============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 88 09 00 00 00 00 00 00 00 00 00 00 5A 0A 00 00 4C 02 00 00 7C 09 00 00 00 00 00 00 00 00 00 00 ê○..........Z◙..L☻..|○.......... 00000020 98 0A 00 00 40 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 0A 00 00 ÿ◙..@☻......................Ç◙.. 00000040 68 0A 00 00 00 00 00 00 04 0A 00 00 C2 09 00 00 F2 09 00 00 3C 0A 00 00 4E 0A 00 00 DA 09 00 00 h◙......♦◙..┬○..≥○..<◙..N◙..┌○.. 00000060 1A 0A 00 00 B0 09 00 00 32 0A 00 00 00 00 00 00 FB 00 49 6F 44 65 6C 65 74 65 44 65 76 69 63 65 →◙..░○..2◙......√.IoDeleteDevice 00000080 00 00 F7 00 49 6F 43 72 65 61 74 65 53 79 6D 62 6F 6C 69 63 4C 69 6E 6B 00 00 D0 02 52 74 6C 49 ..≈.IoCreateSymbolicLink..╨☻RtlI 000000A0 6E 69 74 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 00 F3 00 49 6F 43 72 65 61 74 65 44 65 76 69 nitUnicodeString..≤.IoCreateDevi 000000C0 63 65 00 00 45 01 49 6F 66 43 6F 6D 70 6C 65 74 65 52 65 71 75 65 73 74 00 00 FC 00 49 6F 44 65 ce..E☺IofCompleteRequest..ⁿ.IoDe 000000E0 6C 65 74 65 53 79 6D 62 6F 6C 69 63 4C 69 6E 6B 00 00 5B 03 5A 77 43 6C 6F 73 65 00 8C 03 5A 77 leteSymbolicLink..[♥ZwClose.î♥Zw 00000100 51 75 65 72 79 56 61 6C 75 65 4B 65 79 00 79 03 5A 77 4F 70 65 6E 4B 65 79 00 6E 74 6F 73 6B 72 QueryValueKey.y♥ZwOpenKey.ntoskr 00000120 6E 6C 2E 65 78 65 00 00 15 00 48 61 6C 47 65 74 42 75 73 44 61 74 61 42 79 4F 66 66 73 65 74 00 nl.exe..§.HalGetBusDataByOffset. 00000140 25 00 48 61 6C 53 65 74 42 75 73 44 61 74 61 42 79 4F 66 66 73 65 74 00 48 41 4C 2E 64 6C 6C 00 %.HalSetBusDataByOffset.HAL.dll.