============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 2C 00 00 00 20 00 00 00 00 00 00 00 20 00 00 00 40 02 00 00 60 09 00 00 00 08 00 00 00 08 00 00 ,... ....... ...@☻..`○...◘...◘.. 00000020 00 00 00 00 42 04 00 00 0C 05 00 00 01 00 20 00 03 00 00 00 00 00 54 04 00 00 B8 06 00 00 01 00 ....B♦..♀♣..☺. .♥.....T♦..╕♠..☺. 00000040 20 00 03 00 00 00 00 00 67 04 00 00 DE 06 00 00 01 00 20 00 03 00 24 53 47 33 30 39 34 00 F4 02 .♥.....g♦..▐♠..☺. .♥.$SG3094.⌠☻ 00000060 00 00 01 00 00 00 03 00 24 53 47 33 30 39 31 00 D4 02 00 00 01 00 00 00 03 00 24 53 47 33 31 32 ..☺...♥.$SG3091.╘☻..☺...♥.$SG312 00000080 32 00 02 04 00 00 01 00 00 00 03 00 2E 72 73 72 63 24 30 32 00 0B 00 00 04 00 00 00 03 00 2E 69 2.☻♦..☺...♥..rsrc$02.♂..♦...♥..i 000000A0 64 61 74 61 24 36 5A 0A 00 00 03 00 00 00 03 00 2E 69 64 61 74 61 24 36 98 0A 00 00 03 00 00 00 data$6Z◙..♥...♥..idata$6ÿ◙..♥... 000000C0 03 00 68 65 61 64 65 72 00 00 00 00 00 00 FE FF 00 00 02 00 00 00 00 00 C1 02 00 00 40 02 00 00 ♥.header......■ ..☻.....┴☻..@☻.. 000000E0 01 00 00 00 02 00 00 00 00 00 62 02 00 00 44 02 00 00 01 00 00 00 02 00 00 00 00 00 2D 04 00 00 ☺...☻.....b☻..D☻..☺...☻.....-♦.. 00000100 48 02 00 00 01 00 00 00 02 00 00 00 00 00 D3 00 00 00 4C 02 00 00 01 00 00 00 02 00 00 00 00 00 H☻..☺...☻.....╙...L☻..☺...☻..... 00000120 7E 00 00 00 50 02 00 00 01 00 00 00 02 00 00 00 00 00 BA 00 00 00 54 02 00 00 01 00 00 00 02 00 ~...P☻..☺...☻.....║...T☻..☺...☻. 00000140 00 00 00 00 93 02 00 00 58 02 00 00 01 00 00 00 02 00 00 00 00 00 AD 02 00 00 5C 02 00 00 01 00 ....ô☻..X☻..☺...☻.....¡☻..\☻..☺. 00000160 00 00 02 00 00 00 00 00 9C 00 00 00 60 02 00 00 01 00 00 00 02 00 00 00 00 00 EF 00 00 00 64 02 ..☻.....£...`☻..☺...☻.....∩...d☻ 00000180 00 00 01 00 00 00 02 00 00 00 00 00 66 00 00 00 68 02 00 00 01 00 00 00 02 00 00 00 00 00 82 02 ..☺...☻.....f...h☻..☺...☻.....é☻ 000001A0 00 00 6C 02 00 00 01 00 00 00 02 00 00 00 00 00 C7 03 00 00 70 02 00 00 01 00 00 00 02 00 00 00 ..l☻..☺...☻.....╟♥..p☻..☺...☻... 000001C0 00 00 04 00 00 00 1C 03 00 00 01 00 20 00 02 00 00 00 00 00 13 00 00 00 D2 03 00 00 01 00 20 00 ..♦...∟♥..☺. .☻.....‼...╥♥..☺. . 000001E0 02 00 00 00 00 00 26 00 00 00 2A 04 00 00 01 00 20 00 02 00 00 00 00 00 37 00 00 00 6E 04 00 00 ☻.....&...*♦..☺. .☻.....7...n♦.. 00000200 01 00 20 00 02 00 00 00 00 00 48 00 00 00 6C 05 00 00 01 00 20 00 02 00 00 00 00 00 0D 01 00 00 ☺. .☻.....H...l♣..☺. .☻.....♪☺.. 00000220 FA 05 00 00 01 00 20 00 02 00 00 00 00 00 20 01 00 00 88 06 00 00 01 00 20 00 02 00 00 00 00 00 ·♣..☺. .☻..... ☺..ê♠..☺. .☻..... 00000240 34 01 00 00 08 07 00 00 01 00 20 00 02 00 00 00 00 00 4A 01 00 00 42 07 00 00 01 00 20 00 02 00 4☺..◘•..☺. .☻.....J☺..B•..☺. .☻. 00000260 00 00 00 00 BE 01 00 00 00 08 00 00 02 00 00 00 02 00 00 00 00 00 A5 01 00 00 68 08 00 00 02 00 ....╛☺...◘..☻...☻.....Ñ☺..h◘..☻. 00000280 00 00 02 00 00 00 00 00 84 01 00 00 88 08 00 00 02 00 00 00 02 00 00 00 00 00 5E 01 00 00 F0 08 ..☻.....ä☺..ê◘..☻...☻.....^☺..≡◘ 000002A0 00 00 02 00 00 00 02 00 00 00 00 00 47 02 00 00 10 09 00 00 02 00 00 00 02 00 00 00 00 00 27 02 ..☻...☻.....G☻..►○..☻...☻.....'☻ 000002C0 00 00 18 09 00 00 02 00 00 00 02 00 00 00 00 00 FA 01 00 00 20 09 00 00 02 00 00 00 02 00 00 00 ..↑○..☻...☻.....·☺.. ○..☻...☻... 000002E0 00 00 D2 01 00 00 28 09 00 00 02 00 00 00 02 00 00 00 00 00 F3 02 00 00 40 09 00 00 03 00 00 00 ..╥☺..(○..☻...☻.....≤☻..@○..♥... 00000300 02 00 00 00 00 00 FB 03 00 00 54 09 00 00 03 00 00 00 02 00 00 00 00 00 AE 03 00 00 68 09 00 00 ☻.....√♥..T○..♥...☻.....«♥..h○.. 00000320 03 00 00 00 02 00 65 6E 64 00 00 00 00 00 20 0F 00 00 FE FF 00 00 02 00 7A 04 00 00 5F 44 72 69 ♥...☻.end..... ☼..■ ..☻.z♦.._Dri 00000340 76 65 72 45 6E 74 72 79 40 38 00 5F 4E 54 52 65 6D 61 70 44 69 73 70 61 74 63 68 40 38 00 5F 4E verEntry@8._NTRemapDispatch@8._N 00000360 54 52 65 6D 61 70 55 6E 6C 6F 61 64 40 34 00 5F 52 65 6D 61 70 54 68 65 42 6F 61 72 64 40 30 00 TRemapUnload@4._RemapTheBoard@0. 00000380 5F 49 73 4E 54 52 65 6D 61 70 45 6E 61 62 6C 65 64 49 6E 52 65 67 69 73 74 72 79 40 30 00 5F 5F _IsNTRemapEnabledInRegistry@0.__ 000003A0 69 6D 70 5F 5F 49 6F 44 65 6C 65 74 65 44 65 76 69 63 65 40 34 00 5F 5F 69 6D 70 5F 5F 49 6F 43 imp__IoDeleteDevice@4.__imp__IoC 000003C0 72 65 61 74 65 53 79 6D 62 6F 6C 69 63 4C 69 6E 6B 40 38 00 5F 5F 69 6D 70 5F 5F 52 74 6C 49 6E reateSymbolicLink@8.__imp__RtlIn 000003E0 69 74 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 40 38 00 5F 5F 69 6D 70 5F 5F 49 6F 43 72 65 61 74 itUnicodeString@8.__imp__IoCreat 00000400 65 44 65 76 69 63 65 40 32 38 00 5F 5F 69 6D 70 5F 40 49 6F 66 43 6F 6D 70 6C 65 74 65 52 65 71 eDevice@28.__imp_@IofCompleteReq 00000420 75 65 73 74 40 38 00 5F 5F 69 6D 70 5F 5F 49 6F 44 65 6C 65 74 65 53 79 6D 62 6F 6C 69 63 4C 69 uest@8.__imp__IoDeleteSymbolicLi 00000440 6E 6B 40 34 00 5F 47 65 74 46 6F 72 63 65 41 64 64 72 65 73 73 40 30 00 5F 53 65 74 42 6F 61 72 nk@4._GetForceAddress@0._SetBoar 00000460 64 41 64 64 72 65 73 73 40 31 32 00 5F 49 73 41 64 64 72 65 73 73 43 6F 6E 66 6C 69 63 74 40 31 dAddress@12._IsAddressConflict@1 00000480 32 00 5F 50 69 63 6B 52 65 6D 61 70 41 64 64 72 65 73 73 40 38 00 5F 72 65 67 69 73 74 72 79 56 2._PickRemapAddress@8._registryV 000004A0 61 6C 75 65 4E 61 6D 65 42 75 66 66 65 72 5F 46 6F 72 63 65 41 64 64 72 65 73 73 00 5F 72 65 67 alueNameBuffer_ForceAddress._reg 000004C0 69 73 74 72 79 50 61 74 68 42 75 66 66 65 72 5F 46 6F 72 63 65 41 64 64 72 65 73 73 00 5F 72 65 istryPathBuffer_ForceAddress._re 000004E0 67 69 73 74 72 79 56 61 6C 75 65 4E 61 6D 65 42 75 66 66 65 72 00 5F 72 65 67 69 73 74 72 79 50 gistryValueNameBuffer._registryP 00000500 61 74 68 42 75 66 66 65 72 00 5F 72 65 67 69 73 74 72 79 50 61 74 68 55 6E 69 63 6F 64 65 53 74 athBuffer._registryPathUnicodeSt 00000520 72 69 6E 67 5F 46 6F 72 63 65 41 64 64 72 65 73 73 00 5F 72 65 67 69 73 74 72 79 56 61 6C 75 65 ring_ForceAddress._registryValue 00000540 4E 61 6D 65 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 5F 46 6F 72 63 65 41 64 64 72 65 73 73 00 5F NameUnicodeString_ForceAddress._ 00000560 72 65 67 69 73 74 72 79 56 61 6C 75 65 4E 61 6D 65 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 5F registryValueNameUnicodeString._ 00000580 72 65 67 69 73 74 72 79 50 61 74 68 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 5F 5F 69 6D 70 5F registryPathUnicodeString.__imp_ 000005A0 5F 48 61 6C 47 65 74 42 75 73 44 61 74 61 42 79 4F 66 66 73 65 74 40 32 34 00 5F 5F 69 6D 70 5F _HalGetBusDataByOffset@24.__imp_ 000005C0 5F 5A 77 43 6C 6F 73 65 40 34 00 5F 5F 69 6D 70 5F 5F 5A 77 51 75 65 72 79 56 61 6C 75 65 4B 65 _ZwClose@4.__imp__ZwQueryValueKe 000005E0 79 40 32 34 00 5F 5F 69 6D 70 5F 5F 5A 77 4F 70 65 6E 4B 65 79 40 31 32 00 5F 5F 69 6D 70 5F 5F y@24.__imp__ZwOpenKey@12.__imp__ 00000600 48 61 6C 53 65 74 42 75 73 44 61 74 61 42 79 4F 66 66 73 65 74 40 32 34 00 5F 49 6F 44 65 6C 65 HalSetBusDataByOffset@24._IoDele 00000620 74 65 44 65 76 69 63 65 40 34 00 5F 5F 49 4D 50 4F 52 54 5F 44 45 53 43 52 49 50 54 4F 52 5F 6E teDevice@4.__IMPORT_DESCRIPTOR_n 00000640 74 6F 73 6B 72 6E 6C 00 5F 49 6F 43 72 65 61 74 65 53 79 6D 62 6F 6C 69 63 4C 69 6E 6B 40 38 00 toskrnl._IoCreateSymbolicLink@8. 00000660 5F 52 74 6C 49 6E 69 74 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 40 38 00 5F 49 6F 43 72 65 61 74 _RtlInitUnicodeString@8._IoCreat 00000680 65 44 65 76 69 63 65 40 32 38 00 40 49 6F 66 43 6F 6D 70 6C 65 74 65 52 65 71 75 65 73 74 40 38 eDevice@28.@IofCompleteRequest@8 000006A0 00 5F 49 6F 44 65 6C 65 74 65 53 79 6D 62 6F 6C 69 63 4C 69 6E 6B 40 34 00 5F 5A 77 43 6C 6F 73 ._IoDeleteSymbolicLink@4._ZwClos 000006C0 65 40 34 00 5F 5A 77 51 75 65 72 79 56 61 6C 75 65 4B 65 79 40 32 34 00 5F 5A 77 4F 70 65 6E 4B e@4._ZwQueryValueKey@24._ZwOpenK 000006E0 65 79 40 31 32 00 5F 5F 4E 55 4C 4C 5F 49 4D 50 4F 52 54 5F 44 45 53 43 52 49 50 54 4F 52 00 7F ey@12.__NULL_IMPORT_DESCRIPTOR.⌂ 00000700 6E 74 6F 73 6B 72 6E 6C 5F 4E 55 4C 4C 5F 54 48 55 4E 4B 5F 44 41 54 41 00 5F 48 61 6C 47 65 74 ntoskrnl_NULL_THUNK_DATA._HalGet 00000720 42 75 73 44 61 74 61 42 79 4F 66 66 73 65 74 40 32 34 00 5F 5F 49 4D 50 4F 52 54 5F 44 45 53 43 BusDataByOffset@24.__IMPORT_DESC 00000740 52 49 50 54 4F 52 5F 48 41 4C 00 5F 48 61 6C 53 65 74 42 75 73 44 61 74 61 42 79 4F 66 66 73 65 RIPTOR_HAL._HalSetBusDataByOffse 00000760 74 40 32 34 00 7F 48 41 4C 5F 4E 55 4C 4C 5F 54 48 55 4E 4B 5F 44 41 54 41 00 5F 46 69 6E 64 50 t@24.⌂HAL_NULL_THUNK_DATA._FindP 00000780 43 49 44 65 76 69 63 65 40 31 36 00 5F 47 65 74 43 6F 6E 66 69 67 44 77 6F 72 64 40 31 32 00 5F CIDevice@16._GetConfigDword@12._ 000007A0 53 65 74 43 6F 6E 66 69 67 44 77 6F 72 64 40 31 36 00 SetConfigDword@16.