home *** CD-ROM | disk | FTP | other *** search
/ PC World 2005 September / PCWorld_2005-09_cd.bin / software / antiviry / panda / Platinum.exe / data1.cab / ResidenteFicherosNTWXPDrivers / Pavdrv51.sys / INIT next >
Unknown  |  2003-02-13  |  3.1 KB
open in: MacOS 8.1     |     Win98     |     DOS

view JSON data     |     view as text

This file was not able to be converted.
This format is not currently supported by dexvert.

ConfidenceProgramDetectionMatch TypeSupport
100% file data default


hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| ec c3 00 00 00 00 00 00 | 00 00 00 00 00 cf 00 00 |........|........|
|00000010| 1c a1 00 00 d0 c3 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000020| 5e cf 00 00 00 a1 00 00 | e0 c3 00 00 00 00 00 00 |^.......|........|
|00000030| 00 00 00 00 90 cf 00 00 | 10 a1 00 00 00 00 00 00 |........|........|
|00000040| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000050| 36 cf 00 00 4a cf 00 00 | 22 cf 00 00 00 00 00 00 |6...J...|".......|
|00000060| 66 cf 00 00 7a cf 00 00 | 00 00 00 00 36 c6 00 00 |f...z...|....6...|
|00000070| 4e c6 00 00 60 c6 00 00 | 78 c6 00 00 9a c6 00 00 |N...`...|x.......|
|00000080| b0 c6 00 00 c4 c6 00 00 | dc c6 00 00 f4 c6 00 00 |........|........|
|00000090| 16 c7 00 00 2c c7 00 00 | 4e c7 00 00 66 c7 00 00 |....,...|N...f...|
|000000a0| 82 c7 00 00 9e c7 00 00 | b6 c7 00 00 d0 c7 00 00 |........|........|
|000000b0| e4 c7 00 00 f8 c7 00 00 | 0c c8 00 00 16 c8 00 00 |........|........|
|000000c0| 36 c8 00 00 4a c8 00 00 | 62 c8 00 00 7e c8 00 00 |6...J...|b...~...|
|000000d0| 92 c8 00 00 a0 c8 00 00 | b8 c8 00 00 d2 c8 00 00 |........|........|
|000000e0| e4 c8 00 00 fc c8 00 00 | 18 c9 00 00 34 c9 00 00 |........|....4...|
|000000f0| 54 c9 00 00 68 c9 00 00 | 80 c9 00 00 9a c9 00 00 |T...h...|........|
|00000100| ba c9 00 00 dc c9 00 00 | f8 c9 00 00 0a ca 00 00 |........|........|
|00000110| 2c ca 00 00 48 ca 00 00 | 56 ca 00 00 6c ca 00 00 |,...H...|V...l...|
|00000120| 7e ca 00 00 8e ca 00 00 | a4 ca 00 00 b6 ca 00 00 |~.......|........|
|00000130| cc ca 00 00 14 c6 00 00 | f0 ca 00 00 0c cb 00 00 |........|........|
|00000140| 1a cb 00 00 2e cb 00 00 | 48 cb 00 00 60 cb 00 00 |........|H...`...|
|00000150| 78 cb 00 00 90 cb 00 00 | ac cb 00 00 b8 cb 00 00 |x.......|........|
|00000160| d2 cb 00 00 e2 cb 00 00 | fe cb 00 00 12 cc 00 00 |........|........|
|00000170| 2a cc 00 00 38 cc 00 00 | 4a cc 00 00 64 cc 00 00 |*...8...|J...d...|
|00000180| 8a cc 00 00 94 cc 00 00 | a8 cc 00 00 bc cc 00 00 |........|........|
|00000190| d6 cc 00 00 ee cc 00 00 | fa cc 00 00 1a cd 00 00 |........|........|
|000001a0| 3c cd 00 00 50 cd 00 00 | 6c cd 00 00 82 cd 00 00 |<...P...|l.......|
|000001b0| 9e cd 00 00 b0 cd 00 00 | ba cd 00 00 c4 cd 00 00 |........|........|
|000001c0| dc cd 00 00 f2 cd 00 00 | 02 ce 00 00 1a ce 00 00 |........|........|
|000001d0| 34 ce 00 00 52 ce 00 00 | 5c ce 00 00 6e ce 00 00 |4...R...|\...n...|
|000001e0| 78 ce 00 00 86 ce 00 00 | 96 ce 00 00 a2 ce 00 00 |x.......|........|
|000001f0| b4 ce 00 00 ce ce 00 00 | e6 ce 00 00 0e cf 00 00 |........|........|
|00000200| fc c5 00 00 ec c5 00 00 | d4 c5 00 00 c2 c5 00 00 |........|........|
|00000210| b8 c5 00 00 e0 ca 00 00 | a0 c5 00 00 00 00 00 00 |........|........|
|00000220| 46 00 45 78 44 65 6c 65 | 74 65 52 65 73 6f 75 72 |F.ExDele|teResour|
|00000230| 63 65 4c 69 74 65 00 00 | f4 04 5a 77 43 6c 6f 73 |ceLite..|..ZwClos|
|00000240| 65 00 49 01 49 6f 44 65 | 6c 65 74 65 44 65 76 69 |e.I.IoDe|leteDevi|
|00000250| 63 65 00 00 4b 01 49 6f | 44 65 6c 65 74 65 53 79 |ce..K.Io|DeleteSy|
|00000260| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 00 00 ee 01 4b 65 |mbolicLi|nk....Ke|
|00000270| 42 75 67 43 68 65 63 6b | 45 78 00 00 41 03 50 73 |BugCheck|Ex..A.Ps|
|00000280| 43 72 65 61 74 65 53 79 | 73 74 65 6d 54 68 72 65 |CreateSy|stemThre|
|00000290| 61 64 00 00 95 01 49 6f | 52 65 67 69 73 74 65 72 |ad....Io|Register|
|000002a0| 46 73 52 65 67 69 73 74 | 72 61 74 69 6f 6e 43 68 |FsRegist|rationCh|
|000002b0| 61 6e 67 65 00 00 41 01 | 49 6f 43 72 65 61 74 65 |ange..A.|IoCreate|
|000002c0| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 00 00 38 01 |Symbolic|Link..8.|
|000002d0| 49 6f 43 72 65 61 74 65 | 44 65 76 69 63 65 00 00 |IoCreate|Device..|
|000002e0| 11 04 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |..RtlIni|tUnicode|
|000002f0| 53 74 72 69 6e 67 00 00 | 54 00 45 78 49 6e 69 74 |String..|T.ExInit|
|00000300| 69 61 6c 69 7a 65 4e 50 | 61 67 65 64 4c 6f 6f 6b |ializeNP|agedLook|
|00000310| 61 73 69 64 65 4c 69 73 | 74 00 62 01 49 6f 47 65 |asideLis|t.b.IoGe|
|00000320| 74 43 75 72 72 65 6e 74 | 50 72 6f 63 65 73 73 00 |tCurrent|Process.|
|00000330| 0f 02 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 45 76 |..KeInit|ializeEv|
|00000340| 65 6e 74 00 15 02 4b 65 | 49 6e 69 74 69 61 6c 69 |ent...Ke|Initiali|
|00000350| 7a 65 53 70 69 6e 4c 6f | 63 6b 00 00 20 02 4b 65 |zeSpinLo|ck.. .Ke|
|00000360| 4c 65 61 76 65 43 72 69 | 74 69 63 61 6c 52 65 67 |LeaveCri|ticalReg|
|00000370| 69 6f 6e 00 79 00 45 78 | 52 65 6c 65 61 73 65 52 |ion.y.Ex|ReleaseR|
|00000380| 65 73 6f 75 72 63 65 46 | 6f 72 54 68 72 65 61 64 |esourceF|orThread|
|00000390| 4c 69 74 65 00 00 fe 01 | 4b 65 47 65 74 43 75 72 |Lite....|KeGetCur|
|000003a0| 72 65 6e 74 54 68 72 65 | 61 64 00 00 37 00 45 78 |rentThre|ad..7.Ex|
|000003b0| 41 63 71 75 69 72 65 52 | 65 73 6f 75 72 63 65 45 |AcquireR|esourceE|
|000003c0| 78 63 6c 75 73 69 76 65 | 4c 69 74 65 00 00 f9 01 |xclusive|Lite....|
|000003d0| 4b 65 45 6e 74 65 72 43 | 72 69 74 69 63 61 6c 52 |KeEnterC|riticalR|
|000003e0| 65 67 69 6f 6e 00 56 00 | 45 78 49 6e 69 74 69 61 |egion.V.|ExInitia|
|000003f0| 6c 69 7a 65 52 65 73 6f | 75 72 63 65 4c 69 74 65 |lizeReso|urceLite|
|00000400| 00 00 6f 01 49 6f 47 65 | 74 52 65 6c 61 74 65 64 |..o.IoGe|tRelated|
|00000410| 44 65 76 69 63 65 4f 62 | 6a 65 63 74 00 00 13 05 |DeviceOb|ject....|
|00000420| 5a 77 4d 61 6b 65 54 65 | 6d 70 6f 72 61 72 79 4f |ZwMakeTe|mporaryO|
|00000430| 62 6a 65 63 74 00 f7 04 | 5a 77 43 72 65 61 74 65 |bject...|ZwCreate|
|00000440| 44 69 72 65 63 74 6f 72 | 79 4f 62 6a 65 63 74 00 |Director|yObject.|
|00000450| 4d 00 45 78 46 72 65 65 | 50 6f 6f 6c 57 69 74 68 |M.ExFree|PoolWith|
|00000460| 54 61 67 00 f5 03 52 74 | 6c 46 72 65 65 41 6e 73 |Tag...Rt|lFreeAns|
|00000470| 69 53 74 72 69 6e 67 00 | b0 03 52 74 6c 43 6f 6d |iString.|..RtlCom|
|00000480| 70 61 72 65 53 74 72 69 | 6e 67 00 00 95 05 73 70 |pareStri|ng....sp|
|00000490| 72 69 6e 74 66 00 82 04 | 52 74 6c 55 6e 69 63 6f |rintf...|RtlUnico|
|000004a0| 64 65 53 74 72 69 6e 67 | 54 6f 41 6e 73 69 53 74 |deString|ToAnsiSt|
|000004b0| 72 69 6e 67 00 00 1b 03 | 4f 62 51 75 65 72 79 4e |ring....|ObQueryN|
|000004c0| 61 6d 65 53 74 72 69 6e | 67 00 40 00 45 78 41 6c |ameStrin|g.@.ExAl|
|000004d0| 6c 6f 63 61 74 65 50 6f | 6f 6c 57 69 74 68 54 61 |locatePo|olWithTa|
|000004e0| 67 00 1d 03 4f 62 52 65 | 66 65 72 65 6e 63 65 4f |g...ObRe|ferenceO|
|000004f0| 62 6a 65 63 74 42 79 48 | 61 6e 64 6c 65 00 55 01 |bjectByH|andle.U.|
|00000500| 49 6f 46 69 6c 65 4f 62 | 6a 65 63 74 54 79 70 65 |IoFileOb|jectType|
|00000510| 00 00 18 05 5a 77 4f 70 | 65 6e 46 69 6c 65 00 00 |....ZwOp|enFile..|
|00000520| 25 03 4f 62 66 44 65 72 | 65 66 65 72 65 6e 63 65 |%.ObfDer|eference|
|00000530| 4f 62 6a 65 63 74 00 00 | f4 01 4b 65 44 65 6c 61 |Object..|..KeDela|
|00000540| 79 45 78 65 63 75 74 69 | 6f 6e 54 68 72 65 61 64 |yExecuti|onThread|
|00000550| 00 00 4c 01 49 6f 44 65 | 74 61 63 68 44 65 76 69 |..L.IoDe|tachDevi|
|00000560| 63 65 00 00 64 02 4b 65 | 57 61 69 74 46 6f 72 53 |ce..d.Ke|WaitForS|
|00000570| 69 6e 67 6c 65 4f 62 6a | 65 63 74 00 38 05 5a 77 |ingleObj|ect.8.Zw|
|00000580| 51 75 65 72 79 53 79 6d | 62 6f 6c 69 63 4c 69 6e |QuerySym|bolicLin|
|00000590| 6b 4f 62 6a 65 63 74 00 | 1f 05 5a 77 4f 70 65 6e |kObject.|..ZwOpen|
|000005a0| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 4f 62 6a 65 |Symbolic|LinkObje|
|000005b0| 63 74 00 00 9d 03 52 74 | 6c 41 6e 73 69 53 74 72 |ct....Rt|lAnsiStr|
|000005c0| 69 6e 67 54 6f 55 6e 69 | 63 6f 64 65 53 74 72 69 |ingToUni|codeStri|
|000005d0| 6e 67 00 00 0e 04 52 74 | 6c 49 6e 69 74 41 6e 73 |ng....Rt|lInitAns|
|000005e0| 69 53 74 72 69 6e 67 00 | f9 03 52 74 6c 46 72 65 |iString.|..RtlFre|
|000005f0| 65 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |eUnicode|String..|
|00000600| 6e 01 49 6f 47 65 74 4c | 6f 77 65 72 44 65 76 69 |n.IoGetL|owerDevi|
|00000610| 63 65 4f 62 6a 65 63 74 | 00 00 5e 01 49 6f 47 65 |ceObject|..^.IoGe|
|00000620| 74 41 74 74 61 63 68 65 | 64 44 65 76 69 63 65 52 |tAttache|dDeviceR|
|00000630| 65 66 65 72 65 6e 63 65 | 00 00 26 01 49 6f 41 74 |eference|..&.IoAt|
|00000640| 74 61 63 68 44 65 76 69 | 63 65 54 6f 44 65 76 69 |tachDevi|ceToDevi|
|00000650| 63 65 53 74 61 63 6b 53 | 61 66 65 00 15 01 49 6e |ceStackS|afe...In|
|00000660| 74 65 72 6c 6f 63 6b 65 | 64 50 75 73 68 45 6e 74 |terlocke|dPushEnt|
|00000670| 72 79 53 4c 69 73 74 00 | 5c 01 49 6f 46 72 65 65 |rySList.|\.IoFree|
|00000680| 57 6f 72 6b 49 74 65 6d | 00 00 42 03 50 73 44 65 |WorkItem|..B.PsDe|
|00000690| 72 65 66 65 72 65 6e 63 | 65 49 6d 70 65 72 73 6f |referenc|eImperso|
|000006a0| 6e 61 74 69 6f 6e 54 6f | 6b 65 6e 00 43 03 50 73 |nationTo|ken.C.Ps|
|000006b0| 44 65 72 65 66 65 72 65 | 6e 63 65 50 72 69 6d 61 |Derefere|ncePrima|
|000006c0| 72 79 54 6f 6b 65 6e 00 | d2 04 53 65 54 6f 6b 65 |ryToken.|..SeToke|
|000006d0| 6e 54 79 70 65 00 db 01 | 49 6f 66 43 6f 6d 70 6c |nType...|IofCompl|
|000006e0| 65 74 65 52 65 71 75 65 | 73 74 00 00 7f 03 50 73 |eteReque|st....Ps|
|000006f0| 52 65 76 65 72 74 54 6f | 53 65 6c 66 00 00 3b 01 |RevertTo|Self..;.|
|00000700| 49 6f 43 72 65 61 74 65 | 46 69 6c 65 00 00 b9 04 |IoCreate|File....|
|00000710| 53 65 49 6d 70 65 72 73 | 6f 6e 61 74 65 43 6c 69 |SeImpers|onateCli|
|00000720| 65 6e 74 00 89 01 49 6f | 51 75 65 75 65 57 6f 72 |ent...Io|QueueWor|
|00000730| 6b 49 74 65 6d 00 20 01 | 49 6f 41 6c 6c 6f 63 61 |kItem. .|IoAlloca|
|00000740| 74 65 57 6f 72 6b 49 74 | 65 6d 00 00 9b 02 4d 6d |teWorkIt|em....Mm|
|00000750| 49 73 41 64 64 72 65 73 | 73 56 61 6c 69 64 00 00 |IsAddres|sValid..|
|00000760| da 01 49 6f 66 43 61 6c | 6c 44 72 69 76 65 72 00 |..IofCal|lDriver.|
|00000770| 14 01 49 6e 74 65 72 6c | 6f 63 6b 65 64 50 6f 70 |..Interl|ockedPop|
|00000780| 45 6e 74 72 79 53 4c 69 | 73 74 00 00 4d 02 4b 65 |EntrySLi|st..M.Ke|
|00000790| 53 65 74 45 76 65 6e 74 | 00 00 2a 02 4b 65 51 75 |SetEvent|..*.KeQu|
|000007a0| 65 72 79 53 79 73 74 65 | 6d 54 69 6d 65 00 b1 04 |erySyste|mTime...|
|000007b0| 53 65 43 72 65 61 74 65 | 43 6c 69 65 6e 74 53 65 |SeCreate|ClientSe|
|000007c0| 63 75 72 69 74 79 00 00 | 48 03 50 73 47 65 74 43 |curity..|H.PsGetC|
|000007d0| 75 72 72 65 6e 74 50 72 | 6f 63 65 73 73 49 64 00 |urrentPr|ocessId.|
|000007e0| 4b 03 50 73 47 65 74 43 | 75 72 72 65 6e 74 54 68 |K.PsGetC|urrentTh|
|000007f0| 72 65 61 64 49 64 00 00 | bb 03 52 74 6c 43 6f 70 |readId..|..RtlCop|
|00000800| 79 55 6e 69 63 6f 64 65 | 53 74 72 69 6e 67 00 00 |yUnicode|String..|
|00000810| cf 01 49 6f 57 4d 49 52 | 65 67 69 73 74 72 61 74 |..IoWMIR|egistrat|
|00000820| 69 6f 6e 43 6f 6e 74 72 | 6f 6c 00 00 a2 05 73 77 |ionContr|ol....sw|
|00000830| 70 72 69 6e 74 66 00 00 | c6 00 46 73 52 74 6c 49 |printf..|..FsRtlI|
|00000840| 73 4e 61 6d 65 49 6e 45 | 78 70 72 65 73 73 69 6f |sNameInE|xpressio|
|00000850| 6e 00 f1 01 4b 65 43 6c | 65 61 72 45 76 65 6e 74 |n...KeCl|earEvent|
|00000860| 00 00 62 02 4b 65 57 61 | 69 74 46 6f 72 4d 75 6c |..b.KeWa|itForMul|
|00000870| 74 69 70 6c 65 4f 62 6a | 65 63 74 73 00 00 74 01 |tipleObj|ects..t.|
|00000880| 49 6f 47 65 74 54 6f 70 | 4c 65 76 65 6c 49 72 70 |IoGetTop|LevelIrp|
|00000890| 00 00 5b 05 5a 77 57 61 | 69 74 46 6f 72 53 69 6e |..[.ZwWa|itForSin|
|000008a0| 67 6c 65 4f 62 6a 65 63 | 74 00 48 05 5a 77 53 65 |gleObjec|t.H.ZwSe|
|000008b0| 74 45 76 65 6e 74 00 00 | fc 04 5a 77 43 72 65 61 |tEvent..|..ZwCrea|
|000008c0| 74 65 53 65 63 74 69 6f | 6e 00 2e 05 5a 77 51 75 |teSectio|n...ZwQu|
|000008d0| 65 72 79 49 6e 66 6f 72 | 6d 61 74 69 6f 6e 46 69 |eryInfor|mationFi|
|000008e0| 6c 65 00 00 3c 01 49 6f | 43 72 65 61 74 65 46 69 |le..<.Io|CreateFi|
|000008f0| 6c 65 53 70 65 63 69 66 | 79 44 65 76 69 63 65 4f |leSpecif|yDeviceO|
|00000900| 62 6a 65 63 74 48 69 6e | 74 00 91 05 6d 65 6d 6d |bjectHin|t...memm|
|00000910| 6f 76 65 00 06 05 5a 77 | 44 75 70 6c 69 63 61 74 |ove...Zw|Duplicat|
|00000920| 65 54 6f 6b 65 6e 00 00 | 21 05 5a 77 4f 70 65 6e |eToken..|!.ZwOpen|
|00000930| 54 68 72 65 61 64 54 6f | 6b 65 6e 00 5e 02 4b 65 |ThreadTo|ken.^.Ke|
|00000940| 55 6e 73 74 61 63 6b 44 | 65 74 61 63 68 50 72 6f |UnstackD|etachPro|
|00000950| 63 65 73 73 00 00 5a 02 | 4b 65 53 74 61 63 6b 41 |cess..Z.|KeStackA|
|00000960| 74 74 61 63 68 50 72 6f | 63 65 73 73 00 00 5a 01 |ttachPro|cess..Z.|
|00000970| 49 6f 46 72 65 65 49 72 | 70 00 27 01 49 6f 42 75 |IoFreeIr|p.'.IoBu|
|00000980| 69 6c 64 41 73 79 6e 63 | 68 72 6f 6e 6f 75 73 46 |ildAsync|hronousF|
|00000990| 73 64 52 65 71 75 65 73 | 74 00 a0 03 52 74 6c 41 |sdReques|t...RtlA|
|000009a0| 70 70 65 6e 64 55 6e 69 | 63 6f 64 65 53 74 72 69 |ppendUni|codeStri|
|000009b0| 6e 67 54 6f 53 74 72 69 | 6e 67 00 00 2e 02 4b 65 |ngToStri|ng....Ke|
|000009c0| 52 65 61 64 53 74 61 74 | 65 45 76 65 6e 74 00 00 |ReadStat|eEvent..|
|000009d0| b2 01 49 6f 53 65 74 54 | 68 72 65 61 64 48 61 72 |..IoSetT|hreadHar|
|000009e0| 64 45 72 72 6f 72 4d 6f | 64 65 00 00 52 02 4b 65 |dErrorMo|de..R.Ke|
|000009f0| 53 65 74 50 72 69 6f 72 | 69 74 79 54 68 72 65 61 |SetPrior|ityThrea|
|00000a00| 64 00 a1 03 52 74 6c 41 | 70 70 65 6e 64 55 6e 69 |d...RtlA|ppendUni|
|00000a10| 63 6f 64 65 54 6f 53 74 | 72 69 6e 67 00 00 72 05 |codeToSt|ring..r.|
|00000a20| 5f 6c 6f 63 61 6c 5f 75 | 6e 77 69 6e 64 32 00 00 |_local_u|nwind2..|
|00000a30| aa 05 77 63 73 63 61 74 | 00 00 ad 05 77 63 73 63 |..wcscat|....wcsc|
|00000a40| 70 79 00 00 59 05 5a 77 | 55 6e 6d 61 70 56 69 65 |py..Y.Zw|UnmapVie|
|00000a50| 77 4f 66 53 65 63 74 69 | 6f 6e 00 00 14 05 5a 77 |wOfSecti|on....Zw|
|00000a60| 4d 61 70 56 69 65 77 4f | 66 53 65 63 74 69 6f 6e |MapViewO|fSection|
|00000a70| 00 00 f8 04 5a 77 43 72 | 65 61 74 65 45 76 65 6e |....ZwCr|eateEven|
|00000a80| 74 00 7a 00 45 78 52 65 | 6c 65 61 73 65 52 65 73 |t.z.ExRe|leaseRes|
|00000a90| 6f 75 72 63 65 4c 69 74 | 65 00 b1 03 52 74 6c 43 |ourceLit|e...RtlC|
|00000aa0| 6f 6d 70 61 72 65 55 6e | 69 63 6f 64 65 53 74 72 |ompareUn|icodeStr|
|00000ab0| 69 6e 67 00 38 00 45 78 | 41 63 71 75 69 72 65 52 |ing.8.Ex|AcquireR|
|00000ac0| 65 73 6f 75 72 63 65 53 | 68 61 72 65 64 4c 69 74 |esourceS|haredLit|
|00000ad0| 65 00 a1 05 73 74 72 73 | 74 72 00 00 96 04 52 74 |e...strs|tr....Rt|
|00000ae0| 6c 55 70 70 65 72 53 74 | 72 69 6e 67 00 00 9f 05 |lUpperSt|ring....|
|00000af0| 73 74 72 72 63 68 72 00 | 0b 05 5a 77 46 6c 75 73 |strrchr.|..ZwFlus|
|00000b00| 68 4b 65 79 00 00 52 05 | 5a 77 53 65 74 56 61 6c |hKey..R.|ZwSetVal|
|00000b10| 75 65 4b 65 79 00 1a 05 | 5a 77 4f 70 65 6e 4b 65 |ueKey...|ZwOpenKe|
|00000b20| 79 00 3a 05 5a 77 51 75 | 65 72 79 56 61 6c 75 65 |y.:.ZwQu|eryValue|
|00000b30| 4b 65 79 00 8e 04 52 74 | 6c 55 70 63 61 73 65 55 |Key...Rt|lUpcaseU|
|00000b40| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 00 00 d5 01 |nicodeSt|ring....|
|00000b50| 49 6f 57 72 69 74 65 45 | 72 72 6f 72 4c 6f 67 45 |IoWriteE|rrorLogE|
|00000b60| 6e 74 72 79 00 00 1d 01 | 49 6f 41 6c 6c 6f 63 61 |ntry....|IoAlloca|
|00000b70| 74 65 45 72 72 6f 72 4c | 6f 67 45 6e 74 72 79 00 |teErrorL|ogEntry.|
|00000b80| 6e 74 6f 73 6b 72 6e 6c | 2e 65 78 65 00 00 6e 05 |ntoskrnl|.exe..n.|
|00000b90| 5f 65 78 63 65 70 74 5f | 68 61 6e 64 6c 65 72 33 |_except_|handler3|
|00000ba0| 00 00 4f 00 4b 66 52 65 | 6c 65 61 73 65 53 70 69 |..O.KfRe|leaseSpi|
|00000bb0| 6e 4c 6f 63 6b 00 4c 00 | 4b 66 41 63 71 75 69 72 |nLock.L.|KfAcquir|
|00000bc0| 65 53 70 69 6e 4c 6f 63 | 6b 00 40 00 4b 65 47 65 |eSpinLoc|k.@.KeGe|
|00000bd0| 74 43 75 72 72 65 6e 74 | 49 72 71 6c 00 00 48 41 |tCurrent|Irql..HA|
|00000be0| 4c 2e 64 6c 6c 00 02 00 | 57 6d 69 53 79 73 74 65 |L.dll...|WmiSyste|
|00000bf0| 6d 43 6f 6e 74 72 6f 6c | 00 00 00 00 57 6d 69 43 |mControl|....WmiC|
|00000c00| 6f 6d 70 6c 65 74 65 52 | 65 71 75 65 73 74 00 00 |ompleteR|equest..|
|00000c10| 57 4d 49 4c 49 42 2e 53 | 59 53 00 00 00 00 00 00 |WMILIB.S|YS......|
|00000c20| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c30| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c40| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c50| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c60| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
|00000c70| 00 00 00 00 00 00 00 00 | 00 00 00 00 00 00 00 00 |........|........|
+--------+-------------------------+-------------------------+--------+--------+