CCODE__RegDeleteKey
  • 000043A4 — _CCODE__Assert_Range
  • 000043AC — _CCODE__CONFIGMG_Get_Device_ID
  • 000043B4 — _CCODE__CONFIGMG_Load_DLVxDs
  • 000043BC — _CCODE__RegCloseKey
  • 000043C4 — _CCODE__RegQueryValueEx
  • 000043CC — _CCODE__RegOpenKey
  • 000043D4 — _CCODE__CONFIGMG_Get_DevNode_Key
  • 000043DC — _CCODE__CONFIGMG_Register_Device_Driver
  • 000043E4 — _CCODE__CONFIGMG_Register_Enumerator
  • 000043EC — _CCODE__CONFIGMG_Change_DevNode_Status
  • 000043F4 — _CCODE__CONFIGMG_Set_Private_DWord
  • 000043FC — _CCODE__CONFIGMG_Discard_Boot_Log_Conf
  • 00004404 — _CCODE__CONFIGMG_Read_Registry_Value
  • 0000440C — _CCODE__CONFIGMG_Set_Device_Driver_Private_DWord
  • 00004414 — _CCODE__CONFIGMG_Get_Private_DWord
  • 0000441C — _CCODE__CONFIGMG_Get_DevNode_Status
  • 00004424 — _CCODE__CONFIGMG_Get_Parent
  • 0000442C — _CCODE_SHELL_SYSMODAL_Message@16
  • 00004450 — _CCODE_Get_Sys_VM_Handle
  • 0000445C — _CCODE__Sprintf
  • 00004464 — _CCODE__CONFIGMG_Remove_SubTree
  • 0000446C — _CCODE__CONFIGMG_Set_Bus_Info
  • 00004474 — _CCODE__CONFIGMG_Set_DevNode_PowerCapabilities
  • 0000447C — _CCODE__CONFIGMG_Remove_Unmarked_Children
  • 00004484 — _CCODE__CONFIGMG_Create_DevNode
  • 0000448C — _CCODE__CONFIGMG_Reset_Children_Marks
  • 00004494 — _CCODE__CONFIGMG_System_Device_Power_State_Mapping
  • 0000449C — _CCODE__CONFIGMG_Reprocess_DevNode
  • 000044A4 — _CCODE__CONFIGMG_Free_Log_Conf
  • 000044AC — _CCODE__CONFIGMG_Get_First_Log_Conf
  • 000044B4 — _CCODE__CONFIGMG_Set_DevNode_Problem
  • 000044BC — _CCODE__CONFIGMG_Get_DevNode_Handler
  • 000044C4 — _CCODE__CONFIGMG_Get_DevNode_PowerCapabilities
  • 000044CC — _CCODE__CONFIGMG_Register_DevLoader
  • 000044D4 — _CCODE__CONFIGMG_Write_Registry_Value
  • 000044DC — _CCODE__CONFIGMG_Add_ID
  • 000044E4 — _CCODE__CONFIGMG_Reenumerate_DevNode
  • 000044EC — _CCODE__CONFIGMG_Setup_DevNode
  • 000044F4 — _CCODE__CONFIGMG_Enable_DevNode
  • 000044FC — _CCODE__CONFIGMG_Disable_DevNode
  • 00004504 — _CCODE__CONFIGMG_Get_Device_ID_Size
  • 0000450C — _CCODE__CONFIGMG_Get_DevNode_Key_Size
  • 00004514 — _CCODE__CONFIGMG_Get_Device_Driver_Private_DWord
  • 0000451C — _CCODE__CONFIGMG_Get_Next_Res_Des
  • 00004524 — _CCODE__CONFIGMG_Get_Res_Des_Data_Size
  • 0000452C — _CCODE__HeapFree
  • 00004534 — _CCODE__CONFIGMG_Add_Res_Des
  • 0000453C — _CCODE__HeapAllocate
  • 00004544 — _CCODE__CONFIGMG_Get_Parent_Structure
  • 0000454C — _CCODE__CONFIGMG_Get_Res_Des_Data
  • 00004554 — _CCODE__CONFIGMG_Get_Set_Log_Conf_Priority
  • 0000455C — _CCODE__CONFIGMG_Get_Next_Log_Conf
  • 00004564 — _CCODE__CONFIGMG_Add_Empty_Log_Conf
  • 0000456C — _CCODE__SHELL_Update_User_Activity_Ex
  • 00004574 — _CCODE__CONFIGMG_Register_DevNode_For_Idle_Detection
  • 0000457C — _CCODE_Cancel_Time_Out@4
  • 0000458C — _CCODE__SHELL_CallDll
  • 00004594 — _CCODE_Set_Global_Time_Out@12
  • 000045B0 — _CCODE__Set_Global_Time_Out_Ex
  • 000045B8 — _CCODE__SHELL_CancelAppyTimeEvent
  • 000045C0 — _CCODE_VMM_GetSystemInitState
  • 000045C8 — _CCODE__CONFIGMG_Add_Remove_DevNode_Property
  • 000045D0 — _CCODE__CONFIGMG_Set_DevNode_PowerState
  • 000045D8 — _CCODE__Debug_Printf_Service
  • 000045EC — _CCODE__VPOWERD_Get_Power_Status
  • 000045F4 — _CCODE__SHELL_BroadcastSystemMessage
  • 000045FC — _CCODE__CONFIGMG_Call_At_Appy_Time
Segment 7: _INIT @ 0001C6F0
  • 00000000 — _PsInitSystem@4
Segment 8: _PTEXT @ 00024750
  • 00000000 — _BufferPrint@4
  • 0000001A — _LoadVPrintf@0
  • 00000042 — _VisitChildDevnodes@12
  • 000000A0 — _VisitAllDevnodes@8
  • 000000D2 — _FindPCISlotCallback@8
  • 00000140 — _FindPCISlotDevNode@8
  • 0000018A — _PCIGetBusDataByOffset@20
  • 000001E0 — NTKERN_PM_API
  • 000001EA — _FileExists@4
  • 00000206 — _Win95CreateThread@24
  • 00000255 — _IsBigMem@0
  • 00000271 — _PiSetThreadPriority@8
  • 00000288 — _PiGetThreadPriority@8
  • 000002A1 — NTKERN_ShutDown_Ex
  • 000002B1 — NTKERN_RebootNotify
  • 000002BC — NTKERN_System_Exit
  • 000002BE — NTKERN_Sys_Crit_Exit
  • 000002C0 — NTKERN_DeviceIoControl
  • 000002CA — NTKERN_End_PM_App
  • 000002D0 — NTKERN_Create_VM
  • 0000030B — NTKERN_Destroy_VM
  • 00000346 — NTKERN_Init_Complete
  • 00000360 — NTKERN_Create_Thread
  • 0000039A — NTKERN_Terminate_Thread
  • 000003CF — NTKERN_Destroy_Thread
  • 0000040A — _GetPEModuleEntryPoint
  • 00000410 — _GetProcAddress
  • 00000416 — _PELDR_InitCompleted
  • 0000041C — _UnloadPEModule
  • 0000042F — _LoadPEModule
  • 0000045F — _Time_Slice_Sleep@4
  • 00000468 — _BCSToUni
  • 0000046E — _UniToBCS
  • 00000474 — _UniToUpper
  • 0000047A — _RegOpenKey
  • 00000480 — _RegCreateKey
  • 00000486 — _RegQueryInfoKey
  • 0000048C — _RegQueryValueEx
  • 00000492 — _RegSetValueEx
  • 00000498 — _RegCloseKey
  • 0000049E — _RegDeleteKey
  • 000004A4 — _RegDeleteValue
  • 000004AA — _RegEnumKey
  • 000004B0 — _RegEnumValue
  • 000004B8 — _pFindDriver@4
  • 000004E5 — _FindDriverPath@4
  • 000005C8 — _LoadDriver@8
  • 000007B3 — _UnloadDriver@4
  • 00000828 — _LoadSysDriver@8
  • 00000866 — _UnloadSysDriver@4
  • 000008AB — _UnicodeCmp@8
  • 00000901 — _NtKernGetWorkerThread
  • 00000924 — _NtKernGetDynaAreaHandle@4
  • 000009D4 — _NtKernWriteDynaDriverKeys@12
  • 00000AFA — _NtKernWriteDynaDriverImageKey@8
  • 00000B54 — _NtKernParsePathName@16
  • 00000C55 — _NtKernEnsureUnicode@16
  • 00000CA0 — _NtKernCreateDynaRegKey@16
  • 00000D51 — _NtKernOpenDynaRegKey@8
  • 00000D8C — _NtKernDynaLoadDriver@16
  • 00001040 — _NtKernDynaUnloadDriver@4
  • 0000104D — _NtKernGetDriverHandle@12
  • 000010C4 — _ThreadFindProcess@4
  • 000010EF — _CreateProcessStruct@4
  • 00001174 — _ThreadCreateNotify@4
  • 0000128E — _ProcessDestroyNotify@4
  • 00001307 — _ThreadTerminateNotify@4
  • 00001342 — _ThreadDestroyNotify@4
  • 000013B2 — _ThreadInitialize@4
  • 0000142A — __NtKernCreateFile@44
  • 00001480 — __NtKernCancelIoFile@8
  • 000014BB — __NtKernReadFile@36
  • 0000150B — __NtKernWriteFile@36
  • 0000155B — __NtKernClose@4
  • 0000158F — __NtKernDeviceIoControl@40
  • 000015E2 — __NtKernInternalDeviceIoControl@40
  • 00001635 — __NtKernQueueWorkItem@8
  • 00001671 — __NtKernSetPhysicalCacheTypeRange@16
  • 00001687 — __NtKernLoadDriver@4
  • 000016B5 — @RD_MSR@4
  • 000016C0 — _WR_MSR@12
  • 000016D9 — _GetCpuTypeStep@4
  • 0000171B — _GetCpuId
  • 00001724 — __IOManGetVersion@8
  • 00001769 — __IOManCreateFile@52
  • 000017AE — __IOManClose@12
  • 000017F3 — __IOManWriteFile@44
  • 00001838 — __IOManReadFile@44
  • 0000187D — __IOManDeviceIoControl@48
  • 000018C2 — __IOManFlushFileBuffers@16
  • 00001907 — __IOManCancelIoFile@16
  • 0000194C — __IOManGetDevnodeFromFileHandle@16
  • 00001991 — __IOManRequestWakeupLatency@12
  • 000019D6 — _Get_Next_Thread_Handle@4
  • 000019EF — _Get_Sys_Thread_Handle@0
  • 00001A02 — _Get_Cur_Thread_Handle@0
  • 00001A15 — _AllocateThreadDataSlot@0
  • 00001A1B — _VWIN32_GetProcessHandle
  • 00001A21 — _Win32ReferenceObjectByHandle
  • 00001A27 — _Win32ReferenceObject
  • 00001A2E — _Win32DereferenceObject
  • 00001A41 — _mR0ObjFree@4
  • 00001A57 — _mR0ObjDup@8
  • 00001A77 — _MakeWin32Handle
  • 00001AA5 — _GetNtHandle
  • 00001ABB — _CloseWin32Handle
  • 00001AD1 — _GetPathBase@8
  • 00001B4F — _MapRegistryPath@12
  • 00001C56 — _ZwOpenKey@12
  • 00001DAA — _ZwEnumerateKey@24
  • 00001F6E — _ZwClose@4
  • 0000200D — _ZwCreateKey@28
  • 00002197 — _ZwDeleteKey@4
  • 00002267 — _ZwSetValueKey@24
  • 000023CC — _ZwpGenerateValueTypeName@8
  • 000025BD — _ZwpSetValueType@16
  • 0000267A — _ZwpGetValueType@12
  • 00002775 — _ZwQueryValueKey@24
  • 00002B45 — _GetClassName@12
  • 00002B8F — _AToW@12
  • 00002BDA — _ZwQueryKey@20
  • 00002E40 — _ZwEnumerateValueKey@24
  • 00002F37 — _ZwDeleteValueKey@8
  • 00002FE8 — _GetMessagePtr
  • 00003003 — _ExMapHandleToPointer@12
  • 0000304E — _ExpAllocateHandleTable@8
  • 000030AE — _ExpAllocateHandleTableEntries@16
  • 0000315C — _ExCreateHandle@8
  • 000031E4 — _ExCreateHandleTable@12
  • 0000325C — _ExDestroyHandle@12
  • 000032D2 — _ExDestroyHandleTable@8
  • 00003347 — _NtClearEvent@4
  • 00003389 — _NtCreateEvent@20
  • 00003492 — _NtOpenEvent@12
  • 00003558 — _NtPulseEvent@8
  • 00003638 — _NtQueryEvent@20
  • 00003755 — _NtResetEvent@8
  • 00003834 — _NtSetEvent@8
  • 00003914 — @WorkerThreadFunction@8
  • 000039BD — _SysDestroyWorkerThread@4
  • 00003A1B — _SysDestroyWorkerThreads@0
  • 00003AB9 — _SysCreateWorkerThread@8
  • 00003B5F — _InitializeWorkItemQueue@4
  • 00003BD1 — _SysInit@4
  • 00003BF2 — _ExCreateCallback@16
  • 00003CFB — _ExpDeleteCallback@4
  • 00003D24 — _ExpWstrSystemInformation
  • 00003D5C — _ExpWstrSystemInformationValue
  • 00003D68 — _ExInitializeNPagedLookasideList@28
  • 00003E2B — _ExInitializePagedLookasideList@28
  • 00003F00 — _ExRaiseAccessViolation@0
  • 00003F10 — _ExRaiseDatatypeMisalignment@0
  • 00003F20 — _HalGetAdapter@8
  • 00004399 — _HalpAllocateGlobalMapBuffer@0
  • 000043E6 — _HalAllocateCommonBuffer@16
  • 000044D1 — _HalpGrowMapBuffers@8
  • 0000465B — _HalpAllocateAdapter@12
  • 0000484B — _RtlAnsiStringToUnicodeString@12
  • 0000492C — _RtlUnicodeStringToAnsiString@12
  • 00004A25 — _RtlWriteRegistryValue@24
  • 00004AB4 — _RtlInitializeBitMap@12
  • 00004B01 — _RtlpGetRegistryHandle@16
  • 00004C4E — _RtlpQueryRegistryDirect@16
  • 00004D2F — _RtlpCallQueryRegistryRoutine@20
  • 00004F4C — _RtlQueryRegistryValues@20
  • 00005258 — _RtlExtendedLargeIntegerDivide@16
  • 000052A2 — _RtlExtendedIntegerMultiply@12
  • 00005306 — _RtlExtendedMagicDivide@20
  • 00005394 — _RtlStringFromGUID@8
  • 0000543C — _RtlGUIDFromString@8
  • 00005627 — _IoAllocateDriverObjectExtension@16
  • 00005678 — _IoAssociationInitialize@0
  • 000056C8 — _IoConnectInterrupt@44
  • 00005858 — _IoDisconnectInterrupt@4
  • 000058AB — _NtCreateFile@44
  • 000058E2 — _NtDeviceIoControlFile@40
  • 00005913 — _NtInternalDeviceIoControlFile@40
  • 00005944 — _IopCreateDriver@12
  • 00005AA4 — _IopGetServiceNameFromDriverName@8
  • 00005B75 — _IoCreateDriver@8
  • 00005C43 — _IoCreateDriverObject@8
  • 00005CBD — _IopBuildDefaultSysDriverPath@12
  • 00005EE3 — _IopGetTag@12
  • 00005F87 — _IopAddDriverToDriverList@20
  • 00006259 — _IopFindDrivers@12
  • 00006365 — _IopFreeDriverList@4
  • 000063CB — _IopGetDriverList@4
  • 0000653B — _CmpDoSort@8
  • 000065DA — _CmpResolveDriverDependencies@4
  • 00006622 — _CmpOrderGroup@8
  • 00006689 — _IopUserCompletion@20
  • 000066D2 — _IopUserRundown@4
  • 0000671B — _IopAbortRequest@4
  • 0000678B — _IopXxxControlFile@44
  • 00006D1E — _IopSynchronousApiServiceTail@24
  • 00006E03 — _IopSynchronousServiceTail@28
  • 00006F98 — _IopAcquireFileObjectLock@16
  • 0000705F — _IopAllocateIrpCleanup@8
  • 000070D1 — _IopCancelAlertedRequest@8
  • 000070E4 — _IoGetConfigurationInformation@0
  • 00007123 — _IoCreateDevice@28
  • 00007231 — _IopCreateDevice@28
  • 00007432 — _IoDeleteSymbolicLink@4
  • 000074C7 — _IoCreateFile@56
  • 0000768C — _IoGetDeviceObjectPointer@16
  • 00007742 — _IoCancelThreadIo@4
  • 000077FB — _IoAttachDevice@12
  • 000078E2 — _IoSetShareAccess@16
  • 000079C5 — _IopOpenRegistryKey@20
  • 00007A58 — _IopGetRegistryValue@12
  • 00007B18 — _IopGetRegistryValues@8
  • 00007BB9 — _IopGetRegistryKeyInformation@8
  • 00007C63 — _IoRegisterShutdownNotification@4
  • 00007CD8 — _IoInitializeTimer@12
  • 00007DA6 — _IoBuildDeviceIoControlRequest@36
  • 00007F82 — _IoShutdownSystem@8
  • 0000806E — _IopCreateClassKey@12
  • 00008163 — _IopBuildFullDeviceObjectName@8
  • 000081F8 — _IopSplitSymbolicLink@16
  • 00008335 — _IopReplacePathSeperatorWithPound@4
  • 0000839C — _IopOpenClassAssociationRegistryEntry@20
  • 0000857B — _IopGetDevnodeHandle@8
  • 00008632 — _IopGetDevnodeSerial@8
  • 0000870F — _IopBuildAssociationLinkName@20
  • 000087E8 — _IopGetRegistryValueDword@12
  • 00008874 — _IopGetLinkedState@4
  • 000088FF — _IopSetLinkedState@8
  • 000089A9 — _IopDecrementSymbolicLinkReference@8
  • 00008A5A — _IopIncrementSymbolicLinkReference@8
  • 00008B68 — _IoGetDeviceInterfaces@16
  • 00008E70 — _IopEnumKeyHandle@12
  • 00008F71 — _IopEnumKeyHandles@12
  • 0000908A — _IopEnumKeyHandlesNestWorker@12
  • 00009152 — _IopEnumKeyHandlesNest@16
  • 000091D5 — _IopClearDeviceClassAssociationLinks@0
  • 00009350 — _IoOpenDeviceInterfaceRegistryKey@12
  • 000093DE — _IoRegisterDeviceInterfaceByDevnode@16
  • 00009535 — _IoRegisterDeviceInterface@16
  • 000095AD — _IopGetNextLocalUniqueId@4
  • 000096CF — _IopFindTheGuid@8
  • 00009766 — _IoUnregisterDeviceInterface@4
  • 000097D4 — _IoGetDeviceInterfaceAlias@12
  • 000098D6 — _IoSetDeviceInterfaceState@8
  • 00009A2D — _IopRemoveReferenceString@8
  • 00009AAD — _IoGetDmaAdapter@12
  • 00009BB1 — _IoIsWdmVersionAvailable@8
  • 00009C03 — _IopLoadUnloadDriver@4
  • 00009C5A — _IopLoadDriver@4
  • 0000A1B8 — _IopGetDriverNameFromKeyNode@8
  • 0000A38B — _IopMapAndLoadDriver@4
  • 0000A4BC — _IopLoadByName@12
  • 0000A719 — _IopNotPnP@8
  • 0000A726 — _IopReadyDeviceObjects@4
  • 0000A778 — _IopCloseFile@20
  • 0000A8E0 — _IopDeleteDevice@4
  • 0000A92C — _IopDeleteDriver@4
  • 0000A9CA — _IopParseFile@40
  • 0000AA54 — _IopParseDevice@40
  • 0000B099 — _NtQueryInformationFile@20
  • 0000B554 — _NtReadFile@36
  • 0000B920 — _RegStrInit@0
  • 0000BBCA — _NtWriteFile@36
  • 0000C04E — _NtOpenFile@24
  • 0000C0AE — _IopErrorLogThread@4
  • 0000C397 — _IopErrorLogQueueRequest@0
  • 0000C418 — _NtCancelIoFile@8
  • 0000C5CA — _NtFlushBuffersFile@8
  • 0000C7DC — _ObpAllocateObject@20
  • 0000C91A — _ObCreateObject@36
  • 0000C9B2 — _ObpCaptureObjectCreateInformation@16
  • 0000CA31 — _ObpCaptureObjectName@8
  • 0000CAAC — @ObpFreeObject@4
  • 0000CB46 — _ObMakeTemporaryObject@4
  • 0000CB8F — _NtMakeTemporaryObject@4
  • 0000CBFE — _NtCreateDirectoryObject@12
  • 0000CC76 — _ObpLookupDirectoryEntry@12
  • 0000CD81 — _ObpLookupObjectName@40
  • 0000D233 — _ObpCreateUnnamedHandle@24
  • 0000D313 — _ObpCreateHandle@36
  • 0000D476 — _ObInsertObject@24
  • 0000D659 — _NtCreateSymbolicLinkObject@16
  • 0000D730 — _NtOpenSymbolicLinkObject@12
  • 0000D75E — _ObpParseSymbolicLink@40
  • 0000D855 — _ObpDuplicateHandle@4
  • 0000D916 — _ObReferenceObjectByName@32
  • 0000D9C8 — _ObpRemoveObjectRoutine@4
  • 0000DA86 — _ObpDeleteNameCheck@8
  • 0000DCCD — _ObOpenObjectByName@28
  • 0000DE6F — _ObOpenObjectByPointer@28
  • 0000DEEE — _ObCreateObjectType@12
  • 0000E1CE — _SeCreateAccessState@12
  • 0000E27B — _SeDeleteAccessState@4
  • 0000E2D7 — _NtOpenSection@12
  • 0000E33C — _NtMapViewOfSection@40
  • 0000E5C0 — _MmMapViewOfSection@40
  • 0000E695 — _MiFindLinearBlock@8
  • 0000E6F1 — _MiReserveLinearBlock@12
  • 0000E7EA — _MiFreeLinearRegion@12
  • 0000E913 — _MiFindMapping@8
  • 0000E979 — _MiReserveLinearRegion@12
  • 0000EB05 — _NtUnmapViewOfSection@8
  • 0000EB62 — _MmUnmapViewOfSection@8
  • 0000EBED — _PsCreateSystemThread@28
  • 0000ED48 — _PsTerminateSystemThread@4
  • 0000EDA6 — _KeSetPriorityThread@8
Segment 9: _PDATA @ 000280D0
  • 0000000C — ??_C@_00A@?$AA@
  • 00002CC0 — _WinDir
  • 00002CD8 — ??_C@_0L@LLAF@DeviceDesc?$AA@
  • 00002CE4 — ??_C@_0N@IOME@FriendlyName?$AA@
  • 00002CF4 — ??_C@_09CDHI@ClassGUID?$AA@
  • 00002D00 — ??_C@_05LCAF@Class?$AA@
  • 00002D08 — ??_C@_06LCIG@Driver?$AA@
  • 00002D10 — ??_C@_0BO@LADI@0?5?$DN?$DN?5?$CI1?5?$CG?5PropertyBufferSize?$CJ?$AA@
  • 00002D30 — ??_C@_08KDKK@Location?$AA@
  • 00002D3C — ??_C@_03KFJO@Mfg?$AA@
  • 00002D40 — ??_C@_0O@KIHO@CompatibleIDs?$AA@
  • 00002D50 — ??_C@_0L@LPIN@HardwareID?$AA@
  • 00002D5C — ??_C@_0CP@OOGA@Big?5error?3?5?$CF08x?5is?5not?5a?5pnp?5wdm@
  • 00002D8C — ??_C@_0BD@BHNP@NTKERN?5PNP?5ERROR?3?5?$AA@
  • 00002DA0 — ??_C@_0M@IDIE@?4?4?2pnpapi?4c?$AA@
  • 00002DB0 — ??_C@_0BJ@BMGK@AddDevice?$CI?$CJ?5of?5?$CFs?5failed?$AA@
  • 00002DCC — ??_C@_0CC@DONN@Failed?5to?5load?5miniport?5driver?5?$CF@
  • 00002DF0 — ??_C@_0BP@KKLP@Error?5opening?5the?5registry?5key?$AA@
  • 00002E10 — ??_C@_0CI@OGOL@Could?5not?5find?5a?5backslash?5in?5th@
  • 00002E38 — ??_C@_0CF@EJOF@Error?5getting?5a?5key?5for?5devnode?5@
  • 00002E60 — ??_C@_0N@IMGC@UpperFilters?$AA@
  • 00002E70 — ??_C@_0L@MNFF@NTMPDriver?$AA@
  • 00002E7C — ??_C@_0N@JGBG@LowerFilters?$AA@
  • 00002E8C — ??_C@_0FA@GIHA@Failed?5?$CF08X?5to?5create?5fake?5pdo?5f@
  • 00002EDC — _NtPnPDriverObject
  • 00002EE0 — ??_C@_0PG@KFIC@Please?5make?5a?5bug?5to?5the?5owner?5o@
  • 00002FD8 — ??_C@_0CF@CDAH@Enumerator?5rightfully?5challenged@
  • 00003000 — ??_C@_0CE@HACN@?$CIcould?5not?5get?5the?5enumerator?5na@
  • 00003024 — ??_C@_0BF@HIAO@Unsupported?5bus?5type?$AA@
  • 0000303C — ??_C@_0BB@GDPD@Unknown?5bus?5type?$AA@
  • 00003050 — ??_C@_0FB@IODO@PDO?5?$CF08X?5failed?5something?5during@
  • 000030A4 — ??_C@_0EB@MDBO@PDO?5?$CF08X?5failed?5something?5during@
  • 000030E8 — ??_C@_0BA@KDFL@busInfo?5?$CB?$DN?5NULL?$AA@
  • 000030F8 — ??_C@_0N@INKD@?4?4?2pnpenum?4c?$AA@
  • 00003108 — ??_C@_0HL@DELD@Contact?5dev?5owner?5for?5?$CFs?0?5which?5@
  • 00003184 — ??_C@_0EM@FADD@Something?5bad?5?$CF08X?5happened?5duri@
  • 000031D0 — ??_C@_0CE@ILLB@Problem?5recreating?5?$CFs?0?5get?5Pierr@
  • 000031F4 — ??_C@_0CN@NPOA@DevNode?5named?5?$CFs?5moved?5from?5PDO?5@
  • 00003224 — ??_C@_0BP@JAFJ@PDO?5?$CF08X?5is?5on?5a?5dying?5devnode?$AA@
  • 00003244 — ??_C@_0EP@LPHA@Something?5bad?5?$CF08X?5happened?5duri@
  • 00003294 — ??_C@_0EC@MKFC@You?5cannot?5have?5a?5NULL?5ID?5if?5you@
  • 000032D8 — ??_C@_0EM@HBIL@Something?5bad?5happened?5during?5de@
  • 00003324 — ??_C@_0BO@CMDN@PDO?5?$CF08X?5does?5not?5have?5a?5name?$AA@
  • 00003344 — ??_C@_0EL@DKBG@Something?5bad?5happened?5during?5de@
  • 00003390 — ??_C@_0BF@DFMM@Unknown?5Dx?5State?5?$CI2?$CJ?$AA@
  • 000033A8 — ??_C@_0EP@DKOB@We?5can?8t?5power?5manage?5devnode?5?$CF0@
  • 000033F8 — ??_C@_0EI@CAIJ@Contact?5dev?5owner?5for?5?$CFs?0?5which?5@
  • 00003440 — ??_C@_0DG@LFBP@Null?5driver?5with?5DO?5?$CF08X?5did?5not@
  • 00003478 — ??_C@_0BF@ODD@Unknown?5Dx?5State?5?$CI1?$CJ?$AA@
  • 00003490 — ??_C@_0CK@DMEC@Filtering?5into?5nothing?0?5returnin@
  • 000034BC — ??_C@_0DC@FKMK@Could?5not?5get?5the?5filter?5data?0?5f@
  • 000034F0 — ??_C@_0DC@NMGE@Could?5not?5get?5the?5filter?5size?0?5f@
  • 00003524 — ??_C@_0CF@OBE@WhichSpace?5must?5be?50?5for?5PCI?5dev@
  • 0000354C — ??_C@_0CE@MLBM@Read?1Write?5Config?5of?5non?9PCI?5dev@
  • 00003570 — ??_C@_0N@NCFF@?4?4?2pnphirp?4c?$AA@
  • 00003580 — ??_C@_0DE@BPAO@pIrpStack?9?$DOParameters?4ReadWriteC@
  • 000035B4 — ??_C@_0CJ@OEMH@Unknown?5relation?5type?0?5returning@
  • 000035E0 — ??_C@_0DO@CPJI@Whoser?$CB?5The?5wake?5IRP?5isn?8t?5the?5o@
  • 00003620 — _fPnPReady
  • 00003624 — ??_C@_0FE@DIMK@Extremely?5bad?3?5failed?5?$CI?$CF08X?$CJ?5ins@
  • 00003678 — ??_C@_0FD@IHB@Extremely?5bad?3?5failed?5?$CI?$CF08X?$CJ?5cre@
  • 000036CC — ??_C@_0DJ@LIDG@Couldn?8t?5get?5capabilities?5of?5PDO@
  • 00003708 — ??_C@_0N@KIHN@Capabilities?$AA@
  • 00003718 — ??_C@_0DG@PEDN@Get?5PierreYS?0?5I?5don?8t?5know?5how?5t@
  • 00003750 — ??_C@_0DI@EGJP@?$CI1?$CJ?5?$HM?5?$CI1?$CJ?5?$HM?5?$CI1?$CJ?5?$DP?5?$CIPnPCompletion@
  • 00003788 — ??_C@_0M@CLMD@?4?4?2pnpirp?4c?$AA@
  • 00003794 — ??_C@_0BO@OPOF@Not?5enough?5memory?5for?5an?5IRP1?$AA@
  • 000037B4 — ??_C@_0DE@NHGL@Some?5NTKERN?5dude?5failed?5the?5hard@
  • 000037E8 — ??_C@_0DF@MELN@Conversion?5from?5W?5to?5A?5of?5?$CFs?5fai@
  • 00003820 — ??_C@_0GC@OKCJ@Handler?5of?5devnode?5?$CF08X?5return?5s@
  • 00003884 — ??_C@_0EJ@JIG@Handler?5of?5devnode?5?$CF08X?5return?5?$CF@
  • 000038D0 — ??_C@_0DM@JCGJ@Something?5bad?5?$CF08X?5happened?5duri@
  • 0000390C — ??_C@_0FJ@MEKN@It?5will?5be?5a?5LONG?5while?5before?5W@
  • 00003968 — ??_C@_0DN@BLDO@Couldn?8t?5get?5the?5device?5state?5of@
  • 000039A8 — ??_C@_0BP@DPMF@String?5to?5convert?5is?5too?5long?4?$AA@
  • 000039C8 — ??_C@_0DD@GIJH@IFSMGR?1NTKERN?5disagree?5on?5the?5le@
  • 000039FC — ??_C@_0CK@GCJD@Out?5of?5memory?5in?5ConvertWToHeapA@
  • 00003A28 — ??_C@_0CD@OAJM@String?5to?5convert?5is?5too?5long?5?$CI2@
  • 00003A4C — ??_C@_0N@CMHL@?4?4?2pnputil?4c?$AA@
  • 00003A64 — _Converts
  • 00003AAC — _ConvertBacks
  • 00003B04 — ??_C@_0DL@KHBG@Bobo?3?5should?5not?5be?5here?5since?5o@
  • 00003B40 — ??_C@_0CH@FECK@Bobo?3?5could?5not?5find?5a?5group?5beg@
  • 00003B68 — ??_C@_0DH@NBPH@Problem?5with?5RD?5?$CF08X?3?5should?5be?5@
  • 00003BA0 — ??_C@_0CM@LJEM@Could?5not?5allocate?5memory?5in?5All@
  • 00003BCC — ??_C@_0BB@NBGH@Invalid?5MD_Count?$AA@
  • 00003BE0 — ??_C@_0BC@PHM@Invalid?5IOD_Count?$AA@
  • 00003BF4 — ??_C@_0CA@HAHO@Unstandard?5alias?4?5Get?5SantoshJ?4?$AA@
  • 00003C14 — ??_C@_0BK@PBKI@Varying?5level?1edge?5in?5IRQ?$AA@
  • 00003C30 — ??_C@_0CB@KMPH@Varying?5share?5disposition?5in?5IRQ@
  • 00003C54 — ??_C@_0CB@NAEK@Incorrect?5size?5for?5a?5NT?5resource@
  • 00003C78 — ??_C@_0CB@PGOM@Could?5not?5copy?5NT?5structure?5back@
  • 00003C9C — ??_C@_0CA@CIF@Invalid?5data?5in?5the?5config?5data?$AA@
  • 00003CBC — ??_C@_0CC@JMP@Inconsistency?5in?5OS?5specific?5cod@
  • 00003CE0 — ??_C@_0BL@JOOH@Incorrect?5OS?5specific?5code?$AA@
  • 00003CFC — ??_C@_0BC@IFFB@Convertion?5failed?$AA@
  • 00003D10 — ??_C@_0CN@CJKP@Resource?5alternative?5at?5the?5head@
  • 00003D40 — ??_C@_09EKPH@?4?4?2idle?4c?$AA@
  • 00003D4C — ??_C@_0DI@HFGA@PoRequestPowerIrp?5wasn?8t?5a?5PDO?5t@
  • 00003D84 — ??_C@_0DJ@CBLF@?$CI1?$CJ?5?$HM?5?$CI1?$CJ?5?$HM?5?$CI1?$CJ?5?$DP?5?$CIPopCompleteRe@
  • 00003DC0 — ??_C@_0M@LJEG@?4?4?2pocall?4c?$AA@
  • 00003DCC — ??_C@_0DC@KEPH@Sending?5failure?5to?5ourselves?5in?5@
  • 00003E00 — ??_C@_0DI@OAJE@Let?5me?5complete?5the?5wake?5IRP?5bef@
  • 00003E38 — ??_C@_0CG@HJOO@Failing?5conversion?5of?5the?5power?5@
  • 00003E60 — ??_C@_0BC@BHC@NTKERN?5PO?5WARNS?3?5?$AA@
  • 00003E74 — ??_C@_0DE@EBFM@Invalid?5minor?5function?5in?5PoRequ@
  • 00003EA8 — ??_C@_0BP@LJDB@PoRequestPowerIrp?5wasn?8t?5a?5PDO?$AA@
  • 00003EC8 — ??_C@_0DF@PMGP@Get?5PierreYS?5has?5I?5did?5not?5thoug@
  • 00003F00 — ??_C@_0BJ@GPLH@Cancel?5routine?5cleared?$DP?$CB?$AA@
  • 00003F1C — _IopCacheHitIncrement
  • 00003F20 — ??_C@_0DG@CHNK@ReadFile?3?5byteoffset?50?0?5behaving@
  • 00003F58 — ??_C@_09GLKN@?4?4?2read?4c?$AA@
  • 00003F64 — _CmAutoGenName
  • 00003F6C — _CmpAutoGenString
  • 00003F70 — _CmRegistryMachineHardwareDescriptionSystemName
  • 00003F78 — _CmpRegistryMachineHardwareDescriptionSystemString
  • 00003F7C — _CmRegistryMachineSystemCCSControlNTKernName
  • 00003F84 — _CmpRegistryMachineSystemCCSControlNTKernString
  • 00003F88 — _CmRegistryMachineName
  • 00003F90 — _CmpRegistryMachineString
  • 00003F94 — _CmRegistryUserName
  • 00003F9C — _CmpRegistryUserString
  • 00003FA0 — _CmRegistryEnumName
  • 00003FA8 — _CmpRegistryEnumString
  • 00003FAC — _CmNextLUIDName
  • 00003FB4 — _CmpNextLUIDString
  • 00003FB8 — _CmDosDevicesName
  • 00003FC0 — _CmpDosDevicesString
  • 00003FC4 — _CmDeviceParametersName
  • 00003FCC — _CmpDeviceParametersString
  • 00003FD0 — _CmDeviceName
  • 00003FD8 — _CmpDeviceString
  • 00003FDC — _CmDeviceInstanceName
  • 00003FE4 — _CmpDeviceInstanceString
  • 00003FE8 — _CmDotName
  • 00003FF0 — _CmpDotString
  • 00003FF4 — _CmPoundName
  • 00003FFC — _CmpPoundString
  • 00004000 — _CmNullName
  • 00004008 — _CmpNullString
  • 0000400C — _CmRefCountName
  • 00004014 — _CmpRefCountString
  • 00004018 — _CmSymbolicLinkName
  • 00004020 — _CmpSymbolicLinkString
  • 00004024 — _CmSerialNumberName
  • 0000402C — _CmpSerialNumberString
  • 00004030 — _CmRegistryMachineSystemCurrentControlSetName
  • 00004038 — _CmpRegistryMachineSystemCurrentControlSetString
  • 0000403C — _CmRegistryMachineSystemCurrentControlSetServicesName
  • 00004044 — _CmpRegistryMachineSystemCurrentControlSetServicesString
  • 00004048 — _CmDeviceClassKeyName
  • 00004050 — _CmpDeviceClassKeyString
  • 00004054 — _CmSystemRootName
  • 0000405C — _CmpSystemRootString
  • 00004060 — _CmCurrentControlSetName
  • 00004068 — _CmpCurrentControlSetString
  • 0000406C — _CmControlName
  • 00004074 — _CmpControlString
  • 00004078 — _CmServicesName
  • 00004080 — _CmpServicesString
  • 00004084 — _CmGroupName
  • 0000408C — _CmpGroupString
  • 00004090 — _CmSystemRootSystem32driversName
  • 00004098 — _CmpSystemRootSystem32driversString
  • 0000409C — _CmControlGroupOrderListName
  • 000040A4 — _CmpControlGroupOrderListString
  • 000040A8 — _CmImagePathName
  • 000040B0 — _CmpImagePathString
  • 000040B4 — _CmSysName
  • 000040BC — _CmpSysString
  • 000040C0 — _CmStartName
  • 000040C8 — _CmpStartString
  • 000040CC — _CmSystemName
  • 000040D4 — _CmpSystemString
  • 000040D8 — _CmTagName
  • 000040E0 — _CmpTagString
  • 000040E4 — _CmListName
  • 000040EC — _CmpListString
  • 000040F0 — _CmControlServiceGroupOrderName
  • 000040F8 — _CmpControlServiceGroupOrderString
  • 000040FC — _Cm_T_Name
  • 00004104 — _Cmp_T_String
  • 00004108 — _Cm_TypeName
  • 00004110 — _Cmp_TypeString
  • 00004114 — _CmDriverName
  • 0000411C — _CmpDriverString
  • 00004120 — _CmFileSystemName
  • 00004128 — _CmpFileSystemString
  • 0000412C — _CmBackSlashName
  • 00004134 — _CmpBackSlashString
  • 00004138 — _CmLinkedName
  • 00004140 — _CmpLinkedString
  • 00004144 — _CmTypeName
  • 0000427C — _CmTypeString
  • 00004318 — ??_C@_1BE@CDCI@?$AAU?$AAn?$AAd?$AAe?$AAf?$AAi?$AAn?$AAe?$AAd?$AA?$AA@
  • 0000432C — ??_C@_1BK@ENIN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?$AA@
  • 00004348 — ??_C@_1CE@LANH@?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 0000436C — ??_C@_1BO@CJIF@?$AAL?$AAi?$AAn?$AAe?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 0000438C — ??_C@_1CA@IGFK@?$AAO?$AAt?$AAh?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 000043AC — ??_C@_1CG@MDFM@?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 000043D4 — ??_C@_1CG@IEKA@?$AAK?$AAe?$AAy?$AAb?$AAo?$AAa?$AAr?$AAd?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 000043FC — ??_C@_1CE@HDEI@?$AAP?$AAo?$AAi?$AAn?$AAt?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00004420 — ??_C@_1CE@BACN@?$AAP?$AAr?$AAi?$AAn?$AAt?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00004444 — ??_C@_1CE@FABA@?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00004468 — ??_C@_1CA@NODE@?$AAM?$AAo?$AAd?$AAe?$AAm?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00004488 — ??_C@_1BO@CGFI@?$AAT?$AAa?$AAp?$AAe?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 000044A8 — ??_C@_1CK@JLDJ@?$AAF?$AAl?$AAo?$AAp?$AAp?$AAy?$AAD?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl@
  • 000044D4 — ??_C@_1BO@PJEO@?$AAD?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 000044F4 — ??_C@_1CA@LKFM@?$AAO?$AAt?$AAh?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 00004514 — ??_C@_1CA@PEGP@?$AAA?$AAu?$AAd?$AAi?$AAo?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 00004534 — ??_C@_1CG@LIKG@?$AAK?$AAe?$AAy?$AAb?$AAo?$AAa?$AAr?$AAd?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 0000455C — ??_C@_1CE@EPEO@?$AAP?$AAo?$AAi?$AAn?$AAt?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 00004580 — ??_C@_1CG@PGOM@?$AAP?$AAa?$AAr?$AAa?$AAl?$AAl?$AAe?$AAl?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 000045A8 — ??_C@_1CE@DMFN@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 000045CC — ??_C@_1CE@IMNB@?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 000045F0 — ??_C@_1CC@IGHG@?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 00004614 — ??_C@_1BO@LLNG@?$AAW?$AAo?$AAr?$AAm?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 00004634 — ??_C@_1CA@BIAE@?$AAC?$AAd?$AAR?$AAo?$AAm?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 00004654 — ??_C@_1BO@BKFO@?$AAT?$AAa?$AAp?$AAe?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 00004674 — ??_C@_1BO@MFEI@?$AAD?$AAi?$AAs?$AAk?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 00004694 — ??_C@_1CK@HHAK@?$AAM?$AAu?$AAl?$AAt?$AAi?$AAf?$AAu?$AAn?$AAc?$AAt?$AAi?$AAo?$AAn?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr@
  • 000046C0 — ??_C@_1BG@CDDF@?$AAD?$AAt?$AAi?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
  • 000046D8 — ??_C@_1BI@MPIK@?$AAS?$AAc?$AAs?$AAi?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
  • 000046F0 — ??_C@_1BE@PJDG@?$AAT?$AAc?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
  • 00004704 — ??_C@_1BI@LJGK@?$AAE?$AAi?$AAs?$AAa?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
  • 0000471C — ??_C@_1BO@ECJF@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
  • 0000473C — ??_C@_1CA@EAGJ@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAD?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
  • 0000475C — ??_C@_1CA@NPNM@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAI?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
  • 0000477C — ??_C@_1BM@ENFA@?$AAP?$AAr?$AAi?$AAm?$AAa?$AAr?$AAy?$AAD?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
  • 00004798 — ??_C@_1BM@NCOF@?$AAP?$AAr?$AAi?$AAm?$AAa?$AAr?$AAy?$AAI?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
  • 000047B4 — ??_C@_1CO@LFBC@?$AAF?$AAl?$AAo?$AAa?$AAt?$AAi?$AAn?$AAg?$AAP?$AAo?$AAi?$AAn?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs@
  • 000047E4 — ??_C@_1CC@MFFM@?$AAC?$AAe?$AAn?$AAt?$AAr?$AAa?$AAl?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAo?$AAr?$AA?$AA@
  • 00004808 — ??_C@_1O@EPAA@?$AAL?$AAi?$AAn?$AAk?$AAe?$AAd?$AA?$AA@
  • 00004818 — ??_C@_1BK@MPEO@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AA?$AA@
  • 00004834 — ??_C@_1BC@LFKG@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$AA@
  • 00004848 — ??_C@_1M@GDFC@?$AA_?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
  • 00004854 — ??_C@_17PAPH@?$AA_?$AAT?$AA_?$AA?$AA@
  • 0000485C — ??_C@_1DE@NFDK@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAG?$AAr?$AAo?$AAu?$AAp@
  • 00004890 — ??_C@_19OFAF@?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
  • 0000489C — ??_C@_17CCKB@?$AAT?$AAa?$AAg?$AA?$AA@
  • 000048A4 — ??_C@_1O@KHFL@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
  • 000048B4 — ??_C@_17FDLC@?$AAs?$AAy?$AAs?$AA?$AA@
  • 000048BC — ??_C@_1CO@ECIK@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAG?$AAr?$AAo?$AAu?$AAp?$AAO?$AAr?$AAd?$AAe?$AAr?$AAL?$AAi@
  • 000048EC — ??_C@_1DK@LJHF@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2@
  • 00004928 — ??_C@_1M@EONE@?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA@
  • 00004934 — ??_C@_1BC@LHCC@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
  • 00004948 — ??_C@_1BA@DLLE@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
  • 00004958 — ??_C@_1CE@KEEI@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?$AA@
  • 0000497C — ??_C@_1IC@KIJF@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
  • 00004A00 — ??_C@_1GI@EMLC@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
  • 00004A68 — ??_C@_1FG@PFNI@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
  • 00004AC0 — ??_C@_1O@OIBJ@?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AA?$AA@
  • 00004AD0 — ??_C@_1BK@LJFM@?$AAS?$AAy?$AAm?$AAb?$AAo?$AAl?$AAi?$AAc?$AAL?$AAi?$AAn?$AAk?$AA?$AA@
  • 00004AEC — ??_C@_1BC@HFGN@?$AAR?$AAe?$AAf?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
  • 00004B00 — ??_C@_13LEOO@?$AA?$CD?$AA?$AA@
  • 00004B04 — ??_C@_1BO@IGPD@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
  • 00004B24 — ??_C@_1CE@KEEA@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
  • 00004B48 — ??_C@_1BC@IKAI@?$AAN?$AAe?$AAx?$AAt?$AAL?$AAU?$AAI?$AAD?$AA?$AA@
  • 00004B5C — ??_C@_1DA@PCOE@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAE?$AAn@
  • 00004B8C — ??_C@_1BO@NKEJ@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
  • 00004BAC — ??_C@_1CE@LJDG@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?$AA@
  • 00004BD0 — ??_C@_1HE@BCIG@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
  • 00004C44 — ??_C@_1FM@MLDO@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAH?$AAA@
  • 00004CA0 — ??_C@_1BA@JCHI@?$AAA?$AAu?$AAt?$AAo?$AAG?$AAe?$AAn?$AA?$AA@
  • 00004CB0 — ??_C@_0CK@OJMM@?8CreateObject?3?5Created?5new?5objec@
Segment 10: _IDATA @ 00000000
  • 0000001C — ExportNTFunctions
  • 0000010A — NTKERN_Device_Init
  • 000001C8 — _InitializeSystemPhase@4
  • 00000224 — _InitializeSystem@0
  • 00000264 — IO32_Device_Init
  • 00000278 — _InitPowerHandler
  • 000002B3 — _ExpResourceInitialization@0
  • 000002EA — _ExpEventInitialization@0
  • 00000366 — _ExInitSystem@4
  • 0000038A — _ExpInitSystemPhase0@0
  • 000003E8 — _ExpInitSystemPhase1@0
  • 0000041F — _SysCreateWorkerThreads@4
  • 000004CB — _ExpInitializeCallbacks@0
  • 000005F4 — _ExpWstrCallback
  • 00000608 — _ExpInitializeCallback
  • 00000628 — ??_C@_1EC@FFPO@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAu?$AAs?$AAp?$AAe?$AAn?$AAd?$AAH?$AAi?$AAb@
  • 0000066C — ??_C@_1DO@MHEK@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAI@
  • 000006AC — ??_C@_1DA@KHMA@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAT@
  • 000006DC — _IoInitSystem@4
  • 00000976 — _IopLoadPhaseDrivers@4
  • 000009B9 — _IopLoadRegistryDrivers@4
  • 00000A94 — _ICODE__SHELL_HookSystemBroadcast
  • 00000A9C — _ICODE__VPOWERD_Register_Power_Handler