Freelog 55

home *** CD-ROM | disk | FTP | other *** search
/ Freelog 55 / Freelog055.iso / Extra / Antivir / AntiVir Personal / avwinsfx.exe / disk_1 / avgntdd.sys / COFF_SYMBOLS < prev next >
Unknown | 2003-08-12 | 10.0 KB
view JSON data |
view as text |
open on a Mac |
open on a PC

This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence	Program	Detection	Match Type	Support
`100%`	file	data	default
hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00000010| 03 00 40 63 6f 6d 70 2e | 69 64 00 00 00 00 ff ff |..@comp.|id......|
|00000020| 00 00 03 00 00 00 00 00 | 2c 11 00 00 e4 47 00 00 |........|,....G..|
|00000030| 02 00 00 00 03 00 00 00 | 00 00 43 11 00 00 e0 3f |........|..C....?|
|00000040| 00 00 02 00 00 00 03 00 | 00 00 00 00 52 11 00 00 |........|....R...|
|00000050| e4 3f 00 00 02 00 00 00 | 03 00 00 00 00 00 5d 11 |.?......|......].|
|00000060| 00 00 c0 3f 00 00 02 00 | 00 00 03 00 40 63 6f 6d |...?....|....@com|
|00000070| 70 2e 69 64 00 00 00 00 | ff ff 00 00 03 00 00 00 |p.id....|........|
|00000080| 00 00 6d 11 00 00 bc 3f | 00 00 02 00 00 00 03 00 |..m....?|........|
|00000090| 00 00 00 00 81 11 00 00 | b8 3f 00 00 02 00 00 00 |........|.?......|
|000000a0| 03 00 00 00 00 00 95 11 | 00 00 90 3f 00 00 02 00 |........|...?....|
|000000b0| 00 00 03 00 24 53 47 36 | 35 31 31 00 9c 2d 00 00 |....$SG6|511..-..|
|000000c0| 01 00 00 00 03 00 00 00 | 00 00 a5 11 00 00 40 3f |........|......@?|
|000000d0| 00 00 02 00 00 00 03 00 | 00 00 00 00 b6 11 00 00 |........|........|
|000000e0| 98 3f 00 00 02 00 00 00 | 03 00 40 63 6f 6d 70 2e |.?......|..@comp.|
|000000f0| 69 64 00 00 00 00 ff ff | 00 00 03 00 00 00 00 00 |id......|........|
|00000100| c3 11 00 00 3c 3f 00 00 | 02 00 00 00 03 00 00 00 |....<?..|........|
|00000110| 00 00 d7 11 00 00 38 3f | 00 00 02 00 00 00 03 00 |......8?|........|
|00000120| 5f 66 6e 43 61 63 68 65 | 18 37 00 00 02 00 00 00 |_fnCache|.7......|
|00000130| 03 00 00 00 00 00 e4 11 | 00 00 18 3f 00 00 02 00 |........|...?....|
|00000140| 00 00 03 00 40 63 6f 6d | 70 2e 69 64 00 00 00 00 |....@com|p.id....|
|00000150| ff ff 00 00 03 00 00 00 | 00 00 f2 11 00 00 10 37 |........|.......7|
|00000160| 00 00 02 00 00 00 03 00 | 00 00 00 00 08 12 00 00 |........|........|
|00000170| 0c 37 00 00 02 00 00 00 | 03 00 00 00 00 00 15 12 |.7......|........|
|00000180| 00 00 08 37 00 00 02 00 | 00 00 03 00 00 00 00 00 |...7....|........|
|00000190| 23 12 00 00 e8 36 00 00 | 02 00 00 00 03 00 24 53 |#....6..|......$S|
|000001a0| 47 36 35 35 32 00 58 29 | 00 00 01 00 00 00 03 00 |G6552.X)|........|
|000001b0| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|000001c0| 03 00 00 00 00 00 32 12 | 00 00 e4 36 00 00 02 00 |......2.|...6....|
|000001d0| 00 00 03 00 00 00 00 00 | 47 12 00 00 e0 36 00 00 |........|G....6..|
|000001e0| 02 00 00 00 03 00 00 00 | 00 00 59 12 00 00 c0 36 |........|..Y....6|
|000001f0| 00 00 02 00 00 00 03 00 | 40 63 6f 6d 70 2e 69 64 |........|@comp.id|
|00000200| 00 00 00 00 ff ff 00 00 | 03 00 00 00 00 00 67 12 |........|......g.|
|00000210| 00 00 b8 36 00 00 02 00 | 00 00 03 00 00 00 00 00 |...6....|........|
|00000220| 71 12 00 00 b4 36 00 00 | 02 00 00 00 03 00 24 53 |q....6..|......$S|
|00000230| 47 36 35 31 33 00 9c 17 | 00 00 01 00 00 00 03 00 |G6513...|........|
|00000240| 24 53 47 36 35 31 30 00 | 94 17 00 00 01 00 00 00 |$SG6510.|........|
|00000250| 03 00 24 53 47 36 35 30 | 37 00 88 17 00 00 01 00 |..$SG650|7.......|
|00000260| 00 00 03 00 24 53 47 36 | 35 32 38 00 34 18 00 00 |....$SG6|528.4...|
|00000270| 01 00 00 00 03 00 24 53 | 47 36 36 36 33 00 2e 1b |......$S|G6663...|
|00000280| 00 00 01 00 00 00 03 00 | 24 53 47 36 36 36 32 00 |........|$SG6662.|
|00000290| 12 1b 00 00 01 00 00 00 | 03 00 24 53 47 36 36 36 |........|..$SG666|
|000002a0| 31 00 f6 1a 00 00 01 00 | 00 00 03 00 24 53 47 36 |1.......|....$SG6|
|000002b0| 36 36 30 00 e2 1a 00 00 | 01 00 00 00 03 00 24 53 |660.....|......$S|
|000002c0| 47 36 36 35 39 00 c6 1a | 00 00 01 00 00 00 03 00 |G6659...|........|
|000002d0| 24 53 47 36 36 34 36 00 | b6 1a 00 00 01 00 00 00 |$SG6646.|........|
|000002e0| 03 00 24 53 47 36 37 37 | 30 00 00 20 00 00 01 00 |..$SG677|0.. ....|
|000002f0| 00 00 03 00 24 53 47 36 | 37 36 39 00 e4 1f 00 00 |....$SG6|769.....|
|00000300| 01 00 00 00 03 00 24 53 | 47 36 37 36 38 00 c8 1f |......$S|G6768...|
|00000310| 00 00 01 00 00 00 03 00 | 24 53 47 36 37 36 37 00 |........|$SG6767.|
|00000320| b4 1f 00 00 01 00 00 00 | 03 00 24 53 47 36 37 36 |........|..$SG676|
|00000330| 36 00 98 1f 00 00 01 00 | 00 00 03 00 24 53 47 36 |6.......|....$SG6|
|00000340| 37 35 32 00 88 1f 00 00 | 01 00 00 00 03 00 24 53 |752.....|......$S|
|00000350| 47 36 38 34 32 00 d6 24 | 00 00 01 00 00 00 03 00 |G6842..$|........|
|00000360| 24 53 47 36 38 39 36 00 | e6 26 00 00 01 00 00 00 |$SG6896.|.&......|
|00000370| 03 00 40 63 6f 6d 70 2e | 69 64 00 00 00 00 ff ff |..@comp.|id......|
|00000380| 00 00 03 00 40 63 6f 6d | 70 2e 69 64 00 00 00 00 |....@com|p.id....|
|00000390| ff ff 00 00 03 00 00 00 | 00 00 7d 12 00 00 a4 36 |........|..}....6|
|000003a0| 00 00 02 00 00 00 03 00 | 00 00 00 00 90 12 00 00 |........|........|
|000003b0| a0 36 00 00 02 00 00 00 | 03 00 24 53 47 36 35 36 |.6......|..$SG656|
|000003c0| 39 00 ea 12 00 00 01 00 | 00 00 03 00 24 53 47 36 |9.......|....$SG6|
|000003d0| 36 34 38 00 cc 14 00 00 | 01 00 00 00 03 00 24 54 |648.....|......$T|
|000003e0| 36 37 36 38 00 00 e8 03 | 00 00 01 00 00 00 03 00 |6768....|........|
|000003f0| 24 53 47 36 36 36 37 00 | a4 15 00 00 01 00 00 00 |$SG6667.|........|
|00000400| 03 00 24 53 47 36 36 36 | 35 00 98 15 00 00 01 00 |..$SG666|5.......|
|00000410| 00 00 03 00 24 53 47 36 | 36 36 32 00 90 15 00 00 |....$SG6|662.....|
|00000420| 01 00 00 00 03 00 24 54 | 36 37 38 31 00 00 f8 03 |......$T|6781....|
|00000430| 00 00 01 00 00 00 03 00 | 24 53 47 36 36 38 32 00 |........|$SG6682.|
|00000440| 7e 16 00 00 01 00 00 00 | 03 00 24 54 36 37 39 34 |~.......|..$T6794|
|00000450| 00 00 08 04 00 00 01 00 | 00 00 03 00 40 63 6f 6d |........|....@com|
|00000460| 70 2e 69 64 00 00 00 00 | ff ff 00 00 03 00 00 00 |p.id....|........|
|00000470| 00 00 9c 12 00 00 9c 36 | 00 00 02 00 00 00 03 00 |.......6|........|
|00000480| 24 53 47 36 36 30 35 00 | b0 0c 00 00 01 00 00 00 |$SG6605.|........|
|00000490| 03 00 24 53 47 36 35 38 | 32 00 60 0c 00 00 01 00 |..$SG658|2.`.....|
|000004a0| 00 00 03 00 24 53 47 36 | 35 38 34 00 88 0c 00 00 |....$SG6|584.....|
|000004b0| 01 00 00 00 03 00 40 63 | 6f 6d 70 2e 69 64 00 00 |......@c|omp.id..|
|000004c0| 00 00 ff ff 00 00 03 00 | 5f 64 62 67 4d 65 6d 00 |........|_dbgMem.|
|000004d0| 98 36 00 00 02 00 00 00 | 03 00 00 00 00 00 a8 12 |.6......|........|
|000004e0| 00 00 6c 36 00 00 02 00 | 00 00 03 00 00 00 00 00 |..l6....|........|
|000004f0| b7 12 00 00 68 36 00 00 | 02 00 00 00 03 00 00 00 |....h6..|........|
|00000500| 00 00 c2 12 00 00 64 36 | 00 00 02 00 00 00 03 00 |......d6|........|
|00000510| 00 00 00 00 d2 12 00 00 | 60 36 00 00 02 00 00 00 |........|`6......|
|00000520| 03 00 00 00 00 00 e0 12 | 00 00 94 36 00 00 02 00 |........|...6....|
|00000530| 00 00 03 00 00 00 00 00 | eb 12 00 00 90 36 00 00 |........|.....6..|
|00000540| 02 00 00 00 03 00 40 63 | 6f 6d 70 2e 69 64 00 00 |......@c|omp.id..|
|00000550| 00 00 ff ff 00 00 03 00 | 24 53 47 31 30 39 31 30 |........|$SG10910|
|00000560| 40 04 00 00 01 00 00 00 | 03 00 24 53 47 31 30 39 |@.......|..$SG109|
|00000570| 30 37 20 04 00 00 01 00 | 00 00 03 00 00 00 00 00 |07 .....|........|
|00000580| 03 13 00 00 86 05 00 00 | 01 00 20 00 03 00 00 00 |........|.. .....|
|00000590| 00 00 13 13 00 00 96 05 | 00 00 01 00 20 00 03 00 |........|.... ...|
|000005a0| 00 00 00 00 23 13 00 00 | 98 06 00 00 01 00 20 00 |....#...|...... .|
|000005b0| 03 00 24 53 47 31 30 38 | 39 35 70 06 00 00 01 00 |..$SG108|95p.....|
|000005c0| 00 00 03 00 24 53 47 31 | 30 39 32 36 ac 07 00 00 |....$SG1|0926....|
|000005d0| 01 00 00 00 03 00 24 53 | 47 31 30 39 32 34 88 07 |......$S|G10924..|
|000005e0| 00 00 01 00 00 00 03 00 | 24 53 47 31 30 39 32 33 |........|$SG10923|
|000005f0| 64 07 00 00 01 00 00 00 | 03 00 24 53 47 31 30 39 |d.......|..$SG109|
|00000600| 33 30 cc 07 00 00 01 00 | 00 00 03 00 24 53 47 31 |30......|....$SG1|
|00000610| 30 39 32 32 3c 07 00 00 | 01 00 00 00 03 00 40 63 |0922<...|......@c|
|00000620| 6f 6d 70 2e 69 64 00 00 | 00 00 ff ff 00 00 03 00 |omp.id..|........|
|00000630| 24 52 30 30 30 30 30 30 | 20 63 00 00 04 00 00 00 |$R000000| c......|
|00000640| 03 00 24 52 30 30 30 33 | 39 30 b0 66 00 00 04 00 |..$R0003|90.f....|
|00000650| 00 00 03 00 2e 74 65 78 | 74 00 00 00 60 34 00 00 |.....tex|t...`4..|
|00000660| 01 00 00 00 03 01 34 00 | 00 00 00 00 13 00 00 00 |......4.|........|
|00000670| 00 00 00 00 00 00 00 00 | 68 61 72 64 00 00 00 00 |........|hard....|
|00000680| 79 34 00 00 01 00 00 00 | 03 00 2e 69 64 61 74 61 |y4......|...idata|
|00000690| 24 36 f2 61 00 00 03 00 | 00 00 03 00 2e 74 65 78 |$6.a....|.....tex|
|000006a0| 74 00 00 00 78 35 00 00 | 01 00 00 00 03 01 d1 00 |t...x5..|........|
|000006b0| 00 00 04 00 47 00 00 00 | 00 00 00 00 00 00 00 00 |....G...|........|
|000006c0| 24 24 24 30 30 30 30 31 | 80 35 00 00 01 00 20 00 |$$$00001|.5.... .|
|000006d0| 03 01 0e 00 00 00 00 00 | 00 00 ae 01 00 00 13 00 |........|........|
|000006e0| 00 00 00 00 24 24 24 30 | 30 30 30 34 49 36 00 00 |....$$$0|0004I6..|
|000006f0| 01 00 20 00 03 01 23 00 | 00 00 00 00 00 00 52 03 |.. ...#.|......R.|
|00000700| 00 00 00 00 00 00 00 00 | 00 00 00 00 31 13 00 00 |........|....1...|
|00000710| f8 35 00 00 01 00 00 00 | 03 00 00 00 00 00 3e 13 |.5......|......>.|
|00000720| 00 00 03 36 00 00 01 00 | 00 00 03 00 00 00 00 00 |...6....|........|
|00000730| 4a 13 00 00 26 36 00 00 | 01 00 00 00 03 00 5f 6c |J...&6..|......_l|
|00000740| 68 5f 74 6f 70 00 af 35 | 00 00 01 00 00 00 03 00 |h_top..5|........|
|00000750| 00 00 00 00 55 13 00 00 | 0a 36 00 00 01 00 00 00 |....U...|.6......|
|00000760| 03 00 00 00 00 00 5f 13 | 00 00 11 36 00 00 01 00 |......_.|...6....|
|00000770| 00 00 03 00 2e 74 65 78 | 74 00 00 00 b8 34 00 00 |.....tex|t....4..|
|00000780| 01 00 00 00 03 01 bf 00 | 00 00 04 00 3d 00 00 00 |........|....=...|
|00000790| 00 00 00 00 00 00 00 00 | 00 00 00 00 6d 13 00 00 |........|....m...|
|000007a0| d0 34 00 00 01 00 00 00 | 03 00 24 24 24 30 30 30 |.4......|..$$$000|
|000007b0| 30 31 b8 34 00 00 01 00 | 20 00 03 01 0f 00 00 00 |01.4....| .......|
|000007c0| 00 00 00 00 9c 01 00 00 | 14 00 00 00 00 00 24 24 |........|......$$|
|000007d0| 24 30 30 30 30 33 d8 34 | 00 00 01 00 20 00 03 01 |$00003.4|.... ...|
|000007e0| 1d 00 00 00 00 00 00 00 | cc 01 00 00 22 00 00 00 |........|...."...|
|000007f0| 00 00 00 00 00 00 78 13 | 00 00 d8 34 00 00 01 00 |......x.|...4....|
|00000800| 20 00 03 01 24 00 00 00 | 22 00 00 00 d2 01 00 00 | ...$...|".......|
|00000810| 29 00 00 00 00 00 24 24 | 24 30 30 30 30 35 fa 34 |).....$$|$00005.4|
|00000820| 00 00 01 00 20 00 03 01 | 2b 00 00 00 00 00 00 00 |.... ...|+.......|
|00000830| 08 02 00 00 30 00 00 00 | 00 00 24 24 24 30 30 30 |....0...|..$$$000|
|00000840| 30 37 54 35 00 00 01 00 | 20 00 03 01 39 00 00 00 |07T5....| ...9...|
|00000850| 00 00 00 00 c2 02 00 00 | 3e 00 00 00 00 00 24 24 |........|>.....$$|
|00000860| 24 30 30 30 30 39 77 35 | 00 00 01 00 20 00 03 01 |$00009w5|.... ...|
|00000870| 47 00 00 00 00 00 00 00 | 04 03 00 00 00 00 00 00 |G.......|........|
|00000880| 00 00 5f 6c 75 5f 64 6f | 6e 65 46 35 00 00 01 00 |.._lu_do|neF5....|
|00000890| 00 00 03 00 00 00 00 00 | 89 13 00 00 f9 34 00 00 |........|.....4..|
|000008a0| 01 00 00 00 03 00 00 00 | 00 00 94 13 00 00 44 35 |........|......D5|
|000008b0| 00 00 01 00 00 00 03 00 | 5f 6c 75 5f 74 6f 70 00 |........|_lu_top.|
|000008c0| 17 35 00 00 01 00 00 00 | 03 00 5f 61 74 5f 64 6f |.5......|.._at_do|
|000008d0| 6e 65 76 35 00 00 01 00 | 00 00 03 00 2e 69 64 61 |nev5....|.....ida|
|000008e0| 74 61 24 36 74 62 00 00 | 03 00 00 00 03 00 68 65 |ta$6tb..|......he|
|000008f0| 61 64 65 72 00 00 00 00 | 00 00 fe ff 00 00 02 00 |ader....|........|
|00000900| 00 00 00 00 00 08 00 00 | 00 00 00 00 ff ff 00 00 |........|........|
|00000910| 02 00 00 00 00 00 d4 0a | 00 00 a0 02 00 00 01 00 |........|........|
|00000920| 00 00 02 00 00 00 00 00 | b8 0a 00 00 a4 02 00 00 |........|........|
|00000930| 01 00 00 00 02 00 00 00 | 00 00 02 04 00 00 a8 02 |........|........|
|00000940| 00 00 01 00 00 00 02 00 | 00 00 00 00 a0 03 00 00 |........|........|
|00000950| ac 02 00 00 01 00 00 00 | 02 00 00 00 00 00 fd 10 |........|........|
|00000960| 00 00 b0 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000970| 17 11 00 00 b4 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000980| 00 00 e7 01 00 00 b8 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000990| 00 00 00 00 ff 01 00 00 | bc 02 00 00 01 00 00 00 |........|........|
|000009a0| 02 00 00 00 00 00 46 02 | 00 00 c0 02 00 00 01 00 |......F.|........|
|000009b0| 00 00 02 00 00 00 00 00 | 2b 03 00 00 c4 02 00 00 |........|+.......|
|000009c0| 01 00 00 00 02 00 00 00 | 00 00 4e 03 00 00 c8 02 |........|..N.....|
|000009d0| 00 00 01 00 00 00 02 00 | 00 00 00 00 64 03 00 00 |........|....d...|
|000009e0| cc 02 00 00 01 00 00 00 | 02 00 00 00 00 00 04 0d |........|........|
|000009f0| 00 00 cc 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000a00| 84 03 00 00 d0 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000a10| 00 00 1d 04 00 00 d4 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000a20| 00 00 00 00 4c 0d 00 00 | d8 02 00 00 01 00 00 00 |....L...|........|
|00000a30| 02 00 00 00 00 00 4c 04 | 00 00 d8 02 00 00 01 00 |......L.|........|
|00000a40| 00 00 02 00 00 00 00 00 | 5b 04 00 00 dc 02 00 00 |........|[.......|
|00000a50| 01 00 00 00 02 00 00 00 | 00 00 6f 0d 00 00 e0 02 |........|..o.....|
|00000a60| 00 00 01 00 00 00 02 00 | 00 00 00 00 ca 04 00 00 |........|........|
|00000a70| e4 02 00 00 01 00 00 00 | 02 00 00 00 00 00 ae 0d |........|........|
|00000a80| 00 00 e8 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000a90| 01 05 00 00 ec 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000aa0| 00 00 17 05 00 00 f0 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000ab0| 00 00 00 00 28 05 00 00 | f4 02 00 00 01 00 00 00 |....(...|........|
|00000ac0| 02 00 00 00 00 00 3f 05 | 00 00 f8 02 00 00 01 00 |......?.|........|
|00000ad0| 00 00 02 00 00 00 00 00 | 68 05 00 00 fc 02 00 00 |........|h.......|
|00000ae0| 01 00 00 00 02 00 00 00 | 00 00 1b 0e 00 00 00 03 |........|........|
|00000af0| 00 00 01 00 00 00 02 00 | 00 00 00 00 b7 05 00 00 |........|........|
|00000b00| 04 03 00 00 01 00 00 00 | 02 00 00 00 00 00 ee 05 |........|........|
|00000b10| 00 00 08 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000b20| 06 06 00 00 0c 03 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000b30| 00 00 74 0e 00 00 10 03 | 00 00 01 00 00 00 02 00 |..t.....|........|
|00000b40| 00 00 00 00 73 0c 00 00 | 14 03 00 00 01 00 00 00 |....s...|........|
|00000b50| 02 00 00 00 00 00 39 07 | 00 00 18 03 00 00 01 00 |......9.|........|
|00000b60| 00 00 02 00 00 00 00 00 | 57 07 00 00 1c 03 00 00 |........|W.......|
|00000b70| 01 00 00 00 02 00 00 00 | 00 00 66 07 00 00 20 03 |........|..f... .|
|00000b80| 00 00 01 00 00 00 02 00 | 00 00 00 00 87 07 00 00 |........|........|
|00000b90| 24 03 00 00 01 00 00 00 | 02 00 00 00 00 00 a8 07 |$.......|........|
|00000ba0| 00 00 28 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..(.....|........|
|00000bb0| b6 07 00 00 2c 03 00 00 | 01 00 00 00 02 00 00 00 |....,...|........|
|00000bc0| 00 00 c5 07 00 00 30 03 | 00 00 01 00 00 00 02 00 |......0.|........|
|00000bd0| 00 00 00 00 d4 07 00 00 | 34 03 00 00 01 00 00 00 |........|4.......|
|00000be0| 02 00 00 00 00 00 e3 07 | 00 00 38 03 00 00 01 00 |........|..8.....|
|00000bf0| 00 00 02 00 00 00 00 00 | ba 08 00 00 3c 03 00 00 |........|....<...|
|00000c00| 01 00 00 00 02 00 00 00 | 00 00 c9 08 00 00 40 03 |........|......@.|
|00000c10| 00 00 01 00 00 00 02 00 | 00 00 00 00 d7 08 00 00 |........|........|
|00000c20| 44 03 00 00 01 00 00 00 | 02 00 00 00 00 00 fa 08 |D.......|........|
|00000c30| 00 00 48 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..H.....|........|
|00000c40| 1c 09 00 00 4c 03 00 00 | 01 00 00 00 02 00 00 00 |....L...|........|
|00000c50| 00 00 ad 09 00 00 50 03 | 00 00 01 00 00 00 02 00 |......P.|........|
|00000c60| 00 00 00 00 bc 09 00 00 | 54 03 00 00 01 00 00 00 |........|T.......|
|00000c70| 02 00 00 00 00 00 e3 09 | 00 00 58 03 00 00 01 00 |........|..X.....|
|00000c80| 00 00 02 00 00 00 00 00 | 2c 0a 00 00 5c 03 00 00 |........|,...\...|
|00000c90| 01 00 00 00 02 00 00 00 | 00 00 9c 0a 00 00 60 03 |........|......`.|
|00000ca0| 00 00 01 00 00 00 02 00 | 00 00 00 00 64 0b 00 00 |........|....d...|
|00000cb0| 64 03 00 00 01 00 00 00 | 02 00 00 00 00 00 87 0b |d.......|........|
|00000cc0| 00 00 68 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..h.....|........|
|00000cd0| 96 0b 00 00 6c 03 00 00 | 01 00 00 00 02 00 00 00 |....l...|........|
|00000ce0| 00 00 7b 10 00 00 70 03 | 00 00 01 00 00 00 02 00 |..{...p.|........|
|00000cf0| 00 00 00 00 66 01 00 00 | 74 03 00 00 01 00 00 00 |....f...|t.......|
|00000d00| 02 00 00 00 00 00 31 01 | 00 00 78 03 00 00 01 00 |......1.|..x.....|
|00000d10| 00 00 02 00 00 00 00 00 | 13 01 00 00 7c 03 00 00 |........|....|...|
|00000d20| 01 00 00 00 02 00 00 00 | 00 00 ee 00 00 00 80 03 |........|........|
|00000d30| 00 00 01 00 00 00 02 00 | 00 00 00 00 92 0e 00 00 |........|........|
|00000d40| 84 03 00 00 01 00 00 00 | 02 00 00 00 00 00 d0 00 |........|........|
|00000d50| 00 00 88 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000d60| 61 10 00 00 8c 03 00 00 | 01 00 00 00 02 00 00 00 |a.......|........|
|00000d70| 00 00 04 00 00 00 68 04 | 00 00 01 00 20 00 02 00 |......h.|.... ...|
|00000d80| 00 00 00 00 13 00 00 00 | dc 07 00 00 01 00 20 00 |........|...... .|
|00000d90| 02 00 00 00 00 00 b2 02 | 00 00 64 08 00 00 01 00 |........|..d.....|
|00000da0| 20 00 02 00 00 00 00 00 | c9 02 00 00 9a 08 00 00 | .......|........|
|00000db0| 01 00 20 00 02 00 00 00 | 00 00 e2 02 00 00 ae 08 |.. .....|........|
|00000dc0| 00 00 01 00 20 00 02 00 | 00 00 00 00 fd 02 00 00 |.... ...|........|
|00000dd0| d2 08 00 00 01 00 20 00 | 02 00 00 00 00 00 1d 02 |...... .|........|
|00000de0| 00 00 4e 09 00 00 01 00 | 20 00 02 00 00 00 00 00 |..N.....| .......|
|00000df0| a5 00 00 00 84 0a 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000e00| 00 00 3f 00 00 00 52 0c | 00 00 01 00 20 00 02 00 |..?...R.|.... ...|
|00000e10| 00 00 00 00 5c 01 00 00 | f4 0c 00 00 01 00 20 00 |....\...|...... .|
|00000e20| 02 00 00 00 00 00 79 06 | 00 00 20 12 00 00 01 00 |......y.|.. .....|
|00000e30| 20 00 02 00 00 00 00 00 | 26 06 00 00 aa 12 00 00 | .......|&.......|
|00000e40| 01 00 20 00 02 00 00 00 | 00 00 9a 00 00 00 bc 12 |.. .....|........|
|00000e50| 00 00 01 00 20 00 02 00 | 00 00 00 00 cc 06 00 00 |.... ...|........|
|00000e60| ee 12 00 00 01 00 20 00 | 02 00 00 00 00 00 de 06 |...... .|........|
|00000e70| 00 00 da 13 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000e80| f4 06 00 00 24 14 00 00 | 01 00 20 00 02 00 00 00 |....$...|.. .....|
|00000e90| 00 00 01 07 00 00 6e 14 | 00 00 01 00 20 00 02 00 |......n.|.... ...|
|00000ea0| 00 00 00 00 10 07 00 00 | fc 14 00 00 01 00 20 00 |........|...... .|
|00000eb0| 02 00 00 00 00 00 b8 00 | 00 00 d6 15 00 00 01 00 |........|........|
|00000ec0| 20 00 02 00 00 00 00 00 | 22 07 00 00 b2 16 00 00 | .......|".......|
|00000ed0| 01 00 20 00 02 00 00 00 | 00 00 43 08 00 00 a1 17 |.. .....|..C.....|
|00000ee0| 00 00 01 00 20 00 02 00 | 00 00 00 00 55 08 00 00 |.... ...|....U...|
|00000ef0| 62 18 00 00 01 00 20 00 | 02 00 00 00 00 00 6d 08 |b..... .|......m.|
|00000f00| 00 00 f4 18 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000f10| 89 08 00 00 2c 19 00 00 | 01 00 20 00 02 00 00 00 |....,...|.. .....|
|00000f20| 00 00 97 08 00 00 06 1a | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000f30| 00 00 00 00 a7 08 00 00 | 2c 1a 00 00 01 00 20 00 |........|,..... .|
|00000f40| 02 00 00 00 00 00 dc 03 | 00 00 4a 1b 00 00 01 00 |........|..J.....|
|00000f50| 20 00 02 00 00 00 00 00 | f0 03 00 00 1c 20 00 00 | .......|..... ..|
|00000f60| 01 00 20 00 02 00 00 00 | 00 00 ce 03 00 00 e3 24 |.. .....|.......$|
|00000f70| 00 00 01 00 20 00 02 00 | 00 00 00 00 bb 03 00 00 |.... ...|........|
|00000f80| 6c 26 00 00 01 00 20 00 | 02 00 00 00 00 00 32 02 |l&.... .|......2.|
|00000f90| 00 00 10 27 00 00 01 00 | 20 00 02 00 00 00 00 00 |...'....| .......|
|00000fa0| 90 0a 00 00 40 27 00 00 | 01 00 20 00 02 00 00 00 |....@'..|.. .....|
|00000fb0| 00 00 7c 00 00 00 66 27 | 00 00 01 00 20 00 02 00 |..|...f'|.... ...|
|00000fc0| 00 00 00 00 d8 01 00 00 | c4 27 00 00 01 00 20 00 |........|.'.... .|
|00000fd0| 02 00 00 00 00 00 01 0a | 00 00 0a 28 00 00 01 00 |........|...(....|
|00000fe0| 20 00 02 00 00 00 00 00 | 32 09 00 00 5a 28 00 00 | .......|2...Z(..|
|00000ff0| 01 00 20 00 02 00 00 00 | 00 00 1c 0a 00 00 8e 28 |.. .....|.......(|
|00001000| 00 00 01 00 20 00 02 00 | 00 00 00 00 4c 00 00 00 |.... ...|....L...|
|00001010| b0 28 00 00 01 00 20 00 | 02 00 00 00 00 00 14 0b |.(.... .|........|
|00001020| 00 00 16 29 00 00 01 00 | 20 00 02 00 00 00 00 00 |...)....| .......|
|00001030| 27 0b 00 00 72 29 00 00 | 01 00 20 00 02 00 00 00 |'...r)..|.. .....|
|00001040| 00 00 c8 01 00 00 d2 29 | 00 00 01 00 20 00 02 00 |.......)|.... ...|
|00001050| 00 00 00 00 39 0b 00 00 | 18 2a 00 00 01 00 20 00 |....9...|.*.... .|
|00001060| 02 00 00 00 00 00 50 0b | 00 00 44 2a 00 00 01 00 |......P.|..D*....|
|00001070| 20 00 02 00 00 00 00 00 | e5 08 00 00 8a 2a 00 00 | .......|.....*..|
|00001080| 01 00 20 00 02 00 00 00 | 00 00 5c 00 00 00 e8 2a |.. .....|..\....*|
|00001090| 00 00 01 00 20 00 02 00 | 00 00 00 00 b9 01 00 00 |.... ...|........|
|000010a0| 68 2b 00 00 01 00 20 00 | 02 00 00 00 00 00 4e 09 |h+.... .|......N.|
|000010b0| 00 00 bc 2b 00 00 01 00 | 20 00 02 00 00 00 00 00 |...+....| .......|
|000010c0| 76 0a 00 00 74 2c 00 00 | 01 00 20 00 02 00 00 00 |v...t,..|.. .....|
|000010d0| 00 00 63 0a 00 00 c6 2c | 00 00 01 00 20 00 02 00 |..c....,|.... ...|
|000010e0| 00 00 00 00 8b 00 00 00 | da 2d 00 00 01 00 20 00 |........|.-.... .|
|000010f0| 02 00 00 00 00 00 99 01 | 00 00 be 2e 00 00 01 00 |........|........|
|00001100| 20 00 02 00 00 00 00 00 | 89 09 00 00 0c 2f 00 00 | .......|...../..|
|00001110| 01 00 20 00 02 00 00 00 | 00 00 61 09 00 00 70 2f |.. .....|..a...p/|
|00001120| 00 00 01 00 20 00 02 00 | 00 00 00 00 cc 05 00 00 |.... ...|........|
|00001130| a2 2f 00 00 01 00 20 00 | 02 00 00 00 00 00 dd 05 |./.... .|........|
|00001140| 00 00 08 30 00 00 01 00 | 20 00 02 00 00 00 00 00 |...0....| .......|
|00001150| bc 0b 00 00 7c 30 00 00 | 01 00 20 00 02 00 00 00 |....|0..|.. .....|
|00001160| 00 00 6b 00 00 00 96 30 | 00 00 01 00 20 00 02 00 |..k....0|.... ...|
|00001170| 00 00 00 00 a5 05 00 00 | 14 31 00 00 01 00 20 00 |........|.1.... .|
|00001180| 02 00 00 00 00 00 a8 01 | 00 00 64 31 00 00 01 00 |........|..d1....|
|00001190| 20 00 02 00 00 00 00 00 | d1 0b 00 00 b8 31 00 00 | .......|.....1..|
|000011a0| 01 00 20 00 02 00 00 00 | 00 00 71 09 00 00 00 32 |.. .....|..q....2|
|000011b0| 00 00 01 00 20 00 02 00 | 00 00 00 00 9a 09 00 00 |.... ...|........|
|000011c0| 02 33 00 00 01 00 20 00 | 02 00 00 00 00 00 50 0a |.3.... .|......P.|
|000011d0| 00 00 a0 33 00 00 01 00 | 20 00 02 00 5f 5f 61 6c |...3....| ...__al|
|000011e0| 6c 6d 75 6c 60 34 00 00 | 01 00 20 00 02 00 00 00 |lmul`4..|.. .....|
|000011f0| 00 00 80 01 00 00 94 34 | 00 00 01 00 20 00 02 00 |.......4|.... ...|
|00001200| 00 00 00 00 9c 04 00 00 | 9a 34 00 00 01 00 20 00 |........|.4.... .|
|00001210| 02 00 00 00 00 00 ea 04 | 00 00 a0 34 00 00 01 00 |........|...4....|
|00001220| 20 00 02 00 00 00 00 00 | 8d 05 00 00 a6 34 00 00 | .......|.....4..|
|00001230| 01 00 20 00 02 00 00 00 | 00 00 3d 06 00 00 ac 34 |.. .....|..=....4|
|00001240| 00 00 01 00 20 00 02 00 | 00 00 00 00 55 06 00 00 |.... ...|....U...|
|00001250| b2 34 00 00 01 00 20 00 | 02 00 00 00 00 00 23 0f |.4.... .|......#.|
|00001260| 00 00 b8 34 00 00 01 00 | 20 00 02 00 00 00 00 00 |...4....| .......|
|00001270| 34 0f 00 00 fa 34 00 00 | 01 00 20 00 02 00 00 00 |4....4..|.. .....|
|00001280| 00 00 44 0f 00 00 54 35 | 00 00 01 00 20 00 02 00 |..D...T5|.... ...|
|00001290| 00 00 00 00 0e 08 00 00 | 80 35 00 00 01 00 20 00 |........|.5.... .|
|000012a0| 02 00 00 00 00 00 5b 0f | 00 00 2e 36 00 00 01 00 |......[.|...6....|
|000012b0| 20 00 02 00 00 00 00 00 | 15 0f 00 00 4a 36 00 00 | .......|....J6..|
|000012c0| 01 00 20 00 02 00 00 00 | 00 00 f0 0a 00 00 50 36 |.. .....|......P6|
|000012d0| 00 00 01 00 20 00 02 00 | 00 00 00 00 9e 02 00 00 |.... ...|........|
|000012e0| 70 36 00 00 02 00 00 00 | 02 00 00 00 00 00 8b 02 |p6......|........|
|000012f0| 00 00 74 36 00 00 02 00 | 00 00 02 00 00 00 00 00 |..t6....|........|
|00001300| 78 02 00 00 78 36 00 00 | 02 00 00 00 02 00 00 00 |x...x6..|........|
|00001310| 00 00 32 08 00 00 7c 36 | 00 00 02 00 00 00 02 00 |..2...|6|........|
|00001320| 00 00 00 00 67 02 00 00 | 80 36 00 00 02 00 00 00 |....g...|.6......|
|00001330| 02 00 00 00 00 00 20 08 | 00 00 84 36 00 00 02 00 |...... .|...6....|
|00001340| 00 00 02 00 00 00 00 00 | 4d 01 00 00 a8 36 00 00 |........|M....6..|
|00001350| 02 00 00 00 02 00 00 00 | 00 00 3b 04 00 00 ac 36 |........|..;....6|
|00001360| 00 00 02 00 00 00 02 00 | 00 00 00 00 34 00 00 00 |........|....4...|
|00001370| b0 36 00 00 02 00 00 00 | 02 00 00 00 00 00 6f 04 |.6......|......o.|
|00001380| 00 00 e8 47 00 00 02 00 | 00 00 02 00 5f 61 76 67 |...G....|...._avg|
|00001390| 00 00 00 00 00 48 00 00 | 02 00 00 00 02 00 00 00 |.....H..|........|
|000013a0| 00 00 07 01 00 00 78 5c | 00 00 02 00 00 00 02 00 |......x\|........|
|000013b0| 00 00 00 00 7f 04 00 00 | 7c 5c 00 00 02 00 00 00 |........||\......|
|000013c0| 02 00 00 00 00 00 83 05 | 00 00 80 5c 00 00 02 00 |........|...\....|
|000013d0| 00 00 02 00 00 00 00 00 | bb 04 00 00 a0 5c 00 00 |........|.....\..|
|000013e0| 02 00 00 00 02 00 00 00 | 00 00 8b 04 00 00 a4 5c |........|.......\|
|000013f0| 00 00 02 00 00 00 02 00 | 00 00 00 00 25 00 00 00 |........|....%...|
|00001400| a8 5c 00 00 02 00 00 00 | 02 00 00 00 00 00 01 0c |.\......|........|
|00001410| 00 00 c0 5c 00 00 03 00 | 00 00 02 00 00 00 00 00 |...\....|........|
|00001420| a4 10 00 00 d4 5c 00 00 | 03 00 00 00 02 00 00 00 |.....\..|........|
|00001430| 00 00 48 10 00 00 e8 5c | 00 00 03 00 00 00 02 00 |..H....\|........|
|00001440| 65 6e 64 00 00 00 00 00 | 60 6e 00 00 fe ff 00 00 |end.....|`n......|
|00001450| 02 00 a1 13 00 00 5f 44 | 72 69 76 65 72 45 6e 74 |......_D|riverEnt|
|00001460| 72 79 40 38 00 5f 4c 6f | 61 64 43 6f 6e 66 69 67 |ry@8._Lo|adConfig|
|00001470| 44 61 74 61 40 30 00 5f | 70 44 72 69 76 65 72 4f |Data@0._|pDriverO|
|00001480| 62 6a 65 63 74 00 5f 66 | 49 6e 69 74 44 6f 6e 65 |bject._f|InitDone|
|00001490| 00 5f 49 6f 63 74 6c 49 | 6e 69 74 40 30 00 5f 44 |._IoctlI|nit@0._D|
|000014a0| 65 76 43 61 63 68 65 49 | 6e 69 74 40 30 00 5f 46 |evCacheI|nit@0._F|
|000014b0| 6e 43 61 63 68 65 49 6e | 69 74 40 30 00 5f 46 69 |nCacheIn|it@0._Fi|
|000014c0| 6c 65 43 61 63 68 65 49 | 6e 69 74 40 30 00 5f 4d |leCacheI|nit@0._M|
|000014d0| 65 6d 43 74 72 6c 49 6e | 69 74 40 30 00 5f 49 6e |emCtrlIn|it@0._In|
|000014e0| 69 74 49 6f 53 6c 6f 74 | 73 40 30 00 5f 6d 79 64 |itIoSlot|s@0._myd|
|000014f0| 65 6c 61 79 40 34 00 5f | 48 6f 6f 6b 49 6f 46 75 |elay@4._|HookIoFu|
|00001500| 6e 63 74 69 6f 6e 73 40 | 30 00 5f 47 65 74 50 72 |nctions@|0._GetPr|
|00001510| 6f 63 65 73 73 4e 61 6d | 65 4f 66 66 73 65 74 40 |ocessNam|eOffset@|
|00001520| 30 00 5f 5f 69 6d 70 5f | 5f 49 6f 43 72 65 61 74 |0.__imp_|_IoCreat|
|00001530| 65 53 79 6d 62 6f 6c 69 | 63 4c 69 6e 6b 40 38 00 |eSymboli|cLink@8.|
|00001540| 5f 5f 69 6d 70 5f 5f 49 | 6f 43 72 65 61 74 65 44 |__imp__I|oCreateD|
|00001550| 65 76 69 63 65 40 32 38 | 00 5f 61 76 67 5f 64 65 |evice@28|._avg_de|
|00001560| 76 69 63 65 00 5f 5f 69 | 6d 70 5f 5f 52 74 6c 49 |vice.__i|mp__RtlI|
|00001570| 6e 69 74 55 6e 69 63 6f | 64 65 53 74 72 69 6e 67 |nitUnico|deString|
|00001580| 40 38 00 5f 5f 69 6d 70 | 5f 40 49 6f 66 43 6f 6d |@8.__imp|_@IofCom|
|00001590| 70 6c 65 74 65 52 65 71 | 75 65 73 74 40 38 00 5f |pleteReq|uest@8._|
|000015a0| 66 48 6f 6f 6b 73 45 6e | 61 62 6c 65 64 00 5f 49 |fHooksEn|abled._I|
|000015b0| 6f 63 74 6c 40 33 36 00 | 5f 5f 69 6d 70 5f 5f 4d |octl@36.|__imp__M|
|000015c0| 6d 4d 61 70 4c 6f 63 6b | 65 64 50 61 67 65 73 40 |mMapLock|edPages@|
|000015d0| 38 00 5f 50 73 47 65 74 | 43 75 72 72 65 6e 74 50 |8._PsGet|CurrentP|
|000015e0| 72 6f 63 65 73 73 49 64 | 40 30 00 5f 44 6f 6e 65 |rocessId|@0._Done|
|000015f0| 49 6f 53 6c 6f 74 73 40 | 30 00 5f 46 69 6c 65 43 |IoSlots@|0._FileC|
|00001600| 61 63 68 65 44 6f 6e 65 | 40 30 00 5f 46 6e 43 61 |acheDone|@0._FnCa|
|00001610| 63 68 65 44 6f 6e 65 40 | 30 00 5f 44 65 76 43 61 |cheDone@|0._DevCa|
|00001620| 63 68 65 44 6f 6e 65 40 | 30 00 5f 4d 65 6d 43 74 |cheDone@|0._MemCt|
|00001630| 72 6c 44 6f 6e 65 40 30 | 00 5f 5f 69 6d 70 5f 5f |rlDone@0|.__imp__|
|00001640| 49 6f 44 65 6c 65 74 65 | 44 65 76 69 63 65 40 34 |IoDelete|Device@4|
|00001650| 00 5f 5f 69 6d 70 5f 5f | 49 6f 44 65 6c 65 74 65 |.__imp__|IoDelete|
|00001660| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 40 34 00 5f |Symbolic|Link@4._|
|00001670| 55 6e 48 6f 6f 6b 49 6f | 46 75 6e 63 74 69 6f 6e |UnHookIo|Function|
|00001680| 73 40 30 00 5f 57 61 69 | 74 46 6f 72 48 6f 6f 6b |s@0._Wai|tForHook|
|00001690| 73 44 6f 6e 65 40 30 00 | 5f 5f 69 6d 70 5f 5f 52 |sDone@0.|__imp__R|
|000016a0| 74 6c 51 75 65 72 79 52 | 65 67 69 73 74 72 79 56 |tlQueryR|egistryV|
|000016b0| 61 6c 75 65 73 40 32 30 | 00 5f 6d 61 78 53 6c 6f |alues@20|._maxSlo|
|000016c0| 74 57 61 69 74 54 69 6d | 65 00 5f 6d 61 78 46 69 |tWaitTim|e._maxFi|
|000016d0| 6c 65 43 61 63 68 65 57 | 69 64 74 68 00 5f 6d 61 |leCacheW|idth._ma|
|000016e0| 78 46 69 6c 65 43 61 63 | 68 65 44 65 70 74 68 00 |xFileCac|heDepth.|
|000016f0| 5f 69 6e 69 74 69 61 6c | 46 6e 43 61 63 68 65 53 |_initial|FnCacheS|
|00001700| 69 7a 65 00 5f 41 56 47 | 5f 4d 61 70 53 65 72 76 |ize._AVG|_MapServ|
|00001710| 69 63 65 54 61 62 6c 65 | 40 30 00 5f 41 56 47 5f |iceTable|@0._AVG_|
|00001720| 55 6e 6d 61 70 53 65 72 | 76 69 63 65 54 61 62 6c |UnmapSer|viceTabl|
|00001730| 65 40 34 00 5f 47 65 74 | 4b 65 72 6e 65 6c 46 75 |e@4._Get|KernelFu|
|00001740| 6e 63 74 69 6f 6e 4e 75 | 6d 62 65 72 40 34 00 5f |nctionNu|mber@4._|
|00001750| 49 73 48 6f 6f 6b 73 52 | 65 6d 6f 76 69 6e 67 53 |IsHooksR|emovingS|
|00001760| 61 76 65 40 30 00 5f 43 | 68 65 63 6b 49 66 55 6e |ave@0._C|heckIfUn|
|00001770| 6c 6f 61 64 49 73 53 61 | 66 65 40 30 00 5f 5f 69 |loadIsSa|fe@0.__i|
|00001780| 6d 70 5f 5f 4d 6d 42 75 | 69 6c 64 4d 64 6c 46 6f |mp__MmBu|ildMdlFo|
|00001790| 72 4e 6f 6e 50 61 67 65 | 64 50 6f 6f 6c 40 34 00 |rNonPage|dPool@4.|
|000017a0| 5f 5f 69 6d 70 5f 5f 4d | 6d 43 72 65 61 74 65 4d |__imp__M|mCreateM|
|000017b0| 64 6c 40 31 32 00 5f 5f | 69 6d 70 5f 5f 4b 65 53 |dl@12.__|imp__KeS|
|000017c0| 65 72 76 69 63 65 44 65 | 73 63 72 69 70 74 6f 72 |erviceDe|scriptor|
|000017d0| 54 61 62 6c 65 00 5f 5f | 69 6d 70 5f 5f 4d 6d 55 |Table.__|imp__MmU|
|000017e0| 6e 6d 61 70 4c 6f 63 6b | 65 64 50 61 67 65 73 40 |nmapLock|edPages@|
|000017f0| 38 00 5f 5f 69 6d 70 5f | 40 4b 66 52 65 6c 65 61 |8.__imp_|@KfRelea|
|00001800| 73 65 53 70 69 6e 4c 6f | 63 6b 40 38 00 5f 4e 65 |seSpinLo|ck@8._Ne|
|00001810| 77 4e 74 57 72 69 74 65 | 46 69 6c 65 40 33 36 00 |wNtWrite|File@36.|
|00001820| 5f 4e 65 77 4e 74 43 6c | 6f 73 65 40 34 00 5f 4e |_NewNtCl|ose@4._N|
|00001830| 65 77 4e 74 43 72 65 61 | 74 65 46 69 6c 65 40 34 |ewNtCrea|teFile@4|
|00001840| 34 00 5f 4e 65 77 4e 74 | 4f 70 65 6e 46 69 6c 65 |4._NewNt|OpenFile|
|00001850| 40 32 34 00 5f 5f 69 6d | 70 5f 40 4b 66 41 63 71 |@24.__im|p_@KfAcq|
|00001860| 75 69 72 65 53 70 69 6e | 4c 6f 63 6b 40 34 00 5f |uireSpin|Lock@4._|
|00001870| 5f 69 6d 70 5f 5f 4b 65 | 49 6e 69 74 69 61 6c 69 |_imp__Ke|Initiali|
|00001880| 7a 65 53 70 69 6e 4c 6f | 63 6b 40 34 00 5f 66 48 |zeSpinLo|ck@4._fH|
|00001890| 6f 6f 6b 73 49 6e 73 74 | 61 6c 6c 65 64 00 5f 4e |ooksInst|alled._N|
|000018a0| 74 42 75 69 6c 64 4e 75 | 6d 62 65 72 00 5f 5f 69 |tBuildNu|mber.__i|
|000018b0| 6d 70 5f 5f 45 78 46 72 | 65 65 50 6f 6f 6c 40 34 |mp__ExFr|eePool@4|
|000018c0| 00 5f 4f 6c 64 4e 74 57 | 72 69 74 65 46 69 6c 65 |._OldNtW|riteFile|
|000018d0| 00 5f 4f 6c 64 4e 74 43 | 6c 6f 73 65 00 5f 4f 6c |._OldNtC|lose._Ol|
|000018e0| 64 4e 74 43 72 65 61 74 | 65 46 69 6c 65 00 40 49 |dNtCreat|eFile.@I|
|000018f0| 6e 74 65 72 6c 6f 63 6b | 65 64 43 6f 6d 70 61 72 |nterlock|edCompar|
|00001900| 65 45 78 63 68 61 6e 67 | 65 40 31 32 00 5f 4f 6c |eExchang|e@12._Ol|
|00001910| 64 4e 74 4f 70 65 6e 46 | 69 6c 65 00 5f 5f 69 6d |dNtOpenF|ile.__im|
|00001920| 70 5f 5f 45 78 41 6c 6c | 6f 63 61 74 65 50 6f 6f |p__ExAll|ocatePoo|
|00001930| 6c 57 69 74 68 54 61 67 | 40 31 32 00 40 49 6e 74 |lWithTag|@12.@Int|
|00001940| 65 72 6c 6f 63 6b 65 64 | 45 78 63 68 61 6e 67 65 |erlocked|Exchange|
|00001950| 40 38 00 5f 5f 69 6d 70 | 5f 5f 5a 77 57 72 69 74 |@8.__imp|__ZwWrit|
|00001960| 65 46 69 6c 65 40 33 36 | 00 5f 5f 69 6d 70 5f 5f |eFile@36|.__imp__|
|00001970| 5a 77 43 6c 6f 73 65 40 | 34 00 5f 5f 69 6d 70 5f |ZwClose@|4.__imp_|
|00001980| 5f 5a 77 43 72 65 61 74 | 65 46 69 6c 65 40 34 34 |_ZwCreat|eFile@44|
|00001990| 00 5f 5f 69 6d 70 5f 5f | 5a 77 4f 70 65 6e 46 69 |.__imp__|ZwOpenFi|
|000019a0| 6c 65 40 32 34 00 5f 57 | 61 69 74 46 6f 72 49 6f |le@24._W|aitForIo|
|000019b0| 63 74 6c 44 6f 6e 65 40 | 30 00 5f 5f 69 6d 70 5f |ctlDone@|0.__imp_|
|000019c0| 5f 4b 65 49 6e 69 74 69 | 61 6c 69 7a 65 4d 75 74 |_KeIniti|alizeMut|
|000019d0| 65 78 40 38 00 5f 61 76 | 67 4d 75 74 65 78 00 40 |ex@8._av|gMutex.@|
|000019e0| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 44 65 63 72 65 |Interloc|kedDecre|
|000019f0| 6d 65 6e 74 40 34 00 5f | 46 69 6c 65 43 61 63 68 |ment@4._|FileCach|
|00001a00| 65 43 6c 65 61 72 40 30 | 00 5f 5f 69 6d 70 5f 5f |eClear@0|.__imp__|
|00001a10| 4b 65 53 65 74 45 76 65 | 6e 74 40 31 32 00 5f 41 |KeSetEve|nt@12._A|
|00001a20| 74 74 61 63 68 49 6f 53 | 6c 6f 74 40 31 32 00 5f |ttachIoS|lot@12._|
|00001a30| 44 65 74 61 63 68 49 6f | 53 6c 6f 74 40 31 32 00 |DetachIo|Slot@12.|
|00001a40| 5f 5f 69 6d 70 5f 5f 4b | 65 52 65 6c 65 61 73 65 |__imp__K|eRelease|
|00001a50| 4d 75 74 65 78 40 38 00 | 5f 5f 69 6d 70 5f 5f 4b |Mutex@8.|__imp__K|
|00001a60| 65 57 61 69 74 46 6f 72 | 53 69 6e 67 6c 65 4f 62 |eWaitFor|SingleOb|
|00001a70| 6a 65 63 74 40 32 30 00 | 5f 45 76 65 6e 74 4c 6f |ject@20.|_EventLo|
|00001a80| 67 49 6e 66 6f 4d 65 73 | 73 61 67 65 40 34 00 40 |gInfoMes|sage@4.@|
|00001a90| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 49 6e 63 72 65 |Interloc|kedIncre|
|00001aa0| 6d 65 6e 74 40 34 00 5f | 50 73 47 65 74 43 75 72 |ment@4._|PsGetCur|
|00001ab0| 72 65 6e 74 54 68 72 65 | 61 64 49 64 40 30 00 5f |rentThre|adId@0._|
|00001ac0| 49 6e 69 74 4d 69 73 63 | 40 30 00 5f 57 72 69 74 |InitMisc|@0._Writ|
|00001ad0| 65 45 72 72 6f 72 4c 6f | 67 40 38 00 5f 44 75 6d |eErrorLo|g@8._Dum|
|00001ae0| 70 54 6f 45 72 72 6f 72 | 4c 6f 67 40 31 32 00 5f |pToError|Log@12._|
|00001af0| 45 76 65 6e 74 4c 6f 67 | 57 61 72 6e 4d 65 73 73 |EventLog|WarnMess|
|00001b00| 61 67 65 40 34 00 5f 45 | 76 65 6e 74 4c 6f 67 45 |age@4._E|ventLogE|
|00001b10| 72 72 6f 72 4d 65 73 73 | 61 67 65 40 34 00 5f 49 |rrorMess|age@4._I|
|00001b20| 73 46 69 6c 65 53 65 6c | 65 63 74 65 64 40 34 00 |sFileSel|ected@4.|
|00001b30| 5f 43 68 65 63 6b 44 72 | 69 76 65 57 69 74 68 4d |_CheckDr|iveWithM|
|00001b40| 61 73 6b 40 38 00 5f 77 | 73 74 72 6e 63 6d 70 40 |ask@8._w|strncmp@|
|00001b50| 31 32 00 5f 6d 79 73 74 | 72 6e 69 63 6d 70 40 31 |12._myst|rnicmp@1|
|00001b60| 32 00 5f 49 73 50 72 6f | 63 65 73 73 45 71 75 61 |2._IsPro|cessEqua|
|00001b70| 6c 40 34 00 5f 49 73 50 | 72 6f 63 65 73 73 4e 61 |l@4._IsP|rocessNa|
|00001b80| 6d 65 49 6e 4c 69 73 74 | 40 30 00 5f 5f 69 6d 70 |meInList|@0.__imp|
|00001b90| 5f 5f 49 6f 57 72 69 74 | 65 45 72 72 6f 72 4c 6f |__IoWrit|eErrorLo|
|00001ba0| 67 45 6e 74 72 79 40 34 | 00 5f 5f 69 6d 70 5f 5f |gEntry@4|.__imp__|
|00001bb0| 6d 65 6d 6d 6f 76 65 00 | 5f 5f 69 6d 70 5f 5f 49 |memmove.|__imp__I|
|00001bc0| 6f 41 6c 6c 6f 63 61 74 | 65 45 72 72 6f 72 4c 6f |oAllocat|eErrorLo|
|00001bd0| 67 45 6e 74 72 79 40 38 | 00 5f 5f 69 6d 70 5f 5f |gEntry@8|.__imp__|
|00001be0| 4b 65 44 65 6c 61 79 45 | 78 65 63 75 74 69 6f 6e |KeDelayE|xecution|
|00001bf0| 54 68 72 65 61 64 40 31 | 32 00 5f 5f 69 6d 70 5f |Thread@1|2.__imp_|
|00001c00| 5f 77 63 73 63 70 79 00 | 5f 5f 69 6d 70 5f 5f 5f |_wcscpy.|__imp___|
|00001c10| 77 63 73 75 70 72 00 5f | 5f 69 6d 70 5f 5f 77 63 |wcsupr._|_imp__wc|
|00001c20| 73 6e 63 70 79 00 5f 5f | 69 6d 70 5f 5f 77 63 73 |sncpy.__|imp__wcs|
|00001c30| 72 63 68 72 00 5f 5f 69 | 6d 70 5f 5f 49 6f 47 65 |rchr.__i|mp__IoGe|
|00001c40| 74 43 75 72 72 65 6e 74 | 50 72 6f 63 65 73 73 40 |tCurrent|Process@|
|00001c50| 30 00 5f 5f 65 78 63 65 | 70 74 5f 6c 69 73 74 00 |0.__exce|pt_list.|
|00001c60| 5f 5f 65 78 63 65 70 74 | 5f 68 61 6e 64 6c 65 72 |__except|_handler|
|00001c70| 33 00 5f 69 6e 69 74 69 | 61 6c 4d 65 6d 42 6c 6f |3._initi|alMemBlo|
|00001c80| 63 6b 73 00 5f 6d 61 78 | 44 65 76 43 61 63 68 65 |cks._max|DevCache|
|00001c90| 53 69 7a 65 00 5f 41 64 | 6a 75 73 74 46 69 6c 65 |Size._Ad|justFile|
|00001ca0| 4e 61 6d 65 40 38 00 5f | 43 68 65 63 6b 55 6e 69 |Name@8._|CheckUni|
|00001cb0| 63 6f 64 65 46 69 6c 65 | 4e 61 6d 65 40 38 00 5f |codeFile|Name@8._|
|00001cc0| 43 68 65 63 6b 49 66 42 | 6f 6f 74 52 65 63 6f 72 |CheckIfB|ootRecor|
|00001cd0| 64 52 65 71 75 65 73 74 | 40 38 00 5f 42 75 69 6c |dRequest|@8._Buil|
|00001ce0| 64 50 61 74 68 40 31 32 | 00 5f 47 65 74 46 69 6c |dPath@12|._GetFil|
|00001cf0| 65 4e 61 6d 65 40 31 32 | 00 5f 52 75 6e 43 6c 69 |eName@12|._RunCli|
|00001d00| 65 6e 74 54 68 72 65 61 | 64 40 34 00 5f 5f 69 6d |entThrea|d@4.__im|
|00001d10| 70 5f 5f 73 74 72 6e 63 | 6d 70 00 5f 5f 69 6d 70 |p__strnc|mp.__imp|
|00001d20| 5f 5f 77 63 73 73 74 72 | 00 5f 5f 69 6d 70 5f 5f |__wcsstr|.__imp__|
|00001d30| 77 63 73 6c 65 6e 00 5f | 44 65 76 43 61 63 68 65 |wcslen._|DevCache|
|00001d40| 46 69 6e 64 44 72 69 76 | 65 40 34 00 5f 5f 69 6d |FindDriv|e@4.__im|
|00001d50| 70 5f 5f 49 6f 47 65 74 | 52 65 6c 61 74 65 64 44 |p__IoGet|RelatedD|
|00001d60| 65 76 69 63 65 4f 62 6a | 65 63 74 40 34 00 5f 5f |eviceObj|ect@4.__|
|00001d70| 69 6d 70 5f 5f 4b 65 43 | 6c 65 61 72 45 76 65 6e |imp__KeC|learEven|
|00001d80| 74 40 34 00 5f 4d 65 6d | 43 74 72 6c 46 72 65 65 |t@4._Mem|CtrlFree|
|00001d90| 48 6f 6f 6b 49 6e 66 6f | 42 6c 6f 63 6b 40 34 00 |HookInfo|Block@4.|
|00001da0| 5f 46 6e 43 61 63 68 65 | 41 64 64 4e 61 6d 65 40 |_FnCache|AddName@|
|00001db0| 32 34 00 5f 52 65 74 75 | 72 6e 49 6f 53 6c 6f 74 |24._Retu|rnIoSlot|
|00001dc0| 40 34 00 5f 46 69 6c 65 | 43 61 63 68 65 53 65 61 |@4._File|CacheSea|
|00001dd0| 72 63 68 4f 72 41 64 64 | 40 34 00 5f 47 65 74 46 |rchOrAdd|@4._GetF|
|00001de0| 72 65 65 49 6f 53 6c 6f | 74 40 30 00 5f 46 69 6c |reeIoSlo|t@0._Fil|
|00001df0| 65 43 61 63 68 65 53 65 | 61 72 63 68 40 34 00 5f |eCacheSe|arch@4._|
|00001e00| 5f 69 6d 70 5f 5f 5f 73 | 74 72 75 70 72 00 5f 5f |_imp___s|trupr.__|
|00001e10| 69 6d 70 5f 5f 52 74 6c | 55 6e 69 63 6f 64 65 53 |imp__Rtl|UnicodeS|
|00001e20| 74 72 69 6e 67 54 6f 41 | 6e 73 69 53 74 72 69 6e |tringToA|nsiStrin|
|00001e30| 67 40 31 32 00 5f 5f 69 | 6d 70 5f 40 4f 62 66 44 |g@12.__i|mp_@ObfD|
|00001e40| 65 72 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |ereferen|ceObject|
|00001e50| 40 34 00 5f 4d 65 6d 43 | 74 72 6c 47 65 74 48 6f |@4._MemC|trlGetHo|
|00001e60| 6f 6b 49 6e 66 6f 42 6c | 6f 63 6b 40 30 00 5f 49 |okInfoBl|ock@0._I|
|00001e70| 73 4c 6f 63 61 6c 44 72 | 69 76 65 40 34 00 5f 5f |sLocalDr|ive@4.__|
|00001e80| 69 6d 70 5f 5f 4f 62 52 | 65 66 65 72 65 6e 63 65 |imp__ObR|eference|
|00001e90| 4f 62 6a 65 63 74 42 79 | 48 61 6e 64 6c 65 40 32 |ObjectBy|Handle@2|
|00001ea0| 34 00 5f 46 69 6c 65 43 | 61 63 68 65 44 65 6c 65 |4._FileC|acheDele|
|00001eb0| 74 65 40 34 00 5f 46 6e | 43 61 63 68 65 47 65 74 |te@4._Fn|CacheGet|
|00001ec0| 4e 61 6d 65 40 32 34 00 | 5f 46 6e 43 61 63 68 65 |Name@24.|_FnCache|
|00001ed0| 4d 61 72 6b 49 74 65 6d | 57 72 69 74 74 65 6e 40 |MarkItem|Written@|
|00001ee0| 38 00 5f 46 72 65 65 4c | 69 73 74 40 34 00 5f 5f |8._FreeL|ist@4.__|
|00001ef0| 69 6d 70 5f 5f 4b 65 49 | 6e 69 74 69 61 6c 69 7a |imp__KeI|nitializ|
|00001f00| 65 45 76 65 6e 74 40 31 | 32 00 5f 5f 69 6d 70 5f |eEvent@1|2.__imp_|
|00001f10| 40 45 78 52 65 6c 65 61 | 73 65 46 61 73 74 4d 75 |@ExRelea|seFastMu|
|00001f20| 74 65 78 40 34 00 5f 5f | 69 6d 70 5f 40 45 78 41 |tex@4.__|imp_@ExA|
|00001f30| 63 71 75 69 72 65 46 61 | 73 74 4d 75 74 65 78 40 |cquireFa|stMutex@|
|00001f40| 34 00 5f 4b 65 47 65 74 | 43 75 72 72 65 6e 74 49 |4._KeGet|CurrentI|
|00001f50| 72 71 6c 40 30 00 5f 49 | 73 46 69 6c 65 53 79 73 |rql@0._I|sFileSys|
|00001f60| 74 65 6d 40 34 00 5f 47 | 65 74 44 65 76 69 63 65 |tem@4._G|etDevice|
|00001f70| 4f 62 6a 65 63 74 40 34 | 00 5f 46 69 6e 64 4d 6f |Object@4|._FindMo|
|00001f80| 75 6e 74 50 6f 69 6e 74 | 40 34 00 5f 44 65 76 43 |untPoint|@4._DevC|
|00001f90| 61 63 68 65 53 68 6f 72 | 74 65 6e 4c 69 73 74 40 |acheShor|tenList@|
|00001fa0| 30 00 5f 44 65 76 43 61 | 63 68 65 41 64 64 45 6e |0._DevCa|cheAddEn|
|00001fb0| 74 72 79 40 38 00 5f 5f | 69 6d 70 5f 5f 49 6f 47 |try@8.__|imp__IoG|
|00001fc0| 65 74 44 65 76 69 63 65 | 4f 62 6a 65 63 74 50 6f |etDevice|ObjectPo|
|00001fd0| 69 6e 74 65 72 40 31 36 | 00 5f 5f 69 6d 70 5f 5f |inter@16|.__imp__|
|00001fe0| 73 74 72 6e 63 70 79 00 | 5f 5f 69 6d 70 5f 5f 49 |strncpy.|__imp__I|
|00001ff0| 6f 43 72 65 61 74 65 53 | 79 6e 63 68 72 6f 6e 69 |oCreateS|ynchroni|
|00002000| 7a 61 74 69 6f 6e 45 76 | 65 6e 74 40 38 00 5f 46 |zationEv|ent@8._F|
|00002010| 69 6c 65 43 61 63 68 65 | 47 65 74 49 6e 64 65 78 |ileCache|GetIndex|
|00002020| 40 34 00 5f 46 69 6c 65 | 43 61 63 68 65 53 68 6f |@4._File|CacheSho|
|00002030| 72 74 65 6e 4c 69 73 74 | 40 30 00 5f 49 6f 43 72 |rtenList|@0._IoCr|
|00002040| 65 61 74 65 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |eateSymb|olicLink|
|00002050| 40 38 00 5f 5f 49 4d 50 | 4f 52 54 5f 44 45 53 43 |@8.__IMP|ORT_DESC|
|00002060| 52 49 50 54 4f 52 5f 6e | 74 6f 73 6b 72 6e 6c 00 |RIPTOR_n|toskrnl.|
|00002070| 5f 49 6f 43 72 65 61 74 | 65 44 65 76 69 63 65 40 |_IoCreat|eDevice@|
|00002080| 32 38 00 5f 52 74 6c 49 | 6e 69 74 55 6e 69 63 6f |28._RtlI|nitUnico|
|00002090| 64 65 53 74 72 69 6e 67 | 40 38 00 40 49 6f 66 43 |deString|@8.@IofC|
|000020a0| 6f 6d 70 6c 65 74 65 52 | 65 71 75 65 73 74 40 38 |ompleteR|equest@8|
|000020b0| 00 5f 4d 6d 4d 61 70 4c | 6f 63 6b 65 64 50 61 67 |._MmMapL|ockedPag|
|000020c0| 65 73 40 38 00 5f 5f 69 | 6d 70 5f 5f 50 73 47 65 |es@8.__i|mp__PsGe|
|000020d0| 74 43 75 72 72 65 6e 74 | 50 72 6f 63 65 73 73 49 |tCurrent|ProcessI|
|000020e0| 64 40 30 00 5f 49 6f 44 | 65 6c 65 74 65 44 65 76 |d@0._IoD|eleteDev|
|000020f0| 69 63 65 40 34 00 5f 49 | 6f 44 65 6c 65 74 65 53 |ice@4._I|oDeleteS|
|00002100| 79 6d 62 6f 6c 69 63 4c | 69 6e 6b 40 34 00 5f 52 |ymbolicL|ink@4._R|
|00002110| 74 6c 51 75 65 72 79 52 | 65 67 69 73 74 72 79 56 |tlQueryR|egistryV|
|00002120| 61 6c 75 65 73 40 32 30 | 00 5f 4d 6d 42 75 69 6c |alues@20|._MmBuil|
|00002130| 64 4d 64 6c 46 6f 72 4e | 6f 6e 50 61 67 65 64 50 |dMdlForN|onPagedP|
|00002140| 6f 6f 6c 40 34 00 5f 4d | 6d 43 72 65 61 74 65 4d |ool@4._M|mCreateM|
|00002150| 64 6c 40 31 32 00 5f 4b | 65 53 65 72 76 69 63 65 |dl@12._K|eService|
|00002160| 44 65 73 63 72 69 70 74 | 6f 72 54 61 62 6c 65 00 |Descript|orTable.|
|00002170| 5f 4d 6d 55 6e 6d 61 70 | 4c 6f 63 6b 65 64 50 61 |_MmUnmap|LockedPa|
|00002180| 67 65 73 40 38 00 5f 4b | 65 49 6e 69 74 69 61 6c |ges@8._K|eInitial|
|00002190| 69 7a 65 53 70 69 6e 4c | 6f 63 6b 40 34 00 5f 5f |izeSpinL|ock@4.__|
|000021a0| 69 6d 70 5f 5f 4e 74 42 | 75 69 6c 64 4e 75 6d 62 |imp__NtB|uildNumb|
|000021b0| 65 72 00 5f 45 78 46 72 | 65 65 50 6f 6f 6c 40 34 |er._ExFr|eePool@4|
|000021c0| 00 5f 5f 69 6d 70 5f 40 | 49 6e 74 65 72 6c 6f 63 |.__imp_@|Interloc|
|000021d0| 6b 65 64 43 6f 6d 70 61 | 72 65 45 78 63 68 61 6e |kedCompa|reExchan|
|000021e0| 67 65 40 31 32 00 5f 45 | 78 41 6c 6c 6f 63 61 74 |ge@12._E|xAllocat|
|000021f0| 65 50 6f 6f 6c 57 69 74 | 68 54 61 67 40 31 32 00 |ePoolWit|hTag@12.|
|00002200| 5f 5f 69 6d 70 5f 40 49 | 6e 74 65 72 6c 6f 63 6b |__imp_@I|nterlock|
|00002210| 65 64 45 78 63 68 61 6e | 67 65 40 38 00 5f 5a 77 |edExchan|ge@8._Zw|
|00002220| 57 72 69 74 65 46 69 6c | 65 40 33 36 00 5f 5a 77 |WriteFil|e@36._Zw|
|00002230| 43 6c 6f 73 65 40 34 00 | 5f 5a 77 43 72 65 61 74 |Close@4.|_ZwCreat|
|00002240| 65 46 69 6c 65 40 34 34 | 00 5f 5a 77 4f 70 65 6e |eFile@44|._ZwOpen|
|00002250| 46 69 6c 65 40 32 34 00 | 5f 4b 65 49 6e 69 74 69 |File@24.|_KeIniti|
|00002260| 61 6c 69 7a 65 4d 75 74 | 65 78 40 38 00 5f 5f 69 |alizeMut|ex@8.__i|
|00002270| 6d 70 5f 40 49 6e 74 65 | 72 6c 6f 63 6b 65 64 44 |mp_@Inte|rlockedD|
|00002280| 65 63 72 65 6d 65 6e 74 | 40 34 00 5f 4b 65 53 65 |ecrement|@4._KeSe|
|00002290| 74 45 76 65 6e 74 40 31 | 32 00 5f 4b 65 52 65 6c |tEvent@1|2._KeRel|
|000022a0| 65 61 73 65 4d 75 74 65 | 78 40 38 00 5f 4b 65 57 |easeMute|x@8._KeW|
|000022b0| 61 69 74 46 6f 72 53 69 | 6e 67 6c 65 4f 62 6a 65 |aitForSi|ngleObje|
|000022c0| 63 74 40 32 30 00 5f 5f | 69 6d 70 5f 40 49 6e 74 |ct@20.__|imp_@Int|
|000022d0| 65 72 6c 6f 63 6b 65 64 | 49 6e 63 72 65 6d 65 6e |erlocked|Incremen|
|000022e0| 74 40 34 00 5f 5f 69 6d | 70 5f 5f 50 73 47 65 74 |t@4.__im|p__PsGet|
|000022f0| 43 75 72 72 65 6e 74 54 | 68 72 65 61 64 49 64 40 |CurrentT|hreadId@|
|00002300| 30 00 5f 49 6f 57 72 69 | 74 65 45 72 72 6f 72 4c |0._IoWri|teErrorL|
|00002310| 6f 67 45 6e 74 72 79 40 | 34 00 5f 49 6f 41 6c 6c |ogEntry@|4._IoAll|
|00002320| 6f 63 61 74 65 45 72 72 | 6f 72 4c 6f 67 45 6e 74 |ocateErr|orLogEnt|
|00002330| 72 79 40 38 00 5f 4b 65 | 44 65 6c 61 79 45 78 65 |ry@8._Ke|DelayExe|
|00002340| 63 75 74 69 6f 6e 54 68 | 72 65 61 64 40 31 32 00 |cutionTh|read@12.|
|00002350| 5f 49 6f 47 65 74 43 75 | 72 72 65 6e 74 50 72 6f |_IoGetCu|rrentPro|
|00002360| 63 65 73 73 40 30 00 5f | 52 74 6c 55 6e 77 69 6e |cess@0._|RtlUnwin|
|00002370| 64 40 31 36 00 5f 5f 67 | 6c 6f 62 61 6c 5f 75 6e |d@16.__g|lobal_un|
|00002380| 77 69 6e 64 32 00 5f 5f | 6c 6f 63 61 6c 5f 75 6e |wind2.__|local_un|
|00002390| 77 69 6e 64 32 00 5f 5f | 61 62 6e 6f 72 6d 61 6c |wind2.__|abnormal|
|000023a0| 5f 74 65 72 6d 69 6e 61 | 74 69 6f 6e 00 5f 5f 73 |_termina|tion.__s|
|000023b0| 65 68 5f 6c 6f 6e 67 6a | 6d 70 5f 75 6e 77 69 6e |eh_longj|mp_unwin|
|000023c0| 64 40 34 00 5f 49 6f 47 | 65 74 52 65 6c 61 74 65 |d@4._IoG|etRelate|
|000023d0| 64 44 65 76 69 63 65 4f | 62 6a 65 63 74 40 34 00 |dDeviceO|bject@4.|
|000023e0| 5f 4b 65 43 6c 65 61 72 | 45 76 65 6e 74 40 34 00 |_KeClear|Event@4.|
|000023f0| 5f 52 74 6c 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |_RtlUnic|odeStrin|
|00002400| 67 54 6f 41 6e 73 69 53 | 74 72 69 6e 67 40 31 32 |gToAnsiS|tring@12|
|00002410| 00 40 4f 62 66 44 65 72 | 65 66 65 72 65 6e 63 65 |.@ObfDer|eference|
|00002420| 4f 62 6a 65 63 74 40 34 | 00 5f 4f 62 52 65 66 65 |Object@4|._ObRefe|
|00002430| 72 65 6e 63 65 4f 62 6a | 65 63 74 42 79 48 61 6e |renceObj|ectByHan|
|00002440| 64 6c 65 40 32 34 00 5f | 4b 65 49 6e 69 74 69 61 |dle@24._|KeInitia|
|00002450| 6c 69 7a 65 45 76 65 6e | 74 40 31 32 00 5f 49 6f |lizeEven|t@12._Io|
|00002460| 47 65 74 44 65 76 69 63 | 65 4f 62 6a 65 63 74 50 |GetDevic|eObjectP|
|00002470| 6f 69 6e 74 65 72 40 31 | 36 00 5f 49 6f 43 72 65 |ointer@1|6._IoCre|
|00002480| 61 74 65 53 79 6e 63 68 | 72 6f 6e 69 7a 61 74 69 |ateSynch|ronizati|
|00002490| 6f 6e 45 76 65 6e 74 40 | 38 00 5f 5f 4e 55 4c 4c |onEvent@|8.__NULL|
|000024a0| 5f 49 4d 50 4f 52 54 5f | 44 45 53 43 52 49 50 54 |_IMPORT_|DESCRIPT|
|000024b0| 4f 52 00 7f 6e 74 6f 73 | 6b 72 6e 6c 5f 4e 55 4c |OR..ntos|krnl_NUL|
|000024c0| 4c 5f 54 48 55 4e 4b 5f | 44 41 54 41 00 5f 5f 69 |L_THUNK_|DATA.__i|
|000024d0| 6d 70 5f 5f 52 74 6c 55 | 6e 77 69 6e 64 40 31 36 |mp__RtlU|nwind@16|
|000024e0| 00 40 4b 66 52 65 6c 65 | 61 73 65 53 70 69 6e 4c |.@KfRele|aseSpinL|
|000024f0| 6f 63 6b 40 38 00 5f 5f | 49 4d 50 4f 52 54 5f 44 |ock@8.__|IMPORT_D|
|00002500| 45 53 43 52 49 50 54 4f | 52 5f 48 41 4c 00 40 4b |ESCRIPTO|R_HAL.@K|
|00002510| 66 41 63 71 75 69 72 65 | 53 70 69 6e 4c 6f 63 6b |fAcquire|SpinLock|
|00002520| 40 34 00 40 45 78 52 65 | 6c 65 61 73 65 46 61 73 |@4.@ExRe|leaseFas|
|00002530| 74 4d 75 74 65 78 40 34 | 00 40 45 78 41 63 71 75 |tMutex@4|.@ExAcqu|
|00002540| 69 72 65 46 61 73 74 4d | 75 74 65 78 40 34 00 5f |ireFastM|utex@4._|
|00002550| 5f 69 6d 70 5f 5f 4b 65 | 47 65 74 43 75 72 72 65 |_imp__Ke|GetCurre|
|00002560| 6e 74 49 72 71 6c 40 30 | 00 7f 48 41 4c 5f 4e 55 |ntIrql@0|..HAL_NU|
|00002570| 4c 4c 5f 54 48 55 4e 4b | 5f 44 41 54 41 00 5f 66 |LL_THUNK|_DATA._f|
|00002580| 46 69 6c 65 43 61 63 68 | 65 49 6e 69 74 69 61 6c |FileCach|eInitial|
|00002590| 69 7a 65 64 00 5f 66 69 | 6c 65 43 61 63 68 65 46 |ized._fi|leCacheF|
|000025a0| 72 65 65 00 5f 66 69 6c | 65 43 61 63 68 65 00 5f |ree._fil|eCache._|
|000025b0| 66 69 6c 65 43 61 63 68 | 65 4d 75 74 65 78 00 5f |fileCach|eMutex._|
|000025c0| 69 6f 53 6c 6f 74 73 49 | 6e 69 74 69 61 6c 69 7a |ioSlotsI|nitializ|
|000025d0| 65 64 00 5f 61 74 74 61 | 63 68 65 64 49 6f 53 6c |ed._atta|chedIoSl|
|000025e0| 6f 74 4c 69 73 74 00 5f | 66 72 65 65 49 6f 53 6c |otList._|freeIoSl|
|000025f0| 6f 74 4c 69 73 74 00 5f | 63 6c 69 65 6e 74 45 76 |otList._|clientEv|
|00002600| 65 6e 74 4e 61 6d 65 00 | 5f 69 6f 53 6c 6f 74 4d |entName.|_ioSlotM|
|00002610| 75 74 65 78 00 5f 66 6e | 43 61 63 68 65 49 6e 69 |utex._fn|CacheIni|
|00002620| 74 69 61 6c 69 7a 65 64 | 00 5f 66 6e 43 61 63 68 |tialized|._fnCach|
|00002630| 65 46 72 65 65 00 5f 66 | 6e 43 61 63 68 65 4d 75 |eFree._f|nCacheMu|
|00002640| 74 65 78 00 5f 66 44 65 | 76 43 61 63 68 65 49 6e |tex._fDe|vCacheIn|
|00002650| 69 74 69 61 6c 69 7a 65 | 64 00 5f 64 65 76 4c 69 |itialize|d._devLi|
|00002660| 73 74 46 72 65 65 00 5f | 64 65 76 4c 69 73 74 53 |stFree._|devListS|
|00002670| 74 61 72 74 00 5f 64 65 | 76 43 61 63 68 65 4d 75 |tart._de|vCacheMu|
|00002680| 74 65 78 00 5f 66 4d 65 | 6d 43 74 72 6c 49 6e 69 |tex._fMe|mCtrlIni|
|00002690| 74 69 61 6c 69 7a 65 64 | 00 5f 66 72 65 65 48 6f |tialized|._freeHo|
|000026a0| 6f 6b 49 6e 66 6f 4c 69 | 73 74 00 5f 6d 65 6d 43 |okInfoLi|st._memC|
|000026b0| 74 72 6c 4d 75 74 65 78 | 00 5f 73 65 71 75 65 6e |trlMutex|._sequen|
|000026c0| 63 65 00 5f 68 6f 6f 6b | 73 49 6e 55 73 65 00 5f |ce._hook|sInUse._|
|000026d0| 70 72 6f 63 65 73 73 4e | 61 6d 65 4f 66 66 73 65 |processN|ameOffse|
|000026e0| 74 00 5f 43 6f 75 6e 74 | 4d 75 74 65 78 00 5f 69 |t._Count|Mutex._i|
|000026f0| 6f 63 74 6c 49 6e 55 73 | 65 00 5f 4e 74 57 72 69 |octlInUs|e._NtWri|
|00002700| 74 65 46 69 6c 65 49 44 | 00 5f 4e 74 43 6c 6f 73 |teFileID|._NtClos|
|00002710| 65 49 44 00 5f 4e 74 43 | 72 65 61 74 65 46 69 6c |eID._NtC|reateFil|
|00002720| 65 49 44 00 5f 4e 74 4f | 70 65 6e 46 69 6c 65 49 |eID._NtO|penFileI|
|00002730| 44 00 5f 67 6c 6f 62 61 | 6c 4d 64 6c 00 5f 4b 65 |D._globa|lMdl._Ke|
|00002740| 53 65 72 76 69 63 65 54 | 61 62 6c 65 50 6f 69 6e |ServiceT|ablePoin|
|00002750| 74 65 72 73 00 5f 41 56 | 47 5f 44 69 73 70 61 74 |ters._AV|G_Dispat|
|00002760| 63 68 40 38 00 5f 64 65 | 76 69 63 65 5f 69 6f 63 |ch@8._de|vice_ioc|
|00002770| 74 6c 40 38 00 5f 41 56 | 47 5f 55 6e 6c 6f 61 64 |tl@8._AV|G_Unload|
|00002780| 40 34 00 5f 6c 68 5f 63 | 6f 6e 74 69 6e 75 65 00 |@4._lh_c|ontinue.|
|00002790| 5f 6c 68 5f 64 69 73 6d | 69 73 73 00 5f 6c 68 5f |_lh_dism|iss._lh_|
|000027a0| 72 65 74 75 72 6e 00 5f | 6c 68 5f 62 61 67 69 74 |return._|lh_bagit|
|000027b0| 00 5f 6c 68 5f 75 6e 77 | 69 6e 64 69 6e 67 00 5f |._lh_unw|inding._|
|000027c0| 67 75 5f 72 65 74 75 72 | 6e 00 5f 5f 75 6e 77 69 |gu_retur|n.__unwi|
|000027d0| 6e 64 5f 68 61 6e 64 6c | 65 72 00 5f 75 68 5f 72 |nd_handl|er._uh_r|
|000027e0| 65 74 75 72 6e 00 5f 6c | 75 5f 63 6f 6e 74 69 6e |eturn._l|u_contin|
|000027f0| 75 65 00                |                         |ue.     |        |
+--------+-------------------------+-------------------------+--------+--------+