NTKERN — Windows ME Retail


Source Tree


Segment 1: .bss @ 000072C0
  • 00000000 — _PsThreadType
  • 00000004 — _MmSectionObjectType
  • 00000008 — _ObpRemoveQueueActive
  • 0000000C — _ObpObjectsWithName
  • 00000010 — _ObpObjectsWithHandleDB
  • 00000014 — _ObpObjectsCreated
  • 00000020 — _ObpRootDirectoryMutex
  • 00000058 — _ObpTypeDirectoryObject
  • 0000005C — _ObpSymbolicLinkObjectType
  • 00000060 — _ObpObjectTypes
  • 000000C0 — _ObpRemoveObjectQueue
  • 000000D0 — _ObpRemoveObjectWorkItem
  • 000000E0 — _ObpDirectoryObjectType
  • 000000F0 — _ObpDefaultObject
  • 00000100 — _HandleCount
  • 00000104 — _ObpTypeObjectType
  • 00000108 — _ObpLock
  • 0000010C — _Global_Handle_Table
  • 00000110 — _ObpRootDirectoryObject
  • 00000114 — _IopErrorLogPortPending
  • 00000120 — _IopErrorLogWorkItem
  • 00000130 — _IopDatabaseEvent
  • 00000140 — _ConfigurationInformation
  • 00000160 — _IopTimerDpc
  • 00000180 — _IopTimer
  • 000001A8 — _IopTimerCount
  • 000001AC — _IopTimerLock
  • 000001B0 — _IopTimerQueueHead
  • 000001B8 — _IoAdapterObjectType
  • 000001BC — _IopDatabaseLock
  • 000001C0 — _IopNotifyShutdownQueueHead
  • 000001C8 — _IopCompletionLock
  • 000001CC — _IopErrorLogAllocationLock
  • 000001D0 — _IopErrorLogAllocation
  • 000001D8 — _IopErrorLogListHead
  • 000001E0 — _IopErrorLogLock
  • 000001E4 — _IopCancelSpinLock
  • 000001E8 — _IopFileObjectType
  • 000001EC — _IoDeviceObjectType
  • 000001F0 — _IoDriverObjectType
  • 000001F4 — _NextUniqueDeviceObjectNumber
  • 000001F8 — _IoReadTransferCount
  • 00000200 — _IoWriteOperationCount
  • 00000204 — _IoReadOperationCount
  • 00000208 — _IoOtherOperationCount
  • 00000220 — _IopAssociationHashTable
  • 00000420 — _NullPage
  • 00000424 — _HalpMapBufferSize
  • 00000428 — _HalpMapBufferPhysicalAddress
  • 00000430 — _MasterAdapterObject
  • 00000440 — _HalpBusDatabaseEvent
  • 00000450 — _HalpEisaDma
  • 00000451 — _LessThan16Mb
  • 00000454 — _HalpBusType
  • 00000460 — _HalpEisaAdapter
  • 00000480 — _HalpEisaControlBase
  • 00000484 — _ExPagedLookasideLock
  • 00000488 — _ExPagedLookasideListHead
  • 00000490 — _ExNPagedLookasideLock
  • 00000498 — _ExNPagedLookasideListHead
  • 000004A0 — _ExCbSuspendHibernateSystem
  • 000004A4 — _ExCbSetSystemTime
  • 000004A8 — _ExCbSetSystemInformation
  • 000004B0 — _ExpCallbackEvent
  • 000004C0 — _ExCallbackObjectType
  • 000004E0 — _DelayedDpc
  • 00000520 — _CriticalDpc
  • 00000560 — _DelayedWorkItems
  • 000005A0 — _CriticalWorkItems
  • 000005C8 — _PendingDelayedWorkItems
  • 000005CC — _PendingCriticalWorkItems
  • 000005D0 — _ExEventObjectType
  • 000005D4 — _ExpEventObjectType
  • 000005D8 — _ExpSystemResourcesList
  • 000005E0 — _ExpResourceSpinLock
  • 000005E8 — _ExpTimeout
  • 00000600 — _PopHeuristics
  • 00000618 — _PopActionWaiters
  • 00000620 — _PopEventCode
  • 00000630 — _PopPolicyIrpQueue
  • 00000640 — _PopCB
  • 00000700 — _PopCoolingMode
  • 00000708 — _PopThermal
  • 00000710 — _PopSwitches
  • 00000718 — _PopVolumeDevices
  • 00000720 — _PopStateCallout
  • 00000740 — _PopCapabilities
  • 000007A0 — _PopAdminPolicy
  • 000007C0 — _PopSIdle
  • 00000800 — _PoSystemIdleTimer
  • 00000828 — _PopFullWake
  • 00000830 — _PopDumbyEvent
  • 00000840 — _PopIdle0PromoteLimit
  • 00000844 — _PopIdle0PromoteTicks
  • 00000848 — _PopThrottleTimeout
  • 00000860 — _PopThrottleTimer
  • 00000890 — _PopPolicyWorker
  • 000008A0 — _PopVolumeLock
  • 000008C0 — _PopWorkerStatus
  • 000008C4 — _PopWorkerPending
  • 000008C8 — _PopWorkerSpinLock
  • 000008E0 — _PopPolicyLock
  • 00000918 — _PopIdleScanTime
  • 00000920 — _PopIdleScanTimer
  • 00000948 — _PopIdleDetectList
  • 00000950 — _PopRequestedIrps
  • 00000960 — _PopWorkerStartEvent
  • 00000970 — _PopWorkerItemQueue
  • 00000978 — _PopWorkerThread
  • 0000097C — _PopWorkerExitFlag
  • 00000980 — _PopWorkerLock
  • 00000984 — _PopInrushIrpReferenceCount
  • 00000988 — _PopInrushIrpPointer
  • 0000098C — _PopInrushPending
  • 00000990 — _PopIrpSerialListLength
  • 00000998 — _PopIrpSerialList
  • 000009A0 — _PopInvalidNotifyBlockCount
  • 000009A4 — _PopDopeGlobalLock
  • 000009A8 — _PopIrpSerialLock
  • 000009C0 — _IopHwProfileChangeNotifyLock
  • 000009E0 — _IopHwProfileChangeNotifyList
  • 00000A00 — _IopDeviceClassNotifyLock
  • 00000A20 — _IopDeviceClassNotifyList
  • 00000A88 — _CurrentThread
  • 00000A90 — _KrnProcessList
  • 00000A98 — _NTKERNPreviousMode
  • 00000A9C — _SystemPTEPoolSize
  • 00000AA0 — _SystemPTESpace
  • 00000AA8 — _SystemPTEBusyMapHeader
  • 00000AB0 — _SystemPTEBusyMap
  • 00000AB4 — _hWin95NullPage
  • 00000AB8 — _InitializationPhase
  • 00000AC0 — _DebugRingBuffer
  • 00000ACC — _errno
  • 00000AD0 — _DriverList
  • 00000AE0 — ??_C@_0BB@HLDA@system32?2drivers?$AA@
  • 00000AF4 — ??_C@_08OGD@system32?$AA@
  • 00000B00 — ??_C@_06GMLA@system?$AA@
  • 00000B08 — ??_C@_07NKAG@?$CFs?$CFs?2?$CFs?$AA@
  • 00000B10 — ??_C@_0O@BMMI@DllInitialize?$AA@
  • 00000B20 — _RegistryMapping
  • 00000B58 — _MappingTables
  • 00000B60 — _MmpUserProbeAddress
  • 00000B64 — _MmUserProbeAddress
  • 00000B68 — ??_C@_0DG@KEAH@MmMapIoSpace?3?5NtKernSetPhysicalC@
  • 00000BA0 — ??_C@_0CP@KEP@MmMapIoSpace?3?5Failed?5to?5set?5rang@
  • 00000BD0 — ??_C@_1BG@OJPP@?$AAD?$AAy?$AAn?$AAa?$AAm?$AAi?$AAc?$AAW?$AAD?$AAM?$AA?$AA@
  • 00000BE8 — ??_C@_1GI@DEJO@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY@
  • 00000C50 — ??_C@_1BK@JLBF@?$AAE?$AAr?$AAr?$AAo?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
  • 00000C6C — ??_C@_1M@HKNH@?$AAS?$AAt?$AAa?$AAr?$AAt?$AA?$AA@
  • 00000C78 — ??_C@_19KJIP@?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
  • 00000C84 — ??_C@_1BE@PJND@?$AAI?$AAm?$AAa?$AAg?$AAe?$AAP?$AAa?$AAt?$AAh?$AA?$AA@
  • 00000C98 — ??_C@_1IA@PBPA@?$AA?2?$AAR?$AAe?$AAg?$AAi?$AAs?$AAt?$AAr?$AAy?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAY@
  • 00000D18 — _ThreadDataSlot
  • 00000D1C — ??_C@_0DG@NOEP@Switching?5from?5thread?5?$CFx?5to?5thre@
  • 00000D54 — ??_C@_0DB@CHBE@?5KTHREAD?5?$CFx?0?5hRing0?5?$CFx?0?5IRQL?5?$CF02@
  • 00000D88 — ??_C@_0CB@EMFF@?6Process?5?$CFx?5sys?5?$CFx?5thread?5list?3?6@
  • 00000DAC — ??_C@_0BO@GPIB@HARDWARE?2DeviceMap?2InputClass?$AA@
  • 00000DCC — ??_C@_0BN@KAPE@HARDWARE?2DeviceMap?2InputPort?$AA@
  • 00000DEC — _PathMapArray
  • 00000DFC — _pZWKeyList
  • 00000E00 — _CLASS_NAME
  • 00000E0C — ??_C@_0M@EPEN@Unspecified?$AA@
  • 00000E18 — ??_C@_07PCLD@Working?$AA@
  • 00000E20 — ??_C@_09GJGM@Sleeping1?$AA@
  • 00000E2C — ??_C@_09JGNF@Sleeping2?$AA@
  • 00000E38 — ??_C@_09DMEC@Sleeping3?$AA@
  • 00000E44 — ??_C@_09NLJB@Hibernate?$AA@
  • 00000E50 — ??_C@_08DCJK@Shutdown?$AA@
  • 00000E5C — ??_C@_08COLN@USER?4EXE?$AA@
  • 00000E68 — ??_C@_0M@BPKL@MESSAGEBEEP?$AA@
  • 00000E74 — ??_C@_0L@FLEF@KERNEL?4EXE?$AA@
  • 00000E80 — ??_C@_07HBOF@WINEXEC?$AA@
  • 00000E88 — ??_C@_0BC@BLJC@CMDNINST?4EXE?5EXIT?$AA@
  • 00000E9C — _PopIdleDetectionMode
  • 00000EA0 — _PopSimulate
  • 00000EA4 — _PopAttributes
  • 00000EF4 — _PopRegKey
  • 00000F30 — _PopAcRegName
  • 00000F44 — _PopDcRegName
  • 00000F58 — _PopHiberRegName
  • 00000F7C — _PopAdminRegName
  • 00000F9C — _PopHeuristicsRegName
  • 00000FB4 — _PopCompositeBatteryName
  • 00000FE8 — _PopHiberFileName
  • 00001004 — _PopDebugHiberFileName
  • 00001020 — _PopDumpStackPrefix
  • 00001030 — _PopWorkerTypes
  • 00001044 — _PopPowerStateHandlers
  • 000010B4 — _PopPolicyLockThread
  • 000010B8 — _PopAcPolicy
  • 000011A0 — _PopDcPolicy
  • 00001288 — _PopPolicy
  • 0000128C — _PopAction
  • 000012BC — _PopMaxPageRun
  • 000012C0 — _PopDebugCloneBase
  • 000012C4 — _PopDebugCloneEnd
  • 000012C8 — _PopHiberFile
  • 000012E4 — _PopHiberFileDebug
  • 00001300 — _PoPageLockData
  • 00001304 — _lpszWarningText
  • 00001358 — _hTimeOut
  • 0000135C — _PopSystemActionPending
  • 00001360 — _PopAppyTimeHandle
  • 00001364 — _PoolFlags
  • 00001380 — _ExpResourceTimeoutCount
  • 00001384 — ??_C@_0BB@MKLO@?8EX?5?9?5Rewaiting?6?$AA@
  • 00001398 — ??_C@_0CE@DFPL@?8?5NumberOfExclusiveWaiters?5?$DN?5?$CF04@
  • 000013BC — ??_C@_0CH@NBOI@?8?5ActiveCount?5?$DN?5?$CF04lx?5?5Flags?5?$DN?5?$CF@
  • 000013E4 — ??_C@_0BC@EMAC@IsOwnedExclusive?5?$AA@
  • 000013F8 — ??_C@_0O@DCBD@SharedWaiter?5?$AA@
  • 00001408 — ??_C@_00A@?$AA@
  • 0000140C — ??_C@_0BB@PBLJ@ExclusiveWaiter?5?$AA@
  • 00001420 — ??_C@_0BB@MPPP@?8Resource?5?$EA?5?$CFlx?6?$AA@
  • 00001434 — ??_C@_0CB@COIA@?8?5?5Thread?5?$DN?5?$CF08lx?0?5Count?5?$DN?5?$CF02x?6@
  • 00001458 — _ExpSemaphoreObjectType
  • 0000145C — _ExSemaphoreObjectType
  • 00001460 — _ExpEventMapping
  • 00001470 — ??_C@_1M@BACH@?$AAE?$AAv?$AAe?$AAn?$AAt?$AA?$AA@
  • 0000147C — _ExpCallbackMapping
  • 0000148C — ??_C@_1BC@NEEN@?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?$AA@
  • 000014A0 — _ExpAdjustScanPeriod
  • 000014A4 — _ExpCurrentScanPeriod
  • 000014A8 — _HalpDmaOperations
  • 000014DC — _NlsMbCodePageTag
  • 000014E0 — _RtlFreeStringRoutine
  • 000014E4 — _RtlAllocateStringRoutine
  • 000014E8 — ??_C@_0DD@HEJB@RtlAssert?3?5Assertion?5?$CI?$CFs?$CJ?5failed@
  • 0000151C — ??_C@_0DG@FKJI@RtlAssert?3?5Assertion?5?$CI?$CFs?$CJ?5failed@
  • 00001554 — _RtlpBitsClearAnywhere
  • 00001654 — _RtlpBitsClearLow
  • 00001754 — _RtlpBitsClearHigh
  • 00001854 — _RtlpBitsClearTotal
  • 0000196C — ??_C@_13HMCP@?$AA?2?$AA?$AA@
  • 00001970 — ??_C@_1CA@NKCK@?$AA?$CK?$AA?$CK?$AA?$CK?$AA?5?$AAU?$AAn?$AAk?$AAn?$AAo?$AAw?$AAn?$AA?5?$AA?$CK?$AA?$CK?$AA?$CK?$AA?$AA@
  • 00001990 — _RtlpRegistryPaths
  • 000019A8 — _GuidFormat
  • 00001A10 — ??_C@_1BM@CAEM@?$AAU?$AAs?$AAe?$AAr?$AA?2?$AA?4?$AAD?$AAe?$AAf?$AAa?$AAu?$AAl?$AAt?$AA?$AA@
  • 00001A2C — ??_C@_1CG@BHB@?$AAH?$AAa?$AAr?$AAd?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAM?$AAa?$AAp?$AA?$AA@
  • 00001A54 — ??_C@_1FE@EPLF@?$AAS?$AAo?$AAf?$AAt?$AAw?$AAa?$AAr?$AAe?$AA?2?$AAM?$AAi?$AAc?$AAr?$AAo?$AAs?$AAo?$AAf?$AAt?$AA?2?$AAW@
  • 00001AA8 — ??_C@_1EC@JGOB@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@
  • 00001AEC — ??_C@_1EE@KIMN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo@
  • 00001B30 — _RtlpIntegerChars
  • 00001B40 — _LeapYearDayToMonth
  • 00001CB0 — _NormalYearDayToMonth
  • 00001E20 — _LeapYearDaysPrecedingMonth
  • 00001E3C — _NormalYearDaysPrecedingMonth
  • 00001E58 — _SecondsToStartOf1970
  • 00001E60 — _SecondsToStartOf1980
  • 00001E68 — _Magic10000
  • 00001E70 — _Magic10000000
  • 00001E78 — _Magic86400000
  • 00001E80 — ??_C@_1BA@NEMI@?$AA?$CF?$AAw?$AAZ?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
  • 00001E90 — ??_C@_1BI@KHDI@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAl?$AAu?$AA?$AA@
  • 00001EA8 — ??_C@_1BI@CICJ@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
  • 00001EC0 — ??_C@_13DOBH@?$AA?4?$AA?$AA@
  • 00001EC4 — _Mmp64BitPhysicalAddress
  • 00001EC8 — _Mm64BitPhysicalAddress
  • 00001ECC — _IoFileObjectType
  • 00001ED0 — ??_C@_0BI@DHNG@?8IoDriver?5object?5?$CFs?5?$CFx?6?$AA@
  • 00001EE8 — ??_C@_0BI@DJND@?8IoDevice?5object?5?$CFs?5?$CFx?6?$AA@
  • 00001F00 — _IopFileMapping
  • 00001F10 — ??_C@_1BA@FOJN@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
  • 00001F20 — ??_C@_1BA@BBDO@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
  • 00001F30 — ??_C@_1BI@EDCJ@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
  • 00001F48 — ??_C@_19GDCN@?$AAF?$AAi?$AAl?$AAe?$AA?$AA@
  • 00001F54 — ??_C@_1O@IMKM@?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?$AA@
  • 00001F64 — ??_C@_1O@MDAP@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?$AA@
  • 00001F74 — ??_C@_1BA@PFGJ@?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
  • 00001F84 — ??_C@_0CE@KOCD@?8Multiple?5irp?5complete?5requests?5@
  • 00001FA8 — ??_C@_1BK@PKEN@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAU?$AA_?$AA?$CF?$AAx?$AA?$AA@
  • 00001FC4 — ??_C@_1BI@LELB@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
  • 00001FDC — ??_C@_1BA@HANO@?$AA?2?$AA?2?$AA?4?$AA?2?$AA?$CF?$AAw?$AAZ?$AA?$AA@
  • 00001FEC — ??_C@_19JGFB@?$AA?2?$AA?2?$AA?4?$AA?2?$AA?$AA@
  • 00001FF8 — ??_C@_1BK@LPBE@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?2?$AA?$AA@
  • 00002014 — ??_C@_1CM@JPOA@?$AA?2?$AA?$CF?$AAs?$AA?2?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CD?$AA?$CF?$AAw?$AAZ?$AA?$CF?$AAs?$AA?$CF?$AAw@
  • 00002040 — ??_C@_1BG@BJJK@?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
  • 00002058 — ??_C@_15LEKJ@?$AA?2?$AA?4?$AA?$AA@
  • 00002060 — ??_C@_11A@?$AA?$AA@
  • 00002064 — ??_C@_1BM@PFBL@?$AA?2?$AAD?$AAo?$AAs?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$CF?$AAs?$AA?$AA@
  • 00002080 — ??_C@_1BC@KIOB@?$AA?$CF?$AA0?$AA8?$AAx?$AA?$CF?$AA0?$AA8?$AAx?$AA?$AA@
  • 00002094 — ??_C@_1BG@PKBH@?$AA?$CF?$AAw?$AAZ?$AA?$CD?$AA?$CF?$AAw?$AAZ?$AA?$CF?$AAw?$AAZ?$AA?$AA@
  • 000020AC — ??_C@_1DM@GGCI@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2@
  • 000020E8 — ??_C@_1BK@CENL@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AA?$AA@
  • 00002104 — ??_C@_19BBIN@?$AA?4?$AAS?$AAY?$AAS?$AA?$AA@
  • 00002110 — ??_C@_1BG@PJKH@?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAN?$AAa?$AAm?$AAe?$AA?$AA@
  • 00002128 — ??_C@_15HGOB@?$AA?$CF?$AAS?$AA?$AA@
  • 00002130 — ??_C@_1BG@BNKI@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$CF?$AAS?$AA?$AA@
  • 00002148 — ??_C@_0L@HBI@String?3?$CFS?6?$AA@
  • 00002154 — ??_C@_0BE@NFBF@NumberOfStrings?3?$CFx?6?$AA@
  • 00002168 — ??_C@_0BC@JGKM@IoControlCode?3?$CFx?6?$AA@
  • 0000217C — ??_C@_0BD@JIFC@SequenceNumber?3?$CFx?6?$AA@
  • 00002190 — ??_C@_0BA@GGNH@FinalStatus?3?$CFd?6?$AA@
  • 000021A0 — ??_C@_0BF@BIHM@UniqueErrorValue?3?$CFd?6?$AA@
  • 000021B8 — ??_C@_0O@HIIA@ErrorCode?3?$CFx?6?$AA@
  • 000021C8 — ??_C@_0BC@CGBB@EventCategory?3?$CFx?6?$AA@
  • 000021DC — ??_C@_0BB@IENP@DumpDataSize?3?$CFx?6?$AA@
  • 000021F0 — ??_C@_0BA@EPKC@Retry?5Count?3?$CFx?6?$AA@
  • 00002200 — ??_C@_0BI@OMHI@Major?5Function?5Code?3?$CFx?6?$AA@
  • 00002218 — ??_C@_0BA@DBMH@Driver?5Name?3?$CFS?6?$AA@
  • 00002228 — ??_C@_0CC@KNBK@?6IO?5Error?5Log?5Packet?5Information@
  • 0000224C — ??_C@_13A@?$AA?$AA?$AA?$AA@
  • 00002250 — ??_C@_1BK@OIJB@?$AA?2?$AAO?$AAb?$AAj?$AAe?$AAc?$AAt?$AAT?$AAy?$AAp?$AAe?$AAs?$AA?$AA@
  • 0000226C — ??_C@_1BE@PPB@?$AAD?$AAi?$AAr?$AAe?$AAc?$AAt?$AAo?$AAr?$AAy?$AA?$AA@
  • 00002280 — ??_C@_0BN@FKCK@?8Symbolic?5link?5object?5?$CFs?5?$CFx?6?$AA@
  • 000022A0 — ??_C@_0BG@NGKK@?8Directory?5object?5?$CFs?6?$AA@
  • 000022B8 — ??_C@_0BP@OJA@?8Dumping?5the?5object?5directory?6?$AA@
  • 000022D8 — ??_C@_0BN@DCAD@?8Dumping?5the?5root?5directory?6?$AA@
  • 000022F8 — _FSysErr
  • 00002308 — _FSysErrVerbose
  • 00002318 — _FErrorCode
  • 00002328 — _FCaption
  • 0000234C — ??_C@_0BI@NKKE@?$CFs?5called?5by?5?$CFx?5?6?$CFs?5?$CFx?6?$AA@
  • 00002364 — ??_C@_0DB@NGP@?$CFs?5called?5by?5?$CFx?5?6?$CFs?5?$CFx?5?6Paramete@
  • 00002398 — _NestCount
  • 0000239C — _InitialWindowsThread
  • 000023A0 — _RtCs
  • 000023A4 — _ApicBase
  • 000023A8 — _pCurrentRtThread
  • 000023AC — _TransferControl
  • 000023B0 — _ForceAtomic
  • 000023B4 — _NtInfo
  • 000023C8 — ??_C@_0CN@FAJP@BugCheck?50x81?3?5Invalid?5spinlock?5@
  • 000023F8 — ??_C@_0DG@CEIL@BugCheck?50xf?3?5Acquiring?5already?5@
  • 00002430 — ??_C@_0DB@NLPC@BugCheck?50x10?3?5Releasing?5unowned@
  • 00002464 — _MiSectionMapping
  • 00002474 — ??_C@_1CO@EMLF@?$AA?2?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?2?$AAP?$AAh?$AAy?$AAs?$AAi?$AAc?$AAa?$AAl?$AAM?$AAe?$AAm?$AAo@
  • 000024A4 — ??_C@_1BA@GGKP@?$AAS?$AAe?$AAc?$AAt?$AAi?$AAo?$AAn?$AA?$AA@
  • 000024B4 — _MMCONTROL
  • 000024B8 — _PspThreadMapping
  • 000024C8 — ??_C@_1O@BEJI@?$AAT?$AAh?$AAr?$AAe?$AAa?$AAd?$AA?$AA@
  • 000024DC — ___nullstring
  • 000024E0 — ___wnullstring
  • 000024E4 — ??_C@_1O@POHA@?$AA?$CI?$AAn?$AAu?$AAl?$AAl?$AA?$CJ?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA?$AA@
  • 000024F4 — ??_C@_06ONKE@?$CInull?$CJ?$AA@
  • 00002500 — __pctype
  • 00002504 — __pwctype
  • 00002508 — __ctype
  • 0000270C — ___mb_cur_max
  • 00002710 — __decimal_point
  • 00002714 — __decimal_point_length
  • 00002718 — __fltused
  • 0000271C — __ldused
  • 00002720 — ___fastflag
  • 00002728 — __cfltcvt_tab
  • 00002740 — __sigintoff
  • 00002748 — _GUID_HWPROFILE_QUERY_CHANGE
  • 00002758 — _GUID_HWPROFILE_CHANGE_CANCELLED
  • 00002768 — _GUID_HWPROFILE_CHANGE_COMPLETE
  • 00002778 — _GUID_DEVICE_INTERFACE_ARRIVAL
  • 00002788 — _GUID_DEVICE_INTERFACE_REMOVAL
  • 00002798 — _GUID_TARGET_DEVICE_QUERY_REMOVE
  • 000027A8 — _GUID_TARGET_DEVICE_REMOVE_CANCELLED
  • 000027B8 — _GUID_TARGET_DEVICE_REMOVE_COMPLETE
  • 000027C8 — _GUID_BUS_INTERFACE_STANDARD
  • 000027D8 — _GUID_PCI_BUS_INTERFACE_STANDARD
  • 000027E8 — _GUID_ARBITER_INTERFACE_STANDARD
  • 000027F8 — _GUID_TRANSLATOR_INTERFACE_STANDARD
  • 00002808 — _GUID_ACPI_INTERFACE_STANDARD
  • 00002818 — _GUID_BUS_TYPE_PCMCIA
  • 00002828 — _GUID_BUS_TYPE_PCI
  • 00002838 — _GUID_BUS_TYPE_USB
  • 00002890 — _GUID_DEVICE_BATTERY
  • 000028A0 — _GUID_DEVICE_SYS_BUTTON
  • 000028B0 — _GUID_DEVICE_LID
  • 000028C0 — _GUID_DEVICE_THERMAL_ZONE
  • 000028D0 — _GUID_CLASS_INPUT
  • 00002A60 — ___lookuptable
  • 00002ABC — _FreeDriverInitialization@4
  • 00002AE8 — _MapWin95Err@8
  • 00002B22 — _MmUnlockPages@4
  • 00002C38 — _MiDeferredUnLock@20
  • 00002C78 — _MmUnmapLockedPages@8
  • 00002D39 — _MiDeferredUnMap@20
  • 00002D58 — _MmMapLockedPages@8
  • 00002ECA — _ntkIsSwapping@0
  • 00002EE0 — _MmSizeOfMdl@8
  • 00002F0A — _MmCreateMdl@12
  • 00002F7A — _MmAllocateContiguousMemory@12
  • 00002FC2 — _MmBuildMdlForNonPagedPool@4
  • 00003023 — _MmFreeContiguousMemory@4
  • 00003040 — _MmProbeAndLockPages@12
  • 00003143 — _MmProbeAndLockProcessPages@16
  • 00003255 — _MiLockProcessPages@20
  • 00003281 — _MiLockPages@20
  • 000032AA — _MmMapIoSpace@16
  • 000034B1 — _MmUnmapIoSpace@8
  • 000034FA — _MiReserveSystemPtes@20
  • 000035BD — _MiInitializeSystemPtes@12
  • 00003634 — _MiReleaseSystemPtes@12
  • 00003674 — _ThreadSwitchNotification@4
  • 00003701 — _KeGetCurrentThread@0
  • 00003707 — _IoGetCurrentProcess@0
  • 00003710 — _memmove
  • 00003753 — _InitializeRegistry@0
  • 00003774 — _ProbeForRead@12
  • 000037A5 — _ProbeForWrite@12
  • 000037B9 — _DeviceIoControl@12
  • 00003850 — _IoUnregisterPlugPlayNotification@4
  • 00003880 — _IoReportTargetDeviceChange@8
  • 00003888 — _IopInitializePlugPlayNotification@0
  • 000038E5 — _IopReferenceNotify@4
  • 000038F0 — _IopDereferenceNotify@4
  • 00003912 — _IopNotifyHwProfileChange@4
  • 0000398F — _IopNotifyDeviceClassChange@12
  • 00003A49 — _IoRegisterPlugPlayNotification@28
  • 00003C0F — _NtGetDevnodeFromFileHandle@8
  • 00003CBD — _PoRegisterSystemState@8
  • 00003D26 — _PoUnregisterSystemState@4
  • 00003D40 — _PopApplyAttributeState@8
  • 00003DC8 — _PopSystemRequiredSet@4
  • 00003DDB — _PopUserPresentSet@4
  • 00003E0D — _ConvertToCMPowerState@12
  • 00003E55 — _PoQueryPowerSequence@0
  • 00003E59 — @_PopInternalError@4
  • 00003E6B — _PopExceptionFilter@8
  • 00003EA3 — _PopChangeCapability@8
  • 00003EC3 — _PopOpenPowerKey@4
  • 00003F54 — _NtSetThreadExecutionState@8
  • 0000403E — _NtRequestWakeupLatency@4
  • 0000408D — _NtInitiatePowerAction@16
  • 000041EA — _NtSetSystemPowerState@12
  • 000041F2 — _CancelWarningDialog
  • 0000421F — _PopMessageBoxCompletion
  • 0000423A — _PopDisplayWarningDialog
  • 000042ED — _PopSetPowerAction@16
  • 00004537 — _PopCompleteAction@8
  • 0000455E — _PopPromoteActionFlag@20
  • 000045A0 — _PopPolicyWorkerAction@0
  • 00004658 — _PopPolicyWorkerActionPromote@0
  • 000046CC — _PopShutdown
  • 0000471F — _PopIssueActionRequest@16
  • 00004802 — _PopRemoveUserEventsFromQueue@0
  • 0000481B — _PopSuspendTimeOut
  • 00004830 — _PopCompositeBatteryDeviceHandler@16
  • 00004C3D — _PopRecalculateCBTriggerLevels@4
  • 00004C9F — _PopComputeCBTime@0
  • 00004CAA — _PopResetCBTriggers@4
  • 00004CD4 — _PopCurrentPowerState@4
  • 00004E3D — _NtPowerInformation@20
  • 000052A8 — _PopApplyAdminPolicy@12
  • 0000537C — _PopApplyPolicy@16
  • 000054FD — _PopVerifyPowerPolicy@12
  • 000056D0 — _PopVerifyThrottle@8
  • 00005731 — _PopVerifyPowerActionPolicy@4
  • 000057F5 — _PopVerifySystemPowerState@4
  • 00005897 — _PopResetCurrentPolicies@0
  • 000059F5 — _PopNotifyPolicyDevice@8
  • 00005A2F — _PopConnectToPolicyDevice@8
  • 00005C65 — _PoInitSystem@4
  • 0000601C — _PopDefaultPolicy@4
  • 00006085 — _PoInitDriverServices@4
  • 00006121 — _PopRegisterForDeviceNotification@8
  • 00006146 — _PoSetPowerState@12
  • 0000614D — _PopAcquirePolicyLock@0
  • 00006169 — _PopReleasePolicyLock@4
  • 0000619D — _PopGetPolicyWorker@4
  • 000061C1 — _PopCompletePolicyIrp@12
  • 0000622C — _PopCheckForWork@0
  • 00006298 — _PopPolicyWorkerThread@4
  • 0000633A — _PopPolicyWorkerMain@0
  • 0000637B — _PopDoNotificationWork
  • 000063E3 — _PopSetNotificationWork@4
  • 00006405 — _PopPolicyWorkerNotify@0
  • 00006408 — _PopInitSIdle@0
  • 000064DC — _PopPolicySystemIdle@0
  • 0000653D — _PoSystemIdleWorker@4
  • 00006544 — _PopSystemButtonHandler@16
  • 000066D3 — _PopTriggerSwitch@12
  • 00006725 — _PopResetSwitchTriggers@0
  • 0000673C — _PopThermalDeviceHandler@16
  • 0000673C — _PopThermalZoneDpc@16
  • 0000673F — _NullPrint
  • 0000673F — _PopApplyThermalThrottle@0
  • 00006740 — _ExAllocatePoolWithTag@12
  • 00006771 — _ExpAllocatePool@12
  • 000067B7 — _ExpFreePool@4
  • 000067D6 — _ExFreePool@4
  • 000067E2 — _ExAllocatePool@8
  • 00006811 — _ExInitializeResourceLite@4
  • 00006843 — _ExReinitializeResourceLite@4
  • 000068BF — @ExpAcquireResourceExclusiveLite@8
  • 00006938 — _ExAcquireResourceExclusiveLite@8
  • 000069A2 — _ExTryToAcquireResourceExclusiveLite@4
  • 000069F7 — _ExAcquireResourceSharedLite@8
  • 00006AD6 — @ExReleaseResourceLite@4
  • 00006BE6 — _ExDeleteResourceLite@4
  • 00006C3B — _ExGetExclusiveWaiterCount@4
  • 00006C46 — _ExGetSharedWaiterCount@4
  • 00006C51 — _ExIsResourceAcquiredExclusiveLite@4
  • 00006C8A — _ExIsResourceAcquiredSharedLite@4
  • 00006CEE — _ExpWaitForResource@8
  • 00006E2A — _ExpFindCurrentThread@8
  • 00006F12 — @ExAcquireFastMutexUnsafe@4
  • 00006F33 — @ExReleaseFastMutexUnsafe@4
  • 00006F4E — @ExAcquireFastMutex@4
  • 00006F6B — @ExReleaseFastMutex@4
  • 00006F7C — _ExSystemExceptionFilter@0
  • 00006F88 — _ExGetPreviousMode@0
  • 00006F8E — _ExShutDown@0
  • 00006F93 — _InitializeWorkerSignalDpc@4
  • 00006FAB — _InsertQueueDpc@12
  • 00006FBF — _ExQueueWorkItem@8
  • 00007077 — _ExpSignalWorkerProcedure@16
  • 00007096 — _Query_Thread_Priority@0
  • 000070A8 — _KefYield@0
  • 000070C7 — _ExRegisterCallback@12
  • 0000715C — _ExUnregisterCallback@4
  • 000071DF — _ExNotifyCallback@12
  • 00007278 — _ExDeleteNPagedLookasideList@4
  • 000072BC — _ExDeletePagedLookasideList@4
  • 00007300 — _ExAllocateFromPagedLookasideList@4
  • 00007374 — _ExAllocateFromNPagedLookasideList@4
  • 0000739D — _ExFreeToPagedLookasideList@8
  • 0000740B — _ExpDummyAllocate@12
  • 00007410 — _ExInitializeZone@16
  • 0000746F — _ExExtendZone@12
  • 000074CB — _ExInterlockedExtendZone@16
  • 000074FC — _HalPutDmaAdapter@4
  • 0000751B — _HalAllocateAdapterChannel@16
  • 00007627 — _IoMapTransfer@24
  • 00007694 — _HalpMapTransferHelper@20
  • 000076D5 — _HalpMapTransfer@24
  • 00007A18 — _IoFlushAdapterBuffers@24
  • 00007B48 — _HalReadDmaCounter@4
  • 00007C32 — _HalpAllocPhysicalMemory@12
  • 00007CAE — _HalpCopyBufferMap@20
  • 00007D09 — _HalFlushCommonBuffer@20
  • 00007D0E — _HalFreeCommonBuffer@24
  • 00007D1A — _IoFreeAdapterChannel@4
  • 00007E0E — _IoFreeMapRegisters@12
  • 00007F3F — _HalGetInterruptVector@24
  • 00007F6B — _HalTranslateBusAddress@24
  • 00007F81 — _HalpGetCmosData@16
  • 00007FFE — _HalGetBusData@20
  • 00008048 — _HalGetBusDataByOffset@24
  • 0000806B — _RtlUnicodeStringToAnsiSize@4
  • 0000808D — _RtlSingleByteSet
  • 00008095 — _RtlUpcaseUnicodeChar@4
  • 000080B3 — _RtlpUpcaseUnicodeChar@4
  • 000080D1 — _RtlAnsiCharToUnicodeChar@4
  • 00008119 — _RtlAllocateString@4
  • 0000812C — _RtlInitAnsiString@8
  • 0000815A — _RtlInitUnicodeString@8
  • 0000818C — _RtlAssert@16
  • 000081DA — _RtlEqualUnicodeString@12
  • 00008273 — _RtlCopyUnicodeString@8
  • 000082C5 — _RtlAppendUnicodeToString@8
  • 00008336 — _RtlAppendUnicodeStringToString@8
  • 0000839A — _RtlxUnicodeStringToAnsiSize@4
  • 000083B8 — _RtlxAnsiStringToUnicodeSize@4
  • 000083D8 — _RtlFreeUnicodeString@4
  • 000083FE — _RtlFreeAnsiString@4
  • 00008424 — _RtlCompareUnicodeString@12
  • 000084EB — _RtlUnicodeToMultiByteN@20
  • 00008513 — _RtlMultiByteToUnicodeN@20
  • 00008538 — _RtlUpcaseUnicodeToMultiByteN@20
  • 0000858A — _RtlUnicodeToMultiByteSize@12
  • 000085B2 — _RtlAllocateSprintf
  • 000085CB — _RtlAllocateWsprintf
  • 000085E4 — _RtlpAllocateSprintf@20
  • 00008676 — _RtlMapGenericMask@8
  • 000086C8 — _RtlSetAllBits@4
  • 000086E8 — _RtlSetBits@12
  • 00008782 — _RtlFindClearBits@12
  • 000089D1 — _RtlFindClearBitsAndSet@12
  • 000089FD — _RtlClearBits@12
  • 00008A98 — _RtlDeleteRegistryValue@12
  • 00008AEB — _RtlIntegerToChar@16
  • 00008BCA — _RtlUnicodeStringToInteger@12
  • 00008D23 — _RtlIntegerToUnicodeString@12
  • 00008D7B — _RtlLargeIntegerToChar@16
  • 00008EC8 — _RtlMoveMemory@12
  • 00008EDF — _RtlCopyMemory@12
  • 00008EF6 — _RtlZeroMemory@8
  • 00008F0C — _ElapsedDaysToYears@4
  • 00008F7C — _DaysAndFractionToTime@12
  • 00008FB4 — _RtlTimeToTimeFields@8
  • 0000911A — _RtlTimeFieldsToTime@8
  • 000092B8 — _IopAssociationLookup@12
  • 000092ED — _IopAssociationInsert@8
  • 00009309 — _IoAssociationAllocate@16
  • 000093F1 — _IoAssociationFind@16
  • 000094B3 — _IoGetDriverObjectExtension@8
  • 000094D6 — _NTKERNProcessISR
  • 00009515 — _NtKernGetVPICDHandleFromInterruptObj
  • 00009532 — _ZwCreateFile@44
  • 00009574 — _IopDecrementDeviceObjectRef@8
  • 000095BB — _IopInsertRemoveDevice@12
  • 0000960D — _IopCompleteUnloadOrDelete@8
  • 00009767 — _IopCompleteRequest@20
  • 000099E1 — _IopDisassociateThreadIrp@0
  • 00009A3D — _IopFreeMdl@4
  • 00009A5B — _IopDropIrp@8
  • 00009ABE — _IopInvalidDeviceRequest@8
  • 00009AD8 — _IopExceptionFilter@8
  • 00009B00 — _IopExceptionCleanup@16
  • 00009B7A — _IopFreeIrpAndMdls@4
  • 00009BA0 — _IopTimerDispatch@16
  • 00009C18 — @IofCompleteRequest@8
  • 00009E77 — _IoAllocateErrorLogEntry@8
  • 00009F86 — _IoWriteErrorLogEntry@4
  • 00009FFD — _PopAttribNop@4
  • 00009FFD — _IopCheckDeviceName@4
  • 0000A000 — _IoCreateSymbolicLink@8
  • 0000A059 — _IopRemoveTimerFromTimerList@4
  • 0000A093 — _IoDeleteDevice@4
  • 0000A102 — _IoDetachDevice@4
  • 0000A14E — _IoCompleteRequest@8
  • 0000A16E — _IoInitializeIrp@12
  • 0000A1B5 — _IoFreeWorkItem@4
  • 0000A1B5 — _RtlFreeString@4
  • 0000A1B5 — _IoFreeIrp@4
  • 0000A1C1 — _IoAllocateIrp@8
  • 0000A1FA — _IoGetAttachedDevice@4
  • 0000A20C — _IoGetAttachedDeviceReference@4
  • 0000A240 — _IoGetRelatedDeviceObject@4
  • 0000A274 — @IofCallDriver@8
  • 0000A292 — _IoCancelIrp@4
  • 0000A2EE — _IoAllocateMdl@20
  • 0000A395 — _IoFreeMdl@4
  • 0000A3B3 — _IopSetAttachedDevicePointer@8
  • 0000A3FD — _IoAttachDeviceToDeviceStack@8
  • 0000A457 — _IoAttachDeviceByPointer@8
  • 0000A4B4 — _IoAcquireCancelSpinLock@4
  • 0000A4C7 — _IoReleaseCancelSpinLock@4
  • 0000A4D8 — _IoAllocateAdapterChannel@20
  • 0000A503 — _IoCallDriver@8
  • 0000A523 — _IoStartTimer@4
  • 0000A559 — _IoStopTimer@4
  • 0000A58E — _IoBuildSynchronousFsdRequest@28
  • 0000A5EB — _IoBuildAsynchronousFsdRequest@24
  • 0000A6D2 — _IoStartNextPacket@8
  • 0000A72D — _IoStartNextPacketByKey@12
  • 0000A78B — _IoStartPacket@16
  • 0000A831 — _IopAppendWorkHandleList@12
  • 0000A8A0 — _IoBuildPartialMdl@16
  • 0000A972 — _IoGetCurrentIrpStackLocation@4
  • 0000A97C — _NtLoadDriver@4
  • 0000A9CA — _IopReferenceAttachmentChain@4
  • 0000A9E1 — _IopDereferenceAttachmentChain@4
  • 0000A9FD — _IopDeleteFile@4
  • 0000AB90 — _IopCheckDeviceAndDriver@16
  • 0000ABF9 — _IopDereferenceVpbAndFree@4
  • 0000AC1D — _ZwQueryInformationFile@20
  • 0000AC4D — _IoAcquireRemoveLockEx@20
  • 0000ACE7 — _IoReleaseRemoveLockEx@12
  • 0000AD8E — _IoReportResourceUsage@36
  • 0000AD9A — _LogPrint
  • 0000ADC7 — _IopErrorLogDpc@16
  • 0000ADFE — _IopErrorLogGetEntry@0
  • 0000AE41 — _IoAllocateWorkItem@4
  • 0000AE6A — _IoQueueWorkItem@16
  • 0000AE93 — _ObpAllocateObjectCreateInfoBuffer@0
  • 0000AEA2 — _ObpAllocateObjectNameBuffer@8
  • 0000AECB — @ObpFreeObjectCreateInfoBuffer@4
  • 0000AED2 — @ObpFreeObjectNameBuffer@4
  • 0000AEDB — _CloseHandle@8
  • 0000AF5F — _PopCloseSystemHandle@4
  • 0000AF5F — _NtClose@4
  • 0000AF6B — _ObpInsertDirectoryEntry@8
  • 0000AFD2 — _ObpDeleteDirectoryEntry@4
  • 0000B009 — _ObpIncrementHandleCount@24
  • 0000B071 — _ObpIncrementUnnamedHandleCount@16
  • 0000B0EF — _ObpDecrementHandleCount@12
  • 0000B13F — @IsWin32Object@4
  • 0000B199 — _GetWin32ObjectType@4
  • 0000B1C5 — @ObfReferenceObject@4
  • 0000B1EA — _ObpProcessRemoveObjectQueue@4
  • 0000B24F — @ObfDereferenceObject@4
  • 0000B305 — _ObReferenceObjectByHandle@24
  • 0000B3E2 — _ObReferenceObjectByPointer@16
  • 0000B3F0 — _ObDereferenceObject@4
  • 0000B3FC — _ObGetObjectName@4
  • 0000B41F — _KeInitializeApc@32
  • 0000B47F — _KiProcessWin95APC@4
  • 0000B52F — _KeInsertQueueApc@16
  • 0000B5E5 — _KeRemoveQueueApc@4
  • 0000B615 — _KeBugCheck@4
  • 0000B65D — _KeBugCheckEx@20
  • 0000B6B7 — _KeInitializeDeviceQueue@4
  • 0000B6E0 — _KeInsertDeviceQueue@8
  • 0000B732 — _KeRemoveDeviceQueue@4
  • 0000B780 — _KeRemoveEntryDeviceQueue@8
  • 0000B7BC — _KeSynchronizeExecution@12
  • 0000B811 — _KeInsertByKeyDeviceQueue@12
  • 0000B869 — _KeRemoveByKeyDeviceQueue@8
  • 0000B8D2 — _KeInitializeEvent@12
  • 0000B8EE — _KeSetEvent@12
  • 0000B911 — _KeClearEvent@4
  • 0000B91E — _KeResetEvent@4
  • 0000B92B — _KePulseEvent@12
  • 0000B975 — _KeReadStateEvent@4
  • 0000B97F — @KepEnterNTKern@4
  • 0000B99F — @KepLeaveNTKern@4
  • 0000B9B8 — _KeEnterCriticalRegion@0
  • 0000B9E9 — _KeLeaveCriticalRegion@0
  • 0000BA16 — _KeInitializeMutex@8
  • 0000BA23 — _KeReleaseMutex@8
  • 0000BA61 — _KeInitializeSemaphore@12
  • 0000BA78 — _KeReadStateSemaphore@4
  • 0000BA96 — _KeReleaseSemaphore@16
  • 0000BB0C — _NtKernRtInfo
  • 0000BB44 — _KeInitializeSpinLock@4
  • 0000BB51 — _True@4
  • 0000BB51 — _HalGetDmaAlignment@4
  • 0000BB57 — _NextInLine@4
  • 0000BB97 — _YieldToNextInLine@4
  • 0000BBC8 — @KfAcquireLock@4
  • 0000BD53 — @KfReleaseLock@4
  • 0000BDEA — @KfAcquireSpinLock@4
  • 0000BE03 — @KefAcquireSpinLockAtDpcLevel@4
  • 0000BE08 — @KeAcquireSpinLockRaiseToSynch@4
  • 0000BE21 — @KfReleaseSpinLock@8
  • 0000BE31 — @KefReleaseSpinLockFromDpcLevel@4
  • 0000BE36 — _KeWaitForSingleObject@20
  • 0000BE6A — _KeDelayExecutionThread@12
  • 0000BED2 — _KeWaitForMultipleObjects@32
  • 0000BF20 — _KeSetPhysicalCacheTypeRange@16
  • 0000BF5D — _MiSectionDelete@4
  • 0000BF89 — _MmInitSystem@4
  • 0000BF9E — _MmQuerySystemSize@0
  • 0000BFA2 — _MiProcessTerminated@4
  • 0000BFCD — @PiWinCreateThreadWrapper@8
  • 0000BFE7 — _sprintf
  • 0000C040 — _vsprintf
  • 0000C098 — __global_unwind2
  • 0000C0DA — __local_unwind2
  • 0000C134 — __abnormal_termination
  • 0000C160 — __except_handler2
  • 0000C218 — __except_handler3
  • 0000C2C6 — __seh_longjmp_unwind@4
  • 0000C341 — __itoa
  • 0000C36B — __snprintf
  • 0000C3C3 — __snwprintf
  • 0000C43C — __strcmpi
  • 0000C43C — __stricmp
  • 0000C480 — __strlwr
  • 0000C4A4 — __strnicmp
  • 0000C4FC — __strnset
  • 0000C528 — __strrev
  • 0000C558 — __strset
  • 0000C578 — __strupr
  • 0000C599 — __vsnprintf
  • 0000C5F0 — __wcsicmp
  • 0000C639 — __wcslwr
  • 0000C665 — __wcsnicmp
  • 0000C6D2 — __wcsnset
  • 0000C700 — __wcsrev
  • 0000C735 — __wcsupr
  • 0000C761 — _atol
  • 0000C7F8 — _atoi
  • 0000C805 — _isupper
  • 0000C831 — _islower
  • 0000C85D — _isdigit
  • 0000C889 — _isxdigit
  • 0000C8BA — _isspace
  • 0000C8E6 — _isprint
  • 0000C917 — _mbstowcs
  • 0000C99B — _mbtowc
  • 0000CA14 — _memchr
  • 0000CA34 — _qsort
  • 0000CC04 — _srand
  • 0000CC0E — _rand
  • 0000CC2C — _strcat
  • 0000CC30 — _strcpy
  • 0000CC6C — _strchr
  • 0000CC94 — _strcmp
  • 0000CCB8 — _strlen
  • 0000CCD0 — _strncat
  • 0000CD04 — _strncmp
  • 0000CD3C — _strncpy
  • 0000CD60 — _strrchr
  • 0000CD88 — _strspn
  • 0000CDC4 — _strstr
  • 0000CE22 — _swprintf
  • 0000CE99 — _tolower
  • 0000CED0 — _toupper
  • 0000CF25 — _towlower
  • 0000CF42 — _towupper
  • 0000CF4C — _wcscat
  • 0000CF7D — _wcscpy
  • 0000CF9F — _wcschr
  • 0000CFCB — _wcscmp
  • 0000D008 — _wcscspn
  • 0000D047 — _wcslen
  • 0000D05E — _wcsncat
  • 0000D0A2 — _wcsncmp
  • 0000D0DA — _wcsncpy
  • 0000D11D — _wcsrchr
  • 0000D14E — _wcsspn
  • 0000D18D — _wcsstr
  • 0000D1D4 — _wcstombs
  • 0000D26A — _wctomb
  • 0000D2B0 — _memcmp
  • 0000D2CF — __vsnwprintf
  • 0000D346 — __flsbuf
  • 0000D354 — __output
  • 0000DBE3 — __woutput
  • 0000E426 — _iswctype
  • 0000E451 — __isctype
  • 0000E454 — __amsg_exit
  • 0000E455 — __mbstrlen
  • 0000E4A5 — _mblen
  • 0000E4DA — _fputwc
  • 0000E50A — __fptrap
  • 0000E515 — __flswbuf
  • 0000E524 — __alldiv
  • 0000E5C0 — __allmul
  • 0000E5F4 — __allrem
  • 0000E694 — __allshl
  • 0000E6A4 — __allshr
  • 0000E6B4 — __aulldiv
  • 0000E714 — __aullrem
  • 0000E780 — __aullshr
  • 0000E78D — __purecall
  • 0000E798 — __NTKERN_Get_Version
  • 0000E79C — __NtKernCreateFile
  • 0000E7A0 — __NtKernClose
  • 0000E7A4 — __NtKernReadFile
  • 0000E7A8 — __NtKernWriteFile
  • 0000E7AC — __NtKernDeviceIoControl
  • 0000E7B0 — __NtKernGetWorkerThread
  • 0000E7B4 — __NtKernLoadDriver
  • 0000E7B8 — __NtKernQueueWorkItem
  • 0000E7BC — __NtKernPhysicalDeviceObjectToDevNode
  • 0000E7C0 — __NtKernSetPhysicalCacheTypeRange
  • 0000E7C4 — __NtKernWin9XLoadDriver
  • 0000E7C8 — __NtKernCancelIoFile
  • 0000E7CC — __NtKernGetVPICDHandleFromInterruptObj
  • 0000E7D0 — __NtKernInternalDeviceIoControl
  • 0000E7D4 — __NtKernPreLoadDriver
  • 0000E7D8 — __NtKernCheckUnPreLoadDriver
  • 0000E7DC — __NtKernRtInfo
  • 0000E7E0 — NTKERN_DDB
  • 0000E830 — KdComPortInUse
  • 0000E834 — KdDebuggerNotPresent
  • 0000E838 — _MachineInfo
  • 0000E894 — _SysVMStackLimit
  • 0000E894 — _SysVMStack
  • 0000E8A0 — _DebugInit@4
  • 0000E8B9 — _DebugPrint@8
  • 0000E8F8 — _DbgPrint
  • 0000E90B — _DbgBreakPoint@0
  • 0000E90D — _DbgOutDebugString@4
  • 0000E91F — _DbgInDebugChar@0
  • 0000E926 — _DbgInDebugPrintf
  • 0000E92C — _READ_PORT_UCHAR@4
  • 0000E934 — _READ_PORT_USHORT@4
  • 0000E93D — _READ_PORT_ULONG@4
  • 0000E945 — _WRITE_PORT_UCHAR@8
  • 0000E951 — _WRITE_PORT_USHORT@8
  • 0000E95E — _WRITE_PORT_ULONG@8
  • 0000E96A — _READ_REGISTER_UCHAR@4
  • 0000E973 — _READ_REGISTER_USHORT@4
  • 0000E97D — _READ_REGISTER_ULONG@4
  • 0000E986 — _WRITE_REGISTER_UCHAR@8
  • 0000E993 — _WRITE_REGISTER_USHORT@8
  • 0000E9A1 — _WRITE_REGISTER_ULONG@8
  • 0000E9AE — _READ_REGISTER_BUFFER_UCHAR@12
  • 0000E9C3 — _READ_REGISTER_BUFFER_ULONG@12
  • 0000E9D8 — _READ_REGISTER_BUFFER_USHORT@12
  • 0000E9EE — _WRITE_REGISTER_BUFFER_UCHAR@12
  • 0000EA03 — _WRITE_REGISTER_BUFFER_ULONG@12
  • 0000EA18 — _WRITE_REGISTER_BUFFER_USHORT@12
  • 0000EA2E — _READ_PORT_BUFFER_UCHAR@12
  • 0000EA41 — _READ_PORT_BUFFER_ULONG@12
  • 0000EA54 — _READ_PORT_BUFFER_USHORT@12
  • 0000EA68 — _WRITE_PORT_BUFFER_UCHAR@12
  • 0000EA7B — _WRITE_PORT_BUFFER_ULONG@12
  • 0000EA8E — _WRITE_PORT_BUFFER_USHORT@12
  • 0000EAA2 — _KeStallExecutionProcessor@4
  • 0000EAB4 — _IoCheckShareAccess@20
  • 0000EABD — @KeFlushWriteBuffer@0
  • 0000EAC4 — _KeSetImportanceDpc@8
  • 0000EACD — _SeAssignSecurity@28
  • 0000EAD6 — _SeDeassignSecurity@4
  • 0000EADF — _HalAssignSlotResources@32
  • 0000EAE8 — _HalSetBusDataByOffset@24
  • 0000EAF1 — NTKERN_Control
  • 0000EBD8 — _NTKERN_Get_Version
  • 0000EBDF — _KeGetCurrentIrql@0
  • 0000EBE9 — _KeQuerySystemTime@4
  • 0000EBF3 — @KfRaiseIrql@4
  • 0000EBFD — @KfLowerIrql@4
  • 0000EC07 — _RtlUnwind@16
  • 0000EC11 — _RtlRaiseStatus@4
  • 0000EC1B — _RtlRaiseException@4
  • 0000EC25 — _KeInitializeDpc@12
  • 0000EC2F — _ZwOpenSection@12
  • 0000EC34 — _ZwMapViewOfSection@40
  • 0000EC39 — _EnQueue@8
  • 0000EC4D — _DeQueue@4
  • 0000EC61 — _InQueue@8
  • 0000EC7F — _RemQueue@8
  • 0000ECA1 — _SetInterrupts@4
  • 0000ECB7 — _ExchangeUlong@8
  • 0000ECC4 — _QueueUserApc
  • 0000ECCA — _QueueKernelApc
  • 0000ECD0 — _LinPageUnlock
  • 0000ECD6 — _KeInitializeTimer@4
  • 0000ECDC — _KeQueryPerformanceCounter@4
  • 0000ECE6 — _KeSetTimer@16
  • 0000ECEC — _RunScheduledEvents@0
  • 0000ECF2 — _GetCurrentThread@0
  • 0000ECFD — _Debug_Printf_Service
  • 0000ED03 — _Win95PageReserve
  • 0000ED09 — _Win95PageCommitPhys
  • 0000ED0F — _Win95PageDecommit
  • 0000ED15 — _Win95PageFree
  • 0000ED1B — _Win95GetNulPageHandle
  • 0000ED21 — _MmGetPhysicalAddress@4
  • 0000ED59 — __LinPageLock
  • 0000ED5F — _MiFillMdlPages@12
  • 0000ED94 — _CountBits@8
  • 0000EDCB — _CodeLoaded@0
  • 0000EDE6 — NTKERN_Debug_Query
  • 0000EDF7 — _TrapSysDriverInit@0
  • 0000EE08 — _ExRaiseStatus@4
  • 0000EE12 — _KeInsertQueueDpc@12
  • 0000EE1C — @Exfi386InterlockedExchangeUlong@8
  • 0000EE25 — @InterlockedDecrement@4
  • 0000EE30 — @InterlockedIncrement@4
  • 0000EE3B — @InterlockedExchange@8
  • 0000EE40 — @InterlockedCompareExchange@12
  • 0000EE4A — @ExfInterlockedAddUlong@12
  • 0000EE54 — _ExqInterlockedAddUlong@0
  • 0000EE54 — @ExqInterlockedAddUlong@8
  • 0000EE79 — _ExqInterlockedAddUlong386@0
  • 0000EE81 — _ExqInterlockedAddUlong486@0
  • 0000EE88 — @ExInterlockedAddLargeStatistic@8
  • 0000EE88 — _ExInterlockedAddLargeStatistic@0
  • 0000EE8F — _ExfInterlockedInsertHeadList@0
  • 0000EE8F — @ExfInterlockedInsertHeadList@12
  • 0000EEA7 — _ExfInterlockedInsertTailList@0
  • 0000EEA7 — @ExfInterlockedInsertTailList@12
  • 0000EEC0 — _ExfInterlockedRemoveHeadList@0
  • 0000EEC0 — @ExfInterlockedRemoveHeadList@8
  • 0000EED3 — @ExfInterlockedPushEntryList@12
  • 0000EEDF — @ExfInterlockedPopEntryList@8
  • 0000EEED — @ExInterlockedPushEntrySList@12
  • 0000EF0E — @ExInterlockedPopEntrySList@8
  • 0000EF2F — @ExInterlockedFlushSList@4
  • 0000EF50 — @ExfInterlockedPopEntrySList@8
  • 0000EF61 — @ExfInterlockedPushEntrySList@12
  • 0000EF70 — @ExfInterlockedFlushSList@4
  • 0000EF87 — @ExInterlockedCompareExchange64@16
  • 0000EFA2 — @ExpInterlockedCompareExchange64@16
  • 0000EFD4 — ThreadSwitchNotification_stub
  • 0000EFDC — _memcpy
  • 0000EFFB — _memset
  • 0000F023 — __disable
  • 0000F025 — __enable
  • 0000F027 — _KeQueryTimeIncrement@0
  • 0000F030 — _InitializeWin32Mutex
  • 0000F03E — _ReleaseWin32Mutex
  • 0000F04D — _InitializeWin32Event
  • 0000F070 — _SetWin32Event
  • 0000F07B — _ClearWin32Event
  • 0000F086 — _ResetWin32Event
  • 0000F095 — _PulseWin32Event
  • 0000F0A4 — _InitializeWin32Semaphore
  • 0000F0AA — _ReadWin32Semaphore
  • 0000F0C1 — _SignalWin32Semaphore
  • 0000F0D0 — _WaitForSingleObject
  • 0000F0EA — _BlockThreadEx
  • 0000F102 — _ScheduleRestrictedEvent@20
  • 0000F142 — _BoostWithDecay@8
  • 0000F157 — _ScheduleGlobalEvent@8
  • 0000F175 — _KiProcessWin95APC_stub@0
  • 0000F182 — _IoInvalidateDeviceRelations@8
  • 0000F1C7 — _IoRequestDeviceEject@4
  • 0000F1E1 — _IoInvalidateDeviceState@4
  • 0000F217 — _NTKERNToWin95IrpHandler@8
  • 0000F2CC — _RtlConvertLongToLargeInteger@4
  • 0000F2D4 — _RtlConvertUlongToLargeInteger@4
  • 0000F2E0 — _RtlCompareMemory@12
  • 0000F324 — @RtlUshortByteSwap@4
  • 0000F329 — @RtlUlongByteSwap@4
  • 0000F32E — @RtlUlonglongByteSwap@8
  • 0000F337 — _IoUnregisterShutdownNotification@4
  • 0000F38D — _MiMapViewOfPhysicalSection@36
  • 0000F4FC — _HeapAllocateEx@16
  • 0000F502 — _HeapFreeEx@8
  • 0000F508 — _LCODE__CONFIGMG_Reenumerate_DevNode
  • 0000F510 — _LCODE__CONFIGMG_Call_At_Appy_Time
  • 0000F518 — _LCODE__CONFIGMG_Request_Device_Ejection
  • 0000F520 — _LCODE__SHELL_QueryAppyTimeAvailable
  • 0000F528 — _LCODE__SHELL_CallAtAppyTime
  • 0000F530 — _LCODE_Call_Restricted_Event@24
  • 0000F55C — _LCODE_VWIN32_SetWin32EventBoostPriority
  • 0000F564 — _LCODE__AtEventTime
  • 0000F56C — _LCODE__GetVxDName
  • 0000F574 — _LCODE_VPICD_Phys_EOI@4
  • 0000F584 — _LCODE_VPICD_Physically_Unmask@4
  • 0000F594 — _LCODE__VPICD_Set_Channel_Irql
  • 0000F59C — _LCODE_VPICD_Virtualize_IRQ@4
  • 0000F5B0 — _LCODE_VPICD_Force_Default_Behavior@4
  • 0000F5C0 — _LCODE_SHELL_SYSMODAL_Message@16
  • 0000F5E4 — _LCODE__Sprintf
  • 0000F5EC — _LCODE_VWIN32_ConvertNtTimeout@4
  • 0000F5F4 — _LCODE_MTRRSetPhysicalCacheTypeRange@12
  • 0000F60C — _LCODE__PageReserve
  • 0000F614 — _LCODE__PageFree
Segment 2: _LMSG$1 @ 00007300
  • 00000000 — @MSG_LAB
  • 00000014 — @MSG_LDATA
Segment 3: _DB1CODE @ 000084D0
  • 00000000 — _DbgPutLogStr@4
  • 00000039 — _DbgGetString@8
  • 000000B2 — _DbgAddLogStr@4
  • 00000139 — _DbgDumpDriverList@0
  • 00000194 — _DbgDumpTraceLog@0
  • 000001EC — _DebugPrintP@8
  • 00000258 — _DebugQuery@0
  • 00000390 — _DebugInitP@4
  • 000003E8 — _DbgDumpThread@4
  • 00000407 — _DbgDumpProcess@4
  • 00000438 — _DbgDumpThreadInfo@0
  • 0000045C — _DbgDumpSystemState@4
  • 000004C1 — _DbgDumpAction@4
  • 00000536 — _DbgDumpPowerLevel@4
  • 0000058A — _DbgDumpPolicy@4
  • 00000771 — _DbgDumpCapabilities@4
  • 0000099C — _DbgDumpPowerInformation@0
  • 00000A09 — _WorkingOn@8
  • 00000A85 — _DbgDumpWorkerQueue@4
  • 00000B26 — _DbgDumpWorker@0
  • 00000B6C — _IoDumpCheck@12
  • 00000BB4 — _DumpLevel@8
  • 00000CAE — _OBDebugDump@0
  • 00000CE0 — _NTKERNTraceLevel
  • 00000CE4 — _ulInDebug
  • 00000CE8 — ??_C@_0BA@JFJO@?$CF08x?5?$CF02d?5?$CF08x?5?$AA@
  • 00000CF8 — ??_C@_0EC@NLFF@0x?$CF8?48lx?50x?$CF8?48lx?50x?$CF8?48lx?5?$CF8?48l@
  • 00000D3C — ??_C@_0EO@OPJP@?6NodeAddr?5?5?5pNodeNext?5?5hModule?5?5@
  • 00000D8C — ??_C@_0BD@FFDI@?6Enter?5selection?3?5?$AA@
  • 00000DA0 — ??_C@_0BN@BLOG@?$CIW?$CJ?5Dump?5worker?5information?6?$AA@
  • 00000DC0 — ??_C@_09EMNI@?$CIX?$CJ?5Exit?6?$AA@
  • 00000DCC — ??_C@_0CJ@IEIH@?$CIT?$CJ?5Dump?5thread?5and?5process?5info@
  • 00000DF8 — ??_C@_0BM@JBCN@?$CIP?$CJ?5Dump?5power?5information?6?$AA@
  • 00000E14 — ??_C@_0BN@LOAC@?$CIO?$CJ?5Dump?5object?5information?6?$AA@
  • 00000E34 — ??_C@_0BG@GMKC@?$CIL?$CJ?5Dump?5driver?5list?6?$AA@
  • 00000E4C — ??_C@_0CC@BABL@?$CII?$CJ?5Dump?5pending?5Irp?5information@
  • 00000E70 — ??_C@_0BE@JGGN@?$CID?$CJ?5Dump?5trace?5log?6?$AA@
  • 00000E84 — ??_C@_0BF@ILII@?6NTKERN?5Debug?5menu?6?6?$AA@
  • 00000E9C — ??_C@_01BJG@?6?$AA@
  • 00000EA0 — ??_C@_08HGNB@INVALID?$CB?$AA@
  • 00000EAC — ??_C@_01FCOA@?5?$AA@
  • 00000EB0 — ??_C@_0BM@ELLE@?0?5Flags?3?5?$CFd?0?5EventCode?3?5?$CFd?6?$AA@
  • 00000ECC — ??_C@_04COF@None?$AA@
  • 00000ED4 — ??_C@_08GKAE@Reserved?$AA@
  • 00000EE0 — ??_C@_05BKOF@Sleep?$AA@
  • 00000EE8 — ??_C@_0O@CLAD@ShutdownReset?$AA@
  • 00000EF8 — ??_C@_0M@EBLN@ShutdownOff?$AA@
  • 00000F04 — ??_C@_09GOGM@?0?5Action?3?$AA@
  • 00000F10 — ??_C@_0DC@LGLE@?$CFs?0?5Spare?5?$CFd?5?$CFd?5?$CFd?0?5Battery?5leve@
  • 00000F44 — ??_C@_08FGLH@Disabled?$AA@
  • 00000F50 — ??_C@_07FFME@Enabled?$AA@
  • 00000F58 — ??_C@_0P@FCCG@OverThrottled?3?$AA@
  • 00000F68 — ??_C@_0FA@PKOM@Optimize?3?5?$CFs?0?5Fan?5throttle?5toler@
  • 00000FB8 — ??_C@_04BBGC@Life?$AA@
  • 00000FC0 — ??_C@_05EFBF@Power?$AA@
  • 00000FC8 — ??_C@_03KLCE@Off?$AA@
  • 00000FCC — ??_C@_02CCEO@On?$AA@
  • 00000FD0 — ??_C@_0BE@HGHB@Disk?5spin?5down?3?5?$CFd?6?$AA@
  • 00000FE4 — ??_C@_0CP@BILG@Video?5timeout?3?5?$CFd?0?5Video?5reserve@
  • 00001014 — ??_C@_0BF@PFDJ@Discharge?5policy?5?$CFd?3?$AA@
  • 0000102C — ??_C@_0CD@JFOK@Broadcast?5capacity?5resolution?3?5?$CF@
  • 00001050 — ??_C@_0CA@KIK@Doze?5spare?3?5?$CFd?0?5S4?5timeout?3?5?$CFd?6?$AA@
  • 00001070 — ??_C@_0BD@CLIF@WinLogonFlags?3?5?$CFd?6?$AA@
  • 00001084 — ??_C@_0BH@KNON@?5Reduce?5Latency?5Sleep?3?$AA@
  • 0000109C — ??_C@_0M@BFLH@?5Max?5Sleep?3?$AA@
  • 000010A8 — ??_C@_0L@GEAA@Min?5Sleep?3?$AA@
  • 000010B4 — ??_C@_0DH@MDM@Idle?5timeout?3?5?$CFd?0?5sensitivity?5?$CFd@
  • 000010EC — ??_C@_05BFLF@Idle?3?$AA@
  • 000010F4 — ??_C@_0O@JAMB@Reserved?3?5?$CFd?6?$AA@
  • 00001104 — ??_C@_0P@NGNF@Lid?5open?5wake?3?$AA@
  • 00001114 — ??_C@_0L@FPGN@Lid?5close?3?$AA@
  • 00001120 — ??_C@_0O@CBFB@Sleep?5button?3?$AA@
  • 00001130 — ??_C@_0O@JNKL@Power?5button?3?$AA@
  • 00001140 — ??_C@_0O@MHLB@Revision?3?5?$CFd?6?$AA@
  • 00001150 — ??_C@_0BK@BMCL@Default?5low?5latency?5wake?3?$AA@
  • 0000116C — ??_C@_0BL@NEOH@Minimum?5device?5wake?5state?3?$AA@
  • 00001188 — ??_C@_0BG@KNJM@Real?9time?5clock?5wake?3?$AA@
  • 000011A0 — ??_C@_0P@HLBA@Soft?5lid?5wake?3?$AA@
  • 000011B0 — ??_C@_0BB@EIAJ@AC?5on?9line?5wake?3?$AA@
  • 000011C4 — ??_C@_0CL@MPFN@Battery?5?$CFd?3?5Granularity?3?5?$CFd?0?5Cap@
  • 000011F0 — ??_C@_0BJ@FEIK@Batteries?3?5?$CFs?0?5Life?3?5?$CFs?6?$AA@
  • 0000120C — ??_C@_09JCKO@Long?5term?$AA@
  • 00001218 — ??_C@_0L@INDI@Short?5term?$AA@
  • 00001224 — ??_C@_0CE@MDDJ@Disk?5spin?5down?3?5?$CFs?0?5Spare?5?$CFd?5?$CFd?5@
  • 00001248 — ??_C@_0EK@EBOA@Thermal?5control?3?5?$CFs?0?5Throttle?3?5?$CF@
  • 00001294 — ??_C@_05MJBI@Can?8t?$AA@
  • 0000129C — ??_C@_03EGCG@Can?$AA@
  • 000012A0 — ??_C@_0CK@FBCG@?6Hiberfile?3?5?$CFs?0?5Wake?3?5?$CFs?0?5Spare?5@
  • 000012CC — ??_C@_08PHKO@Non?9Full?$AA@
  • 000012D8 — ??_C@_04OOPN@Full?$AA@
  • 000012E0 — ??_C@_04DMJH@?5S?$CFd?$AA@
  • 000012E8 — ??_C@_0O@OFNL@System?5state?3?$AA@
  • 000012F8 — ??_C@_08FHHB@Lid?3?5?$CFs?6?$AA@
  • 00001304 — ??_C@_0BC@CEHF@Sleep?5button?3?5?$CFs?6?$AA@
  • 00001318 — ??_C@_0BC@FHMO@Power?5button?3?5?$CFs?6?$AA@
  • 0000132C — ??_C@_06OAGO@Absent?$AA@
  • 00001334 — ??_C@_07JMEA@Present?$AA@
  • 0000133C — ??_C@_0BG@LGMD@System?5capabilities?3?6?$AA@
  • 00001354 — ??_C@_06GAPH@DC?5?$CFc?6?$AA@
  • 0000135C — ??_C@_06KDNH@AC?5?$CFc?6?$AA@
  • 00001364 — ??_C@_08JDKN@?$CFY?$CI?$CF08X?$CJ?$AA@
  • 00001370 — ??_C@_0P@OAOH@?$CFY?$CINULL?0?5?$CF08X?$CJ?$AA@
  • 00001380 — ??_C@_0N@NLJI@?$CFY?$CI?$CFs?0?5?$CF08X?$CJ?$AA@
  • 00001390 — ??_C@_09HNHP@CONFIGMG?3?$AA@
  • 0000139C — ??_C@_0CA@GKIF@Kernel?3?5?$CF08x?5?$CIVMM?5thread?3?5?$CF04x?$CJ?$AA@
  • 000013BC — ??_C@_0O@LFDP@Thread?5list?3?6?$AA@
  • 000013CC — ??_C@_0BE@FAJO@Queued?5work?5items?3?6?$AA@
  • 000013E0 — ??_C@_0BA@JDDF@Spinlock?3?5?$CF08X?6?$AA@
  • 000013F0 — ??_C@_0BB@KBDN@Semaphore?3?5?$CF08X?6?$AA@
  • 00001404 — ??_C@_0BA@LDH@?5queue?5?$CI?$CF08X?$CJ?3?6?$AA@
  • 00001414 — ??_C@_07BNPK@Delayed?$AA@
  • 0000141C — ??_C@_08NLDB@Critical?$AA@
  • 00001428 — ??_C@_0BN@KKPN@Time?5is?5currently?3?5?$CF08X?$CF08X?6?$AA@
Segment 4: RARE @ 00008550
  • 00000000 — UnExportNTFunctions
  • 0000006C — _HalInitSystem@8
  • 000000A0 — _ObInitSystem@4
  • 00000272 — _MiSectionInitialization@0
Segment 5: W32 @ 00008680
  • 00000000 — _W32_IOManGetVersion
  • 00000006 — _W32_IOManRequestWakeupLatency
  • 0000000B — _W32_IOManGetDevnodeFromFileHandle
  • 00000010 — _W32_IOManCreateFile
  • 00000015 — _W32_IOManClose
  • 0000001A — _W32_IOManWriteFile
  • 0000001F — _W32_IOManReadFile
  • 00000024 — _W32_IOManDeviceIoControl
  • 00000029 — _W32_IOManCancelIoFile
  • 0000002E — _W32_IOManFlushFileBuffers
Segment 6: PNP @ 00009A90
  • 00000000 — _IoGetDeviceProperty@20
  • 000002E6 — _IoSetDeviceProperty@16
  • 000002EE — _IoReportDeviceStatus@8
  • 000002F6 — _IoOpenDeviceRegistryKey@16
  • 00000350 — _NtKernPhysicalDeviceObjectToDevNode
  • 0000035E — _NtKernWin9XLoadDriver
  • 0000037A — _NtKernPreLoadDriver
  • 000003C1 — _NtKernCheckUnPreLoadDriver
  • 000003F0 — @IsVXDName@4
  • 00000418 — @LoadMultipleDrivers@28
  • 000005B1 — _NTKERNPnPNewDevNode@8
  • 00000807 — @Barf@16
  • 000008AE — @GetBusInfo@12
  • 000009D2 — @KillChild@8
  • 00000A33 — @ProcessNewDevNode@16
  • 00000B39 — @NTKERNEnumerate@8
  • 00000D9B — _CheckRemovalRelations
  • 00000E39 — @RemoveWalkTheDOs@4
  • 00000E6A — @RemovePDO@12
  • 00000F14 — @QuickPnPIrp@8
  • 00000F37 — @StartIrp@8
  • 000010F0 — @PowerIrp@20
  • 00001138 — @EjectLock@8
  • 00001175 — @NTKERNFilterDevNode@8
  • 00001309 — _NTKERNConfigHandler
  • 0000151C — _NTKERNEnumHandler
  • 000015CD — _ReadWriteConfig@24
  • 0000161D — @SendIRPToVxD@8
  • 00001679 — @ProcessPnPIRP@16
  • 000018A1 — @InitializePnPStackLocation@12
  • 000018C2 — @GetCapabilities@8
  • 00001983 — _PnPCompletionRoutine@12
  • 00001998 — @SynchronousCallDriver@12
  • 00001A0C — @SendPnPIrp@12
  • 00001AAB — _NTKERNReceiveMessage
  • 00001AEA — @DoThisString@16
  • 00001B44 — @DoTheseIDs@16
  • 00001BC7 — @NTKERNSetupDevNode@8
  • 00001C12 — _CheckDeviceState
  • 00001CD8 — @ConvertWToA@12
  • 00001D31 — @ConvertWToHeapAllocatedA@8
  • 00001DAB — @ConvertRegistryToW@36
  • 00001EE1 — _PnPGetRegistryPathFromDevnode@12
  • 00001F95 — _PnPGetRegistryPath@12
  • 00001FB3 — _PnPGetPhysicalDeviceObject@4
  • 00002006 — _PnPCheckRegistryPreemptable@12
  • 000020EE — @DoMemory@8
  • 00002116 — @DoIO@8
  • 0000213D — @DoDMA@8
  • 0000215C — @DoIRQ@8
  • 000021B3 — @DoPartialResource@12
  • 000021EB — @GetConfiguration@20
  • 00002325 — @GetGroupCount@4
  • 00002353 — @GetGroupBeginEnd@16
  • 000023B8 — @ExtraDataSize@8
  • 000023EB — @AddExtraData@12
  • 0000245D — @AddConvertedBack@12
  • 00002493 — @AllocateBack@20
  • 0000250F — _GetMemorySize
  • 0000252F — _ConvertMemory
  • 000025E3 — _ConvertBackMemory
  • 00002687 — _GetIOSize
  • 000026A4 — _ConvertIO
  • 0000275A — _ConvertBackIO
  • 00002819 — _GetDMASize
  • 00002839 — _ConvertDMA
  • 000028AE — _ConvertBackDMA
  • 0000291B — _GetIRQSize
  • 0000293B — _ConvertIRQ
  • 000029C4 — _ConvertBackIRQ
  • 00002A79 — _GetAnythingSize
  • 00002A9D — _ConvertAnything
  • 00002B58 — _GetNTSize
  • 00002B78 — _ConvertNT
  • 00002BA5 — _ConvertBackGeneric
  • 00002BCE — _ConvertBackConfigData
  • 00002BFA — _ConvertBackOSSpecific
  • 00002C84 — @GetConvertHandler@4
  • 00002CA0 — @GetConvertBackHandler@4
  • 00002CBC — @GetFilteredConfiguration@16
  • 00002EE8 — @SetBasicFilteredConfiguration@12
  • 00002FE3 — @AddResourceRequirements@8
  • 00003039 — _PoRegisterDeviceForIdleDetection@16
  • 00003094 — _PopCompleteRequestIrp@12
  • 000030F5 — _PoRequestPowerIrpWorker
  • 00003233 — _PoRequestPowerCancelRoutine@8
  • 00003259 — _PoRequestPowerIrp@24
  • 00003352 — _PoCallDriver@8
  • 00003383 — _PoStartNextPowerIrp@4
  • 00003386 — @PopCheckBatteryStatus@0
  • 000033B0 — _NTKERNPowerHandler
  • 00003430 — _CCODE__CONFIGMG_Get_Sibling
  • 00003438 — _CCODE__CONFIGMG_Get_Child
  • 00003440 — _CCODE__CONFIGMG_Locate_DevNode
  • 00003448 — _CCODE__CONFIGMG_Get_Bus_Info
  • 00003450 — _CCODE__CONFIGMG_Call_Enumerator_Function
  • 00003458 — _CCODE__RegDeleteKey
  • 00003460 — _CCODE__Assert_Range
  • 00003468 — _CCODE__CONFIGMG_Get_Device_ID
  • 00003470 — _CCODE__CONFIGMG_Get_DevNode_Key
  • 00003478 — _CCODE__CONFIGMG_Load_DLVxDs
  • 00003480 — _CCODE__RegCloseKey
  • 00003488 — _CCODE__RegQueryValueEx
  • 00003490 — _CCODE__RegOpenKey
  • 00003498 — _CCODE__CONFIGMG_Register_Device_Driver
  • 000034A0 — _CCODE__CONFIGMG_Register_Enumerator
  • 000034A8 — _CCODE__CONFIGMG_Change_DevNode_Status
  • 000034B0 — _CCODE__CONFIGMG_Set_Private_DWord
  • 000034B8 — _CCODE__CONFIGMG_Discard_Boot_Log_Conf
  • 000034C0 — _CCODE__CONFIGMG_Read_Registry_Value
  • 000034C8 — _CCODE__CONFIGMG_Set_Device_Driver_Private_DWord
  • 000034D0 — _CCODE__CONFIGMG_Get_Private_DWord
  • 000034D8 — _CCODE__CONFIGMG_Get_DevNode_Status
  • 000034E0 — _CCODE__CONFIGMG_Get_Parent
  • 000034E8 — _CCODE_SHELL_SYSMODAL_Message@16
  • 0000350C — _CCODE_Get_Sys_VM_Handle
  • 00003518 — _CCODE__Sprintf
  • 00003520 — _CCODE__CONFIGMG_Remove_SubTree
  • 00003528 — _CCODE__CONFIGMG_Set_Bus_Info
  • 00003530 — _CCODE__CONFIGMG_Set_DevNode_PowerCapabilities
  • 00003538 — _CCODE__CONFIGMG_Remove_Unmarked_Children
  • 00003540 — _CCODE__CONFIGMG_Create_DevNode
  • 00003548 — _CCODE__CONFIGMG_Reset_Children_Marks
  • 00003550 — _CCODE__CONFIGMG_Set_Dependent_DevNode
  • 00003558 — _CCODE__CONFIGMG_System_Device_Power_State_Mapping
  • 00003560 — _CCODE__CONFIGMG_Reprocess_DevNode
  • 00003568 — _CCODE__CONFIGMG_Free_Log_Conf
  • 00003570 — _CCODE__CONFIGMG_Get_First_Log_Conf
  • 00003578 — _CCODE__CONFIGMG_Set_DevNode_Problem
  • 00003580 — _CCODE__CONFIGMG_Get_DevNode_Handler
  • 00003588 — _CCODE__CONFIGMG_Get_DevNode_PowerCapabilities
  • 00003590 — _CCODE__CONFIGMG_Register_DevLoader
  • 00003598 — _CCODE__CONFIGMG_Write_Registry_Value
  • 000035A0 — _CCODE_Get_Cur_Thread_Handle
  • 000035AC — _CCODE__CONFIGMG_Add_ID
  • 000035B4 — _CCODE__CONFIGMG_Reenumerate_DevNode
  • 000035BC — _CCODE__CONFIGMG_Setup_DevNode
  • 000035C4 — _CCODE__CONFIGMG_Enable_DevNode
  • 000035CC — _CCODE__CONFIGMG_Disable_DevNode
  • 000035D4 — _CCODE__CONFIGMG_Get_Device_ID_Size
  • 000035DC — _CCODE__CONFIGMG_Get_DevNode_Key_Size
  • 000035E4 — _CCODE__CONFIGMG_Get_Device_Driver_Private_DWord
  • 000035EC — _CCODE__CONFIGMG_Get_Next_Res_Des
  • 000035F4 — _CCODE__CONFIGMG_Get_Res_Des_Data_Size
  • 000035FC — _CCODE__HeapFree
  • 00003604 — _CCODE__CONFIGMG_Add_Res_Des
  • 0000360C — _CCODE__HeapAllocate
  • 00003614 — _CCODE__CONFIGMG_Get_Parent_Structure
  • 0000361C — _CCODE__CONFIGMG_Get_Res_Des_Data
  • 00003624 — _CCODE__CONFIGMG_Get_Set_Log_Conf_Priority
  • 0000362C — _CCODE__CONFIGMG_Get_Next_Log_Conf
  • 00003634 — _CCODE__CONFIGMG_Add_Empty_Log_Conf
  • 0000363C — _CCODE__SHELL_Update_User_Activity_Ex
  • 00003644 — _CCODE__CONFIGMG_Register_DevNode_For_Idle_Detection
  • 0000364C — _CCODE_Cancel_Time_Out@4
  • 0000365C — _CCODE__SHELL_CallDll
  • 00003664 — _CCODE_Set_Global_Time_Out@12
  • 00003680 — _CCODE__SHELL_LocalFree
  • 00003688 — _CCODE__SHELL_LocalAllocEx
  • 00003690 — _CCODE__Set_Global_Time_Out_Ex
  • 00003698 — _CCODE__SHELL_CancelAppyTimeEvent
  • 000036A0 — _CCODE__VPOWERD_Set_System_Power_State
  • 000036A8 — _CCODE_VMM_GetSystemInitState
  • 000036B0 — _CCODE__CONFIGMG_Add_Remove_DevNode_Property
  • 000036B8 — _CCODE__CONFIGMG_Set_DevNode_PowerState
  • 000036C0 — _CCODE__Debug_Printf_Service
  • 000036D4 — _CCODE__VPOWERD_Get_Power_Status
  • 000036DC — _CCODE__SHELL_BroadcastSystemMessage
  • 000036E4 — _CCODE__CONFIGMG_Call_At_Appy_Time
Segment 7: _INIT @ 00009AC0
  • 00000000 — _PsInitSystem@4
Segment 8: _PTEXT @ 0000BAA0
  • 00000000 — _BufferPrint@4
  • 00000012 — _LoadVPrintf@0
  • 00000032 — _VisitChildDevnodes@12
  • 0000008B — _VisitAllDevnodes@8
  • 000000B5 — _FindPCISlotCallback@8
  • 0000011E — _FindPCISlotDevNode@8
  • 00000163 — _PCIGetBusDataByOffset@20
  • 000001B4 — NTKERN_PM_API
  • 000001B9 — _FileExists@4
  • 000001D5 — _Win95CreateThread@24
  • 00000221 — _IsBigMem@0
  • 0000023D — _PiSetThreadPriority@8
  • 00000254 — _PiGetThreadPriority@8
  • 0000026D — NTKERN_ShutDown_Ex
  • 0000027D — NTKERN_RebootNotify
  • 00000288 — NTKERN_DeviceIoControl
  • 00000292 — NTKERN_Create_VM
  • 000002C7 — NTKERN_Destroy_VM
  • 000002FC — NTKERN_Init_Complete
  • 00000312 — NTKERN_Create_Thread
  • 00000346 — NTKERN_Terminate_Thread
  • 00000375 — NTKERN_Destroy_Thread
  • 000003AA — _GetPEModuleEntryPoint
  • 000003B0 — _GetProcAddress
  • 000003B6 — _PELDR_InitCompleted
  • 000003BC — _UnloadPEModule
  • 000003CF — _LoadPEModule
  • 000003FF — _Time_Slice_Sleep@4
  • 00000408 — _BCSToUni
  • 0000040E — _UniToBCS
  • 00000414 — _UniToUpper
  • 0000041A — _RegOpenKey
  • 00000420 — _RegCreateKey
  • 00000426 — _RegQueryInfoKey
  • 0000042C — _RegQueryValueEx
  • 00000432 — _RegSetValueEx
  • 00000438 — _RegCloseKey
  • 0000043E — _RegDeleteKey
  • 00000444 — _RegDeleteValue
  • 0000044A — _RegEnumKey
  • 00000450 — _RegEnumValue
  • 00000458 — _pFindDriver@4
  • 00000480 — _FindDriverPath@4
  • 00000537 — _LoadDriver@8
  • 0000065A — _UnloadDriver@4
  • 00000696 — _LoadSysDriver@8
  • 000006E6 — _UnloadSysDriver@4
  • 0000070B — _UnicodeCmp@8
  • 0000075C — _NtKernGetWorkerThread
  • 0000077A — _NtKernGetDynaAreaHandle@4
  • 0000081F — _NtKernWriteDynaDriverKeys@12
  • 00000935 — _NtKernWriteDynaDriverImageKey@8
  • 0000098A — _NtKernParsePathName@16
  • 00000A83 — _NtKernEnsureUnicode@16
  • 00000AC8 — _NtKernCreateDynaRegKey@16
  • 00000B6B — _NtKernOpenDynaRegKey@8
  • 00000BA1 — _NtKernDynaLoadDriver@16
  • 00000E35 — _NtKernDynaUnloadDriver@4
  • 00000E3D — _NtKernGetDriverHandle@12
  • 00000EB0 — _ThreadFindProcess@4
  • 00000ED6 — _CreateProcessStruct@4
  • 00000F50 — _ThreadCreateNotify@4
  • 00001031 — _ProcessDestroyNotify@4
  • 00001053 — _ThreadTerminateNotify@4
  • 00001072 — _ThreadDestroyNotify@4
  • 000010C4 — _ThreadInitialize@4
  • 00001110 — __NtKernCreateFile@44
  • 00001158 — __NtKernCancelIoFile@8
  • 00001185 — __NtKernReadFile@36
  • 000011C7 — __NtKernWriteFile@36
  • 00001209 — __NtKernClose@4
  • 0000122F — __NtKernDeviceIoControl@40
  • 00001274 — __NtKernInternalDeviceIoControl@40
  • 000012B9 — __NtKernQueueWorkItem@8
  • 000012E7 — __NtKernSetPhysicalCacheTypeRange@16
  • 000012EF — __NtKernLoadDriver@4
  • 00001315 — @RD_MSR@4
  • 00001318 — _WR_MSR@12
  • 00001329 — _GetCpuTypeStep@4
  • 00001363 — _GetCpuId
  • 0000136C — __IOManGetVersion@8
  • 000013A9 — __IOManCreateFile@52
  • 000013E6 — __IOManClose@12
  • 00001423 — __IOManWriteFile@44
  • 00001460 — __IOManReadFile@44
  • 0000149D — __IOManDeviceIoControl@48
  • 000014DA — __IOManFlushFileBuffers@16
  • 00001517 — __IOManCancelIoFile@16
  • 00001554 — __IOManGetDevnodeFromFileHandle@16
  • 00001591 — __IOManRequestWakeupLatency@12
  • 000015CE — _Get_Next_Thread_Handle@4
  • 000015DF — _Get_Sys_Thread_Handle@0
  • 000015EA — _Get_Cur_Thread_Handle@0
  • 000015F5 — _AllocateThreadDataSlot@0
  • 000015FB — _VWIN32_GetProcessHandle
  • 00001601 — _Win32ReferenceObjectByHandle
  • 00001607 — _Win32ReferenceObject
  • 0000160D — _Win32DereferenceObject
  • 00001618 — _mR0ObjFree@4
  • 00001626 — _mR0ObjDup@8
  • 0000163E — _MakeWin32Handle
  • 00001671 — _GetNtHandle
  • 0000167F — _CloseWin32Handle
  • 0000168D — _GetPathBase@8
  • 000016E3 — _MapRegistryPath@12
  • 00001796 — _ZwOpenKey@12
  • 0000186D — _ZwEnumerateKey@24
  • 000019BD — _ZwClose@4
  • 00001A0C — _ZwCreateKey@28
  • 00001B1B — _ZwDeleteKey@4
  • 00001B96 — _ZwSetValueKey@24
  • 00001C83 — _ZwpGenerateValueTypeName@8
  • 00001D57 — _ZwpSetValueType@16
  • 00001DE2 — _ZwpGetValueType@12
  • 00001E88 — _ZwQueryValueKey@24
  • 000021A2 — _GetClassName@12
  • 000021E6 — _AToW@12
  • 0000222B — _ZwQueryKey@20
  • 00002438 — _ZwEnumerateValueKey@24
  • 000024DC — _ZwDeleteValueKey@8
  • 00002538 — _GetMessagePtr
  • 0000254B — _ExMapHandleToPointer@12
  • 00002579 — _ExpAllocateHandleTable@8
  • 000025BC — _ExpAllocateHandleTableEntries@16
  • 00002662 — _ExCreateHandle@8
  • 000026B4 — _ExCreateHandleTable@12
  • 0000270A — _ExDestroyHandle@12
  • 00002762 — _ExDestroyHandleTable@8
  • 000027B9 — _NtClearEvent@4
  • 000027F6 — _NtCreateEvent@20
  • 000028F8 — _NtOpenEvent@12
  • 000029B7 — _NtPulseEvent@8
  • 00002A90 — _NtQueryEvent@20
  • 00002BA6 — _NtResetEvent@8
  • 00002C7D — _NtSetEvent@8
  • 00002D56 — @WorkerThreadFunction@8
  • 00002DD0 — _SysDestroyWorkerThread@4
  • 00002E03 — _SysDestroyWorkerThreads@0
  • 00002E64 — _SysCreateWorkerThread@8
  • 00002EDD — _InitializeWorkItemQueue@4
  • 00002F1F — _SysInit@4
  • 00002F37 — _ExCreateCallback@16
  • 00003015 — _ExpDeleteCallback@4
  • 00003018 — _ExpWstrSystemInformation
  • 00003050 — _ExpWstrSystemInformationValue
  • 0000305C — _ExInitializeNPagedLookasideList@28
  • 000030F3 — _ExInitializePagedLookasideList@28
  • 00003197 — _ExRaiseAccessViolation@0
  • 000031A2 — _ExRaiseDatatypeMisalignment@0
  • 000031AD — _HalGetAdapter@8
  • 000035CC — _HalpAllocateGlobalMapBuffer@0
  • 00003614 — _HalAllocateCommonBuffer@16
  • 000036D5 — _HalpGrowMapBuffers@8
  • 00003834 — _HalpAllocateAdapter@12
  • 000039F9 — _RtlAnsiStringToUnicodeString@12
  • 00003AB0 — _RtlUnicodeStringToAnsiString@12
  • 00003B6A — _RtlWriteRegistryValue@24
  • 00003BCE — _RtlInitializeBitMap@12
  • 00003BF1 — _RtlpGetRegistryHandle@16
  • 00003CDD — _RtlpQueryRegistryDirect@16
  • 00003D97 — _RtlpCallQueryRegistryRoutine@20
  • 00003F3A — _RtlQueryRegistryValues@20
  • 000041EB — _RtlInt64ToUnicodeString@16
  • 00004254 — _RtlExtendedLargeIntegerDivide@16
  • 00004296 — _RtlExtendedIntegerMultiply@12
  • 000042F2 — _RtlExtendedMagicDivide@20
  • 00004380 — _RtlStringFromGUID@8
  • 00004402 — _RtlGUIDFromString@8
  • 000045C0 — _IoAllocateDriverObjectExtension@16
  • 000045E6 — _IoAssociationInitialize@0
  • 0000460B — _IoConnectInterrupt@44
  • 00004740 — _IoDisconnectInterrupt@4
  • 0000476B — _NtCreateFile@44
  • 0000479D — _NtDeviceIoControlFile@40
  • 000047C9 — _NtInternalDeviceIoControlFile@40
  • 000047F5 — _IopCreateDriver@12
  • 0000494D — _IopGetServiceNameFromDriverName@8
  • 000049E8 — _IoCreateDriver@8
  • 00004A84 — _IoCreateDriverObject@8
  • 00004AD0 — _IopBuildDefaultSysDriverPath@12
  • 00004BCD — _IopGetTag@12
  • 00004C6B — _IopAddDriverToDriverList@20
  • 00004E75 — _IopFindDrivers@12
  • 00004F41 — _IopFreeDriverList@4
  • 00004F9C — _IopGetDriverList@4
  • 000050CB — _CmpDoSort@8
  • 00005165 — _CmpResolveDriverDependencies@4
  • 000051A8 — _CmpOrderGroup@8
  • 0000520A — _IopUserCompletion@20
  • 0000522B — _IopUserRundown@4
  • 0000524C — _IopAbortRequest@4
  • 0000528E — _IopXxxControlFile@44
  • 00005810 — _IopSynchronousApiServiceTail@24
  • 000058D0 — _IopSynchronousServiceTail@28
  • 000059E1 — _IopAcquireFileObjectLock@16
  • 00005A7E — _IopAllocateIrpCleanup@8
  • 00005AC8 — _IopCancelAlertedRequest@8
  • 00005ACB — _IoGetConfigurationInformation@0
  • 00005ADF — _IoCreateDevice@28
  • 00005B8D — _IopCreateDevice@28
  • 00005D48 — _IoDeleteSymbolicLink@4
  • 00005DB2 — _IoCreateFile@56
  • 00005F2B — _IoGetDeviceObjectPointer@16
  • 00005FB7 — _IoCancelThreadIo@4
  • 00006043 — _IoAttachDevice@12
  • 000060E5 — _IoSetShareAccess@16
  • 00006195 — _IopOpenRegistryKey@20
  • 000061FC — _IopGetRegistryValue@12
  • 000062B0 — _IopGetRegistryKeyInformation@8
  • 0000632F — _IoRegisterShutdownNotification@4
  • 0000637C — _IoInitializeTimer@12
  • 000063F1 — _IoBuildDeviceIoControlRequest@36
  • 00006586 — _IoShutdownSystem@8
  • 00006629 — _IopCreateClassKey@12
  • 000066CE — _IopBuildFullDeviceObjectName@8
  • 00006727 — _IopSplitSymbolicLink@16
  • 000067E6 — _IopReplacePathSeperatorWithPound@4
  • 00006825 — _IopOpenClassAssociationRegistryEntry@20
  • 000069D1 — _IopGetDevnodeHandle@8
  • 00006A57 — _IopGetDevnodeSerial@8
  • 00006B04 — _IopBuildAssociationLinkName@20
  • 00006BAB — _IopGetRegistryValueDword@12
  • 00006C08 — _IopGetLinkedState@4
  • 00006C68 — _IopSetLinkedState@8
  • 00006CCB — _IopDecrementSymbolicLinkReference@8
  • 00006D31 — _IopIncrementSymbolicLinkReference@8
  • 00006E0C — _IoGetDeviceInterfaces@16
  • 00007051 — _IopEnumKeyHandle@12
  • 00007101 — _IopEnumKeyHandles@12
  • 000071E7 — _IopEnumKeyHandlesNestWorker@12
  • 0000728D — _IopEnumKeyHandlesNest@16
  • 000072E5 — _IopClearDeviceClassAssociationLinks@0
  • 000073F9 — _IoOpenDeviceInterfaceRegistryKey@12
  • 00007456 — _IoRegisterDeviceInterfaceByDevnode@16
  • 0000756B — _IoRegisterDeviceInterface@16
  • 00007598 — _IopGetNextLocalUniqueId@4
  • 0000768C — _IopFindTheGuid@8
  • 000076F5 — _IoUnregisterDeviceInterface@4
  • 00007745 — _IoGetDeviceInterfaceAlias@12
  • 00007801 — _IoSetDeviceInterfaceState@8
  • 000078F9 — _IopRemoveReferenceString@8
  • 00007950 — _IoGetDmaAdapter@12
  • 00007A2C — _IoIsWdmVersionAvailable@8
  • 00007A52 — _IopLoadUnloadDriver@4
  • 00007AA4 — _IopLoadDriver@4
  • 00007F5D — _IopGetDriverNameFromKeyNode@8
  • 000080F6 — _IopMapAndLoadDriver@4
  • 0000820A — _IopLoadByName@12
  • 0000843D — _IopReadyDeviceObjects@4
  • 00008465 — _IopCloseFile@20
  • 000085A2 — _IopDeleteDevice@4
  • 000085C6 — _IopDeleteDriver@4
  • 0000860D — _IopParseFile@40
  • 0000866C — _IopParseDevice@40
  • 00008C2D — _NtQueryInformationFile@20
  • 00009093 — _NtReadFile@36
  • 00009431 — _ZwReadFile@36
  • 0000946D — _RegStrInit@0
  • 00009712 — _IoInitializeRemoveLockEx@20
  • 00009798 — _NtWriteFile@36
  • 00009BC9 — _ZwWriteFile@36
  • 00009C05 — _NtOpenFile@24
  • 00009C3C — _IopErrorLogThread@4
  • 00009EF1 — _IopErrorLogQueueRequest@0
  • 00009F47 — _NtCancelIoFile@8
  • 0000A0D4 — _NtFlushBuffersFile@8
  • 0000A2C2 — _IopProcessWorkItem@4
  • 0000A2ED — _ObpAllocateObject@20
  • 0000A420 — _ObCreateObject@36
  • 0000A4A1 — _ObpCaptureObjectCreateInformation@16
  • 0000A51B — _ObpCaptureObjectName@8
  • 0000A591 — @ObpFreeObject@4
  • 0000A626 — _ObMakeTemporaryObject@4
  • 0000A64A — _NtMakeTemporaryObject@4
  • 0000A691 — _NtCreateDirectoryObject@12
  • 0000A6EB — _ObpLookupDirectoryEntry@12
  • 0000A7F3 — _ObpLookupObjectName@40
  • 0000AC36 — _ObpCreateUnnamedHandle@28
  • 0000AD1B — _ObpCreateHandle@40
  • 0000AE33 — _ObInsertObject@24
  • 0000AFF9 — _NtCreateSymbolicLinkObject@16
  • 0000B0BB — _NtOpenSymbolicLinkObject@12
  • 0000B0E4 — _ObpParseSymbolicLink@40
  • 0000B1D1 — _ObpDuplicateHandle@4
  • 0000B276 — _ObReferenceObjectByName@32
  • 0000B2F2 — _ObpRemoveObjectRoutine@4
  • 0000B359 — _ObpDeleteNameCheck@8
  • 0000B451 — _ObOpenObjectByName@28
  • 0000B5A8 — _ObCreateObjectType@12
  • 0000B7CF — _SeCreateAccessState@12
  • 0000B824 — _SeDeleteAccessState@4
  • 0000B858 — _NtOpenSection@12
  • 0000B895 — _NtMapViewOfSection@40
  • 0000BA23 — _MmMapViewOfSection@40
  • 0000BA97 — _MiFindLinearBlock@8
  • 0000BACA — _MiReserveLinearBlock@12
  • 0000BB5C — _MiFreeLinearRegion@12
  • 0000BC0F — _MiFindMapping@8
  • 0000BC4B — _MiReserveLinearRegion@12
  • 0000BD7A — _NtUnmapViewOfSection@8
  • 0000BD9D — _MmUnmapViewOfSection@8
  • 0000BE07 — _PsCreateSystemThread@28
  • 0000BEE2 — _PsTerminateSystemThread@4
  • 0000BF14 — _KeSetPriorityThread@8
Segment 9: _PDATA @ 0000E010
  • 00002F3C — _WinDir
  • 00002F54 — ??_C@_0L@LLAF@DeviceDesc?$AA@
  • 00002F60 — ??_C@_0N@IOME@FriendlyName?$AA@
  • 00002F70 — ??_C@_09CDHI@ClassGUID?$AA@
  • 00002F7C — ??_C@_05LCAF@Class?$AA@
  • 00002F84 — ??_C@_06LCIG@Driver?$AA@
  • 00002F8C — ??_C@_08KDKK@Location?$AA@
  • 00002F98 — ??_C@_03KFJO@Mfg?$AA@
  • 00002F9C — ??_C@_0O@KIHO@CompatibleIDs?$AA@
  • 00002FAC — ??_C@_0L@LPIN@HardwareID?$AA@
  • 00002FBC — ??_C@_0N@IMGC@UpperFilters?$AA@
  • 00002FCC — ??_C@_0L@MNFF@NTMPDriver?$AA@
  • 00002FD8 — ??_C@_0N@JGBG@LowerFilters?$AA@
  • 00002FE8 — _NtPnPDriverObject
  • 00002FEC — ??_C@_0PG@KFIC@Please?5make?5a?5bug?5to?5the?5owner?5o@
  • 000030E4 — ??_C@_0CF@CDAH@Enumerator?5rightfully?5challenged@
  • 0000310C — ??_C@_0CE@HACN@?$CIcould?5not?5get?5the?5enumerator?5na@
  • 00003130 — _fPnPReady
  • 00003134 — ??_C@_0N@KIHN@Capabilities?$AA@
  • 00003144 — ??_C@_0M@NHFE@Preemptable?$AA@
  • 00003158 — _Converts
  • 000031A0 — _ConvertBacks
  • 000031F8 — _IopCacheHitIncrement
  • 000031FC — _CmAutoGenName
  • 00003204 — _CmpAutoGenString
  • 00003208 — _CmRegistryMachineHardwareDescriptionSystemName
  • 00003210 — _CmpRegistryMachineHardwareDescriptionSystemString
  • 00003214 — _CmRegistryMachineSystemCCSControlNTKernName
  • 0000321C — _CmpRegistryMachineSystemCCSControlNTKernString
  • 00003220 — _CmRegistryMachineName
  • 00003228 — _CmpRegistryMachineString
  • 0000322C — _CmRegistryUserName
  • 00003234 — _CmpRegistryUserString
  • 00003238 — _CmRegistryEnumName
  • 00003240 — _CmpRegistryEnumString
  • 00003244 — _CmNextLUIDName
  • 0000324C — _CmpNextLUIDString
  • 00003250 — _CmDosDevicesName
  • 00003258 — _CmpDosDevicesString
  • 0000325C — _CmDeviceParametersName
  • 00003264 — _CmpDeviceParametersString
  • 00003268 — _CmDeviceName
  • 00003270 — _CmpDeviceString
  • 00003274 — _CmDeviceInstanceName
  • 0000327C — _CmpDeviceInstanceString
  • 00003280 — _CmDotName
  • 00003288 — _CmpDotString
  • 0000328C — _CmPoundName
  • 00003294 — _CmpPoundString
  • 00003298 — _CmNullName
  • 000032A0 — _CmpNullString
  • 000032A4 — _CmRefCountName
  • 000032AC — _CmpRefCountString
  • 000032B0 — _CmSymbolicLinkName
  • 000032B8 — _CmpSymbolicLinkString
  • 000032BC — _CmSerialNumberName
  • 000032C4 — _CmpSerialNumberString
  • 000032C8 — _CmRegistryMachineSystemCurrentControlSetName
  • 000032D0 — _CmpRegistryMachineSystemCurrentControlSetString
  • 000032D4 — _CmRegistryMachineSystemCurrentControlSetServicesName
  • 000032DC — _CmpRegistryMachineSystemCurrentControlSetServicesString
  • 000032E0 — _CmDeviceClassKeyName
  • 000032E8 — _CmpDeviceClassKeyString
  • 000032EC — _CmSystemRootName
  • 000032F4 — _CmpSystemRootString
  • 000032F8 — _CmCurrentControlSetName
  • 00003300 — _CmpCurrentControlSetString
  • 00003304 — _CmControlName
  • 0000330C — _CmpControlString
  • 00003310 — _CmServicesName
  • 00003318 — _CmpServicesString
  • 0000331C — _CmGroupName
  • 00003324 — _CmpGroupString
  • 00003328 — _CmSystemRootSystem32driversName
  • 00003330 — _CmpSystemRootSystem32driversString
  • 00003334 — _CmControlGroupOrderListName
  • 0000333C — _CmpControlGroupOrderListString
  • 00003340 — _CmImagePathName
  • 00003348 — _CmpImagePathString
  • 0000334C — _CmSysName
  • 00003354 — _CmpSysString
  • 00003358 — _CmStartName
  • 00003360 — _CmpStartString
  • 00003364 — _CmSystemName
  • 0000336C — _CmpSystemString
  • 00003370 — _CmTagName
  • 00003378 — _CmpTagString
  • 0000337C — _CmListName
  • 00003384 — _CmpListString
  • 00003388 — _CmControlServiceGroupOrderName
  • 00003390 — _CmpControlServiceGroupOrderString
  • 00003394 — _Cm_T_Name
  • 0000339C — _Cmp_T_String
  • 000033A0 — _Cm_TypeName
  • 000033A8 — _Cmp_TypeString
  • 000033AC — _CmDriverName
  • 000033B4 — _CmpDriverString
  • 000033B8 — _CmFileSystemName
  • 000033C0 — _CmpFileSystemString
  • 000033C4 — _CmBackSlashName
  • 000033CC — _CmpBackSlashString
  • 000033D0 — _CmLinkedName
  • 000033D8 — _CmpLinkedString
  • 000033DC — _CmTypeName
  • 00003514 — _CmTypeString
  • 000035B0 — ??_C@_1BE@CDCI@?$AAU?$AAn?$AAd?$AAe?$AAf?$AAi?$AAn?$AAe?$AAd?$AA?$AA@
  • 000035C4 — ??_C@_1BK@ENIN@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAM?$AAe?$AAm?$AAo?$AAr?$AAy?$AA?$AA@
  • 000035E0 — ??_C@_1CE@LANH@?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00003604 — ??_C@_1BO@CJIF@?$AAL?$AAi?$AAn?$AAe?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00003624 — ??_C@_1CA@IGFK@?$AAO?$AAt?$AAh?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00003644 — ??_C@_1CG@MDFM@?$AAT?$AAe?$AAr?$AAm?$AAi?$AAn?$AAa?$AAl?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 0000366C — ??_C@_1CG@IEKA@?$AAK?$AAe?$AAy?$AAb?$AAo?$AAa?$AAr?$AAd?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00003694 — ??_C@_1CE@HDEI@?$AAP?$AAo?$AAi?$AAn?$AAt?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 000036B8 — ??_C@_1CE@BACN@?$AAP?$AAr?$AAi?$AAn?$AAt?$AAe?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 000036DC — ??_C@_1CE@FABA@?$AAM?$AAo?$AAn?$AAi?$AAt?$AAo?$AAr?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00003700 — ??_C@_1CA@NODE@?$AAM?$AAo?$AAd?$AAe?$AAm?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00003720 — ??_C@_1BO@CGFI@?$AAT?$AAa?$AAp?$AAe?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 00003740 — ??_C@_1CK@JLDJ@?$AAF?$AAl?$AAo?$AAp?$AAp?$AAy?$AAD?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl@
  • 0000376C — ??_C@_1BO@PJEO@?$AAD?$AAi?$AAs?$AAk?$AAP?$AAe?$AAr?$AAi?$AAp?$AAh?$AAe?$AAr?$AAa?$AAl?$AA?$AA@
  • 0000378C — ??_C@_1CA@LKFM@?$AAO?$AAt?$AAh?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 000037AC — ??_C@_1CA@PEGP@?$AAA?$AAu?$AAd?$AAi?$AAo?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 000037CC — ??_C@_1CG@LIKG@?$AAK?$AAe?$AAy?$AAb?$AAo?$AAa?$AAr?$AAd?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 000037F4 — ??_C@_1CE@EPEO@?$AAP?$AAo?$AAi?$AAn?$AAt?$AAe?$AAr?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 00003818 — ??_C@_1CG@PGOM@?$AAP?$AAa?$AAr?$AAa?$AAl?$AAl?$AAe?$AAl?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 00003840 — ??_C@_1CE@DMFN@?$AAD?$AAi?$AAs?$AAp?$AAl?$AAa?$AAy?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 00003864 — ??_C@_1CE@IMNB@?$AAN?$AAe?$AAt?$AAw?$AAo?$AAr?$AAk?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 00003888 — ??_C@_1CC@IGHG@?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 000038AC — ??_C@_1BO@LLNG@?$AAW?$AAo?$AAr?$AAm?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 000038CC — ??_C@_1CA@BIAE@?$AAC?$AAd?$AAR?$AAo?$AAm?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 000038EC — ??_C@_1BO@BKFO@?$AAT?$AAa?$AAp?$AAe?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 0000390C — ??_C@_1BO@MFEI@?$AAD?$AAi?$AAs?$AAk?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAl?$AAe?$AAr?$AA?$AA@
  • 0000392C — ??_C@_1CK@HHAK@?$AAM?$AAu?$AAl?$AAt?$AAi?$AAf?$AAu?$AAn?$AAc?$AAt?$AAi?$AAo?$AAn?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr@
  • 00003958 — ??_C@_1BG@CDDF@?$AAD?$AAt?$AAi?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
  • 00003970 — ??_C@_1BI@MPIK@?$AAS?$AAc?$AAs?$AAi?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
  • 00003988 — ??_C@_1BE@PJDG@?$AAT?$AAc?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
  • 0000399C — ??_C@_1BI@LJGK@?$AAE?$AAi?$AAs?$AAa?$AAA?$AAd?$AAa?$AAp?$AAt?$AAe?$AAr?$AA?$AA@
  • 000039B4 — ??_C@_1BO@ECJF@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
  • 000039D4 — ??_C@_1CA@EAGJ@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAD?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
  • 000039F4 — ??_C@_1CA@NPNM@?$AAS?$AAe?$AAc?$AAo?$AAn?$AAd?$AAa?$AAr?$AAy?$AAI?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
  • 00003A14 — ??_C@_1BM@ENFA@?$AAP?$AAr?$AAi?$AAm?$AAa?$AAr?$AAy?$AAD?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
  • 00003A30 — ??_C@_1BM@NCOF@?$AAP?$AAr?$AAi?$AAm?$AAa?$AAr?$AAy?$AAI?$AAC?$AAa?$AAc?$AAh?$AAe?$AA?$AA@
  • 00003A4C — ??_C@_1CO@LFBC@?$AAF?$AAl?$AAo?$AAa?$AAt?$AAi?$AAn?$AAg?$AAP?$AAo?$AAi?$AAn?$AAt?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs@
  • 00003A7C — ??_C@_1CC@MFFM@?$AAC?$AAe?$AAn?$AAt?$AAr?$AAa?$AAl?$AAP?$AAr?$AAo?$AAc?$AAe?$AAs?$AAs?$AAo?$AAr?$AA?$AA@
  • 00003AA0 — ??_C@_1O@EPAA@?$AAL?$AAi?$AAn?$AAk?$AAe?$AAd?$AA?$AA@
  • 00003AB0 — ??_C@_1BK@MPEO@?$AA?2?$AAF?$AAi?$AAl?$AAe?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?2?$AA?$AA@
  • 00003ACC — ??_C@_1BC@LFKG@?$AA?2?$AAD?$AAr?$AAi?$AAv?$AAe?$AAr?$AA?2?$AA?$AA@
  • 00003AE0 — ??_C@_1M@GDFC@?$AA_?$AAT?$AAy?$AAp?$AAe?$AA?$AA@
  • 00003AEC — ??_C@_17PAPH@?$AA_?$AAT?$AA_?$AA?$AA@
  • 00003AF4 — ??_C@_1DE@NFDK@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAG?$AAr?$AAo?$AAu?$AAp@
  • 00003B28 — ??_C@_19OFAF@?$AAL?$AAi?$AAs?$AAt?$AA?$AA@
  • 00003B34 — ??_C@_17CCKB@?$AAT?$AAa?$AAg?$AA?$AA@
  • 00003B3C — ??_C@_1O@KHFL@?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA?$AA@
  • 00003B4C — ??_C@_17FDLC@?$AAs?$AAy?$AAs?$AA?$AA@
  • 00003B54 — ??_C@_1CO@ECIK@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?2?$AAG?$AAr?$AAo?$AAu?$AAp?$AAO?$AAr?$AAd?$AAe?$AAr?$AAL?$AAi@
  • 00003B84 — ??_C@_1DK@LJHF@?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAR?$AAo?$AAo?$AAt?$AA?2?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AA3?$AA2@
  • 00003BC0 — ??_C@_1M@EONE@?$AAG?$AAr?$AAo?$AAu?$AAp?$AA?$AA@
  • 00003BCC — ??_C@_1BC@LHCC@?$AAS?$AAe?$AAr?$AAv?$AAi?$AAc?$AAe?$AAs?$AA?$AA@
  • 00003BE0 — ??_C@_1BA@DLLE@?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AA?$AA@
  • 00003BF0 — ??_C@_1CE@KEEI@?$AAC?$AAu?$AAr?$AAr?$AAe?$AAn?$AAt?$AAC?$AAo?$AAn?$AAt?$AAr?$AAo?$AAl?$AAS?$AAe?$AAt?$AA?$AA@
  • 00003C14 — ??_C@_1IC@KIJF@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
  • 00003C98 — ??_C@_1GI@EMLC@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
  • 00003D00 — ??_C@_1FG@PFNI@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
  • 00003D58 — ??_C@_1O@OIBJ@?$AAS?$AAe?$AAr?$AAi?$AAa?$AAl?$AA?$AA@
  • 00003D68 — ??_C@_1BK@LJFM@?$AAS?$AAy?$AAm?$AAb?$AAo?$AAl?$AAi?$AAc?$AAL?$AAi?$AAn?$AAk?$AA?$AA@
  • 00003D84 — ??_C@_1BC@HFGN@?$AAR?$AAe?$AAf?$AAC?$AAo?$AAu?$AAn?$AAt?$AA?$AA@
  • 00003D98 — ??_C@_13LEOO@?$AA?$CD?$AA?$AA@
  • 00003D9C — ??_C@_1BO@IGPD@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AAI?$AAn?$AAs?$AAt?$AAa?$AAn?$AAc?$AAe?$AA?$AA@
  • 00003DBC — ??_C@_1CE@KEEA@?$AAD?$AAe?$AAv?$AAi?$AAc?$AAe?$AA?5?$AAP?$AAa?$AAr?$AAa?$AAm?$AAe?$AAt?$AAe?$AAr?$AAs?$AA?$AA@
  • 00003DE0 — ??_C@_1BC@IKAI@?$AAN?$AAe?$AAx?$AAt?$AAL?$AAU?$AAI?$AAD?$AA?$AA@
  • 00003DF4 — ??_C@_1DA@PCOE@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAE?$AAn@
  • 00003E24 — ??_C@_1BO@NKEJ@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAU?$AAs?$AAe?$AAr?$AA?$AA@
  • 00003E44 — ??_C@_1CE@LJDG@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?$AA@
  • 00003E68 — ??_C@_1HE@BCIG@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAS?$AAy@
  • 00003EDC — ??_C@_1FM@MLDO@?$AA?2?$AAR?$AAE?$AAG?$AAI?$AAS?$AAT?$AAR?$AAY?$AA?2?$AAM?$AAa?$AAc?$AAh?$AAi?$AAn?$AAe?$AA?2?$AAH?$AAA@
  • 00003F38 — ??_C@_1BA@JCHI@?$AAA?$AAu?$AAt?$AAo?$AAG?$AAe?$AAn?$AA?$AA@
Segment 10: _ITEXT @ 00000000
  • 00000000 — ExportNTFunctions
  • 000000DE — NTKERN_Device_Init
  • 000001A4 — _InitializeSystemPhase@4
  • 000001FB — _InitializeSystem@0
  • 00000234 — IO32_Device_Init
  • 00000248 — _PnPInit
  • 00000340 — _InitPowerHandler
  • 0000035C — _ExpResourceInitialization@0
  • 00000389 — _ExpEventInitialization@0
  • 00000400 — _ExInitSystem@4
  • 0000041F — _ExpInitSystemPhase0@0
  • 00000463 — _ExpInitSystemPhase1@0
  • 00000480 — _SysCreateWorkerThreads@4
  • 0000052D — _ExpInitializeCallbacks@0
  • 00000650 — _ExpWstrCallback
  • 00000664 — _ExpInitializeCallback
  • 00000684 — ??_C@_1EC@FFPO@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAu?$AAs?$AAp?$AAe?$AAn?$AAd?$AAH?$AAi?$AAb@
  • 000006C8 — ??_C@_1DO@MHEK@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAI@
  • 00000708 — ??_C@_1DA@KHMA@?$AA?2?$AAC?$AAa?$AAl?$AAl?$AAb?$AAa?$AAc?$AAk?$AA?2?$AAS?$AAe?$AAt?$AAS?$AAy?$AAs?$AAt?$AAe?$AAm?$AAT@
  • 00000738 — _IoInitSystem@4
  • 0000099C — _IopLoadPhaseDrivers@4
  • 000009D2 — _IopLoadRegistryDrivers@4
  • 00000AA8 — _ICODE__SHELL_HookSystemBroadcast
  • 00000AB0 — _ICODE__VPOWERD_Register_Power_Handler