PC World Komputer 2010 April

home *** CD-ROM | disk | FTP | other *** search
/ PC World Komputer 2010 April / PCWorld0410.iso / WindowsServerTrial / server.iso / sources / install.wim / 5 / Windows / System32 / drivers / fileinfo.sys / INIT < prev next >
Unknown | 2008-01-19 | 5.5 KB
open in:
MacOS 8.1 |
Win98 |
DOS
view JSON data |
view as text

This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence	Program	Detection	Match Type	Support
`100%`	file	data	default
hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 00 00 00 00 00 00 8b ff | 55 8b ec 81 ec 84 01 00 |........|U.......|
|00000010| 00 33 c0 c7 85 d8 fe ff | ff fe 52 01 00 c7 85 dc |.3......|..R.....|
|00000020| fe ff ff e0 7b 01 00 53 | 33 db 88 9d d0 fe ff ff |....{..S|3.......|
|00000030| 89 9d d4 fe ff ff 56 57 | 8d bd e0 fe ff ff ab c6 |......VW|........|
|00000040| 85 e4 fe ff ff 12 89 9d | e8 fe ff ff c7 85 ec fe |........|........|
|00000050| ff ff 38 6f 01 00 c7 85 | f0 fe ff ff be 77 01 00 |..8o....|.....w..|
|00000060| b9 94 13 01 00 8d bd f4 | fe ff ff ab c6 85 f8 fe |........|........|
|00000070| ff ff 02 89 9d fc fe ff | ff c7 85 00 ff ff ff 64 |........|.......d|
|00000080| 6f 01 00 89 8d 04 ff ff | ff 8d bd 08 ff ff ff ab |o.......|........|
|00000090| c6 85 0c ff ff ff 03 89 | 9d 10 ff ff ff be 88 17 |........|........|
|000000a0| 01 00 89 b5 14 ff ff ff | ba 42 12 01 00 89 95 18 |........|.B......|
|000000b0| ff ff ff 8d bd 1c ff ff | ff ab c6 85 20 ff ff ff |........|.... ...|
|000000c0| 04 89 9d 24 ff ff ff 89 | b5 28 ff ff ff 89 95 2c |...$....|.(.....,|
|000000d0| ff ff ff 8d bd 30 ff ff | ff ab c6 85 34 ff ff ff |.....0..|....4...|
|000000e0| 06 89 9d 38 ff ff ff c7 | 85 3c ff ff ff ac 13 01 |...8....|.<......|
|000000f0| 00 c7 85 40 ff ff ff 54 | 15 01 00 8d bd 44 ff ff |...@...T|.....D..|
|00000100| ff ab c6 85 48 ff ff ff | 0d 89 9d 4c ff ff ff c7 |....H...|...L....|
|00000110| 85 50 ff ff ff cc 55 01 | 00 c7 85 54 ff ff ff 06 |.P....U.|...T....|
|00000120| 13 01 00 8d bd 58 ff ff | ff ab c6 85 5c ff ff ff |.....X..|....\...|
|00000130| 09 89 9d 60 ff ff ff c7 | 85 64 ff ff ff ce 6f 01 |...`....|.d....o.|
|00000140| 00 89 8d 68 ff ff ff 8d | bd 6c ff ff ff ab c6 85 |...h....|.l......|
|00000150| 70 ff ff ff 0c 89 9d 74 | ff ff ff c7 85 78 ff ff |p......t|.....x..|
|00000160| ff d4 56 01 00 89 8d 7c | ff ff ff 8d 7d 80 ab c6 |..V....||....}...|
|00000170| 45 84 05 89 5d 88 c7 45 | 8c 74 10 01 00 89 4d 90 |E...]..E|.t....M.|
|00000180| 8d 7d 94 ab c6 45 98 80 | 8d 7d 9c ab ab ab ab 66 |.}...E..|.}.....f|
|00000190| c7 85 7c fe ff ff 08 00 | 66 89 9d 7e fe ff ff c7 |..|.....|f..~....|
|000001a0| 85 80 fe ff ff c0 5f 01 | 00 c7 85 84 fe ff ff 2c |......_.|.......,|
|000001b0| 00 00 00 c7 85 88 fe ff | ff 46 49 63 73 33 c0 8d |........|.FIcs3..|
|000001c0| bd 8c fe ff ff ab ab ab | 33 c0 66 c7 85 98 fe ff |........|3.f.....|
|000001d0| ff 02 00 66 89 9d 9a fe | ff ff c7 85 9c fe ff ff |...f....|........|
|000001e0| 6e 5b 01 00 c7 85 a0 fe | ff ff 40 02 00 00 c7 85 |n[......|..@.....|
|000001f0| a4 fe ff ff 46 49 63 76 | 8d bd a8 fe ff ff ab ab |....FIcv|........|
|00000200| ab 66 81 8d b4 fe ff ff | ff ff 6a 06 33 c0 59 8d |.f......|..j.3.Y.|
|00000210| bd b6 fe ff ff f3 ab 66 | ab 8d 85 7c fe ff ff 89 |.......f|...|....|
|00000220| 45 bc 8d 85 d0 fe ff ff | 89 45 c0 33 c0 66 c7 45 |E.......|.E.3.f.E|
|00000230| b4 38 00 66 c7 45 b6 02 | 02 89 5d b8 c7 45 c4 d6 |.8.f.E..|..]..E..|
|00000240| 6c 01 00 89 5d c8 89 5d | cc 89 5d d0 89 5d d4 89 |l...]..]|..]..]..|
|00000250| 5d d8 89 5d dc 89 5d e0 | 8d 7d e4 68 c0 05 00 00 |]..]..].|.}.h....|
|00000260| ab 53 be c0 41 01 00 56 | ab e8 42 5c ff ff 83 c4 |.S..A..V|..B\....|
|00000270| 0c 68 c4 41 01 00 e8 8b | 4d ff ff 68 00 42 01 00 |.h.A....|M..h.B..|
|00000280| e8 81 4d ff ff b8 c8 41 | 01 00 68 8c 42 01 00 a3 |..M....A|..h.B...|
|00000290| cc 41 01 00 a3 c8 41 01 | 00 e8 68 4d ff ff 68 90 |.A....A.|..hM..h.|
|000002a0| 42 01 00 e8 be bf ff ff | 68 b4 42 01 00 e8 b4 bf |B.......|h.B.....|
|000002b0| ff ff 68 d8 42 01 00 e8 | 4a 4d ff ff b8 dc 42 01 |..h.B...|JM....B.|
|000002c0| 00 68 ec 43 01 00 a3 e0 | 42 01 00 a3 dc 42 01 00 |.h.C....|B....B..|
|000002d0| e8 31 4d ff ff b8 f0 43 | 01 00 68 5c 43 01 00 a3 |.1M....C|..h\C...|
|000002e0| f4 43 01 00 a3 f0 43 01 | 00 e8 18 4d ff ff a1 64 |.C....C.|...M...d|
|000002f0| 43 01 00 83 e0 1f 0d 00 | 04 00 00 83 e0 e0 a3 64 |C.......|.......d|
|00000300| 43 01 00 bf 6c 43 01 00 | b8 60 43 01 00 89 1d 60 |C...lC..|.`C....`|
|00000310| 43 01 00 89 3d 68 43 01 | 00 83 c8 01 6a 20 59 f3 |C...=hC.|....j Y.|
|00000320| ab c7 05 68 47 01 00 6c | 47 01 00 33 c0 bf 40 47 |...hG..l|G..3..@G|
|00000330| 01 00 ab 68 30 47 01 00 | ab e8 c8 4c ff ff 8b 7d |...h0G..|...L...}|
|00000340| 08 b8 e0 6d 01 00 68 f0 | 41 01 00 89 47 38 89 87 |...m..h.|A...G8..|
|00000350| 80 00 00 00 89 47 40 89 | 47 70 89 87 94 00 00 00 |.....G@.|Gp......|
|00000360| e8 d3 8d ff ff 68 06 c5 | 01 00 8d 45 ac 50 ff 15 |.....h..|...E.P..|
|00000370| f8 31 01 00 68 ec 41 01 | 00 53 68 c0 33 01 00 53 |.1..h.A.|.Sh.3..S|
|00000380| 68 00 01 00 00 6a 22 8d | 45 ac 50 53 57 e8 8e e4 |h....j".|E.PSW...|
|00000390| ff ff 3b c3 89 45 08 0f | 8c 15 01 00 00 68 01 00 |..;..E..|.....h..|
|000003a0| 41 00 ff 35 ec 41 01 00 | ff 15 a4 31 01 00 3b c3 |A..5.A..|...1..;.|
|000003b0| 89 45 08 0f 8c f9 00 00 | 00 83 0d e8 41 01 00 04 |.E......|....A...|
|000003c0| 68 78 47 01 00 53 53 68 | 6c 32 01 00 ff 15 24 31 |hxG..SSh|l2....$1|
|000003d0| 01 00 85 c0 7d 0c 89 1d | 78 47 01 00 89 1d 7c 47 |....}...|xG....|G|
|000003e0| 01 00 56 8d 45 b4 50 57 | e8 c5 60 ff ff 3b c3 89 |..V.E.PW|..`..;..|
|000003f0| 45 08 0f 8c ba 00 00 00 | 68 46 49 63 70 6a 0c 53 |E.......|hFIcpj.S|
|00000400| 68 f0 42 01 00 ff 35 c0 | 41 01 00 e8 96 60 ff ff |h.B...5.|A....`..|
|00000410| 83 0d e8 41 01 00 01 33 | c0 8d 7d ec ab ab ab ab |...A...3|..}.....|
|00000420| ab 83 4d f4 04 6a 0b 5e | 8d 45 ec 50 89 75 ec c7 |..M..j.^|.E.P.u..|
|00000430| 45 f0 0c 00 00 00 e8 69 | 5a ff ff 85 c0 7d 15 68 |E......i|Z....}.h|
|00000440| 8c 42 01 00 ff 35 f4 41 | 01 00 68 e8 42 01 00 e8 |.B...5.A|..h.B...|
|00000450| e8 bc ff ff 33 c0 8d 7d | ec ab ab ab ab ab 83 4d |....3..}|.......M|
|00000460| f4 04 8d 45 ec 50 89 75 | ec c7 45 f0 0a 00 00 00 |...E.P.u|..E.....|
|00000470| c7 45 fc 84 42 01 00 c7 | 05 84 42 01 00 ee 9d 01 |.E..B...|..B.....|
|00000480| 00 c7 05 88 42 01 00 46 | a3 01 00 e8 14 5a ff ff |....B..F|.....Z..|
|00000490| 85 c0 7c 07 83 0d e8 41 | 01 00 02 ff 35 c0 41 01 |..|....A|....5.A.|
|000004a0| 00 e8 f4 5f ff ff 3b c3 | 89 45 08 7c 05 89 5d 08 |..._..;.|.E.|..].|
|000004b0| eb 07 6a 01 e8 1d a8 ff | ff 8b 45 08 5f 5e 5b c9 |..j.....|..E._^[.|
|000004c0| c2 08 00 cc cc cc cc cc | 8b ff 55 8b ec a1 18 40 |........|..U....@|
|000004d0| 01 00 85 c0 b9 4e e6 40 | bb 74 04 3b c1 75 1a a1 |.....N.@|.t.;.u..|
|000004e0| 00 32 01 00 8b 00 35 18 | 40 01 00 a3 18 40 01 00 |.2....5.|@....@..|
|000004f0| 75 07 8b c1 a3 18 40 01 | 00 f7 d0 a3 1c 40 01 00 |u.....@.|.....@..|
|00000500| 5d e9 00 fb ff ff 5c 00 | 44 00 65 00 76 00 69 00 |].....\.|D.e.v.i.|
|00000510| 63 00 65 00 5c 00 46 00 | 69 00 6c 00 65 00 49 00 |c.e.\.F.|i.l.e.I.|
|00000520| 6e 00 66 00 6f 00 00 00 | 30 c6 00 00 00 00 00 00 |n.f.o...|0.......|
|00000530| 00 00 00 00 b8 cd 00 00 | b8 30 00 00 28 c6 00 00 |........|.0..(...|
|00000540| 00 00 00 00 00 00 00 00 | e6 cd 00 00 b0 30 00 00 |........|.....0..|
|00000550| 78 c5 00 00 00 00 00 00 | 00 00 00 00 9e d4 00 00 |x.......|........|
|00000560| 00 30 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |.0......|........|
|00000570| 00 00 00 00 00 00 00 00 | 70 d4 00 00 56 d4 00 00 |........|p...V...|
|00000580| 40 d4 00 00 2e d4 00 00 | 14 d4 00 00 ee d3 00 00 |@.......|........|
|00000590| ba d3 00 00 9a d3 00 00 | 7c d3 00 00 5a d3 00 00 |........||...Z...|
|000005a0| 44 d3 00 00 32 d3 00 00 | 26 d3 00 00 08 d3 00 00 |D...2...|&.......|
|000005b0| f0 d2 00 00 d0 d2 00 00 | b2 d2 00 00 9a d2 00 00 |........|........|
|000005c0| 86 d2 00 00 5a d2 00 00 | 46 d2 00 00 30 d2 00 00 |....Z...|F...0...|
|000005d0| 12 d2 00 00 f8 d1 00 00 | e2 d1 00 00 c0 d1 00 00 |........|........|
|000005e0| ae d1 00 00 92 d1 00 00 | 78 d1 00 00 60 d1 00 00 |........|x...`...|
|000005f0| 46 d1 00 00 2a d1 00 00 | 06 d1 00 00 d8 d0 00 00 |F...*...|........|
|00000600| c2 d0 00 00 a0 d0 00 00 | 88 d0 00 00 72 d0 00 00 |........|....r...|
|00000610| 56 d0 00 00 3e d0 00 00 | 2a d0 00 00 0a d0 00 00 |V...>...|*.......|
|00000620| 8a d4 00 00 00 00 00 00 | d2 cd 00 00 00 00 00 00 |........|........|
|00000630| a6 cb 00 00 b4 cb 00 00 | d4 cb 00 00 e8 cb 00 00 |........|........|
|00000640| f6 cb 00 00 06 cc 00 00 | 12 cc 00 00 1e cc 00 00 |........|........|
|00000650| 32 cc 00 00 4a cc 00 00 | 62 cc 00 00 7a cc 00 00 |2...J...|b...z...|
|00000660| 98 cc 00 00 90 cb 00 00 | c4 cc 00 00 de cc 00 00 |........|........|
|00000670| f6 cc 00 00 0e cd 00 00 | 2a cd 00 00 46 cd 00 00 |........|*...F...|
|00000680| 50 cd 00 00 64 cd 00 00 | 80 cd 00 00 94 cd 00 00 |P...d...|........|
|00000690| 6e cb 00 00 c6 cd 00 00 | ac cc 00 00 82 cb 00 00 |n.......|........|
|000006a0| ee cd 00 00 0a ce 00 00 | 20 ce 00 00 36 ce 00 00 |........| ...6...|
|000006b0| 48 ce 00 00 68 ce 00 00 | 88 ce 00 00 a8 ce 00 00 |H...h...|........|
|000006c0| c8 ce 00 00 d6 ce 00 00 | f4 ce 00 00 12 cf 00 00 |........|........|
|000006d0| 1e cf 00 00 38 cf 00 00 | 44 cf 00 00 5e cf 00 00 |....8...|D...^...|
|000006e0| 6e cf 00 00 78 cf 00 00 | 96 cf 00 00 b6 cf 00 00 |n...x...|........|
|000006f0| d4 cf 00 00 e2 cf 00 00 | f2 cf 00 00 42 cb 00 00 |........|....B...|
|00000700| 2c cb 00 00 10 cb 00 00 | fc ca 00 00 e4 ca 00 00 |,.......|........|
|00000710| ce ca 00 00 b8 ca 00 00 | a8 ca 00 00 8c ca 00 00 |........|........|
|00000720| 7a ca 00 00 60 ca 00 00 | 50 ca 00 00 40 ca 00 00 |z...`...|P...@...|
|00000730| 36 ca 00 00 18 ca 00 00 | f8 c9 00 00 da c9 00 00 |6.......|........|
|00000740| ce c9 00 00 aa c9 00 00 | 88 c9 00 00 7e c9 00 00 |........|....~...|
|00000750| 5e c9 00 00 46 c9 00 00 | 26 c9 00 00 12 c9 00 00 |^...F...|&.......|
|00000760| fe c8 00 00 f2 c8 00 00 | e8 c8 00 00 de c8 00 00 |........|........|
|00000770| c6 c8 00 00 b4 c8 00 00 | a6 c8 00 00 9c c8 00 00 |........|........|
|00000780| 80 c8 00 00 6c c8 00 00 | 50 c8 00 00 38 c8 00 00 |....l...|P...8...|
|00000790| 30 c8 00 00 12 c8 00 00 | fc c7 00 00 e4 c7 00 00 |0.......|........|
|000007a0| cc c7 00 00 a8 cd 00 00 | b0 c7 00 00 00 00 00 00 |........|........|
|000007b0| d6 00 45 78 66 41 63 71 | 75 69 72 65 50 75 73 68 |..ExfAcq|uirePush|
|000007c0| 4c 6f 63 6b 53 68 61 72 | 65 64 00 00 bd 02 4b 65 |LockShar|ed....Ke|
|000007d0| 45 6e 74 65 72 43 72 69 | 74 69 63 61 6c 52 65 67 |EnterCri|ticalReg|
|000007e0| 69 6f 6e 00 f0 02 4b 65 | 4c 65 61 76 65 43 72 69 |ion...Ke|LeaveCri|
|000007f0| 74 69 63 61 6c 52 65 67 | 69 6f 6e 00 de 00 45 78 |ticalReg|ion...Ex|
|00000800| 66 52 65 6c 65 61 73 65 | 50 75 73 68 4c 6f 63 6b |fRelease|PushLock|
|00000810| 00 00 d5 00 45 78 66 41 | 63 71 75 69 72 65 50 75 |....ExfA|cquirePu|
|00000820| 73 68 4c 6f 63 6b 45 78 | 63 6c 75 73 69 76 65 00 |shLockEx|clusive.|
|00000830| 83 07 72 61 6e 64 00 00 | 6d 00 45 78 41 6c 6c 6f |..rand..|m.ExAllo|
|00000840| 63 61 74 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |catePool|WithTag.|
|00000850| a4 01 49 6e 74 65 72 6c | 6f 63 6b 65 64 50 6f 70 |..Interl|ockedPop|
|00000860| 45 6e 74 72 79 53 4c 69 | 73 74 00 00 85 00 45 78 |EntrySLi|st....Ex|
|00000870| 46 72 65 65 50 6f 6f 6c | 57 69 74 68 54 61 67 00 |FreePool|WithTag.|
|00000880| a5 01 49 6e 74 65 72 6c | 6f 63 6b 65 64 50 75 73 |..Interl|ockedPus|
|00000890| 68 45 6e 74 72 79 53 4c | 69 73 74 00 4b 07 5f 61 |hEntrySL|ist.K._a|
|000008a0| 6c 6c 6d 75 6c 00 3f 03 | 4b 65 54 69 63 6b 43 6f |llmul.?.|KeTickCo|
|000008b0| 75 6e 74 00 13 07 5a 77 | 51 75 65 72 79 56 61 6c |unt...Zw|QueryVal|
|000008c0| 75 65 4b 65 79 00 5f 05 | 52 74 6c 49 6e 69 74 55 |ueKey._.|RtlInitU|
|000008d0| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 7e 07 |nicodeSt|ring..~.|
|000008e0| 6d 65 6d 63 70 79 00 00 | ad 06 5a 77 43 6c 6f 73 |memcpy..|..ZwClos|
|000008f0| 65 00 e6 06 5a 77 4f 70 | 65 6e 4b 65 79 00 44 04 |e...ZwOp|enKey.D.|
|00000900| 50 66 46 69 6c 65 49 6e | 66 6f 4e 6f 74 69 66 79 |PfFileIn|foNotify|
|00000910| 00 00 1c 02 49 6f 47 65 | 74 54 6f 70 4c 65 76 65 |....IoGe|tTopLeve|
|00000920| 6c 49 72 70 00 00 9d 04 | 50 73 49 73 43 75 72 72 |lIrp....|PsIsCurr|
|00000930| 65 6e 74 54 68 72 65 61 | 64 50 72 65 66 65 74 63 |entThrea|dPrefetc|
|00000940| 68 69 6e 67 00 00 75 04 | 50 73 47 65 74 43 75 72 |hing..u.|PsGetCur|
|00000950| 72 65 6e 74 54 68 72 65 | 61 64 49 64 00 00 92 00 |rentThre|adId....|
|00000960| 45 78 49 6e 69 74 69 61 | 6c 69 7a 65 52 75 6e 64 |ExInitia|lizeRund|
|00000970| 6f 77 6e 50 72 6f 74 65 | 63 74 69 6f 6e 00 80 07 |ownProte|ction...|
|00000980| 6d 65 6d 73 65 74 00 00 | 01 02 49 6f 47 65 74 42 |memset..|..IoGetB|
|00000990| 61 73 65 46 69 6c 65 53 | 79 73 74 65 6d 44 65 76 |aseFileS|ystemDev|
|000009a0| 69 63 65 4f 62 6a 65 63 | 74 00 d2 00 45 78 57 61 |iceObjec|t...ExWa|
|000009b0| 69 74 46 6f 72 52 75 6e | 64 6f 77 6e 50 72 6f 74 |itForRun|downProt|
|000009c0| 65 63 74 69 6f 6e 52 65 | 6c 65 61 73 65 00 54 00 |ectionRe|lease.T.|
|000009d0| 45 74 77 57 72 69 74 65 | 00 00 5d 00 45 78 41 63 |EtwWrite|..].ExAc|
|000009e0| 71 75 69 72 65 52 75 6e | 64 6f 77 6e 50 72 6f 74 |quireRun|downProt|
|000009f0| 65 63 74 69 6f 6e 00 00 | 60 00 45 78 41 63 71 75 |ection..|`.ExAcqu|
|00000a00| 69 72 65 52 75 6e 64 6f | 77 6e 50 72 6f 74 65 63 |ireRundo|wnProtec|
|00000a10| 74 69 6f 6e 45 78 00 00 | bc 00 45 78 52 65 6c 65 |tionEx..|..ExRele|
|00000a20| 61 73 65 52 75 6e 64 6f | 77 6e 50 72 6f 74 65 63 |aseRundo|wnProtec|
|00000a30| 74 69 6f 6e 00 00 71 07 | 5f 77 63 73 75 70 72 00 |tion..q.|_wcsupr.|
|00000a40| 61 04 50 72 6f 62 65 46 | 6f 72 57 72 69 74 65 00 |a.ProbeF|orWrite.|
|00000a50| 60 04 50 72 6f 62 65 46 | 6f 72 52 65 61 64 00 00 |`.ProbeF|orRead..|
|00000a60| 9c 00 45 78 49 6e 74 65 | 72 6c 6f 63 6b 65 64 46 |..ExInte|rlockedF|
|00000a70| 6c 75 73 68 53 4c 69 73 | 74 00 e6 01 49 6f 44 65 |lushSLis|t...IoDe|
|00000a80| 6c 65 74 65 44 65 76 69 | 63 65 00 00 89 02 49 6f |leteDevi|ce....Io|
|00000a90| 57 4d 49 52 65 67 69 73 | 74 72 61 74 69 6f 6e 43 |WMIRegis|trationC|
|00000aa0| 6f 6e 74 72 6f 6c 00 00 | 53 00 45 74 77 55 6e 72 |ontrol..|S.EtwUnr|
|00000ab0| 65 67 69 73 74 65 72 00 | 96 02 49 6f 66 43 6f 6d |egister.|..IofCom|
|00000ac0| 70 6c 65 74 65 52 65 71 | 75 65 73 74 00 00 05 02 |pleteReq|uest....|
|00000ad0| 49 6f 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |IoGetCur|rentProc|
|00000ae0| 65 73 73 00 41 04 4f 62 | 66 44 65 72 65 66 65 72 |ess.A.Ob|fDerefer|
|00000af0| 65 6e 63 65 4f 62 6a 65 | 63 74 00 00 fe 02 4b 65 |enceObje|ct....Ke|
|00000b00| 51 75 65 72 79 53 79 73 | 74 65 6d 54 69 6d 65 00 |QuerySys|temTime.|
|00000b10| 09 02 49 6f 47 65 74 44 | 65 76 69 63 65 4f 62 6a |..IoGetD|eviceObj|
|00000b20| 65 63 74 50 6f 69 6e 74 | 65 72 00 00 42 04 4f 62 |ectPoint|er..B.Ob|
|00000b30| 66 52 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |fReferen|ceObject|
|00000b40| 00 00 ff 00 46 73 52 74 | 6c 41 72 65 56 6f 6c 75 |....FsRt|lAreVolu|
|00000b50| 6d 65 53 74 61 72 74 75 | 70 41 70 70 6c 69 63 61 |meStartu|pApplica|
|00000b60| 74 69 6f 6e 73 43 6f 6d | 70 6c 65 74 65 00 3e 01 |tionsCom|plete.>.|
|00000b70| 46 73 52 74 6c 49 73 50 | 61 67 69 6e 67 46 69 6c |FsRtlIsP|agingFil|
|00000b80| 65 00 50 00 45 74 77 52 | 65 67 69 73 74 65 72 00 |e.P.EtwR|egister.|
|00000b90| c8 02 4b 65 47 65 74 43 | 75 72 72 65 6e 74 54 68 |..KeGetC|urrentTh|
|00000ba0| 72 65 61 64 00 00 6a 07 | 5f 76 73 6e 77 70 72 69 |read..j.|_vsnwpri|
|00000bb0| 6e 74 66 00 bc 04 50 73 | 53 65 74 43 75 72 72 65 |ntf...Ps|SetCurre|
|00000bc0| 6e 74 54 68 72 65 61 64 | 50 72 65 66 65 74 63 68 |ntThread|Prefetch|
|00000bd0| 69 6e 67 00 d9 02 4b 65 | 49 6e 69 74 69 61 6c 69 |ing...Ke|Initiali|
|00000be0| 7a 65 45 76 65 6e 74 00 | 2a 03 4b 65 53 65 74 45 |zeEvent.|*.KeSetE|
|00000bf0| 76 65 6e 74 00 00 38 00 | 44 62 67 42 72 65 61 6b |vent..8.|DbgBreak|
|00000c00| 50 6f 69 6e 74 00 3f 00 | 44 62 67 50 72 6f 6d 70 |Point.?.|DbgPromp|
|00000c10| 74 00 3c 00 44 62 67 50 | 72 69 6e 74 00 00 98 02 |t.<.DbgP|rint....|
|00000c20| 4b 64 44 65 62 75 67 67 | 65 72 45 6e 61 62 6c 65 |KdDebugg|erEnable|
|00000c30| 64 00 f9 05 52 74 6c 55 | 70 63 61 73 65 55 6e 69 |d...RtlU|pcaseUni|
|00000c40| 63 6f 64 65 43 68 61 72 | 00 00 48 03 4b 65 57 61 |codeChar|..H.KeWa|
|00000c50| 69 74 46 6f 72 53 69 6e | 67 6c 65 4f 62 6a 65 63 |itForSin|gleObjec|
|00000c60| 74 00 a3 04 50 73 49 73 | 54 68 72 65 61 64 54 65 |t...PsIs|ThreadTe|
|00000c70| 72 6d 69 6e 61 74 69 6e | 67 00 2e 03 4b 65 53 65 |rminatin|g...KeSe|
|00000c80| 74 4b 65 72 6e 65 6c 53 | 74 61 63 6b 53 77 61 70 |tKernelS|tackSwap|
|00000c90| 45 6e 61 62 6c 65 00 00 | a1 04 50 73 49 73 53 79 |Enable..|..PsIsSy|
|00000ca0| 73 74 65 6d 54 68 72 65 | 61 64 00 00 34 04 4f 62 |stemThre|ad..4.Ob|
|00000cb0| 4f 70 65 6e 4f 62 6a 65 | 63 74 42 79 50 6f 69 6e |OpenObje|ctByPoin|
|00000cc0| 74 65 72 00 60 05 52 74 | 6c 49 6e 69 74 55 6e 69 |ter.`.Rt|lInitUni|
|00000cd0| 63 6f 64 65 53 74 72 69 | 6e 67 45 78 00 00 71 04 |codeStri|ngEx..q.|
|00000ce0| 50 73 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |PsGetCur|rentProc|
|00000cf0| 65 73 73 49 64 00 2e 07 | 5a 77 53 65 74 49 6e 66 |essId...|ZwSetInf|
|00000d00| 6f 72 6d 61 74 69 6f 6e | 46 69 6c 65 00 00 16 02 |ormation|File....|
|00000d10| 49 6f 47 65 74 52 65 6c | 61 74 65 64 44 65 76 69 |IoGetRel|atedDevi|
|00000d20| 63 65 4f 62 6a 65 63 74 | 00 00 69 02 49 6f 53 65 |ceObject|..i.IoSe|
|00000d30| 74 54 68 72 65 61 64 48 | 61 72 64 45 72 72 6f 72 |tThreadH|ardError|
|00000d40| 4d 6f 64 65 00 00 d0 03 | 4e 74 43 6c 6f 73 65 00 |Mode....|NtClose.|
|00000d50| f5 01 49 6f 46 69 6c 65 | 4f 62 6a 65 63 74 54 79 |..IoFile|ObjectTy|
|00000d60| 70 65 00 00 37 04 4f 62 | 52 65 66 65 72 65 6e 63 |pe..7.Ob|Referenc|
|00000d70| 65 4f 62 6a 65 63 74 42 | 79 48 61 6e 64 6c 65 00 |eObjectB|yHandle.|
|00000d80| 7e 00 45 78 45 76 65 6e | 74 4f 62 6a 65 63 74 54 |~.ExEven|tObjectT|
|00000d90| 79 70 65 00 8b 00 45 78 | 47 65 74 50 72 65 76 69 |ype...Ex|GetPrevi|
|00000da0| 6f 75 73 4d 6f 64 65 00 | b3 02 4b 65 42 75 67 43 |ousMode.|..KeBugC|
|00000db0| 68 65 63 6b 45 78 00 00 | 6e 74 6f 73 6b 72 6e 6c |heckEx..|ntoskrnl|
|00000dc0| 2e 65 78 65 00 00 f8 05 | 52 74 6c 55 6e 77 69 6e |.exe....|RtlUnwin|
|00000dd0| 64 00 50 00 4b 65 47 65 | 74 43 75 72 72 65 6e 74 |d.P.KeGe|tCurrent|
|00000de0| 49 72 71 6c 00 00 48 41 | 4c 2e 64 6c 6c 00 8a 03 |Irql..HA|L.dll...|
|00000df0| 4d 6d 47 65 74 53 79 73 | 74 65 6d 52 6f 75 74 69 |MmGetSys|temRouti|
|00000e00| 6e 65 41 64 64 72 65 73 | 73 00 34 07 5a 77 53 65 |neAddres|s.4.ZwSe|
|00000e10| 74 53 65 63 75 72 69 74 | 79 4f 62 6a 65 63 74 00 |tSecurit|yObject.|
|00000e20| ec 01 49 6f 44 65 76 69 | 63 65 4f 62 6a 65 63 74 |..IoDevi|ceObject|
|00000e30| 54 79 70 65 00 00 d1 01 | 49 6f 43 72 65 61 74 65 |Type....|IoCreate|
|00000e40| 44 65 76 69 63 65 00 00 | 46 05 52 74 6c 47 65 74 |Device..|F.RtlGet|
|00000e50| 44 61 63 6c 53 65 63 75 | 72 69 74 79 44 65 73 63 |DaclSecu|rityDesc|
|00000e60| 72 69 70 74 6f 72 00 00 | 51 05 52 74 6c 47 65 74 |riptor..|Q.RtlGet|
|00000e70| 53 61 63 6c 53 65 63 75 | 72 69 74 79 44 65 73 63 |SaclSecu|rityDesc|
|00000e80| 72 69 70 74 6f 72 00 00 | 4b 05 52 74 6c 47 65 74 |riptor..|K.RtlGet|
|00000e90| 47 72 6f 75 70 53 65 63 | 75 72 69 74 79 44 65 73 |GroupSec|urityDes|
|00000ea0| 63 72 69 70 74 6f 72 00 | 4f 05 52 74 6c 47 65 74 |criptor.|O.RtlGet|
|00000eb0| 4f 77 6e 65 72 53 65 63 | 75 72 69 74 79 44 65 73 |OwnerSec|urityDes|
|00000ec0| 63 72 69 70 74 6f 72 00 | 5f 07 5f 73 6e 77 70 72 |criptor.|_._snwpr|
|00000ed0| 69 6e 74 66 00 00 94 05 | 52 74 6c 4c 65 6e 67 74 |intf....|RtlLengt|
|00000ee0| 68 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |hSecurit|yDescrip|
|00000ef0| 74 6f 72 00 1f 06 53 65 | 43 61 70 74 75 72 65 53 |tor...Se|CaptureS|
|00000f00| 65 63 75 72 69 74 79 44 | 65 73 63 72 69 70 74 6f |ecurityD|escripto|
|00000f10| 72 00 2e 06 53 65 45 78 | 70 6f 72 74 73 00 29 02 |r...SeEx|ports.).|
|00000f20| 49 6f 49 73 57 64 6d 56 | 65 72 73 69 6f 6e 41 76 |IoIsWdmV|ersionAv|
|00000f30| 61 69 6c 61 62 6c 65 00 | 6e 07 5f 77 63 73 6e 69 |ailable.|n._wcsni|
|00000f40| 63 6d 70 00 d3 04 52 74 | 6c 41 64 64 41 63 63 65 |cmp...Rt|lAddAcce|
|00000f50| 73 73 41 6c 6c 6f 77 65 | 64 41 63 65 00 00 95 05 |ssAllowe|dAce....|
|00000f60| 52 74 6c 4c 65 6e 67 74 | 68 53 69 64 00 00 9a 07 |RtlLengt|hSid....|
|00000f70| 77 63 73 63 68 72 00 00 | d2 04 52 74 6c 41 62 73 |wcschr..|..RtlAbs|
|00000f80| 6f 6c 75 74 65 54 6f 53 | 65 6c 66 52 65 6c 61 74 |oluteToS|elfRelat|
|00000f90| 69 76 65 53 44 00 cd 05 | 52 74 6c 53 65 74 44 61 |iveSD...|RtlSetDa|
|00000fa0| 63 6c 53 65 63 75 72 69 | 74 79 44 65 73 63 72 69 |clSecuri|tyDescri|
|00000fb0| 70 74 6f 72 00 00 04 05 | 52 74 6c 43 72 65 61 74 |ptor....|RtlCreat|
|00000fc0| 65 53 65 63 75 72 69 74 | 79 44 65 73 63 72 69 70 |eSecurit|yDescrip|
|00000fd0| 74 6f 72 00 b8 06 5a 77 | 43 72 65 61 74 65 4b 65 |tor...Zw|CreateKe|
|00000fe0| 79 00 38 07 5a 77 53 65 | 74 56 61 6c 75 65 4b 65 |y.8.ZwSe|tValueKe|
|00000ff0| 79 00 40 05 52 74 6c 46 | 72 65 65 55 6e 69 63 6f |y.@.RtlF|reeUnico|
|00001000| 64 65 53 74 72 69 6e 67 | 00 00 a9 00 46 6c 74 52 |deString|....FltR|
|00001010| 65 6c 65 61 73 65 46 69 | 6c 65 4e 61 6d 65 49 6e |eleaseFi|leNameIn|
|00001020| 66 6f 72 6d 61 74 69 6f | 6e 00 a7 00 46 6c 74 52 |formatio|n...FltR|
|00001030| 65 6c 65 61 73 65 43 6f | 6e 74 65 78 74 00 5d 00 |eleaseCo|ntext.].|
|00001040| 46 6c 74 47 65 74 49 6e | 73 74 61 6e 63 65 43 6f |FltGetIn|stanceCo|
|00001050| 6e 74 65 78 74 00 57 00 | 46 6c 74 47 65 74 46 69 |ntext.W.|FltGetFi|
|00001060| 6c 65 4e 61 6d 65 49 6e | 66 6f 72 6d 61 74 69 6f |leNameIn|formatio|
|00001070| 6e 00 06 00 46 6c 74 41 | 6c 6c 6f 63 61 74 65 43 |n...FltA|llocateC|
|00001080| 6f 6e 74 65 78 74 00 00 | ba 00 46 6c 74 53 65 74 |ontext..|..FltSet|
|00001090| 49 6e 73 74 61 6e 63 65 | 43 6f 6e 74 65 78 74 00 |Instance|Context.|
|000010a0| a4 00 46 6c 74 52 65 66 | 65 72 65 6e 63 65 46 69 |..FltRef|erenceFi|
|000010b0| 6c 65 4e 61 6d 65 49 6e | 66 6f 72 6d 61 74 69 6f |leNameIn|formatio|
|000010c0| 6e 00 cd 00 46 6c 74 55 | 6e 72 65 67 69 73 74 65 |n...FltU|nregiste|
|000010d0| 72 46 69 6c 74 65 72 00 | 32 00 46 6c 74 44 65 6c |rFilter.|2.FltDel|
|000010e0| 65 74 65 45 78 74 72 61 | 43 72 65 61 74 65 50 61 |eteExtra|CreatePa|
|000010f0| 72 61 6d 65 74 65 72 4c | 6f 6f 6b 61 73 69 64 65 |rameterL|ookaside|
|00001100| 4c 69 73 74 00 00 3c 00 | 46 6c 74 44 6f 43 6f 6d |List..<.|FltDoCom|
|00001110| 70 6c 65 74 69 6f 6e 50 | 72 6f 63 65 73 73 69 6e |pletionP|rocessin|
|00001120| 67 57 68 65 6e 53 61 66 | 65 00 9e 00 46 6c 74 51 |gWhenSaf|e...FltQ|
|00001130| 75 65 72 79 56 6f 6c 75 | 6d 65 49 6e 66 6f 72 6d |ueryVolu|meInform|
|00001140| 61 74 69 6f 6e 00 7a 00 | 46 6c 74 47 65 74 56 6f |ation.z.|FltGetVo|
|00001150| 6c 75 6d 65 50 72 6f 70 | 65 72 74 69 65 73 00 00 |lumeProp|erties..|
|00001160| 8d 00 46 6c 74 4f 62 6a | 65 63 74 44 65 72 65 66 |..FltObj|ectDeref|
|00001170| 65 72 65 6e 63 65 00 00 | 4c 00 46 6c 74 46 72 65 |erence..|L.FltFre|
|00001180| 65 47 65 6e 65 72 69 63 | 57 6f 72 6b 49 74 65 6d |eGeneric|WorkItem|
|00001190| 00 00 74 00 46 6c 74 47 | 65 74 56 6f 6c 75 6d 65 |..t.FltG|etVolume|
|000011a0| 46 72 6f 6d 49 6e 73 74 | 61 6e 63 65 00 00 82 00 |FromInst|ance....|
|000011b0| 46 6c 74 49 73 44 69 72 | 65 63 74 6f 72 79 00 00 |FltIsDir|ectory..|
|000011c0| 58 00 46 6c 74 47 65 74 | 46 69 6c 65 4e 61 6d 65 |X.FltGet|FileName|
|000011d0| 49 6e 66 6f 72 6d 61 74 | 69 6f 6e 55 6e 73 61 66 |Informat|ionUnsaf|
|000011e0| 65 00 6a 00 46 6c 74 47 | 65 74 53 74 72 65 61 6d |e.j.FltG|etStream|
|000011f0| 43 6f 6e 74 65 78 74 00 | a1 00 46 6c 74 51 75 65 |Context.|..FltQue|
|00001200| 75 65 47 65 6e 65 72 69 | 63 57 6f 72 6b 49 74 65 |ueGeneri|cWorkIte|
|00001210| 6d 00 0c 00 46 6c 74 41 | 6c 6c 6f 63 61 74 65 47 |m...FltA|llocateG|
|00001220| 65 6e 65 72 69 63 57 6f | 72 6b 49 74 65 6d 00 00 |enericWo|rkItem..|
|00001230| bf 00 46 6c 74 53 65 74 | 53 74 72 65 61 6d 43 6f |..FltSet|StreamCo|
|00001240| 6e 74 65 78 74 00 c4 00 | 46 6c 74 53 74 61 72 74 |ntext...|FltStart|
|00001250| 46 69 6c 74 65 72 69 6e | 67 00 7b 00 46 6c 74 49 |Filterin|g.{.FltI|
|00001260| 6e 69 74 45 78 74 72 61 | 43 72 65 61 74 65 50 61 |nitExtra|CreatePa|
|00001270| 72 61 6d 65 74 65 72 4c | 6f 6f 6b 61 73 69 64 65 |rameterL|ookaside|
|00001280| 4c 69 73 74 00 00 a5 00 | 46 6c 74 52 65 67 69 73 |List....|FltRegis|
|00001290| 74 65 72 46 69 6c 74 65 | 72 00 84 00 46 6c 74 49 |terFilte|r...FltI|
|000012a0| 73 45 63 70 46 72 6f 6d | 55 73 65 72 4d 6f 64 65 |sEcpFrom|UserMode|
|000012b0| 00 00 45 00 46 6c 74 46 | 69 6e 64 45 78 74 72 61 |..E.FltF|indExtra|
|000012c0| 43 72 65 61 74 65 50 61 | 72 61 6d 65 74 65 72 00 |CreatePa|rameter.|
|000012d0| 55 00 46 6c 74 47 65 74 | 45 63 70 4c 69 73 74 46 |U.FltGet|EcpListF|
|000012e0| 72 6f 6d 43 61 6c 6c 62 | 61 63 6b 44 61 74 61 00 |romCallb|ackData.|
|000012f0| 42 00 46 6c 74 45 6e 75 | 6d 65 72 61 74 65 49 6e |B.FltEnu|merateIn|
|00001300| 73 74 61 6e 63 65 73 00 | 73 00 46 6c 74 47 65 74 |stances.|s.FltGet|
|00001310| 56 6f 6c 75 6d 65 46 72 | 6f 6d 46 69 6c 65 4f 62 |VolumeFr|omFileOb|
|00001320| 6a 65 63 74 00 00 22 00 | 46 6c 74 43 6c 6f 73 65 |ject..".|FltClose|
|00001330| 00 00 2c 00 46 6c 74 43 | 72 65 61 74 65 46 69 6c |..,.FltC|reateFil|
|00001340| 65 45 78 00 a3 00 46 6c | 74 52 65 66 65 72 65 6e |eEx...Fl|tReferen|
|00001350| 63 65 43 6f 6e 74 65 78 | 74 00 4a 00 46 6c 74 46 |ceContex|t.J.FltF|
|00001360| 72 65 65 45 78 74 72 61 | 43 72 65 61 74 65 50 61 |reeExtra|CreatePa|
|00001370| 72 61 6d 65 74 65 72 4c | 69 73 74 00 49 00 46 6c |rameterL|ist.I.Fl|
|00001380| 74 46 72 65 65 45 78 74 | 72 61 43 72 65 61 74 65 |tFreeExt|raCreate|
|00001390| 50 61 72 61 6d 65 74 65 | 72 00 7f 00 46 6c 74 49 |Paramete|r...FltI|
|000013a0| 6e 73 65 72 74 45 78 74 | 72 61 43 72 65 61 74 65 |nsertExt|raCreate|
|000013b0| 50 61 72 61 6d 65 74 65 | 72 00 09 00 46 6c 74 41 |Paramete|r...FltA|
|000013c0| 6c 6c 6f 63 61 74 65 45 | 78 74 72 61 43 72 65 61 |llocateE|xtraCrea|
|000013d0| 74 65 50 61 72 61 6d 65 | 74 65 72 46 72 6f 6d 4c |teParame|terFromL|
|000013e0| 6f 6f 6b 61 73 69 64 65 | 4c 69 73 74 00 00 0a 00 |ookaside|List....|
|000013f0| 46 6c 74 41 6c 6c 6f 63 | 61 74 65 45 78 74 72 61 |FltAlloc|ateExtra|
|00001400| 43 72 65 61 74 65 50 61 | 72 61 6d 65 74 65 72 4c |CreatePa|rameterL|
|00001410| 69 73 74 00 a6 00 46 6c | 74 52 65 69 73 73 75 65 |ist...Fl|tReissue|
|00001420| 53 79 6e 63 68 72 6f 6e | 6f 75 73 49 6f 00 86 00 |Synchron|ousIo...|
|00001430| 46 6c 74 49 73 49 6f 43 | 61 6e 63 65 6c 65 64 00 |FltIsIoC|anceled.|
|00001440| 47 00 46 6c 74 46 72 65 | 65 43 61 6c 6c 62 61 63 |G.FltFre|eCallbac|
|00001450| 6b 44 61 74 61 00 95 00 | 46 6c 74 50 65 72 66 6f |kData...|FltPerfo|
|00001460| 72 6d 53 79 6e 63 68 72 | 6f 6e 6f 75 73 49 6f 00 |rmSynchr|onousIo.|
|00001470| 05 00 46 6c 74 41 6c 6c | 6f 63 61 74 65 43 61 6c |..FltAll|ocateCal|
|00001480| 6c 62 61 63 6b 44 61 74 | 61 00 2d 00 46 6c 74 43 |lbackDat|a.-.FltC|
|00001490| 72 65 61 74 65 46 69 6c | 65 45 78 32 00 00 46 4c |reateFil|eEx2..FL|
|000014a0| 54 4d 47 52 2e 53 59 53 | 00 00 00 00 00 00 00 00 |TMGR.SYS|........|
|000014b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000014f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001500| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001510| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001520| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001530| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001540| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001550| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001560| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001570| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001580| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00001590| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015a0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015b0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015c0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015d0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015e0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|000015f0| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+