Chip 2002 October

home *** CD-ROM | disk | FTP | other *** search
/ Chip 2002 October / Chip_2002-10_cd1.bin / servis / avupdate / antivir / avwinsfx.exe / disk_1 / AVGNTDD.SYS / COFF_SYMBOLS next >
Unknown | 2002-02-08 | 8.7 KB
view JSON data |
view as text |
open on a Mac |
open on a PC

This file was not able to be converted.
This format is not currently supported by dexvert.
Confidence	Program	Detection	Match Type	Support
`100%`	file	data	default
hex view
+--------+-------------------------+-------------------------+--------+--------+
|00000000| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00000010| 03 00 40 63 6f 6d 70 2e | 69 64 00 00 00 00 ff ff |..@comp.|id......|
|00000020| 00 00 03 00 00 00 00 00 | 61 10 00 00 bc 40 00 00 |........|a....@..|
|00000030| 02 00 00 00 03 00 00 00 | 00 00 78 10 00 00 b8 38 |........|..x....8|
|00000040| 00 00 02 00 00 00 03 00 | 00 00 00 00 87 10 00 00 |........|........|
|00000050| bc 38 00 00 02 00 00 00 | 03 00 00 00 00 00 92 10 |.8......|........|
|00000060| 00 00 98 38 00 00 02 00 | 00 00 03 00 40 63 6f 6d |...8....|....@com|
|00000070| 70 2e 69 64 00 00 00 00 | ff ff 00 00 03 00 00 00 |p.id....|........|
|00000080| 00 00 a2 10 00 00 94 38 | 00 00 02 00 00 00 03 00 |.......8|........|
|00000090| 00 00 00 00 b6 10 00 00 | 90 38 00 00 02 00 00 00 |........|.8......|
|000000a0| 03 00 00 00 00 00 ca 10 | 00 00 68 38 00 00 02 00 |........|..h8....|
|000000b0| 00 00 03 00 24 53 47 36 | 34 38 34 00 16 28 00 00 |....$SG6|484..(..|
|000000c0| 01 00 00 00 03 00 00 00 | 00 00 da 10 00 00 18 38 |........|.......8|
|000000d0| 00 00 02 00 00 00 03 00 | 00 00 00 00 eb 10 00 00 |........|........|
|000000e0| 70 38 00 00 02 00 00 00 | 03 00 40 63 6f 6d 70 2e |p8......|..@comp.|
|000000f0| 69 64 00 00 00 00 ff ff | 00 00 03 00 00 00 00 00 |id......|........|
|00000100| f8 10 00 00 14 38 00 00 | 02 00 00 00 03 00 00 00 |.....8..|........|
|00000110| 00 00 0c 11 00 00 10 38 | 00 00 02 00 00 00 03 00 |.......8|........|
|00000120| 5f 66 6e 43 61 63 68 65 | f0 2f 00 00 02 00 00 00 |_fnCache|./......|
|00000130| 03 00 00 00 00 00 19 11 | 00 00 f0 37 00 00 02 00 |........|...7....|
|00000140| 00 00 03 00 40 63 6f 6d | 70 2e 69 64 00 00 00 00 |....@com|p.id....|
|00000150| ff ff 00 00 03 00 00 00 | 00 00 27 11 00 00 e8 2f |........|..'..../|
|00000160| 00 00 02 00 00 00 03 00 | 00 00 00 00 3d 11 00 00 |........|....=...|
|00000170| e4 2f 00 00 02 00 00 00 | 03 00 00 00 00 00 4a 11 |./......|......J.|
|00000180| 00 00 e0 2f 00 00 02 00 | 00 00 03 00 00 00 00 00 |.../....|........|
|00000190| 58 11 00 00 c0 2f 00 00 | 02 00 00 00 03 00 24 53 |X..../..|......$S|
|000001a0| 47 36 35 32 36 00 d2 23 | 00 00 01 00 00 00 03 00 |G6526..#|........|
|000001b0| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|000001c0| 03 00 00 00 00 00 67 11 | 00 00 bc 2f 00 00 02 00 |......g.|.../....|
|000001d0| 00 00 03 00 00 00 00 00 | 7c 11 00 00 b8 2f 00 00 |........||..../..|
|000001e0| 02 00 00 00 03 00 00 00 | 00 00 8e 11 00 00 98 2f |........|......./|
|000001f0| 00 00 02 00 00 00 03 00 | 40 63 6f 6d 70 2e 69 64 |........|@comp.id|
|00000200| 00 00 00 00 ff ff 00 00 | 03 00 00 00 00 00 9c 11 |........|........|
|00000210| 00 00 94 2f 00 00 02 00 | 00 00 03 00 00 00 00 00 |.../....|........|
|00000220| a6 11 00 00 90 2f 00 00 | 02 00 00 00 03 00 24 53 |...../..|......$S|
|00000230| 47 31 30 39 36 30 d6 12 | 00 00 01 00 00 00 03 00 |G10960..|........|
|00000240| 24 53 47 31 30 39 35 37 | ce 12 00 00 01 00 00 00 |$SG10957|........|
|00000250| 03 00 24 53 47 31 30 39 | 35 34 c2 12 00 00 01 00 |..$SG109|54......|
|00000260| 00 00 03 00 24 53 47 31 | 30 39 37 32 6e 13 00 00 |....$SG1|0972n...|
|00000270| 01 00 00 00 03 00 24 53 | 47 31 31 31 30 33 1a 16 |......$S|G11103..|
|00000280| 00 00 01 00 00 00 03 00 | 24 53 47 31 31 31 30 32 |........|$SG11102|
|00000290| fe 15 00 00 01 00 00 00 | 03 00 24 53 47 31 31 31 |........|..$SG111|
|000002a0| 30 31 e2 15 00 00 01 00 | 00 00 03 00 24 53 47 31 |01......|....$SG1|
|000002b0| 31 31 30 30 ce 15 00 00 | 01 00 00 00 03 00 24 53 |1100....|......$S|
|000002c0| 47 31 31 30 39 39 b2 15 | 00 00 01 00 00 00 03 00 |G11099..|........|
|000002d0| 24 53 47 31 31 32 30 38 | e0 1a 00 00 01 00 00 00 |$SG11208|........|
|000002e0| 03 00 24 53 47 31 31 32 | 30 37 c4 1a 00 00 01 00 |..$SG112|07......|
|000002f0| 00 00 03 00 24 53 47 31 | 31 32 30 36 a8 1a 00 00 |....$SG1|1206....|
|00000300| 01 00 00 00 03 00 24 53 | 47 31 31 32 30 35 94 1a |......$S|G11205..|
|00000310| 00 00 01 00 00 00 03 00 | 24 53 47 31 31 32 30 34 |........|$SG11204|
|00000320| 78 1a 00 00 01 00 00 00 | 03 00 40 63 6f 6d 70 2e |x.......|..@comp.|
|00000330| 69 64 00 00 00 00 ff ff | 00 00 03 00 40 63 6f 6d |id......|....@com|
|00000340| 70 2e 69 64 00 00 00 00 | ff ff 00 00 03 00 00 00 |p.id....|........|
|00000350| 00 00 b2 11 00 00 80 2f | 00 00 02 00 00 00 03 00 |......./|........|
|00000360| 00 00 00 00 c5 11 00 00 | 7c 2f 00 00 02 00 00 00 |........||/......|
|00000370| 03 00 24 53 47 36 36 31 | 37 00 86 12 00 00 01 00 |..$SG661|7.......|
|00000380| 00 00 03 00 40 63 6f 6d | 70 2e 69 64 00 00 00 00 |....@com|p.id....|
|00000390| ff ff 00 00 03 00 00 00 | 00 00 d1 11 00 00 78 2f |........|......x/|
|000003a0| 00 00 02 00 00 00 03 00 | 24 53 47 36 35 37 33 00 |........|$SG6573.|
|000003b0| 3e 0b 00 00 01 00 00 00 | 03 00 24 53 47 36 35 35 |>.......|..$SG655|
|000003c0| 30 00 ee 0a 00 00 01 00 | 00 00 03 00 24 53 47 36 |0.......|....$SG6|
|000003d0| 35 35 32 00 16 0b 00 00 | 01 00 00 00 03 00 40 63 |552.....|......@c|
|000003e0| 6f 6d 70 2e 69 64 00 00 | 00 00 ff ff 00 00 03 00 |omp.id..|........|
|000003f0| 00 00 00 00 dd 11 00 00 | 4c 2f 00 00 02 00 00 00 |........|L/......|
|00000400| 03 00 00 00 00 00 ec 11 | 00 00 48 2f 00 00 02 00 |........|..H/....|
|00000410| 00 00 03 00 00 00 00 00 | f7 11 00 00 44 2f 00 00 |........|....D/..|
|00000420| 02 00 00 00 03 00 00 00 | 00 00 07 12 00 00 40 2f |........|......@/|
|00000430| 00 00 02 00 00 00 03 00 | 00 00 00 00 15 12 00 00 |........|........|
|00000440| 74 2f 00 00 02 00 00 00 | 03 00 00 00 00 00 20 12 |t/......|...... .|
|00000450| 00 00 70 2f 00 00 02 00 | 00 00 03 00 40 63 6f 6d |..p/....|....@com|
|00000460| 70 2e 69 64 00 00 00 00 | ff ff 00 00 03 00 24 53 |p.id....|......$S|
|00000470| 47 36 35 32 37 00 f0 03 | 00 00 01 00 00 00 03 00 |G6527...|........|
|00000480| 24 53 47 36 35 32 34 00 | d0 03 00 00 01 00 00 00 |$SG6524.|........|
|00000490| 03 00 00 00 00 00 38 12 | 00 00 1c 05 00 00 01 00 |......8.|........|
|000004a0| 20 00 03 00 00 00 00 00 | 48 12 00 00 2c 05 00 00 | .......|H...,...|
|000004b0| 01 00 20 00 03 00 00 00 | 00 00 58 12 00 00 2e 06 |.. .....|..X.....|
|000004c0| 00 00 01 00 20 00 03 00 | 24 53 47 36 35 31 32 00 |.... ...|$SG6512.|
|000004d0| 06 06 00 00 01 00 00 00 | 03 00 24 53 47 36 35 34 |........|..$SG654|
|000004e0| 32 00 5a 07 00 00 01 00 | 00 00 03 00 24 53 47 36 |2.Z.....|....$SG6|
|000004f0| 35 34 30 00 36 07 00 00 | 01 00 00 00 03 00 24 53 |540.6...|......$S|
|00000500| 47 36 35 33 39 00 12 07 | 00 00 01 00 00 00 03 00 |G6539...|........|
|00000510| 24 53 47 36 35 34 36 00 | 7a 07 00 00 01 00 00 00 |$SG6546.|z.......|
|00000520| 03 00 24 53 47 36 35 33 | 38 00 ea 06 00 00 01 00 |..$SG653|8.......|
|00000530| 00 00 03 00 40 63 6f 6d | 70 2e 69 64 00 00 00 00 |....@com|p.id....|
|00000540| ff ff 00 00 03 00 24 52 | 30 30 30 30 30 30 e0 55 |......$R|000000.U|
|00000550| 00 00 04 00 00 00 03 00 | 24 52 30 30 30 33 39 30 |........|$R000390|
|00000560| 70 59 00 00 04 00 00 00 | 03 00 2e 74 65 78 74 00 |pY......|...text.|
|00000570| 00 00 e0 2e 00 00 01 00 | 00 00 03 01 34 00 00 00 |........|....4...|
|00000580| 00 00 13 00 00 00 00 00 | 00 00 00 00 00 00 68 61 |........|......ha|
|00000590| 72 64 00 00 00 00 f9 2e | 00 00 01 00 00 00 03 00 |rd......|........|
|000005a0| 2e 69 64 61 74 61 24 36 | bc 54 00 00 03 00 00 00 |.idata$6|.T......|
|000005b0| 03 00 2e 69 64 61 74 61 | 24 36 32 55 00 00 03 00 |...idata|$62U....|
|000005c0| 00 00 03 00 68 65 61 64 | 65 72 00 00 00 00 00 00 |....head|er......|
|000005d0| fe ff 00 00 02 00 00 00 | 00 00 32 10 00 00 80 02 |........|..2.....|
|000005e0| 00 00 01 00 00 00 02 00 | 00 00 00 00 72 0a 00 00 |........|....r...|
|000005f0| 84 02 00 00 01 00 00 00 | 02 00 00 00 00 00 56 0a |........|......V.|
|00000600| 00 00 88 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000610| d1 03 00 00 8c 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000620| 00 00 6f 03 00 00 90 02 | 00 00 01 00 00 00 02 00 |..o.....|........|
|00000630| 00 00 00 00 4c 10 00 00 | 94 02 00 00 01 00 00 00 |....L...|........|
|00000640| 02 00 00 00 00 00 4c 01 | 00 00 98 02 00 00 01 00 |......L.|........|
|00000650| 00 00 02 00 00 00 00 00 | e5 01 00 00 9c 02 00 00 |........|........|
|00000660| 01 00 00 00 02 00 00 00 | 00 00 2c 02 00 00 a0 02 |........|..,.....|
|00000670| 00 00 01 00 00 00 02 00 | 00 00 00 00 fa 02 00 00 |........|........|
|00000680| a4 02 00 00 01 00 00 00 | 02 00 00 00 00 00 1d 03 |........|........|
|00000690| 00 00 a8 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|000006a0| 33 03 00 00 ac 02 00 00 | 01 00 00 00 02 00 00 00 |3.......|........|
|000006b0| 00 00 b0 0c 00 00 ac 02 | 00 00 01 00 00 00 02 00 |........|........|
|000006c0| 00 00 00 00 53 03 00 00 | b0 02 00 00 01 00 00 00 |....S...|........|
|000006d0| 02 00 00 00 00 00 ec 03 | 00 00 b4 02 00 00 01 00 |........|........|
|000006e0| 00 00 02 00 00 00 00 00 | 1b 04 00 00 b8 02 00 00 |........|........|
|000006f0| 01 00 00 00 02 00 00 00 | 00 00 f8 0c 00 00 b8 02 |........|........|
|00000700| 00 00 01 00 00 00 02 00 | 00 00 00 00 07 0d 00 00 |........|........|
|00000710| bc 02 00 00 01 00 00 00 | 02 00 00 00 00 00 2c 0d |........|......,.|
|00000720| 00 00 c0 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000730| a2 04 00 00 c4 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|00000740| 00 00 b8 04 00 00 c8 02 | 00 00 01 00 00 00 02 00 |........|........|
|00000750| 00 00 00 00 c9 04 00 00 | cc 02 00 00 01 00 00 00 |........|........|
|00000760| 02 00 00 00 00 00 e0 04 | 00 00 d0 02 00 00 01 00 |........|........|
|00000770| 00 00 02 00 00 00 00 00 | 09 05 00 00 d4 02 00 00 |........|........|
|00000780| 01 00 00 00 02 00 00 00 | 00 00 99 0d 00 00 d8 02 |........|........|
|00000790| 00 00 01 00 00 00 02 00 | 00 00 00 00 58 05 00 00 |........|....X...|
|000007a0| dc 02 00 00 01 00 00 00 | 02 00 00 00 00 00 8f 05 |........|........|
|000007b0| 00 00 e0 02 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|000007c0| a7 05 00 00 e4 02 00 00 | 01 00 00 00 02 00 00 00 |........|........|
|000007d0| 00 00 f2 0d 00 00 e8 02 | 00 00 01 00 00 00 02 00 |........|........|
|000007e0| 00 00 00 00 10 0e 00 00 | ec 02 00 00 01 00 00 00 |........|........|
|000007f0| 02 00 00 00 00 00 c3 06 | 00 00 f0 02 00 00 01 00 |........|........|
|00000800| 00 00 02 00 00 00 00 00 | 1f 0c 00 00 f4 02 00 00 |........|........|
|00000810| 01 00 00 00 02 00 00 00 | 00 00 cd 01 00 00 f8 02 |........|........|
|00000820| 00 00 01 00 00 00 02 00 | 00 00 00 00 11 07 00 00 |........|........|
|00000830| fc 02 00 00 01 00 00 00 | 02 00 00 00 00 00 32 07 |........|......2.|
|00000840| 00 00 00 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000850| 41 07 00 00 04 03 00 00 | 01 00 00 00 02 00 00 00 |A.......|........|
|00000860| 00 00 50 07 00 00 08 03 | 00 00 01 00 00 00 02 00 |..P.....|........|
|00000870| 00 00 00 00 5e 07 00 00 | 0c 03 00 00 01 00 00 00 |....^...|........|
|00000880| 02 00 00 00 00 00 6d 07 | 00 00 10 03 00 00 01 00 |......m.|........|
|00000890| 00 00 02 00 00 00 00 00 | 24 08 00 00 14 03 00 00 |........|$.......|
|000008a0| 01 00 00 00 02 00 00 00 | 00 00 33 08 00 00 18 03 |........|..3.....|
|000008b0| 00 00 01 00 00 00 02 00 | 00 00 00 00 56 08 00 00 |........|....V...|
|000008c0| 1c 03 00 00 01 00 00 00 | 02 00 00 00 00 00 78 08 |........|......x.|
|000008d0| 00 00 20 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |.. .....|........|
|000008e0| 09 09 00 00 24 03 00 00 | 01 00 00 00 02 00 00 00 |....$...|........|
|000008f0| 00 00 18 09 00 00 28 03 | 00 00 01 00 00 00 02 00 |......(.|........|
|00000900| 00 00 00 00 3f 09 00 00 | 2c 03 00 00 01 00 00 00 |....?...|,.......|
|00000910| 02 00 00 00 00 00 4d 09 | 00 00 30 03 00 00 01 00 |......M.|..0.....|
|00000920| 00 00 02 00 00 00 00 00 | 96 09 00 00 34 03 00 00 |........|....4...|
|00000930| 01 00 00 00 02 00 00 00 | 00 00 06 0a 00 00 38 03 |........|......8.|
|00000940| 00 00 01 00 00 00 02 00 | 00 00 00 00 1a 0a 00 00 |........|........|
|00000950| 3c 03 00 00 01 00 00 00 | 02 00 00 00 00 00 3a 0a |<.......|......:.|
|00000960| 00 00 40 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..@.....|........|
|00000970| 02 0b 00 00 44 03 00 00 | 01 00 00 00 02 00 00 00 |....D...|........|
|00000980| 00 00 25 0b 00 00 48 03 | 00 00 01 00 00 00 02 00 |..%...H.|........|
|00000990| 00 00 00 00 33 0b 00 00 | 4c 03 00 00 01 00 00 00 |....3...|L.......|
|000009a0| 02 00 00 00 00 00 42 0b | 00 00 50 03 00 00 01 00 |......B.|..P.....|
|000009b0| 00 00 02 00 00 00 00 00 | 17 01 00 00 54 03 00 00 |........|....T...|
|000009c0| 01 00 00 00 02 00 00 00 | 00 00 f9 00 00 00 58 03 |........|......X.|
|000009d0| 00 00 01 00 00 00 02 00 | 00 00 00 00 d4 00 00 00 |........|........|
|000009e0| 5c 03 00 00 01 00 00 00 | 02 00 00 00 00 00 b6 00 |\.......|........|
|000009f0| 00 00 60 03 00 00 01 00 | 00 00 02 00 00 00 00 00 |..`.....|........|
|00000a00| e1 06 00 00 64 03 00 00 | 01 00 00 00 02 00 00 00 |....d...|........|
|00000a10| 00 00 f0 06 00 00 68 03 | 00 00 01 00 00 00 02 00 |......h.|........|
|00000a20| 00 00 00 00 aa 0f 00 00 | 6c 03 00 00 01 00 00 00 |........|l.......|
|00000a30| 02 00 00 00 00 00 04 00 | 00 00 18 04 00 00 01 00 |........|........|
|00000a40| 20 00 02 00 00 00 00 00 | 13 00 00 00 8a 07 00 00 | .......|........|
|00000a50| 01 00 20 00 02 00 00 00 | 00 00 98 02 00 00 12 08 |.. .....|........|
|00000a60| 00 00 01 00 20 00 02 00 | 00 00 00 00 af 02 00 00 |.... ...|........|
|00000a70| 48 08 00 00 01 00 20 00 | 02 00 00 00 00 00 c8 02 |H..... .|........|
|00000a80| 00 00 5c 08 00 00 01 00 | 20 00 02 00 00 00 00 00 |..\.....| .......|
|00000a90| 17 02 00 00 80 08 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000aa0| 00 00 8b 00 00 00 a0 09 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000ab0| 00 00 00 00 30 00 00 00 | e0 0a 00 00 01 00 20 00 |....0...|...... .|
|00000ac0| 02 00 00 00 00 00 42 01 | 00 00 82 0b 00 00 01 00 |......B.|........|
|00000ad0| 20 00 02 00 00 00 00 00 | 1a 06 00 00 e8 0f 00 00 | .......|........|
|00000ae0| 01 00 20 00 02 00 00 00 | 00 00 c7 05 00 00 72 10 |.. .....|......r.|
|00000af0| 00 00 01 00 20 00 02 00 | 5f 64 65 6c 61 79 40 34 |.... ...|_delay@4|
|00000b00| 84 10 00 00 01 00 20 00 | 02 00 00 00 00 00 6d 06 |...... .|......m.|
|00000b10| 00 00 b2 10 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|00000b20| 7f 06 00 00 94 11 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000b30| 00 00 95 06 00 00 de 11 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000b40| 00 00 00 00 a2 06 00 00 | 28 12 00 00 01 00 20 00 |........|(..... .|
|00000b50| 02 00 00 00 00 00 9e 00 | 00 00 8d 12 00 00 01 00 |........|........|
|00000b60| 20 00 02 00 00 00 00 00 | ad 07 00 00 db 12 00 00 | .......|........|
|00000b70| 01 00 20 00 02 00 00 00 | 00 00 bf 07 00 00 9c 13 |.. .....|........|
|00000b80| 00 00 01 00 20 00 02 00 | 00 00 00 00 d7 07 00 00 |.... ...|........|
|00000b90| f2 13 00 00 01 00 20 00 | 02 00 00 00 00 00 f3 07 |...... .|........|
|00000ba0| 00 00 2a 14 00 00 01 00 | 20 00 02 00 00 00 00 00 |..*.....| .......|
|00000bb0| 01 08 00 00 02 15 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|00000bc0| 00 00 11 08 00 00 28 15 | 00 00 01 00 20 00 02 00 |......(.|.... ...|
|00000bd0| 00 00 00 00 ab 03 00 00 | 36 16 00 00 01 00 20 00 |........|6..... .|
|00000be0| 02 00 00 00 00 00 bf 03 | 00 00 fc 1a 00 00 01 00 |........|........|
|00000bf0| 20 00 02 00 00 00 00 00 | 9d 03 00 00 b0 1f 00 00 | .......|........|
|00000c00| 01 00 20 00 02 00 00 00 | 00 00 8a 03 00 00 22 21 |.. .....|......"!|
|00000c10| 00 00 01 00 20 00 02 00 | 00 00 00 00 03 02 00 00 |.... ...|........|
|00000c20| 9c 21 00 00 01 00 20 00 | 02 00 00 00 00 00 fa 09 |.!.... .|........|
|00000c30| 00 00 ba 21 00 00 01 00 | 20 00 02 00 00 00 00 00 |...!....| .......|
|00000c40| 6d 00 00 00 e0 21 00 00 | 01 00 20 00 02 00 00 00 |m....!..|.. .....|
|00000c50| 00 00 be 01 00 00 3e 22 | 00 00 01 00 20 00 02 00 |......>"|.... ...|
|00000c60| 00 00 00 00 6b 09 00 00 | 84 22 00 00 01 00 20 00 |....k...|.".... .|
|00000c70| 02 00 00 00 00 00 8e 08 | 00 00 d4 22 00 00 01 00 |........|..."....|
|00000c80| 20 00 02 00 00 00 00 00 | 86 09 00 00 08 23 00 00 | .......|.....#..|
|00000c90| 01 00 20 00 02 00 00 00 | 00 00 3d 00 00 00 2a 23 |.. .....|..=...*#|
|00000ca0| 00 00 01 00 20 00 02 00 | 00 00 00 00 b2 0a 00 00 |.... ...|........|
|00000cb0| 90 23 00 00 01 00 20 00 | 02 00 00 00 00 00 c5 0a |.#.... .|........|
|00000cc0| 00 00 ec 23 00 00 01 00 | 20 00 02 00 00 00 00 00 |...#....| .......|
|00000cd0| ae 01 00 00 4c 24 00 00 | 01 00 20 00 02 00 00 00 |....L$..|.. .....|
|00000ce0| 00 00 d7 0a 00 00 92 24 | 00 00 01 00 20 00 02 00 |.......$|.... ...|
|00000cf0| 00 00 00 00 ee 0a 00 00 | be 24 00 00 01 00 20 00 |........|.$.... .|
|00000d00| 02 00 00 00 00 00 41 08 | 00 00 04 25 00 00 01 00 |......A.|...%....|
|00000d10| 20 00 02 00 00 00 00 00 | 4d 00 00 00 62 25 00 00 | .......|M...b%..|
|00000d20| 01 00 20 00 02 00 00 00 | 00 00 9f 01 00 00 e2 25 |.. .....|.......%|
|00000d30| 00 00 01 00 20 00 02 00 | 00 00 00 00 aa 08 00 00 |.... ...|........|
|00000d40| 36 26 00 00 01 00 20 00 | 02 00 00 00 00 00 e0 09 |6&.... .|........|
|00000d50| 00 00 ee 26 00 00 01 00 | 20 00 02 00 00 00 00 00 |...&....| .......|
|00000d60| cd 09 00 00 40 27 00 00 | 01 00 20 00 02 00 00 00 |....@'..|.. .....|
|00000d70| 00 00 7c 00 00 00 54 28 | 00 00 01 00 20 00 02 00 |..|...T(|.... ...|
|00000d80| 00 00 00 00 7f 01 00 00 | 38 29 00 00 01 00 20 00 |........|8).... .|
|00000d90| 02 00 00 00 00 00 e5 08 | 00 00 86 29 00 00 01 00 |........|...)....|
|00000da0| 20 00 02 00 00 00 00 00 | bd 08 00 00 ea 29 00 00 | .......|.....)..|
|00000db0| 01 00 20 00 02 00 00 00 | 00 00 6d 05 00 00 1c 2a |.. .....|..m....*|
|00000dc0| 00 00 01 00 20 00 02 00 | 00 00 00 00 7e 05 00 00 |.... ...|....~...|
|00000dd0| 82 2a 00 00 01 00 20 00 | 02 00 00 00 00 00 68 0b |.*.... .|......h.|
|00000de0| 00 00 f6 2a 00 00 01 00 | 20 00 02 00 00 00 00 00 |...*....| .......|
|00000df0| 5c 00 00 00 10 2b 00 00 | 01 00 20 00 02 00 00 00 |\....+..|.. .....|
|00000e00| 00 00 46 05 00 00 8e 2b | 00 00 01 00 20 00 02 00 |..F....+|.... ...|
|00000e10| 00 00 00 00 8e 01 00 00 | de 2b 00 00 01 00 20 00 |........|.+.... .|
|00000e20| 02 00 00 00 00 00 7d 0b | 00 00 32 2c 00 00 01 00 |......}.|..2,....|
|00000e30| 20 00 02 00 00 00 00 00 | cd 08 00 00 7a 2c 00 00 | .......|....z,..|
|00000e40| 01 00 20 00 02 00 00 00 | 00 00 f6 08 00 00 7c 2d |.. .....|......|-|
|00000e50| 00 00 01 00 20 00 02 00 | 00 00 00 00 ba 09 00 00 |.... ...|........|
|00000e60| 1a 2e 00 00 01 00 20 00 | 02 00 5f 5f 61 6c 6c 6d |...... .|..__allm|
|00000e70| 75 6c e0 2e 00 00 01 00 | 20 00 02 00 00 00 00 00 |ul......| .......|
|00000e80| 66 01 00 00 14 2f 00 00 | 01 00 20 00 02 00 00 00 |f..../..|.. .....|
|00000e90| 00 00 5d 04 00 00 1a 2f | 00 00 01 00 20 00 02 00 |..]..../|.... ...|
|00000ea0| 00 00 00 00 8b 04 00 00 | 20 2f 00 00 01 00 20 00 |........| /.... .|
|00000eb0| 02 00 00 00 00 00 2e 05 | 00 00 26 2f 00 00 01 00 |........|..&/....|
|00000ec0| 20 00 02 00 00 00 00 00 | de 05 00 00 2c 2f 00 00 | .......|....,/..|
|00000ed0| 01 00 20 00 02 00 00 00 | 00 00 f6 05 00 00 32 2f |.. .....|......2/|
|00000ee0| 00 00 01 00 20 00 02 00 | 00 00 00 00 8e 0a 00 00 |.... ...|........|
|00000ef0| 38 2f 00 00 01 00 20 00 | 02 00 00 00 00 00 84 02 |8/.... .|........|
|00000f00| 00 00 50 2f 00 00 02 00 | 00 00 02 00 00 00 00 00 |..P/....|........|
|00000f10| 71 02 00 00 54 2f 00 00 | 02 00 00 00 02 00 00 00 |q...T/..|........|
|00000f20| 00 00 5e 02 00 00 58 2f | 00 00 02 00 00 00 02 00 |..^...X/|........|
|00000f30| 00 00 00 00 9c 07 00 00 | 5c 2f 00 00 02 00 00 00 |........|\/......|
|00000f40| 02 00 00 00 00 00 4d 02 | 00 00 60 2f 00 00 02 00 |......M.|..`/....|
|00000f50| 00 00 02 00 00 00 00 00 | 8a 07 00 00 64 2f 00 00 |........|....d/..|
|00000f60| 02 00 00 00 02 00 00 00 | 00 00 33 01 00 00 84 2f |........|..3..../|
|00000f70| 00 00 02 00 00 00 02 00 | 00 00 00 00 0a 04 00 00 |........|........|
|00000f80| 88 2f 00 00 02 00 00 00 | 02 00 00 00 00 00 25 00 |./......|......%.|
|00000f90| 00 00 8c 2f 00 00 02 00 | 00 00 02 00 00 00 00 00 |.../....|........|
|00000fa0| 30 04 00 00 c0 40 00 00 | 02 00 00 00 02 00 5f 61 |0....@..|......_a|
|00000fb0| 76 67 00 00 00 00 e0 40 | 00 00 02 00 00 00 02 00 |vg.....@|........|
|00000fc0| 00 00 00 00 ed 00 00 00 | 28 4f 00 00 02 00 00 00 |........|(O......|
|00000fd0| 02 00 00 00 00 00 40 04 | 00 00 2c 4f 00 00 02 00 |......@.|..,O....|
|00000fe0| 00 00 02 00 00 00 00 00 | 24 05 00 00 40 4f 00 00 |........|$...@O..|
|00000ff0| 02 00 00 00 02 00 00 00 | 00 00 7c 04 00 00 60 4f |........|..|...`O|
|00001000| 00 00 02 00 00 00 02 00 | 00 00 00 00 4c 04 00 00 |........|....L...|
|00001010| 64 4f 00 00 02 00 00 00 | 02 00 00 00 00 00 ad 0b |dO......|........|
|00001020| 00 00 80 4f 00 00 03 00 | 00 00 02 00 00 00 00 00 |...O....|........|
|00001030| d9 0f 00 00 94 4f 00 00 | 03 00 00 00 02 00 00 00 |.....O..|........|
|00001040| 00 00 91 0f 00 00 a8 4f | 00 00 03 00 00 00 02 00 |.......O|........|
|00001050| 65 6e 64 00 00 00 00 00 | 60 5f 00 00 fe ff 00 00 |end.....|`_......|
|00001060| 02 00 66 12 00 00 5f 44 | 72 69 76 65 72 45 6e 74 |..f..._D|riverEnt|
|00001070| 72 79 40 38 00 5f 4c 6f | 61 64 43 6f 6e 66 69 67 |ry@8._Lo|adConfig|
|00001080| 44 61 74 61 40 30 00 5f | 66 49 6e 69 74 44 6f 6e |Data@0._|fInitDon|
|00001090| 65 00 5f 49 6f 63 74 6c | 49 6e 69 74 40 30 00 5f |e._Ioctl|Init@0._|
|000010a0| 44 65 76 43 61 63 68 65 | 49 6e 69 74 40 30 00 5f |DevCache|Init@0._|
|000010b0| 46 6e 43 61 63 68 65 49 | 6e 69 74 40 30 00 5f 46 |FnCacheI|nit@0._F|
|000010c0| 69 6c 65 43 61 63 68 65 | 49 6e 69 74 40 30 00 5f |ileCache|Init@0._|
|000010d0| 4d 65 6d 43 74 72 6c 49 | 6e 69 74 40 30 00 5f 49 |MemCtrlI|nit@0._I|
|000010e0| 6e 69 74 49 6f 53 6c 6f | 74 73 40 30 00 5f 48 6f |nitIoSlo|ts@0._Ho|
|000010f0| 6f 6b 49 6f 46 75 6e 63 | 74 69 6f 6e 73 40 30 00 |okIoFunc|tions@0.|
|00001100| 5f 47 65 74 50 72 6f 63 | 65 73 73 4e 61 6d 65 4f |_GetProc|essNameO|
|00001110| 66 66 73 65 74 40 30 00 | 5f 5f 69 6d 70 5f 5f 49 |ffset@0.|__imp__I|
|00001120| 6f 43 72 65 61 74 65 53 | 79 6d 62 6f 6c 69 63 4c |oCreateS|ymbolicL|
|00001130| 69 6e 6b 40 38 00 5f 5f | 69 6d 70 5f 5f 49 6f 43 |ink@8.__|imp__IoC|
|00001140| 72 65 61 74 65 44 65 76 | 69 63 65 40 32 38 00 5f |reateDev|ice@28._|
|00001150| 61 76 67 5f 64 65 76 69 | 63 65 00 5f 5f 69 6d 70 |avg_devi|ce.__imp|
|00001160| 5f 5f 52 74 6c 49 6e 69 | 74 55 6e 69 63 6f 64 65 |__RtlIni|tUnicode|
|00001170| 53 74 72 69 6e 67 40 38 | 00 5f 5f 69 6d 70 5f 40 |String@8|.__imp_@|
|00001180| 49 6f 66 43 6f 6d 70 6c | 65 74 65 52 65 71 75 65 |IofCompl|eteReque|
|00001190| 73 74 40 38 00 5f 66 48 | 6f 6f 6b 73 45 6e 61 62 |st@8._fH|ooksEnab|
|000011a0| 6c 65 64 00 5f 49 6f 63 | 74 6c 40 33 36 00 5f 5f |led._Ioc|tl@36.__|
|000011b0| 69 6d 70 5f 5f 4d 6d 4d | 61 70 4c 6f 63 6b 65 64 |imp__MmM|apLocked|
|000011c0| 50 61 67 65 73 40 38 00 | 5f 50 73 47 65 74 43 75 |Pages@8.|_PsGetCu|
|000011d0| 72 72 65 6e 74 50 72 6f | 63 65 73 73 49 64 40 30 |rrentPro|cessId@0|
|000011e0| 00 5f 44 6f 6e 65 49 6f | 53 6c 6f 74 73 40 30 00 |._DoneIo|Slots@0.|
|000011f0| 5f 46 69 6c 65 43 61 63 | 68 65 44 6f 6e 65 40 30 |_FileCac|heDone@0|
|00001200| 00 5f 46 6e 43 61 63 68 | 65 44 6f 6e 65 40 30 00 |._FnCach|eDone@0.|
|00001210| 5f 44 65 76 43 61 63 68 | 65 44 6f 6e 65 40 30 00 |_DevCach|eDone@0.|
|00001220| 5f 4d 65 6d 43 74 72 6c | 44 6f 6e 65 40 30 00 5f |_MemCtrl|Done@0._|
|00001230| 5f 69 6d 70 5f 5f 49 6f | 44 65 6c 65 74 65 44 65 |_imp__Io|DeleteDe|
|00001240| 76 69 63 65 40 34 00 5f | 5f 69 6d 70 5f 5f 49 6f |vice@4._|_imp__Io|
|00001250| 44 65 6c 65 74 65 53 79 | 6d 62 6f 6c 69 63 4c 69 |DeleteSy|mbolicLi|
|00001260| 6e 6b 40 34 00 5f 57 61 | 69 74 46 6f 72 48 6f 6f |nk@4._Wa|itForHoo|
|00001270| 6b 73 44 6f 6e 65 40 30 | 00 5f 55 6e 48 6f 6f 6b |ksDone@0|._UnHook|
|00001280| 49 6f 46 75 6e 63 74 69 | 6f 6e 73 40 30 00 5f 5f |IoFuncti|ons@0.__|
|00001290| 69 6d 70 5f 5f 52 74 6c | 51 75 65 72 79 52 65 67 |imp__Rtl|QueryReg|
|000012a0| 69 73 74 72 79 56 61 6c | 75 65 73 40 32 30 00 5f |istryVal|ues@20._|
|000012b0| 6d 61 78 53 6c 6f 74 57 | 61 69 74 54 69 6d 65 00 |maxSlotW|aitTime.|
|000012c0| 5f 6d 61 78 46 69 6c 65 | 43 61 63 68 65 57 69 64 |_maxFile|CacheWid|
|000012d0| 74 68 00 5f 6d 61 78 46 | 69 6c 65 43 61 63 68 65 |th._maxF|ileCache|
|000012e0| 44 65 70 74 68 00 5f 69 | 6e 69 74 69 61 6c 46 6e |Depth._i|nitialFn|
|000012f0| 43 61 63 68 65 53 69 7a | 65 00 5f 41 56 47 5f 4d |CacheSiz|e._AVG_M|
|00001300| 61 70 53 65 72 76 69 63 | 65 54 61 62 6c 65 40 30 |apServic|eTable@0|
|00001310| 00 5f 41 56 47 5f 55 6e | 6d 61 70 53 65 72 76 69 |._AVG_Un|mapServi|
|00001320| 63 65 54 61 62 6c 65 40 | 34 00 5f 47 65 74 4b 65 |ceTable@|4._GetKe|
|00001330| 72 6e 65 6c 46 75 6e 63 | 74 69 6f 6e 4e 75 6d 62 |rnelFunc|tionNumb|
|00001340| 65 72 40 34 00 5f 49 73 | 48 6f 6f 6b 73 52 65 6d |er@4._Is|HooksRem|
|00001350| 6f 76 69 6e 67 53 61 76 | 65 40 30 00 5f 5f 69 6d |ovingSav|e@0.__im|
|00001360| 70 5f 5f 4d 6d 42 75 69 | 6c 64 4d 64 6c 46 6f 72 |p__MmBui|ldMdlFor|
|00001370| 4e 6f 6e 50 61 67 65 64 | 50 6f 6f 6c 40 34 00 5f |NonPaged|Pool@4._|
|00001380| 5f 69 6d 70 5f 5f 4d 6d | 43 72 65 61 74 65 4d 64 |_imp__Mm|CreateMd|
|00001390| 6c 40 31 32 00 5f 5f 69 | 6d 70 5f 5f 4b 65 53 65 |l@12.__i|mp__KeSe|
|000013a0| 72 76 69 63 65 44 65 73 | 63 72 69 70 74 6f 72 54 |rviceDes|criptorT|
|000013b0| 61 62 6c 65 00 5f 5f 69 | 6d 70 5f 5f 4d 6d 55 6e |able.__i|mp__MmUn|
|000013c0| 6d 61 70 4c 6f 63 6b 65 | 64 50 61 67 65 73 40 38 |mapLocke|dPages@8|
|000013d0| 00 5f 5f 69 6d 70 5f 40 | 4b 66 52 65 6c 65 61 73 |.__imp_@|KfReleas|
|000013e0| 65 53 70 69 6e 4c 6f 63 | 6b 40 38 00 5f 4e 65 77 |eSpinLoc|k@8._New|
|000013f0| 4e 74 57 72 69 74 65 46 | 69 6c 65 40 33 36 00 5f |NtWriteF|ile@36._|
|00001400| 4e 65 77 4e 74 43 6c 6f | 73 65 40 34 00 5f 4e 65 |NewNtClo|se@4._Ne|
|00001410| 77 4e 74 43 72 65 61 74 | 65 46 69 6c 65 40 34 34 |wNtCreat|eFile@44|
|00001420| 00 5f 4e 65 77 4e 74 4f | 70 65 6e 46 69 6c 65 40 |._NewNtO|penFile@|
|00001430| 32 34 00 5f 5f 69 6d 70 | 5f 40 4b 66 41 63 71 75 |24.__imp|_@KfAcqu|
|00001440| 69 72 65 53 70 69 6e 4c | 6f 63 6b 40 34 00 5f 5f |ireSpinL|ock@4.__|
|00001450| 69 6d 70 5f 5f 4b 65 49 | 6e 69 74 69 61 6c 69 7a |imp__KeI|nitializ|
|00001460| 65 53 70 69 6e 4c 6f 63 | 6b 40 34 00 5f 66 48 6f |eSpinLoc|k@4._fHo|
|00001470| 6f 6b 73 49 6e 73 74 61 | 6c 6c 65 64 00 5f 5f 69 |oksInsta|lled.__i|
|00001480| 6d 70 5f 5f 4e 74 42 75 | 69 6c 64 4e 75 6d 62 65 |mp__NtBu|ildNumbe|
|00001490| 72 00 5f 4f 6c 64 4e 74 | 57 72 69 74 65 46 69 6c |r._OldNt|WriteFil|
|000014a0| 65 00 5f 4f 6c 64 4e 74 | 43 6c 6f 73 65 00 5f 4f |e._OldNt|Close._O|
|000014b0| 6c 64 4e 74 43 72 65 61 | 74 65 46 69 6c 65 00 40 |ldNtCrea|teFile.@|
|000014c0| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 43 6f 6d 70 61 |Interloc|kedCompa|
|000014d0| 72 65 45 78 63 68 61 6e | 67 65 40 31 32 00 5f 4f |reExchan|ge@12._O|
|000014e0| 6c 64 4e 74 4f 70 65 6e | 46 69 6c 65 00 40 49 6e |ldNtOpen|File.@In|
|000014f0| 74 65 72 6c 6f 63 6b 65 | 64 45 78 63 68 61 6e 67 |terlocke|dExchang|
|00001500| 65 40 38 00 5f 5f 69 6d | 70 5f 5f 5a 77 57 72 69 |e@8.__im|p__ZwWri|
|00001510| 74 65 46 69 6c 65 40 33 | 36 00 5f 5f 69 6d 70 5f |teFile@3|6.__imp_|
|00001520| 5f 5a 77 43 6c 6f 73 65 | 40 34 00 5f 5f 69 6d 70 |_ZwClose|@4.__imp|
|00001530| 5f 5f 5a 77 43 72 65 61 | 74 65 46 69 6c 65 40 34 |__ZwCrea|teFile@4|
|00001540| 34 00 5f 5f 69 6d 70 5f | 5f 5a 77 4f 70 65 6e 46 |4.__imp_|_ZwOpenF|
|00001550| 69 6c 65 40 32 34 00 5f | 57 61 69 74 46 6f 72 49 |ile@24._|WaitForI|
|00001560| 6f 63 74 6c 44 6f 6e 65 | 40 30 00 5f 5f 69 6d 70 |octlDone|@0.__imp|
|00001570| 5f 5f 4b 65 49 6e 69 74 | 69 61 6c 69 7a 65 4d 75 |__KeInit|ializeMu|
|00001580| 74 65 78 40 38 00 5f 61 | 76 67 4d 75 74 65 78 00 |tex@8._a|vgMutex.|
|00001590| 40 49 6e 74 65 72 6c 6f | 63 6b 65 64 44 65 63 72 |@Interlo|ckedDecr|
|000015a0| 65 6d 65 6e 74 40 34 00 | 5f 46 69 6c 65 43 61 63 |ement@4.|_FileCac|
|000015b0| 68 65 43 6c 65 61 72 40 | 30 00 5f 5f 69 6d 70 5f |heClear@|0.__imp_|
|000015c0| 5f 4b 65 53 65 74 45 76 | 65 6e 74 40 31 32 00 5f |_KeSetEv|ent@12._|
|000015d0| 41 74 74 61 63 68 49 6f | 53 6c 6f 74 40 31 32 00 |AttachIo|Slot@12.|
|000015e0| 5f 44 65 74 61 63 68 49 | 6f 53 6c 6f 74 40 31 32 |_DetachI|oSlot@12|
|000015f0| 00 5f 5f 69 6d 70 5f 5f | 4b 65 52 65 6c 65 61 73 |.__imp__|KeReleas|
|00001600| 65 4d 75 74 65 78 40 38 | 00 5f 5f 69 6d 70 5f 5f |eMutex@8|.__imp__|
|00001610| 4b 65 57 61 69 74 46 6f | 72 53 69 6e 67 6c 65 4f |KeWaitFo|rSingleO|
|00001620| 62 6a 65 63 74 40 32 30 | 00 5f 45 76 65 6e 74 4c |bject@20|._EventL|
|00001630| 6f 67 49 6e 66 6f 4d 65 | 73 73 61 67 65 40 34 00 |ogInfoMe|ssage@4.|
|00001640| 40 49 6e 74 65 72 6c 6f | 63 6b 65 64 49 6e 63 72 |@Interlo|ckedIncr|
|00001650| 65 6d 65 6e 74 40 34 00 | 5f 50 73 47 65 74 43 75 |ement@4.|_PsGetCu|
|00001660| 72 72 65 6e 74 54 68 72 | 65 61 64 49 64 40 30 00 |rrentThr|eadId@0.|
|00001670| 5f 49 6e 69 74 4d 69 73 | 63 40 30 00 5f 57 72 69 |_InitMis|c@0._Wri|
|00001680| 74 65 45 72 72 6f 72 4c | 6f 67 40 38 00 5f 44 75 |teErrorL|og@8._Du|
|00001690| 6d 70 54 6f 45 72 72 6f | 72 4c 6f 67 40 31 32 00 |mpToErro|rLog@12.|
|000016a0| 5f 45 76 65 6e 74 4c 6f | 67 57 61 72 6e 4d 65 73 |_EventLo|gWarnMes|
|000016b0| 73 61 67 65 40 34 00 5f | 45 76 65 6e 74 4c 6f 67 |sage@4._|EventLog|
|000016c0| 45 72 72 6f 72 4d 65 73 | 73 61 67 65 40 34 00 5f |ErrorMes|sage@4._|
|000016d0| 49 73 46 69 6c 65 53 65 | 6c 65 63 74 65 64 40 34 |IsFileSe|lected@4|
|000016e0| 00 5f 43 68 65 63 6b 44 | 72 69 76 65 57 69 74 68 |._CheckD|riveWith|
|000016f0| 4d 61 73 6b 40 38 00 5f | 77 73 74 72 6e 63 6d 70 |Mask@8._|wstrncmp|
|00001700| 40 31 32 00 5f 6d 79 73 | 74 72 6e 69 63 6d 70 40 |@12._mys|trnicmp@|
|00001710| 31 32 00 5f 49 73 50 72 | 6f 63 65 73 73 45 71 75 |12._IsPr|ocessEqu|
|00001720| 61 6c 40 34 00 5f 5f 69 | 6d 70 5f 5f 49 6f 57 72 |al@4.__i|mp__IoWr|
|00001730| 69 74 65 45 72 72 6f 72 | 4c 6f 67 45 6e 74 72 79 |iteError|LogEntry|
|00001740| 40 34 00 5f 5f 69 6d 70 | 5f 5f 6d 65 6d 6d 6f 76 |@4.__imp|__memmov|
|00001750| 65 00 5f 5f 69 6d 70 5f | 5f 49 6f 41 6c 6c 6f 63 |e.__imp_|_IoAlloc|
|00001760| 61 74 65 45 72 72 6f 72 | 4c 6f 67 45 6e 74 72 79 |ateError|LogEntry|
|00001770| 40 38 00 5f 5f 69 6d 70 | 5f 5f 4b 65 44 65 6c 61 |@8.__imp|__KeDela|
|00001780| 79 45 78 65 63 75 74 69 | 6f 6e 54 68 72 65 61 64 |yExecuti|onThread|
|00001790| 40 31 32 00 5f 5f 69 6d | 70 5f 5f 5f 77 63 73 75 |@12.__im|p___wcsu|
|000017a0| 70 72 00 5f 5f 69 6d 70 | 5f 5f 77 63 73 6e 63 70 |pr.__imp|__wcsncp|
|000017b0| 79 00 5f 5f 69 6d 70 5f | 5f 77 63 73 63 68 72 00 |y.__imp_|_wcschr.|
|000017c0| 5f 5f 69 6d 70 5f 5f 77 | 63 73 72 63 68 72 00 5f |__imp__w|csrchr._|
|000017d0| 5f 69 6d 70 5f 5f 49 6f | 47 65 74 43 75 72 72 65 |_imp__Io|GetCurre|
|000017e0| 6e 74 50 72 6f 63 65 73 | 73 40 30 00 5f 69 6e 69 |ntProces|s@0._ini|
|000017f0| 74 69 61 6c 4d 65 6d 42 | 6c 6f 63 6b 73 00 5f 6d |tialMemB|locks._m|
|00001800| 61 78 44 65 76 43 61 63 | 68 65 53 69 7a 65 00 5f |axDevCac|heSize._|
|00001810| 41 64 6a 75 73 74 46 69 | 6c 65 4e 61 6d 65 40 38 |AdjustFi|leName@8|
|00001820| 00 5f 43 68 65 63 6b 55 | 6e 69 63 6f 64 65 46 69 |._CheckU|nicodeFi|
|00001830| 6c 65 4e 61 6d 65 40 38 | 00 5f 43 68 65 63 6b 49 |leName@8|._CheckI|
|00001840| 66 42 6f 6f 74 52 65 63 | 6f 72 64 52 65 71 75 65 |fBootRec|ordReque|
|00001850| 73 74 40 38 00 5f 42 75 | 69 6c 64 50 61 74 68 40 |st@8._Bu|ildPath@|
|00001860| 31 32 00 5f 47 65 74 46 | 69 6c 65 4e 61 6d 65 40 |12._GetF|ileName@|
|00001870| 31 32 00 5f 52 75 6e 43 | 6c 69 65 6e 74 54 68 72 |12._RunC|lientThr|
|00001880| 65 61 64 40 34 00 5f 5f | 69 6d 70 5f 5f 73 74 72 |ead@4.__|imp__str|
|00001890| 6e 63 6d 70 00 5f 5f 69 | 6d 70 5f 5f 77 63 73 73 |ncmp.__i|mp__wcss|
|000018a0| 74 72 00 5f 44 65 76 43 | 61 63 68 65 46 69 6e 64 |tr._DevC|acheFind|
|000018b0| 44 72 69 76 65 40 34 00 | 5f 5f 69 6d 70 5f 5f 49 |Drive@4.|__imp__I|
|000018c0| 6f 47 65 74 52 65 6c 61 | 74 65 64 44 65 76 69 63 |oGetRela|tedDevic|
|000018d0| 65 4f 62 6a 65 63 74 40 | 34 00 5f 5f 69 6d 70 5f |eObject@|4.__imp_|
|000018e0| 5f 4b 65 43 6c 65 61 72 | 45 76 65 6e 74 40 34 00 |_KeClear|Event@4.|
|000018f0| 5f 4d 65 6d 43 74 72 6c | 46 72 65 65 48 6f 6f 6b |_MemCtrl|FreeHook|
|00001900| 49 6e 66 6f 42 6c 6f 63 | 6b 40 34 00 5f 46 6e 43 |InfoBloc|k@4._FnC|
|00001910| 61 63 68 65 41 64 64 4e | 61 6d 65 40 32 34 00 5f |acheAddN|ame@24._|
|00001920| 52 65 74 75 72 6e 49 6f | 53 6c 6f 74 40 34 00 5f |ReturnIo|Slot@4._|
|00001930| 46 69 6c 65 43 61 63 68 | 65 53 65 61 72 63 68 4f |FileCach|eSearchO|
|00001940| 72 41 64 64 40 34 00 5f | 47 65 74 46 72 65 65 49 |rAdd@4._|GetFreeI|
|00001950| 6f 53 6c 6f 74 40 30 00 | 5f 46 69 6c 65 43 61 63 |oSlot@0.|_FileCac|
|00001960| 68 65 53 65 61 72 63 68 | 40 34 00 5f 5f 69 6d 70 |heSearch|@4.__imp|
|00001970| 5f 5f 5f 73 74 72 75 70 | 72 00 5f 5f 69 6d 70 5f |___strup|r.__imp_|
|00001980| 5f 52 74 6c 55 6e 69 63 | 6f 64 65 53 74 72 69 6e |_RtlUnic|odeStrin|
|00001990| 67 54 6f 41 6e 73 69 53 | 74 72 69 6e 67 40 31 32 |gToAnsiS|tring@12|
|000019a0| 00 5f 5f 69 6d 70 5f 5f | 77 63 73 6c 65 6e 00 5f |.__imp__|wcslen._|
|000019b0| 5f 69 6d 70 5f 40 4f 62 | 66 44 65 72 65 66 65 72 |_imp_@Ob|fDerefer|
|000019c0| 65 6e 63 65 4f 62 6a 65 | 63 74 40 34 00 5f 4d 65 |enceObje|ct@4._Me|
|000019d0| 6d 43 74 72 6c 47 65 74 | 48 6f 6f 6b 49 6e 66 6f |mCtrlGet|HookInfo|
|000019e0| 42 6c 6f 63 6b 40 30 00 | 5f 49 73 4c 6f 63 61 6c |Block@0.|_IsLocal|
|000019f0| 44 72 69 76 65 40 34 00 | 5f 5f 69 6d 70 5f 5f 4f |Drive@4.|__imp__O|
|00001a00| 62 52 65 66 65 72 65 6e | 63 65 4f 62 6a 65 63 74 |bReferen|ceObject|
|00001a10| 42 79 48 61 6e 64 6c 65 | 40 32 34 00 5f 46 69 6c |ByHandle|@24._Fil|
|00001a20| 65 43 61 63 68 65 44 65 | 6c 65 74 65 40 34 00 5f |eCacheDe|lete@4._|
|00001a30| 46 6e 43 61 63 68 65 47 | 65 74 4e 61 6d 65 40 32 |FnCacheG|etName@2|
|00001a40| 34 00 5f 46 6e 43 61 63 | 68 65 4d 61 72 6b 49 74 |4._FnCac|heMarkIt|
|00001a50| 65 6d 57 72 69 74 74 65 | 6e 40 38 00 5f 46 72 65 |emWritte|n@8._Fre|
|00001a60| 65 4c 69 73 74 40 34 00 | 5f 5f 69 6d 70 5f 5f 45 |eList@4.|__imp__E|
|00001a70| 78 46 72 65 65 50 6f 6f | 6c 40 34 00 5f 5f 69 6d |xFreePoo|l@4.__im|
|00001a80| 70 5f 5f 45 78 41 6c 6c | 6f 63 61 74 65 50 6f 6f |p__ExAll|ocatePoo|
|00001a90| 6c 57 69 74 68 54 61 67 | 40 31 32 00 5f 5f 69 6d |lWithTag|@12.__im|
|00001aa0| 70 5f 5f 4b 65 49 6e 69 | 74 69 61 6c 69 7a 65 45 |p__KeIni|tializeE|
|00001ab0| 76 65 6e 74 40 31 32 00 | 5f 5f 69 6d 70 5f 40 45 |vent@12.|__imp_@E|
|00001ac0| 78 52 65 6c 65 61 73 65 | 46 61 73 74 4d 75 74 65 |xRelease|FastMute|
|00001ad0| 78 40 34 00 5f 5f 69 6d | 70 5f 40 45 78 41 63 71 |x@4.__im|p_@ExAcq|
|00001ae0| 75 69 72 65 46 61 73 74 | 4d 75 74 65 78 40 34 00 |uireFast|Mutex@4.|
|00001af0| 5f 4b 65 47 65 74 43 75 | 72 72 65 6e 74 49 72 71 |_KeGetCu|rrentIrq|
|00001b00| 6c 40 30 00 5f 49 73 46 | 69 6c 65 53 79 73 74 65 |l@0._IsF|ileSyste|
|00001b10| 6d 40 34 00 5f 47 65 74 | 44 65 76 69 63 65 4f 62 |m@4._Get|DeviceOb|
|00001b20| 6a 65 63 74 40 34 00 5f | 46 69 6e 64 4d 6f 75 6e |ject@4._|FindMoun|
|00001b30| 74 50 6f 69 6e 74 40 34 | 00 5f 44 65 76 43 61 63 |tPoint@4|._DevCac|
|00001b40| 68 65 53 68 6f 72 74 65 | 6e 4c 69 73 74 40 30 00 |heShorte|nList@0.|
|00001b50| 5f 44 65 76 43 61 63 68 | 65 41 64 64 45 6e 74 72 |_DevCach|eAddEntr|
|00001b60| 79 40 38 00 5f 5f 69 6d | 70 5f 5f 49 6f 47 65 74 |y@8.__im|p__IoGet|
|00001b70| 44 65 76 69 63 65 4f 62 | 6a 65 63 74 50 6f 69 6e |DeviceOb|jectPoin|
|00001b80| 74 65 72 40 31 36 00 5f | 5f 69 6d 70 5f 5f 77 63 |ter@16._|_imp__wc|
|00001b90| 73 63 70 79 00 5f 5f 69 | 6d 70 5f 5f 73 74 72 6e |scpy.__i|mp__strn|
|00001ba0| 63 70 79 00 5f 5f 69 6d | 70 5f 5f 49 6f 43 72 65 |cpy.__im|p__IoCre|
|00001bb0| 61 74 65 53 79 6e 63 68 | 72 6f 6e 69 7a 61 74 69 |ateSynch|ronizati|
|00001bc0| 6f 6e 45 76 65 6e 74 40 | 38 00 5f 46 69 6c 65 43 |onEvent@|8._FileC|
|00001bd0| 61 63 68 65 47 65 74 49 | 6e 64 65 78 40 34 00 5f |acheGetI|ndex@4._|
|00001be0| 46 69 6c 65 43 61 63 68 | 65 53 68 6f 72 74 65 6e |FileCach|eShorten|
|00001bf0| 4c 69 73 74 40 30 00 5f | 49 6f 43 72 65 61 74 65 |List@0._|IoCreate|
|00001c00| 53 79 6d 62 6f 6c 69 63 | 4c 69 6e 6b 40 38 00 5f |Symbolic|Link@8._|
|00001c10| 5f 49 4d 50 4f 52 54 5f | 44 45 53 43 52 49 50 54 |_IMPORT_|DESCRIPT|
|00001c20| 4f 52 5f 6e 74 6f 73 6b | 72 6e 6c 00 5f 49 6f 43 |OR_ntosk|rnl._IoC|
|00001c30| 72 65 61 74 65 44 65 76 | 69 63 65 40 32 38 00 5f |reateDev|ice@28._|
|00001c40| 52 74 6c 49 6e 69 74 55 | 6e 69 63 6f 64 65 53 74 |RtlInitU|nicodeSt|
|00001c50| 72 69 6e 67 40 38 00 40 | 49 6f 66 43 6f 6d 70 6c |ring@8.@|IofCompl|
|00001c60| 65 74 65 52 65 71 75 65 | 73 74 40 38 00 5f 4d 6d |eteReque|st@8._Mm|
|00001c70| 4d 61 70 4c 6f 63 6b 65 | 64 50 61 67 65 73 40 38 |MapLocke|dPages@8|
|00001c80| 00 5f 5f 69 6d 70 5f 5f | 50 73 47 65 74 43 75 72 |.__imp__|PsGetCur|
|00001c90| 72 65 6e 74 50 72 6f 63 | 65 73 73 49 64 40 30 00 |rentProc|essId@0.|
|00001ca0| 5f 49 6f 44 65 6c 65 74 | 65 44 65 76 69 63 65 40 |_IoDelet|eDevice@|
|00001cb0| 34 00 5f 49 6f 44 65 6c | 65 74 65 53 79 6d 62 6f |4._IoDel|eteSymbo|
|00001cc0| 6c 69 63 4c 69 6e 6b 40 | 34 00 5f 52 74 6c 51 75 |licLink@|4._RtlQu|
|00001cd0| 65 72 79 52 65 67 69 73 | 74 72 79 56 61 6c 75 65 |eryRegis|tryValue|
|00001ce0| 73 40 32 30 00 5f 4d 6d | 42 75 69 6c 64 4d 64 6c |s@20._Mm|BuildMdl|
|00001cf0| 46 6f 72 4e 6f 6e 50 61 | 67 65 64 50 6f 6f 6c 40 |ForNonPa|gedPool@|
|00001d00| 34 00 5f 4d 6d 43 72 65 | 61 74 65 4d 64 6c 40 31 |4._MmCre|ateMdl@1|
|00001d10| 32 00 5f 4b 65 53 65 72 | 76 69 63 65 44 65 73 63 |2._KeSer|viceDesc|
|00001d20| 72 69 70 74 6f 72 54 61 | 62 6c 65 00 5f 4d 6d 55 |riptorTa|ble._MmU|
|00001d30| 6e 6d 61 70 4c 6f 63 6b | 65 64 50 61 67 65 73 40 |nmapLock|edPages@|
|00001d40| 38 00 5f 4b 65 49 6e 69 | 74 69 61 6c 69 7a 65 53 |8._KeIni|tializeS|
|00001d50| 70 69 6e 4c 6f 63 6b 40 | 34 00 5f 4e 74 42 75 69 |pinLock@|4._NtBui|
|00001d60| 6c 64 4e 75 6d 62 65 72 | 00 5f 5f 69 6d 70 5f 40 |ldNumber|.__imp_@|
|00001d70| 49 6e 74 65 72 6c 6f 63 | 6b 65 64 43 6f 6d 70 61 |Interloc|kedCompa|
|00001d80| 72 65 45 78 63 68 61 6e | 67 65 40 31 32 00 5f 5f |reExchan|ge@12.__|
|00001d90| 69 6d 70 5f 40 49 6e 74 | 65 72 6c 6f 63 6b 65 64 |imp_@Int|erlocked|
|00001da0| 45 78 63 68 61 6e 67 65 | 40 38 00 5f 5a 77 57 72 |Exchange|@8._ZwWr|
|00001db0| 69 74 65 46 69 6c 65 40 | 33 36 00 5f 5a 77 43 6c |iteFile@|36._ZwCl|
|00001dc0| 6f 73 65 40 34 00 5f 5a | 77 43 72 65 61 74 65 46 |ose@4._Z|wCreateF|
|00001dd0| 69 6c 65 40 34 34 00 5f | 5a 77 4f 70 65 6e 46 69 |ile@44._|ZwOpenFi|
|00001de0| 6c 65 40 32 34 00 5f 4b | 65 49 6e 69 74 69 61 6c |le@24._K|eInitial|
|00001df0| 69 7a 65 4d 75 74 65 78 | 40 38 00 5f 5f 69 6d 70 |izeMutex|@8.__imp|
|00001e00| 5f 40 49 6e 74 65 72 6c | 6f 63 6b 65 64 44 65 63 |_@Interl|ockedDec|
|00001e10| 72 65 6d 65 6e 74 40 34 | 00 5f 4b 65 53 65 74 45 |rement@4|._KeSetE|
|00001e20| 76 65 6e 74 40 31 32 00 | 5f 4b 65 52 65 6c 65 61 |vent@12.|_KeRelea|
|00001e30| 73 65 4d 75 74 65 78 40 | 38 00 5f 4b 65 57 61 69 |seMutex@|8._KeWai|
|00001e40| 74 46 6f 72 53 69 6e 67 | 6c 65 4f 62 6a 65 63 74 |tForSing|leObject|
|00001e50| 40 32 30 00 5f 5f 69 6d | 70 5f 40 49 6e 74 65 72 |@20.__im|p_@Inter|
|00001e60| 6c 6f 63 6b 65 64 49 6e | 63 72 65 6d 65 6e 74 40 |lockedIn|crement@|
|00001e70| 34 00 5f 5f 69 6d 70 5f | 5f 50 73 47 65 74 43 75 |4.__imp_|_PsGetCu|
|00001e80| 72 72 65 6e 74 54 68 72 | 65 61 64 49 64 40 30 00 |rrentThr|eadId@0.|
|00001e90| 5f 49 6f 57 72 69 74 65 | 45 72 72 6f 72 4c 6f 67 |_IoWrite|ErrorLog|
|00001ea0| 45 6e 74 72 79 40 34 00 | 5f 49 6f 41 6c 6c 6f 63 |Entry@4.|_IoAlloc|
|00001eb0| 61 74 65 45 72 72 6f 72 | 4c 6f 67 45 6e 74 72 79 |ateError|LogEntry|
|00001ec0| 40 38 00 5f 4b 65 44 65 | 6c 61 79 45 78 65 63 75 |@8._KeDe|layExecu|
|00001ed0| 74 69 6f 6e 54 68 72 65 | 61 64 40 31 32 00 5f 49 |tionThre|ad@12._I|
|00001ee0| 6f 47 65 74 43 75 72 72 | 65 6e 74 50 72 6f 63 65 |oGetCurr|entProce|
|00001ef0| 73 73 40 30 00 5f 49 6f | 47 65 74 52 65 6c 61 74 |ss@0._Io|GetRelat|
|00001f00| 65 64 44 65 76 69 63 65 | 4f 62 6a 65 63 74 40 34 |edDevice|Object@4|
|00001f10| 00 5f 4b 65 43 6c 65 61 | 72 45 76 65 6e 74 40 34 |._KeClea|rEvent@4|
|00001f20| 00 5f 52 74 6c 55 6e 69 | 63 6f 64 65 53 74 72 69 |._RtlUni|codeStri|
|00001f30| 6e 67 54 6f 41 6e 73 69 | 53 74 72 69 6e 67 40 31 |ngToAnsi|String@1|
|00001f40| 32 00 40 4f 62 66 44 65 | 72 65 66 65 72 65 6e 63 |2.@ObfDe|referenc|
|00001f50| 65 4f 62 6a 65 63 74 40 | 34 00 5f 4f 62 52 65 66 |eObject@|4._ObRef|
|00001f60| 65 72 65 6e 63 65 4f 62 | 6a 65 63 74 42 79 48 61 |erenceOb|jectByHa|
|00001f70| 6e 64 6c 65 40 32 34 00 | 5f 45 78 46 72 65 65 50 |ndle@24.|_ExFreeP|
|00001f80| 6f 6f 6c 40 34 00 5f 45 | 78 41 6c 6c 6f 63 61 74 |ool@4._E|xAllocat|
|00001f90| 65 50 6f 6f 6c 57 69 74 | 68 54 61 67 40 31 32 00 |ePoolWit|hTag@12.|
|00001fa0| 5f 4b 65 49 6e 69 74 69 | 61 6c 69 7a 65 45 76 65 |_KeIniti|alizeEve|
|00001fb0| 6e 74 40 31 32 00 5f 49 | 6f 47 65 74 44 65 76 69 |nt@12._I|oGetDevi|
|00001fc0| 63 65 4f 62 6a 65 63 74 | 50 6f 69 6e 74 65 72 40 |ceObject|Pointer@|
|00001fd0| 31 36 00 5f 49 6f 43 72 | 65 61 74 65 53 79 6e 63 |16._IoCr|eateSync|
|00001fe0| 68 72 6f 6e 69 7a 61 74 | 69 6f 6e 45 76 65 6e 74 |hronizat|ionEvent|
|00001ff0| 40 38 00 5f 5f 4e 55 4c | 4c 5f 49 4d 50 4f 52 54 |@8.__NUL|L_IMPORT|
|00002000| 5f 44 45 53 43 52 49 50 | 54 4f 52 00 7f 6e 74 6f |_DESCRIP|TOR..nto|
|00002010| 73 6b 72 6e 6c 5f 4e 55 | 4c 4c 5f 54 48 55 4e 4b |skrnl_NU|LL_THUNK|
|00002020| 5f 44 41 54 41 00 40 4b | 66 52 65 6c 65 61 73 65 |_DATA.@K|fRelease|
|00002030| 53 70 69 6e 4c 6f 63 6b | 40 38 00 5f 5f 49 4d 50 |SpinLock|@8.__IMP|
|00002040| 4f 52 54 5f 44 45 53 43 | 52 49 50 54 4f 52 5f 48 |ORT_DESC|RIPTOR_H|
|00002050| 41 4c 00 40 4b 66 41 63 | 71 75 69 72 65 53 70 69 |AL.@KfAc|quireSpi|
|00002060| 6e 4c 6f 63 6b 40 34 00 | 40 45 78 52 65 6c 65 61 |nLock@4.|@ExRelea|
|00002070| 73 65 46 61 73 74 4d 75 | 74 65 78 40 34 00 40 45 |seFastMu|tex@4.@E|
|00002080| 78 41 63 71 75 69 72 65 | 46 61 73 74 4d 75 74 65 |xAcquire|FastMute|
|00002090| 78 40 34 00 5f 5f 69 6d | 70 5f 5f 4b 65 47 65 74 |x@4.__im|p__KeGet|
|000020a0| 43 75 72 72 65 6e 74 49 | 72 71 6c 40 30 00 7f 48 |CurrentI|rql@0..H|
|000020b0| 41 4c 5f 4e 55 4c 4c 5f | 54 48 55 4e 4b 5f 44 41 |AL_NULL_|THUNK_DA|
|000020c0| 54 41 00 5f 66 46 69 6c | 65 43 61 63 68 65 49 6e |TA._fFil|eCacheIn|
|000020d0| 69 74 69 61 6c 69 7a 65 | 64 00 5f 66 69 6c 65 43 |itialize|d._fileC|
|000020e0| 61 63 68 65 46 72 65 65 | 00 5f 66 69 6c 65 43 61 |acheFree|._fileCa|
|000020f0| 63 68 65 00 5f 66 69 6c | 65 43 61 63 68 65 4d 75 |che._fil|eCacheMu|
|00002100| 74 65 78 00 5f 69 6f 53 | 6c 6f 74 73 49 6e 69 74 |tex._ioS|lotsInit|
|00002110| 69 61 6c 69 7a 65 64 00 | 5f 61 74 74 61 63 68 65 |ialized.|_attache|
|00002120| 64 49 6f 53 6c 6f 74 4c | 69 73 74 00 5f 66 72 65 |dIoSlotL|ist._fre|
|00002130| 65 49 6f 53 6c 6f 74 4c | 69 73 74 00 5f 63 6c 69 |eIoSlotL|ist._cli|
|00002140| 65 6e 74 45 76 65 6e 74 | 4e 61 6d 65 00 5f 69 6f |entEvent|Name._io|
|00002150| 53 6c 6f 74 4d 75 74 65 | 78 00 5f 66 6e 43 61 63 |SlotMute|x._fnCac|
|00002160| 68 65 49 6e 69 74 69 61 | 6c 69 7a 65 64 00 5f 66 |heInitia|lized._f|
|00002170| 6e 43 61 63 68 65 46 72 | 65 65 00 5f 66 6e 43 61 |nCacheFr|ee._fnCa|
|00002180| 63 68 65 4d 75 74 65 78 | 00 5f 66 44 65 76 43 61 |cheMutex|._fDevCa|
|00002190| 63 68 65 49 6e 69 74 69 | 61 6c 69 7a 65 64 00 5f |cheIniti|alized._|
|000021a0| 64 65 76 4c 69 73 74 46 | 72 65 65 00 5f 64 65 76 |devListF|ree._dev|
|000021b0| 4c 69 73 74 53 74 61 72 | 74 00 5f 64 65 76 43 61 |ListStar|t._devCa|
|000021c0| 63 68 65 4d 75 74 65 78 | 00 5f 66 4d 65 6d 43 74 |cheMutex|._fMemCt|
|000021d0| 72 6c 49 6e 69 74 69 61 | 6c 69 7a 65 64 00 5f 66 |rlInitia|lized._f|
|000021e0| 72 65 65 48 6f 6f 6b 49 | 6e 66 6f 4c 69 73 74 00 |reeHookI|nfoList.|
|000021f0| 5f 6d 65 6d 43 74 72 6c | 4d 75 74 65 78 00 5f 73 |_memCtrl|Mutex._s|
|00002200| 65 71 75 65 6e 63 65 00 | 5f 68 6f 6f 6b 73 49 6e |equence.|_hooksIn|
|00002210| 55 73 65 00 5f 70 72 6f | 63 65 73 73 4e 61 6d 65 |Use._pro|cessName|
|00002220| 4f 66 66 73 65 74 00 5f | 43 6f 75 6e 74 4d 75 74 |Offset._|CountMut|
|00002230| 65 78 00 5f 69 6f 63 74 | 6c 49 6e 55 73 65 00 5f |ex._ioct|lInUse._|
|00002240| 4e 74 57 72 69 74 65 46 | 69 6c 65 49 44 00 5f 4e |NtWriteF|ileID._N|
|00002250| 74 43 6c 6f 73 65 49 44 | 00 5f 4e 74 43 72 65 61 |tCloseID|._NtCrea|
|00002260| 74 65 46 69 6c 65 49 44 | 00 5f 4e 74 4f 70 65 6e |teFileID|._NtOpen|
|00002270| 46 69 6c 65 49 44 00 5f | 67 6c 6f 62 61 6c 4d 64 |FileID._|globalMd|
|00002280| 6c 00 5f 4b 65 53 65 72 | 76 69 63 65 54 61 62 6c |l._KeSer|viceTabl|
|00002290| 65 50 6f 69 6e 74 65 72 | 73 00 5f 41 56 47 5f 44 |ePointer|s._AVG_D|
|000022a0| 69 73 70 61 74 63 68 40 | 38 00 5f 64 65 76 69 63 |ispatch@|8._devic|
|000022b0| 65 5f 69 6f 63 74 6c 40 | 38 00 5f 41 56 47 5f 55 |e_ioctl@|8._AVG_U|
|000022c0| 6e 6c 6f 61 64 40 34 00 |                         |nload@4.|        |
+--------+-------------------------+-------------------------+--------+--------+