Maximum CD 2009 June

home *** CD-ROM | disk | FTP | other *** search
/ Maximum CD 2009 June / maximum-cd-2009-06.iso / DiscContents / antivir_workstation_winu_en_h.exe / basic / xp64 / avgntflt.sys / INIT < prev next >
Unknown | 2008-05-19 | 7.0 KB
open in:
MacOS 8.1 |
Win98 |
DOS
view JSON data |
view as text

This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence	Program	Detection	Match Type	Support
`100%`	file	data	default
hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 00 00 00 | 48 89 5c 24 08 55 56 57 |........|H.\$.UVW|
|00000010| 41 54 41 55 41 56 41 57 | 48 81 ec b0 00 00 00 48 |ATAUAVAW|H......H|
|00000020| 8b 05 d2 71 ff ff 45 33 | e4 48 8b f2 0f be 00 48 |...q..E3|.H.....H|
|00000030| 8b d9 45 8d 6c 24 01 41 | be 41 56 30 31 41 bf 14 |..E.l$.A|.AV01A..|
|00000040| 01 00 00 41 8b cd 45 8b | c6 49 8b d7 89 05 6e 96 |...A..E.|.I....n.|
|00000050| ff ff 41 8b ec 44 89 25 | 58 96 ff ff ff 15 c6 72 |..A..D.%|X......r|
|00000060| ff ff 49 3b c4 48 8b f8 | 75 21 b9 f4 01 00 00 e8 |..I;.H..|u!......|
|00000070| 34 e4 fe ff 45 8b c6 49 | 8b d7 41 8b cd ff 15 a5 |4...E..I|..A.....|
|00000080| 72 ff ff 49 3b c4 48 8b | f8 74 42 4d 8b c7 33 d2 |r..I;.H.|.tBM..3.|
|00000090| 48 8b cf e8 a8 53 ff ff | 48 8b cf ff 15 ff 71 ff |H....S..|H.....q.|
|000000a0| ff 41 3b c4 7c 1b 8b 47 | 04 89 05 05 96 ff ff 8b |.A;.|..G|........|
|000000b0| 47 08 89 05 00 96 ff ff | 8b 47 0c 89 05 fb 95 ff |G.......|.G......|
|000000c0| ff 41 8b d6 48 8b cf ff | 15 4b 72 ff ff 83 3d e0 |.A..H...|.Kr...=.|
|000000d0| 95 ff ff 05 73 0a b8 bb | 00 00 c0 e9 fa 08 00 00 |....s...|........|
|000000e0| 48 8d 0d 79 09 00 00 e8 | aa 4f ff ff 48 8d 0d 8d |H..y....|.O..H...|
|000000f0| 09 00 00 48 89 05 f6 95 | ff ff e8 97 4f ff ff 48 |...H....|....O..H|
|00000100| 8d 0d 9a 09 00 00 48 89 | 05 eb 95 ff ff e8 84 4f |......H.|.......O|
|00000110| ff ff 48 8d 0d a7 09 00 | 00 48 89 05 e0 95 ff ff |..H.....|.H......|
|00000120| e8 71 4f ff ff 48 8d 0d | b4 09 00 00 48 89 05 b5 |.qO..H..|....H...|
|00000130| 95 ff ff e8 5e 4f ff ff | 48 8d 0d c1 09 00 00 48 |....^O..|H......H|
|00000140| 89 05 92 95 ff ff e8 4b | 4f ff ff 48 8d 15 ce 09 |.......K|O..H....|
|00000150| 00 00 48 8d 4c 24 40 48 | 89 05 82 95 ff ff ff 15 |..H.L$@H|........|
|00000160| 6c 71 ff ff 48 8d 4c 24 | 40 ff 15 49 71 ff ff 83 |lq..H.L$|@..Iq...|
|00000170| 3d 3e 95 ff ff 06 48 89 | 05 a3 95 ff ff 72 4e 4c |=>....H.|.....rNL|
|00000180| 39 25 6a 95 ff ff 74 3b | 4c 39 25 69 95 ff ff 74 |9%j...t;|L9%i...t|
|00000190| 32 4c 39 25 68 95 ff ff | 74 29 49 3b c4 74 24 4c |2L9%h...|t)I;.t$L|
|000001a0| 39 25 42 95 ff ff 74 1b | 4c 39 25 29 95 ff ff 74 |9%B...t.|L9%)...t|
|000001b0| 12 4c 39 25 28 95 ff ff | 74 09 44 89 2d 03 95 ff |.L9%(...|t.D.-...|
|000001c0| ff eb 13 b8 0d 00 00 c0 | e9 0d 08 00 00 44 39 25 |........|.....D9%|
|000001d0| f0 94 ff ff 74 39 48 8d | 0d 83 09 00 00 e8 b4 4e |....t9H.|.......N|
|000001e0| ff ff 48 8d 0d 97 09 00 | 00 48 89 05 28 95 ff ff |..H.....|.H..(...|
|000001f0| e8 a1 4e ff ff 48 8d 0d | a4 09 00 00 48 89 05 0d |..N..H..|....H...|
|00000200| 95 ff ff e8 8e 4e ff ff | 48 89 05 f9 94 ff ff ff |.....N..|H.......|
|00000210| 15 3b 6f ff ff 33 d2 48 | 8d 0d 52 94 ff ff 44 8d |.;o..3.H|..R...D.|
|00000220| 42 44 89 05 d0 c2 ff ff | e8 13 52 ff ff 48 8b ce |BD......|..R..H..|
|00000230| 44 89 2d 65 94 ff ff e8 | 58 e9 fe ff 8b 05 32 94 |D.-e....|X.....2.|
|00000240| ff ff 8b 15 28 94 ff ff | 09 15 b2 7f ff ff 89 05 |....(...|........|
|00000250| 04 94 ff ff 8b 05 36 94 | ff ff 83 ca ff 41 3b c4 |......6.|.....A;.|
|00000260| 75 0c c7 05 24 94 ff ff | ff 03 00 00 eb 08 03 c2 |u...$...|........|
|00000270| 89 05 1a 94 ff ff 8b 05 | 1c 94 ff ff 8b 0d 72 7f |........|......r.|
|00000280| ff ff 4c 89 25 3f c2 ff | ff 41 3b c4 44 89 25 3d |..L.%?..|.A;.D.%=|
|00000290| c2 ff ff 0f 45 c8 3b c2 | 41 8b d5 41 0f 44 cc 45 |....E.;.|A..A.D.E|
|000002a0| 33 c0 89 0d 4c 7f ff ff | 44 89 2d 11 c2 ff ff 48 |3...L...|D.-....H|
|000002b0| 8d 0d 22 c2 ff ff ff 15 | f4 6f ff ff 48 8d 05 2d |..".....|.o..H..-|
|000002c0| c3 ff ff 48 8d 15 26 c0 | ff ff 48 89 05 27 c3 ff |...H..&.|..H..'..|
|000002d0| ff 48 89 05 18 c3 ff ff | 48 8d 05 01 c0 ff ff 48 |.H......|H......H|
|000002e0| 8d 0d da 08 00 00 48 89 | 15 0b c0 ff ff 48 89 15 |......H.|.....H..|
|000002f0| fc bf ff ff 48 89 05 ed | bf ff ff 48 89 05 de bf |....H...|...H....|
|00000300| ff ff 44 89 25 f7 c4 ff | ff e8 88 4d ff ff 48 8d |..D.%...|...M..H.|
|00000310| 0d cb 08 00 00 48 89 05 | 0c 94 ff ff e8 75 4d ff |.....H..|.....uM.|
|00000320| ff 48 8d 0d 90 c0 ff ff | 48 89 05 a1 93 ff ff 45 |.H......|H......E|
|00000330| 33 c0 41 8b d5 4c 89 25 | 6c c0 ff ff 44 89 25 6d |3.A..L.%|l...D.%m|
|00000340| c0 ff ff 44 89 2d 56 c0 | ff ff ff 15 60 6f ff ff |...D.-V.|....`o..|
|00000350| 48 8d 15 a9 bf ff ff 48 | 8d 0d c2 c0 ff ff 48 89 |H......H|......H.|
|00000360| 15 a3 bf ff ff 48 89 15 | 94 bf ff ff 45 33 c0 33 |.....H..|....E3.3|
|00000370| d2 ff 15 39 6f ff ff 49 | 8b fc be 10 00 00 00 4c |...9o..I|.......L|
|00000380| 8d 3d 7a cc fe ff 4a 8d | 8c 3f 20 f8 00 00 45 33 |.=z...J.|.? ...E3|
|00000390| c0 41 8b d5 ff 15 16 6f | ff ff 4a 8d 8c 3f 80 f6 |.A.....o|..J..?..|
|000003a0| 00 00 45 8a c5 33 d2 ff | 15 03 6f ff ff 48 83 c7 |..E..3..|..o..H..|
|000003b0| 18 49 2b f5 75 d0 be 41 | 56 30 32 41 be 00 01 00 |.I+.u..A|V02A....|
|000003c0| 00 41 8b cd 44 8b c6 49 | 8b d6 ff 15 58 6f ff ff |.A..D..I|....Xo..|
|000003d0| 49 3b c4 48 8b d0 48 89 | 05 fb 93 ff ff 0f 84 ed |I;.H..H.|........|
|000003e0| 05 00 00 41 8b c4 48 8b | ca 88 01 41 03 c5 49 03 |...A..H.|...A..I.|
|000003f0| cd 41 3b c6 7c f3 b9 61 | 00 00 00 48 8d 7a 61 8d |.A;.|..a|...H.za.|
|00000400| 41 e0 41 03 cd 88 07 49 | 03 fd 83 f9 7a 7e f0 c6 |A.A....I|....z~..|
|00000410| 42 2f 5c 44 8b c6 41 8b | cd ba 00 04 00 00 ff 15 |B/\D..A.|........|
|00000420| 04 6f ff ff be 08 00 00 | 00 49 3b c4 4c 8b d8 48 |.o......|.I;.L..H|
|00000430| 89 05 aa 93 ff ff 74 39 | 41 8b fc 44 8b c7 4c 8b |......t9|A..D..L.|
|00000440| ce 41 8b d0 41 8b c8 d1 | ea 41 22 cd 8b c2 44 8b |.A..A...|.A"...D.|
|00000450| c2 35 20 83 b8 ed 41 3a | cc 44 0f 45 c0 4d 2b cd |.5 ...A:|.D.E.M+.|
|00000460| 75 df 48 63 c7 41 03 fd | 41 3b fe 45 89 04 83 7c |u.Hc.A..|A;.E...||
|00000470| ca e8 d6 2d ff ff 41 3b | c5 75 0f e8 04 3b ff ff |...-..A;|.u...;..|
|00000480| e8 cb 2e ff ff e9 4b 05 | 00 00 48 8d 15 5f 07 00 |......K.|..H.._..|
|00000490| 00 48 8d 4c 24 50 ff 15 | 34 6e ff ff 48 8d 15 55 |.H.L$P..|4n..H..U|
|000004a0| 7d ff ff 48 8d 4c 24 50 | ff 15 ba 6d ff ff 49 3b |}..H.L$P|...m..I;|
|000004b0| c4 48 89 05 90 91 ff ff | 0f 84 ff 03 00 00 48 83 |.H......|......H.|
|000004c0| 3d 32 7d ff ff ff 0f 84 | f1 03 00 00 48 8d 0d 8d |=2}.....|....H...|
|000004d0| 96 ff ff 33 d2 41 b8 a0 | 23 00 00 e8 60 4f ff ff |...3.A..|#...`O..|
|000004e0| 48 8d 0d 19 ba ff ff ff | 15 03 6d ff ff 48 8d 0d |H.......|..m..H..|
|000004f0| 2c be ff ff ff 15 f6 6c | ff ff 48 8d 0d ff bf ff |,......l|..H.....|
|00000500| ff ff 15 e9 6c ff ff 48 | 8d 0d 32 bf ff ff ff 15 |....l..H|..2.....|
|00000510| dc 6c ff ff 8b 0d aa 91 | ff ff e8 e5 3c ff ff 48 |.l......|....<..H|
|00000520| 8d 0d da c0 ff ff ff 15 | c4 6c ff ff 48 8d 0d 0d |........|.l..H...|
|00000530| 7d ff ff ff 15 9f 6d ff | ff 48 8d 0d 80 bd ff ff |}.....m.|.H......|
|00000540| 45 33 c0 41 8b d5 4c 89 | 25 9b c0 ff ff ff 15 5d |E3.A..L.|%......]|
|00000550| 6d ff ff 48 8d 0d 66 bd | ff ff ff 15 c0 6d ff ff |m..H..f.|.....m..|
|00000560| 4c 8d 0d 29 df fe ff 4c | 8d 05 06 df fe ff 48 8d |L..)...L|......H.|
|00000570| 15 e7 de fe ff 48 8d 0d | 04 c0 ff ff 4c 89 64 24 |.....H..|....L.d$|
|00000580| 20 ff 15 e9 6b ff ff ff | 15 ab 6b ff ff 45 8b c4 | ...k...|..k..E..|
|00000590| 4c 8b d8 49 8b fc 4a 8d | 0c 1f 80 39 53 75 2a 45 |L..I..J.|...9Su*E|
|000005a0| 8b 8f a0 86 00 00 44 3b | 09 75 14 66 45 8b 8f a4 |......D;|.u.fE...|
|000005b0| 86 00 00 66 44 3b 49 04 | 75 05 41 8b c4 eb 05 1b |...fD;I.|u.A.....|
|000005c0| c0 83 d8 ff 41 3b c4 74 | 12 49 03 fd 45 03 c5 48 |....A;.t|.I..E..H|
|000005d0| 81 ff 00 30 00 00 7c be | 45 8b c4 44 89 05 4a 90 |...0..|.|E..D..J.|
|000005e0| ff ff 48 8d 15 e7 6f ff | ff 4c 8d 05 f8 bd ff ff |..H...o.|.L......|
|000005f0| 48 8b cb e8 b6 4a ff ff | 41 3b c4 8b f8 0f 8c bf |H....J..|A;......|
|00000600| 02 00 00 48 8d 15 26 06 | 00 00 48 8d 4c 24 40 ff |...H..&.|..H.L$@.|
|00000610| 15 bb 6c ff ff 48 8d 15 | 24 91 ff ff 4c 8d 44 24 |..l..H..|$...L.D$|
|00000620| 40 48 89 54 24 30 44 8b | ce 48 8b cb 33 d2 44 88 |@H.T$0D.|.H..3.D.|
|00000630| 64 24 28 44 89 74 24 20 | ff 15 aa 6b ff ff 41 3b |d$(D.t$ |...k..A;|
|00000640| c4 8b f8 0f 8c 79 02 00 | 00 48 8d 15 20 06 00 00 |.....y..|.H.. ...|
|00000650| 48 8d 4c 24 60 ff 15 75 | 6c ff ff 48 8d 54 24 40 |H.L$`..u|l..H.T$@|
|00000660| 48 8d 4c 24 60 ff 15 55 | 6b ff ff 41 3b c4 8b f8 |H.L$`..U|k..A;...|
|00000670| 0f 8c 4c 02 00 00 48 8d | 05 ab ee ff ff 48 8d 7b |..L...H.|.....H.{|
|00000680| 70 b9 1c 00 00 00 f3 48 | ab 48 8d 05 48 2b ff ff |p......H|.H..H+..|
|00000690| 48 8d 15 09 06 00 00 48 | 89 83 e0 00 00 00 48 8d |H......H|......H.|
|000006a0| 05 6b 7a ff ff 48 8d 4c | 24 40 48 89 43 50 41 8b |.kz..H.L|$@H.CPA.|
|000006b0| ed ff 15 19 6c ff ff 48 | 8d 8c 24 00 01 00 00 ba |....l..H|..$.....|
|000006c0| 01 00 1f 00 e8 d9 49 ff | ff 41 3b c4 8b f8 0f 8c |......I.|.A;.....|
|000006d0| 63 02 00 00 48 8b 0d 0d | bd ff ff 44 89 6c 24 38 |c...H...|...D.l$8|
|000006e0| 48 8d 44 24 40 48 89 84 | 24 90 00 00 00 48 8b 84 |H.D$@H..|$....H..|
|000006f0| 24 00 01 00 00 4c 8d 84 | 24 80 00 00 00 48 89 84 |$....L..|$....H..|
|00000700| 24 a0 00 00 00 48 8d 05 | 7c e4 fe ff 48 8d 15 dd |$....H..||...H...|
|00000710| bc ff ff 48 89 44 24 30 | 48 8d 05 2d dd ff ff 45 |...H.D$0|H..-...E|
|00000720| 33 c9 48 89 44 24 28 48 | 8d 05 f2 dc ff ff c7 84 |3.H.D$(H|........|
|00000730| 24 80 00 00 00 30 00 00 | 00 4c 89 a4 24 88 00 00 |$....0..|.L..$...|
|00000740| 00 c7 84 24 98 00 00 00 | 40 02 00 00 4c 89 a4 24 |...$....|@...L..$|
|00000750| a8 00 00 00 48 89 44 24 | 20 e8 90 48 ff ff 48 8b |....H.D$| ..H..H.|
|00000760| 8c 24 00 01 00 00 8b f8 | e8 bd 48 ff ff 41 3b fc |.$......|..H..A;.|
|00000770| 0f 8c c1 01 00 00 48 8b | 0d 6b bc ff ff e8 50 49 |......H.|.k....PI|
|00000780| ff ff 41 3b c4 8b f8 0f | 8c 9e 01 00 00 8b 05 2d |..A;....|.......-|
|00000790| 8f ff ff b9 02 00 00 00 | 41 8b fc 03 c0 41 3b c4 |........|A....A;.|
|000007a0| 0f 44 c1 3b c6 0f 47 c6 | be ff ff 1f 00 41 3b c4 |.D.;..G.|.....A;.|
|000007b0| 89 05 da 7b ff ff 76 59 | 44 89 a4 24 0c 01 00 00 |...{..vY|D..$....|
|000007c0| 8b c7 89 bc 24 08 01 00 | 00 45 33 c9 49 8d 8c c7 |....$...|.E3.I...|
|000007d0| a0 b3 00 00 48 8b 84 24 | 08 01 00 00 45 33 c0 48 |....H..$|....E3.H|
|000007e0| 89 44 24 30 48 8d 05 49 | 1c ff ff 8b d6 48 89 44 |.D$0H..I|.....H.D|
|000007f0| 24 28 4c 89 64 24 20 ff | 15 13 69 ff ff 41 3b c4 |$(L.d$ .|..i..A;.|
|00000800| 0f 85 b7 00 00 00 41 03 | fd 3b 3d 81 7b ff ff 72 |......A.|.;=.{..r|
|00000810| af 48 8b 05 30 8e ff ff | 48 8d 0d 11 8e ff ff 45 |.H..0...|H......E|
|00000820| 33 c9 48 89 44 24 30 48 | 8d 05 a6 dc fe ff 45 33 |3.H.D$0H|......E3|
|00000830| c0 48 89 44 24 28 8b d6 | 4c 89 64 24 20 ff 15 cd |.H.D$(..|L.d$ ...|
|00000840| 68 ff ff 41 3b c4 75 75 | 48 8b 0d e1 8d ff ff 48 |h..A;.uu|H......H|
|00000850| 8d 05 fa 8d ff ff 45 33 | c9 45 33 c0 8b d6 4c 89 |......E3|.E3...L.|
|00000860| 64 24 28 48 89 44 24 20 | ff 15 0a 69 ff ff 41 3b |d$(H.D$ |...i..A;|
|00000870| c4 74 6a 48 8b 0d ce 8d | ff ff 45 33 c0 33 d2 44 |.tjH....|..E3.3.D|
|00000880| 89 2d 96 8d ff ff ff 15 | 3c 6a ff ff 48 8d 0d 2d |.-......|<j..H..-|
|00000890| ba ff ff 45 33 c9 45 33 | c0 33 d2 4c 89 64 24 20 |...E3.E3|.3.L.d$ |
|000008a0| ff 15 da 68 ff ff 48 8b | 0d 83 8d ff ff ff 15 a5 |...h..H.|........|
|000008b0| 68 ff ff b9 e8 03 00 00 | e8 eb db fe ff bf a0 00 |h.......|........|
|000008c0| 00 c0 48 8d 0d 57 bb ff | ff 45 33 c0 33 d2 ff 15 |..H..W..|.E3.3...|
|000008d0| f4 69 ff ff bb 0a 00 00 | 00 8b cb eb 70 48 8b 0d |.i......|....pH..|
|000008e0| 4c 8d ff ff ff 15 6e 68 | ff ff 48 8d 0d 23 1b ff |L.....nh|..H..#..|
|000008f0| ff 33 d2 44 88 2d 9a 7a | ff ff ff 15 80 69 ff ff |.3.D.-.z|.....i..|
|00000900| 44 39 25 75 8d ff ff 48 | 89 1d 52 8d ff ff 75 14 |D9%u...H|..R...u.|
|00000910| 48 8d 0d a9 03 00 00 4c | 8b c3 ba 11 00 07 40 e8 |H......L|......@.|
|00000920| 38 35 ff ff 33 c0 e9 af | 00 00 00 48 8b 0d be ba |85..3...|...H....|
|00000930| ff ff e8 53 47 ff ff 48 | 8b 0d aa ba ff ff e8 3b |...SG..H|.......;|
|00000940| 47 ff ff e9 7a ff ff ff | b9 64 00 00 00 e8 56 db |G...z...|.d....V.|
|00000950| fe ff 44 39 25 27 7a ff | ff 75 ed 8b cb e8 46 db |..D9%'z.|.u....F.|
|00000960| fe ff 41 3b ec 74 2f 48 | 8d 15 e2 ed ff ff 48 8d |..A;.t/H|......H.|
|00000970| 4c 24 70 ff 15 57 69 ff | ff 48 8d 4c 24 70 ff 15 |L$p..Wi.|.H.L$p..|
|00000980| c4 68 ff ff 48 8b 0d b5 | 8d ff ff 49 3b cc 74 06 |.h..H...|...I;.t.|
|00000990| ff 15 ba 68 ff ff 48 8d | 0d 77 1a ff ff 41 8a d5 |...h..H.|.w...A..|
|000009a0| ff 15 da 68 ff ff e8 d9 | 35 ff ff e8 a0 29 ff ff |...h....|5....)..|
|000009b0| 4c 39 25 91 8c ff ff 74 | 13 48 8b 0d 38 78 ff ff |L9%....t|.H..8x..|
|000009c0| 48 83 f9 ff 74 06 ff 15 | 8c 67 ff ff 8b c7 eb 0a |H...t...|.g......|
|000009d0| e8 af 35 ff ff b8 a0 00 | 00 c0 48 8b 9c 24 f0 00 |..5.....|..H..$..|
|000009e0| 00 00 48 81 c4 b0 00 00 | 00 41 5f 41 5e 41 5d 41 |..H.....|.A_A^A]A|
|000009f0| 5c 5f 5e 5d c3 cc cc cc | cc cc cc cc 48 8b 05 fd |\_^]....|....H...|
|00000a00| 76 ff ff 49 b9 32 a2 df | 2d 99 2b 00 00 48 85 c0 |v..I.2..|-.+..H..|
|00000a10| 74 05 49 3b c1 75 2f 4c | 8d 05 e2 76 ff ff 48 b8 |t.I;.u/L|...v..H.|
|00000a20| 20 03 00 00 80 f7 ff ff | 48 8b 00 49 33 c0 49 b8 | .......|H..I3.I.|
|00000a30| ff ff ff ff ff ff 00 00 | 49 23 c0 49 0f 44 c1 48 |........|I#.I.D.H|
|00000a40| 89 05 ba 76 ff ff 48 f7 | d0 48 89 05 b8 76 ff ff |...v..H.|.H...v..|
|00000a50| e9 b3 f5 ff ff cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000a60| 46 6c 74 47 65 74 45 63 | 70 4c 69 73 74 46 72 6f |FltGetEc|pListFro|
|00000a70| 6d 43 61 6c 6c 62 61 63 | 6b 44 61 74 61 00 cc cc |mCallbac|kData...|
|00000a80| 46 6c 74 46 69 6e 64 45 | 78 74 72 61 43 72 65 61 |FltFindE|xtraCrea|
|00000a90| 74 65 50 61 72 61 6d 65 | 74 65 72 00 cc cc cc cc |teParame|ter.....|
|00000aa0| 46 6c 74 49 73 45 63 70 | 46 72 6f 6d 55 73 65 72 |FltIsEcp|FromUser|
|00000ab0| 4d 6f 64 65 00 cc cc cc | cc cc cc cc cc cc cc cc |Mode....|........|
|00000ac0| 46 6c 74 43 72 65 61 74 | 65 46 69 6c 65 45 78 32 |FltCreat|eFileEx2|
|00000ad0| 00 cc cc cc cc cc cc cc | cc cc cc cc cc cc cc cc |........|........|
|00000ae0| 46 6c 74 52 65 74 72 69 | 65 76 65 49 6f 50 72 69 |FltRetri|eveIoPri|
|00000af0| 6f 72 69 74 79 49 6e 66 | 6f 00 cc cc cc cc cc cc |orityInf|o.......|
|00000b00| 46 6c 74 41 70 70 6c 79 | 50 72 69 6f 72 69 74 79 |FltApply|Priority|
|00000b10| 49 6e 66 6f 54 68 72 65 | 61 64 00 cc cc cc cc cc |InfoThre|ad......|
|00000b20| 49 00 6f 00 47 00 65 00 | 74 00 54 00 72 00 61 00 |I.o.G.e.|t.T.r.a.|
|00000b30| 6e 00 73 00 61 00 63 00 | 74 00 69 00 6f 00 6e 00 |n.s.a.c.|t.i.o.n.|
|00000b40| 50 00 61 00 72 00 61 00 | 6d 00 65 00 74 00 65 00 |P.a.r.a.|m.e.t.e.|
|00000b50| 72 00 42 00 6c 00 6f 00 | 63 00 6b 00 00 00 cc cc |r.B.l.o.|c.k.....|
|00000b60| 46 6c 74 45 6e 6c 69 73 | 74 49 6e 54 72 61 6e 73 |FltEnlis|tInTrans|
|00000b70| 61 63 74 69 6f 6e 00 cc | cc cc cc cc cc cc cc cc |action..|........|
|00000b80| 46 6c 74 53 65 74 54 72 | 61 6e 73 61 63 74 69 6f |FltSetTr|ansactio|
|00000b90| 6e 43 6f 6e 74 65 78 74 | 00 cc cc cc cc cc cc cc |nContext|........|
|00000ba0| 46 6c 74 47 65 74 54 72 | 61 6e 73 61 63 74 69 6f |FltGetTr|ansactio|
|00000bb0| 6e 43 6f 6e 74 65 78 74 | 00 cc cc cc cc cc cc cc |nContext|........|
|00000bc0| 46 6c 74 49 73 4f 70 65 | 72 61 74 69 6f 6e 53 79 |FltIsOpe|rationSy|
|00000bd0| 6e 63 68 72 6f 6e 6f 75 | 73 00 cc cc cc cc cc cc |nchronou|s.......|
|00000be0| 46 6c 74 49 73 44 69 72 | 65 63 74 6f 72 79 00 cc |FltIsDir|ectory..|
|00000bf0| 5c 00 42 00 61 00 73 00 | 65 00 4e 00 61 00 6d 00 |\.B.a.s.|e.N.a.m.|
|00000c00| 65 00 64 00 4f 00 62 00 | 6a 00 65 00 63 00 74 00 |e.d.O.b.|j.e.c.t.|
|00000c10| 73 00 5c 00 61 00 76 00 | 67 00 69 00 6f 00 5f 00 |s.\.a.v.|g.i.o._.|
|00000c20| 6b 00 73 00 68 00 64 00 | 00 00 cc cc cc cc cc cc |k.s.h.d.|........|
|00000c30| 5c 00 46 00 69 00 6c 00 | 65 00 53 00 79 00 73 00 |\.F.i.l.|e.S.y.s.|
|00000c40| 74 00 65 00 6d 00 5c 00 | 46 00 69 00 6c 00 74 00 |t.e.m.\.|F.i.l.t.|
|00000c50| 65 00 72 00 73 00 5c 00 | 61 00 76 00 67 00 6e 00 |e.r.s.\.|a.v.g.n.|
|00000c60| 74 00 66 00 6c 00 74 00 | 00 00 cc cc cc cc cc cc |t.f.l.t.|........|
|00000c70| 5c 00 44 00 6f 00 73 00 | 44 00 65 00 76 00 69 00 |\.D.o.s.|D.e.v.i.|
|00000c80| 63 00 65 00 73 00 5c 00 | 61 00 76 00 67 00 6e 00 |c.e.s.\.|a.v.g.n.|
|00000c90| 74 00 66 00 6c 00 74 00 | 00 00 cc cc cc cc cc cc |t.f.l.t.|........|
|00000ca0| 5c 00 41 00 56 00 47 00 | 50 00 6f 00 72 00 74 00 |\.A.V.G.|P.o.r.t.|
|00000cb0| 31 00 00 00 cc cc cc cc | cc cc cc cc cc cc cc cc |1.......|........|
|00000cc0| 41 00 56 00 47 00 4e 00 | 54 00 46 00 4c 00 54 00 |A.V.G.N.|T.F.L.T.|
|00000cd0| 20 00 73 00 75 00 63 00 | 63 00 65 00 73 00 73 00 | .s.u.c.|c.e.s.s.|
|00000ce0| 66 00 75 00 6c 00 6c 00 | 79 00 20 00 6c 00 6f 00 |f.u.l.l.|y. .l.o.|
|00000cf0| 61 00 64 00 65 00 64 00 | 00 00 cc cc 28 3e 01 00 |a.d.e.d.|....(>..|
|00000d00| 00 00 00 00 00 00 00 00 | be 47 01 00 f0 a0 00 00 |........|.G......|
|00000d10| 38 3d 01 00 00 00 00 00 | 00 00 00 00 9c 4a 01 00 |8=......|.....J..|
|00000d20| 00 a0 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000d30| 00 00 00 00 00 00 00 00 | 6a 4a 01 00 00 00 00 00 |........|jJ......|
|00000d40| 4a 4a 01 00 00 00 00 00 | 36 4a 01 00 00 00 00 00 |JJ......|6J......|
|00000d50| 12 4a 01 00 00 00 00 00 | fa 49 01 00 00 00 00 00 |.J......|.I......|
|00000d60| de 49 01 00 00 00 00 00 | c8 49 01 00 00 00 00 00 |.I......|.I......|
|00000d70| ac 49 01 00 00 00 00 00 | 96 49 01 00 00 00 00 00 |.I......|.I......|
|00000d80| 8a 49 01 00 00 00 00 00 | 76 49 01 00 00 00 00 00 |.I......|vI......|
|00000d90| 5c 49 01 00 00 00 00 00 | 4c 49 01 00 00 00 00 00 |\I......|LI......|
|00000da0| 30 49 01 00 00 00 00 00 | 16 49 01 00 00 00 00 00 |0I......|.I......|
|00000db0| fe 48 01 00 00 00 00 00 | da 48 01 00 00 00 00 00 |.H......|.H......|
|00000dc0| c2 48 01 00 00 00 00 00 | a4 48 01 00 00 00 00 00 |.H......|.H......|
|00000dd0| 90 48 01 00 00 00 00 00 | 7a 48 01 00 00 00 00 00 |.H......|zH......|
|00000de0| 66 48 01 00 00 00 00 00 | 50 48 01 00 00 00 00 00 |fH......|PH......|
|00000df0| 34 48 01 00 00 00 00 00 | 22 48 01 00 00 00 00 00 |4H......|"H......|
|00000e00| 0a 48 01 00 00 00 00 00 | ee 47 01 00 00 00 00 00 |.H......|.G......|
|00000e10| cc 47 01 00 00 00 00 00 | 88 4a 01 00 00 00 00 00 |.G......|.J......|
|00000e20| 00 00 00 00 00 00 00 00 | 8c 43 01 00 00 00 00 00 |........|.C......|
|00000e30| a6 43 01 00 00 00 00 00 | be 43 01 00 00 00 00 00 |.C......|.C......|
|00000e40| c8 43 01 00 00 00 00 00 | e6 43 01 00 00 00 00 00 |.C......|.C......|
|00000e50| fe 43 01 00 00 00 00 00 | 1e 44 01 00 00 00 00 00 |.C......|.D......|
|00000e60| 30 44 01 00 00 00 00 00 | 4a 44 01 00 00 00 00 00 |0D......|JD......|
|00000e70| 68 44 01 00 00 00 00 00 | 7e 44 01 00 00 00 00 00 |hD......|~D......|
|00000e80| 96 44 01 00 00 00 00 00 | ae 44 01 00 00 00 00 00 |.D......|.D......|
|00000e90| c6 44 01 00 00 00 00 00 | d0 44 01 00 00 00 00 00 |.D......|.D......|
|00000ea0| e4 44 01 00 00 00 00 00 | fe 44 01 00 00 00 00 00 |.D......|.D......|
|00000eb0| 1e 45 01 00 00 00 00 00 | 3a 45 01 00 00 00 00 00 |.E......|:E......|
|00000ec0| 52 45 01 00 00 00 00 00 | 6a 45 01 00 00 00 00 00 |RE......|jE......|
|00000ed0| 7c 45 01 00 00 00 00 00 | 96 45 01 00 00 00 00 00 ||E......|.E......|
|00000ee0| b8 45 01 00 00 00 00 00 | 72 43 01 00 00 00 00 00 |.E......|rC......|
|00000ef0| e4 45 01 00 00 00 00 00 | ee 45 01 00 00 00 00 00 |.E......|.E......|
|00000f00| 06 46 01 00 00 00 00 00 | 1e 46 01 00 00 00 00 00 |.F......|.F......|
|00000f10| 36 46 01 00 00 00 00 00 | 58 46 01 00 00 00 00 00 |6F......|XF......|
|00000f20| 70 46 01 00 00 00 00 00 | 82 46 01 00 00 00 00 00 |pF......|.F......|
|00000f30| 9e 46 01 00 00 00 00 00 | b4 46 01 00 00 00 00 00 |.F......|.F......|
|00000f40| ce 46 01 00 00 00 00 00 | ea 46 01 00 00 00 00 00 |.F......|.F......|
|00000f50| 0c 47 01 00 00 00 00 00 | 1c 47 01 00 00 00 00 00 |.G......|.G......|
|00000f60| 38 47 01 00 00 00 00 00 | 46 47 01 00 00 00 00 00 |8G......|FG......|
|00000f70| 52 47 01 00 00 00 00 00 | 60 47 01 00 00 00 00 00 |RG......|`G......|
|00000f80| 6e 47 01 00 00 00 00 00 | 86 47 01 00 00 00 00 00 |nG......|.G......|
|00000f90| 98 47 01 00 00 00 00 00 | ae 47 01 00 00 00 00 00 |.G......|.G......|
|00000fa0| 52 43 01 00 00 00 00 00 | 3a 43 01 00 00 00 00 00 |RC......|:C......|
|00000fb0| 22 43 01 00 00 00 00 00 | 00 43 01 00 00 00 00 00 |"C......|.C......|
|00000fc0| e2 42 01 00 00 00 00 00 | d4 42 01 00 00 00 00 00 |.B......|.B......|
|00000fd0| ca 42 01 00 00 00 00 00 | ba 42 01 00 00 00 00 00 |.B......|.B......|
|00000fe0| a6 42 01 00 00 00 00 00 | 92 42 01 00 00 00 00 00 |.B......|.B......|
|00000ff0| 76 42 01 00 00 00 00 00 | 56 42 01 00 00 00 00 00 |vB......|VB......|
|00001000| 48 42 01 00 00 00 00 00 | 30 42 01 00 00 00 00 00 |HB......|0B......|
|00001010| 1a 42 01 00 00 00 00 00 | 06 42 01 00 00 00 00 00 |.B......|.B......|
|00001020| f2 41 01 00 00 00 00 00 | dc 41 01 00 00 00 00 00 |.A......|.A......|
|00001030| bc 41 01 00 00 00 00 00 | a4 41 01 00 00 00 00 00 |.A......|.A......|
|00001040| 8e 41 01 00 00 00 00 00 | 7e 41 01 00 00 00 00 00 |.A......|~A......|
|00001050| 6a 41 01 00 00 00 00 00 | 5a 41 01 00 00 00 00 00 |jA......|ZA......|
|00001060| 42 41 01 00 00 00 00 00 | 2e 41 01 00 00 00 00 00 |BA......|.A......|
|00001070| 0c 41 01 00 00 00 00 00 | ea 40 01 00 00 00 00 00 |.A......|.@......|
|00001080| d0 45 01 00 00 00 00 00 | c8 40 01 00 00 00 00 00 |.E......|.@......|
|00001090| a8 4a 01 00 00 00 00 00 | c0 4a 01 00 00 00 00 00 |.J......|.J......|
|000010a0| da 4a 01 00 00 00 00 00 | f6 4a 01 00 00 00 00 00 |.J......|.J......|
|000010b0| 12 4b 01 00 00 00 00 00 | 26 4b 01 00 00 00 00 00 |.K......|&K......|
|000010c0| 00 00 00 00 00 00 00 00 | e5 04 52 74 6c 44 65 6c |........|..RtlDel|
|000010d0| 65 74 65 45 6c 65 6d 65 | 6e 74 47 65 6e 65 72 69 |eteEleme|ntGeneri|
|000010e0| 63 54 61 62 6c 65 41 76 | 6c 00 5c 00 45 78 41 63 |cTableAv|l.\.ExAc|
|000010f0| 71 75 69 72 65 52 65 73 | 6f 75 72 63 65 45 78 63 |quireRes|ourceExc|
|00001100| 6c 75 73 69 76 65 4c 69 | 74 65 00 00 37 05 52 74 |lusiveLi|te..7.Rt|
|00001110| 6c 49 6e 73 65 72 74 45 | 6c 65 6d 65 6e 74 47 65 |lInsertE|lementGe|
|00001120| 6e 65 72 69 63 54 61 62 | 6c 65 41 76 6c 00 5c 02 |nericTab|leAvl.\.|
|00001130| 49 6f 54 68 72 65 61 64 | 54 6f 50 72 6f 63 65 73 |IoThread|ToProces|
|00001140| 73 00 6d 00 45 78 41 6c | 6c 6f 63 61 74 65 50 6f |s.m.ExAl|locatePo|
|00001150| 6f 6c 57 69 74 68 54 61 | 67 00 a1 02 4b 65 43 6c |olWithTa|g...KeCl|
|00001160| 65 61 72 45 76 65 6e 74 | 00 00 85 00 45 78 46 72 |earEvent|....ExFr|
|00001170| 65 65 50 6f 6f 6c 57 69 | 74 68 54 61 67 00 02 03 |eePoolWi|thTag...|
|00001180| 4b 65 52 65 73 65 74 45 | 76 65 6e 74 00 00 ae 00 |KeResetE|vent....|
|00001190| 45 78 52 65 6c 65 61 73 | 65 46 61 73 74 4d 75 74 |ExReleas|eFastMut|
|000011a0| 65 78 00 00 d1 02 4b 65 | 4c 65 61 76 65 43 72 69 |ex....Ke|LeaveCri|
|000011b0| 74 69 63 61 6c 52 65 67 | 69 6f 6e 00 b1 04 52 74 |ticalReg|ion...Rt|
|000011c0| 6c 41 6e 73 69 53 74 72 | 69 6e 67 54 6f 55 6e 69 |lAnsiStr|ingToUni|
|000011d0| 63 6f 64 65 53 74 72 69 | 6e 67 00 00 5a 00 45 78 |codeStri|ng..Z.Ex|
|000011e0| 41 63 71 75 69 72 65 46 | 61 73 74 4d 75 74 65 78 |AcquireF|astMutex|
|000011f0| 00 00 02 02 49 6f 47 65 | 74 53 74 61 63 6b 4c 69 |....IoGe|tStackLi|
|00001200| 6d 69 74 73 00 00 7d 04 | 50 73 49 73 53 79 73 74 |mits..}.|PsIsSyst|
|00001210| 65 6d 54 68 72 65 61 64 | 00 00 8c 01 49 6e 69 74 |emThread|....Init|
|00001220| 69 61 6c 69 7a 65 53 4c | 69 73 74 48 65 61 64 00 |ializeSL|istHead.|
|00001230| 2e 05 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|00001240| 53 74 72 69 6e 67 00 00 | 0d 03 4b 65 53 65 74 45 |String..|..KeSetE|
|00001250| 76 65 6e 74 00 00 d9 00 | 45 78 70 49 6e 74 65 72 |vent....|ExpInter|
|00001260| 6c 6f 63 6b 65 64 50 75 | 73 68 45 6e 74 72 79 53 |lockedPu|shEntryS|
|00001270| 4c 69 73 74 00 00 64 03 | 4d 6d 47 65 74 53 79 73 |List..d.|MmGetSys|
|00001280| 74 65 6d 52 6f 75 74 69 | 6e 65 41 64 64 72 65 73 |temRouti|neAddres|
|00001290| 73 00 ba 02 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |s...KeIn|itialize|
|000012a0| 45 76 65 6e 74 00 2a 05 | 52 74 6c 49 6e 69 74 41 |Event.*.|RtlInitA|
|000012b0| 6e 73 69 53 74 72 69 6e | 67 00 23 05 52 74 6c 47 |nsiStrin|g.#.RtlG|
|000012c0| 65 74 56 65 72 73 69 6f | 6e 00 55 07 77 63 73 6e |etVersio|n.U.wcsn|
|000012d0| 63 61 74 00 cf 05 52 74 | 6c 56 61 6c 69 64 53 69 |cat...Rt|lValidSi|
|000012e0| 64 00 d8 00 45 78 70 49 | 6e 74 65 72 6c 6f 63 6b |d...ExpI|nterlock|
|000012f0| 65 64 50 6f 70 45 6e 74 | 72 79 53 4c 69 73 74 00 |edPopEnt|rySList.|
|00001300| 95 04 50 73 53 65 74 43 | 72 65 61 74 65 50 72 6f |..PsSetC|reatePro|
|00001310| 63 65 73 73 4e 6f 74 69 | 66 79 52 6f 75 74 69 6e |cessNoti|fyRoutin|
|00001320| 65 00 a8 02 4b 65 45 6e | 74 65 72 43 72 69 74 69 |e...KeEn|terCriti|
|00001330| 63 61 6c 52 65 67 69 6f | 6e 00 f2 06 5a 77 53 65 |calRegio|n...ZwSe|
|00001340| 74 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 46 69 6c 65 |tInforma|tionFile|
|00001350| 00 00 c3 01 49 6f 43 72 | 65 61 74 65 53 79 6e 63 |....IoCr|eateSync|
|00001360| 68 72 6f 6e 69 7a 61 74 | 69 6f 6e 45 76 65 6e 74 |hronizat|ionEvent|
|00001370| 00 00 f1 05 53 65 43 72 | 65 61 74 65 43 6c 69 65 |....SeCr|eateClie|
|00001380| 6e 74 53 65 63 75 72 69 | 74 79 00 00 a2 02 4b 65 |ntSecuri|ty....Ke|
|00001390| 44 65 6c 61 79 45 78 65 | 63 75 74 69 6f 6e 54 68 |DelayExe|cutionTh|
|000013a0| 72 65 61 64 00 00 0f 05 | 52 74 6c 46 72 65 65 55 |read....|RtlFreeU|
|000013b0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 43 07 |nicodeSt|ring..C.|
|000013c0| 73 74 72 6e 63 70 79 00 | 73 00 45 78 44 65 6c 65 |strncpy.|s.ExDele|
|000013d0| 74 65 50 61 67 65 64 4c | 6f 6f 6b 61 73 69 64 65 |tePagedL|ookaside|
|000013e0| 4c 69 73 74 00 00 43 04 | 50 73 43 72 65 61 74 65 |List..C.|PsCreate|
|000013f0| 53 79 73 74 65 6d 54 68 | 72 65 61 64 00 00 75 03 |SystemTh|read..u.|
|00001400| 4d 6d 4d 61 70 4c 6f 63 | 6b 65 64 50 61 67 65 73 |MmMapLoc|kedPages|
|00001410| 53 70 65 63 69 66 79 43 | 61 63 68 65 00 00 d7 06 |SpecifyC|ache....|
|00001420| 5a 77 51 75 65 72 79 56 | 61 6c 75 65 4b 65 79 00 |ZwQueryV|alueKey.|
|00001430| a4 04 50 73 54 65 72 6d | 69 6e 61 74 65 53 79 73 |..PsTerm|inateSys|
|00001440| 74 65 6d 54 68 72 65 61 | 64 00 5d 00 45 78 41 63 |temThrea|d.].ExAc|
|00001450| 71 75 69 72 65 52 65 73 | 6f 75 72 63 65 53 68 61 |quireRes|ourceSha|
|00001460| 72 65 64 4c 69 74 65 00 | ec 01 49 6f 47 65 74 43 |redLite.|..IoGetC|
|00001470| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 00 b4 00 |urrentPr|ocess...|
|00001480| 45 78 52 65 6c 65 61 73 | 65 52 65 73 6f 75 72 63 |ExReleas|eResourc|
|00001490| 65 4c 69 74 65 00 6f 05 | 52 74 6c 4e 74 53 74 61 |eLite.o.|RtlNtSta|
|000014a0| 74 75 73 54 6f 44 6f 73 | 45 72 72 6f 72 00 e0 02 |tusToDos|Error...|
|000014b0| 4b 65 51 75 65 72 79 54 | 69 6d 65 49 6e 63 72 65 |KeQueryT|imeIncre|
|000014c0| 6d 65 6e 74 00 00 71 06 | 5a 77 43 6c 6f 73 65 00 |ment..q.|ZwClose.|
|000014d0| a1 00 45 78 51 75 65 72 | 79 44 65 70 74 68 53 4c |..ExQuer|yDepthSL|
|000014e0| 69 73 74 00 0a 06 53 65 | 51 75 65 72 79 49 6e 66 |ist...Se|QueryInf|
|000014f0| 6f 72 6d 61 74 69 6f 6e | 54 6f 6b 65 6e 00 32 05 |ormation|Token.2.|
|00001500| 52 74 6c 49 6e 69 74 69 | 61 6c 69 7a 65 47 65 6e |RtlIniti|alizeGen|
|00001510| 65 72 69 63 54 61 62 6c | 65 41 76 6c 00 00 11 04 |ericTabl|eAvl....|
|00001520| 4f 62 52 65 66 65 72 65 | 6e 63 65 4f 62 6a 65 63 |ObRefere|nceObjec|
|00001530| 74 42 79 48 61 6e 64 6c | 65 00 2c 03 4b 65 57 61 |tByHandl|e.,.KeWa|
|00001540| 69 74 46 6f 72 53 69 6e | 67 6c 65 4f 62 6a 65 63 |itForSin|gleObjec|
|00001550| 74 00 fd 05 53 65 49 6d | 70 65 72 73 6f 6e 61 74 |t...SeIm|personat|
|00001560| 65 43 6c 69 65 6e 74 45 | 78 00 93 04 50 73 52 65 |eClientE|x...PsRe|
|00001570| 76 65 72 74 54 6f 53 65 | 6c 66 00 00 c8 04 52 74 |vertToSe|lf....Rt|
|00001580| 6c 43 6f 6d 70 61 72 65 | 55 6e 69 63 6f 64 65 53 |lCompare|UnicodeS|
|00001590| 74 72 69 6e 67 00 44 04 | 50 73 44 65 72 65 66 65 |tring.D.|PsDerefe|
|000015a0| 72 65 6e 63 65 49 6d 70 | 65 72 73 6f 6e 61 74 69 |renceImp|ersonati|
|000015b0| 6f 6e 54 6f 6b 65 6e 00 | 74 00 45 78 44 65 6c 65 |onToken.|t.ExDele|
|000015c0| 74 65 52 65 73 6f 75 72 | 63 65 4c 69 74 65 00 00 |teResour|ceLite..|
|000015d0| 03 02 49 6f 47 65 74 54 | 6f 70 4c 65 76 65 6c 49 |..IoGetT|opLevelI|
|000015e0| 72 70 00 00 25 07 5f 77 | 63 73 75 70 72 00 c2 01 |rp..%._w|csupr...|
|000015f0| 49 6f 43 72 65 61 74 65 | 53 79 6d 62 6f 6c 69 63 |IoCreate|Symbolic|
|00001600| 4c 69 6e 6b 00 00 50 04 | 50 73 47 65 74 43 75 72 |Link..P.|PsGetCur|
|00001610| 72 65 6e 74 54 68 72 65 | 61 64 49 64 00 00 4b 04 |rentThre|adId..K.|
|00001620| 50 73 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |PsGetCur|rentProc|
|00001630| 65 73 73 49 64 00 8e 00 | 45 78 49 6e 69 74 69 61 |essId...|ExInitia|
|00001640| 6c 69 7a 65 50 61 67 65 | 64 4c 6f 6f 6b 61 73 69 |lizePage|dLookasi|
|00001650| 64 65 4c 69 73 74 00 00 | 1b 04 4f 62 66 44 65 72 |deList..|..ObfDer|
|00001660| 65 66 65 72 65 6e 63 65 | 4f 62 6a 65 63 74 00 00 |eference|Object..|
|00001670| b8 01 49 6f 43 72 65 61 | 74 65 44 65 76 69 63 65 |..IoCrea|teDevice|
|00001680| 00 00 90 00 45 78 49 6e | 69 74 69 61 6c 69 7a 65 |....ExIn|itialize|
|00001690| 52 65 73 6f 75 72 63 65 | 4c 69 74 65 00 00 d5 02 |Resource|Lite....|
|000016a0| 4b 65 4e 75 6d 62 65 72 | 50 72 6f 63 65 73 73 6f |KeNumber|Processo|
|000016b0| 72 73 00 00 c7 06 5a 77 | 51 75 65 72 79 49 6e 66 |rs....Zw|QueryInf|
|000016c0| 6f 72 6d 61 74 69 6f 6e | 46 69 6c 65 00 00 2a 03 |ormation|File..*.|
|000016d0| 4b 65 57 61 69 74 46 6f | 72 4d 75 6c 74 69 70 6c |KeWaitFo|rMultipl|
|000016e0| 65 4f 62 6a 65 63 74 73 | 00 00 62 05 52 74 6c 4c |eObjects|..b.RtlL|
|000016f0| 6f 6f 6b 75 70 45 6c 65 | 6d 65 6e 74 47 65 6e 65 |ookupEle|mentGene|
|00001700| 72 69 63 54 61 62 6c 65 | 41 76 6c 00 5d 05 52 74 |ricTable|Avl.].Rt|
|00001710| 6c 4c 65 6e 67 74 68 53 | 69 64 00 00 45 04 50 73 |lLengthS|id..E.Ps|
|00001720| 44 65 72 65 66 65 72 65 | 6e 63 65 50 72 69 6d 61 |Derefere|ncePrima|
|00001730| 72 79 54 6f 6b 65 6e 00 | 1e 06 53 65 54 6f 6b 65 |ryToken.|..SeToke|
|00001740| 6e 54 79 70 65 00 aa 06 | 5a 77 4f 70 65 6e 4b 65 |nType...|ZwOpenKe|
|00001750| 79 00 da 06 5a 77 52 65 | 61 64 46 69 6c 65 00 00 |y...ZwRe|adFile..|
|00001760| 07 07 5a 77 57 72 69 74 | 65 46 69 6c 65 00 cf 01 |..ZwWrit|eFile...|
|00001770| 49 6f 44 65 6c 65 74 65 | 53 79 6d 62 6f 6c 69 63 |IoDelete|Symbolic|
|00001780| 4c 69 6e 6b 00 00 cd 01 | 49 6f 44 65 6c 65 74 65 |Link....|IoDelete|
|00001790| 44 65 76 69 63 65 00 00 | 7f 02 49 6f 66 43 6f 6d |Device..|..IofCom|
|000017a0| 70 6c 65 74 65 52 65 71 | 75 65 73 74 00 00 9e 02 |pleteReq|uest....|
|000017b0| 4b 65 42 75 67 43 68 65 | 63 6b 45 78 00 00 6e 74 |KeBugChe|ckEx..nt|
|000017c0| 6f 73 6b 72 6e 6c 2e 65 | 78 65 00 00 a4 00 46 6c |oskrnl.e|xe....Fl|
|000017d0| 74 52 65 66 65 72 65 6e | 63 65 46 69 6c 65 4e 61 |tReferen|ceFileNa|
|000017e0| 6d 65 49 6e 66 6f 72 6d | 61 74 69 6f 6e 00 6b 00 |meInform|ation.k.|
|000017f0| 46 6c 74 47 65 74 53 74 | 72 65 61 6d 48 61 6e 64 |FltGetSt|reamHand|
|00001800| 6c 65 43 6f 6e 74 65 78 | 74 00 5d 00 46 6c 74 47 |leContex|t.].FltG|
|00001810| 65 74 49 6e 73 74 61 6e | 63 65 43 6f 6e 74 65 78 |etInstan|ceContex|
|00001820| 74 00 b3 00 46 6c 74 53 | 65 6e 64 4d 65 73 73 61 |t...FltS|endMessa|
|00001830| 67 65 00 00 c0 00 46 6c | 74 53 65 74 53 74 72 65 |ge....Fl|tSetStre|
|00001840| 61 6d 48 61 6e 64 6c 65 | 43 6f 6e 74 65 78 74 00 |amHandle|Context.|
|00001850| a3 00 46 6c 74 52 65 66 | 65 72 65 6e 63 65 43 6f |..FltRef|erenceCo|
|00001860| 6e 74 65 78 74 00 12 00 | 46 6c 74 43 61 6e 63 65 |ntext...|FltCance|
|00001870| 6c 46 69 6c 65 4f 70 65 | 6e 00 23 00 46 6c 74 43 |lFileOpe|n.#.FltC|
|00001880| 6c 6f 73 65 43 6c 69 65 | 6e 74 50 6f 72 74 00 00 |loseClie|ntPort..|
|00001890| 31 00 46 6c 74 44 65 6c | 65 74 65 43 6f 6e 74 65 |1.FltDel|eteConte|
|000018a0| 78 74 00 00 2a 00 46 6c | 74 43 72 65 61 74 65 43 |xt..*.Fl|tCreateC|
|000018b0| 6f 6d 6d 75 6e 69 63 61 | 74 69 6f 6e 50 6f 72 74 |ommunica|tionPort|
|000018c0| 00 00 b9 00 46 6c 74 53 | 65 74 49 6e 66 6f 72 6d |....FltS|etInform|
|000018d0| 61 74 69 6f 6e 46 69 6c | 65 00 3c 00 46 6c 74 44 |ationFil|e.<.FltD|
|000018e0| 6f 43 6f 6d 70 6c 65 74 | 69 6f 6e 50 72 6f 63 65 |oComplet|ionProce|
|000018f0| 73 73 69 6e 67 57 68 65 | 6e 53 61 66 65 00 ba 00 |ssingWhe|nSafe...|
|00001900| 46 6c 74 53 65 74 49 6e | 73 74 61 6e 63 65 43 6f |FltSetIn|stanceCo|
|00001910| 6e 74 65 78 74 00 7a 00 | 46 6c 74 47 65 74 56 6f |ntext.z.|FltGetVo|
|00001920| 6c 75 6d 65 50 72 6f 70 | 65 72 74 69 65 73 00 00 |lumeProp|erties..|
|00001930| 4e 00 46 6c 74 46 72 65 | 65 53 65 63 75 72 69 74 |N.FltFre|eSecurit|
|00001940| 79 44 65 73 63 72 69 70 | 74 6f 72 00 2b 00 46 6c |yDescrip|tor.+.Fl|
|00001950| 74 43 72 65 61 74 65 46 | 69 6c 65 00 9c 00 46 6c |tCreateF|ile...Fl|
|00001960| 74 51 75 65 72 79 49 6e | 66 6f 72 6d 61 74 69 6f |tQueryIn|formatio|
|00001970| 6e 46 69 6c 65 00 a7 00 | 46 6c 74 52 65 6c 65 61 |nFile...|FltRelea|
|00001980| 73 65 43 6f 6e 74 65 78 | 74 00 22 00 46 6c 74 43 |seContex|t.".FltC|
|00001990| 6c 6f 73 65 00 00 06 00 | 46 6c 74 41 6c 6c 6f 63 |lose....|FltAlloc|
|000019a0| 61 74 65 43 6f 6e 74 65 | 78 74 00 00 57 00 46 6c |ateConte|xt..W.Fl|
|000019b0| 74 47 65 74 46 69 6c 65 | 4e 61 6d 65 49 6e 66 6f |tGetFile|NameInfo|
|000019c0| 72 6d 61 74 69 6f 6e 00 | cd 00 46 6c 74 55 6e 72 |rmation.|..FltUnr|
|000019d0| 65 67 69 73 74 65 72 46 | 69 6c 74 65 72 00 24 00 |egisterF|ilter.$.|
|000019e0| 46 6c 74 43 6c 6f 73 65 | 43 6f 6d 6d 75 6e 69 63 |FltClose|Communic|
|000019f0| 61 74 69 6f 6e 50 6f 72 | 74 00 69 00 46 6c 74 47 |ationPor|t.i.FltG|
|00001a00| 65 74 52 6f 75 74 69 6e | 65 41 64 64 72 65 73 73 |etRoutin|eAddress|
|00001a10| 00 00 11 00 46 6c 74 42 | 75 69 6c 64 44 65 66 61 |....FltB|uildDefa|
|00001a20| 75 6c 74 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |ultSecur|ityDescr|
|00001a30| 69 70 74 6f 72 00 a5 00 | 46 6c 74 52 65 67 69 73 |iptor...|FltRegis|
|00001a40| 74 65 72 46 69 6c 74 65 | 72 00 a9 00 46 6c 74 52 |terFilte|r...FltR|
|00001a50| 65 6c 65 61 73 65 46 69 | 6c 65 4e 61 6d 65 49 6e |eleaseFi|leNameIn|
|00001a60| 66 6f 72 6d 61 74 69 6f | 6e 00 93 00 46 6c 74 50 |formatio|n...FltP|
|00001a70| 61 72 73 65 46 69 6c 65 | 4e 61 6d 65 49 6e 66 6f |arseFile|NameInfo|
|00001a80| 72 6d 61 74 69 6f 6e 00 | c4 00 46 6c 74 53 74 61 |rmation.|..FltSta|
|00001a90| 72 74 46 69 6c 74 65 72 | 69 6e 67 00 46 4c 54 4d |rtFilter|ing.FLTM|
|00001aa0| 47 52 2e 53 59 53 00 00 | 79 02 49 6f 57 72 69 74 |GR.SYS..|y.IoWrit|
|00001ab0| 65 45 72 72 6f 72 4c 6f | 67 45 6e 74 72 79 00 00 |eErrorLo|gEntry..|
|00001ac0| 94 01 49 6f 41 6c 6c 6f | 63 61 74 65 45 72 72 6f |..IoAllo|cateErro|
|00001ad0| 72 4c 6f 67 45 6e 74 72 | 79 00 d5 06 5a 77 51 75 |rLogEntr|y...ZwQu|
|00001ae0| 65 72 79 53 79 6d 62 6f | 6c 69 63 4c 69 6e 6b 4f |erySymbo|licLinkO|
|00001af0| 62 6a 65 63 74 00 b1 06 | 5a 77 4f 70 65 6e 53 79 |bject...|ZwOpenSy|
|00001b00| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 4f 62 6a 65 63 74 |mbolicLi|nkObject|
|00001b10| 00 00 c5 04 52 74 6c 43 | 6f 6d 70 61 72 65 4d 65 |....RtlC|ompareMe|
|00001b20| 6d 6f 72 79 00 00 49 07 | 74 6f 75 70 70 65 72 00 |mory..I.|toupper.|
|00001b30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b80| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001b90| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001ba0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bb0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bc0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+