/ Maximum CD 2009 May / maximum-cd-2009-05.iso / DiscContents / antivir_workstation_winu_en_h.exe / basic / xp / avgntflt.sys / INIT

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 00 8b ff | 55 8b ec 81 ec 9c 00 00 |........|U.......|
|00000010| 00 a1 20 91 01 00 8a 00 | 53 68 48 b3 01 00 0f be |.. .....|ShH.....|
|00000020| c0 68 44 b3 01 00 33 db | 68 40 b3 01 00 89 5d e8 |.hD...3.|h@....].|
|00000030| a3 4c b3 01 00 e8 cc 17 | ff ff 83 3d 40 b3 01 00 |.L......|...=@...|
|00000040| 05 73 0a b8 bb 00 00 c0 | e9 e1 06 00 00 57 68 ae |.s......|.....Wh.|
|00000050| 09 02 00 e8 b6 6e ff ff | 68 92 09 02 00 a3 70 b3 |.....n..|h.....p.|
|00000060| 01 00 e8 a7 6e ff ff 68 | 7c 09 02 00 a3 74 b3 01 |....n..h||....t..|
|00000070| 00 e8 98 6e ff ff 68 6a | 09 02 00 a3 78 b3 01 00 |...n..hj|....x...|
|00000080| e8 89 6e ff ff 68 50 09 | 02 00 a3 6c b3 01 00 e8 |..n..hP.|...l....|
|00000090| 7a 6e ff ff 68 34 09 02 | 00 a3 64 b3 01 00 e8 6b |zn..h4..|..d....k|
|000000a0| 6e ff ff a3 68 b3 01 00 | 68 f6 08 02 00 8d 45 f0 |n...h...|h.....E.|
|000000b0| 50 ff 15 8c 91 01 00 8d | 45 f0 50 ff 15 1c 91 01 |P.......|E.P.....|
|000000c0| 00 83 3d 40 b3 01 00 06 | a3 88 b3 01 00 72 49 39 |..=@....|.....rI9|
|000000d0| 1d 70 b3 01 00 74 37 39 | 1d 74 b3 01 00 74 2f 39 |.p...t79|.t...t/9|
|000000e0| 1d 78 b3 01 00 74 27 3b | c3 74 23 39 1d 6c b3 01 |.x...t';|.t#9.l..|
|000000f0| 00 74 1b 39 1d 64 b3 01 | 00 74 13 39 1d 68 b3 01 |.t.9.d..|.t.9.h..|
|00000100| 00 74 0b 33 ff 47 89 3d | 50 b3 01 00 eb 15 b8 0d |.t.3.G.=|P.......|
|00000110| 00 00 c0 e9 15 06 00 00 | 33 ff 47 39 1d 50 b3 01 |........|3.G9.P..|
|00000120| 00 74 2d 68 de 08 02 00 | e8 e1 6d ff ff 68 c4 08 |.t-h....|..m..h..|
|00000130| 02 00 a3 84 b3 01 00 e8 | d2 6d ff ff 68 aa 08 02 |........|.m..h...|
|00000140| 00 a3 80 b3 01 00 e8 c3 | 6d ff ff a3 7c b3 01 00 |........|m...|...|
|00000150| ff 15 18 91 01 00 6a 44 | 53 68 f8 b2 01 00 a3 20 |......jD|Sh..... |
|00000160| b7 01 00 e8 ce 54 ff ff | 83 c4 0c ff 75 0c 89 3d |.....T..|....u..=|
|00000170| 24 b3 01 00 e8 29 18 ff | ff a1 f8 b2 01 00 09 05 |$....)..|........|
|00000180| 0c a0 01 00 39 1d 18 b3 | 01 00 a1 fc b2 01 00 a3 |....9...|........|
|00000190| ec b2 01 00 75 0c c7 05 | 18 b3 01 00 ff 03 00 00 |....u...|........|
|000001a0| eb 06 ff 0d 18 b3 01 00 | a1 20 b3 01 00 3b c3 74 |........|. ...;.t|
|000001b0| 05 a3 08 a0 01 00 83 f8 | ff 75 06 89 1d 08 a0 01 |........|.u......|
|000001c0| 00 56 8b 35 c0 91 01 00 | 53 57 89 3d 00 b7 01 00 |.V.5....|SW.=....|
|000001d0| 68 0c b7 01 00 89 1d 04 | b7 01 00 89 1d 08 b7 01 |h.......|........|
|000001e0| 00 ff d6 b8 f8 b5 01 00 | a3 fc b5 01 00 a3 f8 b5 |........|........|
|000001f0| 01 00 b8 c0 b7 01 00 a3 | c4 b7 01 00 a3 c0 b7 01 |........|........|
|00000200| 00 e8 46 29 ff ff 68 90 | 08 02 00 e8 fe 6c ff ff |..F)..h.|.....l..|
|00000210| 68 80 08 02 00 a3 8c b3 | 01 00 e8 ef 6c ff ff 53 |h.......|....l..S|
|00000220| 57 a3 60 b3 01 00 68 6c | b6 01 00 89 3d 60 b6 01 |W.`...hl|....=`..|
|00000230| 00 89 1d 64 b6 01 00 89 | 1d 68 b6 01 00 ff d6 53 |...d....|.h.....S|
|00000240| b8 00 b6 01 00 53 68 a0 | b6 01 00 a3 04 b6 01 00 |.....Sh.|........|
|00000250| a3 00 b6 01 00 ff d6 89 | 5d 0c 8b 45 0c 53 57 8d |........|]..E.SW.|
|00000260| 80 c0 b9 01 00 50 ff d6 | 8b 45 0c 57 53 8d 80 20 |.....P..|.E.WS.. |
|00000270| b8 01 00 50 ff d6 83 45 | 0c 10 81 7d 0c 00 01 00 |...P...E|...}....|
|00000280| 00 72 d7 e8 08 54 ff ff | 3b c7 75 07 e8 ab 54 ff |.r...T..|;.u...T.|
|00000290| ff eb 13 e8 e1 54 ff ff | 3b c7 75 14 e8 9b 54 ff |.....T..|;.u...T.|
|000002a0| ff e8 ea 55 ff ff b8 a0 | 00 00 c0 e9 7c 04 00 00 |...U....|....|...|
|000002b0| 68 04 a0 01 00 68 46 08 | 02 00 68 dc b2 01 00 e8 |h....hF.|..h.....|
|000002c0| 00 0f ff ff 39 1d dc b2 | 01 00 0f 84 a0 02 00 00 |....9...|........|
|000002d0| 83 3d 04 a0 01 00 ff 0f | 84 93 02 00 00 68 60 18 |.=......|.....h`.|
|000002e0| 00 00 53 68 40 bb 01 00 | e8 49 53 ff ff 8b 3d 14 |..Sh@...|.IS...=.|
|000002f0| 91 01 00 83 c4 0c 68 a0 | d3 01 00 ff d7 68 20 b6 |......h.|.....h .|
|00000300| 01 00 ff d7 68 40 b7 01 | 00 ff d7 68 c0 b6 01 00 |....h@..|...h....|
|00000310| ff d7 ff 35 50 b3 01 00 | e8 be 5b ff ff 68 e0 b7 |...5P...|..[..h..|
|00000320| 01 00 ff d7 33 c0 bf b0 | b6 01 00 ab 53 ab 6a 01 |....3...|....S.j.|
|00000330| bf e0 b5 01 00 57 89 1d | b8 b7 01 00 ff d6 57 ff |.....W..|......W.|
|00000340| 15 10 91 01 00 53 68 62 | 11 01 00 68 44 11 01 00 |.....Shb|...hD...|
|00000350| 68 20 11 01 00 68 80 b7 | 01 00 ff 15 9c 91 01 00 |h ...h..|........|
|00000360| e8 3d 12 ff ff 68 84 b6 | 01 00 68 88 93 01 00 ff |.=...h..|..h.....|
|00000370| 75 08 a3 c4 b2 01 00 e8 | 86 6b ff ff 8b f8 3b fb |u.......|.k....;.|
|00000380| 0f 8c ef 01 00 00 8b 35 | 8c 91 01 00 68 0c 08 02 |.......5|....h...|
|00000390| 00 8d 45 f0 50 ff d6 68 | 98 b3 01 00 53 68 00 01 |..E.P..h|....Sh..|
|000003a0| 00 00 6a 08 8d 45 f0 50 | 53 ff 75 08 ff 15 0c 91 |..j..E.P|S.u.....|
|000003b0| 01 00 8b f8 3b fb 0f 8c | b9 01 00 00 68 e2 07 02 |....;...|....h...|
|000003c0| 00 8d 45 b4 50 ff d6 8d | 45 f0 50 8d 45 b4 50 ff |..E.P...|E.P.E.P.|
|000003d0| 15 08 91 01 00 8b f8 3b | fb 0f 8c 96 01 00 00 8b |.......;|........|
|000003e0| 7d 08 6a 1c 59 b8 96 f2 | 01 00 83 c7 38 f3 ab 8b |}.j.Y...|....8...|
|000003f0| 45 08 c7 40 70 7e 55 01 | 00 c7 40 28 20 a0 01 00 |E..@p~U.|..@( ...|
|00000400| 68 ce 07 02 00 8d 45 f0 | 50 c7 45 e8 01 00 00 00 |h.....E.|P.E.....|
|00000410| ff d6 68 01 00 1f 00 8d | 45 ec 50 e8 d6 6a ff ff |..h.....|E.P..j..|
|00000420| 8b f8 3b fb 0f 8c a0 02 | 00 00 6a 01 68 fc 17 01 |..;.....|..j.h...|
|00000430| 00 68 7a e9 01 00 8d 45 | f0 89 45 c4 8b 45 ec 68 |.hz....E|..E..E.h|
|00000440| 06 e0 01 00 53 89 45 cc | 8d 45 bc 50 68 88 b6 01 |....S.E.|.E.Ph...|
|00000450| 00 ff 35 84 b6 01 00 c7 | 45 bc 18 00 00 00 89 5d |..5.....|E......]|
|00000460| c0 c7 45 c8 40 02 00 00 | 89 5d d0 e8 7a 6a ff ff |..E.@...|.]..zj..|
|00000470| ff 75 ec 8b f8 e8 64 6a | ff ff 3b fb 0f 8c 48 02 |.u....dj|..;...H.|
|00000480| 00 00 ff 35 84 b6 01 00 | e8 45 6a ff ff 8b f8 3b |...5....|.Ej....;|
|00000490| fb 0f 8c 28 02 00 00 a1 | 4c b3 01 00 03 c0 3b c3 |...(....|L.....;.|
|000004a0| a3 b0 a0 01 00 75 08 6a | 02 58 a3 b0 a0 01 00 83 |.....u.j|.X......|
|000004b0| f8 08 76 08 6a 08 58 a3 | b0 a0 01 00 3b c3 8b 35 |..v.j.X.|....;..5|
|000004c0| 04 91 01 00 89 5d 0c bf | ff ff 1f 00 76 32 c7 45 |.....]..|....v2.E|
|000004d0| fc b8 a0 01 00 ff 75 0c | 68 1e 4d 01 00 53 53 53 |......u.|h.M..SSS|
|000004e0| 57 ff 75 fc ff d6 85 c0 | 0f 85 82 00 00 00 ff 45 |W.u.....|.......E|
|000004f0| 0c 8b 45 0c 83 45 fc 04 | 3b 05 b0 a0 01 00 72 d5 |..E..E..|;.....r.|
|00000500| ff 35 dc b2 01 00 68 f4 | 11 01 00 53 53 53 57 68 |.5....h.|...SSSWh|
|00000510| c0 b2 01 00 ff d6 85 c0 | 75 56 53 68 e0 b2 01 00 |........|uVSh....|
|00000520| 53 53 57 ff 35 c0 b2 01 | 00 ff 15 00 91 01 00 85 |SSW.5...|........|
|00000530| c0 74 56 53 53 ff 35 dc | b2 01 00 c7 05 a8 b2 01 |.tVSS.5.|........|
|00000540| 00 01 00 00 00 ff 15 84 | 91 01 00 53 53 53 53 68 |........|...SSSSh|
|00000550| e0 b5 01 00 ff 15 6c 91 | 01 00 ff 35 c0 b2 01 00 |......l.|...5....|
|00000560| ff 15 44 91 01 00 68 e8 | 03 00 00 e8 1e 0c ff ff |..D...h.|........|
|00000570| bf a0 00 00 c0 53 53 68 | a0 b6 01 00 ff 15 84 91 |.....SSh|........|
|00000580| 01 00 6a 0a e9 53 01 00 | 00 ff 35 c0 b2 01 00 ff |..j..S..|..5.....|
|00000590| 15 44 91 01 00 8d 45 fc | 50 8d 45 f8 50 68 b0 07 |.D....E.|P.E.Ph..|
|000005a0| 02 00 c6 05 b4 a0 01 00 | 01 89 5d f8 89 5d fc e8 |........|..]..]..|
|000005b0| 63 67 ff ff 85 c0 be 1a | 3a 01 00 0f 8c cf 00 00 |cg......|:.......|
|000005c0| 00 39 5d f8 0f 84 c6 00 | 00 00 6a 0c 8d 45 d4 50 |.9].....|..j..E.P|
|000005d0| 6a 28 8d 45 8c 50 ff 75 | fc 89 75 a8 68 c4 24 22 |j(.E.P.u|..u.h.$"|
|000005e0| 00 89 5d a4 c7 45 ac a4 | 18 01 00 c7 45 9c e0 ee |..]..E..|....E...|
|000005f0| e1 ac c7 45 a0 af ac 5b | 0e e8 4b 67 ff ff 85 c0 |...E...[|..Kg....|
|00000600| 7c 1e 8b 45 dc a3 38 a1 | 01 00 8b 45 d4 a3 40 a1 ||..E..8.|...E..@.|
|00000610| 01 00 8b 45 d8 a3 44 a1 | 01 00 88 1d b4 a0 01 00 |...E..D.|........|
|00000620| 39 1d 34 b3 01 00 74 5f | 6a 0a 59 33 c0 6a 08 8d |9.4...t_|j.Y3.j..|
|00000630| bd 64 ff ff ff f3 ab 8d | 45 e0 50 6a 28 8d 85 64 |.d......|E.Pj(..d|
|00000640| ff ff ff 50 ff 75 fc c7 | 45 84 24 19 01 00 68 cc |...P.u..|E.$...h.|
|00000650| 24 22 00 c7 45 80 b4 3b | 01 00 c7 85 74 ff ff ff |$"..E..;|....t...|
|00000660| e3 42 e1 ac c7 85 78 ff | ff ff af a3 9b 0e e8 d6 |.B....x.|........|
|00000670| 66 ff ff 85 c0 7c 10 8b | 45 e4 a3 3c a1 01 00 8b |f....|..|E..<....|
|00000680| 45 e0 a3 48 a1 01 00 8b | 4d f8 ff 15 e4 90 01 00 |E..H....|M.......|
|00000690| 38 1d b4 a0 01 00 74 08 | 53 56 ff 15 e0 90 01 00 |8.....t.|SV......|
|000006a0| 39 1d 04 b3 01 00 8b 45 | 08 a3 f0 b2 01 00 75 0b |9......E|......u.|
|000006b0| 50 68 76 07 02 00 e8 54 | 5d ff ff 33 c0 eb 6d ff |Phv....T|]..3..m.|
|000006c0| 35 88 b6 01 00 e8 9c 67 | ff ff ff 35 84 b6 01 00 |5......g|...5....|
|000006d0| e8 85 67 ff ff e9 9b fe | ff ff 6a 64 e8 ad 0a ff |..g.....|..jd....|
|000006e0| ff 39 1d a0 a0 01 00 75 | f1 6a 0a e8 9e 0a ff ff |.9.....u|.j......|
|000006f0| 39 5d e8 74 05 e8 d8 e9 | ff ff 6a 01 68 1a 3a 01 |9].t....|..j.h.:.|
|00000700| 00 ff 15 e0 90 01 00 e8 | 30 50 ff ff e8 7f 51 ff |........|0P....Q.|
|00000710| ff 39 1d dc b2 01 00 74 | 11 a1 04 a0 01 00 83 f8 |.9.....t|........|
|00000720| ff 74 07 50 ff 15 44 91 | 01 00 8b c7 5e 5f 5b c9 |.t.P..D.|....^_[.|
|00000730| c2 08 00 cc cc cc cc cc | 8b ff 55 8b ec a1 90 a0 |........|..U.....|
|00000740| 01 00 85 c0 b9 4e e6 40 | bb 74 04 3b c1 75 1a a1 |.....N.@|.t.;.u..|
|00000750| 38 91 01 00 8b 00 35 90 | a0 01 00 a3 90 a0 01 00 |8.....5.|........|
|00000760| 75 07 8b c1 a3 90 a0 01 | 00 f7 d0 a3 94 a0 01 00 |u.......|........|
|00000770| 5d e9 90 f8 ff ff 41 00 | 56 00 47 00 4e 00 54 00 |].....A.|V.G.N.T.|
|00000780| 46 00 4c 00 54 00 20 00 | 73 00 75 00 63 00 63 00 |F.L.T. .|s.u.c.c.|
|00000790| 65 00 73 00 73 00 66 00 | 75 00 6c 00 6c 00 79 00 |e.s.s.f.|u.l.l.y.|
|000007a0| 20 00 6c 00 6f 00 61 00 | 64 00 65 00 64 00 00 00 | .l.o.a.|d.e.d...|
|000007b0| 5c 00 44 00 65 00 76 00 | 69 00 63 00 65 00 5c 00 |\.D.e.v.|i.c.e.\.|
|000007c0| 61 00 76 00 69 00 70 00 | 62 00 62 00 00 00 5c 00 |a.v.i.p.|b.b...\.|
|000007d0| 41 00 56 00 47 00 50 00 | 6f 00 72 00 74 00 31 00 |A.V.G.P.|o.r.t.1.|
|000007e0| 00 00 5c 00 44 00 6f 00 | 73 00 44 00 65 00 76 00 |..\.D.o.|s.D.e.v.|
|000007f0| 69 00 63 00 65 00 73 00 | 5c 00 61 00 76 00 67 00 |i.c.e.s.|\.a.v.g.|
|00000800| 6e 00 74 00 66 00 6c 00 | 74 00 00 00 5c 00 46 00 |n.t.f.l.|t...\.F.|
|00000810| 69 00 6c 00 65 00 53 00 | 79 00 73 00 74 00 65 00 |i.l.e.S.|y.s.t.e.|
|00000820| 6d 00 5c 00 46 00 69 00 | 6c 00 74 00 65 00 72 00 |m.\.F.i.|l.t.e.r.|
|00000830| 73 00 5c 00 61 00 76 00 | 67 00 6e 00 74 00 66 00 |s.\.a.v.|g.n.t.f.|
|00000840| 6c 00 74 00 00 00 5c 00 | 42 00 61 00 73 00 65 00 |l.t...\.|B.a.s.e.|
|00000850| 4e 00 61 00 6d 00 65 00 | 64 00 4f 00 62 00 6a 00 |N.a.m.e.|d.O.b.j.|
|00000860| 65 00 63 00 74 00 73 00 | 5c 00 61 00 76 00 67 00 |e.c.t.s.|\.a.v.g.|
|00000870| 69 00 6f 00 5f 00 6b 00 | 73 00 68 00 64 00 00 00 |i.o._.k.|s.h.d...|
|00000880| 46 6c 74 49 73 44 69 72 | 65 63 74 6f 72 79 00 cc |FltIsDir|ectory..|
|00000890| 46 6c 74 49 73 4f 70 65 | 72 61 74 69 6f 6e 53 79 |FltIsOpe|rationSy|
|000008a0| 6e 63 68 72 6f 6e 6f 75 | 73 00 46 6c 74 47 65 74 |nchronou|s.FltGet|
|000008b0| 54 72 61 6e 73 61 63 74 | 69 6f 6e 43 6f 6e 74 65 |Transact|ionConte|
|000008c0| 78 74 00 cc 46 6c 74 53 | 65 74 54 72 61 6e 73 61 |xt..FltS|etTransa|
|000008d0| 63 74 69 6f 6e 43 6f 6e | 74 65 78 74 00 cc 46 6c |ctionCon|text..Fl|
|000008e0| 74 45 6e 6c 69 73 74 49 | 6e 54 72 61 6e 73 61 63 |tEnlistI|nTransac|
|000008f0| 74 69 6f 6e 00 cc 49 00 | 6f 00 47 00 65 00 74 00 |tion..I.|o.G.e.t.|
|00000900| 54 00 72 00 61 00 6e 00 | 73 00 61 00 63 00 74 00 |T.r.a.n.|s.a.c.t.|
|00000910| 69 00 6f 00 6e 00 50 00 | 61 00 72 00 61 00 6d 00 |i.o.n.P.|a.r.a.m.|
|00000920| 65 00 74 00 65 00 72 00 | 42 00 6c 00 6f 00 63 00 |e.t.e.r.|B.l.o.c.|
|00000930| 6b 00 00 00 46 6c 74 41 | 70 70 6c 79 50 72 69 6f |k...FltA|pplyPrio|
|00000940| 72 69 74 79 49 6e 66 6f | 54 68 72 65 61 64 00 cc |rityInfo|Thread..|
|00000950| 46 6c 74 52 65 74 72 69 | 65 76 65 49 6f 50 72 69 |FltRetri|eveIoPri|
|00000960| 6f 72 69 74 79 49 6e 66 | 6f 00 46 6c 74 43 72 65 |orityInf|o.FltCre|
|00000970| 61 74 65 46 69 6c 65 45 | 78 32 00 cc 46 6c 74 49 |ateFileE|x2..FltI|
|00000980| 73 45 63 70 46 72 6f 6d | 55 73 65 72 4d 6f 64 65 |sEcpFrom|UserMode|
|00000990| 00 cc 46 6c 74 46 69 6e | 64 45 78 74 72 61 43 72 |..FltFin|dExtraCr|
|000009a0| 65 61 74 65 50 61 72 61 | 6d 65 74 65 72 00 46 6c |eatePara|meter.Fl|
|000009b0| 74 47 65 74 45 63 70 4c | 69 73 74 46 72 6f 6d 43 |tGetEcpL|istFromC|
|000009c0| 61 6c 6c 62 61 63 6b 44 | 61 74 61 00 a4 0a 01 00 |allbackD|ata.....|
|000009d0| 00 00 00 00 00 00 00 00 | fc 12 01 00 88 90 00 00 |........|........|
|000009e0| 94 0a 01 00 00 00 00 00 | 00 00 00 00 4a 13 01 00 |........|....J...|
|000009f0| 78 90 00 00 1c 0a 01 00 | 00 00 00 00 00 00 00 00 |x.......|........|
|00000a00| 22 16 01 00 00 90 00 00 | 00 00 00 00 00 00 00 00 |".......|........|
|00000a10| 00 00 00 00 00 00 00 00 | 00 00 00 00 f6 15 01 00 |........|........|
|00000a20| d2 15 01 00 b4 15 01 00 | 98 15 01 00 84 15 01 00 |........|........|
|00000a30| 60 15 01 00 4c 15 01 00 | 2e 15 01 00 14 15 01 00 |`...L...|........|
|00000a40| fc 14 01 00 da 14 01 00 | c4 14 01 00 ae 14 01 00 |........|........|
|00000a50| 92 14 01 00 7c 14 01 00 | 68 14 01 00 4c 14 01 00 |....|...|h...L...|
|00000a60| 30 14 01 00 14 14 01 00 | fc 13 01 00 ea 13 01 00 |0.......|........|
|00000a70| de 13 01 00 ce 13 01 00 | b4 13 01 00 9e 13 01 00 |........|........|
|00000a80| 86 13 01 00 72 13 01 00 | 52 13 01 00 0a 16 01 00 |....r...|R.......|
|00000a90| 00 00 00 00 20 13 01 00 | 0a 13 01 00 36 13 01 00 |.... ...|....6...|
|00000aa0| 00 00 00 00 d4 0e 01 00 | ee 0e 01 00 06 0f 01 00 |........|........|
|00000ab0| 20 0f 01 00 38 0f 01 00 | 42 0f 01 00 62 0f 01 00 | ...8...|B...b...|
|00000ac0| 76 0f 01 00 8a 0f 01 00 | 9a 0f 01 00 a8 0f 01 00 |v.......|........|
|00000ad0| c2 0f 01 00 d6 0f 01 00 | f8 0f 01 00 10 10 01 00 |........|........|
|00000ae0| 24 10 01 00 46 10 01 00 | 50 10 01 00 70 10 01 00 |$...F...|P...p...|
|00000af0| 88 10 01 00 a0 10 01 00 | be 10 01 00 d6 10 01 00 |........|........|
|00000b00| f8 10 01 00 c8 0e 01 00 | 32 11 01 00 46 11 01 00 |........|2...F...|
|00000b10| 68 11 01 00 7a 11 01 00 | 92 11 01 00 ae 11 01 00 |h...z...|........|
|00000b20| ca 11 01 00 e2 11 01 00 | fa 11 01 00 0c 12 01 00 |........|........|
|00000b30| 1c 12 01 00 38 12 01 00 | 50 12 01 00 6c 12 01 00 |....8...|P...l...|
|00000b40| 82 12 01 00 90 12 01 00 | 9e 12 01 00 b4 12 01 00 |........|........|
|00000b50| c6 12 01 00 de 12 01 00 | ec 12 01 00 b6 0e 01 00 |........|........|
|00000b60| ac 0e 01 00 92 0e 01 00 | a2 0e 01 00 84 0e 01 00 |........|........|
|00000b70| 68 0e 01 00 46 0e 01 00 | 3c 0e 01 00 32 0e 01 00 |h...F...|<...2...|
|00000b80| 14 0e 01 00 fe 0d 01 00 | e6 0d 01 00 d6 0d 01 00 |........|........|
|00000b90| be 0d 01 00 9c 0d 01 00 | 84 0d 01 00 6c 0d 01 00 |........|....l...|
|00000ba0| 5e 0d 01 00 44 0d 01 00 | 2c 0d 01 00 0c 0d 01 00 |^...D...|,.......|
|00000bb0| 02 0d 01 00 e8 0c 01 00 | c8 0c 01 00 b4 0c 01 00 |........|........|
|00000bc0| 9c 0c 01 00 82 0c 01 00 | 6e 0c 01 00 58 0c 01 00 |........|n...X...|
|00000bd0| 3c 0c 01 00 20 0c 01 00 | 10 11 01 00 0c 0c 01 00 |<... ...|........|
|00000be0| 2e 16 01 00 4a 16 01 00 | 66 16 01 00 7e 16 01 00 |....J...|f...~...|
|00000bf0| 88 16 01 00 a2 16 01 00 | ac 16 01 00 c0 16 01 00 |........|........|
|00000c00| dc 16 01 00 ec 16 01 00 | 00 00 00 00 d9 02 4b 65 |........|......Ke|
|00000c10| 49 6e 69 74 69 61 6c 69 | 7a 65 45 76 65 6e 74 00 |Initiali|zeEvent.|
|00000c20| a4 01 49 6e 74 65 72 6c | 6f 63 6b 65 64 50 6f 70 |..Interl|ockedPop|
|00000c30| 45 6e 74 72 79 53 4c 69 | 73 74 00 00 a5 01 49 6e |EntrySLi|st....In|
|00000c40| 74 65 72 6c 6f 63 6b 65 | 64 50 75 73 68 45 6e 74 |terlocke|dPushEnt|
|00000c50| 72 79 53 4c 69 73 74 00 | c8 02 4b 65 47 65 74 43 |rySList.|..KeGetC|
|00000c60| 75 72 72 65 6e 74 54 68 | 72 65 61 64 00 00 1b 02 |urrentTh|read....|
|00000c70| 49 6f 47 65 74 53 74 61 | 63 6b 4c 69 6d 69 74 73 |IoGetSta|ckLimits|
|00000c80| 00 00 27 06 53 65 43 72 | 65 61 74 65 43 6c 69 65 |..'.SeCr|eateClie|
|00000c90| 6e 74 53 65 63 75 72 69 | 74 79 00 00 6d 00 45 78 |ntSecuri|ty..m.Ex|
|00000ca0| 41 6c 6c 6f 63 61 74 65 | 50 6f 6f 6c 57 69 74 68 |Allocate|PoolWith|
|00000cb0| 54 61 67 00 85 00 45 78 | 46 72 65 65 50 6f 6f 6c |Tag...Ex|FreePool|
|00000cc0| 57 69 74 68 54 61 67 00 | 63 05 52 74 6c 49 6e 69 |WithTag.|c.RtlIni|
|00000cd0| 74 69 61 6c 69 7a 65 47 | 65 6e 65 72 69 63 54 61 |tializeG|enericTa|
|00000ce0| 62 6c 65 41 76 6c 00 00 | b7 02 4b 65 44 65 6c 61 |bleAvl..|..KeDela|
|00000cf0| 79 45 78 65 63 75 74 69 | 6f 6e 54 68 72 65 61 64 |yExecuti|onThread|
|00000d00| 00 00 4b 07 5f 61 6c 6c | 6d 75 6c 00 dc 01 49 6f |..K._all|mul...Io|
|00000d10| 43 72 65 61 74 65 53 79 | 6e 63 68 72 6f 6e 69 7a |CreateSy|nchroniz|
|00000d20| 61 74 69 6f 6e 45 76 65 | 6e 74 00 00 5f 05 52 74 |ationEve|nt.._.Rt|
|00000d30| 6c 49 6e 69 74 55 6e 69 | 63 6f 64 65 53 74 72 69 |lInitUni|codeStri|
|00000d40| 6e 67 00 00 c8 04 50 73 | 54 65 72 6d 69 6e 61 74 |ng....Ps|Terminat|
|00000d50| 65 53 79 73 74 65 6d 54 | 68 72 65 61 64 00 2a 03 |eSystemT|hread.*.|
|00000d60| 4b 65 53 65 74 45 76 65 | 6e 74 00 00 f0 02 4b 65 |KeSetEve|nt....Ke|
|00000d70| 4c 65 61 76 65 43 72 69 | 74 69 63 61 6c 52 65 67 |LeaveCri|ticalReg|
|00000d80| 69 6f 6e 00 bb 00 45 78 | 52 65 6c 65 61 73 65 52 |ion...Ex|ReleaseR|
|00000d90| 65 73 6f 75 72 63 65 4c | 69 74 65 00 5b 00 45 78 |esourceL|ite.[.Ex|
|00000da0| 41 63 71 75 69 72 65 52 | 65 73 6f 75 72 63 65 45 |AcquireR|esourceE|
|00000db0| 78 63 6c 75 73 69 76 65 | 4c 69 74 65 00 00 bd 02 |xclusive|Lite....|
|00000dc0| 4b 65 45 6e 74 65 72 43 | 72 69 74 69 63 61 6c 52 |KeEnterC|riticalR|
|00000dd0| 65 67 69 6f 6e 00 1e 03 | 4b 65 52 65 73 65 74 45 |egion...|KeResetE|
|00000de0| 76 65 6e 74 00 00 48 03 | 4b 65 57 61 69 74 46 6f |vent..H.|KeWaitFo|
|00000df0| 72 53 69 6e 67 6c 65 4f | 62 6a 65 63 74 00 05 02 |rSingleO|bject...|
|00000e00| 49 6f 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |IoGetCur|rentProc|
|00000e10| 65 73 73 00 5c 00 45 78 | 41 63 71 75 69 72 65 52 |ess.\.Ex|AcquireR|
|00000e20| 65 73 6f 75 72 63 65 53 | 68 61 72 65 64 4c 69 74 |esourceS|haredLit|
|00000e30| 65 00 71 07 5f 77 63 73 | 75 70 72 00 7e 07 6d 65 |e.q._wcs|upr.~.me|
|00000e40| 6d 63 70 79 00 00 6a 04 | 50 73 44 65 72 65 66 65 |mcpy..j.|PsDerefe|
|00000e50| 72 65 6e 63 65 49 6d 70 | 65 72 73 6f 6e 61 74 69 |renceImp|ersonati|
|00000e60| 6f 6e 54 6f 6b 65 6e 00 | 6b 04 50 73 44 65 72 65 |onToken.|k.PsDere|
|00000e70| 66 65 72 65 6e 63 65 50 | 72 69 6d 61 72 79 54 6f |ferenceP|rimaryTo|
|00000e80| 6b 65 6e 00 54 06 53 65 | 54 6f 6b 65 6e 54 79 70 |ken.T.Se|TokenTyp|
|00000e90| 65 00 54 05 52 74 6c 47 | 65 74 56 65 72 73 69 6f |e.T.RtlG|etVersio|
|00000ea0| 6e 00 80 07 6d 65 6d 73 | 65 74 00 00 ad 06 5a 77 |n...mems|et....Zw|
|00000eb0| 43 6c 6f 73 65 00 13 07 | 5a 77 51 75 65 72 79 56 |Close...|ZwQueryV|
|00000ec0| 61 6c 75 65 4b 65 79 00 | e6 06 5a 77 4f 70 65 6e |alueKey.|..ZwOpen|
|00000ed0| 4b 65 79 00 f2 04 52 74 | 6c 43 6f 6d 70 61 72 65 |Key...Rt|lCompare|
|00000ee0| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 00 2e 07 |UnicodeS|tring...|
|00000ef0| 5a 77 53 65 74 49 6e 66 | 6f 72 6d 61 74 69 6f 6e |ZwSetInf|ormation|
|00000f00| 46 69 6c 65 00 00 03 07 | 5a 77 51 75 65 72 79 49 |File....|ZwQueryI|
|00000f10| 6e 66 6f 72 6d 61 74 69 | 6f 6e 46 69 6c 65 00 00 |nformati|onFile..|
|00000f20| 40 05 52 74 6c 46 72 65 | 65 55 6e 69 63 6f 64 65 |@.RtlFre|eUnicode|
|00000f30| 53 74 72 69 6e 67 00 00 | 9f 07 77 63 73 6e 63 61 |String..|..wcsnca|
|00000f40| 74 00 db 04 52 74 6c 41 | 6e 73 69 53 74 72 69 6e |t...RtlA|nsiStrin|
|00000f50| 67 54 6f 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |gToUnico|deString|
|00000f60| 00 00 5b 05 52 74 6c 49 | 6e 69 74 41 6e 73 69 53 |..[.RtlI|nitAnsiS|
|00000f70| 74 72 69 6e 67 00 fe 02 | 4b 65 51 75 65 72 79 53 |tring...|KeQueryS|
|00000f80| 79 73 74 65 6d 54 69 6d | 65 00 95 05 52 74 6c 4c |ystemTim|e...RtlL|
|00000f90| 65 6e 67 74 68 53 69 64 | 00 00 06 06 52 74 6c 56 |engthSid|....RtlV|
|00000fa0| 61 6c 69 64 53 69 64 00 | 40 06 53 65 51 75 65 72 |alidSid.|@.SeQuer|
|00000fb0| 79 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 54 6f 6b 65 |yInforma|tionToke|
|00000fc0| 6e 00 a1 04 50 73 49 73 | 53 79 73 74 65 6d 54 68 |n...PsIs|SystemTh|
|00000fd0| 72 65 61 64 00 00 9a 05 | 52 74 6c 4c 6f 6f 6b 75 |read....|RtlLooku|
|00000fe0| 70 45 6c 65 6d 65 6e 74 | 47 65 6e 65 72 69 63 54 |pElement|GenericT|
|00000ff0| 61 62 6c 65 41 76 6c 00 | 71 04 50 73 47 65 74 43 |ableAvl.|q.PsGetC|
|00001000| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 49 64 00 |urrentPr|ocessId.|
|00001010| 74 02 49 6f 54 68 72 65 | 61 64 54 6f 50 72 6f 63 |t.IoThre|adToProc|
|00001020| 65 73 73 00 8f 00 45 78 | 49 6e 69 74 69 61 6c 69 |ess...Ex|Initiali|
|00001030| 7a 65 50 61 67 65 64 4c | 6f 6f 6b 61 73 69 64 65 |zePagedL|ookaside|
|00001040| 4c 69 73 74 00 00 8d 07 | 73 74 72 6e 63 70 79 00 |List....|strncpy.|
|00001050| 9b 03 4d 6d 4d 61 70 4c | 6f 63 6b 65 64 50 61 67 |..MmMapL|ockedPag|
|00001060| 65 73 53 70 65 63 69 66 | 79 43 61 63 68 65 00 00 |esSpecif|yCache..|
|00001070| a6 05 52 74 6c 4e 74 53 | 74 61 74 75 73 54 6f 44 |..RtlNtS|tatusToD|
|00001080| 6f 73 45 72 72 6f 72 00 | 75 04 50 73 47 65 74 43 |osError.|u.PsGetC|
|00001090| 75 72 72 65 6e 74 54 68 | 72 65 61 64 49 64 00 00 |urrentTh|readId..|
|000010a0| 73 00 45 78 44 65 6c 65 | 74 65 50 61 67 65 64 4c |s.ExDele|tePagedL|
|000010b0| 6f 6f 6b 61 73 69 64 65 | 4c 69 73 74 00 00 74 00 |ookaside|List..t.|
|000010c0| 45 78 44 65 6c 65 74 65 | 52 65 73 6f 75 72 63 65 |ExDelete|Resource|
|000010d0| 4c 69 74 65 00 00 b9 04 | 50 73 53 65 74 43 72 65 |Lite....|PsSetCre|
|000010e0| 61 74 65 50 72 6f 63 65 | 73 73 4e 6f 74 69 66 79 |ateProce|ssNotify|
|000010f0| 52 6f 75 74 69 6e 65 00 | 41 04 4f 62 66 44 65 72 |Routine.|A.ObfDer|
|00001100| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|00001110| 0f 05 52 74 6c 44 65 6c | 65 74 65 45 6c 65 6d 65 |..RtlDel|eteEleme|
|00001120| 6e 74 47 65 6e 65 72 69 | 63 54 61 62 6c 65 41 76 |ntGeneri|cTableAv|
|00001130| 6c 00 1c 02 49 6f 47 65 | 74 54 6f 70 4c 65 76 65 |l...IoGe|tTopLeve|
|00001140| 6c 49 72 70 00 00 68 05 | 52 74 6c 49 6e 73 65 72 |lIrp..h.|RtlInser|
|00001150| 74 45 6c 65 6d 65 6e 74 | 47 65 6e 65 72 69 63 54 |tElement|GenericT|
|00001160| 61 62 6c 65 41 76 6c 00 | b7 04 50 73 52 65 76 65 |ableAvl.|..PsReve|
|00001170| 72 74 54 6f 53 65 6c 66 | 00 00 33 06 53 65 49 6d |rtToSelf|..3.SeIm|
|00001180| 70 65 72 73 6f 6e 61 74 | 65 43 6c 69 65 6e 74 45 |personat|eClientE|
|00001190| 78 00 46 03 4b 65 57 61 | 69 74 46 6f 72 4d 75 6c |x.F.KeWa|itForMul|
|000011a0| 74 69 70 6c 65 4f 62 6a | 65 63 74 73 00 00 37 04 |tipleObj|ects..7.|
|000011b0| 4f 62 52 65 66 65 72 65 | 6e 63 65 4f 62 6a 65 63 |ObRefere|nceObjec|
|000011c0| 74 42 79 48 61 6e 64 6c | 65 00 69 04 50 73 43 72 |tByHandl|e.i.PsCr|
|000011d0| 65 61 74 65 53 79 73 74 | 65 6d 54 68 72 65 61 64 |eateSyst|emThread|
|000011e0| 00 00 db 01 49 6f 43 72 | 65 61 74 65 53 79 6d 62 |....IoCr|eateSymb|
|000011f0| 6f 6c 69 63 4c 69 6e 6b | 00 00 d1 01 49 6f 43 72 |olicLink|....IoCr|
|00001200| 65 61 74 65 44 65 76 69 | 63 65 00 00 b6 02 4b 65 |eateDevi|ce....Ke|
|00001210| 43 6c 65 61 72 45 76 65 | 6e 74 00 00 91 00 45 78 |ClearEve|nt....Ex|
|00001220| 49 6e 69 74 69 61 6c 69 | 7a 65 52 65 73 6f 75 72 |Initiali|zeResour|
|00001230| 63 65 4c 69 74 65 00 00 | 00 03 4b 65 51 75 65 72 |ceLite..|..KeQuer|
|00001240| 79 54 69 6d 65 49 6e 63 | 72 65 6d 65 6e 74 00 00 |yTimeInc|rement..|
|00001250| 8a 03 4d 6d 47 65 74 53 | 79 73 74 65 6d 52 6f 75 |..MmGetS|ystemRou|
|00001260| 74 69 6e 65 41 64 64 72 | 65 73 73 00 f3 02 4b 65 |tineAddr|ess...Ke|
|00001270| 4e 75 6d 62 65 72 50 72 | 6f 63 65 73 73 6f 72 73 |NumberPr|ocessors|
|00001280| 00 00 16 07 5a 77 52 65 | 61 64 46 69 6c 65 00 00 |....ZwRe|adFile..|
|00001290| 43 07 5a 77 57 72 69 74 | 65 46 69 6c 65 00 96 02 |C.ZwWrit|eFile...|
|000012a0| 49 6f 66 43 6f 6d 70 6c | 65 74 65 52 65 71 75 65 |IofCompl|eteReque|
|000012b0| 73 74 00 00 e6 01 49 6f | 44 65 6c 65 74 65 44 65 |st....Io|DeleteDe|
|000012c0| 76 69 63 65 00 00 e8 01 | 49 6f 44 65 6c 65 74 65 |vice....|IoDelete|
|000012d0| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 00 00 3f 03 |Symbolic|Link..?.|
|000012e0| 4b 65 54 69 63 6b 43 6f | 75 6e 74 00 b3 02 4b 65 |KeTickCo|unt...Ke|
|000012f0| 42 75 67 43 68 65 63 6b | 45 78 00 00 6e 74 6f 73 |BugCheck|Ex..ntos|
|00001300| 6b 72 6e 6c 2e 65 78 65 | 00 00 01 00 45 78 52 65 |krnl.exe|....ExRe|
|00001310| 6c 65 61 73 65 46 61 73 | 74 4d 75 74 65 78 00 00 |leaseFas|tMutex..|
|00001320| 00 00 45 78 41 63 71 75 | 69 72 65 46 61 73 74 4d |..ExAcqu|ireFastM|
|00001330| 75 74 65 78 00 00 50 00 | 4b 65 47 65 74 43 75 72 |utex..P.|KeGetCur|
|00001340| 72 65 6e 74 49 72 71 6c | 00 00 48 41 4c 2e 64 6c |rentIrql|..HAL.dl|
|00001350| 6c 00 a9 00 46 6c 74 52 | 65 6c 65 61 73 65 46 69 |l...FltR|eleaseFi|
|00001360| 6c 65 4e 61 6d 65 49 6e | 66 6f 72 6d 61 74 69 6f |leNameIn|formatio|
|00001370| 6e 00 a7 00 46 6c 74 52 | 65 6c 65 61 73 65 43 6f |n...FltR|eleaseCo|
|00001380| 6e 74 65 78 74 00 ba 00 | 46 6c 74 53 65 74 49 6e |ntext...|FltSetIn|
|00001390| 73 74 61 6e 63 65 43 6f | 6e 74 65 78 74 00 06 00 |stanceCo|ntext...|
|000013a0| 46 6c 74 41 6c 6c 6f 63 | 61 74 65 43 6f 6e 74 65 |FltAlloc|ateConte|
|000013b0| 78 74 00 00 7a 00 46 6c | 74 47 65 74 56 6f 6c 75 |xt..z.Fl|tGetVolu|
|000013c0| 6d 65 50 72 6f 70 65 72 | 74 69 65 73 00 00 2b 00 |meProper|ties..+.|
|000013d0| 46 6c 74 43 72 65 61 74 | 65 46 69 6c 65 00 22 00 |FltCreat|eFile.".|
|000013e0| 46 6c 74 43 6c 6f 73 65 | 00 00 b3 00 46 6c 74 53 |FltClose|....FltS|
|000013f0| 65 6e 64 4d 65 73 73 61 | 67 65 00 00 5d 00 46 6c |endMessa|ge..].Fl|
|00001400| 74 47 65 74 49 6e 73 74 | 61 6e 63 65 43 6f 6e 74 |tGetInst|anceCont|
|00001410| 65 78 74 00 57 00 46 6c | 74 47 65 74 46 69 6c 65 |ext.W.Fl|tGetFile|
|00001420| 4e 61 6d 65 49 6e 66 6f | 72 6d 61 74 69 6f 6e 00 |NameInfo|rmation.|
|00001430| 6b 00 46 6c 74 47 65 74 | 53 74 72 65 61 6d 48 61 |k.FltGet|StreamHa|
|00001440| 6e 64 6c 65 43 6f 6e 74 | 65 78 74 00 c0 00 46 6c |ndleCont|ext...Fl|
|00001450| 74 53 65 74 53 74 72 65 | 61 6d 48 61 6e 64 6c 65 |tSetStre|amHandle|
|00001460| 43 6f 6e 74 65 78 74 00 | 31 00 46 6c 74 44 65 6c |Context.|1.FltDel|
|00001470| 65 74 65 43 6f 6e 74 65 | 78 74 00 00 cd 00 46 6c |eteConte|xt....Fl|
|00001480| 74 55 6e 72 65 67 69 73 | 74 65 72 46 69 6c 74 65 |tUnregis|terFilte|
|00001490| 72 00 24 00 46 6c 74 43 | 6c 6f 73 65 43 6f 6d 6d |r.$.FltC|loseComm|
|000014a0| 75 6e 69 63 61 74 69 6f | 6e 50 6f 72 74 00 23 00 |unicatio|nPort.#.|
|000014b0| 46 6c 74 43 6c 6f 73 65 | 43 6c 69 65 6e 74 50 6f |FltClose|ClientPo|
|000014c0| 72 74 00 00 a3 00 46 6c | 74 52 65 66 65 72 65 6e |rt....Fl|tReferen|
|000014d0| 63 65 43 6f 6e 74 65 78 | 74 00 a4 00 46 6c 74 52 |ceContex|t...FltR|
|000014e0| 65 66 65 72 65 6e 63 65 | 46 69 6c 65 4e 61 6d 65 |eference|FileName|
|000014f0| 49 6e 66 6f 72 6d 61 74 | 69 6f 6e 00 b9 00 46 6c |Informat|ion...Fl|
|00001500| 74 53 65 74 49 6e 66 6f | 72 6d 61 74 69 6f 6e 46 |tSetInfo|rmationF|
|00001510| 69 6c 65 00 9c 00 46 6c | 74 51 75 65 72 79 49 6e |ile...Fl|tQueryIn|
|00001520| 66 6f 72 6d 61 74 69 6f | 6e 46 69 6c 65 00 93 00 |formatio|nFile...|
|00001530| 46 6c 74 50 61 72 73 65 | 46 69 6c 65 4e 61 6d 65 |FltParse|FileName|
|00001540| 49 6e 66 6f 72 6d 61 74 | 69 6f 6e 00 12 00 46 6c |Informat|ion...Fl|
|00001550| 74 43 61 6e 63 65 6c 46 | 69 6c 65 4f 70 65 6e 00 |tCancelF|ileOpen.|
|00001560| 3c 00 46 6c 74 44 6f 43 | 6f 6d 70 6c 65 74 69 6f |<.FltDoC|ompletio|
|00001570| 6e 50 72 6f 63 65 73 73 | 69 6e 67 57 68 65 6e 53 |nProcess|ingWhenS|
|00001580| 61 66 65 00 c4 00 46 6c | 74 53 74 61 72 74 46 69 |afe...Fl|tStartFi|
|00001590| 6c 74 65 72 69 6e 67 00 | 4e 00 46 6c 74 46 72 65 |ltering.|N.FltFre|
|000015a0| 65 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |eSecurit|yDescrip|
|000015b0| 74 6f 72 00 2a 00 46 6c | 74 43 72 65 61 74 65 43 |tor.*.Fl|tCreateC|
|000015c0| 6f 6d 6d 75 6e 69 63 61 | 74 69 6f 6e 50 6f 72 74 |ommunica|tionPort|
|000015d0| 00 00 11 00 46 6c 74 42 | 75 69 6c 64 44 65 66 61 |....FltB|uildDefa|
|000015e0| 75 6c 74 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |ultSecur|ityDescr|
|000015f0| 69 70 74 6f 72 00 a5 00 | 46 6c 74 52 65 67 69 73 |iptor...|FltRegis|
|00001600| 74 65 72 46 69 6c 74 65 | 72 00 69 00 46 6c 74 47 |terFilte|r.i.FltG|
|00001610| 65 74 52 6f 75 74 69 6e | 65 41 64 64 72 65 73 73 |etRoutin|eAddress|
|00001620| 00 00 46 4c 54 4d 47 52 | 2e 53 59 53 00 00 11 07 |..FLTMGR|.SYS....|
|00001630| 5a 77 51 75 65 72 79 53 | 79 6d 62 6f 6c 69 63 4c |ZwQueryS|ymbolicL|
|00001640| 69 6e 6b 4f 62 6a 65 63 | 74 00 ed 06 5a 77 4f 70 |inkObjec|t...ZwOp|
|00001650| 65 6e 53 79 6d 62 6f 6c | 69 63 4c 69 6e 6b 4f 62 |enSymbol|icLinkOb|
|00001660| 6a 65 63 74 00 00 90 02 | 49 6f 57 72 69 74 65 45 |ject....|IoWriteE|
|00001670| 72 72 6f 72 4c 6f 67 45 | 6e 74 72 79 00 00 7f 07 |rrorLogE|ntry....|
|00001680| 6d 65 6d 6d 6f 76 65 00 | ad 01 49 6f 41 6c 6c 6f |memmove.|..IoAllo|
|00001690| 63 61 74 65 45 72 72 6f | 72 4c 6f 67 45 6e 74 72 |cateErro|rLogEntr|
|000016a0| 79 00 93 07 74 6f 75 70 | 70 65 72 00 ef 04 52 74 |y...toup|per...Rt|
|000016b0| 6c 43 6f 6d 70 61 72 65 | 4d 65 6d 6f 72 79 00 00 |lCompare|Memory..|
|000016c0| 09 02 49 6f 47 65 74 44 | 65 76 69 63 65 4f 62 6a |..IoGetD|eviceObj|
|000016d0| 65 63 74 50 6f 69 6e 74 | 65 72 00 00 95 02 49 6f |ectPoint|er....Io|
|000016e0| 66 43 61 6c 6c 44 72 69 | 76 65 72 00 bb 01 49 6f |fCallDri|ver...Io|
|000016f0| 42 75 69 6c 64 44 65 76 | 69 63 65 49 6f 43 6f 6e |BuildDev|iceIoCon|
|00001700| 74 72 6f 6c 52 65 71 75 | 65 73 74 00 00 00 00 00 |trolRequ|est.....|
|00001710| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001720| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001730| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001740| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001750| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001760| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001770| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001780| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001790| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000017f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+