============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 47 37 E6 5F 35 1B E6 5F 3F 1E E6 5F AE 16 E6 5F 8C 47 E6 5F A1 47 E6 5F 01 01 01 01 01 01 00 00 G7µ_5←µ_?▲µ_«▬µ_îGµ_íGµ_☺☺☺☺☺☺.. 00000020 43 00 53 00 52 00 53 00 53 00 21 00 00 00 00 00 54 00 4D 00 50 00 00 00 49 00 4E 00 49 00 54 00 C.S.R.S.S.!.....T.M.P...I.N.I.T. 00000040 00 00 43 00 41 00 50 00 54 00 55 00 52 00 45 00 00 00 50 00 52 00 4F 00 43 00 45 00 53 00 53 00 ..C.A.P.T.U.R.E...P.R.O.C.E.S.S. 00000060 00 00 00 00 57 69 6E 64 6F 77 73 00 53 65 72 76 65 72 44 4C 4C 00 00 00 43 53 52 53 53 00 00 00 ....Windows.ServerDLL...CSRSS... 00000080 53 68 61 72 65 64 53 65 63 74 69 6F 6E 00 00 00 4F 6E 00 00 50 72 6F 66 69 6C 65 43 6F 6E 74 72 SharedSection...On..ProfileContr 000000A0 6F 6C 00 00 52 65 71 75 65 73 74 54 68 72 65 61 64 73 00 00 4D 61 78 52 65 71 75 65 73 74 54 68 ol..RequestThreads..MaxRequestTh 000000C0 72 65 61 64 73 00 00 00 53 75 62 53 79 73 74 65 6D 54 79 70 65 00 00 00 4F 62 6A 65 63 74 44 69 reads...SubSystemType...ObjectDi 000000E0 72 65 63 74 6F 72 79 00 43 53 52 53 53 3A 20 73 65 74 20 70 72 6F 63 65 73 73 20 44 41 43 4C 20 rectory.CSRSS: set process DACL 00000100 66 61 69 6C 65 64 20 2D 20 73 74 61 74 75 73 20 3D 20 25 6C 78 0A 00 00 43 53 52 53 53 3A 20 73 failed - status = %lx◙..CSRSS: s 00000120 65 74 20 44 41 43 4C 20 66 61 69 6C 65 64 20 2D 20 73 74 61 74 75 73 20 3D 20 25 6C 78 0A 00 00 et DACL failed - status = %lx◙.. 00000140 43 53 52 53 53 3A 20 41 43 45 20 63 72 65 61 74 69 6F 6E 20 66 61 69 6C 65 64 20 2D 20 73 74 61 CSRSS: ACE creation failed - sta 00000160 74 75 73 20 3D 20 25 6C 78 0A 00 00 43 53 52 53 53 3A 20 53 44 20 63 72 65 61 74 69 6F 6E 20 66 tus = %lx◙..CSRSS: SD creation f 00000180 61 69 6C 65 64 20 2D 20 73 74 61 74 75 73 20 3D 20 25 6C 78 0A 00 00 00 57 00 69 00 6E 00 64 00 ailed - status = %lx◙...W.i.n.d. 000001A0 6F 00 77 00 73 00 20 00 53 00 75 00 62 00 53 00 79 00 73 00 74 00 65 00 6D 00 00 00 53 65 72 76 o.w.s. .S.u.b.S.y.s.t.e.m...Serv 000001C0 65 72 44 6C 6C 49 6E 69 74 69 61 6C 69 7A 61 74 69 6F 6E 00 44 00 65 00 66 00 61 00 75 00 6C 00 erDllInitialization.D.e.f.a.u.l. 000001E0 74 00 20 00 4C 00 6F 00 61 00 64 00 20 00 50 00 61 00 74 00 68 00 00 00 43 00 53 00 52 00 53 00 t. .L.o.a.d. .P.a.t.h...C.S.R.S. 00000200 48 00 52 00 21 00 00 00 21 00 43 00 53 00 52 00 53 00 48 00 52 00 00 00 49 00 4E 00 49 00 54 00 H.R.!...!.C.S.R.S.H.R...I.N.I.T. 00000220 00 00 00 00 00 00 00 00 43 53 52 53 53 3A 20 43 72 65 61 74 65 20 46 61 69 6C 65 64 20 25 78 0A ........CSRSS: Create Failed %x◙ 00000240 00 00 00 00 43 53 52 53 53 3A 20 43 61 6E 74 48 61 70 70 65 6E 20 54 65 62 20 25 78 2E 2E 2E 20 ....CSRSS: CantHappen Teb %x... 00000260 53 70 69 6E 6E 69 6E 67 0A 00 00 00 43 6C 69 65 6E 74 54 68 72 65 61 64 43 6F 6E 6E 65 63 74 00 Spinning◙...ClientThreadConnect. 00000280 75 73 65 72 33 32 00 00 53 00 62 00 41 00 70 00 69 00 50 00 6F 00 72 00 74 00 00 00 5C 00 00 00 user32..S.b.A.p.i.P.o.r.t...\... 000002A0 0D 2A E6 5F B4 2B E6 5F C4 2B E6 5F 00 00 00 00 00 00 00 00 00 01 00 00 41 00 70 00 69 00 50 00 ♪*µ_┤+µ_─+µ_.........☺..A.p.i.P. 000002C0 6F 00 72 00 74 00 00 00 5C 00 00 00 00 00 00 00 05 00 00 00 00 00 00 00 0C 00 00 00 02 00 00 00 o.r.t...\.......♣.......♀...☻... 000002E0 01 00 00 00 00 00 00 00 5C 00 53 00 6D 00 41 00 70 00 69 00 50 00 6F 00 72 00 74 00 00 00 00 00 ☺.......\.S.m.A.p.i.P.o.r.t..... 00000300 53 6D 43 6F 6D 70 6C 65 74 65 53 65 73 73 69 6F 6E 3A 20 4E 74 52 65 71 75 65 73 74 57 61 69 74 SmCompleteSession: NtRequestWait 00000320 52 65 70 6C 79 20 46 61 69 6C 65 64 20 25 6C 78 0A 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Reply Failed %lx◙............... 00000340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000003A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000003C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000003E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................