PCILeech MCP Server

!<arch> / -1 0 7716 `
<�>�@C�C�C�C�ApApA�A�Z�Z�W�W�DZDZB>B>B�B�l�l�l�l�lln<n<n�n�mRmRm�m�ooo�o�o�o�pVpVj6j6j�j�i�i�iDiDk*k*k�k�WNWNX"X"X�X�X�X�YdYdY�Y�Z>Z>[[[|[|[�[�f*f*f�f�ggg~g~g�g�eFeFe�e�hhhhddddd�d�^�^�^x^xM�M�N<N<N�N�OOO�O�K(K(K�K�JHJHJ�J�IhIhI�I�O~O~TZTZT�T�U6U6U�U�Q0Q0Q�Q�PXPXP�P�VvVvV�V�V V L�L�MbMbLLL~L~SnSnS�S�FFFlFlH�H�H�H�G�G�H H RRR~R~R�R�F�F�GFGF`:`:`�`�a(a(_N_N_�_�c|c|c�c�b�b�cca�a�bbs�s�t>t>vzvzv�v�w\w\t�t�u$u$u�u�vvw�w�x@x@p�p�rrq.q.q�q�rzrzr�r�sVsV\T\T],],\�\�^^]�]�CCD�D�h�h�x�x�E6E6E�E�__IMPORT_DESCRIPTOR_VMM__NULL_IMPORT_DESCRIPTORVMM_NULL_THUNK_DATAVMMDLL_Initialize__imp_VMMDLL_InitializeVMMDLL_InitializeEx__imp_VMMDLL_InitializeExVMMDLL_Close__imp_VMMDLL_CloseVMMDLL_CloseAll__imp_VMMDLL_CloseAllVMMDLL_MemSize__imp_VMMDLL_MemSizeVMMDLL_MemFree__imp_VMMDLL_MemFreeVMMDLL_InitializePlugins__imp_VMMDLL_InitializePluginsVMMDLL_ConfigGet__imp_VMMDLL_ConfigGetVMMDLL_ConfigSet__imp_VMMDLL_ConfigSetVMMDLL_VfsListU__imp_VMMDLL_VfsListUVMMDLL_VfsListW__imp_VMMDLL_VfsListWVMMDLL_VfsListBlobU__imp_VMMDLL_VfsListBlobUVMMDLL_VfsList_AddFile__imp_VMMDLL_VfsList_AddFileVMMDLL_VfsList_AddFileW__imp_VMMDLL_VfsList_AddFileWVMMDLL_VfsList_AddDirectory__imp_VMMDLL_VfsList_AddDirectoryVMMDLL_VfsList_AddDirectoryW__imp_VMMDLL_VfsList_AddDirectoryWVMMDLL_VfsReadU__imp_VMMDLL_VfsReadUVMMDLL_VfsReadW__imp_VMMDLL_VfsReadWVMMDLL_VfsWriteU__imp_VMMDLL_VfsWriteUVMMDLL_VfsWriteW__imp_VMMDLL_VfsWriteWVMMDLL_UtilVfsReadFile_FromPBYTE__imp_VMMDLL_UtilVfsReadFile_FromPBYTEVMMDLL_UtilVfsReadFile_FromQWORD__imp_VMMDLL_UtilVfsReadFile_FromQWORDVMMDLL_UtilVfsReadFile_FromDWORD__imp_VMMDLL_UtilVfsReadFile_FromDWORDVMMDLL_UtilVfsReadFile_FromBOOL__imp_VMMDLL_UtilVfsReadFile_FromBOOLVMMDLL_UtilVfsWriteFile_BOOL__imp_VMMDLL_UtilVfsWriteFile_BOOLVMMDLL_UtilVfsWriteFile_DWORD__imp_VMMDLL_UtilVfsWriteFile_DWORDVMMDLL_MemCallback__imp_VMMDLL_MemCallbackVMMDLL_MemPrefetchPages__imp_VMMDLL_MemPrefetchPagesVMMDLL_MemRead__imp_VMMDLL_MemReadVMMDLL_MemReadEx__imp_VMMDLL_MemReadExVMMDLL_MemReadPage__imp_VMMDLL_MemReadPageVMMDLL_MemReadScatter__imp_VMMDLL_MemReadScatterVMMDLL_MemSearch__imp_VMMDLL_MemSearchVMMDLL_MemVirt2Phys__imp_VMMDLL_MemVirt2PhysVMMDLL_MemWrite__imp_VMMDLL_MemWriteVMMDLL_MemWriteScatter__imp_VMMDLL_MemWriteScatterVMMDLL_Scatter_Initialize__imp_VMMDLL_Scatter_InitializeVMMDLL_Scatter_Prepare__imp_VMMDLL_Scatter_PrepareVMMDLL_Scatter_PrepareEx__imp_VMMDLL_Scatter_PrepareExVMMDLL_Scatter_PrepareWrite__imp_VMMDLL_Scatter_PrepareWriteVMMDLL_Scatter_PrepareWriteEx__imp_VMMDLL_Scatter_PrepareWriteExVMMDLL_Scatter_Execute__imp_VMMDLL_Scatter_ExecuteVMMDLL_Scatter_ExecuteRead__imp_VMMDLL_Scatter_ExecuteReadVMMDLL_Scatter_Read__imp_VMMDLL_Scatter_ReadVMMDLL_Scatter_Clear__imp_VMMDLL_Scatter_ClearVMMDLL_Scatter_CloseHandle__imp_VMMDLL_Scatter_CloseHandleVMMDLL_PidList__imp_VMMDLL_PidListVMMDLL_PidGetFromName__imp_VMMDLL_PidGetFromNameVMMDLL_Map_GetNetU__imp_VMMDLL_Map_GetNetUVMMDLL_Map_GetNetW__imp_VMMDLL_Map_GetNetWVMMDLL_Map_GetPfn__imp_VMMDLL_Map_GetPfnVMMDLL_Map_GetPfnEx__imp_VMMDLL_Map_GetPfnExVMMDLL_Map_GetPool__imp_VMMDLL_Map_GetPoolVMMDLL_Map_GetKObjectU__imp_VMMDLL_Map_GetKObjectUVMMDLL_Map_GetKObjectW__imp_VMMDLL_Map_GetKObjectWVMMDLL_Map_GetKDriverU__imp_VMMDLL_Map_GetKDriverUVMMDLL_Map_GetKDriverW__imp_VMMDLL_Map_GetKDriverWVMMDLL_Map_GetKDeviceU__imp_VMMDLL_Map_GetKDeviceUVMMDLL_Map_GetKDeviceW__imp_VMMDLL_Map_GetKDeviceWVMMDLL_Map_GetPhysMem__imp_VMMDLL_Map_GetPhysMemVMMDLL_Map_GetUsersU__imp_VMMDLL_Map_GetUsersUVMMDLL_Map_GetUsersW__imp_VMMDLL_Map_GetUsersWVMMDLL_Map_GetVMU__imp_VMMDLL_Map_GetVMUVMMDLL_Map_GetVMW__imp_VMMDLL_Map_GetVMWVMMDLL_Map_GetServicesU__imp_VMMDLL_Map_GetServicesUVMMDLL_Map_GetServicesW__imp_VMMDLL_Map_GetServicesWVMMDLL_Map_GetPteU__imp_VMMDLL_Map_GetPteUVMMDLL_Map_GetPteW__imp_VMMDLL_Map_GetPteWVMMDLL_Map_GetVadU__imp_VMMDLL_Map_GetVadUVMMDLL_Map_GetVadW__imp_VMMDLL_Map_GetVadWVMMDLL_Map_GetVadEx__imp_VMMDLL_Map_GetVadExVMMDLL_Map_GetModuleU__imp_VMMDLL_Map_GetModuleUVMMDLL_Map_GetModuleW__imp_VMMDLL_Map_GetModuleWVMMDLL_Map_GetModuleFromNameU__imp_VMMDLL_Map_GetModuleFromNameUVMMDLL_Map_GetModuleFromNameW__imp_VMMDLL_Map_GetModuleFromNameWVMMDLL_Map_GetUnloadedModuleU__imp_VMMDLL_Map_GetUnloadedModuleUVMMDLL_Map_GetUnloadedModuleW__imp_VMMDLL_Map_GetUnloadedModuleWVMMDLL_Map_GetEATU__imp_VMMDLL_Map_GetEATUVMMDLL_Map_GetEATW__imp_VMMDLL_Map_GetEATWVMMDLL_Map_GetIATU__imp_VMMDLL_Map_GetIATUVMMDLL_Map_GetIATW__imp_VMMDLL_Map_GetIATWVMMDLL_Map_GetHeap__imp_VMMDLL_Map_GetHeapVMMDLL_Map_GetHeapAlloc__imp_VMMDLL_Map_GetHeapAllocVMMDLL_Map_GetThread__imp_VMMDLL_Map_GetThreadVMMDLL_Map_GetThread_CallstackU__imp_VMMDLL_Map_GetThread_CallstackUVMMDLL_Map_GetThread_CallstackW__imp_VMMDLL_Map_GetThread_CallstackWVMMDLL_Map_GetHandleU__imp_VMMDLL_Map_GetHandleUVMMDLL_Map_GetHandleW__imp_VMMDLL_Map_GetHandleWVMMDLL_ProcessGetInformation__imp_VMMDLL_ProcessGetInformationVMMDLL_ProcessGetInformationAll__imp_VMMDLL_ProcessGetInformationAllVMMDLL_ProcessGetInformationString__imp_VMMDLL_ProcessGetInformationStringVMMDLL_ProcessGetDirectoriesU__imp_VMMDLL_ProcessGetDirectoriesUVMMDLL_ProcessGetDirectoriesW__imp_VMMDLL_ProcessGetDirectoriesWVMMDLL_ProcessGetSectionsU__imp_VMMDLL_ProcessGetSectionsUVMMDLL_ProcessGetSectionsW__imp_VMMDLL_ProcessGetSectionsWVMMDLL_ProcessGetProcAddressU__imp_VMMDLL_ProcessGetProcAddressUVMMDLL_ProcessGetProcAddressW__imp_VMMDLL_ProcessGetProcAddressWVMMDLL_ProcessGetModuleBaseU__imp_VMMDLL_ProcessGetModuleBaseUVMMDLL_ProcessGetModuleBaseW__imp_VMMDLL_ProcessGetModuleBaseWVMMDLL_WinGetThunkInfoIATU__imp_VMMDLL_WinGetThunkInfoIATUVMMDLL_WinGetThunkInfoIATW__imp_VMMDLL_WinGetThunkInfoIATWVMMDLL_WinReg_HiveList__imp_VMMDLL_WinReg_HiveListVMMDLL_WinReg_HiveReadEx__imp_VMMDLL_WinReg_HiveReadExVMMDLL_WinReg_HiveWrite__imp_VMMDLL_WinReg_HiveWriteVMMDLL_WinReg_EnumKeyExU__imp_VMMDLL_WinReg_EnumKeyExUVMMDLL_WinReg_EnumKeyExW__imp_VMMDLL_WinReg_EnumKeyExWVMMDLL_WinReg_EnumValueU__imp_VMMDLL_WinReg_EnumValueUVMMDLL_WinReg_EnumValueW__imp_VMMDLL_WinReg_EnumValueWVMMDLL_WinReg_QueryValueExU__imp_VMMDLL_WinReg_QueryValueExUVMMDLL_WinReg_QueryValueExW__imp_VMMDLL_WinReg_QueryValueExWVMMDLL_VmGetVmmHandle__imp_VMMDLL_VmGetVmmHandleVMMDLL_VmMemTranslateGPA__imp_VMMDLL_VmMemTranslateGPAVMMDLL_VmMemRead__imp_VMMDLL_VmMemReadVMMDLL_VmMemReadScatter__imp_VMMDLL_VmMemReadScatterVMMDLL_VmMemWrite__imp_VMMDLL_VmMemWriteVMMDLL_VmMemWriteScatter__imp_VMMDLL_VmMemWriteScatterVMMDLL_VmScatterInitialize__imp_VMMDLL_VmScatterInitializeVMMDLL_PdbLoad__imp_VMMDLL_PdbLoadVMMDLL_PdbSymbolName__imp_VMMDLL_PdbSymbolNameVMMDLL_PdbSymbolAddress__imp_VMMDLL_PdbSymbolAddressVMMDLL_PdbTypeSize__imp_VMMDLL_PdbTypeSizeVMMDLL_PdbTypeChildOffset__imp_VMMDLL_PdbTypeChildOffsetVMMDLL_ForensicFileAppend__imp_VMMDLL_ForensicFileAppendVMMDLL_LicensedTo__imp_VMMDLL_LicensedToVMMDLL_UtilFillHexAscii__imp_VMMDLL_UtilFillHexAsciiVMMDLL_YaraSearch__imp_VMMDLL_YaraSearchVMMDLL_Log__imp_VMMDLL_LogVMMDLL_LogEx__imp_VMMDLL_LogEx/ -1 0 7726 ` ��<�>@�C�CpA�A�Z�WZD>B�B�l�ll<n�nRm�mo�o�oVp6j�j�iDi*k�kNW"X�X�XdY�Y>Z[|[�[*f�fg~g�gFe�ehhdd�d�^x^�M<N�NO�O(K�KHJ�JhI�I~OZT�T6U�U0Q�QXP�PvV�V V�LbML~LnS�SFlF�H�H�G HR~R�R�FFG:`�`(aN_�_|c�c�bc�ab�s>tzv�v\w�t$u�uv�w@x�pr.q�qzr�rVsT\,]�\^�]C�D�h�x6E�E
~ ��QRZ[UVST=>;<9:MNKL4567?8FGDEWXYOP@ABCJHI  !"#$%&'y{z}|32_`\]^efcdab01-.()*+,/� rtusvwxghlmnoijkpq�
~ ��QRZ[UVST=>;<9:MNKL4567?8FGDEWXYOP@ABCJHI  !"#$%&'y{z}|32_`\]^efcdab01-.()*+,/� rtusvwxghlmnoijkpq�VMMDLL_CloseVMMDLL_CloseAllVMMDLL_ConfigGetVMMDLL_ConfigSetVMMDLL_ForensicFileAppendVMMDLL_InitializeVMMDLL_InitializeExVMMDLL_InitializePluginsVMMDLL_LicensedToVMMDLL_LogVMMDLL_LogExVMMDLL_Map_GetEATUVMMDLL_Map_GetEATWVMMDLL_Map_GetHandleUVMMDLL_Map_GetHandleWVMMDLL_Map_GetHeapVMMDLL_Map_GetHeapAllocVMMDLL_Map_GetIATUVMMDLL_Map_GetIATWVMMDLL_Map_GetKDeviceUVMMDLL_Map_GetKDeviceWVMMDLL_Map_GetKDriverUVMMDLL_Map_GetKDriverWVMMDLL_Map_GetKObjectUVMMDLL_Map_GetKObjectWVMMDLL_Map_GetModuleFromNameUVMMDLL_Map_GetModuleFromNameWVMMDLL_Map_GetModuleUVMMDLL_Map_GetModuleWVMMDLL_Map_GetNetUVMMDLL_Map_GetNetWVMMDLL_Map_GetPfnVMMDLL_Map_GetPfnExVMMDLL_Map_GetPhysMemVMMDLL_Map_GetPoolVMMDLL_Map_GetPteUVMMDLL_Map_GetPteWVMMDLL_Map_GetServicesUVMMDLL_Map_GetServicesWVMMDLL_Map_GetThreadVMMDLL_Map_GetThread_CallstackUVMMDLL_Map_GetThread_CallstackWVMMDLL_Map_GetUnloadedModuleUVMMDLL_Map_GetUnloadedModuleWVMMDLL_Map_GetUsersUVMMDLL_Map_GetUsersWVMMDLL_Map_GetVMUVMMDLL_Map_GetVMWVMMDLL_Map_GetVadExVMMDLL_Map_GetVadUVMMDLL_Map_GetVadWVMMDLL_MemCallbackVMMDLL_MemFreeVMMDLL_MemPrefetchPagesVMMDLL_MemReadVMMDLL_MemReadExVMMDLL_MemReadPageVMMDLL_MemReadScatterVMMDLL_MemSearchVMMDLL_MemSizeVMMDLL_MemVirt2PhysVMMDLL_MemWriteVMMDLL_MemWriteScatterVMMDLL_PdbLoadVMMDLL_PdbSymbolAddressVMMDLL_PdbSymbolNameVMMDLL_PdbTypeChildOffsetVMMDLL_PdbTypeSizeVMMDLL_PidGetFromNameVMMDLL_PidListVMMDLL_ProcessGetDirectoriesUVMMDLL_ProcessGetDirectoriesWVMMDLL_ProcessGetInformationVMMDLL_ProcessGetInformationAllVMMDLL_ProcessGetInformationStringVMMDLL_ProcessGetModuleBaseUVMMDLL_ProcessGetModuleBaseWVMMDLL_ProcessGetProcAddressUVMMDLL_ProcessGetProcAddressWVMMDLL_ProcessGetSectionsUVMMDLL_ProcessGetSectionsWVMMDLL_Scatter_ClearVMMDLL_Scatter_CloseHandleVMMDLL_Scatter_ExecuteVMMDLL_Scatter_ExecuteReadVMMDLL_Scatter_InitializeVMMDLL_Scatter_PrepareVMMDLL_Scatter_PrepareExVMMDLL_Scatter_PrepareWriteVMMDLL_Scatter_PrepareWriteExVMMDLL_Scatter_ReadVMMDLL_UtilFillHexAsciiVMMDLL_UtilVfsReadFile_FromBOOLVMMDLL_UtilVfsReadFile_FromDWORDVMMDLL_UtilVfsReadFile_FromPBYTEVMMDLL_UtilVfsReadFile_FromQWORDVMMDLL_UtilVfsWriteFile_BOOLVMMDLL_UtilVfsWriteFile_DWORDVMMDLL_VfsListBlobUVMMDLL_VfsListUVMMDLL_VfsListWVMMDLL_VfsList_AddDirectoryVMMDLL_VfsList_AddDirectoryWVMMDLL_VfsList_AddFileVMMDLL_VfsList_AddFileWVMMDLL_VfsReadUVMMDLL_VfsReadWVMMDLL_VfsWriteUVMMDLL_VfsWriteWVMMDLL_VmGetVmmHandleVMMDLL_VmMemReadVMMDLL_VmMemReadScatterVMMDLL_VmMemTranslateGPAVMMDLL_VmMemWriteVMMDLL_VmMemWriteScatterVMMDLL_VmScatterInitializeVMMDLL_WinGetThunkInfoIATUVMMDLL_WinGetThunkInfoIATWVMMDLL_WinReg_EnumKeyExUVMMDLL_WinReg_EnumKeyExWVMMDLL_WinReg_EnumValueUVMMDLL_WinReg_EnumValueWVMMDLL_WinReg_HiveListVMMDLL_WinReg_HiveReadExVMMDLL_WinReg_HiveWriteVMMDLL_WinReg_QueryValueExUVMMDLL_WinReg_QueryValueExWVMMDLL_YaraSearch__IMPORT_DESCRIPTOR_VMM__NULL_IMPORT_DESCRIPTOR__imp_VMMDLL_Close__imp_VMMDLL_CloseAll__imp_VMMDLL_ConfigGet__imp_VMMDLL_ConfigSet__imp_VMMDLL_ForensicFileAppend__imp_VMMDLL_Initialize__imp_VMMDLL_InitializeEx__imp_VMMDLL_InitializePlugins__imp_VMMDLL_LicensedTo__imp_VMMDLL_Log__imp_VMMDLL_LogEx__imp_VMMDLL_Map_GetEATU__imp_VMMDLL_Map_GetEATW__imp_VMMDLL_Map_GetHandleU__imp_VMMDLL_Map_GetHandleW__imp_VMMDLL_Map_GetHeap__imp_VMMDLL_Map_GetHeapAlloc__imp_VMMDLL_Map_GetIATU__imp_VMMDLL_Map_GetIATW__imp_VMMDLL_Map_GetKDeviceU__imp_VMMDLL_Map_GetKDeviceW__imp_VMMDLL_Map_GetKDriverU__imp_VMMDLL_Map_GetKDriverW__imp_VMMDLL_Map_GetKObjectU__imp_VMMDLL_Map_GetKObjectW__imp_VMMDLL_Map_GetModuleFromNameU__imp_VMMDLL_Map_GetModuleFromNameW__imp_VMMDLL_Map_GetModuleU__imp_VMMDLL_Map_GetModuleW__imp_VMMDLL_Map_GetNetU__imp_VMMDLL_Map_GetNetW__imp_VMMDLL_Map_GetPfn__imp_VMMDLL_Map_GetPfnEx__imp_VMMDLL_Map_GetPhysMem__imp_VMMDLL_Map_GetPool__imp_VMMDLL_Map_GetPteU__imp_VMMDLL_Map_GetPteW__imp_VMMDLL_Map_GetServicesU__imp_VMMDLL_Map_GetServicesW__imp_VMMDLL_Map_GetThread__imp_VMMDLL_Map_GetThread_CallstackU__imp_VMMDLL_Map_GetThread_CallstackW__imp_VMMDLL_Map_GetUnloadedModuleU__imp_VMMDLL_Map_GetUnloadedModuleW__imp_VMMDLL_Map_GetUsersU__imp_VMMDLL_Map_GetUsersW__imp_VMMDLL_Map_GetVMU__imp_VMMDLL_Map_GetVMW__imp_VMMDLL_Map_GetVadEx__imp_VMMDLL_Map_GetVadU__imp_VMMDLL_Map_GetVadW__imp_VMMDLL_MemCallback__imp_VMMDLL_MemFree__imp_VMMDLL_MemPrefetchPages__imp_VMMDLL_MemRead__imp_VMMDLL_MemReadEx__imp_VMMDLL_MemReadPage__imp_VMMDLL_MemReadScatter__imp_VMMDLL_MemSearch__imp_VMMDLL_MemSize__imp_VMMDLL_MemVirt2Phys__imp_VMMDLL_MemWrite__imp_VMMDLL_MemWriteScatter__imp_VMMDLL_PdbLoad__imp_VMMDLL_PdbSymbolAddress__imp_VMMDLL_PdbSymbolName__imp_VMMDLL_PdbTypeChildOffset__imp_VMMDLL_PdbTypeSize__imp_VMMDLL_PidGetFromName__imp_VMMDLL_PidList__imp_VMMDLL_ProcessGetDirectoriesU__imp_VMMDLL_ProcessGetDirectoriesW__imp_VMMDLL_ProcessGetInformation__imp_VMMDLL_ProcessGetInformationAll__imp_VMMDLL_ProcessGetInformationString__imp_VMMDLL_ProcessGetModuleBaseU__imp_VMMDLL_ProcessGetModuleBaseW__imp_VMMDLL_ProcessGetProcAddressU__imp_VMMDLL_ProcessGetProcAddressW__imp_VMMDLL_ProcessGetSectionsU__imp_VMMDLL_ProcessGetSectionsW__imp_VMMDLL_Scatter_Clear__imp_VMMDLL_Scatter_CloseHandle__imp_VMMDLL_Scatter_Execute__imp_VMMDLL_Scatter_ExecuteRead__imp_VMMDLL_Scatter_Initialize__imp_VMMDLL_Scatter_Prepare__imp_VMMDLL_Scatter_PrepareEx__imp_VMMDLL_Scatter_PrepareWrite__imp_VMMDLL_Scatter_PrepareWriteEx__imp_VMMDLL_Scatter_Read__imp_VMMDLL_UtilFillHexAscii__imp_VMMDLL_UtilVfsReadFile_FromBOOL__imp_VMMDLL_UtilVfsReadFile_FromDWORD__imp_VMMDLL_UtilVfsReadFile_FromPBYTE__imp_VMMDLL_UtilVfsReadFile_FromQWORD__imp_VMMDLL_UtilVfsWriteFile_BOOL__imp_VMMDLL_UtilVfsWriteFile_DWORD__imp_VMMDLL_VfsListBlobU__imp_VMMDLL_VfsListU__imp_VMMDLL_VfsListW__imp_VMMDLL_VfsList_AddDirectory__imp_VMMDLL_VfsList_AddDirectoryW__imp_VMMDLL_VfsList_AddFile__imp_VMMDLL_VfsList_AddFileW__imp_VMMDLL_VfsReadU__imp_VMMDLL_VfsReadW__imp_VMMDLL_VfsWriteU__imp_VMMDLL_VfsWriteW__imp_VMMDLL_VmGetVmmHandle__imp_VMMDLL_VmMemRead__imp_VMMDLL_VmMemReadScatter__imp_VMMDLL_VmMemTranslateGPA__imp_VMMDLL_VmMemWrite__imp_VMMDLL_VmMemWriteScatter__imp_VMMDLL_VmScatterInitialize__imp_VMMDLL_WinGetThunkInfoIATU__imp_VMMDLL_WinGetThunkInfoIATW__imp_VMMDLL_WinReg_EnumKeyExU__imp_VMMDLL_WinReg_EnumKeyExW__imp_VMMDLL_WinReg_EnumValueU__imp_VMMDLL_WinReg_EnumValueW__imp_VMMDLL_WinReg_HiveList__imp_VMMDLL_WinReg_HiveReadEx__imp_VMMDLL_WinReg_HiveWrite__imp_VMMDLL_WinReg_QueryValueExU__imp_VMMDLL_WinReg_QueryValueExW__imp_VMMDLL_YaraSearchVMM_NULL_THUNK_DATAVMM.dll/ -1 0 477 ` d��:�
.debug$S=�@B.idata$2��@0�.idata$6��@ � VMM.dll'�,��Microsoft (R) LINKVMM.dll@comp.id��

��.idata$2@�h.idata$6.idata$4@�h.idata$5@�h5J__IMPORT_DESCRIPTOR_VMM__NULL_IMPORT_DESCRIPTORVMM_NULL_THUNK_DATA VMM.dll/ -1 0 246 ` d�)r��.debug$S=d@B.idata$3�@0� VMM.dll'�,��Microsoft (R) LINK@comp.id��

��__NULL_IMPORT_DESCRIPTORVMM.dll/ -1 0 278 ` d�!��.debug$S=�@B.idata$5�@@�.idata$4�@@� VMM.dll'�,��Microsoft (R) LINK@comp.id��

��VMM_NULL_THUNK_DATAVMM.dll/ -1 0 41 ` ��d�^s�VMMDLL_CloseVMM.dll VMM.dll/ -1 0 44 ` ��d���
VMMDLL_CloseAllVMM.dllVMM.dll/ -1 0 45 ` ��d����VMMDLL_ConfigGetVMM.dll VMM.dll/ -1 0 45 ` ��d��0��VMMDLL_ConfigSetVMM.dll VMM.dll/ -1 0 54 ` ��d�T���"VMMDLL_ForensicFileAppendVMM.dllVMM.dll/ -1 0 46 ` ��d��S(�VMMDLL_InitializeVMM.dllVMM.dll/ -1 0 48 ` ��d��@��VMMDLL_InitializeExVMM.dllVMM.dll/ -1 0 53 ` ��d�c}3�!VMMDLL_InitializePluginsVMM.dll VMM.dll/ -1 0 46 ` ��d�!�s�VMMDLL_LicensedToVMM.dllVMM.dll/ -1 0 39 ` ��d�^� VMMDLL_LogVMM.dll VMM.dll/ -1 0 41 ` ��d�xp�� VMMDLL_LogExVMM.dll VMM.dll/ -1 0 47 ` ��d�dJ��VMMDLL_Map_GetEATUVMM.dll VMM.dll/ -1 0 47 ` ��d��#��VMMDLL_Map_GetEATWVMM.dll VMM.dll/ -1 0 50 ` ��d� �'� VMMDLL_Map_GetHandleUVMM.dllVMM.dll/ -1 0 50 ` ��d���A�VMMDLL_Map_GetHandleWVMM.dllVMM.dll/ -1 0 47 ` ��d�q��VMMDLL_Map_GetHeapVMM.dll VMM.dll/ -1 0 52 ` ��d����� VMMDLL_Map_GetHeapAllocVMM.dllVMM.dll/ -1 0 47 ` ��d���o�VMMDLL_Map_GetIATUVMM.dll VMM.dll/ -1 0 47 ` ��d�H���VMMDLL_Map_GetIATWVMM.dll VMM.dll/ -1 0 51 ` ��d�M{�VMMDLL_Map_GetKDeviceUVMM.dll VMM.dll/ -1 0 51 ` ��d�|i�VMMDLL_Map_GetKDeviceWVMM.dll VMM.dll/ -1 0 51 ` ��d�U���VMMDLL_Map_GetKDriverUVMM.dll VMM.dll/ -1 0 51 ` ��d�$���VMMDLL_Map_GetKDriverWVMM.dll VMM.dll/ -1 0 51 ` ��d�N 4�VMMDLL_Map_GetKObjectUVMM.dll VMM.dll/ -1 0 51 ` ��d�UK��VMMDLL_Map_GetKObjectWVMM.dll VMM.dll/ -1 0 58 ` ��d����&VMMDLL_Map_GetModuleFromNameUVMM.dllVMM.dll/ -1 0 58 ` ��d�^ش�&VMMDLL_Map_GetModuleFromNameWVMM.dllVMM.dll/ -1 0 50 ` ��d�$��VMMDLL_Map_GetModuleUVMM.dllVMM.dll/ -1 0 50 ` ��d��vM�VMMDLL_Map_GetModuleWVMM.dllVMM.dll/ -1 0 47 ` ��d�ah}�VMMDLL_Map_GetNetUVMM.dll VMM.dll/ -1 0 47 ` ��d�ib��VMMDLL_Map_GetNetWVMM.dll VMM.dll/ -1 0 46 ` ��d��u�VMMDLL_Map_GetPfnVMM.dllVMM.dll/ -1 0 48 ` ��d�oB�� VMMDLL_Map_GetPfnExVMM.dllVMM.dll/ -1 0 50 ` ��d�9���!VMMDLL_Map_GetPhysMemVMM.dllVMM.dll/ -1 0 47 ` ��d���"VMMDLL_Map_GetPoolVMM.dll VMM.dll/ -1 0 47 ` ��d�a7��#VMMDLL_Map_GetPteUVMM.dll VMM.dll/ -1 0 47 ` ��d�����$VMMDLL_Map_GetPteWVMM.dll VMM.dll/ -1 0 52 ` ��d�G�*� %VMMDLL_Map_GetServicesUVMM.dllVMM.dll/ -1 0 52 ` ��d�<�� &VMMDLL_Map_GetServicesWVMM.dllVMM.dll/ -1 0 49 ` ��d�����'VMMDLL_Map_GetThreadVMM.dll VMM.dll/ -1 0 60 ` ��d�δ��((VMMDLL_Map_GetThread_CallstackUVMM.dllVMM.dll/ -1 0 60 ` ��d��J��()VMMDLL_Map_GetThread_CallstackWVMM.dllVMM.dll/ -1 0 58 ` ��d��Ye�&*VMMDLL_Map_GetUnloadedModuleUVMM.dllVMM.dll/ -1 0 58 ` ��d�N�#�&+VMMDLL_Map_GetUnloadedModuleWVMM.dllVMM.dll/ -1 0 49 ` ��d�n���,VMMDLL_Map_GetUsersUVMM.dll VMM.dll/ -1 0 49 ` ��d����-VMMDLL_Map_GetUsersWVMM.dll VMM.dll/ -1 0 46 ` ��d����.VMMDLL_Map_GetVMUVMM.dllVMM.dll/ -1 0 46 ` ��d���/VMMDLL_Map_GetVMWVMM.dllVMM.dll/ -1 0 48 ` ��d�]���0VMMDLL_Map_GetVadExVMM.dllVMM.dll/ -1 0 47 ` ��d�$��1VMMDLL_Map_GetVadUVMM.dll VMM.dll/ -1 0 47 ` ��d��I��2VMMDLL_Map_GetVadWVMM.dll VMM.dll/ -1 0 47 ` ��d�Z�&�3VMMDLL_MemCallbackVMM.dll VMM.dll/ -1 0 43 ` ��d�V|��4VMMDLL_MemFreeVMM.dll VMM.dll/ -1 0 52 ` ��d��O�� 5VMMDLL_MemPrefetchPagesVMM.dllVMM.dll/ -1 0 43 ` ��d�����6VMMDLL_MemReadVMM.dll VMM.dll/ -1 0 45 ` ��d�����7VMMDLL_MemReadExVMM.dll VMM.dll/ -1 0 47 ` ��d��?�8VMMDLL_MemReadPageVMM.dll VMM.dll/ -1 0 50 ` ��d�U-��9VMMDLL_MemReadScatterVMM.dllVMM.dll/ -1 0 45 ` ��d�����:VMMDLL_MemSearchVMM.dll VMM.dll/ -1 0 43 ` ��d�����;VMMDLL_MemSizeVMM.dll VMM.dll/ -1 0 48 ` ��d�c�}�<VMMDLL_MemVirt2PhysVMM.dllVMM.dll/ -1 0 44 ` ��d�����=VMMDLL_MemWriteVMM.dllVMM.dll/ -1 0 51 ` ��d��K�>VMMDLL_MemWriteScatterVMM.dll VMM.dll/ -1 0 43 ` ��d�����?VMMDLL_PdbLoadVMM.dll VMM.dll/ -1 0 52 ` ��d�G�*� @VMMDLL_PdbSymbolAddressVMM.dllVMM.dll/ -1 0 49 ` ��d���AVMMDLL_PdbSymbolNameVMM.dll VMM.dll/ -1 0 54 ` ��d��q�"BVMMDLL_PdbTypeChildOffsetVMM.dllVMM.dll/ -1 0 47 ` ��d���g�CVMMDLL_PdbTypeSizeVMM.dll VMM.dll/ -1 0 50 ` ��d�����DVMMDLL_PidGetFromNameVMM.dllVMM.dll/ -1 0 43 ` ��d�����EVMMDLL_PidListVMM.dll VMM.dll/ -1 0 58 ` ��d��h�&FVMMDLL_ProcessGetDirectoriesUVMM.dllVMM.dll/ -1 0 58 ` ��d�~���&GVMMDLL_ProcessGetDirectoriesWVMM.dllVMM.dll/ -1 0 57 ` ��d��ח�%HVMMDLL_ProcessGetInformationVMM.dll VMM.dll/ -1 0 60 ` ��d�%���(IVMMDLL_ProcessGetInformationAllVMM.dllVMM.dll/ -1 0 63 ` ��d�x�3�+JVMMDLL_ProcessGetInformationStringVMM.dll VMM.dll/ -1 0 57 ` ��d�:�%KVMMDLL_ProcessGetModuleBaseUVMM.dll VMM.dll/ -1 0 57 ` ��d����%LVMMDLL_ProcessGetModuleBaseWVMM.dll VMM.dll/ -1 0 58 ` ��d��b��&MVMMDLL_ProcessGetProcAddressUVMM.dllVMM.dll/ -1 0 58 ` ��d�����&NVMMDLL_ProcessGetProcAddressWVMM.dllVMM.dll/ -1 0 55 ` ��d�J���#OVMMDLL_ProcessGetSectionsUVMM.dll VMM.dll/ -1 0 55 ` ��d����#PVMMDLL_ProcessGetSectionsWVMM.dll VMM.dll/ -1 0 49 ` ��d�>���QVMMDLL_Scatter_ClearVMM.dll VMM.dll/ -1 0 55 ` ��d���E�#RVMMDLL_Scatter_CloseHandleVMM.dll VMM.dll/ -1 0 51 ` ��d�b�%�SVMMDLL_Scatter_ExecuteVMM.dll VMM.dll/ -1 0 55 ` ��d�M9��#TVMMDLL_Scatter_ExecuteReadVMM.dll VMM.dll/ -1 0 54 ` ��d�b�i�"UVMMDLL_Scatter_InitializeVMM.dllVMM.dll/ -1 0 51 ` ��d��u��VVMMDLL_Scatter_PrepareVMM.dll VMM.dll/ -1 0 53 ` ��d�Ũ��!WVMMDLL_Scatter_PrepareExVMM.dll VMM.dll/ -1 0 56 ` ��d�]N��$XVMMDLL_Scatter_PrepareWriteVMM.dllVMM.dll/ -1 0 58 ` ��d�w���&YVMMDLL_Scatter_PrepareWriteExVMM.dllVMM.dll/ -1 0 48 ` ��d�ː�ZVMMDLL_Scatter_ReadVMM.dllVMM.dll/ -1 0 52 ` ��d���� [VMMDLL_UtilFillHexAsciiVMM.dllVMM.dll/ -1 0 60 ` ��d�ʦ�(\VMMDLL_UtilVfsReadFile_FromBOOLVMM.dllVMM.dll/ -1 0 61 ` ��d�hz��)]VMMDLL_UtilVfsReadFile_FromDWORDVMM.dll VMM.dll/ -1 0 61 ` ��d�.�A�)^VMMDLL_UtilVfsReadFile_FromPBYTEVMM.dll VMM.dll/ -1 0 61 ` ��d�����)_VMMDLL_UtilVfsReadFile_FromQWORDVMM.dll VMM.dll/ -1 0 57 ` ��d�`Q9�%`VMMDLL_UtilVfsWriteFile_BOOLVMM.dll VMM.dll/ -1 0 58 ` ��d�B�U�&aVMMDLL_UtilVfsWriteFile_DWORDVMM.dllVMM.dll/ -1 0 48 ` ��d�����bVMMDLL_VfsListBlobUVMM.dllVMM.dll/ -1 0 44 ` ��d�����cVMMDLL_VfsListUVMM.dllVMM.dll/ -1 0 44 ` ��d�����dVMMDLL_VfsListWVMM.dllVMM.dll/ -1 0 56 ` ��d��`\�$eVMMDLL_VfsList_AddDirectoryVMM.dllVMM.dll/ -1 0 57 ` ��d�eb��%fVMMDLL_VfsList_AddDirectoryWVMM.dll VMM.dll/ -1 0 51 ` ��d��؂�gVMMDLL_VfsList_AddFileVMM.dll VMM.dll/ -1 0 52 ` ��d��su� hVMMDLL_VfsList_AddFileWVMM.dllVMM.dll/ -1 0 44 ` ��d�m�P�iVMMDLL_VfsReadUVMM.dllVMM.dll/ -1 0 44 ` ��d���q�jVMMDLL_VfsReadWVMM.dllVMM.dll/ -1 0 45 ` ��d��{��kVMMDLL_VfsWriteUVMM.dll VMM.dll/ -1 0 45 ` ��d�-c2�lVMMDLL_VfsWriteWVMM.dll VMM.dll/ -1 0 50 ` ��d��@%�mVMMDLL_VmGetVmmHandleVMM.dllVMM.dll/ -1 0 45 ` ��d� R�nVMMDLL_VmMemReadVMM.dll VMM.dll/ -1 0 52 ` ��d��R.� oVMMDLL_VmMemReadScatterVMM.dllVMM.dll/ -1 0 53 ` ��d����!pVMMDLL_VmMemTranslateGPAVMM.dll VMM.dll/ -1 0 46 ` ��d�}�8�qVMMDLL_VmMemWriteVMM.dllVMM.dll/ -1 0 53 ` ��d��K��!rVMMDLL_VmMemWriteScatterVMM.dll VMM.dll/ -1 0 55 ` ��d�-r�#sVMMDLL_VmScatterInitializeVMM.dll VMM.dll/ -1 0 55 ` ��d�i$�#tVMMDLL_WinGetThunkInfoIATUVMM.dll VMM.dll/ -1 0 55 ` ��d��j�#uVMMDLL_WinGetThunkInfoIATWVMM.dll VMM.dll/ -1 0 53 ` ��d��ݵ�!vVMMDLL_WinReg_EnumKeyExUVMM.dll VMM.dll/ -1 0 53 ` ��d��s��!wVMMDLL_WinReg_EnumKeyExWVMM.dll VMM.dll/ -1 0 53 ` ��d����!xVMMDLL_WinReg_EnumValueUVMM.dll VMM.dll/ -1 0 53 ` ��d�@у�!yVMMDLL_WinReg_EnumValueWVMM.dll VMM.dll/ -1 0 51 ` ��d���zVMMDLL_WinReg_HiveListVMM.dll VMM.dll/ -1 0 53 ` ��d�� ��!{VMMDLL_WinReg_HiveReadExVMM.dll VMM.dll/ -1 0 52 ` ��d�@��� |VMMDLL_WinReg_HiveWriteVMM.dllVMM.dll/ -1 0 56 ` ��d�A���$}VMMDLL_WinReg_QueryValueExUVMM.dllVMM.dll/ -1 0 56 ` ��d����$~VMMDLL_WinReg_QueryValueExWVMM.dllVMM.dll/ -1 0 46 ` ��d���b�VMMDLL_YaraSearchVMM.dll