==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  C6 05 0C BE 01 00 01 83  EC 08 33 C0 B9 20 00 00  00 53 56 57 55 BF 40 CD  01 00 F3 AB FF 15 60 AC  ╞♣♀╛☺.☺â∞◘3└╣ ...SVWU┐@═☺.≤½ §`¼
00000020  01 00 6A 00 A3 14 BE 01  00 A1 7C AB 01 00 6A 01  0F BE 08 68 20 BE 01 00  89 0D 30 C0 01 00 FF 15  ☺.j.ú¶╛☺.í|½☺.j☺☼╛◘h ╛☺.ë♪0└☺. §
00000040  68 AD 01 00 6A 00 6A 01  68 C0 CF 01 00 FF 15 68  AD 01 00 8B 0D 80 AB 01  00 68 5C BE 01 00 8B 35  h¡☺.j.j☺h└╧☺. §h¡☺.ï♪ǽ☺.h\╛☺.ï5
00000060  3C AB 01 00 8B 11 89 15  80 AB 01 00 FF D6 68 FC  BE 01 00 FF D6 68 40 BF  01 00 8B 3D 38 AB 01 00  <½☺.ï◄ë§Ç½☺. ╓hⁿ╛☺. ╓h@┐☺.ï=8½☺.
00000080  BB F0 D3 01 00 FF D7 68  78 BF 01 00 FF D7 68 C0  BF 01 00 FF D7 53 FF D7  83 C3 38 81 FB 20 D6 01  ╗≡╙☺. ╫hx┐☺. ╫h└┐☺. ╫S ╫â├8ü√ ╓☺
000000A0  00 72 F2 68 F8 BF 01 00  FF D7 68 F8 CF 01 00 FF  D7 68 00 CE 01 00 FF D7  B8 90 C2 01 00 A3 94 C2  .r≥h°┐☺. ╫h°╧☺. ╫h.╬☺. ╫╕É┬☺.úö┬
000000C0  01 00 A3 90 C2 01 00 B8  98 C2 01 00 33 C9 A3 9C  C2 01 00 A3 98 C2 01 00  B8 A8 C2 01 00 A3 AC C2  ☺.úÉ┬☺.╕ÿ┬☺.3╔ú£┬☺.úÿ┬☺.╕¿┬☺.ú¼┬
000000E0  01 00 A3 A8 C2 01 00 B8  C0 C2 01 00 C7 00 C1 09  03 00 83 C0 10 3D E0 C2  01 00 89 48 F4 89 48 E8  ☺.ú¿┬☺.╕└┬☺.╟.┴○♥.â└►=α┬☺.ëH⌠ëHΦ
00000100  72 EA C7 05 E8 C2 01 00  4C 45 01 00 33 C9 B8 30  C3 01 00 66 89 0D A4 C2  01 00 89 0D A0 C2 01 00  rΩ╟♣Φ┬☺.LE☺.3╔╕0├☺.fë♪ñ┬☺.ë♪á┬☺.
00000120  66 89 0D A6 C2 01 00 89  0D EC C2 01 00 89 0D E0  C2 01 00 8B D1 89 40 04  41 89 00 6B D2 38 81 C2  fë♪ª┬☺.ë♪∞┬☺.ë♪α┬☺.ï╤ë@♦Aë.k╥8ü┬
00000140  F0 D3 01 00 83 F9 0A 89  50 08 75 02 33 C9 83 C0  0C 3D 30 C9 01 00 72 DB  B8 30 C9 01 00 89 40 04  ≡╙☺.â∙◙ëP◘u☻3╔â└♀=0╔☺.r█╕0╔☺.ë@♦
00000160  89 00 83 C0 08 3D B0 C9  01 00 72 F1 68 00 CF 01  00 33 DB FF D7 68 A8 D0  01 00 88 1D 54 CF 01 00  ë.â└◘=░╔☺.r±h.╧☺.3█ ╫h¿╨☺.ê↔T╧☺.
00000180  88 1D 74 CF 01 00 88 1D  94 CF 01 00 88 1D B4 CF  01 00 FF D7 C7 05 3C D0  01 00 02 00 00 00 B8 F0  ê↔t╧☺.ê↔ö╧☺.ê↔┤╧☺. ╫╟♣<╨☺.☻...╕≡
000001A0  CF 01 00 88 1D 40 D0 01  00 A3 F4 CF 01 00 88 1D  41 D0 01 00 8D 54 24 10  A3 F0 CF 01 00 FF 35 24  ╧☺.ê↔@╨☺.ú⌠╧☺.ê↔A╨☺.ìT$►ú≡╧☺. 5$
000001C0  D1 01 00 52 B8 30 D0 01  00 A3 34 D0 01 00 A3 30  D0 01 00 FF 15 04 AC 01  00 8D 4C 24 10 6A 01 51  ╤☺.R╕0╨☺.ú4╨☺.ú0╨☺. §♦¼☺.ìL$►j☺Q
000001E0  68 C0 CC 01 00 FF 15 CC  AC 01 00 FF 35 18 D1 01  00 68 C8 CC 01 00 8B 3D  20 AC 01 00 FF D7 FF 35  h└╠☺. §╠¼☺. 5↑╤☺.h╚╠☺.ï= ¼☺. ╫ 5
00000200  1C D1 01 00 68 D0 CC 01  00 FF D7 A1 A8 D3 01 00  50 68 D0 CD 01 00 FF D7  A1 AC D3 01 00 BB A0 CE  ∟╤☺.h╨╠☺. ╫í¿╙☺.Ph╨═☺. ╫í¼╙☺.╗á╬
00000220  01 00 50 BD 50 D3 01 00  68 D8 CD 01 00 FF 15 B0  AB 01 00 C7 05 50 D0 01  00 B9 0B 00 00 C7 05 60  ☺.P╜P╙☺.h╪═☺. §░½☺.╟♣P╨☺.╣♂..╟♣`
00000240  D0 01 00 BA 0B 00 00 FF  75 00 53 83 C3 08 FF D7  83 C5 04 81 FD 6C D3 01  00 76 EC B9 E0 CE 01 00  ╨☺.║♂.. u.Sâ├◘ ╫â┼♦ü²l╙☺.v∞╣α╬☺.
00000260  8B 59 FC 8D 41 F8 8B 10  89 11 83 C1 08 81 F9 F8  CE 01 00 89 59 FC 72 E8  68 1C BF 01 00 BF 7C BE  ïYⁿìA°ï►ë◄â┴◘ü∙°╬☺.ëYⁿrΦh∟┐☺.┐|╛
00000280  01 00 FF D6 57 FF D6 83  C7 20 81 FF FC BE 01 00  72 F2 C7 05 30 BE 01 00  07 00 00 00 FF 15 E8 AC  ☺. ╓W ╓â╟ ü ⁿ╛☺.r≥╟♣0╛☺.•... §Φ¼
000002A0  01 00 8B C8 2B D2 B8 80  F0 FA 02 5D F7 F1 5F A3  04 D1 01 00 5E 5B 83 C4  08 C3 83 EC 08 A1 38 D1  ☺.ï╚+╥╕Ç≡·☻]≈±_ú♦╤☺.^[â─◘├â∞◘í8╤
000002C0  01 00 8D 4C 24 00 53 56  33 DB 57 50 51 FF 15 20  AC 01 00 8D 4C 24 0C 68  00 BE 01 00 8B 7C 24 1C  ☺.ìL$.SV3█WPQ § ¼☺.ìL$♀h.╛☺.ï|$∟
000002E0  53 53 6A 12 51 53 57 FF  15 10 AD 01 00 8B F0 85  F6 7D 1B 53 53 53 53 56  68 D2 07 00 C0 57 E8 A5  SSj↕QSW §►¡☺.ï≡à÷}←SSSSVh╥•.└WΦÑ
00000300  2B FD FF 8B C6 5F 5E 5B  83 C4 08 C2 08 00 83 C7  38 B8 DC 15 03 00 B9 1C  00 00 00 C7 47 FC 6B 65  +² ï╞_^[â─◘┬◘.â╟8╕▄§♥.╣∟...╟Gⁿke
00000320  03 00 F3 AB E8 D7 FC FF  FF EB D8 CC CC CC CC CC  20 5A 03 00 00 00 00 00  00 00 00 00 78 5D 03 00  ♥.≤½Φ╫ⁿ  δ╪╠╠╠╠╠ Z♥.........x]♥.
00000340  80 AA 00 00 20 5D 03 00  00 00 00 00 00 00 00 00  E0 6E 03 00 80 AD 00 00  38 5D 03 00 00 00 00 00  Ǭ.. ]♥.........αn♥.Ç¡..8]♥.....
00000360  00 00 00 00 58 6F 03 00  98 AD 00 00 50 5D 03 00  00 00 00 00 00 00 00 00  08 70 03 00 B0 AD 00 00  ....Xo♥.ÿ¡..P]♥.........◘p♥.░¡..
00000380  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 CC CC CC CC  CC CC CC CC CC CC CC CC  ....................╠╠╠╠╠╠╠╠╠╠╠╠
000003A0  88 5D 03 00 9A 5D 03 00  B4 5D 03 00 CC 5D 03 00  EA 5D 03 00 08 5E 03 00  1E 5E 03 00 2C 5E 03 00  ê]♥.Ü]♥.┤]♥.╠]♥.Ω]♥.◘^♥.▲^♥.,^♥.
000003C0  4A 5E 03 00 6A 5E 03 00  80 5E 03 00 A4 5E 03 00  C2 5E 03 00 D0 5E 03 00  E8 5E 03 00 00 5F 03 00  J^♥.j^♥.Ç^♥.ñ^♥.┬^♥.╨^♥.Φ^♥.._♥.
000003E0  18 5F 03 00 2C 5F 03 00  4A 5F 03 00 62 5F 03 00  7A 5F 03 00 96 5F 03 00  B8 5F 03 00 CE 5F 03 00  ↑_♥.,_♥.J_♥.b_♥.z_♥.û_♥.╕_♥.╬_♥.
00000400  DC 5F 03 00 EE 5F 03 00  04 60 03 00 14 60 03 00  24 60 03 00 40 60 03 00  5A 60 03 00 74 60 03 00  ▄_♥.ε_♥.♦`♥.¶`♥.$`♥.@`♥.Z`♥.t`♥.
00000420  90 60 03 00 B0 60 03 00  C6 60 03 00 DE 60 03 00  F8 60 03 00 1A 61 03 00  30 61 03 00 4A 61 03 00  É`♥.░`♥.╞`♥.▐`♥.°`♥.→a♥.0a♥.Ja♥.
00000440  68 61 03 00 82 61 03 00  92 61 03 00 AC 61 03 00  B8 61 03 00 CC 61 03 00  E0 61 03 00 FC 61 03 00  ha♥.éa♥.Æa♥.¼a♥.╕a♥.╠a♥.αa♥.ⁿa♥.
00000460  14 62 03 00 34 62 03 00  42 62 03 00 60 62 03 00  72 62 03 00 84 62 03 00  94 62 03 00 A4 62 03 00  ¶b♥.4b♥.Bb♥.`b♥.rb♥.äb♥.öb♥.ñb♥.
00000480  C0 62 03 00 D0 62 03 00  F0 62 03 00 08 63 03 00  16 63 03 00 30 63 03 00  50 63 03 00 6C 63 03 00  └b♥.╨b♥.≡b♥.◘c♥.▬c♥.0c♥.Pc♥.lc♥.
000004A0  82 63 03 00 8E 63 03 00  A2 63 03 00 B8 63 03 00  D6 63 03 00 E8 63 03 00  FA 63 03 00 14 64 03 00  éc♥.Äc♥.óc♥.╕c♥.╓c♥.Φc♥.·c♥.¶d♥.
000004C0  28 64 03 00 3C 64 03 00  52 64 03 00 6C 64 03 00  88 64 03 00 9C 64 03 00  A8 64 03 00 B4 64 03 00  (d♥.<d♥.Rd♥.ld♥.êd♥.£d♥.¿d♥.┤d♥.
000004E0  CC 64 03 00 E2 64 03 00  FA 64 03 00 10 65 03 00  2C 65 03 00 50 65 03 00  64 65 03 00 76 65 03 00  ╠d♥.Γd♥.·d♥.►e♥.,e♥.Pe♥.de♥.ve♥.
00000500  92 65 03 00 B2 65 03 00  BE 65 03 00 D0 65 03 00  E0 65 03 00 F8 65 03 00  0E 66 03 00 26 66 03 00  Æe♥.▓e♥.╛e♥.╨e♥.αe♥.°e♥.♫f♥.&f♥.
00000520  3E 66 03 00 52 66 03 00  64 66 03 00 6E 66 03 00  7C 66 03 00 98 66 03 00  B8 66 03 00 D6 66 03 00  >f♥.Rf♥.df♥.nf♥.|f♥.ÿf♥.╕f♥.╓f♥.
00000540  F0 66 03 00 08 67 03 00  20 67 03 00 3C 67 03 00  58 67 03 00 70 67 03 00  90 67 03 00 B0 67 03 00  ≡f♥.◘g♥. g♥.<g♥.Xg♥.pg♥.Ég♥.░g♥.
00000560  C0 67 03 00 D2 67 03 00  EE 67 03 00 00 68 03 00  18 68 03 00 2C 68 03 00  42 68 03 00 54 68 03 00  └g♥.╥g♥.εg♥..h♥.↑h♥.,h♥.Bh♥.Th♥.
00000580  6A 68 03 00 80 68 03 00  90 68 03 00 B0 68 03 00  D0 68 03 00 00 69 03 00  20 69 03 00 3A 69 03 00  jh♥.Çh♥.Éh♥.░h♥.╨h♥..i♥. i♥.:i♥.
000005A0  58 69 03 00 70 69 03 00  80 69 03 00 94 69 03 00  B4 69 03 00 D4 69 03 00  00 6A 03 00 14 6A 03 00  Xi♥.pi♥.Çi♥.öi♥.┤i♥.╘i♥..j♥.¶j♥.
000005C0  32 6A 03 00 4A 6A 03 00  60 6A 03 00 80 6A 03 00  90 6A 03 00 A0 6A 03 00  BA 6A 03 00 DA 6A 03 00  2j♥.Jj♥.`j♥.Çj♥.Éj♥.áj♥.║j♥.┌j♥.
000005E0  FA 6A 03 00 08 6B 03 00  1A 6B 03 00 24 6B 03 00  48 6B 03 00 58 6B 03 00  78 6B 03 00 88 6B 03 00  ·j♥.◘k♥.→k♥.$k♥.Hk♥.Xk♥.xk♥.êk♥.
00000600  9E 6B 03 00 B2 6B 03 00  BE 6B 03 00 D6 6B 03 00  EA 6B 03 00 08 6C 03 00  16 6C 03 00 2C 6C 03 00  ₧k♥.▓k♥.╛k♥.╓k♥.Ωk♥.◘l♥.▬l♥.,l♥.
00000620  3C 6C 03 00 48 6C 03 00  60 6C 03 00 72 6C 03 00  84 6C 03 00 96 6C 03 00  B0 6C 03 00 C8 6C 03 00  <l♥.Hl♥.`l♥.rl♥.äl♥.ûl♥.░l♥.╚l♥.
00000640  D8 6C 03 00 E4 6C 03 00  00 6D 03 00 20 6D 03 00  3C 6D 03 00 4A 6D 03 00  64 6D 03 00 74 6D 03 00  ╪l♥.Σl♥..m♥. m♥.<m♥.Jm♥.dm♥.tm♥.
00000660  84 6D 03 00 96 6D 03 00  B4 6D 03 00 BE 6D 03 00  DC 6D 03 00 F0 6D 03 00  08 6E 03 00 18 6E 03 00  äm♥.ûm♥.┤m♥.╛m♥.▄m♥.≡m♥.◘n♥.↑n♥.
00000680  28 6E 03 00 38 6E 03 00  4C 6E 03 00 60 6E 03 00  74 6E 03 00 88 6E 03 00  C0 6E 03 00 00 00 00 00  (n♥.8n♥.Ln♥.`n♥.tn♥.ên♥.└n♥.....
000006A0  E8 6E 03 00 00 6F 03 00  10 6F 03 00 30 6F 03 00  44 6F 03 00 00 00 00 00  60 6F 03 00 78 6F 03 00  Φn♥..o♥.►o♥.0o♥.Do♥.....`o♥.xo♥.
000006C0  9C 6F 03 00 B8 6F 03 00  E0 6F 03 00 00 00 00 00  14 70 03 00 30 70 03 00  50 70 03 00 64 70 03 00  £o♥.╕o♥.αo♥.....¶p♥.0p♥.Pp♥.dp♥.
000006E0  82 70 03 00 96 70 03 00  B8 70 03 00 D0 70 03 00  00 00 00 00 CC CC CC CC  6E 74 6F 73 6B 72 6E 6C  ép♥.ûp♥.╕p♥.╨p♥.....╠╠╠╠ntoskrnl
00000700  2E 65 78 65 00 00 CC CC  B3 00 46 73 52 74 6C 4D  64 6C 52 65 61 64 44 65  76 00 B2 00 46 73 52 74  .exe..╠╠│.FsRtlMdlReadDev.▓.FsRt
00000720  6C 4D 64 6C 52 65 61 64  43 6F 6D 70 6C 65 74 65  44 65 76 00 1C 03 52 74  6C 55 70 63 61 73 65 55  lMdlReadCompleteDev.∟♥RtlUpcaseU
00000740  6E 69 63 6F 64 65 43 68  61 72 00 00 16 03 52 74  6C 55 6E 69 63 6F 64 65  53 74 72 69 6E 67 54 6F  nicodeChar..▬♥RtlUnicodeStringTo
00000760  4F 65 6D 53 74 72 69 6E  67 00 22 02 4E 74 51 75  65 72 79 49 6E 66 6F 72  6D 61 74 69 6F 6E 46 69  OemString."☻NtQueryInformationFi
00000780  6C 65 00 00 CC CC CC CC  03 02 4E 6C 73 4D 62 4F  65 6D 43 6F 64 65 50 61  67 65 54 61 67 00 A2 01  le..╠╠╠╠♥☻NlsMbOemCodePageTag.ó☺
000007A0  4B 65 53 65 74 45 76 65  6E 74 00 00 2E 03 52 74  6C 78 55 6E 69 63 6F 64  65 53 74 72 69 6E 67 54  KeSetEvent...♥RtlxUnicodeStringT
000007C0  6F 4F 65 6D 53 69 7A 65  00 00 B9 01 4B 65 66 41  63 71 75 69 72 65 53 70  69 6E 4C 6F 63 6B 41 74  oOemSize..╣☺KefAcquireSpinLockAt
000007E0  44 70 63 4C 65 76 65 6C  00 00 D7 00 49 6E 74 65  72 6C 6F 63 6B 65 64 45  78 63 68 61 6E 67 65 00  DpcLevel..╫.InterlockedExchange.
00000800  BA 01 4B 65 66 52 65 6C  65 61 73 65 53 70 69 6E  4C 6F 63 6B 46 72 6F 6D  44 70 63 4C 65 76 65 6C  ║☺KefReleaseSpinLockFromDpcLevel
00000820  00 00 CC CC 59 00 45 78  49 6E 74 65 72 6C 6F 63  6B 65 64 50 75 73 68 45  6E 74 72 79 53 4C 69 73  ..╠╠Y.ExInterlockedPushEntrySLis
00000840  74 00 07 01 49 6F 46 72  65 65 49 72 70 00 CC CC  B2 02 52 74 6C 45 71 75  61 6C 55 6E 69 63 6F 64  t.•☺IoFreeIrp.╠╠▓☻RtlEqualUnicod
00000860  65 53 74 72 69 6E 67 00  EC 00 49 6F 43 68 65 63  6B 44 65 73 69 72 65 64  41 63 63 65 73 73 00 00  eString.∞.IoCheckDesiredAccess..
00000880  95 02 52 74 6C 43 6F 70  79 55 6E 69 63 6F 64 65  53 74 72 69 6E 67 00 00  86 01 4B 65 51 75 65 72  ò☻RtlCopyUnicodeString..å☺KeQuer
000008A0  79 53 79 73 74 65 6D 54  69 6D 65 00 E5 02 52 74  6C 4C 65 6E 67 74 68 53  65 63 75 72 69 74 79 44  ySystemTime.σ☻RtlLengthSecurityD
000008C0  65 73 63 72 69 70 74 6F  72 00 A4 03 5A 77 57 61  69 74 46 6F 72 53 69 6E  67 6C 65 4F 62 6A 65 63  escriptor.ñ♥ZwWaitForSingleObjec
000008E0  74 00 75 01 4B 65 49 6E  69 74 69 61 6C 69 7A 65  53 65 6D 61 70 68 6F 72  65 00 B6 01 4B 65 57 61  t.u☺KeInitializeSemaphore.╢☺KeWa
00000900  69 74 46 6F 72 4D 75 6C  74 69 70 6C 65 4F 62 6A  65 63 74 73 00 00 75 00  45 78 66 49 6E 74 65 72  itForMultipleObjects..u.ExfInter
00000920  6C 6F 63 6B 65 64 49 6E  73 65 72 74 54 61 69 6C  4C 69 73 74 00 00 CC CC  93 01 4B 65 52 65 6C 65  lockedInsertTailList..╠╠ô☺KeRele
00000940  61 73 65 53 65 6D 61 70  68 6F 72 65 00 00 97 03  5A 77 53 65 74 45 76 65  6E 74 00 00 65 03 5A 77  aseSemaphore..ù♥ZwSetEvent..e♥Zw
00000960  43 72 65 61 74 65 53 65  63 74 69 6F 6E 00 77 03  5A 77 4D 61 70 56 69 65  77 4F 66 53 65 63 74 69  CreateSection.w♥ZwMapViewOfSecti
00000980  6F 6E 00 00 62 03 5A 77  43 72 65 61 74 65 45 76  65 6E 74 00 9A 01 4B 65  52 65 73 65 74 45 76 65  on..b♥ZwCreateEvent.Ü☺KeResetEve
000009A0  6E 74 00 00 5E 00 45 78  4C 6F 63 61 6C 54 69 6D  65 54 6F 53 79 73 74 65  6D 54 69 6D 65 00 CC CC  nt..^.ExLocalTimeToSystemTime.╠╠
000009C0  D8 00 49 6E 74 65 72 6C  6F 63 6B 65 64 45 78 63  68 61 6E 67 65 41 64 64  00 00 57 01 4B 65 44 65  ╪.InterlockedExchangeAdd..W☺KeDe
000009E0  6C 61 79 45 78 65 63 75  74 69 6F 6E 54 68 72 65  61 64 00 00 73 00 45 78  66 49 6E 74 65 72 6C 6F  layExecutionThread..s.ExfInterlo
00000A00  63 6B 65 64 41 64 64 55  6C 6F 6E 67 00 00 CC CC  6D 00 45 78 52 65 6C 65  61 73 65 52 65 73 6F 75  ckedAddUlong..╠╠m.ExReleaseResou
00000A20  72 63 65 4C 69 74 65 00  CC CC CC CC CC CC CC CC  10 03 52 74 6C 54 69 6D  65 54 6F 54 69 6D 65 46  rceLite.╠╠╠╠╠╠╠╠►♥RtlTimeToTimeF
00000A40  69 65 6C 64 73 00 D9 00  49 6E 74 65 72 6C 6F 63  6B 65 64 49 6E 63 72 65  6D 65 6E 74 00 00 8C 02  ields.┘.InterlockedIncrement..î☻
00000A60  52 74 6C 43 6F 6D 70 61  72 65 55 6E 69 63 6F 64  65 53 74 72 69 6E 67 00  2E 00 45 78 41 63 71 75  RtlCompareUnicodeString...ExAcqu
00000A80  69 72 65 52 65 73 6F 75  72 63 65 45 78 63 6C 75  73 69 76 65 4C 69 74 65  00 00 16 02 4E 74 46 72  ireResourceExclusiveLite..▬☻NtFr
00000AA0  65 65 56 69 72 74 75 61  6C 4D 65 6D 6F 72 79 00  09 02 4E 74 41 6C 6C 6F  63 61 74 65 56 69 72 74  eeVirtualMemory.○☻NtAllocateVirt
00000AC0  75 61 6C 4D 65 6D 6F 72  79 00 2E 02 4E 74 53 65  74 49 6E 66 6F 72 6D 61  74 69 6F 6E 54 68 72 65  ualMemory..☻NtSetInformationThre
00000AE0  61 64 00 00 CC CC CC CC  4A 03 53 65 52 65 6C 65  61 73 65 53 75 62 6A 65  63 74 43 6F 6E 74 65 78  ad..╠╠╠╠J♥SeReleaseSubjectContex
00000B00  74 00 2F 03 53 65 41 63  63 65 73 73 43 68 65 63  6B 00 35 03 53 65 43 61  70 74 75 72 65 53 75 62  t./♥SeAccessCheck.5♥SeCaptureSub
00000B20  6A 65 63 74 43 6F 6E 74  65 78 74 00 BF 03 5F 77  63 73 69 63 6D 70 00 00  E8 01 4D 6D 4D 61 70 4C  jectContext.┐♥_wcsicmp..Φ☺MmMapL
00000B40  6F 63 6B 65 64 50 61 67  65 73 00 00 89 02 52 74  6C 43 6F 6D 70 61 72 65  4D 65 6D 6F 72 79 00 00  ockedPages..ë☻RtlCompareMemory..
00000B60  4A 00 45 78 49 6E 69 74  69 61 6C 69 7A 65 52 65  73 6F 75 72 63 65 4C 69  74 65 00 00 76 01 4B 65  J.ExInitializeResourceLite..v☺Ke
00000B80  49 6E 69 74 69 61 6C 69  7A 65 53 70 69 6E 4C 6F  63 6B 00 00 78 00 45 78  66 49 6E 74 65 72 6C 6F  InitializeSpinLock..x.ExfInterlo
00000BA0  63 6B 65 64 52 65 6D 6F  76 65 48 65 61 64 4C 69  73 74 00 00 C4 02 52 74  6C 46 72 65 65 48 65 61  ckedRemoveHeadList..─☻RtlFreeHea
00000BC0  70 00 77 02 52 74 6C 41  6C 6C 6F 63 61 74 65 48  65 61 70 00 CC CC CC CC  CC CC CC CC CC CC CC CC  p.w☻RtlAllocateHeap.╠╠╠╠╠╠╠╠╠╠╠╠
00000BE0  A7 02 52 74 6C 44 65 73  74 72 6F 79 48 65 61 70  00 00 0F 02 4E 74 43 72  65 61 74 65 53 65 63 74  º☻RtlDestroyHeap..☼☻NtCreateSect
00000C00  69 6F 6E 00 0C 02 4E 74  43 6F 6E 6E 65 63 74 50  6F 72 74 00 98 02 52 74  6C 43 72 65 61 74 65 48  ion.♀☻NtConnectPort.ÿ☻RtlCreateH
00000C20  65 61 70 00 6A 02 50 73  54 65 72 6D 69 6E 61 74  65 53 79 73 74 65 6D 54  68 72 65 61 64 00 CC CC  eap.j☻PsTerminateSystemThread.╠╠
00000C40  98 01 4B 65 52 65 6D 6F  76 65 51 75 65 75 65 00  A4 01 4B 65 53 65 74 49  64 65 61 6C 50 72 6F 63  ÿ☺KeRemoveQueue.ñ☺KeSetIdealProc
00000C60  65 73 73 6F 72 54 68 72  65 61 64 00 CC CC CC CC  54 02 50 73 43 72 65 61  74 65 53 79 73 74 65 6D  essorThread.╠╠╠╠T☻PsCreateSystem
00000C80  54 68 72 65 61 64 00 00  F5 01 4D 6D 53 69 7A 65  4F 66 4D 64 6C 00 E3 01  4D 6D 49 73 54 68 69 73  Thread..⌡☺MmSizeOfMdl.π☺MmIsThis
00000CA0  41 6E 4E 74 41 73 53 79  73 74 65 6D 00 00 CC CC  26 03 52 74 6C 56 61 6C  69 64 53 65 63 75 72 69  AnNtAsSystem..╠╠&♥RtlValidSecuri
00000CC0  74 79 44 65 73 63 72 69  70 74 6F 72 00 00 CC CC  0F 03 52 74 6C 54 69 6D  65 54 6F 53 65 63 6F 6E  tyDescriptor..╠╠☼♥RtlTimeToSecon
00000CE0  64 73 53 69 6E 63 65 31  39 38 30 00 82 01 4B 65  4E 75 6D 62 65 72 50 72  6F 63 65 73 73 6F 72 73  dsSince1980.é☺KeNumberProcessors
00000D00  00 00 3C 03 53 65 45 78  70 6F 72 74 73 00 E9 02  52 74 6C 4D 61 70 47 65  6E 65 72 69 63 4D 61 73  ..<♥SeExports.Θ☻RtlMapGenericMas
00000D20  6B 00 3D 03 53 65 46 72  65 65 50 72 69 76 69 6C  65 67 65 73 00 00 CC CC  51 02 50 73 41 73 73 69  k.=♥SeFreePrivileges..╠╠Q☻PsAssi
00000D40  67 6E 49 6D 70 65 72 73  6F 6E 61 74 69 6F 6E 54  6F 6B 65 6E 00 00 4F 01  4B 65 41 74 74 61 63 68  gnImpersonationToken..O☺KeAttach
00000D60  50 72 6F 63 65 73 73 00  59 01 4B 65 44 65 74 61  63 68 50 72 6F 63 65 73  73 00 23 03 52 74 6C 55  Process.Y☺KeDetachProcess.#♥RtlU
00000D80  70 63 61 73 65 55 6E 69  63 6F 64 65 54 6F 4F 65  6D 4E 00 00 1A 03 52 74  6C 55 6E 69 63 6F 64 65  pcaseUnicodeToOemN..→♥RtlUnicode
00000DA0  54 6F 4F 65 6D 4E 00 00  02 02 4E 6C 73 4D 62 43  6F 64 65 50 61 67 65 54  61 67 00 00 04 02 4E 6C  ToOemN..☻☻NlsMbCodePageTag..♦☻Nl
00000DC0  73 4F 65 6D 4C 65 61 64  42 79 74 65 49 6E 66 6F  00 00 DC 02 52 74 6C 49  73 4E 61 6D 65 4C 65 67  sOemLeadByteInfo..▄☻RtlIsNameLeg
00000DE0  61 6C 44 4F 53 38 44 6F  74 33 00 00 A6 00 46 73  52 74 6C 49 73 46 61 74  44 62 63 73 4C 65 67 61  alDOS8Dot3..ª.FsRtlIsFatDbcsLega
00000E00  6C 00 CC CC CC CC CC CC  D0 02 52 74 6C 49 6E 69  74 41 6E 73 69 53 74 72  69 6E 67 00 0B 02 4E 74  l.╠╠╠╠╠╠╨☻RtlInitAnsiString.♂☻Nt
00000E20  43 6C 6F 73 65 00 CC CC  EA 03 77 63 73 63 6D 70  00 00 CC CC 26 02 4E 74  51 75 65 72 79 53 65 63  Close.╠╠Ω♥wcscmp..╠╠&☻NtQuerySec
00000E40  75 72 69 74 79 4F 62 6A  65 63 74 00 2F 02 4E 74  53 65 74 53 65 63 75 72  69 74 79 4F 62 6A 65 63  urityObject./☻NtSetSecurityObjec
00000E60  74 00 12 02 4E 74 44 65  76 69 63 65 49 6F 43 6F  6E 74 72 6F 6C 46 69 6C  65 00 C3 02 52 74 6C 46  t.↕☻NtDeviceIoControlFile.├☻RtlF
00000E80  72 65 65 41 6E 73 69 53  74 72 69 6E 67 00 CC CC  1D 03 52 74 6C 55 70 63  61 73 65 55 6E 69 63 6F  reeAnsiString.╠╠↔♥RtlUpcaseUnico
00000EA0  64 65 53 74 72 69 6E 67  00 00 CC CC 20 03 52 74  6C 55 70 63 61 73 65 55  6E 69 63 6F 64 65 53 74  deString..╠╠ ♥RtlUpcaseUnicodeSt
00000EC0  72 69 6E 67 54 6F 4F 65  6D 53 74 72 69 6E 67 00  13 01 49 6F 47 65 74 53  74 61 63 6B 4C 69 6D 69  ringToOemString.‼☺IoGetStackLimi
00000EE0  74 73 00 00 17 02 4E 74  46 73 43 6F 6E 74 72 6F  6C 46 69 6C 65 00 01 03  52 74 6C 53 65 63 6F 6E  ts..↨☻NtFsControlFile.☺♥RtlSecon
00000F00  64 73 53 69 6E 63 65 31  39 37 30 54 6F 54 69 6D  65 00 04 01 49 6F 46 61  73 74 51 75 65 72 79 4E  dsSince1970ToTime.♦☺IoFastQueryN
00000F20  65 74 77 6F 72 6B 41 74  74 72 69 62 75 74 65 73  00 00 FE 02 52 74 6C 52  61 6E 64 6F 6D 00 B7 03  etworkAttributes..■☻RtlRandom.╖♥
00000F40  5F 73 74 72 69 63 6D 70  00 00 CC CC CC CC CC CC  E9 03 77 63 73 63 68 72  00 00 CC CC CC CC CC CC  _stricmp..╠╠╠╠╠╠Θ♥wcschr..╠╠╠╠╠╠
00000F60  23 01 49 6F 52 65 61 64  4F 70 65 72 61 74 69 6F  6E 43 6F 75 6E 74 00 00  24 01 49 6F 52 65 61 64  #☺IoReadOperationCount..$☺IoRead
00000F80  54 72 61 6E 73 66 65 72  43 6F 75 6E 74 00 42 01  49 6F 57 72 69 74 65 4F  70 65 72 61 74 69 6F 6E  TransferCount.B☺IoWriteOperation
00000FA0  43 6F 75 6E 74 00 43 01  49 6F 57 72 69 74 65 54  72 61 6E 73 66 65 72 43  6F 75 6E 74 00 00 38 01  Count.C☺IoWriteTransferCount..8☺
00000FC0  49 6F 53 74 61 74 69 73  74 69 63 73 4C 6F 63 6B  00 00 D2 02 52 74 6C 49  6E 69 74 53 74 72 69 6E  IoStatisticsLock..╥☻RtlInitStrin
00000FE0  67 00 CC CC EB 03 77 63  73 63 70 79 00 00 EB 00  49 6F 43 61 6E 63 65 6C  49 72 70 00 DB 02 52 74  g.╠╠δ♥wcscpy..δ.IoCancelIrp.█☻Rt
00001000  6C 49 6E 74 65 67 65 72  54 6F 55 6E 69 63 6F 64  65 53 74 72 69 6E 67 00  32 01 49 6F 53 65 74 54  lIntegerToUnicodeString.2☺IoSetT
00001020  68 72 65 61 64 48 61 72  64 45 72 72 6F 72 4D 6F  64 65 00 00 CC CC CC CC  EF 02 52 74 6C 4E 74 53  hreadHardErrorMode..╠╠╠╠∩☻RtlNtS
00001040  74 61 74 75 73 54 6F 44  6F 73 45 72 72 6F 72 4E  6F 54 65 62 00 00 2A 02  4E 74 52 65 71 75 65 73  tatusToDosErrorNoTeb..*☻NtReques
00001060  74 57 61 69 74 52 65 70  6C 79 50 6F 72 74 00 00  D3 02 52 74 6C 49 6E 69  74 55 6E 69 63 6F 64 65  tWaitReplyPort..╙☻RtlInitUnicode
00001080  53 74 72 69 6E 67 00 00  C6 02 52 74 6C 46 72 65  65 55 6E 69 63 6F 64 65  53 74 72 69 6E 67 00 00  String..╞☻RtlFreeUnicodeString..
000010A0  C5 00 46 73 52 74 6C 50  72 65 70 61 72 65 4D 64  6C 57 72 69 74 65 44 65  76 00 CC CC B5 00 46 73  ┼.FsRtlPrepareMdlWriteDev.╠╠╡.Fs
000010C0  52 74 6C 4D 64 6C 57 72  69 74 65 43 6F 6D 70 6C  65 74 65 44 65 76 00 00  EE 00 49 6F 43 68 65 63  RtlMdlWriteCompleteDev..ε.IoChec
000010E0  6B 46 75 6E 63 74 69 6F  6E 41 63 63 65 73 73 00  ED 00 49 6F 43 68 65 63  6B 45 61 42 75 66 66 65  kFunctionAccess.φ.IoCheckEaBuffe
00001100  72 56 61 6C 69 64 69 74  79 00 CC CC CC CC CC CC  F9 02 52 74 6C 50 72 65  66 69 78 55 6E 69 63 6F  rValidity.╠╠╠╠╠╠∙☻RtlPrefixUnico
00001120  64 65 53 74 72 69 6E 67  00 00 CC CC CC CC CC CC  0E 02 4E 74 43 72 65 61  74 65 46 69 6C 65 00 00  deString..╠╠╠╠╠╠♫☻NtCreateFile..
00001140  B1 02 52 74 6C 45 71 75  61 6C 53 74 72 69 6E 67  00 00 E4 01 4D 6D 4C 6F  63 6B 50 61 67 61 62 6C  ▒☻RtlEqualString..Σ☺MmLockPagabl
00001160  65 44 61 74 61 53 65 63  74 69 6F 6E 00 00 E1 00  49 6F 41 6C 6C 6F 63 61  74 65 4D 64 6C 00 CC CC  eDataSection..ß.IoAllocateMdl.╠╠
00001180  EE 01 4D 6D 50 72 6F 62  65 41 6E 64 4C 6F 63 6B  50 61 67 65 73 00 CC CC  20 01 49 6F 51 75 65 75  ε☺MmProbeAndLockPages.╠╠ ☺IoQueu
000011A0  65 54 68 72 65 61 64 49  72 70 00 00 48 02 4F 62  66 52 65 66 65 72 65 6E  63 65 4F 62 6A 65 63 74  eThreadIrp..H☻ObfReferenceObject
000011C0  00 00 E0 00 49 6F 41 6C  6C 6F 63 61 74 65 49 72  70 00 CC CC 60 01 4B 65  47 65 74 43 75 72 72 65  ..α.IoAllocateIrp.╠╠`☺KeGetCurre
000011E0  6E 74 54 68 72 65 61 64  00 00 0C 01 49 6F 47 65  74 43 75 72 72 65 6E 74  50 72 6F 63 65 73 73 00  ntThread..♀☺IoGetCurrentProcess.
00001200  52 01 4B 65 42 75 67 43  68 65 63 6B 45 78 00 00  0D 03 52 74 6C 54 69 6D  65 46 69 65 6C 64 73 54  R☺KeBugCheckEx..♪♥RtlTimeFieldsT
00001220  6F 54 69 6D 65 00 CC CC  CC CC CC CC CC CC CC CC  3C 00 45 78 44 65 6C 65  74 65 52 65 73 6F 75 72  oTime.╠╠╠╠╠╠╠╠╠╠<.ExDeleteResour
00001240  63 65 4C 69 74 65 00 00  CC CC CC CC CC CC CC CC  47 02 4F 62 66 44 65 72  65 66 65 72 65 6E 63 65  ceLite..╠╠╠╠╠╠╠╠G☻ObfDereference
00001260  4F 62 6A 65 63 74 00 00  CC CC CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  Object..╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠
00001280  95 00 46 73 52 74 6C 44  6F 65 73 4E 61 6D 65 43  6F 6E 74 61 69 6E 57 69  6C 64 43 61 72 64 73 00  ò.FsRtlDoesNameContainWildCards.
000012A0  70 00 45 78 53 79 73 74  65 6D 54 69 6D 65 54 6F  4C 6F 63 61 6C 54 69 6D  65 00 0E 03 52 74 6C 54  p.ExSystemTimeToLocalTime.♫♥RtlT
000012C0  69 6D 65 54 6F 53 65 63  6F 6E 64 73 53 69 6E 63  65 31 39 37 30 00 CC CC  D6 00 49 6E 74 65 72 6C  imeToSecondsSince1970.╠╠╓.Interl
000012E0  6F 63 6B 65 64 44 65 63  72 65 6D 65 6E 74 00 00  F4 00 49 6F 43 72 65 61  74 65 46 69 6C 65 00 00  ockedDecrement..⌠.IoCreateFile..
00001300  C5 02 52 74 6C 46 72 65  65 4F 65 6D 53 74 72 69  6E 67 00 00 CA 02 52 74  6C 47 65 74 44 61 63 6C  ┼☻RtlFreeOemString..╩☻RtlGetDacl
00001320  53 65 63 75 72 69 74 79  44 65 73 63 72 69 70 74  6F 72 00 00 CE 02 52 74  6C 47 65 74 4F 77 6E 65  SecurityDescriptor..╬☻RtlGetOwne
00001340  72 53 65 63 75 72 69 74  79 44 65 73 63 72 69 70  74 6F 72 00 F7 01 4D 6D  55 6E 6C 6F 63 6B 50 61  rSecurityDescriptor.≈☺MmUnlockPa
00001360  67 61 62 6C 65 49 6D 61  67 65 53 65 63 74 69 6F  6E 00 CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  gableImageSection.╠╠╠╠╠╠╠╠╠╠╠╠╠╠
00001380  74 01 4B 65 49 6E 69 74  69 61 6C 69 7A 65 51 75  65 75 65 00 9A 02 52 74  6C 43 72 65 61 74 65 53  t☺KeInitializeQueue.Ü☻RtlCreateS
000013A0  65 63 75 72 69 74 79 44  65 73 63 72 69 70 74 6F  72 00 E4 02 52 74 6C 4C  65 6E 67 74 68 52 65 71  ecurityDescriptor.Σ☻RtlLengthReq
000013C0  75 69 72 65 64 53 69 64  00 00 D6 02 52 74 6C 49  6E 69 74 69 61 6C 69 7A  65 53 69 64 00 00 CC CC  uiredSid..╓☻RtlInitializeSid..╠╠
000013E0  0C 03 52 74 6C 53 75 62  41 75 74 68 6F 72 69 74  79 53 69 64 00 00 CC CC  CC CC CC CC CC CC CC CC  ♀♥RtlSubAuthoritySid..╠╠╠╠╠╠╠╠╠╠
00001400  E6 02 52 74 6C 4C 65 6E  67 74 68 53 69 64 00 00  96 02 52 74 6C 43 72 65  61 74 65 41 63 6C 00 00  µ☻RtlLengthSid..û☻RtlCreateAcl..
00001420  73 02 52 74 6C 41 64 64  41 63 63 65 73 73 41 6C  6C 6F 77 65 64 41 63 65  00 00 05 03 52 74 6C 53  s☻RtlAddAccessAllowedAce..♣♥RtlS
00001440  65 74 44 61 63 6C 53 65  63 75 72 69 74 79 44 65  73 63 72 69 70 74 6F 72  00 00 07 03 52 74 6C 53  etDaclSecurityDescriptor..•♥RtlS
00001460  65 74 4F 77 6E 65 72 53  65 63 75 72 69 74 79 44  65 73 63 72 69 70 74 6F  72 00 7C 03 5A 77 4F 70  etOwnerSecurityDescriptor.|♥ZwOp
00001480  65 6E 4B 65 79 00 CC CC  8F 03 5A 77 51 75 65 72  79 56 61 6C 75 65 4B 65  79 00 5E 03 5A 77 43 6C  enKey.╠╠Å♥ZwQueryValueKey.^♥ZwCl
000014A0  6F 73 65 00 7A 02 52 74  6C 41 6E 73 69 53 74 72  69 6E 67 54 6F 55 6E 69  63 6F 64 65 53 74 72 69  ose.z☻RtlAnsiStringToUnicodeStri
000014C0  6E 67 00 00 CC CC CC CC  1C 02 4E 74 4F 70 65 6E  46 69 6C 65 00 00 CC CC  2F 00 45 78 41 63 71 75  ng..╠╠╠╠∟☻NtOpenFile..╠╠/.ExAcqu
000014E0  69 72 65 52 65 73 6F 75  72 63 65 53 68 61 72 65  64 4C 69 74 65 00 CC CC  F8 01 4D 6D 55 6E 6C 6F  ireResourceSharedLite.╠╠°☺MmUnlo
00001500  63 6B 50 61 67 65 73 00  FA 01 4D 6D 55 6E 6D 61  70 4C 6F 63 6B 65 64 50  61 67 65 73 00 00 E8 00  ckPages.·☺MmUnmapLockedPages..Φ.
00001520  49 6F 42 75 69 6C 64 50  61 72 74 69 61 6C 4D 64  6C 00 08 01 49 6F 46 72  65 65 4D 64 6C 00 88 01  IoBuildPartialMdl.◘☺IoFreeMdl.ê☺
00001540  4B 65 51 75 65 72 79 54  69 6D 65 49 6E 63 72 65  6D 65 6E 74 00 00 8D 01  4B 65 52 65 61 64 53 74  KeQueryTimeIncrement..ì☺KeReadSt
00001560  61 74 65 51 75 65 75 65  00 00 36 00 45 78 41 6C  6C 6F 63 61 74 65 50 6F  6F 6C 57 69 74 68 54 61  ateQueue..6.ExAllocatePoolWithTa
00001580  67 00 CC CC CC CC CC CC  42 00 45 78 46 72 65 65  50 6F 6F 6C 00 00 45 01  49 6F 66 43 6F 6D 70 6C  g.╠╠╠╠╠╠B.ExFreePool..E☺IofCompl
000015A0  65 74 65 52 65 71 75 65  73 74 00 00 44 01 49 6F  66 43 61 6C 6C 44 72 69  76 65 72 00 C1 03 5F 77  eteRequest..D☺IofCallDriver.┴♥_w
000015C0  63 73 6E 69 63 6D 70 00  7B 01 4B 65 49 6E 73 65  72 74 48 65 61 64 51 75  65 75 65 00 CC CC CC CC  csnicmp.{☺KeInsertHeadQueue.╠╠╠╠
000015E0  62 00 45 78 51 75 65 75  65 57 6F 72 6B 49 74 65  6D 00 FB 00 49 6F 44 65  6C 65 74 65 44 65 76 69  b.ExQueueWorkItem.√.IoDeleteDevi
00001600  63 65 00 00 F3 00 49 6F  43 72 65 61 74 65 44 65  76 69 63 65 00 00 DF 00  49 6F 41 6C 6C 6F 63 61  ce..≤.IoCreateDevice..▀.IoAlloca
00001620  74 65 45 72 72 6F 72 4C  6F 67 45 6E 74 72 79 00  41 01 49 6F 57 72 69 74  65 45 72 72 6F 72 4C 6F  teErrorLogEntry.A☺IoWriteErrorLo
00001640  67 45 6E 74 72 79 00 00  24 03 52 74 6C 55 70 70  65 72 43 68 61 72 00 00  D1 03 6D 65 6D 6D 6F 76  gEntry..$♥RtlUpperChar..╤♥memmov
00001660  65 00 CC CC 42 02 4F 62  52 65 66 65 72 65 6E 63  65 4F 62 6A 65 63 74 42  79 48 61 6E 64 6C 65 00  e.╠╠B☻ObReferenceObjectByHandle.
00001680  AA 01 4B 65 53 65 74 54  61 72 67 65 74 50 72 6F  63 65 73 73 6F 72 44 70  63 00 CC CC CC CC CC CC  ¬☺KeSetTargetProcessorDpc.╠╠╠╠╠╠
000016A0  11 01 49 6F 47 65 74 52  65 6C 61 74 65 64 44 65  76 69 63 65 4F 62 6A 65  63 74 00 00 28 02 4E 74  ◄☺IoGetRelatedDeviceObject..(☻Nt
000016C0  52 65 61 64 46 69 6C 65  00 00 2C 02 4E 74 53 65  74 49 6E 66 6F 72 6D 61  74 69 6F 6E 46 69 6C 65  ReadFile..,☻NtSetInformationFile
000016E0  00 00 CC CC 33 02 4E 74  57 72 69 74 65 46 69 6C  65 00 CC CC 7C 01 4B 65  49 6E 73 65 72 74 51 75  ..╠╠3☻NtWriteFile.╠╠|☺KeInsertQu
00001700  65 75 65 00 15 01 49 6F  49 6E 69 74 69 61 6C 69  7A 65 49 72 70 00 D3 01  4D 6D 42 75 69 6C 64 4D  eue.§☺IoInitializeIrp.╙☺MmBuildM
00001720  64 6C 46 6F 72 4E 6F 6E  50 61 67 65 64 50 6F 6F  6C 00 CC CC ED 03 77 63  73 6C 65 6E 00 00 F5 02  dlForNonPagedPool.╠╠φ♥wcslen..⌡☻
00001740  52 74 6C 4F 65 6D 53 74  72 69 6E 67 54 6F 55 6E  69 63 6F 64 65 53 74 72  69 6E 67 00 6F 01 4B 65  RtlOemStringToUnicodeString.o☺Ke
00001760  49 6E 69 74 69 61 6C 69  7A 65 44 70 63 00 CC CC  B8 01 4B 65 57 61 69 74  46 6F 72 53 69 6E 67 6C  InitializeDpc.╠╠╕☺KeWaitForSingl
00001780  65 4F 62 6A 65 63 74 00  54 01 4B 65 43 6C 65 61  72 45 76 65 6E 74 00 00  AE 01 4B 65 53 65 74 54  eObject.T☺KeClearEvent..«☺KeSetT
000017A0  69 6D 65 72 00 00 CC CC  53 01 4B 65 43 61 6E 63  65 6C 54 69 6D 65 72 00  8A 01 4B 65 52 65 61 64  imer..╠╠S☺KeCancelTimer.è☺KeRead
000017C0  53 74 61 74 65 45 76 65  6E 74 00 00 70 01 4B 65  49 6E 69 74 69 61 6C 69  7A 65 45 76 65 6E 74 00  StateEvent..p☺KeInitializeEvent.
000017E0  77 01 4B 65 49 6E 69 74  69 61 6C 69 7A 65 54 69  6D 65 72 00 B2 01 4B 65  54 69 63 6B 43 6F 75 6E  w☺KeInitializeTimer.▓☺KeTickCoun
00001800  74 00 CC CC CC CC CC CC  57 00 45 78 49 6E 74 65  72 6C 6F 63 6B 65 64 50  6F 70 45 6E 74 72 79 53  t.╠╠╠╠╠╠W.ExInterlockedPopEntryS
00001820  4C 69 73 74 00 00 CC CC  CC CC CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  List..╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠
00001840  27 02 4E 74 51 75 65 72  79 56 6F 6C 75 6D 65 49  6E 66 6F 72 6D 61 74 69  6F 6E 46 69 6C 65 00 00  '☻NtQueryVolumeInformationFile..
00001860  48 41 4C 2E 64 6C 6C 00  4A 00 4B 66 41 63 71 75  69 72 65 53 70 69 6E 4C  6F 63 6B 00 CC CC CC CC  HAL.dll.J.KfAcquireSpinLock.╠╠╠╠
00001880  4B 00 4B 66 4C 6F 77 65  72 49 72 71 6C 00 CC CC  42 00 4B 65 47 65 74 43  75 72 72 65 6E 74 49 72  K.KfLowerIrql.╠╠B.KeGetCurrentIr
000018A0  71 6C 00 00 CC CC CC CC  CC CC CC CC CC CC CC CC  4D 00 4B 66 52 65 6C 65  61 73 65 53 70 69 6E 4C  ql..╠╠╠╠╠╠╠╠╠╠╠╠M.KfReleaseSpinL
000018C0  6F 63 6B 00 4C 00 4B 66  52 61 69 73 65 49 72 71  6C 00 CC CC CC CC CC CC  54 44 49 2E 53 59 53 00  ock.L.KfRaiseIrql.╠╠╠╠╠╠TDI.SYS.
000018E0  20 00 54 64 69 4F 70 65  6E 4E 65 74 62 69 6F 73  41 64 64 72 65 73 73 00  1C 00 54 64 69 44 65 72   .TdiOpenNetbiosAddress.∟.TdiDer
00001900  65 67 69 73 74 65 72 4E  6F 74 69 66 69 63 61 74  69 6F 6E 48 61 6E 64 6C  65 72 00 00 25 00 54 64  egisterNotificationHandler..%.Td
00001920  69 52 65 74 75 72 6E 43  68 61 69 6E 65 64 52 65  63 65 69 76 65 73 00 00  0D 00 54 64 69 43 6F 70  iReturnChainedReceives..♪.TdiCop
00001940  79 42 75 66 66 65 72 54  6F 4D 64 6C 00 00 CC CC  CC CC CC CC CC CC CC CC  CC CC CC CC CC CC CC CC  yBufferToMdl..╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠╠
00001960  24 00 54 64 69 52 65 67  69 73 74 65 72 4E 6F 74  69 66 69 63 61 74 69 6F  6E 48 61 6E 64 6C 65 72  $.TdiRegisterNotificationHandler
00001980  00 00 CC CC CC CC CC CC  6B 73 65 63 64 64 2E 73  79 73 00 00 01 00 41 63  71 75 69 72 65 43 72 65  ..╠╠╠╠╠╠ksecdd.sys..☺.AcquireCre
000019A0  64 65 6E 74 69 61 6C 73  48 61 6E 64 6C 65 57 00  09 00 49 6E 69 74 53 65  63 75 72 69 74 79 49 6E  dentialsHandleW.○.InitSecurityIn
000019C0  74 65 72 66 61 63 65 57  00 00 CC CC CC CC CC CC  0C 00 4D 61 70 53 65 63  75 72 69 74 79 45 72 72  terfaceW..╠╠╠╠╠╠♀.MapSecurityErr
000019E0  6F 72 00 00 08 00 49 6D  70 65 72 73 6F 6E 61 74  65 53 65 63 75 72 69 74  79 43 6F 6E 74 65 78 74  or..◘.ImpersonateSecurityContext
00001A00  00 00 05 00 46 72 65 65  43 6F 6E 74 65 78 74 42  75 66 66 65 72 00 04 00  45 6E 75 6D 65 72 61 74  ..♣.FreeContextBuffer.♦.Enumerat
00001A20  65 53 65 63 75 72 69 74  79 50 61 63 6B 61 67 65  73 57 00 00 CC CC CC CC  03 00 44 65 6C 65 74 65  eSecurityPackagesW..╠╠╠╠♥.Delete
00001A40  53 65 63 75 72 69 74 79  43 6F 6E 74 65 78 74 00  00 00 41 63 63 65 70 74  53 65 63 75 72 69 74 79  SecurityContext...AcceptSecurity
00001A60  43 6F 6E 74 65 78 74 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  Context.........................