NTKERN — Windows 98SE Retail


Source Tree


Segment 1: .bss @ 00006EE0
  • 00000000 — _PsThreadType
  • 00000004 — _MmSectionObjectType
  • 00000008 — _ObpRemoveQueueActive
  • 0000000C — _ObpObjectsWithName
  • 00000010 — _ObpObjectsCreated
  • 00000014 — _ObpObjectsWithHandleDB
  • 00000020 — _ObpRootDirectoryMutex
  • 00000058 — _ObpTypeDirectoryObject
  • 0000005C — _ObpSymbolicLinkObjectType
  • 00000060 — _ObpObjectTypes
  • 000000C0 — _ObpRemoveObjectQueue
  • 000000D0 — _ObpRemoveObjectWorkItem
  • 000000E0 — _ObpDirectoryObjectType
  • 000000F0 — _ObpDefaultObject
  • 00000100 — _HandleCount
  • 00000104 — _ObpTypeObjectType
  • 00000108 — _ObpLock
  • 0000010C — _Global_Handle_Table
  • 00000110 — _ObpRootDirectoryObject
  • 00000120 — _IopErrorLogWorkItem
  • 00000130 — _IopErrorLogPortPending
  • 00000140 — _IopDatabaseEvent
  • 00000150 — _IopTimerQueueHead
  • 00000158 — _IopCancelSpinLock
  • 0000015C — _IopTimerLock
  • 00000160 — _ConfigurationInformation
  • 00000180 — _IoAdapterObjectType
  • 000001A0 — _IopTimerDpc
  • 000001C0 — _IopCompletionLock
  • 000001C4 — _IoOtherOperationCount
  • 000001C8 — _IopErrorLogLock
  • 000001D0 — _IoReadTransferCount
  • 000001D8 — _IopNotifyShutdownQueueHead
  • 000001E0 — _IoReadOperationCount
  • 000001E4 — _IoDriverObjectType
  • 000001E8 — _IopTimerCount
  • 000001EC — _IopFileObjectType
  • 00000200 — _IopTimer
  • 00000228 — _NextUniqueDeviceObjectNumber
  • 00000230 — _IopErrorLogListHead
  • 00000238 — _IoWriteOperationCount
  • 0000023C — _IoDeviceObjectType
  • 00000240 — _IopErrorLogAllocation
  • 00000244 — _IopDatabaseLock
  • 00000248 — _IopErrorLogAllocationLock
  • 00000260 — _IopAssociationHashTable
  • 00000460 — _NullPage
  • 00000464 — _LessThan16Mb
  • 00000468 — _MasterAdapterObject
  • 00000470 — _HalpBusDatabaseEvent
  • 00000480 — _HalpMapBufferSize
  • 00000484 — _HalpEisaDma
  • 00000488 — _HalpBusType
  • 00000490 — _HalpMapBufferPhysicalAddress
  • 00000498 — _HalpEisaControlBase
  • 000004A0 — _HalpEisaAdapter
  • 000004C0 — _ExNPagedLookasideLock
  • 000004C8 — _ExPagedLookasideListHead
  • 000004D0 — _ExPagedLookasideLock
  • 000004D8 — _ExNPagedLookasideListHead
  • 000004E0 — _ExCbSetSystemInformation
  • 000004E4 — _ExCbSetSystemTime
  • 000004E8 — _ExCbSuspendHibernateSystem
  • 000004EC — _ExCallbackObjectType
  • 000004F0 — _ExpCallbackEvent
  • 00000500 — _PendingDelayedWorkItems
  • 00000520 — _CriticalWorkItems
  • 00000548 — _PendingCriticalWorkItems
  • 00000560 — _DelayedWorkItems
  • 00000588 — _ExpEventObjectType
  • 0000058C — _ExEventObjectType
  • 00000590 — _ExpTimeout
  • 00000598 — _ExpSystemResourcesList
  • 000005A0 — _ExpResourceSpinLock
  • 000005C0 — _PopThrottleTimer
  • 00000600 — _PoSystemIdleTimer
  • 00000640 — _PopPolicyLock
  • 00000678 — _PopIdleScanTime
  • 00000680 — _PopIdleScanTimer
  • 000006A8 — _PopWorkerItemQueue
  • 000006B0 — _PopThrottleTimeout
  • 000006B8 — _PopActionWaiters
  • 000006C0 — _PopDumbyEvent
  • 000006D0 — _PopInrushIrpPointer
  • 000006D8 — _PopThermal
  • 000006E0 — _PopVolumeDevices
  • 000006E8 — _PopWorkerSpinLock
  • 000006EC — _PopWorkerThread
  • 000006F0 — _PopCoolingMode
  • 000006F4 — _PopInrushPending
  • 00000700 — _PopAdminPolicy
  • 00000718 — _PopWorkerPending
  • 00000720 — _PopWorkerStartEvent
  • 00000730 — _PopPolicyIrpQueue
  • 00000738 — _PopSwitches
  • 00000740 — _PopSIdle
  • 00000778 — _PopInvalidNotifyBlockCount
  • 00000780 — _PopCapabilities
  • 000007D0 — _PopIrpSerialList
  • 000007D8 — _PopIrpSerialLock
  • 000007E0 — _PopCB
  • 000008A0 — _PopEventCode
  • 000008B0 — _PopIrpSerialListLength
  • 000008B4 — _PopIdle0PromoteLimit
  • 000008C0 — _PopVolumeLock
  • 000008E0 — _PopIdle0PromoteTicks
  • 000008E4 — _PopWorkerExitFlag
  • 000008E8 — _PopDopeGlobalLock
  • 000008EC — _PopWorkerStatus
  • 000008F0 — _PopInrushIrpReferenceCount
  • 00000900 — _PopPolicyWorker
  • 00000910 — _PopRequestedIrps
  • 00000918 — _PopWorkerLock
  • 0000091C — _PopFullWake
  • 00000920 — _PopHeuristics
  • 00000934 — _PopStateCallout
  • 00000938 — _PopIdleDetectList
  • 00000940 — _IopHwProfileChangeNotifyLock
  • 00000960 — _IopDeviceClassNotifyList
  • 000009E0 — _IopDeviceClassNotifyLock
  • 00000A00 — _IopHwProfileChangeNotifyList
  • 00000A08 — _CurrentThread
  • 00000A10 — _KrnProcessList
  • 00000A18 — _NTKERNPreviousMode
  • 00000A1C — _SystemPTEPoolSize
  • 00000A20 — _SystemPTESpace
  • 00000A28 — _SystemPTEBusyMapHeader
  • 00000A30 — _SystemPTEBusyMap
  • 00000A34 — _hWin95NullPage
  • 00000A38 — _InitializationPhase
  • 00000A40 — _DebugRingBuffer
  • 00000A4C — _errno
  • 00000A50 — _DriverList
  • 00000A60 — ??_C@_0BB@HLDA@system32?2drivers?$AA@
  • 00000A74 — ??_C@_08OGD@system32?$AA@
  • 00000A80 — ??_C@_06GMLA@system?$AA@
  • 00000A88 — ??_C@_07NKAG@?$CFs?$CFs?2?$CFs?$AA@
  • 00000A90 — ??_C@_0O@BMMI@DllInitialize?$AA@
  • 00000AA0 — _RegistryMapping
  • 00000AD8 — _MappingTables
  • 00000AE0 — _MmpUserProbeAddress
  • 00000AE4 — _MmUserProbeAddress
  • 00000AE8 — ??_C@_0DG@KEAH@MmMapIoSpace?3?5NtKernSetPhysicalC@
  • 00000B20 — ??_C@_0CP@KEP@MmMapIoSpace?3?5Failed?5to?5set?5rang@
  • 00000B50 — ??_C@_1BG@OJPP@?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAW?$AAD?$AAM?$AA?$AA@
  • 00000B68 — ??_C@_1GI@DEJO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY@
  • 00000BD0 — ??_C@_1BK@JLBF@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
  • 00000BEC — ??_C@_1M@HKNH@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
  • 00000BF8 — ??_C@_19KJIP@?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
  • 00000C04 — ??_C@_1BE@PJND@?$AAI?$AAm?$AAa?$AAg?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
  • 00000C18 — ??_C@_1IA@PBPA@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY@
  • 00000C98 — _ThreadDataSlot
  • 00000C9C — ??_C@_0DB@CHBE@?5KTHREAD?5?$CFx?0?5hRing0?5?$CFx?0?5IRQL?5?$CF02@
  • 00000CD0 — ??_C@_0CB@EMFF@?6Process?5?$CFx?5sys?5?$CFx?5thread?5list?3?6@
  • 00000CF4 — ??_C@_0BO@GPIB@HARDWARE?2DeviceMap?2InputClass?$AA@
  • 00000D14 — ??_C@_0BN@KAPE@HARDWARE?2DeviceMap?2InputPort?$AA@
  • 00000D34 — _PathMapArray
  • 00000D44 — _pZWKeyList
  • 00000D48 — _CLASS_NAME
  • 00000D54 — ??_C@_0M@EPEN@Unspecified?$AA@
  • 00000D60 — ??_C@_07PCLD@Working?$AA@
  • 00000D68 — ??_C@_09GJGM@Sleeping1?$AA@
  • 00000D74 — ??_C@_09JGNF@Sleeping2?$AA@
  • 00000D80 — ??_C@_09DMEC@Sleeping3?$AA@
  • 00000D8C — ??_C@_09NLJB@Hibernate?$AA@
  • 00000D98 — ??_C@_08DCJK@Shutdown?$AA@
  • 00000DA4 — ??_C@_08COLN@USER?4EXE?$AA@
  • 00000DB0 — ??_C@_0M@BPKL@MESSAGEBEEP?$AA@
  • 00000DBC — ??_C@_0M@FPCA@EXITWINDOWS?$AA@
  • 00000DC8 — _PopIdleDetectionMode
  • 00000DCC — _PopSimulate
  • 00000DD0 — _PopAttributes
  • 00000E20 — _PopRegKey
  • 00000E5C — _PopAcRegName
  • 00000E70 — _PopDcRegName
  • 00000E84 — _PopHiberRegName
  • 00000EA8 — _PopAdminRegName
  • 00000EC8 — _PopHeuristicsRegName
  • 00000EE0 — _PopCompositeBatteryName
  • 00000F14 — _PopHiberFileName
  • 00000F30 — _PopDebugHiberFileName
  • 00000F4C — _PopDumpStackPrefix
  • 00000F5C — _PopWorkerTypes
  • 00000F70 — _PopPowerStateHandlers
  • 00000FE0 — _PopPolicyLockThread
  • 00000FE4 — _PopAcPolicy
  • 000010CC — _PopDcPolicy
  • 000011B4 — _PopPolicy
  • 000011B8 — _PopAction
  • 000011E8 — _PopMaxPageRun
  • 000011EC — _PopDebugCloneBase
  • 000011F0 — _PopDebugCloneEnd
  • 000011F4 — _PopHiberFile
  • 00001210 — _PopHiberFileDebug
  • 0000122C — _PoPageLockData
  • 00001230 — _lpszWarningText
  • 00001284 — _hTimeOut
  • 00001288 — _PopSystemActionPending
  • 0000128C — _PopAppyTimeHandle
  • 00001290 — _PoolFlags
  • 000012AC — _ExpResourceTimeoutCount
  • 000012B0 — ??_C@_0BB@MKLO@?8EX?5?9?5Rewaiting?6?$AA@
  • 000012C4 — ??_C@_0CE@DFPL@?8?5NumberOfExclusiveWaiters?5?$DN?5?$CF04@
  • 000012E8 — ??_C@_0CH@NBOI@?8?5ActiveCount?5?$DN?5?$CF04lx?5?5Flags?5?$DN?5?$CF@
  • 00001310 — ??_C@_0BC@EMAC@IsOwnedExclusive?5?$AA@
  • 00001324 — ??_C@_0O@DCBD@SharedWaiter?5?$AA@
  • 00001334 — ??_C@_00A@?$AA@
  • 00001338 — ??_C@_0BB@PBLJ@ExclusiveWaiter?5?$AA@
  • 0000134C — ??_C@_0BB@MPPP@?8Resource?5?$EA?5?$CFlx?6?$AA@
  • 00001360 — ??_C@_0CB@COIA@?8?5?5Thread?5?$DN?5?$CF08lx?0?5Count?5?$DN?5?$CF02x?6@
  • 00001384 — _ExpSemaphoreObjectType
  • 00001388 — _ExSemaphoreObjectType
  • 0000138C — _ExpEventMapping
  • 0000139C — ??_C@_1M@BACH@?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
  • 000013A8 — _ExpCallbackMapping
  • 000013B8 — ??_C@_1BC@NEEN@?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
  • 000013CC — _ExpAdjustScanPeriod
  • 000013D0 — _ExpCurrentScanPeriod
  • 000013D4 — _HalpDmaOperations
  • 00001408 — _NlsMbCodePageTag
  • 0000140C — _RtlFreeStringRoutine
  • 00001410 — _RtlAllocateStringRoutine
  • 00001414 — ??_C@_0DD@HEJB@RtlAssert?3?5Assertion?5?$CI?$CFs?$CJ?5failed@
  • 00001448 — ??_C@_0DG@FKJI@RtlAssert?3?5Assertion?5?$CI?$CFs?$CJ?5failed@
  • 00001480 — _RtlpBitsClearAnywhere
  • 00001580 — _RtlpBitsClearLow
  • 00001680 — _RtlpBitsClearHigh
  • 00001780 — _RtlpBitsClearTotal
  • 00001898 — ??_C@_13HMCP@?$AA?2?$AA?$AA@
  • 0000189C — ??_C@_1CA@NKCK@?$AA?$CK?$AA?$CK?$AA?$CK?$AA?5?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$AA@
  • 000018BC — _RtlpRegistryPaths
  • 000018D4 — _GuidFormat
  • 0000193C — ??_C@_1BM@CAEM@?$AAU?$AAs?$AAe?$AAr?$AA?2?$AA?4?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
  • 00001958 — ??_C@_1CG@BHB@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAM?$AAa?$AAp?$AA?$AA@
  • 00001980 — ??_C@_1FE@EPLF@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW@
  • 000019D4 — ??_C@_1EC@JGOB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@
  • 00001A18 — ??_C@_1EE@KIMN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@
  • 00001A5C — _RtlpIntegerChars
  • 00001A6C — _LeapYearDayToMonth
  • 00001BDC — _NormalYearDayToMonth
  • 00001D4C — _LeapYearDaysPrecedingMonth
  • 00001D68 — _NormalYearDaysPrecedingMonth
  • 00001D84 — _SecondsToStartOf1970
  • 00001D8C — _SecondsToStartOf1980
  • 00001D94 — _Magic10000
  • 00001D9C — _Magic10000000
  • 00001DA4 — _Magic86400000
  • 00001DAC — ??_C@_1BA@NEMI@?$AA?$CF?$AAw?$AAZ?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
  • 00001DBC — ??_C@_1BI@KHDI@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAl?$AAu?$AA?$AA@
  • 00001DD4 — ??_C@_1BI@CICJ@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
  • 00001DEC — ??_C@_13DOBH@?$AA?4?$AA?$AA@
  • 00001DF0 — _Mmp64BitPhysicalAddress
  • 00001DF4 — _Mm64BitPhysicalAddress
  • 00001DF8 — _IoFileObjectType
  • 00001DFC — ??_C@_0BI@DHNG@?8IoDriver?5object?5?$CFs?5?$CFx?6?$AA@
  • 00001E14 — ??_C@_0BI@DJND@?8IoDevice?5object?5?$CFs?5?$CFx?6?$AA@
  • 00001E2C — _IopFileMapping
  • 00001E3C — ??_C@_1BA@FOJN@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
  • 00001E4C — ??_C@_1BA@BBDO@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
  • 00001E5C — ??_C@_1BI@EDCJ@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
  • 00001E74 — ??_C@_19GDCN@?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
  • 00001E80 — ??_C@_1O@IMKM@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
  • 00001E90 — ??_C@_1O@MDAP@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
  • 00001EA0 — ??_C@_1BA@PFGJ@?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
  • 00001EB0 — ??_C@_0CE@KOCD@?8Multiple?5irp?5complete?5requests?5@
  • 00001ED4 — ??_C@_1BK@PKEN@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAU?$AA_?$AA?$CF?$AAx?$AA?$AA@
  • 00001EF0 — ??_C@_1BI@LELB@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
  • 00001F08 — ??_C@_1BA@HANO@?$AA?2?$AA?2?$AA?4?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
  • 00001F18 — ??_C@_19JGFB@?$AA?2?$AA?2?$AA?4?$AA?2?$AA?$AA@
  • 00001F24 — ??_C@_1BK@LPBE@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AA?$AA@
  • 00001F40 — ??_C@_1CM@JPOA@?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CD?$AA?$CF?$AAw?$AAZ?$AA?$CF?$AAs?$AA?$CF?$AAw@
  • 00001F6C — ??_C@_1BG@BJJK@?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
  • 00001F84 — ??_C@_15LEKJ@?$AA?2?$AA?4?$AA?$AA@
  • 00001F8C — ??_C@_11A@?$AA?$AA@
  • 00001F90 — ??_C@_1BM@PFBL@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$CF?$AAs?$AA?$AA@
  • 00001FAC — ??_C@_1BC@KIOB@?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?$AA@
  • 00001FC0 — ??_C@_1BG@PKBH@?$AA?$CF?$AAw?$AAZ?$AA?$CD?$AA?$CF?$AAw?$AAZ?$AA?$CF?$AAw?$AAZ?$AA?$AA@
  • 00001FD8 — ??_C@_1DM@GGCI@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2@
  • 00002014 — ??_C@_1BK@CENL@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AA?$AA@
  • 00002030 — ??_C@_19BBIN@?$AA?4?$AAS?$AAY?$AAS?$AA?$AA@
  • 0000203C — ??_C@_1BG@PJKH@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
  • 00002054 — ??_C@_15HGOB@?$AA?$CF?$AAS?$AA?$AA@
  • 0000205C — ??_C@_1BG@BNKI@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAS?$AA?$AA@
  • 00002074 — ??_C@_0L@HBI@String?3?$CFS?6?$AA@
  • 00002080 — ??_C@_0BE@NFBF@NumberOfStrings?3?$CFx?6?$AA@
  • 00002094 — ??_C@_0BC@JGKM@IoControlCode?3?$CFx?6?$AA@
  • 000020A8 — ??_C@_0BD@JIFC@SequenceNumber?3?$CFx?6?$AA@
  • 000020BC — ??_C@_0BA@GGNH@FinalStatus?3?$CFd?6?$AA@
  • 000020CC — ??_C@_0BF@BIHM@UniqueErrorValue?3?$CFd?6?$AA@
  • 000020E4 — ??_C@_0O@HIIA@ErrorCode?3?$CFx?6?$AA@
  • 000020F4 — ??_C@_0BC@CGBB@EventCategory?3?$CFx?6?$AA@
  • 00002108 — ??_C@_0BB@IENP@DumpDataSize?3?$CFx?6?$AA@
  • 0000211C — ??_C@_0BA@EPKC@Retry?5Count?3?$CFx?6?$AA@
  • 0000212C — ??_C@_0BI@OMHI@Major?5Function?5Code?3?$CFx?6?$AA@
  • 00002144 — ??_C@_0BA@DBMH@Driver?5Name?3?$CFS?6?$AA@
  • 00002154 — ??_C@_0CC@KNBK@?6IO?5Error?5Log?5Packet?5Information@
  • 00002178 — ??_C@_13A@?$AA?$AA?$AA?$AA@
  • 0000217C — ??_C@_1BK@OIJB@?$AA?2?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAT?$AAy?$AAp?$AAe?$AAs?$AA?$AA@
  • 00002198 — ??_C@_1BE@PPB@?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
  • 000021AC — ??_C@_0BN@FKCK@?8Symbolic?5link?5object?5?$CFs?5?$CFx?6?$AA@
  • 000021CC — ??_C@_0BG@NGKK@?8Directory?5object?5?$CFs?6?$AA@
  • 000021E4 — ??_C@_0BP@OJA@?8Dumping?5the?5object?5directory?6?$AA@
  • 00002204 — ??_C@_0BN@DCAD@?8Dumping?5the?5root?5directory?6?$AA@
  • 00002224 — _FSysErr
  • 00002234 — _FSysErrVerbose
  • 00002244 — _FErrorCode
  • 00002254 — _FCaption
  • 00002278 — ??_C@_0BI@NKKE@?$CFs?5called?5by?5?$CFx?5?6?$CFs?5?$CFx?6?$AA@
  • 00002290 — ??_C@_0DB@NGP@?$CFs?5called?5by?5?$CFx?5?6?$CFs?5?$CFx?5?6Paramete@
  • 000022C4 — _NestCount
  • 000022C8 — _MiSectionMapping
  • 000022D8 — ??_C@_1CO@EMLF@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAP?$AAh?$AAy?$AAs?$AAi?$AAc?$AAa?$AAl?$AAM?$AAe?$AAm?$AAo@
  • 00002308 — ??_C@_1BA@GGKP@?$AAS?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
  • 00002318 — _MMCONTROL
  • 0000231C — _PspThreadMapping
  • 0000232C — ??_C@_1O@BEJI@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AA?$AA@
  • 00002340 — ___nullstring
  • 00002344 — ___wnullstring
  • 00002348 — ??_C@_1O@POHA@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA@
  • 00002358 — ??_C@_06ONKE@?$CInull?$CJ?$AA@
  • 00002360 — __pctype
  • 00002364 — __pwctype
  • 00002368 — __ctype
  • 0000256C — ___mb_cur_max
  • 00002570 — __decimal_point
  • 00002574 — __decimal_point_length
  • 00002578 — __fltused
  • 0000257C — __ldused
  • 00002580 — ___fastflag
  • 00002588 — __cfltcvt_tab
  • 000025A0 — __sigintoff
  • 000025A8 — _GUID_HWPROFILE_QUERY_CHANGE
  • 000025B8 — _GUID_HWPROFILE_CHANGE_CANCELLED
  • 000025C8 — _GUID_HWPROFILE_CHANGE_COMPLETE
  • 000025D8 — _GUID_DEVICE_INTERFACE_ARRIVAL
  • 000025E8 — _GUID_DEVICE_INTERFACE_REMOVAL
  • 000025F8 — _GUID_TARGET_DEVICE_QUERY_REMOVE
  • 00002608 — _GUID_TARGET_DEVICE_REMOVE_CANCELLED
  • 00002618 — _GUID_TARGET_DEVICE_REMOVE_COMPLETE
  • 00002628 — _GUID_BUS_INTERFACE_STANDARD
  • 00002638 — _GUID_PCI_BUS_INTERFACE_STANDARD
  • 00002648 — _GUID_ARBITER_INTERFACE_STANDARD
  • 00002658 — _GUID_TRANSLATOR_INTERFACE_STANDARD
  • 00002668 — _GUID_ACPI_INTERFACE_STANDARD
  • 00002678 — _GUID_BUS_TYPE_PCMCIA
  • 00002688 — _GUID_BUS_TYPE_PCI
  • 00002698 — _GUID_BUS_TYPE_USB
  • 000026E4 — _GUID_DEVICE_BATTERY
  • 000026F4 — _GUID_DEVICE_SYS_BUTTON
  • 00002704 — _GUID_DEVICE_LID
  • 00002714 — _GUID_DEVICE_THERMAL_ZONE
  • 00002724 — _GUID_CLASS_INPUT
  • 000028B8 — ___lookuptable
  • 00002920 — _FreeDriverInitialization@4
  • 00002946 — _MapWin95Err@8
  • 00002980 — _MmUnlockPages@4
  • 00002A96 — _MiDeferredUnLock@20
  • 00002AD6 — _MmUnmapLockedPages@8
  • 00002B97 — _MiDeferredUnMap@20
  • 00002BB6 — _MmMapLockedPages@8
  • 00002D28 — _ntkIsSwapping@0
  • 00002D3E — _MmSizeOfMdl@8
  • 00002D68 — _MmCreateMdl@12
  • 00002DD8 — _MmAllocateContiguousMemory@12
  • 00002E00 — _MmBuildMdlForNonPagedPool@4
  • 00002E61 — _RtlFreeString@4
  • 00002E61 — _IoFreeIrp@4
  • 00002E61 — _MmFreeContiguousMemory@4
  • 00002E6D — _MmProbeAndLockPages@12
  • 00002F71 — _MmProbeAndLockProcessPages@16
  • 0000304F — _MiLockProcessPages@20
  • 00003074 — _MiLockPages@20
  • 0000309D — _MmMapIoSpace@16
  • 00003294 — _MmUnmapIoSpace@8
  • 000032E2 — _MiReserveSystemPtes@20
  • 000033A5 — _MiInitializeSystemPtes@12
  • 00003422 — _MiReleaseSystemPtes@12
  • 00003460 — _ThreadSwitchNotification@4
  • 000034CD — _KeGetCurrentThread@0
  • 000034D3 — _IoGetCurrentProcess@0
  • 000034DC — _memmove
  • 0000351F — _InitializeRegistry@0
  • 00003541 — _ProbeForRead@12
  • 00003572 — _ProbeForWrite@12
  • 00003586 — _DeviceIoControl@12
  • 00003628 — _IoUnregisterPlugPlayNotification@4
  • 00003658 — _IoReportTargetDeviceChange@8
  • 00003660 — _IopInitializePlugPlayNotification@0
  • 000036BD — _IopReferenceNotify@4
  • 000036C8 — _IopDereferenceNotify@4
  • 000036EA — _IopNotifyHwProfileChange@4
  • 00003767 — _IopNotifyDeviceClassChange@12
  • 0000382E — _IoRegisterPlugPlayNotification@28
  • 000039F1 — _NtGetDevnodeFromFileHandle@8
  • 00003A9F — _PoRegisterSystemState@8
  • 00003AFB — _PoUnregisterSystemState@4
  • 00003B15 — _PopApplyAttributeState@8
  • 00003B9D — _PopSystemRequiredSet@4
  • 00003BB0 — _PopUserPresentSet@4
  • 00003BE2 — _ConvertToCMPowerState@12
  • 00003C2A — _PoQueryPowerSequence@0
  • 00003C2E — @_PopInternalError@4
  • 00003C40 — _PopChangeCapability@8
  • 00003C60 — _PopOpenPowerKey@4
  • 00003CF1 — _PopCloseSystemHandle@4
  • 00003D00 — _NtSetThreadExecutionState@8
  • 00003DEC — _NtRequestWakeupLatency@4
  • 00003E3B — _NtInitiatePowerAction@16
  • 00003E43 — _NtSetSystemPowerState@12
  • 00003E4B — _CancelWarningDialog
  • 00003E78 — _PopMessageBoxCompletion
  • 00003E93 — _PopDisplayWarningDialog
  • 00003F46 — _PopSetPowerAction@16
  • 00004190 — _PopCompleteAction@8
  • 000041B7 — _PopPromoteActionFlag@20
  • 000041F8 — _PopPolicyWorkerAction@0
  • 000042AB — _PopPolicyWorkerActionPromote@0
  • 0000431F — _PopShutdown
  • 0000435A — _PopIssueActionRequest@16
  • 00004447 — _PopRemoveUserEventsFromQueue@0
  • 00004460 — _PopSuspendTimeOut
  • 00004475 — _PopCompositeBatteryDeviceHandler@16
  • 00004911 — _PopComputeCBTime@0
  • 0000491C — _PopResetCBTriggers@4
  • 00004946 — _PopCurrentPowerState@4
  • 00004AB3 — _NtPowerInformation@20
  • 00004EE1 — _PopApplyAdminPolicy@12
  • 00004FB5 — _PopApplyPolicy@16
  • 0000512A — _PopVerifyPowerPolicy@12
  • 000052FC — _PopVerifyThrottle@8
  • 0000535D — _PopVerifyPowerActionPolicy@4
  • 00005421 — _PopVerifySystemPowerState@4
  • 000054D0 — _PopResetCurrentPolicies@0
  • 0000562C — _PopNotifyPolicyDevice@8
  • 00005666 — _PopConnectToPolicyDevice@8
  • 000058B0 — _PoInitSystem@4
  • 00005C63 — _PopDefaultPolicy@4
  • 00005CCC — _PoInitDriverServices@4
  • 00005D71 — _PopRegisterForDeviceNotification@8
  • 00005D96 — _PoSetPowerState@12
  • 00005D9D — _PopAcquirePolicyLock@0
  • 00005DB9 — _PopReleasePolicyLock@4
  • 00005DED — _PopGetPolicyWorker@4
  • 00005E11 — _PopCompletePolicyIrp@12
  • 00005E7C — _PopCheckForWork@0
  • 00005EEA — _PopPolicyWorkerThread@4
  • 00005F8C — _PopPolicyWorkerMain@0
  • 00005FCD — _PopDoNotificationWork
  • 00006016 — _PopSetNotificationWork@4
  • 00006036 — _PopInitSIdle@0
  • 0000610A — _PopPolicySystemIdle@0
  • 0000616B — _PoSystemIdleWorker@4
  • 00006172 — _PopSystemButtonHandler@16
  • 00006301 — _PopTriggerSwitch@12
  • 00006355 — _PopResetSwitchTriggers@0
  • 0000636C — _PopThermalZoneDpc@16
  • 0000636C — _PopThermalDeviceHandler@16
  • 0000636F — _ExAllocatePoolWithTag@12
  • 000063A0 — _ExpAllocatePool@12
  • 000063D7 — _ExpFreePool@4
  • 000063E5 — _ExFreePool@4
  • 000063F1 — _ExAllocatePool@8
  • 00006420 — _ExInitializeResourceLite@4
  • 00006452 — _ExReinitializeResourceLite@4
  • 000064CE — @ExpAcquireResourceExclusiveLite@8
  • 0000654A — _ExAcquireResourceExclusiveLite@8
  • 000065A3 — _ExTryToAcquireResourceExclusiveLite@4
  • 000065EB — _ExAcquireResourceSharedLite@8
  • 000066F6 — @ExReleaseResourceLite@4
  • 000067E0 — _ExDeleteResourceLite@4
  • 00006835 — _ExGetExclusiveWaiterCount@4
  • 00006840 — _ExGetSharedWaiterCount@4
  • 0000684B — _ExIsResourceAcquiredExclusiveLite@4
  • 00006877 — _ExIsResourceAcquiredSharedLite@4
  • 000068CB — _ExpWaitForResource@8
  • 00006A0F — _ExpFindCurrentThread@8
  • 00006AF9 — @ExAcquireFastMutexUnsafe@4
  • 00006B1A — @ExReleaseFastMutexUnsafe@4
  • 00006B35 — @ExAcquireFastMutex@4
  • 00006B52 — @ExReleaseFastMutex@4
  • 00006B64 — _ExSystemExceptionFilter@0
  • 00006B70 — _ExGetPreviousMode@0
  • 00006B76 — _ExShutDown@0
  • 00006B7B — _ExQueueWorkItem@8
  • 00006BFE — _Query_Thread_Priority@0
  • 00006C10 — _KefYield@0
  • 00006C2F — _ExRegisterCallback@12
  • 00006CC4 — _ExUnregisterCallback@4
  • 00006D47 — _ExNotifyCallback@12
  • 00006DE0 — _ExDeleteNPagedLookasideList@4
  • 00006E24 — _ExDeletePagedLookasideList@4
  • 00006E68 — _ExAllocateFromPagedLookasideList@4
  • 00006EDE — _ExAllocateFromNPagedLookasideList@4
  • 00006F07 — _ExFreeToPagedLookasideList@8
  • 00006F73 — _ExpDummyAllocate@12
  • 00006F78 — _HalPutDmaAdapter@4
  • 00006F78 — _IopCheckDeviceName@4
  • 00006F78 — _PopAttribNop@4
  • 00006F7B — _HalAllocateAdapterChannel@16
  • 0000708A — _IoMapTransfer@24
  • 000070F7 — _HalpMapTransferHelper@20
  • 00007138 — _HalpMapTransfer@24
  • 0000747B — _IoFlushAdapterBuffers@24
  • 000075AF — _HalReadDmaCounter@4
  • 00007699 — _HalGetDmaAlignment@4
  • 0000769F — _HalpAllocPhysicalMemory@12
  • 000076F1 — _HalpCopyBufferMap@20
  • 0000774C — _HalFlushCommonBuffer@20
  • 00007751 — _HalFreeCommonBuffer@24
  • 0000775D — _IoFreeAdapterChannel@4
  • 00007855 — _IoFreeMapRegisters@12
  • 00007986 — _HalGetInterruptVector@24
  • 000079B2 — _HalTranslateBusAddress@24
  • 000079C8 — _HalpGetCmosData@16
  • 00007A45 — _HalGetBusData@20
  • 00007A91 — _HalGetBusDataByOffset@24
  • 00007AB9 — _RtlUnicodeStringToAnsiSize@4
  • 00007ADB — _RtlSingleByteSet
  • 00007AE3 — _RtlUpcaseUnicodeChar@4
  • 00007B01 — _RtlpUpcaseUnicodeChar@4
  • 00007B1F — _RtlAnsiCharToUnicodeChar@4
  • 00007B67 — _RtlAllocateString@4
  • 00007B7A — _RtlInitAnsiString@8
  • 00007BA8 — _RtlInitUnicodeString@8
  • 00007BDA — _RtlAssert@16
  • 00007C28 — _RtlEqualUnicodeString@12
  • 00007CC1 — _RtlCopyUnicodeString@8
  • 00007D13 — _RtlAppendUnicodeToString@8
  • 00007D84 — _RtlAppendUnicodeStringToString@8
  • 00007DE8 — _RtlxUnicodeStringToAnsiSize@4
  • 00007E06 — _RtlxAnsiStringToUnicodeSize@4
  • 00007E27 — _RtlFreeAnsiString@4
  • 00007E27 — _RtlFreeUnicodeString@4
  • 00007E3C — _RtlCompareUnicodeString@12
  • 00007F03 — _RtlUnicodeToMultiByteN@20
  • 00007F2B — _RtlMultiByteToUnicodeN@20
  • 00007F50 — _RtlUpcaseUnicodeToMultiByteN@20
  • 00007FA2 — _RtlUnicodeToMultiByteSize@12
  • 00007FCA — _RtlAllocateSprintf
  • 00007FE3 — _RtlAllocateWsprintf
  • 00007FFC — _RtlpAllocateSprintf@20
  • 0000808E — _RtlMapGenericMask@8
  • 000080E2 — _RtlSetAllBits@4
  • 00008102 — _RtlSetBits@12
  • 0000819C — _RtlFindClearBits@12
  • 000083EF — _RtlFindClearBitsAndSet@12
  • 0000841B — _RtlClearBits@12
  • 000084B6 — _RtlDeleteRegistryValue@12
  • 000084FA — _RtlIntegerToChar@16
  • 000085EB — _RtlUnicodeStringToInteger@12
  • 0000873F — _RtlIntegerToUnicodeString@12
  • 00008786 — _RtlLargeIntegerToChar@16
  • 000088D4 — _RtlMoveMemory@12
  • 000088EB — _RtlCopyMemory@12
  • 00008902 — _RtlZeroMemory@8
  • 00008918 — _ElapsedDaysToYears@4
  • 00008988 — _DaysAndFractionToTime@12
  • 000089C0 — _RtlTimeToTimeFields@8
  • 00008B4B — _RtlTimeFieldsToTime@8
  • 00008CE4 — _IopAssociationLookup@12
  • 00008D19 — _IopAssociationInsert@8
  • 00008D35 — _IoAssociationAllocate@16
  • 00008E1B — _IoAssociationFind@16
  • 00008EDD — _IoGetDriverObjectExtension@8
  • 00008F00 — _NTKERNProcessISR
  • 00008F28 — _NtKernGetVPICDHandleFromInterruptObj
  • 00008F45 — _IopDecrementDeviceObjectRef@8
  • 00008F94 — _IopInsertRemoveDevice@12
  • 00008FE6 — _IopCompleteUnloadOrDelete@8
  • 0000913D — _IopCompleteRequest@20
  • 000093B9 — _IopDisassociateThreadIrp@0
  • 00009416 — _IopFreeMdl@4
  • 00009434 — _IopDropIrp@8
  • 00009497 — _IopInvalidDeviceRequest@8
  • 000094B1 — _IopExceptionFilter@8
  • 000094D9 — _IopExceptionCleanup@16
  • 00009545 — _IopFreeIrpAndMdls@4
  • 0000956B — _IopTimerDispatch@16
  • 000095E3 — @IofCompleteRequest@8
  • 00009842 — _IoAllocateErrorLogEntry@8
  • 00009953 — _IoWriteErrorLogEntry@4
  • 000099CA — _IoCreateSymbolicLink@8
  • 00009A23 — _IopRemoveTimerFromTimerList@4
  • 00009A4C — _IoDeleteDevice@4
  • 00009ABB — _IoDetachDevice@4
  • 00009B07 — _IoCompleteRequest@8
  • 00009B17 — _IoInitializeIrp@12
  • 00009B5E — _IoAllocateIrp@8
  • 00009B97 — _IoGetAttachedDevice@4
  • 00009BA9 — _IoGetAttachedDeviceReference@4
  • 00009BCC — _IoGetRelatedDeviceObject@4
  • 00009C00 — @IofCallDriver@8
  • 00009C1E — _IoCancelIrp@4
  • 00009C7A — _IoAllocateMdl@20
  • 00009D21 — _IoFreeMdl@4
  • 00009D3F — _IopSetAttachedDevicePointer@8
  • 00009D7A — _IoAttachDeviceToDeviceStack@8
  • 00009DC3 — _IoAttachDeviceByPointer@8
  • 00009E13 — _IoAcquireCancelSpinLock@4
  • 00009E26 — _IoReleaseCancelSpinLock@4
  • 00009E37 — _IoAllocateAdapterChannel@20
  • 00009E62 — _IoCallDriver@8
  • 00009E72 — _IoStartTimer@4
  • 00009E9B — _IoStopTimer@4
  • 00009EC3 — _IoBuildSynchronousFsdRequest@28
  • 00009F20 — _IoBuildAsynchronousFsdRequest@24
  • 0000A007 — _IoStartNextPacket@8
  • 0000A062 — _IoStartNextPacketByKey@12
  • 0000A0C0 — _IoStartPacket@16
  • 0000A166 — _IopAppendWorkHandleList@12
  • 0000A1D8 — _IoBuildPartialMdl@16
  • 0000A2AA — _IoGetCurrentIrpStackLocation@4
  • 0000A2B4 — _NtLoadDriver@4
  • 0000A302 — _IopReferenceAttachmentChain@4
  • 0000A319 — _IopDereferenceAttachmentChain@4
  • 0000A335 — _IopDeleteFile@4
  • 0000A4BB — _IopCheckDeviceAndDriver@16
  • 0000A512 — _IopDereferenceVpbAndFree@4
  • 0000A53A — _ZwQueryInformationFile@20
  • 0000A56A — _IoAcquireRemoveLockEx@20
  • 0000A60A — _IoReleaseRemoveLockEx@12
  • 0000A6BB — _IoReportResourceUsage@36
  • 0000A6C7 — _LogPrint
  • 0000A6F4 — _IopErrorLogDpc@16
  • 0000A72B — _IopErrorLogGetEntry@0
  • 0000A76E — _ObpAllocateObjectCreateInfoBuffer@0
  • 0000A77D — _ObpAllocateObjectNameBuffer@8
  • 0000A7A6 — @ObpFreeObjectCreateInfoBuffer@4
  • 0000A7AD — @ObpFreeObjectNameBuffer@4
  • 0000A7B6 — _CloseHandle@8
  • 0000A830 — _NtClose@4
  • 0000A83E — _ObpInsertDirectoryEntry@8
  • 0000A8AB — _ObpDeleteDirectoryEntry@4
  • 0000A8E2 — _ObpIncrementHandleCount@24
  • 0000A93C — _ObpIncrementUnnamedHandleCount@16
  • 0000A9AC — _ObpDecrementHandleCount@12
  • 0000A9FC — @IsWin32Object@4
  • 0000AA53 — _GetWin32ObjectType@4
  • 0000AA7F — @ObfReferenceObject@4
  • 0000AAA4 — _ObpProcessRemoveObjectQueue@4
  • 0000AB09 — @ObfDereferenceObject@4
  • 0000ABBF — _ObReferenceObjectByHandle@24
  • 0000AC84 — _ObReferenceObjectByPointer@16
  • 0000AC92 — _ObDereferenceObject@4
  • 0000AC9E — _ObGetObjectName@4
  • 0000ACC7 — _KeInitializeApc@32
  • 0000AD19 — _KiProcessWin95APC@4
  • 0000ADBB — _KeInsertQueueApc@16
  • 0000AE65 — _KeRemoveQueueApc@4
  • 0000AE84 — _KeBugCheck@4
  • 0000AECC — _KeBugCheckEx@20
  • 0000AF26 — _KeInitializeSpinLock@4
  • 0000AF30 — _KeInitializeDeviceQueue@4
  • 0000AF4E — _KeInsertDeviceQueue@8
  • 0000AF90 — _KeRemoveDeviceQueue@4
  • 0000AFCD — _KeRemoveEntryDeviceQueue@8
  • 0000B009 — _KeSynchronizeExecution@12
  • 0000B032 — _KeInsertByKeyDeviceQueue@12
  • 0000B07B — _KeRemoveByKeyDeviceQueue@8
  • 0000B0D6 — _KeInitializeEvent@12
  • 0000B0F3 — _KeSetEvent@12
  • 0000B116 — _KeClearEvent@4
  • 0000B123 — _KeResetEvent@4
  • 0000B130 — _KePulseEvent@12
  • 0000B16A — _KeReadStateEvent@4
  • 0000B174 — @KepEnterNTKern@4
  • 0000B186 — @KepLeaveNTKern@4
  • 0000B191 — _KeEnterCriticalRegion@0
  • 0000B1B4 — _KeLeaveCriticalRegion@0
  • 0000B1D3 — _KeInitializeMutex@8
  • 0000B1E0 — _KeReleaseMutex@8
  • 0000B20E — _KeInitializeSemaphore@12
  • 0000B225 — _KeReadStateSemaphore@4
  • 0000B243 — _KeReleaseSemaphore@16
  • 0000B2B9 — @KfAcquireSpinLock@4
  • 0000B2C0 — @KeAcquireSpinLockRaiseToSynch@4
  • 0000B2C7 — @KfReleaseSpinLock@8
  • 0000B2CE — __amsg_exit
  • 0000B2CE — _PopApplyThermalThrottle@0
  • 0000B2CE — _NullPrint
  • 0000B2CE — @KefAcquireSpinLockAtDpcLevel@4
  • 0000B2CE — @KefReleaseSpinLockFromDpcLevel@4
  • 0000B2CF — _KeWaitForSingleObject@20
  • 0000B302 — _KeDelayExecutionThread@12
  • 0000B36A — _KeWaitForMultipleObjects@32
  • 0000B3B8 — _KeSetPhysicalCacheTypeRange@16
  • 0000B3F5 — _MiSectionDelete@4
  • 0000B421 — _MmInitSystem@4
  • 0000B436 — _MmQuerySystemSize@0
  • 0000B43A — _MiProcessTerminated@4
  • 0000B465 — @PiWinCreateThreadWrapper@8
  • 0000B47F — _sprintf
  • 0000B4D8 — _vsprintf
  • 0000B530 — __global_unwind2
  • 0000B572 — __local_unwind2
  • 0000B5CC — __abnormal_termination
  • 0000B5F8 — __except_handler2
  • 0000B6B0 — __except_handler3
  • 0000B75E — __seh_longjmp_unwind@4
  • 0000B7D9 — __itoa
  • 0000B803 — __snprintf
  • 0000B85B — __snwprintf
  • 0000B8D4 — __strcmpi
  • 0000B8D4 — __stricmp
  • 0000B918 — __strlwr
  • 0000B93C — __strnicmp
  • 0000B994 — __strnset
  • 0000B9C0 — __strrev
  • 0000B9F0 — __strset
  • 0000BA10 — __strupr
  • 0000BA31 — __vsnprintf
  • 0000BA88 — __wcsicmp
  • 0000BAD1 — __wcslwr
  • 0000BAFD — __wcsnicmp
  • 0000BB6A — __wcsnset
  • 0000BB98 — __wcsrev
  • 0000BBCD — __wcsupr
  • 0000BBF9 — _atol
  • 0000BC90 — _atoi
  • 0000BC9D — _isupper
  • 0000BCC9 — _islower
  • 0000BCF5 — _isdigit
  • 0000BD21 — _isxdigit
  • 0000BD52 — _isspace
  • 0000BD7E — _isprint
  • 0000BDAF — _mbstowcs
  • 0000BE33 — _mbtowc
  • 0000BEAC — _memchr
  • 0000BECC — _qsort
  • 0000C09C — _srand
  • 0000C0A6 — _rand
  • 0000C0C4 — _strcat
  • 0000C0C8 — _strcpy
  • 0000C104 — _strchr
  • 0000C12C — _strcmp
  • 0000C150 — _strlen
  • 0000C168 — _strncat
  • 0000C19C — _strncmp
  • 0000C1D4 — _strncpy
  • 0000C1F8 — _strrchr
  • 0000C220 — _strspn
  • 0000C25C — _strstr
  • 0000C2BA — _swprintf
  • 0000C331 — _tolower
  • 0000C368 — _toupper
  • 0000C3BD — _towlower
  • 0000C3DA — _towupper
  • 0000C3E4 — _wcscat
  • 0000C415 — _wcscpy
  • 0000C437 — _wcschr
  • 0000C463 — _wcscmp
  • 0000C4A0 — _wcscspn
  • 0000C4DF — _wcslen
  • 0000C4F6 — _wcsncat
  • 0000C53A — _wcsncmp
  • 0000C572 — _wcsncpy
  • 0000C5B5 — _wcsrchr
  • 0000C5E6 — _wcsspn
  • 0000C625 — _wcsstr
  • 0000C66C — _wcstombs
  • 0000C702 — _wctomb
  • 0000C748 — _memcmp
  • 0000C767 — __vsnwprintf
  • 0000C7DE — __flsbuf
  • 0000C7EC — __output
  • 0000D08A — __woutput
  • 0000D8BE — _iswctype
  • 0000D8E9 — __isctype
  • 0000D8E9 — _PopPolicyWorkerNotify@0
  • 0000D8EC — __mbstrlen
  • 0000D93C — _mblen
  • 0000D971 — _fputwc
  • 0000D9A1 — __fptrap
  • 0000D9AC — __flswbuf
  • 0000D9BC — __alldiv
  • 0000DA58 — __allmul
  • 0000DA8C — __allrem
  • 0000DB2C — __allshl
  • 0000DB3C — __allshr
  • 0000DB4C — __aulldiv
  • 0000DBAC — __aullrem
  • 0000DC18 — __aullshr
  • 0000DC30 — __purecall
  • 0000DC40 — __NTKERN_Get_Version
  • 0000DC44 — __NtKernCreateFile
  • 0000DC48 — __NtKernClose
  • 0000DC4C — __NtKernReadFile
  • 0000DC50 — __NtKernWriteFile
  • 0000DC54 — __NtKernDeviceIoControl
  • 0000DC58 — __NtKernGetWorkerThread
  • 0000DC5C — __NtKernLoadDriver
  • 0000DC60 — __NtKernQueueWorkItem
  • 0000DC64 — __NtKernPhysicalDeviceObjectToDevNode
  • 0000DC68 — __NtKernSetPhysicalCacheTypeRange
  • 0000DC6C — __NtKernWin9XLoadDriver
  • 0000DC70 — __NtKernCancelIoFile
  • 0000DC74 — __NtKernGetVPICDHandleFromInterruptObj
  • 0000DC78 — __NtKernInternalDeviceIoControl
  • 0000DC7C — __NtKernPreLoadDriver
  • 0000DC80 — __NtKernCheckUnPreLoadDriver
  • 0000DC84 — NTKERN_DDB
  • 0000DCD4 — KdComPortInUse
  • 0000DCD8 — KdDebuggerNotPresent
  • 0000DCDC — _MachineInfo
  • 0000DCE0 — TimerLoopsPer65536uSec
  • 0000DD3C — _SysVMStackLimit
  • 0000DD3C — _SysVMStack
  • 0000DD40 — _DebugInit@4
  • 0000DD59 — _DebugPrint@8
  • 0000DD98 — _DbgPrint
  • 0000DDAB — _DbgBreakPoint@0
  • 0000DDAD — _DbgOutDebugString@4
  • 0000DDBF — _DbgInDebugChar@0
  • 0000DDC8 — _READ_PORT_UCHAR@4
  • 0000DDD0 — _READ_PORT_USHORT@4
  • 0000DDD9 — _READ_PORT_ULONG@4
  • 0000DDE1 — _WRITE_PORT_UCHAR@8
  • 0000DDED — _WRITE_PORT_USHORT@8
  • 0000DDFA — _WRITE_PORT_ULONG@8
  • 0000DE06 — _READ_REGISTER_UCHAR@4
  • 0000DE0F — _READ_REGISTER_USHORT@4
  • 0000DE19 — _READ_REGISTER_ULONG@4
  • 0000DE22 — _WRITE_REGISTER_UCHAR@8
  • 0000DE2F — _WRITE_REGISTER_USHORT@8
  • 0000DE3D — _WRITE_REGISTER_ULONG@8
  • 0000DE4A — _READ_REGISTER_BUFFER_UCHAR@12
  • 0000DE5F — _READ_REGISTER_BUFFER_ULONG@12
  • 0000DE74 — _READ_REGISTER_BUFFER_USHORT@12
  • 0000DE8A — _WRITE_REGISTER_BUFFER_UCHAR@12
  • 0000DE9F — _WRITE_REGISTER_BUFFER_ULONG@12
  • 0000DEB4 — _WRITE_REGISTER_BUFFER_USHORT@12
  • 0000DECA — _READ_PORT_BUFFER_UCHAR@12
  • 0000DEDD — _READ_PORT_BUFFER_ULONG@12
  • 0000DEF0 — _READ_PORT_BUFFER_USHORT@12
  • 0000DF04 — _WRITE_PORT_BUFFER_UCHAR@12
  • 0000DF17 — _WRITE_PORT_BUFFER_ULONG@12
  • 0000DF2A — _WRITE_PORT_BUFFER_USHORT@12
  • 0000DF3E — _KeStallExecutionProcessor@4
  • 0000DF50 — _IoCheckShareAccess@20
  • 0000DF59 — @KeFlushWriteBuffer@0
  • 0000DF60 — _KeSetImportanceDpc@8
  • 0000DF69 — _SeAssignSecurity@28
  • 0000DF72 — _SeDeassignSecurity@4
  • 0000DF7B — _HalAssignSlotResources@32
  • 0000DF84 — _HalSetBusDataByOffset@24
  • 0000DF8D — NTKERN_Control
  • 0000E074 — _NTKERN_Get_Version
  • 0000E07B — _KeGetCurrentIrql@0
  • 0000E085 — _KeQuerySystemTime@4
  • 0000E08F — @KfRaiseIrql@4
  • 0000E099 — @KfLowerIrql@4
  • 0000E0A3 — _RtlUnwind@16
  • 0000E0AD — _RtlRaiseStatus@4
  • 0000E0B7 — _RtlRaiseException@4
  • 0000E0C1 — _KeInitializeDpc@12
  • 0000E0CB — _ZwOpenSection@12
  • 0000E0D0 — _ZwMapViewOfSection@40
  • 0000E0D5 — _EnQueue@8
  • 0000E0E9 — _DeQueue@4
  • 0000E0FD — _InQueue@8
  • 0000E11B — _RemQueue@8
  • 0000E13D — _SetInterrupts@4
  • 0000E153 — _ExchangeUlong@8
  • 0000E160 — _QueueUserApc
  • 0000E166 — _QueueKernelApc
  • 0000E16C — _LinPageUnlock
  • 0000E172 — _KeInitializeTimer@4
  • 0000E178 — _KeQueryPerformanceCounter@4
  • 0000E182 — _KeSetTimer@16
  • 0000E188 — _RunScheduledEvents@0
  • 0000E18E — _GetCurrentThread@0
  • 0000E199 — _Debug_Printf_Service
  • 0000E19F — _Win95PageReserve
  • 0000E1A5 — _Win95PageCommitPhys
  • 0000E1AB — _Win95PageDecommit
  • 0000E1B1 — _Win95PageFree
  • 0000E1B7 — _Win95GetNulPageHandle
  • 0000E1BD — _MmGetPhysicalAddress@4
  • 0000E1F5 — __LinPageLock
  • 0000E1FB — _MiFillMdlPages@12
  • 0000E230 — _CountBits@8
  • 0000E267 — _CodeLoaded@0
  • 0000E282 — NTKERN_Debug_Query
  • 0000E293 — _ExRaiseStatus@4
  • 0000E2A0 — @Exfi386InterlockedExchangeUlong@8
  • 0000E2A8 — @InterlockedDecrement@4
  • 0000E2B3 — @InterlockedIncrement@4
  • 0000E2C0 — @InterlockedExchange@8
  • 0000E2C5 — @InterlockedCompareExchange@12
  • 0000E2CF — @ExfInterlockedAddUlong@12
  • 0000E2D9 — _ExqInterlockedAddUlong@0
  • 0000E2D9 — @ExqInterlockedAddUlong@8
  • 0000E2FE — _ExqInterlockedAddUlong386@0
  • 0000E306 — _ExqInterlockedAddUlong486@0
  • 0000E30D — _ExInterlockedAddLargeStatistic@0
  • 0000E30D — @ExInterlockedAddLargeStatistic@8
  • 0000E314 — _ExfInterlockedInsertHeadList@0
  • 0000E314 — @ExfInterlockedInsertHeadList@12
  • 0000E32C — @ExfInterlockedInsertTailList@12
  • 0000E32C — _ExfInterlockedInsertTailList@0
  • 0000E345 — @ExfInterlockedRemoveHeadList@8
  • 0000E345 — _ExfInterlockedRemoveHeadList@0
  • 0000E358 — @ExfInterlockedPushEntryList@12
  • 0000E364 — @ExfInterlockedPopEntryList@8
  • 0000E372 — @ExInterlockedPushEntrySList@12
  • 0000E393 — @ExInterlockedPopEntrySList@8
  • 0000E3B4 — @ExInterlockedFlushSList@4
  • 0000E3D5 — @ExfInterlockedPopEntrySList@8
  • 0000E3E6 — @ExfInterlockedPushEntrySList@12
  • 0000E3F5 — @ExfInterlockedFlushSList@4
  • 0000E40C — @ExInterlockedCompareExchange64@16
  • 0000E427 — @ExpInterlockedCompareExchange64@16
  • 0000E45C — ThreadSwitchNotification_stub
  • 0000E464 — _memcpy
  • 0000E483 — _memset
  • 0000E4AB — __disable
  • 0000E4AD — __enable
  • 0000E4AF — _KeQueryTimeIncrement@0
  • 0000E4B8 — _InitializeWin32Mutex
  • 0000E4C6 — _ReleaseWin32Mutex
  • 0000E4D5 — _InitializeWin32Event
  • 0000E4F8 — _SetWin32Event
  • 0000E503 — _ClearWin32Event
  • 0000E50E — _ResetWin32Event
  • 0000E51D — _PulseWin32Event
  • 0000E52C — _InitializeWin32Semaphore
  • 0000E532 — _ReadWin32Semaphore
  • 0000E549 — _SignalWin32Semaphore
  • 0000E558 — _WaitForSingleObject
  • 0000E572 — _BlockThreadEx
  • 0000E58A — _ScheduleRestrictedEvent@20
  • 0000E5CA — _BoostWithDecay@8
  • 0000E5DF — _ScheduleGlobalEvent@8
  • 0000E5FD — _KiProcessWin95APC_stub@0
  • 0000E60A — _IoInvalidateDeviceRelations@8
  • 0000E64F — _IoRequestDeviceEject@4
  • 0000E669 — _IoInvalidateDeviceState@4
  • 0000E69F — _NTKERNToWin95IrpHandler@8
  • 0000E754 — _RtlConvertLongToLargeInteger@4
  • 0000E75C — _RtlConvertUlongToLargeInteger@4
  • 0000E768 — _RtlCompareMemory@12
  • 0000E7AC — @RtlUshortByteSwap@4
  • 0000E7B1 — @RtlUlongByteSwap@4
  • 0000E7B6 — @RtlUlonglongByteSwap@8
  • 0000E7BF — _IoUnregisterShutdownNotification@4
  • 0000E815 — _MiMapViewOfPhysicalSection@36
  • 0000E988 — _HeapAllocateEx@16
  • 0000E98E — _HeapFreeEx@8
  • 0000E994 — _LCODE__CONFIGMG_Reenumerate_DevNode
  • 0000E99C — _LCODE__CONFIGMG_Call_At_Appy_Time
  • 0000E9A4 — _LCODE__CONFIGMG_Request_Device_Ejection
  • 0000E9AC — _LCODE__SHELL_QueryAppyTimeAvailable
  • 0000E9B4 — _LCODE__SHELL_CallAtAppyTime
  • 0000E9BC — _LCODE_Call_Restricted_Event@24
  • 0000E9E8 — _LCODE_VWIN32_SetWin32EventBoostPriority
  • 0000E9F0 — _LCODE__AtEventTime
  • 0000E9F8 — _LCODE_VPICD_Phys_EOI@4
  • 0000EA08 — _LCODE_VPICD_Physically_Unmask@4
  • 0000EA18 — _LCODE__VPICD_Set_Channel_Irql
  • 0000EA20 — _LCODE_VPICD_Virtualize_IRQ@4
  • 0000EA34 — _LCODE_VPICD_Force_Default_Behavior@4
  • 0000EA44 — _LCODE_SHELL_SYSMODAL_Message@16
  • 0000EA68 — _LCODE__Sprintf
  • 0000EA70 — _LCODE_VWIN32_ConvertNtTimeout@4
  • 0000EA78 — _LCODE_MTRRSetPhysicalCacheTypeRange@12
  • 0000EA90 — _LCODE__PageReserve
  • 0000EA98 — _LCODE__PageFree
Segment 2: _LMSG$1 @ 00006F20
  • 00000000 — @MSG_LAB
  • 00000014 — @MSG_LDATA
Segment 3: _DB1CODE @ 00007F80
  • 00000000 — _DbgPutLogStr@4
  • 00000039 — _DbgGetString@8
  • 000000BB — _DbgAddLogStr@4
  • 00000149 — _DbgDumpTraceLog@0
  • 0000019F — _DebugPrintP@8
  • 00000213 — _DebugQuery@0
  • 0000032B — _DebugInitP@4
  • 00000384 — _DbgDumpThread@4
  • 000003A3 — _DbgDumpProcess@4
  • 000003D4 — _DbgDumpThreadInfo@0
  • 000003F8 — _DbgDumpSystemState@4
  • 0000045D — _DbgDumpAction@4
  • 000004D2 — _DbgDumpPowerLevel@4
  • 00000526 — _DbgDumpPolicy@4
  • 00000717 — _DbgDumpCapabilities@4
  • 0000093E — _DbgDumpPowerInformation@0
  • 000009AA — _DbgDumpWorkerQueue@4
  • 00000A4F — _DbgDumpWorker@0
  • 00000A94 — _IoDumpCheck@12
  • 00000ADC — _DumpLevel@8
  • 00000BC9 — _OBDebugDump@0
  • 00000BFC — _NTKERNTraceLevel
  • 00000C00 — _ulInDebug
  • 00000C04 — ??_C@_0BA@JFJO@?$CF08x?5?$CF02d?5?$CF08x?5?$AA@
  • 00000C14 — ??_C@_0BD@FFDI@?6Enter?5selection?3?5?$AA@
  • 00000C28 — ??_C@_0BN@BLOG@?$CIW?$CJ?5Dump?5worker?5information?6?$AA@
  • 00000C48 — ??_C@_09EMNI@?$CIX?$CJ?5Exit?6?$AA@
  • 00000C54 — ??_C@_0CJ@IEIH@?$CIT?$CJ?5Dump?5thread?5and?5process?5info@
  • 00000C80 — ??_C@_0BM@JBCN@?$CIP?$CJ?5Dump?5power?5information?6?$AA@
  • 00000C9C — ??_C@_0BN@LOAC@?$CIO?$CJ?5Dump?5object?5information?6?$AA@
  • 00000CBC — ??_C@_0CC@BABL@?$CII?$CJ?5Dump?5pending?5Irp?5information@
  • 00000CE0 — ??_C@_0BE@JGGN@?$CID?$CJ?5Dump?5trace?5log?6?$AA@
  • 00000CF4 — ??_C@_0BF@ILII@?6NTKERN?5Debug?5menu?6?6?$AA@
  • 00000D0C — ??_C@_01BJG@?6?$AA@
  • 00000D10 — ??_C@_08HGNB@INVALID?$CB?$AA@
  • 00000D1C — ??_C@_01FCOA@?5?$AA@
  • 00000D20 — ??_C@_0BM@ELLE@?0?5Flags?3?5?$CFd?0?5EventCode?3?5?$CFd?6?$AA@
  • 00000D3C — ??_C@_04COF@None?$AA@
  • 00000D44 — ??_C@_08GKAE@Reserved?$AA@
  • 00000D50 — ??_C@_05BKOF@Sleep?$AA@
  • 00000D58 — ??_C@_0O@CLAD@ShutdownReset?$AA@
  • 00000D68 — ??_C@_0M@EBLN@ShutdownOff?$AA@
  • 00000D74 — ??_C@_09GOGM@?0?5Action?3?$AA@
  • 00000D80 — ??_C@_0DC@LGLE@?$CFs?0?5Spare?5?$CFd?5?$CFd?5?$CFd?0?5Battery?5leve@
  • 00000DB4 — ??_C@_08FGLH@Disabled?$AA@
  • 00000DC0 — ??_C@_07FFME@Enabled?$AA@
  • 00000DC8 — ??_C@_0P@FCCG@OverThrottled?3?$AA@
  • 00000DD8 — ??_C@_0FA@PKOM@Optimize?3?5?$CFs?0?5Fan?5throttle?5toler@
  • 00000E28 — ??_C@_04BBGC@Life?$AA@
  • 00000E30 — ??_C@_05EFBF@Power?$AA@
  • 00000E38 — ??_C@_03KLCE@Off?$AA@
  • 00000E3C — ??_C@_02CCEO@On?$AA@
  • 00000E40 — ??_C@_0BE@HGHB@Disk?5spin?5down?3?5?$CFd?6?$AA@
  • 00000E54 — ??_C@_0CP@BILG@Video?5timeout?3?5?$CFd?0?5Video?5reserve@
  • 00000E84 — ??_C@_0BF@PFDJ@Discharge?5policy?5?$CFd?3?$AA@
  • 00000E9C — ??_C@_0CD@JFOK@Broadcast?5capacity?5resolution?3?5?$CF@
  • 00000EC0 — ??_C@_0CA@KIK@Doze?5spare?3?5?$CFd?0?5S4?5timeout?3?5?$CFd?6?$AA@
  • 00000EE0 — ??_C@_0BD@CLIF@WinLogonFlags?3?5?$CFd?6?$AA@
  • 00000EF4 — ??_C@_0BH@KNON@?5Reduce?5Latency?5Sleep?3?$AA@
  • 00000F0C — ??_C@_0M@BFLH@?5Max?5Sleep?3?$AA@
  • 00000F18 — ??_C@_0L@GEAA@Min?5Sleep?3?$AA@
  • 00000F24 — ??_C@_0DH@MDM@Idle?5timeout?3?5?$CFd?0?5sensitivity?5?$CFd@
  • 00000F5C — ??_C@_05BFLF@Idle?3?$AA@
  • 00000F64 — ??_C@_0O@JAMB@Reserved?3?5?$CFd?6?$AA@
  • 00000F74 — ??_C@_0P@NGNF@Lid?5open?5wake?3?$AA@
  • 00000F84 — ??_C@_0L@FPGN@Lid?5close?3?$AA@
  • 00000F90 — ??_C@_0O@CBFB@Sleep?5button?3?$AA@
  • 00000FA0 — ??_C@_0O@JNKL@Power?5button?3?$AA@
  • 00000FB0 — ??_C@_0O@MHLB@Revision?3?5?$CFd?6?$AA@
  • 00000FC0 — ??_C@_0BK@BMCL@Default?5low?5latency?5wake?3?$AA@
  • 00000FDC — ??_C@_0BL@NEOH@Minimum?5device?5wake?5state?3?$AA@
  • 00000FF8 — ??_C@_0BG@KNJM@Real?9time?5clock?5wake?3?$AA@
  • 00001010 — ??_C@_0P@HLBA@Soft?5lid?5wake?3?$AA@
  • 00001020 — ??_C@_0BB@EIAJ@AC?5on?9line?5wake?3?$AA@
  • 00001034 — ??_C@_0CL@MPFN@Battery?5?$CFd?3?5Granularity?3?5?$CFd?0?5Cap@
  • 00001060 — ??_C@_0BJ@FEIK@Batteries?3?5?$CFs?0?5Life?3?5?$CFs?6?$AA@
  • 0000107C — ??_C@_09JCKO@Long?5term?$AA@
  • 00001088 — ??_C@_0L@INDI@Short?5term?$AA@
  • 00001094 — ??_C@_0CE@MDDJ@Disk?5spin?5down?3?5?$CFs?0?5Spare?5?$CFd?5?$CFd?5@
  • 000010B8 — ??_C@_0EK@EBOA@Thermal?5control?3?5?$CFs?0?5Throttle?3?5?$CF@
  • 00001104 — ??_C@_05MJBI@Can?8t?$AA@
  • 0000110C — ??_C@_03EGCG@Can?$AA@
  • 00001110 — ??_C@_0CK@FBCG@?6Hiberfile?3?5?$CFs?0?5Wake?3?5?$CFs?0?5Spare?5@
  • 0000113C — ??_C@_08PHKO@Non?9Full?$AA@
  • 00001148 — ??_C@_04OOPN@Full?$AA@
  • 00001150 — ??_C@_04DMJH@?5S?$CFd?$AA@
  • 00001158 — ??_C@_0O@OFNL@System?5state?3?$AA@
  • 00001168 — ??_C@_08FHHB@Lid?3?5?$CFs?6?$AA@
  • 00001174 — ??_C@_0BC@CEHF@Sleep?5button?3?5?$CFs?6?$AA@
  • 00001188 — ??_C@_0BC@FHMO@Power?5button?3?5?$CFs?6?$AA@
  • 0000119C — ??_C@_06OAGO@Absent?$AA@
  • 000011A4 — ??_C@_07JMEA@Present?$AA@
  • 000011AC — ??_C@_0BG@LGMD@System?5capabilities?3?6?$AA@
  • 000011C4 — ??_C@_06GAPH@DC?5?$CFc?6?$AA@
  • 000011CC — ??_C@_06KDNH@AC?5?$CFc?6?$AA@
  • 000011D4 — ??_C@_0CA@GKIF@Kernel?3?5?$CF08x?5?$CIVMM?5thread?3?5?$CF04x?$CJ?$AA@
  • 000011F4 — ??_C@_0O@LFDP@Thread?5list?3?6?$AA@
  • 00001204 — ??_C@_0M@KEKC@?$CF08x?$CI?$CF08x?$CJ?6?$AA@
  • 00001210 — ??_C@_0BE@FAJO@Queued?5work?5items?3?6?$AA@
  • 00001224 — ??_C@_0BA@JDDF@Spinlock?3?5?$CF08X?6?$AA@
  • 00001234 — ??_C@_0BB@KBDN@Semaphore?3?5?$CF08X?6?$AA@
  • 00001248 — ??_C@_0BA@LDH@?5queue?5?$CI?$CF08X?$CJ?3?6?$AA@
  • 00001258 — ??_C@_07BNPK@Delayed?$AA@
  • 00001260 — ??_C@_08NLDB@Critical?$AA@
  • 0000126C — ??_C@_0BN@KKPN@Time?5is?5currently?3?5?$CF08X?$CF08X?6?$AA@
Segment 4: RARE @ 00008000
  • 00000000 — UnExportNTFunctions
  • 0000006C — _HalInitSystem@8
  • 000000A0 — _ObInitSystem@4
  • 00000272 — _MiSectionInitialization@0
Segment 5: W32 @ 00008130
  • 00000000 — _W32_IOManGetVersion
  • 00000006 — _W32_IOManRequestWakeupLatency
  • 0000000B — _W32_IOManGetDevnodeFromFileHandle
  • 00000010 — _W32_IOManCreateFile
  • 00000015 — _W32_IOManClose
  • 0000001A — _W32_IOManWriteFile
  • 0000001F — _W32_IOManReadFile
  • 00000024 — _W32_IOManDeviceIoControl
  • 00000029 — _W32_IOManCancelIoFile
  • 0000002E — _W32_IOManFlushFileBuffers
Segment 6: PNP @ 000094D0
  • 00000000 — _IoGetDeviceProperty@20
  • 000002E4 — _IoSetDeviceProperty@16
  • 000002EC — _IoReportDeviceStatus@8
  • 000002F4 — _IoOpenDeviceRegistryKey@16
  • 0000034E — _NtKernPhysicalDeviceObjectToDevNode
  • 0000035C — _NtKernWin9XLoadDriver
  • 0000036C — _NtKernPreLoadDriver
  • 000003A3 — _NtKernCheckUnPreLoadDriver
  • 000003D4 — @IsVXDName@4
  • 000003FC — @LoadMultipleDrivers@28
  • 00000592 — _NTKERNPnPNewDevNode@8
  • 00000801 — @Barf@16
  • 000008AE — @GetBusInfo@12
  • 000009CE — @KillChild@8
  • 00000A2F — @ProcessNewDevNode@16
  • 00000B41 — @NTKERNEnumerate@8
  • 00000DAA — _CheckRemovalRelations
  • 00000E48 — @RemoveWalkTheDOs@4
  • 00000E7A — @RemovePDO@12
  • 00000F27 — @QuickPnPIrp@8
  • 00000F4F — @StartIrp@8
  • 00001160 — @PowerIrp@20
  • 000011A9 — @EjectLock@8
  • 000011E6 — @NTKERNFilterDevNode@8
  • 00001368 — _NTKERNConfigHandler
  • 00001572 — _NTKERNEnumHandler
  • 00001623 — _ReadWriteConfig@24
  • 00001673 — @SendIRPToVxD@8
  • 000016D2 — @ProcessPnPIRP@16
  • 00001927 — @InitializePnPStackLocation@12
  • 00001948 — @GetCapabilities@8
  • 00001A09 — _PnPCompletionRoutine@12
  • 00001A1E — @SynchronousCallDriver@12
  • 00001A92 — @SendPnPIrp@12
  • 00001B16 — _NTKERNReceiveMessage
  • 00001B55 — @DoThisString@16
  • 00001BAF — @DoTheseIDs@16
  • 00001C32 — @NTKERNSetupDevNode@8
  • 00001C7D — _CheckDeviceState
  • 00001D43 — @ConvertWToA@12
  • 00001D9C — @ConvertWToHeapAllocatedA@8
  • 00001E16 — @ConvertRegistryToW@36
  • 00001F4D — _PnPGetRegistryPathFromDevnode@12
  • 00002001 — _PnPGetRegistryPath@12
  • 0000201F — _PnPGetPhysicalDeviceObject@4
  • 00002072 — @DoMemory@8
  • 0000209A — @DoIO@8
  • 000020C1 — @DoDMA@8
  • 000020E0 — @DoIRQ@8
  • 00002137 — @DoPartialResource@12
  • 0000216F — @GetConfiguration@20
  • 000022D0 — @GetGroupCount@4
  • 000022FE — @GetGroupBeginEnd@16
  • 00002363 — @ExtraDataSize@8
  • 00002396 — @AddExtraData@12
  • 00002408 — @AddConvertedBack@12
  • 0000243E — @AllocateBack@20
  • 000024BA — _GetMemorySize
  • 000024DA — _ConvertMemory
  • 00002588 — _ConvertBackMemory
  • 0000262C — _GetIOSize
  • 00002649 — _ConvertIO
  • 000026FF — _ConvertBackIO
  • 000027C0 — _GetDMASize
  • 000027E0 — _ConvertDMA
  • 00002857 — _ConvertBackDMA
  • 000028C4 — _GetIRQSize
  • 000028E4 — _ConvertIRQ
  • 0000296F — _ConvertBackIRQ
  • 00002A25 — _GetAnythingSize
  • 00002A49 — _ConvertAnything
  • 00002AF3 — _GetNTSize
  • 00002B13 — _ConvertNT
  • 00002B43 — _ConvertBackGeneric
  • 00002B6C — _ConvertBackConfigData
  • 00002B98 — _ConvertBackOSSpecific
  • 00002C22 — @GetConvertHandler@4
  • 00002C3E — @GetConvertBackHandler@4
  • 00002C5A — @GetFilteredConfiguration@16
  • 00002E69 — @SetBasicFilteredConfiguration@12
  • 00002F60 — @AddResourceRequirements@8
  • 00002FB6 — _PoRegisterDeviceForIdleDetection@16
  • 00003010 — _PopCompleteRequestIrp@12
  • 00003071 — _PoRequestPowerIrpWorker
  • 0000319C — _PoRequestPowerCancelRoutine@8
  • 000031C2 — _PoRequestPowerIrp@24
  • 000032BB — _PoCallDriver@8
  • 000032EC — _PoStartNextPowerIrp@4
  • 000032EF — @PopCheckBatteryStatus@0
  • 00003319 — _PageablePowerHandler
  • 00003399 — _PowerHandler
  • 000033BC — _CCODE__CONFIGMG_Get_Sibling
  • 000033C4 — _CCODE__CONFIGMG_Get_Child
  • 000033CC — _CCODE__CONFIGMG_Locate_DevNode
  • 000033D4 — _CCODE__CONFIGMG_Get_Bus_Info
  • 000033DC — _CCODE__CONFIGMG_Call_Enumerator_Function
  • 000033E4 — _CCODE__RegDeleteKey
  • 000033EC — _CCODE__Assert_Range
  • 000033F4 — _CCODE__CONFIGMG_Get_Device_ID
  • 000033FC — _CCODE__CONFIGMG_Get_DevNode_Key
  • 00003404 — _CCODE__CONFIGMG_Load_DLVxDs
  • 0000340C — _CCODE__RegCloseKey
  • 00003414 — _CCODE__RegQueryValueEx
  • 0000341C — _CCODE__RegOpenKey
  • 00003424 — _CCODE__CONFIGMG_Register_Device_Driver
  • 0000342C — _CCODE__CONFIGMG_Register_Enumerator
  • 00003434 — _CCODE__CONFIGMG_Change_DevNode_Status
  • 0000343C — _CCODE__CONFIGMG_Set_Private_DWord
  • 00003444 — _CCODE__CONFIGMG_Discard_Boot_Log_Conf
  • 0000344C — _CCODE__CONFIGMG_Read_Registry_Value
  • 00003454 — _CCODE__CONFIGMG_Set_Device_Driver_Private_DWord
  • 0000345C — _CCODE__CONFIGMG_Get_Private_DWord
  • 00003464 — _CCODE__CONFIGMG_Get_DevNode_Status
  • 0000346C — _CCODE__CONFIGMG_Get_Parent
  • 00003474 — _CCODE_SHELL_SYSMODAL_Message@16
  • 00003498 — _CCODE_Get_Sys_VM_Handle
  • 000034A4 — _CCODE__Sprintf
  • 000034AC — _CCODE__CONFIGMG_Remove_SubTree
  • 000034B4 — _CCODE__CONFIGMG_Set_Bus_Info
  • 000034BC — _CCODE__CONFIGMG_Set_DevNode_PowerCapabilities
  • 000034C4 — _CCODE__CONFIGMG_Remove_Unmarked_Children
  • 000034CC — _CCODE__CONFIGMG_Create_DevNode
  • 000034D4 — _CCODE__CONFIGMG_Reset_Children_Marks
  • 000034DC — _CCODE__CONFIGMG_Set_Dependent_DevNode
  • 000034E4 — _CCODE__CONFIGMG_System_Device_Power_State_Mapping
  • 000034EC — _CCODE__CONFIGMG_Reprocess_DevNode
  • 000034F4 — _CCODE__CONFIGMG_Free_Log_Conf
  • 000034FC — _CCODE__CONFIGMG_Get_First_Log_Conf
  • 00003504 — _CCODE__CONFIGMG_Set_DevNode_Problem
  • 0000350C — _CCODE__CONFIGMG_Get_DevNode_Handler
  • 00003514 — _CCODE__CONFIGMG_Get_DevNode_PowerCapabilities
  • 0000351C — _CCODE__CONFIGMG_Register_DevLoader
  • 00003524 — _CCODE__CONFIGMG_Write_Registry_Value
  • 0000352C — _CCODE__CONFIGMG_Add_ID
  • 00003534 — _CCODE__CONFIGMG_Reenumerate_DevNode
  • 0000353C — _CCODE__CONFIGMG_Setup_DevNode
  • 00003544 — _CCODE__CONFIGMG_Enable_DevNode
  • 0000354C — _CCODE__CONFIGMG_Disable_DevNode
  • 00003554 — _CCODE__CONFIGMG_Get_Device_ID_Size
  • 0000355C — _CCODE__CONFIGMG_Get_DevNode_Key_Size
  • 00003564 — _CCODE__CONFIGMG_Get_Device_Driver_Private_DWord
  • 0000356C — _CCODE__CONFIGMG_Get_Next_Res_Des
  • 00003574 — _CCODE__CONFIGMG_Get_Res_Des_Data_Size
  • 0000357C — _CCODE__HeapFree
  • 00003584 — _CCODE__CONFIGMG_Add_Res_Des
  • 0000358C — _CCODE__HeapAllocate
  • 00003594 — _CCODE__CONFIGMG_Get_Parent_Structure
  • 0000359C — _CCODE__CONFIGMG_Get_Res_Des_Data
  • 000035A4 — _CCODE__CONFIGMG_Get_Set_Log_Conf_Priority
  • 000035AC — _CCODE__CONFIGMG_Get_Next_Log_Conf
  • 000035B4 — _CCODE__CONFIGMG_Add_Empty_Log_Conf
  • 000035BC — _CCODE__SHELL_Update_User_Activity_Ex
  • 000035C4 — _CCODE__CONFIGMG_Register_DevNode_For_Idle_Detection
  • 000035CC — _CCODE_Cancel_Time_Out@4
  • 000035DC — _CCODE__SHELL_CallDll
  • 000035E4 — _CCODE_Set_Global_Time_Out@12
  • 00003600 — _CCODE__Set_Global_Time_Out_Ex
  • 00003608 — _CCODE__SHELL_CancelAppyTimeEvent
  • 00003610 — _CCODE__VPOWERD_Set_System_Power_State
  • 00003618 — _CCODE_VMM_GetSystemInitState
  • 00003620 — _CCODE__CONFIGMG_Add_Remove_DevNode_Property
  • 00003628 — _CCODE__CONFIGMG_Set_DevNode_PowerState
  • 00003630 — _CCODE__Debug_Printf_Service
  • 00003644 — _CCODE__VPOWERD_Get_Power_Status
  • 0000364C — _CCODE__SHELL_BroadcastSystemMessage
  • 00003654 — _CCODE__CONFIGMG_Call_At_Appy_Time
Segment 7: _INIT @ 00009500
  • 00000000 — _PsInitSystem@4
Segment 8: _PTEXT @ 0000B510
  • 00000000 — _BufferPrint@4
  • 00000012 — _LoadVPrintf@0
  • 00000032 — _VisitChildDevnodes@12
  • 0000008B — _VisitAllDevnodes@8
  • 000000B5 — _FindPCISlotCallback@8
  • 0000011E — _FindPCISlotDevNode@8
  • 00000163 — _PCIGetBusDataByOffset@20
  • 000001B4 — NTKERN_PM_API
  • 000001B9 — _FileExists@4
  • 000001D5 — _Win95CreateThread@24
  • 00000221 — _IsBigMem@0
  • 0000023D — _PiSetThreadPriority@8
  • 00000254 — _PiGetThreadPriority@8
  • 0000026D — NTKERN_ShutDown_Ex
  • 0000027D — NTKERN_RebootNotify
  • 00000288 — NTKERN_System_Exit
  • 0000028A — NTKERN_Sys_Crit_Exit
  • 0000028C — NTKERN_DeviceIoControl
  • 00000296 — NTKERN_End_PM_App
  • 0000029C — NTKERN_Create_VM
  • 000002D1 — NTKERN_Destroy_VM
  • 00000306 — NTKERN_Init_Complete
  • 0000031C — NTKERN_Create_Thread
  • 00000350 — NTKERN_Terminate_Thread
  • 0000037F — NTKERN_Destroy_Thread
  • 000003B4 — _GetPEModuleEntryPoint
  • 000003BA — _GetProcAddress
  • 000003C0 — _PELDR_InitCompleted
  • 000003C6 — _UnloadPEModule
  • 000003D9 — _LoadPEModule
  • 00000409 — _Time_Slice_Sleep@4
  • 00000412 — _BCSToUni
  • 00000418 — _UniToBCS
  • 0000041E — _UniToUpper
  • 00000424 — _RegOpenKey
  • 0000042A — _RegCreateKey
  • 00000430 — _RegQueryInfoKey
  • 00000436 — _RegQueryValueEx
  • 0000043C — _RegSetValueEx
  • 00000442 — _RegCloseKey
  • 00000448 — _RegDeleteKey
  • 0000044E — _RegDeleteValue
  • 00000454 — _RegEnumKey
  • 0000045A — _RegEnumValue
  • 00000460 — _pFindDriver@4
  • 00000488 — _FindDriverPath@4
  • 00000531 — _LoadDriver@8
  • 00000648 — _UnloadDriver@4
  • 00000684 — _LoadSysDriver@8
  • 000006BD — _UnloadSysDriver@4
  • 000006E0 — _UnicodeCmp@8
  • 00000731 — _NtKernGetWorkerThread
  • 0000074F — _NtKernGetDynaAreaHandle@4
  • 000007F4 — _NtKernWriteDynaDriverKeys@12
  • 00000915 — _NtKernWriteDynaDriverImageKey@8
  • 0000096A — _NtKernParsePathName@16
  • 00000A66 — _NtKernEnsureUnicode@16
  • 00000AAC — _NtKernCreateDynaRegKey@16
  • 00000B53 — _NtKernOpenDynaRegKey@8
  • 00000B89 — _NtKernDynaLoadDriver@16
  • 00000E38 — _NtKernDynaUnloadDriver@4
  • 00000E40 — _NtKernGetDriverHandle@12
  • 00000EB0 — _ThreadFindProcess@4
  • 00000ED6 — _CreateProcessStruct@4
  • 00000F50 — _ThreadCreateNotify@4
  • 00001032 — _ProcessDestroyNotify@4
  • 00001054 — _ThreadTerminateNotify@4
  • 0000106E — _ThreadDestroyNotify@4
  • 000010C0 — _ThreadInitialize@4
  • 0000110C — __NtKernCreateFile@44
  • 00001154 — __NtKernCancelIoFile@8
  • 00001181 — __NtKernReadFile@36
  • 000011C3 — __NtKernWriteFile@36
  • 00001205 — __NtKernClose@4
  • 0000122B — __NtKernDeviceIoControl@40
  • 00001270 — __NtKernInternalDeviceIoControl@40
  • 000012B5 — __NtKernQueueWorkItem@8
  • 000012E3 — __NtKernSetPhysicalCacheTypeRange@16
  • 000012EB — __NtKernLoadDriver@4
  • 00001311 — @RD_MSR@4
  • 00001314 — _WR_MSR@12
  • 00001325 — _GetCpuTypeStep@4
  • 0000135F — _GetCpuId
  • 00001368 — __IOManGetVersion@8
  • 000013A5 — __IOManCreateFile@52
  • 000013E2 — __IOManClose@12
  • 0000141F — __IOManWriteFile@44
  • 0000145C — __IOManReadFile@44
  • 00001499 — __IOManDeviceIoControl@48
  • 000014D6 — __IOManFlushFileBuffers@16
  • 00001513 — __IOManCancelIoFile@16
  • 00001550 — __IOManGetDevnodeFromFileHandle@16
  • 0000158D — __IOManRequestWakeupLatency@12
  • 000015CA — _Get_Next_Thread_Handle@4
  • 000015DB — _Get_Sys_Thread_Handle@0
  • 000015E6 — _Get_Cur_Thread_Handle@0
  • 000015F1 — _AllocateThreadDataSlot@0
  • 000015F7 — _VWIN32_GetProcessHandle
  • 000015FD — _Win32ReferenceObjectByHandle
  • 00001603 — _Win32ReferenceObject
  • 00001609 — _Win32DereferenceObject
  • 00001614 — _mR0ObjFree@4
  • 00001622 — _mR0ObjDup@8
  • 0000163A — _MakeWin32Handle
  • 00001660 — _GetNtHandle
  • 0000166E — _CloseWin32Handle
  • 0000167C — _GetPathBase@8
  • 000016C4 — _MapRegistryPath@12
  • 00001769 — _ZwOpenKey@12
  • 00001825 — _ZwEnumerateKey@24
  • 00001962 — _ZwClose@4
  • 00001999 — _ZwCreateKey@28
  • 00001A91 — _ZwDeleteKey@4
  • 00001AFE — _ZwSetValueKey@24
  • 00001BE3 — _ZwpGenerateValueTypeName@8
  • 00001CB0 — _ZwpSetValueType@16
  • 00001D2D — _ZwpGetValueType@12
  • 00001DCC — _ZwQueryValueKey@24
  • 000020E6 — _GetClassName@12
  • 0000212A — _AToW@12
  • 0000216F — _ZwQueryKey@20
  • 00002370 — _ZwEnumerateValueKey@24
  • 00002406 — _ZwDeleteValueKey@8
  • 00002454 — _GetMessagePtr
  • 00002467 — _ExMapHandleToPointer@12
  • 00002495 — _ExpAllocateHandleTable@8
  • 000024D8 — _ExpAllocateHandleTableEntries@16
  • 00002567 — _ExCreateHandle@8
  • 000025B9 — _ExCreateHandleTable@12
  • 0000260F — _ExDestroyHandle@12
  • 00002667 — _ExDestroyHandleTable@8
  • 000026BE — _NtClearEvent@4
  • 000026FB — _NtCreateEvent@20
  • 000027FF — _NtOpenEvent@12
  • 000028C0 — _NtPulseEvent@8
  • 0000299B — _NtQueryEvent@20
  • 00002AB3 — _NtResetEvent@8
  • 00002B8D — _NtSetEvent@8
  • 00002C68 — @WorkerThreadFunction@8
  • 00002CAE — _SysDestroyWorkerThread@4
  • 00002CD3 — _SysDestroyWorkerThreads@0
  • 00002D26 — _SysCreateWorkerThread@8
  • 00002D8F — _InitializeWorkItemQueue@4
  • 00002DC0 — _SysInit@4
  • 00002DD8 — _ExCreateCallback@16
  • 00002EA7 — _ExpDeleteCallback@4
  • 00002EAC — _ExpWstrSystemInformation
  • 00002EE4 — _ExpWstrSystemInformationValue
  • 00002EF0 — _ExInitializeNPagedLookasideList@28
  • 00002F79 — _ExInitializePagedLookasideList@28
  • 0000300F — _ExRaiseAccessViolation@0
  • 0000301A — _ExRaiseDatatypeMisalignment@0
  • 00003025 — _HalGetAdapter@8
  • 00003448 — _HalpAllocateGlobalMapBuffer@0
  • 00003490 — _HalAllocateCommonBuffer@16
  • 00003542 — _HalpGrowMapBuffers@8
  • 00003696 — _HalpAllocateAdapter@12
  • 0000384D — _RtlAnsiStringToUnicodeString@12
  • 000038F5 — _RtlUnicodeStringToAnsiString@12
  • 000039A0 — _RtlWriteRegistryValue@24
  • 000039F5 — _RtlInitializeBitMap@12
  • 00003A09 — _RtlpGetRegistryHandle@16
  • 00003AE7 — _RtlpQueryRegistryDirect@16
  • 00003B8F — _RtlpCallQueryRegistryRoutine@20
  • 00003D17 — _RtlQueryRegistryValues@20
  • 00003FB8 — _RtlInt64ToUnicodeString@16
  • 0000400C — _RtlExtendedLargeIntegerDivide@16
  • 0000404E — _RtlExtendedIntegerMultiply@12
  • 000040AA — _RtlExtendedMagicDivide@20
  • 00004138 — _RtlStringFromGUID@8
  • 000041AA — _RtlGUIDFromString@8
  • 00004358 — _IoAllocateDriverObjectExtension@16
  • 00004370 — _IoAssociationInitialize@0
  • 00004387 — _IoConnectInterrupt@44
  • 000044A7 — _IoDisconnectInterrupt@4
  • 000044C1 — _NtCreateFile@44
  • 000044F3 — _NtDeviceIoControlFile@40
  • 0000451F — _NtInternalDeviceIoControlFile@40
  • 0000454B — _IopCreateDriver@12
  • 000046A3 — _IopGetServiceNameFromDriverName@8
  • 00004730 — _IoCreateDriver@8
  • 000047BE — _IoCreateDriverObject@8
  • 000047FC — _IopBuildDefaultSysDriverPath@12
  • 00004905 — _IopGetTag@12
  • 0000499F — _IopAddDriverToDriverList@20
  • 00004BB3 — _IopFindDrivers@12
  • 00004C7C — _IopFreeDriverList@4
  • 00004CD7 — _IopGetDriverList@4
  • 00004E04 — _CmpDoSort@8
  • 00004E9E — _CmpResolveDriverDependencies@4
  • 00004EE1 — _CmpOrderGroup@8
  • 00004F43 — _IopUserCompletion@20
  • 00004F53 — _IopUserRundown@4
  • 00004F63 — _IopAbortRequest@4
  • 00004F97 — _IopXxxControlFile@44
  • 000054F0 — _IopSynchronousApiServiceTail@24
  • 0000559B — _IopSynchronousServiceTail@28
  • 0000569E — _IopAcquireFileObjectLock@16
  • 0000572D — _IopAllocateIrpCleanup@8
  • 00005767 — _IopCancelAlertedRequest@8
  • 0000576A — _IoGetConfigurationInformation@0
  • 00005770 — _IoCreateDevice@28
  • 0000580F — _IopCreateDevice@28
  • 000059BC — _IoDeleteSymbolicLink@4
  • 00005A18 — _IoCreateFile@56
  • 00005B89 — _IoGetDeviceObjectPointer@16
  • 00005C07 — _IoCancelThreadIo@4
  • 00005C85 — _IoAttachDevice@12
  • 00005D19 — _IoSetShareAccess@16
  • 00005DC3 — _IopOpenRegistryKey@20
  • 00005E1C — _IopGetRegistryValue@12
  • 00005EA2 — _IopGetRegistryKeyInformation@8
  • 00005F13 — _IoRegisterShutdownNotification@4
  • 00005F4F — _IoInitializeTimer@12
  • 00005FB5 — _IoBuildDeviceIoControlRequest@36
  • 0000613F — _IoShutdownSystem@8
  • 000061D0 — _IopCreateClassKey@12
  • 00006257 — _IopBuildFullDeviceObjectName@8
  • 000062A2 — _IopSplitSymbolicLink@16
  • 00006353 — _IopReplacePathSeperatorWithPound@4
  • 00006381 — _IopOpenClassAssociationRegistryEntry@20
  • 0000651F — _IopGetDevnodeHandle@8
  • 00006597 — _IopGetDevnodeSerial@8
  • 00006636 — _IopBuildAssociationLinkName@20
  • 000066CF — _IopGetRegistryValueDword@12
  • 0000671D — _IopGetLinkedState@4
  • 0000676E — _IopSetLinkedState@8
  • 000067C2 — _IopDecrementSymbolicLinkReference@8
  • 0000681A — _IopIncrementSymbolicLinkReference@8
  • 000068E7 — _IoGetDeviceInterfaces@16
  • 00006B1D — _IopEnumKeyHandle@12
  • 00006BBC — _IopEnumKeyHandles@12
  • 00006C94 — _IopEnumKeyHandlesNestWorker@12
  • 00006D21 — _IopEnumKeyHandlesNest@16
  • 00006D6B — _IopClearDeviceClassAssociationLinks@0
  • 00006E71 — _IoOpenDeviceInterfaceRegistryKey@12
  • 00006EBF — _IoRegisterDeviceInterfaceByDevnode@16
  • 00006FC6 — _IoRegisterDeviceInterface@16
  • 00006FE5 — _IopGetNextLocalUniqueId@4
  • 000070CB — _IopFindTheGuid@8
  • 00007128 — _IoUnregisterDeviceInterface@4
  • 0000715C — _IoGetDeviceInterfaceAlias@12
  • 0000720A — _IoSetDeviceInterfaceState@8
  • 000072F4 — _IopRemoveReferenceString@8
  • 0000733B — _IoGetDmaAdapter@12
  • 00007404 — _IoIsWdmVersionAvailable@8
  • 0000741A — _IopLoadUnloadDriver@4
  • 0000746C — _IopLoadDriver@4
  • 0000791D — _IopGetDriverNameFromKeyNode@8
  • 00007AB4 — _IopMapAndLoadDriver@4
  • 00007BC8 — _IopLoadByName@12
  • 00007DEF — _IopReadyDeviceObjects@4
  • 00007E06 — _IopCloseFile@20
  • 00007F3B — _IopDeleteDevice@4
  • 00007F4E — _IopDeleteDriver@4
  • 00007F84 — _IopParseFile@40
  • 00007FD5 — _IopParseDevice@40
  • 00008587 — _NtQueryInformationFile@20
  • 000089DE — _NtReadFile@36
  • 00008D60 — _ZwReadFile@36
  • 00008D9C — _RegStrInit@0
  • 00009041 — _IoInitializeRemoveLockEx@20
  • 000090B9 — _NtWriteFile@36
  • 000094D2 — _ZwWriteFile@36
  • 0000950E — _NtOpenFile@24
  • 00009537 — _IopErrorLogThread@4
  • 000097E7 — _IopErrorLogQueueRequest@0
  • 0000982F — _NtCancelIoFile@8
  • 000099AC — _NtFlushBuffersFile@8
  • 00009B82 — _ObpAllocateObject@20
  • 00009CBB — _ObCreateObject@36
  • 00009D3C — _ObpCaptureObjectCreateInformation@16
  • 00009DB6 — _ObpCaptureObjectName@8
  • 00009E2C — @ObpFreeObject@4
  • 00009EC5 — _ObMakeTemporaryObject@4
  • 00009ED8 — _NtMakeTemporaryObject@4
  • 00009F10 — _NtCreateDirectoryObject@12
  • 00009F66 — _ObpLookupDirectoryEntry@12
  • 0000A068 — _ObpLookupObjectName@40
  • 0000A4A3 — _ObpCreateUnnamedHandle@24
  • 0000A57E — _ObpCreateHandle@36
  • 0000A68A — _ObInsertObject@24
  • 0000A83F — _NtCreateSymbolicLinkObject@16
  • 0000A8FB — _NtOpenSymbolicLinkObject@12
  • 0000A924 — _ObpParseSymbolicLink@40
  • 0000AA14 — _ObpDuplicateHandle@4
  • 0000AAB7 — _ObReferenceObjectByName@32
  • 0000AB33 — _ObpRemoveObjectRoutine@4
  • 0000AB9A — _ObpDeleteNameCheck@8
  • 0000AC84 — _ObOpenObjectByName@28
  • 0000ADC1 — _ObCreateObjectType@12
  • 0000AFE8 — _SeCreateAccessState@12
  • 0000B02E — _SeDeleteAccessState@4
  • 0000B051 — _NtOpenSection@12
  • 0000B07F — _NtMapViewOfSection@40
  • 0000B204 — _MmMapViewOfSection@40
  • 0000B265 — _MiFindLinearBlock@8
  • 0000B288 — _MiReserveLinearBlock@12
  • 0000B30C — _MiFreeLinearRegion@12
  • 0000B3B9 — _MiFindMapping@8
  • 0000B3E6 — _MiReserveLinearRegion@12
  • 0000B507 — _NtUnmapViewOfSection@8
  • 0000B519 — _MmUnmapViewOfSection@8
  • 0000B583 — _PsCreateSystemThread@28
  • 0000B64D — _PsTerminateSystemThread@4
  • 0000B671 — _KeSetPriorityThread@8
Segment 9: _PDATA @ 0000DA60
  • 00002E98 — _WinDir
  • 00002EB0 — ??_C@_0L@LLAF@DeviceDesc?$AA@
  • 00002EBC — ??_C@_0N@IOME@FriendlyName?$AA@
  • 00002ECC — ??_C@_09CDHI@ClassGUID?$AA@
  • 00002ED8 — ??_C@_05LCAF@Class?$AA@
  • 00002EE0 — ??_C@_06LCIG@Driver?$AA@
  • 00002EE8 — ??_C@_08KDKK@Location?$AA@
  • 00002EF4 — ??_C@_03KFJO@Mfg?$AA@
  • 00002EF8 — ??_C@_0O@KIHO@CompatibleIDs?$AA@
  • 00002F08 — ??_C@_0L@LPIN@HardwareID?$AA@
  • 00002F18 — ??_C@_0N@IMGC@UpperFilters?$AA@
  • 00002F28 — ??_C@_0L@MNFF@NTMPDriver?$AA@
  • 00002F34 — ??_C@_0N@JGBG@LowerFilters?$AA@
  • 00002F44 — _NtPnPDriverObject
  • 00002F48 — ??_C@_0PG@KFIC@Please?5make?5a?5bug?5to?5the?5owner?5o@
  • 00003040 — ??_C@_0CF@CDAH@Enumerator?5rightfully?5challenged@
  • 00003068 — ??_C@_0CE@HACN@?$CIcould?5not?5get?5the?5enumerator?5na@
  • 0000308C — _fPnPReady
  • 00003090 — ??_C@_0N@KIHN@Capabilities?$AA@
  • 000030A8 — _Converts
  • 000030F0 — _ConvertBacks
  • 00003148 — _IopCacheHitIncrement
  • 0000314C — _CmAutoGenName
  • 00003154 — _CmpAutoGenString
  • 00003158 — _CmRegistryMachineHardwareDescriptionSystemName
  • 00003160 — _CmpRegistryMachineHardwareDescriptionSystemString
  • 00003164 — _CmRegistryMachineSystemCCSControlNTKernName
  • 0000316C — _CmpRegistryMachineSystemCCSControlNTKernString
  • 00003170 — _CmRegistryMachineName
  • 00003178 — _CmpRegistryMachineString
  • 0000317C — _CmRegistryUserName
  • 00003184 — _CmpRegistryUserString
  • 00003188 — _CmRegistryEnumName
  • 00003190 — _CmpRegistryEnumString
  • 00003194 — _CmNextLUIDName
  • 0000319C — _CmpNextLUIDString
  • 000031A0 — _CmDosDevicesName
  • 000031A8 — _CmpDosDevicesString
  • 000031AC — _CmDeviceParametersName
  • 000031B4 — _CmpDeviceParametersString
  • 000031B8 — _CmDeviceName
  • 000031C0 — _CmpDeviceString
  • 000031C4 — _CmDeviceInstanceName
  • 000031CC — _CmpDeviceInstanceString
  • 000031D0 — _CmDotName
  • 000031D8 — _CmpDotString
  • 000031DC — _CmPoundName
  • 000031E4 — _CmpPoundString
  • 000031E8 — _CmNullName
  • 000031F0 — _CmpNullString
  • 000031F4 — _CmRefCountName
  • 000031FC — _CmpRefCountString
  • 00003200 — _CmSymbolicLinkName
  • 00003208 — _CmpSymbolicLinkString
  • 0000320C — _CmSerialNumberName
  • 00003214 — _CmpSerialNumberString
  • 00003218 — _CmRegistryMachineSystemCurrentControlSetName
  • 00003220 — _CmpRegistryMachineSystemCurrentControlSetString
  • 00003224 — _CmRegistryMachineSystemCurrentControlSetServicesName
  • 0000322C — _CmpRegistryMachineSystemCurrentControlSetServicesString
  • 00003230 — _CmDeviceClassKeyName
  • 00003238 — _CmpDeviceClassKeyString
  • 0000323C — _CmSystemRootName
  • 00003244 — _CmpSystemRootString
  • 00003248 — _CmCurrentControlSetName
  • 00003250 — _CmpCurrentControlSetString
  • 00003254 — _CmControlName
  • 0000325C — _CmpControlString
  • 00003260 — _CmServicesName
  • 00003268 — _CmpServicesString
  • 0000326C — _CmGroupName
  • 00003274 — _CmpGroupString
  • 00003278 — _CmSystemRootSystem32driversName
  • 00003280 — _CmpSystemRootSystem32driversString
  • 00003284 — _CmControlGroupOrderListName
  • 0000328C — _CmpControlGroupOrderListString
  • 00003290 — _CmImagePathName
  • 00003298 — _CmpImagePathString
  • 0000329C — _CmSysName
  • 000032A4 — _CmpSysString
  • 000032A8 — _CmStartName
  • 000032B0 — _CmpStartString
  • 000032B4 — _CmSystemName
  • 000032BC — _CmpSystemString
  • 000032C0 — _CmTagName
  • 000032C8 — _CmpTagString
  • 000032CC — _CmListName
  • 000032D4 — _CmpListString
  • 000032D8 — _CmControlServiceGroupOrderName
  • 000032E0 — _CmpControlServiceGroupOrderString
  • 000032E4 — _Cm_T_Name
  • 000032EC — _Cmp_T_String
  • 000032F0 — _Cm_TypeName
  • 000032F8 — _Cmp_TypeString
  • 000032FC — _CmDriverName
  • 00003304 — _CmpDriverString
  • 00003308 — _CmFileSystemName
  • 00003310 — _CmpFileSystemString
  • 00003314 — _CmBackSlashName
  • 0000331C — _CmpBackSlashString
  • 00003320 — _CmLinkedName
  • 00003328 — _CmpLinkedString
  • 0000332C — _CmTypeName
  • 00003464 — _CmTypeString
  • 00003500 — ??_C@_1BE@CDCI@?$AAU?$AAn?$AAd?$AAe?$AAf?$AAi?$AAn?$AAe?$AAd?$AA?$AA@
  • 00003514 — ??_C@_1BK@ENIN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?$AA@
  • 00003530 — ??_C@_1CE@LANH@?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00003554 — ??_C@_1BO@CJIF@?$AAL?$AAi?$AAn?$AAe?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00003574 — ??_C@_1CA@IGFK@?$AAO?$AAt?$AAh?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00003594 — ??_C@_1CG@MDFM@?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 000035BC — ??_C@_1CG@IEKA@?$AAK?$AAe?$AAy?$AAb?$AAo?$AAa?$AAr?$AAd?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 000035E4 — ??_C@_1CE@HDEI@?$AAP?$AAo?$AAi?$AAn?$AAt?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00003608 — ??_C@_1CE@BACN@?$AAP?$AAr?$AAi?$AAn?$AAt?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 0000362C — ??_C@_1CE@FABA@?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00003650 — ??_C@_1CA@NODE@?$AAM?$AAo?$AAd?$AAe?$AAm?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00003670 — ??_C@_1BO@CGFI@?$AAT?$AAa?$AAp?$AAe?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00003690 — ??_C@_1CK@JLDJ@?$AAF?$AAl?$AAo?$AAp?$AAp?$AAy?$AAD?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl@
  • 000036BC — ??_C@_1BO@PJEO@?$AAD?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 000036DC — ??_C@_1CA@LKFM@?$AAO?$AAt?$AAh?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 000036FC — ??_C@_1CA@PEGP@?$AAA?$AAu?$AAd?$AAi?$AAo?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 0000371C — ??_C@_1CG@LIKG@?$AAK?$AAe?$AAy?$AAb?$AAo?$AAa?$AAr?$AAd?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 00003744 — ??_C@_1CE@EPEO@?$AAP?$AAo?$AAi?$AAn?$AAt?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 00003768 — ??_C@_1CG@PGOM@?$AAP?$AAa?$AAr?$AAa?$AAl?$AAl?$AAe?$AAl?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 00003790 — ??_C@_1CE@DMFN@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 000037B4 — ??_C@_1CE@IMNB@?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 000037D8 — ??_C@_1CC@IGHG@?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 000037FC — ??_C@_1BO@LLNG@?$AAW?$AAo?$AAr?$AAm?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 0000381C — ??_C@_1CA@BIAE@?$AAC?$AAd?$AAR?$AAo?$AAm?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 0000383C — ??_C@_1BO@BKFO@?$AAT?$AAa?$AAp?$AAe?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 0000385C — ??_C@_1BO@MFEI@?$AAD?$AAi?$AAs?$AAk?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 0000387C — ??_C@_1CK@HHAK@?$AAM?$AAu?$AAl?$AAt?$AAi?$AAf?$AAu?$AAn?$AAc?$AAt?$AAi?$AAo?$AAn?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr@
  • 000038A8 — ??_C@_1BG@CDDF@?$AAD?$AAt?$AAi?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
  • 000038C0 — ??_C@_1BI@MPIK@?$AAS?$AAc?$AAs?$AAi?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
  • 000038D8 — ??_C@_1BE@PJDG@?$AAT?$AAc?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
  • 000038EC — ??_C@_1BI@LJGK@?$AAE?$AAi?$AAs?$AAa?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
  • 00003904 — ??_C@_1BO@ECJF@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
  • 00003924 — ??_C@_1CA@EAGJ@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAD?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
  • 00003944 — ??_C@_1CA@NPNM@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAI?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
  • 00003964 — ??_C@_1BM@ENFA@?$AAP?$AAr?$AAi?$AAm?$AAa?$AAr?$AAy?$AAD?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
  • 00003980 — ??_C@_1BM@NCOF@?$AAP?$AAr?$AAi?$AAm?$AAa?$AAr?$AAy?$AAI?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
  • 0000399C — ??_C@_1CO@LFBC@?$AAF?$AAl?$AAo?$AAa?$AAt?$AAi?$AAn?$AAg?$AAP?$AAo?$AAi?$AAn?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs@
  • 000039CC — ??_C@_1CC@MFFM@?$AAC?$AAe?$AAn?$AAt?$AAr?$AAa?$AAl?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAo?$AAr?$AA?$AA@
  • 000039F0 — ??_C@_1O@EPAA@?$AAL?$AAi?$AAn?$AAk?$AAe?$AAd?$AA?$AA@
  • 00003A00 — ??_C@_1BK@MPEO@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AA?$AA@
  • 00003A1C — ??_C@_1BC@LFKG@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$AA@
  • 00003A30 — ??_C@_1M@GDFC@?$AA_?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
  • 00003A3C — ??_C@_17PAPH@?$AA_?$AAT?$AA_?$AA?$AA@
  • 00003A44 — ??_C@_1DE@NFDK@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAG?$AAr?$AAo?$AAu?$AAp@
  • 00003A78 — ??_C@_19OFAF@?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
  • 00003A84 — ??_C@_17CCKB@?$AAT?$AAa?$AAg?$AA?$AA@
  • 00003A8C — ??_C@_1O@KHFL@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
  • 00003A9C — ??_C@_17FDLC@?$AAs?$AAy?$AAs?$AA?$AA@
  • 00003AA4 — ??_C@_1CO@ECIK@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAG?$AAr?$AAo?$AAu?$AAp?$AAO?$AAr?$AAd?$AAe?$AAr?$AAL?$AAi@
  • 00003AD4 — ??_C@_1DK@LJHF@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2@
  • 00003B10 — ??_C@_1M@EONE@?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA@
  • 00003B1C — ??_C@_1BC@LHCC@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
  • 00003B30 — ??_C@_1BA@DLLE@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
  • 00003B40 — ??_C@_1CE@KEEI@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?$AA@
  • 00003B64 — ??_C@_1IC@KIJF@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
  • 00003BE8 — ??_C@_1GI@EMLC@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
  • 00003C50 — ??_C@_1FG@PFNI@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
  • 00003CA8 — ??_C@_1O@OIBJ@?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AA?$AA@
  • 00003CB8 — ??_C@_1BK@LJFM@?$AAS?$AAy?$AAm?$AAb?$AAo?$AAl?$AAi?$AAc?$AAL?$AAi?$AAn?$AAk?$AA?$AA@
  • 00003CD4 — ??_C@_1BC@HFGN@?$AAR?$AAe?$AAf?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
  • 00003CE8 — ??_C@_13LEOO@?$AA?$CD?$AA?$AA@
  • 00003CEC — ??_C@_1BO@IGPD@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
  • 00003D0C — ??_C@_1CE@KEEA@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
  • 00003D30 — ??_C@_1BC@IKAI@?$AAN?$AAe?$AAx?$AAt?$AAL?$AAU?$AAI?$AAD?$AA?$AA@
  • 00003D44 — ??_C@_1DA@PCOE@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAE?$AAn@
  • 00003D74 — ??_C@_1BO@NKEJ@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
  • 00003D94 — ??_C@_1CE@LJDG@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?$AA@
  • 00003DB8 — ??_C@_1HE@BCIG@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
  • 00003E2C — ??_C@_1FM@MLDO@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAH?$AAA@
  • 00003E88 — ??_C@_1BA@JCHI@?$AAA?$AAu?$AAt?$AAo?$AAG?$AAe?$AAn?$AA?$AA@
Segment 10: _ITEXT @ 00000000
  • 00000000 — ExportNTFunctions
  • 000000DE — NTKERN_Device_Init
  • 000001A4 — _InitializeSystemPhase@4
  • 000001FB — _InitializeSystem@0
  • 00000234 — IO32_Device_Init
  • 00000248 — _PnPInit
  • 00000340 — _InitPowerHandler
  • 00000376 — _ExpResourceInitialization@0
  • 000003A3 — _ExpEventInitialization@0
  • 0000041A — _ExInitSystem@4
  • 00000439 — _ExpInitSystemPhase0@0
  • 0000047D — _ExpInitSystemPhase1@0
  • 0000049A — _SysCreateWorkerThreads@4
  • 00000505 — _ExpInitializeCallbacks@0
  • 00000628 — _ExpWstrCallback
  • 0000063C — _ExpInitializeCallback
  • 0000065C — ??_C@_1EC@FFPO@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAu?$AAs?$AAp?$AAe?$AAn?$AAd?$AAH?$AAi?$AAb@
  • 000006A0 — ??_C@_1DO@MHEK@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAI@
  • 000006E0 — ??_C@_1DA@KHMA@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAT@
  • 00000710 — _IoInitSystem@4
  • 00000974 — _IopLoadPhaseDrivers@4
  • 000009B2 — _IopLoadRegistryDrivers@4
  • 00000A7C — _ICODE__SHELL_HookSystemBroadcast
  • 00000A84 — _ICODE__VPOWERD_Register_Power_Handler