/ Internet Magazine 2003 October / INTERNET108.ISO / pc / software / windows / utils / antivir / avwinsfx.exe / disk_1 / AVGNTDD.SYS / COFF_SYMBOLS

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00000010| 03 00 40 63 6f 6d 70 2e | 69 64 00 00 00 00 ff ff |..@comp.|id......|
|00000020| 00 00 03 00 00 00 00 00 | 06 11 00 00 7c 46 00 00 |........|....|F..|
|00000030| 02 00 00 00 03 00 00 00 | 00 00 1d 11 00 00 78 3e |........|......x>|
|00000040| 00 00 02 00 00 00 03 00 | 00 00 00 00 2c 11 00 00 |........|....,...|
|00000050| 7c 3e 00 00 02 00 00 00 | 03 00 00 00 00 00 37 11 ||>......|......7.|
|00000060| 00 00 58 3e 00 00 02 00 | 00 00 03 00 40 63 6f 6d |..X>....|....@com|
|00000070| 70 2e 69 64 00 00 00 00 | ff ff 00 00 03 00 00 00 |p.id....|........|
|00000080| 00 00 47 11 00 00 54 3e | 00 00 02 00 00 00 03 00 |..G...T>|........|
|00000090| 00 00 00 00 5b 11 00 00 | 50 3e 00 00 02 00 00 00 |....[...|P>......|
|000000a0| 03 00 00 00 00 00 6f 11 | 00 00 28 3e 00 00 02 00 |......o.|..(>....|
|000000b0| 00 00 03 00 24 53 47 36 | 34 39 39 00 32 2c 00 00 |....$SG6|499.2,..|
|000000c0| 01 00 00 00 03 00 00 00 | 00 00 7f 11 00 00 d8 3d |........|.......=|
|000000d0| 00 00 02 00 00 00 03 00 | 00 00 00 00 90 11 00 00 |........|........|
|000000e0| 30 3e 00 00 02 00 00 00 | 03 00 40 63 6f 6d 70 2e |0>......|..@comp.|
|000000f0| 69 64 00 00 00 00 ff ff | 00 00 03 00 00 00 00 00 |id......|........|
|00000100| 9d 11 00 00 d4 3d 00 00 | 02 00 00 00 03 00 00 00 |.....=..|........|
|00000110| 00 00 b1 11 00 00 d0 3d | 00 00 02 00 00 00 03 00 |.......=|........|
|00000120| 5f 66 6e 43 61 63 68 65 | b0 35 00 00 02 00 00 00 |_fnCache|.5......|
|00000130| 03 00 00 00 00 00 be 11 | 00 00 b0 3d 00 00 02 00 |........|...=....|
|00000140| 00 00 03 00 40 63 6f 6d | 70 2e 69 64 00 00 00 00 |....@com|p.id....|
|00000150| ff ff 00 00 03 00 00 00 | 00 00 cc 11 00 00 a8 35 |........|.......5|
|00000160| 00 00 02 00 00 00 03 00 | 00 00 00 00 e2 11 00 00 |........|........|
|00000170| a4 35 00 00 02 00 00 00 | 03 00 00 00 00 00 ef 11 |.5......|........|
|00000180| 00 00 a0 35 00 00 02 00 | 00 00 03 00 00 00 00 00 |...5....|........|
|00000190| fd 11 00 00 80 35 00 00 | 02 00 00 00 03 00 24 53 |.....5..|......$S|
|000001a0| 47 36 35 34 30 00 ee 27 | 00 00 01 00 00 00 03 00 |G6540..'|........|
|000001b0| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|000001c0| 03 00 00 00 00 00 0c 12 | 00 00 7c 35 00 00 02 00 |........|..|5....|
|000001d0| 00 00 03 00 00 00 00 00 | 21 12 00 00 78 35 00 00 |........|!...x5..|
|000001e0| 02 00 00 00 03 00 00 00 | 00 00 33 12 00 00 58 35 |........|..3...X5|
|000001f0| 00 00 02 00 00 00 03 00 | 40 63 6f 6d 70 2e 69 64 |........|@comp.id|
|00000200| 00 00 00 00 ff ff 00 00 | 03 00 00 00 00 00 41 12 |........|......A.|
|00000210| 00 00 54 35 00 00 02 00 | 00 00 03 00 00 00 00 00 |..T5....|........|
|00000220| 4b 12 00 00 50 35 00 00 | 02 00 00 00 03 00 24 53 |K...P5..|......$S|
|00000230| 47 36 35 30 31 00 32 16 | 00 00 01 00 00 00 03 00 |G6501.2.|........|
|00000240| 24 53 47 36 34 39 38 00 | 2a 16 00 00 01 00 00 00 |$SG6498.|*.......|
|00000250| 03 00 24 53 47 36 34 39 | 35 00 1e 16 00 00 01 00 |..$SG649|5.......|
|00000260| 00 00 03 00 24 53 47 36 | 35 31 36 00 ca 16 00 00 |....$SG6|516.....|
|00000270| 01 00 00 00 03 00 24 53 | 47 36 36 35 31 00 c4 19 |......$S|G6651...|
|00000280| 00 00 01 00 00 00 03 00 | 24 53 47 36 36 35 30 00 |........|$SG6650.|
|00000290| a8 19 00 00 01 00 00 00 | 03 00 24 53 47 36 36 34 |........|..$SG664|
|000002a0| 39 00 8c 19 00 00 01 00 | 00 00 03 00 24 53 47 36 |9.......|....$SG6|
|000002b0| 36 34 38 00 78 19 00 00 | 01 00 00 00 03 00 24 53 |648.x...|......$S|
|000002c0| 47 36 36 34 37 00 5c 19 | 00 00 01 00 00 00 03 00 |G6647.\.|........|
|000002d0| 24 53 47 36 36 33 34 00 | 4c 19 00 00 01 00 00 00 |$SG6634.|L.......|
|000002e0| 03 00 24 53 47 36 37 35 | 38 00 96 1e 00 00 01 00 |..$SG675|8.......|
|000002f0| 00 00 03 00 24 53 47 36 | 37 35 37 00 7a 1e 00 00 |....$SG6|757.z...|
|00000300| 01 00 00 00 03 00 24 53 | 47 36 37 35 36 00 5e 1e |......$S|G6756.^.|
|00000310| 00 00 01 00 00 00 03 00 | 24 53 47 36 37 35 35 00 |........|$SG6755.|
|00000320| 4a 1e 00 00 01 00 00 00 | 03 00 24 53 47 36 37 35 |J.......|..$SG675|
|00000330| 34 00 2e 1e 00 00 01 00 | 00 00 03 00 24 53 47 36 |4.......|....$SG6|
|00000340| 37 34 30 00 1e 1e 00 00 | 01 00 00 00 03 00 24 53 |740.....|......$S|
|00000350| 47 36 38 33 30 00 6c 23 | 00 00 01 00 00 00 03 00 |G6830.l#|........|
|00000360| 24 53 47 36 38 38 34 00 | 7c 25 00 00 01 00 00 00 |$SG6884.||%......|
|00000370| 03 00 40 63 6f 6d 70 2e | 69 64 00 00 00 00 ff ff |..@comp.|id......|
|00000380| 00 00 03 00 40 63 6f 6d | 70 2e 69 64 00 00 00 00 |....@com|p.id....|
|00000390| ff ff 00 00 03 00 00 00 | 00 00 57 12 00 00 40 35 |........|..W...@5|
|000003a0| 00 00 02 00 00 00 03 00 | 00 00 00 00 6a 12 00 00 |........|....j...|
|000003b0| 3c 35 00 00 02 00 00 00 | 03 00 24 53 47 36 35 35 |<5......|..$SG655|
|000003c0| 37 00 7a 11 00 00 01 00 | 00 00 03 00 24 53 47 36 |7.z.....|....$SG6|
|000003d0| 36 33 37 00 62 13 00 00 | 01 00 00 00 03 00 24 54 |637.b...|......$T|
|000003e0| 36 37 35 39 00 00 e8 03 | 00 00 01 00 00 00 03 00 |6759....|........|
|000003f0| 24 53 47 36 36 35 36 00 | 3a 14 00 00 01 00 00 00 |$SG6656.|:.......|
|00000400| 03 00 24 53 47 36 36 35 | 34 00 2e 14 00 00 01 00 |..$SG665|4.......|
|00000410| 00 00 03 00 24 53 47 36 | 36 35 31 00 26 14 00 00 |....$SG6|651.&...|
|00000420| 01 00 00 00 03 00 24 54 | 36 37 37 32 00 00 f8 03 |......$T|6772....|
|00000430| 00 00 01 00 00 00 03 00 | 24 53 47 36 36 37 31 00 |........|$SG6671.|
|00000440| 14 15 00 00 01 00 00 00 | 03 00 24 54 36 37 38 35 |........|..$T6785|
|00000450| 00 00 08 04 00 00 01 00 | 00 00 03 00 40 63 6f 6d |........|....@com|
|00000460| 70 2e 69 64 00 00 00 00 | ff ff 00 00 03 00 00 00 |p.id....|........|
|00000470| 00 00 76 12 00 00 38 35 | 00 00 02 00 00 00 03 00 |..v...85|........|
|00000480| 24 53 47 36 35 39 32 00 | 80 0b 00 00 01 00 00 00 |$SG6592.|........|
|00000490| 03 00 24 53 47 36 35 36 | 39 00 30 0b 00 00 01 00 |..$SG656|9.0.....|
|000004a0| 00 00 03 00 24 53 47 36 | 35 37 31 00 58 0b 00 00 |....$SG6|571.X...|
|000004b0| 01 00 00 00 03 00 40 63 | 6f 6d 70 2e 69 64 00 00 |......@c|omp.id..|
|000004c0| 00 00 ff ff 00 00 03 00 | 00 00 00 00 82 12 00 00 |........|........|
|000004d0| 0c 35 00 00 02 00 00 00 | 03 00 00 00 00 00 91 12 |.5......|........|
|000004e0| 00 00 08 35 00 00 02 00 | 00 00 03 00 00 00 00 00 |...5....|........|
|000004f0| 9c 12 00 00 04 35 00 00 | 02 00 00 00 03 00 00 00 |.....5..|........|
|00000500| 00 00 ac 12 00 00 00 35 | 00 00 02 00 00 00 03 00 |.......5|........|
|00000510| 00 00 00 00 ba 12 00 00 | 34 35 00 00 02 00 00 00 |........|45......|
|00000520| 03 00 00 00 00 00 c5 12 | 00 00 30 35 00 00 02 00 |........|..05....|
|00000530| 00 00 03 00 40 63 6f 6d | 70 2e 69 64 00 00 00 00 |....@com|p.id....|
|00000540| ff ff 00 00 03 00 24 53 | 47 31 30 38 39 35 40 04 |......$S|G10895@.|
|00000550| 00 00 01 00 00 00 03 00 | 24 53 47 31 30 38 39 32 |........|$SG10892|
|00000560| 20 04 00 00 01 00 00 00 | 03 00 00 00 00 00 dd 12 | .......|........|
|00000570| 00 00 80 05 00 00 01 00 | 20 00 03 00 00 00 00 00 |........| .......|
|00000580| ed 12 00 00 90 05 00 00 | 01 00 20 00 03 00 00 00 |........|.. .....|
|00000590| 00 00 fd 12 00 00 92 06 | 00 00 01 00 20 00 03 00 |........|.... ...|
|000005a0| 24 53 47 31 30 38 38 30 | 6a 06 00 00 01 00 00 00 |$SG10880|j.......|
|000005b0| 03 00 24 53 47 31 30 39 | 31 31 9e 07 00 00 01 00 |..$SG109|11......|
|000005c0| 00 00 03 00 24 53 47 31 | 30 39 30 39 7a 07 00 00 |....$SG1|0909z...|
|000005d0| 01 00 00 00 03 00 24 53 | 47 31 30 39 30 38 56 07 |......$S|G10908V.|
|000005e0| 00 00 01 00 00 00 03 00 | 24 53 47 31 30 39 31 35 |........|$SG10915|
|000005f0| be 07 00 00 01 00 00 00 | 03 00 24 53 47 31 30 39 |........|..$SG109|
|00000600| 30 37 2e 07 00 00 01 00 | 00 00 03 00 40 63 6f 6d |07......|....@com|
|00000610| 70 2e 69 64 00 00 00 00 | ff ff 00 00 03 00 24 52 |p.id....|......$R|
|00000620| 30 30 30 30 30 30 c0 61 | 00 00 04 00 00 00 03 00 |000000.a|........|
|00000630| 24 52 30 30 30 33 39 30 | 50 65 00 00 04 00 00 00 |$R000390|Pe......|
|00000640| 03 00 2e 74 65 78 74 00 | 00 00 00 33 00 00 01 00 |...text.|...3....|
|00000650| 00 00 03 01 34 00 00 00 | 00 00 13 00 00 00 00 00 |....4...|........|
|00000660| 00 00 00 00 00 00 68 61 | 72 64 00 00 00 00 19 33 |......ha|rd.....3|
|00000670| 00 00 01 00 00 00 03 00 | 2e 69 64 61 74 61 24 36 |........|.idata$6|
|00000680| 92 60 00 00 03 00 00 00 | 03 00 2e 74 65 78 74 00 |.`......|...text.|
|00000690| 00 00 18 34 00 00 01 00 | 00 00 03 01 d1 00 00 00 |...4....|........|
|000006a0| 04 00 47 00 00 00 00 00 | 00 00 00 00 00 00 24 24 |..G.....|......$$|
|000006b0| 24 30 30 30 30 31 20 34 | 00 00 01 00 20 00 03 01 |$00001 4|.... ...|
|000006c0| 0e 00 00 00 00 00 00 00 | ae 01 00 00 13 00 00 00 |........|........|
|000006d0| 00 00 24 24 24 30 30 30 | 30 34 e9 34 00 00 01 00 |..$$$000|04.4....|
|000006e0| 20 00 03 01 23 00 00 00 | 00 00 00 00 52 03 00 00 | ...#...|....R...|
|000006f0| 00 00 00 00 00 00 00 00 | 00 00 0b 13 00 00 98 34 |........|.......4|
|00000700| 00 00 01 00 00 00 03 00 | 00 00 00 00 18 13 00 00 |........|........|
|00000710| a3 34 00 00 01 00 00 00 | 03 00 00 00 00 00 24 13 |.4......|......$.|
|00000720| 00 00 c6 34 00 00 01 00 | 00 00 03 00 5f 6c 68 5f |...4....|...._lh_|
|00000730| 74 6f 70 00 4f 34 00 00 | 01 00 00 00 03 00 00 00 |top.O4..|........|
|00000740| 00 00 2f 13 00 00 aa 34 | 00 00 01 00 00 00 03 00 |../....4|........|
|00000750| 00 00 00 00 39 13 00 00 | b1 34 00 00 01 00 00 00 |....9...|.4......|
|00000760| 03 00 2e 74 65 78 74 00 | 00 00 58 33 00 00 01 00 |...text.|..X3....|
|00000770| 00 00 03 01 bf 00 00 00 | 04 00 3d 00 00 00 00 00 |........|..=.....|
|00000780| 00 00 00 00 00 00 00 00 | 00 00 47 13 00 00 70 33 |........|..G...p3|
|00000790| 00 00 01 00 00 00 03 00 | 24 24 24 30 30 30 30 31 |........|$$$00001|
|000007a0| 58 33 00 00 01 00 20 00 | 03 01 0f 00 00 00 00 00 |X3.... .|........|
|000007b0| 00 00 9c 01 00 00 14 00 | 00 00 00 00 24 24 24 30 |........|....$$$0|
|000007c0| 30 30 30 33 78 33 00 00 | 01 00 20 00 03 01 1d 00 |0003x3..|.. .....|
|000007d0| 00 00 00 00 00 00 cc 01 | 00 00 22 00 00 00 00 00 |........|..".....|
|000007e0| 00 00 00 00 52 13 00 00 | 78 33 00 00 01 00 20 00 |....R...|x3.... .|
|000007f0| 03 01 24 00 00 00 22 00 | 00 00 d2 01 00 00 29 00 |..$...".|......).|
|00000800| 00 00 00 00 24 24 24 30 | 30 30 30 35 9a 33 00 00 |....$$$0|0005.3..|
|00000810| 01 00 20 00 03 01 2b 00 | 00 00 00 00 00 00 08 02 |.. ...+.|........|
|00000820| 00 00 30 00 00 00 00 00 | 24 24 24 30 30 30 30 37 |..0.....|$$$00007|
|00000830| f4 33 00 00 01 00 20 00 | 03 01 39 00 00 00 00 00 |.3.... .|..9.....|
|00000840| 00 00 c2 02 00 00 3e 00 | 00 00 00 00 24 24 24 30 |......>.|....$$$0|
|00000850| 30 30 30 39 17 34 00 00 | 01 00 20 00 03 01 47 00 |0009.4..|.. ...G.|
|00000860| 00 00 00 00 00 00 04 03 | 00 00 00 00 00 00 00 00 |........|........|
|00000870| 5f 6c 75 5f 64 6f 6e 65 | e6 33 00 00 01 00 00 00 |_lu_done|.3......|
|00000880| 03 00 00 00 00 00 63 13 | 00 00 99 33 00 00 01 00 |......c.|...3....|
|00000890| 00 00 03 00 00 00 00 00 | 6e 13 00 00 e4 33 00 00 |........|n....3..|
|000008a0| 01 00 00 00 03 00 5f 6c | 75 5f 74 6f 70 00 b7 33 |......_l|u_top..3|
|000008b0| 00 00 01 00 00 00 03 00 | 5f 61 74 5f 64 6f 6e 65 |........|_at_done|
|000008c0| 16 34 00 00 01 00 00 00 | 03 00 2e 69 64 61 74 61 |.4......|...idata|
|000008d0| 24 36 14 61 00 00 03 00 | 00 00 03 00 68 65 61 64 |$6.a....|....head|
|000008e0| 65 72 00 00 00 00 00 00 | fe ff 00 00 02 00 00 00 |er......|........|
|000008f0| 00 00 a6 07 00 00 00 00 | 00 00 ff ff 00 00 02 00 |........|........|
|00000900| 00 00 00 00 ae 0a 00 00 | a0 02 00 00 01 00 00 00 |........|........|
|00000910| 02 00 00 00 00 00 92 0a | 00 00 a4 02 00 00 01 00 |........|........|
|00000920| 00 00 02 00 00 00 00 00 | dc 03 00 00 a8 02 00 00 |........|........|
|00000930| 01 00 00 00 02 00 00 00 | 00 00 7a 03 00 00 ac 02 |........|..z.....|
|00000940| 00 00 01 00 00 00 02 00 | 00 00 00 00 d7 10 00 00 |........|........|
|00000950| b0 02 00 00 01 00 00 00 | 02 00 00 00 00 00 f1 10 |........|........|
|00000960| 00 00 b4 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000970| d8 01 00 00 b8 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000980| 00 00 f0 01 00 00 bc 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000990| 00 00 00 00 37 02 00 00 | c0 02 00 00 01 00 00 00 |....7...|........|
|000009a0| 02 00 00 00 00 00 05 03 | 00 00 c4 02 00 00 01 00 |........|........|
|000009b0| 00 00 02 00 00 00 00 00 | 28 03 00 00 c8 02 00 00 |........|(.......|
|000009c0| 01 00 00 00 02 00 00 00 | 00 00 de 0c 00 00 cc 02 |........|........|
|000009d0| 00 00 01 00 00 00 02 00 | 00 00 00 00 3e 03 00 00 |........|....>...|
|000009e0| cc 02 00 00 01 00 00 00 | 02 00 00 00 00 00 5e 03 |........|......^.|
|000009f0| 00 00 d0 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000a00| f7 03 00 00 d4 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000a10| 00 00 26 0d 00 00 d8 02 | 00 00 01 00 00 00 02 00 |..&.....|........|
|00000a20| 00 00 00 00 26 04 00 00 | d8 02 00 00 01 00 00 00 |....&...|........|
|00000a30| 02 00 00 00 00 00 3b 0d | 00 00 dc 02 00 00 01 00 |......;.|........|
|00000a40| 00 00 02 00 00 00 00 00 | 60 0d 00 00 e0 02 00 00 |........|`.......|
|00000a50| 01 00 00 00 02 00 00 00 | 00 00 a7 04 00 00 e4 02 |........|........|
|00000a60| 00 00 01 00 00 00 02 00 | 00 00 00 00 bd 04 00 00 |........|........|
|00000a70| e8 02 00 00 01 00 00 00 | 02 00 00 00 00 00 ce 04 |........|........|
|00000a80| 00 00 ec 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000a90| e5 04 00 00 f0 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000aa0| 00 00 0e 05 00 00 f4 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000ab0| 00 00 00 00 cd 0d 00 00 | f8 02 00 00 01 00 00 00 |........|........|
|00000ac0| 02 00 00 00 00 00 5d 05 | 00 00 fc 02 00 00 01 00 |......].|........|
|00000ad0| 00 00 02 00 00 00 00 00 | 94 05 00 00 00 03 00 00 |........|........|
|00000ae0| 01 00 00 00 02 00 00 00 | 00 00 ac 05 00 00 04 03 |........|........|
|00000af0| 00 00 01 00 00 00 02 00 | 00 00 00 00 26 0e 00 00 |........|....&...|
|00000b00| 08 03 00 00 01 00 00 00 | 02 00 00 00 00 00 44 0e |........|......D.|
|00000b10| 00 00 0c 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000b20| df 06 00 00 10 03 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000b30| 00 00 4d 0c 00 00 14 03 | 00 00 01 00 00 00 02 00 |..M.....|........|
|00000b40| 00 00 00 00 0c 07 00 00 | 18 03 00 00 01 00 00 00 |........|........|
|00000b50| 02 00 00 00 00 00 2d 07 | 00 00 1c 03 00 00 01 00 |......-.|........|
|00000b60| 00 00 02 00 00 00 00 00 | 4e 07 00 00 20 03 00 00 |........|N... ...|
|00000b70| 01 00 00 00 02 00 00 00 | 00 00 5c 07 00 00 24 03 |........|..\...$.|
|00000b80| 00 00 01 00 00 00 02 00 | 00 00 00 00 6b 07 00 00 |........|....k...|
|00000b90| 28 03 00 00 01 00 00 00 | 02 00 00 00 00 00 7a 07 |(.......|......z.|
|00000ba0| 00 00 2c 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..,.....|........|
|00000bb0| 89 07 00 00 30 03 00 00 | 01 00 00 00 02 00 00 00 |....0...|........|
|00000bc0| 00 00 60 08 00 00 34 03 | 00 00 01 00 00 00 02 00 |..`...4.|........|
|00000bd0| 00 00 00 00 6f 08 00 00 | 38 03 00 00 01 00 00 00 |....o...|8.......|
|00000be0| 02 00 00 00 00 00 7d 08 | 00 00 3c 03 00 00 01 00 |......}.|..<.....|
|00000bf0| 00 00 02 00 00 00 00 00 | a0 08 00 00 40 03 00 00 |........|....@...|
|00000c00| 01 00 00 00 02 00 00 00 | 00 00 c2 08 00 00 44 03 |........|......D.|
|00000c10| 00 00 01 00 00 00 02 00 | 00 00 00 00 53 09 00 00 |........|....S...|
|00000c20| 48 03 00 00 01 00 00 00 | 02 00 00 00 00 00 62 09 |H.......|......b.|
|00000c30| 00 00 4c 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..L.....|........|
|00000c40| 89 09 00 00 50 03 00 00 | 01 00 00 00 02 00 00 00 |....P...|........|
|00000c50| 00 00 d2 09 00 00 54 03 | 00 00 01 00 00 00 02 00 |......T.|........|
|00000c60| 00 00 00 00 42 0a 00 00 | 58 03 00 00 01 00 00 00 |....B...|X.......|
|00000c70| 02 00 00 00 00 00 56 0a | 00 00 5c 03 00 00 01 00 |......V.|..\.....|
|00000c80| 00 00 02 00 00 00 00 00 | 76 0a 00 00 60 03 00 00 |........|v...`...|
|00000c90| 01 00 00 00 02 00 00 00 | 00 00 3e 0b 00 00 64 03 |........|..>...d.|
|00000ca0| 00 00 01 00 00 00 02 00 | 00 00 00 00 61 0b 00 00 |........|....a...|
|00000cb0| 68 03 00 00 01 00 00 00 | 02 00 00 00 00 00 70 0b |h.......|......p.|
|00000cc0| 00 00 6c 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..l.....|........|
|00000cd0| 55 10 00 00 70 03 00 00 | 01 00 00 00 02 00 00 00 |U...p...|........|
|00000ce0| 00 00 57 01 00 00 74 03 | 00 00 01 00 00 00 02 00 |..W...t.|........|
|00000cf0| 00 00 00 00 22 01 00 00 | 78 03 00 00 01 00 00 00 |...."...|x.......|
|00000d00| 02 00 00 00 00 00 04 01 | 00 00 7c 03 00 00 01 00 |........|..|.....|
|00000d10| 00 00 02 00 00 00 00 00 | df 00 00 00 80 03 00 00 |........|........|
|00000d20| 01 00 00 00 02 00 00 00 | 00 00 fd 06 00 00 84 03 |........|........|
|00000d30| 00 00 01 00 00 00 02 00 | 00 00 00 00 c1 00 00 00 |........|........|
|00000d40| 88 03 00 00 01 00 00 00 | 02 00 00 00 00 00 3b 10 |........|......;.|
|00000d50| 00 00 8c 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000d60| 04 00 00 00 68 04 00 00 | 01 00 20 00 02 00 00 00 |....h...|.. .....|
|00000d70| 00 00 13 00 00 00 ce 07 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000d80| 00 00 00 00 a3 02 00 00 | 56 08 00 00 01 00 20 00 |........|V..... .|
|00000d90| 02 00 00 00 00 00 ba 02 | 00 00 8c 08 00 00 01 00 |........|........|
|00000da0| 20 00 02 00 00 00 00 00 | d3 02 00 00 a0 08 00 00 | .......|........|
|00000db0| 01 00 20 00 02 00 00 00 | 00 00 22 02 00 00 c4 08 |.. .....|..".....|
|00000dc0| 00 00 01 00 20 00 02 00 | 00 00 00 00 96 00 00 00 |.... ...|........|
|00000dd0| e2 09 00 00 01 00 20 00 | 02 00 00 00 00 00 30 00 |...... .|......0.|
|00000de0| 00 00 22 0b 00 00 01 00 | 20 00 02 00 00 00 00 00 |..".....| .......|
|00000df0| 4d 01 00 00 c4 0b 00 00 | 01 00 20 00 02 00 00 00 |M.......|.. .....|
|00000e00| 00 00 1f 06 00 00 b0 10 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000e10| 00 00 00 00 cc 05 00 00 | 3a 11 00 00 01 00 20 00 |........|:..... .|
|00000e20| 02 00 00 00 00 00 8b 00 | 00 00 4c 11 00 00 01 00 |........|..L.....|
|00000e30| 20 00 02 00 00 00 00 00 | 72 06 00 00 7e 11 00 00 | .......|r...~...|
|00000e40| 01 00 20 00 02 00 00 00 | 00 00 84 06 00 00 70 12 |.. .....|......p.|
|00000e50| 00 00 01 00 20 00 02 00 | 00 00 00 00 9a 06 00 00 |.... ...|........|
|00000e60| ba 12 00 00 01 00 20 00 | 02 00 00 00 00 00 a7 06 |...... .|........|
|00000e70| 00 00 04 13 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000e80| b6 06 00 00 92 13 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000e90| 00 00 a9 00 00 00 6c 14 | 00 00 01 00 20 00 02 00 |......l.|.... ...|
|00000ea0| 00 00 00 00 c8 06 00 00 | 48 15 00 00 01 00 20 00 |........|H..... .|
|00000eb0| 02 00 00 00 00 00 e9 07 | 00 00 37 16 00 00 01 00 |........|..7.....|
|00000ec0| 20 00 02 00 00 00 00 00 | fb 07 00 00 f8 16 00 00 | .......|........|
|00000ed0| 01 00 20 00 02 00 00 00 | 00 00 13 08 00 00 8a 17 |.. .....|........|
|00000ee0| 00 00 01 00 20 00 02 00 | 00 00 00 00 2f 08 00 00 |.... ...|..../...|
|00000ef0| c2 17 00 00 01 00 20 00 | 02 00 00 00 00 00 3d 08 |...... .|......=.|
|00000f00| 00 00 9c 18 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000f10| 4d 08 00 00 c2 18 00 00 | 01 00 20 00 02 00 00 00 |M.......|.. .....|
|00000f20| 00 00 b6 03 00 00 e0 19 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000f30| 00 00 00 00 ca 03 00 00 | b2 1e 00 00 01 00 20 00 |........|...... .|
|00000f40| 02 00 00 00 00 00 a8 03 | 00 00 79 23 00 00 01 00 |........|..y#....|
|00000f50| 20 00 02 00 00 00 00 00 | 95 03 00 00 02 25 00 00 | .......|.....%..|
|00000f60| 01 00 20 00 02 00 00 00 | 00 00 0e 02 00 00 a6 25 |.. .....|.......%|
|00000f70| 00 00 01 00 20 00 02 00 | 00 00 00 00 36 0a 00 00 |.... ...|....6...|
|00000f80| d6 25 00 00 01 00 20 00 | 02 00 00 00 00 00 6d 00 |.%.... .|......m.|
|00000f90| 00 00 fc 25 00 00 01 00 | 20 00 02 00 00 00 00 00 |...%....| .......|
|00000fa0| c9 01 00 00 5a 26 00 00 | 01 00 20 00 02 00 00 00 |....Z&..|.. .....|
|00000fb0| 00 00 a7 09 00 00 a0 26 | 00 00 01 00 20 00 02 00 |.......&|.... ...|
|00000fc0| 00 00 00 00 d8 08 00 00 | f0 26 00 00 01 00 20 00 |........|.&.... .|
|00000fd0| 02 00 00 00 00 00 c2 09 | 00 00 24 27 00 00 01 00 |........|..$'....|
|00000fe0| 20 00 02 00 00 00 00 00 | 3d 00 00 00 46 27 00 00 | .......|=...F'..|
|00000ff0| 01 00 20 00 02 00 00 00 | 00 00 ee 0a 00 00 ac 27 |.. .....|.......'|
|00001000| 00 00 01 00 20 00 02 00 | 00 00 00 00 01 0b 00 00 |.... ...|........|
|00001010| 08 28 00 00 01 00 20 00 | 02 00 00 00 00 00 b9 01 |.(.... .|........|
|00001020| 00 00 68 28 00 00 01 00 | 20 00 02 00 00 00 00 00 |..h(....| .......|
|00001030| 13 0b 00 00 ae 28 00 00 | 01 00 20 00 02 00 00 00 |.....(..|.. .....|
|00001040| 00 00 2a 0b 00 00 da 28 | 00 00 01 00 20 00 02 00 |..*....(|.... ...|
|00001050| 00 00 00 00 8b 08 00 00 | 20 29 00 00 01 00 20 00 |........| ).... .|
|00001060| 02 00 00 00 00 00 4d 00 | 00 00 7e 29 00 00 01 00 |......M.|..~)....|
|00001070| 20 00 02 00 00 00 00 00 | aa 01 00 00 fe 29 00 00 | .......|.....)..|
|00001080| 01 00 20 00 02 00 00 00 | 00 00 f4 08 00 00 52 2a |.. .....|......R*|
|00001090| 00 00 01 00 20 00 02 00 | 00 00 00 00 1c 0a 00 00 |.... ...|........|
|000010a0| 0a 2b 00 00 01 00 20 00 | 02 00 00 00 00 00 09 0a |.+.... .|........|
|000010b0| 00 00 5c 2b 00 00 01 00 | 20 00 02 00 00 00 00 00 |..\+....| .......|
|000010c0| 7c 00 00 00 70 2c 00 00 | 01 00 20 00 02 00 00 00 ||...p,..|.. .....|
|000010d0| 00 00 8a 01 00 00 54 2d | 00 00 01 00 20 00 02 00 |......T-|.... ...|
|000010e0| 00 00 00 00 2f 09 00 00 | a2 2d 00 00 01 00 20 00 |..../...|.-.... .|
|000010f0| 02 00 00 00 00 00 07 09 | 00 00 06 2e 00 00 01 00 |........|........|
|00001100| 20 00 02 00 00 00 00 00 | 72 05 00 00 38 2e 00 00 | .......|r...8...|
|00001110| 01 00 20 00 02 00 00 00 | 00 00 83 05 00 00 9e 2e |.. .....|........|
|00001120| 00 00 01 00 20 00 02 00 | 00 00 00 00 96 0b 00 00 |.... ...|........|
|00001130| 12 2f 00 00 01 00 20 00 | 02 00 00 00 00 00 5c 00 |./.... .|......\.|
|00001140| 00 00 2c 2f 00 00 01 00 | 20 00 02 00 00 00 00 00 |..,/....| .......|
|00001150| 4b 05 00 00 aa 2f 00 00 | 01 00 20 00 02 00 00 00 |K..../..|.. .....|
|00001160| 00 00 99 01 00 00 fa 2f | 00 00 01 00 20 00 02 00 |......./|.... ...|
|00001170| 00 00 00 00 ab 0b 00 00 | 4e 30 00 00 01 00 20 00 |........|N0.... .|
|00001180| 02 00 00 00 00 00 17 09 | 00 00 96 30 00 00 01 00 |........|...0....|
|00001190| 20 00 02 00 00 00 00 00 | 40 09 00 00 98 31 00 00 | .......|@....1..|
|000011a0| 01 00 20 00 02 00 00 00 | 00 00 f6 09 00 00 36 32 |.. .....|......62|
|000011b0| 00 00 01 00 20 00 02 00 | 5f 5f 61 6c 6c 6d 75 6c |.... ...|__allmul|
|000011c0| 00 33 00 00 01 00 20 00 | 02 00 00 00 00 00 71 01 |.3.... .|......q.|
|000011d0| 00 00 34 33 00 00 01 00 | 20 00 02 00 00 00 00 00 |..43....| .......|
|000011e0| 62 04 00 00 3a 33 00 00 | 01 00 20 00 02 00 00 00 |b...:3..|.. .....|
|000011f0| 00 00 90 04 00 00 40 33 | 00 00 01 00 20 00 02 00 |......@3|.... ...|
|00001200| 00 00 00 00 33 05 00 00 | 46 33 00 00 01 00 20 00 |....3...|F3.... .|
|00001210| 02 00 00 00 00 00 e3 05 | 00 00 4c 33 00 00 01 00 |........|..L3....|
|00001220| 20 00 02 00 00 00 00 00 | fb 05 00 00 52 33 00 00 | .......|....R3..|
|00001230| 01 00 20 00 02 00 00 00 | 00 00 d5 0e 00 00 58 33 |.. .....|......X3|
|00001240| 00 00 01 00 20 00 02 00 | 00 00 00 00 e6 0e 00 00 |.... ...|........|
|00001250| 9a 33 00 00 01 00 20 00 | 02 00 00 00 00 00 f6 0e |.3.... .|........|
|00001260| 00 00 f4 33 00 00 01 00 | 20 00 02 00 00 00 00 00 |...3....| .......|
|00001270| b4 07 00 00 20 34 00 00 | 01 00 20 00 02 00 00 00 |.... 4..|.. .....|
|00001280| 00 00 0d 0f 00 00 ce 34 | 00 00 01 00 20 00 02 00 |.......4|.... ...|
|00001290| 00 00 00 00 c7 0e 00 00 | ea 34 00 00 01 00 20 00 |........|.4.... .|
|000012a0| 02 00 00 00 00 00 ca 0a | 00 00 f0 34 00 00 01 00 |........|...4....|
|000012b0| 20 00 02 00 00 00 00 00 | 8f 02 00 00 10 35 00 00 | .......|.....5..|
|000012c0| 02 00 00 00 02 00 00 00 | 00 00 7c 02 00 00 14 35 |........|..|....5|
|000012d0| 00 00 02 00 00 00 02 00 | 00 00 00 00 69 02 00 00 |........|....i...|
|000012e0| 18 35 00 00 02 00 00 00 | 02 00 00 00 00 00 d8 07 |.5......|........|
|000012f0| 00 00 1c 35 00 00 02 00 | 00 00 02 00 00 00 00 00 |...5....|........|
|00001300| 58 02 00 00 20 35 00 00 | 02 00 00 00 02 00 00 00 |X... 5..|........|
|00001310| 00 00 c6 07 00 00 24 35 | 00 00 02 00 00 00 02 00 |......$5|........|
|00001320| 00 00 00 00 3e 01 00 00 | 44 35 00 00 02 00 00 00 |....>...|D5......|
|00001330| 02 00 00 00 00 00 15 04 | 00 00 48 35 00 00 02 00 |........|..H5....|
|00001340| 00 00 02 00 00 00 00 00 | 25 00 00 00 4c 35 00 00 |........|%...L5..|
|00001350| 02 00 00 00 02 00 00 00 | 00 00 35 04 00 00 80 46 |........|..5....F|
|00001360| 00 00 02 00 00 00 02 00 | 5f 61 76 67 00 00 00 00 |........|_avg....|
|00001370| a0 46 00 00 02 00 00 00 | 02 00 00 00 00 00 f8 00 |.F......|........|
|00001380| 00 00 18 5b 00 00 02 00 | 00 00 02 00 00 00 00 00 |...[....|........|
|00001390| 45 04 00 00 1c 5b 00 00 | 02 00 00 00 02 00 00 00 |E....[..|........|
|000013a0| 00 00 29 05 00 00 20 5b | 00 00 02 00 00 00 02 00 |..)... [|........|
|000013b0| 00 00 00 00 81 04 00 00 | 40 5b 00 00 02 00 00 00 |........|@[......|
|000013c0| 02 00 00 00 00 00 51 04 | 00 00 44 5b 00 00 02 00 |......Q.|..D[....|
|000013d0| 00 00 02 00 00 00 00 00 | db 0b 00 00 60 5b 00 00 |........|....`[..|
|000013e0| 03 00 00 00 02 00 00 00 | 00 00 7e 10 00 00 74 5b |........|..~...t[|
|000013f0| 00 00 03 00 00 00 02 00 | 00 00 00 00 22 10 00 00 |........|...."...|
|00001400| 88 5b 00 00 03 00 00 00 | 02 00 65 6e 64 00 00 00 |.[......|..end...|
|00001410| 00 00 c0 6c 00 00 fe ff | 00 00 02 00 7b 13 00 00 |...l....|....{...|
|00001420| 5f 44 72 69 76 65 72 45 | 6e 74 72 79 40 38 00 5f |_DriverE|ntry@8._|
|00001430| 4c 6f 61 64 43 6f 6e 66 | 69 67 44 61 74 61 40 30 |LoadConf|igData@0|
|00001440| 00 5f 66 49 6e 69 74 44 | 6f 6e 65 00 5f 49 6f 63 |._fInitD|one._Ioc|
|00001450| 74 6c 49 6e 69 74 40 30 | 00 5f 44 65 76 43 61 63 |tlInit@0|._DevCac|
|00001460| 68 65 49 6e 69 74 40 30 | 00 5f 46 6e 43 61 63 68 |heInit@0|._FnCach|
|00001470| 65 49 6e 69 74 40 30 00 | 5f 46 69 6c 65 43 61 63 |eInit@0.|_FileCac|
|00001480| 68 65 49 6e 69 74 40 30 | 00 5f 4d 65 6d 43 74 72 |heInit@0|._MemCtr|
|00001490| 6c 49 6e 69 74 40 30 00 | 5f 49 6e 69 74 49 6f 53 |lInit@0.|_InitIoS|
|000014a0| 6c 6f 74 73 40 30 00 5f | 6d 79 64 65 6c 61 79 40 |lots@0._|mydelay@|
|000014b0| 34 00 5f 48 6f 6f 6b 49 | 6f 46 75 6e 63 74 69 6f |4._HookI|oFunctio|
|000014c0| 6e 73 40 30 00 5f 47 65 | 74 50 72 6f 63 65 73 73 |ns@0._Ge|tProcess|
|000014d0| 4e 61 6d 65 4f 66 66 73 | 65 74 40 30 00 5f 5f 69 |NameOffs|et@0.__i|
|000014e0| 6d 70 5f 5f 49 6f 43 72 | 65 61 74 65 53 79 6d 62 |mp__IoCr|eateSymb|
|000014f0| 6f 6c 69 63 4c 69 6e 6b | 40 38 00 5f 5f 69 6d 70 |olicLink|@8.__imp|
|00001500| 5f 5f 49 6f 43 72 65 61 | 74 65 44 65 76 69 63 65 |__IoCrea|teDevice|
|00001510| 40 32 38 00 5f 61 76 67 | 5f 64 65 76 69 63 65 00 |@28._avg|_device.|
|00001520| 5f 5f 69 6d 70 5f 5f 52 | 74 6c 49 6e 69 74 55 6e |__imp__R|tlInitUn|
|00001530| 69 63 6f 64 65 53 74 72 | 69 6e 67 40 38 00 5f 5f |icodeStr|ing@8.__|
|00001540| 69 6d 70 5f 40 49 6f 66 | 43 6f 6d 70 6c 65 74 65 |imp_@Iof|Complete|
|00001550| 52 65 71 75 65 73 74 40 | 38 00 5f 66 48 6f 6f 6b |Request@|8._fHook|
|00001560| 73 45 6e 61 62 6c 65 64 | 00 5f 49 6f 63 74 6c 40 |sEnabled|._Ioctl@|
|00001570| 33 36 00 5f 5f 69 6d 70 | 5f 5f 4d 6d 4d 61 70 4c |36.__imp|__MmMapL|
|00001580| 6f 63 6b 65 64 50 61 67 | 65 73 40 38 00 5f 50 73 |ockedPag|es@8._Ps|
|00001590| 47 65 74 43 75 72 72 65 | 6e 74 50 72 6f 63 65 73 |GetCurre|ntProces|
|000015a0| 73 49 64 40 30 00 5f 44 | 6f 6e 65 49 6f 53 6c 6f |sId@0._D|oneIoSlo|
|000015b0| 74 73 40 30 00 5f 46 69 | 6c 65 43 61 63 68 65 44 |ts@0._Fi|leCacheD|
|000015c0| 6f 6e 65 40 30 00 5f 46 | 6e 43 61 63 68 65 44 6f |one@0._F|nCacheDo|
|000015d0| 6e 65 40 30 00 5f 44 65 | 76 43 61 63 68 65 44 6f |ne@0._De|vCacheDo|
|000015e0| 6e 65 40 30 00 5f 4d 65 | 6d 43 74 72 6c 44 6f 6e |ne@0._Me|mCtrlDon|
|000015f0| 65 40 30 00 5f 5f 69 6d | 70 5f 5f 49 6f 44 65 6c |e@0.__im|p__IoDel|
|00001600| 65 74 65 44 65 76 69 63 | 65 40 34 00 5f 5f 69 6d |eteDevic|e@4.__im|
|00001610| 70 5f 5f 49 6f 44 65 6c | 65 74 65 53 79 6d 62 6f |p__IoDel|eteSymbo|
|00001620| 6c 69 63 4c 69 6e 6b 40 | 34 00 5f 57 61 69 74 46 |licLink@|4._WaitF|
|00001630| 6f 72 48 6f 6f 6b 73 44 | 6f 6e 65 40 30 00 5f 55 |orHooksD|one@0._U|
|00001640| 6e 48 6f 6f 6b 49 6f 46 | 75 6e 63 74 69 6f 6e 73 |nHookIoF|unctions|
|00001650| 40 30 00 5f 5f 69 6d 70 | 5f 5f 52 74 6c 51 75 65 |@0.__imp|__RtlQue|
|00001660| 72 79 52 65 67 69 73 74 | 72 79 56 61 6c 75 65 73 |ryRegist|ryValues|
|00001670| 40 32 30 00 5f 6d 61 78 | 53 6c 6f 74 57 61 69 74 |@20._max|SlotWait|
|00001680| 54 69 6d 65 00 5f 6d 61 | 78 46 69 6c 65 43 61 63 |Time._ma|xFileCac|
|00001690| 68 65 57 69 64 74 68 00 | 5f 6d 61 78 46 69 6c 65 |heWidth.|_maxFile|
|000016a0| 43 61 63 68 65 44 65 70 | 74 68 00 5f 69 6e 69 74 |CacheDep|th._init|
|000016b0| 69 61 6c 46 6e 43 61 63 | 68 65 53 69 7a 65 00 5f |ialFnCac|heSize._|
|000016c0| 41 56 47 5f 4d 61 70 53 | 65 72 76 69 63 65 54 61 |AVG_MapS|erviceTa|
|000016d0| 62 6c 65 40 30 00 5f 41 | 56 47 5f 55 6e 6d 61 70 |ble@0._A|VG_Unmap|
|000016e0| 53 65 72 76 69 63 65 54 | 61 62 6c 65 40 34 00 5f |ServiceT|able@4._|
|000016f0| 47 65 74 4b 65 72 6e 65 | 6c 46 75 6e 63 74 69 6f |GetKerne|lFunctio|
|00001700| 6e 4e 75 6d 62 65 72 40 | 34 00 5f 49 73 48 6f 6f |nNumber@|4._IsHoo|
|00001710| 6b 73 52 65 6d 6f 76 69 | 6e 67 53 61 76 65 40 30 |ksRemovi|ngSave@0|
|00001720| 00 5f 5f 69 6d 70 5f 5f | 4d 6d 42 75 69 6c 64 4d |.__imp__|MmBuildM|
|00001730| 64 6c 46 6f 72 4e 6f 6e | 50 61 67 65 64 50 6f 6f |dlForNon|PagedPoo|
|00001740| 6c 40 34 00 5f 5f 69 6d | 70 5f 5f 4d 6d 43 72 65 |l@4.__im|p__MmCre|
|00001750| 61 74 65 4d 64 6c 40 31 | 32 00 5f 5f 69 6d 70 5f |ateMdl@1|2.__imp_|
|00001760| 5f 4b 65 53 65 72 76 69 | 63 65 44 65 73 63 72 69 |_KeServi|ceDescri|
|00001770| 70 74 6f 72 54 61 62 6c | 65 00 5f 5f 69 6d 70 5f |ptorTabl|e.__imp_|
|00001780| 5f 4d 6d 55 6e 6d 61 70 | 4c 6f 63 6b 65 64 50 61 |_MmUnmap|LockedPa|
|00001790| 67 65 73 40 38 00 5f 5f | 69 6d 70 5f 40 4b 66 52 |ges@8.__|imp_@KfR|
|000017a0| 65 6c 65 61 73 65 53 70 | 69 6e 4c 6f 63 6b 40 38 |eleaseSp|inLock@8|
|000017b0| 00 5f 4e 65 77 4e 74 57 | 72 69 74 65 46 69 6c 65 |._NewNtW|riteFile|
|000017c0| 40 33 36 00 5f 4e 65 77 | 4e 74 43 6c 6f 73 65 40 |@36._New|NtClose@|
|000017d0| 34 00 5f 4e 65 77 4e 74 | 43 72 65 61 74 65 46 69 |4._NewNt|CreateFi|
|000017e0| 6c 65 40 34 34 00 5f 4e | 65 77 4e 74 4f 70 65 6e |le@44._N|ewNtOpen|
|000017f0| 46 69 6c 65 40 32 34 00 | 5f 5f 69 6d 70 5f 40 4b |File@24.|__imp_@K|
|00001800| 66 41 63 71 75 69 72 65 | 53 70 69 6e 4c 6f 63 6b |fAcquire|SpinLock|
|00001810| 40 34 00 5f 5f 69 6d 70 | 5f 5f 4b 65 49 6e 69 74 |@4.__imp|__KeInit|
|00001820| 69 61 6c 69 7a 65 53 70 | 69 6e 4c 6f 63 6b 40 34 |ializeSp|inLock@4|
|00001830| 00 5f 66 48 6f 6f 6b 73 | 49 6e 73 74 61 6c 6c 65 |._fHooks|Installe|
|00001840| 64 00 5f 4e 74 42 75 69 | 6c 64 4e 75 6d 62 65 72 |d._NtBui|ldNumber|
|00001850| 00 5f 4f 6c 64 4e 74 57 | 72 69 74 65 46 69 6c 65 |._OldNtW|riteFile|
|00001860| 00 5f 4f 6c 64 4e 74 43 | 6c 6f 73 65 00 5f 4f 6c |._OldNtC|lose._Ol|
|00001870| 64 4e 74 43 72 65 61 74 | 65 46 69 6c 65 00 40 49 |dNtCreat|eFile.@I|
|00001880| 6e 74 65 72 6c 6f 63 6b | 65 64 43 6f 6d 70 61 72 |nterlock|edCompar|
|00001890| 65 45 78 63 68 61 6e 67 | 65 40 31 32 00 5f 4f 6c |eExchang|e@12._Ol|
|000018a0| 64 4e 74 4f 70 65 6e 46 | 69 6c 65 00 40 49 6e 74 |dNtOpenF|ile.@Int|
|000018b0| 65 72 6c 6f 63 6b 65 64 | 45 78 63 68 61 6e 67 65 |erlocked|Exchange|
|000018c0| 40 38 00 5f 5f 69 6d 70 | 5f 5f 5a 77 57 72 69 74 |@8.__imp|__ZwWrit|
|000018d0| 65 46 69 6c 65 40 33 36 | 00 5f 5f 69 6d 70 5f 5f |eFile@36|.__imp__|
|000018e0| 5a 77 43 6c 6f 73 65 40 | 34 00 5f 5f 69 6d 70 5f |ZwClose@|4.__imp_|
|000018f0| 5f 5a 77 43 72 65 61 74 | 65 46 69 6c 65 40 34 34 |_ZwCreat|eFile@44|
|00001900| 00 5f 5f 69 6d 70 5f 5f | 5a 77 4f 70 65 6e 46 69 |.__imp__|ZwOpenFi|
|00001910| 6c 65 40 32 34 00 5f 57 | 61 69 74 46 6f 72 49 6f |le@24._W|aitForIo|
|00001920| 63 74 6c 44 6f 6e 65 40 | 30 00 5f 5f 69 6d 70 5f |ctlDone@|0.__imp_|
|00001930| 5f 4b 65 49 6e 69 74 69 | 61 6c 69 7a 65 4d 75 74 |_KeIniti|alizeMut|
|00001940| 65 78 40 38 00 5f 61 76 | 67 4d 75 74 65 78 00 40 |ex@8._av|gMutex.@|
|00001950| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 44 65 63 72 65 |Interloc|kedDecre|
|00001960| 6d 65 6e 74 40 34 00 5f | 46 69 6c 65 43 61 63 68 |ment@4._|FileCach|
|00001970| 65 43 6c 65 61 72 40 30 | 00 5f 5f 69 6d 70 5f 5f |eClear@0|.__imp__|
|00001980| 4b 65 53 65 74 45 76 65 | 6e 74 40 31 32 00 5f 41 |KeSetEve|nt@12._A|
|00001990| 74 74 61 63 68 49 6f 53 | 6c 6f 74 40 31 32 00 5f |ttachIoS|lot@12._|
|000019a0| 44 65 74 61 63 68 49 6f | 53 6c 6f 74 40 31 32 00 |DetachIo|Slot@12.|
|000019b0| 5f 5f 69 6d 70 5f 5f 4b | 65 52 65 6c 65 61 73 65 |__imp__K|eRelease|
|000019c0| 4d 75 74 65 78 40 38 00 | 5f 5f 69 6d 70 5f 5f 4b |Mutex@8.|__imp__K|
|000019d0| 65 57 61 69 74 46 6f 72 | 53 69 6e 67 6c 65 4f 62 |eWaitFor|SingleOb|
|000019e0| 6a 65 63 74 40 32 30 00 | 5f 45 76 65 6e 74 4c 6f |ject@20.|_EventLo|
|000019f0| 67 49 6e 66 6f 4d 65 73 | 73 61 67 65 40 34 00 40 |gInfoMes|sage@4.@|
|00001a00| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 49 6e 63 72 65 |Interloc|kedIncre|
|00001a10| 6d 65 6e 74 40 34 00 5f | 50 73 47 65 74 43 75 72 |ment@4._|PsGetCur|
|00001a20| 72 65 6e 74 54 68 72 65 | 61 64 49 64 40 30 00 5f |rentThre|adId@0._|
|00001a30| 49 6e 69 74 4d 69 73 63 | 40 30 00 5f 57 72 69 74 |InitMisc|@0._Writ|
|00001a40| 65 45 72 72 6f 72 4c 6f | 67 40 38 00 5f 44 75 6d |eErrorLo|g@8._Dum|
|00001a50| 70 54 6f 45 72 72 6f 72 | 4c 6f 67 40 31 32 00 5f |pToError|Log@12._|
|00001a60| 45 76 65 6e 74 4c 6f 67 | 57 61 72 6e 4d 65 73 73 |EventLog|WarnMess|
|00001a70| 61 67 65 40 34 00 5f 45 | 76 65 6e 74 4c 6f 67 45 |age@4._E|ventLogE|
|00001a80| 72 72 6f 72 4d 65 73 73 | 61 67 65 40 34 00 5f 49 |rrorMess|age@4._I|
|00001a90| 73 46 69 6c 65 53 65 6c | 65 63 74 65 64 40 34 00 |sFileSel|ected@4.|
|00001aa0| 5f 43 68 65 63 6b 44 72 | 69 76 65 57 69 74 68 4d |_CheckDr|iveWithM|
|00001ab0| 61 73 6b 40 38 00 5f 77 | 73 74 72 6e 63 6d 70 40 |ask@8._w|strncmp@|
|00001ac0| 31 32 00 5f 6d 79 73 74 | 72 6e 69 63 6d 70 40 31 |12._myst|rnicmp@1|
|00001ad0| 32 00 5f 49 73 50 72 6f | 63 65 73 73 45 71 75 61 |2._IsPro|cessEqua|
|00001ae0| 6c 40 34 00 5f 49 73 50 | 72 6f 63 65 73 73 4e 61 |l@4._IsP|rocessNa|
|00001af0| 6d 65 49 6e 4c 69 73 74 | 40 30 00 5f 5f 69 6d 70 |meInList|@0.__imp|
|00001b00| 5f 5f 49 6f 57 72 69 74 | 65 45 72 72 6f 72 4c 6f |__IoWrit|eErrorLo|
|00001b10| 67 45 6e 74 72 79 40 34 | 00 5f 5f 69 6d 70 5f 5f |gEntry@4|.__imp__|
|00001b20| 6d 65 6d 6d 6f 76 65 00 | 5f 5f 69 6d 70 5f 5f 49 |memmove.|__imp__I|
|00001b30| 6f 41 6c 6c 6f 63 61 74 | 65 45 72 72 6f 72 4c 6f |oAllocat|eErrorLo|
|00001b40| 67 45 6e 74 72 79 40 38 | 00 5f 5f 69 6d 70 5f 5f |gEntry@8|.__imp__|
|00001b50| 4b 65 44 65 6c 61 79 45 | 78 65 63 75 74 69 6f 6e |KeDelayE|xecution|
|00001b60| 54 68 72 65 61 64 40 31 | 32 00 5f 5f 69 6d 70 5f |Thread@1|2.__imp_|
|00001b70| 5f 77 63 73 63 70 79 00 | 5f 5f 69 6d 70 5f 5f 5f |_wcscpy.|__imp___|
|00001b80| 77 63 73 75 70 72 00 5f | 5f 69 6d 70 5f 5f 77 63 |wcsupr._|_imp__wc|
|00001b90| 73 6e 63 70 79 00 5f 5f | 69 6d 70 5f 5f 77 63 73 |sncpy.__|imp__wcs|
|00001ba0| 72 63 68 72 00 5f 5f 69 | 6d 70 5f 5f 49 6f 47 65 |rchr.__i|mp__IoGe|
|00001bb0| 74 43 75 72 72 65 6e 74 | 50 72 6f 63 65 73 73 40 |tCurrent|Process@|
|00001bc0| 30 00 5f 5f 65 78 63 65 | 70 74 5f 6c 69 73 74 00 |0.__exce|pt_list.|
|00001bd0| 5f 5f 65 78 63 65 70 74 | 5f 68 61 6e 64 6c 65 72 |__except|_handler|
|00001be0| 33 00 5f 69 6e 69 74 69 | 61 6c 4d 65 6d 42 6c 6f |3._initi|alMemBlo|
|00001bf0| 63 6b 73 00 5f 6d 61 78 | 44 65 76 43 61 63 68 65 |cks._max|DevCache|
|00001c00| 53 69 7a 65 00 5f 41 64 | 6a 75 73 74 46 69 6c 65 |Size._Ad|justFile|
|00001c10| 4e 61 6d 65 40 38 00 5f | 43 68 65 63 6b 55 6e 69 |Name@8._|CheckUni|
|00001c20| 63 6f 64 65 46 69 6c 65 | 4e 61 6d 65 40 38 00 5f |codeFile|Name@8._|
|00001c30| 43 68 65 63 6b 49 66 42 | 6f 6f 74 52 65 63 6f 72 |CheckIfB|ootRecor|
|00001c40| 64 52 65 71 75 65 73 74 | 40 38 00 5f 42 75 69 6c |dRequest|@8._Buil|
|00001c50| 64 50 61 74 68 40 31 32 | 00 5f 47 65 74 46 69 6c |dPath@12|._GetFil|
|00001c60| 65 4e 61 6d 65 40 31 32 | 00 5f 52 75 6e 43 6c 69 |eName@12|._RunCli|
|00001c70| 65 6e 74 54 68 72 65 61 | 64 40 34 00 5f 5f 69 6d |entThrea|d@4.__im|
|00001c80| 70 5f 5f 73 74 72 6e 63 | 6d 70 00 5f 5f 69 6d 70 |p__strnc|mp.__imp|
|00001c90| 5f 5f 77 63 73 73 74 72 | 00 5f 5f 69 6d 70 5f 5f |__wcsstr|.__imp__|
|00001ca0| 77 63 73 6c 65 6e 00 5f | 44 65 76 43 61 63 68 65 |wcslen._|DevCache|
|00001cb0| 46 69 6e 64 44 72 69 76 | 65 40 34 00 5f 5f 69 6d |FindDriv|e@4.__im|
|00001cc0| 70 5f 5f 49 6f 47 65 74 | 52 65 6c 61 74 65 64 44 |p__IoGet|RelatedD|
|00001cd0| 65 76 69 63 65 4f 62 6a | 65 63 74 40 34 00 5f 5f |eviceObj|ect@4.__|
|00001ce0| 69 6d 70 5f 5f 4b 65 43 | 6c 65 61 72 45 76 65 6e |imp__KeC|learEven|
|00001cf0| 74 40 34 00 5f 4d 65 6d | 43 74 72 6c 46 72 65 65 |t@4._Mem|CtrlFree|
|00001d00| 48 6f 6f 6b 49 6e 66 6f | 42 6c 6f 63 6b 40 34 00 |HookInfo|Block@4.|
|00001d10| 5f 46 6e 43 61 63 68 65 | 41 64 64 4e 61 6d 65 40 |_FnCache|AddName@|
|00001d20| 32 34 00 5f 52 65 74 75 | 72 6e 49 6f 53 6c 6f 74 |24._Retu|rnIoSlot|
|00001d30| 40 34 00 5f 46 69 6c 65 | 43 61 63 68 65 53 65 61 |@4._File|CacheSea|
|00001d40| 72 63 68 4f 72 41 64 64 | 40 34 00 5f 47 65 74 46 |rchOrAdd|@4._GetF|
|00001d50| 72 65 65 49 6f 53 6c 6f | 74 40 30 00 5f 46 69 6c |reeIoSlo|t@0._Fil|
|00001d60| 65 43 61 63 68 65 53 65 | 61 72 63 68 40 34 00 5f |eCacheSe|arch@4._|
|00001d70| 5f 69 6d 70 5f 5f 5f 73 | 74 72 75 70 72 00 5f 5f |_imp___s|trupr.__|
|00001d80| 69 6d 70 5f 5f 52 74 6c | 55 6e 69 63 6f 64 65 53 |imp__Rtl|UnicodeS|
|00001d90| 74 72 69 6e 67 54 6f 41 | 6e 73 69 53 74 72 69 6e |tringToA|nsiStrin|
|00001da0| 67 40 31 32 00 5f 5f 69 | 6d 70 5f 40 4f 62 66 44 |g@12.__i|mp_@ObfD|
|00001db0| 65 72 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |ereferen|ceObject|
|00001dc0| 40 34 00 5f 4d 65 6d 43 | 74 72 6c 47 65 74 48 6f |@4._MemC|trlGetHo|
|00001dd0| 6f 6b 49 6e 66 6f 42 6c | 6f 63 6b 40 30 00 5f 49 |okInfoBl|ock@0._I|
|00001de0| 73 4c 6f 63 61 6c 44 72 | 69 76 65 40 34 00 5f 5f |sLocalDr|ive@4.__|
|00001df0| 69 6d 70 5f 5f 4f 62 52 | 65 66 65 72 65 6e 63 65 |imp__ObR|eference|
|00001e00| 4f 62 6a 65 63 74 42 79 | 48 61 6e 64 6c 65 40 32 |ObjectBy|Handle@2|
|00001e10| 34 00 5f 46 69 6c 65 43 | 61 63 68 65 44 65 6c 65 |4._FileC|acheDele|
|00001e20| 74 65 40 34 00 5f 46 6e | 43 61 63 68 65 47 65 74 |te@4._Fn|CacheGet|
|00001e30| 4e 61 6d 65 40 32 34 00 | 5f 46 6e 43 61 63 68 65 |Name@24.|_FnCache|
|00001e40| 4d 61 72 6b 49 74 65 6d | 57 72 69 74 74 65 6e 40 |MarkItem|Written@|
|00001e50| 38 00 5f 46 72 65 65 4c | 69 73 74 40 34 00 5f 5f |8._FreeL|ist@4.__|
|00001e60| 69 6d 70 5f 5f 45 78 46 | 72 65 65 50 6f 6f 6c 40 |imp__ExF|reePool@|
|00001e70| 34 00 5f 5f 69 6d 70 5f | 5f 45 78 41 6c 6c 6f 63 |4.__imp_|_ExAlloc|
|00001e80| 61 74 65 50 6f 6f 6c 57 | 69 74 68 54 61 67 40 31 |atePoolW|ithTag@1|
|00001e90| 32 00 5f 5f 69 6d 70 5f | 5f 4b 65 49 6e 69 74 69 |2.__imp_|_KeIniti|
|00001ea0| 61 6c 69 7a 65 45 76 65 | 6e 74 40 31 32 00 5f 5f |alizeEve|nt@12.__|
|00001eb0| 69 6d 70 5f 40 45 78 52 | 65 6c 65 61 73 65 46 61 |imp_@ExR|eleaseFa|
|00001ec0| 73 74 4d 75 74 65 78 40 | 34 00 5f 5f 69 6d 70 5f |stMutex@|4.__imp_|
|00001ed0| 40 45 78 41 63 71 75 69 | 72 65 46 61 73 74 4d 75 |@ExAcqui|reFastMu|
|00001ee0| 74 65 78 40 34 00 5f 4b | 65 47 65 74 43 75 72 72 |tex@4._K|eGetCurr|
|00001ef0| 65 6e 74 49 72 71 6c 40 | 30 00 5f 49 73 46 69 6c |entIrql@|0._IsFil|
|00001f00| 65 53 79 73 74 65 6d 40 | 34 00 5f 47 65 74 44 65 |eSystem@|4._GetDe|
|00001f10| 76 69 63 65 4f 62 6a 65 | 63 74 40 34 00 5f 46 69 |viceObje|ct@4._Fi|
|00001f20| 6e 64 4d 6f 75 6e 74 50 | 6f 69 6e 74 40 34 00 5f |ndMountP|oint@4._|
|00001f30| 44 65 76 43 61 63 68 65 | 53 68 6f 72 74 65 6e 4c |DevCache|ShortenL|
|00001f40| 69 73 74 40 30 00 5f 44 | 65 76 43 61 63 68 65 41 |ist@0._D|evCacheA|
|00001f50| 64 64 45 6e 74 72 79 40 | 38 00 5f 5f 69 6d 70 5f |ddEntry@|8.__imp_|
|00001f60| 5f 49 6f 47 65 74 44 65 | 76 69 63 65 4f 62 6a 65 |_IoGetDe|viceObje|
|00001f70| 63 74 50 6f 69 6e 74 65 | 72 40 31 36 00 5f 5f 69 |ctPointe|r@16.__i|
|00001f80| 6d 70 5f 5f 73 74 72 6e | 63 70 79 00 5f 5f 69 6d |mp__strn|cpy.__im|
|00001f90| 70 5f 5f 49 6f 43 72 65 | 61 74 65 53 79 6e 63 68 |p__IoCre|ateSynch|
|00001fa0| 72 6f 6e 69 7a 61 74 69 | 6f 6e 45 76 65 6e 74 40 |ronizati|onEvent@|
|00001fb0| 38 00 5f 46 69 6c 65 43 | 61 63 68 65 47 65 74 49 |8._FileC|acheGetI|
|00001fc0| 6e 64 65 78 40 34 00 5f | 46 69 6c 65 43 61 63 68 |ndex@4._|FileCach|
|00001fd0| 65 53 68 6f 72 74 65 6e | 4c 69 73 74 40 30 00 5f |eShorten|List@0._|
|00001fe0| 49 6f 43 72 65 61 74 65 | 53 79 6d 62 6f 6c 69 63 |IoCreate|Symbolic|
|00001ff0| 4c 69 6e 6b 40 38 00 5f | 5f 49 4d 50 4f 52 54 5f |Link@8._|_IMPORT_|
|00002000| 44 45 53 43 52 49 50 54 | 4f 52 5f 6e 74 6f 73 6b |DESCRIPT|OR_ntosk|
|00002010| 72 6e 6c 00 5f 49 6f 43 | 72 65 61 74 65 44 65 76 |rnl._IoC|reateDev|
|00002020| 69 63 65 40 32 38 00 5f | 52 74 6c 49 6e 69 74 55 |ice@28._|RtlInitU|
|00002030| 6e 69 63 6f 64 65 53 74 | 72 69 6e 67 40 38 00 40 |nicodeSt|ring@8.@|
|00002040| 49 6f 66 43 6f 6d 70 6c | 65 74 65 52 65 71 75 65 |IofCompl|eteReque|
|00002050| 73 74 40 38 00 5f 4d 6d | 4d 61 70 4c 6f 63 6b 65 |st@8._Mm|MapLocke|
|00002060| 64 50 61 67 65 73 40 38 | 00 5f 5f 69 6d 70 5f 5f |dPages@8|.__imp__|
|00002070| 50 73 47 65 74 43 75 72 | 72 65 6e 74 50 72 6f 63 |PsGetCur|rentProc|
|00002080| 65 73 73 49 64 40 30 00 | 5f 49 6f 44 65 6c 65 74 |essId@0.|_IoDelet|
|00002090| 65 44 65 76 69 63 65 40 | 34 00 5f 49 6f 44 65 6c |eDevice@|4._IoDel|
|000020a0| 65 74 65 53 79 6d 62 6f | 6c 69 63 4c 69 6e 6b 40 |eteSymbo|licLink@|
|000020b0| 34 00 5f 52 74 6c 51 75 | 65 72 79 52 65 67 69 73 |4._RtlQu|eryRegis|
|000020c0| 74 72 79 56 61 6c 75 65 | 73 40 32 30 00 5f 4d 6d |tryValue|s@20._Mm|
|000020d0| 42 75 69 6c 64 4d 64 6c | 46 6f 72 4e 6f 6e 50 61 |BuildMdl|ForNonPa|
|000020e0| 67 65 64 50 6f 6f 6c 40 | 34 00 5f 4d 6d 43 72 65 |gedPool@|4._MmCre|
|000020f0| 61 74 65 4d 64 6c 40 31 | 32 00 5f 4b 65 53 65 72 |ateMdl@1|2._KeSer|
|00002100| 76 69 63 65 44 65 73 63 | 72 69 70 74 6f 72 54 61 |viceDesc|riptorTa|
|00002110| 62 6c 65 00 5f 4d 6d 55 | 6e 6d 61 70 4c 6f 63 6b |ble._MmU|nmapLock|
|00002120| 65 64 50 61 67 65 73 40 | 38 00 5f 4b 65 49 6e 69 |edPages@|8._KeIni|
|00002130| 74 69 61 6c 69 7a 65 53 | 70 69 6e 4c 6f 63 6b 40 |tializeS|pinLock@|
|00002140| 34 00 5f 5f 69 6d 70 5f | 5f 4e 74 42 75 69 6c 64 |4.__imp_|_NtBuild|
|00002150| 4e 75 6d 62 65 72 00 5f | 5f 69 6d 70 5f 40 49 6e |Number._|_imp_@In|
|00002160| 74 65 72 6c 6f 63 6b 65 | 64 43 6f 6d 70 61 72 65 |terlocke|dCompare|
|00002170| 45 78 63 68 61 6e 67 65 | 40 31 32 00 5f 5f 69 6d |Exchange|@12.__im|
|00002180| 70 5f 40 49 6e 74 65 72 | 6c 6f 63 6b 65 64 45 78 |p_@Inter|lockedEx|
|00002190| 63 68 61 6e 67 65 40 38 | 00 5f 5a 77 57 72 69 74 |change@8|._ZwWrit|
|000021a0| 65 46 69 6c 65 40 33 36 | 00 5f 5a 77 43 6c 6f 73 |eFile@36|._ZwClos|
|000021b0| 65 40 34 00 5f 5a 77 43 | 72 65 61 74 65 46 69 6c |e@4._ZwC|reateFil|
|000021c0| 65 40 34 34 00 5f 5a 77 | 4f 70 65 6e 46 69 6c 65 |e@44._Zw|OpenFile|
|000021d0| 40 32 34 00 5f 4b 65 49 | 6e 69 74 69 61 6c 69 7a |@24._KeI|nitializ|
|000021e0| 65 4d 75 74 65 78 40 38 | 00 5f 5f 69 6d 70 5f 40 |eMutex@8|.__imp_@|
|000021f0| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 44 65 63 72 65 |Interloc|kedDecre|
|00002200| 6d 65 6e 74 40 34 00 5f | 4b 65 53 65 74 45 76 65 |ment@4._|KeSetEve|
|00002210| 6e 74 40 31 32 00 5f 4b | 65 52 65 6c 65 61 73 65 |nt@12._K|eRelease|
|00002220| 4d 75 74 65 78 40 38 00 | 5f 4b 65 57 61 69 74 46 |Mutex@8.|_KeWaitF|
|00002230| 6f 72 53 69 6e 67 6c 65 | 4f 62 6a 65 63 74 40 32 |orSingle|Object@2|
|00002240| 30 00 5f 5f 69 6d 70 5f | 40 49 6e 74 65 72 6c 6f |0.__imp_|@Interlo|
|00002250| 63 6b 65 64 49 6e 63 72 | 65 6d 65 6e 74 40 34 00 |ckedIncr|ement@4.|
|00002260| 5f 5f 69 6d 70 5f 5f 50 | 73 47 65 74 43 75 72 72 |__imp__P|sGetCurr|
|00002270| 65 6e 74 54 68 72 65 61 | 64 49 64 40 30 00 5f 49 |entThrea|dId@0._I|
|00002280| 6f 57 72 69 74 65 45 72 | 72 6f 72 4c 6f 67 45 6e |oWriteEr|rorLogEn|
|00002290| 74 72 79 40 34 00 5f 49 | 6f 41 6c 6c 6f 63 61 74 |try@4._I|oAllocat|
|000022a0| 65 45 72 72 6f 72 4c 6f | 67 45 6e 74 72 79 40 38 |eErrorLo|gEntry@8|
|000022b0| 00 5f 4b 65 44 65 6c 61 | 79 45 78 65 63 75 74 69 |._KeDela|yExecuti|
|000022c0| 6f 6e 54 68 72 65 61 64 | 40 31 32 00 5f 49 6f 47 |onThread|@12._IoG|
|000022d0| 65 74 43 75 72 72 65 6e | 74 50 72 6f 63 65 73 73 |etCurren|tProcess|
|000022e0| 40 30 00 5f 52 74 6c 55 | 6e 77 69 6e 64 40 31 36 |@0._RtlU|nwind@16|
|000022f0| 00 5f 5f 67 6c 6f 62 61 | 6c 5f 75 6e 77 69 6e 64 |.__globa|l_unwind|
|00002300| 32 00 5f 5f 6c 6f 63 61 | 6c 5f 75 6e 77 69 6e 64 |2.__loca|l_unwind|
|00002310| 32 00 5f 5f 61 62 6e 6f | 72 6d 61 6c 5f 74 65 72 |2.__abno|rmal_ter|
|00002320| 6d 69 6e 61 74 69 6f 6e | 00 5f 5f 73 65 68 5f 6c |mination|.__seh_l|
|00002330| 6f 6e 67 6a 6d 70 5f 75 | 6e 77 69 6e 64 40 34 00 |ongjmp_u|nwind@4.|
|00002340| 5f 49 6f 47 65 74 52 65 | 6c 61 74 65 64 44 65 76 |_IoGetRe|latedDev|
|00002350| 69 63 65 4f 62 6a 65 63 | 74 40 34 00 5f 4b 65 43 |iceObjec|t@4._KeC|
|00002360| 6c 65 61 72 45 76 65 6e | 74 40 34 00 5f 52 74 6c |learEven|t@4._Rtl|
|00002370| 55 6e 69 63 6f 64 65 53 | 74 72 69 6e 67 54 6f 41 |UnicodeS|tringToA|
|00002380| 6e 73 69 53 74 72 69 6e | 67 40 31 32 00 40 4f 62 |nsiStrin|g@12.@Ob|
|00002390| 66 44 65 72 65 66 65 72 | 65 6e 63 65 4f 62 6a 65 |fDerefer|enceObje|
|000023a0| 63 74 40 34 00 5f 4f 62 | 52 65 66 65 72 65 6e 63 |ct@4._Ob|Referenc|
|000023b0| 65 4f 62 6a 65 63 74 42 | 79 48 61 6e 64 6c 65 40 |eObjectB|yHandle@|
|000023c0| 32 34 00 5f 45 78 46 72 | 65 65 50 6f 6f 6c 40 34 |24._ExFr|eePool@4|
|000023d0| 00 5f 45 78 41 6c 6c 6f | 63 61 74 65 50 6f 6f 6c |._ExAllo|catePool|
|000023e0| 57 69 74 68 54 61 67 40 | 31 32 00 5f 4b 65 49 6e |WithTag@|12._KeIn|
|000023f0| 69 74 69 61 6c 69 7a 65 | 45 76 65 6e 74 40 31 32 |itialize|Event@12|
|00002400| 00 5f 49 6f 47 65 74 44 | 65 76 69 63 65 4f 62 6a |._IoGetD|eviceObj|
|00002410| 65 63 74 50 6f 69 6e 74 | 65 72 40 31 36 00 5f 49 |ectPoint|er@16._I|
|00002420| 6f 43 72 65 61 74 65 53 | 79 6e 63 68 72 6f 6e 69 |oCreateS|ynchroni|
|00002430| 7a 61 74 69 6f 6e 45 76 | 65 6e 74 40 38 00 5f 5f |zationEv|ent@8.__|
|00002440| 4e 55 4c 4c 5f 49 4d 50 | 4f 52 54 5f 44 45 53 43 |NULL_IMP|ORT_DESC|
|00002450| 52 49 50 54 4f 52 00 7f | 6e 74 6f 73 6b 72 6e 6c |RIPTOR..|ntoskrnl|
|00002460| 5f 4e 55 4c 4c 5f 54 48 | 55 4e 4b 5f 44 41 54 41 |_NULL_TH|UNK_DATA|
|00002470| 00 5f 5f 69 6d 70 5f 5f | 52 74 6c 55 6e 77 69 6e |.__imp__|RtlUnwin|
|00002480| 64 40 31 36 00 40 4b 66 | 52 65 6c 65 61 73 65 53 |d@16.@Kf|ReleaseS|
|00002490| 70 69 6e 4c 6f 63 6b 40 | 38 00 5f 5f 49 4d 50 4f |pinLock@|8.__IMPO|
|000024a0| 52 54 5f 44 45 53 43 52 | 49 50 54 4f 52 5f 48 41 |RT_DESCR|IPTOR_HA|
|000024b0| 4c 00 40 4b 66 41 63 71 | 75 69 72 65 53 70 69 6e |L.@KfAcq|uireSpin|
|000024c0| 4c 6f 63 6b 40 34 00 40 | 45 78 52 65 6c 65 61 73 |Lock@4.@|ExReleas|
|000024d0| 65 46 61 73 74 4d 75 74 | 65 78 40 34 00 40 45 78 |eFastMut|ex@4.@Ex|
|000024e0| 41 63 71 75 69 72 65 46 | 61 73 74 4d 75 74 65 78 |AcquireF|astMutex|
|000024f0| 40 34 00 5f 5f 69 6d 70 | 5f 5f 4b 65 47 65 74 43 |@4.__imp|__KeGetC|
|00002500| 75 72 72 65 6e 74 49 72 | 71 6c 40 30 00 7f 48 41 |urrentIr|ql@0..HA|
|00002510| 4c 5f 4e 55 4c 4c 5f 54 | 48 55 4e 4b 5f 44 41 54 |L_NULL_T|HUNK_DAT|
|00002520| 41 00 5f 66 46 69 6c 65 | 43 61 63 68 65 49 6e 69 |A._fFile|CacheIni|
|00002530| 74 69 61 6c 69 7a 65 64 | 00 5f 66 69 6c 65 43 61 |tialized|._fileCa|
|00002540| 63 68 65 46 72 65 65 00 | 5f 66 69 6c 65 43 61 63 |cheFree.|_fileCac|
|00002550| 68 65 00 5f 66 69 6c 65 | 43 61 63 68 65 4d 75 74 |he._file|CacheMut|
|00002560| 65 78 00 5f 69 6f 53 6c | 6f 74 73 49 6e 69 74 69 |ex._ioSl|otsIniti|
|00002570| 61 6c 69 7a 65 64 00 5f | 61 74 74 61 63 68 65 64 |alized._|attached|
|00002580| 49 6f 53 6c 6f 74 4c 69 | 73 74 00 5f 66 72 65 65 |IoSlotLi|st._free|
|00002590| 49 6f 53 6c 6f 74 4c 69 | 73 74 00 5f 63 6c 69 65 |IoSlotLi|st._clie|
|000025a0| 6e 74 45 76 65 6e 74 4e | 61 6d 65 00 5f 69 6f 53 |ntEventN|ame._ioS|
|000025b0| 6c 6f 74 4d 75 74 65 78 | 00 5f 66 6e 43 61 63 68 |lotMutex|._fnCach|
|000025c0| 65 49 6e 69 74 69 61 6c | 69 7a 65 64 00 5f 66 6e |eInitial|ized._fn|
|000025d0| 43 61 63 68 65 46 72 65 | 65 00 5f 66 6e 43 61 63 |CacheFre|e._fnCac|
|000025e0| 68 65 4d 75 74 65 78 00 | 5f 66 44 65 76 43 61 63 |heMutex.|_fDevCac|
|000025f0| 68 65 49 6e 69 74 69 61 | 6c 69 7a 65 64 00 5f 64 |heInitia|lized._d|
|00002600| 65 76 4c 69 73 74 46 72 | 65 65 00 5f 64 65 76 4c |evListFr|ee._devL|
|00002610| 69 73 74 53 74 61 72 74 | 00 5f 64 65 76 43 61 63 |istStart|._devCac|
|00002620| 68 65 4d 75 74 65 78 00 | 5f 66 4d 65 6d 43 74 72 |heMutex.|_fMemCtr|
|00002630| 6c 49 6e 69 74 69 61 6c | 69 7a 65 64 00 5f 66 72 |lInitial|ized._fr|
|00002640| 65 65 48 6f 6f 6b 49 6e | 66 6f 4c 69 73 74 00 5f |eeHookIn|foList._|
|00002650| 6d 65 6d 43 74 72 6c 4d | 75 74 65 78 00 5f 73 65 |memCtrlM|utex._se|
|00002660| 71 75 65 6e 63 65 00 5f | 68 6f 6f 6b 73 49 6e 55 |quence._|hooksInU|
|00002670| 73 65 00 5f 70 72 6f 63 | 65 73 73 4e 61 6d 65 4f |se._proc|essNameO|
|00002680| 66 66 73 65 74 00 5f 43 | 6f 75 6e 74 4d 75 74 65 |ffset._C|ountMute|
|00002690| 78 00 5f 69 6f 63 74 6c | 49 6e 55 73 65 00 5f 4e |x._ioctl|InUse._N|
|000026a0| 74 57 72 69 74 65 46 69 | 6c 65 49 44 00 5f 4e 74 |tWriteFi|leID._Nt|
|000026b0| 43 6c 6f 73 65 49 44 00 | 5f 4e 74 43 72 65 61 74 |CloseID.|_NtCreat|
|000026c0| 65 46 69 6c 65 49 44 00 | 5f 4e 74 4f 70 65 6e 46 |eFileID.|_NtOpenF|
|000026d0| 69 6c 65 49 44 00 5f 67 | 6c 6f 62 61 6c 4d 64 6c |ileID._g|lobalMdl|
|000026e0| 00 5f 4b 65 53 65 72 76 | 69 63 65 54 61 62 6c 65 |._KeServ|iceTable|
|000026f0| 50 6f 69 6e 74 65 72 73 | 00 5f 41 56 47 5f 44 69 |Pointers|._AVG_Di|
|00002700| 73 70 61 74 63 68 40 38 | 00 5f 64 65 76 69 63 65 |spatch@8|._device|
|00002710| 5f 69 6f 63 74 6c 40 38 | 00 5f 41 56 47 5f 55 6e |_ioctl@8|._AVG_Un|
|00002720| 6c 6f 61 64 40 34 00 5f | 6c 68 5f 63 6f 6e 74 69 |load@4._|lh_conti|
|00002730| 6e 75 65 00 5f 6c 68 5f | 64 69 73 6d 69 73 73 00 |nue._lh_|dismiss.|
|00002740| 5f 6c 68 5f 72 65 74 75 | 72 6e 00 5f 6c 68 5f 62 |_lh_retu|rn._lh_b|
|00002750| 61 67 69 74 00 5f 6c 68 | 5f 75 6e 77 69 6e 64 69 |agit._lh|_unwindi|
|00002760| 6e 67 00 5f 67 75 5f 72 | 65 74 75 72 6e 00 5f 5f |ng._gu_r|eturn.__|
|00002770| 75 6e 77 69 6e 64 5f 68 | 61 6e 64 6c 65 72 00 5f |unwind_h|andler._|
|00002780| 75 68 5f 72 65 74 75 72 | 6e 00 5f 6c 75 5f 63 6f |uh_retur|n._lu_co|
|00002790| 6e 74 69 6e 75 65 00    |                         |ntinue. |        |
+--------+-------------------------+-------------------------+--------+--------+