/ Personal Computer World 2007 December / PCWDEC07.iso / Software / Freeware / Process Monitor 1.22 / Procmon.exe / BINRES / RCDRIVERNT / INIT

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 8b ff 55 | 8b ec a1 ec 60 01 00 85 |.......U|....`...|
|00000010| c0 b9 4e e6 40 bb 74 04 | 3b c1 75 1e 8b 15 6c 5a |..N.@.t.|;.u...lZ|
|00000020| 01 00 b8 ec 60 01 00 c1 | e8 08 33 02 a3 ec 60 01 |....`...|..3...`.|
|00000030| 00 75 07 8b c1 a3 ec 60 | 01 00 f7 d0 a3 f0 60 01 |.u.....`|......`.|
|00000040| 00 5d e9 3f a0 ff ff cc | 88 65 00 00 00 00 00 00 |.].?....|.e......|
|00000050| 00 00 00 00 aa 6e 00 00 | 70 59 00 00 6c 65 00 00 |.....n..|pY..le..|
|00000060| 00 00 00 00 00 00 00 00 | 3c 6f 00 00 54 59 00 00 |........|<o..TY..|
|00000070| 18 65 00 00 00 00 00 00 | 00 00 00 00 2a 71 00 00 |.e......|....*q..|
|00000080| 00 59 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |.Y......|........|
|00000090| 00 00 00 00 00 00 00 00 | f6 70 00 00 d2 70 00 00 |........|.p...p..|
|000000a0| b4 70 00 00 98 70 00 00 | 84 70 00 00 68 70 00 00 |.p...p..|.p..hp..|
|000000b0| 52 70 00 00 40 70 00 00 | 28 70 00 00 12 70 00 00 |Rp..@p..|(p...p..|
|000000c0| fc 6f 00 00 ea 6f 00 00 | ce 6f 00 00 ba 6f 00 00 |.o...o..|.o...o..|
|000000d0| a8 6f 00 00 80 6f 00 00 | 60 6f 00 00 50 6f 00 00 |.o...o..|`o..Po..|
|000000e0| 44 6f 00 00 0a 71 00 00 | 00 00 00 00 14 6f 00 00 |Do...q..|.....o..|
|000000f0| 00 6f 00 00 ea 6e 00 00 | d4 6e 00 00 b8 6e 00 00 |.o...n..|.n...n..|
|00000100| 28 6f 00 00 00 00 00 00 | 40 69 00 00 5a 69 00 00 |(o......|@i..Zi..|
|00000110| 70 69 00 00 90 69 00 00 | a6 69 00 00 c6 69 00 00 |pi...i..|.i...i..|
|00000120| d0 69 00 00 ec 69 00 00 | 06 6a 00 00 10 6a 00 00 |.i...i..|.j...j..|
|00000130| 28 6a 00 00 3a 6a 00 00 | 44 6a 00 00 60 6a 00 00 |(j..:j..|Dj..`j..|
|00000140| 70 6a 00 00 86 6a 00 00 | 9e 6a 00 00 b6 6a 00 00 |pj...j..|.j...j..|
|00000150| ca 6a 00 00 dc 6a 00 00 | fa 6a 00 00 1c 6b 00 00 |.j...j..|.j...k..|
|00000160| 3e 6b 00 00 5a 6b 00 00 | 72 6b 00 00 7c 6b 00 00 |>k..Zk..|rk..|k..|
|00000170| 9c 6b 00 00 be 6b 00 00 | d2 6b 00 00 e6 6b 00 00 |.k...k..|.k...k..|
|00000180| f6 6b 00 00 06 6c 00 00 | 28 69 00 00 34 6c 00 00 |.k...l..|(i..4l..|
|00000190| 48 6c 00 00 52 6c 00 00 | 70 6c 00 00 82 6c 00 00 |Hl..Rl..|pl...l..|
|000001a0| a6 6c 00 00 bc 6c 00 00 | d8 6c 00 00 e6 6c 00 00 |.l...l..|.l...l..|
|000001b0| f8 6c 00 00 14 6d 00 00 | 22 6d 00 00 2e 6d 00 00 |.l...m..|"m...m..|
|000001c0| 3c 6d 00 00 4a 6d 00 00 | 5e 6d 00 00 6c 6d 00 00 |<m..Jm..|^m..lm..|
|000001d0| 7e 6d 00 00 94 6d 00 00 | a6 6d 00 00 b6 6d 00 00 |~m...m..|.m...m..|
|000001e0| c4 6d 00 00 d0 6d 00 00 | e4 6d 00 00 06 6e 00 00 |.m...m..|.m...n..|
|000001f0| 1e 6e 00 00 3a 6e 00 00 | 56 6e 00 00 66 6e 00 00 |.n..:n..|Vn..fn..|
|00000200| 7e 6e 00 00 8c 6e 00 00 | 9a 6e 00 00 10 69 00 00 |~n...n..|.n...i..|
|00000210| f6 68 00 00 e6 68 00 00 | d6 68 00 00 c2 68 00 00 |.h...h..|.h...h..|
|00000220| 8e 68 00 00 b0 68 00 00 | 72 68 00 00 5e 68 00 00 |.h...h..|rh..^h..|
|00000230| 46 68 00 00 36 68 00 00 | 1e 68 00 00 0a 68 00 00 |Fh..6h..|.h...h..|
|00000240| fa 67 00 00 ec 67 00 00 | de 67 00 00 c6 67 00 00 |.g...g..|.g...g..|
|00000250| bc 67 00 00 a8 67 00 00 | 9e 67 00 00 94 67 00 00 |.g...g..|.g...g..|
|00000260| 76 67 00 00 58 67 00 00 | 44 67 00 00 2c 67 00 00 |vg..Xg..|Dg..,g..|
|00000270| 1c 67 00 00 1a 6c 00 00 | 04 67 00 00 36 71 00 00 |.g...l..|.g..6q..|
|00000280| 00 00 00 00 3a 00 45 78 | 41 6c 6c 6f 63 61 74 65 |....:.Ex|Allocate|
|00000290| 50 6f 6f 6c 57 69 74 68 | 54 61 67 00 da 02 50 73 |PoolWith|Tag...Ps|
|000002a0| 47 65 74 56 65 72 73 69 | 6f 6e 00 00 1b 03 52 74 |GetVersi|on....Rt|
|000002b0| 6c 43 6f 70 79 55 6e 69 | 63 6f 64 65 53 74 72 69 |lCopyUni|codeStri|
|000002c0| 6e 67 00 00 c4 01 4b 65 | 49 6e 69 74 69 61 6c 69 |ng....Ke|Initiali|
|000002d0| 7a 65 45 76 65 6e 74 00 | 5e 00 45 78 49 6e 74 65 |zeEvent.|^.ExInte|
|000002e0| 72 6c 6f 63 6b 65 64 50 | 6f 70 45 6e 74 72 79 53 |rlockedP|opEntryS|
|000002f0| 4c 69 73 74 00 00 60 00 | 45 78 49 6e 74 65 72 6c |List..`.|ExInterl|
|00000300| 6f 63 6b 65 64 50 75 73 | 68 45 6e 74 72 79 53 4c |ockedPus|hEntrySL|
|00000310| 69 73 74 00 78 04 5f 61 | 6c 6c 64 69 76 00 79 04 |ist.x._a|lldiv.y.|
|00000320| 5f 61 6c 6c 6d 75 6c 00 | db 03 52 74 6c 57 61 6c |_allmul.|..RtlWal|
|00000330| 6b 46 72 61 6d 65 43 68 | 61 69 6e 00 a2 04 6d 65 |kFrameCh|ain...me|
|00000340| 6d 63 70 79 00 00 14 02 | 4b 65 57 61 69 74 46 6f |mcpy....|KeWaitFo|
|00000350| 72 53 69 6e 67 6c 65 4f | 62 6a 65 63 74 00 fb 01 |rSingleO|bject...|
|00000360| 4b 65 53 65 74 45 76 65 | 6e 74 00 00 08 02 4b 65 |KeSetEve|nt....Ke|
|00000370| 53 65 74 54 69 6d 65 72 | 00 00 a7 01 4b 65 43 61 |SetTimer|....KeCa|
|00000380| 6e 63 65 6c 54 69 6d 65 | 72 00 dd 01 4b 65 51 75 |ncelTime|r...KeQu|
|00000390| 65 72 79 53 79 73 74 65 | 6d 54 69 6d 65 00 d8 02 |erySyste|mTime...|
|000003a0| 50 73 47 65 74 43 75 72 | 72 65 6e 74 54 68 72 65 |PsGetCur|rentThre|
|000003b0| 61 64 49 64 00 00 a8 01 | 4b 65 43 6c 65 61 72 45 |adId....|KeClearE|
|000003c0| 76 65 6e 74 00 00 d4 02 | 50 73 43 72 65 61 74 65 |vent....|PsCreate|
|000003d0| 53 79 73 74 65 6d 54 68 | 72 65 61 64 00 00 48 00 |SystemTh|read..H.|
|000003e0| 45 78 46 72 65 65 50 6f | 6f 6c 57 69 74 68 54 61 |ExFreePo|olWithTa|
|000003f0| 67 00 58 04 5a 77 51 75 | 65 72 79 53 79 73 74 65 |g.X.ZwQu|erySyste|
|00000400| 6d 49 6e 66 6f 72 6d 61 | 74 69 6f 6e 00 00 4d 00 |mInforma|tion..M.|
|00000410| 45 78 49 6e 69 74 69 61 | 6c 69 7a 65 4e 50 61 67 |ExInitia|lizeNPag|
|00000420| 65 64 4c 6f 6f 6b 61 73 | 69 64 65 4c 69 73 74 00 |edLookas|ideList.|
|00000430| c3 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 44 70 |..KeInit|ializeDp|
|00000440| 63 00 cb 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |c...KeIn|itialize|
|00000450| 54 69 6d 65 72 00 41 04 | 5a 77 4f 70 65 6e 50 72 |Timer.A.|ZwOpenPr|
|00000460| 6f 63 65 73 73 00 45 04 | 5a 77 4f 70 65 6e 54 68 |ocess.E.|ZwOpenTh|
|00000470| 72 65 61 64 00 00 51 04 | 5a 77 51 75 65 72 79 49 |read..Q.|ZwQueryI|
|00000480| 6e 66 6f 72 6d 61 74 69 | 6f 6e 54 6f 6b 65 6e 00 |nformati|onToken.|
|00000490| bd 02 4f 62 66 44 65 72 | 65 66 65 72 65 6e 63 65 |..ObfDer|eference|
|000004a0| 4f 62 6a 65 63 74 00 00 | b5 02 4f 62 4f 70 65 6e |Object..|..ObOpen|
|000004b0| 4f 62 6a 65 63 74 42 79 | 50 6f 69 6e 74 65 72 00 |ObjectBy|Pointer.|
|000004c0| e4 02 50 73 52 65 66 65 | 72 65 6e 63 65 50 72 69 |..PsRefe|rencePri|
|000004d0| 6d 61 72 79 54 6f 6b 65 | 6e 00 3a 01 49 6f 47 65 |maryToke|n.:.IoGe|
|000004e0| 74 43 75 72 72 65 6e 74 | 50 72 6f 63 65 73 73 00 |tCurrent|Process.|
|000004f0| e3 02 50 73 52 65 66 65 | 72 65 6e 63 65 49 6d 70 |..PsRefe|renceImp|
|00000500| 65 72 73 6f 6e 61 74 69 | 6f 6e 54 6f 6b 65 6e 00 |ersonati|onToken.|
|00000510| b4 01 4b 65 47 65 74 43 | 75 72 72 65 6e 74 54 68 |..KeGetC|urrentTh|
|00000520| 72 65 61 64 00 00 fe 02 | 52 74 6c 41 6e 73 69 53 |read....|RtlAnsiS|
|00000530| 74 72 69 6e 67 54 6f 55 | 6e 69 63 6f 64 65 53 74 |tringToU|nicodeSt|
|00000540| 72 69 6e 67 00 00 b0 04 | 73 74 72 6e 63 70 79 00 |ring....|strncpy.|
|00000550| b8 02 4f 62 52 65 66 65 | 72 65 6e 63 65 4f 62 6a |..ObRefe|renceObj|
|00000560| 65 63 74 42 79 48 61 6e | 64 6c 65 00 0e 02 4b 65 |ectByHan|dle...Ke|
|00000570| 55 6e 73 74 61 63 6b 44 | 65 74 61 63 68 50 72 6f |UnstackD|etachPro|
|00000580| 63 65 73 73 00 00 a3 04 | 6d 65 6d 6d 6f 76 65 00 |cess....|memmove.|
|00000590| 0a 02 4b 65 53 74 61 63 | 6b 41 74 74 61 63 68 50 |..KeStac|kAttachP|
|000005a0| 72 6f 63 65 73 73 00 00 | 68 00 45 78 51 75 65 75 |rocess..|h.ExQueu|
|000005b0| 65 57 6f 72 6b 49 74 65 | 6d 00 1f 04 5a 77 43 6c |eWorkIte|m...ZwCl|
|000005c0| 6f 73 65 00 50 04 5a 77 | 51 75 65 72 79 49 6e 66 |ose.P.Zw|QueryInf|
|000005d0| 6f 72 6d 61 74 69 6f 6e | 50 72 6f 63 65 73 73 00 |ormation|Process.|
|000005e0| 81 03 52 74 6c 4c 65 6e | 67 74 68 53 69 64 00 00 |..RtlLen|gthSid..|
|000005f0| 42 04 5a 77 4f 70 65 6e | 50 72 6f 63 65 73 73 54 |B.ZwOpen|ProcessT|
|00000600| 6f 6b 65 6e 00 00 74 04 | 5a 77 57 61 69 74 46 6f |oken..t.|ZwWaitFo|
|00000610| 72 53 69 6e 67 6c 65 4f | 62 6a 65 63 74 00 d7 02 |rSingleO|bject...|
|00000620| 50 73 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |PsGetCur|rentProc|
|00000630| 65 73 73 49 64 00 d1 01 | 4b 65 49 6e 73 65 72 74 |essId...|KeInsert|
|00000640| 51 75 65 75 65 41 70 63 | 00 00 c1 01 4b 65 49 6e |QueueApc|....KeIn|
|00000650| 69 74 69 61 6c 69 7a 65 | 41 70 63 00 eb 02 50 73 |itialize|Apc...Ps|
|00000660| 53 65 74 4c 6f 61 64 49 | 6d 61 67 65 4e 6f 74 69 |SetLoadI|mageNoti|
|00000670| 66 79 52 6f 75 74 69 6e | 65 00 e8 02 50 73 53 65 |fyRoutin|e...PsSe|
|00000680| 74 43 72 65 61 74 65 50 | 72 6f 63 65 73 73 4e 6f |tCreateP|rocessNo|
|00000690| 74 69 66 79 52 6f 75 74 | 69 6e 65 00 e9 02 50 73 |tifyRout|ine...Ps|
|000006a0| 53 65 74 43 72 65 61 74 | 65 54 68 72 65 61 64 4e |SetCreat|eThreadN|
|000006b0| 6f 74 69 66 79 52 6f 75 | 74 69 6e 65 00 00 43 02 |otifyRou|tine..C.|
|000006c0| 4d 6d 47 65 74 53 79 73 | 74 65 6d 52 6f 75 74 69 |MmGetSys|temRouti|
|000006d0| 6e 65 41 64 64 72 65 73 | 73 00 68 03 52 74 6c 49 |neAddres|s.h.RtlI|
|000006e0| 6e 69 74 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |nitUnico|deString|
|000006f0| 00 00 af 04 73 74 72 6e | 63 6d 70 00 51 02 4d 6d |....strn|cmp.Q.Mm|
|00000700| 4d 61 70 4c 6f 63 6b 65 | 64 50 61 67 65 73 53 70 |MapLocke|dPagesSp|
|00000710| 65 63 69 66 79 43 61 63 | 68 65 00 00 01 03 52 74 |ecifyCac|he....Rt|
|00000720| 6c 41 70 70 65 6e 64 55 | 6e 69 63 6f 64 65 53 74 |lAppendU|nicodeSt|
|00000730| 72 69 6e 67 54 6f 53 74 | 72 69 6e 67 00 00 7f 01 |ringToSt|ring....|
|00000740| 49 6f 53 65 74 54 6f 70 | 4c 65 76 65 6c 49 72 70 |IoSetTop|LevelIrp|
|00000750| 00 00 49 01 49 6f 47 65 | 74 54 6f 70 4c 65 76 65 |..I.IoGe|tTopLeve|
|00000760| 6c 49 72 70 00 00 cf 02 | 50 72 6f 62 65 46 6f 72 |lIrp....|ProbeFor|
|00000770| 52 65 61 64 00 00 d0 02 | 50 72 6f 62 65 46 6f 72 |Read....|ProbeFor|
|00000780| 57 72 69 74 65 00 4b 00 | 45 78 47 65 74 50 72 65 |Write.K.|ExGetPre|
|00000790| 76 69 6f 75 73 4d 6f 64 | 65 00 11 03 52 74 6c 43 |viousMod|e...RtlC|
|000007a0| 6f 6d 70 61 72 65 55 6e | 69 63 6f 64 65 53 74 72 |ompareUn|icodeStr|
|000007b0| 69 6e 67 00 b6 02 4f 62 | 51 75 65 72 79 4e 61 6d |ing...Ob|QueryNam|
|000007c0| 65 53 74 72 69 6e 67 00 | a4 04 6d 65 6d 73 65 74 |eString.|..memset|
|000007d0| 00 00 49 00 45 78 46 72 | 65 65 54 6f 50 61 67 65 |..I.ExFr|eeToPage|
|000007e0| 64 4c 6f 6f 6b 61 73 69 | 64 65 4c 69 73 74 00 00 |dLookasi|deList..|
|000007f0| e9 01 4b 65 52 65 6c 65 | 61 73 65 4d 75 74 65 78 |..KeRele|aseMutex|
|00000800| 00 00 36 00 45 78 41 6c | 6c 6f 63 61 74 65 46 72 |..6.ExAl|locateFr|
|00000810| 6f 6d 50 61 67 65 64 4c | 6f 6f 6b 61 73 69 64 65 |omPagedL|ookaside|
|00000820| 4c 69 73 74 00 00 69 02 | 4d 6d 55 6e 6d 61 70 4c |List..i.|MmUnmapL|
|00000830| 6f 63 6b 65 64 50 61 67 | 65 73 00 00 36 02 4d 6d |ockedPag|es..6.Mm|
|00000840| 42 75 69 6c 64 4d 64 6c | 46 6f 72 4e 6f 6e 50 61 |BuildMdl|ForNonPa|
|00000850| 67 65 64 50 6f 6f 6c 00 | 38 02 4d 6d 43 72 65 61 |gedPool.|8.MmCrea|
|00000860| 74 65 4d 64 6c 00 37 00 | 45 78 41 6c 6c 6f 63 61 |teMdl.7.|ExAlloca|
|00000870| 74 65 50 6f 6f 6c 00 00 | f7 01 4b 65 53 65 72 76 |tePool..|..KeServ|
|00000880| 69 63 65 44 65 73 63 72 | 69 70 74 6f 72 54 61 62 |iceDescr|iptorTab|
|00000890| 6c 65 00 00 71 04 5a 77 | 55 6e 6c 6f 61 64 4b 65 |le..q.Zw|UnloadKe|
|000008a0| 79 00 39 04 5a 77 4c 6f | 61 64 4b 65 79 00 33 04 |y.9.ZwLo|adKey.3.|
|000008b0| 5a 77 46 6c 75 73 68 4b | 65 79 00 00 25 04 5a 77 |ZwFlushK|ey..%.Zw|
|000008c0| 43 72 65 61 74 65 4b 65 | 79 00 2b 04 5a 77 44 65 |CreateKe|y.+.ZwDe|
|000008d0| 6c 65 74 65 56 61 6c 75 | 65 4b 65 79 00 00 2a 04 |leteValu|eKey..*.|
|000008e0| 5a 77 44 65 6c 65 74 65 | 4b 65 79 00 30 04 5a 77 |ZwDelete|Key.0.Zw|
|000008f0| 45 6e 75 6d 65 72 61 74 | 65 4b 65 79 00 00 31 04 |Enumerat|eKey..1.|
|00000900| 5a 77 45 6e 75 6d 65 72 | 61 74 65 56 61 6c 75 65 |ZwEnumer|ateValue|
|00000910| 4b 65 79 00 59 04 5a 77 | 51 75 65 72 79 56 61 6c |Key.Y.Zw|QueryVal|
|00000920| 75 65 4b 65 79 00 6d 04 | 5a 77 53 65 74 56 61 6c |ueKey.m.|ZwSetVal|
|00000930| 75 65 4b 65 79 00 53 04 | 5a 77 51 75 65 72 79 4b |ueKey.S.|ZwQueryK|
|00000940| 65 79 00 00 40 04 5a 77 | 4f 70 65 6e 4b 65 79 00 |ey..@.Zw|OpenKey.|
|00000950| c7 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 4d 75 |..KeInit|ializeMu|
|00000960| 74 65 78 00 4e 00 45 78 | 49 6e 69 74 69 61 6c 69 |tex.N.Ex|Initiali|
|00000970| 7a 65 50 61 67 65 64 4c | 6f 6f 6b 61 73 69 64 65 |zePagedL|ookaside|
|00000980| 4c 69 73 74 00 00 54 03 | 52 74 6c 46 72 65 65 55 |List..T.|RtlFreeU|
|00000990| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 3d 01 |nicodeSt|ring..=.|
|000009a0| 49 6f 47 65 74 44 65 76 | 69 63 65 4f 62 6a 65 63 |IoGetDev|iceObjec|
|000009b0| 74 50 6f 69 6e 74 65 72 | 00 00 7e 01 49 6f 53 65 |tPointer|..~.IoSe|
|000009c0| 74 54 68 72 65 61 64 48 | 61 72 64 45 72 72 6f 72 |tThreadH|ardError|
|000009d0| 4d 6f 64 65 00 00 24 04 | 5a 77 43 72 65 61 74 65 |Mode..$.|ZwCreate|
|000009e0| 46 69 6c 65 00 00 65 04 | 5a 77 53 65 74 49 6e 66 |File..e.|ZwSetInf|
|000009f0| 6f 72 6d 61 74 69 6f 6e | 46 69 6c 65 00 00 75 04 |ormation|File..u.|
|00000a00| 5a 77 57 72 69 74 65 46 | 69 6c 65 00 0d 02 4b 65 |ZwWriteF|ile...Ke|
|00000a10| 54 69 63 6b 43 6f 75 6e | 74 00 a6 01 4b 65 42 75 |TickCoun|t...KeBu|
|00000a20| 67 43 68 65 63 6b 45 78 | 00 00 6e 74 6f 73 6b 72 |gCheckEx|..ntoskr|
|00000a30| 6e 6c 2e 65 78 65 00 00 | 46 00 4b 65 51 75 65 72 |nl.exe..|F.KeQuer|
|00000a40| 79 50 65 72 66 6f 72 6d | 61 6e 63 65 43 6f 75 6e |yPerform|anceCoun|
|00000a50| 74 65 72 00 01 00 45 78 | 52 65 6c 65 61 73 65 46 |ter...Ex|ReleaseF|
|00000a60| 61 73 74 4d 75 74 65 78 | 00 00 00 00 45 78 41 63 |astMutex|....ExAc|
|00000a70| 71 75 69 72 65 46 61 73 | 74 4d 75 74 65 78 00 00 |quireFas|tMutex..|
|00000a80| 52 00 4b 66 52 65 6c 65 | 61 73 65 53 70 69 6e 4c |R.KfRele|aseSpinL|
|00000a90| 6f 63 6b 00 4f 00 4b 66 | 41 63 71 75 69 72 65 53 |ock.O.Kf|AcquireS|
|00000aa0| 70 69 6e 4c 6f 63 6b 00 | 44 00 4b 65 47 65 74 43 |pinLock.|D.KeGetC|
|00000ab0| 75 72 72 65 6e 74 49 72 | 71 6c 00 00 48 41 4c 2e |urrentIr|ql..HAL.|
|00000ac0| 64 6c 6c 00 1b 00 46 6c | 74 43 6c 6f 73 65 00 00 |dll...Fl|tClose..|
|00000ad0| 22 00 46 6c 74 43 72 65 | 61 74 65 46 69 6c 65 00 |".FltCre|ateFile.|
|00000ae0| 86 00 46 6c 74 52 65 6c | 65 61 73 65 46 69 6c 65 |..FltRel|easeFile|
|00000af0| 4e 61 6d 65 49 6e 66 6f | 72 6d 61 74 69 6f 6e 00 |NameInfo|rmation.|
|00000b00| 42 00 46 6c 74 47 65 74 | 44 65 73 74 69 6e 61 74 |B.FltGet|Destinat|
|00000b10| 69 6f 6e 46 69 6c 65 4e | 61 6d 65 49 6e 66 6f 72 |ionFileN|ameInfor|
|00000b20| 6d 61 74 69 6f 6e 00 00 | 2e 00 46 6c 74 44 65 74 |mation..|..FltDet|
|00000b30| 61 63 68 56 6f 6c 75 6d | 65 00 5f 00 46 6c 74 47 |achVolum|e._.FltG|
|00000b40| 65 74 56 6f 6c 75 6d 65 | 4e 61 6d 65 00 00 46 00 |etVolume|Name..F.|
|00000b50| 46 6c 74 47 65 74 46 69 | 6c 65 4e 61 6d 65 49 6e |FltGetFi|leNameIn|
|00000b60| 66 6f 72 6d 61 74 69 6f | 6e 00 8c 00 46 6c 74 53 |formatio|n...FltS|
|00000b70| 65 6e 64 4d 65 73 73 61 | 67 65 00 00 1c 00 46 6c |endMessa|ge....Fl|
|00000b80| 74 43 6c 6f 73 65 43 6c | 69 65 6e 74 50 6f 72 74 |tCloseCl|ientPort|
|00000b90| 00 00 a0 00 46 6c 74 55 | 6e 72 65 67 69 73 74 65 |....FltU|nregiste|
|00000ba0| 72 46 69 6c 74 65 72 00 | 6d 00 46 6c 74 4f 62 6a |rFilter.|m.FltObj|
|00000bb0| 65 63 74 44 65 72 65 66 | 65 72 65 6e 63 65 00 00 |ectDeref|erence..|
|00000bc0| 0a 00 46 6c 74 41 74 74 | 61 63 68 56 6f 6c 75 6d |..FltAtt|achVolum|
|00000bd0| 65 00 37 00 46 6c 74 45 | 6e 75 6d 65 72 61 74 65 |e.7.FltE|numerate|
|00000be0| 56 6f 6c 75 6d 65 73 00 | 1d 00 46 6c 74 43 6c 6f |Volumes.|..FltClo|
|00000bf0| 73 65 43 6f 6d 6d 75 6e | 69 63 61 74 69 6f 6e 50 |seCommun|icationP|
|00000c00| 6f 72 74 00 98 00 46 6c | 74 53 74 61 72 74 46 69 |ort...Fl|tStartFi|
|00000c10| 6c 74 65 72 69 6e 67 00 | 3e 00 46 6c 74 46 72 65 |ltering.|>.FltFre|
|00000c20| 65 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |eSecurit|yDescrip|
|00000c30| 74 6f 72 00 21 00 46 6c | 74 43 72 65 61 74 65 43 |tor.!.Fl|tCreateC|
|00000c40| 6f 6d 6d 75 6e 69 63 61 | 74 69 6f 6e 50 6f 72 74 |ommunica|tionPort|
|00000c50| 00 00 0c 00 46 6c 74 42 | 75 69 6c 64 44 65 66 61 |....FltB|uildDefa|
|00000c60| 75 6c 74 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |ultSecur|ityDescr|
|00000c70| 69 70 74 6f 72 00 82 00 | 46 6c 74 52 65 67 69 73 |iptor...|FltRegis|
|00000c80| 74 65 72 46 69 6c 74 65 | 72 00 36 00 46 6c 74 45 |terFilte|r.6.FltE|
|00000c90| 6e 75 6d 65 72 61 74 65 | 56 6f 6c 75 6d 65 49 6e |numerate|VolumeIn|
|00000ca0| 66 6f 72 6d 61 74 69 6f | 6e 00 46 4c 54 4d 47 52 |formatio|n.FLTMGR|
|00000cb0| 2e 53 59 53 00 00 cb 03 | 52 74 6c 55 6e 77 69 6e |.SYS....|RtlUnwin|
|00000cc0| 64 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |d.......|........|
|00000cd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000ce0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000cf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+