NTKERN — Windows 98 Retail


Source Tree


Segment 1: .bss @ 00006CA0
  • 00000000 — _PsThreadType
  • 00000004 — _MmSectionObjectType
  • 00000008 — _ObpRemoveQueueActive
  • 0000000C — _ObpObjectsWithName
  • 00000010 — _ObpObjectsCreated
  • 00000014 — _ObpObjectsWithHandleDB
  • 00000020 — _ObpRootDirectoryMutex
  • 00000058 — _ObpTypeDirectoryObject
  • 0000005C — _ObpSymbolicLinkObjectType
  • 00000060 — _ObpObjectTypes
  • 000000C0 — _ObpRemoveObjectQueue
  • 000000D0 — _ObpRemoveObjectWorkItem
  • 000000E0 — _ObpDirectoryObjectType
  • 000000F0 — _ObpDefaultObject
  • 00000100 — _HandleCount
  • 00000104 — _ObpTypeObjectType
  • 00000108 — _ObpLock
  • 0000010C — _Global_Handle_Table
  • 00000110 — _ObpRootDirectoryObject
  • 00000120 — _IopErrorLogWorkItem
  • 00000130 — _IopErrorLogPortPending
  • 00000140 — _IopDatabaseEvent
  • 00000150 — _IopTimerQueueHead
  • 00000158 — _IopCancelSpinLock
  • 0000015C — _IopTimerLock
  • 00000160 — _ConfigurationInformation
  • 00000180 — _IoAdapterObjectType
  • 000001A0 — _IopTimerDpc
  • 000001C0 — _IopCompletionLock
  • 000001C4 — _IoOtherOperationCount
  • 000001C8 — _IopErrorLogLock
  • 000001D0 — _IoReadTransferCount
  • 000001D8 — _IopNotifyShutdownQueueHead
  • 000001E0 — _IoReadOperationCount
  • 000001E4 — _IoDriverObjectType
  • 000001E8 — _IopTimerCount
  • 000001EC — _IopFileObjectType
  • 00000200 — _IopTimer
  • 00000228 — _NextUniqueDeviceObjectNumber
  • 00000230 — _IopErrorLogListHead
  • 00000238 — _IoWriteOperationCount
  • 0000023C — _IoDeviceObjectType
  • 00000240 — _IopErrorLogAllocation
  • 00000244 — _IopDatabaseLock
  • 00000248 — _IopErrorLogAllocationLock
  • 00000260 — _IopAssociationHashTable
  • 00000460 — _NullPage
  • 00000464 — _LessThan16Mb
  • 00000468 — _MasterAdapterObject
  • 00000470 — _HalpBusDatabaseEvent
  • 00000480 — _HalpMapBufferSize
  • 00000484 — _HalpEisaDma
  • 00000488 — _HalpBusType
  • 00000490 — _HalpMapBufferPhysicalAddress
  • 00000498 — _HalpEisaControlBase
  • 000004A0 — _HalpEisaAdapter
  • 000004C0 — _ExNPagedLookasideLock
  • 000004C8 — _ExPagedLookasideListHead
  • 000004D0 — _ExPagedLookasideLock
  • 000004D8 — _ExNPagedLookasideListHead
  • 000004E0 — _ExCbSetSystemInformation
  • 000004E4 — _ExCbSetSystemTime
  • 000004E8 — _ExCbSuspendHibernateSystem
  • 000004EC — _ExCallbackObjectType
  • 000004F0 — _ExpCallbackEvent
  • 00000500 — _PendingDelayedWorkItems
  • 00000520 — _CriticalWorkItems
  • 00000548 — _PendingCriticalWorkItems
  • 00000560 — _DelayedWorkItems
  • 00000588 — _ExpEventObjectType
  • 0000058C — _ExEventObjectType
  • 00000590 — _ExpTimeout
  • 00000598 — _ExpSystemResourcesList
  • 000005A0 — _ExpResourceSpinLock
  • 000005C0 — _PopThrottleTimer
  • 00000600 — _PoSystemIdleTimer
  • 00000640 — _PopPolicyLock
  • 00000678 — _PopIdleScanTime
  • 00000680 — _PopIdleScanTimer
  • 000006A8 — _PopWorkerItemQueue
  • 000006B0 — _PopThrottleTimeout
  • 000006B8 — _PopActionWaiters
  • 000006C0 — _PopDumbyEvent
  • 000006D0 — _PopInrushIrpPointer
  • 000006D8 — _PopThermal
  • 000006E0 — _PopVolumeDevices
  • 000006E8 — _PopWorkerSpinLock
  • 000006EC — _PopWorkerThread
  • 000006F0 — _PopCoolingMode
  • 000006F4 — _PopInrushPending
  • 00000700 — _PopAdminPolicy
  • 00000718 — _PopWorkerPending
  • 00000720 — _PopWorkerStartEvent
  • 00000730 — _PopPolicyIrpQueue
  • 00000738 — _PopSwitches
  • 00000740 — _PopSIdle
  • 00000778 — _PopInvalidNotifyBlockCount
  • 00000780 — _PopCapabilities
  • 000007D0 — _PopIrpSerialList
  • 000007D8 — _PopIrpSerialLock
  • 000007E0 — _PopCB
  • 000008A0 — _PopEventCode
  • 000008B0 — _PopIrpSerialListLength
  • 000008B4 — _PopIdle0PromoteLimit
  • 000008C0 — _PopVolumeLock
  • 000008E0 — _PopIdle0PromoteTicks
  • 000008E4 — _PopWorkerExitFlag
  • 000008E8 — _PopDopeGlobalLock
  • 000008EC — _PopWorkerStatus
  • 000008F0 — _PopInrushIrpReferenceCount
  • 00000900 — _PopPolicyWorker
  • 00000910 — _PopRequestedIrps
  • 00000918 — _PopWorkerLock
  • 0000091C — _PopFullWake
  • 00000920 — _PopHeuristics
  • 00000934 — _PopStateCallout
  • 00000938 — _PopIdleDetectList
  • 00000940 — _IopHwProfileChangeNotifyLock
  • 00000960 — _IopDeviceClassNotifyList
  • 000009E0 — _IopDeviceClassNotifyLock
  • 00000A00 — _IopHwProfileChangeNotifyList
  • 00000A08 — _CurrentThread
  • 00000A10 — _KrnProcessList
  • 00000A18 — _NTKERNPreviousMode
  • 00000A1C — _SystemPTEPoolSize
  • 00000A20 — _SystemPTESpace
  • 00000A28 — _SystemPTEBusyMapHeader
  • 00000A30 — _SystemPTEBusyMap
  • 00000A34 — _hWin95NullPage
  • 00000A38 — _InitializationPhase
  • 00000A40 — _DebugRingBuffer
  • 00000A4C — _errno
  • 00000A50 — _DriverList
  • 00000A60 — ??_C@_0BB@HLDA@system32?2drivers?$AA@ ("system32\\drivers")
  • 00000A74 — ??_C@_08OGD@system32?$AA@ ("system32")
  • 00000A80 — ??_C@_06GMLA@system?$AA@ ("system")
  • 00000A88 — ??_C@_07NKAG@?$CFs?$CFs?2?$CFs?$AA@ ("%s%s\\%s")
  • 00000A90 — ??_C@_0O@BMMI@DllInitialize?$AA@ ("DllInitialize")
  • 00000AA0 — _RegistryMapping
  • 00000AD8 — _MappingTables
  • 00000AE0 — _MmpUserProbeAddress
  • 00000AE4 — _MmUserProbeAddress
  • 00000AE8 — ??_C@_0DG@KEAH@MmMapIoSpace?3?5NtKernSetPhysicalC@ ("MmMapIoSpace: NtKernSetPhysicalC"...)
  • 00000B20 — ??_C@_0CP@KEP@MmMapIoSpace?3?5Failed?5to?5set?5rang@ ("MmMapIoSpace: Failed to set rang"...)
  • 00000B50 — ??_C@_1BG@OJPP@?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAW?$AAD?$AAM?$AA?$AA@ (L"DynamicWDM")
  • 00000B68 — ??_C@_1GI@DEJO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY@ (L"\\Registry\\Machine\\SY"...)
  • 00000BD0 — ??_C@_1BK@JLBF@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@ (L"ErrorControl")
  • 00000BEC — ??_C@_1M@HKNH@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@ (L"Start")
  • 00000BF8 — ??_C@_19KJIP@?$AAT?$AAy?$AAp?$AAe?$AA?$AA@ (L"Type")
  • 00000C04 — ??_C@_1BE@PJND@?$AAI?$AAm?$AAa?$AAg?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@ (L"ImagePath")
  • 00000C18 — ??_C@_1IA@PBPA@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY@ (L"\\Registry\\Machine\\SY"...)
  • 00000C98 — _ThreadDataSlot
  • 00000C9C — ??_C@_0DB@CHBE@?5KTHREAD?5?$CFx?0?5hRing0?5?$CFx?0?5IRQL?5?$CF02@ (" KTHREAD %x, hRing0 %x, IRQL %02"...)
  • 00000CD0 — ??_C@_0CB@EMFF@?6Process?5?$CFx?5sys?5?$CFx?5thread?5list?3?6@ ("\nProcess %x sys %x thread list:\n"...)
  • 00000CF4 — ??_C@_0BO@GPIB@HARDWARE?2DeviceMap?2InputClass?$AA@ ("HARDWARE\\DeviceMap\\InputClass")
  • 00000D14 — ??_C@_0BN@KAPE@HARDWARE?2DeviceMap?2InputPort?$AA@ ("HARDWARE\\DeviceMap\\InputPort")
  • 00000D34 — _PathMapArray
  • 00000D44 — _pZWKeyList
  • 00000D48 — _CLASS_NAME
  • 00000D54 — ??_C@_0M@EPEN@Unspecified?$AA@ ("Unspecified")
  • 00000D60 — ??_C@_07PCLD@Working?$AA@ ("Working")
  • 00000D68 — ??_C@_09GJGM@Sleeping1?$AA@ ("Sleeping1")
  • 00000D74 — ??_C@_09JGNF@Sleeping2?$AA@ ("Sleeping2")
  • 00000D80 — ??_C@_09DMEC@Sleeping3?$AA@ ("Sleeping3")
  • 00000D8C — ??_C@_09NLJB@Hibernate?$AA@ ("Hibernate")
  • 00000D98 — ??_C@_08DCJK@Shutdown?$AA@ ("Shutdown")
  • 00000DA4 — ??_C@_08COLN@USER?4EXE?$AA@ ("USER.EXE")
  • 00000DB0 — ??_C@_0M@BPKL@MESSAGEBEEP?$AA@ ("MESSAGEBEEP")
  • 00000DBC — ??_C@_0M@FPCA@EXITWINDOWS?$AA@ ("EXITWINDOWS")
  • 00000DC8 — _PopIdleDetectionMode
  • 00000DCC — _PopSimulate
  • 00000DD0 — _PopAttributes
  • 00000E20 — _PopRegKey
  • 00000E5C — _PopAcRegName
  • 00000E70 — _PopDcRegName
  • 00000E84 — _PopHiberRegName
  • 00000EA8 — _PopAdminRegName
  • 00000EC8 — _PopHeuristicsRegName
  • 00000EE0 — _PopCompositeBatteryName
  • 00000F14 — _PopHiberFileName
  • 00000F30 — _PopDebugHiberFileName
  • 00000F4C — _PopDumpStackPrefix
  • 00000F5C — _PopWorkerTypes
  • 00000F70 — _PopPowerStateHandlers
  • 00000FE0 — _PopPolicyLockThread
  • 00000FE4 — _PopAcPolicy
  • 000010CC — _PopDcPolicy
  • 000011B4 — _PopPolicy
  • 000011B8 — _PopAction
  • 000011E8 — _PopMaxPageRun
  • 000011EC — _PopDebugCloneBase
  • 000011F0 — _PopDebugCloneEnd
  • 000011F4 — _PopHiberFile
  • 00001210 — _PopHiberFileDebug
  • 0000122C — _PoPageLockData
  • 00001230 — _lpszWarningText
  • 00001284 — _hTimeOut
  • 00001288 — _PopSystemActionPending
  • 0000128C — _PopAppyTimeHandle
  • 00001290 — _PoolFlags
  • 000012AC — _ExpResourceTimeoutCount
  • 000012B0 — ??_C@_0BB@MKLO@?8EX?5?9?5Rewaiting?6?$AA@ ("\'EX - Rewaiting\n")
  • 000012C4 — ??_C@_0CE@DFPL@?8?5NumberOfExclusiveWaiters?5?$DN?5?$CF04@ ("\' NumberOfExclusiveWaiters = %04"...)
  • 000012E8 — ??_C@_0CH@NBOI@?8?5ActiveCount?5?$DN?5?$CF04lx?5?5Flags?5?$DN?5?$CF@ ("\' ActiveCount = %04lx Flags = %"...)
  • 00001310 — ??_C@_0BC@EMAC@IsOwnedExclusive?5?$AA@ ("IsOwnedExclusive ")
  • 00001324 — ??_C@_0O@DCBD@SharedWaiter?5?$AA@ ("SharedWaiter ")
  • 00001334 — ??_C@_0BB@PBLJ@ExclusiveWaiter?5?$AA@ ("ExclusiveWaiter ")
  • 00001348 — ??_C@_0BB@MPPP@?8Resource?5?$EA?5?$CFlx?6?$AA@ ("\'Resource @ %lx\n")
  • 0000135C — ??_C@_0CB@COIA@?8?5?5Thread?5?$DN?5?$CF08lx?0?5Count?5?$DN?5?$CF02x?6@ ("\' Thread = %08lx, Count = %02x\n"...)
  • 00001380 — _ExpSemaphoreObjectType
  • 00001384 — _ExSemaphoreObjectType
  • 00001388 — _ExpEventMapping
  • 00001398 — ??_C@_1M@BACH@?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@ (L"Event")
  • 000013A4 — _ExpCallbackMapping
  • 000013B4 — ??_C@_1BC@NEEN@?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@ (L"Callback")
  • 000013C8 — _ExpAdjustScanPeriod
  • 000013CC — _ExpCurrentScanPeriod
  • 000013D0 — _HalpDmaOperations
  • 00001404 — _NlsMbCodePageTag
  • 00001408 — _RtlFreeStringRoutine
  • 0000140C — _RtlAllocateStringRoutine
  • 00001410 — ??_C@_0DD@HEJB@RtlAssert?3?5Assertion?5?$CI?$CFs?$CJ?5failed@ ("RtlAssert: Assertion (%s) failed"...)
  • 00001444 — ??_C@_0DG@FKJI@RtlAssert?3?5Assertion?5?$CI?$CFs?$CJ?5failed@ ("RtlAssert: Assertion (%s) failed"...)
  • 0000147C — _RtlpBitsClearAnywhere
  • 0000157C — _RtlpBitsClearLow
  • 0000167C — _RtlpBitsClearHigh
  • 0000177C — _RtlpBitsClearTotal
  • 00001894 — ??_C@_13HMCP@?$AA?2?$AA?$AA@ (L"\\")
  • 00001898 — ??_C@_1CA@NKCK@?$AA?$CK?$AA?$CK?$AA?$CK?$AA?5?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$AA@ (L"*** Unknown ***")
  • 000018B8 — _RtlpRegistryPaths
  • 000018D0 — _GuidFormat
  • 00001938 — ??_C@_1BM@CAEM@?$AAU?$AAs?$AAe?$AAr?$AA?2?$AA?4?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@ (L"User\\.Default")
  • 00001954 — ??_C@_1CG@BHB@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAM?$AAa?$AAp?$AA?$AA@ (L"Hardware\\DeviceMap")
  • 0000197C — ??_C@_1FE@EPLF@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW@ (L"Software\\Microsoft\\W"...)
  • 000019D0 — ??_C@_1EC@JGOB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@ (L"System\\CurrentContro"...)
  • 00001A14 — ??_C@_1EE@KIMN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@ (L"System\\CurrentContro"...)
  • 00001A58 — _RtlpIntegerChars
  • 00001A68 — _LeapYearDayToMonth
  • 00001BD8 — _NormalYearDayToMonth
  • 00001D48 — _LeapYearDaysPrecedingMonth
  • 00001D64 — _NormalYearDaysPrecedingMonth
  • 00001D80 — _SecondsToStartOf1970
  • 00001D88 — _SecondsToStartOf1980
  • 00001D90 — _Magic10000
  • 00001D98 — _Magic10000000
  • 00001DA0 — _Magic86400000
  • 00001DA8 — ??_C@_1BA@NEMI@?$AA?$CF?$AAw?$AAZ?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@ (L"%wZ\\%wZ")
  • 00001DB8 — ??_C@_1BI@KHDI@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAl?$AAu?$AA?$AA@ (L"\\Driver\\%lu")
  • 00001DD0 — ??_C@_1BI@CICJ@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@ (L"\\Driver\\%wZ")
  • 00001DE8 — ??_C@_13DOBH@?$AA?4?$AA?$AA@ (L".")
  • 00001DEC — _Mmp64BitPhysicalAddress
  • 00001DF0 — _Mm64BitPhysicalAddress
  • 00001DF4 — _IoFileObjectType
  • 00001DF8 — ??_C@_0BI@DHNG@?8IoDriver?5object?5?$CFs?5?$CFx?6?$AA@ ("\'IoDriver object %s %x\n")
  • 00001E10 — ??_C@_0BI@DJND@?8IoDevice?5object?5?$CFs?5?$CFx?6?$AA@ ("\'IoDevice object %s %x\n")
  • 00001E28 — _IopFileMapping
  • 00001E38 — ??_C@_1BA@FOJN@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@ (L"\\Device")
  • 00001E48 — ??_C@_1BA@BBDO@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@ (L"\\Driver")
  • 00001E58 — ??_C@_1BI@EDCJ@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@ (L"\\DosDevices")
  • 00001E70 — ??_C@_19GDCN@?$AAF?$AAi?$AAl?$AAe?$AA?$AA@ (L"File")
  • 00001E7C — ??_C@_1O@IMKM@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@ (L"Driver")
  • 00001E8C — ??_C@_1O@MDAP@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@ (L"Device")
  • 00001E9C — ??_C@_1BA@PFGJ@?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@ (L"Adapter")
  • 00001EAC — ??_C@_0CE@KOCD@?8Multiple?5irp?5complete?5requests?5@ ("\'Multiple irp complete requests "...)
  • 00001ED0 — ??_C@_1BK@PKEN@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAU?$AA_?$AA?$CF?$AAx?$AA?$AA@ (L"\\Device\\U_%x")
  • 00001EEC — ??_C@_1BI@LELB@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@ (L"\\Device\\%wZ")
  • 00001F04 — ??_C@_1BA@HANO@?$AA?2?$AA?2?$AA?4?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@ (L"\\\\.\\%wZ")
  • 00001F14 — ??_C@_19JGFB@?$AA?2?$AA?2?$AA?4?$AA?2?$AA?$AA@ (L"\\\\.\\")
  • 00001F20 — ??_C@_1BK@LPBE@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AA?$AA@ (L"\\DosDevices\\")
  • 00001F3C — ??_C@_1CM@JPOA@?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CD?$AA?$CF?$AAw?$AAZ?$AA?$CF?$AAs?$AA?$CF?$AAw@ (L"\\%s\\%08x%08x#%wZ%s%w")
  • 00001F68 — ??_C@_1BG@BJJK@?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@ (L"DosDevices")
  • 00001F80 — ??_C@_15LEKJ@?$AA?2?$AA?4?$AA?$AA@ (L"\\.")
  • 00001F88 — ??_C@_11A@?$AA?$AA@ (L"")
  • 00001F8C — ??_C@_1BM@PFBL@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$CF?$AAs?$AA?$AA@ (L"\\DosDevices%s")
  • 00001FA8 — ??_C@_1BC@KIOB@?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?$AA@ (L"%08x%08x")
  • 00001FBC — ??_C@_1BG@PKBH@?$AA?$CF?$AAw?$AAZ?$AA?$CD?$AA?$CF?$AAw?$AAZ?$AA?$CF?$AAw?$AAZ?$AA?$AA@ (L"%wZ#%wZ%wZ")
  • 00001FD4 — ??_C@_1DM@GGCI@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2@ (L"\\SystemRoot\\System32")
  • 00002010 — ??_C@_1BK@CENL@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AA?$AA@ (L"\\SystemRoot\\")
  • 0000202C — ??_C@_19BBIN@?$AA?4?$AAS?$AAY?$AAS?$AA?$AA@ (L".SYS")
  • 00002038 — ??_C@_1BG@PJKH@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@ (L"ObjectName")
  • 00002050 — ??_C@_15HGOB@?$AA?$CF?$AAS?$AA?$AA@ (L"%S")
  • 00002058 — ??_C@_1BG@BNKI@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAS?$AA?$AA@ (L"\\Driver\\%S")
  • 00002070 — ??_C@_0L@HBI@String?3?$CFS?6?$AA@ ("String:%S\n")
  • 0000207C — ??_C@_0BE@NFBF@NumberOfStrings?3?$CFx?6?$AA@ ("NumberOfStrings:%x\n")
  • 00002090 — ??_C@_0BC@JGKM@IoControlCode?3?$CFx?6?$AA@ ("IoControlCode:%x\n")
  • 000020A4 — ??_C@_0BD@JIFC@SequenceNumber?3?$CFx?6?$AA@ ("SequenceNumber:%x\n")
  • 000020B8 — ??_C@_0BA@GGNH@FinalStatus?3?$CFd?6?$AA@ ("FinalStatus:%d\n")
  • 000020C8 — ??_C@_0BF@BIHM@UniqueErrorValue?3?$CFd?6?$AA@ ("UniqueErrorValue:%d\n")
  • 000020E0 — ??_C@_0O@HIIA@ErrorCode?3?$CFx?6?$AA@ ("ErrorCode:%x\n")
  • 000020F0 — ??_C@_0BC@CGBB@EventCategory?3?$CFx?6?$AA@ ("EventCategory:%x\n")
  • 00002104 — ??_C@_0BB@IENP@DumpDataSize?3?$CFx?6?$AA@ ("DumpDataSize:%x\n")
  • 00002118 — ??_C@_0BA@EPKC@Retry?5Count?3?$CFx?6?$AA@ ("Retry Count:%x\n")
  • 00002128 — ??_C@_0BI@OMHI@Major?5Function?5Code?3?$CFx?6?$AA@ ("Major Function Code:%x\n")
  • 00002140 — ??_C@_0BA@DBMH@Driver?5Name?3?$CFS?6?$AA@ ("Driver Name:%S\n")
  • 00002150 — ??_C@_0CC@KNBK@?6IO?5Error?5Log?5Packet?5Information@ ("\nIO Error Log Packet Information"...)
  • 00002174 — ??_C@_13A@?$AA?$AA?$AA?$AA@ (L"\0")
  • 00002178 — ??_C@_1BK@OIJB@?$AA?2?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAT?$AAy?$AAp?$AAe?$AAs?$AA?$AA@ (L"\\ObjectTypes")
  • 00002194 — ??_C@_1BE@PPB@?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?$AA@ (L"Directory")
  • 000021A8 — ??_C@_0BN@FKCK@?8Symbolic?5link?5object?5?$CFs?5?$CFx?6?$AA@ ("\'Symbolic link object %s %x\n")
  • 000021C8 — ??_C@_0BG@NGKK@?8Directory?5object?5?$CFs?6?$AA@ ("\'Directory object %s\n")
  • 000021E0 — ??_C@_0BP@OJA@?8Dumping?5the?5object?5directory?6?$AA@ ("\'Dumping the object directory\n")
  • 00002200 — ??_C@_0BN@DCAD@?8Dumping?5the?5root?5directory?6?$AA@ ("\'Dumping the root directory\n")
  • 00002220 — _FSysErr
  • 00002230 — _FSysErrVerbose
  • 00002240 — _FErrorCode
  • 00002250 — _FCaption
  • 00002274 — ??_C@_0BI@NKKE@?$CFs?5called?5by?5?$CFx?5?6?$CFs?5?$CFx?6?$AA@ ("%s called by %x \n%s %x\n")
  • 0000228C — ??_C@_0DB@NGP@?$CFs?5called?5by?5?$CFx?5?6?$CFs?5?$CFx?5?6Paramete@ ("%s called by %x \n%s %x \nParamete"...)
  • 000022C0 — _NestCount
  • 000022C4 — _MiSectionMapping
  • 000022D4 — ??_C@_1CO@EMLF@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAP?$AAh?$AAy?$AAs?$AAi?$AAc?$AAa?$AAl?$AAM?$AAe?$AAm?$AAo@ (L"\\Device\\PhysicalMemo")
  • 00002304 — ??_C@_1BA@GGKP@?$AAS?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@ (L"Section")
  • 00002314 — _MMCONTROL
  • 00002318 — _PspThreadMapping
  • 00002328 — ??_C@_1O@BEJI@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AA?$AA@ (L"Thread")
  • 0000233C — ___nullstring
  • 00002340 — ___wnullstring
  • 00002344 — ??_C@_1O@POHA@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA@ (L"(null)\0\0\0\0\0\0\0")
  • 00002354 — ??_C@_06ONKE@?$CInull?$CJ?$AA@ ("(null)")
  • 00002360 — __pctype
  • 00002364 — __pwctype
  • 00002368 — __ctype
  • 0000256C — ___mb_cur_max
  • 00002570 — __decimal_point
  • 00002574 — __decimal_point_length
  • 00002578 — __fltused
  • 0000257C — __ldused
  • 00002580 — ___fastflag
  • 00002588 — __cfltcvt_tab
  • 000025A0 — __sigintoff
  • 000025A8 — _GUID_HWPROFILE_QUERY_CHANGE
  • 000025B8 — _GUID_HWPROFILE_CHANGE_CANCELLED
  • 000025C8 — _GUID_HWPROFILE_CHANGE_COMPLETE
  • 000025D8 — _GUID_DEVICE_INTERFACE_ARRIVAL
  • 000025E8 — _GUID_DEVICE_INTERFACE_REMOVAL
  • 000025F8 — _GUID_TARGET_DEVICE_QUERY_REMOVE
  • 00002608 — _GUID_TARGET_DEVICE_REMOVE_CANCELLED
  • 00002618 — _GUID_TARGET_DEVICE_REMOVE_COMPLETE
  • 00002628 — _GUID_BUS_INTERFACE_STANDARD
  • 00002638 — _GUID_PCI_BUS_INTERFACE_STANDARD
  • 00002648 — _GUID_ARBITER_INTERFACE_STANDARD
  • 00002658 — _GUID_TRANSLATOR_INTERFACE_STANDARD
  • 00002668 — _GUID_ACPI_INTERFACE_STANDARD
  • 00002678 — _GUID_BUS_TYPE_PCMCIA
  • 00002688 — _GUID_BUS_TYPE_PCI
  • 000026D4 — _GUID_DEVICE_BATTERY
  • 000026E4 — _GUID_DEVICE_SYS_BUTTON
  • 000026F4 — _GUID_DEVICE_LID
  • 00002704 — _GUID_DEVICE_THERMAL_ZONE
  • 00002714 — _GUID_CLASS_INPUT
  • 000028A8 — ___lookuptable
  • 00002904 — _FreeDriverInitialization@4
  • 0000292A — _MapWin95Err@8
  • 00002964 — _MmUnlockPages@4
  • 00002A7A — _MiDeferredUnLock@20
  • 00002ABA — _MmUnmapLockedPages@8
  • 00002B7B — _MiDeferredUnMap@20
  • 00002B9A — _MmMapLockedPages@8
  • 00002D0C — _ntkIsSwapping@0
  • 00002D22 — _MmSizeOfMdl@8
  • 00002D4C — _MmCreateMdl@12
  • 00002DBC — _MmAllocateContiguousMemory@12
  • 00002DE4 — _MmBuildMdlForNonPagedPool@4
  • 00002E45 — _MmProbeAndLockPages@12
  • 00002F49 — _MmProbeAndLockProcessPages@16
  • 00002FED — _MiLockProcessPages@20
  • 00003012 — _MiLockPages@20
  • 0000303B — _MmMapIoSpace@16
  • 00003232 — _MmUnmapIoSpace@8
  • 00003280 — _MiReserveSystemPtes@20
  • 00003343 — _MiInitializeSystemPtes@12
  • 000033C0 — _MiReleaseSystemPtes@12
  • 00003400 — _ThreadSwitchNotification@4
  • 0000346D — _KeGetCurrentThread@0
  • 00003473 — _IoGetCurrentProcess@0
  • 0000347C — _memmove
  • 000034BF — _InitializeRegistry@0
  • 000034E1 — _ProbeForRead@12
  • 00003512 — _ProbeForWrite@12
  • 00003526 — _DeviceIoControl@12
  • 000035C8 — _IoUnregisterPlugPlayNotification@4
  • 000035F8 — _IoReportTargetDeviceChange@8
  • 00003600 — _IopInitializePlugPlayNotification@0
  • 00003662 — _IopReferenceNotify@4
  • 0000366D — _IopDereferenceNotify@4
  • 0000368F — _IopNotifyHwProfileChange@4
  • 0000370C — _IopNotifyDeviceClassChange@12
  • 000037D3 — _IoRegisterPlugPlayNotification@28
  • 00003996 — _NtGetDevnodeFromFileHandle@8
  • 00003A44 — _PopApplyAttributeState@8
  • 00003ACC — _IopCheckDeviceName@4
  • 00003ACC — _PopAttribNop@4
  • 00003ACC — _HalPutDmaAdapter@4
  • 00003ACF — _PopSystemRequiredSet@4
  • 00003AE2 — _PopUserPresentSet@4
  • 00003B14 — _ConvertToCMPowerState@12
  • 00003B5C — _PoQueryPowerSequence@0
  • 00003B60 — @_PopInternalError@4
  • 00003B72 — _PopSetCapability@4
  • 00003B94 — _PopOpenPowerKey@4
  • 00003C25 — _PopCloseSystemHandle@4
  • 00003C34 — _NtSetThreadExecutionState@8
  • 00003D20 — _NtRequestWakeupLatency@4
  • 00003D6F — _NtInitiatePowerAction@16
  • 00003D77 — _NtSetSystemPowerState@12
  • 00003D7F — _CancelWarningDialog
  • 00003DAC — _PopMessageBoxCompletion
  • 00003DC7 — _PopDisplayWarningDialog
  • 00003E7A — _PopSetPowerAction@16
  • 000040DD — _PopCompleteAction@8
  • 00004104 — _PopPromoteActionFlag@20
  • 00004145 — _PopPolicyWorkerAction@0
  • 000041F8 — _PopPolicyWorkerActionPromote@0
  • 0000426C — _PopShutdown
  • 0000429F — _PopIssueActionRequest@16
  • 00004378 — _PopRemoveUserEventsFromQueue@0
  • 00004391 — _PopSuspendTimeOut
  • 000043AC — _PopCompositeBatteryDeviceHandler@16
  • 00004848 — _PopComputeCBTime@0
  • 00004853 — _PopResetCBTriggers@4
  • 0000487D — _PopCurrentPowerState@4
  • 000049EA — _NtPowerInformation@20
  • 00004E16 — _PopApplyAdminPolicy@12
  • 00004EEA — _PopApplyPolicy@16
  • 0000505F — _PopVerifyPowerPolicy@12
  • 00005231 — _PopVerifyThrottle@8
  • 00005292 — _PopVerifyPowerActionPolicy@4
  • 00005356 — _PopVerifySystemPowerState@4
  • 00005405 — _PopResetCurrentPolicies@0
  • 00005561 — _PopNotifyPolicyDevice@8
  • 0000559B — _PopConnectToPolicyDevice@8
  • 000057D0 — _PoInitSystem@4
  • 00005BB0 — _PopDefaultPolicy@4
  • 00005C19 — _PoInitDriverServices@4
  • 00005CBE — _PopRegisterForDeviceNotification@8
  • 00005CE3 — _PoSetPowerState@12
  • 00005CEA — _PopAcquirePolicyLock@0
  • 00005D06 — _PopReleasePolicyLock@4
  • 00005D3A — _PopGetPolicyWorker@4
  • 00005D5E — _PopCompletePolicyIrp@12
  • 00005DC9 — _PopPolicyWorkerThread@4
  • 00005E6B — _PopPolicyWorkerMain@0
  • 00005EAC — _PopDoNotificationWork
  • 00005EF5 — _PopSetNotificationWork@4
  • 00005F15 — __isctype
  • 00005F15 — _PopPolicyWorkerNotify@0
  • 00005F18 — _PopInitSIdle@0
  • 00005FEC — _PopPolicySystemIdle@0
  • 0000604D — _PoSystemIdleWorker@4
  • 00006054 — _PopSystemButtonHandler@16
  • 00006141 — _PopTriggerSwitch@12
  • 00006195 — _PopResetSwitchTriggers@0
  • 000061AC — _PopThermalDeviceHandler@16
  • 000061AC — _PopThermalZoneDpc@16
  • 000061AF — _ExAllocatePoolWithTag@12
  • 000061E0 — _ExpAllocatePool@12
  • 00006217 — _ExpFreePool@4
  • 00006225 — _ExFreePool@4
  • 00006231 — _ExAllocatePool@8
  • 00006260 — _ExInitializeResourceLite@4
  • 00006292 — _ExReinitializeResourceLite@4
  • 0000630E — @ExpAcquireResourceExclusiveLite@8
  • 0000638A — _ExAcquireResourceExclusiveLite@8
  • 000063E3 — _ExTryToAcquireResourceExclusiveLite@4
  • 0000642B — _ExAcquireResourceSharedLite@8
  • 00006536 — @ExReleaseResourceLite@4
  • 00006620 — _ExDeleteResourceLite@4
  • 00006675 — _ExGetExclusiveWaiterCount@4
  • 00006680 — _ExGetSharedWaiterCount@4
  • 0000668B — _ExIsResourceAcquiredExclusiveLite@4
  • 000066B7 — _ExIsResourceAcquiredSharedLite@4
  • 0000670B — _ExpWaitForResource@8
  • 0000684F — _ExpFindCurrentThread@8
  • 00006939 — @ExAcquireFastMutexUnsafe@4
  • 0000695A — @ExReleaseFastMutexUnsafe@4
  • 00006975 — @ExAcquireFastMutex@4
  • 00006992 — @ExReleaseFastMutex@4
  • 000069A4 — _ExSystemExceptionFilter@0
  • 000069B0 — _ExGetPreviousMode@0
  • 000069B6 — _ExShutDown@0
  • 000069BB — _ExQueueWorkItem@8
  • 00006A3E — _Query_Thread_Priority@0
  • 00006A50 — _KefYield@0
  • 00006A6F — _ExRegisterCallback@12
  • 00006B04 — _ExUnregisterCallback@4
  • 00006B87 — _ExNotifyCallback@12
  • 00006C20 — _ExDeleteNPagedLookasideList@4
  • 00006C64 — _ExDeletePagedLookasideList@4
  • 00006CA8 — _ExAllocateFromPagedLookasideList@4
  • 00006D1E — _ExAllocateFromNPagedLookasideList@4
  • 00006D47 — _ExFreeToPagedLookasideList@8
  • 00006DB3 — _ExpDummyAllocate@12
  • 00006DB8 — _HalAllocateAdapterChannel@16
  • 00006EC7 — _IoMapTransfer@24
  • 00006F34 — _HalpMapTransferHelper@20
  • 00006F75 — _HalpMapTransfer@24
  • 000072B8 — _IoFlushAdapterBuffers@24
  • 000073EC — _HalReadDmaCounter@4
  • 000074D6 — _HalGetDmaAlignment@4
  • 000074DC — _HalpAllocPhysicalMemory@12
  • 0000752E — _HalpCopyBufferMap@20
  • 00007589 — _HalFlushCommonBuffer@20
  • 0000758E — _HalFreeCommonBuffer@24
  • 0000759A — _IoFreeAdapterChannel@4
  • 00007692 — _IoFreeMapRegisters@12
  • 000077C4 — _HalGetInterruptVector@24
  • 000077F0 — _HalTranslateBusAddress@24
  • 00007806 — _HalpGetCmosData@16
  • 00007883 — _HalGetBusData@20
  • 000078CF — _HalGetBusDataByOffset@24
  • 000078F7 — _RtlSingleByteSet
  • 000078FF — _RtlUpcaseUnicodeChar@4
  • 0000791D — _RtlpUpcaseUnicodeChar@4
  • 0000793B — _RtlAnsiCharToUnicodeChar@4
  • 00007983 — _RtlAllocateString@4
  • 00007996 — _RtlInitAnsiString@8
  • 000079C4 — _RtlInitUnicodeString@8
  • 000079F6 — _RtlAssert@16
  • 00007A44 — _RtlEqualUnicodeString@12
  • 00007ADD — _RtlCopyUnicodeString@8
  • 00007B2F — _RtlAppendUnicodeToString@8
  • 00007BA0 — _RtlAppendUnicodeStringToString@8
  • 00007C04 — _RtlxUnicodeStringToAnsiSize@4
  • 00007C22 — _RtlxAnsiStringToUnicodeSize@4
  • 00007C43 — _RtlFreeAnsiString@4
  • 00007C43 — _RtlFreeUnicodeString@4
  • 00007C58 — _RtlCompareUnicodeString@12
  • 00007D1F — _RtlUnicodeToMultiByteN@20
  • 00007D47 — _RtlMultiByteToUnicodeN@20
  • 00007D6C — _RtlUpcaseUnicodeToMultiByteN@20
  • 00007DBE — _RtlUnicodeToMultiByteSize@12
  • 00007DE6 — _RtlUnicodeStringToAnsiSize@4
  • 00007E08 — _RtlAllocateSprintf
  • 00007E21 — _RtlAllocateWsprintf
  • 00007E3A — _RtlpAllocateSprintf@20
  • 00007ECC — _RtlMapGenericMask@8
  • 00007F20 — _RtlSetAllBits@4
  • 00007F40 — _RtlSetBits@12
  • 00007FDA — _RtlFindClearBits@12
  • 0000822D — _RtlFindClearBitsAndSet@12
  • 00008259 — _RtlClearBits@12
  • 000082F4 — _RtlDeleteRegistryValue@12
  • 00008338 — _RtlIntegerToChar@16
  • 00008429 — _RtlUnicodeStringToInteger@12
  • 0000857D — _RtlIntegerToUnicodeString@12
  • 000085C4 — _RtlMoveMemory@12
  • 000085DB — _RtlCopyMemory@12
  • 000085F2 — _RtlZeroMemory@8
  • 00008608 — _ElapsedDaysToYears@4
  • 00008678 — _DaysAndFractionToTime@12
  • 000086B0 — _RtlTimeToTimeFields@8
  • 0000883E — _RtlTimeFieldsToTime@8
  • 000089D6 — _IopAssociationLookup@12
  • 00008A0B — _IopAssociationInsert@8
  • 00008A27 — _IoAssociationAllocate@16
  • 00008B0D — _IoAssociationFind@16
  • 00008BCF — _IoGetDriverObjectExtension@8
  • 00008BF2 — _NTKERNProcessISR
  • 00008C1A — _NtKernGetVPICDHandleFromInterruptObj
  • 00008C37 — _IopDecrementDeviceObjectRef@8
  • 00008C86 — _IopInsertRemoveDevice@12
  • 00008CD8 — _IopCompleteUnloadOrDelete@8
  • 00008E1F — _IopCompleteRequest@20
  • 0000909B — _IopDisassociateThreadIrp@0
  • 000090F9 — _IopFreeMdl@4
  • 00009117 — _IopDropIrp@8
  • 0000917A — _IopInvalidDeviceRequest@8
  • 00009194 — _IopExceptionFilter@8
  • 000091BC — _IopExceptionCleanup@16
  • 00009228 — _IopFreeIrpAndMdls@4
  • 0000924E — _IopTimerDispatch@16
  • 000092CB — @IofCompleteRequest@8
  • 0000952A — _IoAllocateErrorLogEntry@8
  • 0000963B — _IoWriteErrorLogEntry@4
  • 000096B2 — _IoCreateSymbolicLink@8
  • 0000970B — _IopRemoveTimerFromTimerList@4
  • 00009734 — _IoDeleteDevice@4
  • 000097A3 — _IoDetachDevice@4
  • 000097EF — _IoCompleteRequest@8
  • 000097FF — _IoInitializeIrp@12
  • 00009846 — _RtlFreeString@4
  • 00009846 — _MmFreeContiguousMemory@4
  • 00009846 — _IoFreeIrp@4
  • 00009852 — _IoAllocateIrp@8
  • 0000988B — _IoGetAttachedDevice@4
  • 0000989D — _IoGetAttachedDeviceReference@4
  • 000098C0 — _IoGetRelatedDeviceObject@4
  • 000098F4 — @IofCallDriver@8
  • 00009912 — _IoCancelIrp@4
  • 0000996E — _IoAllocateMdl@20
  • 00009A15 — _IoFreeMdl@4
  • 00009A33 — _IopSetAttachedDevicePointer@8
  • 00009A6E — _IoAttachDeviceToDeviceStack@8
  • 00009AB7 — _IoAttachDeviceByPointer@8
  • 00009B07 — _IoAcquireCancelSpinLock@4
  • 00009B1A — _IoReleaseCancelSpinLock@4
  • 00009B2B — _IoAllocateAdapterChannel@20
  • 00009B56 — _IoCallDriver@8
  • 00009B66 — _IoStartTimer@4
  • 00009B8F — _IoStopTimer@4
  • 00009BB7 — _IoBuildSynchronousFsdRequest@28
  • 00009C14 — _IoBuildAsynchronousFsdRequest@24
  • 00009CFB — _IoStartNextPacket@8
  • 00009D56 — _IoStartNextPacketByKey@12
  • 00009DB4 — _IoStartPacket@16
  • 00009E5A — _IopAppendWorkHandleList@12
  • 00009ECC — _IoBuildPartialMdl@16
  • 00009F9E — _IoGetCurrentIrpStackLocation@4
  • 00009FA8 — _NtLoadDriver@4
  • 00009FF6 — _IopReferenceAttachmentChain@4
  • 0000A00D — _IopDereferenceAttachmentChain@4
  • 0000A029 — _IopDeleteFile@4
  • 0000A1AF — _IopCheckDeviceAndDriver@16
  • 0000A206 — _IopDereferenceVpbAndFree@4
  • 0000A22E — _IoReportResourceUsage@36
  • 0000A23A — _LogPrint
  • 0000A267 — _IopErrorLogDpc@16
  • 0000A2A1 — _IopErrorLogGetEntry@0
  • 0000A2F2 — _ObpAllocateObjectCreateInfoBuffer@0
  • 0000A301 — _ObpAllocateObjectNameBuffer@8
  • 0000A32A — @ObpFreeObjectCreateInfoBuffer@4
  • 0000A331 — @ObpFreeObjectNameBuffer@4
  • 0000A33A — _CloseHandle@8
  • 0000A3B4 — _NtClose@4
  • 0000A3C2 — _ObpInsertDirectoryEntry@8
  • 0000A42F — _ObpDeleteDirectoryEntry@4
  • 0000A466 — _ObpIncrementHandleCount@24
  • 0000A4C0 — _ObpIncrementUnnamedHandleCount@16
  • 0000A530 — _ObpDecrementHandleCount@12
  • 0000A580 — @IsWin32Object@4
  • 0000A5D7 — _GetWin32ObjectType@4
  • 0000A603 — @ObfReferenceObject@4
  • 0000A628 — _ObpProcessRemoveObjectQueue@4
  • 0000A699 — @ObfDereferenceObject@4
  • 0000A74F — _ObReferenceObjectByHandle@24
  • 0000A814 — _ObReferenceObjectByPointer@16
  • 0000A822 — _ObDereferenceObject@4
  • 0000A82E — _ObGetObjectName@4
  • 0000A857 — _KeInitializeApc@32
  • 0000A8A9 — _KiProcessWin95APC@4
  • 0000A94B — _KeInsertQueueApc@16
  • 0000A9F5 — _KeRemoveQueueApc@4
  • 0000AA13 — _KeBugCheck@4
  • 0000AA5B — _KeBugCheckEx@20
  • 0000AAB5 — _KeInitializeSpinLock@4
  • 0000AABF — _KeInitializeDeviceQueue@4
  • 0000AADD — _KeInsertDeviceQueue@8
  • 0000AB1F — _KeRemoveDeviceQueue@4
  • 0000AB5F — _KeRemoveEntryDeviceQueue@8
  • 0000AB9B — _KeSynchronizeExecution@12
  • 0000ABC4 — _KeInsertByKeyDeviceQueue@12
  • 0000AC0D — _KeRemoveByKeyDeviceQueue@8
  • 0000AC69 — _KeInitializeEvent@12
  • 0000AC86 — _KeSetEvent@12
  • 0000ACA9 — _KeClearEvent@4
  • 0000ACB6 — _KeResetEvent@4
  • 0000ACC3 — _KePulseEvent@12
  • 0000ACFD — _KeReadStateEvent@4
  • 0000AD07 — @KepEnterNTKern@4
  • 0000AD19 — @KepLeaveNTKern@4
  • 0000AD24 — _KeEnterCriticalRegion@0
  • 0000AD47 — _KeLeaveCriticalRegion@0
  • 0000AD66 — _KeInitializeMutex@8
  • 0000AD73 — _KeReleaseMutex@8
  • 0000ADA1 — _KeInitializeSemaphore@12
  • 0000ADB8 — _KeReadStateSemaphore@4
  • 0000ADD6 — _KeReleaseSemaphore@16
  • 0000AE4C — @KfAcquireSpinLock@4
  • 0000AE53 — @KfReleaseSpinLock@8
  • 0000AE5A — __amsg_exit
  • 0000AE5A — @KefReleaseSpinLockFromDpcLevel@4
  • 0000AE5A — _NullPrint
  • 0000AE5A — _PopApplyThermalThrottle@0
  • 0000AE5A — @KefAcquireSpinLockAtDpcLevel@4
  • 0000AE5B — _KeWaitForSingleObject@20
  • 0000AE8E — _KeDelayExecutionThread@12
  • 0000AEF6 — _KeWaitForMultipleObjects@32
  • 0000AF44 — _KeSetPhysicalCacheTypeRange@16
  • 0000AF81 — _MiSectionDelete@4
  • 0000AFAD — _MmInitSystem@4
  • 0000AFC0 — _MmQuerySystemSize@0
  • 0000AFC4 — _MiProcessTerminated@4
  • 0000AFF3 — @PiWinCreateThreadWrapper@8
  • 0000B00D — _sprintf
  • 0000B066 — _vsprintf
  • 0000B0C0 — __global_unwind2
  • 0000B102 — __local_unwind2
  • 0000B15C — __abnormal_termination
  • 0000B188 — __except_handler2
  • 0000B240 — __except_handler3
  • 0000B2EE — __seh_longjmp_unwind@4
  • 0000B369 — __itoa
  • 0000B393 — __snprintf
  • 0000B3EB — __snwprintf
  • 0000B464 — __stricmp
  • 0000B464 — __strcmpi
  • 0000B4A8 — __strlwr
  • 0000B4CC — __strnicmp
  • 0000B524 — __strnset
  • 0000B550 — __strrev
  • 0000B580 — __strset
  • 0000B5A0 — __strupr
  • 0000B5C1 — __vsnprintf
  • 0000B618 — __wcsicmp
  • 0000B661 — __wcslwr
  • 0000B68D — __wcsnicmp
  • 0000B6FA — __wcsnset
  • 0000B728 — __wcsrev
  • 0000B75D — __wcsupr
  • 0000B789 — _atol
  • 0000B820 — _atoi
  • 0000B82D — _isupper
  • 0000B859 — _islower
  • 0000B885 — _isdigit
  • 0000B8B1 — _isxdigit
  • 0000B8E2 — _isspace
  • 0000B90E — _isprint
  • 0000B93F — _mbstowcs
  • 0000B9C3 — _mbtowc
  • 0000BA3C — _memchr
  • 0000BA5C — _qsort
  • 0000BC2C — _srand
  • 0000BC36 — _rand
  • 0000BC54 — _strcat
  • 0000BC58 — _strcpy
  • 0000BC94 — _strchr
  • 0000BCBC — _strcmp
  • 0000BCE0 — _strlen
  • 0000BCF8 — _strncat
  • 0000BD2C — _strncmp
  • 0000BD64 — _strncpy
  • 0000BD88 — _strrchr
  • 0000BDB0 — _strspn
  • 0000BDEC — _strstr
  • 0000BE4A — _swprintf
  • 0000BEC1 — _tolower
  • 0000BEF8 — _toupper
  • 0000BF4D — _towlower
  • 0000BF6A — _towupper
  • 0000BF74 — _wcscat
  • 0000BFA5 — _wcscpy
  • 0000BFC7 — _wcschr
  • 0000BFF3 — _wcscmp
  • 0000C030 — _wcscspn
  • 0000C06F — _wcslen
  • 0000C086 — _wcsncat
  • 0000C0CA — _wcsncmp
  • 0000C102 — _wcsncpy
  • 0000C145 — _wcsrchr
  • 0000C176 — _wcsspn
  • 0000C1B5 — _wcsstr
  • 0000C1FC — _wcstombs
  • 0000C292 — _wctomb
  • 0000C2D8 — _memcmp
  • 0000C2F7 — __vsnwprintf
  • 0000C36E — __flsbuf
  • 0000C37C — __output
  • 0000CC0B — __woutput
  • 0000D44E — _iswctype
  • 0000D479 — __mbstrlen
  • 0000D4C9 — _mblen
  • 0000D4FE — _fputwc
  • 0000D52E — __fptrap
  • 0000D539 — __flswbuf
  • 0000D548 — __alldiv
  • 0000D5E4 — __allmul
  • 0000D618 — __allrem
  • 0000D6B8 — __allshl
  • 0000D6C8 — __allshr
  • 0000D6D8 — __aulldiv
  • 0000D738 — __aullrem
  • 0000D7A4 — __aullshr
  • 0000D7B4 — __NTKERN_Get_Version
  • 0000D7B8 — __NtKernCreateFile
  • 0000D7BC — __NtKernClose
  • 0000D7C0 — __NtKernReadFile
  • 0000D7C4 — __NtKernWriteFile
  • 0000D7C8 — __NtKernDeviceIoControl
  • 0000D7CC — __NtKernGetWorkerThread
  • 0000D7D0 — __NtKernLoadDriver
  • 0000D7D4 — __NtKernQueueWorkItem
  • 0000D7D8 — __NtKernPhysicalDeviceObjectToDevNode
  • 0000D7DC — __NtKernSetPhysicalCacheTypeRange
  • 0000D7E0 — __NtKernWin9XLoadDriver
  • 0000D7E4 — __NtKernCancelIoFile
  • 0000D7E8 — __NtKernGetVPICDHandleFromInterruptObj
  • 0000D7EC — __NtKernInternalDeviceIoControl
  • 0000D7F0 — NTKERN_DDB
  • 0000D840 — KdComPortInUse
  • 0000D844 — KdDebuggerNotPresent
  • 0000D848 — _MachineInfo
  • 0000D84C — TimerLoopsPer65536uSec
  • 0000D8A8 — _SysVMStack
  • 0000D8A8 — _SysVMStackLimit
  • 0000D8B0 — _DebugInit@4
  • 0000D8C9 — _DebugPrint@8
  • 0000D908 — _DbgPrint
  • 0000D91B — _DbgBreakPoint@0
  • 0000D91D — _DbgOutDebugString@4
  • 0000D92F — _DbgInDebugChar@0
  • 0000D938 — _READ_PORT_UCHAR@4
  • 0000D956 — _READ_PORT_USHORT@4
  • 0000D975 — _READ_PORT_ULONG@4
  • 0000D993 — _WRITE_PORT_UCHAR@8
  • 0000D9B5 — _WRITE_PORT_USHORT@8
  • 0000D9D8 — _WRITE_PORT_ULONG@8
  • 0000D9FA — _READ_REGISTER_UCHAR@4
  • 0000DA19 — _READ_REGISTER_USHORT@4
  • 0000DA39 — _READ_REGISTER_ULONG@4
  • 0000DA58 — _WRITE_REGISTER_UCHAR@8
  • 0000DA7B — _WRITE_REGISTER_USHORT@8
  • 0000DA9F — _WRITE_REGISTER_ULONG@8
  • 0000DAC2 — _READ_REGISTER_BUFFER_UCHAR@12
  • 0000DAD7 — _READ_REGISTER_BUFFER_ULONG@12
  • 0000DAEC — _READ_REGISTER_BUFFER_USHORT@12
  • 0000DB02 — _WRITE_REGISTER_BUFFER_UCHAR@12
  • 0000DB17 — _WRITE_REGISTER_BUFFER_ULONG@12
  • 0000DB2C — _WRITE_REGISTER_BUFFER_USHORT@12
  • 0000DB42 — _READ_PORT_BUFFER_UCHAR@12
  • 0000DB55 — _READ_PORT_BUFFER_ULONG@12
  • 0000DB68 — _READ_PORT_BUFFER_USHORT@12
  • 0000DB7C — _WRITE_PORT_BUFFER_UCHAR@12
  • 0000DB8F — _WRITE_PORT_BUFFER_ULONG@12
  • 0000DBA2 — _WRITE_PORT_BUFFER_USHORT@12
  • 0000DBB6 — _KeStallExecutionProcessor@4
  • 0000DBC8 — _IoCheckShareAccess@20
  • 0000DBD1 — @KeFlushWriteBuffer@0
  • 0000DBD8 — _KeSetImportanceDpc@8
  • 0000DBE1 — _SeAssignSecurity@28
  • 0000DBEA — _SeDeassignSecurity@4
  • 0000DBF3 — _HalAssignSlotResources@32
  • 0000DBFC — _HalSetBusDataByOffset@24
  • 0000DC05 — NTKERN_Control
  • 0000DCEC — _NTKERN_Get_Version
  • 0000DCF3 — _KeGetCurrentIrql@0
  • 0000DCFD — _KeQuerySystemTime@4
  • 0000DD07 — @KfRaiseIrql@4
  • 0000DD11 — @KfLowerIrql@4
  • 0000DD1B — _RtlUnwind@16
  • 0000DD25 — _RtlRaiseStatus@4
  • 0000DD2F — _RtlRaiseException@4
  • 0000DD39 — _KeInitializeDpc@12
  • 0000DD43 — _ZwOpenSection@12
  • 0000DD48 — _ZwMapViewOfSection@40
  • 0000DD4D — _EnQueue@8
  • 0000DD61 — _DeQueue@4
  • 0000DD75 — _InQueue@8
  • 0000DD93 — _RemQueue@8
  • 0000DDB5 — _SetInterrupts@4
  • 0000DDCB — _ExchangeUlong@8
  • 0000DDD8 — _QueueUserApc
  • 0000DDDE — _QueueKernelApc
  • 0000DDE4 — _LinPageUnlock
  • 0000DDEA — _KeInitializeTimer@4
  • 0000DDF0 — _KeQueryPerformanceCounter@4
  • 0000DDFA — _KeSetTimer@16
  • 0000DE00 — _RunScheduledEvents@0
  • 0000DE06 — _GetCurrentThread@0
  • 0000DE11 — _Debug_Printf_Service
  • 0000DE17 — _Win95PageReserve
  • 0000DE1D — _Win95PageCommitPhys
  • 0000DE23 — _Win95PageDecommit
  • 0000DE29 — _Win95PageFree
  • 0000DE2F — _Win95GetNulPageHandle
  • 0000DE35 — _MmGetPhysicalAddress@4
  • 0000DE6D — __LinPageLock
  • 0000DE73 — _MiFillMdlPages@12
  • 0000DEA8 — _CountBits@8
  • 0000DEDF — _CodeLoaded@0
  • 0000DEFA — NTKERN_Debug_Query
  • 0000DF0B — _ExRaiseStatus@4
  • 0000DF18 — @Exfi386InterlockedExchangeUlong@8
  • 0000DF20 — @InterlockedDecrement@4
  • 0000DF2B — @InterlockedIncrement@4
  • 0000DF38 — @InterlockedExchange@8
  • 0000DF3D — @InterlockedCompareExchange@12
  • 0000DF47 — @ExfInterlockedAddUlong@12
  • 0000DF51 — @ExqInterlockedAddUlong@8
  • 0000DF51 — _ExqInterlockedAddUlong@0
  • 0000DF76 — _ExqInterlockedAddUlong386@0
  • 0000DF7E — _ExqInterlockedAddUlong486@0
  • 0000DF85 — @ExInterlockedAddLargeStatistic@8
  • 0000DF85 — _ExInterlockedAddLargeStatistic@0
  • 0000DF8C — _ExfInterlockedInsertHeadList@0
  • 0000DF8C — @ExfInterlockedInsertHeadList@12
  • 0000DFA4 — @ExfInterlockedInsertTailList@12
  • 0000DFA4 — _ExfInterlockedInsertTailList@0
  • 0000DFBD — _ExfInterlockedRemoveHeadList@0
  • 0000DFBD — @ExfInterlockedRemoveHeadList@8
  • 0000DFD0 — @ExfInterlockedPushEntryList@12
  • 0000DFDC — @ExfInterlockedPopEntryList@8
  • 0000DFEA — @ExInterlockedPushEntrySList@12
  • 0000E00B — @ExInterlockedPopEntrySList@8
  • 0000E02C — @ExfInterlockedPopEntrySList@8
  • 0000E03D — @ExfInterlockedPushEntrySList@12
  • 0000E04C — @ExInterlockedCompareExchange64@16
  • 0000E067 — @ExpInterlockedCompareExchange64@16
  • 0000E09C — ThreadSwitchNotification_stub
  • 0000E0A4 — _memcpy
  • 0000E0C3 — _memset
  • 0000E0EB — __disable
  • 0000E0ED — __enable
  • 0000E0EF — _KeQueryTimeIncrement@0
  • 0000E0F8 — _InitializeWin32Mutex
  • 0000E106 — _ReleaseWin32Mutex
  • 0000E115 — _InitializeWin32Event
  • 0000E138 — _SetWin32Event
  • 0000E143 — _ClearWin32Event
  • 0000E14E — _ResetWin32Event
  • 0000E15D — _PulseWin32Event
  • 0000E16C — _InitializeWin32Semaphore
  • 0000E172 — _ReadWin32Semaphore
  • 0000E189 — _SignalWin32Semaphore
  • 0000E198 — _WaitForSingleObject
  • 0000E1B2 — _BlockThreadEx
  • 0000E1CA — _ScheduleRestrictedEvent@20
  • 0000E20A — _BoostWithDecay@8
  • 0000E21F — _ScheduleGlobalEvent@8
  • 0000E23D — _KiProcessWin95APC_stub@0
  • 0000E24A — _IoInvalidateDeviceRelations@8
  • 0000E26B — _IoInvalidateDeviceState@4
  • 0000E2A1 — _NTKERNToWin95IrpHandler@8
  • 0000E358 — _RtlConvertLongToLargeInteger@4
  • 0000E360 — _RtlConvertUlongToLargeInteger@4
  • 0000E36C — _RtlCompareMemory@12
  • 0000E3B0 — _IoUnregisterShutdownNotification@4
  • 0000E406 — _MiMapViewOfPhysicalSection@36
  • 0000E578 — _HeapAllocateEx@16
  • 0000E57E — _HeapFreeEx@8
  • 0000E584 — _LCODE__CONFIGMG_Reenumerate_DevNode
  • 0000E58C — _LCODE__CONFIGMG_Call_At_Appy_Time
  • 0000E594 — _LCODE__SHELL_QueryAppyTimeAvailable
  • 0000E59C — _LCODE__SHELL_CallAtAppyTime
  • 0000E5A4 — _LCODE_Call_Restricted_Event@24
  • 0000E5D0 — _LCODE_VWIN32_SetWin32EventBoostPriority
  • 0000E5D8 — _LCODE__AtEventTime
  • 0000E5E0 — _LCODE_VPICD_Phys_EOI@4
  • 0000E5F0 — _LCODE_VPICD_Physically_Unmask@4
  • 0000E600 — _LCODE__VPICD_Set_Channel_Irql
  • 0000E608 — _LCODE_VPICD_Virtualize_IRQ@4
  • 0000E61C — _LCODE_VPICD_Force_Default_Behavior@4
  • 0000E62C — _LCODE_SHELL_SYSMODAL_Message@16
  • 0000E650 — _LCODE__Sprintf
  • 0000E658 — _LCODE_VWIN32_ConvertNtTimeout@4
  • 0000E660 — _LCODE_MTRRSetPhysicalCacheTypeRange@12
  • 0000E678 — _LCODE__PageReserve
  • 0000E680 — _LCODE__PageFree
Segment 2: _LMSG$1 @ 00006CE0
  • 00000000 — @MSG_LAB
  • 00000014 — @MSG_LDATA
Segment 3: _DB1CODE @ 00007B00
  • 00000000 — _DbgPutLogStr@4
  • 00000039 — _DbgGetString@8
  • 000000BB — _DbgAddLogStr@4
  • 00000149 — _DbgDumpTraceLog@0
  • 0000019F — _DebugPrintP@8
  • 00000213 — _DebugQuery@0
  • 00000309 — _DebugInitP@4
  • 00000360 — _DbgDumpThread@4
  • 0000037F — _DbgDumpProcess@4
  • 000003B0 — _DbgDumpThreadInfo@0
  • 000003D4 — _DbgDumpSystemState@4
  • 00000439 — _DbgDumpAction@4
  • 000004AE — _DbgDumpPowerLevel@4
  • 00000502 — _DbgDumpPolicy@4
  • 000006F3 — _DbgDumpCapabilities@4
  • 0000091A — _DbgDumpPowerInformation@0
  • 00000988 — _IoDumpCheck@12
  • 000009D0 — _DumpLevel@8
  • 00000ABD — _OBDebugDump@0
  • 00000AF0 — _NTKERNTraceLevel
  • 00000AF4 — _ulInDebug
  • 00000AF8 — ??_C@_0BA@JFJO@?$CF08x?5?$CF02d?5?$CF08x?5?$AA@ ("%08x %02d %08x ")
  • 00000B08 — ??_C@_0BD@FFDI@?6Enter?5selection?3?5?$AA@ ("\nEnter selection: ")
  • 00000B1C — ??_C@_09EMNI@?$CIX?$CJ?5Exit?6?$AA@ ("(X) Exit\n")
  • 00000B28 — ??_C@_0CC@BABL@?$CII?$CJ?5Dump?5pending?5Irp?5information@ ("(I) Dump pending Irp information"...)
  • 00000B4C — ??_C@_0CJ@IEIH@?$CIT?$CJ?5Dump?5thread?5and?5process?5info@ ("(T) Dump thread and process info"...)
  • 00000B78 — ??_C@_0BM@JBCN@?$CIP?$CJ?5Dump?5power?5information?6?$AA@ ("(P) Dump power information\n")
  • 00000B94 — ??_C@_0BN@LOAC@?$CIO?$CJ?5Dump?5object?5information?6?$AA@ ("(O) Dump object information\n")
  • 00000BB4 — ??_C@_0BE@JGGN@?$CID?$CJ?5Dump?5trace?5log?6?$AA@ ("(D) Dump trace log\n")
  • 00000BC8 — ??_C@_0BF@ILII@?6NTKERN?5Debug?5menu?6?6?$AA@ ("\nNTKERN Debug menu\n\n")
  • 00000BE0 — ??_C@_01BJG@?6?$AA@ ("\n")
  • 00000BE4 — ??_C@_08HGNB@INVALID?$CB?$AA@ ("INVALID!")
  • 00000BF0 — ??_C@_01FCOA@?5?$AA@ (" ")
  • 00000BF4 — ??_C@_0BM@ELLE@?0?5Flags?3?5?$CFd?0?5EventCode?3?5?$CFd?6?$AA@ (", Flags: %d, EventCode: %d\n")
  • 00000C10 — ??_C@_04COF@None?$AA@ ("None")
  • 00000C18 — ??_C@_08GKAE@Reserved?$AA@ ("Reserved")
  • 00000C24 — ??_C@_05BKOF@Sleep?$AA@ ("Sleep")
  • 00000C2C — ??_C@_0O@CLAD@ShutdownReset?$AA@ ("ShutdownReset")
  • 00000C3C — ??_C@_0M@EBLN@ShutdownOff?$AA@ ("ShutdownOff")
  • 00000C48 — ??_C@_09GOGM@?0?5Action?3?$AA@ (", Action:")
  • 00000C54 — ??_C@_0DC@LGLE@?$CFs?0?5Spare?5?$CFd?5?$CFd?5?$CFd?0?5Battery?5leve@ ("%s, Spare %d %d %d, Battery leve"...)
  • 00000C88 — ??_C@_08FGLH@Disabled?$AA@ ("Disabled")
  • 00000C94 — ??_C@_07FFME@Enabled?$AA@ ("Enabled")
  • 00000C9C — ??_C@_0P@FCCG@OverThrottled?3?$AA@ ("OverThrottled:")
  • 00000CAC — ??_C@_0FA@PKOM@Optimize?3?5?$CFs?0?5Fan?5throttle?5toler@ ("Optimize: %s, Fan throttle toler"...)
  • 00000CFC — ??_C@_04BBGC@Life?$AA@ ("Life")
  • 00000D04 — ??_C@_05EFBF@Power?$AA@ ("Power")
  • 00000D0C — ??_C@_03KLCE@Off?$AA@ ("Off")
  • 00000D10 — ??_C@_02CCEO@On?$AA@ ("On")
  • 00000D14 — ??_C@_0BE@HGHB@Disk?5spin?5down?3?5?$CFd?6?$AA@ ("Disk spin down: %d\n")
  • 00000D28 — ??_C@_0CP@BILG@Video?5timeout?3?5?$CFd?0?5Video?5reserve@ ("Video timeout: %d, Video reserve"...)
  • 00000D58 — ??_C@_0BF@PFDJ@Discharge?5policy?5?$CFd?3?$AA@ ("Discharge policy %d:")
  • 00000D70 — ??_C@_0CD@JFOK@Broadcast?5capacity?5resolution?3?5?$CF@ ("Broadcast capacity resolution: %"...)
  • 00000D94 — ??_C@_0CA@KIK@Doze?5spare?3?5?$CFd?0?5S4?5timeout?3?5?$CFd?6?$AA@ ("Doze spare: %d, S4 timeout: %d\n")
  • 00000DB4 — ??_C@_0BD@CLIF@WinLogonFlags?3?5?$CFd?6?$AA@ ("WinLogonFlags: %d\n")
  • 00000DC8 — ??_C@_0BH@KNON@?5Reduce?5Latency?5Sleep?3?$AA@ (" Reduce Latency Sleep:")
  • 00000DE0 — ??_C@_0M@BFLH@?5Max?5Sleep?3?$AA@ (" Max Sleep:")
  • 00000DEC — ??_C@_0L@GEAA@Min?5Sleep?3?$AA@ ("Min Sleep:")
  • 00000DF8 — ??_C@_0DH@MDM@Idle?5timeout?3?5?$CFd?0?5sensitivity?5?$CFd@ ("Idle timeout: %d, sensitivity %d"...)
  • 00000E30 — ??_C@_05BFLF@Idle?3?$AA@ ("Idle:")
  • 00000E38 — ??_C@_0O@JAMB@Reserved?3?5?$CFd?6?$AA@ ("Reserved: %d\n")
  • 00000E48 — ??_C@_0P@NGNF@Lid?5open?5wake?3?$AA@ ("Lid open wake:")
  • 00000E58 — ??_C@_0L@FPGN@Lid?5close?3?$AA@ ("Lid close:")
  • 00000E64 — ??_C@_0O@CBFB@Sleep?5button?3?$AA@ ("Sleep button:")
  • 00000E74 — ??_C@_0O@JNKL@Power?5button?3?$AA@ ("Power button:")
  • 00000E84 — ??_C@_0O@MHLB@Revision?3?5?$CFd?6?$AA@ ("Revision: %d\n")
  • 00000E94 — ??_C@_0BK@BMCL@Default?5low?5latency?5wake?3?$AA@ ("Default low latency wake:")
  • 00000EB0 — ??_C@_0BL@NEOH@Minimum?5device?5wake?5state?3?$AA@ ("Minimum device wake state:")
  • 00000ECC — ??_C@_0BG@KNJM@Real?9time?5clock?5wake?3?$AA@ ("Real-time clock wake:")
  • 00000EE4 — ??_C@_0P@HLBA@Soft?5lid?5wake?3?$AA@ ("Soft lid wake:")
  • 00000EF4 — ??_C@_0BB@EIAJ@AC?5on?9line?5wake?3?$AA@ ("AC on-line wake:")
  • 00000F08 — ??_C@_0CL@MPFN@Battery?5?$CFd?3?5Granularity?3?5?$CFd?0?5Cap@ ("Battery %d: Granularity: %d, Cap"...)
  • 00000F34 — ??_C@_0BJ@FEIK@Batteries?3?5?$CFs?0?5Life?3?5?$CFs?6?$AA@ ("Batteries: %s, Life: %s\n")
  • 00000F50 — ??_C@_09JCKO@Long?5term?$AA@ ("Long term")
  • 00000F5C — ??_C@_0L@INDI@Short?5term?$AA@ ("Short term")
  • 00000F68 — ??_C@_0CE@MDDJ@Disk?5spin?5down?3?5?$CFs?0?5Spare?5?$CFd?5?$CFd?5@ ("Disk spin down: %s, Spare %d %d "...)
  • 00000F8C — ??_C@_0EK@EBOA@Thermal?5control?3?5?$CFs?0?5Throttle?3?5?$CF@ ("Thermal control: %s, Throttle: %"...)
  • 00000FD8 — ??_C@_05MJBI@Can?8t?$AA@ ("Can\'t")
  • 00000FE0 — ??_C@_03EGCG@Can?$AA@ ("Can")
  • 00000FE4 — ??_C@_0CK@FBCG@?6Hiberfile?3?5?$CFs?0?5Wake?3?5?$CFs?0?5Spare?5@ ("\nHiberfile: %s, Wake: %s, Spare "...)
  • 00001010 — ??_C@_08PHKO@Non?9Full?$AA@ ("Non-Full")
  • 0000101C — ??_C@_04OOPN@Full?$AA@ ("Full")
  • 00001024 — ??_C@_04DMJH@?5S?$CFd?$AA@ (" S%d")
  • 0000102C — ??_C@_0O@OFNL@System?5state?3?$AA@ ("System state:")
  • 0000103C — ??_C@_08FHHB@Lid?3?5?$CFs?6?$AA@ ("Lid: %s\n")
  • 00001048 — ??_C@_0BC@CEHF@Sleep?5button?3?5?$CFs?6?$AA@ ("Sleep button: %s\n")
  • 0000105C — ??_C@_0BC@FHMO@Power?5button?3?5?$CFs?6?$AA@ ("Power button: %s\n")
  • 00001070 — ??_C@_06OAGO@Absent?$AA@ ("Absent")
  • 00001078 — ??_C@_07JMEA@Present?$AA@ ("Present")
  • 00001080 — ??_C@_0BG@LGMD@System?5capabilities?3?6?$AA@ ("System capabilities:\n")
  • 00001098 — ??_C@_06GAPH@DC?5?$CFc?6?$AA@ ("DC %c\n")
  • 000010A0 — ??_C@_06KDNH@AC?5?$CFc?6?$AA@ ("AC %c\n")
Segment 4: RARE @ 00007B80
  • 00000000 — UnExportNTFunctions
  • 0000006C — _HalInitSystem@8
  • 000000A0 — _ObInitSystem@4
  • 00000277 — _MiSectionInitialization@0
Segment 5: W32 @ 00007CB0
  • 00000000 — _W32_IOManGetVersion
  • 00000006 — _W32_IOManRequestWakeupLatency
  • 0000000B — _W32_IOManGetDevnodeFromFileHandle
  • 00000010 — _W32_IOManCreateFile
  • 00000015 — _W32_IOManClose
  • 0000001A — _W32_IOManWriteFile
  • 0000001F — _W32_IOManReadFile
  • 00000024 — _W32_IOManDeviceIoControl
  • 00000029 — _W32_IOManCancelIoFile
  • 0000002E — _W32_IOManFlushFileBuffers
Segment 6: PNP @ 00008FB0
  • 00000000 — _IoGetDeviceProperty@20
  • 000002E0 — _IoSetDeviceProperty@16
  • 000002E8 — _IoReportDeviceStatus@8
  • 000002F0 — _IoOpenDeviceRegistryKey@16
  • 0000034A — _NtKernPhysicalDeviceObjectToDevNode
  • 00000358 — _NtKernWin9XLoadDriver
  • 00000368 — @IsVXDName@4
  • 00000390 — @LoadMultipleDrivers@28
  • 0000050C — _NTKERNPnPNewDevNode@8
  • 00000774 — @Barf@16
  • 00000821 — @GetBusInfo@12
  • 00000941 — @KillChild@8
  • 000009A2 — @ProcessNewDevNode@8
  • 00000AA8 — @NTKERNEnumerate@8
  • 00000D23 — @RemoveWalkTheDOs@4
  • 00000D55 — @RemovePDO@12
  • 00000DB8 — @QuickPnPIrp@8
  • 00000DE0 — @StartIrp@8
  • 00000F73 — @PowerIrp@20
  • 00000FBC — @NTKERNFilterDevNode@8
  • 0000113E — _NTKERNConfigHandler
  • 0000132C — _NTKERNEnumHandler
  • 000013AE — _ReadWriteConfig@24
  • 000013FE — @SendIRPToVxD@8
  • 00001462 — @ProcessPnPIRP@16
  • 0000162D — _PnPInit
  • 0000171C — @InitializePnPStackLocation@12
  • 0000173D — @GetCapabilities@8
  • 000017FE — _PnPCompletionRoutine@12
  • 00001813 — @SynchronousCallDriver@12
  • 00001887 — @SendPnPIrp@12
  • 00001909 — _NTKERNReceiveMessage
  • 00001948 — @DoThisString@16
  • 000019A2 — @DoTheseIDs@16
  • 00001A25 — @NTKERNSetupDevNode@8
  • 00001A70 — _CheckDeviceState
  • 00001B36 — @ConvertWToA@12
  • 00001B8F — @ConvertWToHeapAllocatedA@8
  • 00001C07 — @ConvertRegistryToW@32
  • 00001D0D — _PnPGetRegistryPathFromDevnode@12
  • 00001DC1 — _PnPGetRegistryPath@12
  • 00001DDF — _PnPGetPhysicalDeviceObject@4
  • 00001E32 — @DoMemory@8
  • 00001E5A — @DoIO@8
  • 00001E81 — @DoDMA@8
  • 00001EA0 — @DoIRQ@8
  • 00001EF7 — @DoPartialResource@12
  • 00001F2F — @GetConfiguration@20
  • 00002090 — @GetGroupCount@4
  • 000020BE — @GetGroupBeginEnd@16
  • 00002123 — @ExtraDataSize@8
  • 00002156 — @AddExtraData@12
  • 000021C8 — @AddConvertedBack@12
  • 000021FE — @AllocateBack@20
  • 0000227A — _GetMemorySize
  • 0000229A — _ConvertMemory
  • 00002348 — _ConvertBackMemory
  • 000023EC — _GetIOSize
  • 00002409 — _ConvertIO
  • 000024BF — _ConvertBackIO
  • 00002580 — _GetDMASize
  • 000025A0 — _ConvertDMA
  • 00002617 — _ConvertBackDMA
  • 00002684 — _GetIRQSize
  • 000026A4 — _ConvertIRQ
  • 0000272F — _ConvertBackIRQ
  • 000027E5 — _GetAnythingSize
  • 00002809 — _ConvertAnything
  • 000028B3 — _GetNTSize
  • 000028D3 — _ConvertNT
  • 00002903 — _ConvertBackGeneric
  • 0000292C — _ConvertBackConfigData
  • 00002958 — _ConvertBackOSSpecific
  • 000029E2 — @GetConvertHandler@4
  • 000029FE — @GetConvertBackHandler@4
  • 00002A1A — @GetFilteredConfiguration@16
  • 00002C29 — @SetBasicFilteredConfiguration@12
  • 00002D1A — @AddResourceRequirements@8
  • 00002D70 — _PoRegisterDeviceForIdleDetection@16
  • 00002DC8 — _PopCompleteRequestIrp@12
  • 00002E29 — _PoRequestPowerIrpWorker
  • 00002F54 — _PoRequestPowerCancelRoutine@8
  • 00002F7A — _PoRequestPowerIrp@24
  • 00003073 — _PoCallDriver@8
  • 00003083 — _PoStartNextPowerIrp@4
  • 00003086 — @PopCheckBatteryStatus@0
  • 000030B0 — _PageablePowerHandler
  • 00003130 — _PowerHandler
  • 00003154 — _CCODE__CONFIGMG_Get_Sibling
  • 0000315C — _CCODE__CONFIGMG_Get_Child
  • 00003164 — _CCODE__CONFIGMG_Locate_DevNode
  • 0000316C — _CCODE__CONFIGMG_Get_Bus_Info
  • 00003174 — _CCODE__CONFIGMG_Call_Enumerator_Function
  • 0000317C — _CCODE__RegDeleteKey
  • 00003184 — _CCODE__Assert_Range
  • 0000318C — _CCODE__CONFIGMG_Get_Device_ID
  • 00003194 — _CCODE__CONFIGMG_Load_DLVxDs
  • 0000319C — _CCODE__RegCloseKey
  • 000031A4 — _CCODE__RegQueryValueEx
  • 000031AC — _CCODE__RegOpenKey
  • 000031B4 — _CCODE__CONFIGMG_Get_DevNode_Key
  • 000031BC — _CCODE__CONFIGMG_Register_Device_Driver
  • 000031C4 — _CCODE__CONFIGMG_Register_Enumerator
  • 000031CC — _CCODE__CONFIGMG_Change_DevNode_Status
  • 000031D4 — _CCODE__CONFIGMG_Set_Private_DWord
  • 000031DC — _CCODE__CONFIGMG_Discard_Boot_Log_Conf
  • 000031E4 — _CCODE__CONFIGMG_Read_Registry_Value
  • 000031EC — _CCODE__CONFIGMG_Set_Device_Driver_Private_DWord
  • 000031F4 — _CCODE__CONFIGMG_Get_Private_DWord
  • 000031FC — _CCODE__CONFIGMG_Get_DevNode_Status
  • 00003204 — _CCODE__CONFIGMG_Get_Parent
  • 0000320C — _CCODE_SHELL_SYSMODAL_Message@16
  • 00003230 — _CCODE_Get_Sys_VM_Handle
  • 0000323C — _CCODE__Sprintf
  • 00003244 — _CCODE__CONFIGMG_Remove_SubTree
  • 0000324C — _CCODE__CONFIGMG_Set_Bus_Info
  • 00003254 — _CCODE__CONFIGMG_Set_DevNode_PowerCapabilities
  • 0000325C — _CCODE__CONFIGMG_Remove_Unmarked_Children
  • 00003264 — _CCODE__CONFIGMG_Create_DevNode
  • 0000326C — _CCODE__CONFIGMG_Reset_Children_Marks
  • 00003274 — _CCODE__CONFIGMG_System_Device_Power_State_Mapping
  • 0000327C — _CCODE__CONFIGMG_Reprocess_DevNode
  • 00003284 — _CCODE__CONFIGMG_Free_Log_Conf
  • 0000328C — _CCODE__CONFIGMG_Get_First_Log_Conf
  • 00003294 — _CCODE__CONFIGMG_Set_DevNode_Problem
  • 0000329C — _CCODE__CONFIGMG_Get_DevNode_Handler
  • 000032A4 — _CCODE__CONFIGMG_Get_DevNode_PowerCapabilities
  • 000032AC — _CCODE__CONFIGMG_Register_DevLoader
  • 000032B4 — _CCODE__CONFIGMG_Write_Registry_Value
  • 000032BC — _CCODE__CONFIGMG_Add_ID
  • 000032C4 — _CCODE__CONFIGMG_Reenumerate_DevNode
  • 000032CC — _CCODE__CONFIGMG_Setup_DevNode
  • 000032D4 — _CCODE__CONFIGMG_Enable_DevNode
  • 000032DC — _CCODE__CONFIGMG_Disable_DevNode
  • 000032E4 — _CCODE__CONFIGMG_Get_Device_ID_Size
  • 000032EC — _CCODE__CONFIGMG_Get_DevNode_Key_Size
  • 000032F4 — _CCODE__CONFIGMG_Get_Device_Driver_Private_DWord
  • 000032FC — _CCODE__CONFIGMG_Get_Next_Res_Des
  • 00003304 — _CCODE__CONFIGMG_Get_Res_Des_Data_Size
  • 0000330C — _CCODE__HeapFree
  • 00003314 — _CCODE__CONFIGMG_Add_Res_Des
  • 0000331C — _CCODE__HeapAllocate
  • 00003324 — _CCODE__CONFIGMG_Get_Parent_Structure
  • 0000332C — _CCODE__CONFIGMG_Get_Res_Des_Data
  • 00003334 — _CCODE__CONFIGMG_Get_Set_Log_Conf_Priority
  • 0000333C — _CCODE__CONFIGMG_Get_Next_Log_Conf
  • 00003344 — _CCODE__CONFIGMG_Add_Empty_Log_Conf
  • 0000334C — _CCODE__SHELL_Update_User_Activity_Ex
  • 00003354 — _CCODE__CONFIGMG_Register_DevNode_For_Idle_Detection
  • 0000335C — _CCODE_Cancel_Time_Out@4
  • 0000336C — _CCODE__SHELL_CallDll
  • 00003374 — _CCODE_Set_Global_Time_Out@12
  • 00003390 — _CCODE__Set_Global_Time_Out_Ex
  • 00003398 — _CCODE__SHELL_CancelAppyTimeEvent
  • 000033A0 — _CCODE_VMM_GetSystemInitState
  • 000033A8 — _CCODE__CONFIGMG_Add_Remove_DevNode_Property
  • 000033B0 — _CCODE__CONFIGMG_Set_DevNode_PowerState
  • 000033B8 — _CCODE__Debug_Printf_Service
  • 000033CC — _CCODE__VPOWERD_Get_Power_Status
  • 000033D4 — _CCODE__SHELL_BroadcastSystemMessage
  • 000033DC — _CCODE__CONFIGMG_Call_At_Appy_Time
Segment 7: _INIT @ 00008FE0
  • 00000000 — _PsInitSystem@4
Segment 8: _PTEXT @ 0000AF80
  • 00000000 — _BufferPrint@4
  • 00000012 — _LoadVPrintf@0
  • 00000032 — _VisitChildDevnodes@12
  • 0000008B — _VisitAllDevnodes@8
  • 000000B8 — _FindPCISlotCallback@8
  • 00000121 — _FindPCISlotDevNode@8
  • 00000166 — _PCIGetBusDataByOffset@20
  • 000001B4 — NTKERN_PM_API
  • 000001B9 — _FileExists@4
  • 000001D5 — _Win95CreateThread@24
  • 00000221 — _IsBigMem@0
  • 0000023D — _PiSetThreadPriority@8
  • 00000254 — _PiGetThreadPriority@8
  • 0000026D — NTKERN_ShutDown_Ex
  • 0000027D — NTKERN_RebootNotify
  • 00000288 — NTKERN_System_Exit
  • 0000028A — NTKERN_Sys_Crit_Exit
  • 0000028C — NTKERN_DeviceIoControl
  • 00000296 — NTKERN_End_PM_App
  • 0000029C — NTKERN_Create_VM
  • 000002D1 — NTKERN_Destroy_VM
  • 00000306 — NTKERN_Init_Complete
  • 0000031C — NTKERN_Create_Thread
  • 00000350 — NTKERN_Terminate_Thread
  • 0000037F — NTKERN_Destroy_Thread
  • 000003B4 — _GetPEModuleEntryPoint
  • 000003BA — _GetProcAddress
  • 000003C0 — _PELDR_InitCompleted
  • 000003C6 — _UnloadPEModule
  • 000003D9 — _LoadPEModule
  • 00000409 — _Time_Slice_Sleep@4
  • 00000412 — _BCSToUni
  • 00000418 — _UniToBCS
  • 0000041E — _UniToUpper
  • 00000424 — _RegOpenKey
  • 0000042A — _RegCreateKey
  • 00000430 — _RegQueryInfoKey
  • 00000436 — _RegQueryValueEx
  • 0000043C — _RegSetValueEx
  • 00000442 — _RegCloseKey
  • 00000448 — _RegDeleteKey
  • 0000044E — _RegDeleteValue
  • 00000454 — _RegEnumKey
  • 0000045A — _RegEnumValue
  • 00000460 — _pFindDriver@4
  • 00000488 — _FindDriverPath@4
  • 00000531 — _LoadDriver@8
  • 00000652 — _UnloadDriver@4
  • 0000068E — _LoadSysDriver@8
  • 000006C7 — _UnloadSysDriver@4
  • 000006EA — _UnicodeCmp@8
  • 0000073B — _NtKernGetWorkerThread
  • 00000759 — _NtKernGetDynaAreaHandle@4
  • 000007FE — _NtKernWriteDynaDriverKeys@12
  • 0000091F — _NtKernWriteDynaDriverImageKey@8
  • 00000974 — _NtKernParsePathName@16
  • 00000A70 — _NtKernEnsureUnicode@16
  • 00000AB6 — _NtKernCreateDynaRegKey@16
  • 00000B5D — _NtKernOpenDynaRegKey@8
  • 00000B93 — _NtKernDynaLoadDriver@16
  • 00000E42 — _NtKernDynaUnloadDriver@4
  • 00000E4A — _NtKernGetDriverHandle@12
  • 00000EBC — _ThreadFindProcess@4
  • 00000EE2 — _CreateProcessStruct@4
  • 00000F5C — _ThreadCreateNotify@4
  • 00001040 — _ProcessDestroyNotify@4
  • 00001062 — _ThreadTerminateNotify@4
  • 0000107C — _ThreadDestroyNotify@4
  • 000010CE — _ThreadInitialize@4
  • 00001120 — __NtKernCreateFile@44
  • 00001168 — __NtKernCancelIoFile@8
  • 00001195 — __NtKernReadFile@36
  • 000011D7 — __NtKernWriteFile@36
  • 00001219 — __NtKernClose@4
  • 0000123F — __NtKernDeviceIoControl@40
  • 00001284 — __NtKernInternalDeviceIoControl@40
  • 000012C9 — __NtKernQueueWorkItem@8
  • 000012F7 — __NtKernSetPhysicalCacheTypeRange@16
  • 000012FF — __NtKernLoadDriver@4
  • 00001325 — @RD_MSR@4
  • 00001328 — _WR_MSR@12
  • 00001339 — _GetCpuTypeStep@4
  • 00001373 — _GetCpuId
  • 0000137C — __IOManGetVersion@8
  • 000013B9 — __IOManCreateFile@52
  • 000013F6 — __IOManClose@12
  • 00001433 — __IOManWriteFile@44
  • 00001470 — __IOManReadFile@44
  • 000014AD — __IOManDeviceIoControl@48
  • 000014EA — __IOManFlushFileBuffers@16
  • 00001527 — __IOManCancelIoFile@16
  • 00001564 — __IOManGetDevnodeFromFileHandle@16
  • 000015A1 — __IOManRequestWakeupLatency@12
  • 000015DE — _Get_Next_Thread_Handle@4
  • 000015EF — _Get_Sys_Thread_Handle@0
  • 000015FA — _Get_Cur_Thread_Handle@0
  • 00001605 — _AllocateThreadDataSlot@0
  • 0000160B — _VWIN32_GetProcessHandle
  • 00001611 — _Win32ReferenceObjectByHandle
  • 00001617 — _Win32ReferenceObject
  • 0000161D — _Win32DereferenceObject
  • 00001628 — _mR0ObjFree@4
  • 00001636 — _mR0ObjDup@8
  • 0000164E — _MakeWin32Handle
  • 00001674 — _GetNtHandle
  • 00001682 — _CloseWin32Handle
  • 00001690 — _GetPathBase@8
  • 000016D8 — _MapRegistryPath@12
  • 0000177D — _ZwOpenKey@12
  • 00001839 — _ZwEnumerateKey@24
  • 00001976 — _ZwClose@4
  • 000019AD — _ZwCreateKey@28
  • 00001AA5 — _ZwDeleteKey@4
  • 00001B12 — _ZwSetValueKey@24
  • 00001BF7 — _ZwpGenerateValueTypeName@8
  • 00001CC3 — _ZwpSetValueType@16
  • 00001D40 — _ZwpGetValueType@12
  • 00001DDF — _ZwQueryValueKey@24
  • 000020F9 — _GetClassName@12
  • 0000213D — _AToW@12
  • 00002182 — _ZwQueryKey@20
  • 00002383 — _ZwEnumerateValueKey@24
  • 00002419 — _ZwDeleteValueKey@8
  • 00002468 — _GetMessagePtr
  • 0000247B — _ExMapHandleToPointer@12
  • 000024A9 — _ExpAllocateHandleTable@8
  • 000024EC — _ExpAllocateHandleTableEntries@16
  • 0000257B — _ExCreateHandle@8
  • 000025CD — _ExCreateHandleTable@12
  • 00002623 — _ExDestroyHandle@12
  • 0000267B — _ExDestroyHandleTable@8
  • 000026D2 — _NtClearEvent@4
  • 0000270F — _NtCreateEvent@20
  • 00002813 — _NtOpenEvent@12
  • 000028D4 — _NtPulseEvent@8
  • 000029AF — _NtQueryEvent@20
  • 00002AC7 — _NtResetEvent@8
  • 00002BA1 — _NtSetEvent@8
  • 00002C7C — @WorkerThreadFunction@8
  • 00002CC5 — _SysDestroyWorkerThread@4
  • 00002CEA — _SysDestroyWorkerThreads@0
  • 00002D4F — _SysCreateWorkerThread@8
  • 00002DB8 — _InitializeWorkItemQueue@4
  • 00002DE9 — _SysInit@4
  • 00002E01 — _ExCreateCallback@16
  • 00002ED1 — _ExpDeleteCallback@4
  • 00002ED4 — _ExpWstrSystemInformation
  • 00002F0C — _ExpWstrSystemInformationValue
  • 00002F18 — _ExInitializeNPagedLookasideList@28
  • 00002FA1 — _ExInitializePagedLookasideList@28
  • 00003037 — _ExRaiseAccessViolation@0
  • 00003042 — _ExRaiseDatatypeMisalignment@0
  • 0000304D — _HalGetAdapter@8
  • 00003470 — _HalpAllocateGlobalMapBuffer@0
  • 000034B8 — _HalAllocateCommonBuffer@16
  • 0000356A — _HalpGrowMapBuffers@8
  • 000036BE — _HalpAllocateAdapter@12
  • 00003876 — _RtlAnsiStringToUnicodeString@12
  • 0000391E — _RtlUnicodeStringToAnsiString@12
  • 000039DA — _RtlWriteRegistryValue@24
  • 00003A2F — _RtlInitializeBitMap@12
  • 00003A43 — _RtlpGetRegistryHandle@16
  • 00003B21 — _RtlpQueryRegistryDirect@16
  • 00003BC9 — _RtlpCallQueryRegistryRoutine@20
  • 00003D51 — _RtlQueryRegistryValues@20
  • 00003FF4 — _RtlExtendedLargeIntegerDivide@16
  • 00004036 — _RtlExtendedIntegerMultiply@12
  • 00004092 — _RtlExtendedMagicDivide@20
  • 00004120 — _RtlStringFromGUID@8
  • 00004192 — _RtlGUIDFromString@8
  • 0000433F — _IoAllocateDriverObjectExtension@16
  • 00004357 — _IoAssociationInitialize@0
  • 0000436E — _IoConnectInterrupt@44
  • 0000448E — _IoDisconnectInterrupt@4
  • 000044A8 — _NtCreateFile@44
  • 000044DA — _NtDeviceIoControlFile@40
  • 00004506 — _NtInternalDeviceIoControlFile@40
  • 00004532 — _IopCreateDriver@12
  • 0000468A — _IopGetServiceNameFromDriverName@8
  • 00004717 — _IoCreateDriver@8
  • 000047A5 — _IoCreateDriverObject@8
  • 000047E3 — _IopBuildDefaultSysDriverPath@12
  • 000048EC — _IopGetTag@12
  • 00004986 — _IopAddDriverToDriverList@20
  • 00004B9A — _IopFindDrivers@12
  • 00004C63 — _IopFreeDriverList@4
  • 00004CC4 — _IopGetDriverList@4
  • 00004DF4 — _CmpDoSort@8
  • 00004E8E — _CmpResolveDriverDependencies@4
  • 00004ED1 — _CmpOrderGroup@8
  • 00004F33 — _IopUserCompletion@20
  • 00004F43 — _IopUserRundown@4
  • 00004F53 — _IopAbortRequest@4
  • 00004F87 — _IopXxxControlFile@44
  • 000054E0 — _IopSynchronousApiServiceTail@24
  • 0000558B — _IopSynchronousServiceTail@28
  • 0000568E — _IopAcquireFileObjectLock@16
  • 0000571D — _IopAllocateIrpCleanup@8
  • 00005757 — _IopCancelAlertedRequest@8
  • 0000575A — _IoGetConfigurationInformation@0
  • 00005760 — _IoCreateDevice@28
  • 000057FF — _IopCreateDevice@28
  • 000059AC — _IoDeleteSymbolicLink@4
  • 00005A08 — _IoCreateFile@56
  • 00005B79 — _IoGetDeviceObjectPointer@16
  • 00005BF7 — _IoCancelThreadIo@4
  • 00005C75 — _IoAttachDevice@12
  • 00005D09 — _IoSetShareAccess@16
  • 00005DB3 — _IopOpenRegistryKey@20
  • 00005E0C — _IopGetRegistryValue@12
  • 00005E92 — _IopGetRegistryKeyInformation@8
  • 00005F03 — _IoRegisterShutdownNotification@4
  • 00005F3F — _IoInitializeTimer@12
  • 00005FA5 — _IoBuildDeviceIoControlRequest@36
  • 0000612F — _IoShutdownSystem@8
  • 000061C0 — _IopCreateClassKey@12
  • 00006247 — _IopBuildFullDeviceObjectName@8
  • 00006292 — _IopSplitSymbolicLink@16
  • 00006343 — _IopReplacePathSeperatorWithPound@4
  • 00006371 — _IopOpenClassAssociationRegistryEntry@20
  • 0000650F — _IopGetDevnodeHandle@8
  • 00006587 — _IopGetDevnodeSerial@8
  • 00006626 — _IopBuildAssociationLinkName@20
  • 000066BF — _IopGetRegistryValueDword@12
  • 0000670D — _IopGetLinkedState@4
  • 0000675E — _IopSetLinkedState@8
  • 000067B2 — _IopDecrementSymbolicLinkReference@8
  • 0000680A — _IopIncrementSymbolicLinkReference@8
  • 000068D7 — _IoGetDeviceInterfaces@16
  • 00006B0D — _IopEnumKeyHandle@12
  • 00006BAC — _IopEnumKeyHandles@12
  • 00006C84 — _IopEnumKeyHandlesNestWorker@12
  • 00006D11 — _IopEnumKeyHandlesNest@16
  • 00006D5B — _IopClearDeviceClassAssociationLinks@0
  • 00006E61 — _IoOpenDeviceInterfaceRegistryKey@12
  • 00006EAF — _IoRegisterDeviceInterfaceByDevnode@16
  • 00006FB6 — _IoRegisterDeviceInterface@16
  • 00006FD5 — _IopGetNextLocalUniqueId@4
  • 000070BB — _IopFindTheGuid@8
  • 00007118 — _IoUnregisterDeviceInterface@4
  • 0000714C — _IoGetDeviceInterfaceAlias@12
  • 000071FA — _IoSetDeviceInterfaceState@8
  • 000072E4 — _IopRemoveReferenceString@8
  • 0000732B — _IoGetDmaAdapter@12
  • 000073F4 — _IoIsWdmVersionAvailable@8
  • 0000740A — _IopLoadUnloadDriver@4
  • 0000745C — _IopLoadDriver@4
  • 0000790D — _IopGetDriverNameFromKeyNode@8
  • 00007AA4 — _IopMapAndLoadDriver@4
  • 00007BB8 — _IopLoadByName@12
  • 00007DC9 — _IopReadyDeviceObjects@4
  • 00007DE0 — _IopCloseFile@20
  • 00007F15 — _IopDeleteDevice@4
  • 00007F28 — _IopDeleteDriver@4
  • 00007F5E — _IopParseFile@40
  • 00007FAF — _IopParseDevice@40
  • 00008561 — _NtQueryInformationFile@20
  • 000089B8 — _NtReadFile@36
  • 00008D3A — _RegStrInit@0
  • 00008FDF — _NtWriteFile@36
  • 000093F8 — _NtOpenFile@24
  • 00009421 — _IopErrorLogThread@4
  • 000096D1 — _IopErrorLogQueueRequest@0
  • 00009719 — _NtCancelIoFile@8
  • 00009896 — _NtFlushBuffersFile@8
  • 00009A6C — _ObpAllocateObject@20
  • 00009BA5 — _ObCreateObject@36
  • 00009C26 — _ObpCaptureObjectCreateInformation@16
  • 00009CA0 — _ObpCaptureObjectName@8
  • 00009D16 — @ObpFreeObject@4
  • 00009DAB — _ObMakeTemporaryObject@4
  • 00009DBE — _NtMakeTemporaryObject@4
  • 00009DF6 — _NtCreateDirectoryObject@12
  • 00009E4C — _ObpLookupDirectoryEntry@12
  • 00009F52 — _ObpLookupObjectName@40
  • 0000A38D — _ObpCreateUnnamedHandle@24
  • 0000A468 — _ObpCreateHandle@36
  • 0000A574 — _ObInsertObject@24
  • 0000A729 — _NtCreateSymbolicLinkObject@16
  • 0000A7E5 — _NtOpenSymbolicLinkObject@12
  • 0000A80E — _ObpParseSymbolicLink@40
  • 0000A900 — _ObpDuplicateHandle@4
  • 0000A9A3 — _ObReferenceObjectByName@32
  • 0000AA1F — _ObpRemoveObjectRoutine@4
  • 0000AA86 — _ObpDeleteNameCheck@8
  • 0000AB70 — _ObOpenObjectByName@28
  • 0000ACAD — _ObCreateObjectType@12
  • 0000AED4 — _SeCreateAccessState@12
  • 0000AF1A — _SeDeleteAccessState@4
  • 0000AF3D — _NtOpenSection@12
  • 0000AF6B — _NtMapViewOfSection@40
  • 0000B0F0 — _MmMapViewOfSection@40
  • 0000B151 — _MiFindLinearBlock@8
  • 0000B174 — _MiReserveLinearBlock@12
  • 0000B1F8 — _MiFreeLinearRegion@12
  • 0000B2A5 — _MiFindMapping@8
  • 0000B2D2 — _MiReserveLinearRegion@12
  • 0000B3F3 — _NtUnmapViewOfSection@8
  • 0000B405 — _MmUnmapViewOfSection@8
  • 0000B46F — _PsCreateSystemThread@28
  • 0000B539 — _PsTerminateSystemThread@4
  • 0000B55D — _KeSetPriorityThread@8
Segment 9: _PDATA @ 0000D4E0
  • 0000000C — ??_C@_00A@?$AA@ ("")
  • 00002CC0 — _WinDir
  • 00002CD8 — ??_C@_0L@LLAF@DeviceDesc?$AA@ ("DeviceDesc")
  • 00002CE4 — ??_C@_0N@IOME@FriendlyName?$AA@ ("FriendlyName")
  • 00002CF4 — ??_C@_09CDHI@ClassGUID?$AA@ ("ClassGUID")
  • 00002D00 — ??_C@_05LCAF@Class?$AA@ ("Class")
  • 00002D08 — ??_C@_06LCIG@Driver?$AA@ ("Driver")
  • 00002D10 — ??_C@_08KDKK@Location?$AA@ ("Location")
  • 00002D1C — ??_C@_03KFJO@Mfg?$AA@ ("Mfg")
  • 00002D20 — ??_C@_0O@KIHO@CompatibleIDs?$AA@ ("CompatibleIDs")
  • 00002D30 — ??_C@_0L@LPIN@HardwareID?$AA@ ("HardwareID")
  • 00002D40 — ??_C@_0N@IMGC@UpperFilters?$AA@ ("UpperFilters")
  • 00002D50 — ??_C@_0L@MNFF@NTMPDriver?$AA@ ("NTMPDriver")
  • 00002D5C — ??_C@_0N@JGBG@LowerFilters?$AA@ ("LowerFilters")
  • 00002D6C — _NtPnPDriverObject
  • 00002D70 — ??_C@_0PG@KFIC@Please?5make?5a?5bug?5to?5the?5owner?5o@ ("Please make a bug to the owner o"...)
  • 00002E68 — ??_C@_0CF@CDAH@Enumerator?5rightfully?5challenged@ ("Enumerator rightfully challenged"...)
  • 00002E90 — ??_C@_0CE@HACN@?$CIcould?5not?5get?5the?5enumerator?5na@ ("(could not get the enumerator na"...)
  • 00002EB4 — _fPnPReady
  • 00002EB8 — ??_C@_0N@KIHN@Capabilities?$AA@ ("Capabilities")
  • 00002ED0 — _Converts
  • 00002F18 — _ConvertBacks
  • 00002F70 — _IopCacheHitIncrement
  • 00002F74 — _CmAutoGenName
  • 00002F7C — _CmpAutoGenString
  • 00002F80 — _CmRegistryMachineHardwareDescriptionSystemName
  • 00002F88 — _CmpRegistryMachineHardwareDescriptionSystemString
  • 00002F8C — _CmRegistryMachineSystemCCSControlNTKernName
  • 00002F94 — _CmpRegistryMachineSystemCCSControlNTKernString
  • 00002F98 — _CmRegistryMachineName
  • 00002FA0 — _CmpRegistryMachineString
  • 00002FA4 — _CmRegistryUserName
  • 00002FAC — _CmpRegistryUserString
  • 00002FB0 — _CmRegistryEnumName
  • 00002FB8 — _CmpRegistryEnumString
  • 00002FBC — _CmNextLUIDName
  • 00002FC4 — _CmpNextLUIDString
  • 00002FC8 — _CmDosDevicesName
  • 00002FD0 — _CmpDosDevicesString
  • 00002FD4 — _CmDeviceParametersName
  • 00002FDC — _CmpDeviceParametersString
  • 00002FE0 — _CmDeviceName
  • 00002FE8 — _CmpDeviceString
  • 00002FEC — _CmDeviceInstanceName
  • 00002FF4 — _CmpDeviceInstanceString
  • 00002FF8 — _CmDotName
  • 00003000 — _CmpDotString
  • 00003004 — _CmPoundName
  • 0000300C — _CmpPoundString
  • 00003010 — _CmNullName
  • 00003018 — _CmpNullString
  • 0000301C — _CmRefCountName
  • 00003024 — _CmpRefCountString
  • 00003028 — _CmSymbolicLinkName
  • 00003030 — _CmpSymbolicLinkString
  • 00003034 — _CmSerialNumberName
  • 0000303C — _CmpSerialNumberString
  • 00003040 — _CmRegistryMachineSystemCurrentControlSetName
  • 00003048 — _CmpRegistryMachineSystemCurrentControlSetString
  • 0000304C — _CmRegistryMachineSystemCurrentControlSetServicesName
  • 00003054 — _CmpRegistryMachineSystemCurrentControlSetServicesString
  • 00003058 — _CmDeviceClassKeyName
  • 00003060 — _CmpDeviceClassKeyString
  • 00003064 — _CmSystemRootName
  • 0000306C — _CmpSystemRootString
  • 00003070 — _CmCurrentControlSetName
  • 00003078 — _CmpCurrentControlSetString
  • 0000307C — _CmControlName
  • 00003084 — _CmpControlString
  • 00003088 — _CmServicesName
  • 00003090 — _CmpServicesString
  • 00003094 — _CmGroupName
  • 0000309C — _CmpGroupString
  • 000030A0 — _CmSystemRootSystem32driversName
  • 000030A8 — _CmpSystemRootSystem32driversString
  • 000030AC — _CmControlGroupOrderListName
  • 000030B4 — _CmpControlGroupOrderListString
  • 000030B8 — _CmImagePathName
  • 000030C0 — _CmpImagePathString
  • 000030C4 — _CmSysName
  • 000030CC — _CmpSysString
  • 000030D0 — _CmStartName
  • 000030D8 — _CmpStartString
  • 000030DC — _CmSystemName
  • 000030E4 — _CmpSystemString
  • 000030E8 — _CmTagName
  • 000030F0 — _CmpTagString
  • 000030F4 — _CmListName
  • 000030FC — _CmpListString
  • 00003100 — _CmControlServiceGroupOrderName
  • 00003108 — _CmpControlServiceGroupOrderString
  • 0000310C — _Cm_T_Name
  • 00003114 — _Cmp_T_String
  • 00003118 — _Cm_TypeName
  • 00003120 — _Cmp_TypeString
  • 00003124 — _CmDriverName
  • 0000312C — _CmpDriverString
  • 00003130 — _CmFileSystemName
  • 00003138 — _CmpFileSystemString
  • 0000313C — _CmBackSlashName
  • 00003144 — _CmpBackSlashString
  • 00003148 — _CmLinkedName
  • 00003150 — _CmpLinkedString
  • 00003154 — _CmTypeName
  • 0000328C — _CmTypeString
  • 00003328 — ??_C@_1BE@CDCI@?$AAU?$AAn?$AAd?$AAe?$AAf?$AAi?$AAn?$AAe?$AAd?$AA?$AA@ (L"Undefined")
  • 0000333C — ??_C@_1BK@ENIN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?$AA@ (L"SystemMemory")
  • 00003358 — ??_C@_1CE@LANH@?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@ (L"NetworkPeripheral")
  • 0000337C — ??_C@_1BO@CJIF@?$AAL?$AAi?$AAn?$AAe?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@ (L"LinePeripheral")
  • 0000339C — ??_C@_1CA@IGFK@?$AAO?$AAt?$AAh?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@ (L"OtherPeripheral")
  • 000033BC — ??_C@_1CG@MDFM@?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@ (L"TerminalPeripheral")
  • 000033E4 — ??_C@_1CG@IEKA@?$AAK?$AAe?$AAy?$AAb?$AAo?$AAa?$AAr?$AAd?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@ (L"KeyboardPeripheral")
  • 0000340C — ??_C@_1CE@HDEI@?$AAP?$AAo?$AAi?$AAn?$AAt?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@ (L"PointerPeripheral")
  • 00003430 — ??_C@_1CE@BACN@?$AAP?$AAr?$AAi?$AAn?$AAt?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@ (L"PrinterPeripheral")
  • 00003454 — ??_C@_1CE@FABA@?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@ (L"MonitorPeripheral")
  • 00003478 — ??_C@_1CA@NODE@?$AAM?$AAo?$AAd?$AAe?$AAm?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@ (L"ModemPeripheral")
  • 00003498 — ??_C@_1BO@CGFI@?$AAT?$AAa?$AAp?$AAe?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@ (L"TapePeripheral")
  • 000034B8 — ??_C@_1CK@JLDJ@?$AAF?$AAl?$AAo?$AAp?$AAp?$AAy?$AAD?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl@ (L"FloppyDiskPeripheral")
  • 000034E4 — ??_C@_1BO@PJEO@?$AAD?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@ (L"DiskPeripheral")
  • 00003504 — ??_C@_1CA@LKFM@?$AAO?$AAt?$AAh?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@ (L"OtherController")
  • 00003524 — ??_C@_1CA@PEGP@?$AAA?$AAu?$AAd?$AAi?$AAo?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@ (L"AudioController")
  • 00003544 — ??_C@_1CG@LIKG@?$AAK?$AAe?$AAy?$AAb?$AAo?$AAa?$AAr?$AAd?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@ (L"KeyboardController")
  • 0000356C — ??_C@_1CE@EPEO@?$AAP?$AAo?$AAi?$AAn?$AAt?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@ (L"PointerController")
  • 00003590 — ??_C@_1CG@PGOM@?$AAP?$AAa?$AAr?$AAa?$AAl?$AAl?$AAe?$AAl?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@ (L"ParallelController")
  • 000035B8 — ??_C@_1CE@DMFN@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@ (L"DisplayController")
  • 000035DC — ??_C@_1CE@IMNB@?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@ (L"NetworkController")
  • 00003600 — ??_C@_1CC@IGHG@?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@ (L"SerialController")
  • 00003624 — ??_C@_1BO@LLNG@?$AAW?$AAo?$AAr?$AAm?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@ (L"WormController")
  • 00003644 — ??_C@_1CA@BIAE@?$AAC?$AAd?$AAR?$AAo?$AAm?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@ (L"CdRomController")
  • 00003664 — ??_C@_1BO@BKFO@?$AAT?$AAa?$AAp?$AAe?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@ (L"TapeController")
  • 00003684 — ??_C@_1BO@MFEI@?$AAD?$AAi?$AAs?$AAk?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@ (L"DiskController")
  • 000036A4 — ??_C@_1CK@HHAK@?$AAM?$AAu?$AAl?$AAt?$AAi?$AAf?$AAu?$AAn?$AAc?$AAt?$AAi?$AAo?$AAn?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr@ (L"MultifunctionAdapter")
  • 000036D0 — ??_C@_1BG@CDDF@?$AAD?$AAt?$AAi?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@ (L"DtiAdapter")
  • 000036E8 — ??_C@_1BI@MPIK@?$AAS?$AAc?$AAs?$AAi?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@ (L"ScsiAdapter")
  • 00003700 — ??_C@_1BE@PJDG@?$AAT?$AAc?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@ (L"TcAdapter")
  • 00003714 — ??_C@_1BI@LJGK@?$AAE?$AAi?$AAs?$AAa?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@ (L"EisaAdapter")
  • 0000372C — ??_C@_1BO@ECJF@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@ (L"SecondaryCache")
  • 0000374C — ??_C@_1CA@EAGJ@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAD?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@ (L"SecondaryDCache")
  • 0000376C — ??_C@_1CA@NPNM@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAI?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@ (L"SecondaryICache")
  • 0000378C — ??_C@_1BM@ENFA@?$AAP?$AAr?$AAi?$AAm?$AAa?$AAr?$AAy?$AAD?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@ (L"PrimaryDCache")
  • 000037A8 — ??_C@_1BM@NCOF@?$AAP?$AAr?$AAi?$AAm?$AAa?$AAr?$AAy?$AAI?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@ (L"PrimaryICache")
  • 000037C4 — ??_C@_1CO@LFBC@?$AAF?$AAl?$AAo?$AAa?$AAt?$AAi?$AAn?$AAg?$AAP?$AAo?$AAi?$AAn?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs@ (L"FloatingPointProcess")
  • 000037F4 — ??_C@_1CC@MFFM@?$AAC?$AAe?$AAn?$AAt?$AAr?$AAa?$AAl?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAo?$AAr?$AA?$AA@ (L"CentralProcessor")
  • 00003818 — ??_C@_1O@EPAA@?$AAL?$AAi?$AAn?$AAk?$AAe?$AAd?$AA?$AA@ (L"Linked")
  • 00003828 — ??_C@_1BK@MPEO@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AA?$AA@ (L"\\FileSystem\\")
  • 00003844 — ??_C@_1BC@LFKG@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$AA@ (L"\\Driver\\")
  • 00003858 — ??_C@_1M@GDFC@?$AA_?$AAT?$AAy?$AAp?$AAe?$AA?$AA@ (L"_Type")
  • 00003864 — ??_C@_17PAPH@?$AA_?$AAT?$AA_?$AA?$AA@ (L"_T_")
  • 0000386C — ??_C@_1DE@NFDK@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAG?$AAr?$AAo?$AAu?$AAp@ (L"Control\\ServiceGroup")
  • 000038A0 — ??_C@_19OFAF@?$AAL?$AAi?$AAs?$AAt?$AA?$AA@ (L"List")
  • 000038AC — ??_C@_17CCKB@?$AAT?$AAa?$AAg?$AA?$AA@ (L"Tag")
  • 000038B4 — ??_C@_1O@KHFL@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@ (L"System")
  • 000038C4 — ??_C@_17FDLC@?$AAs?$AAy?$AAs?$AA?$AA@ (L"sys")
  • 000038CC — ??_C@_1CO@ECIK@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAG?$AAr?$AAo?$AAu?$AAp?$AAO?$AAr?$AAd?$AAe?$AAr?$AAL?$AAi@ (L"Control\\GroupOrderLi")
  • 000038FC — ??_C@_1DK@LJHF@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2@ (L"\\SystemRoot\\System32")
  • 00003938 — ??_C@_1M@EONE@?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA@ (L"Group")
  • 00003944 — ??_C@_1BC@LHCC@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@ (L"Services")
  • 00003958 — ??_C@_1BA@DLLE@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@ (L"Control")
  • 00003968 — ??_C@_1CE@KEEI@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?$AA@ (L"CurrentControlSet")
  • 0000398C — ??_C@_1IC@KIJF@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@ (L"\\REGISTRY\\Machine\\Sy"...)
  • 00003A10 — ??_C@_1GI@EMLC@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@ (L"\\REGISTRY\\Machine\\Sy"...)
  • 00003A78 — ??_C@_1FG@PFNI@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@ (L"\\REGISTRY\\Machine\\Sy"...)
  • 00003AD0 — ??_C@_1O@OIBJ@?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AA?$AA@ (L"Serial")
  • 00003AE0 — ??_C@_1BK@LJFM@?$AAS?$AAy?$AAm?$AAb?$AAo?$AAl?$AAi?$AAc?$AAL?$AAi?$AAn?$AAk?$AA?$AA@ (L"SymbolicLink")
  • 00003AFC — ??_C@_1BC@HFGN@?$AAR?$AAe?$AAf?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@ (L"RefCount")
  • 00003B10 — ??_C@_13LEOO@?$AA?$CD?$AA?$AA@ (L"#")
  • 00003B14 — ??_C@_1BO@IGPD@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@ (L"DeviceInstance")
  • 00003B34 — ??_C@_1CE@KEEA@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@ (L"Device Parameters")
  • 00003B58 — ??_C@_1BC@IKAI@?$AAN?$AAe?$AAx?$AAt?$AAL?$AAU?$AAI?$AAD?$AA?$AA@ (L"NextLUID")
  • 00003B6C — ??_C@_1DA@PCOE@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAE?$AAn@ (L"\\REGISTRY\\Machine\\En")
  • 00003B9C — ??_C@_1BO@NKEJ@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?$AA@ (L"\\REGISTRY\\User")
  • 00003BBC — ??_C@_1CE@LJDG@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?$AA@ (L"\\REGISTRY\\Machine")
  • 00003BE0 — ??_C@_1HE@BCIG@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@ (L"\\REGISTRY\\Machine\\Sy"...)
  • 00003C54 — ??_C@_1FM@MLDO@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAH?$AAA@ (L"\\REGISTRY\\Machine\\HA"...)
  • 00003CB0 — ??_C@_1BA@JCHI@?$AAA?$AAu?$AAt?$AAo?$AAG?$AAe?$AAn?$AA?$AA@ (L"AutoGen")
Segment 10: _ITEXT @ 00000000
  • 00000000 — ExportNTFunctions
  • 000000DE — NTKERN_Device_Init
  • 00000198 — _InitializeSystemPhase@4
  • 000001EF — _InitializeSystem@0
  • 00000228 — IO32_Device_Init
  • 0000023C — _InitPowerHandler
  • 00000272 — _ExpResourceInitialization@0
  • 000002A4 — _ExpEventInitialization@0
  • 0000031B — _ExInitSystem@4
  • 0000033A — _ExpInitSystemPhase0@0
  • 00000388 — _ExpInitSystemPhase1@0
  • 000003A5 — _SysCreateWorkerThreads@4
  • 00000410 — _ExpInitializeCallbacks@0
  • 00000530 — _ExpWstrCallback
  • 00000544 — _ExpInitializeCallback
  • 00000564 — ??_C@_1EC@FFPO@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAu?$AAs?$AAp?$AAe?$AAn?$AAd?$AAH?$AAi?$AAb@ (L"\\Callback\\SuspendHib"...)
  • 000005A8 — ??_C@_1DO@MHEK@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAI@ (L"\\Callback\\SetSystemI")
  • 000005E8 — ??_C@_1DA@KHMA@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAT@ (L"\\Callback\\SetSystemT")
  • 00000618 — _IoInitSystem@4
  • 0000087F — _IopLoadPhaseDrivers@4
  • 000008BD — _IopLoadRegistryDrivers@4
  • 00000994 — _ICODE__SHELL_HookSystemBroadcast
  • 0000099C — _ICODE__VPOWERD_Register_Power_Handler