/ Personal Computer World 2009 March / PCWMAR09.iso / Software / Resources / Optimisation & Diagnostics / Process Monitor 2.03 / Procmon.exe / BINRES / RCDRIVERNT / INIT

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 8b ff 55 | 8b ec a1 6c 72 01 00 85 |.......U|...lr...|
|00000010| c0 b9 4e e6 40 bb 74 04 | 3b c1 75 1e 8b 15 7c 66 |..N.@.t.|;.u...|f|
|00000020| 01 00 b8 6c 72 01 00 c1 | e8 08 33 02 a3 6c 72 01 |...lr...|..3..lr.|
|00000030| 00 75 07 8b c1 a3 6c 72 | 01 00 f7 d0 a3 70 72 01 |.u....lr|.....pr.|
|00000040| 00 5d e9 49 78 ff ff cc | 88 8d 00 00 00 00 00 00 |.].Ix...|........|
|00000050| 00 00 00 00 58 97 00 00 | 70 65 00 00 6c 8d 00 00 |....X...|pe..l...|
|00000060| 00 00 00 00 00 00 00 00 | ea 97 00 00 54 65 00 00 |........|....Te..|
|00000070| 18 8d 00 00 00 00 00 00 | 00 00 00 00 d2 99 00 00 |........|........|
|00000080| 00 65 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |.e......|........|
|00000090| 00 00 00 00 00 00 00 00 | a4 99 00 00 80 99 00 00 |........|........|
|000000a0| 62 99 00 00 46 99 00 00 | 32 99 00 00 16 99 00 00 |b...F...|2.......|
|000000b0| 00 99 00 00 ea 98 00 00 | d4 98 00 00 bc 98 00 00 |........|........|
|000000c0| aa 98 00 00 98 98 00 00 | 86 98 00 00 6a 98 00 00 |........|....j...|
|000000d0| 56 98 00 00 2e 98 00 00 | 0e 98 00 00 fe 97 00 00 |V.......|........|
|000000e0| f2 97 00 00 b8 99 00 00 | 00 00 00 00 c2 97 00 00 |........|........|
|000000f0| ae 97 00 00 98 97 00 00 | 82 97 00 00 66 97 00 00 |........|....f...|
|00000100| d6 97 00 00 00 00 00 00 | 94 91 00 00 ac 91 00 00 |........|........|
|00000110| c6 91 00 00 dc 91 00 00 | fc 91 00 00 12 92 00 00 |........|........|
|00000120| 32 92 00 00 3c 92 00 00 | 58 92 00 00 72 92 00 00 |2...<...|X...r...|
|00000130| 7c 92 00 00 94 92 00 00 | a6 92 00 00 b0 92 00 00 ||.......|........|
|00000140| cc 92 00 00 d6 92 00 00 | e6 92 00 00 fc 92 00 00 |........|........|
|00000150| 14 93 00 00 2c 93 00 00 | 40 93 00 00 52 93 00 00 |....,...|@...R...|
|00000160| 70 93 00 00 92 93 00 00 | b4 93 00 00 d0 93 00 00 |p.......|........|
|00000170| e8 93 00 00 f2 93 00 00 | 12 94 00 00 34 94 00 00 |........|....4...|
|00000180| 48 94 00 00 5c 94 00 00 | 76 94 00 00 86 94 00 00 |H...\...|v.......|
|00000190| 7c 91 00 00 aa 94 00 00 | bc 94 00 00 d6 94 00 00 ||.......|........|
|000001a0| ea 94 00 00 08 95 00 00 | 2c 95 00 00 42 95 00 00 |........|,...B...|
|000001b0| 5e 95 00 00 6c 95 00 00 | 7e 95 00 00 9a 95 00 00 |^...l...|~.......|
|000001c0| a8 95 00 00 b4 95 00 00 | c2 95 00 00 d0 95 00 00 |........|........|
|000001d0| e4 95 00 00 f2 95 00 00 | 04 96 00 00 1a 96 00 00 |........|........|
|000001e0| 2c 96 00 00 3c 96 00 00 | 4a 96 00 00 56 96 00 00 |,...<...|J...V...|
|000001f0| 78 96 00 00 8c 96 00 00 | a4 96 00 00 c0 96 00 00 |x.......|........|
|00000200| d0 96 00 00 e8 96 00 00 | f6 96 00 00 0c 97 00 00 |........|........|
|00000210| 28 97 00 00 3a 97 00 00 | 48 97 00 00 62 91 00 00 |(...:...|H...b...|
|00000220| 52 91 00 00 42 91 00 00 | 2e 91 00 00 1c 91 00 00 |R...B...|........|
|00000230| de 90 00 00 fa 90 00 00 | ca 90 00 00 b2 90 00 00 |........|........|
|00000240| a2 90 00 00 8a 90 00 00 | 76 90 00 00 66 90 00 00 |........|v...f...|
|00000250| 58 90 00 00 4a 90 00 00 | 32 90 00 00 28 90 00 00 |X...J...|2...(...|
|00000260| 14 90 00 00 0a 90 00 00 | 00 90 00 00 ec 8f 00 00 |........|........|
|00000270| ce 8f 00 00 b0 8f 00 00 | 9c 8f 00 00 84 8f 00 00 |........|........|
|00000280| 74 8f 00 00 9a 94 00 00 | 5c 8f 00 00 de 99 00 00 |t.......|\.......|
|00000290| ea 99 00 00 00 9a 00 00 | 16 9a 00 00 28 9a 00 00 |........|....(...|
|000002a0| 48 9a 00 00 68 9a 00 00 | 88 9a 00 00 a8 9a 00 00 |H...h...|........|
|000002b0| b6 9a 00 00 d4 9a 00 00 | f2 9a 00 00 fe 9a 00 00 |........|........|
|000002c0| 18 9b 00 00 24 9b 00 00 | 3e 9b 00 00 48 9b 00 00 |....$...|>...H...|
|000002d0| 66 9b 00 00 86 9b 00 00 | 00 00 00 00 3a 00 45 78 |f.......|....:.Ex|
|000002e0| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|000002f0| 54 61 67 00 da 02 50 73 | 47 65 74 56 65 72 73 69 |Tag...Ps|GetVersi|
|00000300| 6f 6e 00 00 1b 03 52 74 | 6c 43 6f 70 79 55 6e 69 |on....Rt|lCopyUni|
|00000310| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 c4 01 4b 65 |codeStri|ng....Ke|
|00000320| 49 6e 69 74 69 61 6c 69 | 7a 65 45 76 65 6e 74 00 |Initiali|zeEvent.|
|00000330| 5e 00 45 78 49 6e 74 65 | 72 6c 6f 63 6b 65 64 50 |^.ExInte|rlockedP|
|00000340| 6f 70 45 6e 74 72 79 53 | 4c 69 73 74 00 00 60 00 |opEntryS|List..`.|
|00000350| 45 78 49 6e 74 65 72 6c | 6f 63 6b 65 64 50 75 73 |ExInterl|ockedPus|
|00000360| 68 45 6e 74 72 79 53 4c | 69 73 74 00 48 01 49 6f |hEntrySL|ist.H.Io|
|00000370| 47 65 74 53 74 61 63 6b | 4c 69 6d 69 74 73 00 00 |GetStack|Limits..|
|00000380| 78 04 5f 61 6c 6c 64 69 | 76 00 79 04 5f 61 6c 6c |x._alldi|v.y._all|
|00000390| 6d 75 6c 00 db 03 52 74 | 6c 57 61 6c 6b 46 72 61 |mul...Rt|lWalkFra|
|000003a0| 6d 65 43 68 61 69 6e 00 | a2 04 6d 65 6d 63 70 79 |meChain.|..memcpy|
|000003b0| 00 00 14 02 4b 65 57 61 | 69 74 46 6f 72 53 69 6e |....KeWa|itForSin|
|000003c0| 67 6c 65 4f 62 6a 65 63 | 74 00 fb 01 4b 65 53 65 |gleObjec|t...KeSe|
|000003d0| 74 45 76 65 6e 74 00 00 | 08 02 4b 65 53 65 74 54 |tEvent..|..KeSetT|
|000003e0| 69 6d 65 72 00 00 a7 01 | 4b 65 43 61 6e 63 65 6c |imer....|KeCancel|
|000003f0| 54 69 6d 65 72 00 dd 01 | 4b 65 51 75 65 72 79 53 |Timer...|KeQueryS|
|00000400| 79 73 74 65 6d 54 69 6d | 65 00 d8 02 50 73 47 65 |ystemTim|e...PsGe|
|00000410| 74 43 75 72 72 65 6e 74 | 54 68 72 65 61 64 49 64 |tCurrent|ThreadId|
|00000420| 00 00 a8 01 4b 65 43 6c | 65 61 72 45 76 65 6e 74 |....KeCl|earEvent|
|00000430| 00 00 d4 02 50 73 43 72 | 65 61 74 65 53 79 73 74 |....PsCr|eateSyst|
|00000440| 65 6d 54 68 72 65 61 64 | 00 00 48 00 45 78 46 72 |emThread|..H.ExFr|
|00000450| 65 65 50 6f 6f 6c 57 69 | 74 68 54 61 67 00 58 04 |eePoolWi|thTag.X.|
|00000460| 5a 77 51 75 65 72 79 53 | 79 73 74 65 6d 49 6e 66 |ZwQueryS|ystemInf|
|00000470| 6f 72 6d 61 74 69 6f 6e | 00 00 4d 00 45 78 49 6e |ormation|..M.ExIn|
|00000480| 69 74 69 61 6c 69 7a 65 | 4e 50 61 67 65 64 4c 6f |itialize|NPagedLo|
|00000490| 6f 6b 61 73 69 64 65 4c | 69 73 74 00 c3 01 4b 65 |okasideL|ist...Ke|
|000004a0| 49 6e 69 74 69 61 6c 69 | 7a 65 44 70 63 00 cb 01 |Initiali|zeDpc...|
|000004b0| 4b 65 49 6e 69 74 69 61 | 6c 69 7a 65 54 69 6d 65 |KeInitia|lizeTime|
|000004c0| 72 00 41 04 5a 77 4f 70 | 65 6e 50 72 6f 63 65 73 |r.A.ZwOp|enProces|
|000004d0| 73 00 45 04 5a 77 4f 70 | 65 6e 54 68 72 65 61 64 |s.E.ZwOp|enThread|
|000004e0| 00 00 51 04 5a 77 51 75 | 65 72 79 49 6e 66 6f 72 |..Q.ZwQu|eryInfor|
|000004f0| 6d 61 74 69 6f 6e 54 6f | 6b 65 6e 00 bd 02 4f 62 |mationTo|ken...Ob|
|00000500| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|00000510| 63 74 00 00 b5 02 4f 62 | 4f 70 65 6e 4f 62 6a 65 |ct....Ob|OpenObje|
|00000520| 63 74 42 79 50 6f 69 6e | 74 65 72 00 e4 02 50 73 |ctByPoin|ter...Ps|
|00000530| 52 65 66 65 72 65 6e 63 | 65 50 72 69 6d 61 72 79 |Referenc|ePrimary|
|00000540| 54 6f 6b 65 6e 00 3a 01 | 49 6f 47 65 74 43 75 72 |Token.:.|IoGetCur|
|00000550| 72 65 6e 74 50 72 6f 63 | 65 73 73 00 e3 02 50 73 |rentProc|ess...Ps|
|00000560| 52 65 66 65 72 65 6e 63 | 65 49 6d 70 65 72 73 6f |Referenc|eImperso|
|00000570| 6e 61 74 69 6f 6e 54 6f | 6b 65 6e 00 b4 01 4b 65 |nationTo|ken...Ke|
|00000580| 47 65 74 43 75 72 72 65 | 6e 74 54 68 72 65 61 64 |GetCurre|ntThread|
|00000590| 00 00 fe 02 52 74 6c 41 | 6e 73 69 53 74 72 69 6e |....RtlA|nsiStrin|
|000005a0| 67 54 6f 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |gToUnico|deString|
|000005b0| 00 00 b0 04 73 74 72 6e | 63 70 79 00 b8 02 4f 62 |....strn|cpy...Ob|
|000005c0| 52 65 66 65 72 65 6e 63 | 65 4f 62 6a 65 63 74 42 |Referenc|eObjectB|
|000005d0| 79 48 61 6e 64 6c 65 00 | 0e 02 4b 65 55 6e 73 74 |yHandle.|..KeUnst|
|000005e0| 61 63 6b 44 65 74 61 63 | 68 50 72 6f 63 65 73 73 |ackDetac|hProcess|
|000005f0| 00 00 a3 04 6d 65 6d 6d | 6f 76 65 00 0a 02 4b 65 |....memm|ove...Ke|
|00000600| 53 74 61 63 6b 41 74 74 | 61 63 68 50 72 6f 63 65 |StackAtt|achProce|
|00000610| 73 73 00 00 68 00 45 78 | 51 75 65 75 65 57 6f 72 |ss..h.Ex|QueueWor|
|00000620| 6b 49 74 65 6d 00 1f 04 | 5a 77 43 6c 6f 73 65 00 |kItem...|ZwClose.|
|00000630| 50 04 5a 77 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |P.ZwQuer|yInforma|
|00000640| 74 69 6f 6e 50 72 6f 63 | 65 73 73 00 a4 04 6d 65 |tionProc|ess...me|
|00000650| 6d 73 65 74 00 00 81 03 | 52 74 6c 4c 65 6e 67 74 |mset....|RtlLengt|
|00000660| 68 53 69 64 00 00 42 04 | 5a 77 4f 70 65 6e 50 72 |hSid..B.|ZwOpenPr|
|00000670| 6f 63 65 73 73 54 6f 6b | 65 6e 00 00 74 04 5a 77 |ocessTok|en..t.Zw|
|00000680| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|00000690| 65 63 74 00 d7 02 50 73 | 47 65 74 43 75 72 72 65 |ect...Ps|GetCurre|
|000006a0| 6e 74 50 72 6f 63 65 73 | 73 49 64 00 d1 01 4b 65 |ntProces|sId...Ke|
|000006b0| 49 6e 73 65 72 74 51 75 | 65 75 65 41 70 63 00 00 |InsertQu|eueApc..|
|000006c0| c1 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 41 70 |..KeInit|ializeAp|
|000006d0| 63 00 eb 02 50 73 53 65 | 74 4c 6f 61 64 49 6d 61 |c...PsSe|tLoadIma|
|000006e0| 67 65 4e 6f 74 69 66 79 | 52 6f 75 74 69 6e 65 00 |geNotify|Routine.|
|000006f0| e8 02 50 73 53 65 74 43 | 72 65 61 74 65 50 72 6f |..PsSetC|reatePro|
|00000700| 63 65 73 73 4e 6f 74 69 | 66 79 52 6f 75 74 69 6e |cessNoti|fyRoutin|
|00000710| 65 00 e9 02 50 73 53 65 | 74 43 72 65 61 74 65 54 |e...PsSe|tCreateT|
|00000720| 68 72 65 61 64 4e 6f 74 | 69 66 79 52 6f 75 74 69 |hreadNot|ifyRouti|
|00000730| 6e 65 00 00 43 02 4d 6d | 47 65 74 53 79 73 74 65 |ne..C.Mm|GetSyste|
|00000740| 6d 52 6f 75 74 69 6e 65 | 41 64 64 72 65 73 73 00 |mRoutine|Address.|
|00000750| 68 03 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |h.RtlIni|tUnicode|
|00000760| 53 74 72 69 6e 67 00 00 | af 04 73 74 72 6e 63 6d |String..|..strncm|
|00000770| 70 00 51 02 4d 6d 4d 61 | 70 4c 6f 63 6b 65 64 50 |p.Q.MmMa|pLockedP|
|00000780| 61 67 65 73 53 70 65 63 | 69 66 79 43 61 63 68 65 |agesSpec|ifyCache|
|00000790| 00 00 01 03 52 74 6c 41 | 70 70 65 6e 64 55 6e 69 |....RtlA|ppendUni|
|000007a0| 63 6f 64 65 53 74 72 69 | 6e 67 54 6f 53 74 72 69 |codeStri|ngToStri|
|000007b0| 6e 67 00 00 7f 01 49 6f | 53 65 74 54 6f 70 4c 65 |ng....Io|SetTopLe|
|000007c0| 76 65 6c 49 72 70 00 00 | 49 01 49 6f 47 65 74 54 |velIrp..|I.IoGetT|
|000007d0| 6f 70 4c 65 76 65 6c 49 | 72 70 00 00 ab 01 4b 65 |opLevelI|rp....Ke|
|000007e0| 44 65 6c 61 79 45 78 65 | 63 75 74 69 6f 6e 54 68 |DelayExe|cutionTh|
|000007f0| 72 65 61 64 00 00 cf 02 | 50 72 6f 62 65 46 6f 72 |read....|ProbeFor|
|00000800| 52 65 61 64 00 00 4b 00 | 45 78 47 65 74 50 72 65 |Read..K.|ExGetPre|
|00000810| 76 69 6f 75 73 4d 6f 64 | 65 00 d0 02 50 72 6f 62 |viousMod|e...Prob|
|00000820| 65 46 6f 72 57 72 69 74 | 65 00 e9 01 4b 65 52 65 |eForWrit|e...KeRe|
|00000830| 6c 65 61 73 65 4d 75 74 | 65 78 00 00 11 03 52 74 |leaseMut|ex....Rt|
|00000840| 6c 43 6f 6d 70 61 72 65 | 55 6e 69 63 6f 64 65 53 |lCompare|UnicodeS|
|00000850| 74 72 69 6e 67 00 b6 02 | 4f 62 51 75 65 72 79 4e |tring...|ObQueryN|
|00000860| 61 6d 65 53 74 72 69 6e | 67 00 49 00 45 78 46 72 |ameStrin|g.I.ExFr|
|00000870| 65 65 54 6f 50 61 67 65 | 64 4c 6f 6f 6b 61 73 69 |eeToPage|dLookasi|
|00000880| 64 65 4c 69 73 74 00 00 | 36 00 45 78 41 6c 6c 6f |deList..|6.ExAllo|
|00000890| 63 61 74 65 46 72 6f 6d | 50 61 67 65 64 4c 6f 6f |cateFrom|PagedLoo|
|000008a0| 6b 61 73 69 64 65 4c 69 | 73 74 00 00 69 02 4d 6d |kasideLi|st..i.Mm|
|000008b0| 55 6e 6d 61 70 4c 6f 63 | 6b 65 64 50 61 67 65 73 |UnmapLoc|kedPages|
|000008c0| 00 00 36 02 4d 6d 42 75 | 69 6c 64 4d 64 6c 46 6f |..6.MmBu|ildMdlFo|
|000008d0| 72 4e 6f 6e 50 61 67 65 | 64 50 6f 6f 6c 00 38 02 |rNonPage|dPool.8.|
|000008e0| 4d 6d 43 72 65 61 74 65 | 4d 64 6c 00 37 00 45 78 |MmCreate|Mdl.7.Ex|
|000008f0| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 00 00 f7 01 |Allocate|Pool....|
|00000900| 4b 65 53 65 72 76 69 63 | 65 44 65 73 63 72 69 70 |KeServic|eDescrip|
|00000910| 74 6f 72 54 61 62 6c 65 | 00 00 71 04 5a 77 55 6e |torTable|..q.ZwUn|
|00000920| 6c 6f 61 64 4b 65 79 00 | 39 04 5a 77 4c 6f 61 64 |loadKey.|9.ZwLoad|
|00000930| 4b 65 79 00 33 04 5a 77 | 46 6c 75 73 68 4b 65 79 |Key.3.Zw|FlushKey|
|00000940| 00 00 25 04 5a 77 43 72 | 65 61 74 65 4b 65 79 00 |..%.ZwCr|eateKey.|
|00000950| 2b 04 5a 77 44 65 6c 65 | 74 65 56 61 6c 75 65 4b |+.ZwDele|teValueK|
|00000960| 65 79 00 00 2a 04 5a 77 | 44 65 6c 65 74 65 4b 65 |ey..*.Zw|DeleteKe|
|00000970| 79 00 30 04 5a 77 45 6e | 75 6d 65 72 61 74 65 4b |y.0.ZwEn|umerateK|
|00000980| 65 79 00 00 31 04 5a 77 | 45 6e 75 6d 65 72 61 74 |ey..1.Zw|Enumerat|
|00000990| 65 56 61 6c 75 65 4b 65 | 79 00 59 04 5a 77 51 75 |eValueKe|y.Y.ZwQu|
|000009a0| 65 72 79 56 61 6c 75 65 | 4b 65 79 00 6d 04 5a 77 |eryValue|Key.m.Zw|
|000009b0| 53 65 74 56 61 6c 75 65 | 4b 65 79 00 53 04 5a 77 |SetValue|Key.S.Zw|
|000009c0| 51 75 65 72 79 4b 65 79 | 00 00 40 04 5a 77 4f 70 |QueryKey|..@.ZwOp|
|000009d0| 65 6e 4b 65 79 00 4e 00 | 45 78 49 6e 69 74 69 61 |enKey.N.|ExInitia|
|000009e0| 6c 69 7a 65 50 61 67 65 | 64 4c 6f 6f 6b 61 73 69 |lizePage|dLookasi|
|000009f0| 64 65 4c 69 73 74 00 00 | c7 01 4b 65 49 6e 69 74 |deList..|..KeInit|
|00000a00| 69 61 6c 69 7a 65 4d 75 | 74 65 78 00 54 03 52 74 |ializeMu|tex.T.Rt|
|00000a10| 6c 46 72 65 65 55 6e 69 | 63 6f 64 65 53 74 72 69 |lFreeUni|codeStri|
|00000a20| 6e 67 00 00 7e 01 49 6f | 53 65 74 54 68 72 65 61 |ng..~.Io|SetThrea|
|00000a30| 64 48 61 72 64 45 72 72 | 6f 72 4d 6f 64 65 00 00 |dHardErr|orMode..|
|00000a40| 24 04 5a 77 43 72 65 61 | 74 65 46 69 6c 65 00 00 |$.ZwCrea|teFile..|
|00000a50| 65 04 5a 77 53 65 74 49 | 6e 66 6f 72 6d 61 74 69 |e.ZwSetI|nformati|
|00000a60| 6f 6e 46 69 6c 65 00 00 | 75 04 5a 77 57 72 69 74 |onFile..|u.ZwWrit|
|00000a70| 65 46 69 6c 65 00 97 01 | 49 6f 66 43 6f 6d 70 6c |eFile...|IofCompl|
|00000a80| 65 74 65 52 65 71 75 65 | 73 74 00 00 1e 01 49 6f |eteReque|st....Io|
|00000a90| 43 72 65 61 74 65 4e 6f | 74 69 66 69 63 61 74 69 |CreateNo|tificati|
|00000aa0| 6f 6e 45 76 65 6e 74 00 | 25 01 49 6f 44 65 6c 65 |onEvent.|%.IoDele|
|00000ab0| 74 65 44 65 76 69 63 65 | 00 00 0d 02 4b 65 54 69 |teDevice|....KeTi|
|00000ac0| 63 6b 43 6f 75 6e 74 00 | a6 01 4b 65 42 75 67 43 |ckCount.|..KeBugC|
|00000ad0| 68 65 63 6b 45 78 00 00 | 6e 74 6f 73 6b 72 6e 6c |heckEx..|ntoskrnl|
|00000ae0| 2e 65 78 65 00 00 46 00 | 4b 65 51 75 65 72 79 50 |.exe..F.|KeQueryP|
|00000af0| 65 72 66 6f 72 6d 61 6e | 63 65 43 6f 75 6e 74 65 |erforman|ceCounte|
|00000b00| 72 00 01 00 45 78 52 65 | 6c 65 61 73 65 46 61 73 |r...ExRe|leaseFas|
|00000b10| 74 4d 75 74 65 78 00 00 | 00 00 45 78 41 63 71 75 |tMutex..|..ExAcqu|
|00000b20| 69 72 65 46 61 73 74 4d | 75 74 65 78 00 00 52 00 |ireFastM|utex..R.|
|00000b30| 4b 66 52 65 6c 65 61 73 | 65 53 70 69 6e 4c 6f 63 |KfReleas|eSpinLoc|
|00000b40| 6b 00 4f 00 4b 66 41 63 | 71 75 69 72 65 53 70 69 |k.O.KfAc|quireSpi|
|00000b50| 6e 4c 6f 63 6b 00 44 00 | 4b 65 47 65 74 43 75 72 |nLock.D.|KeGetCur|
|00000b60| 72 65 6e 74 49 72 71 6c | 00 00 48 41 4c 2e 64 6c |rentIrql|..HAL.dl|
|00000b70| 6c 00 1b 00 46 6c 74 43 | 6c 6f 73 65 00 00 22 00 |l...FltC|lose..".|
|00000b80| 46 6c 74 43 72 65 61 74 | 65 46 69 6c 65 00 86 00 |FltCreat|eFile...|
|00000b90| 46 6c 74 52 65 6c 65 61 | 73 65 46 69 6c 65 4e 61 |FltRelea|seFileNa|
|00000ba0| 6d 65 49 6e 66 6f 72 6d | 61 74 69 6f 6e 00 42 00 |meInform|ation.B.|
|00000bb0| 46 6c 74 47 65 74 44 65 | 73 74 69 6e 61 74 69 6f |FltGetDe|stinatio|
|00000bc0| 6e 46 69 6c 65 4e 61 6d | 65 49 6e 66 6f 72 6d 61 |nFileNam|eInforma|
|00000bd0| 74 69 6f 6e 00 00 5f 00 | 46 6c 74 47 65 74 56 6f |tion.._.|FltGetVo|
|00000be0| 6c 75 6d 65 4e 61 6d 65 | 00 00 46 00 46 6c 74 47 |lumeName|..F.FltG|
|00000bf0| 65 74 46 69 6c 65 4e 61 | 6d 65 49 6e 66 6f 72 6d |etFileNa|meInform|
|00000c00| 61 74 69 6f 6e 00 2e 00 | 46 6c 74 44 65 74 61 63 |ation...|FltDetac|
|00000c10| 68 56 6f 6c 75 6d 65 00 | 8c 00 46 6c 74 53 65 6e |hVolume.|..FltSen|
|00000c20| 64 4d 65 73 73 61 67 65 | 00 00 0a 00 46 6c 74 41 |dMessage|....FltA|
|00000c30| 74 74 61 63 68 56 6f 6c | 75 6d 65 00 6d 00 46 6c |ttachVol|ume.m.Fl|
|00000c40| 74 4f 62 6a 65 63 74 44 | 65 72 65 66 65 72 65 6e |tObjectD|ereferen|
|00000c50| 63 65 00 00 37 00 46 6c | 74 45 6e 75 6d 65 72 61 |ce..7.Fl|tEnumera|
|00000c60| 74 65 56 6f 6c 75 6d 65 | 73 00 1c 00 46 6c 74 43 |teVolume|s...FltC|
|00000c70| 6c 6f 73 65 43 6c 69 65 | 6e 74 50 6f 72 74 00 00 |loseClie|ntPort..|
|00000c80| a0 00 46 6c 74 55 6e 72 | 65 67 69 73 74 65 72 46 |..FltUnr|egisterF|
|00000c90| 69 6c 74 65 72 00 1d 00 | 46 6c 74 43 6c 6f 73 65 |ilter...|FltClose|
|00000ca0| 43 6f 6d 6d 75 6e 69 63 | 61 74 69 6f 6e 50 6f 72 |Communic|ationPor|
|00000cb0| 74 00 98 00 46 6c 74 53 | 74 61 72 74 46 69 6c 74 |t...FltS|tartFilt|
|00000cc0| 65 72 69 6e 67 00 3e 00 | 46 6c 74 46 72 65 65 53 |ering.>.|FltFreeS|
|00000cd0| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00000ce0| 72 00 21 00 46 6c 74 43 | 72 65 61 74 65 43 6f 6d |r.!.FltC|reateCom|
|00000cf0| 6d 75 6e 69 63 61 74 69 | 6f 6e 50 6f 72 74 00 00 |municati|onPort..|
|00000d00| 0c 00 46 6c 74 42 75 69 | 6c 64 44 65 66 61 75 6c |..FltBui|ldDefaul|
|00000d10| 74 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |tSecurit|yDescrip|
|00000d20| 74 6f 72 00 82 00 46 6c | 74 52 65 67 69 73 74 65 |tor...Fl|tRegiste|
|00000d30| 72 46 69 6c 74 65 72 00 | 44 00 46 6c 74 47 65 74 |rFilter.|D.FltGet|
|00000d40| 44 69 73 6b 44 65 76 69 | 63 65 4f 62 6a 65 63 74 |DiskDevi|ceObject|
|00000d50| 00 00 46 4c 54 4d 47 52 | 2e 53 59 53 00 00 df 05 |..FLTMGR|.SYS....|
|00000d60| 52 74 6c 55 6e 77 69 6e | 64 00 24 07 5a 77 53 65 |RtlUnwin|d.$.ZwSe|
|00000d70| 74 53 65 63 75 72 69 74 | 79 4f 62 6a 65 63 74 00 |tSecurit|yObject.|
|00000d80| db 01 49 6f 44 65 76 69 | 63 65 4f 62 6a 65 63 74 |..IoDevi|ceObject|
|00000d90| 54 79 70 65 00 00 c1 01 | 49 6f 43 72 65 61 74 65 |Type....|IoCreate|
|00000da0| 44 65 76 69 63 65 00 00 | 2d 05 52 74 6c 47 65 74 |Device..|-.RtlGet|
|00000db0| 44 61 63 6c 53 65 63 75 | 72 69 74 79 44 65 73 63 |DaclSecu|rityDesc|
|00000dc0| 72 69 70 74 6f 72 00 00 | 38 05 52 74 6c 47 65 74 |riptor..|8.RtlGet|
|00000dd0| 53 61 63 6c 53 65 63 75 | 72 69 74 79 44 65 73 63 |SaclSecu|rityDesc|
|00000de0| 72 69 70 74 6f 72 00 00 | 32 05 52 74 6c 47 65 74 |riptor..|2.RtlGet|
|00000df0| 47 72 6f 75 70 53 65 63 | 75 72 69 74 79 44 65 73 |GroupSec|urityDes|
|00000e00| 63 72 69 70 74 6f 72 00 | 36 05 52 74 6c 47 65 74 |criptor.|6.RtlGet|
|00000e10| 4f 77 6e 65 72 53 65 63 | 75 72 69 74 79 44 65 73 |OwnerSec|urityDes|
|00000e20| 63 72 69 70 74 6f 72 00 | 4f 07 5f 73 6e 77 70 72 |criptor.|O._snwpr|
|00000e30| 69 6e 74 66 00 00 7b 05 | 52 74 6c 4c 65 6e 67 74 |intf..{.|RtlLengt|
|00000e40| 68 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |hSecurit|yDescrip|
|00000e50| 74 6f 72 00 06 06 53 65 | 43 61 70 74 75 72 65 53 |tor...Se|CaptureS|
|00000e60| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00000e70| 72 00 15 06 53 65 45 78 | 70 6f 72 74 73 00 17 02 |r...SeEx|ports...|
|00000e80| 49 6f 49 73 57 64 6d 56 | 65 72 73 69 6f 6e 41 76 |IoIsWdmV|ersionAv|
|00000e90| 61 69 6c 61 62 6c 65 00 | 5e 07 5f 77 63 73 6e 69 |ailable.|^._wcsni|
|00000ea0| 63 6d 70 00 ba 04 52 74 | 6c 41 64 64 41 63 63 65 |cmp...Rt|lAddAcce|
|00000eb0| 73 73 41 6c 6c 6f 77 65 | 64 41 63 65 00 00 8a 07 |ssAllowe|dAce....|
|00000ec0| 77 63 73 63 68 72 00 00 | b9 04 52 74 6c 41 62 73 |wcschr..|..RtlAbs|
|00000ed0| 6f 6c 75 74 65 54 6f 53 | 65 6c 66 52 65 6c 61 74 |oluteToS|elfRelat|
|00000ee0| 69 76 65 53 44 00 b4 05 | 52 74 6c 53 65 74 44 61 |iveSD...|RtlSetDa|
|00000ef0| 63 6c 53 65 63 75 72 69 | 74 79 44 65 73 63 72 69 |clSecuri|tyDescri|
|00000f00| 70 74 6f 72 00 00 eb 04 | 52 74 6c 43 72 65 61 74 |ptor....|RtlCreat|
|00000f10| 65 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |eSecurit|yDescrip|
|00000f20| 74 6f 72 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |tor.....|........|
|00000f30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000f70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+