home *** CD-ROM | disk | FTP | other *** search
/ PC World 2007 May / PCWorld_2007-05_cd.bin / system / processmon / ProcessMonitor.exe / Procmon.exe / BINRES / RCDRIVERNT / INIT < prev    next >
Unknown  |  2007-04-04  |  3.1 KB

open in: MacOS 8.1     |     Win98     |     DOS

view JSON data     |     view as text


This file was not able to be converted.
This format is not currently supported by dexvert.

ConfidenceProgramDetectionMatch TypeSupport
100% file data default



hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 8b ff 55 | 8b ec a1 ec 5e 01 00 85 |.......U|....^...|
|00000010| c0 b9 4e e6 40 bb 74 04 | 3b c1 75 1e 8b 15 68 58 |..N.@.t.|;.u...hX|
|00000020| 01 00 b8 ec 5e 01 00 c1 | e8 08 33 02 a3 ec 5e 01 |....^...|..3...^.|
|00000030| 00 75 07 8b c1 a3 ec 5e | 01 00 f7 d0 a3 f0 5e 01 |.u.....^|......^.|
|00000040| 00 5d e9 3f a2 ff ff cc | 80 63 00 00 00 00 00 00 |.].?....|.c......|
|00000050| 00 00 00 00 86 6c 00 00 | 68 57 00 00 6c 63 00 00 |.....l..|hW..lc..|
|00000060| 00 00 00 00 00 00 00 00 | f0 6c 00 00 54 57 00 00 |........|.l..TW..|
|00000070| 18 63 00 00 00 00 00 00 | 00 00 00 00 de 6e 00 00 |.c......|.....n..|
|00000080| 00 57 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |.W......|........|
|00000090| 00 00 00 00 00 00 00 00 | aa 6e 00 00 86 6e 00 00 |........|.n...n..|
|000000a0| 68 6e 00 00 4c 6e 00 00 | 38 6e 00 00 1c 6e 00 00 |hn..Ln..|8n...n..|
|000000b0| 06 6e 00 00 f4 6d 00 00 | dc 6d 00 00 c6 6d 00 00 |.n...m..|.m...m..|
|000000c0| b0 6d 00 00 9e 6d 00 00 | 82 6d 00 00 6e 6d 00 00 |.m...m..|.m..nm..|
|000000d0| 5c 6d 00 00 34 6d 00 00 | 14 6d 00 00 04 6d 00 00 |\m..4m..|.m...m..|
|000000e0| f8 6c 00 00 be 6e 00 00 | 00 00 00 00 c6 6c 00 00 |.l...n..|.....l..|
|000000f0| b0 6c 00 00 94 6c 00 00 | dc 6c 00 00 00 00 00 00 |.l...l..|.l......|
|00000100| 04 67 00 00 1c 67 00 00 | 34 67 00 00 4e 67 00 00 |.g...g..|4g..Ng..|
|00000110| 64 67 00 00 84 67 00 00 | 9a 67 00 00 ba 67 00 00 |dg...g..|.g...g..|
|00000120| c4 67 00 00 e0 67 00 00 | fa 67 00 00 04 68 00 00 |.g...g..|.g...h..|
|00000130| 1c 68 00 00 2e 68 00 00 | 38 68 00 00 54 68 00 00 |.h...h..|8h..Th..|
|00000140| 64 68 00 00 7a 68 00 00 | 92 68 00 00 a6 68 00 00 |dh..zh..|.h...h..|
|00000150| b8 68 00 00 d6 68 00 00 | f8 68 00 00 1a 69 00 00 |.h...h..|.h...i..|
|00000160| 36 69 00 00 4e 69 00 00 | 58 69 00 00 78 69 00 00 |6i..Ni..|Xi..xi..|
|00000170| 9a 69 00 00 ae 69 00 00 | c2 69 00 00 d2 69 00 00 |.i...i..|.i...i..|
|00000180| e2 69 00 00 ea 66 00 00 | 10 6a 00 00 24 6a 00 00 |.i...f..|.j..$j..|
|00000190| 2e 6a 00 00 4c 6a 00 00 | 5e 6a 00 00 82 6a 00 00 |.j..Lj..|^j...j..|
|000001a0| 98 6a 00 00 b4 6a 00 00 | c2 6a 00 00 d4 6a 00 00 |.j...j..|.j...j..|
|000001b0| f0 6a 00 00 fe 6a 00 00 | 0a 6b 00 00 18 6b 00 00 |.j...j..|.k...k..|
|000001c0| 26 6b 00 00 3a 6b 00 00 | 48 6b 00 00 5a 6b 00 00 |&k..:k..|Hk..Zk..|
|000001d0| 70 6b 00 00 82 6b 00 00 | 92 6b 00 00 a0 6b 00 00 |pk...k..|.k...k..|
|000001e0| ac 6b 00 00 c0 6b 00 00 | e2 6b 00 00 fa 6b 00 00 |.k...k..|.k...k..|
|000001f0| 16 6c 00 00 32 6c 00 00 | 42 6c 00 00 5a 6c 00 00 |.l..2l..|Bl..Zl..|
|00000200| 68 6c 00 00 76 6c 00 00 | da 66 00 00 ca 66 00 00 |hl..vl..|.f...f..|
|00000210| b6 66 00 00 82 66 00 00 | a4 66 00 00 66 66 00 00 |.f...f..|.f..ff..|
|00000220| 52 66 00 00 3a 66 00 00 | 2a 66 00 00 12 66 00 00 |Rf..:f..|*f...f..|
|00000230| fe 65 00 00 ee 65 00 00 | e0 65 00 00 d2 65 00 00 |.e...e..|.e...e..|
|00000240| ba 65 00 00 b0 65 00 00 | 9c 65 00 00 92 65 00 00 |.e...e..|.e...e..|
|00000250| 88 65 00 00 6a 65 00 00 | 4c 65 00 00 38 65 00 00 |.e..je..|Le..8e..|
|00000260| 20 65 00 00 10 65 00 00 | f6 69 00 00 f8 64 00 00 | e...e..|.i...d..|
|00000270| ea 6e 00 00 00 00 00 00 | 3a 00 45 78 41 6c 6c 6f |.n......|:.ExAllo|
|00000280| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |catePool|WithTag.|
|00000290| da 02 50 73 47 65 74 56 | 65 72 73 69 6f 6e 00 00 |..PsGetV|ersion..|
|000002a0| 1b 03 52 74 6c 43 6f 70 | 79 55 6e 69 63 6f 64 65 |..RtlCop|yUnicode|
|000002b0| 53 74 72 69 6e 67 00 00 | c4 01 4b 65 49 6e 69 74 |String..|..KeInit|
|000002c0| 69 61 6c 69 7a 65 45 76 | 65 6e 74 00 5e 00 45 78 |ializeEv|ent.^.Ex|
|000002d0| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 50 6f 70 45 6e |Interloc|kedPopEn|
|000002e0| 74 72 79 53 4c 69 73 74 | 00 00 60 00 45 78 49 6e |trySList|..`.ExIn|
|000002f0| 74 65 72 6c 6f 63 6b 65 | 64 50 75 73 68 45 6e 74 |terlocke|dPushEnt|
|00000300| 72 79 53 4c 69 73 74 00 | 78 04 5f 61 6c 6c 64 69 |rySList.|x._alldi|
|00000310| 76 00 79 04 5f 61 6c 6c | 6d 75 6c 00 db 03 52 74 |v.y._all|mul...Rt|
|00000320| 6c 57 61 6c 6b 46 72 61 | 6d 65 43 68 61 69 6e 00 |lWalkFra|meChain.|
|00000330| a2 04 6d 65 6d 63 70 79 | 00 00 14 02 4b 65 57 61 |..memcpy|....KeWa|
|00000340| 69 74 46 6f 72 53 69 6e | 67 6c 65 4f 62 6a 65 63 |itForSin|gleObjec|
|00000350| 74 00 fb 01 4b 65 53 65 | 74 45 76 65 6e 74 00 00 |t...KeSe|tEvent..|
|00000360| 08 02 4b 65 53 65 74 54 | 69 6d 65 72 00 00 a7 01 |..KeSetT|imer....|
|00000370| 4b 65 43 61 6e 63 65 6c | 54 69 6d 65 72 00 dd 01 |KeCancel|Timer...|
|00000380| 4b 65 51 75 65 72 79 53 | 79 73 74 65 6d 54 69 6d |KeQueryS|ystemTim|
|00000390| 65 00 d8 02 50 73 47 65 | 74 43 75 72 72 65 6e 74 |e...PsGe|tCurrent|
|000003a0| 54 68 72 65 61 64 49 64 | 00 00 a8 01 4b 65 43 6c |ThreadId|....KeCl|
|000003b0| 65 61 72 45 76 65 6e 74 | 00 00 d4 02 50 73 43 72 |earEvent|....PsCr|
|000003c0| 65 61 74 65 53 79 73 74 | 65 6d 54 68 72 65 61 64 |eateSyst|emThread|
|000003d0| 00 00 48 00 45 78 46 72 | 65 65 50 6f 6f 6c 57 69 |..H.ExFr|eePoolWi|
|000003e0| 74 68 54 61 67 00 58 04 | 5a 77 51 75 65 72 79 53 |thTag.X.|ZwQueryS|
|000003f0| 79 73 74 65 6d 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |ystemInf|ormation|
|00000400| 00 00 4d 00 45 78 49 6e | 69 74 69 61 6c 69 7a 65 |..M.ExIn|itialize|
|00000410| 4e 50 61 67 65 64 4c 6f | 6f 6b 61 73 69 64 65 4c |NPagedLo|okasideL|
|00000420| 69 73 74 00 c3 01 4b 65 | 49 6e 69 74 69 61 6c 69 |ist...Ke|Initiali|
|00000430| 7a 65 44 70 63 00 cb 01 | 4b 65 49 6e 69 74 69 61 |zeDpc...|KeInitia|
|00000440| 6c 69 7a 65 54 69 6d 65 | 72 00 41 04 5a 77 4f 70 |lizeTime|r.A.ZwOp|
|00000450| 65 6e 50 72 6f 63 65 73 | 73 00 45 04 5a 77 4f 70 |enProces|s.E.ZwOp|
|00000460| 65 6e 54 68 72 65 61 64 | 00 00 51 04 5a 77 51 75 |enThread|..Q.ZwQu|
|00000470| 65 72 79 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 54 6f |eryInfor|mationTo|
|00000480| 6b 65 6e 00 bd 02 4f 62 | 66 44 65 72 65 66 65 72 |ken...Ob|fDerefer|
|00000490| 65 6e 63 65 4f 62 6a 65 | 63 74 00 00 b5 02 4f 62 |enceObje|ct....Ob|
|000004a0| 4f 70 65 6e 4f 62 6a 65 | 63 74 42 79 50 6f 69 6e |OpenObje|ctByPoin|
|000004b0| 74 65 72 00 e4 02 50 73 | 52 65 66 65 72 65 6e 63 |ter...Ps|Referenc|
|000004c0| 65 50 72 69 6d 61 72 79 | 54 6f 6b 65 6e 00 3a 01 |ePrimary|Token.:.|
|000004d0| 49 6f 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |IoGetCur|rentProc|
|000004e0| 65 73 73 00 e3 02 50 73 | 52 65 66 65 72 65 6e 63 |ess...Ps|Referenc|
|000004f0| 65 49 6d 70 65 72 73 6f | 6e 61 74 69 6f 6e 54 6f |eImperso|nationTo|
|00000500| 6b 65 6e 00 b4 01 4b 65 | 47 65 74 43 75 72 72 65 |ken...Ke|GetCurre|
|00000510| 6e 74 54 68 72 65 61 64 | 00 00 fe 02 52 74 6c 41 |ntThread|....RtlA|
|00000520| 6e 73 69 53 74 72 69 6e | 67 54 6f 55 6e 69 63 6f |nsiStrin|gToUnico|
|00000530| 64 65 53 74 72 69 6e 67 | 00 00 b0 04 73 74 72 6e |deString|....strn|
|00000540| 63 70 79 00 b8 02 4f 62 | 52 65 66 65 72 65 6e 63 |cpy...Ob|Referenc|
|00000550| 65 4f 62 6a 65 63 74 42 | 79 48 61 6e 64 6c 65 00 |eObjectB|yHandle.|
|00000560| 0e 02 4b 65 55 6e 73 74 | 61 63 6b 44 65 74 61 63 |..KeUnst|ackDetac|
|00000570| 68 50 72 6f 63 65 73 73 | 00 00 a3 04 6d 65 6d 6d |hProcess|....memm|
|00000580| 6f 76 65 00 0a 02 4b 65 | 53 74 61 63 6b 41 74 74 |ove...Ke|StackAtt|
|00000590| 61 63 68 50 72 6f 63 65 | 73 73 00 00 68 00 45 78 |achProce|ss..h.Ex|
|000005a0| 51 75 65 75 65 57 6f 72 | 6b 49 74 65 6d 00 1f 04 |QueueWor|kItem...|
|000005b0| 5a 77 43 6c 6f 73 65 00 | 50 04 5a 77 51 75 65 72 |ZwClose.|P.ZwQuer|
|000005c0| 79 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 50 72 6f 63 |yInforma|tionProc|
|000005d0| 65 73 73 00 81 03 52 74 | 6c 4c 65 6e 67 74 68 53 |ess...Rt|lLengthS|
|000005e0| 69 64 00 00 42 04 5a 77 | 4f 70 65 6e 50 72 6f 63 |id..B.Zw|OpenProc|
|000005f0| 65 73 73 54 6f 6b 65 6e | 00 00 d7 02 50 73 47 65 |essToken|....PsGe|
|00000600| 74 43 75 72 72 65 6e 74 | 50 72 6f 63 65 73 73 49 |tCurrent|ProcessI|
|00000610| 64 00 d1 01 4b 65 49 6e | 73 65 72 74 51 75 65 75 |d...KeIn|sertQueu|
|00000620| 65 41 70 63 00 00 c1 01 | 4b 65 49 6e 69 74 69 61 |eApc....|KeInitia|
|00000630| 6c 69 7a 65 41 70 63 00 | eb 02 50 73 53 65 74 4c |lizeApc.|..PsSetL|
|00000640| 6f 61 64 49 6d 61 67 65 | 4e 6f 74 69 66 79 52 6f |oadImage|NotifyRo|
|00000650| 75 74 69 6e 65 00 e8 02 | 50 73 53 65 74 43 72 65 |utine...|PsSetCre|
|00000660| 61 74 65 50 72 6f 63 65 | 73 73 4e 6f 74 69 66 79 |ateProce|ssNotify|
|00000670| 52 6f 75 74 69 6e 65 00 | e9 02 50 73 53 65 74 43 |Routine.|..PsSetC|
|00000680| 72 65 61 74 65 54 68 72 | 65 61 64 4e 6f 74 69 66 |reateThr|eadNotif|
|00000690| 79 52 6f 75 74 69 6e 65 | 00 00 43 02 4d 6d 47 65 |yRoutine|..C.MmGe|
|000006a0| 74 53 79 73 74 65 6d 52 | 6f 75 74 69 6e 65 41 64 |tSystemR|outineAd|
|000006b0| 64 72 65 73 73 00 68 03 | 52 74 6c 49 6e 69 74 55 |dress.h.|RtlInitU|
|000006c0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 af 04 |nicodeSt|ring....|
|000006d0| 73 74 72 6e 63 6d 70 00 | 51 02 4d 6d 4d 61 70 4c |strncmp.|Q.MmMapL|
|000006e0| 6f 63 6b 65 64 50 61 67 | 65 73 53 70 65 63 69 66 |ockedPag|esSpecif|
|000006f0| 79 43 61 63 68 65 00 00 | 01 03 52 74 6c 41 70 70 |yCache..|..RtlApp|
|00000700| 65 6e 64 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |endUnico|deString|
|00000710| 54 6f 53 74 72 69 6e 67 | 00 00 7f 01 49 6f 53 65 |ToString|....IoSe|
|00000720| 74 54 6f 70 4c 65 76 65 | 6c 49 72 70 00 00 49 01 |tTopLeve|lIrp..I.|
|00000730| 49 6f 47 65 74 54 6f 70 | 4c 65 76 65 6c 49 72 70 |IoGetTop|LevelIrp|
|00000740| 00 00 cf 02 50 72 6f 62 | 65 46 6f 72 52 65 61 64 |....Prob|eForRead|
|00000750| 00 00 d0 02 50 72 6f 62 | 65 46 6f 72 57 72 69 74 |....Prob|eForWrit|
|00000760| 65 00 4b 00 45 78 47 65 | 74 50 72 65 76 69 6f 75 |e.K.ExGe|tPreviou|
|00000770| 73 4d 6f 64 65 00 11 03 | 52 74 6c 43 6f 6d 70 61 |sMode...|RtlCompa|
|00000780| 72 65 55 6e 69 63 6f 64 | 65 53 74 72 69 6e 67 00 |reUnicod|eString.|
|00000790| b6 02 4f 62 51 75 65 72 | 79 4e 61 6d 65 53 74 72 |..ObQuer|yNameStr|
|000007a0| 69 6e 67 00 a4 04 6d 65 | 6d 73 65 74 00 00 49 00 |ing...me|mset..I.|
|000007b0| 45 78 46 72 65 65 54 6f | 50 61 67 65 64 4c 6f 6f |ExFreeTo|PagedLoo|
|000007c0| 6b 61 73 69 64 65 4c 69 | 73 74 00 00 e9 01 4b 65 |kasideLi|st....Ke|
|000007d0| 52 65 6c 65 61 73 65 4d | 75 74 65 78 00 00 36 00 |ReleaseM|utex..6.|
|000007e0| 45 78 41 6c 6c 6f 63 61 | 74 65 46 72 6f 6d 50 61 |ExAlloca|teFromPa|
|000007f0| 67 65 64 4c 6f 6f 6b 61 | 73 69 64 65 4c 69 73 74 |gedLooka|sideList|
|00000800| 00 00 69 02 4d 6d 55 6e | 6d 61 70 4c 6f 63 6b 65 |..i.MmUn|mapLocke|
|00000810| 64 50 61 67 65 73 00 00 | 36 02 4d 6d 42 75 69 6c |dPages..|6.MmBuil|
|00000820| 64 4d 64 6c 46 6f 72 4e | 6f 6e 50 61 67 65 64 50 |dMdlForN|onPagedP|
|00000830| 6f 6f 6c 00 38 02 4d 6d | 43 72 65 61 74 65 4d 64 |ool.8.Mm|CreateMd|
|00000840| 6c 00 37 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |l.7.ExAl|locatePo|
|00000850| 6f 6c 00 00 f7 01 4b 65 | 53 65 72 76 69 63 65 44 |ol....Ke|ServiceD|
|00000860| 65 73 63 72 69 70 74 6f | 72 54 61 62 6c 65 00 00 |escripto|rTable..|
|00000870| 71 04 5a 77 55 6e 6c 6f | 61 64 4b 65 79 00 39 04 |q.ZwUnlo|adKey.9.|
|00000880| 5a 77 4c 6f 61 64 4b 65 | 79 00 33 04 5a 77 46 6c |ZwLoadKe|y.3.ZwFl|
|00000890| 75 73 68 4b 65 79 00 00 | 25 04 5a 77 43 72 65 61 |ushKey..|%.ZwCrea|
|000008a0| 74 65 4b 65 79 00 2b 04 | 5a 77 44 65 6c 65 74 65 |teKey.+.|ZwDelete|
|000008b0| 56 61 6c 75 65 4b 65 79 | 00 00 2a 04 5a 77 44 65 |ValueKey|..*.ZwDe|
|000008c0| 6c 65 74 65 4b 65 79 00 | 30 04 5a 77 45 6e 75 6d |leteKey.|0.ZwEnum|
|000008d0| 65 72 61 74 65 4b 65 79 | 00 00 31 04 5a 77 45 6e |erateKey|..1.ZwEn|
|000008e0| 75 6d 65 72 61 74 65 56 | 61 6c 75 65 4b 65 79 00 |umerateV|alueKey.|
|000008f0| 59 04 5a 77 51 75 65 72 | 79 56 61 6c 75 65 4b 65 |Y.ZwQuer|yValueKe|
|00000900| 79 00 6d 04 5a 77 53 65 | 74 56 61 6c 75 65 4b 65 |y.m.ZwSe|tValueKe|
|00000910| 79 00 53 04 5a 77 51 75 | 65 72 79 4b 65 79 00 00 |y.S.ZwQu|eryKey..|
|00000920| 40 04 5a 77 4f 70 65 6e | 4b 65 79 00 c7 01 4b 65 |@.ZwOpen|Key...Ke|
|00000930| 49 6e 69 74 69 61 6c 69 | 7a 65 4d 75 74 65 78 00 |Initiali|zeMutex.|
|00000940| 4e 00 45 78 49 6e 69 74 | 69 61 6c 69 7a 65 50 61 |N.ExInit|ializePa|
|00000950| 67 65 64 4c 6f 6f 6b 61 | 73 69 64 65 4c 69 73 74 |gedLooka|sideList|
|00000960| 00 00 54 03 52 74 6c 46 | 72 65 65 55 6e 69 63 6f |..T.RtlF|reeUnico|
|00000970| 64 65 53 74 72 69 6e 67 | 00 00 3d 01 49 6f 47 65 |deString|..=.IoGe|
|00000980| 74 44 65 76 69 63 65 4f | 62 6a 65 63 74 50 6f 69 |tDeviceO|bjectPoi|
|00000990| 6e 74 65 72 00 00 7e 01 | 49 6f 53 65 74 54 68 72 |nter..~.|IoSetThr|
|000009a0| 65 61 64 48 61 72 64 45 | 72 72 6f 72 4d 6f 64 65 |eadHardE|rrorMode|
|000009b0| 00 00 24 04 5a 77 43 72 | 65 61 74 65 46 69 6c 65 |..$.ZwCr|eateFile|
|000009c0| 00 00 65 04 5a 77 53 65 | 74 49 6e 66 6f 72 6d 61 |..e.ZwSe|tInforma|
|000009d0| 74 69 6f 6e 46 69 6c 65 | 00 00 75 04 5a 77 57 72 |tionFile|..u.ZwWr|
|000009e0| 69 74 65 46 69 6c 65 00 | 0d 02 4b 65 54 69 63 6b |iteFile.|..KeTick|
|000009f0| 43 6f 75 6e 74 00 a6 01 | 4b 65 42 75 67 43 68 65 |Count...|KeBugChe|
|00000a00| 63 6b 45 78 00 00 6e 74 | 6f 73 6b 72 6e 6c 2e 65 |ckEx..nt|oskrnl.e|
|00000a10| 78 65 00 00 46 00 4b 65 | 51 75 65 72 79 50 65 72 |xe..F.Ke|QueryPer|
|00000a20| 66 6f 72 6d 61 6e 63 65 | 43 6f 75 6e 74 65 72 00 |formance|Counter.|
|00000a30| 01 00 45 78 52 65 6c 65 | 61 73 65 46 61 73 74 4d |..ExRele|aseFastM|
|00000a40| 75 74 65 78 00 00 00 00 | 45 78 41 63 71 75 69 72 |utex....|ExAcquir|
|00000a50| 65 46 61 73 74 4d 75 74 | 65 78 00 00 44 00 4b 65 |eFastMut|ex..D.Ke|
|00000a60| 47 65 74 43 75 72 72 65 | 6e 74 49 72 71 6c 00 00 |GetCurre|ntIrql..|
|00000a70| 48 41 4c 2e 64 6c 6c 00 | 1b 00 46 6c 74 43 6c 6f |HAL.dll.|..FltClo|
|00000a80| 73 65 00 00 22 00 46 6c | 74 43 72 65 61 74 65 46 |se..".Fl|tCreateF|
|00000a90| 69 6c 65 00 86 00 46 6c | 74 52 65 6c 65 61 73 65 |ile...Fl|tRelease|
|00000aa0| 46 69 6c 65 4e 61 6d 65 | 49 6e 66 6f 72 6d 61 74 |FileName|Informat|
|00000ab0| 69 6f 6e 00 42 00 46 6c | 74 47 65 74 44 65 73 74 |ion.B.Fl|tGetDest|
|00000ac0| 69 6e 61 74 69 6f 6e 46 | 69 6c 65 4e 61 6d 65 49 |inationF|ileNameI|
|00000ad0| 6e 66 6f 72 6d 61 74 69 | 6f 6e 00 00 2e 00 46 6c |nformati|on....Fl|
|00000ae0| 74 44 65 74 61 63 68 56 | 6f 6c 75 6d 65 00 5f 00 |tDetachV|olume._.|
|00000af0| 46 6c 74 47 65 74 56 6f | 6c 75 6d 65 4e 61 6d 65 |FltGetVo|lumeName|
|00000b00| 00 00 46 00 46 6c 74 47 | 65 74 46 69 6c 65 4e 61 |..F.FltG|etFileNa|
|00000b10| 6d 65 49 6e 66 6f 72 6d | 61 74 69 6f 6e 00 8c 00 |meInform|ation...|
|00000b20| 46 6c 74 53 65 6e 64 4d | 65 73 73 61 67 65 00 00 |FltSendM|essage..|
|00000b30| 1c 00 46 6c 74 43 6c 6f | 73 65 43 6c 69 65 6e 74 |..FltClo|seClient|
|00000b40| 50 6f 72 74 00 00 a0 00 | 46 6c 74 55 6e 72 65 67 |Port....|FltUnreg|
|00000b50| 69 73 74 65 72 46 69 6c | 74 65 72 00 6d 00 46 6c |isterFil|ter.m.Fl|
|00000b60| 74 4f 62 6a 65 63 74 44 | 65 72 65 66 65 72 65 6e |tObjectD|ereferen|
|00000b70| 63 65 00 00 0a 00 46 6c | 74 41 74 74 61 63 68 56 |ce....Fl|tAttachV|
|00000b80| 6f 6c 75 6d 65 00 37 00 | 46 6c 74 45 6e 75 6d 65 |olume.7.|FltEnume|
|00000b90| 72 61 74 65 56 6f 6c 75 | 6d 65 73 00 1d 00 46 6c |rateVolu|mes...Fl|
|00000ba0| 74 43 6c 6f 73 65 43 6f | 6d 6d 75 6e 69 63 61 74 |tCloseCo|mmunicat|
|00000bb0| 69 6f 6e 50 6f 72 74 00 | 98 00 46 6c 74 53 74 61 |ionPort.|..FltSta|
|00000bc0| 72 74 46 69 6c 74 65 72 | 69 6e 67 00 3e 00 46 6c |rtFilter|ing.>.Fl|
|00000bd0| 74 46 72 65 65 53 65 63 | 75 72 69 74 79 44 65 73 |tFreeSec|urityDes|
|00000be0| 63 72 69 70 74 6f 72 00 | 21 00 46 6c 74 43 72 65 |criptor.|!.FltCre|
|00000bf0| 61 74 65 43 6f 6d 6d 75 | 6e 69 63 61 74 69 6f 6e |ateCommu|nication|
|00000c00| 50 6f 72 74 00 00 0c 00 | 46 6c 74 42 75 69 6c 64 |Port....|FltBuild|
|00000c10| 44 65 66 61 75 6c 74 53 | 65 63 75 72 69 74 79 44 |DefaultS|ecurityD|
|00000c20| 65 73 63 72 69 70 74 6f | 72 00 82 00 46 6c 74 52 |escripto|r...FltR|
|00000c30| 65 67 69 73 74 65 72 46 | 69 6c 74 65 72 00 36 00 |egisterF|ilter.6.|
|00000c40| 46 6c 74 45 6e 75 6d 65 | 72 61 74 65 56 6f 6c 75 |FltEnume|rateVolu|
|00000c50| 6d 65 49 6e 66 6f 72 6d | 61 74 69 6f 6e 00 46 4c |meInform|ation.FL|
|00000c60| 54 4d 47 52 2e 53 59 53 | 00 00 cb 03 52 74 6c 55 |TMGR.SYS|....RtlU|
|00000c70| 6e 77 69 6e 64 00 00 00 | 00 00 00 00 00 00 00 00 |nwind...|........|
+--------+-------------------------+-------------------------+--------+--------+