输出系统中加载的驱动文件
本帖最后由 元始天尊 于 2015-5-21 08:15 编辑LIST_ENTRY结构:
#include <ntddk.h>
#include "ntmem.h"
#include <ntddk.h>
//这里字节对齐要采用默认,不要按1对齐,这样才符合32位和64位结构体
typedef struct _LDR_DATA_TABLE_ENTRY
{
LIST_ENTRY InLoadOrderLinks;
LIST_ENTRY InMemoryOrderLinks;
LIST_ENTRY InInitializationOrderLinks;
PVOID DllBase;
PVOID EntryPoint;
ULONG SizeOfImage;
UNICODE_STRING FullDllName;
UNICODE_STRING BaseDllName;
ULONG Flags;
USHORT LoadCount;
USHORT TlsIndex;
union
{
LIST_ENTRY HashLinks;
struct
{
PVOID SectionPointer;
ULONG CheckSum;
};
};
union
{
struct
{
ULONG TimeDateStamp;
};
struct
{
PVOID LoadedImports;
};
};
struct _ACTIVATION_CONTEXT * EntryPointActivationContext;
PVOID PatchInformation;
} LDR_DATA_TABLE_ENTRY, *PLDR_DATA_TABLE_ENTRY;
extern "C" NTSTATUS DriverEntry(PDRIVER_OBJECT pDriverObj, PUNICODE_STRING pRegistryString)
{
PLDR_DATA_TABLE_ENTRY Begin = (PLDR_DATA_TABLE_ENTRY)pDriverObj->DriverSection;
PLIST_ENTRY Head = (PLIST_ENTRY)Begin->InLoadOrderLinks.Flink;
PLIST_ENTRY Next = Head->Flink;
do
{
PLDR_DATA_TABLE_ENTRY Entry = CONTAINING_RECORD(Next, LDR_DATA_TABLE_ENTRY, InLoadOrderLinks);
Next = Next->Flink;
KdPrint(("%wZ\n",&Entry->FullDllName));//一定要取地址
} while (Next != Head->Flink);
return STATUS_SUCCESS;
}
在xp32 64win7 32通过,方式比较正规,用了微软的 CONTAINING_RECORD 但是不足是没有加锁,还没学到那
我这种方式真正输出了所有元素。结果发现,双向环中,有空节点,,所以要小心,解决办法是加判断
按双序输出所有元素:
extern "C" NTSTATUS DriverEntry(PDRIVER_OBJECT pDriverObj, PUNICODE_STRING pRegistryString)
{
PLDR_DATA_TABLE_ENTRY Begin = (PLDR_DATA_TABLE_ENTRY)pDriverObj->DriverSection;
PLIST_ENTRY Head = NULL,Next = NULL;
KdPrint(("按LoadOrder的前序输出\n"));
Head = (PLIST_ENTRY)Begin->InLoadOrderLinks.Flink;
Next = Head->Flink;
do
{
PLDR_DATA_TABLE_ENTRY Entry = CONTAINING_RECORD(Next, LDR_DATA_TABLE_ENTRY, InLoadOrderLinks);
Next = Next->Flink;
KdPrint(("\tListAddr=%x,PLDR=%x,DllBase=%x,EntryPoint=%x,SizeOfImage=%d,FullDllName=%wZ,BaseDllName=%wZ,Flags=%d,LoadCount=%d,TlsIndex=%d\n",
Next,Entry,Entry->DllBase,Entry->EntryPoint,Entry->SizeOfImage,&Entry->FullDllName,&Entry->BaseDllName,Entry->Flags,Entry->LoadCount,Entry->TlsIndex));
} while(Next != Head->Flink);
KdPrint(("按LoadOrder的后序输出\n"));
Head = (PLIST_ENTRY)Begin->InLoadOrderLinks.Blink;
Next = Head->Blink;
do
{
PLDR_DATA_TABLE_ENTRY Entry = CONTAINING_RECORD(Next, LDR_DATA_TABLE_ENTRY, InLoadOrderLinks);
Next = Next->Blink;
KdPrint(("\tListAddr=%x,PLDR=%x,DllBase=%x,EntryPoint=%x,SizeOfImage=%d,FullDllName=%wZ,BaseDllName=%wZ,Flags=%d,LoadCount=%d,TlsIndex=%d\n",
Next,Entry,Entry->DllBase,Entry->EntryPoint,Entry->SizeOfImage,&Entry->FullDllName,&Entry->BaseDllName,Entry->Flags,Entry->LoadCount,Entry->TlsIndex));
} while(Next != Head->Blink);
//奇怪的是LDR里InMemoryOrderLinks和InInitializationOrderLinks的链表指针前后2个指针都是空的,不明白
KdPrint(("test\n"));
Head = (PLIST_ENTRY)Begin->InLoadOrderLinks.Flink;
Next = Head->Flink;
for(int i=0;i<200;i++)//为了输出循环节,这里显示200个
{
PLDR_DATA_TABLE_ENTRY Entry = CONTAINING_RECORD(Next, LDR_DATA_TABLE_ENTRY, InLoadOrderLinks);
Next = Next->Flink;
KdPrint(("%x\t",Next));
}
return STATUS_SUCCESS;
} !list -t nt!_LIST_ENTRY.Flink -x "dt nt!_LDR_DATA_TABLE_ENTRY @$extret"nt!PsLoadedModuleList//第一项为空
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821fc3a8 - 0x81804de8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : (null)
+0x01c EntryPoint : (null)
+0x020 SizeOfImage : 0x8055c4e0
+0x024 FullDllName : _UNICODE_STRING ""
+0x02c BaseDllName : _UNICODE_STRING ""
+0x034 Flags : 0
+0x038 LoadCount : 0
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0
+0x044 TimeDateStamp : 0
+0x044 LoadedImports : (null)
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : (null)
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821fc340 - 0x80555040 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0x804d8000 Void
+0x01c EntryPoint : 0x806908e0 Void
+0x020 SizeOfImage : 0x1f8580
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\ntkrnlpa.exe"
+0x02c BaseDllName : _UNICODE_STRING "ntoskrnl.exe"
+0x034 Flags : 0xc004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x1feda4 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x1feda4
+0x044 TimeDateStamp : 0
+0x044 LoadedImports : (null)
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0074006e Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821fc2d8 - 0x821fc3a8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0x806d1000 Void
+0x01c EntryPoint : 0x806ee0b8 Void
+0x020 SizeOfImage : 0x20300
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\hal.dll"
+0x02c BaseDllName : _UNICODE_STRING "hal.dll"
+0x034 Flags : 0xc004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x24f17 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x24f17
+0x044 TimeDateStamp : 0
+0x044 LoadedImports : (null)
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00610068 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821fc268 - 0x821fc340 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf856f000 Void
+0x01c EntryPoint : 0xf85702c0 Void
+0x020 SizeOfImage : 0x2a000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\KDBAZIS.DLL"
+0x02c BaseDllName : _UNICODE_STRING "kdcom.dll"
+0x034 Flags : 0x1004000
+0x038 LoadCount : 3
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0xd829 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0xd829
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0064006b Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821fc200 - 0x821fc2d8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8aaa000 Void
+0x01c EntryPoint : 0xf8aab872 Void
+0x020 SizeOfImage : 0x3000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\BOOTVID.dll"
+0x02c BaseDllName : _UNICODE_STRING "BOOTVID.dll"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 2
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0xa36c ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0xa36c
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x004f0042 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821fc190 - 0x821fc268 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8541000 Void
+0x01c EntryPoint : 0xf856a059 Void
+0x020 SizeOfImage : 0x2e000
+0x024 FullDllName : _UNICODE_STRING "ACPI.sys"
+0x02c BaseDllName : _UNICODE_STRING "ACPI.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x332df ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x332df
+0x044 TimeDateStamp : 0x821fc191
+0x044 LoadedImports : 0x821fc191 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00430041 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821fc128 - 0x821fc200 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8b9a000 Void
+0x01c EntryPoint : 0xf8b9ab80 Void
+0x020 SizeOfImage : 0x2000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\DRIVERS\WMILIB.SYS"
+0x02c BaseDllName : _UNICODE_STRING "WMILIB.SYS"
+0x034 Flags : 0xd004000
+0x038 LoadCount : 0x15
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0xd600 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0xd600
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x004d0057 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821fc0b8 - 0x821fc190 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf8534740 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8530000 Void
+0x01c EntryPoint : 0xf853e004 Void
+0x020 SizeOfImage : 0x11000
+0x024 FullDllName : _UNICODE_STRING "pci.sys"
+0x02c BaseDllName : _UNICODE_STRING "pci.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x169fa ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x169fa
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00630070 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821fc048 - 0x821fc128 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf869a000 Void
+0x01c EntryPoint : 0xf86a1a02 Void
+0x020 SizeOfImage : 0x9000
+0x024 FullDllName : _UNICODE_STRING "isapnp.sys"
+0x02c BaseDllName : _UNICODE_STRING "isapnp.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0xbce3 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0xbce3
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00730069 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821ed008 - 0x821fc0b8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8aae000 Void
+0x01c EntryPoint : 0xf8aafcd3 Void
+0x020 SizeOfImage : 0x3000
+0x024 FullDllName : _UNICODE_STRING "compbatt.sys"
+0x02c BaseDllName : _UNICODE_STRING "compbatt.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0xf1e6 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0xf1e6
+0x044 TimeDateStamp : 0x821ed009
+0x044 LoadedImports : 0x821ed009 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006f0063 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821edf98 - 0x821fc048 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8ab2000 Void
+0x01c EntryPoint : 0xf8ab3d05 Void
+0x020 SizeOfImage : 0x4000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\DRIVERS\BATTC.SYS"
+0x02c BaseDllName : _UNICODE_STRING "BATTC.SYS"
+0x034 Flags : 0xd004000
+0x038 LoadCount : 2
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x9bca ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x9bca
+0x044 TimeDateStamp : 0x821fc191
+0x044 LoadedImports : 0x821fc191 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00410042 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821edf28 - 0x821ed008 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8b9c000 Void
+0x01c EntryPoint : 0xf8b9cf05 Void
+0x020 SizeOfImage : 0x2000
+0x024 FullDllName : _UNICODE_STRING "intelide.sys"
+0x02c BaseDllName : _UNICODE_STRING "intelide.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x557d ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x557d
+0x044 TimeDateStamp : 0x821edf29
+0x044 LoadedImports : 0x821edf29 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006e0069 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821edeb8 - 0x821edf98 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf891a000 Void
+0x01c EntryPoint : 0xf891f205 Void
+0x020 SizeOfImage : 0x7000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\DRIVERS\PCIIDEX.SYS"
+0x02c BaseDllName : _UNICODE_STRING "PCIIDEX.SYS"
+0x034 Flags : 0xd004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x9319 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x9319
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00430050 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821ede48 - 0x821edf28 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf86aa000 Void
+0x01c EntryPoint : 0xf86b3234 Void
+0x020 SizeOfImage : 0xb000
+0x024 FullDllName : _UNICODE_STRING "MountMgr.sys"
+0x02c BaseDllName : _UNICODE_STRING "MountMgr.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0xe3aa ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0xe3aa
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006f004d Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821eddd8 - 0x821edeb8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8511000 Void
+0x01c EntryPoint : 0xf852c4e2 Void
+0x020 SizeOfImage : 0x1f000
+0x024 FullDllName : _UNICODE_STRING "ftdisk.sys"
+0x02c BaseDllName : _UNICODE_STRING "ftdisk.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x2595e ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x2595e
+0x044 TimeDateStamp : 0x821fc191
+0x044 LoadedImports : 0x821fc191 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00740066 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821edd70 - 0x821ede48 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8b9e000 Void
+0x01c EntryPoint : 0xf8b9ebf6 Void
+0x020 SizeOfImage : 0x2000
+0x024 FullDllName : _UNICODE_STRING "dmload.sys"
+0x02c BaseDllName : _UNICODE_STRING "dmload.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0xdc8a ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0xdc8a
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006d0064 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821edd00 - 0x821eddd8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf8508eb0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf84eb000 Void
+0x01c EntryPoint : 0xf850cf05 Void
+0x020 SizeOfImage : 0x26000
+0x024 FullDllName : _UNICODE_STRING "dmio.sys"
+0x02c BaseDllName : _UNICODE_STRING "dmio.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x2b1f8 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x2b1f8
+0x044 TimeDateStamp : 0x821fc191
+0x044 LoadedImports : 0x821fc191 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006d0064 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821edc98 - 0x821edd70 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8922000 Void
+0x01c EntryPoint : 0xf8925c8b Void
+0x020 SizeOfImage : 0x5000
+0x024 FullDllName : _UNICODE_STRING "PartMgr.sys"
+0x02c BaseDllName : _UNICODE_STRING "PartMgr.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0xc1f3 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0xc1f3
+0x044 TimeDateStamp : 0x821fc191
+0x044 LoadedImports : 0x821fc191 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00610050 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821edc30 - 0x821edd00 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf86c6180 - 0x2 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf86ba000 Void
+0x01c EntryPoint : 0xf86c8205 Void
+0x020 SizeOfImage : 0x10000
+0x024 FullDllName : _UNICODE_STRING "vmci.sys"
+0x02c BaseDllName : _UNICODE_STRING "vmci.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x1f628 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x1f628
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006d0076 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821edbc8 - 0x821edc98 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf84e35c0 - 0x3 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf84d8000 Void
+0x01c EntryPoint : 0xf84e806a Void
+0x020 SizeOfImage : 0x13000
+0x024 FullDllName : _UNICODE_STRING "vsock.sys"
+0x02c BaseDllName : _UNICODE_STRING "vsock.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x128d0 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x128d0
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00730076 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821edb58 - 0x821edc30 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf84cbee0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf84c0000 Void
+0x01c EntryPoint : 0xf84d59f7 Void
+0x020 SizeOfImage : 0x18000
+0x024 FullDllName : _UNICODE_STRING "atapi.sys"
+0x02c BaseDllName : _UNICODE_STRING "atapi.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x1cd25 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x1cd25
+0x044 TimeDateStamp : 0x821fc191
+0x044 LoadedImports : 0x821fc191 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00740061 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821edae8 - 0x821edbc8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8ba0000 Void
+0x01c EntryPoint : 0xf8ba0d28 Void
+0x020 SizeOfImage : 0x2000
+0x024 FullDllName : _UNICODE_STRING "vmscsi.sys"
+0x02c BaseDllName : _UNICODE_STRING "vmscsi.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x6073 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x6073
+0x044 TimeDateStamp : 0x821edae9
+0x044 LoadedImports : 0x821edae9 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006d0076 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821eda80 - 0x821edb58 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf84afa50 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf84a8000 Void
+0x01c EntryPoint : 0xf84bd090 Void
+0x020 SizeOfImage : 0x18000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\drivers\SCSIPORT.SYS"
+0x02c BaseDllName : _UNICODE_STRING "SCSIPORT.SYS"
+0x034 Flags : 0xd004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x21101 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x21101
+0x044 TimeDateStamp : 0x821fc191
+0x044 LoadedImports : 0x821fc191 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00430053 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821eda10 - 0x821edae8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf86ca000 Void
+0x01c EntryPoint : 0xf86d18ad Void
+0x020 SizeOfImage : 0x9000
+0x024 FullDllName : _UNICODE_STRING "disk.sys"
+0x02c BaseDllName : _UNICODE_STRING "disk.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x14c02 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x14c02
+0x044 TimeDateStamp : 0x821eda11
+0x044 LoadedImports : 0x821eda11 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00690064 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821ed9a0 - 0x821eda80 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf86e0930 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf86da000 Void
+0x01c EntryPoint : 0xf86e4e0f Void
+0x020 SizeOfImage : 0xd000
+0x024 FullDllName : _UNICODE_STRING "\WINDOWS\system32\DRIVERS\CLASSPNP.SYS"
+0x02c BaseDllName : _UNICODE_STRING "CLASSPNP.SYS"
+0x034 Flags : 0xd004000
+0x038 LoadCount : 2
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0xca8c ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0xca8c
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x004c0043 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821ed930 - 0x821eda10 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf84925a0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8488000 Void
+0x01c EntryPoint : 0xf84a505c Void
+0x020 SizeOfImage : 0x20000
+0x024 FullDllName : _UNICODE_STRING "fltMgr.sys"
+0x02c BaseDllName : _UNICODE_STRING "fltMgr.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x251bb ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x251bb
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006c0066 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821ed8c8 - 0x821ed9a0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf84742a0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8471000 Void
+0x01c EntryPoint : 0xf84861b3 Void
+0x020 SizeOfImage : 0x17000
+0x024 FullDllName : _UNICODE_STRING "KSecDD.sys"
+0x02c BaseDllName : _UNICODE_STRING "KSecDD.sys"
+0x034 Flags : 0xd004000
+0x038 LoadCount : 6
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x2098b ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x2098b
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0053004b Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821ed860 - 0x821ed930 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf83fe968 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf83e4000 Void
+0x01c EntryPoint : 0xf8469384 Void
+0x020 SizeOfImage : 0x8d000
+0x024 FullDllName : _UNICODE_STRING "Ntfs.sys"
+0x02c BaseDllName : _UNICODE_STRING "Ntfs.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x9586b ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x9586b
+0x044 TimeDateStamp : 0x821ed931
+0x044 LoadedImports : 0x821ed931 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0074004e Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821ed7f8 - 0x821ed8c8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf83bd080 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf83b7000 Void
+0x01c EntryPoint : 0xf83e0105 Void
+0x020 SizeOfImage : 0x2d000
+0x024 FullDllName : _UNICODE_STRING "NDIS.sys"
+0x02c BaseDllName : _UNICODE_STRING "NDIS.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 0xf
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x2e181 ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x2e181
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0044004e Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x821ed788 - 0x821ed860 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf83a0e90 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf839d000 Void
+0x01c EntryPoint : 0xf83b40b6 Void
+0x020 SizeOfImage : 0x1a000
+0x024 FullDllName : _UNICODE_STRING "Mup.sys"
+0x02c BaseDllName : _UNICODE_STRING "Mup.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x1ab3e ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x1ab3e
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0075004d Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82054540 - 0x821ed7f8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf86ea000 Void
+0x01c EntryPoint : 0xf86f2d85 Void
+0x020 SizeOfImage : 0xb000
+0x024 FullDllName : _UNICODE_STRING "agp440.sys"
+0x02c BaseDllName : _UNICODE_STRING "agp440.sys"
+0x034 Flags : 0x9004000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0x0 - 0x10c6d ]
+0x03c SectionPointer : (null)
+0x040 CheckSum : 0x10c6d
+0x044 TimeDateStamp : 0x821fc191
+0x044 LoadedImports : 0x821fc191 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00670061 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x820541b0 - 0x821ed788 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf875d858 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf875a000 Void
+0x01c EntryPoint : 0xf8763285 Void
+0x020 SizeOfImage : 0xc000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\i8042prt.sys"
+0x02c BaseDllName : _UNICODE_STRING "i8042prt.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x16ab6 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x16ab6
+0x044 TimeDateStamp : 0x821fc191
+0x044 LoadedImports : 0x821fc191 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00380069 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81fb6808 - 0x82054540 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf8952000 Void
+0x01c EntryPoint : 0xf895566e Void
+0x020 SizeOfImage : 0x5000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\DKbFltr.sys"
+0x02c BaseDllName : _UNICODE_STRING "DKbFltr.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x9205 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x9205
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x004b0044 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81fb6428 - 0x820541b0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf895a000 Void
+0x01c EntryPoint : 0xf895e610 Void
+0x020 SizeOfImage : 0x6000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\kbdclass.sys"
+0x02c BaseDllName : _UNICODE_STRING "kbdclass.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x13d22 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x13d22
+0x044 TimeDateStamp : 0x821fc191
+0x044 LoadedImports : 0x821fc191 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0062006b Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82004678 - 0x81fb6808 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf8ba6000 Void
+0x01c EntryPoint : 0xf8ba6d54 Void
+0x020 SizeOfImage : 0x2000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\vmmouse.sys"
+0x02c BaseDllName : _UNICODE_STRING "vmmouse.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xc554 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xc554
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006d0076 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82004408 - 0x81fb6428 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf8962000 Void
+0x01c EntryPoint : 0xf8966035 Void
+0x020 SizeOfImage : 0x6000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\mouclass.sys"
+0x02c BaseDllName : _UNICODE_STRING "mouclass.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x15448 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x15448
+0x044 TimeDateStamp : 0x821fc191
+0x044 LoadedImports : 0x821fc191 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006f006d Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d59c80 - 0x82004678 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf876d460 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf876a000 Void
+0x01c EntryPoint : 0xf8774ebb Void
+0x020 SizeOfImage : 0xf000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\serial.sys"
+0x02c BaseDllName : _UNICODE_STRING "serial.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x15b37 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x15b37
+0x044 TimeDateStamp : 0x821fc191
+0x044 LoadedImports : 0x821fc191 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00650073 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82112308 - 0x82004408 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf8b3e000 Void
+0x01c EntryPoint : 0xf8b41069 Void
+0x020 SizeOfImage : 0x4000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\serenum.sys"
+0x02c BaseDllName : _UNICODE_STRING "serenum.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x1290a ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x1290a
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00650073 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81cf9d80 - 0x81d59c80 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf896a000 Void
+0x01c EntryPoint : 0xf896f94a Void
+0x020 SizeOfImage : 0x7000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\fdc.sys"
+0x02c BaseDllName : _UNICODE_STRING "fdc.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xd576 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xd576
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00640066 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81cf9bb0 - 0x82112308 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf877dac0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf877a000 Void
+0x01c EntryPoint : 0xf8782afb Void
+0x020 SizeOfImage : 0xb000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\imapi.sys"
+0x02c BaseDllName : _UNICODE_STRING "imapi.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x14a61 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x14a61
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006d0069 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d59b08 - 0x81cf9d80 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf878a000 Void
+0x01c EntryPoint : 0xf87977f2 Void
+0x020 SizeOfImage : 0x10000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\cdrom.sys"
+0x02c BaseDllName : _UNICODE_STRING "cdrom.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x10519 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x10519
+0x044 TimeDateStamp : 0x821eda11
+0x044 LoadedImports : 0x821eda11 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00640063 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81cf9648 - 0x81cf9bb0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf879a000 Void
+0x01c EntryPoint : 0xf87a5785 Void
+0x020 SizeOfImage : 0xe000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\redbook.sys"
+0x02c BaseDllName : _UNICODE_STRING "redbook.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x18361 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x18361
+0x044 TimeDateStamp : 0xe14fc5d0
+0x044 LoadedImports : 0xe14fc5d0 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00650072 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x820531d0 - 0x81d59b08 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf8310860 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8308000 Void
+0x01c EntryPoint : 0xf8328035 Void
+0x020 SizeOfImage : 0x23000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\ks.sys"
+0x02c BaseDllName : _UNICODE_STRING "ks.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 6
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x326f0 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x326f0
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0073006b Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x820bfab8 - 0x81cf9648 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf87ae8e0 - 0x2 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf87aa000 Void
+0x01c EntryPoint : 0xf87b8b63 Void
+0x020 SizeOfImage : 0x10000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\vmx_svga.sys"
+0x02c BaseDllName : _UNICODE_STRING "vmx_svga.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x1dcc3 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x1dcc3
+0x044 TimeDateStamp : 0x820bfab9
+0x044 LoadedImports : 0x820bfab9 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006d0076 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x820bf8e0 - 0x820531d0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf82f7ac0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf82f4000 Void
+0x01c EntryPoint : 0xf8305910 Void
+0x020 SizeOfImage : 0x14000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\VIDEOPRT.SYS"
+0x02c BaseDllName : _UNICODE_STRING "VIDEOPRT.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 5
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x142cf ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x142cf
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00490056 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x820bf660 - 0x820bfab8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf8972000 Void
+0x01c EntryPoint : 0xf8976685 Void
+0x020 SizeOfImage : 0x6000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\usbuhci.sys"
+0x02c BaseDllName : _UNICODE_STRING "usbuhci.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xdb34 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xdb34
+0x044 TimeDateStamp : 0x820bf661
+0x044 LoadedImports : 0x820bf661 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00730075 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81c60258 - 0x820bf8e0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf82edcd0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf82d0000 Void
+0x01c EntryPoint : 0xf82f0c85 Void
+0x020 SizeOfImage : 0x24000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\USBPORT.SYS"
+0x02c BaseDllName : _UNICODE_STRING "USBPORT.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 2
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x2aaec ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x2aaec
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00530055 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82082a48 - 0x820bf660 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf897a000 Void
+0x01c EntryPoint : 0xf897ed05 Void
+0x020 SizeOfImage : 0x6000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\vmxnet.sys"
+0x02c BaseDllName : _UNICODE_STRING "vmxnet.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x88b3 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x88b3
+0x044 TimeDateStamp : 0x821ed861
+0x044 LoadedImports : 0x821ed861 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006d0076 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81c57e90 - 0x81c60258 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf87ba000 Void
+0x01c EntryPoint : 0xf87bece8 Void
+0x020 SizeOfImage : 0xa000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\drivers\es1371mp.sys"
+0x02c BaseDllName : _UNICODE_STRING "es1371mp.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x64
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x16042 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x16042
+0x044 TimeDateStamp : 0x81c57e91
+0x044 LoadedImports : 0x81c57e91 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00730065 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d70f08 - 0x82082a48 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf82b9c30 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf82ac000 Void
+0x01c EntryPoint : 0xf82ccd85 Void
+0x020 SizeOfImage : 0x24000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\drivers\portcls.sys"
+0x02c BaseDllName : _UNICODE_STRING "portcls.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x30b59 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x30b59
+0x044 TimeDateStamp : 0xe154f3e0
+0x044 LoadedImports : 0xe154f3e0 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006f0070 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81c57bd8 - 0x81c57e90 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf87ca000 Void
+0x01c EntryPoint : 0xf87d7d85 Void
+0x020 SizeOfImage : 0xf000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\drivers\drmk.sys"
+0x02c BaseDllName : _UNICODE_STRING "drmk.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x1b540 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x1b540
+0x044 TimeDateStamp : 0x81cf9649
+0x044 LoadedImports : 0x81cf9649 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00720064 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81c57508 - 0x81d70f08 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf8982000 Void
+0x01c EntryPoint : 0xf8988b05 Void
+0x020 SizeOfImage : 0x8000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\usbehci.sys"
+0x02c BaseDllName : _UNICODE_STRING "usbehci.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x99d5 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x99d5
+0x044 TimeDateStamp : 0x820bf661
+0x044 LoadedImports : 0x820bf661 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00730075 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81c57498 - 0x81c57bd8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x2000 - 0x0 ]
+0x018 DllBase : 0xf8b46000 Void
+0x01c EntryPoint : 0xf8b48966 Void
+0x020 SizeOfImage : 0x4000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\CmBatt.sys"
+0x02c BaseDllName : _UNICODE_STRING "CmBatt.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x51e
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x9d32 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x9d32
+0x044 TimeDateStamp : 0xe14b1090
+0x044 LoadedImports : 0xe14b1090 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006d0043 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d706f0 - 0x81c57508 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf87da000 Void
+0x01c EntryPoint : 0xf87df805 Void
+0x020 SizeOfImage : 0xa000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\processr.sys"
+0x02c BaseDllName : _UNICODE_STRING "processr.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xc9fe ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xc9fe
+0x044 TimeDateStamp : 0x821fc191
+0x044 LoadedImports : 0x821fc191 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00720070 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81cd5c88 - 0x81c57498 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8b4a000 Void
+0x01c EntryPoint : 0xf8b4c1a4 Void
+0x020 SizeOfImage : 0x3000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\fsvga.sys"
+0x02c BaseDllName : _UNICODE_STRING "fsvga.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xbebb ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xbebb
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00730066 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81cd5130 - 0x81d706f0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf8d7a000 Void
+0x01c EntryPoint : 0xf8d7a600 Void
+0x020 SizeOfImage : 0x1000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\audstub.sys"
+0x02c BaseDllName : _UNICODE_STRING "audstub.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x105b1 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x105b1
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00750061 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82130638 - 0x81cd5c88 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf87ea000 Void
+0x01c EntryPoint : 0xf87f5505 Void
+0x020 SizeOfImage : 0xd000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\rasl2tp.sys"
+0x02c BaseDllName : _UNICODE_STRING "rasl2tp.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xfae5 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xfae5
+0x044 TimeDateStamp : 0x821ed861
+0x044 LoadedImports : 0x821ed861 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00610072 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81cd4830 - 0x81cd5130 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf8b4f990 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf8b4e000 Void
+0x01c EntryPoint : 0xf8b4fd58 Void
+0x020 SizeOfImage : 0x3000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\ndistapi.sys"
+0x02c BaseDllName : _UNICODE_STRING "ndistapi.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 2
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xa1b3 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xa1b3
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0064006e Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82081788 - 0x82130638 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf826d000 Void
+0x01c EntryPoint : 0xf8281223 Void
+0x020 SizeOfImage : 0x17000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\ndiswan.sys"
+0x02c BaseDllName : _UNICODE_STRING "ndiswan.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x18b10 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x18b10
+0x044 TimeDateStamp : 0xe14fc568
+0x044 LoadedImports : 0xe14fc568 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0064006e Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82081610 - 0x81cd4830 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf87fa000 Void
+0x01c EntryPoint : 0xf8803165 Void
+0x020 SizeOfImage : 0xb000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\raspppoe.sys"
+0x02c BaseDllName : _UNICODE_STRING "raspppoe.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xd695 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xd695
+0x044 TimeDateStamp : 0x821ed861
+0x044 LoadedImports : 0x821ed861 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00610072 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d6d7b8 - 0x82081788 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf880a000 Void
+0x01c EntryPoint : 0xf8814985 Void
+0x020 SizeOfImage : 0xc000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\raspptp.sys"
+0x02c BaseDllName : _UNICODE_STRING "raspptp.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x188a6 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x188a6
+0x044 TimeDateStamp : 0xe14fc510
+0x044 LoadedImports : 0xe14fc510 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00610072 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82131688 - 0x82081610 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf898d220 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf898a000 Void
+0x01c EntryPoint : 0xf898dd05 Void
+0x020 SizeOfImage : 0x5000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\TDI.SYS"
+0x02c BaseDllName : _UNICODE_STRING "TDI.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 0xa
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x649e ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x649e
+0x044 TimeDateStamp : 0x821ed861
+0x044 LoadedImports : 0x821ed861 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00440054 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d6d3b0 - 0x81d6d7b8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x35007b - 0x0 ]
+0x018 DllBase : 0xf825c000 Void
+0x01c EntryPoint : 0xf826b200 Void
+0x020 SizeOfImage : 0x11000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\psched.sys"
+0x02c BaseDllName : _UNICODE_STRING "psched.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x39
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x1e655 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x1e655
+0x044 TimeDateStamp : 0x821ed861
+0x044 LoadedImports : 0x821ed861 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00730070 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x820c2a30 - 0x82131688 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf881a000 Void
+0x01c EntryPoint : 0xf8821a85 Void
+0x020 SizeOfImage : 0x9000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\msgpc.sys"
+0x02c BaseDllName : _UNICODE_STRING "msgpc.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xde60 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xde60
+0x044 TimeDateStamp : 0xe161e178
+0x044 LoadedImports : 0xe161e178 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0073006d Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81ca42d0 - 0x81d6d3b0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf8992000 Void
+0x01c EntryPoint : 0xf89954a2 Void
+0x020 SizeOfImage : 0x5000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\ptilink.sys"
+0x02c BaseDllName : _UNICODE_STRING "ptilink.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 2
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x648c ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x648c
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00740070 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d80be8 - 0x820c2a30 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf899a000 Void
+0x01c EntryPoint : 0xf899d200 Void
+0x020 SizeOfImage : 0x5000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\raspti.sys"
+0x02c BaseDllName : _UNICODE_STRING "raspti.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x114b1 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x114b1
+0x044 TimeDateStamp : 0xe14c88e0
+0x044 LoadedImports : 0xe14c88e0 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00610072 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81c69258 - 0x81ca42d0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf819faf0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf818c000 Void
+0x01c EntryPoint : 0xf81b7605 Void
+0x020 SizeOfImage : 0x30000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\rdpdr.sys"
+0x02c BaseDllName : _UNICODE_STRING "rdpdr.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x39b0c ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x39b0c
+0x044 TimeDateStamp : 0x821ed931
+0x044 LoadedImports : 0x821ed931 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00640072 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x820a1830 - 0x81d80be8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf88312d0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x14 - 0x0 ]
+0x018 DllBase : 0xf882a000 Void
+0x01c EntryPoint : 0xf8832657 Void
+0x020 SizeOfImage : 0xa000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\termdd.sys"
+0x02c BaseDllName : _UNICODE_STRING "termdd.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xdeb5 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xdeb5
+0x044 TimeDateStamp : 0x821fc191
+0x044 LoadedImports : 0x821fc191 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00650074 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81fd1898 - 0x81c69258 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8ba8000 Void
+0x01c EntryPoint : 0xf8ba88dd Void
+0x020 SizeOfImage : 0x2000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\swenum.sys"
+0x02c BaseDllName : _UNICODE_STRING "swenum.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x383a ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x383a
+0x044 TimeDateStamp : 0x81cf9649
+0x044 LoadedImports : 0x81cf9649 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00770073 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81ca4340 - 0x820a1830 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf812eea0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf812e000 Void
+0x01c EntryPoint : 0xf818a848 Void
+0x020 SizeOfImage : 0x5e000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\update.sys"
+0x02c BaseDllName : _UNICODE_STRING "update.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x6cbbf ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x6cbbf
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00700075 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x8212c3b8 - 0x81fd1898 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf8b6a000 Void
+0x01c EntryPoint : 0xf8b6cbe6 Void
+0x020 SizeOfImage : 0x4000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\mssmbios.sys"
+0x02c BaseDllName : _UNICODE_STRING "mssmbios.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xfc8f ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xfc8f
+0x044 TimeDateStamp : 0x821fc191
+0x044 LoadedImports : 0x821fc191 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0073006d Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82078300 - 0x81ca4340 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x38007b - 0x0 ]
+0x018 DllBase : 0xf883a000 Void
+0x01c EntryPoint : 0xf8842b24 Void
+0x020 SizeOfImage : 0xa000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\Drivers\NDProxy.SYS"
+0x02c BaseDllName : _UNICODE_STRING "NDProxy.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x30
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x11de5 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x11de5
+0x044 TimeDateStamp : 0x821ed861
+0x044 LoadedImports : 0x821ed861 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0044004e Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x8203ba38 - 0x8212c3b8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf8851c20 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x1c - 0x0 ]
+0x018 DllBase : 0xf884a000 Void
+0x01c EntryPoint : 0xf8857105 Void
+0x020 SizeOfImage : 0xf000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\usbhub.sys"
+0x02c BaseDllName : _UNICODE_STRING "usbhub.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x4d
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xfbbc ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xfbbc
+0x044 TimeDateStamp : 0xe14ff4c0
+0x044 LoadedImports : 0xe14ff4c0 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00730075 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d47be0 - 0x82078300 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8baa000 Void
+0x01c EntryPoint : 0xf8baa300 Void
+0x020 SizeOfImage : 0x2000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\USBD.SYS"
+0x02c BaseDllName : _UNICODE_STRING "USBD.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 3
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x40af ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x40af
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00530055 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x820088c0 - 0x8203ba38 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf8b8a000 Void
+0x01c EntryPoint : 0xf8b8bee1 Void
+0x020 SizeOfImage : 0x3000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\gameenum.sys"
+0x02c BaseDllName : _UNICODE_STRING "gameenum.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x92df ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x92df
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00610067 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x8211dda0 - 0x81d47be0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf89a2cc0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf89a2000 Void
+0x01c EntryPoint : 0xf89a60f2 Void
+0x020 SizeOfImage : 0x5000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\flpydisk.sys"
+0x02c BaseDllName : _UNICODE_STRING "flpydisk.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x10757 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x10757
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006c0066 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82018e10 - 0x820088c0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8b92000 Void
+0x01c EntryPoint : 0xf8b93a9b Void
+0x020 SizeOfImage : 0x3000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\Drivers\Fs_Rec.SYS"
+0x02c BaseDllName : _UNICODE_STRING "Fs_Rec.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x9b94 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x9b94
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00730046 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82018c10 - 0x8211dda0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8c78000 Void
+0x01c EntryPoint : 0xf8c7859a Void
+0x020 SizeOfImage : 0x1000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\Drivers\Null.SYS"
+0x02c BaseDllName : _UNICODE_STRING "Null.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x8483 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x8483
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0075004e Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x820189f0 - 0x82018e10 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8bac000 Void
+0x01c EntryPoint : 0xf8bac66c Void
+0x020 SizeOfImage : 0x2000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\Drivers\Beep.SYS"
+0x02c BaseDllName : _UNICODE_STRING "Beep.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xc82c ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xc82c
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00650042 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x8212b340 - 0x82018c10 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf89b28b0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf89b2000 Void
+0x01c EntryPoint : 0xf89b6642 Void
+0x020 SizeOfImage : 0x6000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\drivers\vga.sys"
+0x02c BaseDllName : _UNICODE_STRING "vga.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x1170c ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x1170c
+0x044 TimeDateStamp : 0x820bfab9
+0x044 LoadedImports : 0x820bfab9 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00670076 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x820185d8 - 0x820189f0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8bae000 Void
+0x01c EntryPoint : 0xf8bae944 Void
+0x020 SizeOfImage : 0x2000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\DRIVERS\RDPCDD.sys"
+0x02c BaseDllName : _UNICODE_STRING "RDPCDD.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xe2b7 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xe2b7
+0x044 TimeDateStamp : 0x820bfab9
+0x044 LoadedImports : 0x820bfab9 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00440052 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x820183a8 - 0x8212b340 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf89ba920 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf89ba000 Void
+0x01c EntryPoint : 0xf89bdbed Void
+0x020 SizeOfImage : 0x5000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\Drivers\Msfs.SYS"
+0x02c BaseDllName : _UNICODE_STRING "Msfs.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x5bb8 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x5bb8
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0073004d Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81ca4260 - 0x820185d8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf89c2d30 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf89c2000 Void
+0x01c EntryPoint : 0xf89c86d3 Void
+0x020 SizeOfImage : 0x8000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\Drivers\Npfs.SYS"
+0x02c BaseDllName : _UNICODE_STRING "Npfs.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xc3ab ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xc3ab
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0070004e Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d61fa0 - 0x820183a8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8b96000 Void
+0x01c EntryPoint : 0xf8b9766b Void
+0x020 SizeOfImage : 0x3000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\rasacd.sys"
+0x02c BaseDllName : _UNICODE_STRING "rasacd.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xb2e7 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xb2e7
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00610072 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d61ae8 - 0x81ca4260 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xb2fcd000 Void
+0x01c EntryPoint : 0xb2fdda85 Void
+0x020 SizeOfImage : 0x13000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\ipsec.sys"
+0x02c BaseDllName : _UNICODE_STRING "ipsec.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x16389 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x16389
+0x044 TimeDateStamp : 0x821ed861
+0x044 LoadedImports : 0x821ed861 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00700069 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d617b8 - 0x81d61fa0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xb2fb3970 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xb2f74000 Void
+0x01c EntryPoint : 0xb2fc4d23 Void
+0x020 SizeOfImage : 0x59000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\tcpip.sys"
+0x02c BaseDllName : _UNICODE_STRING "tcpip.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 2
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x67a82 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x67a82
+0x044 TimeDateStamp : 0xe1665d28
+0x044 LoadedImports : 0xe1665d28 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00630074 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81fbaa50 - 0x81d61ae8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xb2f673d8 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xb2f4c000 Void
+0x01c EntryPoint : 0xb2f6ff85 Void
+0x020 SizeOfImage : 0x28000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\netbt.sys"
+0x02c BaseDllName : _UNICODE_STRING "netbt.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x2fe7a ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x2fe7a
+0x044 TimeDateStamp : 0x81d6d7b9
+0x044 LoadedImports : 0x81d6d7b9 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0065006e Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d612b0 - 0x81d617b8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8364000 Void
+0x01c EntryPoint : 0xf83663a0 Void
+0x020 SizeOfImage : 0x3000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\drivers\ws2ifsl.sys"
+0x02c BaseDllName : _UNICODE_STRING "ws2ifsl.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xd183 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xd183
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00730077 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82129f08 - 0x81fbaa50 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xb2f2bfa8 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xb2f2a000 Void
+0x01c EntryPoint : 0xb2f47f40 Void
+0x020 SizeOfImage : 0x22000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\drivers\afd.sys"
+0x02c BaseDllName : _UNICODE_STRING "afd.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x2aa35 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x2aa35
+0x044 TimeDateStamp : 0x81d6d7b9
+0x044 LoadedImports : 0x81d6d7b9 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00660061 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82128708 - 0x81d612b0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf886df50 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf886a000 Void
+0x01c EntryPoint : 0xf8871529 Void
+0x020 SizeOfImage : 0x9000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\netbios.sys"
+0x02c BaseDllName : _UNICODE_STRING "netbios.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x10b5e ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x10b5e
+0x044 TimeDateStamp : 0x81d6d7b9
+0x044 LoadedImports : 0x81d6d7b9 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0065006e Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82078a48 - 0x82129f08 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xb2f17780 - 0x2 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xb2f03000 Void
+0x01c EntryPoint : 0xb2f26ce4 Void
+0x020 SizeOfImage : 0x27000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\drivers\vmhgfs.sys"
+0x02c BaseDllName : _UNICODE_STRING "vmhgfs.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x357ad ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x357ad
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006d0076 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82037570 - 0x82128708 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xb2eb9858 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xb2eb0000 Void
+0x01c EntryPoint : 0xb2ed7388 Void
+0x020 SizeOfImage : 0x2b000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\rdbss.sys"
+0x02c BaseDllName : _UNICODE_STRING "rdbss.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 2
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x2f906 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x2f906
+0x044 TimeDateStamp : 0x821ed931
+0x044 LoadedImports : 0x821ed931 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00640072 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82078290 - 0x82078a48 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xb2e5de30 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xb2e40000 Void
+0x01c EntryPoint : 0xb2ea8203 Void
+0x020 SizeOfImage : 0x70000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\mrxsmb.sys"
+0x02c BaseDllName : _UNICODE_STRING "mrxsmb.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x773d2 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x773d2
+0x044 TimeDateStamp : 0xe14cb070
+0x044 LoadedImports : 0xe14cb070 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0072006d Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81fce2d0 - 0x82037570 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf88818f0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf887a000 Void
+0x01c EntryPoint : 0xf8884085 Void
+0x020 SizeOfImage : 0xb000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\Drivers\Fips.SYS"
+0x02c BaseDllName : _UNICODE_STRING "Fips.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x17fbe ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x17fbe
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00690046 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81cf8fa0 - 0x82078290 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x200054 - 0x0 ]
+0x018 DllBase : 0xf888a000 Void
+0x01c EntryPoint : 0xf8890fd6 Void
+0x020 SizeOfImage : 0x9000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\wanarp.sys"
+0x02c BaseDllName : _UNICODE_STRING "wanarp.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x20
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x9785 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x9785
+0x044 TimeDateStamp : 0xe14fa3f0
+0x044 LoadedImports : 0xe14fa3f0 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00610077 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81c61250 - 0x81fce2d0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf88bc2d8 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf88ba000 Void
+0x01c EntryPoint : 0xf88c7a85 Void
+0x020 SizeOfImage : 0x10000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\Drivers\Cdfs.SYS"
+0x02c BaseDllName : _UNICODE_STRING "Cdfs.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x127a4 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x127a4
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00640043 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81c351a8 - 0x81cf8fa0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf89d5ef0 - 0x2 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xf89d2000 Void
+0x01c EntryPoint : 0xf89d9085 Void
+0x020 SizeOfImage : 0x8000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\usbccgp.sys"
+0x02c BaseDllName : _UNICODE_STRING "usbccgp.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x100cc ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x100cc
+0x044 TimeDateStamp : 0x8203ba39
+0x044 LoadedImports : 0x8203ba39 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00730075 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81f74108 - 0x81c61250 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x81c351b4 - 0x0 ]
+0x018 DllBase : 0xf829c000 Void
+0x01c EntryPoint : 0xf829df05 Void
+0x020 SizeOfImage : 0x3000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\hidusb.sys"
+0x02c BaseDllName : _UNICODE_STRING "hidusb.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0xa
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x12140 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x12140
+0x044 TimeDateStamp : 0xe14981a8
+0x044 LoadedImports : 0xe14981a8 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00690068 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81f73108 - 0x81c351a8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xf88cf9f0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x81f740bc - 0x0 ]
+0x018 DllBase : 0xf88ca000 Void
+0x01c EntryPoint : 0xf88d1e85 Void
+0x020 SizeOfImage : 0x9000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\HIDCLASS.SYS"
+0x02c BaseDllName : _UNICODE_STRING "HIDCLASS.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x81f7
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x156b8 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x156b8
+0x044 TimeDateStamp : 0xe14f85a0
+0x044 LoadedImports : 0xe14f85a0 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00490048 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81cb21a8 - 0x81f74108 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf89da000 Void
+0x01c EntryPoint : 0xf89dfb85 Void
+0x020 SizeOfImage : 0x7000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\HIDPARSE.SYS"
+0x02c BaseDllName : _UNICODE_STRING "HIDPARSE.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 2
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x8e19 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x8e19
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00490048 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81ce81a8 - 0x81f73108 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x81cb21b4 - 0x0 ]
+0x018 DllBase : 0xf8298000 Void
+0x01c EntryPoint : 0xf8299f28 Void
+0x020 SizeOfImage : 0x3000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\mouhid.sys"
+0x02c BaseDllName : _UNICODE_STRING "mouhid.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0xa
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x10dd1 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x10dd1
+0x044 TimeDateStamp : 0xe1498568
+0x044 LoadedImports : 0xe1498568 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006f006d Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d69338 - 0x81cb21a8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8bb0000 Void
+0x01c EntryPoint : 0xf8bb0ccf Void
+0x020 SizeOfImage : 0x2000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\vmusbmouse.sys"
+0x02c BaseDllName : _UNICODE_STRING "vmusbmouse.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xe131 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xe131
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006d0076 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81ce9be8 - 0x81ce81a8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xb2e0bee0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x400 - 0x0 ]
+0x018 DllBase : 0xb2e00000 Void
+0x01c EntryPoint : 0xb2e159f7 Void
+0x020 SizeOfImage : 0x18000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\Drivers\dump_atapi.sys"
+0x02c BaseDllName : _UNICODE_STRING "dump_atapi.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x1cd25 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x1cd25
+0x044 TimeDateStamp : 0x81ce9be9
+0x044 LoadedImports : 0x81ce9be9 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00750064 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d7f008 - 0x81d69338 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8bb2000 Void
+0x01c EntryPoint : 0xf8bb2b80 Void
+0x020 SizeOfImage : 0x2000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\Drivers\dump_WMILIB.SYS"
+0x02c BaseDllName : _UNICODE_STRING "dump_WMILIB.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xd600 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xd600
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00750064 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81fc15b8 - 0x81ce9be8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xbf99ce20 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x10113 - 0x81d7f054 ]
+0x018 DllBase : 0xbf800000 Void
+0x01c EntryPoint : 0xbf9b321f Void
+0x020 SizeOfImage : 0x1c6000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\win32k.sys"
+0x02c BaseDllName : _UNICODE_STRING "win32k.sys"
+0x034 Flags : 0x29104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 1
+0x03c HashLinks : _LIST_ENTRY [ 0xe1021b40 - 0x1cffcf ]
+0x03c SectionPointer : 0xe1021b40 Void
+0x040 CheckSum : 0x1cffcf
+0x044 TimeDateStamp : 0xe14e2090
+0x044 LoadedImports : 0xe14e2090 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0001494e Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81f71108 - 0x81d7f008 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf812a000 Void
+0x01c EntryPoint : 0xf812be80 Void
+0x020 SizeOfImage : 0x3000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\drivers\Dxapi.sys"
+0x02c BaseDllName : _UNICODE_STRING "Dxapi.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0xacc2 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0xacc2
+0x044 TimeDateStamp : 0x820bfab9
+0x044 LoadedImports : 0x820bfab9 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00780044 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81c853d0 - 0x81fc15b8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf89e2000 Void
+0x01c EntryPoint : 0xf89e5890 Void
+0x020 SizeOfImage : 0x5000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\watchdog.sys"
+0x02c BaseDllName : _UNICODE_STRING "watchdog.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x78b2 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x78b2
+0x044 TimeDateStamp : 0x820bfab9
+0x044 LoadedImports : 0x820bfab9 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00610077 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81f501a8 - 0x81f71108 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xbf9d5be0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x81c8541c ]
+0x018 DllBase : 0xbf9c6000 Void
+0x01c EntryPoint : 0xbf9d6090 Void
+0x020 SizeOfImage : 0x12000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\drivers\dxg.sys"
+0x02c BaseDllName : _UNICODE_STRING "dxg.sys"
+0x034 Flags : 0x29104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xe168c9b0 - 0x1313c ]
+0x03c SectionPointer : 0xe168c9b0 Void
+0x040 CheckSum : 0x1313c
+0x044 TimeDateStamp : 0x81f501a9
+0x044 LoadedImports : 0x81f501a9 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0001494e Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d68b70 - 0x81c853d0 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xf8cb6000 Void
+0x01c EntryPoint : 0xf8cb6359 Void
+0x020 SizeOfImage : 0x1000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\drivers\dxgthk.sys"
+0x02c BaseDllName : _UNICODE_STRING "dxgthk.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x35e7 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x35e7
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00780064 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81c07108 - 0x81f501a8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x43830280 - 0x81d68bbc ]
+0x018 DllBase : 0xbf9d8000 Void
+0x01c EntryPoint : 0xbf9fc372 Void
+0x020 SizeOfImage : 0x1cc000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\vmx_fb.dll"
+0x02c BaseDllName : _UNICODE_STRING "vmx_fb.dll"
+0x034 Flags : 0x29104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xe1445828 - 0x1dbde3 ]
+0x03c SectionPointer : 0xe1445828 Void
+0x040 CheckSum : 0x1dbde3
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0001494e Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d7c178 - 0x81d68b70 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xffffffff - 0xffffffff ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xb2d18000 Void
+0x01c EntryPoint : 0xb2d1ac56 Void
+0x020 SizeOfImage : 0x4000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\ndisuio.sys"
+0x02c BaseDllName : _UNICODE_STRING "ndisuio.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x44
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x8481 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x8481
+0x044 TimeDateStamp : 0x821ed861
+0x044 LoadedImports : 0x821ed861 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0064006e Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81f472c8 - 0x81c07108 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xb29b5938 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x4474076e - 0x0 ]
+0x018 DllBase : 0xb29b3000 Void
+0x01c EntryPoint : 0xb29c5e05 Void
+0x020 SizeOfImage : 0x15000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\drivers\wdmaud.sys"
+0x02c BaseDllName : _UNICODE_STRING "wdmaud.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x18cbd ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x18cbd
+0x044 TimeDateStamp : 0x81cf9649
+0x044 LoadedImports : 0x81cf9649 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00640077 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x8211bb90 - 0x81d7c178 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xb2c61e08 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xb2c60000 Void
+0x01c EntryPoint : 0xb2c6d8e1 Void
+0x020 SizeOfImage : 0xf000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\drivers\sysaudio.sys"
+0x02c BaseDllName : _UNICODE_STRING "sysaudio.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x64
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x1c7ce ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x1c7ce
+0x044 TimeDateStamp : 0x81cf9649
+0x044 LoadedImports : 0x81cf9649 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00790073 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81c65258 - 0x81f472c8 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xb2423540 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x12 - 0x0 ]
+0x018 DllBase : 0xb241c000 Void
+0x01c EntryPoint : 0xb2444185 Void
+0x020 SizeOfImage : 0x2d000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\mrxdav.sys"
+0x02c BaseDllName : _UNICODE_STRING "mrxdav.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x64
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x2c564 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x2c564
+0x044 TimeDateStamp : 0xe15673a0
+0x044 LoadedImports : 0xe15673a0 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x0072006d Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x82127480 - 0x8211bb90 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xb2ab5e70 - 0x2 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x627ba291 - 0x0 ]
+0x018 DllBase : 0xb2ab4000 Void
+0x01c EntryPoint : 0xb2ab60fd Void
+0x020 SizeOfImage : 0x3000
+0x024 FullDllName : _UNICODE_STRING "\??\C:\Program Files\Common Files\VMware\Drivers\memctl\vmmemctl.sys"
+0x02c BaseDllName : _UNICODE_STRING "vmmemctl.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0x4472
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x106f5 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x106f5
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x006d0076 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81d5d428 - 0x81c65258 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xb23b0f78 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xb23a2000 Void
+0x01c EntryPoint : 0xb23ed105 Void
+0x020 SizeOfImage : 0x52000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\system32\DRIVERS\srv.sys"
+0x02c BaseDllName : _UNICODE_STRING "srv.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x5ccd4 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x5ccd4
+0x044 TimeDateStamp : 0xe150f440
+0x044 LoadedImports : 0xe150f440 Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00720073 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81f7f478 - 0x82127480 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xb21c25c0 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x0 - 0x0 ]
+0x018 DllBase : 0xb21a9000 Void
+0x01c EntryPoint : 0xb21e4757 Void
+0x020 SizeOfImage : 0x41000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\Drivers\HTTP.sys"
+0x02c BaseDllName : _UNICODE_STRING "HTTP.sys"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x46d31 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x46d31
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00540048 Void
+0x000 InLoadOrderLinks : _LIST_ENTRY [ 0x81804de8 - 0x81d5d428 ]
+0x008 InMemoryOrderLinks : _LIST_ENTRY [ 0xb1fd05c8 - 0x1 ]
+0x010 InInitializationOrderLinks : _LIST_ENTRY [ 0x58ff4eac - 0x0 ]
+0x018 DllBase : 0xb1fcd000 Void
+0x01c EntryPoint : 0xb1feca27 Void
+0x020 SizeOfImage : 0x24000
+0x024 FullDllName : _UNICODE_STRING "\SystemRoot\System32\Drivers\Fastfat.SYS"
+0x02c BaseDllName : _UNICODE_STRING "Fastfat.SYS"
+0x034 Flags : 0x9104000
+0x038 LoadCount : 1
+0x03a TlsIndex : 0
+0x03c HashLinks : _LIST_ENTRY [ 0xffffffff - 0x2a9f9 ]
+0x03c SectionPointer : 0xffffffff Void
+0x040 CheckSum : 0x2a9f9
+0x044 TimeDateStamp : 0xfffffffe
+0x044 LoadedImports : 0xfffffffe Void
+0x048 EntryPointActivationContext : (null)
+0x04c PatchInformation : 0x00610046 Void
按LoadOrder的前序输出 //倒数第三项为空
ListAddr=821fc340,PLDR=821fc3a8,DllBase=804d8000,EntryPoint=806908e0,SizeOfImage=2065792,FullDllName=\WINDOWS\system32\ntkrnlpa.exe,BaseDllName=ntoskrnl.exe,Flags=201342976,LoadCount=1,TlsIndex=0
ListAddr=821fc2d8,PLDR=821fc340,DllBase=806d1000,EntryPoint=806ee0b8,SizeOfImage=131840,FullDllName=\WINDOWS\system32\hal.dll,BaseDllName=hal.dll,Flags=201342976,LoadCount=1,TlsIndex=0
ListAddr=821fc268,PLDR=821fc2d8,DllBase=f856f000,EntryPoint=f85702c0,SizeOfImage=172032,FullDllName=\WINDOWS\system32\KDBAZIS.DLL,BaseDllName=kdcom.dll,Flags=16793600,LoadCount=3,TlsIndex=0
ListAddr=821fc200,PLDR=821fc268,DllBase=f8aaa000,EntryPoint=f8aab872,SizeOfImage=12288,FullDllName=\WINDOWS\system32\BOOTVID.dll,BaseDllName=BOOTVID.dll,Flags=151011328,LoadCount=2,TlsIndex=0
ListAddr=821fc190,PLDR=821fc200,DllBase=f8541000,EntryPoint=f856a059,SizeOfImage=188416,FullDllName=ACPI.sys,BaseDllName=ACPI.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821fc128,PLDR=821fc190,DllBase=f8b9a000,EntryPoint=f8b9ab80,SizeOfImage=8192,FullDllName=\WINDOWS\system32\DRIVERS\WMILIB.SYS,BaseDllName=WMILIB.SYS,Flags=218120192,LoadCount=21,TlsIndex=0
ListAddr=821fc0b8,PLDR=821fc128,DllBase=f8530000,EntryPoint=f853e004,SizeOfImage=69632,FullDllName=pci.sys,BaseDllName=pci.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821fc048,PLDR=821fc0b8,DllBase=f869a000,EntryPoint=f86a1a02,SizeOfImage=36864,FullDllName=isapnp.sys,BaseDllName=isapnp.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821ed008,PLDR=821fc048,DllBase=f8aae000,EntryPoint=f8aafcd3,SizeOfImage=12288,FullDllName=compbatt.sys,BaseDllName=compbatt.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edf98,PLDR=821ed008,DllBase=f8ab2000,EntryPoint=f8ab3d05,SizeOfImage=16384,FullDllName=\WINDOWS\system32\DRIVERS\BATTC.SYS,BaseDllName=BATTC.SYS,Flags=218120192,LoadCount=2,TlsIndex=0
ListAddr=821edf28,PLDR=821edf98,DllBase=f8b9c000,EntryPoint=f8b9cf05,SizeOfImage=8192,FullDllName=intelide.sys,BaseDllName=intelide.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edeb8,PLDR=821edf28,DllBase=f891a000,EntryPoint=f891f205,SizeOfImage=28672,FullDllName=\WINDOWS\system32\DRIVERS\PCIIDEX.SYS,BaseDllName=PCIIDEX.SYS,Flags=218120192,LoadCount=1,TlsIndex=0
ListAddr=821ede48,PLDR=821edeb8,DllBase=f86aa000,EntryPoint=f86b3234,SizeOfImage=45056,FullDllName=MountMgr.sys,BaseDllName=MountMgr.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821eddd8,PLDR=821ede48,DllBase=f8511000,EntryPoint=f852c4e2,SizeOfImage=126976,FullDllName=ftdisk.sys,BaseDllName=ftdisk.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edd70,PLDR=821eddd8,DllBase=f8b9e000,EntryPoint=f8b9ebf6,SizeOfImage=8192,FullDllName=dmload.sys,BaseDllName=dmload.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edd00,PLDR=821edd70,DllBase=f84eb000,EntryPoint=f850cf05,SizeOfImage=155648,FullDllName=dmio.sys,BaseDllName=dmio.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edc98,PLDR=821edd00,DllBase=f8922000,EntryPoint=f8925c8b,SizeOfImage=20480,FullDllName=PartMgr.sys,BaseDllName=PartMgr.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edc30,PLDR=821edc98,DllBase=f86ba000,EntryPoint=f86c8205,SizeOfImage=65536,FullDllName=vmci.sys,BaseDllName=vmci.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edbc8,PLDR=821edc30,DllBase=f84d8000,EntryPoint=f84e806a,SizeOfImage=77824,FullDllName=vsock.sys,BaseDllName=vsock.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edb58,PLDR=821edbc8,DllBase=f84c0000,EntryPoint=f84d59f7,SizeOfImage=98304,FullDllName=atapi.sys,BaseDllName=atapi.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edae8,PLDR=821edb58,DllBase=f8ba0000,EntryPoint=f8ba0d28,SizeOfImage=8192,FullDllName=vmscsi.sys,BaseDllName=vmscsi.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821eda80,PLDR=821edae8,DllBase=f84a8000,EntryPoint=f84bd090,SizeOfImage=98304,FullDllName=\WINDOWS\system32\drivers\SCSIPORT.SYS,BaseDllName=SCSIPORT.SYS,Flags=218120192,LoadCount=1,TlsIndex=0
ListAddr=821eda10,PLDR=821eda80,DllBase=f86ca000,EntryPoint=f86d18ad,SizeOfImage=36864,FullDllName=disk.sys,BaseDllName=disk.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821ed9a0,PLDR=821eda10,DllBase=f86da000,EntryPoint=f86e4e0f,SizeOfImage=53248,FullDllName=\WINDOWS\system32\DRIVERS\CLASSPNP.SYS,BaseDllName=CLASSPNP.SYS,Flags=218120192,LoadCount=2,TlsIndex=0
ListAddr=821ed930,PLDR=821ed9a0,DllBase=f8488000,EntryPoint=f84a505c,SizeOfImage=131072,FullDllName=fltMgr.sys,BaseDllName=fltMgr.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821ed8c8,PLDR=821ed930,DllBase=f8471000,EntryPoint=f84861b3,SizeOfImage=94208,FullDllName=KSecDD.sys,BaseDllName=KSecDD.sys,Flags=218120192,LoadCount=6,TlsIndex=0
ListAddr=821ed860,PLDR=821ed8c8,DllBase=f83e4000,EntryPoint=f8469384,SizeOfImage=577536,FullDllName=Ntfs.sys,BaseDllName=Ntfs.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821ed7f8,PLDR=821ed860,DllBase=f83b7000,EntryPoint=f83e0105,SizeOfImage=184320,FullDllName=NDIS.sys,BaseDllName=NDIS.sys,Flags=151011328,LoadCount=15,TlsIndex=0
ListAddr=821ed788,PLDR=821ed7f8,DllBase=f839d000,EntryPoint=f83b40b6,SizeOfImage=106496,FullDllName=Mup.sys,BaseDllName=Mup.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=82054540,PLDR=821ed788,DllBase=f86ea000,EntryPoint=f86f2d85,SizeOfImage=45056,FullDllName=agp440.sys,BaseDllName=agp440.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=820541b0,PLDR=82054540,DllBase=f875a000,EntryPoint=f8763285,SizeOfImage=49152,FullDllName=\SystemRoot\system32\DRIVERS\i8042prt.sys,BaseDllName=i8042prt.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81fb6808,PLDR=820541b0,DllBase=f8952000,EntryPoint=f895566e,SizeOfImage=20480,FullDllName=\SystemRoot\system32\DRIVERS\DKbFltr.sys,BaseDllName=DKbFltr.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81fb6428,PLDR=81fb6808,DllBase=f895a000,EntryPoint=f895e610,SizeOfImage=24576,FullDllName=\SystemRoot\system32\DRIVERS\kbdclass.sys,BaseDllName=kbdclass.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=82004678,PLDR=81fb6428,DllBase=f8ba6000,EntryPoint=f8ba6d54,SizeOfImage=8192,FullDllName=\SystemRoot\system32\DRIVERS\vmmouse.sys,BaseDllName=vmmouse.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=82004408,PLDR=82004678,DllBase=f8962000,EntryPoint=f8966035,SizeOfImage=24576,FullDllName=\SystemRoot\system32\DRIVERS\mouclass.sys,BaseDllName=mouclass.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81d59c80,PLDR=82004408,DllBase=f876a000,EntryPoint=f8774ebb,SizeOfImage=61440,FullDllName=\SystemRoot\system32\DRIVERS\serial.sys,BaseDllName=serial.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=82112308,PLDR=81d59c80,DllBase=f8b3e000,EntryPoint=f8b41069,SizeOfImage=16384,FullDllName=\SystemRoot\system32\DRIVERS\serenum.sys,BaseDllName=serenum.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81cf9d80,PLDR=82112308,DllBase=f896a000,EntryPoint=f896f94a,SizeOfImage=28672,FullDllName=\SystemRoot\system32\DRIVERS\fdc.sys,BaseDllName=fdc.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81cf9bb0,PLDR=81cf9d80,DllBase=f877a000,EntryPoint=f8782afb,SizeOfImage=45056,FullDllName=\SystemRoot\system32\DRIVERS\imapi.sys,BaseDllName=imapi.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81d59b08,PLDR=81cf9bb0,DllBase=f878a000,EntryPoint=f87977f2,SizeOfImage=65536,FullDllName=\SystemRoot\system32\DRIVERS\cdrom.sys,BaseDllName=cdrom.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81cf9648,PLDR=81d59b08,DllBase=f879a000,EntryPoint=f87a5785,SizeOfImage=57344,FullDllName=\SystemRoot\system32\DRIVERS\redbook.sys,BaseDllName=redbook.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=820531d0,PLDR=81cf9648,DllBase=f8308000,EntryPoint=f8328035,SizeOfImage=143360,FullDllName=\SystemRoot\system32\DRIVERS\ks.sys,BaseDllName=ks.sys,Flags=152059904,LoadCount=6,TlsIndex=0
ListAddr=820bfab8,PLDR=820531d0,DllBase=f87aa000,EntryPoint=f87b8b63,SizeOfImage=65536,FullDllName=\SystemRoot\system32\DRIVERS\vmx_svga.sys,BaseDllName=vmx_svga.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=820bf8e0,PLDR=820bfab8,DllBase=f82f4000,EntryPoint=f8305910,SizeOfImage=81920,FullDllName=\SystemRoot\system32\DRIVERS\VIDEOPRT.SYS,BaseDllName=VIDEOPRT.SYS,Flags=152059904,LoadCount=5,TlsIndex=0
ListAddr=820bf660,PLDR=820bf8e0,DllBase=f8972000,EntryPoint=f8976685,SizeOfImage=24576,FullDllName=\SystemRoot\system32\DRIVERS\usbuhci.sys,BaseDllName=usbuhci.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81c60258,PLDR=820bf660,DllBase=f82d0000,EntryPoint=f82f0c85,SizeOfImage=147456,FullDllName=\SystemRoot\system32\DRIVERS\USBPORT.SYS,BaseDllName=USBPORT.SYS,Flags=152059904,LoadCount=2,TlsIndex=0
ListAddr=82082a48,PLDR=81c60258,DllBase=f897a000,EntryPoint=f897ed05,SizeOfImage=24576,FullDllName=\SystemRoot\system32\DRIVERS\vmxnet.sys,BaseDllName=vmxnet.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81c57e90,PLDR=82082a48,DllBase=f87ba000,EntryPoint=f87bece8,SizeOfImage=40960,FullDllName=\SystemRoot\system32\drivers\es1371mp.sys,BaseDllName=es1371mp.sys,Flags=152059904,LoadCount=1,TlsIndex=100
ListAddr=81d70f08,PLDR=81c57e90,DllBase=f82ac000,EntryPoint=f82ccd85,SizeOfImage=147456,FullDllName=\SystemRoot\system32\drivers\portcls.sys,BaseDllName=portcls.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81c57bd8,PLDR=81d70f08,DllBase=f87ca000,EntryPoint=f87d7d85,SizeOfImage=61440,FullDllName=\SystemRoot\system32\drivers\drmk.sys,BaseDllName=drmk.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81c57508,PLDR=81c57bd8,DllBase=f8982000,EntryPoint=f8988b05,SizeOfImage=32768,FullDllName=\SystemRoot\system32\DRIVERS\usbehci.sys,BaseDllName=usbehci.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81c57498,PLDR=81c57508,DllBase=f8b46000,EntryPoint=f8b48966,SizeOfImage=16384,FullDllName=\SystemRoot\system32\DRIVERS\CmBatt.sys,BaseDllName=CmBatt.sys,Flags=152059904,LoadCount=1,TlsIndex=1310
ListAddr=81d706f0,PLDR=81c57498,DllBase=f87da000,EntryPoint=f87df805,SizeOfImage=40960,FullDllName=\SystemRoot\system32\DRIVERS\processr.sys,BaseDllName=processr.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81cd5c88,PLDR=81d706f0,DllBase=f8b4a000,EntryPoint=f8b4c1a4,SizeOfImage=12288,FullDllName=\SystemRoot\system32\DRIVERS\fsvga.sys,BaseDllName=fsvga.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81cd5130,PLDR=81cd5c88,DllBase=f8d7a000,EntryPoint=f8d7a600,SizeOfImage=4096,FullDllName=\SystemRoot\system32\DRIVERS\audstub.sys,BaseDllName=audstub.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=82130638,PLDR=81cd5130,DllBase=f87ea000,EntryPoint=f87f5505,SizeOfImage=53248,FullDllName=\SystemRoot\system32\DRIVERS\rasl2tp.sys,BaseDllName=rasl2tp.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81cd4830,PLDR=82130638,DllBase=f8b4e000,EntryPoint=f8b4fd58,SizeOfImage=12288,FullDllName=\SystemRoot\system32\DRIVERS\ndistapi.sys,BaseDllName=ndistapi.sys,Flags=152059904,LoadCount=2,TlsIndex=68
ListAddr=82081788,PLDR=81cd4830,DllBase=f826d000,EntryPoint=f8281223,SizeOfImage=94208,FullDllName=\SystemRoot\system32\DRIVERS\ndiswan.sys,BaseDllName=ndiswan.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=82081610,PLDR=82081788,DllBase=f87fa000,EntryPoint=f8803165,SizeOfImage=45056,FullDllName=\SystemRoot\system32\DRIVERS\raspppoe.sys,BaseDllName=raspppoe.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81d6d7b8,PLDR=82081610,DllBase=f880a000,EntryPoint=f8814985,SizeOfImage=49152,FullDllName=\SystemRoot\system32\DRIVERS\raspptp.sys,BaseDllName=raspptp.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=82131688,PLDR=81d6d7b8,DllBase=f898a000,EntryPoint=f898dd05,SizeOfImage=20480,FullDllName=\SystemRoot\system32\DRIVERS\TDI.SYS,BaseDllName=TDI.SYS,Flags=152059904,LoadCount=10,TlsIndex=0
ListAddr=81d6d3b0,PLDR=82131688,DllBase=f825c000,EntryPoint=f826b200,SizeOfImage=69632,FullDllName=\SystemRoot\system32\DRIVERS\psched.sys,BaseDllName=psched.sys,Flags=152059904,LoadCount=1,TlsIndex=57
ListAddr=820c2a30,PLDR=81d6d3b0,DllBase=f881a000,EntryPoint=f8821a85,SizeOfImage=36864,FullDllName=\SystemRoot\system32\DRIVERS\msgpc.sys,BaseDllName=msgpc.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81ca42d0,PLDR=820c2a30,DllBase=f8992000,EntryPoint=f89954a2,SizeOfImage=20480,FullDllName=\SystemRoot\system32\DRIVERS\ptilink.sys,BaseDllName=ptilink.sys,Flags=152059904,LoadCount=2,TlsIndex=68
ListAddr=81d80be8,PLDR=81ca42d0,DllBase=f899a000,EntryPoint=f899d200,SizeOfImage=20480,FullDllName=\SystemRoot\system32\DRIVERS\raspti.sys,BaseDllName=raspti.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81c69258,PLDR=81d80be8,DllBase=f818c000,EntryPoint=f81b7605,SizeOfImage=196608,FullDllName=\SystemRoot\system32\DRIVERS\rdpdr.sys,BaseDllName=rdpdr.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=820a1830,PLDR=81c69258,DllBase=f882a000,EntryPoint=f8832657,SizeOfImage=40960,FullDllName=\SystemRoot\system32\DRIVERS\termdd.sys,BaseDllName=termdd.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81fd1898,PLDR=820a1830,DllBase=f8ba8000,EntryPoint=f8ba88dd,SizeOfImage=8192,FullDllName=\SystemRoot\system32\DRIVERS\swenum.sys,BaseDllName=swenum.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81ca4340,PLDR=81fd1898,DllBase=f812e000,EntryPoint=f818a848,SizeOfImage=385024,FullDllName=\SystemRoot\system32\DRIVERS\update.sys,BaseDllName=update.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=8212c3b8,PLDR=81ca4340,DllBase=f8b6a000,EntryPoint=f8b6cbe6,SizeOfImage=16384,FullDllName=\SystemRoot\system32\DRIVERS\mssmbios.sys,BaseDllName=mssmbios.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=82078300,PLDR=8212c3b8,DllBase=f883a000,EntryPoint=f8842b24,SizeOfImage=40960,FullDllName=\SystemRoot\System32\Drivers\NDProxy.SYS,BaseDllName=NDProxy.SYS,Flags=152059904,LoadCount=1,TlsIndex=48
ListAddr=8203ba38,PLDR=82078300,DllBase=f884a000,EntryPoint=f8857105,SizeOfImage=61440,FullDllName=\SystemRoot\system32\DRIVERS\usbhub.sys,BaseDllName=usbhub.sys,Flags=152059904,LoadCount=1,TlsIndex=77
ListAddr=81d47be0,PLDR=8203ba38,DllBase=f8baa000,EntryPoint=f8baa300,SizeOfImage=8192,FullDllName=\SystemRoot\system32\DRIVERS\USBD.SYS,BaseDllName=USBD.SYS,Flags=152059904,LoadCount=3,TlsIndex=0
ListAddr=820088c0,PLDR=81d47be0,DllBase=f8b8a000,EntryPoint=f8b8bee1,SizeOfImage=12288,FullDllName=\SystemRoot\system32\DRIVERS\gameenum.sys,BaseDllName=gameenum.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=8211dda0,PLDR=820088c0,DllBase=f89a2000,EntryPoint=f89a60f2,SizeOfImage=20480,FullDllName=\SystemRoot\system32\DRIVERS\flpydisk.sys,BaseDllName=flpydisk.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=82018e10,PLDR=8211dda0,DllBase=f8b92000,EntryPoint=f8b93a9b,SizeOfImage=12288,FullDllName=\SystemRoot\System32\Drivers\Fs_Rec.SYS,BaseDllName=Fs_Rec.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=82018c10,PLDR=82018e10,DllBase=f8c78000,EntryPoint=f8c7859a,SizeOfImage=4096,FullDllName=\SystemRoot\System32\Drivers\Null.SYS,BaseDllName=Null.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=820189f0,PLDR=82018c10,DllBase=f8bac000,EntryPoint=f8bac66c,SizeOfImage=8192,FullDllName=\SystemRoot\System32\Drivers\Beep.SYS,BaseDllName=Beep.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=8212b340,PLDR=820189f0,DllBase=f89b2000,EntryPoint=f89b6642,SizeOfImage=24576,FullDllName=\SystemRoot\System32\drivers\vga.sys,BaseDllName=vga.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=820185d8,PLDR=8212b340,DllBase=f8bae000,EntryPoint=f8bae944,SizeOfImage=8192,FullDllName=\SystemRoot\System32\DRIVERS\RDPCDD.sys,BaseDllName=RDPCDD.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=820183a8,PLDR=820185d8,DllBase=f89ba000,EntryPoint=f89bdbed,SizeOfImage=20480,FullDllName=\SystemRoot\System32\Drivers\Msfs.SYS,BaseDllName=Msfs.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81ca4260,PLDR=820183a8,DllBase=f89c2000,EntryPoint=f89c86d3,SizeOfImage=32768,FullDllName=\SystemRoot\System32\Drivers\Npfs.SYS,BaseDllName=Npfs.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81d61fa0,PLDR=81ca4260,DllBase=f8b96000,EntryPoint=f8b9766b,SizeOfImage=12288,FullDllName=\SystemRoot\system32\DRIVERS\rasacd.sys,BaseDllName=rasacd.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81d61ae8,PLDR=81d61fa0,DllBase=b2fcd000,EntryPoint=b2fdda85,SizeOfImage=77824,FullDllName=\SystemRoot\system32\DRIVERS\ipsec.sys,BaseDllName=ipsec.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81d617b8,PLDR=81d61ae8,DllBase=b2f74000,EntryPoint=b2fc4d23,SizeOfImage=364544,FullDllName=\SystemRoot\system32\DRIVERS\tcpip.sys,BaseDllName=tcpip.sys,Flags=152059904,LoadCount=2,TlsIndex=0
ListAddr=81fbaa50,PLDR=81d617b8,DllBase=b2f4c000,EntryPoint=b2f6ff85,SizeOfImage=163840,FullDllName=\SystemRoot\system32\DRIVERS\netbt.sys,BaseDllName=netbt.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81d612b0,PLDR=81fbaa50,DllBase=f8364000,EntryPoint=f83663a0,SizeOfImage=12288,FullDllName=\SystemRoot\System32\drivers\ws2ifsl.sys,BaseDllName=ws2ifsl.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=82129f08,PLDR=81d612b0,DllBase=b2f2a000,EntryPoint=b2f47f40,SizeOfImage=139264,FullDllName=\SystemRoot\System32\drivers\afd.sys,BaseDllName=afd.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=82128708,PLDR=82129f08,DllBase=f886a000,EntryPoint=f8871529,SizeOfImage=36864,FullDllName=\SystemRoot\system32\DRIVERS\netbios.sys,BaseDllName=netbios.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=82078a48,PLDR=82128708,DllBase=b2f03000,EntryPoint=b2f26ce4,SizeOfImage=159744,FullDllName=\SystemRoot\system32\drivers\vmhgfs.sys,BaseDllName=vmhgfs.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=82037570,PLDR=82078a48,DllBase=b2eb0000,EntryPoint=b2ed7388,SizeOfImage=176128,FullDllName=\SystemRoot\system32\DRIVERS\rdbss.sys,BaseDllName=rdbss.sys,Flags=152059904,LoadCount=2,TlsIndex=0
ListAddr=82078290,PLDR=82037570,DllBase=b2e40000,EntryPoint=b2ea8203,SizeOfImage=458752,FullDllName=\SystemRoot\system32\DRIVERS\mrxsmb.sys,BaseDllName=mrxsmb.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81fce2d0,PLDR=82078290,DllBase=f887a000,EntryPoint=f8884085,SizeOfImage=45056,FullDllName=\SystemRoot\System32\Drivers\Fips.SYS,BaseDllName=Fips.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81cf8fa0,PLDR=81fce2d0,DllBase=f888a000,EntryPoint=f8890fd6,SizeOfImage=36864,FullDllName=\SystemRoot\system32\DRIVERS\wanarp.sys,BaseDllName=wanarp.sys,Flags=152059904,LoadCount=1,TlsIndex=32
ListAddr=81c61250,PLDR=81cf8fa0,DllBase=f88ba000,EntryPoint=f88c7a85,SizeOfImage=65536,FullDllName=\SystemRoot\System32\Drivers\Cdfs.SYS,BaseDllName=Cdfs.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81c351a8,PLDR=81c61250,DllBase=f89d2000,EntryPoint=f89d9085,SizeOfImage=32768,FullDllName=\SystemRoot\system32\DRIVERS\usbccgp.sys,BaseDllName=usbccgp.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81f74108,PLDR=81c351a8,DllBase=f829c000,EntryPoint=f829df05,SizeOfImage=12288,FullDllName=\SystemRoot\system32\DRIVERS\hidusb.sys,BaseDllName=hidusb.sys,Flags=152059904,LoadCount=1,TlsIndex=10
ListAddr=81f73108,PLDR=81f74108,DllBase=f88ca000,EntryPoint=f88d1e85,SizeOfImage=36864,FullDllName=\SystemRoot\system32\DRIVERS\HIDCLASS.SYS,BaseDllName=HIDCLASS.SYS,Flags=152059904,LoadCount=1,TlsIndex=33271
ListAddr=81cb21a8,PLDR=81f73108,DllBase=f89da000,EntryPoint=f89dfb85,SizeOfImage=28672,FullDllName=\SystemRoot\system32\DRIVERS\HIDPARSE.SYS,BaseDllName=HIDPARSE.SYS,Flags=152059904,LoadCount=2,TlsIndex=0
ListAddr=81ce81a8,PLDR=81cb21a8,DllBase=f8298000,EntryPoint=f8299f28,SizeOfImage=12288,FullDllName=\SystemRoot\system32\DRIVERS\mouhid.sys,BaseDllName=mouhid.sys,Flags=152059904,LoadCount=1,TlsIndex=10
ListAddr=81d69338,PLDR=81ce81a8,DllBase=f8bb0000,EntryPoint=f8bb0ccf,SizeOfImage=8192,FullDllName=\SystemRoot\system32\DRIVERS\vmusbmouse.sys,BaseDllName=vmusbmouse.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81ce9be8,PLDR=81d69338,DllBase=b2e00000,EntryPoint=b2e159f7,SizeOfImage=98304,FullDllName=\SystemRoot\System32\Drivers\dump_atapi.sys,BaseDllName=dump_atapi.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81d7f008,PLDR=81ce9be8,DllBase=f8bb2000,EntryPoint=f8bb2b80,SizeOfImage=8192,FullDllName=\SystemRoot\System32\Drivers\dump_WMILIB.SYS,BaseDllName=dump_WMILIB.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81fc15b8,PLDR=81d7f008,DllBase=bf800000,EntryPoint=bf9b321f,SizeOfImage=1859584,FullDllName=\SystemRoot\System32\win32k.sys,BaseDllName=win32k.sys,Flags=688930816,LoadCount=1,TlsIndex=1
ListAddr=81f71108,PLDR=81fc15b8,DllBase=f812a000,EntryPoint=f812be80,SizeOfImage=12288,FullDllName=\SystemRoot\System32\drivers\Dxapi.sys,BaseDllName=Dxapi.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81c853d0,PLDR=81f71108,DllBase=f89e2000,EntryPoint=f89e5890,SizeOfImage=20480,FullDllName=\SystemRoot\System32\watchdog.sys,BaseDllName=watchdog.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81f501a8,PLDR=81c853d0,DllBase=bf9c6000,EntryPoint=bf9d6090,SizeOfImage=73728,FullDllName=\SystemRoot\System32\drivers\dxg.sys,BaseDllName=dxg.sys,Flags=688930816,LoadCount=1,TlsIndex=0
ListAddr=81d68b70,PLDR=81f501a8,DllBase=f8cb6000,EntryPoint=f8cb6359,SizeOfImage=4096,FullDllName=\SystemRoot\System32\drivers\dxgthk.sys,BaseDllName=dxgthk.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81c07108,PLDR=81d68b70,DllBase=bf9d8000,EntryPoint=bf9fc372,SizeOfImage=1884160,FullDllName=\SystemRoot\System32\vmx_fb.dll,BaseDllName=vmx_fb.dll,Flags=688930816,LoadCount=1,TlsIndex=0
ListAddr=81d7c178,PLDR=81c07108,DllBase=b2d18000,EntryPoint=b2d1ac56,SizeOfImage=16384,FullDllName=\SystemRoot\system32\DRIVERS\ndisuio.sys,BaseDllName=ndisuio.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81f472c8,PLDR=81d7c178,DllBase=b29b3000,EntryPoint=b29c5e05,SizeOfImage=86016,FullDllName=\SystemRoot\system32\drivers\wdmaud.sys,BaseDllName=wdmaud.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=8211bb90,PLDR=81f472c8,DllBase=b2c60000,EntryPoint=b2c6d8e1,SizeOfImage=61440,FullDllName=\SystemRoot\system32\drivers\sysaudio.sys,BaseDllName=sysaudio.sys,Flags=152059904,LoadCount=1,TlsIndex=100
ListAddr=81c65258,PLDR=8211bb90,DllBase=b241c000,EntryPoint=b2444185,SizeOfImage=184320,FullDllName=\SystemRoot\system32\DRIVERS\mrxdav.sys,BaseDllName=mrxdav.sys,Flags=152059904,LoadCount=1,TlsIndex=100
ListAddr=82127480,PLDR=81c65258,DllBase=b2ab4000,EntryPoint=b2ab60fd,SizeOfImage=12288,FullDllName=\??\C:\Program Files\Common Files\VMware\Drivers\memctl\vmmemctl.sys,BaseDllName=vmmemctl.sys,Flags=152059904,LoadCount=1,TlsIndex=17522
ListAddr=81d5d428,PLDR=82127480,DllBase=b23a2000,EntryPoint=b23ed105,SizeOfImage=335872,FullDllName=\SystemRoot\system32\DRIVERS\srv.sys,BaseDllName=srv.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81f7f478,PLDR=81d5d428,DllBase=b21a9000,EntryPoint=b21e4757,SizeOfImage=266240,FullDllName=\SystemRoot\System32\Drivers\HTTP.sys,BaseDllName=HTTP.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81804de8,PLDR=81f7f478,DllBase=b1fcd000,EntryPoint=b1feca27,SizeOfImage=147456,FullDllName=\SystemRoot\System32\Drivers\Fastfat.SYS,BaseDllName=Fastfat.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=80555040,PLDR=81804de8,DllBase=f894a000,EntryPoint=f894b070,SizeOfImage=24576,FullDllName=\??\C:\Documents and Settings\Administrator\,BaseDllName=testdriver.sys,Flags=17842176,LoadCount=1,TlsIndex=73
ListAddr=821fc3a8,PLDR=80555040,DllBase=0,EntryPoint=0,SizeOfImage=-2141862688,FullDllName=(null),BaseDllName=(null),Flags=0,LoadCount=0,TlsIndex=0
按LoadOrder的后序输出
ListAddr=82127480,PLDR=81d5d428,DllBase=b21a9000,EntryPoint=b21e4757,SizeOfImage=266240,FullDllName=\SystemRoot\System32\Drivers\HTTP.sys,BaseDllName=HTTP.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81c65258,PLDR=82127480,DllBase=b23a2000,EntryPoint=b23ed105,SizeOfImage=335872,FullDllName=\SystemRoot\system32\DRIVERS\srv.sys,BaseDllName=srv.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=8211bb90,PLDR=81c65258,DllBase=b2ab4000,EntryPoint=b2ab60fd,SizeOfImage=12288,FullDllName=\??\C:\Program Files\Common Files\VMware\Drivers\memctl\vmmemctl.sys,BaseDllName=vmmemctl.sys,Flags=152059904,LoadCount=1,TlsIndex=17522
ListAddr=81f472c8,PLDR=8211bb90,DllBase=b241c000,EntryPoint=b2444185,SizeOfImage=184320,FullDllName=\SystemRoot\system32\DRIVERS\mrxdav.sys,BaseDllName=mrxdav.sys,Flags=152059904,LoadCount=1,TlsIndex=100
ListAddr=81d7c178,PLDR=81f472c8,DllBase=b2c60000,EntryPoint=b2c6d8e1,SizeOfImage=61440,FullDllName=\SystemRoot\system32\drivers\sysaudio.sys,BaseDllName=sysaudio.sys,Flags=152059904,LoadCount=1,TlsIndex=100
ListAddr=81c07108,PLDR=81d7c178,DllBase=b29b3000,EntryPoint=b29c5e05,SizeOfImage=86016,FullDllName=\SystemRoot\system32\drivers\wdmaud.sys,BaseDllName=wdmaud.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81d68b70,PLDR=81c07108,DllBase=b2d18000,EntryPoint=b2d1ac56,SizeOfImage=16384,FullDllName=\SystemRoot\system32\DRIVERS\ndisuio.sys,BaseDllName=ndisuio.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81f501a8,PLDR=81d68b70,DllBase=bf9d8000,EntryPoint=bf9fc372,SizeOfImage=1884160,FullDllName=\SystemRoot\System32\vmx_fb.dll,BaseDllName=vmx_fb.dll,Flags=688930816,LoadCount=1,TlsIndex=0
ListAddr=81c853d0,PLDR=81f501a8,DllBase=f8cb6000,EntryPoint=f8cb6359,SizeOfImage=4096,FullDllName=\SystemRoot\System32\drivers\dxgthk.sys,BaseDllName=dxgthk.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81f71108,PLDR=81c853d0,DllBase=bf9c6000,EntryPoint=bf9d6090,SizeOfImage=73728,FullDllName=\SystemRoot\System32\drivers\dxg.sys,BaseDllName=dxg.sys,Flags=688930816,LoadCount=1,TlsIndex=0
ListAddr=81fc15b8,PLDR=81f71108,DllBase=f89e2000,EntryPoint=f89e5890,SizeOfImage=20480,FullDllName=\SystemRoot\System32\watchdog.sys,BaseDllName=watchdog.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81d7f008,PLDR=81fc15b8,DllBase=f812a000,EntryPoint=f812be80,SizeOfImage=12288,FullDllName=\SystemRoot\System32\drivers\Dxapi.sys,BaseDllName=Dxapi.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81ce9be8,PLDR=81d7f008,DllBase=bf800000,EntryPoint=bf9b321f,SizeOfImage=1859584,FullDllName=\SystemRoot\System32\win32k.sys,BaseDllName=win32k.sys,Flags=688930816,LoadCount=1,TlsIndex=1
ListAddr=81d69338,PLDR=81ce9be8,DllBase=f8bb2000,EntryPoint=f8bb2b80,SizeOfImage=8192,FullDllName=\SystemRoot\System32\Drivers\dump_WMILIB.SYS,BaseDllName=dump_WMILIB.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81ce81a8,PLDR=81d69338,DllBase=b2e00000,EntryPoint=b2e159f7,SizeOfImage=98304,FullDllName=\SystemRoot\System32\Drivers\dump_atapi.sys,BaseDllName=dump_atapi.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81cb21a8,PLDR=81ce81a8,DllBase=f8bb0000,EntryPoint=f8bb0ccf,SizeOfImage=8192,FullDllName=\SystemRoot\system32\DRIVERS\vmusbmouse.sys,BaseDllName=vmusbmouse.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81f73108,PLDR=81cb21a8,DllBase=f8298000,EntryPoint=f8299f28,SizeOfImage=12288,FullDllName=\SystemRoot\system32\DRIVERS\mouhid.sys,BaseDllName=mouhid.sys,Flags=152059904,LoadCount=1,TlsIndex=10
ListAddr=81f74108,PLDR=81f73108,DllBase=f89da000,EntryPoint=f89dfb85,SizeOfImage=28672,FullDllName=\SystemRoot\system32\DRIVERS\HIDPARSE.SYS,BaseDllName=HIDPARSE.SYS,Flags=152059904,LoadCount=2,TlsIndex=0
ListAddr=81c351a8,PLDR=81f74108,DllBase=f88ca000,EntryPoint=f88d1e85,SizeOfImage=36864,FullDllName=\SystemRoot\system32\DRIVERS\HIDCLASS.SYS,BaseDllName=HIDCLASS.SYS,Flags=152059904,LoadCount=1,TlsIndex=33271
ListAddr=81c61250,PLDR=81c351a8,DllBase=f829c000,EntryPoint=f829df05,SizeOfImage=12288,FullDllName=\SystemRoot\system32\DRIVERS\hidusb.sys,BaseDllName=hidusb.sys,Flags=152059904,LoadCount=1,TlsIndex=10
ListAddr=81cf8fa0,PLDR=81c61250,DllBase=f89d2000,EntryPoint=f89d9085,SizeOfImage=32768,FullDllName=\SystemRoot\system32\DRIVERS\usbccgp.sys,BaseDllName=usbccgp.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81fce2d0,PLDR=81cf8fa0,DllBase=f88ba000,EntryPoint=f88c7a85,SizeOfImage=65536,FullDllName=\SystemRoot\System32\Drivers\Cdfs.SYS,BaseDllName=Cdfs.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=82078290,PLDR=81fce2d0,DllBase=f888a000,EntryPoint=f8890fd6,SizeOfImage=36864,FullDllName=\SystemRoot\system32\DRIVERS\wanarp.sys,BaseDllName=wanarp.sys,Flags=152059904,LoadCount=1,TlsIndex=32
ListAddr=82037570,PLDR=82078290,DllBase=f887a000,EntryPoint=f8884085,SizeOfImage=45056,FullDllName=\SystemRoot\System32\Drivers\Fips.SYS,BaseDllName=Fips.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=82078a48,PLDR=82037570,DllBase=b2e40000,EntryPoint=b2ea8203,SizeOfImage=458752,FullDllName=\SystemRoot\system32\DRIVERS\mrxsmb.sys,BaseDllName=mrxsmb.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=82128708,PLDR=82078a48,DllBase=b2eb0000,EntryPoint=b2ed7388,SizeOfImage=176128,FullDllName=\SystemRoot\system32\DRIVERS\rdbss.sys,BaseDllName=rdbss.sys,Flags=152059904,LoadCount=2,TlsIndex=0
ListAddr=82129f08,PLDR=82128708,DllBase=b2f03000,EntryPoint=b2f26ce4,SizeOfImage=159744,FullDllName=\SystemRoot\system32\drivers\vmhgfs.sys,BaseDllName=vmhgfs.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81d612b0,PLDR=82129f08,DllBase=f886a000,EntryPoint=f8871529,SizeOfImage=36864,FullDllName=\SystemRoot\system32\DRIVERS\netbios.sys,BaseDllName=netbios.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81fbaa50,PLDR=81d612b0,DllBase=b2f2a000,EntryPoint=b2f47f40,SizeOfImage=139264,FullDllName=\SystemRoot\System32\drivers\afd.sys,BaseDllName=afd.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81d617b8,PLDR=81fbaa50,DllBase=f8364000,EntryPoint=f83663a0,SizeOfImage=12288,FullDllName=\SystemRoot\System32\drivers\ws2ifsl.sys,BaseDllName=ws2ifsl.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81d61ae8,PLDR=81d617b8,DllBase=b2f4c000,EntryPoint=b2f6ff85,SizeOfImage=163840,FullDllName=\SystemRoot\system32\DRIVERS\netbt.sys,BaseDllName=netbt.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81d61fa0,PLDR=81d61ae8,DllBase=b2f74000,EntryPoint=b2fc4d23,SizeOfImage=364544,FullDllName=\SystemRoot\system32\DRIVERS\tcpip.sys,BaseDllName=tcpip.sys,Flags=152059904,LoadCount=2,TlsIndex=0
ListAddr=81ca4260,PLDR=81d61fa0,DllBase=b2fcd000,EntryPoint=b2fdda85,SizeOfImage=77824,FullDllName=\SystemRoot\system32\DRIVERS\ipsec.sys,BaseDllName=ipsec.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=820183a8,PLDR=81ca4260,DllBase=f8b96000,EntryPoint=f8b9766b,SizeOfImage=12288,FullDllName=\SystemRoot\system32\DRIVERS\rasacd.sys,BaseDllName=rasacd.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=820185d8,PLDR=820183a8,DllBase=f89c2000,EntryPoint=f89c86d3,SizeOfImage=32768,FullDllName=\SystemRoot\System32\Drivers\Npfs.SYS,BaseDllName=Npfs.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=8212b340,PLDR=820185d8,DllBase=f89ba000,EntryPoint=f89bdbed,SizeOfImage=20480,FullDllName=\SystemRoot\System32\Drivers\Msfs.SYS,BaseDllName=Msfs.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=820189f0,PLDR=8212b340,DllBase=f8bae000,EntryPoint=f8bae944,SizeOfImage=8192,FullDllName=\SystemRoot\System32\DRIVERS\RDPCDD.sys,BaseDllName=RDPCDD.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=82018c10,PLDR=820189f0,DllBase=f89b2000,EntryPoint=f89b6642,SizeOfImage=24576,FullDllName=\SystemRoot\System32\drivers\vga.sys,BaseDllName=vga.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=82018e10,PLDR=82018c10,DllBase=f8bac000,EntryPoint=f8bac66c,SizeOfImage=8192,FullDllName=\SystemRoot\System32\Drivers\Beep.SYS,BaseDllName=Beep.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=8211dda0,PLDR=82018e10,DllBase=f8c78000,EntryPoint=f8c7859a,SizeOfImage=4096,FullDllName=\SystemRoot\System32\Drivers\Null.SYS,BaseDllName=Null.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=820088c0,PLDR=8211dda0,DllBase=f8b92000,EntryPoint=f8b93a9b,SizeOfImage=12288,FullDllName=\SystemRoot\System32\Drivers\Fs_Rec.SYS,BaseDllName=Fs_Rec.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81d47be0,PLDR=820088c0,DllBase=f89a2000,EntryPoint=f89a60f2,SizeOfImage=20480,FullDllName=\SystemRoot\system32\DRIVERS\flpydisk.sys,BaseDllName=flpydisk.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=8203ba38,PLDR=81d47be0,DllBase=f8b8a000,EntryPoint=f8b8bee1,SizeOfImage=12288,FullDllName=\SystemRoot\system32\DRIVERS\gameenum.sys,BaseDllName=gameenum.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=82078300,PLDR=8203ba38,DllBase=f8baa000,EntryPoint=f8baa300,SizeOfImage=8192,FullDllName=\SystemRoot\system32\DRIVERS\USBD.SYS,BaseDllName=USBD.SYS,Flags=152059904,LoadCount=3,TlsIndex=0
ListAddr=8212c3b8,PLDR=82078300,DllBase=f884a000,EntryPoint=f8857105,SizeOfImage=61440,FullDllName=\SystemRoot\system32\DRIVERS\usbhub.sys,BaseDllName=usbhub.sys,Flags=152059904,LoadCount=1,TlsIndex=77
ListAddr=81ca4340,PLDR=8212c3b8,DllBase=f883a000,EntryPoint=f8842b24,SizeOfImage=40960,FullDllName=\SystemRoot\System32\Drivers\NDProxy.SYS,BaseDllName=NDProxy.SYS,Flags=152059904,LoadCount=1,TlsIndex=48
ListAddr=81fd1898,PLDR=81ca4340,DllBase=f8b6a000,EntryPoint=f8b6cbe6,SizeOfImage=16384,FullDllName=\SystemRoot\system32\DRIVERS\mssmbios.sys,BaseDllName=mssmbios.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=820a1830,PLDR=81fd1898,DllBase=f812e000,EntryPoint=f818a848,SizeOfImage=385024,FullDllName=\SystemRoot\system32\DRIVERS\update.sys,BaseDllName=update.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81c69258,PLDR=820a1830,DllBase=f8ba8000,EntryPoint=f8ba88dd,SizeOfImage=8192,FullDllName=\SystemRoot\system32\DRIVERS\swenum.sys,BaseDllName=swenum.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81d80be8,PLDR=81c69258,DllBase=f882a000,EntryPoint=f8832657,SizeOfImage=40960,FullDllName=\SystemRoot\system32\DRIVERS\termdd.sys,BaseDllName=termdd.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81ca42d0,PLDR=81d80be8,DllBase=f818c000,EntryPoint=f81b7605,SizeOfImage=196608,FullDllName=\SystemRoot\system32\DRIVERS\rdpdr.sys,BaseDllName=rdpdr.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=820c2a30,PLDR=81ca42d0,DllBase=f899a000,EntryPoint=f899d200,SizeOfImage=20480,FullDllName=\SystemRoot\system32\DRIVERS\raspti.sys,BaseDllName=raspti.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81d6d3b0,PLDR=820c2a30,DllBase=f8992000,EntryPoint=f89954a2,SizeOfImage=20480,FullDllName=\SystemRoot\system32\DRIVERS\ptilink.sys,BaseDllName=ptilink.sys,Flags=152059904,LoadCount=2,TlsIndex=68
ListAddr=82131688,PLDR=81d6d3b0,DllBase=f881a000,EntryPoint=f8821a85,SizeOfImage=36864,FullDllName=\SystemRoot\system32\DRIVERS\msgpc.sys,BaseDllName=msgpc.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81d6d7b8,PLDR=82131688,DllBase=f825c000,EntryPoint=f826b200,SizeOfImage=69632,FullDllName=\SystemRoot\system32\DRIVERS\psched.sys,BaseDllName=psched.sys,Flags=152059904,LoadCount=1,TlsIndex=57
ListAddr=82081610,PLDR=81d6d7b8,DllBase=f898a000,EntryPoint=f898dd05,SizeOfImage=20480,FullDllName=\SystemRoot\system32\DRIVERS\TDI.SYS,BaseDllName=TDI.SYS,Flags=152059904,LoadCount=10,TlsIndex=0
ListAddr=82081788,PLDR=82081610,DllBase=f880a000,EntryPoint=f8814985,SizeOfImage=49152,FullDllName=\SystemRoot\system32\DRIVERS\raspptp.sys,BaseDllName=raspptp.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81cd4830,PLDR=82081788,DllBase=f87fa000,EntryPoint=f8803165,SizeOfImage=45056,FullDllName=\SystemRoot\system32\DRIVERS\raspppoe.sys,BaseDllName=raspppoe.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=82130638,PLDR=81cd4830,DllBase=f826d000,EntryPoint=f8281223,SizeOfImage=94208,FullDllName=\SystemRoot\system32\DRIVERS\ndiswan.sys,BaseDllName=ndiswan.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81cd5130,PLDR=82130638,DllBase=f8b4e000,EntryPoint=f8b4fd58,SizeOfImage=12288,FullDllName=\SystemRoot\system32\DRIVERS\ndistapi.sys,BaseDllName=ndistapi.sys,Flags=152059904,LoadCount=2,TlsIndex=68
ListAddr=81cd5c88,PLDR=81cd5130,DllBase=f87ea000,EntryPoint=f87f5505,SizeOfImage=53248,FullDllName=\SystemRoot\system32\DRIVERS\rasl2tp.sys,BaseDllName=rasl2tp.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81d706f0,PLDR=81cd5c88,DllBase=f8d7a000,EntryPoint=f8d7a600,SizeOfImage=4096,FullDllName=\SystemRoot\system32\DRIVERS\audstub.sys,BaseDllName=audstub.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81c57498,PLDR=81d706f0,DllBase=f8b4a000,EntryPoint=f8b4c1a4,SizeOfImage=12288,FullDllName=\SystemRoot\system32\DRIVERS\fsvga.sys,BaseDllName=fsvga.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81c57508,PLDR=81c57498,DllBase=f87da000,EntryPoint=f87df805,SizeOfImage=40960,FullDllName=\SystemRoot\system32\DRIVERS\processr.sys,BaseDllName=processr.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81c57bd8,PLDR=81c57508,DllBase=f8b46000,EntryPoint=f8b48966,SizeOfImage=16384,FullDllName=\SystemRoot\system32\DRIVERS\CmBatt.sys,BaseDllName=CmBatt.sys,Flags=152059904,LoadCount=1,TlsIndex=1310
ListAddr=81d70f08,PLDR=81c57bd8,DllBase=f8982000,EntryPoint=f8988b05,SizeOfImage=32768,FullDllName=\SystemRoot\system32\DRIVERS\usbehci.sys,BaseDllName=usbehci.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81c57e90,PLDR=81d70f08,DllBase=f87ca000,EntryPoint=f87d7d85,SizeOfImage=61440,FullDllName=\SystemRoot\system32\drivers\drmk.sys,BaseDllName=drmk.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=82082a48,PLDR=81c57e90,DllBase=f82ac000,EntryPoint=f82ccd85,SizeOfImage=147456,FullDllName=\SystemRoot\system32\drivers\portcls.sys,BaseDllName=portcls.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81c60258,PLDR=82082a48,DllBase=f87ba000,EntryPoint=f87bece8,SizeOfImage=40960,FullDllName=\SystemRoot\system32\drivers\es1371mp.sys,BaseDllName=es1371mp.sys,Flags=152059904,LoadCount=1,TlsIndex=100
ListAddr=820bf660,PLDR=81c60258,DllBase=f897a000,EntryPoint=f897ed05,SizeOfImage=24576,FullDllName=\SystemRoot\system32\DRIVERS\vmxnet.sys,BaseDllName=vmxnet.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=820bf8e0,PLDR=820bf660,DllBase=f82d0000,EntryPoint=f82f0c85,SizeOfImage=147456,FullDllName=\SystemRoot\system32\DRIVERS\USBPORT.SYS,BaseDllName=USBPORT.SYS,Flags=152059904,LoadCount=2,TlsIndex=0
ListAddr=820bfab8,PLDR=820bf8e0,DllBase=f8972000,EntryPoint=f8976685,SizeOfImage=24576,FullDllName=\SystemRoot\system32\DRIVERS\usbuhci.sys,BaseDllName=usbuhci.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=820531d0,PLDR=820bfab8,DllBase=f82f4000,EntryPoint=f8305910,SizeOfImage=81920,FullDllName=\SystemRoot\system32\DRIVERS\VIDEOPRT.SYS,BaseDllName=VIDEOPRT.SYS,Flags=152059904,LoadCount=5,TlsIndex=0
ListAddr=81cf9648,PLDR=820531d0,DllBase=f87aa000,EntryPoint=f87b8b63,SizeOfImage=65536,FullDllName=\SystemRoot\system32\DRIVERS\vmx_svga.sys,BaseDllName=vmx_svga.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81d59b08,PLDR=81cf9648,DllBase=f8308000,EntryPoint=f8328035,SizeOfImage=143360,FullDllName=\SystemRoot\system32\DRIVERS\ks.sys,BaseDllName=ks.sys,Flags=152059904,LoadCount=6,TlsIndex=0
ListAddr=81cf9bb0,PLDR=81d59b08,DllBase=f879a000,EntryPoint=f87a5785,SizeOfImage=57344,FullDllName=\SystemRoot\system32\DRIVERS\redbook.sys,BaseDllName=redbook.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81cf9d80,PLDR=81cf9bb0,DllBase=f878a000,EntryPoint=f87977f2,SizeOfImage=65536,FullDllName=\SystemRoot\system32\DRIVERS\cdrom.sys,BaseDllName=cdrom.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=82112308,PLDR=81cf9d80,DllBase=f877a000,EntryPoint=f8782afb,SizeOfImage=45056,FullDllName=\SystemRoot\system32\DRIVERS\imapi.sys,BaseDllName=imapi.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=81d59c80,PLDR=82112308,DllBase=f896a000,EntryPoint=f896f94a,SizeOfImage=28672,FullDllName=\SystemRoot\system32\DRIVERS\fdc.sys,BaseDllName=fdc.sys,Flags=152059904,LoadCount=1,TlsIndex=0
ListAddr=82004408,PLDR=81d59c80,DllBase=f8b3e000,EntryPoint=f8b41069,SizeOfImage=16384,FullDllName=\SystemRoot\system32\DRIVERS\serenum.sys,BaseDllName=serenum.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=82004678,PLDR=82004408,DllBase=f876a000,EntryPoint=f8774ebb,SizeOfImage=61440,FullDllName=\SystemRoot\system32\DRIVERS\serial.sys,BaseDllName=serial.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81fb6428,PLDR=82004678,DllBase=f8962000,EntryPoint=f8966035,SizeOfImage=24576,FullDllName=\SystemRoot\system32\DRIVERS\mouclass.sys,BaseDllName=mouclass.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=81fb6808,PLDR=81fb6428,DllBase=f8ba6000,EntryPoint=f8ba6d54,SizeOfImage=8192,FullDllName=\SystemRoot\system32\DRIVERS\vmmouse.sys,BaseDllName=vmmouse.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=820541b0,PLDR=81fb6808,DllBase=f895a000,EntryPoint=f895e610,SizeOfImage=24576,FullDllName=\SystemRoot\system32\DRIVERS\kbdclass.sys,BaseDllName=kbdclass.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=82054540,PLDR=820541b0,DllBase=f8952000,EntryPoint=f895566e,SizeOfImage=20480,FullDllName=\SystemRoot\system32\DRIVERS\DKbFltr.sys,BaseDllName=DKbFltr.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=821ed788,PLDR=82054540,DllBase=f875a000,EntryPoint=f8763285,SizeOfImage=49152,FullDllName=\SystemRoot\system32\DRIVERS\i8042prt.sys,BaseDllName=i8042prt.sys,Flags=152059904,LoadCount=1,TlsIndex=68
ListAddr=821ed7f8,PLDR=821ed788,DllBase=f86ea000,EntryPoint=f86f2d85,SizeOfImage=45056,FullDllName=agp440.sys,BaseDllName=agp440.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821ed860,PLDR=821ed7f8,DllBase=f839d000,EntryPoint=f83b40b6,SizeOfImage=106496,FullDllName=Mup.sys,BaseDllName=Mup.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821ed8c8,PLDR=821ed860,DllBase=f83b7000,EntryPoint=f83e0105,SizeOfImage=184320,FullDllName=NDIS.sys,BaseDllName=NDIS.sys,Flags=151011328,LoadCount=15,TlsIndex=0
ListAddr=821ed930,PLDR=821ed8c8,DllBase=f83e4000,EntryPoint=f8469384,SizeOfImage=577536,FullDllName=Ntfs.sys,BaseDllName=Ntfs.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821ed9a0,PLDR=821ed930,DllBase=f8471000,EntryPoint=f84861b3,SizeOfImage=94208,FullDllName=KSecDD.sys,BaseDllName=KSecDD.sys,Flags=218120192,LoadCount=6,TlsIndex=0
ListAddr=821eda10,PLDR=821ed9a0,DllBase=f8488000,EntryPoint=f84a505c,SizeOfImage=131072,FullDllName=fltMgr.sys,BaseDllName=fltMgr.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821eda80,PLDR=821eda10,DllBase=f86da000,EntryPoint=f86e4e0f,SizeOfImage=53248,FullDllName=\WINDOWS\system32\DRIVERS\CLASSPNP.SYS,BaseDllName=CLASSPNP.SYS,Flags=218120192,LoadCount=2,TlsIndex=0
ListAddr=821edae8,PLDR=821eda80,DllBase=f86ca000,EntryPoint=f86d18ad,SizeOfImage=36864,FullDllName=disk.sys,BaseDllName=disk.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edb58,PLDR=821edae8,DllBase=f84a8000,EntryPoint=f84bd090,SizeOfImage=98304,FullDllName=\WINDOWS\system32\drivers\SCSIPORT.SYS,BaseDllName=SCSIPORT.SYS,Flags=218120192,LoadCount=1,TlsIndex=0
ListAddr=821edbc8,PLDR=821edb58,DllBase=f8ba0000,EntryPoint=f8ba0d28,SizeOfImage=8192,FullDllName=vmscsi.sys,BaseDllName=vmscsi.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edc30,PLDR=821edbc8,DllBase=f84c0000,EntryPoint=f84d59f7,SizeOfImage=98304,FullDllName=atapi.sys,BaseDllName=atapi.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edc98,PLDR=821edc30,DllBase=f84d8000,EntryPoint=f84e806a,SizeOfImage=77824,FullDllName=vsock.sys,BaseDllName=vsock.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edd00,PLDR=821edc98,DllBase=f86ba000,EntryPoint=f86c8205,SizeOfImage=65536,FullDllName=vmci.sys,BaseDllName=vmci.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edd70,PLDR=821edd00,DllBase=f8922000,EntryPoint=f8925c8b,SizeOfImage=20480,FullDllName=PartMgr.sys,BaseDllName=PartMgr.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821eddd8,PLDR=821edd70,DllBase=f84eb000,EntryPoint=f850cf05,SizeOfImage=155648,FullDllName=dmio.sys,BaseDllName=dmio.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821ede48,PLDR=821eddd8,DllBase=f8b9e000,EntryPoint=f8b9ebf6,SizeOfImage=8192,FullDllName=dmload.sys,BaseDllName=dmload.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edeb8,PLDR=821ede48,DllBase=f8511000,EntryPoint=f852c4e2,SizeOfImage=126976,FullDllName=ftdisk.sys,BaseDllName=ftdisk.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edf28,PLDR=821edeb8,DllBase=f86aa000,EntryPoint=f86b3234,SizeOfImage=45056,FullDllName=MountMgr.sys,BaseDllName=MountMgr.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821edf98,PLDR=821edf28,DllBase=f891a000,EntryPoint=f891f205,SizeOfImage=28672,FullDllName=\WINDOWS\system32\DRIVERS\PCIIDEX.SYS,BaseDllName=PCIIDEX.SYS,Flags=218120192,LoadCount=1,TlsIndex=0
ListAddr=821ed008,PLDR=821edf98,DllBase=f8b9c000,EntryPoint=f8b9cf05,SizeOfImage=8192,FullDllName=intelide.sys,BaseDllName=intelide.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821fc048,PLDR=821ed008,DllBase=f8ab2000,EntryPoint=f8ab3d05,SizeOfImage=16384,FullDllName=\WINDOWS\system32\DRIVERS\BATTC.SYS,BaseDllName=BATTC.SYS,Flags=218120192,LoadCount=2,TlsIndex=0
ListAddr=821fc0b8,PLDR=821fc048,DllBase=f8aae000,EntryPoint=f8aafcd3,SizeOfImage=12288,FullDllName=compbatt.sys,BaseDllName=compbatt.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821fc128,PLDR=821fc0b8,DllBase=f869a000,EntryPoint=f86a1a02,SizeOfImage=36864,FullDllName=isapnp.sys,BaseDllName=isapnp.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821fc190,PLDR=821fc128,DllBase=f8530000,EntryPoint=f853e004,SizeOfImage=69632,FullDllName=pci.sys,BaseDllName=pci.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821fc200,PLDR=821fc190,DllBase=f8b9a000,EntryPoint=f8b9ab80,SizeOfImage=8192,FullDllName=\WINDOWS\system32\DRIVERS\WMILIB.SYS,BaseDllName=WMILIB.SYS,Flags=218120192,LoadCount=21,TlsIndex=0
ListAddr=821fc268,PLDR=821fc200,DllBase=f8541000,EntryPoint=f856a059,SizeOfImage=188416,FullDllName=ACPI.sys,BaseDllName=ACPI.sys,Flags=151011328,LoadCount=1,TlsIndex=0
ListAddr=821fc2d8,PLDR=821fc268,DllBase=f8aaa000,EntryPoint=f8aab872,SizeOfImage=12288,FullDllName=\WINDOWS\system32\BOOTVID.dll,BaseDllName=BOOTVID.dll,Flags=151011328,LoadCount=2,TlsIndex=0
ListAddr=821fc340,PLDR=821fc2d8,DllBase=f856f000,EntryPoint=f85702c0,SizeOfImage=172032,FullDllName=\WINDOWS\system32\KDBAZIS.DLL,BaseDllName=kdcom.dll,Flags=16793600,LoadCount=3,TlsIndex=0
ListAddr=821fc3a8,PLDR=821fc340,DllBase=806d1000,EntryPoint=806ee0b8,SizeOfImage=131840,FullDllName=\WINDOWS\system32\hal.dll,BaseDllName=hal.dll,Flags=201342976,LoadCount=1,TlsIndex=0
ListAddr=80555040,PLDR=821fc3a8,DllBase=804d8000,EntryPoint=806908e0,SizeOfImage=2065792,FullDllName=\WINDOWS\system32\ntkrnlpa.exe,BaseDllName=ntoskrnl.exe,Flags=201342976,LoadCount=1,TlsIndex=0
ListAddr=81804de8,PLDR=80555040,DllBase=0,EntryPoint=0,SizeOfImage=-2141862688,FullDllName=(null),BaseDllName=(null),Flags=0,LoadCount=0,TlsIndex=0
ListAddr=81f7f478,PLDR=81804de8,DllBase=f894a000,EntryPoint=f894b070,SizeOfImage=24576,FullDllName=\??\C:\Documents and Settings\Administrator\,BaseDllName=testdriver.sys,Flags=17842176,LoadCount=1,TlsIndex=73
ListAddr=81d5d428,PLDR=81f7f478,DllBase=b1fcd000,EntryPoint=b1feca27,SizeOfImage=147456,FullDllName=\SystemRoot\System32\Drivers\Fastfat.SYS,BaseDllName=Fastfat.SYS,Flags=152059904,LoadCount=1,TlsIndex=0
test
821fc340 821fc2d8 821fc268 821fc200 821fc190 821fc128 821fc0b8 821fc048 821ed008 821edf98 821edf28 821edeb8 821ede48 821eddd8 821edd70 821edd00 821edc98 821edc30 821edbc8 821edb58 821edae8 821eda80 821eda10 821ed9a0 821ed930 821ed8c8 821ed860 821ed7f8 821ed788 82054540 820541b0 81fb6808 81fb6428 82004678 82004408 81d59c80 82112308 81cf9d80 81cf9bb0 81d59b08 81cf9648 820531d0 820bfab8 820bf8e0 820bf660 81c60258 82082a48 81c57e90 81d70f08 81c57bd8 81c57508 81c57498 81d706f0 81cd5c88 81cd5130 82130638 81cd4830 82081788 82081610 81d6d7b8 82131688 81d6d3b0 820c2a30 81ca42d0 81d80be8 81c69258 820a1830 81fd1898 81ca4340 8212c3b8 82078300 8203ba38 81d47be0 820088c0 8211dda0 82018e10 82018c10 820189f0 8212b340 820185d8 820183a8 81ca4260 81d61fa0 81d61ae8 81d617b8 81fbaa50 81d612b0 82129f08 82128708 82078a48 82037570 82078290 81fce2d0 81cf8fa0 81c61250 81c351a8 81f74108 81f73108 81cb21a8 81ce81a8 81d69338 81ce9be8 81d7f008 81fc15b8 81f71108 81c853d0 81f501a8 81d68b70 81c07108 81d7c178 81f472c8 8211bb90 81c65258 82127480 81d5d428 81f7f478 81804de8 80555040 821fc3a8 821fc340 821fc2d8 821fc268 821fc200 821fc190 821fc128 821fc0b8 821fc048 821ed008 821edf98 821edf28 821edeb8 821ede48 821eddd8 821edd70 821edd00 821edc98 821edc30 821edbc8 821edb58 821edae8 821eda80 821eda10 821ed9a0 821ed930 821ed8c8 821ed860 821ed7f8 821ed788 82054540 820541b0 81fb6808 81fb6428 82004678 82004408 81d59c80 82112308 81cf9d80 81cf9bb0 81d59b08 81cf9648 820531d0 820bfab8 820bf8e0 820bf660 81c60258 82082a48 81c57e90 81d70f08 81c57bd8 81c57508 81c57498 81d706f0 81cd5c88 81cd5130 82130638 81cd4830 82081788 82081610 81d6d7b8 82131688 81d6d3b0 820c2a30 81ca42d0 81d80be8 81c69258 820a1830 81fd1898 81ca4340 8212c3b8 82078300 8203ba38 81d47be0 820088c0 8211dda0 82018e10 82018c10 820189f0 8212b340 820185d8 820183a8
可以看到821fc340为循环节
页:
[1]