PC World Komputer 2010 April

home *** CD-ROM | disk | FTP | other *** search
/ PC World Komputer 2010 April / PCWorld0410.iso / WindowsServerTrial / server.iso / sources / install.wim / 3 / Windows / System32 / drivers / filetrace.sys / INIT next >
Unknown | 2008-01-19 | 4.0 KB
open in:
MacOS 8.1 |
Win98 |
DOS
view JSON data |
view as text

This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence	Program	Detection	Match Type	Support
`100%`	file	data	default
`100%`	TrID	Adobe PhotoShop Brush	default (weak)
hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 00 6a 14 | 68 18 43 01 00 e8 46 98 |......j.|h.C...F.|
|00000010| ff ff 33 f6 89 75 fc 68 | dc 86 01 00 8d 45 dc 50 |..3..u.h|.....E.P|
|00000020| ff 15 14 41 01 00 8d 45 | dc 50 ff 15 18 41 01 00 |...A...E|.P...A..|
|00000030| a3 c0 55 01 00 89 35 7c | 55 01 00 89 35 90 56 01 |..U...5||U...5.V.|
|00000040| 00 c7 05 94 56 01 00 00 | 04 00 00 8b 45 08 a3 e0 |....V...|....E...|
|00000050| 55 01 00 b8 98 56 01 00 | a3 9c 56 01 00 a3 98 56 |U....V..|..V....V|
|00000060| 01 00 33 c0 40 a3 a0 56 | 01 00 89 35 a4 56 01 00 |..3.@..V|...5.V..|
|00000070| 89 35 a8 56 01 00 56 50 | 68 ac 56 01 00 ff 15 28 |.5.V..VP|h.V....(|
|00000080| 41 01 00 56 bb 46 4c 74 | 72 53 68 d8 00 00 00 56 |A..V.FLt|rSh....V|
|00000090| 56 56 68 f0 55 01 00 8b | 3d 1c 41 01 00 ff d7 56 |VVh.U...|=.A....V|
|000000a0| 53 68 00 08 00 00 56 56 | 56 68 40 56 01 00 ff d7 |Sh....VV|Vh@V....|
|000000b0| e8 a1 96 ff ff 68 e8 55 | 01 00 68 a4 86 01 00 ff |.....h.U|..h.....|
|000000c0| 75 08 e8 8d 9b ff ff 89 | 45 e4 3b c6 7c 22 ff 75 |u.......|E.;.|".u|
|000000d0| 0c e8 30 df ff ff 89 45 | e4 3b c6 7c 13 e8 56 00 |..0....E|.;.|..V.|
|000000e0| 00 00 ff 35 e8 55 01 00 | e8 5b 9b ff ff 89 45 e4 |...5.U..|.[....E.|
|000000f0| c7 45 fc fe ff ff ff e8 | 0d 00 00 00 8b 45 e4 e8 |.E......|.....E..|
|00000100| 99 97 ff ff c2 08 00 33 | f6 39 75 e4 7d 23 a1 e8 |.......3|.9u.}#..|
|00000110| 55 01 00 3b c6 74 06 50 | e8 1f 9b ff ff 68 f0 55 |U..;.t.P|.....h.U|
|00000120| 01 00 8b 35 20 41 01 00 | ff d6 68 40 56 01 00 ff |...5 A..|..h@V...|
|00000130| d6 c3 cc cc cc cc cc cc | 6a 70 68 78 43 01 00 e8 |........|jphxC...|
|00000140| 14 97 ff ff 33 db 89 5d | dc 89 5d d8 89 5d d4 89 |....3..]|..]..]..|
|00000150| 5d fc 68 46 4c 74 72 6a | 6c 53 ff 15 04 41 01 00 |].hFLtrj|lS...A..|
|00000160| 8b f8 89 7d e0 3b fb 0f | 84 5d 01 00 00 68 26 87 |...}.;..|.]...h&.|
|00000170| 01 00 68 1e 87 01 00 6a | 6c 57 e8 ef 8e ff ff 83 |..h....j|lW......|
|00000180| c4 10 3b c3 0f 8c 40 01 | 00 00 89 5d 80 c7 45 84 |..;...@.|...]..E.|
|00000190| 20 00 00 00 c7 45 88 12 | 87 01 00 8d 45 d8 89 45 | ....E..|....E..E|
|000001a0| 8c 6a 04 5e 89 75 90 8d | 45 d4 89 45 94 89 75 98 |.j.^.u..|E..E..u.|
|000001b0| 89 5d 9c 89 5d a0 53 53 | 8d 45 80 50 57 68 02 00 |.]..].SS|.E.PWh..|
|000001c0| 00 80 ff 15 ec 40 01 00 | 3b c3 0f 8c fa 00 00 00 |.....@..|;.......|
|000001d0| 39 5d d8 0f 84 f1 00 00 | 00 bf a0 55 01 00 8b cf |9]......|...U....|
|000001e0| ff 15 74 40 01 00 a1 80 | 55 01 00 8b 08 0b 48 04 |..t@....|U.....H.|
|000001f0| 0f 85 cc 00 00 00 89 5d | e4 8b 55 e4 3b d6 0f 8d |.......]|..U.;...|
|00000200| be 00 00 00 6a 11 58 8b | 4d e0 8d 3c 41 6a 12 59 |....j.X.|M..<Aj.Y|
|00000210| 8b 34 95 18 50 01 00 f3 | a5 66 a5 89 5d 80 c7 45 |.4..P...|.f..]..E|
|00000220| 84 20 00 00 00 c7 45 88 | 06 87 01 00 8d 45 dc 89 |. ....E.|.....E..|
|00000230| 45 8c 6a 04 58 89 45 90 | 8d 4d d4 89 4d 94 89 45 |E.j.X.E.|.M..M..E|
|00000240| 98 89 5d 9c 89 5d a0 53 | 53 8d 45 80 50 ff 75 e0 |..]..].S|S.E.P.u.|
|00000250| 68 02 00 00 80 ff 15 ec | 40 01 00 3b c3 7c 53 39 |h.......|@..;.|S9|
|00000260| 5d dc 76 4e a1 80 55 01 | 00 8b 08 0b 48 04 75 38 |].vN..U.|....H.u8|
|00000270| 41 ff 05 84 55 01 00 75 | 0a 89 0d 84 55 01 00 8b |A...U..u|....U...|
|00000280| d1 eb 06 8b 15 84 55 01 | 00 89 50 0c a1 80 55 01 |......U.|..P...U.|
|00000290| 00 ff 40 08 a1 80 55 01 | 00 89 08 a1 80 55 01 00 |..@...U.|.....U..|
|000002a0| 89 58 04 a1 80 55 01 00 | 8b 4d dc 8b 55 e4 89 4c |.X...U..|.M..U..L|
|000002b0| 90 14 ff 45 e4 6a 04 5e | bf a0 55 01 00 e9 37 ff |...E.j.^|..U...7.|
|000002c0| ff ff 8b cf ff 15 78 40 | 01 00 c7 45 fc fe ff ff |......x@|...E....|
|000002d0| ff e8 08 00 00 00 e8 c2 | 95 ff ff c3 33 db 39 5d |........|....3.9]|
|000002e0| e0 74 0a 53 ff 75 e0 ff | 15 0c 41 01 00 c3 cc cc |.t.S.u..|..A.....|
|000002f0| cc cc cc 8b ff 55 8b ec | a1 78 50 01 00 85 c0 b9 |.....U..|.xP.....|
|00000300| 4e e6 40 bb 74 04 3b c1 | 75 1a a1 9c 40 01 00 8b |N.@.t.;.|u...@...|
|00000310| 00 35 78 50 01 00 a3 78 | 50 01 00 75 07 8b c1 a3 |.5xP...x|P..u....|
|00000320| 78 50 01 00 f7 d0 a3 7c | 50 01 00 5d e9 d5 fc ff |xP.....||P..]....|
|00000330| ff cc cc cc cc cc cc cc | 00 00 00 00 00 00 00 00 |........|........|
|00000340| 00 00 00 00 fe 2a 01 00 | 00 00 00 00 01 00 00 00 |.....*..|........|
|00000350| 00 00 00 00 00 00 00 00 | fe 2a 01 00 00 00 00 00 |........|.*......|
|00000360| 02 00 00 00 00 00 00 00 | c4 24 01 00 40 12 01 00 |........|.$..@...|
|00000370| 00 00 00 00 03 00 00 00 | 00 00 00 00 c4 24 01 00 |........|.....$..|
|00000380| 40 12 01 00 00 00 00 00 | 04 00 00 00 00 00 00 00 |@.......|........|
|00000390| c4 24 01 00 40 12 01 00 | 00 00 00 00 05 00 00 00 |.$..@...|........|
|000003a0| 00 00 00 00 c4 24 01 00 | 40 12 01 00 00 00 00 00 |.....$..|@.......|
|000003b0| 06 00 00 00 00 00 00 00 | c4 24 01 00 40 12 01 00 |........|.$..@...|
|000003c0| 00 00 00 00 07 00 00 00 | 00 00 00 00 c4 24 01 00 |........|.....$..|
|000003d0| 40 12 01 00 00 00 00 00 | 08 00 00 00 00 00 00 00 |@.......|........|
|000003e0| c4 24 01 00 40 12 01 00 | 00 00 00 00 09 00 00 00 |.$..@...|........|
|000003f0| 00 00 00 00 c4 24 01 00 | 40 12 01 00 00 00 00 00 |.....$..|@.......|
|00000400| 0a 00 00 00 00 00 00 00 | c4 24 01 00 40 12 01 00 |........|.$..@...|
|00000410| 00 00 00 00 0b 00 00 00 | 00 00 00 00 c4 24 01 00 |........|.....$..|
|00000420| 40 12 01 00 00 00 00 00 | 0c 00 00 00 00 00 00 00 |@.......|........|
|00000430| c4 24 01 00 40 12 01 00 | 00 00 00 00 0d 00 00 00 |.$..@...|........|
|00000440| 00 00 00 00 c4 24 01 00 | 40 12 01 00 00 00 00 00 |.....$..|@.......|
|00000450| 0e 00 00 00 00 00 00 00 | c4 24 01 00 40 12 01 00 |........|.$..@...|
|00000460| 00 00 00 00 0f 00 00 00 | 00 00 00 00 c4 24 01 00 |........|.....$..|
|00000470| 40 12 01 00 00 00 00 00 | 10 00 00 00 00 00 00 00 |@.......|........|
|00000480| 8c 33 01 00 00 00 00 00 | 00 00 00 00 11 00 00 00 |.3......|........|
|00000490| 00 00 00 00 c4 24 01 00 | 40 12 01 00 00 00 00 00 |.....$..|@.......|
|000004a0| 12 00 00 00 00 00 00 00 | c4 24 01 00 40 12 01 00 |........|.$..@...|
|000004b0| 00 00 00 00 13 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000004c0| fe 2a 01 00 00 00 00 00 | 14 00 00 00 00 00 00 00 |.*......|........|
|000004d0| c4 24 01 00 40 12 01 00 | 00 00 00 00 15 00 00 00 |.$..@...|........|
|000004e0| 00 00 00 00 c4 24 01 00 | 40 12 01 00 00 00 00 00 |.....$..|@.......|
|000004f0| 17 00 00 00 00 00 00 00 | c4 24 01 00 40 12 01 00 |........|.$..@...|
|00000500| 00 00 00 00 19 00 00 00 | 00 00 00 00 c4 24 01 00 |........|.....$..|
|00000510| 40 12 01 00 00 00 00 00 | 1a 00 00 00 00 00 00 00 |@.......|........|
|00000520| c4 24 01 00 40 12 01 00 | 00 00 00 00 1b 00 00 00 |.$..@...|........|
|00000530| 00 00 00 00 c4 24 01 00 | 40 12 01 00 00 00 00 00 |.....$..|@.......|
|00000540| ff 00 00 00 00 00 00 00 | c4 24 01 00 40 12 01 00 |........|.$..@...|
|00000550| 00 00 00 00 fe 00 00 00 | 00 00 00 00 c4 24 01 00 |........|.....$..|
|00000560| 40 12 01 00 00 00 00 00 | fd 00 00 00 00 00 00 00 |@.......|........|
|00000570| c4 24 01 00 40 12 01 00 | 00 00 00 00 fc 00 00 00 |.$..@...|........|
|00000580| 00 00 00 00 c4 24 01 00 | 40 12 01 00 00 00 00 00 |.....$..|@.......|
|00000590| fb 00 00 00 00 00 00 00 | c4 24 01 00 40 12 01 00 |........|.$..@...|
|000005a0| 00 00 00 00 fa 00 00 00 | 00 00 00 00 c4 24 01 00 |........|.....$..|
|000005b0| 40 12 01 00 00 00 00 00 | f3 00 00 00 00 00 00 00 |@.......|........|
|000005c0| c4 24 01 00 40 12 01 00 | 00 00 00 00 f2 00 00 00 |.$..@...|........|
|000005d0| 00 00 00 00 00 00 00 00 | fe 2a 01 00 00 00 00 00 |........|.*......|
|000005e0| f1 00 00 00 00 00 00 00 | c4 24 01 00 40 12 01 00 |........|.$..@...|
|000005f0| 00 00 00 00 f0 00 00 00 | 00 00 00 00 c4 24 01 00 |........|.....$..|
|00000600| 40 12 01 00 00 00 00 00 | ef 00 00 00 00 00 00 00 |@.......|........|
|00000610| c4 24 01 00 40 12 01 00 | 00 00 00 00 ee 00 00 00 |.$..@...|........|
|00000620| 00 00 00 00 c4 24 01 00 | 40 12 01 00 00 00 00 00 |.....$..|@.......|
|00000630| ed 00 00 00 00 00 00 00 | c4 24 01 00 40 12 01 00 |........|.$..@...|
|00000640| 00 00 00 00 ec 00 00 00 | 00 00 00 00 c4 24 01 00 |........|.....$..|
|00000650| 40 12 01 00 00 00 00 00 | 80 00 00 00 00 00 00 00 |@.......|........|
|00000660| 00 00 00 00 00 00 00 00 | 00 00 00 00 01 00 01 00 |........|........|
|00000670| fe 36 01 00 ff ff ff ff | 46 4c 74 72 00 00 00 00 |.6......|FLtr....|
|00000680| 00 00 00 00 00 00 00 00 | ff ff 00 00 00 00 00 00 |........|........|
|00000690| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000006a0| 00 00 00 00 38 00 02 02 | 00 00 00 00 6c 86 01 00 |....8...|....l...|
|000006b0| 38 83 01 00 f0 78 01 00 | 72 79 01 00 60 76 01 00 |8....x..|ry..`v..|
|000006c0| 6a 76 01 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |jv......|........|
|000006d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 4b 00 65 00 |........|....K.e.|
|000006e0| 41 00 72 00 65 00 41 00 | 6c 00 6c 00 41 00 70 00 |A.r.e.A.|l.l.A.p.|
|000006f0| 63 00 73 00 44 00 69 00 | 73 00 61 00 62 00 6c 00 |c.s.D.i.|s.a.b.l.|
|00000700| 65 00 64 00 00 00 46 00 | 6c 00 61 00 67 00 73 00 |e.d...F.|l.a.g.s.|
|00000710| 00 00 53 00 74 00 61 00 | 72 00 74 00 00 00 25 00 |..S.t.a.|r.t...%.|
|00000720| 77 00 73 00 00 00 57 00 | 4d 00 49 00 5c 00 47 00 |w.s...W.|M.I.\.G.|
|00000730| 6c 00 6f 00 62 00 61 00 | 6c 00 4c 00 6f 00 67 00 |l.o.b.a.|l.L.o.g.|
|00000740| 67 00 65 00 72 00 5c 00 | 00 00 cc cc 20 88 00 00 |g.e.r.\.|.... ...|
|00000750| 00 00 00 00 00 00 00 00 | e6 8c 00 00 84 40 00 00 |........|.....@..|
|00000760| 10 88 00 00 00 00 00 00 | 00 00 00 00 40 8d 00 00 |........|....@...|
|00000770| 74 40 00 00 9c 87 00 00 | 00 00 00 00 00 00 00 00 |t@......|........|
|00000780| ee 8f 00 00 00 40 00 00 | 00 00 00 00 00 00 00 00 |.....@..|........|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 c2 8f 00 00 |........|........|
|000007a0| ac 8f 00 00 98 8f 00 00 | 80 8f 00 00 64 8f 00 00 |........|....d...|
|000007b0| 40 8f 00 00 2a 8f 00 00 | 0e 8f 00 00 fc 8e 00 00 |@...*...|........|
|000007c0| dc 8e 00 00 c8 8e 00 00 | ae 8e 00 00 92 8e 00 00 |........|........|
|000007d0| 78 8e 00 00 5e 8e 00 00 | 40 8e 00 00 26 8e 00 00 |x...^...|@...&...|
|000007e0| 10 8e 00 00 f6 8d 00 00 | dc 8d 00 00 ca 8d 00 00 |........|........|
|000007f0| b0 8d 00 00 9e 8d 00 00 | 86 8d 00 00 72 8d 00 00 |........|....r...|
|00000800| 5e 8d 00 00 48 8d 00 00 | d8 8f 00 00 00 00 00 00 |^...H...|........|
|00000810| 16 8d 00 00 00 8d 00 00 | 2c 8d 00 00 00 00 00 00 |........|,.......|
|00000820| 12 8c 00 00 24 8c 00 00 | 46 8c 00 00 6a 8c 00 00 |....$...|F...j...|
|00000830| fe 8b 00 00 a8 8c 00 00 | c8 8c 00 00 d6 8c 00 00 |........|........|
|00000840| f4 8c 00 00 dc 8b 00 00 | c8 8b 00 00 8a 8b 00 00 |........|........|
|00000850| ac 8b 00 00 70 8b 00 00 | 52 8b 00 00 34 8b 00 00 |....p...|R...4...|
|00000860| 14 8b 00 00 fa 8a 00 00 | e0 8a 00 00 be 8a 00 00 |........|........|
|00000870| a2 8a 00 00 8a 8a 00 00 | 80 8a 00 00 6c 8a 00 00 |........|....l...|
|00000880| 50 8a 00 00 34 8a 00 00 | 1a 8a 00 00 fe 89 00 00 |P...4...|........|
|00000890| e4 89 00 00 cc 89 00 00 | b4 89 00 00 aa 89 00 00 |........|........|
|000008a0| 92 89 00 00 76 89 00 00 | 62 89 00 00 54 89 00 00 |....v...|b...T...|
|000008b0| 3c 89 00 00 20 89 00 00 | fe 88 00 00 e0 88 00 00 |<... ...|........|
|000008c0| 8c 8c 00 00 cc 88 00 00 | 00 00 00 00 d9 02 4b 65 |........|......Ke|
|000008d0| 49 6e 69 74 69 61 6c 69 | 7a 65 45 76 65 6e 74 00 |Initiali|zeEvent.|
|000008e0| 72 00 45 78 44 65 6c 65 | 74 65 4e 50 61 67 65 64 |r.ExDele|teNPaged|
|000008f0| 4c 6f 6f 6b 61 73 69 64 | 65 4c 69 73 74 00 8e 00 |Lookasid|eList...|
|00000900| 45 78 49 6e 69 74 69 61 | 6c 69 7a 65 4e 50 61 67 |ExInitia|lizeNPag|
|00000910| 65 64 4c 6f 6f 6b 61 73 | 69 64 65 4c 69 73 74 00 |edLookas|ideList.|
|00000920| 8a 03 4d 6d 47 65 74 53 | 79 73 74 65 6d 52 6f 75 |..MmGetS|ystemRou|
|00000930| 74 69 6e 65 41 64 64 72 | 65 73 73 00 5f 05 52 74 |tineAddr|ess._.Rt|
|00000940| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|00000950| 6e 67 00 00 6a 07 5f 76 | 73 6e 77 70 72 69 6e 74 |ng..j._v|snwprint|
|00000960| 66 00 85 00 45 78 46 72 | 65 65 50 6f 6f 6c 57 69 |f...ExFr|eePoolWi|
|00000970| 74 68 54 61 67 00 89 02 | 49 6f 57 4d 49 52 65 67 |thTag...|IoWMIReg|
|00000980| 69 73 74 72 61 74 69 6f | 6e 43 6f 6e 74 72 6f 6c |istratio|nControl|
|00000990| 00 00 6d 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |..m.ExAl|locatePo|
|000009a0| 6f 6c 57 69 74 68 54 61 | 67 00 80 07 6d 65 6d 73 |olWithTa|g...mems|
|000009b0| 65 74 00 00 41 04 4f 62 | 66 44 65 72 65 66 65 72 |et..A.Ob|fDerefer|
|000009c0| 65 6e 63 65 4f 62 6a 65 | 63 74 00 00 f9 05 52 74 |enceObje|ct....Rt|
|000009d0| 6c 55 70 63 61 73 65 55 | 6e 69 63 6f 64 65 43 68 |lUpcaseU|nicodeCh|
|000009e0| 61 72 00 00 7f 02 49 6f | 56 6f 6c 75 6d 65 44 65 |ar....Io|VolumeDe|
|000009f0| 76 69 63 65 54 6f 44 6f | 73 4e 61 6d 65 00 8e 06 |viceToDo|sName...|
|00000a00| 57 6d 69 51 75 65 72 79 | 54 72 61 63 65 49 6e 66 |WmiQuery|TraceInf|
|00000a10| 6f 72 6d 61 74 69 6f 6e | 00 00 b9 05 52 74 6c 51 |ormation|....RtlQ|
|00000a20| 75 65 72 79 52 65 67 69 | 73 74 72 79 56 61 6c 75 |ueryRegi|stryValu|
|00000a30| 65 73 00 00 a4 01 49 6e | 74 65 72 6c 6f 63 6b 65 |es....In|terlocke|
|00000a40| 64 50 6f 70 45 6e 74 72 | 79 53 4c 69 73 74 00 00 |dPopEntr|ySList..|
|00000a50| a5 01 49 6e 74 65 72 6c | 6f 63 6b 65 64 50 75 73 |..Interl|ockedPus|
|00000a60| 68 45 6e 74 72 79 53 4c | 69 73 74 00 8e 03 4d 6d |hEntrySL|ist...Mm|
|00000a70| 49 73 41 64 64 72 65 73 | 73 56 61 6c 69 64 00 00 |IsAddres|sValid..|
|00000a80| 7e 07 6d 65 6d 63 70 79 | 00 00 8e 04 50 73 47 65 |~.memcpy|....PsGe|
|00000a90| 74 50 72 6f 63 65 73 73 | 53 65 73 73 69 6f 6e 49 |tProcess|SessionI|
|00000aa0| 64 00 6b 04 50 73 44 65 | 72 65 66 65 72 65 6e 63 |d.k.PsDe|referenc|
|00000ab0| 65 50 72 69 6d 61 72 79 | 54 6f 6b 65 6e 00 6a 04 |ePrimary|Token.j.|
|00000ac0| 50 73 44 65 72 65 66 65 | 72 65 6e 63 65 49 6d 70 |PsDerefe|renceImp|
|00000ad0| 65 72 73 6f 6e 61 74 69 | 6f 6e 54 6f 6b 65 6e 00 |ersonati|onToken.|
|00000ae0| 40 06 53 65 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |@.SeQuer|yInforma|
|00000af0| 74 69 6f 6e 54 6f 6b 65 | 6e 00 ac 04 50 73 52 65 |tionToke|n...PsRe|
|00000b00| 66 65 72 65 6e 63 65 50 | 72 69 6d 61 72 79 54 6f |ferenceP|rimaryTo|
|00000b10| 6b 65 6e 00 ab 04 50 73 | 52 65 66 65 72 65 6e 63 |ken...Ps|Referenc|
|00000b20| 65 49 6d 70 65 72 73 6f | 6e 61 74 69 6f 6e 54 6f |eImperso|nationTo|
|00000b30| 6b 65 6e 00 d2 04 52 74 | 6c 41 62 73 6f 6c 75 74 |ken...Rt|lAbsolut|
|00000b40| 65 54 6f 53 65 6c 66 52 | 65 6c 61 74 69 76 65 53 |eToSelfR|elativeS|
|00000b50| 44 00 94 05 52 74 6c 4c | 65 6e 67 74 68 53 65 63 |D...RtlL|engthSec|
|00000b60| 75 72 69 74 79 44 65 73 | 63 72 69 70 74 6f 72 00 |urityDes|criptor.|
|00000b70| 03 07 5a 77 51 75 65 72 | 79 49 6e 66 6f 72 6d 61 |..ZwQuer|yInforma|
|00000b80| 74 69 6f 6e 46 69 6c 65 | 00 00 de 04 52 74 6c 41 |tionFile|....RtlA|
|00000b90| 70 70 65 6e 64 55 6e 69 | 63 6f 64 65 53 74 72 69 |ppendUni|codeStri|
|00000ba0| 6e 67 54 6f 53 74 72 69 | 6e 67 00 00 df 04 52 74 |ngToStri|ng....Rt|
|00000bb0| 6c 41 70 70 65 6e 64 55 | 6e 69 63 6f 64 65 54 6f |lAppendU|nicodeTo|
|00000bc0| 53 74 72 69 6e 67 00 00 | fe 02 4b 65 51 75 65 72 |String..|..KeQuer|
|00000bd0| 79 53 79 73 74 65 6d 54 | 69 6d 65 00 91 04 50 73 |ySystemT|ime...Ps|
|00000be0| 47 65 74 50 72 6f 63 65 | 73 73 57 69 6e 33 32 57 |GetProce|ssWin32W|
|00000bf0| 69 6e 64 6f 77 53 74 61 | 74 69 6f 6e 00 00 1c 02 |indowSta|tion....|
|00000c00| 49 6f 47 65 74 54 6f 70 | 4c 65 76 65 6c 49 72 70 |IoGetTop|LevelIrp|
|00000c10| 00 00 8e 02 49 6f 57 4d | 49 57 72 69 74 65 45 76 |....IoWM|IWriteEv|
|00000c20| 65 6e 74 00 81 04 50 73 | 47 65 74 50 72 6f 63 65 |ent...Ps|GetProce|
|00000c30| 73 73 43 72 65 61 74 65 | 54 69 6d 65 51 75 61 64 |ssCreate|TimeQuad|
|00000c40| 50 61 72 74 00 00 79 02 | 49 6f 55 6e 72 65 67 69 |Part..y.|IoUnregi|
|00000c50| 73 74 65 72 50 6c 75 67 | 50 6c 61 79 4e 6f 74 69 |sterPlug|PlayNoti|
|00000c60| 66 69 63 61 74 69 6f 6e | 00 00 43 02 49 6f 52 65 |fication|..C.IoRe|
|00000c70| 67 69 73 74 65 72 50 6c | 75 67 50 6c 61 79 4e 6f |gisterPl|ugPlayNo|
|00000c80| 74 69 66 69 63 61 74 69 | 6f 6e 00 00 09 02 49 6f |tificati|on....Io|
|00000c90| 47 65 74 44 65 76 69 63 | 65 4f 62 6a 65 63 74 50 |GetDevic|eObjectP|
|00000ca0| 6f 69 6e 74 65 72 00 00 | d9 00 45 78 66 49 6e 74 |ointer..|..ExfInt|
|00000cb0| 65 72 6c 6f 63 6b 65 64 | 49 6e 73 65 72 74 48 65 |erlocked|InsertHe|
|00000cc0| 61 64 4c 69 73 74 00 00 | 3f 03 4b 65 54 69 63 6b |adList..|?.KeTick|
|00000cd0| 43 6f 75 6e 74 00 b3 02 | 4b 65 42 75 67 43 68 65 |Count...|KeBugChe|
|00000ce0| 63 6b 45 78 00 00 6e 74 | 6f 73 6b 72 6e 6c 2e 65 |ckEx..nt|oskrnl.e|
|00000cf0| 78 65 00 00 f8 05 52 74 | 6c 55 6e 77 69 6e 64 00 |xe....Rt|lUnwind.|
|00000d00| 01 00 45 78 52 65 6c 65 | 61 73 65 46 61 73 74 4d |..ExRele|aseFastM|
|00000d10| 75 74 65 78 00 00 00 00 | 45 78 41 63 71 75 69 72 |utex....|ExAcquir|
|00000d20| 65 46 61 73 74 4d 75 74 | 65 78 00 00 50 00 4b 65 |eFastMut|ex..P.Ke|
|00000d30| 47 65 74 43 75 72 72 65 | 6e 74 49 72 71 6c 00 00 |GetCurre|ntIrql..|
|00000d40| 48 41 4c 2e 64 6c 6c 00 | cd 00 46 6c 74 55 6e 72 |HAL.dll.|..FltUnr|
|00000d50| 65 67 69 73 74 65 72 46 | 69 6c 74 65 72 00 c4 00 |egisterF|ilter...|
|00000d60| 46 6c 74 53 74 61 72 74 | 46 69 6c 74 65 72 69 6e |FltStart|Filterin|
|00000d70| 67 00 a5 00 46 6c 74 52 | 65 67 69 73 74 65 72 46 |g...FltR|egisterF|
|00000d80| 69 6c 74 65 72 00 8d 00 | 46 6c 74 4f 62 6a 65 63 |ilter...|FltObjec|
|00000d90| 74 44 65 72 65 66 65 72 | 65 6e 63 65 00 00 3a 00 |tDerefer|ence..:.|
|00000da0| 46 6c 74 44 65 74 61 63 | 68 56 6f 6c 75 6d 65 00 |FltDetac|hVolume.|
|00000db0| 4c 00 46 6c 74 46 72 65 | 65 47 65 6e 65 72 69 63 |L.FltFre|eGeneric|
|00000dc0| 57 6f 72 6b 49 74 65 6d | 00 00 0f 00 46 6c 74 41 |WorkItem|....FltA|
|00000dd0| 74 74 61 63 68 56 6f 6c | 75 6d 65 00 54 00 46 6c |ttachVol|ume.T.Fl|
|00000de0| 74 47 65 74 44 69 73 6b | 44 65 76 69 63 65 4f 62 |tGetDisk|DeviceOb|
|00000df0| 6a 65 63 74 00 00 7a 00 | 46 6c 74 47 65 74 56 6f |ject..z.|FltGetVo|
|00000e00| 6c 75 6d 65 50 72 6f 70 | 65 72 74 69 65 73 00 00 |lumeProp|erties..|
|00000e10| 44 00 46 6c 74 45 6e 75 | 6d 65 72 61 74 65 56 6f |D.FltEnu|merateVo|
|00000e20| 6c 75 6d 65 73 00 a1 00 | 46 6c 74 51 75 65 75 65 |lumes...|FltQueue|
|00000e30| 47 65 6e 65 72 69 63 57 | 6f 72 6b 49 74 65 6d 00 |GenericW|orkItem.|
|00000e40| 0c 00 46 6c 74 41 6c 6c | 6f 63 61 74 65 47 65 6e |..FltAll|ocateGen|
|00000e50| 65 72 69 63 57 6f 72 6b | 49 74 65 6d 00 00 9c 00 |ericWork|Item....|
|00000e60| 46 6c 74 51 75 65 72 79 | 49 6e 66 6f 72 6d 61 74 |FltQuery|Informat|
|00000e70| 69 6f 6e 46 69 6c 65 00 | 66 00 46 6c 74 47 65 74 |ionFile.|f.FltGet|
|00000e80| 52 65 71 75 65 73 74 6f | 72 50 72 6f 63 65 73 73 |Requesto|rProcess|
|00000e90| 00 00 9e 00 46 6c 74 51 | 75 65 72 79 56 6f 6c 75 |....FltQ|ueryVolu|
|00000ea0| 6d 65 49 6e 66 6f 72 6d | 61 74 69 6f 6e 00 9d 00 |meInform|ation...|
|00000eb0| 46 6c 74 51 75 65 72 79 | 53 65 63 75 72 69 74 79 |FltQuery|Security|
|00000ec0| 4f 62 6a 65 63 74 00 00 | a7 00 46 6c 74 52 65 6c |Object..|..FltRel|
|00000ed0| 65 61 73 65 43 6f 6e 74 | 65 78 74 00 a9 00 46 6c |easeCont|ext...Fl|
|00000ee0| 74 52 65 6c 65 61 73 65 | 46 69 6c 65 4e 61 6d 65 |tRelease|FileName|
|00000ef0| 49 6e 66 6f 72 6d 61 74 | 69 6f 6e 00 82 00 46 6c |Informat|ion...Fl|
|00000f00| 74 49 73 44 69 72 65 63 | 74 6f 72 79 00 00 57 00 |tIsDirec|tory..W.|
|00000f10| 46 6c 74 47 65 74 46 69 | 6c 65 4e 61 6d 65 49 6e |FltGetFi|leNameIn|
|00000f20| 66 6f 72 6d 61 74 69 6f | 6e 00 71 00 46 6c 74 47 |formatio|n.q.FltG|
|00000f30| 65 74 56 6f 6c 75 6d 65 | 43 6f 6e 74 65 78 74 00 |etVolume|Context.|
|00000f40| 3c 00 46 6c 74 44 6f 43 | 6f 6d 70 6c 65 74 69 6f |<.FltDoC|ompletio|
|00000f50| 6e 50 72 6f 63 65 73 73 | 69 6e 67 57 68 65 6e 53 |nProcess|ingWhenS|
|00000f60| 61 66 65 00 67 00 46 6c | 74 47 65 74 52 65 71 75 |afe.g.Fl|tGetRequ|
|00000f70| 65 73 74 6f 72 50 72 6f | 63 65 73 73 49 64 00 00 |estorPro|cessId..|
|00000f80| 76 00 46 6c 74 47 65 74 | 56 6f 6c 75 6d 65 47 75 |v.FltGet|VolumeGu|
|00000f90| 69 64 4e 61 6d 65 00 00 | 79 00 46 6c 74 47 65 74 |idName..|y.FltGet|
|00000fa0| 56 6f 6c 75 6d 65 4e 61 | 6d 65 00 00 c2 00 46 6c |VolumeNa|me....Fl|
|00000fb0| 74 53 65 74 56 6f 6c 75 | 6d 65 43 6f 6e 74 65 78 |tSetVolu|meContex|
|00000fc0| 74 00 06 00 46 6c 74 41 | 6c 6c 6f 63 61 74 65 43 |t...FltA|llocateC|
|00000fd0| 6f 6e 74 65 78 74 00 00 | 8e 00 46 6c 74 4f 62 6a |ontext..|..FltObj|
|00000fe0| 65 63 74 52 65 66 65 72 | 65 6e 63 65 00 00 46 4c |ectRefer|ence..FL|
|00000ff0| 54 4d 47 52 2e 53 59 53 | 00 00 00 00 00 00 00 00 |TMGR.SYS|........|
+--------+-------------------------+-------------------------+--------+--------+