==============================================================================================================================================
OFFSET    00 01 02 03 04 05 06 07  08 09 0A 0B 0C 0D 0E 0F  10 11 12 13 14 15 16 17  18 19 1A 1B 1C 1D 1E 1F
----------------------------------------------------------------------------------------------------------------------------------------------
00000000  0C 59 00 00 00 00 00 00  00 00 00 00 AA 5B 00 00  50 02 00 00 FC 58 00 00  00 00 00 00 00 00 00 00  ♀Y..........¬[..P☻..ⁿX..........
00000020  00 5C 00 00 40 02 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 EC 5B 00 00  .\..@☻......................∞[..
00000040  D8 5B 00 00 C4 5B 00 00  00 00 00 00 9C 59 00 00  D0 59 00 00 E2 59 00 00  02 5A 00 00 0C 5A 00 00  ╪[..─[......£Y..╨Y..ΓY..☻Z..♀Z..
00000060  24 5A 00 00 34 5A 00 00  54 5A 00 00 70 5A 00 00  7E 5A 00 00 88 5A 00 00  B2 59 00 00 BC 59 00 00  $Z..4Z..TZ..pZ..~Z..êZ..▓Y..╝Y..
00000080  C8 5A 00 00 E4 5A 00 00  FC 5A 00 00 1C 5B 00 00  3A 5B 00 00 4E 5B 00 00  62 5B 00 00 7A 5B 00 00  ╚Z..ΣZ..ⁿZ..∟[..:[..N[..b[..z[..
000000A0  98 5B 00 00 B8 5B 00 00  8E 59 00 00 7C 59 00 00  9A 5A 00 00 A6 5A 00 00  00 00 00 00 CE 00 49 6F  ÿ[..╕[..ÄY..|Y..ÜZ..ªZ......╬.Io
000000C0  43 72 65 61 74 65 44 65  76 69 63 65 00 00 36 00  45 78 46 72 65 65 50 6F  6F 6C 00 00 16 01 49 6F  CreateDevice..6.ExFreePool..▬☺Io
000000E0  66 43 6F 6D 70 6C 65 74  65 52 65 71 75 65 73 74  00 00 3D 03 6D 65 6D 6D  6F 76 65 00 27 02 52 74  fCompleteRequest..=♥memmove.'☻Rt
00000100  6C 43 6F 6D 70 61 72 65  4D 65 6D 6F 72 79 00 00  2B 00 45 78 41 6C 6C 6F  63 61 74 65 50 6F 6F 6C  lCompareMemory..+.ExAllocatePool
00000120  00 00 4A 02 52 74 6C 45  78 74 65 6E 64 65 64 4C  61 72 67 65 49 6E 74 65  67 65 72 44 69 76 69 64  ..J☻RtlExtendedLargeIntegerDivid
00000140  65 00 C4 01 4E 74 43 6C  6F 73 65 00 F2 01 4F 62  66 44 65 72 65 66 65 72  65 6E 63 65 4F 62 6A 65  e.─☺NtClose.≥☺ObfDereferenceObje
00000160  63 74 00 00 15 01 49 6F  66 43 61 6C 6C 44 72 69  76 65 72 00 C2 00 49 6F  42 75 69 6C 64 44 65 76  ct..§☺IofCallDriver.┬.IoBuildDev
00000180  69 63 65 49 6F 43 6F 6E  74 72 6F 6C 52 65 71 75  65 73 74 00 F0 01 4F 62  52 65 66 65 72 65 6E 63  iceIoControlRequest.≡☺ObReferenc
000001A0  65 4F 62 6A 65 63 74 42  79 48 61 6E 64 6C 65 00  D3 01 4E 74 4F 70 65 6E  46 69 6C 65 00 00 E4 02  eObjectByHandle.╙☺NtOpenFile..Σ☻
000001C0  5A 77 43 6C 6F 73 65 00  12 03 5A 77 51 75 65 72  79 56 61 6C 75 65 4B 65  79 00 02 03 5A 77 4F 70  ZwClose.↕♥ZwQueryValueKey.☻♥ZwOp
000001E0  65 6E 4B 65 79 00 1C 02  52 74 6C 41 70 70 65 6E  64 55 6E 69 63 6F 64 65  53 74 72 69 6E 67 54 6F  enKey.∟☻RtlAppendUnicodeStringTo
00000200  53 74 72 69 6E 67 00 00  1D 02 52 74 6C 41 70 70  65 6E 64 55 6E 69 63 6F  64 65 54 6F 53 74 72 69  String..↔☻RtlAppendUnicodeToStri
00000220  6E 67 00 00 32 02 52 74  6C 43 6F 70 79 55 6E 69  63 6F 64 65 53 74 72 69  6E 67 00 00 19 02 52 74  ng..2☻RtlCopyUnicodeString..↓☻Rt
00000240  6C 41 6E 73 69 53 74 72  69 6E 67 54 6F 55 6E 69  63 6F 64 65 53 74 72 69  6E 67 00 00 B9 02 52 74  lAnsiStringToUnicodeString..╣☻Rt
00000260  6C 78 41 6E 73 69 53 74  72 69 6E 67 54 6F 55 6E  69 63 6F 64 65 53 69 7A  65 00 BC 01 4E 6C 73 4D  lxAnsiStringToUnicodeSize.╝☺NlsM
00000280  62 43 6F 64 65 50 61 67  65 54 61 67 00 00 65 02  52 74 6C 49 6E 69 74 41  6E 73 69 53 74 72 69 6E  bCodePageTag..e☻RtlInitAnsiStrin
000002A0  67 00 9E 01 4D 6D 47 65  74 50 68 79 73 69 63 61  6C 41 64 64 72 65 73 73  00 00 92 01 4D 6D 41 6C  g.₧☺MmGetPhysicalAddress..Æ☺MmAl
000002C0  6C 6F 63 61 74 65 43 6F  6E 74 69 67 75 6F 75 73  4D 65 6D 6F 72 79 00 00  4E 00 45 78 51 75 65 75  locateContiguousMemory..N.ExQueu
000002E0  65 57 6F 72 6B 49 74 65  6D 00 6E 74 6F 73 6B 72  6E 6C 2E 65 78 65 00 00  A9 02 52 74 6C 55 6E 77  eWorkItem.ntoskrnl.exe..⌐☻RtlUnw
00000300  69 6E 64 00 49 00 4B 66  52 65 6C 65 61 73 65 53  70 69 6E 4C 6F 63 6B 00  46 00 4B 66 41 63 71 75  ind.I.KfReleaseSpinLock.F.KfAcqu
00000320  69 72 65 53 70 69 6E 4C  6F 63 6B 00 40 00 4B 65  47 65 74 43 75 72 72 65  6E 74 49 72 71 6C 00 00  ireSpinLock.@.KeGetCurrentIrql..
00000340  48 41 4C 2E 64 6C 6C 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  HAL.dll.........................