============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 3C 14 00 00 00 00 00 00 00 00 00 00 9C 15 00 00 E0 14 00 00 64 14 00 00 00 00 00 00 00 00 00 00 <¶..........£§..α¶..d¶.......... 00000020 FC 18 00 00 08 15 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 84 15 00 00 ⁿ↑..◘§......................ä§.. 00000040 A4 15 00 00 BE 15 00 00 D2 15 00 00 E6 15 00 00 02 16 00 00 16 16 00 00 32 16 00 00 44 16 00 00 ñ§..╛§..╥§..µ§..☻▬..▬▬..2▬..D▬.. 00000060 00 00 00 00 58 16 00 00 6A 16 00 00 78 16 00 00 92 16 00 00 A6 16 00 00 BC 16 00 00 CE 16 00 00 ....X▬..j▬..x▬..Æ▬..ª▬..╝▬..╬▬.. 00000080 E6 16 00 00 F8 16 00 00 10 17 00 00 2C 17 00 00 46 17 00 00 5E 17 00 00 78 17 00 00 8A 17 00 00 µ▬..°▬..►↨..,↨..F↨..^↨..x↨..è↨.. 000000A0 9E 17 00 00 AE 17 00 00 C0 17 00 00 E2 17 00 00 FE 17 00 00 1E 18 00 00 3C 18 00 00 5C 18 00 00 ₧↨..«↨..└↨..Γ↨..■↨..▲↑..<↑..\↑.. 000000C0 74 18 00 00 90 18 00 00 A6 18 00 00 C0 18 00 00 D8 18 00 00 E2 18 00 00 F0 18 00 00 00 00 00 00 t↑..É↑..ª↑..└↑..╪↑..Γ↑..≡↑...... 000000E0 84 15 00 00 A4 15 00 00 BE 15 00 00 D2 15 00 00 E6 15 00 00 02 16 00 00 16 16 00 00 32 16 00 00 ä§..ñ§..╛§..╥§..µ§..☻▬..▬▬..2▬.. 00000100 44 16 00 00 00 00 00 00 58 16 00 00 6A 16 00 00 78 16 00 00 92 16 00 00 A6 16 00 00 BC 16 00 00 D▬......X▬..j▬..x▬..Æ▬..ª▬..╝▬.. 00000120 CE 16 00 00 E6 16 00 00 F8 16 00 00 10 17 00 00 2C 17 00 00 46 17 00 00 5E 17 00 00 78 17 00 00 ╬▬..µ▬..°▬..►↨..,↨..F↨..^↨..x↨.. 00000140 8A 17 00 00 9E 17 00 00 AE 17 00 00 C0 17 00 00 E2 17 00 00 FE 17 00 00 1E 18 00 00 3C 18 00 00 è↨..₧↨..«↨..└↨..Γ↨..■↨..▲↑..<↑.. 00000160 5C 18 00 00 74 18 00 00 90 18 00 00 A6 18 00 00 C0 18 00 00 D8 18 00 00 E2 18 00 00 F0 18 00 00 \↑..t↑..É↑..ª↑..└↑..╪↑..Γ↑..≡↑.. 00000180 00 00 00 00 0E 00 48 61 6C 47 65 74 49 6E 74 65 72 72 75 70 74 56 65 63 74 6F 72 00 48 41 4C 2E ....♫.HalGetInterruptVector.HAL. 000001A0 64 6C 6C 00 21 00 48 61 6C 54 72 61 6E 73 6C 61 74 65 42 75 73 41 64 64 72 65 73 73 00 00 31 00 dll.!.HalTranslateBusAddress..1. 000001C0 4B 65 41 63 71 75 69 72 65 53 70 69 6E 4C 6F 63 6B 00 33 00 4B 65 47 65 74 43 75 72 72 65 6E 74 KeAcquireSpinLock.3.KeGetCurrent 000001E0 49 72 71 6C 00 00 35 00 4B 65 51 75 65 72 79 50 65 72 66 6F 72 6D 61 6E 63 65 43 6F 75 6E 74 65 Irql..5.KeQueryPerformanceCounte 00000200 72 00 37 00 4B 65 52 65 6C 65 61 73 65 53 70 69 6E 4C 6F 63 6B 00 38 00 4B 65 53 74 61 6C 6C 45 r.7.KeReleaseSpinLock.8.KeStallE 00000220 78 65 63 75 74 69 6F 6E 50 72 6F 63 65 73 73 6F 72 00 3C 00 52 45 41 44 5F 50 4F 52 54 5F 55 43 xecutionProcessor.<.READ_PORT_UC 00000240 48 41 52 00 42 00 57 52 49 54 45 5F 50 4F 52 54 5F 55 43 48 41 52 00 00 27 00 45 78 41 6C 6C 6F HAR.B.WRITE_PORT_UCHAR..'.ExAllo 00000260 63 61 74 65 50 6F 6F 6C 00 00 2D 00 45 78 46 72 65 65 50 6F 6F 6C 00 00 85 00 49 6F 41 63 71 75 catePool..-.ExFreePool..à.IoAcqu 00000280 69 72 65 43 61 6E 63 65 6C 53 70 69 6E 4C 6F 63 6B 00 99 00 49 6F 43 6F 6D 70 6C 65 74 65 52 65 ireCancelSpinLock.Ö.IoCompleteRe 000002A0 71 75 65 73 74 00 9A 00 49 6F 43 6F 6E 6E 65 63 74 49 6E 74 65 72 72 75 70 74 00 00 9C 00 49 6F quest.Ü.IoConnectInterrupt..£.Io 000002C0 43 72 65 61 74 65 44 65 76 69 63 65 00 00 9F 00 49 6F 43 72 65 61 74 65 53 79 6D 62 6F 6C 69 63 CreateDevice..ƒ.IoCreateSymbolic 000002E0 4C 69 6E 6B 00 00 A3 00 49 6F 44 65 6C 65 74 65 44 65 76 69 63 65 00 00 A4 00 49 6F 44 65 6C 65 Link..ú.IoDeleteDevice..ñ.IoDele 00000300 74 65 53 79 6D 62 6F 6C 69 63 4C 69 6E 6B 00 00 B4 00 49 6F 51 75 65 72 79 44 65 76 69 63 65 44 teSymbolicLink..┤.IoQueryDeviceD 00000320 65 73 63 72 69 70 74 69 6F 6E 00 00 BC 00 49 6F 52 65 6C 65 61 73 65 43 61 6E 63 65 6C 53 70 69 escription..╝.IoReleaseCancelSpi 00000340 6E 4C 6F 63 6B 00 C0 00 49 6F 52 65 70 6F 72 74 52 65 73 6F 75 72 63 65 55 73 61 67 65 00 DF 00 nLock.└.IoReportResourceUsage.▀. 00000360 4B 65 44 65 6C 61 79 45 78 65 63 75 74 69 6F 6E 54 68 72 65 61 64 00 00 F0 00 4B 65 49 6E 69 74 KeDelayExecutionThread..≡.KeInit 00000380 69 61 6C 69 7A 65 44 70 63 00 02 01 4B 65 51 75 65 72 79 53 79 73 74 65 6D 54 69 6D 65 00 3A 01 ializeDpc.☻☺KeQuerySystemTime.:☺ 000003A0 4D 6D 4D 61 70 49 6F 53 70 61 63 65 00 00 41 01 4D 6D 55 6E 6D 61 70 49 6F 53 70 61 63 65 00 00 MmMapIoSpace..A☺MmUnmapIoSpace.. 000003C0 8C 01 52 74 6C 41 70 70 65 6E 64 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 54 6F 53 74 72 69 6E 67 î☺RtlAppendUnicodeStringToString 000003E0 00 00 8D 01 52 74 6C 41 70 70 65 6E 64 55 6E 69 63 6F 64 65 54 6F 53 74 72 69 6E 67 00 00 99 01 ..ì☺RtlAppendUnicodeToString..Ö☺ 00000400 52 74 6C 43 6F 6E 76 65 72 74 4C 6F 6E 67 54 6F 4C 61 72 67 65 49 6E 74 65 67 65 72 00 00 B2 01 RtlConvertLongToLargeInteger..▓☺ 00000420 52 74 6C 45 78 74 65 6E 64 65 64 49 6E 74 65 67 65 72 4D 75 6C 74 69 70 6C 79 00 00 B3 01 52 74 RtlExtendedIntegerMultiply..│☺Rt 00000440 6C 45 78 74 65 6E 64 65 64 4C 61 72 67 65 49 6E 74 65 67 65 72 44 69 76 69 64 65 00 CE 01 52 74 lExtendedLargeIntegerDivide.╬☺Rt 00000460 6C 49 6E 69 74 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 00 D4 01 52 74 6C 49 6E 74 65 67 65 72 lInitUnicodeString..╘☺RtlInteger 00000480 54 6F 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 D5 01 52 74 6C 4C 61 72 67 65 49 6E 74 65 67 65 ToUnicodeString.╒☺RtlLargeIntege 000004A0 72 41 64 64 00 00 DB 01 52 74 6C 4C 61 72 67 65 49 6E 74 65 67 65 72 53 75 62 74 72 61 63 74 00 rAdd..█☺RtlLargeIntegerSubtract. 000004C0 17 02 52 74 6C 57 72 69 74 65 52 65 67 69 73 74 72 79 56 61 6C 75 65 00 36 02 5A 77 43 6C 6F 73 ↨☻RtlWriteRegistryValue.6☻ZwClos 000004E0 65 00 44 02 5A 77 46 6C 75 73 68 4B 65 79 00 00 4B 02 5A 77 4F 70 65 6E 4B 65 79 00 6E 74 6F 73 e.D☻ZwFlushKey..K☻ZwOpenKey.ntos 00000500 6B 72 6E 6C 2E 65 78 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 krnl.exe........................ 00000520 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000540 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000560 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 00000580 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005A0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................ 000005E0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................................