============================================================================================================================================== OFFSET 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 10 11 12 13 14 15 16 17 18 19 1A 1B 1C 1D 1E 1F ---------------------------------------------------------------------------------------------------------------------------------------------- 00000000 88 1A 00 00 00 00 00 00 00 00 00 00 66 1C 00 00 4C 02 00 00 7C 1A 00 00 00 00 00 00 00 00 00 00 ê→..........f∟..L☻..|→.......... 00000020 9C 1C 00 00 40 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 1C 00 00 £∟..@☻......................ê∟.. 00000040 74 1C 00 00 00 00 00 00 1C 1B 00 00 30 1B 00 00 50 1B 00 00 12 1B 00 00 70 1B 00 00 82 1B 00 00 t∟......∟←..0←..P←..↕←..p←..é←.. 00000060 A0 1B 00 00 B4 1B 00 00 EA 1A 00 00 FC 1A 00 00 C8 1B 00 00 DC 1B 00 00 EA 1B 00 00 FA 1B 00 00 á←..┤←..Ω→..ⁿ→..╚←..▄←..Ω←..·←.. 00000080 04 1C 00 00 1C 1C 00 00 3C 1C 00 00 58 1C 00 00 D8 1A 00 00 00 00 00 00 D5 00 49 6F 44 65 6C 65 ♦∟..∟∟..<∟..X∟..╪→......╒.IoDele 000000A0 74 65 44 65 76 69 63 65 00 00 CE 00 49 6F 43 72 65 61 74 65 44 65 76 69 63 65 00 00 16 01 49 6F teDevice..╬.IoCreateDevice..▬☺Io 000000C0 66 43 6F 6D 70 6C 65 74 65 52 65 71 75 65 73 74 00 00 3D 03 6D 65 6D 6D 6F 76 65 00 23 02 52 74 fCompleteRequest..=♥memmove.#☻Rt 000000E0 6C 43 68 61 72 54 6F 49 6E 74 65 67 65 72 00 00 A0 02 52 74 6C 55 6E 69 63 6F 64 65 53 74 72 69 lCharToInteger..á☻RtlUnicodeStri 00000100 6E 67 54 6F 41 6E 73 69 53 74 72 69 6E 67 00 00 19 02 52 74 6C 41 6E 73 69 53 74 72 69 6E 67 54 ngToAnsiString..↓☻RtlAnsiStringT 00000120 6F 55 6E 69 63 6F 64 65 53 74 72 69 6E 67 00 00 2B 00 45 78 41 6C 6C 6F 63 61 74 65 50 6F 6F 6C oUnicodeString..+.ExAllocatePool 00000140 00 00 B9 02 52 74 6C 78 41 6E 73 69 53 74 72 69 6E 67 54 6F 55 6E 69 63 6F 64 65 53 69 7A 65 00 ..╣☻RtlxAnsiStringToUnicodeSize. 00000160 BC 01 4E 6C 73 4D 62 43 6F 64 65 50 61 67 65 54 61 67 00 00 65 02 52 74 6C 49 6E 69 74 41 6E 73 ╝☺NlsMbCodePageTag..e☻RtlInitAns 00000180 69 53 74 72 69 6E 67 00 27 02 52 74 6C 43 6F 6D 70 61 72 65 4D 65 6D 6F 72 79 00 00 36 00 45 78 iString.'☻RtlCompareMemory..6.Ex 000001A0 46 72 65 65 50 6F 6F 6C 00 00 15 01 49 6F 66 43 61 6C 6C 44 72 69 76 65 72 00 C4 01 4E 74 43 6C FreePool..§☺IofCallDriver.─☺NtCl 000001C0 6F 73 65 00 F2 01 4F 62 66 44 65 72 65 66 65 72 65 6E 63 65 4F 62 6A 65 63 74 00 00 C2 00 49 6F ose.≥☺ObfDereferenceObject..┬.Io 000001E0 42 75 69 6C 64 44 65 76 69 63 65 49 6F 43 6F 6E 74 72 6F 6C 52 65 71 75 65 73 74 00 F0 01 4F 62 BuildDeviceIoControlRequest.≡☺Ob 00000200 52 65 66 65 72 65 6E 63 65 4F 62 6A 65 63 74 42 79 48 61 6E 64 6C 65 00 D3 01 4E 74 4F 70 65 6E ReferenceObjectByHandle.╙☺NtOpen 00000220 46 69 6C 65 00 00 6E 74 6F 73 6B 72 6E 6C 2E 65 78 65 00 00 49 00 4B 66 52 65 6C 65 61 73 65 53 File..ntoskrnl.exe..I.KfReleaseS 00000240 70 69 6E 4C 6F 63 6B 00 46 00 4B 66 41 63 71 75 69 72 65 53 70 69 6E 4C 6F 63 6B 00 48 41 4C 2E pinLock.F.KfAcquireSpinLock.HAL. 00000260 64 6C 6C 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 dll.............................