/ PC World 2007 July & August / PCWorld_2007-07-08_cd.bin / zabezpeceni / unhackme / unhackme400.exe / {sys} / drivers / UnHackMeDrv.sys / COFF_SYMBOLS

< prev

next >

MacOS 8.1

Win98

DOS

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 40 63 6f 6d 70 2e 69 64 | 00 00 00 00 ff ff 00 00 |@comp.id|........|
|00000010| 03 00 24 54 31 31 35 34 | 31 00 10 0b 00 00 02 00 |..$T1154|1.......|
|00000020| 00 00 03 00 24 54 31 31 | 35 35 38 00 20 0b 00 00 |....$T11|558. ...|
|00000030| 02 00 00 00 03 00 24 54 | 31 31 35 37 31 00 30 0b |......$T|11571.0.|
|00000040| 00 00 02 00 00 00 03 00 | 24 54 31 31 35 38 32 00 |........|$T11582.|
|00000050| 40 0b 00 00 02 00 00 00 | 03 00 24 53 47 31 31 33 |@.......|..$SG113|
|00000060| 36 35 78 05 00 00 01 00 | 00 00 03 00 24 54 31 31 |65x.....|....$T11|
|00000070| 35 39 33 00 50 0b 00 00 | 02 00 00 00 03 00 24 54 |593.P...|......$T|
|00000080| 31 31 36 30 35 00 60 0b | 00 00 02 00 00 00 03 00 |11605.`.|........|
|00000090| 24 53 47 31 31 34 33 34 | 9a 06 00 00 01 00 00 00 |$SG11434|........|
|000000a0| 03 00 24 53 47 31 31 34 | 36 33 2e 08 00 00 01 00 |..$SG114|63......|
|000000b0| 00 00 03 00 24 53 47 31 | 31 34 36 31 fa 07 00 00 |....$SG1|1461....|
|000000c0| 01 00 00 00 03 00 40 63 | 6f 6d 70 2e 69 64 00 00 |......@c|omp.id..|
|000000d0| 00 00 ff ff 00 00 03 00 | 24 52 30 30 30 30 30 30 |........|$R000000|
|000000e0| 80 0e 00 00 05 00 00 00 | 03 00 40 63 6f 6d 70 2e |........|..@comp.|
|000000f0| 69 64 00 00 00 00 ff ff | 00 00 03 00 40 63 6f 6d |id......|....@com|
|00000100| 70 2e 69 64 00 00 00 00 | ff ff 00 00 03 00 40 63 |p.id....|......@c|
|00000110| 6f 6d 70 2e 69 64 00 00 | 00 00 ff ff 00 00 03 00 |omp.id..|........|
|00000120| 2e 69 64 61 74 61 24 36 | c6 0d 00 00 04 00 00 00 |.idata$6|........|
|00000130| 03 00 40 69 64 2e 63 6f | 6d 70 00 00 00 00 ff ff |..@id.co|mp......|
|00000140| 00 00 03 00 40 69 64 2e | 63 6f 6d 70 00 00 00 00 |....@id.|comp....|
|00000150| ff ff 00 00 03 00 40 69 | 64 2e 63 6f 6d 70 00 00 |......@i|d.comp..|
|00000160| 00 00 ff ff 00 00 03 00 | 40 69 64 2e 63 6f 6d 70 |........|@id.comp|
|00000170| 00 00 00 00 ff ff 00 00 | 03 00 40 69 64 2e 63 6f |........|..@id.co|
|00000180| 6d 70 00 00 00 00 ff ff | 00 00 03 00 40 69 64 2e |mp......|....@id.|
|00000190| 63 6f 6d 70 00 00 00 00 | ff ff 00 00 03 00 40 69 |comp....|......@i|
|000001a0| 64 2e 63 6f 6d 70 00 00 | 00 00 ff ff 00 00 03 00 |d.comp..|........|
|000001b0| 40 69 64 2e 63 6f 6d 70 | 00 00 00 00 ff ff 00 00 |@id.comp|........|
|000001c0| 03 00 40 69 64 2e 63 6f | 6d 70 00 00 00 00 ff ff |..@id.co|mp......|
|000001d0| 00 00 03 00 40 69 64 2e | 63 6f 6d 70 00 00 00 00 |....@id.|comp....|
|000001e0| ff ff 00 00 03 00 40 69 | 64 2e 63 6f 6d 70 00 00 |......@i|d.comp..|
|000001f0| 00 00 ff ff 00 00 03 00 | 40 69 64 2e 63 6f 6d 70 |........|@id.comp|
|00000200| 00 00 00 00 ff ff 00 00 | 03 00 40 69 64 2e 63 6f |........|..@id.co|
|00000210| 6d 70 00 00 00 00 ff ff | 00 00 03 00 40 69 64 2e |mp......|....@id.|
|00000220| 63 6f 6d 70 00 00 00 00 | ff ff 00 00 03 00 40 69 |comp....|......@i|
|00000230| 64 2e 63 6f 6d 70 00 00 | 00 00 ff ff 00 00 03 00 |d.comp..|........|
|00000240| 40 69 64 2e 63 6f 6d 70 | 00 00 00 00 ff ff 00 00 |@id.comp|........|
|00000250| 03 00 40 69 64 2e 63 6f | 6d 70 00 00 00 00 ff ff |..@id.co|mp......|
|00000260| 00 00 03 00 40 69 64 2e | 63 6f 6d 70 00 00 00 00 |....@id.|comp....|
|00000270| ff ff 00 00 03 00 40 63 | 6f 6d 70 2e 69 64 00 00 |......@c|omp.id..|
|00000280| 00 00 ff ff 00 00 03 00 | 40 63 6f 6d 70 2e 69 64 |........|@comp.id|
|00000290| 00 00 00 00 ff ff 00 00 | 03 00 2e 69 64 61 74 61 |........|...idata|
|000002a0| 24 36 fa 0d 00 00 04 00 | 00 00 03 00 40 69 64 2e |$6......|....@id.|
|000002b0| 63 6f 6d 70 00 00 00 00 | ff ff 00 00 03 00 40 69 |comp....|......@i|
|000002c0| 64 2e 63 6f 6d 70 00 00 | 00 00 ff ff 00 00 03 00 |d.comp..|........|
|000002d0| 68 65 61 64 65 72 00 00 | 00 00 00 00 fe ff 00 00 |header..|........|
|000002e0| 02 00 00 00 00 00 20 03 | 00 00 00 00 00 00 ff ff |...... .|........|
|000002f0| 00 00 02 00 00 00 00 00 | 03 01 00 00 c0 02 00 00 |........|........|
|00000300| 01 00 20 00 02 00 00 00 | 00 00 1d 01 00 00 5c 03 |.. .....|......\.|
|00000310| 00 00 01 00 20 00 02 00 | 00 00 00 00 3c 01 00 00 |.... ...|....<...|
|00000320| 82 03 00 00 01 00 20 00 | 02 00 00 00 00 00 57 01 |...... .|......W.|
|00000330| 00 00 3a 04 00 00 01 00 | 20 00 02 00 00 00 00 00 |..:.....| .......|
|00000340| 78 01 00 00 d8 04 00 00 | 01 00 20 00 02 00 00 00 |x.......|.. .....|
|00000350| 00 00 90 01 00 00 7f 05 | 00 00 01 00 20 00 02 00 |........|.... ...|
|00000360| 00 00 00 00 a5 01 00 00 | 0c 06 00 00 01 00 20 00 |........|...... .|
|00000370| 02 00 00 00 00 00 c1 01 | 00 00 a4 06 00 00 01 00 |........|........|
|00000380| 20 00 02 00 00 00 00 00 | d5 01 00 00 dc 07 00 00 | .......|........|
|00000390| 01 00 20 00 02 00 00 00 | 00 00 e9 01 00 00 59 08 |.. .....|......Y.|
|000003a0| 00 00 01 00 20 00 02 00 | 00 00 00 00 fc 01 00 00 |.... ...|........|
|000003b0| ca 08 00 00 01 00 20 00 | 02 00 00 00 00 00 04 00 |...... .|........|
|000003c0| 00 00 e8 08 00 00 01 00 | 20 00 02 00 00 00 00 00 |........| .......|
|000003d0| 2e 03 00 00 dc 09 00 00 | 01 00 20 00 02 00 00 00 |........|.. .....|
|000003e0| 00 00 6e 04 00 00 e2 09 | 00 00 01 00 20 00 02 00 |..n.....|.... ...|
|000003f0| 00 00 00 00 01 05 00 00 | e8 09 00 00 01 00 20 00 |........|...... .|
|00000400| 02 00 00 00 00 00 cd 04 | 00 00 00 0a 00 00 02 00 |........|........|
|00000410| 00 00 02 00 00 00 00 00 | e2 04 00 00 04 0a 00 00 |........|........|
|00000420| 02 00 00 00 02 00 00 00 | 00 00 12 07 00 00 08 0a |........|........|
|00000430| 00 00 02 00 00 00 02 00 | 00 00 00 00 5e 03 00 00 |........|....^...|
|00000440| 0c 0a 00 00 02 00 00 00 | 02 00 00 00 00 00 7e 03 |........|......~.|
|00000450| 00 00 10 0a 00 00 02 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000460| 9b 03 00 00 14 0a 00 00 | 02 00 00 00 02 00 00 00 |........|........|
|00000470| 00 00 bc 03 00 00 18 0a | 00 00 02 00 00 00 02 00 |........|........|
|00000480| 00 00 00 00 cb 03 00 00 | 1c 0a 00 00 02 00 00 00 |........|........|
|00000490| 02 00 00 00 00 00 bf 05 | 00 00 1c 0a 00 00 02 00 |........|........|
|000004a0| 00 00 02 00 00 00 00 00 | eb 03 00 00 20 0a 00 00 |........|.... ...|
|000004b0| 02 00 00 00 02 00 00 00 | 00 00 0d 04 00 00 24 0a |........|......$.|
|000004c0| 00 00 02 00 00 00 02 00 | 00 00 00 00 40 03 00 00 |........|....@...|
|000004d0| 28 0a 00 00 02 00 00 00 | 02 00 00 00 00 00 5b 05 |(.......|......[.|
|000004e0| 00 00 28 0a 00 00 02 00 | 00 00 02 00 00 00 00 00 |..(.....|........|
|000004f0| 3a 04 00 00 2c 0a 00 00 | 02 00 00 00 02 00 00 00 |:...,...|........|
|00000500| 00 00 56 04 00 00 30 0a | 00 00 02 00 00 00 02 00 |..V...0.|........|
|00000510| 00 00 00 00 35 06 00 00 | 34 0a 00 00 02 00 00 00 |....5...|4.......|
|00000520| 02 00 00 00 00 00 78 04 | 00 00 38 0a 00 00 02 00 |......x.|..8.....|
|00000530| 00 00 02 00 00 00 00 00 | 96 04 00 00 3c 0a 00 00 |........|....<...|
|00000540| 02 00 00 00 02 00 00 00 | 00 00 af 04 00 00 40 0a |........|......@.|
|00000550| 00 00 02 00 00 00 02 00 | 00 00 00 00 88 06 00 00 |........|........|
|00000560| 44 0a 00 00 02 00 00 00 | 02 00 00 00 00 00 43 05 |D.......|......C.|
|00000570| 00 00 48 0a 00 00 02 00 | 00 00 02 00 00 00 00 00 |..H.....|........|
|00000580| 1c 04 00 00 4c 0a 00 00 | 02 00 00 00 02 00 00 00 |....L...|........|
|00000590| 00 00 06 03 00 00 50 0a | 00 00 02 00 00 00 02 00 |......P.|........|
|000005a0| 00 00 00 00 b8 06 00 00 | 54 0a 00 00 02 00 00 00 |........|T.......|
|000005b0| 02 00 00 00 00 00 13 00 | 00 00 b4 0a 00 00 02 00 |........|........|
|000005c0| 00 00 02 00 00 00 00 00 | 8a 00 00 00 e4 0a 00 00 |........|........|
|000005d0| 02 00 00 00 02 00 00 00 | 00 00 f9 02 00 00 80 0b |........|........|
|000005e0| 00 00 03 00 00 00 02 00 | 00 00 00 00 e6 02 00 00 |........|........|
|000005f0| 88 0b 00 00 03 00 00 00 | 02 00 00 00 00 00 d6 02 |........|........|
|00000600| 00 00 90 0b 00 00 03 00 | 00 00 02 00 00 00 00 00 |........|........|
|00000610| c1 02 00 00 94 0b 00 00 | 03 00 00 00 02 00 00 00 |........|........|
|00000620| 00 00 a7 02 00 00 98 0b | 00 00 03 00 00 00 02 00 |........|........|
|00000630| 00 00 00 00 93 02 00 00 | 9c 0b 00 00 03 00 00 00 |........|........|
|00000640| 02 00 00 00 00 00 83 02 | 00 00 a0 0b 00 00 03 00 |........|........|
|00000650| 00 00 02 00 00 00 00 00 | 70 02 00 00 a4 0b 00 00 |........|p.......|
|00000660| 03 00 00 00 02 00 00 00 | 00 00 5c 02 00 00 a8 0b |........|..\.....|
|00000670| 00 00 03 00 00 00 02 00 | 00 00 00 00 49 02 00 00 |........|....I...|
|00000680| ac 0b 00 00 03 00 00 00 | 02 00 00 00 00 00 2d 02 |........|......-.|
|00000690| 00 00 b0 0b 00 00 03 00 | 00 00 02 00 00 00 00 00 |........|........|
|000006a0| 0c 02 00 00 b4 0b 00 00 | 03 00 00 00 02 00 00 00 |........|........|
|000006b0| 00 00 26 05 00 00 c0 0b | 00 00 04 00 00 00 02 00 |..&.....|........|
|000006c0| 00 00 00 00 e1 06 00 00 | d4 0b 00 00 04 00 00 00 |........|........|
|000006d0| 02 00 00 00 00 00 9f 06 | 00 00 e8 0b 00 00 04 00 |........|........|
|000006e0| 00 00 02 00 65 6e 64 00 | 00 00 00 00 e0 12 00 00 |....end.|........|
|000006f0| fe ff 00 00 02 00 27 07 | 00 00 5f 44 72 69 76 65 |......'.|.._Drive|
|00000700| 72 45 6e 74 72 79 40 38 | 00 3f 3f 5f 43 40 5f 31 |rEntry@8|.??_C@_1|
|00000710| 44 41 40 43 4c 43 46 40 | 3f 24 41 41 3f 32 3f 24 |DA@CLCF@|?$AA?2?$|
|00000720| 41 41 44 3f 24 41 41 6f | 3f 24 41 41 73 3f 24 41 |AAD?$AAo|?$AAs?$A|
|00000730| 41 44 3f 24 41 41 65 3f | 24 41 41 76 3f 24 41 41 |AD?$AAe?|$AAv?$AA|
|00000740| 69 3f 24 41 41 63 3f 24 | 41 41 65 3f 24 41 41 73 |i?$AAc?$|AAe?$AAs|
|00000750| 3f 24 41 41 3f 32 3f 24 | 41 41 55 3f 24 41 41 6e |?$AA?2?$|AAU?$AAn|
|00000760| 3f 24 41 41 48 3f 24 41 | 41 61 3f 24 41 41 63 3f |?$AAH?$A|Aa?$AAc?|
|00000770| 24 41 41 6b 3f 24 41 41 | 4d 3f 24 41 41 65 40 00 |$AAk?$AA|M?$AAe@.|
|00000780| 3f 3f 5f 43 40 5f 31 43 | 49 40 4e 50 4e 40 3f 24 |??_C@_1C|I@NPN@?$|
|00000790| 41 41 3f 32 3f 24 41 41 | 44 3f 24 41 41 65 3f 24 |AA?2?$AA|D?$AAe?$|
|000007a0| 41 41 76 3f 24 41 41 69 | 3f 24 41 41 63 3f 24 41 |AAv?$AAi|?$AAc?$A|
|000007b0| 41 65 3f 24 41 41 3f 32 | 3f 24 41 41 55 3f 24 41 |Ae?$AA?2|?$AAU?$A|
|000007c0| 41 6e 3f 24 41 41 48 3f | 24 41 41 61 3f 24 41 41 |An?$AAH?|$AAa?$AA|
|000007d0| 63 3f 24 41 41 6b 3f 24 | 41 41 4d 3f 24 41 41 65 |c?$AAk?$|AAM?$AAe|
|000007e0| 3f 24 41 41 44 3f 24 41 | 41 72 3f 24 41 41 76 3f |?$AAD?$A|Ar?$AAv?|
|000007f0| 24 41 41 3f 24 41 41 40 | 00 5f 46 69 6e 64 50 73 |$AA?$AA@|._FindPs|
|00000800| 4c 6f 61 64 65 64 4d 6f | 64 75 6c 65 4c 69 73 74 |LoadedMo|duleList|
|00000810| 40 34 00 5f 46 69 6e 64 | 53 79 73 74 65 6d 50 72 |@4._Find|SystemPr|
|00000820| 6f 63 65 73 73 41 63 74 | 69 76 65 4c 69 6e 6b 40 |ocessAct|iveLink@|
|00000830| 30 00 5f 46 69 6e 64 4b | 69 57 61 69 74 49 6e 4f |0._FindK|iWaitInO|
|00000840| 75 74 4c 69 73 74 48 65 | 61 64 40 38 00 5f 46 69 |utListHe|ad@8._Fi|
|00000850| 6e 64 4b 69 44 69 73 70 | 61 74 63 68 65 72 52 65 |ndKiDisp|atcherRe|
|00000860| 61 64 79 4c 69 73 74 48 | 65 61 64 40 30 00 5f 46 |adyListH|ead@0._F|
|00000870| 69 6e 64 58 50 4b 69 57 | 61 69 74 4c 69 73 74 48 |indXPKiW|aitListH|
|00000880| 65 61 64 40 34 00 5f 67 | 65 74 50 72 6f 63 4e 61 |ead@4._g|etProcNa|
|00000890| 6d 65 4f 66 66 73 65 74 | 40 34 00 5f 66 69 6e 64 |meOffset|@4._find|
|000008a0| 41 64 64 72 65 73 73 6f | 66 53 68 61 64 6f 77 54 |Addresso|fShadowT|
|000008b0| 61 62 6c 65 40 30 00 5f | 44 65 76 69 63 65 44 69 |able@0._|DeviceDi|
|000008c0| 73 70 61 74 63 68 65 72 | 40 34 00 5f 44 72 69 76 |spatcher|@4._Driv|
|000008d0| 65 72 44 69 73 70 61 74 | 63 68 65 72 40 38 00 5f |erDispat|cher@8._|
|000008e0| 63 72 65 61 74 65 4f 75 | 72 44 65 76 69 63 65 40 |createOu|rDevice@|
|000008f0| 34 00 5f 44 72 69 76 65 | 72 55 6e 6c 6f 61 64 40 |4._Drive|rUnload@|
|00000900| 34 00 5f 67 4b 65 53 65 | 72 76 69 63 65 44 65 73 |4._gKeSe|rviceDes|
|00000910| 63 72 69 70 74 6f 72 54 | 61 62 6c 65 53 68 61 64 |criptorT|ableShad|
|00000920| 6f 77 00 5f 67 4b 69 44 | 69 73 70 61 74 63 68 65 |ow._gKiD|ispatche|
|00000930| 72 52 65 61 64 79 4c 69 | 73 74 48 65 61 64 00 5f |rReadyLi|stHead._|
|00000940| 67 58 50 4b 69 57 61 69 | 74 4c 69 73 74 48 65 61 |gXPKiWai|tListHea|
|00000950| 64 00 5f 67 4b 69 57 61 | 69 74 4f 75 74 4c 69 73 |d._gKiWa|itOutLis|
|00000960| 74 48 65 61 64 00 5f 67 | 4b 69 57 61 69 74 49 6e |tHead._g|KiWaitIn|
|00000970| 4c 69 73 74 48 65 61 64 | 00 5f 67 4b 65 72 6e 65 |ListHead|._gKerne|
|00000980| 6c 56 65 72 73 69 6f 6e | 00 5f 67 50 72 6f 63 65 |lVersion|._gProce|
|00000990| 73 73 4e 61 6d 65 4f 66 | 66 73 65 74 00 5f 67 53 |ssNameOf|fset._gS|
|000009a0| 79 73 74 65 6d 50 72 6f | 63 65 73 73 41 63 74 69 |ystemPro|cessActi|
|000009b0| 76 65 4c 69 6e 6b 00 5f | 67 50 73 4c 6f 61 64 65 |veLink._|gPsLoade|
|000009c0| 64 4d 6f 64 75 6c 65 4c | 69 73 74 00 5f 67 70 44 |dModuleL|ist._gpD|
|000009d0| 65 76 69 63 65 4f 62 6a | 65 63 74 00 5f 67 53 79 |eviceObj|ect._gSy|
|000009e0| 6d 62 6f 6c 69 63 4c 69 | 6e 6b 4e 61 6d 65 00 5f |mbolicLi|nkName._|
|000009f0| 67 44 65 76 69 63 65 4e | 61 6d 65 00 5f 5f 69 6d |gDeviceN|ame.__im|
|00000a00| 70 5f 5f 4d 6d 49 73 41 | 64 64 72 65 73 73 56 61 |p__MmIsA|ddressVa|
|00000a10| 6c 69 64 40 34 00 5f 5f | 65 78 63 65 70 74 5f 6c |lid@4.__|except_l|
|00000a20| 69 73 74 00 5f 5f 65 78 | 63 65 70 74 5f 68 61 6e |ist.__ex|cept_han|
|00000a30| 64 6c 65 72 33 00 5f 5f | 69 6d 70 5f 5f 50 73 49 |dler3.__|imp__PsI|
|00000a40| 6e 69 74 69 61 6c 53 79 | 73 74 65 6d 50 72 6f 63 |nitialSy|stemProc|
|00000a50| 65 73 73 00 5f 5f 69 6d | 70 5f 5f 4b 65 57 61 69 |ess.__im|p__KeWai|
|00000a60| 74 46 6f 72 53 69 6e 67 | 6c 65 4f 62 6a 65 63 74 |tForSing|leObject|
|00000a70| 40 32 30 00 5f 5f 69 6d | 70 5f 5f 4b 65 53 65 74 |@20.__im|p__KeSet|
|00000a80| 41 66 66 69 6e 69 74 79 | 54 68 72 65 61 64 40 38 |Affinity|Thread@8|
|00000a90| 00 5f 5f 69 6d 70 5f 5f | 4b 65 44 65 6c 61 79 45 |.__imp__|KeDelayE|
|00000aa0| 78 65 63 75 74 69 6f 6e | 54 68 72 65 61 64 40 31 |xecution|Thread@1|
|00000ab0| 32 00 5f 5f 69 6d 70 5f | 5f 73 74 72 6e 63 6d 70 |2.__imp_|_strncmp|
|00000ac0| 00 5f 5f 69 6d 70 5f 5f | 4b 65 53 65 72 76 69 63 |.__imp__|KeServic|
|00000ad0| 65 44 65 73 63 72 69 70 | 74 6f 72 54 61 62 6c 65 |eDescrip|torTable|
|00000ae0| 00 5f 5f 69 6d 70 5f 5f | 4b 65 41 64 64 53 79 73 |.__imp__|KeAddSys|
|00000af0| 74 65 6d 53 65 72 76 69 | 63 65 54 61 62 6c 65 40 |temServi|ceTable@|
|00000b00| 32 30 00 5f 5f 69 6d 70 | 5f 5f 73 74 72 6e 63 70 |20.__imp|__strncp|
|00000b10| 79 00 5f 5f 69 6d 70 5f | 5f 4d 6d 47 65 74 50 68 |y.__imp_|_MmGetPh|
|00000b20| 79 73 69 63 61 6c 41 64 | 64 72 65 73 73 40 34 00 |ysicalAd|dress@4.|
|00000b30| 5f 5f 69 6d 70 5f 40 49 | 6f 66 43 6f 6d 70 6c 65 |__imp_@I|ofComple|
|00000b40| 74 65 52 65 71 75 65 73 | 74 40 38 00 5f 5f 69 6d |teReques|t@8.__im|
|00000b50| 70 5f 5f 49 6f 44 65 6c | 65 74 65 44 65 76 69 63 |p__IoDel|eteDevic|
|00000b60| 65 40 34 00 5f 44 62 67 | 50 72 69 6e 74 00 5f 5f |e@4._Dbg|Print.__|
|00000b70| 69 6d 70 5f 5f 49 6f 43 | 72 65 61 74 65 53 79 6d |imp__IoC|reateSym|
|00000b80| 62 6f 6c 69 63 4c 69 6e | 6b 40 38 00 5f 5f 69 6d |bolicLin|k@8.__im|
|00000b90| 70 5f 5f 49 6f 43 72 65 | 61 74 65 44 65 76 69 63 |p__IoCre|ateDevic|
|00000ba0| 65 40 32 38 00 5f 5f 69 | 6d 70 5f 5f 49 6f 44 65 |e@28.__i|mp__IoDe|
|00000bb0| 6c 65 74 65 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |leteSymb|olicLink|
|00000bc0| 40 34 00 5f 5f 69 6d 70 | 5f 40 4b 66 4c 6f 77 65 |@4.__imp|_@KfLowe|
|00000bd0| 72 49 72 71 6c 40 34 00 | 5f 5f 69 6d 70 5f 5f 4b |rIrql@4.|__imp__K|
|00000be0| 65 52 61 69 73 65 49 72 | 71 6c 54 6f 44 70 63 4c |eRaiseIr|qlToDpcL|
|00000bf0| 65 76 65 6c 40 30 00 5f | 50 73 47 65 74 56 65 72 |evel@0._|PsGetVer|
|00000c00| 73 69 6f 6e 40 31 36 00 | 5f 4d 6d 49 73 41 64 64 |sion@16.|_MmIsAdd|
|00000c10| 72 65 73 73 56 61 6c 69 | 64 40 34 00 5f 5f 49 4d |ressVali|d@4.__IM|
|00000c20| 50 4f 52 54 5f 44 45 53 | 43 52 49 50 54 4f 52 5f |PORT_DES|CRIPTOR_|
|00000c30| 6e 74 6f 73 6b 72 6e 6c | 00 5f 5f 69 6d 70 5f 5f |ntoskrnl|.__imp__|
|00000c40| 5f 65 78 63 65 70 74 5f | 68 61 6e 64 6c 65 72 33 |_except_|handler3|
|00000c50| 00 5f 50 73 49 6e 69 74 | 69 61 6c 53 79 73 74 65 |._PsInit|ialSyste|
|00000c60| 6d 50 72 6f 63 65 73 73 | 00 5f 4b 65 57 61 69 74 |mProcess|._KeWait|
|00000c70| 46 6f 72 53 69 6e 67 6c | 65 4f 62 6a 65 63 74 40 |ForSingl|eObject@|
|00000c80| 32 30 00 5f 4b 65 53 65 | 74 41 66 66 69 6e 69 74 |20._KeSe|tAffinit|
|00000c90| 79 54 68 72 65 61 64 40 | 38 00 5f 4b 65 44 65 6c |yThread@|8._KeDel|
|00000ca0| 61 79 45 78 65 63 75 74 | 69 6f 6e 54 68 72 65 61 |ayExecut|ionThrea|
|00000cb0| 64 40 31 32 00 5f 4b 65 | 53 65 72 76 69 63 65 44 |d@12._Ke|ServiceD|
|00000cc0| 65 73 63 72 69 70 74 6f | 72 54 61 62 6c 65 00 5f |escripto|rTable._|
|00000cd0| 4b 65 41 64 64 53 79 73 | 74 65 6d 53 65 72 76 69 |KeAddSys|temServi|
|00000ce0| 63 65 54 61 62 6c 65 40 | 32 30 00 5f 4d 6d 47 65 |ceTable@|20._MmGe|
|00000cf0| 74 50 68 79 73 69 63 61 | 6c 41 64 64 72 65 73 73 |tPhysica|lAddress|
|00000d00| 40 34 00 40 49 6f 66 43 | 6f 6d 70 6c 65 74 65 52 |@4.@IofC|ompleteR|
|00000d10| 65 71 75 65 73 74 40 38 | 00 5f 49 6f 44 65 6c 65 |equest@8|._IoDele|
|00000d20| 74 65 44 65 76 69 63 65 | 40 34 00 5f 5f 69 6d 70 |teDevice|@4.__imp|
|00000d30| 5f 5f 44 62 67 50 72 69 | 6e 74 00 5f 49 6f 43 72 |__DbgPri|nt._IoCr|
|00000d40| 65 61 74 65 53 79 6d 62 | 6f 6c 69 63 4c 69 6e 6b |eateSymb|olicLink|
|00000d50| 40 38 00 5f 49 6f 43 72 | 65 61 74 65 44 65 76 69 |@8._IoCr|eateDevi|
|00000d60| 63 65 40 32 38 00 5f 49 | 6f 44 65 6c 65 74 65 53 |ce@28._I|oDeleteS|
|00000d70| 79 6d 62 6f 6c 69 63 4c | 69 6e 6b 40 34 00 5f 5f |ymbolicL|ink@4.__|
|00000d80| 69 6d 70 5f 5f 50 73 47 | 65 74 56 65 72 73 69 6f |imp__PsG|etVersio|
|00000d90| 6e 40 31 36 00 5f 5f 4e | 55 4c 4c 5f 49 4d 50 4f |n@16.__N|ULL_IMPO|
|00000da0| 52 54 5f 44 45 53 43 52 | 49 50 54 4f 52 00 7f 6e |RT_DESCR|IPTOR..n|
|00000db0| 74 6f 73 6b 72 6e 6c 5f | 4e 55 4c 4c 5f 54 48 55 |toskrnl_|NULL_THU|
|00000dc0| 4e 4b 5f 44 41 54 41 00 | 40 4b 66 4c 6f 77 65 72 |NK_DATA.|@KfLower|
|00000dd0| 49 72 71 6c 40 34 00 5f | 5f 49 4d 50 4f 52 54 5f |Irql@4._|_IMPORT_|
|00000de0| 44 45 53 43 52 49 50 54 | 4f 52 5f 48 41 4c 00 5f |DESCRIPT|OR_HAL._|
|00000df0| 4b 65 52 61 69 73 65 49 | 72 71 6c 54 6f 44 70 63 |KeRaiseI|rqlToDpc|
|00000e00| 4c 65 76 65 6c 40 30 00 | 7f 48 41 4c 5f 4e 55 4c |Level@0.|.HAL_NUL|
|00000e10| 4c 5f 54 48 55 4e 4b 5f | 44 41 54 41 00          |L_THUNK_|DATA.   |
+--------+-------------------------+-------------------------+--------+--------+