Some more ... also worth noting that the function id appears to be the first 32 bits of SHA1 over the original function name. STUB_START "IoFileMgrForUser",0x40010000,0x00030005 STUB_FUNC 0xb29ddf9c,IoDopen STUB_FUNC 0xe3eb004c,IoDread STUB_FUNC 0xeb092469,IoDclose STUB_END enum {...