/ Chip 2001 October / Chip_2001-10_cd1.bin / servis / avast / install / RESNT1.CAB / EXE_DRV / avmon.sys / INIT

next >

view JSON data

view as text

open on a Mac

open on a PC

+--------+-------------------------+-------------------------+--------+--------+
|00000000| f8 83 00 00 00 00 00 00 | 00 00 00 00 5c 8a 00 00 |........|....\...|
|00000010| 08 5f 00 00 e8 83 00 00 | 00 00 00 00 00 00 00 00 |._......|........|
|00000020| b2 8a 00 00 f8 5e 00 00 | b0 83 00 00 00 00 00 00 |.....^..|........|
|00000030| 00 00 00 00 0e 8c 00 00 | c0 5e 00 00 00 00 00 00 |........|.^......|
|00000040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| f8 8b 00 00 d4 8b 00 00 | 94 8b 00 00 82 8b 00 00 |........|........|
|00000060| ac 8b 00 00 40 8b 00 00 | 2c 8b 00 00 62 8b 00 00 |....@...|,...b...|
|00000070| fe 8a 00 00 e4 8a 00 00 | 16 8b 00 00 ba 8a 00 00 |........|........|
|00000080| d0 8a 00 00 00 00 00 00 | 8a 8a 00 00 76 8a 00 00 |........|....v...|
|00000090| 9e 8a 00 00 00 00 00 00 | 62 86 00 00 84 86 00 00 |........|b.......|
|000000a0| a2 86 00 00 ba 86 00 00 | da 86 00 00 f2 86 00 00 |........|........|
|000000b0| 0e 87 00 00 18 87 00 00 | 26 87 00 00 3e 87 00 00 |........|&...>...|
|000000c0| 56 87 00 00 60 87 00 00 | 78 87 00 00 8c 87 00 00 |V...`...|x.......|
|000000d0| 9c 87 00 00 bc 87 00 00 | c6 87 00 00 d0 87 00 00 |........|........|
|000000e0| e2 87 00 00 fa 87 00 00 | 06 88 00 00 26 88 00 00 |........|....&...|
|000000f0| 36 88 00 00 40 88 00 00 | 58 88 00 00 48 86 00 00 |6...@...|X...H...|
|00000100| 52 86 00 00 92 88 00 00 | ac 88 00 00 c4 88 00 00 |R.......|........|
|00000110| d2 88 00 00 ea 88 00 00 | 08 89 00 00 22 89 00 00 |........|...."...|
|00000120| 30 89 00 00 42 89 00 00 | 50 89 00 00 5a 89 00 00 |0...B...|P...Z...|
|00000130| 7a 89 00 00 96 89 00 00 | a2 89 00 00 b0 89 00 00 |z.......|........|
|00000140| c6 89 00 00 d6 89 00 00 | e0 89 00 00 ea 89 00 00 |........|........|
|00000150| 04 8a 00 00 1c 8a 00 00 | 30 8a 00 00 4a 8a 00 00 |........|0...J...|
|00000160| 6a 8a 00 00 06 86 00 00 | 34 86 00 00 1c 86 00 00 |j.......|4.......|
|00000170| d2 85 00 00 ea 85 00 00 | 98 85 00 00 ba 85 00 00 |........|........|
|00000180| a8 85 00 00 52 85 00 00 | 7c 85 00 00 64 85 00 00 |....R...||...d...|
|00000190| 16 85 00 00 40 85 00 00 | 2c 85 00 00 70 88 00 00 |....@...|,...p...|
|000001a0| 0c 85 00 00 7e 88 00 00 | 00 00 00 00 da 03 73 74 |....~...|......st|
|000001b0| 72 6e 63 6d 70 00 0c 01 | 49 6f 47 65 74 43 75 72 |rncmp...|IoGetCur|
|000001c0| 72 65 6e 74 50 72 6f 63 | 65 73 73 00 77 01 4b 65 |rentProc|ess.w.Ke|
|000001d0| 49 6e 69 74 69 61 6c 69 | 7a 65 54 69 6d 65 72 00 |Initiali|zeTimer.|
|000001e0| 6f 01 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 44 70 |o.KeInit|ializeDp|
|000001f0| 63 00 fb 00 49 6f 44 65 | 6c 65 74 65 44 65 76 69 |c...IoDe|leteDevi|
|00000200| 63 65 00 00 f7 00 49 6f | 43 72 65 61 74 65 53 79 |ce....Io|CreateSy|
|00000210| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 9e 01 4b 65 |mbolicLi|nk....Ke|
|00000220| 53 65 72 76 69 63 65 44 | 65 73 63 72 69 70 74 6f |ServiceD|escripto|
|00000230| 72 54 61 62 6c 65 00 00 | 07 02 4e 74 42 75 69 6c |rTable..|..NtBuil|
|00000240| 64 4e 75 6d 62 65 72 00 | f3 00 49 6f 43 72 65 61 |dNumber.|..IoCrea|
|00000250| 74 65 44 65 76 69 63 65 | 00 00 d0 02 52 74 6c 49 |teDevice|....RtlI|
|00000260| 6e 69 74 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |nitUnico|deString|
|00000270| 00 00 76 01 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |..v.KeIn|itialize|
|00000280| 53 70 69 6e 4c 6f 63 6b | 00 00 4a 00 45 78 49 6e |SpinLock|..J.ExIn|
|00000290| 69 74 69 61 6c 69 7a 65 | 52 65 73 6f 75 72 63 65 |itialize|Resource|
|000002a0| 4c 69 74 65 00 00 45 01 | 49 6f 66 43 6f 6d 70 6c |Lite..E.|IofCompl|
|000002b0| 65 74 65 52 65 71 75 65 | 73 74 00 00 b8 01 4b 65 |eteReque|st....Ke|
|000002c0| 57 61 69 74 46 6f 72 53 | 69 6e 67 6c 65 4f 62 6a |WaitForS|ingleObj|
|000002d0| 65 63 74 00 70 01 4b 65 | 49 6e 69 74 69 61 6c 69 |ect.p.Ke|Initiali|
|000002e0| 7a 65 45 76 65 6e 74 00 | 5b 03 5a 77 43 6c 6f 73 |zeEvent.|[.ZwClos|
|000002f0| 65 00 60 03 5a 77 43 72 | 65 61 74 65 46 69 6c 65 |e.`.ZwCr|eateFile|
|00000300| 00 00 2e 00 45 78 41 63 | 71 75 69 72 65 52 65 73 |....ExAc|quireRes|
|00000310| 6f 75 72 63 65 45 78 63 | 6c 75 73 69 76 65 4c 69 |ourceExc|lusiveLi|
|00000320| 74 65 00 00 2f 00 45 78 | 41 63 71 75 69 72 65 52 |te../.Ex|AcquireR|
|00000330| 65 73 6f 75 72 63 65 53 | 68 61 72 65 64 4c 69 74 |esourceS|haredLit|
|00000340| 65 00 6d 00 45 78 52 65 | 6c 65 61 73 65 52 65 73 |e.m.ExRe|leaseRes|
|00000350| 6f 75 72 63 65 4c 69 74 | 65 00 0f 03 52 74 6c 55 |ourceLit|e...RtlU|
|00000360| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 54 6f 41 6e |nicodeSt|ringToAn|
|00000370| 73 69 53 74 72 69 6e 67 | 00 00 44 02 4f 62 66 44 |siString|..D.ObfD|
|00000380| 65 72 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |ereferen|ceObject|
|00000390| 00 00 3f 02 4f 62 52 65 | 66 65 72 65 6e 63 65 4f |..?.ObRe|ferenceO|
|000003a0| 62 6a 65 63 74 42 79 48 | 61 6e 64 6c 65 00 d5 03 |bjectByH|andle...|
|000003b0| 73 74 72 63 68 72 00 00 | 42 00 45 78 46 72 65 65 |strchr..|B.ExFree|
|000003c0| 50 6f 6f 6c 00 00 80 01 | 4b 65 4c 65 61 76 65 43 |Pool....|KeLeaveC|
|000003d0| 72 69 74 69 63 61 6c 52 | 65 67 69 6f 6e 00 5b 01 |riticalR|egion.[.|
|000003e0| 4b 65 45 6e 74 65 72 43 | 72 69 74 69 63 61 6c 52 |KeEnterC|riticalR|
|000003f0| 65 67 69 6f 6e 00 db 03 | 73 74 72 6e 63 70 79 00 |egion...|strncpy.|
|00000400| 36 00 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |6.ExAllo|catePool|
|00000410| 57 69 74 68 54 61 67 00 | c0 02 52 74 6c 46 72 65 |WithTag.|..RtlFre|
|00000420| 65 41 6e 73 69 53 74 72 | 69 6e 67 00 44 01 49 6f |eAnsiStr|ing.D.Io|
|00000430| 66 43 61 6c 6c 44 72 69 | 76 65 72 00 e9 00 49 6f |fCallDri|ver...Io|
|00000440| 42 75 69 6c 64 53 79 6e | 63 68 72 6f 6e 6f 75 73 |BuildSyn|chronous|
|00000450| 46 73 64 52 65 71 75 65 | 73 74 00 00 e5 03 77 63 |FsdReque|st....wc|
|00000460| 73 63 61 74 00 00 e8 03 | 77 63 73 63 70 79 00 00 |scat....|wcscpy..|
|00000470| 8c 03 5a 77 51 75 65 72 | 79 56 61 6c 75 65 4b 65 |..ZwQuer|yValueKe|
|00000480| 79 00 c3 02 52 74 6c 46 | 72 65 65 55 6e 69 63 6f |y...RtlF|reeUnico|
|00000490| 64 65 53 74 72 69 6e 67 | 00 00 79 03 5a 77 4f 70 |deString|..y.ZwOp|
|000004a0| 65 6e 4b 65 79 00 77 02 | 52 74 6c 41 6e 73 69 53 |enKey.w.|RtlAnsiS|
|000004b0| 74 72 69 6e 67 54 6f 55 | 6e 69 63 6f 64 65 53 74 |tringToU|nicodeSt|
|000004c0| 72 69 6e 67 00 00 cf 02 | 52 74 6c 49 6e 69 74 53 |ring....|RtlInitS|
|000004d0| 74 72 69 6e 67 00 dc 03 | 73 74 72 72 63 68 72 00 |tring...|strrchr.|
|000004e0| a1 03 5a 77 57 61 69 74 | 46 6f 72 53 69 6e 67 6c |..ZwWait|ForSingl|
|000004f0| 65 4f 62 6a 65 63 74 00 | 95 03 5a 77 53 65 74 49 |eObject.|..ZwSetI|
|00000500| 6e 66 6f 72 6d 61 74 69 | 6f 6e 46 69 6c 65 00 00 |nformati|onFile..|
|00000510| 8e 03 5a 77 52 65 61 64 | 46 69 6c 65 00 00 86 01 |..ZwRead|File....|
|00000520| 4b 65 51 75 65 72 79 53 | 79 73 74 65 6d 54 69 6d |KeQueryS|ystemTim|
|00000530| 65 00 83 03 5a 77 51 75 | 65 72 79 49 6e 66 6f 72 |e...ZwQu|eryInfor|
|00000540| 6d 61 74 69 6f 6e 46 69 | 6c 65 00 00 d9 00 49 6e |mationFi|le....In|
|00000550| 74 65 72 6c 6f 63 6b 65 | 64 49 6e 63 72 65 6d 65 |terlocke|dIncreme|
|00000560| 6e 74 00 00 ae 01 4b 65 | 53 65 74 54 69 6d 65 72 |nt....Ke|SetTimer|
|00000570| 00 00 d6 00 49 6e 74 65 | 72 6c 6f 63 6b 65 64 44 |....Inte|rlockedD|
|00000580| 65 63 72 65 6d 65 6e 74 | 00 00 41 02 4f 62 52 65 |ecrement|..A.ObRe|
|00000590| 66 65 72 65 6e 63 65 4f | 62 6a 65 63 74 42 79 50 |ferenceO|bjectByP|
|000005a0| 6f 69 6e 74 65 72 00 00 | 5e 03 5a 77 43 72 65 61 |ointer..|^.ZwCrea|
|000005b0| 74 65 44 69 72 65 63 74 | 6f 72 79 4f 62 6a 65 63 |teDirect|oryObjec|
|000005c0| 74 00 a2 03 5a 77 57 72 | 69 74 65 46 69 6c 65 00 |t...ZwWr|iteFile.|
|000005d0| 62 03 5a 77 43 72 65 61 | 74 65 53 65 63 74 69 6f |b.ZwCrea|teSectio|
|000005e0| 6e 00 78 03 5a 77 4f 70 | 65 6e 46 69 6c 65 00 00 |n.x.ZwOp|enFile..|
|000005f0| de 03 73 74 72 73 74 72 | 00 00 e7 00 49 6f 42 75 |..strstr|....IoBu|
|00000600| 69 6c 64 44 65 76 69 63 | 65 49 6f 43 6f 6e 74 72 |ildDevic|eIoContr|
|00000610| 6f 6c 52 65 71 75 65 73 | 74 00 11 01 49 6f 47 65 |olReques|t...IoGe|
|00000620| 74 52 65 6c 61 74 65 64 | 44 65 76 69 63 65 4f 62 |tRelated|DeviceOb|
|00000630| 6a 65 63 74 00 00 07 01 | 49 6f 46 72 65 65 49 72 |ject....|IoFreeIr|
|00000640| 70 00 a2 01 4b 65 53 65 | 74 45 76 65 6e 74 00 00 |p...KeSe|tEvent..|
|00000650| 60 01 4b 65 47 65 74 43 | 75 72 72 65 6e 74 54 68 |`.KeGetC|urrentTh|
|00000660| 72 65 61 64 00 00 e0 00 | 49 6f 41 6c 6c 6f 63 61 |read....|IoAlloca|
|00000670| 74 65 49 72 70 00 ce 03 | 6d 65 6d 6d 6f 76 65 00 |teIrp...|memmove.|
|00000680| d2 03 73 70 72 69 6e 74 | 66 00 e4 00 49 6f 41 74 |..sprint|f...IoAt|
|00000690| 74 61 63 68 44 65 76 69 | 63 65 42 79 50 6f 69 6e |tachDevi|ceByPoin|
|000006a0| 74 65 72 00 51 02 50 73 | 43 72 65 61 74 65 53 79 |ter.Q.Ps|CreateSy|
|000006b0| 73 74 65 6d 54 68 72 65 | 61 64 00 00 df 01 4d 6d |stemThre|ad....Mm|
|000006c0| 49 73 41 64 64 72 65 73 | 73 56 61 6c 69 64 00 00 |IsAddres|sValid..|
|000006d0| 57 01 4b 65 44 65 6c 61 | 79 45 78 65 63 75 74 69 |W.KeDela|yExecuti|
|000006e0| 6f 6e 54 68 72 65 61 64 | 00 00 fd 00 49 6f 44 65 |onThread|....IoDe|
|000006f0| 74 61 63 68 44 65 76 69 | 63 65 00 00 6e 74 6f 73 |tachDevi|ce..ntos|
|00000700| 6b 72 6e 6c 2e 65 78 65 | 00 00 18 03 52 74 6c 55 |krnl.exe|....RtlU|
|00000710| 6e 77 69 6e 64 00 4d 00 | 4b 66 52 65 6c 65 61 73 |nwind.M.|KfReleas|
|00000720| 65 53 70 69 6e 4c 6f 63 | 6b 00 4a 00 4b 66 41 63 |eSpinLoc|k.J.KfAc|
|00000730| 71 75 69 72 65 53 70 69 | 6e 4c 6f 63 6b 00 42 00 |quireSpi|nLock.B.|
|00000740| 4b 65 47 65 74 43 75 72 | 72 65 6e 74 49 72 71 6c |KeGetCur|rentIrql|
|00000750| 00 00 48 41 4c 2e 64 6c | 6c 00 12 00 5f 41 61 76 |..HAL.dl|l..._Aav|
|00000760| 6d 54 65 73 74 46 69 6c | 65 44 6c 67 40 31 36 00 |mTestFil|eDlg@16.|
|00000770| 11 00 5f 41 61 76 6d 54 | 65 73 74 46 69 6c 65 40 |.._AavmT|estFile@|
|00000780| 31 36 00 00 10 00 5f 41 | 61 76 6d 54 65 73 74 45 |16...._A|avmTestE|
|00000790| 78 65 63 46 69 6c 65 44 | 6c 67 40 32 30 00 0f 00 |xecFileD|lg@20...|
|000007a0| 5f 41 61 76 6d 54 65 73 | 74 45 78 65 63 46 69 6c |_AavmTes|tExecFil|
|000007b0| 65 40 32 30 00 00 0e 00 | 5f 41 61 76 6d 54 65 73 |e@20....|_AavmTes|
|000007c0| 74 42 6f 6f 74 44 6c 67 | 40 31 36 00 0d 00 5f 41 |tBootDlg|@16..._A|
|000007d0| 61 76 6d 54 65 73 74 42 | 6f 6f 74 40 31 36 00 00 |avmTestB|oot@16..|
|000007e0| 14 00 5f 41 61 76 6d 54 | 65 73 74 46 69 6c 65 53 |.._AavmT|estFileS|
|000007f0| 6b 69 70 4c 6f 6f 70 62 | 61 63 6b 44 6c 67 40 31 |kipLoopb|ackDlg@1|
|00000800| 36 00 13 00 5f 41 61 76 | 6d 54 65 73 74 46 69 6c |6..._Aav|mTestFil|
|00000810| 65 53 6b 69 70 4c 6f 6f | 70 62 61 63 6b 40 31 36 |eSkipLoo|pback@16|
|00000820| 00 00 00 00 5f 41 61 76 | 6d 43 61 6c 6c 47 75 69 |...._Aav|mCallGui|
|00000830| 40 38 00 00 03 00 5f 41 | 61 76 6d 47 65 74 43 75 |@8...._A|avmGetCu|
|00000840| 72 46 69 6c 65 4e 61 6d | 65 40 34 00 0c 00 5f 41 |rFileNam|e@4..._A|
|00000850| 61 76 6d 51 75 65 75 65 | 54 65 73 74 46 69 6c 65 |avmQueue|TestFile|
|00000860| 53 6b 69 70 4c 6f 6f 70 | 62 61 63 6b 44 6c 67 40 |SkipLoop|backDlg@|
|00000870| 31 32 00 00 0b 00 5f 41 | 61 76 6d 51 75 65 75 65 |12...._A|avmQueue|
|00000880| 54 65 73 74 46 69 6c 65 | 53 6b 69 70 4c 6f 6f 70 |TestFile|SkipLoop|
|00000890| 62 61 63 6b 40 31 32 00 | 04 00 5f 41 61 76 6d 47 |back@12.|.._AavmG|
|000008a0| 65 74 51 75 65 75 65 53 | 69 7a 65 40 30 00 41 61 |etQueueS|ize@0.Aa|
|000008b0| 76 6d 4b 65 72 2e 73 79 | 73 00 00 00 00 00 00 00 |vmKer.sy|s.......|
+--------+-------------------------+-------------------------+--------+--------+