==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  6C 44 02 00 00 00 00 00  00 00 00 00 38 54 02 00  94 46 02 00 5C 44 02 00  00 00 00 00 00 00 00 00  lD☻.........8T☻.öF☻.\D☻.........
00000020  8A 54 02 00 84 46 02 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 76 54 02 00  èT☻.äF☻.....................vT☻.
00000040  62 54 02 00 46 54 02 00  00 00 00 00 24 49 02 00  3C 49 02 00 4E 49 02 00  5E 49 02 00 68 49 02 00  bT☻.FT☻.....$I☻.<I☻.NI☻.^I☻.hI☻.
00000060  80 49 02 00 0C 49 02 00  90 49 02 00 B0 49 02 00  CC 49 02 00 DA 49 02 00  EE 49 02 00 02 4A 02 00  ÇI☻.♀I☻.ÉI☻.░I☻.╠I☻.┌I☻.εI☻.☻J☻.
00000080  1E 4A 02 00 28 4A 02 00  40 4A 02 00 58 4A 02 00  78 4A 02 00 88 4A 02 00  9E 4A 02 00 BC 4A 02 00  ▲J☻.(J☻.@J☻.XJ☻.xJ☻.êJ☻.₧J☻.╝J☻.
000000A0  CC 4A 02 00 E2 4A 02 00  F6 4A 02 00 14 4B 02 00  32 4B 02 00 3C 4B 02 00  46 4B 02 00 52 4B 02 00  ╠J☻.ΓJ☻.÷J☻.¶K☻.2K☻.<K☻.FK☻.RK☻.
000000C0  6E 4B 02 00 7E 4B 02 00  92 4B 02 00 AC 4B 02 00  B6 4B 02 00 CC 4B 02 00  E6 4B 02 00 FC 4B 02 00  nK☻.~K☻.ÆK☻.¼K☻.╢K☻.╠K☻.µK☻.ⁿK☻.
000000E0  08 4C 02 00 20 4C 02 00  38 4C 02 00 52 4C 02 00  66 4C 02 00 7C 4C 02 00  8C 4C 02 00 AA 4C 02 00  ◘L☻. L☻.8L☻.RL☻.fL☻.|L☻.îL☻.¬L☻.
00000100  C0 4C 02 00 D6 4C 02 00  EE 4C 02 00 06 4D 02 00  1A 4D 02 00 32 4D 02 00  4E 4D 02 00 6A 4D 02 00  └L☻.╓L☻.εL☻.♠M☻.→M☻.2M☻.NM☻.jM☻.
00000120  76 4D 02 00 8E 4D 02 00  9C 4D 02 00 AE 4D 02 00  C2 4D 02 00 D4 4D 02 00  E8 4D 02 00 02 4E 02 00  vM☻.ÄM☻.£M☻.«M☻.┬M☻.╘M☻.ΦM☻.☻N☻.
00000140  20 4E 02 00 32 4E 02 00  46 4E 02 00 5C 4E 02 00  BE 48 02 00 F4 48 02 00  9E 4E 02 00 C4 4E 02 00   N☻.2N☻.FN☻.\N☻.╛H☻.⌠H☻.₧N☻.─N☻.
00000160  D8 4E 02 00 EE 4E 02 00  04 4F 02 00 1C 4F 02 00  2A 4F 02 00 44 4F 02 00  54 4F 02 00 6E 4F 02 00  ╪N☻.εN☻.♦O☻.∟O☻.*O☻.DO☻.TO☻.nO☻.
00000180  84 4F 02 00 9E 4F 02 00  B6 4F 02 00 D8 4F 02 00  F4 4F 02 00 0A 50 02 00  1A 50 02 00 30 50 02 00  äO☻.₧O☻.╢O☻.╪O☻.⌠O☻.◙P☻.→P☻.0P☻.
000001A0  46 50 02 00 5C 50 02 00  76 50 02 00 90 50 02 00  AC 50 02 00 BE 50 02 00  CE 50 02 00 E8 50 02 00  FP☻.\P☻.vP☻.ÉP☻.¼P☻.╛P☻.╬P☻.ΦP☻.
000001C0  FE 50 02 00 10 51 02 00  32 51 02 00 54 51 02 00  6C 51 02 00 78 51 02 00  86 51 02 00 96 51 02 00  ■P☻.►Q☻.2Q☻.TQ☻.lQ☻.xQ☻.åQ☻.ûQ☻.
000001E0  AE 51 02 00 C6 51 02 00  E0 51 02 00 04 52 02 00  14 52 02 00 32 52 02 00  4E 52 02 00 66 52 02 00  «Q☻.╞Q☻.αQ☻.♦R☻.¶R☻.2R☻.NR☻.fR☻.
00000200  7E 52 02 00 8C 52 02 00  A8 52 02 00 B8 52 02 00  D8 52 02 00 E2 52 02 00  F6 52 02 00 04 53 02 00  ~R☻.îR☻.¿R☻.╕R☻.╪R☻.ΓR☻.÷R☻.♦S☻.
00000220  26 53 02 00 42 53 02 00  5A 53 02 00 78 53 02 00  96 53 02 00 AE 53 02 00  C2 53 02 00 D6 53 02 00  &S☻.BS☻.ZS☻.xS☻.ûS☻.«S☻.┬S☻.╓S☻.
00000240  EC 53 02 00 FE 53 02 00  0C 54 02 00 2C 54 02 00  DC 48 02 00 70 4E 02 00  AC 48 02 00 8A 4E 02 00  ∞S☻.■S☻.♀T☻.,T☻.▄H☻.pN☻.¼H☻.èN☻.
00000260  00 00 00 00 76 54 02 00  62 54 02 00 46 54 02 00  00 00 00 00 24 49 02 00  3C 49 02 00 4E 49 02 00  ....vT☻.bT☻.FT☻.....$I☻.<I☻.NI☻.
00000280  5E 49 02 00 68 49 02 00  80 49 02 00 0C 49 02 00  90 49 02 00 B0 49 02 00  CC 49 02 00 DA 49 02 00  ^I☻.hI☻.ÇI☻.♀I☻.ÉI☻.░I☻.╠I☻.┌I☻.
000002A0  EE 49 02 00 02 4A 02 00  1E 4A 02 00 28 4A 02 00  40 4A 02 00 58 4A 02 00  78 4A 02 00 88 4A 02 00  εI☻.☻J☻.▲J☻.(J☻.@J☻.XJ☻.xJ☻.êJ☻.
000002C0  9E 4A 02 00 BC 4A 02 00  CC 4A 02 00 E2 4A 02 00  F6 4A 02 00 14 4B 02 00  32 4B 02 00 3C 4B 02 00  ₧J☻.╝J☻.╠J☻.ΓJ☻.÷J☻.¶K☻.2K☻.<K☻.
000002E0  46 4B 02 00 52 4B 02 00  6E 4B 02 00 7E 4B 02 00  92 4B 02 00 AC 4B 02 00  B6 4B 02 00 CC 4B 02 00  FK☻.RK☻.nK☻.~K☻.ÆK☻.¼K☻.╢K☻.╠K☻.
00000300  E6 4B 02 00 FC 4B 02 00  08 4C 02 00 20 4C 02 00  38 4C 02 00 52 4C 02 00  66 4C 02 00 7C 4C 02 00  µK☻.ⁿK☻.◘L☻. L☻.8L☻.RL☻.fL☻.|L☻.
00000320  8C 4C 02 00 AA 4C 02 00  C0 4C 02 00 D6 4C 02 00  EE 4C 02 00 06 4D 02 00  1A 4D 02 00 32 4D 02 00  îL☻.¬L☻.└L☻.╓L☻.εL☻.♠M☻.→M☻.2M☻.
00000340  4E 4D 02 00 6A 4D 02 00  76 4D 02 00 8E 4D 02 00  9C 4D 02 00 AE 4D 02 00  C2 4D 02 00 D4 4D 02 00  NM☻.jM☻.vM☻.ÄM☻.£M☻.«M☻.┬M☻.╘M☻.
00000360  E8 4D 02 00 02 4E 02 00  20 4E 02 00 32 4E 02 00  46 4E 02 00 5C 4E 02 00  BE 48 02 00 F4 48 02 00  ΦM☻.☻N☻. N☻.2N☻.FN☻.\N☻.╛H☻.⌠H☻.
00000380  9E 4E 02 00 C4 4E 02 00  D8 4E 02 00 EE 4E 02 00  04 4F 02 00 1C 4F 02 00  2A 4F 02 00 44 4F 02 00  ₧N☻.─N☻.╪N☻.εN☻.♦O☻.∟O☻.*O☻.DO☻.
000003A0  54 4F 02 00 6E 4F 02 00  84 4F 02 00 9E 4F 02 00  B6 4F 02 00 D8 4F 02 00  F4 4F 02 00 0A 50 02 00  TO☻.nO☻.äO☻.₧O☻.╢O☻.╪O☻.⌠O☻.◙P☻.
000003C0  1A 50 02 00 30 50 02 00  46 50 02 00 5C 50 02 00  76 50 02 00 90 50 02 00  AC 50 02 00 BE 50 02 00  →P☻.0P☻.FP☻.\P☻.vP☻.ÉP☻.¼P☻.╛P☻.
000003E0  CE 50 02 00 E8 50 02 00  FE 50 02 00 10 51 02 00  32 51 02 00 54 51 02 00  6C 51 02 00 78 51 02 00  ╬P☻.ΦP☻.■P☻.►Q☻.2Q☻.TQ☻.lQ☻.xQ☻.
00000400  86 51 02 00 96 51 02 00  AE 51 02 00 C6 51 02 00  E0 51 02 00 04 52 02 00  14 52 02 00 32 52 02 00  åQ☻.ûQ☻.«Q☻.╞Q☻.αQ☻.♦R☻.¶R☻.2R☻.
00000420  4E 52 02 00 66 52 02 00  7E 52 02 00 8C 52 02 00  A8 52 02 00 B8 52 02 00  D8 52 02 00 E2 52 02 00  NR☻.fR☻.~R☻.îR☻.¿R☻.╕R☻.╪R☻.ΓR☻.
00000440  F6 52 02 00 04 53 02 00  26 53 02 00 42 53 02 00  5A 53 02 00 78 53 02 00  96 53 02 00 AE 53 02 00  ÷R☻.♦S☻.&S☻.BS☻.ZS☻.xS☻.ûS☻.«S☻.
00000460  C2 53 02 00 D6 53 02 00  EC 53 02 00 FE 53 02 00  0C 54 02 00 2C 54 02 00  DC 48 02 00 70 4E 02 00  ┬S☻.╓S☻.∞S☻.■S☻.♀T☻.,T☻.▄H☻.pN☻.
00000480  AC 48 02 00 8A 4E 02 00  00 00 00 00 C2 00 49 6F  44 65 6C 65 74 65 44 65  76 69 63 65 00 00 6B 00  ¼H☻.èN☻.....┬.IoDeleteDevice..k.
000004A0  46 73 52 74 6C 44 65 72  65 67 69 73 74 65 72 55  6E 63 50 72 6F 76 69 64  65 72 00 00 C3 00 49 6F  FsRtlDeregisterUncProvider..├.Io
000004C0  44 65 6C 65 74 65 53 79  6D 62 6F 6C 69 63 4C 69  6E 6B 00 00 BE 00 49 6F  43 72 65 61 74 65 53 79  DeleteSymbolicLink..╛.IoCreateSy
000004E0  6D 62 6F 6C 69 63 4C 69  6E 6B 00 00 1E 02 52 74  6C 49 6E 69 74 55 6E 69  63 6F 64 65 53 74 72 69  mbolicLink..▲☻RtlInitUnicodeStri
00000500  6E 67 00 00 EC 01 52 74  6C 43 6F 70 79 55 6E 69  63 6F 64 65 53 74 72 69  6E 67 00 00 BB 00 49 6F  ng..∞☺RtlCopyUnicodeString..╗.Io
00000520  43 72 65 61 74 65 44 65  76 69 63 65 00 00 4A 00  45 78 52 61 69 73 65 53  74 61 74 75 73 00 8B 01  CreateDevice..J.ExRaiseStatus.ï☺
00000540  4E 74 43 6C 6F 73 65 00  B9 01 4F 62 66 44 65 72  65 66 65 72 65 6E 63 65  4F 62 6A 65 63 74 00 00  NtClose.╣☺ObfDereferenceObject..
00000560  FC 00 49 6F 66 43 61 6C  6C 44 72 69 76 65 72 00  AF 00 49 6F 42 75 69 6C  64 44 65 76 69 63 65 49  ⁿ.IofCallDriver.».IoBuildDeviceI
00000580  6F 43 6F 6E 74 72 6F 6C  52 65 71 75 65 73 74 00  B7 01 4F 62 52 65 66 65  72 65 6E 63 65 4F 62 6A  oControlRequest.╖☺ObReferenceObj
000005A0  65 63 74 42 79 48 61 6E  64 6C 65 00 9A 01 4E 74  4F 70 65 6E 46 69 6C 65  00 00 37 00 45 78 49 6E  ectByHandle.Ü☺NtOpenFile..7.ExIn
000005C0  69 74 69 61 6C 69 7A 65  5A 6F 6E 65 00 00 7D 01  4D 6D 51 75 65 72 79 53  79 73 74 65 6D 53 69 7A  itializeZone..}☺MmQuerySystemSiz
000005E0  65 00 98 00 46 73 52 74  6C 52 65 67 69 73 74 65  72 55 6E 63 50 72 6F 76  69 64 65 72 00 00 8A 02  e.ÿ.FsRtlRegisterUncProvider..è☻
00000600  5A 77 43 6C 6F 73 65 00  13 02 52 74 6C 46 72 65  65 55 6E 69 63 6F 64 65  53 74 72 69 6E 67 00 00  ZwClose.‼☻RtlFreeUnicodeString..
00000620  01 02 52 74 6C 45 71 75  61 6C 55 6E 69 63 6F 64  65 53 74 72 69 6E 67 00  D5 01 52 74 6C 41 6E 73  ☺☻RtlEqualUnicodeString.╒☺RtlAns
00000640  69 53 74 72 69 6E 67 54  6F 55 6E 69 63 6F 64 65  53 74 72 69 6E 67 00 00  1D 02 52 74 6C 49 6E 69  iStringToUnicodeString..↔☻RtlIni
00000660  74 53 74 72 69 6E 67 00  AB 01 4E 74 53 65 74 53  65 63 75 72 69 74 79 4F  62 6A 65 63 74 00 F0 01  tString.½☺NtSetSecurityObject.≡☺
00000680  52 74 6C 43 72 65 61 74  65 53 65 63 75 72 69 74  79 44 65 73 63 72 69 70  74 6F 72 00 8E 01 4E 74  RtlCreateSecurityDescriptor.Ä☺Nt
000006A0  43 72 65 61 74 65 46 69  6C 65 00 00 FD 00 49 6F  66 43 6F 6D 70 6C 65 74  65 52 65 71 75 65 73 74  CreateFile..².IofCompleteRequest
000006C0  00 00 7A 01 4D 6D 4D 61  70 4C 6F 63 6B 65 64 50  61 67 65 73 00 00 55 02  52 74 6C 55 6E 69 63 6F  ..z☺MmMapLockedPages..U☻RtlUnico
000006E0  64 65 53 74 72 69 6E 67  54 6F 4F 65 6D 53 74 72  69 6E 67 00 3A 02 52 74  6C 4F 65 6D 53 74 72 69  deStringToOemString.:☻RtlOemStri
00000700  6E 67 54 6F 55 6E 69 63  6F 64 65 53 74 72 69 6E  67 00 D6 02 6D 65 6D 6D  6F 76 65 00 C7 02 5F 73  ngToUnicodeString.╓☻memmove.╟☻_s
00000720  74 72 75 70 72 00 CB 00  49 6F 46 72 65 65 4D 64  6C 00 6A 01 4D 6D 42 75  69 6C 64 4D 64 6C 46 6F  trupr.╦.IoFreeMdl.j☺MmBuildMdlFo
00000740  72 4E 6F 6E 50 61 67 65  64 50 6F 6F 6C 00 AA 00  49 6F 41 6C 6C 6F 63 61  74 65 4D 64 6C 00 E1 01  rNonPagedPool.¬.IoAllocateMdl.ß☺
00000760  52 74 6C 43 6F 6D 70 61  72 65 4D 65 6D 6F 72 79  00 00 E4 01 52 74 6C 43  6F 6D 70 61 72 65 55 6E  RtlCompareMemory..Σ☺RtlCompareUn
00000780  69 63 6F 64 65 53 74 72  69 6E 67 00 EA 02 77 63  73 6C 65 6E 00 00 50 02  52 74 6C 54 69 6D 65 54  icodeString.Ω☻wcslen..P☻RtlTimeT
000007A0  6F 54 69 6D 65 46 69 65  6C 64 73 00 4F 00 45 78  53 79 73 74 65 6D 54 69  6D 65 54 6F 4C 6F 63 61  oTimeFields.O.ExSystemTimeToLoca
000007C0  6C 54 69 6D 65 00 9A 02  5A 77 45 6E 75 6D 65 72  61 74 65 56 61 6C 75 65  4B 65 79 00 A5 02 5A 77  lTime.Ü☻ZwEnumerateValueKey.Ñ☻Zw
000007E0  4F 70 65 6E 4B 65 79 00  70 01 4D 6D 46 6F 72 63  65 53 65 63 74 69 6F 6E  43 6C 6F 73 65 64 00 00  OpenKey.p☺MmForceSectionClosed..
00000800  55 01 4B 65 57 61 69 74  46 6F 72 53 69 6E 67 6C  65 4F 62 6A 65 63 74 00  1C 00 43 63 55 6E 69 6E  U☺KeWaitForSingleObject.∟.CcUnin
00000820  69 74 69 61 6C 69 7A 65  43 61 63 68 65 4D 61 70  00 00 22 01 4B 65 49 6E  69 74 69 61 6C 69 7A 65  itializeCacheMap.."☺KeInitialize
00000840  45 76 65 6E 74 00 13 00  43 63 50 75 72 67 65 43  61 63 68 65 53 65 63 74  69 6F 6E 00 04 00 43 63  Event.‼.CcPurgeCacheSection.♦.Cc
00000860  46 6C 75 73 68 43 61 63  68 65 00 00 02 02 52 74  6C 45 78 74 65 6E 64 65  64 49 6E 74 65 67 65 72  FlushCache..☻☻RtlExtendedInteger
00000880  4D 75 6C 74 69 70 6C 79  00 00 6F 01 4D 6D 46 6C  75 73 68 49 6D 61 67 65  53 65 63 74 69 6F 6E 00  Multiply..o☺MmFlushImageSection.
000008A0  72 00 46 73 52 74 6C 46  61 73 74 55 6E 6C 6F 63  6B 41 6C 6C 00 00 D3 00  49 6F 47 65 74 52 65 71  r.FsRtlFastUnlockAll..╙.IoGetReq
000008C0  75 65 73 74 6F 72 50 72  6F 63 65 73 73 00 30 01  4B 65 4C 65 61 76 65 43  72 69 74 69 63 61 6C 52  uestorProcess.0☺KeLeaveCriticalR
000008E0  65 67 69 6F 6E 00 EC 00  49 6F 53 65 74 54 6F 70  4C 65 76 65 6C 49 72 70  00 00 11 01 4B 65 45 6E  egion.∞.IoSetTopLevelIrp..◄☺KeEn
00000900  74 65 72 43 72 69 74 69  63 61 6C 52 65 67 69 6F  6E 00 AF 02 5A 77 51 75  65 72 79 53 79 6D 62 6F  terCriticalRegion.»☻ZwQuerySymbo
00000920  6C 69 63 4C 69 6E 6B 4F  62 6A 65 63 74 00 A8 02  5A 77 4F 70 65 6E 53 79  6D 62 6F 6C 69 63 4C 69  licLinkObject.¿☻ZwOpenSymbolicLi
00000940  6E 6B 4F 62 6A 65 63 74  00 00 E1 02 73 77 70 72  69 6E 74 66 00 00 32 02  52 74 6C 4E 65 78 74 55  nkObject..ß☻swprintf..2☻RtlNextU
00000960  6E 69 63 6F 64 65 50 72  65 66 69 78 00 00 4D 01  4B 65 53 65 74 54 69 6D  65 72 00 00 21 01 4B 65  nicodePrefix..M☺KeSetTimer..!☺Ke
00000980  49 6E 69 74 69 61 6C 69  7A 65 44 70 63 00 29 01  4B 65 49 6E 69 74 69 61  6C 69 7A 65 54 69 6D 65  InitializeDpc.)☺KeInitializeTime
000009A0  72 00 00 02 52 74 6C 45  71 75 61 6C 53 74 72 69  6E 67 00 00 1B 02 52 74  6C 49 6E 69 74 41 6E 73  r..☻RtlEqualString..←☻RtlInitAns
000009C0  69 53 74 72 69 6E 67 00  5B 02 52 74 6C 55 70 63  61 73 65 55 6E 69 63 6F  64 65 53 74 72 69 6E 67  iString.[☻RtlUpcaseUnicodeString
000009E0  00 00 21 02 52 74 6C 49  6E 69 74 69 61 6C 69 7A  65 55 6E 69 63 6F 64 65  50 72 65 66 69 78 00 00  ..!☻RtlInitializeUnicodePrefix..
00000A00  48 00 45 78 51 75 65 75  65 57 6F 72 6B 49 74 65  6D 00 34 01 4B 65 51 75  65 72 79 53 79 73 74 65  H.ExQueueWorkItem.4☺KeQuerySyste
00000A20  6D 54 69 6D 65 00 CD 00  49 6F 47 65 74 43 75 72  72 65 6E 74 50 72 6F 63  65 73 73 00 74 01 4D 6D  mTime.═.IoGetCurrentProcess.t☺Mm
00000A40  49 73 41 64 64 72 65 73  73 56 61 6C 69 64 00 00  78 00 46 73 52 74 6C 49  6E 69 74 69 61 6C 69 7A  IsAddressValid..x.FsRtlInitializ
00000A60  65 46 69 6C 65 4C 6F 63  6B 00 12 02 52 74 6C 46  72 65 65 4F 65 6D 53 74  72 69 6E 67 00 00 53 02  eFileLock.↕☻RtlFreeOemString..S☻
00000A80  52 74 6C 55 6E 69 63 6F  64 65 53 74 72 69 6E 67  54 6F 43 6F 75 6E 74 65  64 4F 65 6D 53 74 72 69  RtlUnicodeStringToCountedOemStri
00000AA0  6E 67 00 00 EB 00 49 6F  53 65 74 53 68 61 72 65  41 63 63 65 73 73 00 00  F7 00 49 6F 55 70 64 61  ng..δ.IoSetShareAccess..≈.IoUpda
00000AC0  74 65 53 68 61 72 65 41  63 63 65 73 73 00 B7 00  49 6F 43 68 65 63 6B 53  68 61 72 65 41 63 63 65  teShareAccess.╖.IoCheckShareAcce
00000AE0  73 73 00 00 2C 00 45 78  41 6C 6C 6F 63 61 74 65  50 6F 6F 6C 57 69 74 68  54 61 67 00 32 00 45 78  ss..,.ExAllocatePoolWithTag.2.Ex
00000B00  46 72 65 65 50 6F 6F 6C  00 00 41 02 52 74 6C 52  65 6D 6F 76 65 55 6E 69  63 6F 64 65 50 72 65 66  FreePool..A☻RtlRemoveUnicodePref
00000B20  69 78 00 00 62 02 52 74  6C 55 70 70 65 72 43 68  61 72 00 00 46 00 45 78  4C 6F 63 61 6C 54 69 6D  ix..b☻RtlUpperChar..F.ExLocalTim
00000B40  65 54 6F 53 79 73 74 65  6D 54 69 6D 65 00 4D 02  52 74 6C 54 69 6D 65 46  69 65 6C 64 73 54 6F 54  eToSystemTime.M☻RtlTimeFieldsToT
00000B60  69 6D 65 00 23 02 52 74  6C 49 6E 73 65 72 74 55  6E 69 63 6F 64 65 50 72  65 66 69 78 00 00 0F 02  ime.#☻RtlInsertUnicodePrefix..☼☻
00000B80  52 74 6C 46 69 6E 64 55  6E 69 63 6F 64 65 50 72  65 66 69 78 00 00 D8 01  52 74 6C 41 70 70 65 6E  RtlFindUnicodePrefix..╪☺RtlAppen
00000BA0  64 55 6E 69 63 6F 64 65  53 74 72 69 6E 67 54 6F  53 74 72 69 6E 67 00 00  D7 00 49 6F 49 73 4F 70  dUnicodeStringToString..╫.IoIsOp
00000BC0  65 72 61 74 69 6F 6E 53  79 6E 63 68 72 6F 6E 6F  75 73 00 00 7C 01 4D 6D  50 72 6F 62 65 41 6E 64  erationSynchronous..|☺MmProbeAnd
00000BE0  4C 6F 63 6B 50 61 67 65  73 00 81 01 4D 6D 55 6E  6C 6F 63 6B 50 61 67 65  73 00 83 01 4D 6D 55 6E  LockPages.ü☺MmUnlockPages.â☺MmUn
00000C00  6D 61 70 4C 6F 63 6B 65  64 50 61 67 65 73 00 00  87 01 4E 6C 73 4F 65 6D  4C 65 61 64 42 79 74 65  mapLockedPages..ç☺NlsOemLeadByte
00000C20  49 6E 66 6F 00 00 86 01  4E 6C 73 4D 62 4F 65 6D  43 6F 64 65 50 61 67 65  54 61 67 00 E3 00 49 6F  Info..å☺NlsMbOemCodePageTag.π.Io
00000C40  52 65 6C 65 61 73 65 43  61 6E 63 65 6C 53 70 69  6E 4C 6F 63 6B 00 A3 00  49 6F 41 63 71 75 69 72  ReleaseCancelSpinLock.ú.IoAcquir
00000C60  65 43 61 6E 63 65 6C 53  70 69 6E 4C 6F 63 6B 00  9F 00 46 73 52 74 6C 55  6E 69 6E 69 74 69 61 6C  eCancelSpinLock.ƒ.FsRtlUninitial
00000C80  69 7A 65 46 69 6C 65 4C  6F 63 6B 00 69 00 46 73  52 74 6C 43 6F 70 79 57  72 69 74 65 00 00 68 00  izeFileLock.i.FsRtlCopyWrite..h.
00000CA0  46 73 52 74 6C 43 6F 70  79 52 65 61 64 00 50 00  45 78 66 49 6E 74 65 72  6C 6F 63 6B 65 64 41 64  FsRtlCopyRead.P.ExfInterlockedAd
00000CC0  64 55 6C 6F 6E 67 00 00  16 01 4B 65 47 65 74 43  75 72 72 65 6E 74 54 68  72 65 61 64 00 00 19 00  dUlong..▬☺KeGetCurrentThread..↓.
00000CE0  43 63 53 65 74 46 69 6C  65 53 69 7A 65 73 00 00  4D 00 45 78 52 65 6C 65  61 73 65 52 65 73 6F 75  CcSetFileSizes..M.ExReleaseResou
00000D00  72 63 65 46 6F 72 54 68  72 65 61 64 4C 69 74 65  00 00 26 00 45 78 41 63  71 75 69 72 65 52 65 73  rceForThreadLite..&.ExAcquireRes
00000D20  6F 75 72 63 65 45 78 63  6C 75 73 69 76 65 4C 69  74 65 00 00 6B 01 4D 6D  43 61 6E 46 69 6C 65 42  ourceExclusiveLite..k☺MmCanFileB
00000D40  65 54 72 75 6E 63 61 74  65 64 00 00 CA 00 49 6F  46 72 65 65 49 72 70 00  B3 00 49 6F 43 61 6E 63  eTruncated..╩.IoFreeIrp.│.IoCanc
00000D60  65 6C 49 72 70 00 A9 00  49 6F 41 6C 6C 6F 63 61  74 65 49 72 70 00 97 00  46 73 52 74 6C 50 72 6F  elIrp.⌐.IoAllocateIrp.ù.FsRtlPro
00000D80  63 65 73 73 46 69 6C 65  4C 6F 63 6B 00 00 75 00  46 73 52 74 6C 47 65 74  4E 65 78 74 46 69 6C 65  cessFileLock..u.FsRtlGetNextFile
00000DA0  4C 6F 63 6B 00 00 D7 01  52 74 6C 41 70 70 65 6E  64 53 74 72 69 6E 67 54  6F 53 74 72 69 6E 67 00  Lock..╫☺RtlAppendStringToString.
00000DC0  5E 02 52 74 6C 55 70 63  61 73 65 55 6E 69 63 6F  64 65 53 74 72 69 6E 67  54 6F 4F 65 6D 53 74 72  ^☻RtlUpcaseUnicodeStringToOemStr
00000DE0  69 6E 67 00 EB 01 52 74  6C 43 6F 70 79 53 74 72  69 6E 67 00 92 02 5A 77  43 72 65 61 74 65 53 79  ing.δ☺RtlCopyString.Æ☻ZwCreateSy
00000E00  6D 62 6F 6C 69 63 4C 69  6E 6B 4F 62 6A 65 63 74  00 00 D9 01 52 74 6C 41  70 70 65 6E 64 55 6E 69  mbolicLinkObject..┘☺RtlAppendUni
00000E20  63 6F 64 65 54 6F 53 74  72 69 6E 67 00 00 A0 02  5A 77 4D 61 6B 65 54 65  6D 70 6F 72 61 72 79 4F  codeToString..á☻ZwMakeTemporaryO
00000E40  62 6A 65 63 74 00 28 01  4B 65 49 6E 69 74 69 61  6C 69 7A 65 53 70 69 6E  4C 6F 63 6B 00 00 49 01  bject.(☺KeInitializeSpinLock..I☺
00000E60  4B 65 53 65 74 45 76 65  6E 74 00 00 4F 02 52 74  6C 54 69 6D 65 54 6F 53  65 63 6F 6E 64 73 53 69  KeSetEvent..O☻RtlTimeToSecondsSi
00000E80  6E 63 65 31 39 38 30 00  8F 02 5A 77 43 72 65 61  74 65 46 69 6C 65 00 00  03 02 52 74 6C 45 78 74  nce1980.Å☻ZwCreateFile..♥☻RtlExt
00000EA0  65 6E 64 65 64 4C 61 72  67 65 49 6E 74 65 67 65  72 44 69 76 69 64 65 00  DA 02 73 70 72 69 6E 74  endedLargeIntegerDivide.┌☻sprint
00000EC0  66 00 10 02 52 74 6C 46  72 65 65 41 6E 73 69 53  74 72 69 6E 67 00 01 00  43 63 43 6F 70 79 52 65  f.►☻RtlFreeAnsiString.☺.CcCopyRe
00000EE0  61 64 00 00 16 00 43 63  53 65 74 41 64 64 69 74  69 6F 6E 61 6C 43 61 63  68 65 41 74 74 72 69 62  ad..▬.CcSetAdditionalCacheAttrib
00000F00  75 74 65 73 00 00 1B 00  43 63 53 65 74 52 65 61  64 41 68 65 61 64 47 72  61 6E 75 6C 61 72 69 74  utes..←.CcSetReadAheadGranularit
00000F20  79 00 09 00 43 63 49 6E  69 74 69 61 6C 69 7A 65  43 61 63 68 65 4D 61 70  00 00 65 00 46 73 52 74  y.○.CcInitializeCacheMap..e.FsRt
00000F40  6C 43 68 65 63 6B 4C 6F  63 6B 46 6F 72 52 65 61  64 41 63 63 65 73 73 00  27 00 45 78 41 63 71 75  lCheckLockForReadAccess.'.ExAcqu
00000F60  69 72 65 52 65 73 6F 75  72 63 65 53 68 61 72 65  64 4C 69 74 65 00 76 01  4D 6D 49 73 52 65 63 75  ireResourceSharedLite.v☺MmIsRecu
00000F80  72 73 69 76 65 49 6F 46  61 75 6C 74 00 00 D4 00  49 6F 47 65 74 54 6F 70  4C 65 76 65 6C 49 72 70  rsiveIoFault..╘.IoGetTopLevelIrp
00000FA0  00 00 5E 00 46 73 52 74  6C 41 6C 6C 6F 63 61 74  65 50 6F 6F 6C 00 24 01  4B 65 49 6E 69 74 69 61  ..^.FsRtlAllocatePool.$☺KeInitia
00000FC0  6C 69 7A 65 4D 75 74 61  6E 74 00 00 3E 01 4B 65  52 65 6C 65 61 73 65 4D  75 74 61 6E 74 00 02 00  lizeMutant..>☺KeReleaseMutant.☻.
00000FE0  43 63 43 6F 70 79 57 72  69 74 65 00 66 00 46 73  52 74 6C 43 68 65 63 6B  4C 6F 63 6B 46 6F 72 57  CcCopyWrite.f.FsRtlCheckLockForW
00001000  72 69 74 65 41 63 63 65  73 73 00 00 59 02 52 74  6C 55 6E 77 69 6E 64 00  6E 74 6F 73 6B 72 6E 6C  riteAccess..Y☻RtlUnwind.ntoskrnl
00001020  2E 65 78 65 00 00 42 00  4B 65 51 75 65 72 79 50  65 72 66 6F 72 6D 61 6E  63 65 43 6F 75 6E 74 65  .exe..B.KeQueryPerformanceCounte
00001040  72 00 49 00 4B 66 52 65  6C 65 61 73 65 53 70 69  6E 4C 6F 63 6B 00 46 00  4B 66 41 63 71 75 69 72  r.I.KfReleaseSpinLock.F.KfAcquir
00001060  65 53 70 69 6E 4C 6F 63  6B 00 48 41 4C 2E 64 6C  6C 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  eSpinLock.HAL.dll...............