NTKERN — Windows 98 Retail
Segment 1: .bss @ 00006CA0
-
00000000 — _PsThreadType
-
00000004 — _MmSectionObjectType
-
00000008 — _ObpRemoveQueueActive
-
0000000C — _ObpObjectsWithName
-
00000010 — _ObpObjectsCreated
-
00000014 — _ObpObjectsWithHandleDB
-
00000020 — _ObpRootDirectoryMutex
-
00000058 — _ObpTypeDirectoryObject
-
0000005C — _ObpSymbolicLinkObjectType
-
00000060 — _ObpObjectTypes
-
000000C0 — _ObpRemoveObjectQueue
-
000000D0 — _ObpRemoveObjectWorkItem
-
000000E0 — _ObpDirectoryObjectType
-
000000F0 — _ObpDefaultObject
-
00000100 — _HandleCount
-
00000104 — _ObpTypeObjectType
-
00000108 — _ObpLock
-
0000010C — _Global_Handle_Table
-
00000110 — _ObpRootDirectoryObject
-
00000120 — _IopErrorLogWorkItem
-
00000130 — _IopErrorLogPortPending
-
00000140 — _IopDatabaseEvent
-
00000150 — _IopTimerQueueHead
-
00000158 — _IopCancelSpinLock
-
0000015C — _IopTimerLock
-
00000160 — _ConfigurationInformation
-
00000180 — _IoAdapterObjectType
-
000001A0 — _IopTimerDpc
-
000001C0 — _IopCompletionLock
-
000001C4 — _IoOtherOperationCount
-
000001C8 — _IopErrorLogLock
-
000001D0 — _IoReadTransferCount
-
000001D8 — _IopNotifyShutdownQueueHead
-
000001E0 — _IoReadOperationCount
-
000001E4 — _IoDriverObjectType
-
000001E8 — _IopTimerCount
-
000001EC — _IopFileObjectType
-
00000200 — _IopTimer
-
00000228 — _NextUniqueDeviceObjectNumber
-
00000230 — _IopErrorLogListHead
-
00000238 — _IoWriteOperationCount
-
0000023C — _IoDeviceObjectType
-
00000240 — _IopErrorLogAllocation
-
00000244 — _IopDatabaseLock
-
00000248 — _IopErrorLogAllocationLock
-
00000260 — _IopAssociationHashTable
-
00000460 — _NullPage
-
00000464 — _LessThan16Mb
-
00000468 — _MasterAdapterObject
-
00000470 — _HalpBusDatabaseEvent
-
00000480 — _HalpMapBufferSize
-
00000484 — _HalpEisaDma
-
00000488 — _HalpBusType
-
00000490 — _HalpMapBufferPhysicalAddress
-
00000498 — _HalpEisaControlBase
-
000004A0 — _HalpEisaAdapter
-
000004C0 — _ExNPagedLookasideLock
-
000004C8 — _ExPagedLookasideListHead
-
000004D0 — _ExPagedLookasideLock
-
000004D8 — _ExNPagedLookasideListHead
-
000004E0 — _ExCbSetSystemInformation
-
000004E4 — _ExCbSetSystemTime
-
000004E8 — _ExCbSuspendHibernateSystem
-
000004EC — _ExCallbackObjectType
-
000004F0 — _ExpCallbackEvent
-
00000500 — _PendingDelayedWorkItems
-
00000520 — _CriticalWorkItems
-
00000548 — _PendingCriticalWorkItems
-
00000560 — _DelayedWorkItems
-
00000588 — _ExpEventObjectType
-
0000058C — _ExEventObjectType
-
00000590 — _ExpTimeout
-
00000598 — _ExpSystemResourcesList
-
000005A0 — _ExpResourceSpinLock
-
000005C0 — _PopThrottleTimer
-
00000600 — _PoSystemIdleTimer
-
00000640 — _PopPolicyLock
-
00000678 — _PopIdleScanTime
-
00000680 — _PopIdleScanTimer
-
000006A8 — _PopWorkerItemQueue
-
000006B0 — _PopThrottleTimeout
-
000006B8 — _PopActionWaiters
-
000006C0 — _PopDumbyEvent
-
000006D0 — _PopInrushIrpPointer
-
000006D8 — _PopThermal
-
000006E0 — _PopVolumeDevices
-
000006E8 — _PopWorkerSpinLock
-
000006EC — _PopWorkerThread
-
000006F0 — _PopCoolingMode
-
000006F4 — _PopInrushPending
-
00000700 — _PopAdminPolicy
-
00000718 — _PopWorkerPending
-
00000720 — _PopWorkerStartEvent
-
00000730 — _PopPolicyIrpQueue
-
00000738 — _PopSwitches
-
00000740 — _PopSIdle
-
00000778 — _PopInvalidNotifyBlockCount
-
00000780 — _PopCapabilities
-
000007D0 — _PopIrpSerialList
-
000007D8 — _PopIrpSerialLock
-
000007E0 — _PopCB
-
000008A0 — _PopEventCode
-
000008B0 — _PopIrpSerialListLength
-
000008B4 — _PopIdle0PromoteLimit
-
000008C0 — _PopVolumeLock
-
000008E0 — _PopIdle0PromoteTicks
-
000008E4 — _PopWorkerExitFlag
-
000008E8 — _PopDopeGlobalLock
-
000008EC — _PopWorkerStatus
-
000008F0 — _PopInrushIrpReferenceCount
-
00000900 — _PopPolicyWorker
-
00000910 — _PopRequestedIrps
-
00000918 — _PopWorkerLock
-
0000091C — _PopFullWake
-
00000920 — _PopHeuristics
-
00000934 — _PopStateCallout
-
00000938 — _PopIdleDetectList
-
00000940 — _IopHwProfileChangeNotifyLock
-
00000960 — _IopDeviceClassNotifyList
-
000009E0 — _IopDeviceClassNotifyLock
-
00000A00 — _IopHwProfileChangeNotifyList
-
00000A08 — _CurrentThread
-
00000A10 — _KrnProcessList
-
00000A18 — _NTKERNPreviousMode
-
00000A1C — _SystemPTEPoolSize
-
00000A20 — _SystemPTESpace
-
00000A28 — _SystemPTEBusyMapHeader
-
00000A30 — _SystemPTEBusyMap
-
00000A34 — _hWin95NullPage
-
00000A38 — _InitializationPhase
-
00000A40 — _DebugRingBuffer
-
00000A4C — _errno
-
00000A50 — _DriverList
-
00000A60 — ??_C@_0BB@HLDA@system32?2drivers?$AA@
("system32\\drivers")
-
00000A74 — ??_C@_08OGD@system32?$AA@
("system32")
-
00000A80 — ??_C@_06GMLA@system?$AA@
("system")
-
00000A88 — ??_C@_07NKAG@?$CFs?$CFs?2?$CFs?$AA@
("%s%s\\%s")
-
00000A90 — ??_C@_0O@BMMI@DllInitialize?$AA@
("DllInitialize")
-
00000AA0 — _RegistryMapping
-
00000AD8 — _MappingTables
-
00000AE0 — _MmpUserProbeAddress
-
00000AE4 — _MmUserProbeAddress
-
00000AE8 — ??_C@_0DG@KEAH@MmMapIoSpace?3?5NtKernSetPhysicalC@
("MmMapIoSpace: NtKernSetPhysicalC"...)
-
00000B20 — ??_C@_0CP@KEP@MmMapIoSpace?3?5Failed?5to?5set?5rang@
("MmMapIoSpace: Failed to set rang"...)
-
00000B50 — ??_C@_1BG@OJPP@?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAW?$AAD?$AAM?$AA?$AA@
(L"DynamicWDM")
-
00000B68 — ??_C@_1GI@DEJO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY@
(L"\\Registry\\Machine\\SY"...)
-
00000BD0 — ??_C@_1BK@JLBF@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
(L"ErrorControl")
-
00000BEC — ??_C@_1M@HKNH@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
(L"Start")
-
00000BF8 — ??_C@_19KJIP@?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
(L"Type")
-
00000C04 — ??_C@_1BE@PJND@?$AAI?$AAm?$AAa?$AAg?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
(L"ImagePath")
-
00000C18 — ??_C@_1IA@PBPA@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY@
(L"\\Registry\\Machine\\SY"...)
-
00000C98 — _ThreadDataSlot
-
00000C9C — ??_C@_0DB@CHBE@?5KTHREAD?5?$CFx?0?5hRing0?5?$CFx?0?5IRQL?5?$CF02@
(" KTHREAD %x, hRing0 %x, IRQL %02"...)
-
00000CD0 — ??_C@_0CB@EMFF@?6Process?5?$CFx?5sys?5?$CFx?5thread?5list?3?6@
("\nProcess %x sys %x thread list:\n"...)
-
00000CF4 — ??_C@_0BO@GPIB@HARDWARE?2DeviceMap?2InputClass?$AA@
("HARDWARE\\DeviceMap\\InputClass")
-
00000D14 — ??_C@_0BN@KAPE@HARDWARE?2DeviceMap?2InputPort?$AA@
("HARDWARE\\DeviceMap\\InputPort")
-
00000D34 — _PathMapArray
-
00000D44 — _pZWKeyList
-
00000D48 — _CLASS_NAME
-
00000D54 — ??_C@_0M@EPEN@Unspecified?$AA@
("Unspecified")
-
00000D60 — ??_C@_07PCLD@Working?$AA@
("Working")
-
00000D68 — ??_C@_09GJGM@Sleeping1?$AA@
("Sleeping1")
-
00000D74 — ??_C@_09JGNF@Sleeping2?$AA@
("Sleeping2")
-
00000D80 — ??_C@_09DMEC@Sleeping3?$AA@
("Sleeping3")
-
00000D8C — ??_C@_09NLJB@Hibernate?$AA@
("Hibernate")
-
00000D98 — ??_C@_08DCJK@Shutdown?$AA@
("Shutdown")
-
00000DA4 — ??_C@_08COLN@USER?4EXE?$AA@
("USER.EXE")
-
00000DB0 — ??_C@_0M@BPKL@MESSAGEBEEP?$AA@
("MESSAGEBEEP")
-
00000DBC — ??_C@_0M@FPCA@EXITWINDOWS?$AA@
("EXITWINDOWS")
-
00000DC8 — _PopIdleDetectionMode
-
00000DCC — _PopSimulate
-
00000DD0 — _PopAttributes
-
00000E20 — _PopRegKey
-
00000E5C — _PopAcRegName
-
00000E70 — _PopDcRegName
-
00000E84 — _PopHiberRegName
-
00000EA8 — _PopAdminRegName
-
00000EC8 — _PopHeuristicsRegName
-
00000EE0 — _PopCompositeBatteryName
-
00000F14 — _PopHiberFileName
-
00000F30 — _PopDebugHiberFileName
-
00000F4C — _PopDumpStackPrefix
-
00000F5C — _PopWorkerTypes
-
00000F70 — _PopPowerStateHandlers
-
00000FE0 — _PopPolicyLockThread
-
00000FE4 — _PopAcPolicy
-
000010CC — _PopDcPolicy
-
000011B4 — _PopPolicy
-
000011B8 — _PopAction
-
000011E8 — _PopMaxPageRun
-
000011EC — _PopDebugCloneBase
-
000011F0 — _PopDebugCloneEnd
-
000011F4 — _PopHiberFile
-
00001210 — _PopHiberFileDebug
-
0000122C — _PoPageLockData
-
00001230 — _lpszWarningText
-
00001284 — _hTimeOut
-
00001288 — _PopSystemActionPending
-
0000128C — _PopAppyTimeHandle
-
00001290 — _PoolFlags
-
000012AC — _ExpResourceTimeoutCount
-
000012B0 — ??_C@_0BB@MKLO@?8EX?5?9?5Rewaiting?6?$AA@
("\'EX - Rewaiting\n")
-
000012C4 — ??_C@_0CE@DFPL@?8?5NumberOfExclusiveWaiters?5?$DN?5?$CF04@
("\' NumberOfExclusiveWaiters = %04"...)
-
000012E8 — ??_C@_0CH@NBOI@?8?5ActiveCount?5?$DN?5?$CF04lx?5?5Flags?5?$DN?5?$CF@
("\' ActiveCount = %04lx Flags = %"...)
-
00001310 — ??_C@_0BC@EMAC@IsOwnedExclusive?5?$AA@
("IsOwnedExclusive ")
-
00001324 — ??_C@_0O@DCBD@SharedWaiter?5?$AA@
("SharedWaiter ")
-
00001334 — ??_C@_0BB@PBLJ@ExclusiveWaiter?5?$AA@
("ExclusiveWaiter ")
-
00001348 — ??_C@_0BB@MPPP@?8Resource?5?$EA?5?$CFlx?6?$AA@
("\'Resource @ %lx\n")
-
0000135C — ??_C@_0CB@COIA@?8?5?5Thread?5?$DN?5?$CF08lx?0?5Count?5?$DN?5?$CF02x?6@
("\' Thread = %08lx, Count = %02x\n"...)
-
00001380 — _ExpSemaphoreObjectType
-
00001384 — _ExSemaphoreObjectType
-
00001388 — _ExpEventMapping
-
00001398 — ??_C@_1M@BACH@?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
(L"Event")
-
000013A4 — _ExpCallbackMapping
-
000013B4 — ??_C@_1BC@NEEN@?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
(L"Callback")
-
000013C8 — _ExpAdjustScanPeriod
-
000013CC — _ExpCurrentScanPeriod
-
000013D0 — _HalpDmaOperations
-
00001404 — _NlsMbCodePageTag
-
00001408 — _RtlFreeStringRoutine
-
0000140C — _RtlAllocateStringRoutine
-
00001410 — ??_C@_0DD@HEJB@RtlAssert?3?5Assertion?5?$CI?$CFs?$CJ?5failed@
("RtlAssert: Assertion (%s) failed"...)
-
00001444 — ??_C@_0DG@FKJI@RtlAssert?3?5Assertion?5?$CI?$CFs?$CJ?5failed@
("RtlAssert: Assertion (%s) failed"...)
-
0000147C — _RtlpBitsClearAnywhere
-
0000157C — _RtlpBitsClearLow
-
0000167C — _RtlpBitsClearHigh
-
0000177C — _RtlpBitsClearTotal
-
00001894 — ??_C@_13HMCP@?$AA?2?$AA?$AA@
(L"\\")
-
00001898 — ??_C@_1CA@NKCK@?$AA?$CK?$AA?$CK?$AA?$CK?$AA?5?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$AA@
(L"*** Unknown ***")
-
000018B8 — _RtlpRegistryPaths
-
000018D0 — _GuidFormat
-
00001938 — ??_C@_1BM@CAEM@?$AAU?$AAs?$AAe?$AAr?$AA?2?$AA?4?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
(L"User\\.Default")
-
00001954 — ??_C@_1CG@BHB@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAM?$AAa?$AAp?$AA?$AA@
(L"Hardware\\DeviceMap")
-
0000197C — ??_C@_1FE@EPLF@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW@
(L"Software\\Microsoft\\W"...)
-
000019D0 — ??_C@_1EC@JGOB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@
(L"System\\CurrentContro"...)
-
00001A14 — ??_C@_1EE@KIMN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@
(L"System\\CurrentContro"...)
-
00001A58 — _RtlpIntegerChars
-
00001A68 — _LeapYearDayToMonth
-
00001BD8 — _NormalYearDayToMonth
-
00001D48 — _LeapYearDaysPrecedingMonth
-
00001D64 — _NormalYearDaysPrecedingMonth
-
00001D80 — _SecondsToStartOf1970
-
00001D88 — _SecondsToStartOf1980
-
00001D90 — _Magic10000
-
00001D98 — _Magic10000000
-
00001DA0 — _Magic86400000
-
00001DA8 — ??_C@_1BA@NEMI@?$AA?$CF?$AAw?$AAZ?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
(L"%wZ\\%wZ")
-
00001DB8 — ??_C@_1BI@KHDI@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAl?$AAu?$AA?$AA@
(L"\\Driver\\%lu")
-
00001DD0 — ??_C@_1BI@CICJ@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
(L"\\Driver\\%wZ")
-
00001DE8 — ??_C@_13DOBH@?$AA?4?$AA?$AA@
(L".")
-
00001DEC — _Mmp64BitPhysicalAddress
-
00001DF0 — _Mm64BitPhysicalAddress
-
00001DF4 — _IoFileObjectType
-
00001DF8 — ??_C@_0BI@DHNG@?8IoDriver?5object?5?$CFs?5?$CFx?6?$AA@
("\'IoDriver object %s %x\n")
-
00001E10 — ??_C@_0BI@DJND@?8IoDevice?5object?5?$CFs?5?$CFx?6?$AA@
("\'IoDevice object %s %x\n")
-
00001E28 — _IopFileMapping
-
00001E38 — ??_C@_1BA@FOJN@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
(L"\\Device")
-
00001E48 — ??_C@_1BA@BBDO@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
(L"\\Driver")
-
00001E58 — ??_C@_1BI@EDCJ@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
(L"\\DosDevices")
-
00001E70 — ??_C@_19GDCN@?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
(L"File")
-
00001E7C — ??_C@_1O@IMKM@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
(L"Driver")
-
00001E8C — ??_C@_1O@MDAP@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
(L"Device")
-
00001E9C — ??_C@_1BA@PFGJ@?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
(L"Adapter")
-
00001EAC — ??_C@_0CE@KOCD@?8Multiple?5irp?5complete?5requests?5@
("\'Multiple irp complete requests "...)
-
00001ED0 — ??_C@_1BK@PKEN@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAU?$AA_?$AA?$CF?$AAx?$AA?$AA@
(L"\\Device\\U_%x")
-
00001EEC — ??_C@_1BI@LELB@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
(L"\\Device\\%wZ")
-
00001F04 — ??_C@_1BA@HANO@?$AA?2?$AA?2?$AA?4?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
(L"\\\\.\\%wZ")
-
00001F14 — ??_C@_19JGFB@?$AA?2?$AA?2?$AA?4?$AA?2?$AA?$AA@
(L"\\\\.\\")
-
00001F20 — ??_C@_1BK@LPBE@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AA?$AA@
(L"\\DosDevices\\")
-
00001F3C — ??_C@_1CM@JPOA@?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CD?$AA?$CF?$AAw?$AAZ?$AA?$CF?$AAs?$AA?$CF?$AAw@
(L"\\%s\\%08x%08x#%wZ%s%w")
-
00001F68 — ??_C@_1BG@BJJK@?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
(L"DosDevices")
-
00001F80 — ??_C@_15LEKJ@?$AA?2?$AA?4?$AA?$AA@
(L"\\.")
-
00001F88 — ??_C@_11A@?$AA?$AA@
(L"")
-
00001F8C — ??_C@_1BM@PFBL@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$CF?$AAs?$AA?$AA@
(L"\\DosDevices%s")
-
00001FA8 — ??_C@_1BC@KIOB@?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?$AA@
(L"%08x%08x")
-
00001FBC — ??_C@_1BG@PKBH@?$AA?$CF?$AAw?$AAZ?$AA?$CD?$AA?$CF?$AAw?$AAZ?$AA?$CF?$AAw?$AAZ?$AA?$AA@
(L"%wZ#%wZ%wZ")
-
00001FD4 — ??_C@_1DM@GGCI@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2@
(L"\\SystemRoot\\System32")
-
00002010 — ??_C@_1BK@CENL@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AA?$AA@
(L"\\SystemRoot\\")
-
0000202C — ??_C@_19BBIN@?$AA?4?$AAS?$AAY?$AAS?$AA?$AA@
(L".SYS")
-
00002038 — ??_C@_1BG@PJKH@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
(L"ObjectName")
-
00002050 — ??_C@_15HGOB@?$AA?$CF?$AAS?$AA?$AA@
(L"%S")
-
00002058 — ??_C@_1BG@BNKI@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAS?$AA?$AA@
(L"\\Driver\\%S")
-
00002070 — ??_C@_0L@HBI@String?3?$CFS?6?$AA@
("String:%S\n")
-
0000207C — ??_C@_0BE@NFBF@NumberOfStrings?3?$CFx?6?$AA@
("NumberOfStrings:%x\n")
-
00002090 — ??_C@_0BC@JGKM@IoControlCode?3?$CFx?6?$AA@
("IoControlCode:%x\n")
-
000020A4 — ??_C@_0BD@JIFC@SequenceNumber?3?$CFx?6?$AA@
("SequenceNumber:%x\n")
-
000020B8 — ??_C@_0BA@GGNH@FinalStatus?3?$CFd?6?$AA@
("FinalStatus:%d\n")
-
000020C8 — ??_C@_0BF@BIHM@UniqueErrorValue?3?$CFd?6?$AA@
("UniqueErrorValue:%d\n")
-
000020E0 — ??_C@_0O@HIIA@ErrorCode?3?$CFx?6?$AA@
("ErrorCode:%x\n")
-
000020F0 — ??_C@_0BC@CGBB@EventCategory?3?$CFx?6?$AA@
("EventCategory:%x\n")
-
00002104 — ??_C@_0BB@IENP@DumpDataSize?3?$CFx?6?$AA@
("DumpDataSize:%x\n")
-
00002118 — ??_C@_0BA@EPKC@Retry?5Count?3?$CFx?6?$AA@
("Retry Count:%x\n")
-
00002128 — ??_C@_0BI@OMHI@Major?5Function?5Code?3?$CFx?6?$AA@
("Major Function Code:%x\n")
-
00002140 — ??_C@_0BA@DBMH@Driver?5Name?3?$CFS?6?$AA@
("Driver Name:%S\n")
-
00002150 — ??_C@_0CC@KNBK@?6IO?5Error?5Log?5Packet?5Information@
("\nIO Error Log Packet Information"...)
-
00002174 — ??_C@_13A@?$AA?$AA?$AA?$AA@
(L"\0")
-
00002178 — ??_C@_1BK@OIJB@?$AA?2?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAT?$AAy?$AAp?$AAe?$AAs?$AA?$AA@
(L"\\ObjectTypes")
-
00002194 — ??_C@_1BE@PPB@?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
(L"Directory")
-
000021A8 — ??_C@_0BN@FKCK@?8Symbolic?5link?5object?5?$CFs?5?$CFx?6?$AA@
("\'Symbolic link object %s %x\n")
-
000021C8 — ??_C@_0BG@NGKK@?8Directory?5object?5?$CFs?6?$AA@
("\'Directory object %s\n")
-
000021E0 — ??_C@_0BP@OJA@?8Dumping?5the?5object?5directory?6?$AA@
("\'Dumping the object directory\n")
-
00002200 — ??_C@_0BN@DCAD@?8Dumping?5the?5root?5directory?6?$AA@
("\'Dumping the root directory\n")
-
00002220 — _FSysErr
-
00002230 — _FSysErrVerbose
-
00002240 — _FErrorCode
-
00002250 — _FCaption
-
00002274 — ??_C@_0BI@NKKE@?$CFs?5called?5by?5?$CFx?5?6?$CFs?5?$CFx?6?$AA@
("%s called by %x \n%s %x\n")
-
0000228C — ??_C@_0DB@NGP@?$CFs?5called?5by?5?$CFx?5?6?$CFs?5?$CFx?5?6Paramete@
("%s called by %x \n%s %x \nParamete"...)
-
000022C0 — _NestCount
-
000022C4 — _MiSectionMapping
-
000022D4 — ??_C@_1CO@EMLF@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAP?$AAh?$AAy?$AAs?$AAi?$AAc?$AAa?$AAl?$AAM?$AAe?$AAm?$AAo@
(L"\\Device\\PhysicalMemo")
-
00002304 — ??_C@_1BA@GGKP@?$AAS?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
(L"Section")
-
00002314 — _MMCONTROL
-
00002318 — _PspThreadMapping
-
00002328 — ??_C@_1O@BEJI@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AA?$AA@
(L"Thread")
-
0000233C — ___nullstring
-
00002340 — ___wnullstring
-
00002344 — ??_C@_1O@POHA@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA@
(L"(null)\0\0\0\0\0\0\0")
-
00002354 — ??_C@_06ONKE@?$CInull?$CJ?$AA@
("(null)")
-
00002360 — __pctype
-
00002364 — __pwctype
-
00002368 — __ctype
-
0000256C — ___mb_cur_max
-
00002570 — __decimal_point
-
00002574 — __decimal_point_length
-
00002578 — __fltused
-
0000257C — __ldused
-
00002580 — ___fastflag
-
00002588 — __cfltcvt_tab
-
000025A0 — __sigintoff
-
000025A8 — _GUID_HWPROFILE_QUERY_CHANGE
-
000025B8 — _GUID_HWPROFILE_CHANGE_CANCELLED
-
000025C8 — _GUID_HWPROFILE_CHANGE_COMPLETE
-
000025D8 — _GUID_DEVICE_INTERFACE_ARRIVAL
-
000025E8 — _GUID_DEVICE_INTERFACE_REMOVAL
-
000025F8 — _GUID_TARGET_DEVICE_QUERY_REMOVE
-
00002608 — _GUID_TARGET_DEVICE_REMOVE_CANCELLED
-
00002618 — _GUID_TARGET_DEVICE_REMOVE_COMPLETE
-
00002628 — _GUID_BUS_INTERFACE_STANDARD
-
00002638 — _GUID_PCI_BUS_INTERFACE_STANDARD
-
00002648 — _GUID_ARBITER_INTERFACE_STANDARD
-
00002658 — _GUID_TRANSLATOR_INTERFACE_STANDARD
-
00002668 — _GUID_ACPI_INTERFACE_STANDARD
-
00002678 — _GUID_BUS_TYPE_PCMCIA
-
00002688 — _GUID_BUS_TYPE_PCI
-
000026D4 — _GUID_DEVICE_BATTERY
-
000026E4 — _GUID_DEVICE_SYS_BUTTON
-
000026F4 — _GUID_DEVICE_LID
-
00002704 — _GUID_DEVICE_THERMAL_ZONE
-
00002714 — _GUID_CLASS_INPUT
-
000028A8 — ___lookuptable
-
00002904 — _FreeDriverInitialization@4
-
0000292A — _MapWin95Err@8
-
00002964 — _MmUnlockPages@4
-
00002A7A — _MiDeferredUnLock@20
-
00002ABA — _MmUnmapLockedPages@8
-
00002B7B — _MiDeferredUnMap@20
-
00002B9A — _MmMapLockedPages@8
-
00002D0C — _ntkIsSwapping@0
-
00002D22 — _MmSizeOfMdl@8
-
00002D4C — _MmCreateMdl@12
-
00002DBC — _MmAllocateContiguousMemory@12
-
00002DE4 — _MmBuildMdlForNonPagedPool@4
-
00002E45 — _MmProbeAndLockPages@12
-
00002F49 — _MmProbeAndLockProcessPages@16
-
00002FED — _MiLockProcessPages@20
-
00003012 — _MiLockPages@20
-
0000303B — _MmMapIoSpace@16
-
00003232 — _MmUnmapIoSpace@8
-
00003280 — _MiReserveSystemPtes@20
-
00003343 — _MiInitializeSystemPtes@12
-
000033C0 — _MiReleaseSystemPtes@12
-
00003400 — _ThreadSwitchNotification@4
-
0000346D — _KeGetCurrentThread@0
-
00003473 — _IoGetCurrentProcess@0
-
0000347C — _memmove
-
000034BF — _InitializeRegistry@0
-
000034E1 — _ProbeForRead@12
-
00003512 — _ProbeForWrite@12
-
00003526 — _DeviceIoControl@12
-
000035C8 — _IoUnregisterPlugPlayNotification@4
-
000035F8 — _IoReportTargetDeviceChange@8
-
00003600 — _IopInitializePlugPlayNotification@0
-
00003662 — _IopReferenceNotify@4
-
0000366D — _IopDereferenceNotify@4
-
0000368F — _IopNotifyHwProfileChange@4
-
0000370C — _IopNotifyDeviceClassChange@12
-
000037D3 — _IoRegisterPlugPlayNotification@28
-
00003996 — _NtGetDevnodeFromFileHandle@8
-
00003A44 — _PopApplyAttributeState@8
-
00003ACC — _IopCheckDeviceName@4
-
00003ACC — _PopAttribNop@4
-
00003ACC — _HalPutDmaAdapter@4
-
00003ACF — _PopSystemRequiredSet@4
-
00003AE2 — _PopUserPresentSet@4
-
00003B14 — _ConvertToCMPowerState@12
-
00003B5C — _PoQueryPowerSequence@0
-
00003B60 — @_PopInternalError@4
-
00003B72 — _PopSetCapability@4
-
00003B94 — _PopOpenPowerKey@4
-
00003C25 — _PopCloseSystemHandle@4
-
00003C34 — _NtSetThreadExecutionState@8
-
00003D20 — _NtRequestWakeupLatency@4
-
00003D6F — _NtInitiatePowerAction@16
-
00003D77 — _NtSetSystemPowerState@12
-
00003D7F — _CancelWarningDialog
-
00003DAC — _PopMessageBoxCompletion
-
00003DC7 — _PopDisplayWarningDialog
-
00003E7A — _PopSetPowerAction@16
-
000040DD — _PopCompleteAction@8
-
00004104 — _PopPromoteActionFlag@20
-
00004145 — _PopPolicyWorkerAction@0
-
000041F8 — _PopPolicyWorkerActionPromote@0
-
0000426C — _PopShutdown
-
0000429F — _PopIssueActionRequest@16
-
00004378 — _PopRemoveUserEventsFromQueue@0
-
00004391 — _PopSuspendTimeOut
-
000043AC — _PopCompositeBatteryDeviceHandler@16
-
00004848 — _PopComputeCBTime@0
-
00004853 — _PopResetCBTriggers@4
-
0000487D — _PopCurrentPowerState@4
-
000049EA — _NtPowerInformation@20
-
00004E16 — _PopApplyAdminPolicy@12
-
00004EEA — _PopApplyPolicy@16
-
0000505F — _PopVerifyPowerPolicy@12
-
00005231 — _PopVerifyThrottle@8
-
00005292 — _PopVerifyPowerActionPolicy@4
-
00005356 — _PopVerifySystemPowerState@4
-
00005405 — _PopResetCurrentPolicies@0
-
00005561 — _PopNotifyPolicyDevice@8
-
0000559B — _PopConnectToPolicyDevice@8
-
000057D0 — _PoInitSystem@4
-
00005BB0 — _PopDefaultPolicy@4
-
00005C19 — _PoInitDriverServices@4
-
00005CBE — _PopRegisterForDeviceNotification@8
-
00005CE3 — _PoSetPowerState@12
-
00005CEA — _PopAcquirePolicyLock@0
-
00005D06 — _PopReleasePolicyLock@4
-
00005D3A — _PopGetPolicyWorker@4
-
00005D5E — _PopCompletePolicyIrp@12
-
00005DC9 — _PopPolicyWorkerThread@4
-
00005E6B — _PopPolicyWorkerMain@0
-
00005EAC — _PopDoNotificationWork
-
00005EF5 — _PopSetNotificationWork@4
-
00005F15 — __isctype
-
00005F15 — _PopPolicyWorkerNotify@0
-
00005F18 — _PopInitSIdle@0
-
00005FEC — _PopPolicySystemIdle@0
-
0000604D — _PoSystemIdleWorker@4
-
00006054 — _PopSystemButtonHandler@16
-
00006141 — _PopTriggerSwitch@12
-
00006195 — _PopResetSwitchTriggers@0
-
000061AC — _PopThermalDeviceHandler@16
-
000061AC — _PopThermalZoneDpc@16
-
000061AF — _ExAllocatePoolWithTag@12
-
000061E0 — _ExpAllocatePool@12
-
00006217 — _ExpFreePool@4
-
00006225 — _ExFreePool@4
-
00006231 — _ExAllocatePool@8
-
00006260 — _ExInitializeResourceLite@4
-
00006292 — _ExReinitializeResourceLite@4
-
0000630E — @ExpAcquireResourceExclusiveLite@8
-
0000638A — _ExAcquireResourceExclusiveLite@8
-
000063E3 — _ExTryToAcquireResourceExclusiveLite@4
-
0000642B — _ExAcquireResourceSharedLite@8
-
00006536 — @ExReleaseResourceLite@4
-
00006620 — _ExDeleteResourceLite@4
-
00006675 — _ExGetExclusiveWaiterCount@4
-
00006680 — _ExGetSharedWaiterCount@4
-
0000668B — _ExIsResourceAcquiredExclusiveLite@4
-
000066B7 — _ExIsResourceAcquiredSharedLite@4
-
0000670B — _ExpWaitForResource@8
-
0000684F — _ExpFindCurrentThread@8
-
00006939 — @ExAcquireFastMutexUnsafe@4
-
0000695A — @ExReleaseFastMutexUnsafe@4
-
00006975 — @ExAcquireFastMutex@4
-
00006992 — @ExReleaseFastMutex@4
-
000069A4 — _ExSystemExceptionFilter@0
-
000069B0 — _ExGetPreviousMode@0
-
000069B6 — _ExShutDown@0
-
000069BB — _ExQueueWorkItem@8
-
00006A3E — _Query_Thread_Priority@0
-
00006A50 — _KefYield@0
-
00006A6F — _ExRegisterCallback@12
-
00006B04 — _ExUnregisterCallback@4
-
00006B87 — _ExNotifyCallback@12
-
00006C20 — _ExDeleteNPagedLookasideList@4
-
00006C64 — _ExDeletePagedLookasideList@4
-
00006CA8 — _ExAllocateFromPagedLookasideList@4
-
00006D1E — _ExAllocateFromNPagedLookasideList@4
-
00006D47 — _ExFreeToPagedLookasideList@8
-
00006DB3 — _ExpDummyAllocate@12
-
00006DB8 — _HalAllocateAdapterChannel@16
-
00006EC7 — _IoMapTransfer@24
-
00006F34 — _HalpMapTransferHelper@20
-
00006F75 — _HalpMapTransfer@24
-
000072B8 — _IoFlushAdapterBuffers@24
-
000073EC — _HalReadDmaCounter@4
-
000074D6 — _HalGetDmaAlignment@4
-
000074DC — _HalpAllocPhysicalMemory@12
-
0000752E — _HalpCopyBufferMap@20
-
00007589 — _HalFlushCommonBuffer@20
-
0000758E — _HalFreeCommonBuffer@24
-
0000759A — _IoFreeAdapterChannel@4
-
00007692 — _IoFreeMapRegisters@12
-
000077C4 — _HalGetInterruptVector@24
-
000077F0 — _HalTranslateBusAddress@24
-
00007806 — _HalpGetCmosData@16
-
00007883 — _HalGetBusData@20
-
000078CF — _HalGetBusDataByOffset@24
-
000078F7 — _RtlSingleByteSet
-
000078FF — _RtlUpcaseUnicodeChar@4
-
0000791D — _RtlpUpcaseUnicodeChar@4
-
0000793B — _RtlAnsiCharToUnicodeChar@4
-
00007983 — _RtlAllocateString@4
-
00007996 — _RtlInitAnsiString@8
-
000079C4 — _RtlInitUnicodeString@8
-
000079F6 — _RtlAssert@16
-
00007A44 — _RtlEqualUnicodeString@12
-
00007ADD — _RtlCopyUnicodeString@8
-
00007B2F — _RtlAppendUnicodeToString@8
-
00007BA0 — _RtlAppendUnicodeStringToString@8
-
00007C04 — _RtlxUnicodeStringToAnsiSize@4
-
00007C22 — _RtlxAnsiStringToUnicodeSize@4
-
00007C43 — _RtlFreeAnsiString@4
-
00007C43 — _RtlFreeUnicodeString@4
-
00007C58 — _RtlCompareUnicodeString@12
-
00007D1F — _RtlUnicodeToMultiByteN@20
-
00007D47 — _RtlMultiByteToUnicodeN@20
-
00007D6C — _RtlUpcaseUnicodeToMultiByteN@20
-
00007DBE — _RtlUnicodeToMultiByteSize@12
-
00007DE6 — _RtlUnicodeStringToAnsiSize@4
-
00007E08 — _RtlAllocateSprintf
-
00007E21 — _RtlAllocateWsprintf
-
00007E3A — _RtlpAllocateSprintf@20
-
00007ECC — _RtlMapGenericMask@8
-
00007F20 — _RtlSetAllBits@4
-
00007F40 — _RtlSetBits@12
-
00007FDA — _RtlFindClearBits@12
-
0000822D — _RtlFindClearBitsAndSet@12
-
00008259 — _RtlClearBits@12
-
000082F4 — _RtlDeleteRegistryValue@12
-
00008338 — _RtlIntegerToChar@16
-
00008429 — _RtlUnicodeStringToInteger@12
-
0000857D — _RtlIntegerToUnicodeString@12
-
000085C4 — _RtlMoveMemory@12
-
000085DB — _RtlCopyMemory@12
-
000085F2 — _RtlZeroMemory@8
-
00008608 — _ElapsedDaysToYears@4
-
00008678 — _DaysAndFractionToTime@12
-
000086B0 — _RtlTimeToTimeFields@8
-
0000883E — _RtlTimeFieldsToTime@8
-
000089D6 — _IopAssociationLookup@12
-
00008A0B — _IopAssociationInsert@8
-
00008A27 — _IoAssociationAllocate@16
-
00008B0D — _IoAssociationFind@16
-
00008BCF — _IoGetDriverObjectExtension@8
-
00008BF2 — _NTKERNProcessISR
-
00008C1A — _NtKernGetVPICDHandleFromInterruptObj
-
00008C37 — _IopDecrementDeviceObjectRef@8
-
00008C86 — _IopInsertRemoveDevice@12
-
00008CD8 — _IopCompleteUnloadOrDelete@8
-
00008E1F — _IopCompleteRequest@20
-
0000909B — _IopDisassociateThreadIrp@0
-
000090F9 — _IopFreeMdl@4
-
00009117 — _IopDropIrp@8
-
0000917A — _IopInvalidDeviceRequest@8
-
00009194 — _IopExceptionFilter@8
-
000091BC — _IopExceptionCleanup@16
-
00009228 — _IopFreeIrpAndMdls@4
-
0000924E — _IopTimerDispatch@16
-
000092CB — @IofCompleteRequest@8
-
0000952A — _IoAllocateErrorLogEntry@8
-
0000963B — _IoWriteErrorLogEntry@4
-
000096B2 — _IoCreateSymbolicLink@8
-
0000970B — _IopRemoveTimerFromTimerList@4
-
00009734 — _IoDeleteDevice@4
-
000097A3 — _IoDetachDevice@4
-
000097EF — _IoCompleteRequest@8
-
000097FF — _IoInitializeIrp@12
-
00009846 — _RtlFreeString@4
-
00009846 — _MmFreeContiguousMemory@4
-
00009846 — _IoFreeIrp@4
-
00009852 — _IoAllocateIrp@8
-
0000988B — _IoGetAttachedDevice@4
-
0000989D — _IoGetAttachedDeviceReference@4
-
000098C0 — _IoGetRelatedDeviceObject@4
-
000098F4 — @IofCallDriver@8
-
00009912 — _IoCancelIrp@4
-
0000996E — _IoAllocateMdl@20
-
00009A15 — _IoFreeMdl@4
-
00009A33 — _IopSetAttachedDevicePointer@8
-
00009A6E — _IoAttachDeviceToDeviceStack@8
-
00009AB7 — _IoAttachDeviceByPointer@8
-
00009B07 — _IoAcquireCancelSpinLock@4
-
00009B1A — _IoReleaseCancelSpinLock@4
-
00009B2B — _IoAllocateAdapterChannel@20
-
00009B56 — _IoCallDriver@8
-
00009B66 — _IoStartTimer@4
-
00009B8F — _IoStopTimer@4
-
00009BB7 — _IoBuildSynchronousFsdRequest@28
-
00009C14 — _IoBuildAsynchronousFsdRequest@24
-
00009CFB — _IoStartNextPacket@8
-
00009D56 — _IoStartNextPacketByKey@12
-
00009DB4 — _IoStartPacket@16
-
00009E5A — _IopAppendWorkHandleList@12
-
00009ECC — _IoBuildPartialMdl@16
-
00009F9E — _IoGetCurrentIrpStackLocation@4
-
00009FA8 — _NtLoadDriver@4
-
00009FF6 — _IopReferenceAttachmentChain@4
-
0000A00D — _IopDereferenceAttachmentChain@4
-
0000A029 — _IopDeleteFile@4
-
0000A1AF — _IopCheckDeviceAndDriver@16
-
0000A206 — _IopDereferenceVpbAndFree@4
-
0000A22E — _IoReportResourceUsage@36
-
0000A23A — _LogPrint
-
0000A267 — _IopErrorLogDpc@16
-
0000A2A1 — _IopErrorLogGetEntry@0
-
0000A2F2 — _ObpAllocateObjectCreateInfoBuffer@0
-
0000A301 — _ObpAllocateObjectNameBuffer@8
-
0000A32A — @ObpFreeObjectCreateInfoBuffer@4
-
0000A331 — @ObpFreeObjectNameBuffer@4
-
0000A33A — _CloseHandle@8
-
0000A3B4 — _NtClose@4
-
0000A3C2 — _ObpInsertDirectoryEntry@8
-
0000A42F — _ObpDeleteDirectoryEntry@4
-
0000A466 — _ObpIncrementHandleCount@24
-
0000A4C0 — _ObpIncrementUnnamedHandleCount@16
-
0000A530 — _ObpDecrementHandleCount@12
-
0000A580 — @IsWin32Object@4
-
0000A5D7 — _GetWin32ObjectType@4
-
0000A603 — @ObfReferenceObject@4
-
0000A628 — _ObpProcessRemoveObjectQueue@4
-
0000A699 — @ObfDereferenceObject@4
-
0000A74F — _ObReferenceObjectByHandle@24
-
0000A814 — _ObReferenceObjectByPointer@16
-
0000A822 — _ObDereferenceObject@4
-
0000A82E — _ObGetObjectName@4
-
0000A857 — _KeInitializeApc@32
-
0000A8A9 — _KiProcessWin95APC@4
-
0000A94B — _KeInsertQueueApc@16
-
0000A9F5 — _KeRemoveQueueApc@4
-
0000AA13 — _KeBugCheck@4
-
0000AA5B — _KeBugCheckEx@20
-
0000AAB5 — _KeInitializeSpinLock@4
-
0000AABF — _KeInitializeDeviceQueue@4
-
0000AADD — _KeInsertDeviceQueue@8
-
0000AB1F — _KeRemoveDeviceQueue@4
-
0000AB5F — _KeRemoveEntryDeviceQueue@8
-
0000AB9B — _KeSynchronizeExecution@12
-
0000ABC4 — _KeInsertByKeyDeviceQueue@12
-
0000AC0D — _KeRemoveByKeyDeviceQueue@8
-
0000AC69 — _KeInitializeEvent@12
-
0000AC86 — _KeSetEvent@12
-
0000ACA9 — _KeClearEvent@4
-
0000ACB6 — _KeResetEvent@4
-
0000ACC3 — _KePulseEvent@12
-
0000ACFD — _KeReadStateEvent@4
-
0000AD07 — @KepEnterNTKern@4
-
0000AD19 — @KepLeaveNTKern@4
-
0000AD24 — _KeEnterCriticalRegion@0
-
0000AD47 — _KeLeaveCriticalRegion@0
-
0000AD66 — _KeInitializeMutex@8
-
0000AD73 — _KeReleaseMutex@8
-
0000ADA1 — _KeInitializeSemaphore@12
-
0000ADB8 — _KeReadStateSemaphore@4
-
0000ADD6 — _KeReleaseSemaphore@16
-
0000AE4C — @KfAcquireSpinLock@4
-
0000AE53 — @KfReleaseSpinLock@8
-
0000AE5A — __amsg_exit
-
0000AE5A — @KefReleaseSpinLockFromDpcLevel@4
-
0000AE5A — _NullPrint
-
0000AE5A — _PopApplyThermalThrottle@0
-
0000AE5A — @KefAcquireSpinLockAtDpcLevel@4
-
0000AE5B — _KeWaitForSingleObject@20
-
0000AE8E — _KeDelayExecutionThread@12
-
0000AEF6 — _KeWaitForMultipleObjects@32
-
0000AF44 — _KeSetPhysicalCacheTypeRange@16
-
0000AF81 — _MiSectionDelete@4
-
0000AFAD — _MmInitSystem@4
-
0000AFC0 — _MmQuerySystemSize@0
-
0000AFC4 — _MiProcessTerminated@4
-
0000AFF3 — @PiWinCreateThreadWrapper@8
-
0000B00D — _sprintf
-
0000B066 — _vsprintf
-
0000B0C0 — __global_unwind2
-
0000B102 — __local_unwind2
-
0000B15C — __abnormal_termination
-
0000B188 — __except_handler2
-
0000B240 — __except_handler3
-
0000B2EE — __seh_longjmp_unwind@4
-
0000B369 — __itoa
-
0000B393 — __snprintf
-
0000B3EB — __snwprintf
-
0000B464 — __stricmp
-
0000B464 — __strcmpi
-
0000B4A8 — __strlwr
-
0000B4CC — __strnicmp
-
0000B524 — __strnset
-
0000B550 — __strrev
-
0000B580 — __strset
-
0000B5A0 — __strupr
-
0000B5C1 — __vsnprintf
-
0000B618 — __wcsicmp
-
0000B661 — __wcslwr
-
0000B68D — __wcsnicmp
-
0000B6FA — __wcsnset
-
0000B728 — __wcsrev
-
0000B75D — __wcsupr
-
0000B789 — _atol
-
0000B820 — _atoi
-
0000B82D — _isupper
-
0000B859 — _islower
-
0000B885 — _isdigit
-
0000B8B1 — _isxdigit
-
0000B8E2 — _isspace
-
0000B90E — _isprint
-
0000B93F — _mbstowcs
-
0000B9C3 — _mbtowc
-
0000BA3C — _memchr
-
0000BA5C — _qsort
-
0000BC2C — _srand
-
0000BC36 — _rand
-
0000BC54 — _strcat
-
0000BC58 — _strcpy
-
0000BC94 — _strchr
-
0000BCBC — _strcmp
-
0000BCE0 — _strlen
-
0000BCF8 — _strncat
-
0000BD2C — _strncmp
-
0000BD64 — _strncpy
-
0000BD88 — _strrchr
-
0000BDB0 — _strspn
-
0000BDEC — _strstr
-
0000BE4A — _swprintf
-
0000BEC1 — _tolower
-
0000BEF8 — _toupper
-
0000BF4D — _towlower
-
0000BF6A — _towupper
-
0000BF74 — _wcscat
-
0000BFA5 — _wcscpy
-
0000BFC7 — _wcschr
-
0000BFF3 — _wcscmp
-
0000C030 — _wcscspn
-
0000C06F — _wcslen
-
0000C086 — _wcsncat
-
0000C0CA — _wcsncmp
-
0000C102 — _wcsncpy
-
0000C145 — _wcsrchr
-
0000C176 — _wcsspn
-
0000C1B5 — _wcsstr
-
0000C1FC — _wcstombs
-
0000C292 — _wctomb
-
0000C2D8 — _memcmp
-
0000C2F7 — __vsnwprintf
-
0000C36E — __flsbuf
-
0000C37C — __output
-
0000CC0B — __woutput
-
0000D44E — _iswctype
-
0000D479 — __mbstrlen
-
0000D4C9 — _mblen
-
0000D4FE — _fputwc
-
0000D52E — __fptrap
-
0000D539 — __flswbuf
-
0000D548 — __alldiv
-
0000D5E4 — __allmul
-
0000D618 — __allrem
-
0000D6B8 — __allshl
-
0000D6C8 — __allshr
-
0000D6D8 — __aulldiv
-
0000D738 — __aullrem
-
0000D7A4 — __aullshr
-
0000D7B4 — __NTKERN_Get_Version
-
0000D7B8 — __NtKernCreateFile
-
0000D7BC — __NtKernClose
-
0000D7C0 — __NtKernReadFile
-
0000D7C4 — __NtKernWriteFile
-
0000D7C8 — __NtKernDeviceIoControl
-
0000D7CC — __NtKernGetWorkerThread
-
0000D7D0 — __NtKernLoadDriver
-
0000D7D4 — __NtKernQueueWorkItem
-
0000D7D8 — __NtKernPhysicalDeviceObjectToDevNode
-
0000D7DC — __NtKernSetPhysicalCacheTypeRange
-
0000D7E0 — __NtKernWin9XLoadDriver
-
0000D7E4 — __NtKernCancelIoFile
-
0000D7E8 — __NtKernGetVPICDHandleFromInterruptObj
-
0000D7EC — __NtKernInternalDeviceIoControl
-
0000D7F0 — NTKERN_DDB
-
0000D840 — KdComPortInUse
-
0000D844 — KdDebuggerNotPresent
-
0000D848 — _MachineInfo
-
0000D84C — TimerLoopsPer65536uSec
-
0000D8A8 — _SysVMStack
-
0000D8A8 — _SysVMStackLimit
-
0000D8B0 — _DebugInit@4
-
0000D8C9 — _DebugPrint@8
-
0000D908 — _DbgPrint
-
0000D91B — _DbgBreakPoint@0
-
0000D91D — _DbgOutDebugString@4
-
0000D92F — _DbgInDebugChar@0
-
0000D938 — _READ_PORT_UCHAR@4
-
0000D956 — _READ_PORT_USHORT@4
-
0000D975 — _READ_PORT_ULONG@4
-
0000D993 — _WRITE_PORT_UCHAR@8
-
0000D9B5 — _WRITE_PORT_USHORT@8
-
0000D9D8 — _WRITE_PORT_ULONG@8
-
0000D9FA — _READ_REGISTER_UCHAR@4
-
0000DA19 — _READ_REGISTER_USHORT@4
-
0000DA39 — _READ_REGISTER_ULONG@4
-
0000DA58 — _WRITE_REGISTER_UCHAR@8
-
0000DA7B — _WRITE_REGISTER_USHORT@8
-
0000DA9F — _WRITE_REGISTER_ULONG@8
-
0000DAC2 — _READ_REGISTER_BUFFER_UCHAR@12
-
0000DAD7 — _READ_REGISTER_BUFFER_ULONG@12
-
0000DAEC — _READ_REGISTER_BUFFER_USHORT@12
-
0000DB02 — _WRITE_REGISTER_BUFFER_UCHAR@12
-
0000DB17 — _WRITE_REGISTER_BUFFER_ULONG@12
-
0000DB2C — _WRITE_REGISTER_BUFFER_USHORT@12
-
0000DB42 — _READ_PORT_BUFFER_UCHAR@12
-
0000DB55 — _READ_PORT_BUFFER_ULONG@12
-
0000DB68 — _READ_PORT_BUFFER_USHORT@12
-
0000DB7C — _WRITE_PORT_BUFFER_UCHAR@12
-
0000DB8F — _WRITE_PORT_BUFFER_ULONG@12
-
0000DBA2 — _WRITE_PORT_BUFFER_USHORT@12
-
0000DBB6 — _KeStallExecutionProcessor@4
-
0000DBC8 — _IoCheckShareAccess@20
-
0000DBD1 — @KeFlushWriteBuffer@0
-
0000DBD8 — _KeSetImportanceDpc@8
-
0000DBE1 — _SeAssignSecurity@28
-
0000DBEA — _SeDeassignSecurity@4
-
0000DBF3 — _HalAssignSlotResources@32
-
0000DBFC — _HalSetBusDataByOffset@24
-
0000DC05 — NTKERN_Control
-
0000DCEC — _NTKERN_Get_Version
-
0000DCF3 — _KeGetCurrentIrql@0
-
0000DCFD — _KeQuerySystemTime@4
-
0000DD07 — @KfRaiseIrql@4
-
0000DD11 — @KfLowerIrql@4
-
0000DD1B — _RtlUnwind@16
-
0000DD25 — _RtlRaiseStatus@4
-
0000DD2F — _RtlRaiseException@4
-
0000DD39 — _KeInitializeDpc@12
-
0000DD43 — _ZwOpenSection@12
-
0000DD48 — _ZwMapViewOfSection@40
-
0000DD4D — _EnQueue@8
-
0000DD61 — _DeQueue@4
-
0000DD75 — _InQueue@8
-
0000DD93 — _RemQueue@8
-
0000DDB5 — _SetInterrupts@4
-
0000DDCB — _ExchangeUlong@8
-
0000DDD8 — _QueueUserApc
-
0000DDDE — _QueueKernelApc
-
0000DDE4 — _LinPageUnlock
-
0000DDEA — _KeInitializeTimer@4
-
0000DDF0 — _KeQueryPerformanceCounter@4
-
0000DDFA — _KeSetTimer@16
-
0000DE00 — _RunScheduledEvents@0
-
0000DE06 — _GetCurrentThread@0
-
0000DE11 — _Debug_Printf_Service
-
0000DE17 — _Win95PageReserve
-
0000DE1D — _Win95PageCommitPhys
-
0000DE23 — _Win95PageDecommit
-
0000DE29 — _Win95PageFree
-
0000DE2F — _Win95GetNulPageHandle
-
0000DE35 — _MmGetPhysicalAddress@4
-
0000DE6D — __LinPageLock
-
0000DE73 — _MiFillMdlPages@12
-
0000DEA8 — _CountBits@8
-
0000DEDF — _CodeLoaded@0
-
0000DEFA — NTKERN_Debug_Query
-
0000DF0B — _ExRaiseStatus@4
-
0000DF18 — @Exfi386InterlockedExchangeUlong@8
-
0000DF20 — @InterlockedDecrement@4
-
0000DF2B — @InterlockedIncrement@4
-
0000DF38 — @InterlockedExchange@8
-
0000DF3D — @InterlockedCompareExchange@12
-
0000DF47 — @ExfInterlockedAddUlong@12
-
0000DF51 — @ExqInterlockedAddUlong@8
-
0000DF51 — _ExqInterlockedAddUlong@0
-
0000DF76 — _ExqInterlockedAddUlong386@0
-
0000DF7E — _ExqInterlockedAddUlong486@0
-
0000DF85 — @ExInterlockedAddLargeStatistic@8
-
0000DF85 — _ExInterlockedAddLargeStatistic@0
-
0000DF8C — _ExfInterlockedInsertHeadList@0
-
0000DF8C — @ExfInterlockedInsertHeadList@12
-
0000DFA4 — @ExfInterlockedInsertTailList@12
-
0000DFA4 — _ExfInterlockedInsertTailList@0
-
0000DFBD — _ExfInterlockedRemoveHeadList@0
-
0000DFBD — @ExfInterlockedRemoveHeadList@8
-
0000DFD0 — @ExfInterlockedPushEntryList@12
-
0000DFDC — @ExfInterlockedPopEntryList@8
-
0000DFEA — @ExInterlockedPushEntrySList@12
-
0000E00B — @ExInterlockedPopEntrySList@8
-
0000E02C — @ExfInterlockedPopEntrySList@8
-
0000E03D — @ExfInterlockedPushEntrySList@12
-
0000E04C — @ExInterlockedCompareExchange64@16
-
0000E067 — @ExpInterlockedCompareExchange64@16
-
0000E09C — ThreadSwitchNotification_stub
-
0000E0A4 — _memcpy
-
0000E0C3 — _memset
-
0000E0EB — __disable
-
0000E0ED — __enable
-
0000E0EF — _KeQueryTimeIncrement@0
-
0000E0F8 — _InitializeWin32Mutex
-
0000E106 — _ReleaseWin32Mutex
-
0000E115 — _InitializeWin32Event
-
0000E138 — _SetWin32Event
-
0000E143 — _ClearWin32Event
-
0000E14E — _ResetWin32Event
-
0000E15D — _PulseWin32Event
-
0000E16C — _InitializeWin32Semaphore
-
0000E172 — _ReadWin32Semaphore
-
0000E189 — _SignalWin32Semaphore
-
0000E198 — _WaitForSingleObject
-
0000E1B2 — _BlockThreadEx
-
0000E1CA — _ScheduleRestrictedEvent@20
-
0000E20A — _BoostWithDecay@8
-
0000E21F — _ScheduleGlobalEvent@8
-
0000E23D — _KiProcessWin95APC_stub@0
-
0000E24A — _IoInvalidateDeviceRelations@8
-
0000E26B — _IoInvalidateDeviceState@4
-
0000E2A1 — _NTKERNToWin95IrpHandler@8
-
0000E358 — _RtlConvertLongToLargeInteger@4
-
0000E360 — _RtlConvertUlongToLargeInteger@4
-
0000E36C — _RtlCompareMemory@12
-
0000E3B0 — _IoUnregisterShutdownNotification@4
-
0000E406 — _MiMapViewOfPhysicalSection@36
-
0000E578 — _HeapAllocateEx@16
-
0000E57E — _HeapFreeEx@8
-
0000E584 — _LCODE__CONFIGMG_Reenumerate_DevNode
-
0000E58C — _LCODE__CONFIGMG_Call_At_Appy_Time
-
0000E594 — _LCODE__SHELL_QueryAppyTimeAvailable
-
0000E59C — _LCODE__SHELL_CallAtAppyTime
-
0000E5A4 — _LCODE_Call_Restricted_Event@24
-
0000E5D0 — _LCODE_VWIN32_SetWin32EventBoostPriority
-
0000E5D8 — _LCODE__AtEventTime
-
0000E5E0 — _LCODE_VPICD_Phys_EOI@4
-
0000E5F0 — _LCODE_VPICD_Physically_Unmask@4
-
0000E600 — _LCODE__VPICD_Set_Channel_Irql
-
0000E608 — _LCODE_VPICD_Virtualize_IRQ@4
-
0000E61C — _LCODE_VPICD_Force_Default_Behavior@4
-
0000E62C — _LCODE_SHELL_SYSMODAL_Message@16
-
0000E650 — _LCODE__Sprintf
-
0000E658 — _LCODE_VWIN32_ConvertNtTimeout@4
-
0000E660 — _LCODE_MTRRSetPhysicalCacheTypeRange@12
-
0000E678 — _LCODE__PageReserve
-
0000E680 — _LCODE__PageFree
Segment 2: _LMSG$1 @ 00006CE0
-
00000000 — @MSG_LAB
-
00000014 — @MSG_LDATA
Segment 3: _DB1CODE @ 00007B00
-
00000000 — _DbgPutLogStr@4
-
00000039 — _DbgGetString@8
-
000000BB — _DbgAddLogStr@4
-
00000149 — _DbgDumpTraceLog@0
-
0000019F — _DebugPrintP@8
-
00000213 — _DebugQuery@0
-
00000309 — _DebugInitP@4
-
00000360 — _DbgDumpThread@4
-
0000037F — _DbgDumpProcess@4
-
000003B0 — _DbgDumpThreadInfo@0
-
000003D4 — _DbgDumpSystemState@4
-
00000439 — _DbgDumpAction@4
-
000004AE — _DbgDumpPowerLevel@4
-
00000502 — _DbgDumpPolicy@4
-
000006F3 — _DbgDumpCapabilities@4
-
0000091A — _DbgDumpPowerInformation@0
-
00000988 — _IoDumpCheck@12
-
000009D0 — _DumpLevel@8
-
00000ABD — _OBDebugDump@0
-
00000AF0 — _NTKERNTraceLevel
-
00000AF4 — _ulInDebug
-
00000AF8 — ??_C@_0BA@JFJO@?$CF08x?5?$CF02d?5?$CF08x?5?$AA@
("%08x %02d %08x ")
-
00000B08 — ??_C@_0BD@FFDI@?6Enter?5selection?3?5?$AA@
("\nEnter selection: ")
-
00000B1C — ??_C@_09EMNI@?$CIX?$CJ?5Exit?6?$AA@
("(X) Exit\n")
-
00000B28 — ??_C@_0CC@BABL@?$CII?$CJ?5Dump?5pending?5Irp?5information@
("(I) Dump pending Irp information"...)
-
00000B4C — ??_C@_0CJ@IEIH@?$CIT?$CJ?5Dump?5thread?5and?5process?5info@
("(T) Dump thread and process info"...)
-
00000B78 — ??_C@_0BM@JBCN@?$CIP?$CJ?5Dump?5power?5information?6?$AA@
("(P) Dump power information\n")
-
00000B94 — ??_C@_0BN@LOAC@?$CIO?$CJ?5Dump?5object?5information?6?$AA@
("(O) Dump object information\n")
-
00000BB4 — ??_C@_0BE@JGGN@?$CID?$CJ?5Dump?5trace?5log?6?$AA@
("(D) Dump trace log\n")
-
00000BC8 — ??_C@_0BF@ILII@?6NTKERN?5Debug?5menu?6?6?$AA@
("\nNTKERN Debug menu\n\n")
-
00000BE0 — ??_C@_01BJG@?6?$AA@
("\n")
-
00000BE4 — ??_C@_08HGNB@INVALID?$CB?$AA@
("INVALID!")
-
00000BF0 — ??_C@_01FCOA@?5?$AA@
(" ")
-
00000BF4 — ??_C@_0BM@ELLE@?0?5Flags?3?5?$CFd?0?5EventCode?3?5?$CFd?6?$AA@
(", Flags: %d, EventCode: %d\n")
-
00000C10 — ??_C@_04COF@None?$AA@
("None")
-
00000C18 — ??_C@_08GKAE@Reserved?$AA@
("Reserved")
-
00000C24 — ??_C@_05BKOF@Sleep?$AA@
("Sleep")
-
00000C2C — ??_C@_0O@CLAD@ShutdownReset?$AA@
("ShutdownReset")
-
00000C3C — ??_C@_0M@EBLN@ShutdownOff?$AA@
("ShutdownOff")
-
00000C48 — ??_C@_09GOGM@?0?5Action?3?$AA@
(", Action:")
-
00000C54 — ??_C@_0DC@LGLE@?$CFs?0?5Spare?5?$CFd?5?$CFd?5?$CFd?0?5Battery?5leve@
("%s, Spare %d %d %d, Battery leve"...)
-
00000C88 — ??_C@_08FGLH@Disabled?$AA@
("Disabled")
-
00000C94 — ??_C@_07FFME@Enabled?$AA@
("Enabled")
-
00000C9C — ??_C@_0P@FCCG@OverThrottled?3?$AA@
("OverThrottled:")
-
00000CAC — ??_C@_0FA@PKOM@Optimize?3?5?$CFs?0?5Fan?5throttle?5toler@
("Optimize: %s, Fan throttle toler"...)
-
00000CFC — ??_C@_04BBGC@Life?$AA@
("Life")
-
00000D04 — ??_C@_05EFBF@Power?$AA@
("Power")
-
00000D0C — ??_C@_03KLCE@Off?$AA@
("Off")
-
00000D10 — ??_C@_02CCEO@On?$AA@
("On")
-
00000D14 — ??_C@_0BE@HGHB@Disk?5spin?5down?3?5?$CFd?6?$AA@
("Disk spin down: %d\n")
-
00000D28 — ??_C@_0CP@BILG@Video?5timeout?3?5?$CFd?0?5Video?5reserve@
("Video timeout: %d, Video reserve"...)
-
00000D58 — ??_C@_0BF@PFDJ@Discharge?5policy?5?$CFd?3?$AA@
("Discharge policy %d:")
-
00000D70 — ??_C@_0CD@JFOK@Broadcast?5capacity?5resolution?3?5?$CF@
("Broadcast capacity resolution: %"...)
-
00000D94 — ??_C@_0CA@KIK@Doze?5spare?3?5?$CFd?0?5S4?5timeout?3?5?$CFd?6?$AA@
("Doze spare: %d, S4 timeout: %d\n")
-
00000DB4 — ??_C@_0BD@CLIF@WinLogonFlags?3?5?$CFd?6?$AA@
("WinLogonFlags: %d\n")
-
00000DC8 — ??_C@_0BH@KNON@?5Reduce?5Latency?5Sleep?3?$AA@
(" Reduce Latency Sleep:")
-
00000DE0 — ??_C@_0M@BFLH@?5Max?5Sleep?3?$AA@
(" Max Sleep:")
-
00000DEC — ??_C@_0L@GEAA@Min?5Sleep?3?$AA@
("Min Sleep:")
-
00000DF8 — ??_C@_0DH@MDM@Idle?5timeout?3?5?$CFd?0?5sensitivity?5?$CFd@
("Idle timeout: %d, sensitivity %d"...)
-
00000E30 — ??_C@_05BFLF@Idle?3?$AA@
("Idle:")
-
00000E38 — ??_C@_0O@JAMB@Reserved?3?5?$CFd?6?$AA@
("Reserved: %d\n")
-
00000E48 — ??_C@_0P@NGNF@Lid?5open?5wake?3?$AA@
("Lid open wake:")
-
00000E58 — ??_C@_0L@FPGN@Lid?5close?3?$AA@
("Lid close:")
-
00000E64 — ??_C@_0O@CBFB@Sleep?5button?3?$AA@
("Sleep button:")
-
00000E74 — ??_C@_0O@JNKL@Power?5button?3?$AA@
("Power button:")
-
00000E84 — ??_C@_0O@MHLB@Revision?3?5?$CFd?6?$AA@
("Revision: %d\n")
-
00000E94 — ??_C@_0BK@BMCL@Default?5low?5latency?5wake?3?$AA@
("Default low latency wake:")
-
00000EB0 — ??_C@_0BL@NEOH@Minimum?5device?5wake?5state?3?$AA@
("Minimum device wake state:")
-
00000ECC — ??_C@_0BG@KNJM@Real?9time?5clock?5wake?3?$AA@
("Real-time clock wake:")
-
00000EE4 — ??_C@_0P@HLBA@Soft?5lid?5wake?3?$AA@
("Soft lid wake:")
-
00000EF4 — ??_C@_0BB@EIAJ@AC?5on?9line?5wake?3?$AA@
("AC on-line wake:")
-
00000F08 — ??_C@_0CL@MPFN@Battery?5?$CFd?3?5Granularity?3?5?$CFd?0?5Cap@
("Battery %d: Granularity: %d, Cap"...)
-
00000F34 — ??_C@_0BJ@FEIK@Batteries?3?5?$CFs?0?5Life?3?5?$CFs?6?$AA@
("Batteries: %s, Life: %s\n")
-
00000F50 — ??_C@_09JCKO@Long?5term?$AA@
("Long term")
-
00000F5C — ??_C@_0L@INDI@Short?5term?$AA@
("Short term")
-
00000F68 — ??_C@_0CE@MDDJ@Disk?5spin?5down?3?5?$CFs?0?5Spare?5?$CFd?5?$CFd?5@
("Disk spin down: %s, Spare %d %d "...)
-
00000F8C — ??_C@_0EK@EBOA@Thermal?5control?3?5?$CFs?0?5Throttle?3?5?$CF@
("Thermal control: %s, Throttle: %"...)
-
00000FD8 — ??_C@_05MJBI@Can?8t?$AA@
("Can\'t")
-
00000FE0 — ??_C@_03EGCG@Can?$AA@
("Can")
-
00000FE4 — ??_C@_0CK@FBCG@?6Hiberfile?3?5?$CFs?0?5Wake?3?5?$CFs?0?5Spare?5@
("\nHiberfile: %s, Wake: %s, Spare "...)
-
00001010 — ??_C@_08PHKO@Non?9Full?$AA@
("Non-Full")
-
0000101C — ??_C@_04OOPN@Full?$AA@
("Full")
-
00001024 — ??_C@_04DMJH@?5S?$CFd?$AA@
(" S%d")
-
0000102C — ??_C@_0O@OFNL@System?5state?3?$AA@
("System state:")
-
0000103C — ??_C@_08FHHB@Lid?3?5?$CFs?6?$AA@
("Lid: %s\n")
-
00001048 — ??_C@_0BC@CEHF@Sleep?5button?3?5?$CFs?6?$AA@
("Sleep button: %s\n")
-
0000105C — ??_C@_0BC@FHMO@Power?5button?3?5?$CFs?6?$AA@
("Power button: %s\n")
-
00001070 — ??_C@_06OAGO@Absent?$AA@
("Absent")
-
00001078 — ??_C@_07JMEA@Present?$AA@
("Present")
-
00001080 — ??_C@_0BG@LGMD@System?5capabilities?3?6?$AA@
("System capabilities:\n")
-
00001098 — ??_C@_06GAPH@DC?5?$CFc?6?$AA@
("DC %c\n")
-
000010A0 — ??_C@_06KDNH@AC?5?$CFc?6?$AA@
("AC %c\n")
Segment 4: RARE @ 00007B80
-
00000000 — UnExportNTFunctions
-
0000006C — _HalInitSystem@8
-
000000A0 — _ObInitSystem@4
-
00000277 — _MiSectionInitialization@0
Segment 5: W32 @ 00007CB0
-
00000000 — _W32_IOManGetVersion
-
00000006 — _W32_IOManRequestWakeupLatency
-
0000000B — _W32_IOManGetDevnodeFromFileHandle
-
00000010 — _W32_IOManCreateFile
-
00000015 — _W32_IOManClose
-
0000001A — _W32_IOManWriteFile
-
0000001F — _W32_IOManReadFile
-
00000024 — _W32_IOManDeviceIoControl
-
00000029 — _W32_IOManCancelIoFile
-
0000002E — _W32_IOManFlushFileBuffers
Segment 6: PNP @ 00008FB0
-
00000000 — _IoGetDeviceProperty@20
-
000002E0 — _IoSetDeviceProperty@16
-
000002E8 — _IoReportDeviceStatus@8
-
000002F0 — _IoOpenDeviceRegistryKey@16
-
0000034A — _NtKernPhysicalDeviceObjectToDevNode
-
00000358 — _NtKernWin9XLoadDriver
-
00000368 — @IsVXDName@4
-
00000390 — @LoadMultipleDrivers@28
-
0000050C — _NTKERNPnPNewDevNode@8
-
00000774 — @Barf@16
-
00000821 — @GetBusInfo@12
-
00000941 — @KillChild@8
-
000009A2 — @ProcessNewDevNode@8
-
00000AA8 — @NTKERNEnumerate@8
-
00000D23 — @RemoveWalkTheDOs@4
-
00000D55 — @RemovePDO@12
-
00000DB8 — @QuickPnPIrp@8
-
00000DE0 — @StartIrp@8
-
00000F73 — @PowerIrp@20
-
00000FBC — @NTKERNFilterDevNode@8
-
0000113E — _NTKERNConfigHandler
-
0000132C — _NTKERNEnumHandler
-
000013AE — _ReadWriteConfig@24
-
000013FE — @SendIRPToVxD@8
-
00001462 — @ProcessPnPIRP@16
-
0000162D — _PnPInit
-
0000171C — @InitializePnPStackLocation@12
-
0000173D — @GetCapabilities@8
-
000017FE — _PnPCompletionRoutine@12
-
00001813 — @SynchronousCallDriver@12
-
00001887 — @SendPnPIrp@12
-
00001909 — _NTKERNReceiveMessage
-
00001948 — @DoThisString@16
-
000019A2 — @DoTheseIDs@16
-
00001A25 — @NTKERNSetupDevNode@8
-
00001A70 — _CheckDeviceState
-
00001B36 — @ConvertWToA@12
-
00001B8F — @ConvertWToHeapAllocatedA@8
-
00001C07 — @ConvertRegistryToW@32
-
00001D0D — _PnPGetRegistryPathFromDevnode@12
-
00001DC1 — _PnPGetRegistryPath@12
-
00001DDF — _PnPGetPhysicalDeviceObject@4
-
00001E32 — @DoMemory@8
-
00001E5A — @DoIO@8
-
00001E81 — @DoDMA@8
-
00001EA0 — @DoIRQ@8
-
00001EF7 — @DoPartialResource@12
-
00001F2F — @GetConfiguration@20
-
00002090 — @GetGroupCount@4
-
000020BE — @GetGroupBeginEnd@16
-
00002123 — @ExtraDataSize@8
-
00002156 — @AddExtraData@12
-
000021C8 — @AddConvertedBack@12
-
000021FE — @AllocateBack@20
-
0000227A — _GetMemorySize
-
0000229A — _ConvertMemory
-
00002348 — _ConvertBackMemory
-
000023EC — _GetIOSize
-
00002409 — _ConvertIO
-
000024BF — _ConvertBackIO
-
00002580 — _GetDMASize
-
000025A0 — _ConvertDMA
-
00002617 — _ConvertBackDMA
-
00002684 — _GetIRQSize
-
000026A4 — _ConvertIRQ
-
0000272F — _ConvertBackIRQ
-
000027E5 — _GetAnythingSize
-
00002809 — _ConvertAnything
-
000028B3 — _GetNTSize
-
000028D3 — _ConvertNT
-
00002903 — _ConvertBackGeneric
-
0000292C — _ConvertBackConfigData
-
00002958 — _ConvertBackOSSpecific
-
000029E2 — @GetConvertHandler@4
-
000029FE — @GetConvertBackHandler@4
-
00002A1A — @GetFilteredConfiguration@16
-
00002C29 — @SetBasicFilteredConfiguration@12
-
00002D1A — @AddResourceRequirements@8
-
00002D70 — _PoRegisterDeviceForIdleDetection@16
-
00002DC8 — _PopCompleteRequestIrp@12
-
00002E29 — _PoRequestPowerIrpWorker
-
00002F54 — _PoRequestPowerCancelRoutine@8
-
00002F7A — _PoRequestPowerIrp@24
-
00003073 — _PoCallDriver@8
-
00003083 — _PoStartNextPowerIrp@4
-
00003086 — @PopCheckBatteryStatus@0
-
000030B0 — _PageablePowerHandler
-
00003130 — _PowerHandler
-
00003154 — _CCODE__CONFIGMG_Get_Sibling
-
0000315C — _CCODE__CONFIGMG_Get_Child
-
00003164 — _CCODE__CONFIGMG_Locate_DevNode
-
0000316C — _CCODE__CONFIGMG_Get_Bus_Info
-
00003174 — _CCODE__CONFIGMG_Call_Enumerator_Function
-
0000317C — _CCODE__RegDeleteKey
-
00003184 — _CCODE__Assert_Range
-
0000318C — _CCODE__CONFIGMG_Get_Device_ID
-
00003194 — _CCODE__CONFIGMG_Load_DLVxDs
-
0000319C — _CCODE__RegCloseKey
-
000031A4 — _CCODE__RegQueryValueEx
-
000031AC — _CCODE__RegOpenKey
-
000031B4 — _CCODE__CONFIGMG_Get_DevNode_Key
-
000031BC — _CCODE__CONFIGMG_Register_Device_Driver
-
000031C4 — _CCODE__CONFIGMG_Register_Enumerator
-
000031CC — _CCODE__CONFIGMG_Change_DevNode_Status
-
000031D4 — _CCODE__CONFIGMG_Set_Private_DWord
-
000031DC — _CCODE__CONFIGMG_Discard_Boot_Log_Conf
-
000031E4 — _CCODE__CONFIGMG_Read_Registry_Value
-
000031EC — _CCODE__CONFIGMG_Set_Device_Driver_Private_DWord
-
000031F4 — _CCODE__CONFIGMG_Get_Private_DWord
-
000031FC — _CCODE__CONFIGMG_Get_DevNode_Status
-
00003204 — _CCODE__CONFIGMG_Get_Parent
-
0000320C — _CCODE_SHELL_SYSMODAL_Message@16
-
00003230 — _CCODE_Get_Sys_VM_Handle
-
0000323C — _CCODE__Sprintf
-
00003244 — _CCODE__CONFIGMG_Remove_SubTree
-
0000324C — _CCODE__CONFIGMG_Set_Bus_Info
-
00003254 — _CCODE__CONFIGMG_Set_DevNode_PowerCapabilities
-
0000325C — _CCODE__CONFIGMG_Remove_Unmarked_Children
-
00003264 — _CCODE__CONFIGMG_Create_DevNode
-
0000326C — _CCODE__CONFIGMG_Reset_Children_Marks
-
00003274 — _CCODE__CONFIGMG_System_Device_Power_State_Mapping
-
0000327C — _CCODE__CONFIGMG_Reprocess_DevNode
-
00003284 — _CCODE__CONFIGMG_Free_Log_Conf
-
0000328C — _CCODE__CONFIGMG_Get_First_Log_Conf
-
00003294 — _CCODE__CONFIGMG_Set_DevNode_Problem
-
0000329C — _CCODE__CONFIGMG_Get_DevNode_Handler
-
000032A4 — _CCODE__CONFIGMG_Get_DevNode_PowerCapabilities
-
000032AC — _CCODE__CONFIGMG_Register_DevLoader
-
000032B4 — _CCODE__CONFIGMG_Write_Registry_Value
-
000032BC — _CCODE__CONFIGMG_Add_ID
-
000032C4 — _CCODE__CONFIGMG_Reenumerate_DevNode
-
000032CC — _CCODE__CONFIGMG_Setup_DevNode
-
000032D4 — _CCODE__CONFIGMG_Enable_DevNode
-
000032DC — _CCODE__CONFIGMG_Disable_DevNode
-
000032E4 — _CCODE__CONFIGMG_Get_Device_ID_Size
-
000032EC — _CCODE__CONFIGMG_Get_DevNode_Key_Size
-
000032F4 — _CCODE__CONFIGMG_Get_Device_Driver_Private_DWord
-
000032FC — _CCODE__CONFIGMG_Get_Next_Res_Des
-
00003304 — _CCODE__CONFIGMG_Get_Res_Des_Data_Size
-
0000330C — _CCODE__HeapFree
-
00003314 — _CCODE__CONFIGMG_Add_Res_Des
-
0000331C — _CCODE__HeapAllocate
-
00003324 — _CCODE__CONFIGMG_Get_Parent_Structure
-
0000332C — _CCODE__CONFIGMG_Get_Res_Des_Data
-
00003334 — _CCODE__CONFIGMG_Get_Set_Log_Conf_Priority
-
0000333C — _CCODE__CONFIGMG_Get_Next_Log_Conf
-
00003344 — _CCODE__CONFIGMG_Add_Empty_Log_Conf
-
0000334C — _CCODE__SHELL_Update_User_Activity_Ex
-
00003354 — _CCODE__CONFIGMG_Register_DevNode_For_Idle_Detection
-
0000335C — _CCODE_Cancel_Time_Out@4
-
0000336C — _CCODE__SHELL_CallDll
-
00003374 — _CCODE_Set_Global_Time_Out@12
-
00003390 — _CCODE__Set_Global_Time_Out_Ex
-
00003398 — _CCODE__SHELL_CancelAppyTimeEvent
-
000033A0 — _CCODE_VMM_GetSystemInitState
-
000033A8 — _CCODE__CONFIGMG_Add_Remove_DevNode_Property
-
000033B0 — _CCODE__CONFIGMG_Set_DevNode_PowerState
-
000033B8 — _CCODE__Debug_Printf_Service
-
000033CC — _CCODE__VPOWERD_Get_Power_Status
-
000033D4 — _CCODE__SHELL_BroadcastSystemMessage
-
000033DC — _CCODE__CONFIGMG_Call_At_Appy_Time
Segment 7: _INIT @ 00008FE0
-
00000000 — _PsInitSystem@4
Segment 8: _PTEXT @ 0000AF80
-
00000000 — _BufferPrint@4
-
00000012 — _LoadVPrintf@0
-
00000032 — _VisitChildDevnodes@12
-
0000008B — _VisitAllDevnodes@8
-
000000B8 — _FindPCISlotCallback@8
-
00000121 — _FindPCISlotDevNode@8
-
00000166 — _PCIGetBusDataByOffset@20
-
000001B4 — NTKERN_PM_API
-
000001B9 — _FileExists@4
-
000001D5 — _Win95CreateThread@24
-
00000221 — _IsBigMem@0
-
0000023D — _PiSetThreadPriority@8
-
00000254 — _PiGetThreadPriority@8
-
0000026D — NTKERN_ShutDown_Ex
-
0000027D — NTKERN_RebootNotify
-
00000288 — NTKERN_System_Exit
-
0000028A — NTKERN_Sys_Crit_Exit
-
0000028C — NTKERN_DeviceIoControl
-
00000296 — NTKERN_End_PM_App
-
0000029C — NTKERN_Create_VM
-
000002D1 — NTKERN_Destroy_VM
-
00000306 — NTKERN_Init_Complete
-
0000031C — NTKERN_Create_Thread
-
00000350 — NTKERN_Terminate_Thread
-
0000037F — NTKERN_Destroy_Thread
-
000003B4 — _GetPEModuleEntryPoint
-
000003BA — _GetProcAddress
-
000003C0 — _PELDR_InitCompleted
-
000003C6 — _UnloadPEModule
-
000003D9 — _LoadPEModule
-
00000409 — _Time_Slice_Sleep@4
-
00000412 — _BCSToUni
-
00000418 — _UniToBCS
-
0000041E — _UniToUpper
-
00000424 — _RegOpenKey
-
0000042A — _RegCreateKey
-
00000430 — _RegQueryInfoKey
-
00000436 — _RegQueryValueEx
-
0000043C — _RegSetValueEx
-
00000442 — _RegCloseKey
-
00000448 — _RegDeleteKey
-
0000044E — _RegDeleteValue
-
00000454 — _RegEnumKey
-
0000045A — _RegEnumValue
-
00000460 — _pFindDriver@4
-
00000488 — _FindDriverPath@4
-
00000531 — _LoadDriver@8
-
00000652 — _UnloadDriver@4
-
0000068E — _LoadSysDriver@8
-
000006C7 — _UnloadSysDriver@4
-
000006EA — _UnicodeCmp@8
-
0000073B — _NtKernGetWorkerThread
-
00000759 — _NtKernGetDynaAreaHandle@4
-
000007FE — _NtKernWriteDynaDriverKeys@12
-
0000091F — _NtKernWriteDynaDriverImageKey@8
-
00000974 — _NtKernParsePathName@16
-
00000A70 — _NtKernEnsureUnicode@16
-
00000AB6 — _NtKernCreateDynaRegKey@16
-
00000B5D — _NtKernOpenDynaRegKey@8
-
00000B93 — _NtKernDynaLoadDriver@16
-
00000E42 — _NtKernDynaUnloadDriver@4
-
00000E4A — _NtKernGetDriverHandle@12
-
00000EBC — _ThreadFindProcess@4
-
00000EE2 — _CreateProcessStruct@4
-
00000F5C — _ThreadCreateNotify@4
-
00001040 — _ProcessDestroyNotify@4
-
00001062 — _ThreadTerminateNotify@4
-
0000107C — _ThreadDestroyNotify@4
-
000010CE — _ThreadInitialize@4
-
00001120 — __NtKernCreateFile@44
-
00001168 — __NtKernCancelIoFile@8
-
00001195 — __NtKernReadFile@36
-
000011D7 — __NtKernWriteFile@36
-
00001219 — __NtKernClose@4
-
0000123F — __NtKernDeviceIoControl@40
-
00001284 — __NtKernInternalDeviceIoControl@40
-
000012C9 — __NtKernQueueWorkItem@8
-
000012F7 — __NtKernSetPhysicalCacheTypeRange@16
-
000012FF — __NtKernLoadDriver@4
-
00001325 — @RD_MSR@4
-
00001328 — _WR_MSR@12
-
00001339 — _GetCpuTypeStep@4
-
00001373 — _GetCpuId
-
0000137C — __IOManGetVersion@8
-
000013B9 — __IOManCreateFile@52
-
000013F6 — __IOManClose@12
-
00001433 — __IOManWriteFile@44
-
00001470 — __IOManReadFile@44
-
000014AD — __IOManDeviceIoControl@48
-
000014EA — __IOManFlushFileBuffers@16
-
00001527 — __IOManCancelIoFile@16
-
00001564 — __IOManGetDevnodeFromFileHandle@16
-
000015A1 — __IOManRequestWakeupLatency@12
-
000015DE — _Get_Next_Thread_Handle@4
-
000015EF — _Get_Sys_Thread_Handle@0
-
000015FA — _Get_Cur_Thread_Handle@0
-
00001605 — _AllocateThreadDataSlot@0
-
0000160B — _VWIN32_GetProcessHandle
-
00001611 — _Win32ReferenceObjectByHandle
-
00001617 — _Win32ReferenceObject
-
0000161D — _Win32DereferenceObject
-
00001628 — _mR0ObjFree@4
-
00001636 — _mR0ObjDup@8
-
0000164E — _MakeWin32Handle
-
00001674 — _GetNtHandle
-
00001682 — _CloseWin32Handle
-
00001690 — _GetPathBase@8
-
000016D8 — _MapRegistryPath@12
-
0000177D — _ZwOpenKey@12
-
00001839 — _ZwEnumerateKey@24
-
00001976 — _ZwClose@4
-
000019AD — _ZwCreateKey@28
-
00001AA5 — _ZwDeleteKey@4
-
00001B12 — _ZwSetValueKey@24
-
00001BF7 — _ZwpGenerateValueTypeName@8
-
00001CC3 — _ZwpSetValueType@16
-
00001D40 — _ZwpGetValueType@12
-
00001DDF — _ZwQueryValueKey@24
-
000020F9 — _GetClassName@12
-
0000213D — _AToW@12
-
00002182 — _ZwQueryKey@20
-
00002383 — _ZwEnumerateValueKey@24
-
00002419 — _ZwDeleteValueKey@8
-
00002468 — _GetMessagePtr
-
0000247B — _ExMapHandleToPointer@12
-
000024A9 — _ExpAllocateHandleTable@8
-
000024EC — _ExpAllocateHandleTableEntries@16
-
0000257B — _ExCreateHandle@8
-
000025CD — _ExCreateHandleTable@12
-
00002623 — _ExDestroyHandle@12
-
0000267B — _ExDestroyHandleTable@8
-
000026D2 — _NtClearEvent@4
-
0000270F — _NtCreateEvent@20
-
00002813 — _NtOpenEvent@12
-
000028D4 — _NtPulseEvent@8
-
000029AF — _NtQueryEvent@20
-
00002AC7 — _NtResetEvent@8
-
00002BA1 — _NtSetEvent@8
-
00002C7C — @WorkerThreadFunction@8
-
00002CC5 — _SysDestroyWorkerThread@4
-
00002CEA — _SysDestroyWorkerThreads@0
-
00002D4F — _SysCreateWorkerThread@8
-
00002DB8 — _InitializeWorkItemQueue@4
-
00002DE9 — _SysInit@4
-
00002E01 — _ExCreateCallback@16
-
00002ED1 — _ExpDeleteCallback@4
-
00002ED4 — _ExpWstrSystemInformation
-
00002F0C — _ExpWstrSystemInformationValue
-
00002F18 — _ExInitializeNPagedLookasideList@28
-
00002FA1 — _ExInitializePagedLookasideList@28
-
00003037 — _ExRaiseAccessViolation@0
-
00003042 — _ExRaiseDatatypeMisalignment@0
-
0000304D — _HalGetAdapter@8
-
00003470 — _HalpAllocateGlobalMapBuffer@0
-
000034B8 — _HalAllocateCommonBuffer@16
-
0000356A — _HalpGrowMapBuffers@8
-
000036BE — _HalpAllocateAdapter@12
-
00003876 — _RtlAnsiStringToUnicodeString@12
-
0000391E — _RtlUnicodeStringToAnsiString@12
-
000039DA — _RtlWriteRegistryValue@24
-
00003A2F — _RtlInitializeBitMap@12
-
00003A43 — _RtlpGetRegistryHandle@16
-
00003B21 — _RtlpQueryRegistryDirect@16
-
00003BC9 — _RtlpCallQueryRegistryRoutine@20
-
00003D51 — _RtlQueryRegistryValues@20
-
00003FF4 — _RtlExtendedLargeIntegerDivide@16
-
00004036 — _RtlExtendedIntegerMultiply@12
-
00004092 — _RtlExtendedMagicDivide@20
-
00004120 — _RtlStringFromGUID@8
-
00004192 — _RtlGUIDFromString@8
-
0000433F — _IoAllocateDriverObjectExtension@16
-
00004357 — _IoAssociationInitialize@0
-
0000436E — _IoConnectInterrupt@44
-
0000448E — _IoDisconnectInterrupt@4
-
000044A8 — _NtCreateFile@44
-
000044DA — _NtDeviceIoControlFile@40
-
00004506 — _NtInternalDeviceIoControlFile@40
-
00004532 — _IopCreateDriver@12
-
0000468A — _IopGetServiceNameFromDriverName@8
-
00004717 — _IoCreateDriver@8
-
000047A5 — _IoCreateDriverObject@8
-
000047E3 — _IopBuildDefaultSysDriverPath@12
-
000048EC — _IopGetTag@12
-
00004986 — _IopAddDriverToDriverList@20
-
00004B9A — _IopFindDrivers@12
-
00004C63 — _IopFreeDriverList@4
-
00004CC4 — _IopGetDriverList@4
-
00004DF4 — _CmpDoSort@8
-
00004E8E — _CmpResolveDriverDependencies@4
-
00004ED1 — _CmpOrderGroup@8
-
00004F33 — _IopUserCompletion@20
-
00004F43 — _IopUserRundown@4
-
00004F53 — _IopAbortRequest@4
-
00004F87 — _IopXxxControlFile@44
-
000054E0 — _IopSynchronousApiServiceTail@24
-
0000558B — _IopSynchronousServiceTail@28
-
0000568E — _IopAcquireFileObjectLock@16
-
0000571D — _IopAllocateIrpCleanup@8
-
00005757 — _IopCancelAlertedRequest@8
-
0000575A — _IoGetConfigurationInformation@0
-
00005760 — _IoCreateDevice@28
-
000057FF — _IopCreateDevice@28
-
000059AC — _IoDeleteSymbolicLink@4
-
00005A08 — _IoCreateFile@56
-
00005B79 — _IoGetDeviceObjectPointer@16
-
00005BF7 — _IoCancelThreadIo@4
-
00005C75 — _IoAttachDevice@12
-
00005D09 — _IoSetShareAccess@16
-
00005DB3 — _IopOpenRegistryKey@20
-
00005E0C — _IopGetRegistryValue@12
-
00005E92 — _IopGetRegistryKeyInformation@8
-
00005F03 — _IoRegisterShutdownNotification@4
-
00005F3F — _IoInitializeTimer@12
-
00005FA5 — _IoBuildDeviceIoControlRequest@36
-
0000612F — _IoShutdownSystem@8
-
000061C0 — _IopCreateClassKey@12
-
00006247 — _IopBuildFullDeviceObjectName@8
-
00006292 — _IopSplitSymbolicLink@16
-
00006343 — _IopReplacePathSeperatorWithPound@4
-
00006371 — _IopOpenClassAssociationRegistryEntry@20
-
0000650F — _IopGetDevnodeHandle@8
-
00006587 — _IopGetDevnodeSerial@8
-
00006626 — _IopBuildAssociationLinkName@20
-
000066BF — _IopGetRegistryValueDword@12
-
0000670D — _IopGetLinkedState@4
-
0000675E — _IopSetLinkedState@8
-
000067B2 — _IopDecrementSymbolicLinkReference@8
-
0000680A — _IopIncrementSymbolicLinkReference@8
-
000068D7 — _IoGetDeviceInterfaces@16
-
00006B0D — _IopEnumKeyHandle@12
-
00006BAC — _IopEnumKeyHandles@12
-
00006C84 — _IopEnumKeyHandlesNestWorker@12
-
00006D11 — _IopEnumKeyHandlesNest@16
-
00006D5B — _IopClearDeviceClassAssociationLinks@0
-
00006E61 — _IoOpenDeviceInterfaceRegistryKey@12
-
00006EAF — _IoRegisterDeviceInterfaceByDevnode@16
-
00006FB6 — _IoRegisterDeviceInterface@16
-
00006FD5 — _IopGetNextLocalUniqueId@4
-
000070BB — _IopFindTheGuid@8
-
00007118 — _IoUnregisterDeviceInterface@4
-
0000714C — _IoGetDeviceInterfaceAlias@12
-
000071FA — _IoSetDeviceInterfaceState@8
-
000072E4 — _IopRemoveReferenceString@8
-
0000732B — _IoGetDmaAdapter@12
-
000073F4 — _IoIsWdmVersionAvailable@8
-
0000740A — _IopLoadUnloadDriver@4
-
0000745C — _IopLoadDriver@4
-
0000790D — _IopGetDriverNameFromKeyNode@8
-
00007AA4 — _IopMapAndLoadDriver@4
-
00007BB8 — _IopLoadByName@12
-
00007DC9 — _IopReadyDeviceObjects@4
-
00007DE0 — _IopCloseFile@20
-
00007F15 — _IopDeleteDevice@4
-
00007F28 — _IopDeleteDriver@4
-
00007F5E — _IopParseFile@40
-
00007FAF — _IopParseDevice@40
-
00008561 — _NtQueryInformationFile@20
-
000089B8 — _NtReadFile@36
-
00008D3A — _RegStrInit@0
-
00008FDF — _NtWriteFile@36
-
000093F8 — _NtOpenFile@24
-
00009421 — _IopErrorLogThread@4
-
000096D1 — _IopErrorLogQueueRequest@0
-
00009719 — _NtCancelIoFile@8
-
00009896 — _NtFlushBuffersFile@8
-
00009A6C — _ObpAllocateObject@20
-
00009BA5 — _ObCreateObject@36
-
00009C26 — _ObpCaptureObjectCreateInformation@16
-
00009CA0 — _ObpCaptureObjectName@8
-
00009D16 — @ObpFreeObject@4
-
00009DAB — _ObMakeTemporaryObject@4
-
00009DBE — _NtMakeTemporaryObject@4
-
00009DF6 — _NtCreateDirectoryObject@12
-
00009E4C — _ObpLookupDirectoryEntry@12
-
00009F52 — _ObpLookupObjectName@40
-
0000A38D — _ObpCreateUnnamedHandle@24
-
0000A468 — _ObpCreateHandle@36
-
0000A574 — _ObInsertObject@24
-
0000A729 — _NtCreateSymbolicLinkObject@16
-
0000A7E5 — _NtOpenSymbolicLinkObject@12
-
0000A80E — _ObpParseSymbolicLink@40
-
0000A900 — _ObpDuplicateHandle@4
-
0000A9A3 — _ObReferenceObjectByName@32
-
0000AA1F — _ObpRemoveObjectRoutine@4
-
0000AA86 — _ObpDeleteNameCheck@8
-
0000AB70 — _ObOpenObjectByName@28
-
0000ACAD — _ObCreateObjectType@12
-
0000AED4 — _SeCreateAccessState@12
-
0000AF1A — _SeDeleteAccessState@4
-
0000AF3D — _NtOpenSection@12
-
0000AF6B — _NtMapViewOfSection@40
-
0000B0F0 — _MmMapViewOfSection@40
-
0000B151 — _MiFindLinearBlock@8
-
0000B174 — _MiReserveLinearBlock@12
-
0000B1F8 — _MiFreeLinearRegion@12
-
0000B2A5 — _MiFindMapping@8
-
0000B2D2 — _MiReserveLinearRegion@12
-
0000B3F3 — _NtUnmapViewOfSection@8
-
0000B405 — _MmUnmapViewOfSection@8
-
0000B46F — _PsCreateSystemThread@28
-
0000B539 — _PsTerminateSystemThread@4
-
0000B55D — _KeSetPriorityThread@8
Segment 9: _PDATA @ 0000D4E0
-
0000000C — ??_C@_00A@?$AA@
("")
-
00002CC0 — _WinDir
-
00002CD8 — ??_C@_0L@LLAF@DeviceDesc?$AA@
("DeviceDesc")
-
00002CE4 — ??_C@_0N@IOME@FriendlyName?$AA@
("FriendlyName")
-
00002CF4 — ??_C@_09CDHI@ClassGUID?$AA@
("ClassGUID")
-
00002D00 — ??_C@_05LCAF@Class?$AA@
("Class")
-
00002D08 — ??_C@_06LCIG@Driver?$AA@
("Driver")
-
00002D10 — ??_C@_08KDKK@Location?$AA@
("Location")
-
00002D1C — ??_C@_03KFJO@Mfg?$AA@
("Mfg")
-
00002D20 — ??_C@_0O@KIHO@CompatibleIDs?$AA@
("CompatibleIDs")
-
00002D30 — ??_C@_0L@LPIN@HardwareID?$AA@
("HardwareID")
-
00002D40 — ??_C@_0N@IMGC@UpperFilters?$AA@
("UpperFilters")
-
00002D50 — ??_C@_0L@MNFF@NTMPDriver?$AA@
("NTMPDriver")
-
00002D5C — ??_C@_0N@JGBG@LowerFilters?$AA@
("LowerFilters")
-
00002D6C — _NtPnPDriverObject
-
00002D70 — ??_C@_0PG@KFIC@Please?5make?5a?5bug?5to?5the?5owner?5o@
("Please make a bug to the owner o"...)
-
00002E68 — ??_C@_0CF@CDAH@Enumerator?5rightfully?5challenged@
("Enumerator rightfully challenged"...)
-
00002E90 — ??_C@_0CE@HACN@?$CIcould?5not?5get?5the?5enumerator?5na@
("(could not get the enumerator na"...)
-
00002EB4 — _fPnPReady
-
00002EB8 — ??_C@_0N@KIHN@Capabilities?$AA@
("Capabilities")
-
00002ED0 — _Converts
-
00002F18 — _ConvertBacks
-
00002F70 — _IopCacheHitIncrement
-
00002F74 — _CmAutoGenName
-
00002F7C — _CmpAutoGenString
-
00002F80 — _CmRegistryMachineHardwareDescriptionSystemName
-
00002F88 — _CmpRegistryMachineHardwareDescriptionSystemString
-
00002F8C — _CmRegistryMachineSystemCCSControlNTKernName
-
00002F94 — _CmpRegistryMachineSystemCCSControlNTKernString
-
00002F98 — _CmRegistryMachineName
-
00002FA0 — _CmpRegistryMachineString
-
00002FA4 — _CmRegistryUserName
-
00002FAC — _CmpRegistryUserString
-
00002FB0 — _CmRegistryEnumName
-
00002FB8 — _CmpRegistryEnumString
-
00002FBC — _CmNextLUIDName
-
00002FC4 — _CmpNextLUIDString
-
00002FC8 — _CmDosDevicesName
-
00002FD0 — _CmpDosDevicesString
-
00002FD4 — _CmDeviceParametersName
-
00002FDC — _CmpDeviceParametersString
-
00002FE0 — _CmDeviceName
-
00002FE8 — _CmpDeviceString
-
00002FEC — _CmDeviceInstanceName
-
00002FF4 — _CmpDeviceInstanceString
-
00002FF8 — _CmDotName
-
00003000 — _CmpDotString
-
00003004 — _CmPoundName
-
0000300C — _CmpPoundString
-
00003010 — _CmNullName
-
00003018 — _CmpNullString
-
0000301C — _CmRefCountName
-
00003024 — _CmpRefCountString
-
00003028 — _CmSymbolicLinkName
-
00003030 — _CmpSymbolicLinkString
-
00003034 — _CmSerialNumberName
-
0000303C — _CmpSerialNumberString
-
00003040 — _CmRegistryMachineSystemCurrentControlSetName
-
00003048 — _CmpRegistryMachineSystemCurrentControlSetString
-
0000304C — _CmRegistryMachineSystemCurrentControlSetServicesName
-
00003054 — _CmpRegistryMachineSystemCurrentControlSetServicesString
-
00003058 — _CmDeviceClassKeyName
-
00003060 — _CmpDeviceClassKeyString
-
00003064 — _CmSystemRootName
-
0000306C — _CmpSystemRootString
-
00003070 — _CmCurrentControlSetName
-
00003078 — _CmpCurrentControlSetString
-
0000307C — _CmControlName
-
00003084 — _CmpControlString
-
00003088 — _CmServicesName
-
00003090 — _CmpServicesString
-
00003094 — _CmGroupName
-
0000309C — _CmpGroupString
-
000030A0 — _CmSystemRootSystem32driversName
-
000030A8 — _CmpSystemRootSystem32driversString
-
000030AC — _CmControlGroupOrderListName
-
000030B4 — _CmpControlGroupOrderListString
-
000030B8 — _CmImagePathName
-
000030C0 — _CmpImagePathString
-
000030C4 — _CmSysName
-
000030CC — _CmpSysString
-
000030D0 — _CmStartName
-
000030D8 — _CmpStartString
-
000030DC — _CmSystemName
-
000030E4 — _CmpSystemString
-
000030E8 — _CmTagName
-
000030F0 — _CmpTagString
-
000030F4 — _CmListName
-
000030FC — _CmpListString
-
00003100 — _CmControlServiceGroupOrderName
-
00003108 — _CmpControlServiceGroupOrderString
-
0000310C — _Cm_T_Name
-
00003114 — _Cmp_T_String
-
00003118 — _Cm_TypeName
-
00003120 — _Cmp_TypeString
-
00003124 — _CmDriverName
-
0000312C — _CmpDriverString
-
00003130 — _CmFileSystemName
-
00003138 — _CmpFileSystemString
-
0000313C — _CmBackSlashName
-
00003144 — _CmpBackSlashString
-
00003148 — _CmLinkedName
-
00003150 — _CmpLinkedString
-
00003154 — _CmTypeName
-
0000328C — _CmTypeString
-
00003328 — ??_C@_1BE@CDCI@?$AAU?$AAn?$AAd?$AAe?$AAf?$AAi?$AAn?$AAe?$AAd?$AA?$AA@
(L"Undefined")
-
0000333C — ??_C@_1BK@ENIN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?$AA@
(L"SystemMemory")
-
00003358 — ??_C@_1CE@LANH@?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
(L"NetworkPeripheral")
-
0000337C — ??_C@_1BO@CJIF@?$AAL?$AAi?$AAn?$AAe?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
(L"LinePeripheral")
-
0000339C — ??_C@_1CA@IGFK@?$AAO?$AAt?$AAh?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
(L"OtherPeripheral")
-
000033BC — ??_C@_1CG@MDFM@?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
(L"TerminalPeripheral")
-
000033E4 — ??_C@_1CG@IEKA@?$AAK?$AAe?$AAy?$AAb?$AAo?$AAa?$AAr?$AAd?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
(L"KeyboardPeripheral")
-
0000340C — ??_C@_1CE@HDEI@?$AAP?$AAo?$AAi?$AAn?$AAt?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
(L"PointerPeripheral")
-
00003430 — ??_C@_1CE@BACN@?$AAP?$AAr?$AAi?$AAn?$AAt?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
(L"PrinterPeripheral")
-
00003454 — ??_C@_1CE@FABA@?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
(L"MonitorPeripheral")
-
00003478 — ??_C@_1CA@NODE@?$AAM?$AAo?$AAd?$AAe?$AAm?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
(L"ModemPeripheral")
-
00003498 — ??_C@_1BO@CGFI@?$AAT?$AAa?$AAp?$AAe?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
(L"TapePeripheral")
-
000034B8 — ??_C@_1CK@JLDJ@?$AAF?$AAl?$AAo?$AAp?$AAp?$AAy?$AAD?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl@
(L"FloppyDiskPeripheral")
-
000034E4 — ??_C@_1BO@PJEO@?$AAD?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
(L"DiskPeripheral")
-
00003504 — ??_C@_1CA@LKFM@?$AAO?$AAt?$AAh?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
(L"OtherController")
-
00003524 — ??_C@_1CA@PEGP@?$AAA?$AAu?$AAd?$AAi?$AAo?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
(L"AudioController")
-
00003544 — ??_C@_1CG@LIKG@?$AAK?$AAe?$AAy?$AAb?$AAo?$AAa?$AAr?$AAd?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
(L"KeyboardController")
-
0000356C — ??_C@_1CE@EPEO@?$AAP?$AAo?$AAi?$AAn?$AAt?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
(L"PointerController")
-
00003590 — ??_C@_1CG@PGOM@?$AAP?$AAa?$AAr?$AAa?$AAl?$AAl?$AAe?$AAl?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
(L"ParallelController")
-
000035B8 — ??_C@_1CE@DMFN@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
(L"DisplayController")
-
000035DC — ??_C@_1CE@IMNB@?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
(L"NetworkController")
-
00003600 — ??_C@_1CC@IGHG@?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
(L"SerialController")
-
00003624 — ??_C@_1BO@LLNG@?$AAW?$AAo?$AAr?$AAm?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
(L"WormController")
-
00003644 — ??_C@_1CA@BIAE@?$AAC?$AAd?$AAR?$AAo?$AAm?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
(L"CdRomController")
-
00003664 — ??_C@_1BO@BKFO@?$AAT?$AAa?$AAp?$AAe?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
(L"TapeController")
-
00003684 — ??_C@_1BO@MFEI@?$AAD?$AAi?$AAs?$AAk?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
(L"DiskController")
-
000036A4 — ??_C@_1CK@HHAK@?$AAM?$AAu?$AAl?$AAt?$AAi?$AAf?$AAu?$AAn?$AAc?$AAt?$AAi?$AAo?$AAn?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr@
(L"MultifunctionAdapter")
-
000036D0 — ??_C@_1BG@CDDF@?$AAD?$AAt?$AAi?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
(L"DtiAdapter")
-
000036E8 — ??_C@_1BI@MPIK@?$AAS?$AAc?$AAs?$AAi?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
(L"ScsiAdapter")
-
00003700 — ??_C@_1BE@PJDG@?$AAT?$AAc?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
(L"TcAdapter")
-
00003714 — ??_C@_1BI@LJGK@?$AAE?$AAi?$AAs?$AAa?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
(L"EisaAdapter")
-
0000372C — ??_C@_1BO@ECJF@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
(L"SecondaryCache")
-
0000374C — ??_C@_1CA@EAGJ@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAD?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
(L"SecondaryDCache")
-
0000376C — ??_C@_1CA@NPNM@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAI?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
(L"SecondaryICache")
-
0000378C — ??_C@_1BM@ENFA@?$AAP?$AAr?$AAi?$AAm?$AAa?$AAr?$AAy?$AAD?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
(L"PrimaryDCache")
-
000037A8 — ??_C@_1BM@NCOF@?$AAP?$AAr?$AAi?$AAm?$AAa?$AAr?$AAy?$AAI?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
(L"PrimaryICache")
-
000037C4 — ??_C@_1CO@LFBC@?$AAF?$AAl?$AAo?$AAa?$AAt?$AAi?$AAn?$AAg?$AAP?$AAo?$AAi?$AAn?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs@
(L"FloatingPointProcess")
-
000037F4 — ??_C@_1CC@MFFM@?$AAC?$AAe?$AAn?$AAt?$AAr?$AAa?$AAl?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAo?$AAr?$AA?$AA@
(L"CentralProcessor")
-
00003818 — ??_C@_1O@EPAA@?$AAL?$AAi?$AAn?$AAk?$AAe?$AAd?$AA?$AA@
(L"Linked")
-
00003828 — ??_C@_1BK@MPEO@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AA?$AA@
(L"\\FileSystem\\")
-
00003844 — ??_C@_1BC@LFKG@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$AA@
(L"\\Driver\\")
-
00003858 — ??_C@_1M@GDFC@?$AA_?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
(L"_Type")
-
00003864 — ??_C@_17PAPH@?$AA_?$AAT?$AA_?$AA?$AA@
(L"_T_")
-
0000386C — ??_C@_1DE@NFDK@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAG?$AAr?$AAo?$AAu?$AAp@
(L"Control\\ServiceGroup")
-
000038A0 — ??_C@_19OFAF@?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
(L"List")
-
000038AC — ??_C@_17CCKB@?$AAT?$AAa?$AAg?$AA?$AA@
(L"Tag")
-
000038B4 — ??_C@_1O@KHFL@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
(L"System")
-
000038C4 — ??_C@_17FDLC@?$AAs?$AAy?$AAs?$AA?$AA@
(L"sys")
-
000038CC — ??_C@_1CO@ECIK@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAG?$AAr?$AAo?$AAu?$AAp?$AAO?$AAr?$AAd?$AAe?$AAr?$AAL?$AAi@
(L"Control\\GroupOrderLi")
-
000038FC — ??_C@_1DK@LJHF@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2@
(L"\\SystemRoot\\System32")
-
00003938 — ??_C@_1M@EONE@?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA@
(L"Group")
-
00003944 — ??_C@_1BC@LHCC@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
(L"Services")
-
00003958 — ??_C@_1BA@DLLE@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
(L"Control")
-
00003968 — ??_C@_1CE@KEEI@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?$AA@
(L"CurrentControlSet")
-
0000398C — ??_C@_1IC@KIJF@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
(L"\\REGISTRY\\Machine\\Sy"...)
-
00003A10 — ??_C@_1GI@EMLC@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
(L"\\REGISTRY\\Machine\\Sy"...)
-
00003A78 — ??_C@_1FG@PFNI@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
(L"\\REGISTRY\\Machine\\Sy"...)
-
00003AD0 — ??_C@_1O@OIBJ@?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AA?$AA@
(L"Serial")
-
00003AE0 — ??_C@_1BK@LJFM@?$AAS?$AAy?$AAm?$AAb?$AAo?$AAl?$AAi?$AAc?$AAL?$AAi?$AAn?$AAk?$AA?$AA@
(L"SymbolicLink")
-
00003AFC — ??_C@_1BC@HFGN@?$AAR?$AAe?$AAf?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
(L"RefCount")
-
00003B10 — ??_C@_13LEOO@?$AA?$CD?$AA?$AA@
(L"#")
-
00003B14 — ??_C@_1BO@IGPD@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
(L"DeviceInstance")
-
00003B34 — ??_C@_1CE@KEEA@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
(L"Device Parameters")
-
00003B58 — ??_C@_1BC@IKAI@?$AAN?$AAe?$AAx?$AAt?$AAL?$AAU?$AAI?$AAD?$AA?$AA@
(L"NextLUID")
-
00003B6C — ??_C@_1DA@PCOE@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAE?$AAn@
(L"\\REGISTRY\\Machine\\En")
-
00003B9C — ??_C@_1BO@NKEJ@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
(L"\\REGISTRY\\User")
-
00003BBC — ??_C@_1CE@LJDG@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?$AA@
(L"\\REGISTRY\\Machine")
-
00003BE0 — ??_C@_1HE@BCIG@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
(L"\\REGISTRY\\Machine\\Sy"...)
-
00003C54 — ??_C@_1FM@MLDO@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAH?$AAA@
(L"\\REGISTRY\\Machine\\HA"...)
-
00003CB0 — ??_C@_1BA@JCHI@?$AAA?$AAu?$AAt?$AAo?$AAG?$AAe?$AAn?$AA?$AA@
(L"AutoGen")
Segment 10: _ITEXT @ 00000000
-
00000000 — ExportNTFunctions
-
000000DE — NTKERN_Device_Init
-
00000198 — _InitializeSystemPhase@4
-
000001EF — _InitializeSystem@0
-
00000228 — IO32_Device_Init
-
0000023C — _InitPowerHandler
-
00000272 — _ExpResourceInitialization@0
-
000002A4 — _ExpEventInitialization@0
-
0000031B — _ExInitSystem@4
-
0000033A — _ExpInitSystemPhase0@0
-
00000388 — _ExpInitSystemPhase1@0
-
000003A5 — _SysCreateWorkerThreads@4
-
00000410 — _ExpInitializeCallbacks@0
-
00000530 — _ExpWstrCallback
-
00000544 — _ExpInitializeCallback
-
00000564 — ??_C@_1EC@FFPO@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAu?$AAs?$AAp?$AAe?$AAn?$AAd?$AAH?$AAi?$AAb@
(L"\\Callback\\SuspendHib"...)
-
000005A8 — ??_C@_1DO@MHEK@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAI@
(L"\\Callback\\SetSystemI")
-
000005E8 — ??_C@_1DA@KHMA@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAT@
(L"\\Callback\\SetSystemT")
-
00000618 — _IoInitSystem@4
-
0000087F — _IopLoadPhaseDrivers@4
-
000008BD — _IopLoadRegistryDrivers@4
-
00000994 — _ICODE__SHELL_HookSystemBroadcast
-
0000099C — _ICODE__VPOWERD_Register_Power_Handler