/ PC World Komputer 2010 April / PCWorld0410.iso / WindowsServerTrial / server.iso / sources / install.wim / 5 / Windows / System32 / drivers / FWPKCLNT.SYS / INIT

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 8b ff 55 | 8b ec a1 08 00 02 00 85 |.......U|........|
|00000010| c0 b9 4e e6 40 bb 74 04 | 3b c1 75 1a a1 28 81 01 |..N.@.t.|;.u..(..|
|00000020| 00 8b 00 35 08 00 02 00 | a3 08 00 02 00 75 07 8b |...5....|.....u..|
|00000030| c1 a3 08 00 02 00 f7 d0 | a3 0c 00 02 00 5d e9 45 |........|.....].E|
|00000040| 91 fe ff cc 7c 81 01 00 | 00 00 00 00 00 00 00 00 |....|...|........|
|00000050| 08 83 01 00 c0 80 00 00 | bc 80 01 00 00 00 00 00 |........|........|
|00000060| 00 00 00 00 44 86 01 00 | 00 80 00 00 44 81 01 00 |....D...|....D...|
|00000070| 00 00 00 00 00 00 00 00 | 72 87 01 00 88 80 00 00 |........|r.......|
|00000080| d4 80 01 00 00 00 00 00 | 00 00 00 00 bc 88 01 00 |........|........|
|00000090| 18 80 00 00 00 81 01 00 | 00 00 00 00 00 00 00 00 |........|........|
|000000a0| a0 8a 01 00 44 80 00 00 | 00 00 00 00 00 00 00 00 |....D...|........|
|000000b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 2c 86 01 00 |........|....,...|
|000000c0| 1e 86 01 00 fc 85 01 00 | da 85 01 00 c6 85 01 00 |........|........|
|000000d0| 00 00 00 00 7c 87 01 00 | 9c 87 01 00 bc 87 01 00 |....|...|........|
|000000e0| d4 87 01 00 fc 87 01 00 | 1a 88 01 00 3c 88 01 00 |........|....<...|
|000000f0| 60 88 01 00 88 88 01 00 | a8 88 01 00 00 00 00 00 |`.......|........|
|00000100| c6 88 01 00 dc 88 01 00 | f4 88 01 00 10 89 01 00 |........|........|
|00000110| 2c 89 01 00 40 89 01 00 | 66 89 01 00 76 89 01 00 |,...@...|f...v...|
|00000120| 8c 89 01 00 b0 89 01 00 | ce 89 01 00 7e 8a 01 00 |........|....~...|
|00000130| 4e 8a 01 00 28 8a 01 00 | 12 8a 01 00 ee 89 01 00 |N...(...|........|
|00000140| 00 00 00 00 e0 86 01 00 | ce 86 01 00 bc 86 01 00 |........|........|
|00000150| 94 86 01 00 f6 86 01 00 | 0a 87 01 00 32 87 01 00 |........|....2...|
|00000160| 54 87 01 00 1a 87 01 00 | 4c 86 01 00 64 86 01 00 |T.......|L...d...|
|00000170| 80 86 01 00 a6 86 01 00 | 00 00 00 00 a0 85 01 00 |........|........|
|00000180| 44 82 01 00 80 85 01 00 | 66 85 01 00 46 85 01 00 |D.......|f...F...|
|00000190| 28 85 01 00 08 85 01 00 | e8 84 01 00 c8 84 01 00 |(.......|........|
|000001a0| a8 84 01 00 88 84 01 00 | 68 84 01 00 48 84 01 00 |........|h...H...|
|000001b0| 28 84 01 00 12 84 01 00 | fa 83 01 00 e2 83 01 00 |(.......|........|
|000001c0| cc 83 01 00 b6 83 01 00 | 9e 83 01 00 86 83 01 00 |........|........|
|000001d0| 6e 83 01 00 52 83 01 00 | 38 83 01 00 2e 83 01 00 |n...R...|8.......|
|000001e0| 16 83 01 00 fa 82 01 00 | de 82 01 00 ca 82 01 00 |........|........|
|000001f0| b2 82 01 00 96 82 01 00 | 8c 82 01 00 82 82 01 00 |........|........|
|00000200| 6a 82 01 00 58 82 01 00 | b6 85 01 00 aa 8a 01 00 |j...X...|........|
|00000210| cc 8a 01 00 ea 8a 01 00 | 06 8b 01 00 22 8b 01 00 |........|...."...|
|00000220| 40 8b 01 00 5e 8b 01 00 | 6e 8b 01 00 7e 8b 01 00 |@...^...|n...~...|
|00000230| 90 8b 01 00 9e 8b 01 00 | aa 8b 01 00 b8 8b 01 00 |........|........|
|00000240| 00 00 00 00 85 00 45 78 | 46 72 65 65 50 6f 6f 6c |......Ex|FreePool|
|00000250| 57 69 74 68 54 61 67 00 | 8e 02 49 6f 57 4d 49 57 |WithTag.|..IoWMIW|
|00000260| 72 69 74 65 45 76 65 6e | 74 00 6d 00 45 78 41 6c |riteEven|t.m.ExAl|
|00000270| 6c 6f 63 61 74 65 50 6f | 6f 6c 57 69 74 68 54 61 |locatePo|olWithTa|
|00000280| 67 00 7e 07 6d 65 6d 63 | 70 79 00 00 80 07 6d 65 |g.~.memc|py....me|
|00000290| 6d 73 65 74 00 00 8a 03 | 4d 6d 47 65 74 53 79 73 |mset....|MmGetSys|
|000002a0| 74 65 6d 52 6f 75 74 69 | 6e 65 41 64 64 72 65 73 |temRouti|neAddres|
|000002b0| 73 00 5f 05 52 74 6c 49 | 6e 69 74 55 6e 69 63 6f |s._.RtlI|nitUnico|
|000002c0| 64 65 53 74 72 69 6e 67 | 00 00 ef 04 52 74 6c 43 |deString|....RtlC|
|000002d0| 6f 6d 70 61 72 65 4d 65 | 6d 6f 72 79 00 00 89 02 |ompareMe|mory....|
|000002e0| 49 6f 57 4d 49 52 65 67 | 69 73 74 72 61 74 69 6f |IoWMIReg|istratio|
|000002f0| 6e 43 6f 6e 74 72 6f 6c | 00 00 3f 03 4b 65 54 69 |nControl|..?.KeTi|
|00000300| 63 6b 43 6f 75 6e 74 00 | 6e 74 6f 73 6b 72 6e 6c |ckCount.|ntoskrnl|
|00000310| 2e 65 78 65 00 00 a6 05 | 52 74 6c 4e 74 53 74 61 |.exe....|RtlNtSta|
|00000320| 74 75 73 54 6f 44 6f 73 | 45 72 72 6f 72 00 4b 07 |tusToDos|Error.K.|
|00000330| 5f 61 6c 6c 6d 75 6c 00 | b9 05 52 74 6c 51 75 65 |_allmul.|..RtlQue|
|00000340| 72 79 52 65 67 69 73 74 | 72 79 56 61 6c 75 65 73 |ryRegist|ryValues|
|00000350| 00 00 da 02 4b 65 49 6e | 69 74 69 61 6c 69 7a 65 |....KeIn|itialize|
|00000360| 47 75 61 72 64 65 64 4d | 75 74 65 78 00 00 0c 03 |GuardedM|utex....|
|00000370| 4b 65 52 65 6c 65 61 73 | 65 47 75 61 72 64 65 64 |KeReleas|eGuarded|
|00000380| 4d 75 74 65 78 00 a5 02 | 4b 65 41 63 71 75 69 72 |Mutex...|KeAcquir|
|00000390| 65 47 75 61 72 64 65 64 | 4d 75 74 65 78 00 48 03 |eGuarded|Mutex.H.|
|000003a0| 4b 65 57 61 69 74 46 6f | 72 53 69 6e 67 6c 65 4f |KeWaitFo|rSingleO|
|000003b0| 62 6a 65 63 74 00 13 03 | 4b 65 52 65 6c 65 61 73 |bject...|KeReleas|
|000003c0| 65 53 65 6d 61 70 68 6f | 72 65 00 00 70 04 50 73 |eSemapho|re..p.Ps|
|000003d0| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|000003e0| 73 00 41 04 4f 62 66 44 | 65 72 65 66 65 72 65 6e |s.A.ObfD|ereferen|
|000003f0| 63 65 4f 62 6a 65 63 74 | 00 00 df 02 4b 65 49 6e |ceObject|....KeIn|
|00000400| 69 74 69 61 6c 69 7a 65 | 53 65 6d 61 70 68 6f 72 |itialize|Semaphor|
|00000410| 65 00 42 04 4f 62 66 52 | 65 66 65 72 65 6e 63 65 |e.B.ObfR|eference|
|00000420| 4f 62 6a 65 63 74 00 00 | 51 05 52 74 6c 47 65 74 |Object..|Q.RtlGet|
|00000430| 53 61 63 6c 53 65 63 75 | 72 69 74 79 44 65 73 63 |SaclSecu|rityDesc|
|00000440| 72 69 70 74 6f 72 00 00 | 46 05 52 74 6c 47 65 74 |riptor..|F.RtlGet|
|00000450| 44 61 63 6c 53 65 63 75 | 72 69 74 79 44 65 73 63 |DaclSecu|rityDesc|
|00000460| 72 69 70 74 6f 72 00 00 | 4b 05 52 74 6c 47 65 74 |riptor..|K.RtlGet|
|00000470| 47 72 6f 75 70 53 65 63 | 75 72 69 74 79 44 65 73 |GroupSec|urityDes|
|00000480| 63 72 69 70 74 6f 72 00 | 4f 05 52 74 6c 47 65 74 |criptor.|O.RtlGet|
|00000490| 4f 77 6e 65 72 53 65 63 | 75 72 69 74 79 44 65 73 |OwnerSec|urityDes|
|000004a0| 63 72 69 70 74 6f 72 00 | d1 05 52 74 6c 53 65 74 |criptor.|..RtlSet|
|000004b0| 53 61 63 6c 53 65 63 75 | 72 69 74 79 44 65 73 63 |SaclSecu|rityDesc|
|000004c0| 72 69 70 74 6f 72 00 00 | cd 05 52 74 6c 53 65 74 |riptor..|..RtlSet|
|000004d0| 44 61 63 6c 53 65 63 75 | 72 69 74 79 44 65 73 63 |DaclSecu|rityDesc|
|000004e0| 72 69 70 74 6f 72 00 00 | cf 05 52 74 6c 53 65 74 |riptor..|..RtlSet|
|000004f0| 47 72 6f 75 70 53 65 63 | 75 72 69 74 79 44 65 73 |GroupSec|urityDes|
|00000500| 63 72 69 70 74 6f 72 00 | d0 05 52 74 6c 53 65 74 |criptor.|..RtlSet|
|00000510| 4f 77 6e 65 72 53 65 63 | 75 72 69 74 79 44 65 73 |OwnerSec|urityDes|
|00000520| 63 72 69 70 74 6f 72 00 | 04 05 52 74 6c 43 72 65 |criptor.|..RtlCre|
|00000530| 61 74 65 53 65 63 75 72 | 69 74 79 44 65 73 63 72 |ateSecur|ityDescr|
|00000540| 69 70 74 6f 72 00 fb 02 | 4b 65 51 75 65 72 79 4d |iptor...|KeQueryM|
|00000550| 61 78 69 6d 75 6d 50 72 | 6f 63 65 73 73 6f 72 43 |aximumPr|ocessorC|
|00000560| 6f 75 6e 74 00 00 b7 02 | 4b 65 44 65 6c 61 79 45 |ount....|KeDelayE|
|00000570| 78 65 63 75 74 69 6f 6e | 54 68 72 65 61 64 00 00 |xecution|Thread..|
|00000580| 9b 03 4d 6d 4d 61 70 4c | 6f 63 6b 65 64 50 61 67 |..MmMapL|ockedPag|
|00000590| 65 73 53 70 65 63 69 66 | 79 43 61 63 68 65 00 00 |esSpecif|yCache..|
|000005a0| c8 02 4b 65 47 65 74 43 | 75 72 72 65 6e 74 54 68 |..KeGetC|urrentTh|
|000005b0| 72 65 61 64 00 00 b3 02 | 4b 65 42 75 67 43 68 65 |read....|KeBugChe|
|000005c0| 63 6b 45 78 00 00 50 00 | 4b 65 47 65 74 43 75 72 |ckEx..P.|KeGetCur|
|000005d0| 72 65 6e 74 49 72 71 6c | 00 00 56 00 4b 65 52 65 |rentIrql|..V.KeRe|
|000005e0| 6c 65 61 73 65 49 6e 53 | 74 61 63 6b 51 75 65 75 |leaseInS|tackQueu|
|000005f0| 65 64 53 70 69 6e 4c 6f | 63 6b 00 00 49 00 4b 65 |edSpinLo|ck..I.Ke|
|00000600| 41 63 71 75 69 72 65 49 | 6e 53 74 61 63 6b 51 75 |AcquireI|nStackQu|
|00000610| 65 75 65 64 53 70 69 6e | 4c 6f 63 6b 00 00 5d 00 |euedSpin|Lock..].|
|00000620| 4b 66 4c 6f 77 65 72 49 | 72 71 6c 00 54 00 4b 65 |KfLowerI|rql.T.Ke|
|00000630| 52 61 69 73 65 49 72 71 | 6c 54 6f 44 70 63 4c 65 |RaiseIrq|lToDpcLe|
|00000640| 76 65 6c 00 48 41 4c 2e | 64 6c 6c 00 2a 00 52 70 |vel.HAL.|dll.*.Rp|
|00000650| 63 41 73 79 6e 63 43 6f | 6d 70 6c 65 74 65 43 61 |cAsyncCo|mpleteCa|
|00000660| 6c 6c 00 00 2c 00 52 70 | 63 41 73 79 6e 63 49 6e |ll..,.Rp|cAsyncIn|
|00000670| 69 74 69 61 6c 69 7a 65 | 48 61 6e 64 6c 65 00 00 |itialize|Handle..|
|00000680| 25 00 4e 64 72 4d 65 73 | 54 79 70 65 44 65 63 6f |%.NdrMes|TypeDeco|
|00000690| 64 65 32 00 18 00 4e 64 | 72 43 6c 69 65 6e 74 43 |de2...Nd|rClientC|
|000006a0| 61 6c 6c 32 00 00 17 00 | 4e 64 72 41 73 79 6e 63 |all2....|NdrAsync|
|000006b0| 43 6c 69 65 6e 74 43 61 | 6c 6c 00 00 30 00 52 70 |ClientCa|ll..0.Rp|
|000006c0| 63 42 69 6e 64 69 6e 67 | 46 72 65 65 00 00 2d 00 |cBinding|Free..-.|
|000006d0| 52 70 63 42 69 6e 64 69 | 6e 67 42 69 6e 64 00 00 |RpcBindi|ngBind..|
|000006e0| 34 00 52 70 63 42 69 6e | 64 69 6e 67 53 65 74 4f |4.RpcBin|dingSetO|
|000006f0| 70 74 69 6f 6e 00 2f 00 | 52 70 63 42 69 6e 64 69 |ption./.|RpcBindi|
|00000700| 6e 67 43 72 65 61 74 65 | 57 00 10 00 4d 65 73 48 |ngCreate|W...MesH|
|00000710| 61 6e 64 6c 65 46 72 65 | 65 00 04 00 49 5f 52 70 |andleFre|e...I_Rp|
|00000720| 63 45 78 63 65 70 74 69 | 6f 6e 46 69 6c 74 65 72 |cExcepti|onFilter|
|00000730| 00 00 0d 00 4d 65 73 45 | 6e 63 6f 64 65 44 79 6e |....MesE|ncodeDyn|
|00000740| 42 75 66 66 65 72 48 61 | 6e 64 6c 65 43 72 65 61 |BufferHa|ndleCrea|
|00000750| 74 65 00 00 0b 00 4d 65 | 73 44 65 63 6f 64 65 42 |te....Me|sDecodeB|
|00000760| 75 66 66 65 72 48 61 6e | 64 6c 65 43 72 65 61 74 |ufferHan|dleCreat|
|00000770| 65 00 6d 73 72 70 63 2e | 73 79 73 00 89 01 4e 64 |e.msrpc.|sys...Nd|
|00000780| 69 73 52 65 74 72 65 61 | 74 4e 65 74 42 75 66 66 |isRetrea|tNetBuff|
|00000790| 65 72 44 61 74 61 53 74 | 61 72 74 00 07 00 4e 64 |erDataSt|art...Nd|
|000007a0| 69 73 41 64 76 61 6e 63 | 65 4e 65 74 42 75 66 66 |isAdvanc|eNetBuff|
|000007b0| 65 72 44 61 74 61 53 74 | 61 72 74 00 95 00 4e 64 |erDataSt|art...Nd|
|000007c0| 69 73 46 72 65 65 4e 65 | 74 42 75 66 66 65 72 4c |isFreeNe|tBufferL|
|000007d0| 69 73 74 00 15 00 4e 64 | 69 73 41 6c 6c 6f 63 61 |ist...Nd|isAlloca|
|000007e0| 74 65 4e 65 74 42 75 66 | 66 65 72 41 6e 64 4e 65 |teNetBuf|ferAndNe|
|000007f0| 74 42 75 66 66 65 72 4c | 69 73 74 00 8d 00 4e 64 |tBufferL|ist...Nd|
|00000800| 69 73 46 72 65 65 43 6c | 6f 6e 65 4e 65 74 42 75 |isFreeCl|oneNetBu|
|00000810| 66 66 65 72 4c 69 73 74 | 00 00 0b 00 4e 64 69 73 |fferList|....Ndis|
|00000820| 41 6c 6c 6f 63 61 74 65 | 43 6c 6f 6e 65 4e 65 74 |Allocate|CloneNet|
|00000830| 42 75 66 66 65 72 4c 69 | 73 74 00 00 9c 00 4e 64 |BufferLi|st....Nd|
|00000840| 69 73 46 72 65 65 52 65 | 61 73 73 65 6d 62 6c 65 |isFreeRe|assemble|
|00000850| 64 4e 65 74 42 75 66 66 | 65 72 4c 69 73 74 00 00 |dNetBuff|erList..|
|00000860| 1f 00 4e 64 69 73 41 6c | 6c 6f 63 61 74 65 52 65 |..NdisAl|locateRe|
|00000870| 61 73 73 65 6d 62 6c 65 | 64 4e 65 74 42 75 66 66 |assemble|dNetBuff|
|00000880| 65 72 4c 69 73 74 00 00 | 06 00 4e 64 69 73 41 64 |erList..|..NdisAd|
|00000890| 6a 75 73 74 4e 65 74 42 | 75 66 66 65 72 43 75 72 |justNetB|ufferCur|
|000008a0| 72 65 6e 74 4d 64 6c 00 | a4 00 4e 64 69 73 47 65 |rentMdl.|..NdisGe|
|000008b0| 74 44 61 74 61 42 75 66 | 66 65 72 00 4e 44 49 53 |tDataBuf|fer.NDIS|
|000008c0| 2e 53 59 53 00 00 71 00 | 4b 66 64 41 64 64 43 61 |.SYS..q.|KfdAddCa|
|000008d0| 6c 6c 6f 75 74 45 6e 74 | 72 79 00 00 80 00 4b 66 |lloutEnt|ry....Kf|
|000008e0| 64 44 65 6c 65 74 65 43 | 61 6c 6c 6f 75 74 45 6e |dDeleteC|alloutEn|
|000008f0| 74 72 79 00 4e 01 57 66 | 70 41 73 73 6f 63 69 61 |try.N.Wf|pAssocia|
|00000900| 74 65 43 6f 6e 74 65 78 | 74 54 6f 46 6c 6f 77 00 |teContex|tToFlow.|
|00000910| 55 01 57 66 70 52 65 6d | 6f 76 65 43 6f 6e 74 65 |U.WfpRem|oveConte|
|00000920| 78 74 46 72 6f 6d 46 6c | 6f 77 00 00 a4 00 4e 65 |xtFromFl|ow....Ne|
|00000930| 74 69 6f 41 6c 6c 6f 63 | 61 74 65 4d 64 6c 00 00 |tioAlloc|ateMdl..|
|00000940| b0 00 4e 65 74 69 6f 44 | 65 72 65 66 65 72 65 6e |..NetioD|ereferen|
|00000950| 63 65 4e 65 74 42 75 66 | 66 65 72 4c 69 73 74 43 |ceNetBuf|ferListC|
|00000960| 68 61 69 6e 00 00 b5 00 | 4e 65 74 69 6f 46 72 65 |hain....|NetioFre|
|00000970| 65 4d 64 6c 00 00 0d 01 | 52 74 6c 43 6f 70 79 4d |eMdl....|RtlCopyM|
|00000980| 64 6c 54 6f 42 75 66 66 | 65 72 00 00 ae 00 4e 65 |dlToBuff|er....Ne|
|00000990| 74 69 6f 43 6f 70 79 4e | 65 74 42 75 66 66 65 72 |tioCopyN|etBuffer|
|000009a0| 4c 69 73 74 49 6e 66 6f | 72 6d 61 74 69 6f 6e 00 |ListInfo|rmation.|
|000009b0| c4 00 4e 65 74 69 6f 52 | 65 66 65 72 65 6e 63 65 |..NetioR|eference|
|000009c0| 4e 65 74 42 75 66 66 65 | 72 4c 69 73 74 00 af 00 |NetBuffe|rList...|
|000009d0| 4e 65 74 69 6f 44 65 72 | 65 66 65 72 65 6e 63 65 |NetioDer|eference|
|000009e0| 4e 65 74 42 75 66 66 65 | 72 4c 69 73 74 00 c5 00 |NetBuffe|rList...|
|000009f0| 4e 65 74 69 6f 52 65 66 | 65 72 65 6e 63 65 4e 65 |NetioRef|erenceNe|
|00000a00| 74 42 75 66 66 65 72 4c | 69 73 74 43 68 61 69 6e |tBufferL|istChain|
|00000a10| 00 00 0c 01 52 74 6c 43 | 6f 70 79 42 75 66 66 65 |....RtlC|opyBuffe|
|00000a20| 72 54 6f 4d 64 6c 00 00 | be 00 4e 65 74 69 6f 49 |rToMdl..|..NetioI|
|00000a30| 6e 69 74 69 61 6c 69 7a | 65 4e 65 74 42 75 66 66 |nitializ|eNetBuff|
|00000a40| 65 72 4c 69 73 74 43 6f | 6e 74 65 78 74 00 bf 00 |erListCo|ntext...|
|00000a50| 4e 65 74 69 6f 49 6e 69 | 74 69 61 6c 69 7a 65 4e |NetioIni|tializeN|
|00000a60| 65 74 42 75 66 66 65 72 | 4c 69 73 74 43 6f 6e 74 |etBuffer|ListCont|
|00000a70| 65 78 74 50 72 69 6d 69 | 74 69 76 65 00 00 cc 00 |extPrimi|tive....|
|00000a80| 4e 65 74 69 6f 55 70 64 | 61 74 65 4e 65 74 42 75 |NetioUpd|ateNetBu|
|00000a90| 66 66 65 72 4c 69 73 74 | 43 6f 6e 74 65 78 74 00 |fferList|Context.|
|00000aa0| 4e 45 54 49 4f 2e 53 59 | 53 00 8e 00 45 78 49 6e |NETIO.SY|S...ExIn|
|00000ab0| 69 74 69 61 6c 69 7a 65 | 4e 50 61 67 65 64 4c 6f |itialize|NPagedLo|
|00000ac0| 6f 6b 61 73 69 64 65 4c | 69 73 74 00 72 00 45 78 |okasideL|ist.r.Ex|
|00000ad0| 44 65 6c 65 74 65 4e 50 | 61 67 65 64 4c 6f 6f 6b |DeleteNP|agedLook|
|00000ae0| 61 73 69 64 65 4c 69 73 | 74 00 a4 01 49 6e 74 65 |asideLis|t...Inte|
|00000af0| 72 6c 6f 63 6b 65 64 50 | 6f 70 45 6e 74 72 79 53 |rlockedP|opEntryS|
|00000b00| 4c 69 73 74 00 00 a5 01 | 49 6e 74 65 72 6c 6f 63 |List....|Interloc|
|00000b10| 6b 65 64 50 75 73 68 45 | 6e 74 72 79 53 4c 69 73 |kedPushE|ntrySLis|
|00000b20| 74 00 d2 04 52 74 6c 41 | 62 73 6f 6c 75 74 65 54 |t...RtlA|bsoluteT|
|00000b30| 6f 53 65 6c 66 52 65 6c | 61 74 69 76 65 53 44 00 |oSelfRel|ativeSD.|
|00000b40| 94 05 52 74 6c 4c 65 6e | 67 74 68 53 65 63 75 72 |..RtlLen|gthSecur|
|00000b50| 69 74 79 44 65 73 63 72 | 69 70 74 6f 72 00 95 05 |ityDescr|iptor...|
|00000b60| 52 74 6c 4c 65 6e 67 74 | 68 53 69 64 00 00 53 00 |RtlLengt|hSid..S.|
|00000b70| 45 74 77 55 6e 72 65 67 | 69 73 74 65 72 00 4e 00 |EtwUnreg|ister.N.|
|00000b80| 45 74 77 45 76 65 6e 74 | 45 6e 61 62 6c 65 64 00 |EtwEvent|Enabled.|
|00000b90| 50 00 45 74 77 52 65 67 | 69 73 74 65 72 00 54 00 |P.EtwReg|ister.T.|
|00000ba0| 45 74 77 57 72 69 74 65 | 00 00 06 06 52 74 6c 56 |EtwWrite|....RtlV|
|00000bb0| 61 6c 69 64 53 69 64 00 | f8 05 52 74 6c 55 6e 77 |alidSid.|..RtlUnw|
|00000bc0| 69 6e 64 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |ind.....|........|
|00000bd0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000be0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000bf0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+